last executing test programs: 4.081626594s ago: executing program 3 (id=10491): r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="020000000300"}) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="364000001a00913a"], 0x82d7) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x17}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x402, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x2, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x6, &(0x7f0000000040), 0x3) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000100)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB='1-0'], 0x31) socket$kcm(0x28, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000940)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000300000000000000000000030000000002000000020000000000020000000000000000010500000010000000010000000000000e0100000000000000"], 0x0, 0x53}, 0x28) close(0xffffffffffffffff) socket$kcm(0x10, 0x2, 0x0) openat$cgroup_int(r1, &(0x7f00000001c0)='io.bfq.weight\x00', 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) socketpair(0x22, 0x5, 0x26, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0xfffffffffffffffe, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan1\x00', 0x800}) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, &(0x7f0000000080)) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002d000b12d25a80648c2594f90124fc60100c02000a040000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 3.324823082s ago: executing program 0 (id=10497): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a90f16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x16}, {&(0x7f0000000300)="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", 0xcb0}], 0x4, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x3, 0x40}, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xb, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b70300000000000085000000060000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100) setsockopt$sock_attach_bpf(r1, 0x1, 0x10, &(0x7f0000000040), 0x4) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)}, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) recvmsg(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002900)=[{&(0x7f0000001180)=""/252, 0xfc}, {&(0x7f0000001280)=""/246, 0xf6}, {&(0x7f0000001380)=""/123, 0x7b}, {&(0x7f00000014c0)=""/180, 0xb4}, {0x0}, {&(0x7f0000002840)=""/132, 0x84}], 0x6}, 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f0, &(0x7f0000000080)) r5 = socket$kcm(0x2, 0x922000000001, 0x106) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x10c040, 0xac5d, 0x0, 0x5, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r5, 0x6, 0x9, &(0x7f0000000c40)=r5, 0x4) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz0\x00', 0x200002, 0x0) sendmsg$inet(r1, &(0x7f0000002e80)={&(0x7f0000000fc0)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000002d80)=[{&(0x7f00000029c0)="8f471832f1851a511b3b72eedaee1df7a5dd493a956a74f81e362b3b02d3f34efb084f79d83edded23b612cea62a55401ed77634a954350b881b32d124e72b28c372cd67a6828b45063328c7b6347bccca53c39fb9dec2d7858adfcc65c0b540ca5b94102ff22bba0fbe1f01fc7db1d1a6b294b9e1f7eef3d72c05be37843e9f294c8c4d6e03e8f85c14bd072fea9c511c2fc8ebb6a4f63986ed1500ad37aeef67c8104ec4ba8a95c3e76bed6ffcdb52ae8108a46c740cd86e9153f8aae4263a1daae33520ed49ce9eca637cead07a6a71566609535a53f48e93431575b11f95bd2ae2369c7f2e9c9ae6", 0xea}, {&(0x7f0000002ac0)="0afbfea2ecd93c2d28d701b2fc76bbb575d5181c2705a34f4de44f1c7c57dc57521d43669ed0d54deb41f9c84afb86692fae9d3090ef1c2e1c0d2a6cf1edb09c67ff7d866d29c1230adf8953c6b393795bf9a091f75a3f01d4356534da88734246fb09791c2b4410", 0x68}, {&(0x7f0000002b40)="2398cebf791b2ff1e028d7e719ccd264cd0f4b67661026306d92f72d87faf05c2065c54b96ccd8af9c7c9ab4e732869f3ec5779bfe0030b36f4a5eb89b2a33f5a9e7188854ced7622a359d2b097eea901821ae29e0c35c48fa5638180bceae042d6fe1b49c041c28a315ef4cf09cd3c4815d322524628734bc82e9b6d8b02c36f5050582874ef4e0bcc025469f8a3cb8bea5285e0ce4ec7f8840adcb5f4d4220d6fa", 0xa2}, {&(0x7f0000002c00)="57b384ced4ba747b7895c47ec90ef2205bfb4718d8cb18c8f51d3f44bed361bfaa4725e3ec738d81b8d41aa4897e2e60176319389b79fa6105ead448109dcd5210b4f9edfd629e18624092b095", 0x4d}, {&(0x7f0000002cc0)="71969b822928f3253db1043b266f3a29d1afcebdd09aa2b5eed4560acb556f1af7ed14e9960427a38f66670b3689bdc24d70de324dd5c2da37cfd143df8faaf0871c69aa6202b08048cf58bac1a8894bb20c356d239f110f84acdbea95c4c2a6d3a5d596bad35348988e7285e9e2060741e8106b74a96206d67926e888500355d1c1b9d7469618f1fc0dec0611c3bc0aa83bbd323915b97b49f6c7e7d5ac62aee79ff3e080ad21441ad1157a90a184bb2d3805d74d0e56e5c63a8f", 0xbb}], 0x5, &(0x7f0000002e00)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_retopts={{0x14, 0x0, 0x7, {[@end]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xd}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}], 0x78}, 0x48000) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)) recvmsg(r1, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x40002000) 2.95860052s ago: executing program 3 (id=10503): r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r0, &(0x7f0000000400)={&(0x7f0000000000)={0x2, 0x4e21, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="4400000000000000000000000700110044140513ac141412000008000a01010000000002071313ac1414bbac1414bbac1414bbac1414bb0707adac1e0001940401000000000000001400000000000000000000000100000039000000000000001400000000000000000000000100000001000000000000001400000000000000000000000200000002000000000000007c010000000000000000000007000000891be7e0000002e0000002ac1414bb0a01010200000000ac1414bb01820ea8a082c526f1bd0c286e69e901891f3dffffffffac1414bb640101017f000001ffffffff64010100ffffffff867a000000010012278c6a7ffaa4b7200d0370efe906dd92070664856524060bc63cac245ae7c843480011537b81712a5141c6ce58c716bfb3eb010a165b30ac6d6bdced00098995de4e432c92000e18a21e2f5ff60f1a6740c68b010e79f874b2f6a220810ffb588c000c378cead6f3f9d681edc70005145ae44444a8e1e00000020000000100000000000027757f000001000000ffe000000100000004e0060000000000050000000000000005ac1414bb0000000bac1414aa00000005866100000000010a95d0cde88def1ab1050e1da2450cb5cd6b6009fc65bd0e12babfc042461ec8e4be688f12a00f0fd700030002122871cabaf5a04627feb9cc97858c512c020f3def4b8f0cf3d991b16673a00c050da89123d647c9f3801fa7210000000000000088"], 0x298}, 0xc004) 2.902249842s ago: executing program 2 (id=10505): socket$kcm(0x10, 0x2, 0x10) r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x17}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x402, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x2, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x6, &(0x7f0000000040), 0x3) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan1\x00', 0x800}) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 2.630829678s ago: executing program 3 (id=10506): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="050000000400000008"], 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x48, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0x0) sendmsg$unix(r2, 0x0, 0x40080) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000005f40)={r0, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000005c80)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000005cc0)=[0x0], &(0x7f0000005d00), 0x0, 0xe8, 0x0, 0x0, 0x10, &(0x7f0000005d80), &(0x7f0000005dc0), 0x8, 0x3e, 0x8, 0x8, &(0x7f0000005e00)}}, 0x10) sendmsg$inet(r2, &(0x7f0000006000)={&(0x7f0000000540)={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f0000005bc0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000003480)="8586aeba15b39cd9621e9b3944096a571584550d753afb930a3fc6fe2fefdc7d5b7dfe6155c32e85c2feee91dd468d93b3", 0x31}, {&(0x7f0000005a40)="30a7b9208ef2093700c85128164572285441cbd9b9ac9c9ac488c761698e1e2b9eb3c29440fc0a49e8419e785863a6d19103925442c75f9e3fc972a0d09402c9aab695616db326feabbbe502f4529ae290ce6cb1f5c928b9aabc1ca5ef1f5d569db594590f28815e4cd453f6e1d889630363473dbcd6e0c14289862baa6ba83fd3edaf5820dabd7fccc9fc659a0bde6bafd784aeff8378e6a9ab830072b1a3fb226db0d85b2c757f5572fd", 0xab}, {&(0x7f0000005b40)="3c3401d91d68eb11bbb8cb1702b5d1f2ff19895f16e3aa01f0ef546d49e30f82d30d0210", 0x24}, {&(0x7f0000005b80)="f6080a9a9d", 0x5}], 0x7, &(0x7f0000005f80)=[@ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @local, @multicast2}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}], 0x68}, 0x20008000) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNATTACHFILTER(r4, 0x401054d5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x8, &(0x7f00000020c0)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000002a12ba3b0c000000b7000000000000008500020000008000185100000a0000000000008000000000e2cac81d662874f5e783661c0f6929173c6614174a130bcd097ec1f859de377bc073de1496ee87ec70"], &(0x7f0000000040)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x54, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff8}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xa, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000018000000000000000900000073110b000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3c, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x200480, 0x0) close(r5) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r6) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x84800, 0x0) ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0xffffffff}]}) ioctl$TUNSETOFFLOAD(r7, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r5, 0x40107447, &(0x7f0000000180)) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$cgroup_type(r8, &(0x7f0000000280), 0x9) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}, 0x38) r9 = socket$kcm(0x10, 0x2, 0x4) recvmsg(r9, 0x0, 0x40003c22) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) 2.53834479s ago: executing program 2 (id=10507): r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x40000000, 0x9}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) r3 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000001c0)={&(0x7f0000000000)=@in6={0xa, 0x4e21, 0x0, @remote}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="140000000000000029"], 0x18}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000e70000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000040)=r5, 0x4) sendmsg$inet(r7, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x4800) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r9 = socket$kcm(0x2, 0x200000000000001, 0x106) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0600000004000000040000000900000084000000", @ANYRES32, @ANYBLOB="ffffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000f40700000000000000082327aafdd0aa02"], 0x48) socket$kcm(0xa, 0x3, 0x11) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x4, @perf_config_ext, 0x10c002, 0xac5d, 0xffffff9a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x40082406, &(0x7f00000000c0)='memory.events\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r10 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0xff, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x14002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r11 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0x0, r10, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r11, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}}) setsockopt$sock_attach_bpf(r9, 0x0, 0x1a, 0x0, 0x1c) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r8, 0x10) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1) socketpair(0x38, 0x2, 0x5, &(0x7f0000000000)) socket$kcm(0x10, 0x2, 0x0) 2.326120725s ago: executing program 0 (id=10510): ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000580), 0x4}, 0x118628, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x9, 0x0, 0x0, 0x0, 0x786}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$kcm(0x15, 0x5, 0x0) recvmsg(r1, &(0x7f0000000700)={&(0x7f0000000240)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, 0x0}, 0x12120) r2 = socket$kcm(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x10, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x3, @perf_bp={0x0, 0x4}, 0x14040, 0x0, 0x0, 0x0, 0x0, 0xfffffff1, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000380)=@o_path={&(0x7f0000000340)='./file0\x00', r0, 0x4000, r2}, 0x18) socket$kcm(0xa, 0x2, 0x73) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000004680)={&(0x7f0000003600)=ANY=[@ANYBLOB="9feb010018000000000000001400000014000000090000000400000005000000000000000000005f615f5f2e881b00000000000000"], &(0x7f0000003680)=""/4096, 0x35, 0x1000, 0x1}, 0x28) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001201", 0x2e}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000b1f8306e05d1e4aab009c16b5c05077115d0749619ca39f89974785ae0619b77c6585f678ac92a3b6b4148f56b43c3dd75d75f97c8f92f60a2def458df05e2fbfb3e849b2b3cffd4f29446ae60dd76654b2639b2bc14350706214a6ab7a712d4317fbc3ca01d0d3ed6110b3775903141a5091a4d3db8eb335414fbdb288aba73aaf6d18000a3a2a069cf7f9402e1425bb6bc370576aa1faea0fe222671ecf99038fce8dba53dcb11f87cca"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="1100000000000000"], 0x20) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[], 0x10) 2.323065185s ago: executing program 4 (id=10511): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xbd0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x2, 0x1006, 0xff, 0x42, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value=0x80010000}, 0x50) 2.219729068s ago: executing program 3 (id=10513): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r0 = socket$kcm(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) close(0x3) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x104007, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4421, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xa, 0x3, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x62}}, &(0x7f0000000000)='GPL\x00'}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x400000002, 0x0) recvmsg$kcm(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x40002000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029ea69801d76ab0a272a2a788bab6c95f79725074", 0x1c}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803003f000b12d25a80648c2594f90124fc60020c024002000000053582c137153e370248078000f01705d1bd", 0x33fe0}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000800000000000000080000006b1149000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.189202198s ago: executing program 2 (id=10514): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2bb}, 0x0, 0xbdffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2112, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3ff, 0x7fff}, 0x0, 0x0, 0x0, 0x3, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) r4 = getpid() write$cgroup_pid(r3, &(0x7f0000000080)=r4, 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) close(r6) socket$kcm(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) r7 = openat$cgroup_procs(r5, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000380), 0x12) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) 2.078066201s ago: executing program 4 (id=10515): bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%pS \x00'}, 0x20) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb92, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffff00, 0x3}, 0x0, 0x7, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x10000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYRES8=0x0, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000ff0f00000000000000000800cd3b6a"], 0x48) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb904021d08007b490d4f1e81f8d815001b000605142603600e12080005007a010401a800160020e0034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f", 0xa2}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup/syz1\x00', 0x200002, 0x0) sendmsg$kcm(r1, &(0x7f0000000740)={&(0x7f0000000500)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000580)="ff45c66edabe48699472288d955f6163d32bdfb704f660959db6c7df6d3ae7066eef4a3e56e2d93e5a884e7be9f6cef63b89f808542333a5c7fe8b1965306ee17a4f4d370556c5418f93d2948909462753cb62fc9dd57d71cb580f528199c2e75011836239f272520636b7196297b05e7032", 0x72}, {&(0x7f0000000600)="163126cecacb9f07c2cd945b32531341a7af446eacc19863c9a6ec78bad0bf8ad8fbdbc977abbb3bc156f396fd28b33276650f82811358202be2", 0x3a}], 0x2, &(0x7f0000000680)=[{0xb8, 0x3a, 0x2, "4a0a06dabf6295b7333b7361cd4a6c098f5e4c36f08c965eb5989c9b29c6499d06823baea1d5172133a5493d61a0e9411986b5b0dd6a70e468933a3d81d4bdc2cb8052b2a667598a560c9de9d3652c29360ebc1fb8f6b0b43b0162f83ce4cd465236904be1ec824f8c91ca344ccd2748304130551a65eb020d4e4930dcacbc1b2c5af570a54957e9b295f8c429d3d440169ff11b8b817bac27e9f1d578b64d9249e2"}], 0xb8}, 0x8041) r4 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r4, &(0x7f00000003c0)={&(0x7f0000000040)=@in6={0xa, 0x4e23, 0xd, @local, 0x7}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000000)="f1", 0x1}], 0x1}, 0x40040) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff229, 0x1, @perf_config_ext={0x80000001, 0x1}, 0x8041, 0x7, 0x0, 0x3, 0x0, 0x7, 0x200, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d000a847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={r0}, 0x4) r6 = socket$kcm(0x2b, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000380), 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x602, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000400), 0x5}, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x28, 0x5, 0x0) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f00000026c0)={&(0x7f00000007c0)="d8e86b5afd24c5c4c4", &(0x7f0000000800)=""/68, &(0x7f0000001640)="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", &(0x7f0000002640)="e18621df018775974715b7d2899ba11444d5daa9a3e24b79b79c65d20a006f34dffe4cdd8cb37e7d914799429eae9f7f0160f278fbaa6e5f9d2796cbdc5b733286f75dbe4e47db1e29bdea38b9050b7be00e3b6efcc131f53d371243cee52fb3c1fcb16b06eb6d7c", 0x8080000, r2}, 0x38) sendmsg$inet(r7, &(0x7f0000001000)={&(0x7f0000000280)={0x2, 0x4e23, @private=0xa010100}, 0x10, 0x0}, 0x40) sendmsg$inet(r6, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) close(r6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000880)=@framed={{0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1004}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @ldst={0x0, 0x1, 0x4, 0x7, 0x0, 0x1, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3}, @initr0, @exit, @map_val={0x18, 0xa, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x6}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) 1.997520363s ago: executing program 1 (id=10516): r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000002c0)="2e00000010008188040f46ecdb4cb9cca7480ef42b000000e3bd6efb010511000b0002000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0xffc3) 1.966215233s ago: executing program 0 (id=10517): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f91824fc60040011000a7403004700030037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 1.780780398s ago: executing program 2 (id=10518): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x11, 0x4, 0x4, 0xe}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020705200000000002020207b0ae8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000280)={&(0x7f0000000140)=@in6={0xa, 0x0, 0x0, @dev, 0x1}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000300)='`', 0x1}], 0x1}, 0x0) sendmsg(r1, &(0x7f0000000640)={&(0x7f0000000340)=@l2tp={0x2, 0x0, @private=0xa010100, 0x3}, 0x80, &(0x7f00000002c0)=[{&(0x7f00000004c0)="a9", 0x1}], 0x1}, 0x4000810) sendmsg$kcm(r1, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="bb", 0x1}], 0x1, &(0x7f0000000100)=[{0x20, 0x84, 0x2, "fe8041000000000092"}], 0x20}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000001800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ff007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.71411722s ago: executing program 4 (id=10519): r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="020000000300"}) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="364000001a00913a"], 0x82d7) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x17}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x402, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x6, &(0x7f0000000040), 0x3) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000100)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB='1-0'], 0x31) socket$kcm(0x28, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000940)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000300000000000000000000030000000002000000020000000000020000000000000000010500000010000000010000000000000e0100000000000000"], 0x0, 0x53}, 0x28) close(r1) socket$kcm(0x10, 0x2, 0x0) openat$cgroup_int(r2, &(0x7f00000001c0)='io.bfq.weight\x00', 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) socketpair(0x22, 0x5, 0x26, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0xfffffffffffffffe, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan1\x00', 0x800}) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8946, &(0x7f0000000080)) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002d000b12d25a80648c2594f90124fc60100c02000a040000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 1.71355863s ago: executing program 0 (id=10520): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a90f16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x16}, {&(0x7f0000000300)="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", 0xcb0}], 0x4, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x3, 0x40}, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xb, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b70300000000000085000000060000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100) setsockopt$sock_attach_bpf(r1, 0x1, 0x10, &(0x7f0000000040), 0x4) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)}, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) recvmsg(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002900)=[{&(0x7f0000001180)=""/252, 0xfc}, {&(0x7f0000001280)=""/246, 0xf6}, {&(0x7f0000001380)=""/123, 0x7b}, {&(0x7f00000014c0)=""/180, 0xb4}, {0x0}, {&(0x7f0000002840)=""/132, 0x84}], 0x6}, 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f0, &(0x7f0000000080)) r5 = socket$kcm(0x2, 0x922000000001, 0x106) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x10c040, 0xac5d, 0x0, 0x5, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r5, 0x6, 0x9, &(0x7f0000000c40)=r5, 0x4) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz0\x00', 0x200002, 0x0) sendmsg$inet(r1, &(0x7f0000002e80)={&(0x7f0000000fc0)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000002d80)=[{&(0x7f00000029c0)="8f471832f1851a511b3b72eedaee1df7a5dd493a956a74f81e362b3b02d3f34efb084f79d83edded23b612cea62a55401ed77634a954350b881b32d124e72b28c372cd67a6828b45063328c7b6347bccca53c39fb9dec2d7858adfcc65c0b540ca5b94102ff22bba0fbe1f01fc7db1d1a6b294b9e1f7eef3d72c05be37843e9f294c8c4d6e03e8f85c14bd072fea9c511c2fc8ebb6a4f63986ed1500ad37aeef67c8104ec4ba8a95c3e76bed6ffcdb52ae8108a46c740cd86e9153f8aae4263a1daae33520ed49ce9eca637cead07a6a71566609535a53f48e93431575b11f95bd2ae2369c7f2e9c9ae6", 0xea}, {&(0x7f0000002ac0)="0afbfea2ecd93c2d28d701b2fc76bbb575d5181c2705a34f4de44f1c7c57dc57521d43669ed0d54deb41f9c84afb86692fae9d3090ef1c2e1c0d2a6cf1edb09c67ff7d866d29c1230adf8953c6b393795bf9a091f75a3f01d4356534da88734246fb09791c2b4410", 0x68}, {&(0x7f0000002b40)="2398cebf791b2ff1e028d7e719ccd264cd0f4b67661026306d92f72d87faf05c2065c54b96ccd8af9c7c9ab4e732869f3ec5779bfe0030b36f4a5eb89b2a33f5a9e7188854ced7622a359d2b097eea901821ae29e0c35c48fa5638180bceae042d6fe1b49c041c28a315ef4cf09cd3c4815d322524628734bc82e9b6d8b02c36f5050582874ef4e0bcc025469f8a3cb8bea5285e0ce4ec7f8840adcb5f4d4220d6fa", 0xa2}, {&(0x7f0000002c00)="57b384ced4ba747b7895c47ec90ef2205bfb4718d8cb18c8f51d3f44bed361bfaa4725e3ec738d81b8d41aa4897e2e60176319389b79fa6105ead448109dcd5210b4f9edfd629e18624092b0956db4987abc3481393139b9881b669c538e1946c5308a50924e1dc92bb6a2dd9586a9ad9612d4", 0x73}, {&(0x7f0000002cc0)="71969b822928f3253db1043b266f3a29d1afcebdd09aa2b5eed4560acb556f1af7ed14e9960427a38f66670b3689bdc24d70de324dd5c2da37cfd143df8faaf0871c69aa6202b08048cf58bac1a8894bb20c356d239f110f84acdbea95c4c2a6d3a5d596bad35348988e7285e9e2060741e8106b74a96206d67926e888500355d1c1b9d7469618f1fc0dec0611c3bc0aa83bbd323915b97b49f6c7e7d5ac62aee79ff3e080ad21441ad1157a90a184bb2d3805d74d0e56e5c63a8f", 0xbb}], 0x5, &(0x7f0000002e00)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_retopts={{0x14, 0x0, 0x7, {[@end]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xd}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}], 0x78}, 0x48000) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)) recvmsg(r1, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x40002000) 1.70893975s ago: executing program 1 (id=10521): socket$kcm(0x10, 0x2, 0x10) r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x17}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x402, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x2, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x6, &(0x7f0000000040), 0x3) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan1\x00', 0x800}) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 1.229242861s ago: executing program 4 (id=10522): ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000580), 0x4}, 0x118628, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x9, 0x0, 0x0, 0x0, 0x786}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$kcm(0x15, 0x5, 0x0) recvmsg(r0, &(0x7f0000000700)={&(0x7f0000000240)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, 0x0}, 0x12120) socket$kcm(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x10, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x14040, 0x0, 0x0, 0x0, 0x0, 0xfffffff1, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x73) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000004680)={&(0x7f0000003600)=ANY=[@ANYBLOB="9feb010018000000000000001400000014000000090000000400000005000000000000000000005f615f5f2e881b00000000000000"], &(0x7f0000003680)=""/4096, 0x35, 0x1000, 0x1}, 0x28) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001201", 0x2e}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000b1f8306e05d1e4aab009c16b5c05077115d0749619ca39f89974785ae0619b77c6585f678ac92a3b6b4148f56b43c3dd75d75f97c8f92f60a2def458df05e2fbfb3e849b2b3cffd4f29446ae60dd76654b2639b2bc14350706214a6ab7a712d4317fbc3ca01d0d3ed6110b3775903141a5091a4d3db8eb335414fbdb288aba73aaf6d18000a3a2a069cf7f9402e1425bb6bc370576aa1faea0fe222671ecf99038fce8dba53dcb11f87cca"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="1100000000000000"], 0x20) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[], 0x10) 1.199805611s ago: executing program 1 (id=10523): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="050000000400000008"], 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x48, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0x0) sendmsg$unix(r2, 0x0, 0x40080) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000005f40)={r0, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000005c80)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000005cc0)=[0x0], &(0x7f0000005d00), 0x0, 0xe8, &(0x7f00000002c0)=[{}], 0x8, 0x10, &(0x7f0000005d80), &(0x7f0000005dc0), 0x8, 0x3e, 0x8, 0x8, &(0x7f0000005e00)}}, 0x10) sendmsg$inet(r2, &(0x7f0000006000)={&(0x7f0000000540)={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f0000005bc0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000003480)="8586aeba15b39cd9621e9b3944096a571584550d753afb930a3fc6fe2fefdc7d5b7dfe6155c32e85c2feee91dd468d93b3", 0x31}, {&(0x7f0000005a40)="30a7b9208ef2093700c85128164572285441cbd9b9ac9c9ac488c761698e1e2b9eb3c29440fc0a49e8419e785863a6d19103925442c75f9e3fc972a0d09402c9aab695616db326feabbbe502f4529ae290ce6cb1f5c928b9aabc1ca5ef1f5d569db594590f28815e4cd453f6e1d889630363473dbcd6e0c14289862baa6ba83fd3edaf5820dabd7fccc9fc659a0bde6bafd784aeff8378e6a9ab830072b1a3fb226db0d85b2c757f5572fd", 0xab}, {&(0x7f0000005b40)="3c3401d91d68eb11bbb8cb1702b5d1f2ff19895f16e3aa01f0ef546d49e30f82d30d0210", 0x24}, {&(0x7f0000005b80)="f6080a9a9d", 0x5}], 0x7, &(0x7f0000005f80)=[@ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @local, @multicast2}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}], 0x68}, 0x20008000) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNATTACHFILTER(r4, 0x401054d5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x8, &(0x7f00000020c0)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000002a12ba3b0c000000b7000000000000008500020000008000185100000a0000000000008000000000e2cac81d662874f5e783661c0f6929173c6614174a130bcd097ec1f859de377bc073de1496ee87ec70"], &(0x7f0000000040)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x54, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff8}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xa, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000018000000000000000900000073110b000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3c, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x200480, 0x0) close(r5) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r6) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x84800, 0x0) ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0xffffffff}]}) ioctl$TUNSETOFFLOAD(r7, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r5, 0x40107447, &(0x7f0000000180)) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$cgroup_type(r8, &(0x7f0000000280), 0x9) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}, 0x38) r9 = socket$kcm(0x10, 0x2, 0x4) recvmsg(r9, 0x0, 0x40003c22) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) 1.012119946s ago: executing program 4 (id=10524): r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x40000000, 0x9}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) r3 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000001c0)={&(0x7f0000000000)=@in6={0xa, 0x4e21, 0x0, @remote}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="140000000000000029"], 0x18}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000e70000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000040)=r5, 0x4) sendmsg$inet(r7, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x4800) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r9 = socket$kcm(0x2, 0x200000000000001, 0x106) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0600000004000000040000000900000084000000", @ANYRES32, @ANYBLOB="ffffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000f40700000000000000082327aafdd0aa02"], 0x48) socket$kcm(0xa, 0x3, 0x11) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x4, @perf_config_ext, 0x10c002, 0xac5d, 0xffffff9a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x40082406, &(0x7f00000000c0)='memory.events\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r10 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0xff, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x14002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r11 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0x0, r10, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r11, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}}) setsockopt$sock_attach_bpf(r9, 0x0, 0x1a, 0x0, 0x1c) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r8, 0x10) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1) socketpair(0x38, 0x2, 0x5, &(0x7f0000000000)) socket$kcm(0x10, 0x2, 0x0) 959.928137ms ago: executing program 1 (id=10525): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) write$cgroup_devices(r0, &(0x7f00000001c0)={'c', ' *:* ', 'r\x00'}, 0x8) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x2b, 0x1, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffff03, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x55, 0x0, 0x0, 0x0, 0x0, 0x4a9, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x4e, 0x8, 0x0, 0x0}}, 0x73) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000039c0)=ANY=[@ANYBLOB="b702000006000000bfa300000000000007030000407effff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca7ebfcd0cd00006ed3d09a6175037958e271b60dedf8937f02008b6d83923dd29c034055d47dafe6c8dc3d5d78c07f34e4d5b3185b310efd4989147a00000000f110026e6d2ef831ab7ea0c34f17e3adeef3bb622003b538dfd8e012e71f6420b90adddff61b5b0a341a2d7cbdb90000bdb2ca76050000003a14817ac61e4dd11183a13477bf7e060e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132658555cf476619f28d9961b626c57c2691208171656d60a17e3c1c4b751ca532e6ea09c346df3d7cb4ebd31a08b32808980200000000000000334d83239d0c2e9ff10ff2d27080e71113610e10c358e8327e7050b6c860dac12233f9a1fb9c2aec61ce63a38d316ef49b66d6e42fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a5f3d74ca891c4594e8a4399e01eadd3964663e88535c133f7130856f75643619f567d2e24f29e5dad9326edb697a6ea0182babc18cae2ed4b4390af9a9ceefd07e002cab5ebfcaad34732181feb215139f15eafddcb0c7cbe31fbae7c34d5ac5e7e64c21add9191eadd6e1795ad6a0f7f8cd3fccbdc3dec04b25dfc17975238345d4f71af35910b158e56657b7218baaa7cbf781c0a99bd50499ccff0f000000000000c7beba3da8223fe5308e4e2833baace04f4087c4f0da0d9a88f9dbb593ddeb3f0932a4d0175b889b8eccf707882042e716df9b57b290c661d4e85031086e97bcc5ca0e221a0e34323c129102b7b7a643e82e88a1940b3c02ed9c92d6f64b1282dc519b00159830d7617001154c46bd3ca96318c570f0721fc7aa2a58090000000000000094f22cdf550ef091a78098534f0d973058594000000000000000c12346e47ad97f4ead7cf754a52e4b2d0f22d428bd705414888700a30e2366c6a06b3367a389ca3905689a1f3db9c24db65c1e0001581d573dab18fd0600885f1ea8f2fd299fc3cdafda323e9c7080397bc49d70c060d57bc88fbe09baa058b040360ab9261503d2f363fb099408885afc2bf9a4f8c3506b669e889f5e4be1b8e0d634ebc1057b7e98186fc5141bd670dba6f43279f73db9dec75070cd9ab0fd969169ef6d2857b6bf955012cf7fe50d133da86c0477e42b98a6cc999dc21c3ef408e633dfa35f14d6e734837d365e63845f3c1092f8dd4fc7ea0000af3904ea0f3698cd9492794b8212a350d726bff873339c4cad4ead1348474250eda2c8067ab730c1d82a5687f2ed690000522a0b7426000000000000000000000000000000000000000093fc7a82b98f99d9dedf7ba17f5f0b6d15e552fbd21f7eecff10243a43af03eea84c4304a5d3f93c3fc74c00000000000043e1ed82b9aa0ae92a499984a009000000937523f5292d12659906005cde64f903c3415c458a2b32c2318f0858f19c6def80e1481e8e1c0098fc3f38b7a57211adb15d824cfdcf229628c0de49860e44286fe0e257cfa4ce50f3d10763d442824414a73c06837fe08de62f8710ca977960b74d0000ce73da6022a8671d1a3575b4e18c28c73203bf134686dd65808452cb6b76fcb134252c78de9b240de7b4cd015a77f76bb6470c05fc980b3d8f3f964f432a4bf6cddd6222c2da006b6fdb9c8468ae1d986a893b9519444d16a6dfa92c04331a6698507048fab5ae402acd05fe621f22712dfd09004770b4278fa14547d8ce3c21188e5e4e2baacd98e8e451d6aaaf090000006ed1d9018000008dd952595d78e9583bf4ea5de36099e3cd32941a815e3f3ceafe3065b9594fdcb24ebb6eddb9e87c9ecec7a42c0000abe1c6ea55887dfa18d0aea1b6eca5a883702b0bf3aefcb225895db90e237157a34e9f447237ea5b391bddd1290f7ce987a0e36b8e71b1779bbe95ffa9c3c0f6ba66e4d48e75253e3d633811e4b3220616aafbe7a3a18375ae593eb58fd500426286472466823cb8e1800aaaa0d9463c0c4ea5541a55df6eeffec0b66482228816cdfccb98374c644eea45de7867a0efbad0ab2bc33b350440a90b791b2b33f74a112a3b91b40bed8db2df8633207f8387e04ca52ab0f3f7b058b13523b896800b992972d9609551c27a5916ea16069c5b0300000026d3c27e7945b29996e5cefbc9f857bc1332d200194f658b930780603134ae6b7f5092772bd5d880dbe21b790c475b14b7fe4fe002dffd651faa79bb0cee0cdac2bc3218f2ddaa6f7ba04b696a30d313bed30ba8f35569a9b07ee7308da09c01a4b827aa1784d927aca9b8540534c5c49a0300cfbc2213fc1572b0204dd456b11a454d1f3f14179974aae624ea59500f5e048b2780666de81a040663c57f49af25be909984ae4e679107a14bbb24851f6199eaf9a1b81f33426f86b4b941c08dfe2bc8ec246ec1aae120c42405e428923f3a83d9ba5c373f5e8a54120b451e2806370f1ed60c9fd5d9af4d16cb0f413c324da52d4bd2e01d3ac2d578d72e2d63322dfc9245ce3e3a097fb82f4e3b61a55594616020f72f1c55ee3d325c7496a7c2f10cfeae16ae436751227378f0b1ee78bd33c50206700dd90b96a330f92bff736c83ca53e7f02b734d1a9292337e2be3896f7e7f244bfab4946c7042e88206f641eafcc5b4ba7a7880533cde00995d1caf6936f356ecf07a0084e7adc2dc12417997b03087c7b3b44b06f6158a2a18ce0e56ffbeb22f40521dd9972583d413098aa80db98ef324a2bfb6961c07b47521973cf0bb6f5530f6216b047b35d6e06b72b22b29de42bb1bc8ce0a0e3500000000000000000000000000b92eb197e4149627920000008000000000801792756f90b37f0858efc387f559203f314a4b0ed750fa72e5948ac3fe5921c14ef578d420e7b2a9e2f87f7b44949fe14c00000000000f47030c09f62d444b4981db81799776eeb4448278de519705fa8b56779bc8cc927b308c8e50815c4c3b27487996c09121caf47f76158362c74904f89cbc588aae84567a83571ff72bb65c082b5a8dedc05a3167d84205d5af86553c21e1f023a51c0e179fccfbc201982ebddcaa45613899d19082453b180ca0c525b8d3cfaf7d0bcddeb5d5c7166038f276a92941393ba5e51f77172822bd903d9f8b436656771774ed88daab0d0cfdd1bffc30ab566e1a4cb3ad66d830e10f7c1de13218aea21e7def613204c2b7c1ad48b01c20024032e9b3bba7d6ceca38d3e96db049b92fc32ee34fe7b8419c8fbf03d61c159dc5864e030000a2c55b614d622b8de966c97e1940026f96db3c78ca18c9f08d1c47edf1a4d7298109f31b6078711ee72eacab61213bf50000000000e1000000000000000000001217887d0452aa6d26e4614d511710abeec84b78c027c160ba3759fa55249b832ce4dfb91122193d514ed992c07f8cd6d897b314907e15642da228dbc03429e6e0e7ac118ed351c3b0c44bf5d8b58be5732f29eed98d5b3688d80f7c66f8333aa8cc2ec5b5e305b3dee2562d415b4b9ed530797f55f9fe8510423409629a09000000000000009a35d9ca93e4b4591679547b8de8af1782451f7b8e1de508f1e9e525210d62bb850f8035040ad9e57abe58797515b737bfb21d35ac560f99dbd18dad5e6345a464955e8141d75b6177e4fa176a020b0000000000006e76f0294fee7d19a0f327f8796d77b6e24b8df4bb438b527d10e657d49b844198ea9f93c4fd6fd2daa9bd87fd1e02ecc8075dca1280c201043257e9bd3c9a7aa150eb1711632b76d4dc053e64bfcfd057980136d6e9faca03b24fa300ef90bfe4ad364256937796f941c2fead94785f48777941f0cd3dba54ab6a5d5e91e90ac9ae994c3d4108b2fe7eca9413ac9bc138c74800487eb19c48db3f79be964808d409b5e36fc7fdd40080361427b6b9c118e5c9a0a1d5ca24886eb8a78796540635ac3530b9025d8bad0533a7f81b2188ec75a5fc9302e3815bdcc9ab11201ef940569c995c21eeaefe2e8fc02e0433dc7371d1f72124bad23e554c30fdd7cd8c2da1e8706417da9ad8916551a1182fac08603dfc2f2279ba161c13984cd753b54a85e6f3018c7d48c4b6c2f6910975e9ff51318b09fa13e2d38ce013aab41524c298c3719e31bcb1f102eaeee69a19e006bcdb1acc2664efa949a1a07bb3d7848d5e1381fbe63c522053a3bb32eb6345e10f7a12bf84e0e196a00833f464dd2f6547f14ebf137fce33efeb813211f31ff24d7dbb00f2574ccda59b3ea068fc2a18c37ee579f5a9ecc47da73684bcadd209ae5bbb7147df745ae7a4e446ca16d027d8d0adcdb54182c9de8053fc8b1b9d19c16c53d34db6e26f6a88d449f6abf378ca2e577e206a758a3d46e45e7949c5b5069103009693a798a330a1ccb32d49772e80862df36dc0156b3f72cd85083f8e96ca1697457ec722766bd46ee2424975a38149bd57e5c0eb4087fc243e7e51b0aca9f0ab0668d7f2ee9ad9f267d8804417aa7e36a64d489bb84a1483fd3c3ecb024060002858cbb1f7708f5b41fca2fee7c03b1f862ce88dc313d913e041dd7583a1ac41c466757c5dd07ea2c5d62a000b84b11308b6636b735b3c654cbc0000000000000019a4e9a9c2cbc906f97fd6eb00b18d09a5df123ebbdb2827b43aed6a29e9942e402c1ae52e9cb98f3019d364fc21ea02023db91ced3c2f06550cef8a79ed39091e4776001187d0ab2f82478431d36470cc008d745ce8fd64c9aa64da230bb080945a557081b767beb75b1ea856a55c71b8fda672289aa6085100d48ac8039f19fec3acbcc5944a4e6fd44af8f10110db730a8d0d41b4ea36f9510f843a471963bd4621b9e43f08d341bb69df430ac4bf5c06c6398c1b28bdd3f4c2353c330d8457cf728294e8ea1861ce50c367498945285f73c94d91210652eb4f3077cab6be2a3512eddbcb63d091d69fb1b26c8ada9a99d747d38ef5042053299b8e95decc637a022a49664742606cfdb2a3258498a6a0a82369d70177433e52b851ac396163ca09e6c22ad796a565cf23d87ae9be7235553aa6b8ab74842d3d4ba738b3fa997f079d225335f2af55644478e514aed8ba202805ad458d9ae6ab8d156f11f3cfe7def690f2bbbb463063664625223d23386540e0db96d8eb1755ad49ae817683de97a6dd32d584391302e65594b12bb2e6630217401031c8a1b964ca32f735421bbf64c9f1f9329e5cfda139ea79619e1d00a9a3ab49993362f30d191aa3387101feaa3e326190804eae2114437f8f4b27480900dd6511844a643886588fbdee7f8863a8dfdd75a9e128c6c15166a5f92d3c2d4952e5d07c59bfce0724a02600094c3369be3024edf451ff76a59855fd90353a0de907834bb77a059c56e92eed2f1415b3d8178453c7aecd8fbd161e2ffd66bcf2be175e45184f06bafd1c1c4fd7006a6c90d8afd126f1c51ee0f724ffbbed25a286c95d17c8b4297f8bba8efd565ecb157f0be244fb9657f737354b20e3a5012abb36052eec7a4fe9bc5b5283581b208d90d28d78f1c5422c3bcad67278e8bb88d7e6ccf72dd61319b44aa617d667000000000000a5edbd3e8605225681090853fc66a20e30fb9938e5886ae748236f5e071278763e070b2b75ce0a9e6870033d25dd19733152b01b507d812216e0f7fc89bbe200806f079e9515dd886a781a46ebe3da4c8307885b535109bb1678d08eeef3717bea30f64282ee844b6d64ec51b1221d175b59c1537089dfa803275ab6dcd40b1fe4e851597c1993a477c225201087b7b0977be62a71927bb01b705267aabe967add451795dfd5114726193415cc3e0784a37db8ab8b97a171bc4ad9593f7c750ad440a26b93d24ee8f080de0f2a16cbd5cd1f370bc1235d88d5cbd25acf91daa392731dab4c9c15015de2fded6332b6ebccf6e1588f3f1a5a3e853587a6843ee1a3f3c270e3ab4462bcff01c70b03e8f8c9d816d7d69e4040155e9f999ce4e366a816c6e7224f41df7eead6d6d214ed98708e1d269f4b469af2e2a2559258439758f4fded2780e736568c7eea209c5ed54a1beaf06013bb4b330d39518528a46d68b277faf926672650cad335ae285aeb0b0130a9c7016580a857722b9c51a5a37a856ccb9b6673f58ebfa66f1db4d041741e104cdd91efa4b3248ebecff3568f31b547b19a939708c3b4b45f46377b4a345248489ddef4bc87426717971de1c0049006d2fb99c311fa91c364749917ee81ea8fd51365449d568eadbad6aead6101b7e6582e793670492d814d58e4a9faa8a4a3027b230e8f5b2349fb3ff3c4365df6bd85aa7f76c388ef94f0155c81b04863624fb4708f83ebf93a51d1438d7761d4b1b929d9aa8faef691676834a2591b75205ede2e4a709c3a9899d06c5cb5a571159402e429c5cf839f49957aed76dc7db43f9fdc754e40d7c662ad7939a09bfdbc31deb0d327895afae1eca61820e09abc2c0ed5ce083aceb89c8e24ad45483d3128f0547869970dc84c8787a06046bf79f28a7678b03baeff239ce600d91a07236e255ff7ea441ff0602bb38d7aaa1c414a94c4e143ea2cca9d14a01bb70ff93057a03288bd71c45b025731765ca5250b162f08be1a29460a53f213bfb88a8e80e4c46dbfa5936894a95d27c4e90c151748f8ee457c29cb7e21deb805a9c5c6abf373a4bad5e1"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffffe8}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x18000000000002a0, 0x38, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e14f086dd", 0x0, 0x63, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) 679.907783ms ago: executing program 1 (id=10526): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2bb}, 0x0, 0xbdffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2112, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3ff, 0x7fff}, 0x0, 0x0, 0x0, 0x3, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) r4 = getpid() write$cgroup_pid(r3, &(0x7f0000000080)=r4, 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) close(r5) socket$kcm(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) r6 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000380), 0x12) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) 678.598543ms ago: executing program 0 (id=10536): socket$kcm(0x10, 0x2, 0x10) r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x17}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x402, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x2, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x6, &(0x7f0000000040), 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan1\x00', 0x800}) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 673.302014ms ago: executing program 3 (id=10527): ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000580), 0x4}, 0x118628, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x9, 0x0, 0x0, 0x0, 0x786}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$kcm(0x15, 0x5, 0x0) recvmsg(r1, &(0x7f0000000700)={&(0x7f0000000240)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, 0x0}, 0x12120) r2 = socket$kcm(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x10, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x3, @perf_bp={0x0, 0x4}, 0x14040, 0x0, 0x0, 0x0, 0x0, 0xfffffff1, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000380)=@o_path={&(0x7f0000000340)='./file0\x00', r0, 0x4000, r2}, 0x18) socket$kcm(0xa, 0x2, 0x73) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000004680)={&(0x7f0000003600)=ANY=[@ANYBLOB="9feb010018000000000000001400000014000000090000000400000005000000000000000000005f615f5f2e881b00000000000000"], &(0x7f0000003680)=""/4096, 0x35, 0x1000, 0x1}, 0x28) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001201", 0x2e}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000b1f8306e05d1e4aab009c16b5c05077115d0749619ca39f89974785ae0619b77c6585f678ac92a3b6b4148f56b43c3dd75d75f97c8f92f60a2def458df05e2fbfb3e849b2b3cffd4f29446ae60dd76654b2639b2bc14350706214a6ab7a712d4317fbc3ca01d0d3ed6110b3775903141a5091a4d3db8eb335414fbdb288aba73aaf6d18000a3a2a069cf7f9402e1425bb6bc370576aa1faea0fe222671ecf99038fce8dba53dcb11f87cca"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="1100000000000000"], 0x20) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[], 0x10) 565.199866ms ago: executing program 2 (id=10528): r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) r1 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000013006bcc9e3be35c6e17aa31086b876c1d0000a17ea60864160af36504002b000c0001004ce82bdface7b3d57581fff60a84c9f4d4938037e786a6d0001000000e4509c5bb5b64f69853000000029e79c7ad2600375b3f54", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000400)={r0}) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, r2}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000bc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 186.192795ms ago: executing program 0 (id=10529): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2bb}, 0x0, 0xbdffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2112, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3ff, 0x7fff}, 0x0, 0x0, 0x0, 0x3, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) r4 = getpid() write$cgroup_pid(r3, &(0x7f0000000080)=r4, 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) close(r6) socket$kcm(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) r7 = openat$cgroup_procs(r5, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000380), 0x12) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) 185.736915ms ago: executing program 1 (id=10530): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x6}, 0x4000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x11, 0x200000000000002, 0x300) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x9b001000, 0x0, 0x0, &(0x7f0000000380), 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080), 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040), 0x10) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x7fff, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x1}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000000)=ANY=[@ANYRESOCT=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xbd0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x2, 0x1006, 0xff, 0x42, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af3653c001ac004000202080002000300010004000600eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0600000004000000020000000100000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000011000000000000000000000000000061c20e023b3ea4e9d33bf6dfc849965c5eca6724e85cb7435216a5e8a8dc8ee78f07541cbf7e5f7150a57a"], 0x50) 184.126145ms ago: executing program 2 (id=10531): openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_config_ext={0xcf, 0xd}, 0x63, 0x0, 0x0, 0x4, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="6000000011007f059e", 0x9}, {&(0x7f0000000200)="78cabf2dfb73fc020700000000000602258f2e440ab8f9e6aaeb1ae2f6e8bcb5ee52dc06249798093c5102a1bca0b646a7ce904f6e6b788b3219c233e60ddc36024a99a63e7257", 0x47}], 0x2}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000240081064e81f782db44b9040a02080006000000e8fe0ba1f1ffffff0200142603600e120800080024000000a80009001100014003000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200, 0x0, 0x0, 0x5f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r2}, 0x8) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x5, &(0x7f0000000000)=[{&(0x7f0000004500)="d800000016008111e00212ba0d8105040a601100ff0f040b067c55a1bc0009001e0006990300000015000500fe808178a8021500030001400200000901ac04000bd67f6f9400710016277ce06bbace8017cbec4c2ee5a7cef40900000e1fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad85667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b440431629b0b5aa14c3d21e2fa353905e2a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) r5 = socket$kcm(0x2, 0x5, 0x0) sendmsg$inet(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1}, 0x3e8) r6 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r4, 0x0, 0x0}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r4, @ANYBLOB="0100008000"/14, @ANYRES32, @ANYRES32=r4, @ANYBLOB="000000000000000000000009859f82c3d017c6000000100000080000"], 0x50) sendmsg$kcm(r6, 0x0, 0x0) close(r0) socket$kcm(0x11, 0xa, 0x300) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x1}, 0x100010, 0x0, 0x8, 0x0, 0x4000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r7 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r7, 0x6, 0x17, &(0x7f0000000200), 0x4) 93.528597ms ago: executing program 3 (id=10532): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c92a, 0x89, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0xffffff26, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc7, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{r0}, &(0x7f0000000740), &(0x7f0000000780)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000200)=r2, 0x4) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001240)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d19f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981179186e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b6059b9ef90c2f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c33f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217bcfd1ef24284de8a0a9f068f297037d6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2a434b9048ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d6356e4450d043ed20d313cd56a56d2e4cdf26f19af9a41695a58a9b6b45af1ca939b18d7b57791b99cfc6ec2a0848c29fea4eb8b82395a38e8aca5ab4bfc2ad8acf2e51b766f8ecd16194ad41ec097082f7fa32179ef99dafa6c2aa206a25ddc33e6f0a09169eeff428c71f54e1dfcfcd7cfc8f6e169f11c47d504"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0x26, 0x0, &(0x7f0000000500)="b9ff03076804268cb89e14f088a847e0ffff2060000000010000ac141416e000000129a13011", 0x0, 0x2800, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 4 (id=10533): r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="020000000300"}) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="364000001a00913a"], 0x82d7) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x17}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x402, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x2, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x6, &(0x7f0000000040), 0x3) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000100)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB='1-0'], 0x31) socket$kcm(0x28, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000940)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000300000000000000000000030000000002000000020000000000020000000000000000010500000010000000010000000000000e0100000000000000"], 0x0, 0x53}, 0x28) close(r1) socket$kcm(0x10, 0x2, 0x0) openat$cgroup_int(r2, &(0x7f00000001c0)='io.bfq.weight\x00', 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) socketpair(0x22, 0x5, 0x26, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0xfffffffffffffffe, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan1\x00', 0x800}) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8946, &(0x7f0000000080)) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002d000b12d25a80648c2594f90124fc60100c02000a040000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) kernel console output (not intermixed with test programs): SS using preconfigured BSSID 50:50:50:50:50:50 [ 1703.387610][T17770] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1703.451217][T17763] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1703.549932][T17770] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1703.558095][T17770] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1703.607010][T17772] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1704.978233][T32689] device syzkaller0 entered promiscuous mode [ 1705.042811][T32688] netlink: 168 bytes leftover after parsing attributes in process `syz.4.9024'. [ 1705.072159][T32691] netlink: 'syz.2.9025': attribute type 9 has an invalid length. [ 1705.225716][T17763] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1705.241925][T32354] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1705.253950][T32354] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1705.262741][T32354] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1705.271827][T32354] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1705.279384][T32354] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1705.287632][T32354] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1706.248525][T32712] netlink: 'syz.1.9031': attribute type 9 has an invalid length. [ 1706.265154][T32712] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.9031'. [ 1707.333440][ T4289] Bluetooth: hci1: command 0x0409 tx timeout [ 1708.216438][T17763] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1708.231120][T32703] netlink: 'syz.2.9028': attribute type 10 has an invalid length. [ 1708.284636][T32703] team0 (unregistering): Port device team_slave_0 removed [ 1708.309261][T32703] team0 (unregistering): Port device team_slave_1 removed [ 1708.451175][T17763] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1709.410047][ T4289] Bluetooth: hci1: command 0x041b tx timeout [ 1710.984633][T17763] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1711.489636][ T4289] Bluetooth: hci1: command 0x040f tx timeout [ 1711.743193][T32694] chnl_net:caif_netlink_parms(): no params data found [ 1711.967802][T32750] FAULT_INJECTION: forcing a failure. [ 1711.967802][T32750] name failslab, interval 1, probability 0, space 0, times 0 [ 1712.003371][T32750] CPU: 0 PID: 32750 Comm: syz.4.9043 Not tainted syzkaller #0 [ 1712.010929][T32750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1712.021023][T32750] Call Trace: [ 1712.024337][T32750] [ 1712.027309][T32750] dump_stack_lvl+0x188/0x24e [ 1712.032048][T32750] ? show_regs_print_info+0x12/0x12 [ 1712.037298][T32750] ? load_image+0x410/0x410 [ 1712.041868][T32750] should_fail_ex+0x390/0x4c0 [ 1712.046608][T32750] should_failslab+0x5/0x20 [ 1712.051157][T32750] slab_pre_alloc_hook+0x59/0x300 [ 1712.056246][T32750] kmem_cache_alloc+0x56/0x2f0 [ 1712.061062][T32750] ? skb_clone+0x1e7/0x370 [ 1712.065537][T32750] skb_clone+0x1e7/0x370 [ 1712.069845][T32750] bpf_clone_redirect+0x169/0x4a0 [ 1712.074928][T32750] bpf_prog_b36a1f39e2fdd4f4+0x56/0x5b [ 1712.080434][T32750] ? __kprobes_text_end+0x57378/0x57378 [ 1712.086038][T32750] ? lockdep_hardirqs_on+0x94/0x140 [ 1712.091376][T32750] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1712.097618][T32750] ? seqcount_lockdep_reader_access+0x18d/0x1d0 [ 1712.103917][T32750] ? seqcount_lockdep_reader_access+0x196/0x1d0 [ 1712.110207][T32750] ? ktime_get_real_ts64+0x440/0x440 [ 1712.115579][T32750] ? read_lock_is_recursive+0x10/0x10 [ 1712.121005][T32750] ? __cant_sleep+0x220/0x220 [ 1712.125734][T32750] ? bpf_test_timer_continue+0x142/0x380 [ 1712.131420][T32750] bpf_test_run+0x2b6/0x830 [ 1712.135986][T32750] ? dst_hold+0xb0/0xb0 [ 1712.140232][T32750] bpf_prog_test_run_skb+0xdaf/0x18e0 [ 1712.145673][T32750] ? cpu_online+0xa0/0xa0 [ 1712.150054][T32750] bpf_prog_test_run+0x31c/0x390 [ 1712.155071][T32750] __sys_bpf+0x62b/0x780 [ 1712.159365][T32750] ? bpf_link_show_fdinfo+0x380/0x380 [ 1712.164809][T32750] ? lock_chain_count+0x20/0x20 [ 1712.169710][T32750] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1712.175750][T32750] __x64_sys_bpf+0x78/0x90 [ 1712.180220][T32750] do_syscall_64+0x4c/0xa0 [ 1712.184693][T32750] ? clear_bhb_loop+0x60/0xb0 [ 1712.189415][T32750] ? clear_bhb_loop+0x60/0xb0 [ 1712.194165][T32750] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1712.200111][T32750] RIP: 0033:0x7f47fb79de59 [ 1712.204567][T32750] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1712.224477][T32750] RSP: 002b:00007f47f99f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1712.232948][T32750] RAX: ffffffffffffffda RBX: 00007f47fba25fa0 RCX: 00007f47fb79de59 [ 1712.240968][T32750] RDX: 0000000000000048 RSI: 0000200000000040 RDI: 000000000000000a [ 1712.248987][T32750] RBP: 00007f47f99f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1712.257001][T32750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1712.265027][T32750] R13: 00007f47fba26038 R14: 00007f47fba25fa0 R15: 00007ffddd788518 [ 1712.273067][T32750] [ 1712.453889][T32694] bridge0: port 1(bridge_slave_0) entered blocking state [ 1712.478466][T32694] bridge0: port 1(bridge_slave_0) entered disabled state [ 1712.500889][T32694] device bridge_slave_0 entered promiscuous mode [ 1712.565353][T32694] bridge0: port 2(bridge_slave_1) entered blocking state [ 1712.573368][T32694] bridge0: port 2(bridge_slave_1) entered disabled state [ 1712.591855][T32694] device bridge_slave_1 entered promiscuous mode [ 1712.814137][T32763] device syzkaller0 entered promiscuous mode [ 1712.833138][T32758] netlink: 168 bytes leftover after parsing attributes in process `syz.2.9045'. [ 1712.874528][T32694] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1713.073654][ T310] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.9049'. [ 1713.587739][ T4289] Bluetooth: hci1: command 0x0419 tx timeout [ 1715.623676][T32694] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1715.706463][T32694] team0: Port device team_slave_0 added [ 1715.733911][T32694] team0: Port device team_slave_1 added [ 1715.940434][T32694] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1715.961038][T32694] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1716.081163][T32694] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1716.153971][ T326] netlink: 'syz.2.9054': attribute type 12 has an invalid length. [ 1716.176540][T32694] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1716.187011][T32694] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1716.273344][T32694] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1716.325184][ T332] netlink: 'syz.0.9055': attribute type 8 has an invalid length. [ 1716.374390][ T332] netlink: 'syz.0.9055': attribute type 4 has an invalid length. [ 1716.419736][ T332] netlink: 'syz.0.9055': attribute type 7 has an invalid length. [ 1716.439881][ T332] netlink: 'syz.0.9055': attribute type 8 has an invalid length. [ 1716.447680][ T332] netlink: 'syz.0.9055': attribute type 7 has an invalid length. [ 1716.505707][T32694] device hsr_slave_0 entered promiscuous mode [ 1716.581918][T32694] device hsr_slave_1 entered promiscuous mode [ 1716.606073][ T332] netlink: 125876 bytes leftover after parsing attributes in process `syz.0.9055'. [ 1716.622775][T32694] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1716.652333][T32694] Cannot create hsr debugfs directory [ 1717.142401][ T350] netlink: 'syz.2.9061': attribute type 3 has an invalid length. [ 1717.278265][ T356] netlink: 'syz.4.9063': attribute type 29 has an invalid length. [ 1717.475671][ T356] netlink: 'syz.4.9063': attribute type 29 has an invalid length. [ 1717.525138][ T357] netlink: 'syz.4.9063': attribute type 29 has an invalid length. [ 1717.593965][ T359] can: request_module (can-proto-0) failed. [ 1717.640074][T17763] device veth1_macvtap left promiscuous mode [ 1717.656546][T17763] device veth0_macvtap left promiscuous mode [ 1717.678662][T17763] device veth1_vlan left promiscuous mode [ 1717.688038][T17763] device veth0_vlan left promiscuous mode [ 1718.442685][ T388] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9069'. [ 1718.683034][T17763] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1718.734588][T17763] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1718.989271][T17763] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 1719.018973][T17763] bond0 (unregistering): Released all slaves [ 1719.142678][ T376] netlink: 168 bytes leftover after parsing attributes in process `syz.1.9064'. [ 1719.159160][ T384] netlink: 14 bytes leftover after parsing attributes in process `syz.2.9067'. [ 1719.238566][ T388] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9069'. [ 1719.692640][ T403] netlink: 76 bytes leftover after parsing attributes in process `syz.1.9072'. [ 1720.558690][ T424] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9077'. [ 1720.598092][ T424] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1720.642418][T32694] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1720.860049][T32694] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1720.900286][T32694] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1721.037088][ T436] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.9079'. [ 1721.054329][T32694] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1721.472963][ T446] validate_nla: 8 callbacks suppressed [ 1721.472999][ T446] netlink: 'syz.2.9084': attribute type 3 has an invalid length. [ 1721.605272][T32694] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1721.748749][T32694] 8021q: adding VLAN 0 to HW filter on device team0 [ 1722.043641][ T450] device syzkaller0 entered promiscuous mode [ 1722.066683][ T452] netlink: 168 bytes leftover after parsing attributes in process `syz.0.9082'. [ 1722.109764][T17770] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1722.122836][T17770] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1726.634502][T17770] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1726.643499][T17770] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1726.654029][T17770] bridge0: port 1(bridge_slave_0) entered blocking state [ 1726.661144][T17770] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1726.670637][T17770] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1726.680463][T17770] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1726.688980][T17770] bridge0: port 2(bridge_slave_1) entered blocking state [ 1726.696157][T17770] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1726.705080][T17770] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1726.739589][T17763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1726.794276][T17763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1726.821041][T17763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1726.862782][T17763] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1726.891188][T17763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1726.921944][T17763] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1727.047044][T32694] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1727.061998][T32694] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1727.075832][T17763] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1727.085410][T17763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1727.095839][T17763] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1727.119420][T17763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1727.131683][T17763] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1727.201040][T17763] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1727.659441][ T504] netlink: 'syz.1.9094': attribute type 3 has an invalid length. [ 1728.445135][ T6310] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1728.447287][ T521] netlink: 'syz.0.9098': attribute type 3 has an invalid length. [ 1728.468547][ T6310] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1728.497756][T32694] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1728.512272][ T521] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.9098'. [ 1728.593276][T17773] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1728.614571][T17773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1728.695657][T32694] device veth0_vlan entered promiscuous mode [ 1728.760891][ T6310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1728.784433][ T6310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1728.825298][T32694] device veth1_vlan entered promiscuous mode [ 1728.847631][ T6310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1728.864072][ T6310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1728.873905][ T6310] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1728.925999][ T6310] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1728.949384][ T6310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1728.959041][ T6310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1728.982738][T32694] device veth0_macvtap entered promiscuous mode [ 1728.996705][T32694] device veth1_macvtap entered promiscuous mode [ 1729.019464][T32694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1729.034286][T32694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1729.051187][T32694] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1729.089685][ T6310] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1729.116777][ T6310] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1729.146893][ T6310] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1729.186236][ T6310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1729.220642][T32694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1729.239031][T32694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1729.263362][T32694] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1729.278832][ T539] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.9100'. [ 1729.293458][ T6310] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1729.313177][ T6310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1729.332719][T32694] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1729.360375][T32694] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1729.369236][T32694] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1729.381340][ T545] netlink: 'syz.2.9105': attribute type 3 has an invalid length. [ 1729.398840][T32694] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1729.585830][T17763] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1729.606995][T17763] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1729.616265][ T550] netlink: 'syz.1.9107': attribute type 29 has an invalid length. [ 1729.648178][ T6310] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1729.725546][ T550] netlink: 'syz.1.9107': attribute type 29 has an invalid length. [ 1729.818241][ T6310] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1729.835643][ T6310] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1729.907148][ T6310] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1730.133765][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.140297][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.481369][ T579] netlink: 'syz.1.9113': attribute type 29 has an invalid length. [ 1730.611809][ T579] netlink: 'syz.1.9113': attribute type 29 has an invalid length. [ 1730.649247][ T581] netlink: 'syz.1.9113': attribute type 29 has an invalid length. [ 1730.763017][ T585] netlink: 180 bytes leftover after parsing attributes in process `syz.0.9116'. [ 1731.041178][ T595] netlink: 'syz.3.9117': attribute type 3 has an invalid length. [ 1731.516282][T32354] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1731.526284][T32354] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1731.543449][T32354] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1731.553613][T32354] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1731.563305][T32354] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1731.573610][T32354] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1731.607672][ T603] netlink: 'syz.4.9119': attribute type 12 has an invalid length. [ 1731.630779][ T611] netlink: 152 bytes leftover after parsing attributes in process `syz.1.9122'. [ 1731.642624][ T606] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.9120'. [ 1732.510832][ T610] chnl_net:caif_netlink_parms(): no params data found [ 1732.996302][T17770] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1733.172463][T17770] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1733.263002][ T610] bridge0: port 1(bridge_slave_0) entered blocking state [ 1733.277548][ T610] bridge0: port 1(bridge_slave_0) entered disabled state [ 1733.302940][ T610] device bridge_slave_0 entered promiscuous mode [ 1733.323662][ T610] bridge0: port 2(bridge_slave_1) entered blocking state [ 1733.380100][ T610] bridge0: port 2(bridge_slave_1) entered disabled state [ 1733.388529][ T610] device bridge_slave_1 entered promiscuous mode [ 1733.560821][T17770] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1733.660096][ T4289] Bluetooth: hci0: command 0x0409 tx timeout [ 1733.682828][T17770] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1733.705889][ T666] netlink: 44 bytes leftover after parsing attributes in process `syz.3.9139'. [ 1733.722863][ T610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1733.795266][ T610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1733.926354][ T610] team0: Port device team_slave_0 added [ 1733.942268][ T610] team0: Port device team_slave_1 added [ 1734.205424][ T610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1734.226458][ T610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1734.340911][ T610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1734.597348][ T675] validate_nla: 3 callbacks suppressed [ 1734.597389][ T675] netlink: 'syz.1.9141': attribute type 3 has an invalid length. [ 1734.669595][ T610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1734.686579][ T610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1734.818881][ T610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1735.271086][ T610] device hsr_slave_0 entered promiscuous mode [ 1735.306114][ T610] device hsr_slave_1 entered promiscuous mode [ 1735.335855][ T610] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1735.383857][ T610] Cannot create hsr debugfs directory [ 1735.740147][ T4289] Bluetooth: hci0: command 0x041b tx timeout [ 1736.413908][ T695] netlink: 'syz.1.9146': attribute type 2 has an invalid length. [ 1736.422768][ T695] netlink: 164 bytes leftover after parsing attributes in process `syz.1.9146'. [ 1736.941319][ T720] netlink: 'syz.0.9152': attribute type 3 has an invalid length. [ 1737.301752][T17770] device gretap0 left promiscuous mode [ 1737.307362][T17770] : port 1(gretap0) entered disabled state [ 1737.469843][ T734] FAULT_INJECTION: forcing a failure. [ 1737.469843][ T734] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1737.590374][ T734] CPU: 1 PID: 734 Comm: syz.3.9157 Not tainted syzkaller #0 [ 1737.597760][ T734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1737.607857][ T734] Call Trace: [ 1737.611195][ T734] [ 1737.614166][ T734] dump_stack_lvl+0x188/0x24e [ 1737.618894][ T734] ? show_regs_print_info+0x12/0x12 [ 1737.624156][ T734] ? load_image+0x410/0x410 [ 1737.628795][ T734] ? __lock_acquire+0x7c40/0x7c40 [ 1737.633883][ T734] should_fail_ex+0x390/0x4c0 [ 1737.638620][ T734] _copy_from_user+0x2c/0x170 [ 1737.643340][ T734] __sys_bpf+0x2ea/0x780 [ 1737.647633][ T734] ? bpf_link_show_fdinfo+0x380/0x380 [ 1737.653070][ T734] ? lock_chain_count+0x20/0x20 [ 1737.657995][ T734] __x64_sys_bpf+0x78/0x90 [ 1737.662465][ T734] do_syscall_64+0x4c/0xa0 [ 1737.666928][ T734] ? clear_bhb_loop+0x60/0xb0 [ 1737.671653][ T734] ? clear_bhb_loop+0x60/0xb0 [ 1737.676374][ T734] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1737.682314][ T734] RIP: 0033:0x7f4e06d9de59 [ 1737.686769][ T734] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1737.706497][ T734] RSP: 002b:00007f4e07c1c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1737.714956][ T734] RAX: ffffffffffffffda RBX: 00007f4e07025fa0 RCX: 00007f4e06d9de59 [ 1737.722955][ T734] RDX: 000000000000004c RSI: 0000200000000340 RDI: 000000000000000a [ 1737.730964][ T734] RBP: 00007f4e07c1c090 R08: 0000000000000000 R09: 0000000000000000 [ 1737.738952][ T734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1737.746958][ T734] R13: 00007f4e07026038 R14: 00007f4e07025fa0 R15: 00007fffd5f4bd48 [ 1737.754969][ T734] [ 1737.809992][ T4289] Bluetooth: hci0: command 0x040f tx timeout [ 1737.823887][ T738] netlink: 'syz.0.9158': attribute type 3 has an invalid length. [ 1737.892617][ T738] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.9158'. [ 1738.464323][ T610] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1738.730505][ T759] netlink: 'syz.0.9164': attribute type 3 has an invalid length. [ 1739.342121][ T610] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1739.361338][ T610] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1739.376084][ T610] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1739.889782][ T4289] Bluetooth: hci0: command 0x0419 tx timeout [ 1739.932844][ T610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1740.953327][ T788] netlink: 'syz.1.9170': attribute type 2 has an invalid length. [ 1740.993604][ T788] netlink: 199640 bytes leftover after parsing attributes in process `syz.1.9170'. [ 1741.078120][ T6310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1741.091937][ T6310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1741.142805][ T610] 8021q: adding VLAN 0 to HW filter on device team0 [ 1741.324974][T17770] device veth1_macvtap left promiscuous mode [ 1741.337214][T17770] device veth0_macvtap left promiscuous mode [ 1741.360005][T17770] device veth1_vlan left promiscuous mode [ 1741.382316][ T802] netlink: 'syz.4.9174': attribute type 3 has an invalid length. [ 1741.402532][T17770] device veth0_vlan left promiscuous mode [ 1741.619038][ T801] netlink: 'syz.1.9175': attribute type 2 has an invalid length. [ 1743.614983][T17770] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1743.688463][T17770] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1744.218894][T17770] bond0 (unregistering): Released all slaves [ 1744.301801][ T810] netlink: 'syz.1.9175': attribute type 1 has an invalid length. [ 1744.376315][ T801] device 2 entered promiscuous mode [ 1744.420010][T17773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1744.440298][T17773] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1744.451642][T17773] bridge0: port 1(bridge_slave_0) entered blocking state [ 1744.458864][T17773] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1744.480894][T17773] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1744.570140][T17772] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1744.591049][T17772] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1744.614567][T17772] bridge0: port 2(bridge_slave_1) entered blocking state [ 1744.621832][T17772] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1744.723586][T17763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1744.750851][T17763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1744.750864][ T832] netlink: 'syz.0.9177': attribute type 3 has an invalid length. [ 1744.788534][ T832] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.9177'. [ 1744.794744][T17763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1744.872807][T17763] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1744.911446][T17763] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1744.939519][T17763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1744.957399][T17763] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1744.986847][T17763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1745.031580][T17763] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1745.086123][ T6313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1745.108068][ T6313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1745.142856][ T610] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1745.429637][ T845] delete_channel: no stack [ 1745.993797][ T869] netlink: 'syz.0.9185': attribute type 3 has an invalid length. [ 1746.407820][T24537] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1746.436488][T24537] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1746.509102][ T893] netlink: 'syz.0.9189': attribute type 2 has an invalid length. [ 1746.611758][ T610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1746.625107][ T893] device 0 entered promiscuous mode [ 1748.739731][ T911] netlink: 14 bytes leftover after parsing attributes in process `syz.4.9192'. [ 1749.140033][ T926] netlink: 64 bytes leftover after parsing attributes in process `syz.1.9193'. [ 1749.174517][ T926] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1749.313284][ T6313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1749.331432][ T6313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1749.468715][ T6313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1749.507334][ T6313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1749.531621][ T6313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1749.553530][ T6313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1749.567272][ T947] netlink: 'syz.1.9198': attribute type 3 has an invalid length. [ 1749.579349][ T610] device veth0_vlan entered promiscuous mode [ 1749.648122][ T610] device veth1_vlan entered promiscuous mode [ 1749.730385][ T6313] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1749.769643][ T6313] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1749.790554][ T6313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1749.808477][ T6313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1749.835316][ T610] device veth0_macvtap entered promiscuous mode [ 1749.863012][ T610] device veth1_macvtap entered promiscuous mode [ 1750.018752][ T610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1750.049531][ T610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1750.069654][ T610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1750.106987][ T610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1750.140538][ T610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1750.175304][T24537] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1750.190239][T24537] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1750.206873][T24537] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1750.224648][T24537] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1750.265977][ T610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1750.300218][ T610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1750.310669][ T610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1750.331907][ T610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1750.352534][ T610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1750.377831][ T610] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1750.412192][ T610] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1750.429666][ T610] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1750.450645][ T610] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1750.486911][ T6313] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1750.516501][ T6313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1750.561995][T17772] tipc: Subscription rejected, illegal request [ 1750.785994][ T967] netlink: 'syz.0.9204': attribute type 2 has an invalid length. [ 1750.840055][ T967] netlink: 'syz.0.9204': attribute type 8 has an invalid length. [ 1750.847889][ T967] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9204'. [ 1751.032673][ T6313] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1751.050328][ T6313] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1751.102681][ T6313] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1751.149866][ T974] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9206'. [ 1751.166044][ T974] netlink: 152 bytes leftover after parsing attributes in process `syz.1.9206'. [ 1751.211956][ T6313] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1751.293102][ T974] netlink: 'syz.1.9206': attribute type 275 has an invalid length. [ 1751.301439][ T6313] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1751.311490][ T6310] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1751.688215][ T989] netlink: 'syz.0.9211': attribute type 29 has an invalid length. [ 1751.710321][ T989] netlink: 'syz.0.9211': attribute type 29 has an invalid length. [ 1752.012473][ T999] netlink: 'syz.3.9209': attribute type 3 has an invalid length. [ 1752.022596][ T998] netlink: 'syz.0.9212': attribute type 10 has an invalid length. [ 1752.664694][ T998] team0 (unregistering): Port device team_slave_0 removed [ 1752.763198][ T998] team0 (unregistering): Port device team_slave_1 removed [ 1752.836833][ T1027] netlink: 'syz.3.9219': attribute type 29 has an invalid length. [ 1752.874315][ T1027] netlink: 'syz.3.9219': attribute type 29 has an invalid length. [ 1752.927608][ T6313] tipc: Subscription rejected, illegal request [ 1753.101885][ T1028] netlink: 'syz.4.9218': attribute type 2 has an invalid length. [ 1753.123135][ T1028] netlink: 'syz.4.9218': attribute type 8 has an invalid length. [ 1753.148940][ T1028] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9218'. [ 1753.246576][ T1029] netlink: 'syz.3.9219': attribute type 29 has an invalid length. [ 1754.636223][ T4289] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1754.668170][T11312] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1754.679447][T11312] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1754.745170][T11312] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1754.788011][T11312] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1754.798837][T11312] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1755.289166][ T1052] chnl_net:caif_netlink_parms(): no params data found [ 1755.988497][ T1061] team0 (unregistering): Port device team_slave_0 removed [ 1756.036882][ T1061] team0 (unregistering): Port device team_slave_1 removed [ 1756.105938][ T1052] bridge0: port 1(bridge_slave_0) entered blocking state [ 1756.141697][ T1052] bridge0: port 1(bridge_slave_0) entered disabled state [ 1756.158088][ T1052] device bridge_slave_0 entered promiscuous mode [ 1756.239311][T24537] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1756.278422][ T1052] bridge0: port 2(bridge_slave_1) entered blocking state [ 1756.286198][ T1052] bridge0: port 2(bridge_slave_1) entered disabled state [ 1756.296056][ T1052] device bridge_slave_1 entered promiscuous mode [ 1756.303810][ T1083] netlink: 44 bytes leftover after parsing attributes in process `syz.4.9236'. [ 1756.385273][ T1052] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1756.408399][ T1085] validate_nla: 6 callbacks suppressed [ 1756.408417][ T1085] netlink: 'syz.2.9235': attribute type 2 has an invalid length. [ 1756.451466][ T1085] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.9235'. [ 1756.495088][T24537] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1756.512496][ T1052] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1756.585121][T24537] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1756.612878][ T1052] team0: Port device team_slave_0 added [ 1756.643698][ T1052] team0: Port device team_slave_1 added [ 1756.771823][T24537] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1756.814370][ T1052] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1756.841866][ T1052] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1756.850529][T32354] Bluetooth: hci3: command 0x0409 tx timeout [ 1756.884486][ T6310] tipc: Subscription rejected, illegal request [ 1756.950010][ T1052] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1756.981514][ T1096] netlink: 'syz.0.9241': attribute type 39 has an invalid length. [ 1757.739168][ T1099] netlink: 'syz.2.9239': attribute type 2 has an invalid length. [ 1757.757409][ T1099] netlink: 'syz.2.9239': attribute type 8 has an invalid length. [ 1757.765441][ T1099] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9239'. [ 1757.776154][ T1052] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1757.798266][ T1052] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1757.856009][ T1052] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1758.037370][ T1052] device hsr_slave_0 entered promiscuous mode [ 1758.059791][ T1052] device hsr_slave_1 entered promiscuous mode [ 1758.082914][ T1052] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1758.105791][ T1052] Cannot create hsr debugfs directory [ 1758.911758][T24537] device 0 left promiscuous mode [ 1758.930549][T11312] Bluetooth: hci3: command 0x041b tx timeout [ 1759.018939][T24537] device 1 left promiscuous mode [ 1759.037637][ T1130] netlink: 'syz.3.9250': attribute type 2 has an invalid length. [ 1759.052949][ T1130] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.9250'. [ 1759.234316][T24537] device 0 left promiscuous mode [ 1759.343215][T24537] device 1 left promiscuous mode [ 1759.390049][ T1137] netlink: 'syz.4.9252': attribute type 275 has an invalid length. [ 1759.474932][T24537] device 2 left promiscuous mode [ 1759.585127][T24537] device 2 left promiscuous mode [ 1760.184410][ T1052] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1760.359962][ T1052] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1760.508478][ T1180] netlink: 'syz.0.9263': attribute type 2 has an invalid length. [ 1760.530605][ T1180] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.9263'. [ 1760.565322][ T1052] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1760.586676][ T1052] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1761.009892][T11312] Bluetooth: hci3: command 0x040f tx timeout [ 1761.324126][ T1052] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1761.400464][T17773] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1761.414672][T17773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1761.486969][ T1052] 8021q: adding VLAN 0 to HW filter on device team0 [ 1761.581627][T17773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1761.608640][T17773] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1761.652641][T17773] bridge0: port 1(bridge_slave_0) entered blocking state [ 1761.659880][T17773] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1761.690631][T17773] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1761.715421][T17773] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1761.740561][T17773] bridge0: port 2(bridge_slave_1) entered blocking state [ 1761.747778][T17773] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1761.819312][T17773] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1761.848244][T17773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1761.879343][T17773] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1761.926478][T17772] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1761.956378][T17772] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1762.046278][T17772] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1762.080122][T17772] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1762.101391][T17772] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1762.156737][ T1052] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1762.209543][ T1052] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1762.290657][T17772] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1762.299305][T17772] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1762.436548][T17772] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1762.476039][T17772] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1762.504144][T17772] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1762.727850][ T1243] netlink: 'syz.3.9280': attribute type 3 has an invalid length. [ 1762.763720][ T1236] netlink: 'syz.4.9279': attribute type 12 has an invalid length. [ 1762.809298][ T1239] bridge0: port 2(bridge_slave_1) entered disabled state [ 1762.876776][ T1239] device bridge_slave_0 left promiscuous mode [ 1762.892755][ T1239] bridge0: port 1(bridge_slave_0) entered disabled state [ 1763.089838][T11312] Bluetooth: hci3: command 0x0419 tx timeout [ 1763.366717][ T1251] netlink: 'syz.0.9282': attribute type 9 has an invalid length. [ 1763.841904][T17773] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1763.880537][T17773] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1763.959770][ T1052] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1764.008791][T24537] device veth1_macvtap left promiscuous mode [ 1764.020088][T24537] device veth0_macvtap left promiscuous mode [ 1764.026805][T24537] device veth1_vlan left promiscuous mode [ 1764.054407][T24537] device veth0_vlan left promiscuous mode [ 1765.550756][T24537] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1765.597186][T24537] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1765.641652][T24537] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 1765.833569][T24537] bond0 (unregistering): Released all slaves [ 1765.879612][ T1269] netlink: 'syz.2.9287': attribute type 2 has an invalid length. [ 1765.887406][ T1269] netlink: 'syz.2.9287': attribute type 8 has an invalid length. [ 1765.901115][ T1269] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9287'. [ 1765.946226][ T6310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1765.973044][ T6310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1766.005756][ T6310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1766.035933][ T6310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1766.088940][ T1052] device veth0_vlan entered promiscuous mode [ 1766.129693][ T6310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1766.137648][ T6310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1766.183661][ T1052] device veth1_vlan entered promiscuous mode [ 1766.301770][ T6310] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1766.330349][ T6310] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1766.349032][ T6310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1766.371009][ T6310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1766.388221][ T1298] netlink: 'syz.2.9298': attribute type 2 has an invalid length. [ 1766.409575][ T1298] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.9298'. [ 1766.447474][ T1052] device veth0_macvtap entered promiscuous mode [ 1766.484646][ T1052] device veth1_macvtap entered promiscuous mode [ 1766.613991][ T1052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1766.633311][ T1052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1766.643759][ T1052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1766.654866][ T1052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1766.664983][ T1052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1766.675602][ T1052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1766.709029][ T1052] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1766.748176][T17772] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1766.767128][T17772] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1766.790673][T17772] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1766.832001][T17772] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1766.881701][ T1052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1766.897156][ T1052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1766.920384][ T1052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1766.949148][ T1052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1766.965372][ T1052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1766.976301][ T1052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1766.988149][ T1052] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1767.009294][ T1052] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1767.030136][ T1052] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1767.045800][ T1052] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1767.055043][ T1052] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1767.068632][T17772] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1767.085767][T17772] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1767.331789][T17763] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1767.370935][T17763] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1767.412123][T17772] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1767.481460][ T1321] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.9306'. [ 1767.506284][T17772] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1767.540667][T17772] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1767.550566][ T1324] netlink: 'syz.2.9308': attribute type 10 has an invalid length. [ 1768.045263][ T1324] team0 (unregistering): Port device team_slave_0 removed [ 1768.257035][ T1324] team0 (unregistering): Port device team_slave_1 removed [ 1768.365654][T17772] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1768.584730][ T1342] netlink: 56843 bytes leftover after parsing attributes in process `syz.1.9228'. [ 1768.797105][ T1349] netlink: 'syz.4.9316': attribute type 3 has an invalid length. [ 1769.116405][ T1359] netlink: 'syz.3.9320': attribute type 39 has an invalid length. [ 1769.319286][ T1368] netlink: 212168 bytes leftover after parsing attributes in process `syz.2.9323'. [ 1769.386931][ T1359] device hsr_slave_1 left promiscuous mode [ 1769.871751][ T1378] FAULT_INJECTION: forcing a failure. [ 1769.871751][ T1378] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1769.939663][ T1378] CPU: 0 PID: 1378 Comm: syz.4.9329 Not tainted syzkaller #0 [ 1769.947131][ T1378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1769.957242][ T1378] Call Trace: [ 1769.960570][ T1378] [ 1769.963555][ T1378] dump_stack_lvl+0x188/0x24e [ 1769.968324][ T1378] ? show_regs_print_info+0x12/0x12 [ 1769.973573][ T1378] ? load_image+0x410/0x410 [ 1769.978128][ T1378] ? __lock_acquire+0x7c40/0x7c40 [ 1769.983211][ T1378] ? __rcu_read_unlock+0x78/0xd0 [ 1769.988195][ T1378] should_fail_ex+0x390/0x4c0 [ 1769.992938][ T1378] _copy_to_user+0x2c/0x130 [ 1769.997494][ T1378] bpf_test_finish+0x266/0x600 [ 1770.002288][ T1378] ? dst_hold+0xb0/0xb0 [ 1770.006468][ T1378] ? convert_skb_to___skb+0x420/0x420 [ 1770.011881][ T1378] bpf_prog_test_run_xdp+0x827/0xf80 [ 1770.017202][ T1378] ? __lock_acquire+0x7c40/0x7c40 [ 1770.022269][ T1378] ? dev_put+0x80/0x80 [ 1770.026378][ T1378] ? dev_put+0x80/0x80 [ 1770.030469][ T1378] bpf_prog_test_run+0x31c/0x390 [ 1770.035438][ T1378] __sys_bpf+0x62b/0x780 [ 1770.039716][ T1378] ? bpf_link_show_fdinfo+0x380/0x380 [ 1770.045161][ T1378] ? lock_chain_count+0x20/0x20 [ 1770.050064][ T1378] __x64_sys_bpf+0x78/0x90 [ 1770.054515][ T1378] do_syscall_64+0x4c/0xa0 [ 1770.059013][ T1378] ? clear_bhb_loop+0x60/0xb0 [ 1770.063748][ T1378] ? clear_bhb_loop+0x60/0xb0 [ 1770.068460][ T1378] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1770.074385][ T1378] RIP: 0033:0x7f47fb79de59 [ 1770.078830][ T1378] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1770.098566][ T1378] RSP: 002b:00007f47f99f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1770.107034][ T1378] RAX: ffffffffffffffda RBX: 00007f47fba25fa0 RCX: 00007f47fb79de59 [ 1770.115036][ T1378] RDX: 0000000000000050 RSI: 0000200000000c80 RDI: 000000000000000a [ 1770.123036][ T1378] RBP: 00007f47f99f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1770.131029][ T1378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1770.139115][ T1378] R13: 00007f47fba26038 R14: 00007f47fba25fa0 R15: 00007ffddd788518 [ 1770.147142][ T1378] [ 1771.272465][ T1417] device syzkaller0 entered promiscuous mode [ 1771.343189][ T1425] netlink: 'syz.1.9348': attribute type 3 has an invalid length. [ 1773.735924][ T1449] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9355'. [ 1773.770704][ T1444] Ÿë: port 1(veth0_to_team) entered blocking state [ 1773.784532][ T1444] Ÿë: port 1(veth0_to_team) entered disabled state [ 1773.822962][ T1444] device veth0_to_team entered promiscuous mode [ 1774.177281][ T1456] netlink: 'syz.4.9360': attribute type 10 has an invalid length. [ 1774.235352][ T1456] netlink: 2 bytes leftover after parsing attributes in process `syz.4.9360'. [ 1774.928341][T24872] bond0: (slave syz_tun): Releasing backup interface [ 1775.081706][T17772] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1775.120098][T11312] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1775.125723][ T1475] netlink: 'syz.2.9366': attribute type 9 has an invalid length. [ 1775.137751][T11312] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1775.146232][T11312] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1775.154295][T11312] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1775.169568][T11312] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1775.178863][T11312] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1775.278781][T17772] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1775.486104][T17772] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1775.586971][ T1490] Ÿë: port 1(veth0_to_team) entered blocking state [ 1775.595274][ T1490] Ÿë: port 1(veth0_to_team) entered disabled state [ 1775.603351][ T1490] device veth0_to_team entered promiscuous mode [ 1775.666469][T17772] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1775.728365][ T1494] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1775.742184][ T1494] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1776.160294][T17772] device 0 left promiscuous mode [ 1776.288086][ T1474] chnl_net:caif_netlink_parms(): no params data found [ 1776.723171][ T1474] bridge0: port 1(bridge_slave_0) entered blocking state [ 1776.730461][ T1474] bridge0: port 1(bridge_slave_0) entered disabled state [ 1776.738676][ T1474] device bridge_slave_0 entered promiscuous mode [ 1776.748197][ T1474] bridge0: port 2(bridge_slave_1) entered blocking state [ 1776.756416][ T1474] bridge0: port 2(bridge_slave_1) entered disabled state [ 1776.765293][ T1474] device bridge_slave_1 entered promiscuous mode [ 1776.879009][ T1474] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1776.946063][ T1538] netlink: 'syz.3.9382': attribute type 29 has an invalid length. [ 1776.982408][ T1474] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1777.173505][ T1538] netlink: 'syz.3.9382': attribute type 29 has an invalid length. [ 1777.250045][T32354] Bluetooth: hci2: command 0x0409 tx timeout [ 1777.317988][ T1474] team0: Port device team_slave_0 added [ 1777.332361][ T1474] team0: Port device team_slave_1 added [ 1777.358160][ T1474] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1777.365289][ T1474] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1777.404737][ T1474] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1777.511617][ T1548] Ÿë: port 1(veth0_to_team) entered blocking state [ 1777.518368][ T1548] Ÿë: port 1(veth0_to_team) entered disabled state [ 1777.567285][ T1548] device veth0_to_team entered promiscuous mode [ 1777.616731][ T1474] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1777.635265][ T1474] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1777.736167][ T1474] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1777.806879][ T1537] netlink: 'syz.3.9382': attribute type 29 has an invalid length. [ 1777.876468][ T1559] netlink: 'syz.4.9387': attribute type 10 has an invalid length. [ 1778.101929][ T1474] device hsr_slave_0 entered promiscuous mode [ 1778.125886][ T1474] device hsr_slave_1 entered promiscuous mode [ 1778.140492][ T1474] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1778.158341][ T1474] Cannot create hsr debugfs directory [ 1778.368645][ T1572] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.9392'. [ 1779.002394][T17772] device veth1_macvtap left promiscuous mode [ 1779.036894][T17772] device veth0_macvtap left promiscuous mode [ 1779.074826][T17772] device veth1_vlan left promiscuous mode [ 1779.329752][T32354] Bluetooth: hci2: command 0x041b tx timeout [ 1780.974301][T17772] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1781.007183][T17772] device bond_slave_1 left promiscuous mode [ 1781.162836][T17772] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1781.200462][T17772] device bond_slave_0 left promiscuous mode [ 1781.409750][T32354] Bluetooth: hci2: command 0x040f tx timeout [ 1781.734805][T17772] bond0 (unregistering): Released all slaves [ 1783.489595][T32354] Bluetooth: hci2: command 0x0419 tx timeout [ 1783.502877][ T1474] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1783.572546][ T1474] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1783.639132][ T1474] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1783.658977][ T1667] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.9419'. [ 1783.689974][ T1474] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1784.171807][ T1474] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1784.216590][ T1474] 8021q: adding VLAN 0 to HW filter on device team0 [ 1784.261207][ T6310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1784.276666][ T6310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1784.306401][ T1685] netlink: 180 bytes leftover after parsing attributes in process `syz.1.9433'. [ 1784.338899][T17772] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1784.370222][T17772] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1784.383396][T17772] bridge0: port 1(bridge_slave_0) entered blocking state [ 1784.390606][T17772] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1784.430700][T17772] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1784.501915][T17772] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1784.582169][T17772] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1784.636657][T17772] bridge0: port 2(bridge_slave_1) entered blocking state [ 1784.643908][T17772] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1784.715382][T17772] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1784.755682][T17772] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1784.811433][T17772] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1784.853393][T17772] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1784.931437][T17772] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1784.953554][T17772] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1784.981630][T17772] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1785.029477][T17772] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1785.044383][T17772] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1785.086573][ T6310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1785.100599][ T6310] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1785.128529][ T1474] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1785.641333][ T1722] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.9437'. [ 1786.100525][T17763] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1786.118373][T17763] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1786.135025][ T1474] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1786.167057][ T1741] netlink: 'syz.4.9441': attribute type 21 has an invalid length. [ 1786.179413][ T1741] netlink: 'syz.4.9441': attribute type 10 has an invalid length. [ 1786.188732][ T1741] netlink: 'syz.4.9441': attribute type 12 has an invalid length. [ 1786.198385][ T1741] netlink: 'syz.4.9441': attribute type 13 has an invalid length. [ 1786.207404][ T1743] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9441'. [ 1786.216730][ T1741] netlink: 'syz.4.9441': attribute type 14 has an invalid length. [ 1786.229205][ T1741] netlink: 'syz.4.9441': attribute type 15 has an invalid length. [ 1786.242694][ T1741] netlink: 'syz.4.9441': attribute type 16 has an invalid length. [ 1786.254332][ T1741] netlink: 'syz.4.9441': attribute type 19 has an invalid length. [ 1786.265474][ T1741] netlink: 'syz.4.9441': attribute type 21 has an invalid length. [ 1786.278872][ T1741] netlink: 'syz.4.9441': attribute type 22 has an invalid length. [ 1786.295611][ T1741] netlink: 12226 bytes leftover after parsing attributes in process `syz.4.9441'. [ 1786.354686][T17763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1786.380702][T17763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1786.509455][T17763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1786.527340][T17763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1786.552925][T17763] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1786.578223][T17763] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1786.630410][ T1750] netlink: 2 bytes leftover after parsing attributes in process `syz.1.9451'. [ 1786.660230][ T1750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1786.700831][ T1750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1786.739722][ T1750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1786.781466][ T1750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1786.821105][ T1750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1786.870435][ T1750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1786.927453][ T1750] device batadv_slave_1 entered promiscuous mode [ 1786.979351][ T1474] device veth0_vlan entered promiscuous mode [ 1787.160083][ T1474] device veth1_vlan entered promiscuous mode [ 1787.370009][T17773] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1787.406389][T17773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1787.462626][ T1474] device veth0_macvtap entered promiscuous mode [ 1787.517059][ T1474] device veth1_macvtap entered promiscuous mode [ 1787.601519][ T1474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1787.638749][ T1474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1787.686917][ T1474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1787.720620][ T1474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1787.758855][ T1474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1787.770239][ T1474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1787.780500][ T1474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1787.792840][ T1474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1787.823593][ T1474] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1787.868732][ T1474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1787.904015][ T1474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1787.924310][ T1474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1787.945498][ T1474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1787.987528][ T1474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1788.017096][ T1474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1788.030028][ T1474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1788.053524][ T1474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1788.081811][ T1474] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1788.099109][ T6310] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1788.117891][ T6310] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1788.149072][ T6310] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1788.185107][ T6310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1788.207469][ T6310] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1788.232481][ T6310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1788.267903][ T1474] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1788.284137][ T1474] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1788.309448][ T1474] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1788.330768][ T1474] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1788.615654][ T6310] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1788.637080][ T6310] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1788.694021][T17763] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1788.738813][T24537] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1788.775562][T24537] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1788.802011][T17770] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1788.827014][ T1796] netlink: 44 bytes leftover after parsing attributes in process `syz.3.9453'. [ 1789.111850][ T1802] FAULT_INJECTION: forcing a failure. [ 1789.111850][ T1802] name failslab, interval 1, probability 0, space 0, times 0 [ 1789.149561][ T1802] CPU: 1 PID: 1802 Comm: syz.4.9463 Not tainted syzkaller #0 [ 1789.157013][ T1802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1789.167112][ T1802] Call Trace: [ 1789.170430][ T1802] [ 1789.173411][ T1802] dump_stack_lvl+0x188/0x24e [ 1789.178150][ T1802] ? show_regs_print_info+0x12/0x12 [ 1789.183408][ T1802] ? load_image+0x410/0x410 [ 1789.188000][ T1802] ? __lock_acquire+0x7c40/0x7c40 [ 1789.193083][ T1802] should_fail_ex+0x390/0x4c0 [ 1789.197813][ T1802] should_failslab+0x5/0x20 [ 1789.202358][ T1802] slab_pre_alloc_hook+0x59/0x300 [ 1789.207423][ T1802] ? verify_lock_unused+0x140/0x140 [ 1789.212676][ T1802] ? bpf_test_init+0x9f/0x140 [ 1789.217411][ T1802] __kmem_cache_alloc_node+0x4f/0x270 [ 1789.222826][ T1802] ? bpf_test_init+0x9f/0x140 [ 1789.227547][ T1802] __kmalloc+0xa3/0x240 [ 1789.231749][ T1802] bpf_test_init+0x9f/0x140 [ 1789.236279][ T1802] bpf_prog_test_run_xdp+0x488/0xf80 [ 1789.241602][ T1802] ? __lock_acquire+0x7c40/0x7c40 [ 1789.246672][ T1802] ? dev_put+0x80/0x80 [ 1789.250801][ T1802] ? dev_put+0x80/0x80 [ 1789.254905][ T1802] bpf_prog_test_run+0x31c/0x390 [ 1789.259903][ T1802] __sys_bpf+0x62b/0x780 [ 1789.264199][ T1802] ? bpf_link_show_fdinfo+0x380/0x380 [ 1789.269635][ T1802] ? lock_chain_count+0x20/0x20 [ 1789.274551][ T1802] __x64_sys_bpf+0x78/0x90 [ 1789.279001][ T1802] do_syscall_64+0x4c/0xa0 [ 1789.283489][ T1802] ? clear_bhb_loop+0x60/0xb0 [ 1789.288211][ T1802] ? clear_bhb_loop+0x60/0xb0 [ 1789.292929][ T1802] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1789.298855][ T1802] RIP: 0033:0x7f47fb79de59 [ 1789.303298][ T1802] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1789.322928][ T1802] RSP: 002b:00007f47f99f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1789.331363][ T1802] RAX: ffffffffffffffda RBX: 00007f47fba25fa0 RCX: 00007f47fb79de59 [ 1789.339358][ T1802] RDX: 000000000000004c RSI: 0000200000000340 RDI: 000000000000000a [ 1789.347348][ T1802] RBP: 00007f47f99f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1789.355366][ T1802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1789.363360][ T1802] R13: 00007f47fba26038 R14: 00007f47fba25fa0 R15: 00007ffddd788518 [ 1789.371369][ T1802] [ 1789.536187][ T1805] device syzkaller0 entered promiscuous mode [ 1789.867531][ T1820] netlink: 164 bytes leftover after parsing attributes in process `syz.4.9456'. [ 1791.573608][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.580076][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1793.889299][ T1849] validate_nla: 1 callbacks suppressed [ 1793.889347][ T1849] netlink: 'syz.2.9460': attribute type 2 has an invalid length. [ 1793.950298][ T1849] netlink: 164 bytes leftover after parsing attributes in process `syz.2.9460'. [ 1794.272787][ T1859] netlink: 'syz.2.9465': attribute type 25 has an invalid length. [ 1794.291021][ T1859] netlink: 'syz.2.9465': attribute type 29 has an invalid length. [ 1794.317004][ T1859] netlink: 5 bytes leftover after parsing attributes in process `syz.2.9465'. [ 1797.105861][ T1877] netlink: 'syz.3.9469': attribute type 2 has an invalid length. [ 1797.134368][ T1877] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.9469'. [ 1797.381174][ T1891] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9473'. [ 1797.486442][ T1897] netlink: 'syz.3.9474': attribute type 16 has an invalid length. [ 1797.521129][ T1897] netlink: 164 bytes leftover after parsing attributes in process `syz.3.9474'. [ 1798.293249][ T1920] FAULT_INJECTION: forcing a failure. [ 1798.293249][ T1920] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1798.338551][ T1920] CPU: 1 PID: 1920 Comm: syz.1.9481 Not tainted syzkaller #0 [ 1798.346036][ T1920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1798.356187][ T1920] Call Trace: [ 1798.359532][ T1920] [ 1798.362531][ T1920] dump_stack_lvl+0x188/0x24e [ 1798.367311][ T1920] ? show_regs_print_info+0x12/0x12 [ 1798.372608][ T1920] ? load_image+0x410/0x410 [ 1798.377197][ T1920] ? __lock_acquire+0x7c40/0x7c40 [ 1798.382322][ T1920] should_fail_ex+0x390/0x4c0 [ 1798.387082][ T1920] _copy_from_user+0x2c/0x170 [ 1798.391837][ T1920] iovec_from_user+0x143/0x360 [ 1798.396684][ T1920] __import_iovec+0x6c/0x510 [ 1798.401373][ T1920] import_iovec+0x6f/0xa0 [ 1798.405788][ T1920] ___sys_sendmsg+0x252/0x360 [ 1798.410561][ T1920] ? __sys_sendmsg+0x2a0/0x2a0 [ 1798.415479][ T1920] ? __lock_acquire+0x7c40/0x7c40 [ 1798.420654][ T1920] __se_sys_sendmsg+0x1c3/0x2b0 [ 1798.425566][ T1920] ? __x64_sys_sendmsg+0x80/0x80 [ 1798.430597][ T1920] ? lockdep_hardirqs_on+0x94/0x140 [ 1798.435863][ T1920] do_syscall_64+0x4c/0xa0 [ 1798.440337][ T1920] ? clear_bhb_loop+0x60/0xb0 [ 1798.445059][ T1920] ? clear_bhb_loop+0x60/0xb0 [ 1798.449793][ T1920] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1798.455758][ T1920] RIP: 0033:0x7f624459de59 [ 1798.460236][ T1920] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1798.479906][ T1920] RSP: 002b:00007f62453d8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1798.488382][ T1920] RAX: ffffffffffffffda RBX: 00007f6244825fa0 RCX: 00007f624459de59 [ 1798.496395][ T1920] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005 [ 1798.504407][ T1920] RBP: 00007f62453d8090 R08: 0000000000000000 R09: 0000000000000000 [ 1798.512440][ T1920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1798.520538][ T1920] R13: 00007f6244826038 R14: 00007f6244825fa0 R15: 00007ffc04e96508 [ 1798.528616][ T1920] [ 1799.095206][ T1938] netlink: 'syz.1.9485': attribute type 2 has an invalid length. [ 1799.128594][ T1938] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.9485'. [ 1799.146372][ T1941] netlink: 'syz.0.9489': attribute type 10 has an invalid length. [ 1799.309143][ T1941] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1799.328450][ T1941] team0: Port device bond0 added [ 1799.373618][ T1946] netlink: 14 bytes leftover after parsing attributes in process `syz.3.9491'. [ 1799.391754][ T1946] device hsr_slave_0 left promiscuous mode [ 1799.736361][ T1955] netlink: 'syz.4.9494': attribute type 20 has an invalid length. [ 1799.764222][ T1956] netlink: 'syz.3.9493': attribute type 25 has an invalid length. [ 1799.774326][ T1956] netlink: 'syz.3.9493': attribute type 29 has an invalid length. [ 1799.789379][ T1956] netlink: 5 bytes leftover after parsing attributes in process `syz.3.9493'. [ 1800.877632][ T1973] netlink: 44 bytes leftover after parsing attributes in process `syz.0.9501'. [ 1800.913370][ T1975] netlink: 'syz.3.9498': attribute type 2 has an invalid length. [ 1800.932733][ T1975] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.9498'. [ 1801.070581][ T1977] netlink: 'syz.2.9502': attribute type 10 has an invalid length. [ 1802.852297][ T2025] netlink: 'syz.0.9517': attribute type 2 has an invalid length. [ 1802.870755][ T2025] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.9517'. [ 1803.039999][ T2024] FAULT_INJECTION: forcing a failure. [ 1803.039999][ T2024] name failslab, interval 1, probability 0, space 0, times 0 [ 1803.064911][ T2034] netlink: 'syz.3.9521': attribute type 10 has an invalid length. [ 1803.119252][ T2024] CPU: 1 PID: 2024 Comm: syz.1.9519 Not tainted syzkaller #0 [ 1803.126805][ T2024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1803.137165][ T2024] Call Trace: [ 1803.140486][ T2024] [ 1803.143467][ T2024] dump_stack_lvl+0x188/0x24e [ 1803.148217][ T2024] ? show_regs_print_info+0x12/0x12 [ 1803.153475][ T2024] ? load_image+0x410/0x410 [ 1803.158043][ T2024] ? __might_sleep+0xd0/0xd0 [ 1803.162690][ T2024] ? __lock_acquire+0x7c40/0x7c40 [ 1803.167769][ T2024] should_fail_ex+0x390/0x4c0 [ 1803.172489][ T2024] should_failslab+0x5/0x20 [ 1803.177057][ T2024] slab_pre_alloc_hook+0x59/0x300 [ 1803.182128][ T2024] ? __lock_acquire+0x138a/0x7c40 [ 1803.187203][ T2024] ? tomoyo_realpath_from_path+0xe2/0x5c0 [ 1803.192974][ T2024] __kmem_cache_alloc_node+0x4f/0x270 [ 1803.198397][ T2024] ? tomoyo_realpath_from_path+0xe2/0x5c0 [ 1803.204169][ T2024] __kmalloc+0xa3/0x240 [ 1803.208387][ T2024] tomoyo_realpath_from_path+0xe2/0x5c0 [ 1803.214002][ T2024] ? tomoyo_domain+0xd2/0x120 [ 1803.218730][ T2024] ? tomoyo_path_number_perm+0x205/0x650 [ 1803.224408][ T2024] tomoyo_path_number_perm+0x22f/0x650 [ 1803.230088][ T2024] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1803.235594][ T2024] ? ksys_write+0x1ce/0x260 [ 1803.240250][ T2024] ? common_file_perm+0x171/0x1c0 [ 1803.245357][ T2024] ? __fget_files+0x28/0x460 [ 1803.250013][ T2024] security_file_ioctl+0x6c/0xa0 [ 1803.255015][ T2024] __se_sys_ioctl+0x48/0x170 [ 1803.259696][ T2024] do_syscall_64+0x4c/0xa0 [ 1803.264173][ T2024] ? clear_bhb_loop+0x60/0xb0 [ 1803.268911][ T2024] ? clear_bhb_loop+0x60/0xb0 [ 1803.273636][ T2024] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1803.279577][ T2024] RIP: 0033:0x7f624459de59 [ 1803.284043][ T2024] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1803.303704][ T2024] RSP: 002b:00007f62453d8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1803.312178][ T2024] RAX: ffffffffffffffda RBX: 00007f6244825fa0 RCX: 00007f624459de59 [ 1803.320197][ T2024] RDX: 0000000000010000 RSI: 0000000000002401 RDI: 0000000000000005 [ 1803.328212][ T2024] RBP: 00007f62453d8090 R08: 0000000000000000 R09: 0000000000000000 [ 1803.336228][ T2024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1803.344265][ T2024] R13: 00007f6244826038 R14: 00007f6244825fa0 R15: 00007ffc04e96508 [ 1803.352362][ T2024] [ 1803.371834][ T2024] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1803.889651][ T4289] Bluetooth: hci5: command 0x0406 tx timeout [ 1805.683268][ T2070] netlink: 'syz.3.9533': attribute type 2 has an invalid length. [ 1805.700344][ T2070] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.9533'. [ 1805.871152][ T2085] netlink: 'syz.1.9536': attribute type 10 has an invalid length. [ 1806.929730][ T2091] netlink: 'syz.2.9540': attribute type 9 has an invalid length. [ 1808.086325][ T2115] netlink: 'syz.0.9547': attribute type 27 has an invalid length. [ 1808.328506][ T2114] delete_channel: no stack [ 1808.400514][ T2119] netlink: 'syz.1.9548': attribute type 2 has an invalid length. [ 1808.439902][ T2119] netlink: 'syz.1.9548': attribute type 8 has an invalid length. [ 1808.461932][ T2119] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9548'. [ 1808.475263][ T2127] netlink: 'syz.3.9551': attribute type 2 has an invalid length. [ 1808.490713][ T2127] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.9551'. [ 1810.139845][ T2156] netlink: 'syz.2.9562': attribute type 10 has an invalid length. [ 1810.392130][ T2165] netlink: 'syz.4.9565': attribute type 2 has an invalid length. [ 1810.449942][ T2165] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.9565'. [ 1810.760904][ T2180] netlink: 198580 bytes leftover after parsing attributes in process `syz.2.9571'. [ 1811.345834][ T2191] netlink: 212168 bytes leftover after parsing attributes in process `syz.3.9574'. [ 1811.702136][ T2200] netlink: 'syz.2.9578': attribute type 21 has an invalid length. [ 1811.734351][ T2200] netlink: 128 bytes leftover after parsing attributes in process `syz.2.9578'. [ 1811.748264][ T2200] netlink: 'syz.2.9578': attribute type 4 has an invalid length. [ 1811.770397][ T2200] netlink: 'syz.2.9578': attribute type 5 has an invalid length. [ 1811.799504][ T2200] netlink: 3 bytes leftover after parsing attributes in process `syz.2.9578'. [ 1811.882302][ T2204] FAULT_INJECTION: forcing a failure. [ 1811.882302][ T2204] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1811.988704][ T2204] CPU: 0 PID: 2204 Comm: syz.4.9579 Not tainted syzkaller #0 [ 1811.996179][ T2204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1812.006274][ T2204] Call Trace: [ 1812.009585][ T2204] [ 1812.012550][ T2204] dump_stack_lvl+0x188/0x24e [ 1812.017297][ T2204] ? show_regs_print_info+0x12/0x12 [ 1812.022559][ T2204] ? load_image+0x410/0x410 [ 1812.027122][ T2204] ? __lock_acquire+0x7c40/0x7c40 [ 1812.032209][ T2204] ? __rcu_read_unlock+0x78/0xd0 [ 1812.037197][ T2204] should_fail_ex+0x390/0x4c0 [ 1812.041926][ T2204] _copy_to_user+0x2c/0x130 [ 1812.046482][ T2204] bpf_test_finish+0x4a2/0x600 [ 1812.051297][ T2204] ? dst_hold+0xb0/0xb0 [ 1812.055502][ T2204] ? convert_skb_to___skb+0x420/0x420 [ 1812.060934][ T2204] bpf_prog_test_run_xdp+0x827/0xf80 [ 1812.066269][ T2204] ? __lock_acquire+0x7c40/0x7c40 [ 1812.071366][ T2204] ? dev_put+0x80/0x80 [ 1812.075507][ T2204] ? dev_put+0x80/0x80 [ 1812.079630][ T2204] bpf_prog_test_run+0x31c/0x390 [ 1812.084654][ T2204] __sys_bpf+0x62b/0x780 [ 1812.088968][ T2204] ? bpf_link_show_fdinfo+0x380/0x380 [ 1812.094425][ T2204] ? lock_chain_count+0x20/0x20 [ 1812.099348][ T2204] __x64_sys_bpf+0x78/0x90 [ 1812.103824][ T2204] do_syscall_64+0x4c/0xa0 [ 1812.108318][ T2204] ? clear_bhb_loop+0x60/0xb0 [ 1812.113139][ T2204] ? clear_bhb_loop+0x60/0xb0 [ 1812.117886][ T2204] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1812.123844][ T2204] RIP: 0033:0x7f47fb79de59 [ 1812.128308][ T2204] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1812.147963][ T2204] RSP: 002b:00007f47f99f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1812.156560][ T2204] RAX: ffffffffffffffda RBX: 00007f47fba25fa0 RCX: 00007f47fb79de59 [ 1812.164589][ T2204] RDX: 0000000000000050 RSI: 0000200000000c80 RDI: 000000000000000a [ 1812.172603][ T2204] RBP: 00007f47f99f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1812.180624][ T2204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1812.188666][ T2204] R13: 00007f47fba26038 R14: 00007f47fba25fa0 R15: 00007ffddd788518 [ 1812.196696][ T2204] [ 1812.505546][ T2213] netlink: 'syz.2.9582': attribute type 2 has an invalid length. [ 1812.570105][ T2213] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.9582'. [ 1812.620357][ T2217] netlink: 'syz.0.9584': attribute type 3 has an invalid length. [ 1812.629771][ T2215] netlink: 'syz.1.9583': attribute type 2 has an invalid length. [ 1812.637804][ T2215] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.9583'. [ 1813.078967][ T2226] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.9585'. [ 1813.118244][ T2229] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9589'. [ 1813.345234][ T2240] netlink: 'syz.3.9592': attribute type 10 has an invalid length. [ 1813.359646][ T2240] netlink: 2 bytes leftover after parsing attributes in process `syz.3.9592'. [ 1813.501985][ T2246] netlink: 'syz.2.9594': attribute type 21 has an invalid length. [ 1813.539854][ T2246] netlink: 168 bytes leftover after parsing attributes in process `syz.2.9594'. [ 1813.816800][ T2257] netlink: 'syz.2.9598': attribute type 3 has an invalid length. [ 1813.910781][ T2258] netlink: 'syz.0.9599': attribute type 2 has an invalid length. [ 1815.029789][ T2296] device dummy0 entered promiscuous mode [ 1815.036530][ T2296] bridge0: port 3(dummy0) entered blocking state [ 1815.105318][ T2296] bridge0: port 3(dummy0) entered disabled state [ 1815.126449][ T2296] bridge0: port 3(dummy0) entered blocking state [ 1815.133020][ T2296] bridge0: port 3(dummy0) entered forwarding state [ 1815.275332][ T2296] openvswitch: netlink: Flow key attr not present in new flow. [ 1816.476217][ T2335] __nla_validate_parse: 4 callbacks suppressed [ 1816.476257][ T2335] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.9629'. [ 1816.729170][ T2344] FAULT_INJECTION: forcing a failure. [ 1816.729170][ T2344] name failslab, interval 1, probability 0, space 0, times 0 [ 1816.764287][ T2344] CPU: 1 PID: 2344 Comm: syz.2.9633 Not tainted syzkaller #0 [ 1816.771755][ T2344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1816.781854][ T2344] Call Trace: [ 1816.785168][ T2344] [ 1816.788167][ T2344] dump_stack_lvl+0x188/0x24e [ 1816.792901][ T2344] ? show_regs_print_info+0x12/0x12 [ 1816.798153][ T2344] ? load_image+0x410/0x410 [ 1816.802710][ T2344] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1816.808747][ T2344] ? lock_chain_count+0x20/0x20 [ 1816.813657][ T2344] should_fail_ex+0x390/0x4c0 [ 1816.818392][ T2344] should_failslab+0x5/0x20 [ 1816.822945][ T2344] slab_pre_alloc_hook+0x59/0x300 [ 1816.828027][ T2344] kmem_cache_alloc+0x56/0x2f0 [ 1816.832865][ T2344] ? skb_clone+0x1e7/0x370 [ 1816.837332][ T2344] skb_clone+0x1e7/0x370 [ 1816.841633][ T2344] bpf_clone_redirect+0x169/0x4a0 [ 1816.846734][ T2344] bpf_prog_b36a1f39e2fdd4f4+0x56/0x5b [ 1816.852261][ T2344] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1816.858305][ T2344] ? __lock_acquire+0x7c40/0x7c40 [ 1816.863388][ T2344] ? lock_chain_count+0x20/0x20 [ 1816.868364][ T2344] ? seqcount_lockdep_reader_access+0x127/0x1d0 [ 1816.874664][ T2344] ? lockdep_hardirqs_on+0x94/0x140 [ 1816.880089][ T2344] ? ktime_get+0x7b/0x270 [ 1816.884471][ T2344] ? seqcount_lockdep_reader_access+0x18d/0x1d0 [ 1816.890768][ T2344] ? ktime_get_real_ts64+0x440/0x440 [ 1816.896112][ T2344] ? read_lock_is_recursive+0x10/0x10 [ 1816.901542][ T2344] ? __cant_sleep+0x220/0x220 [ 1816.906275][ T2344] ? bpf_test_timer_continue+0x142/0x380 [ 1816.911962][ T2344] bpf_test_run+0x2b6/0x830 [ 1816.916541][ T2344] ? dst_hold+0xb0/0xb0 [ 1816.920750][ T2344] ? eth_get_headlen+0x200/0x200 [ 1816.925744][ T2344] ? __build_skb+0x24b/0x3b0 [ 1816.930398][ T2344] bpf_prog_test_run_skb+0xdaf/0x18e0 [ 1816.935842][ T2344] ? cpu_online+0xa0/0xa0 [ 1816.940226][ T2344] bpf_prog_test_run+0x31c/0x390 [ 1816.945329][ T2344] __sys_bpf+0x62b/0x780 [ 1816.949729][ T2344] ? bpf_link_show_fdinfo+0x380/0x380 [ 1816.955180][ T2344] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1816.961405][ T2344] __x64_sys_bpf+0x78/0x90 [ 1816.965879][ T2344] do_syscall_64+0x4c/0xa0 [ 1816.970353][ T2344] ? clear_bhb_loop+0x60/0xb0 [ 1816.975158][ T2344] ? clear_bhb_loop+0x60/0xb0 [ 1816.979973][ T2344] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1816.985927][ T2344] RIP: 0033:0x7f082c99de59 [ 1816.990470][ T2344] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1817.010119][ T2344] RSP: 002b:00007f082d7bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1817.018584][ T2344] RAX: ffffffffffffffda RBX: 00007f082cc25fa0 RCX: 00007f082c99de59 [ 1817.026604][ T2344] RDX: 0000000000000048 RSI: 0000200000000040 RDI: 000000000000000a [ 1817.034623][ T2344] RBP: 00007f082d7bf090 R08: 0000000000000000 R09: 0000000000000000 [ 1817.042637][ T2344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1817.050661][ T2344] R13: 00007f082cc26038 R14: 00007f082cc25fa0 R15: 00007ffc1990c208 [ 1817.058703][ T2344] [ 1817.198584][ T2353] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1817.586738][ T2361] validate_nla: 4 callbacks suppressed [ 1817.586775][ T2361] netlink: 'syz.4.9638': attribute type 21 has an invalid length. [ 1817.610452][ T2361] netlink: 156 bytes leftover after parsing attributes in process `syz.4.9638'. [ 1817.801452][ T2376] netlink: 'syz.1.9642': attribute type 3 has an invalid length. [ 1818.280771][ T2391] netlink: 'syz.3.9645': attribute type 2 has an invalid length. [ 1818.288903][ T2391] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.9645'. [ 1819.074810][ T2420] netlink: 'syz.0.9657': attribute type 3 has an invalid length. [ 1819.074856][ T2422] netlink: 'syz.2.9658': attribute type 10 has an invalid length. [ 1819.074878][ T2422] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9658'. [ 1819.074927][ T2422] netlink: 'syz.2.9658': attribute type 10 has an invalid length. [ 1819.074945][ T2422] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9658'. [ 1819.126391][ T2418] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.9656'. [ 1819.331424][ T2425] netlink: 'syz.4.9660': attribute type 10 has an invalid length. [ 1819.359901][ T2425] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9660'. [ 1819.379700][ T2425] batman_adv: batadv0: Adding interface: hsr_slave_1 [ 1819.389289][ T2425] batman_adv: batadv0: The MTU of interface hsr_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1819.417769][ T2425] batman_adv: batadv0: Interface activated: hsr_slave_1 [ 1820.192994][ T2464] netlink: 'syz.4.9670': attribute type 2 has an invalid length. [ 1820.233881][ T2464] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.9670'. [ 1820.418938][ T2469] netlink: 'syz.0.9672': attribute type 3 has an invalid length. [ 1821.867680][ T2514] netlink: 'syz.3.9685': attribute type 3 has an invalid length. [ 1822.231560][ T2528] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.9688'. [ 1822.409109][ T2534] netlink: 76 bytes leftover after parsing attributes in process `syz.0.9692'. [ 1822.424107][ T2534] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9692'. [ 1822.436185][ T2536] netlink: 152 bytes leftover after parsing attributes in process `syz.0.9692'. [ 1822.447117][ T2535] netlink: 152 bytes leftover after parsing attributes in process `syz.0.9692'. [ 1822.498312][ T2532] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.9691'. [ 1822.552188][ T2534] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1822.569985][ T2534] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1822.592188][ T2543] validate_nla: 1 callbacks suppressed [ 1822.592205][ T2543] netlink: 'syz.3.9694': attribute type 3 has an invalid length. [ 1822.606981][ T2534] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1822.622281][ T2534] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1822.649741][ T2543] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.9694'. [ 1823.430841][ T2569] netlink: 'syz.3.9703': attribute type 2 has an invalid length. [ 1823.455439][ T2569] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.9703'. [ 1823.478866][ T2567] netlink: 'syz.0.9702': attribute type 2 has an invalid length. [ 1823.496160][ T2567] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.9702'. [ 1823.664849][ T2578] netlink: 44 bytes leftover after parsing attributes in process `syz.4.9706'. [ 1823.683315][ T2576] netlink: 'syz.1.9705': attribute type 2 has an invalid length. [ 1823.833369][ T2582] netlink: 'syz.0.9709': attribute type 25 has an invalid length. [ 1823.865427][ T2582] netlink: 'syz.0.9709': attribute type 29 has an invalid length. [ 1824.827933][ T2615] netlink: 'syz.2.9718': attribute type 10 has an invalid length. [ 1824.900182][ T2615] bridge0: port 2(bridge_slave_1) entered disabled state [ 1824.913512][ T2624] netlink: 'syz.4.9717': attribute type 2 has an invalid length. [ 1824.941516][ T2615] bridge0: port 2(bridge_slave_1) entered disabled state [ 1825.034383][ T2626] netlink: 'syz.0.9719': attribute type 3 has an invalid length. [ 1825.643118][ T2661] netlink: 'syz.1.9730': attribute type 29 has an invalid length. [ 1826.346680][ T2681] device aaaaaaaaaaaaaaa entered promiscuous mode [ 1827.272040][ T2719] FAULT_INJECTION: forcing a failure. [ 1827.272040][ T2719] name failslab, interval 1, probability 0, space 0, times 0 [ 1827.379946][ T2719] CPU: 0 PID: 2719 Comm: syz.2.9747 Not tainted syzkaller #0 [ 1827.387438][ T2719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1827.397548][ T2719] Call Trace: [ 1827.400901][ T2719] [ 1827.403911][ T2719] dump_stack_lvl+0x188/0x24e [ 1827.408687][ T2719] ? show_regs_print_info+0x12/0x12 [ 1827.413961][ T2719] ? load_image+0x410/0x410 [ 1827.418558][ T2719] ? __might_sleep+0xd0/0xd0 [ 1827.423221][ T2719] ? __lock_acquire+0x7c40/0x7c40 [ 1827.428344][ T2719] should_fail_ex+0x390/0x4c0 [ 1827.433111][ T2719] should_failslab+0x5/0x20 [ 1827.437683][ T2719] slab_pre_alloc_hook+0x59/0x300 [ 1827.442808][ T2719] kmem_cache_alloc_node+0x5a/0x310 [ 1827.448090][ T2719] ? __alloc_skb+0xf9/0x7d0 [ 1827.452683][ T2719] __alloc_skb+0xf9/0x7d0 [ 1827.457093][ T2719] netlink_sendmsg+0x654/0xbd0 [ 1827.461938][ T2719] ? netlink_getsockopt+0x550/0x550 [ 1827.467199][ T2719] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1827.472800][ T2719] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1827.478128][ T2719] ? security_socket_sendmsg+0x7c/0xa0 [ 1827.483641][ T2719] ? netlink_getsockopt+0x550/0x550 [ 1827.488893][ T2719] ____sys_sendmsg+0x5ed/0x9a0 [ 1827.493751][ T2719] ? __sys_sendmsg_sock+0x30/0x30 [ 1827.498827][ T2719] ? __import_iovec+0x306/0x510 [ 1827.503749][ T2719] ? import_iovec+0x6f/0xa0 [ 1827.508316][ T2719] ___sys_sendmsg+0x2a2/0x360 [ 1827.513063][ T2719] ? __sys_sendmsg+0x2a0/0x2a0 [ 1827.517931][ T2719] ? __lock_acquire+0x7c40/0x7c40 [ 1827.523076][ T2719] __se_sys_sendmsg+0x1c3/0x2b0 [ 1827.527988][ T2719] ? __x64_sys_sendmsg+0x80/0x80 [ 1827.532999][ T2719] ? lockdep_hardirqs_on+0x94/0x140 [ 1827.538243][ T2719] do_syscall_64+0x4c/0xa0 [ 1827.542705][ T2719] ? clear_bhb_loop+0x60/0xb0 [ 1827.547438][ T2719] ? clear_bhb_loop+0x60/0xb0 [ 1827.552177][ T2719] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1827.558116][ T2719] RIP: 0033:0x7f082c99de59 [ 1827.562578][ T2719] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1827.582225][ T2719] RSP: 002b:00007f082d7bf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1827.590681][ T2719] RAX: ffffffffffffffda RBX: 00007f082cc25fa0 RCX: 00007f082c99de59 [ 1827.598708][ T2719] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005 [ 1827.606715][ T2719] RBP: 00007f082d7bf090 R08: 0000000000000000 R09: 0000000000000000 [ 1827.614721][ T2719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1827.622723][ T2719] R13: 00007f082cc26038 R14: 00007f082cc25fa0 R15: 00007ffc1990c208 [ 1827.630787][ T2719] [ 1827.822380][ T2734] validate_nla: 4 callbacks suppressed [ 1827.822420][ T2734] netlink: 'syz.3.9752': attribute type 21 has an invalid length. [ 1827.845350][ T2734] IPv6: NLM_F_CREATE should be specified when creating new route [ 1827.856755][ T2734] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1827.864221][ T2734] IPv6: NLM_F_CREATE should be set when creating new route [ 1827.872191][ T2734] IPv6: NLM_F_CREATE should be set when creating new route [ 1827.879798][ T2734] IPv6: NLM_F_CREATE should be set when creating new route [ 1828.211169][ T2746] __nla_validate_parse: 8 callbacks suppressed [ 1828.211188][ T2746] netlink: 14 bytes leftover after parsing attributes in process `syz.3.9755'. [ 1828.465299][ T2751] netlink: 14 bytes leftover after parsing attributes in process `syz.4.9757'. [ 1828.491711][ T2751] device hsr_slave_0 left promiscuous mode [ 1828.501699][ T2751] device hsr_slave_1 left promiscuous mode [ 1829.056740][ T2767] netlink: 'syz.1.9763': attribute type 2 has an invalid length. [ 1829.088967][ T2767] netlink: 17267 bytes leftover after parsing attributes in process `syz.1.9763'. [ 1829.678488][ T4289] Bluetooth: hci1: command 0x0406 tx timeout [ 1833.395554][ T2770] netlink: 'syz.2.9764': attribute type 20 has an invalid length. [ 1833.412721][ T2801] netlink: 52 bytes leftover after parsing attributes in process `syz.0.9770'. [ 1833.428208][ T2810] netlink: 44 bytes leftover after parsing attributes in process `syz.4.9772'. [ 1835.583917][ T2861] netlink: 'syz.3.9787': attribute type 10 has an invalid length. [ 1837.395012][ T2880] tipc: Started in network mode [ 1837.419708][ T2880] tipc: Node identity 9215a268, cluster identity 4711 [ 1837.426771][ T2880] tipc: Node number set to 2450891368 [ 1837.476589][ T2872] device aaaaaaaaaaaaaaa entered promiscuous mode [ 1837.833019][ T2894] netlink: 'syz.0.9795': attribute type 2 has an invalid length. [ 1837.856599][ T2896] netlink: 52 bytes leftover after parsing attributes in process `syz.4.9796'. [ 1837.869669][ T2894] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.9795'. [ 1839.095076][ T2933] device aaaaaaaaaaaaaaa entered promiscuous mode [ 1840.625215][ T2956] netlink: 52 bytes leftover after parsing attributes in process `syz.1.9811'. [ 1840.650391][ T2951] netlink: 'syz.4.9810': attribute type 2 has an invalid length. [ 1840.687263][ T2951] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.9810'. [ 1841.023446][ T2968] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.9817'. [ 1841.583819][ T2985] device aaaaaaaaaaaaaaa entered promiscuous mode [ 1842.763308][ T2999] device syzkaller0 entered promiscuous mode [ 1846.494342][ T3007] netlink: 'syz.3.9829': attribute type 2 has an invalid length. [ 1846.502484][ T3007] netlink: 'syz.3.9829': attribute type 8 has an invalid length. [ 1846.511382][ T3007] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9829'. [ 1846.761846][ T3023] netlink: 'syz.2.9834': attribute type 7 has an invalid length. [ 1846.778013][ T3021] netlink: 'syz.3.9831': attribute type 2 has an invalid length. [ 1846.786483][ T3023] netlink: 126644 bytes leftover after parsing attributes in process `syz.2.9834'. [ 1846.823025][ T3021] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.9831'. [ 1846.850811][ T3026] netlink: 'syz.2.9834': attribute type 33 has an invalid length. [ 1846.886737][ T3026] netlink: 152 bytes leftover after parsing attributes in process `syz.2.9834'. [ 1847.228138][ T3036] netlink: 'syz.3.9838': attribute type 21 has an invalid length. [ 1847.236609][ T3036] netlink: 'syz.3.9838': attribute type 1 has an invalid length. [ 1847.263966][ T3036] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.9838'. [ 1848.024082][ T3072] netlink: 'syz.1.9849': attribute type 2 has an invalid length. [ 1848.043630][ T3072] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.9849'. [ 1848.076494][ T3071] netlink: 198580 bytes leftover after parsing attributes in process `syz.0.9851'. [ 1848.173084][ T3075] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.9852'. [ 1848.312714][ T3080] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1849.233066][ T3101] netlink: 212168 bytes leftover after parsing attributes in process `syz.0.9859'. [ 1849.464402][ T3111] netlink: 'syz.1.9862': attribute type 27 has an invalid length. [ 1849.610474][ T3110] delete_channel: no stack [ 1849.898318][ T3138] FAULT_INJECTION: forcing a failure. [ 1849.898318][ T3138] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1849.914906][ T3138] CPU: 1 PID: 3138 Comm: syz.2.9872 Not tainted syzkaller #0 [ 1849.922354][ T3138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1849.932481][ T3138] Call Trace: [ 1849.935814][ T3138] [ 1849.938780][ T3138] dump_stack_lvl+0x188/0x24e [ 1849.943530][ T3138] ? show_regs_print_info+0x12/0x12 [ 1849.948814][ T3138] ? load_image+0x410/0x410 [ 1849.953371][ T3138] ? __lock_acquire+0x7c40/0x7c40 [ 1849.958466][ T3138] should_fail_ex+0x390/0x4c0 [ 1849.963199][ T3138] _copy_from_user+0x2c/0x170 [ 1849.967921][ T3138] __copy_msghdr+0x384/0x560 [ 1849.972549][ T3138] ___sys_sendmsg+0x210/0x360 [ 1849.977254][ T3138] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1849.983453][ T3138] ? __sys_sendmsg+0x2a0/0x2a0 [ 1849.988285][ T3138] ? __lock_acquire+0x7c40/0x7c40 [ 1849.993358][ T3138] __se_sys_sendmsg+0x1c3/0x2b0 [ 1849.998243][ T3138] ? ct_nmi_exit+0x145/0x1c0 [ 1850.002865][ T3138] ? __x64_sys_sendmsg+0x80/0x80 [ 1850.007844][ T3138] ? lockdep_hardirqs_on+0x94/0x140 [ 1850.013073][ T3138] do_syscall_64+0x4c/0xa0 [ 1850.017548][ T3138] ? clear_bhb_loop+0x60/0xb0 [ 1850.022255][ T3138] ? clear_bhb_loop+0x60/0xb0 [ 1850.026975][ T3138] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1850.033101][ T3138] RIP: 0033:0x7f082c99de59 [ 1850.037536][ T3138] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1850.057167][ T3138] RSP: 002b:00007f082d7bf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1850.065613][ T3138] RAX: ffffffffffffffda RBX: 00007f082cc25fa0 RCX: 00007f082c99de59 [ 1850.073608][ T3138] RDX: 0000000004000080 RSI: 0000200000000780 RDI: 0000000000000007 [ 1850.081594][ T3138] RBP: 00007f082d7bf090 R08: 0000000000000000 R09: 0000000000000000 [ 1850.089574][ T3138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1850.097559][ T3138] R13: 00007f082cc26038 R14: 00007f082cc25fa0 R15: 00007ffc1990c208 [ 1850.105569][ T3138] [ 1850.590751][ T3151] device sit0 entered promiscuous mode [ 1850.799280][ T3159] netlink: 60 bytes leftover after parsing attributes in process `syz.4.9878'. [ 1850.898614][ T3163] netlink: 'syz.2.9880': attribute type 10 has an invalid length. [ 1851.974648][ T3204] __nla_validate_parse: 4 callbacks suppressed [ 1851.974668][ T3204] netlink: 60 bytes leftover after parsing attributes in process `syz.1.9895'. [ 1852.019720][ T3204] netlink: 60 bytes leftover after parsing attributes in process `syz.1.9895'. [ 1852.050014][ T3205] netlink: 60 bytes leftover after parsing attributes in process `syz.1.9895'. [ 1853.015072][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.021597][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1853.186799][ T3242] netlink: 'syz.4.9913': attribute type 10 has an invalid length. [ 1853.257394][ T3248] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9912'. [ 1853.341101][ T3248] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9912'. [ 1853.398769][ T3250] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9912'. [ 1853.706172][ T3257] device syzkaller0 entered promiscuous mode [ 1853.768289][ T3262] netlink: 'syz.0.9918': attribute type 3 has an invalid length. [ 1853.817033][ T3262] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9918'. [ 1855.101559][T32354] Bluetooth: hci0: command 0x0406 tx timeout [ 1857.325186][ T3303] netlink: 'syz.2.9933': attribute type 10 has an invalid length. [ 1857.363854][ T3303] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9933'. [ 1857.413283][ T3306] netlink: 'syz.3.9935': attribute type 10 has an invalid length. [ 1857.446091][ T3306] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9935'. [ 1857.465525][ T3303] netlink: 'syz.2.9933': attribute type 10 has an invalid length. [ 1857.509541][ T3303] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9933'. [ 1857.724715][ T3310] netlink: 'syz.2.9938': attribute type 2 has an invalid length. [ 1857.740004][ T3310] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.9938'. [ 1857.766949][ T3308] netlink: 'syz.3.9936': attribute type 2 has an invalid length. [ 1857.797386][ T3308] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.9936'. [ 1858.307365][ T3322] netlink: 'syz.0.9942': attribute type 10 has an invalid length. [ 1858.565918][ T3335] netlink: 'syz.0.9945': attribute type 3 has an invalid length. [ 1859.248353][ T3340] can: request_module (can-proto-0) failed. [ 1861.613738][ T3379] netlink: 'syz.3.9957': attribute type 2 has an invalid length. [ 1861.629421][ T3379] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.9957'. [ 1861.823665][ T3385] netlink: 2 bytes leftover after parsing attributes in process `syz.2.9959'. [ 1861.854326][ T3385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1861.885375][ T3385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1861.929200][ T3385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1861.949709][ T3385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1861.982338][ T3385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1862.015567][ T3385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1862.027774][ T3385] device batadv_slave_1 entered promiscuous mode [ 1862.044742][ T3394] netlink: 60 bytes leftover after parsing attributes in process `syz.1.9962'. [ 1862.062311][ T3394] netlink: 60 bytes leftover after parsing attributes in process `syz.1.9962'. [ 1862.076530][ T3394] netlink: 60 bytes leftover after parsing attributes in process `syz.1.9962'. [ 1862.403934][ T3402] device syzkaller0 entered promiscuous mode [ 1862.485182][ T3403] netlink: 44 bytes leftover after parsing attributes in process `syz.1.9965'. [ 1862.661996][ T3391] can: request_module (can-proto-0) failed. [ 1863.187192][ T3425] netlink: 'syz.0.9971': attribute type 2 has an invalid length. [ 1863.204022][ T3425] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.9971'. [ 1864.991595][ T3433] FAULT_INJECTION: forcing a failure. [ 1864.991595][ T3433] name failslab, interval 1, probability 0, space 0, times 0 [ 1865.058374][ T3434] netlink: 'syz.4.9974': attribute type 29 has an invalid length. [ 1865.132174][ T3434] netlink: 'syz.4.9974': attribute type 29 has an invalid length. [ 1865.150818][ T3433] CPU: 1 PID: 3433 Comm: syz.0.9975 Not tainted syzkaller #0 [ 1865.158304][ T3433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1865.168472][ T3433] Call Trace: [ 1865.171854][ T3433] [ 1865.174847][ T3433] dump_stack_lvl+0x188/0x24e [ 1865.179602][ T3433] ? show_regs_print_info+0x12/0x12 [ 1865.184886][ T3433] ? load_image+0x410/0x410 [ 1865.189474][ T3433] ? __might_sleep+0xd0/0xd0 [ 1865.194132][ T3433] ? __lock_acquire+0x7c40/0x7c40 [ 1865.199266][ T3433] should_fail_ex+0x390/0x4c0 [ 1865.204034][ T3433] should_failslab+0x5/0x20 [ 1865.208630][ T3433] slab_pre_alloc_hook+0x59/0x300 [ 1865.213751][ T3433] ? kvmalloc_node+0x6c/0x180 [ 1865.218527][ T3433] __kmem_cache_alloc_node+0x4f/0x270 [ 1865.224022][ T3433] ? kvmalloc_node+0x6c/0x180 [ 1865.227864][ T3437] netlink: 'syz.4.9974': attribute type 29 has an invalid length. [ 1865.228754][ T3433] __kmalloc_node+0xa2/0x240 [ 1865.228815][ T3433] kvmalloc_node+0x6c/0x180 [ 1865.245854][ T3433] bpf_test_run_xdp_live+0x1da/0x1a90 [ 1865.251330][ T3433] ? verify_lock_unused+0x140/0x140 [ 1865.256629][ T3433] ? trace_event_raw_event_lock_acquire+0x290/0x290 [ 1865.263282][ T3433] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1865.269456][ T3433] ? xdp_convert_md_to_buff+0x330/0x330 [ 1865.275186][ T3433] ? __lock_acquire+0x7c40/0x7c40 [ 1865.280323][ T3433] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 1865.286661][ T3433] ? bpf_test_init+0x119/0x140 [ 1865.291496][ T3433] ? xdp_convert_md_to_buff+0x5b/0x330 [ 1865.297034][ T3433] bpf_prog_test_run_xdp+0x757/0xf80 [ 1865.302400][ T3433] ? __lock_acquire+0x7c40/0x7c40 [ 1865.307554][ T3433] ? dev_put+0x80/0x80 [ 1865.311735][ T3433] ? dev_put+0x80/0x80 [ 1865.315872][ T3433] bpf_prog_test_run+0x31c/0x390 [ 1865.320878][ T3433] __sys_bpf+0x62b/0x780 [ 1865.325202][ T3433] ? bpf_link_show_fdinfo+0x380/0x380 [ 1865.330681][ T3433] ? lock_chain_count+0x20/0x20 [ 1865.335604][ T3433] __x64_sys_bpf+0x78/0x90 [ 1865.340092][ T3433] do_syscall_64+0x4c/0xa0 [ 1865.344570][ T3433] ? clear_bhb_loop+0x60/0xb0 [ 1865.349285][ T3433] ? clear_bhb_loop+0x60/0xb0 [ 1865.354533][ T3433] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1865.360558][ T3433] RIP: 0033:0x7f5c7719de59 [ 1865.365028][ T3433] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1865.384679][ T3433] RSP: 002b:00007f5c77fb6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1865.393140][ T3433] RAX: ffffffffffffffda RBX: 00007f5c77425fa0 RCX: 00007f5c7719de59 [ 1865.401145][ T3433] RDX: 000000000000004c RSI: 0000200000000340 RDI: 000000000000000a [ 1865.409175][ T3433] RBP: 00007f5c77fb6090 R08: 0000000000000000 R09: 0000000000000000 [ 1865.417193][ T3433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1865.425226][ T3433] R13: 00007f5c77426038 R14: 00007f5c77425fa0 R15: 00007ffd6a060728 [ 1865.433274][ T3433] [ 1865.981723][ T3455] netlink: 'syz.1.9981': attribute type 3 has an invalid length. [ 1866.006841][ T3455] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.9981'. [ 1866.505524][ T3466] netlink: 'syz.1.9985': attribute type 10 has an invalid length. [ 1866.581920][ T3466] bridge0: port 3(dummy0) entered disabled state [ 1866.633573][ T3466] device dummy0 left promiscuous mode [ 1866.673665][ T3466] bridge0: port 3(dummy0) entered disabled state [ 1866.840721][ T3478] netlink: 'syz.0.9986': attribute type 2 has an invalid length. [ 1866.851069][ T3466] team0: Port device dummy0 added [ 1866.910087][ T3478] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.9986'. [ 1868.618399][ T3524] netlink: 'syz.2.10003': attribute type 2 has an invalid length. [ 1868.628384][ T3524] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.10003'. [ 1869.097342][ T3537] netlink: 14 bytes leftover after parsing attributes in process `syz.2.10007'. [ 1869.204713][ T3537] device hsr_slave_0 left promiscuous mode [ 1869.271328][ T3537] device hsr_slave_1 left promiscuous mode [ 1870.044069][ T3552] netlink: 'syz.2.10012': attribute type 2 has an invalid length. [ 1870.079865][ T3552] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.10012'. [ 1871.124676][ T3566] netlink: 'syz.0.10016': attribute type 20 has an invalid length. [ 1871.837282][ T3575] netlink: 'syz.1.10019': attribute type 2 has an invalid length. [ 1871.876649][ T3575] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.10019'. [ 1872.274194][ T3587] netlink: 44 bytes leftover after parsing attributes in process `syz.1.10023'. [ 1872.500586][ T3593] netlink: 'syz.3.10036': attribute type 2 has an invalid length. [ 1872.519667][ T3593] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.10036'. [ 1872.948857][ T3603] netlink: 'syz.2.10028': attribute type 2 has an invalid length. [ 1872.983923][ T3603] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.10028'. [ 1873.328316][ T3604] can: request_module (can-proto-0) failed. [ 1873.748352][ T3628] tun0: tun_chr_ioctl cmd 21731 [ 1874.029126][ T3634] netlink: 'syz.2.10035': attribute type 10 has an invalid length. [ 1875.226745][ T3661] netlink: 'syz.0.10043': attribute type 2 has an invalid length. [ 1875.249796][ T3661] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.10043'. [ 1876.261367][ T3690] netlink: 'syz.3.10052': attribute type 6 has an invalid length. [ 1876.360076][ T3690] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.10052'. [ 1876.979402][ T3702] netlink: 'syz.0.10058': attribute type 1 has an invalid length. [ 1877.946398][ T3706] netlink: 'syz.0.10070': attribute type 2 has an invalid length. [ 1877.977088][ T3706] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.10070'. [ 1878.331626][ T3719] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.10065'. [ 1878.488768][ T3723] netlink: 'syz.3.10067': attribute type 10 has an invalid length. [ 1879.397106][ T3723] team0: Port device dummy0 added [ 1879.407231][ T3735] netlink: 'syz.1.10072': attribute type 27 has an invalid length. [ 1879.429811][ T3744] ref_ctr_offset mismatch. inode: 0x45c offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 1879.492919][ T3734] delete_channel: no stack [ 1880.054519][ T3752] netlink: 'syz.1.10077': attribute type 2 has an invalid length. [ 1880.092140][ T3752] netlink: 'syz.1.10077': attribute type 8 has an invalid length. [ 1880.119154][ T3752] netlink: 132 bytes leftover after parsing attributes in process `syz.1.10077'. [ 1880.164985][ T3757] netlink: 'syz.3.10079': attribute type 2 has an invalid length. [ 1880.202899][ T3757] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.10079'. [ 1880.689762][ T4289] Bluetooth: hci3: command 0x0406 tx timeout [ 1880.873099][ T3782] netlink: 'syz.4.10088': attribute type 4 has an invalid length. [ 1880.909679][ T3782] netlink: 134728 bytes leftover after parsing attributes in process `syz.4.10088'. [ 1881.476749][ T3798] netlink: 198580 bytes leftover after parsing attributes in process `syz.1.10094'. [ 1881.690691][ T3800] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.10095'. [ 1881.807070][ T3802] netlink: 'syz.4.10096': attribute type 2 has an invalid length. [ 1881.847432][ T3802] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.10096'. [ 1883.338770][ T3831] netlink: 212168 bytes leftover after parsing attributes in process `syz.1.10107'. [ 1883.553847][ T3833] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.10108'. [ 1883.633394][ T3833] netlink: 43 bytes leftover after parsing attributes in process `syz.0.10108'. [ 1884.494304][ T3840] delete_channel: no stack [ 1885.406182][ T3848] netlink: 'syz.2.10110': attribute type 27 has an invalid length. [ 1885.773526][ T3857] netlink: 'syz.3.10115': attribute type 2 has an invalid length. [ 1885.799608][ T3857] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.10115'. [ 1885.845855][ T3861] netlink: 'syz.0.10116': attribute type 2 has an invalid length. [ 1885.864612][ T3861] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.10116'. [ 1886.904316][ T3879] netlink: 'syz.4.10123': attribute type 7 has an invalid length. [ 1887.018823][ T3888] netlink: 'syz.1.10124': attribute type 10 has an invalid length. [ 1887.039068][ T3888] netlink: 2 bytes leftover after parsing attributes in process `syz.1.10124'. [ 1887.187096][ T3892] netlink: 164 bytes leftover after parsing attributes in process `syz.2.10126'. [ 1887.271206][ T3892] netlink: 'syz.2.10126': attribute type 25 has an invalid length. [ 1887.344178][ T3892] netlink: 'syz.2.10126': attribute type 3 has an invalid length. [ 1887.424028][ T3892] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10126'. [ 1887.913641][ T3909] netlink: 'syz.2.10132': attribute type 2 has an invalid length. [ 1887.953784][ T3909] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.10132'. [ 1888.436477][ T3923] netlink: 14 bytes leftover after parsing attributes in process `syz.1.10137'. [ 1888.590681][ T3936] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10139'. [ 1890.490101][ T3988] netlink: 'syz.3.10161': attribute type 9 has an invalid length. [ 1891.084221][ T4011] FAULT_INJECTION: forcing a failure. [ 1891.084221][ T4011] name failslab, interval 1, probability 0, space 0, times 0 [ 1891.132601][ T4011] CPU: 0 PID: 4011 Comm: syz.1.10169 Not tainted syzkaller #0 [ 1891.140157][ T4011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1891.150253][ T4011] Call Trace: [ 1891.153588][ T4011] [ 1891.156572][ T4011] dump_stack_lvl+0x188/0x24e [ 1891.161325][ T4011] ? show_regs_print_info+0x12/0x12 [ 1891.166595][ T4011] ? load_image+0x410/0x410 [ 1891.171166][ T4011] should_fail_ex+0x390/0x4c0 [ 1891.175907][ T4011] should_failslab+0x5/0x20 [ 1891.180458][ T4011] slab_pre_alloc_hook+0x59/0x300 [ 1891.185540][ T4011] kmem_cache_alloc+0x56/0x2f0 [ 1891.190357][ T4011] ? skb_clone+0x1e7/0x370 [ 1891.194835][ T4011] skb_clone+0x1e7/0x370 [ 1891.199128][ T4011] bpf_clone_redirect+0x169/0x4a0 [ 1891.204202][ T4011] bpf_prog_b36a1f39e2fdd4f4+0x56/0x5b [ 1891.210311][ T4011] ? __kprobes_text_end+0x57378/0x57378 [ 1891.215910][ T4011] ? lockdep_hardirqs_on+0x94/0x140 [ 1891.221151][ T4011] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1891.227366][ T4011] ? seqcount_lockdep_reader_access+0x18d/0x1d0 [ 1891.233659][ T4011] ? seqcount_lockdep_reader_access+0x196/0x1d0 [ 1891.239954][ T4011] ? ktime_get_real_ts64+0x440/0x440 [ 1891.245291][ T4011] ? read_lock_is_recursive+0x10/0x10 [ 1891.250745][ T4011] ? __cant_sleep+0x220/0x220 [ 1891.255474][ T4011] ? bpf_test_timer_continue+0x142/0x380 [ 1891.261163][ T4011] bpf_test_run+0x2b6/0x830 [ 1891.265726][ T4011] ? dst_hold+0xb0/0xb0 [ 1891.269929][ T4011] ? eth_get_headlen+0x200/0x200 [ 1891.274913][ T4011] ? __build_skb+0x24b/0x3b0 [ 1891.279572][ T4011] bpf_prog_test_run_skb+0xdaf/0x18e0 [ 1891.285102][ T4011] ? cpu_online+0xa0/0xa0 [ 1891.289475][ T4011] bpf_prog_test_run+0x31c/0x390 [ 1891.294497][ T4011] __sys_bpf+0x62b/0x780 [ 1891.298827][ T4011] ? bpf_link_show_fdinfo+0x380/0x380 [ 1891.304252][ T4011] ? lock_chain_count+0x20/0x20 [ 1891.309141][ T4011] __x64_sys_bpf+0x78/0x90 [ 1891.313595][ T4011] do_syscall_64+0x4c/0xa0 [ 1891.318040][ T4011] ? clear_bhb_loop+0x60/0xb0 [ 1891.322758][ T4011] ? clear_bhb_loop+0x60/0xb0 [ 1891.327473][ T4011] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1891.333407][ T4011] RIP: 0033:0x7f624459de59 [ 1891.337847][ T4011] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1891.357591][ T4011] RSP: 002b:00007f62453d8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1891.366028][ T4011] RAX: ffffffffffffffda RBX: 00007f6244825fa0 RCX: 00007f624459de59 [ 1891.374027][ T4011] RDX: 0000000000000048 RSI: 0000200000000040 RDI: 000000000000000a [ 1891.382015][ T4011] RBP: 00007f62453d8090 R08: 0000000000000000 R09: 0000000000000000 [ 1891.390093][ T4011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1891.398083][ T4011] R13: 00007f6244826038 R14: 00007f6244825fa0 R15: 00007ffc04e96508 [ 1891.406091][ T4011] [ 1891.495953][ T4019] netlink: 'syz.4.10171': attribute type 21 has an invalid length. [ 1891.934664][ T4040] netlink: 'syz.2.10179': attribute type 10 has an invalid length. [ 1891.976337][ T4040] netlink: 2 bytes leftover after parsing attributes in process `syz.2.10179'. [ 1892.754309][ T4058] netlink: 'syz.0.10186': attribute type 3 has an invalid length. [ 1892.812392][ T4063] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.10189'. [ 1892.827698][ T4058] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.10186'. [ 1893.483428][ T4073] device syzkaller0 entered promiscuous mode [ 1897.067167][ T4120] netlink: 'syz.4.10207': attribute type 10 has an invalid length. [ 1897.085869][ T4120] netlink: 40 bytes leftover after parsing attributes in process `syz.4.10207'. [ 1897.085916][ T4123] netlink: 'syz.0.10208': attribute type 10 has an invalid length. [ 1897.119592][ T4123] netlink: 40 bytes leftover after parsing attributes in process `syz.0.10208'. [ 1897.129419][ T4123] netlink: 'syz.0.10208': attribute type 10 has an invalid length. [ 1897.156561][ T4123] netlink: 40 bytes leftover after parsing attributes in process `syz.0.10208'. [ 1897.263216][ T4128] netlink: 'syz.3.10209': attribute type 2 has an invalid length. [ 1897.284299][ T4128] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.10209'. [ 1898.253449][ T4156] batman_adv: batadv0: adding TT local entry ba:a7:8f:6a:ff:ff to non-existent VLAN 815 [ 1898.653006][ T4164] netlink: 'syz.1.10224': attribute type 2 has an invalid length. [ 1898.691922][ T4164] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.10224'. [ 1900.510062][ T4191] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.10235'. [ 1900.549139][ T4191] netlink: 43 bytes leftover after parsing attributes in process `syz.1.10235'. [ 1901.169596][ T4289] Bluetooth: hci2: command 0x0406 tx timeout [ 1901.422354][ T4201] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.10238'. [ 1904.064255][ T4218] netlink: 'syz.1.10244': attribute type 25 has an invalid length. [ 1904.083234][ T4218] netlink: 'syz.1.10244': attribute type 29 has an invalid length. [ 1904.111843][ T4218] netlink: 5 bytes leftover after parsing attributes in process `syz.1.10244'. [ 1904.468530][ T4233] netlink: 'syz.1.10249': attribute type 2 has an invalid length. [ 1904.494058][ T4233] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.10249'. [ 1904.897225][ T4254] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.10254'. [ 1906.047718][ T4274] delete_channel: no stack [ 1906.139317][ T4273] netlink: 'syz.1.10262': attribute type 2 has an invalid length. [ 1906.149873][ T4273] netlink: 164 bytes leftover after parsing attributes in process `syz.1.10262'. [ 1906.978108][ T4291] netlink: 14 bytes leftover after parsing attributes in process `syz.2.10268'. [ 1907.183584][ T4298] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.10271'. [ 1907.340534][ T4302] netlink: 'syz.3.10272': attribute type 3 has an invalid length. [ 1907.348435][ T4302] netlink: 'syz.3.10272': attribute type 1 has an invalid length. [ 1907.382317][ T4302] netlink: 'syz.3.10272': attribute type 1 has an invalid length. [ 1907.414130][ T4302] netlink: 197708 bytes leftover after parsing attributes in process `syz.3.10272'. [ 1909.273108][ T4344] netlink: 'syz.1.10283': attribute type 2 has an invalid length. [ 1909.332597][ T4344] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.10283'. [ 1909.509015][ T4352] netlink: 'syz.0.10289': attribute type 10 has an invalid length. [ 1909.551535][ T4352] netlink: 40 bytes leftover after parsing attributes in process `syz.0.10289'. [ 1909.569856][ T4352] device dummy0 entered promiscuous mode [ 1909.593438][ T4352] bridge0: port 3(dummy0) entered blocking state [ 1909.613848][ T4352] bridge0: port 3(dummy0) entered disabled state [ 1909.651971][ T4352] bridge0: port 3(dummy0) entered blocking state [ 1909.658838][ T4352] bridge0: port 3(dummy0) entered forwarding state [ 1910.295304][ T4369] netlink: 'syz.1.10296': attribute type 3 has an invalid length. [ 1910.444856][ T4369] netlink: 132 bytes leftover after parsing attributes in process `syz.1.10296'. [ 1910.723039][ T4381] netlink: 'syz.0.10301': attribute type 2 has an invalid length. [ 1910.739638][ T4381] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.10301'. [ 1912.443880][ T4433] netlink: 'syz.3.10317': attribute type 2 has an invalid length. [ 1912.513907][ T4433] netlink: 199820 bytes leftover after parsing attributes in process `syz.3.10317'. [ 1912.557137][ T4438] netlink: 'syz.2.10316': attribute type 2 has an invalid length. [ 1912.577877][ T4438] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.10316'. [ 1913.022537][ T4450] netlink: 'syz.3.10322': attribute type 2 has an invalid length. [ 1913.069089][ T4450] device 0 entered promiscuous mode [ 1913.434076][ T4461] netlink: 'syz.4.10325': attribute type 6 has an invalid length. [ 1913.468996][ T4461] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.10325'. [ 1914.455656][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.462116][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1914.643481][ T4479] netlink: 'syz.4.10332': attribute type 2 has an invalid length. [ 1914.714805][ T4479] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.10332'. [ 1915.533181][ T4498] netlink: 'syz.3.10340': attribute type 2 has an invalid length. [ 1915.584168][ T4498] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.10340'. [ 1916.934392][ T4519] netlink: 'syz.0.10347': attribute type 10 has an invalid length. [ 1916.963944][ T4519] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.10347'. [ 1917.031749][ T4522] netlink: 'syz.2.10348': attribute type 29 has an invalid length. [ 1917.069940][ T4522] netlink: 'syz.2.10348': attribute type 29 has an invalid length. [ 1917.188019][ T4521] netlink: 56843 bytes leftover after parsing attributes in process `syz.2.10348'. [ 1922.268849][ T4552] netlink: 198580 bytes leftover after parsing attributes in process `syz.0.10361'. [ 1923.069142][ T4586] netlink: 'syz.2.10369': attribute type 2 has an invalid length. [ 1923.090222][ T4586] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.10369'. [ 1923.612392][ T4598] netlink: 'syz.1.10374': attribute type 2 has an invalid length. [ 1923.622440][ T4598] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.10374'. [ 1924.781389][ T4638] netlink: 'syz.4.10384': attribute type 2 has an invalid length. [ 1924.814097][ T4638] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.10384'. [ 1925.035835][ T4622] device syzkaller0 entered promiscuous mode [ 1925.114385][ T4637] netlink: 'syz.0.10386': attribute type 10 has an invalid length. [ 1925.143938][ T4637] netlink: 2 bytes leftover after parsing attributes in process `syz.0.10386'. [ 1925.676526][ T4643] netlink: 'syz.4.10389': attribute type 2 has an invalid length. [ 1927.759948][ T4675] netlink: 'syz.0.10399': attribute type 2 has an invalid length. [ 1927.768238][ T4675] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.10399'. [ 1928.238054][ T4643] device 0 entered promiscuous mode [ 1928.413845][ T4679] netlink: 14 bytes leftover after parsing attributes in process `syz.2.10402'. [ 1928.988826][ T4702] netlink: 132 bytes leftover after parsing attributes in process `syz.0.10409'. [ 1929.114913][ T4697] netlink: 'syz.2.10406': attribute type 2 has an invalid length. [ 1929.160503][ T4697] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.10406'. [ 1930.040261][ T4727] netlink: 'syz.3.10415': attribute type 2 has an invalid length. [ 1930.056519][ T4727] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.10415'. [ 1930.610427][ T4744] netlink: 'syz.2.10423': attribute type 2 has an invalid length. [ 1930.627505][ T4744] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.10423'. [ 1930.830165][ T4749] netlink: 'syz.3.10424': attribute type 2 has an invalid length. [ 1930.851862][ T4749] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.10424'. [ 1931.127950][ T4754] netlink: 49920 bytes leftover after parsing attributes in process `syz.0.10427'. [ 1931.599752][T17772] tipc: Subscription rejected, illegal request [ 1931.776143][ T4788] netlink: 'syz.1.10450': attribute type 10 has an invalid length. [ 1931.793515][ T4784] netlink: 'syz.2.10439': attribute type 2 has an invalid length. [ 1931.801606][ T4788] netlink: 2 bytes leftover after parsing attributes in process `syz.1.10450'. [ 1931.823024][ T4784] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.10439'. [ 1931.879312][ T4789] netlink: 'syz.4.10440': attribute type 2 has an invalid length. [ 1932.535736][ T4804] netlink: 'syz.0.10446': attribute type 2 has an invalid length. [ 1932.695901][ T4804] device 0 entered promiscuous mode [ 1933.292308][ T4824] delete_channel: no stack [ 1933.299724][ T4824] delete_channel: no stack [ 1933.367571][ T4828] netlink: 'syz.1.10455': attribute type 2 has an invalid length. [ 1933.405320][ T4828] __nla_validate_parse: 2 callbacks suppressed [ 1933.405339][ T4828] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.10455'. [ 1933.424467][ T4823] netlink: 'syz.0.10454': attribute type 11 has an invalid length. [ 1933.439746][ T4823] netlink: 140 bytes leftover after parsing attributes in process `syz.0.10454'. [ 1934.546782][ T4851] netlink: 'syz.4.10467': attribute type 2 has an invalid length. [ 1934.589179][ T4858] netlink: 'syz.2.10466': attribute type 2 has an invalid length. [ 1934.600090][ T4851] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.10467'. [ 1934.899361][ T4858] device 0 entered promiscuous mode [ 1937.557436][ T4874] netlink: 'syz.4.10470': attribute type 10 has an invalid length. [ 1937.609531][ T4874] netlink: 40 bytes leftover after parsing attributes in process `syz.4.10470'. [ 1937.732161][ T4879] netlink: 'syz.3.10471': attribute type 2 has an invalid length. [ 1937.767550][ T4879] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.10471'. [ 1938.024421][ T4889] netlink: 14 bytes leftover after parsing attributes in process `syz.4.10475'. [ 1938.121547][ T4893] netlink: 'syz.0.10477': attribute type 2 has an invalid length. [ 1938.163574][ T4893] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.10477'. [ 1938.179243][ T4889] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1938.214458][ T4889] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1938.290345][ T4889] bond0 (unregistering): Released all slaves [ 1938.469073][T32354] Bluetooth: hci3: unexpected event 0x0b length: 15 > 11 [ 1938.911798][ T4905] netlink: 'syz.3.10482': attribute type 2 has an invalid length. [ 1939.090236][ T4905] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.10482'. [ 1939.478085][ T4922] netlink: 'syz.4.10490': attribute type 2 has an invalid length. [ 1939.507670][ T4922] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.10490'. [ 1940.140332][ T4933] netlink: 'syz.3.10491': attribute type 2 has an invalid length. [ 1940.154321][ T4933] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.10491'. [ 1940.907037][ T4952] netlink: 'syz.4.10504': attribute type 2 has an invalid length. [ 1940.930067][ T4952] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.10504'. [ 1940.986214][ T4955] netlink: 'syz.1.10502': attribute type 2 has an invalid length. [ 1941.001061][ T4955] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.10502'. [ 1941.763198][ T4984] netlink: 'syz.0.10517': attribute type 3 has an invalid length. [ 1941.799717][ T4984] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.10517'. [ 1942.206270][ T4993] netlink: 'syz.4.10519': attribute type 2 has an invalid length. [ 1942.251707][ T4993] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.10519'. [ 1943.538438][ T5022] netlink: 180 bytes leftover after parsing attributes in process `syz.2.10531'. [ 1944.461460][ T5036] netlink: 'syz.4.10533': attribute type 2 has an invalid length. [ 1944.487053][ T5036] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.10533'. [ 1970.130449][T11105] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 1-.... } 2639 jiffies s: 192005 root: 0x2/. [ 1970.170633][T11105] rcu: blocking rcu_node structures (internal RCU debug): [ 1970.177851][T11105] Sending NMI from CPU 0 to CPUs 1: [ 1970.183279][ C1] NMI backtrace for cpu 1 [ 1970.183290][ C1] CPU: 1 PID: 5025 Comm: syz.1.10530 Not tainted syzkaller #0 [ 1970.183306][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1970.183316][ C1] RIP: 0010:kasan_check_range+0x1b2/0x290 [ 1970.183349][ C1] Code: 01 f3 49 89 df 49 8d 5f 07 4d 85 ff 49 0f 49 df 48 83 e3 f8 49 29 df 74 0e 41 80 3b 00 75 69 49 ff c3 49 ff cf 75 f2 5b 41 5c <41> 5e 41 5f 5d c3 45 84 ff 0f 85 91 00 00 00 41 f7 c7 00 ff 00 00 [ 1970.183363][ C1] RSP: 0018:ffffc900001e03a0 EFLAGS: 00000056 [ 1970.183377][ C1] RAX: 0000000000000001 RBX: 0000000000000004 RCX: ffffffff8164022e [ 1970.183389][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff90b10240 [ 1970.183400][ C1] RBP: ffffc900001e05f0 R08: ffffffff90b10247 R09: 1ffffffff2162048 [ 1970.183412][ C1] R10: dffffc0000000000 R11: fffffbfff2162049 R12: ffff88802616c6d8 [ 1970.183425][ C1] R13: ffff88802616c7a0 R14: 1ffffffff2162048 R15: 0000000000000001 [ 1970.183437][ C1] FS: 00007f62453d86c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1970.183452][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1970.183463][ C1] CR2: 0000001b2f713ff8 CR3: 00000000295ef000 CR4: 00000000003506e0 [ 1970.183478][ C1] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 1970.183489][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1970.183500][ C1] Call Trace: [ 1970.183505][ C1] [ 1970.183514][ C1] __lock_acquire+0x92e/0x7c40 [ 1970.183551][ C1] ? trace_call_bpf+0xbf/0x6b0 [ 1970.183576][ C1] ? verify_lock_unused+0x140/0x140 [ 1970.183601][ C1] ? perf_trace_lock+0xf8/0x390 [ 1970.183622][ C1] ? mark_lock+0x94/0x320 [ 1970.183647][ C1] ? __lock_acquire+0x138a/0x7c40 [ 1970.183673][ C1] lock_acquire+0x1bb/0x4a0 [ 1970.183695][ C1] ? __virt_addr_valid+0x188/0x540 [ 1970.183725][ C1] ? read_lock_is_recursive+0x10/0x10 [ 1970.183747][ C1] ? perf_swevent_event+0x1c6/0x570 [ 1970.183772][ C1] ? verify_lock_unused+0x140/0x140 [ 1970.183794][ C1] ? perf_trace_buf_update+0xa8/0x230 [ 1970.183813][ C1] ? perf_tp_event+0xc10/0xc10 [ 1970.183855][ C1] ? perf_trace_buf_alloc+0x300/0x300 [ 1970.183873][ C1] ? perf_trace_lock+0xf8/0x390 [ 1970.183893][ C1] ? __virt_addr_valid+0x188/0x540 [ 1970.183916][ C1] __virt_addr_valid+0x1a5/0x540 [ 1970.183939][ C1] ? __virt_addr_valid+0x188/0x540 [ 1970.183964][ C1] kasan_addr_to_slab+0x9/0xc0 [ 1970.183994][ C1] __kasan_record_aux_stack+0xf/0xc0 [ 1970.184012][ C1] irq_work_queue_on+0x10f/0x260 [ 1970.184040][ C1] rcu_read_unlock_special+0x3c9/0x510 [ 1970.184063][ C1] ? __rcu_read_unlock+0xd0/0xd0 [ 1970.184081][ C1] ? __cant_sleep+0x220/0x220 [ 1970.184103][ C1] __rcu_read_unlock+0x78/0xd0 [ 1970.184118][ C1] ? trace_call_bpf+0xbf/0x6b0 [ 1970.184143][ C1] trace_call_bpf+0x5bb/0x6b0 [ 1970.184166][ C1] ? trace_call_bpf+0xbf/0x6b0 [ 1970.184194][ C1] ? __bpf_trace_bpf_trace_printk+0x20/0x20 [ 1970.184220][ C1] ? kvm_sched_clock_read+0x14/0x40 [ 1970.184236][ C1] ? sched_clock_cpu+0x6e/0x260 [ 1970.184260][ C1] perf_trace_run_bpf_submit+0x79/0x1c0 [ 1970.184289][ C1] perf_trace_preemptirq_template+0x268/0x320 [ 1970.184315][ C1] ? asm_sysvec_irq_work+0x16/0x20 [ 1970.184339][ C1] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 1970.184365][ C1] ? __irq_exit_rcu+0x147/0x230 [ 1970.184382][ C1] ? irq_exit_rcu+0x20/0x20 [ 1970.184400][ C1] ? asm_sysvec_irq_work+0x16/0x20 [ 1970.184422][ C1] trace_irq_enable_rcuidle+0xd3/0x140 [ 1970.184447][ C1] trace_hardirqs_on+0x24/0x40 [ 1970.184469][ C1] asm_sysvec_irq_work+0x16/0x20 [ 1970.184492][ C1] RIP: 0010:rcu_read_unlock_special+0x7f/0x510 [ 1970.184510][ C1] Code: eb 03 48 b8 f1 f1 f1 f1 f8 f2 f2 f2 4a 89 04 2b 42 c7 44 2b 08 f8 f3 f3 f3 65 44 8b 35 52 82 95 7e 41 f7 c6 00 00 f0 00 74 40 <48> c7 44 24 40 0e 36 e0 45 4a c7 04 2b 00 00 00 00 42 c7 44 2b 08 [ 1970.184524][ C1] RSP: 0018:ffffc900001e0c40 EFLAGS: 00000206 [ 1970.184537][ C1] RAX: 80ae3ac1146c6300 RBX: 1ffff9200003c190 RCX: 80ae3ac1146c6300 [ 1970.184550][ C1] RDX: dffffc0000000000 RSI: ffffffff8a8c17a0 RDI: ffffffff8adf42e0 [ 1970.184563][ C1] RBP: ffffc900001e0d30 R08: ffffffff90b1024f R09: 1ffffffff2162049 [ 1970.184576][ C1] R10: dffffc0000000000 R11: fffffbfff216204a R12: 0000000000000246 [ 1970.184588][ C1] R13: dffffc0000000000 R14: ffff8880b8f3bb00 R15: 0000000000000002 [ 1970.184615][ C1] ? __rcu_read_unlock+0xd0/0xd0 [ 1970.184639][ C1] __rcu_read_unlock+0x78/0xd0 [ 1970.184657][ C1] rebalance_domains+0x86f/0x9d0 [ 1970.184685][ C1] ? rebalance_domains+0x12b/0x9d0 [ 1970.184713][ C1] handle_softirqs+0x291/0x910 [ 1970.184732][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 1970.184750][ C1] ? do_softirq+0x210/0x210 [ 1970.184765][ C1] ? hrtimer_interrupt+0x775/0x980 [ 1970.184789][ C1] __irq_exit_rcu+0x13b/0x230 [ 1970.184805][ C1] ? irq_exit_rcu+0x20/0x20 [ 1970.184828][ C1] irq_exit_rcu+0x5/0x20 [ 1970.184842][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 1970.184860][ C1] [ 1970.184865][ C1] [ 1970.184870][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1970.184893][ C1] RIP: 0010:___cache_free+0x6d/0x160 [ 1970.184911][ C1] Code: c1 01 0f 85 03 01 00 00 0f 1f 44 00 00 4c 8b 00 49 c1 e0 36 49 c1 f8 3f 49 21 c0 49 8b 07 65 48 03 05 5f 9f 2f 7e 48 8b 50 08 <4c> 3b 40 10 75 42 48 8b 00 41 8b 4f 28 48 89 04 19 49 8b 3f 40 f6 [ 1970.184925][ C1] RSP: 0018:ffffc90004eafaa8 EFLAGS: 00000286 [ 1970.184938][ C1] RAX: ffff8880b8f44600 RBX: ffff88807c5cab40 RCX: ffffea0000bed880 [ 1970.184951][ C1] RDX: 0000000000b5c959 RSI: 0000000000010343 RDI: 0000000000010344 [ 1970.184962][ C1] RBP: ffff88805a9aa000 R08: ffffea0001f17280 R09: 1ffffffff2162049 [ 1970.184975][ C1] R10: dffffc0000000000 R11: fffffbfff216204a R12: ffff88814005e500 [ 1970.184997][ C1] R13: dffffc0000000000 R14: ffffffff81d353ab R15: ffff88814005e500 [ 1970.185011][ C1] ? qlist_free_all+0x6b/0xe0 [ 1970.185036][ C1] ? ___cache_free+0x16/0x160 [ 1970.185054][ C1] qlist_free_all+0x76/0xe0 [ 1970.185074][ C1] kasan_quarantine_reduce+0x144/0x160 [ 1970.185094][ C1] __kasan_slab_alloc+0x1e/0x80 [ 1970.185119][ C1] slab_post_alloc_hook+0x4b/0x490 [ 1970.185138][ C1] ? slab_pre_alloc_hook+0x59/0x300 [ 1970.185157][ C1] ? perf_swevent_init+0x317/0x5f0 [ 1970.185180][ C1] __kmem_cache_alloc_node+0x19d/0x270 [ 1970.185201][ C1] ? perf_swevent_init+0x317/0x5f0 [ 1970.185222][ C1] kmalloc_trace+0x26/0xe0 [ 1970.185249][ C1] perf_swevent_init+0x317/0x5f0 [ 1970.185275][ C1] perf_try_init_event+0x12b/0x3d0 [ 1970.185295][ C1] ? perf_event_alloc+0xb28/0x21e0 [ 1970.185311][ C1] perf_event_alloc+0xfbc/0x21e0 [ 1970.185329][ C1] ? _raw_spin_unlock+0x24/0x40 [ 1970.185348][ C1] ? find_lively_task_by_vpid+0x19/0x290 [ 1970.185368][ C1] ? find_lively_task_by_vpid+0x19/0x290 [ 1970.185391][ C1] __se_sys_perf_event_open+0x701/0x1ec0 [ 1970.185425][ C1] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 1970.185462][ C1] ? syscall_enter_from_user_mode+0x2a/0x80 [ 1970.185480][ C1] ? __x64_sys_perf_event_open+0x1c/0xc0 [ 1970.185508][ C1] do_syscall_64+0x4c/0xa0 [ 1970.185531][ C1] ? clear_bhb_loop+0x60/0xb0 [ 1970.185553][ C1] ? clear_bhb_loop+0x60/0xb0 [ 1970.185576][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1970.185598][ C1] RIP: 0033:0x7f624459de59 [ 1970.185614][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1970.185628][ C1] RSP: 002b:00007f62453d8028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1970.185650][ C1] RAX: ffffffffffffffda RBX: 00007f6244825fa0 RCX: 00007f624459de59 [ 1970.185662][ C1] RDX: ffefffffffffffff RSI: 0000000000000000 RDI: 0000200000000fc0 [ 1970.185673][ C1] RBP: 00007f6244633e6f R08: 0000000000000000 R09: 0000000000000000 [ 1970.185684][ C1] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1970.185694][ C1] R13: 00007f6244826038 R14: 00007f6244825fa0 R15: 00007ffc04e96508 [ 1970.185716][ C1] [ 1975.895059][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1975.901557][ T1279] ieee802154 phy1 wpan1: encryption failed: -22