last executing test programs: 6.796562374s ago: executing program 0 (id=4512): r0 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) sendmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000440)="a6", 0xffffff58}], 0x1, 0x0, 0x0, 0x6000000}, 0x40001) 6.295679715s ago: executing program 2 (id=4514): socket$kcm(0x11, 0x2, 0x300) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90324fc60100005000a000248053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000380)=@caif=@dgm={0x25, 0x5, 0x3}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000440)="27033000bdfd28000600002fb96dbcf706e10500000086ddffff1144ee162fd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e57757889329065584abc5c24f06a9aacb41b94bfa8791938ca3f957c4e1cc4103c44d2df92ed94c0811439b445170c9444f1d5cf152d88ec04922505d5ee0412b2d7b2b0f732fc50438cb5f8225d82a50000000000000000", 0x94}, {&(0x7f0000000200)="8bfda0fae4fcd4a9de55ad3b1c2d1fdee363ddc06dfda6f2edea373945", 0x1d}, {&(0x7f0000000240)="5e82ef7627234e55062c4c902b6fddb40d2a73b0394dc7f1eedb60de68c183e13eff48d039321926dacb4db2728458d7947bf7dbf748f38c3c4573303d8e742bd9d60dc9ab48e0561c3f5f17bc661582113d687bc8cb8dc28ecd3963b80f16af4bc1cf1c38d08332c86308b3f75aeb1148", 0x71}, {&(0x7f0000000e00)="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", 0xfa}, {&(0x7f00000018c0)="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", 0xd2e}], 0x5}, 0x2000000000000000) 5.920373273s ago: executing program 2 (id=4519): r0 = perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x408, 0x0, 0x8, 0x0, 0x4000003, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r2, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x1030000, @mcast1, 0x9}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b3335fe80000000000000dc8b850f238466ccfe807a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x0) 5.845137215s ago: executing program 0 (id=4520): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0x400100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000240)=@in={0x2, 0x4e24, @broadcast}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000500)="aeda4f785c1f24079a31e2221ab0d3e567f43df1451c40c8871a4074aaebdb81a9ab5a6d44295f3f5f3a870acb8d4e27e105749404b1ece38fc1e222f835d4b50d445b568060db6fdbda213c53473b68f8cceb94832ba223121957af3d085ffa8bc29d1cadf52b8cbcb4aa4017d138c4860513f6363e5029bf4b88a6eb1e894274055dcc5d809285ff6d01ceaadf39bd0868b1d5c25bd3907be3f2fe8ff126961bccd2b896a3e2cfcae7d4ff4b65179935c4a4399560", 0xb6}], 0x1, &(0x7f00000006c0)=[@mark={{0x14, 0x1, 0x24, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0x50}}], 0x30}, 0x4000000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="058456bef79f000000fcb3", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0xc2ba, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x4, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_queued\x00', 0x26e1, 0x0) ioctl$TUNSETNOCSUM(r2, 0xc0189436, 0x8000001ffffffd) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x8, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x80000000}, 0x50) recvmsg$unix(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@rights={{0x10}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x50}, 0x40000002) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000000)=r7, 0x10) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000180)) r8 = socket$kcm(0x2, 0x200000000000003, 0x106) sendmsg$inet(r8, &(0x7f0000000280)={&(0x7f0000000000)={0x2, 0x4e23, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_ttl={{0x14, 0x0, 0x34, 0x4}}], 0x18}, 0x810) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff00000085000000a800000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b70400000000000085000000c300000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r9}, 0xc) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x18, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2a}, 0x94) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r10) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') 5.451720203s ago: executing program 2 (id=4524): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x7b64, &(0x7f0000000280)=[{&(0x7f0000000100)="5c00000012006bab9e3fe3d8fd8978f45225d9ee0000d8167ea60860160af36504000100080ec000000002009ee517c356a7b0251e61e659ad3af435cf01c937e786a6d0bdd7fcf50e4509c5cc68b7ed9c232d786c35fe000fff0000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 5.298996127s ago: executing program 1 (id=4525): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r3], 0x12) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r4, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff000300"/24], &(0x7f0000000480)='syzkaller\x00'}, 0x80) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x31) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_ext={0x1c, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x8000, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000800)={0x3, 0x5, 0x8000, 0x124}, 0x10, 0x92ee, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b2d, &(0x7f0000000040)={'wlan1\x00', @random="86ffb7b8252c"}) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394", 0xf}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81ffffffffb9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0xfe33) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0a000000080000004200000040000000c2000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000004000000000000000000000000000000000005f3a14d00000005966505787aa52d1221468a9949742d7ef12e21b405bfc9dfa8f234eb28c366214857e30418b9689091a4a72b50011258ae0535813a3634897c1601b37010ff8a720697b100e0e9d89b4"], 0x48) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r8, 0x401054d5, &(0x7f0000000240)={0x2, &(0x7f00000001c0)=[{0x20, 0x0, 0x3f, 0xfffff000}, {0x16, 0x0, 0x6, 0xa}]}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r7}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={r7, &(0x7f00000001c0)="7b4d62fa24bc8822", 0x0}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7050000080000a8c5000000a50000001801000020206405000000000004000f7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70400000000000085000000a700000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r9, 0x0, 0x0, 0xfffffffffffffdf3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.904104025s ago: executing program 2 (id=4527): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x17}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x402, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x2, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x6, &(0x7f0000000040), 0x3) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000100)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB='1-0'], 0x31) socket$kcm(0x28, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) close(r1) r4 = socket$kcm(0x10, 0x2, 0x0) openat$cgroup_int(r2, &(0x7f00000002c0)='hugetlb.1GB.failcnt\x00', 0x2, 0x0) r5 = socket$kcm(0x10, 0x3, 0x10) socketpair(0x22, 0x5, 0x26, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0xfffffffffffffffe, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000780)}, 0x4004010) setsockopt$sock_attach_bpf(r4, 0x84, 0x14, &(0x7f0000000300)=r0, 0x1f) ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, &(0x7f0000000200)=0x5) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan1\x00', 0x800}) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8946, &(0x7f0000000080)) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002d000b12d25a80648c2594f90124fc60100c02000a040000053582c137153e370248078011f01700d1bd", 0x33fe0}], 0x1}, 0x0) 4.788525328s ago: executing program 0 (id=4529): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x38, 0x0, 0x1c, 0x1c, 0x4, [@func_proto={0x2, 0x2, 0x0, 0xc, 0x2, [{}, {}]}]}, {0x0, [0x0, 0x0]}}, 0x0, 0x38}, 0x20) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8940, &(0x7f0000000080)) r1 = getpid() perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x9}, 0x0, 0x0, 0xc2ba}, r1, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x3, 0x200, 0x0, 0x0, 0x0, 0x0, 0x400000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000010010000010000000000000000000000100000000000000010010000"], 0x28}, 0xfc40) r3 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0xfc00) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) socketpair(0x1, 0x801, 0x0, &(0x7f0000000500)) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x60000040) syz_clone(0x188000, 0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140), 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@const={0x0, 0x0, 0x0, 0x2, 0x22}, @func_proto={0x2, 0x0, 0x0, 0x8, 0x2}, @var={0x2, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x44}, 0x28) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f00000001c0), 0x9}, 0x0, 0x0, 0xc2ba, 0x5, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_devices(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40305829, &(0x7f0000000040)=0x20000) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) 4.651506161s ago: executing program 4 (id=4531): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40040, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e281ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014006040400030404009bbc", 0x5a}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="3504000010000511d25a80648c63940d0324fc60040035400c", 0x19}], 0x1}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="97d9deabea352018000000000000006761110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b63d25a80648c2594f90124fc60100c06", 0x17}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="3504000040000511d25a35400c0002000200002037153e370c040180060410", 0x1f}], 0x1}, 0x10049014) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b619f132470562369f91a24fc600702", 0x16}], 0x1, 0x0, 0x0, 0x400300}, 0x20044050) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) close(r0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x7, 0xfe, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800001200000000000000000095000000"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(0x0, 0x0, 0x1, r1, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x80) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002040)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001fc0), &(0x7f0000002000)=r2}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002140)={0x11, 0xd, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x7}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @jmp={0x5, 0x1, 0xd2d61aad7da82887, 0xb, 0x1, 0xfffffffffffffffc, 0xfffffffffffffffc}, @map_fd={0x18, 0x3}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x1}]}, &(0x7f00000005c0)='GPL\x00', 0x9, 0x1000, &(0x7f0000000c40)=""/4096, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001f40)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000001f80)={0x1, 0x10, 0xc, 0x5}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000002080)=[r3], &(0x7f00000020c0)=[{0x1, 0x1, 0x7, 0x6}, {0x0, 0x2, 0x8, 0x6}, {0xfff, 0x5, 0xa, 0x5}, {0x4, 0x4, 0x7, 0x4}, {0x2, 0x1, 0x10}, {0x4, 0x2, 0x5}, {0x2, 0x2, 0x9, 0x1}], 0x10, 0x5}, 0x94) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000200)=@generic={&(0x7f00000001c0)='./file0\x00', 0x0, 0x8}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="89000000120081ae08060cdc030ec0007f03e3f700000001", 0x18}], 0x1}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000100000000a500000000000018490000fe"], 0x0, 0xfffffc22, 0x0, 0x0, 0x41100, 0x19, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa7e3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2e0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x12, 0x0, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b3114", 0x0, 0x0, 0x3}, 0x50) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d087277b9b108b4ab51c"], 0xfe33) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)="d8000000580081044e81f782db44b904021d080009000200e8fe55a1180015000600142603600e120900210000000401a80016000a00014006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7ce", 0x6c}, {&(0x7f0000000540)="47e2ef3330b4efa56e2aed9961d244728046f7e077f2e17fe99eb02cc704ca74e513a8046b12c800061e2d1a3b750e5d29002c99980f4a0ccd7a793f2f41bf6f028eb2ad8ba2068150ea4164d3cc2563ae7aaa346f975c0bbc6150f0b4ad75d246ac5fecbd465371b5cf8316", 0x6c}], 0x2}, 0x84884) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe000019"], 0xfe33) 4.303822018s ago: executing program 3 (id=4532): socket$kcm(0x2c, 0x3, 0x0) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2d0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext, 0x10c002, 0xac5d, 0x10000200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x2}, 0x50) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000018c0)=ANY=[@ANYBLOB="0300000000040000060000000800000000080000", @ANYRES32=r1, @ANYBLOB='zs\x00'/20, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="01000000040000000200000000000001000100"/28], 0x50) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x200000007ff}, 0x10022, 0xac5f, 0x0, 0x0, 0x0, 0x67af}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff200000000021000aac141419e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000002280)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x4, 0x1000, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0f000000040000000400000047"], 0x50) r9 = gettid() sendmsg$unix(r7, &(0x7f0000007040)={&(0x7f0000001940)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000006f00)=[{&(0x7f0000001a80)="cf1d4267011c363ee47d142e49484d0e851272b42aeb5509f750cf8b960b5ef62669abd13aa03137710fc64c8a3ba57ae1d9ee980d2ef9ad0524a8b55bf789a7b04d2ee1b899bea5e87b6b4edc98f6d3c94e8a57ab56eeefdfb6340d699edd1babb379", 0x63}, {&(0x7f0000002b40)="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", 0xfd}, {&(0x7f0000005d00)="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", 0xd7c}, {&(0x7f0000006d00)="79e137137032b6f46e3e", 0xa}, {&(0x7f0000006d40)="d3a014b999b34a4526dd4bb22b0aa12aecae78cabf3fa36306efcff6ceb9ba2677401b8042f319f48dc4ec16f1250a60249c4886861231a071c61d5717863cf64a1bb7e9443b2066c8a31d6a1ee6e6cc1a8d34a0901e973b0e4b87aa661865df375004e6a2086c7e79d25b850212714a108764794cb6835de4854eca6d39918402a58bba613d9c0c23ba560dc69acfdac70f76d393ed96e5a62a61394ddebb647909e835d01b", 0xa6}, {&(0x7f0000006e00)="485355b00fdc2af251529c8a8ebe832a34bb7892dd2640613281917c36c8d5b701d8e1ae598c4ac35669e9c5becc75a8b14bb1b31e75331cb7096b4fbe0070808885f3887e2316002eff3215a67a477fb1374c7689855f5d187b44465b8fbae2af196a363176", 0x66}], 0x6, &(0x7f0000006f80)=[@rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {r9, 0xee01}}}, @rights={{0x24, 0x1, 0x1, [r7, r5, r2, r0, r0]}}, @rights={{0x10}}], 0x68, 0x4000004}, 0x40800) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000001100)={r8, &(0x7f0000000100), &(0x7f0000000000)=""/95, 0x2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000100)=r6, 0x120) 3.903997107s ago: executing program 1 (id=4533): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x17}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x402, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x2, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x6, &(0x7f0000000040), 0x3) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000100)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB='1-0'], 0x31) socket$kcm(0x28, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) close(r0) socket$kcm(0x10, 0x2, 0x0) openat$cgroup_int(r1, &(0x7f00000002c0)='hugetlb.1GB.failcnt\x00', 0x2, 0x0) socketpair(0x22, 0x5, 0x26, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x9, 0x3}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r3, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000540)={0xffffffffffffffff, 0x0, 0x0}, 0x20) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x8}, 0x14b4, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0xf0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0xa836, 0x6}, 0x0, 0x2, 0xfffffffe, 0x1, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r4 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r4, &(0x7f0000000b40)={&(0x7f0000000200)={0x2, 0x4c20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xf}, @loopback}}}], 0x20}, 0xe900) sendmsg$kcm(r4, &(0x7f00000020c0)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000080)="d12c7b706724a010c2", 0x9}, {&(0x7f0000000b80)="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", 0x5a0}], 0x2}, 0x24000000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) close(r5) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x55, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20012, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8, 0x36f3}, 0x0, 0x1000000000001, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) 3.877864827s ago: executing program 2 (id=4534): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000080000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x4, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="00000000000000000000a0"], 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x31) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000a8c5000000a50000001801000020206405000000000004000f7b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b70400000000000085000000a700000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x0, 0xfffffffffffffdf3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) socket$kcm(0xa, 0x922000000003, 0x11) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x5, 0x0, 0x0, 0x0, 0xe2b, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x9}, 0x10180}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x30000400, &(0x7f0000000300)="e721d729364cd1edf91a82577b4cb918c6c822604df8db3d8296fef00d48e4b19698ca75c4d131aafb47c8cffab9d8fbb5df545c22be8564e619f836aa17a1e08c98533fca7569341401554d9aa1f53623c6abcceba692761156cf9cd46e3537dcfea76c9c33abfe24867bef85a88663ae24a63d0bd28f62154afef4d66f36619b9c21dec4b74e6b7792d3fff6dd93e7210500d9f5b6e60985c807a820a27196ee8fcaa52c77cec80fd4879761a882ac2c9a7506db5c80a195ddf83d83521786794dfe0b456a6d8fad706f428e8128271e096ee258e75c15e87a8cdf838d329949cb957bc279", 0xe6, &(0x7f0000000580), &(0x7f00000006c0), &(0x7f0000000700)="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") perf_event_open(0x0, r3, 0xffffffffffffffff, r0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb01001800000000000000"], &(0x7f00000001c0)=""/257, 0x2a, 0x101, 0x6}, 0x28) r4 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r4, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x2c}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000000)='Gb', 0x1c}], 0x1}, 0x480c0) r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x8}, 0x63c4, 0x20000, 0xc2b8, 0x5, 0x4000000, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="d8000000120081414e81f782db010000001d080b01008100e8fe55a1010115000600142603600e1208002e0040001101a8001200a400014006000d30514d3afab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef6aa98516277ce06bba020017cbec040000000000000000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4688df216265e5dbf66f282ac027812cfbd3f1aeb4edbb57a7025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40d", 0xd8}], 0x1}, 0xc000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 3.7666253s ago: executing program 4 (id=4535): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b000000000000000000000000000400000000003a2be99d967d6667878f0b2c2edb70f2fde9de17934f45ea0285579a219fce93258825a8e601e327307e2843caad451811853faee6245164bad150823d43478e300b8cb7fe9b905ebe6e013bacf69327a4b7764afc7f0d7023", @ANYRES32=0x0, @ANYRES16, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000ac0)={0xffffffffffffffff, r1}, 0xc) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1000000, 0xfffffffc, 0x0, 0x0, 0x0, 0xd6f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x51004400, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89a3, &(0x7f0000000cc0)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00l \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="f300"}) 3.631349503s ago: executing program 1 (id=4538): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0xf3}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x48) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x9, 0x82a6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000001c0)}, {&(0x7f0000000140)="aa581ff83dac4a519b67538bfa897e210c31e1446808358248cf2d795634b12c4ce81c3876aff89235b78ea0e5c5badfa122797d62c09ada7441b4f31cd5e6fc4b2a325fb5e811fead55530751e6f4bc4b40d94743ed5bd8ec1fff7b0abcc6eaabeb7a2f", 0x64}], 0x2}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000200)="9902000012006b989e3fe3d86e6c1d0000147ea60864160af36504b68675f8001d6f7900a0e69ee517d24460bc24eab556a705251e6182949a36c2151fef08d8cdbf9367b41ad206000000f408000300", 0x50}, {&(0x7f0000000700)}, {&(0x7f0000000500)="5e191aea3468a5eab1c3d6024b43dece099475c81c53aa9244d866f68b8e31e93b41b432fb0454234620a25706bfb6f01ce01093b7ff634785d8b345ef8f7a928034820bbd37467d1049ac7a724c153c358d6f7efd919bb918734e846598b03733a6f4bbce06471d3a440e14dae67170cbfea76bc33481c28ec2cfad1f3d83ddece3006d5bb30dc4288dd40bd476cc7f94d143c56e54ed4d84b9c1ecc87fc035c7c992767edcfe2218bc6542a6a3a9b879e8aa6d652d277ee640cc15d2e9efe30584ed57ab208ca4db6cf63381804a5e", 0xd0}], 0x3, 0x0, 0x0, 0x1f00c00e}, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x2, 0x1, 0x84) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x108ea5, 0xc78, 0x0, 0x0, 0x0, 0x0, 0xae7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0e00000004000000040000000f"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r5}, 0xc) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876cff0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a70d251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4080) recvmsg$kcm(r7, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2020) recvmsg$kcm(r7, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x40000100) r8 = socket$kcm(0x11, 0x3, 0x0) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={0x0, &(0x7f00000008c0)=""/57, 0x0, 0x39, 0x0, 0x8, 0x10000}, 0x28) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a40)=@bpf_tracing={0x1a, 0x14, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@map_idx_val={0x18, 0x2, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x41a}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @map_fd={0x18, 0xb, 0x1, 0x0, r4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x1}}}, &(0x7f0000000600)='syzkaller\x00', 0x51d, 0x67, &(0x7f0000000640)=""/103, 0x41100, 0x0, '\x00', 0x0, 0x17, r9, 0x8, &(0x7f0000000980)={0x7, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x164f2, 0xffffffffffffffff, 0x2, &(0x7f00000009c0)=[r10, r4, r0, r4], &(0x7f0000000a00)=[{0x1, 0x4, 0x1, 0x1}, {0x5, 0x1, 0x10, 0x9}], 0x10, 0x1}, 0x94) sendmsg$kcm(r8, &(0x7f00000001c0)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0xd}, 0x80, &(0x7f00000018c0)=[{&(0x7f0000000180)="27050200160014000600002f8035", 0xe}], 0x1}, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000029000b05d25a806f8c6394f90424fc60", 0x14}], 0x1}, 0x0) 2.862695149s ago: executing program 3 (id=4539): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0xb}, {0x6d}}, [@printk={@lld, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x4, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x15}}], {{0x6, 0x1, 0xc, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x108282, 0xac5d, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x41}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000}, 0x48) 2.33378507s ago: executing program 4 (id=4540): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x8, 0x0, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r0, &(0x7f00000001c0)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x3e71, @mcast1, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000440)="f4000900062b8825fe80000000000000dc8f850f23846632189c54ebcc00007a000000ad6e911b51", 0x28}], 0x1}, 0x0) 2.108016026s ago: executing program 3 (id=4541): socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="020000000400000008000000019c0e4dc3000000", @ANYRES32=0x0, @ANYBLOB="0000000400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000200)=@generic={&(0x7f00000000c0)='./file0/../file0/../file0/file0\x00', r0}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x2000009, 0x20, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000980), 0x8}, 0x850}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffff4}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000040000000000000"], 0x0, 0x26}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x50) r2 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x890b, &(0x7f0000000000)) socket$kcm(0xa, 0x5, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000300)={r1, 0x20, &(0x7f00000002c0)={&(0x7f0000000240)=""/45, 0x2d, 0x0, &(0x7f0000000280)=""/60, 0x3c}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x0, 0x0, &(0x7f0000000b80)='syzkaller\x00', 0x100, 0x5c, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000100), 0x1001) ioctl$SIOCSIFHWADDR(r3, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc, 0x8}}) ioctl$TUNSETVNETLE(r3, 0x400454dc, &(0x7f0000000c40)=0x1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000c00)=ANY=[@ANYBLOB="2b696f202d698b20c4696f202b63707561636374202d706572665f6576656e7420"], 0x21) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000200)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x2000009, 0x20, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000340), 0x1}, 0x100080, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0xe0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x12) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000120000"], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r4, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) 2.107416025s ago: executing program 1 (id=4542): r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, 0x0, 0x4084) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$kcm(0x2, 0x2, 0x73) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x7ff}, 0x100c, 0x7, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000002000000000000000000000300000000000000000000000000000000000000000000000105"], 0x0, 0x42}, 0x28) recvmsg$kcm(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000380)=""/221, 0xdd}, {&(0x7f00000006c0)=""/72, 0x48}, {&(0x7f0000000740)=""/196, 0xc4}, {&(0x7f0000000840)=""/55, 0x37}, {&(0x7f0000000880)=""/138, 0x8a}], 0x5, &(0x7f00000009c0)=""/118, 0x76}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000"], 0xfdef) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x8}, 0x63c4, 0x20000, 0xc2b8, 0x5, 0x4000000, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0x2ee0}], 0x13, 0x0, 0x0, 0x10000000}, 0x12cd) socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r1, &(0x7f0000001000)={0x0, 0x0, 0x0}, 0x0) 2.028572917s ago: executing program 2 (id=4543): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00'}) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xe}, 0x10000, 0x0, 0xc2ba, 0x0, 0x4000000, 0x6, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21bef5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d55545a34effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f94306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a835701bea8240399c56ce8f58df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b262341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51427a7f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa08ad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282bffff2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae05334d5a44a020000001c0d882a564d74a7c72bf9a2152b261e58fea6d2f93589cfe261dc0410b5ccc92a5a0eab327a33431d62d2b7c75ce654d556c9e1817c1abca762ab53d40da51560351b673363652e1ecb56cfe4a746a45ab13c6014e9f361ab687d1cd1795ce9e05c817b83d76046bdb3709de5df7499a02d2f636a454b85b987580ada025d83bd7b8df28a540d5ec5537942e79f2f1ab25ea5f563bc77e4f9468bd309469880c7e34150ca886d1f9ac2f7e82dbe296c877d925c38c54cc8137b29028854b6bd57ca893927c331300e16aba792289e135589d93302fc37c73c303e383cdf8ef3f6d6265fe5ee01759d24027475c8901039a898582022bc95992b86dce0710887c8a625d9cbb897bdbfaf49a3f642a169827a9bae4fcfa5212461db000000000000e6ed75ca8fcda7ef3ee336189fef3b3ffb9f38fefc5ff39c4e69e3fa1f8b10ee97123e99b61eba065b1ad67530e7c4f11f9da7ae000002000000610101ad7f79cb9bbf64a0fc109f49fe8799fe266e2ccac80fefe750151f5ddfe51833ec65ece70e07ce8ab5d97db47da8f80000664dc0b86ae2b3ff9d4e220752a6b2f3ea9f793612386496dca5af7b8952aafa796ea7b156d19612297c63bb20e1e0469f7615f67a9218cbace38f5236821314f76302b98afa93044b83989339ca10e6ae30e70e17a82f03e915b8425e8e7a91614306d2ae0bc3550d856f2d7293672b5673d264fc886b0c8bdf436a0fcd21bf9da7bdca98e34cd6e59b0a7ce4ba1b466561aaa35448dff47bb1d7df23d467689a6669e4300d5acf12e4d0b35abf91569f605b2f6df0d861"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) socket$kcm(0x10, 0x3, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x9, 0x2, 0x56d, 0x3, 0x2, 0xffffffffffffffff, 0x4}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r4, 0x0, 0x100000002000000}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000003c0), 0x1000, r4}, 0x38) 1.89217516s ago: executing program 4 (id=4544): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}, [@call={0x85, 0x0, 0x0, 0x7d}], {0x95, 0x0, 0x0, 0x40004}}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.737912093s ago: executing program 0 (id=4545): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0xf3}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x48) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x9, 0x82a6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000001c0)}, {&(0x7f0000000140)="aa581ff83dac4a519b67538bfa897e210c31e1446808358248cf2d795634b12c4ce81c3876aff89235b78ea0e5c5badfa122797d62c09ada7441b4f31cd5e6fc4b2a325fb5e811fead55530751e6f4bc4b40d94743ed5bd8ec1fff7b0abcc6eaabeb7a2f", 0x64}], 0x2}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000200)="9902000012006b989e3fe3d86e6c1d0000147ea60864160af36504b68675f8001d6f7900a0e69ee517d24460bc24eab556a705251e6182949a36c2151fef08d8cdbf9367b41ad206000000f408000300", 0x50}, {&(0x7f0000000700)}, {&(0x7f0000000500)="5e191aea3468a5eab1c3d6024b43dece099475c81c53aa9244d866f68b8e31e93b41b432fb0454234620a25706bfb6f01ce01093b7ff634785d8b345ef8f7a928034820bbd37467d1049ac7a724c153c358d6f7efd919bb918734e846598b03733a6f4bbce06471d3a440e14dae67170cbfea76bc33481c28ec2cfad1f3d83ddece3006d5bb30dc4288dd40bd476cc7f94d143c56e54ed4d84b9c1ecc87fc035c7c992767edcfe2218bc6542a6a3a9b879e8aa6d652d277ee640cc15d2e9efe30584ed57ab208ca4db6cf63381804a5e", 0xd0}], 0x3, 0x0, 0x0, 0x1f00c00e}, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x2, 0x1, 0x84) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x108ea5, 0xc78, 0x0, 0x0, 0x0, 0x0, 0xae7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0e00000004000000040000000f"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r5}, 0xc) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876cff0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a70d251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4080) recvmsg$kcm(r7, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2020) recvmsg$kcm(r7, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x40000100) r8 = socket$kcm(0x11, 0x3, 0x0) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={0x0, &(0x7f00000008c0)=""/57, 0x0, 0x39, 0x0, 0x8, 0x10000}, 0x28) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a40)=@bpf_tracing={0x1a, 0x14, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@map_idx_val={0x18, 0x2, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x41a}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @map_fd={0x18, 0xb, 0x1, 0x0, r4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x1}}}, &(0x7f0000000600)='syzkaller\x00', 0x51d, 0x67, &(0x7f0000000640)=""/103, 0x41100, 0x0, '\x00', 0x0, 0x17, r9, 0x8, &(0x7f0000000980)={0x7, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x164f2, 0xffffffffffffffff, 0x2, &(0x7f00000009c0)=[r4, r10, r4, r0, r4], &(0x7f0000000a00)=[{0x1, 0x4, 0x1, 0x1}, {0x5, 0x1, 0x10, 0x9}], 0x10, 0x1}, 0x94) sendmsg$kcm(r8, &(0x7f00000001c0)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0xd}, 0x80, &(0x7f00000018c0)=[{&(0x7f0000000180)="27050200160014000600002f8035", 0xe}], 0x1}, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000029000b05d25a806f8c6394f90424fc60", 0x14}], 0x1}, 0x0) 1.636846786s ago: executing program 3 (id=4546): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x1) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8000, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff0000, 0xbe, 0x0, 0xffffbffe, 0x0, 0xfffffffffffffff1}, 0x0, 0x20000000000, 0xffffffffffffffff, 0x1) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000003000000000000000040000018010000006c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000080000008500000006000000850000000e00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r0}, 0xc) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0xa0, 0x5, 0x2, 0x0, 0x0, 0x0, 0x9, 0x4022, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xfffffffc, 0x5, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) r2 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8916, &(0x7f0000000000)={r2}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x19a) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000142020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000e02800850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0xa080, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000070000850000001b"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r6) syz_clone(0x2300, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x4, 0xc2ba, 0x4, 0x3fffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) 1.360052201s ago: executing program 4 (id=4547): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000003e40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x54}, 0x42) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x26, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6a0ac4ffaa0638737110a900000000009500000000000000"], &(0x7f0000000480)='GPL\x00'}, 0x90) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) write$cgroup_freezer_state(r4, 0x0, 0x0) openat$cgroup(r4, &(0x7f0000000400)='syz1\x00', 0x200002, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r3, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, &(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x11, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0xdc, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x160, 0xf6, 0x7ff, 0x200, 0xffffffffffffffff, 0x7, '\x00', r5, 0xffffffffffffffff, 0x3, 0x4, 0x4, 0x3}, 0x50) 380.931652ms ago: executing program 1 (id=4548): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000010006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36504201a00040002000c0002009ee517d34460bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bb5b64f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 281.766754ms ago: executing program 4 (id=4549): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) syz_clone(0x32a0000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xffdd) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110e22fff6) close(r5) 83.418759ms ago: executing program 1 (id=4550): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x17}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x402, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x2, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x6, &(0x7f0000000040), 0x3) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000100)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB='1-0'], 0x31) socket$kcm(0x28, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) close(r0) socket$kcm(0x10, 0x2, 0x0) openat$cgroup_int(r1, &(0x7f00000002c0)='hugetlb.1GB.failcnt\x00', 0x2, 0x0) socketpair(0x22, 0x5, 0x26, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x9, 0x3}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r3, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000540)={0xffffffffffffffff, 0x0, 0x0}, 0x20) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x8}, 0x14b4, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0xf0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0xa836, 0x6}, 0x0, 0x2, 0xfffffffe, 0x1, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r4 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r4, &(0x7f0000000b40)={&(0x7f0000000200)={0x2, 0x4c20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xf}, @loopback}}}], 0x20}, 0xe900) sendmsg$kcm(r4, &(0x7f00000020c0)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000080)="d12c7b706724a010c2", 0x9}, {&(0x7f0000000b80)="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", 0x5a0}], 0x2}, 0x24000000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) close(r5) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x55, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20012, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8, 0x36f3}, 0x0, 0x1000000000001, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000b00)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6493790710000000000080000b2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9924be41a9169bdfaf16da915b2e249f21c6eee84309e7a23c19a394830f2539fcb4e0b6eab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bfb1c0e6b1244d35b213bda84cc172afcc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbb888b0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab2e4b380a00d72bc0480f94479757306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b844139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a662d8bc9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e558d17879570c8ad943e392955f4f979ea13201bafe4f0f6ea508000000a0c548552b571bed5647323478a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151fcda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526894aa7fe5e68949a3b304723177d356c4604bca492ecec37e83efceefd78a2533659edc8bef9cb85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d350000000000000000e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e5a61561a9845e4ff29e2bd43b5b923b272341c5e093fd66a2946501559335781092cf8ce987c56cd31121624d7455f2a3666276c3c0e812b28e2f30d035cee5d0e77a3c72208ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f030b8d3ebcef5af469abe753314fae31a09c3a041a1e7b55c4e81dba1e12289ee34463aaf28345bde0c195bc9f022ca8ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262d0af3246eb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a0600adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa7000008000000000000117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cd50feeb7bfad9b7be3283b6450d34264e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5a71e0d7696caba172745c7dd919ffb631820420b75b6522c0e21c882c66f4f25ffb6d95e07e068000000000000eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff201000000000000002e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa66237e0dacc107f532348cc2116473381e961f3d9c8c21578fe3245097c280abe51427b9f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6f0100000000000000f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d174b0000000000000000000000fa08ad0731ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282b6caa2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae0533496b6d58da50ee80a6b9a7438978c5465113f668eb4484350048289d07dbef325d3221a7cb35f812f257941a9781e3214c2a3dcf89d99844b762a9cf17548c54fccad2c7ae8072b82e0880815daf966bd5343c1635e123f868a7167cfcff33320253af570f4ef9c0254afdd89ac3943562b530dd88da8a94013bbaf204bebc38055adc39f07f7c22711f4d1f6dcc928d1578a093c072e0b92babc76f47ee367e745a024a2278319d9a4d1378482b74c516647652bfb6e93002494a5cd74e2a9a4734487062437da23e1efa6ef7674108aaa3ffac859c3577c2637bb3bdc69bc365b1f20dba96b8acca62f3f80045318de0facf2ed44b814e842c2a520159bb6c320cec0910c0b8bd3d547bdfba2e09d24d117ed0388afd37affbad2f9c77c9c1314a16ffe64f5e3744a2fffd7039670f5706e589a4c3868db06fd892d68a547477f8ef686ff0dba7b8c18c94d5a89b0567a851750a35d9cc2217db890d89385fcaa00f0f2e524672e6f4c8bedfd5da5b157709b8265cf511dc5846ab1d85916c4a6b2d1b408575982e11230cbac0a9c6eaa03c945645581f678403c2a936c53ae72940aa92bcf22b82c6bc028e0acdddf9fef595f0f7a9f80c0e4c659ced769ec463d26a81e468846761a8e1efd6a031ab7adc8665e267be0065cc315aa23012423ec8b8492d9b50fa4d8c5891959b761eec6dc988532782fda13239c948e27853606e26225c796b79cc04f3d1a5a13000000001e301d82a27010d3ac6119d2b12caf282413672d20c852c50084d7b2d50754775ed63bc18023c31351af76e24788d96103455693b34e09a163a9f613a7e5530222cebd7fa0fbff32dc98088f9fab33648cc38e87dd2dd6ee157f5f018702696915661715c979b7796d4f101a257688af7c148e8615c938c4ca8a69f6fc585ec1dd1857a501f90b161eff23181a11a2b0da4c58d459cbf9db"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) 80.861718ms ago: executing program 0 (id=4551): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d0000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) syz_clone(0x32a0000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x218334b8}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xffdd) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110e22fff6) close(r5) 0s ago: executing program 3 (id=4552): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0xf3}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x48) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x9, 0x82a6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000001c0)}, {&(0x7f0000000140)="aa581ff83dac4a519b67538bfa897e210c31e1446808358248cf2d795634b12c4ce81c3876aff89235b78ea0e5c5badfa122797d62c09ada7441b4f31cd5e6fc4b2a325fb5e811fead55530751e6f4bc4b40d94743ed5bd8ec1fff7b0abcc6eaabeb7a2f", 0x64}], 0x2}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000200)="9902000012006b989e3fe3d86e6c1d0000147ea60864160af36504b68675f8001d6f7900a0e69ee517d24460bc24eab556a705251e6182949a36c2151fef08d8cdbf9367b41ad206000000f408000300", 0x50}, {&(0x7f0000000700)}, {&(0x7f0000000500)="5e191aea3468a5eab1c3d6024b43dece099475c81c53aa9244d866f68b8e31e93b41b432fb0454234620a25706bfb6f01ce01093b7ff634785d8b345ef8f7a928034820bbd37467d1049ac7a724c153c358d6f7efd919bb918734e846598b03733a6f4bbce06471d3a440e14dae67170cbfea76bc33481c28ec2cfad1f3d83ddece3006d5bb30dc4288dd40bd476cc7f94d143c56e54ed4d84b9c1ecc87fc035c7c992767edcfe2218bc6542a6a3a9b879e8aa6d652d277ee640cc15d2e9efe30584ed57ab208ca4db6cf63381804a5e", 0xd0}], 0x3, 0x0, 0x0, 0x1f00c00e}, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x2, 0x1, 0x84) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x108ea5, 0xc78, 0x0, 0x0, 0x0, 0x0, 0xae7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0e00000004000000040000000f"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r5}, 0xc) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876cff0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a70d251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4080) recvmsg$kcm(r7, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2020) recvmsg$kcm(r7, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x40000100) r8 = socket$kcm(0x11, 0x3, 0x0) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={0x0, &(0x7f00000008c0)=""/57, 0x0, 0x39, 0x0, 0x8, 0x10000}, 0x28) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a40)=@bpf_tracing={0x1a, 0x14, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@map_idx_val={0x18, 0x2, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x41a}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @map_fd={0x18, 0xb, 0x1, 0x0, r4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x1}}}, &(0x7f0000000600)='syzkaller\x00', 0x51d, 0x67, &(0x7f0000000640)=""/103, 0x41100, 0x0, '\x00', 0x0, 0x17, r9, 0x8, &(0x7f0000000980)={0x7, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x164f2, 0xffffffffffffffff, 0x2, &(0x7f00000009c0)=[r4, r10, r4, r0, r4], &(0x7f0000000a00)=[{0x1, 0x4, 0x1, 0x1}, {0x5, 0x1, 0x10, 0x9}], 0x10, 0x1}, 0x94) sendmsg$kcm(r8, &(0x7f00000001c0)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0xd}, 0x80, &(0x7f00000018c0)=[{&(0x7f0000000180)="27050200160014000600002f8035", 0xe}], 0x1}, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000029000b05d25a806f8c6394f90424fc60", 0x14}], 0x1}, 0x0) kernel console output (not intermixed with test programs): /0x3c0 [ 649.169671][T14182] ? sctp_assoc_set_bind_addr_from_ep+0xa1/0x190 [ 649.176000][T14182] sctp_connect_new_asoc+0x2f5/0x6a0 [ 649.181282][T14182] ? __sctp_connect+0xd80/0xd80 [ 649.186129][T14182] ? sctp_sendmsg+0xa60/0x2940 [ 649.190888][T14182] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 649.196428][T14182] ? security_sctp_bind_connect+0x85/0xb0 [ 649.202141][T14182] sctp_sendmsg+0x1686/0x2940 [ 649.206826][T14182] ? sctp_getsockopt+0x8a0/0x8a0 [ 649.211758][T14182] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 649.217910][T14182] ? lockdep_hardirqs_on+0x94/0x140 [ 649.223103][T14182] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 649.229258][T14182] ? inet_sendmsg+0xca/0x2a0 [ 649.233840][T14182] ? inet_send_prepare+0x250/0x250 [ 649.238943][T14182] ____sys_sendmsg+0x5ed/0x9a0 [ 649.243706][T14182] ? __sys_sendmsg_sock+0x30/0x30 [ 649.248721][T14182] ? __import_iovec+0x306/0x510 [ 649.253571][T14182] ? import_iovec+0x6f/0xa0 [ 649.258066][T14182] ___sys_sendmsg+0x2a2/0x360 [ 649.262740][T14182] ? __sys_sendmsg+0x2a0/0x2a0 [ 649.267502][T14182] ? irqentry_enter+0x33/0x50 [ 649.272210][T14182] __se_sys_sendmsg+0x1c3/0x2b0 [ 649.277054][T14182] ? __x64_sys_sendmsg+0x80/0x80 [ 649.281998][T14182] ? syscall_enter_from_user_mode+0x2a/0x80 [ 649.287887][T14182] do_syscall_64+0x4c/0xa0 [ 649.292295][T14182] ? clear_bhb_loop+0x60/0xb0 [ 649.296960][T14182] ? clear_bhb_loop+0x60/0xb0 [ 649.301628][T14182] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 649.307520][T14182] RIP: 0033:0x7fb3b0d9ce59 [ 649.311931][T14182] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 649.331529][T14182] RSP: 002b:00007fb3b1c66028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 649.339937][T14182] RAX: ffffffffffffffda RBX: 00007fb3b1015fa0 RCX: 00007fb3b0d9ce59 [ 649.347901][T14182] RDX: 00000000000003e8 RSI: 00002000000004c0 RDI: 0000000000000015 [ 649.355862][T14182] RBP: 00007fb3b1c66090 R08: 0000000000000000 R09: 0000000000000000 [ 649.363824][T14182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 649.371786][T14182] R13: 00007fb3b1016038 R14: 00007fb3b1015fa0 R15: 00007fffd8ee6c98 [ 649.379761][T14182] [ 649.425563][ T4287] Bluetooth: hci2: command 0x0419 tx timeout [ 649.456236][T14070] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 649.889680][T14206] tap0: tun_chr_ioctl cmd 1074025675 [ 649.895393][T14206] tap0: persist enabled [ 650.215244][T14070] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 650.246847][T14070] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 650.318794][T14220] netlink: 'syz.3.3222': attribute type 29 has an invalid length. [ 650.347526][T14070] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 650.370049][T14070] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 650.460983][T14220] netlink: 'syz.3.3222': attribute type 29 has an invalid length. [ 651.511005][T14070] 8021q: adding VLAN 0 to HW filter on device bond0 [ 651.577883][T14070] 8021q: adding VLAN 0 to HW filter on device team0 [ 651.709656][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 651.729604][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 651.919093][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 651.938603][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 651.990841][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 651.998015][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 657.908044][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 657.919914][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 657.939483][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 657.959117][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 657.966259][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 658.059952][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 658.154969][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 658.271595][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 658.304174][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 658.381000][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 658.389912][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 658.400789][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 658.466759][T14070] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 658.491775][T14070] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 658.528455][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 658.564365][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 658.595692][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 658.627789][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 658.730668][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 659.065251][T14289] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.3244'. [ 659.166427][T14289] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 659.372427][T14297] netlink: 'syz.4.3245': attribute type 3 has an invalid length. [ 659.393452][T14297] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3245'. [ 659.577637][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 659.657392][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 660.523211][T14070] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 660.725798][T14313] netlink: 'syz.0.3250': attribute type 1 has an invalid length. [ 660.726527][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 660.768180][T14313] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.3250'. [ 660.768621][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 660.850355][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 660.864571][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 660.895192][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 660.907667][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 661.128015][T14070] device veth0_vlan entered promiscuous mode [ 661.206452][T14318] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3250'. [ 661.347193][T14070] device veth1_vlan entered promiscuous mode [ 661.495821][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 661.505246][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 661.536366][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 661.554773][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 661.575663][T14070] device veth0_macvtap entered promiscuous mode [ 661.687922][T14070] device veth1_macvtap entered promiscuous mode [ 661.805286][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 661.831978][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 661.872687][T14070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 661.886133][T14070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 661.898158][T14070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 661.909948][T14070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 661.920209][T14070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 661.931877][T14070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 661.945043][T14070] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 661.971278][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 661.992087][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 662.003103][T14070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 662.019906][T14070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 662.035122][T14070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 662.047997][T14070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 662.062812][T14070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 662.082688][T14070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 662.104786][T14070] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 662.176974][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 662.193658][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 662.242740][T14070] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.268858][T14070] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.286567][T14070] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.295818][T14070] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.355983][T14352] netlink: 16222 bytes leftover after parsing attributes in process `syz.4.3262'. [ 662.558393][T14355] netlink: 40227 bytes leftover after parsing attributes in process `syz.3.3264'. [ 662.660511][T14358] netlink: 'syz.3.3264': attribute type 29 has an invalid length. [ 663.214458][ T4299] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 663.263621][ T4299] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 663.264196][T14358] netlink: 'syz.3.3264': attribute type 29 has an invalid length. [ 663.321152][T14355] netlink: 'syz.3.3264': attribute type 29 has an invalid length. [ 663.362936][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 663.402844][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 663.430423][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 663.438037][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 663.649011][T14359] netlink: 'syz.3.3264': attribute type 29 has an invalid length. [ 663.696951][T14370] FAULT_INJECTION: forcing a failure. [ 663.696951][T14370] name failslab, interval 1, probability 0, space 0, times 0 [ 663.794323][T14370] CPU: 0 PID: 14370 Comm: syz.1.3268 Not tainted syzkaller #0 [ 663.801842][T14370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 663.811918][T14370] Call Trace: [ 663.815212][T14370] [ 663.818158][T14370] dump_stack_lvl+0x188/0x24e [ 663.822863][T14370] ? show_regs_print_info+0x12/0x12 [ 663.828084][T14370] ? load_image+0x410/0x410 [ 663.832614][T14370] ? perf_trace_lock_acquire+0x101/0x3f0 [ 663.838266][T14370] ? verify_lock_unused+0x140/0x140 [ 663.843491][T14370] ? perf_trace_lock_acquire+0x101/0x3f0 [ 663.849159][T14370] should_fail_ex+0x390/0x4c0 [ 663.853857][T14370] should_failslab+0x5/0x20 [ 663.858378][T14370] slab_pre_alloc_hook+0x59/0x300 [ 663.863433][T14370] kmem_cache_alloc+0x56/0x2f0 [ 663.868221][T14370] ? skb_clone+0x1e7/0x370 [ 663.872665][T14370] skb_clone+0x1e7/0x370 [ 663.876938][T14370] __netlink_deliver_tap+0x3e4/0x7e0 [ 663.882256][T14370] ? netlink_deliver_tap+0x2e/0x1b0 [ 663.887483][T14370] netlink_deliver_tap+0x19c/0x1b0 [ 663.892622][T14370] netlink_unicast+0x777/0x920 [ 663.897421][T14370] netlink_sendmsg+0x8ad/0xbd0 [ 663.902221][T14370] ? netlink_getsockopt+0x550/0x550 [ 663.907441][T14370] ? aa_sock_msg_perm+0x94/0x150 [ 663.912398][T14370] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 663.917685][T14370] ? security_socket_sendmsg+0x7c/0xa0 [ 663.923138][T14370] ? netlink_getsockopt+0x550/0x550 [ 663.928334][T14370] ____sys_sendmsg+0x5ed/0x9a0 [ 663.933102][T14370] ? __sys_sendmsg_sock+0x30/0x30 [ 663.938117][T14370] ? __import_iovec+0x306/0x510 [ 663.942968][T14370] ? import_iovec+0x6f/0xa0 [ 663.947471][T14370] ___sys_sendmsg+0x2a2/0x360 [ 663.952146][T14370] ? __sys_sendmsg+0x2a0/0x2a0 [ 663.956921][T14370] ? __lock_acquire+0x7bd0/0x7bd0 [ 663.961964][T14370] __se_sys_sendmsg+0x1c3/0x2b0 [ 663.966810][T14370] ? __x64_sys_sendmsg+0x80/0x80 [ 663.971756][T14370] ? lockdep_hardirqs_on+0x94/0x140 [ 663.976960][T14370] do_syscall_64+0x4c/0xa0 [ 663.981371][T14370] ? clear_bhb_loop+0x60/0xb0 [ 663.986038][T14370] ? clear_bhb_loop+0x60/0xb0 [ 663.990711][T14370] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 663.996602][T14370] RIP: 0033:0x7f30fed9ce59 [ 664.001010][T14370] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 664.020718][T14370] RSP: 002b:00007f30ffc54028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 664.029136][T14370] RAX: ffffffffffffffda RBX: 00007f30ff015fa0 RCX: 00007f30fed9ce59 [ 664.037109][T14370] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 000000000000000d [ 664.045078][T14370] RBP: 00007f30ffc54090 R08: 0000000000000000 R09: 0000000000000000 [ 664.053045][T14370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 664.061008][T14370] R13: 00007f30ff016038 R14: 00007f30ff015fa0 R15: 00007ffcf4805bb8 [ 664.068989][T14370] [ 664.092406][T14362] netlink: 'syz.3.3264': attribute type 29 has an invalid length. [ 664.229530][T14370] netlink: 10 bytes leftover after parsing attributes in process `syz.1.3268'. [ 664.380610][T14383] netlink: 'syz.2.3272': attribute type 10 has an invalid length. [ 665.357701][T14399] netlink: 'syz.1.3279': attribute type 2 has an invalid length. [ 665.759278][ T4275] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 665.769096][ T4275] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 665.783155][ T4275] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 665.792248][ T4275] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 665.807941][ T4275] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 665.815701][ T4275] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 666.768955][T14416] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.3284'. [ 666.852054][T14403] chnl_net:caif_netlink_parms(): no params data found [ 667.620558][T14403] bridge0: port 1(bridge_slave_0) entered blocking state [ 667.663599][T14403] bridge0: port 1(bridge_slave_0) entered disabled state [ 667.714159][T14403] device bridge_slave_0 entered promiscuous mode [ 667.819307][T14403] bridge0: port 2(bridge_slave_1) entered blocking state [ 667.838486][T14403] bridge0: port 2(bridge_slave_1) entered disabled state [ 667.899094][ T4287] Bluetooth: hci4: command 0x0409 tx timeout [ 667.920096][T14403] device bridge_slave_1 entered promiscuous mode [ 668.184750][T14403] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 668.308368][T14403] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 668.402472][T14403] team0: Port device team_slave_0 added [ 668.460416][T14403] team0: Port device team_slave_1 added [ 668.474469][T14441] À: port 1(vlan0) entered blocking state [ 668.498879][T14441] À: port 1(vlan0) entered disabled state [ 668.505873][T14441] device vlan0 entered promiscuous mode [ 668.602795][T14403] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 668.614464][T14403] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 668.658731][T14403] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 668.695387][T14403] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 668.743768][T14403] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 668.800205][T14403] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 668.985062][T14403] device hsr_slave_0 entered promiscuous mode [ 669.001821][T14403] device hsr_slave_1 entered promiscuous mode [ 669.061693][T14403] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 669.113828][T14403] Cannot create hsr debugfs directory [ 669.342777][T14453] netlink: 184 bytes leftover after parsing attributes in process `syz.4.3292'. [ 669.978782][ T4287] Bluetooth: hci4: command 0x041b tx timeout [ 670.070578][T14403] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 670.651201][T14403] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 670.839081][T14403] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 671.431737][T14403] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 671.496372][ T9445] device vlan0 left promiscuous mode [ 671.526630][ T9445] À: port 1(vlan0) entered disabled state [ 671.711259][ T9445] device hsr_slave_0 left promiscuous mode [ 671.742704][ T9445] device hsr_slave_1 left promiscuous mode [ 671.835244][ T9445] device veth1_macvtap left promiscuous mode [ 671.850726][ T9445] device veth0_macvtap left promiscuous mode [ 671.856889][ T9445] device veth1_vlan left promiscuous mode [ 671.914331][ T9445] device veth0_vlan left promiscuous mode [ 672.058857][ T4275] Bluetooth: hci4: command 0x040f tx timeout [ 674.116317][T14493] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.3306'. [ 674.139330][ T4275] Bluetooth: hci4: command 0x0419 tx timeout [ 674.961821][T14502] can: request_module (can-proto-0) failed. [ 675.594018][T14493] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 675.602203][T14493] CPU: 1 PID: 14493 Comm: syz.0.3306 Not tainted syzkaller #0 [ 675.609705][T14493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 675.619783][T14493] Call Trace: [ 675.623065][T14493] [ 675.625982][T14493] dump_stack_lvl+0x188/0x24e [ 675.630665][T14493] ? show_regs_print_info+0x12/0x12 [ 675.635888][T14493] ? load_image+0x410/0x410 [ 675.640412][T14493] sysfs_warn_dup+0x8a/0xa0 [ 675.644940][T14493] sysfs_do_create_link_sd+0xc0/0x110 [ 675.650315][T14493] device_add+0x83b/0x1050 [ 675.654750][T14493] wiphy_register+0x1d8b/0x2aa0 [ 675.659637][T14493] ? cfg80211_event_work+0x40/0x40 [ 675.664761][T14493] ? minstrel_ht_alloc+0x894/0xa20 [ 675.669881][T14493] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 675.675968][T14493] ieee80211_register_hw+0x2d48/0x39f0 [ 675.681424][T14493] ? ieee80211_register_hw+0xed1/0x39f0 [ 675.686958][T14493] ? ieee80211_register_hw+0xed1/0x39f0 [ 675.692500][T14493] ? ieee80211_tasklet_handler+0x20/0x20 [ 675.698123][T14493] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 675.704013][T14493] ? __debug_object_init+0xed/0x440 [ 675.709219][T14493] ? memset+0x1e/0x40 [ 675.713210][T14493] ? __hrtimer_init+0x189/0x270 [ 675.718051][T14493] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 675.723764][T14493] ? memcpy+0x3c/0x60 [ 675.727734][T14493] hwsim_new_radio_nl+0xab7/0xc90 [ 675.732757][T14493] genl_family_rcv_msg_doit+0x22f/0x350 [ 675.738293][T14493] ? end_current_label_crit_section+0x170/0x170 [ 675.744527][T14493] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 675.750432][T14493] ? bpf_lsm_capable+0x5/0x10 [ 675.755119][T14493] ? security_capable+0x85/0xb0 [ 675.759977][T14493] genl_rcv_msg+0x601/0x790 [ 675.764499][T14493] ? genl_bind+0x360/0x360 [ 675.768916][T14493] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 675.775266][T14493] netlink_rcv_skb+0x1ef/0x440 [ 675.780030][T14493] ? genl_bind+0x360/0x360 [ 675.784457][T14493] ? netlink_ack+0x1160/0x1160 [ 675.789229][T14493] ? down_read+0x1a8/0x2d0 [ 675.793685][T14493] genl_rcv+0x24/0x40 [ 675.797662][T14493] netlink_unicast+0x7ad/0x920 [ 675.802422][T14493] netlink_sendmsg+0x8ad/0xbd0 [ 675.807181][T14493] ? netlink_getsockopt+0x550/0x550 [ 675.812372][T14493] ? aa_sock_msg_perm+0x94/0x150 [ 675.817298][T14493] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 675.822576][T14493] ? security_socket_sendmsg+0x7c/0xa0 [ 675.828030][T14493] ? netlink_getsockopt+0x550/0x550 [ 675.833221][T14493] ____sys_sendmsg+0x5ed/0x9a0 [ 675.837980][T14493] ? __sys_sendmsg_sock+0x30/0x30 [ 675.843000][T14493] ? __import_iovec+0x306/0x510 [ 675.847847][T14493] ? import_iovec+0x6f/0xa0 [ 675.852347][T14493] ___sys_sendmsg+0x2a2/0x360 [ 675.857014][T14493] ? __sys_sendmsg+0x2a0/0x2a0 [ 675.861795][T14493] __se_sys_sendmsg+0x1c3/0x2b0 [ 675.866638][T14493] ? __x64_sys_sendmsg+0x80/0x80 [ 675.871596][T14493] ? lockdep_hardirqs_on+0x94/0x140 [ 675.876787][T14493] do_syscall_64+0x4c/0xa0 [ 675.881190][T14493] ? clear_bhb_loop+0x60/0xb0 [ 675.885851][T14493] ? clear_bhb_loop+0x60/0xb0 [ 675.890523][T14493] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 675.896435][T14493] RIP: 0033:0x7fed44f9ce59 [ 675.900844][T14493] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 675.920454][T14493] RSP: 002b:00007fed45d74028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 675.928893][T14493] RAX: ffffffffffffffda RBX: 00007fed45215fa0 RCX: 00007fed44f9ce59 [ 675.936872][T14493] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 675.944833][T14493] RBP: 00007fed45032e6f R08: 0000000000000000 R09: 0000000000000000 [ 675.952793][T14493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 675.960763][T14493] R13: 00007fed45216038 R14: 00007fed45215fa0 R15: 00007ffd05e9ab28 [ 675.968776][T14493] [ 676.161384][T14403] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 676.192976][T14403] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 676.211573][T14403] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 676.245716][T14403] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 676.516927][T14403] 8021q: adding VLAN 0 to HW filter on device bond0 [ 676.629705][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 676.637595][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 676.705533][T14403] 8021q: adding VLAN 0 to HW filter on device team0 [ 676.750973][ T4287] Bluetooth: hci5: unexpected event 0x14 length: 15 > 6 [ 676.889187][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 676.921989][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 676.950716][ T4336] bridge0: port 1(bridge_slave_0) entered blocking state [ 676.957885][ T4336] bridge0: port 1(bridge_slave_0) entered forwarding state [ 676.981871][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 677.077475][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 677.097971][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 677.139998][ T4336] bridge0: port 2(bridge_slave_1) entered blocking state [ 677.147183][ T4336] bridge0: port 2(bridge_slave_1) entered forwarding state [ 677.172463][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 680.227624][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 680.290553][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 680.303262][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 680.312905][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 680.322672][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 680.356730][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 680.389763][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 680.409574][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 680.422609][T14403] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 680.463942][T14403] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 680.552490][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 680.568182][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 680.625440][T14546] netlink: 134056 bytes leftover after parsing attributes in process `syz.2.3322'. [ 680.650300][T14543] netlink: 'syz.4.3321': attribute type 3 has an invalid length. [ 680.658075][T14543] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3321'. [ 682.134718][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 682.146945][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 682.264756][T14403] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 682.403555][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 682.419873][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 682.477183][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 682.503122][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 682.537902][T14403] device veth0_vlan entered promiscuous mode [ 682.563228][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 682.583533][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 682.602614][T14403] device veth1_vlan entered promiscuous mode [ 682.727535][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 682.741540][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 682.775591][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 682.807536][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 682.891158][T14403] device veth0_macvtap entered promiscuous mode [ 682.942892][T14403] device veth1_macvtap entered promiscuous mode [ 683.149719][T14403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 683.218711][T14403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 683.228585][T14403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 683.252363][T14403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 683.264075][T14403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 683.279743][T14403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 683.296088][T14403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 683.306977][T14403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 683.319249][T14403] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 683.339459][T14403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 683.364911][T14403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 683.375692][T14403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 683.386537][T14403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 683.397047][T14403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 683.407925][T14403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 683.422077][T14403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 683.433310][T14403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 683.451398][T14403] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 683.483649][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 683.510137][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 683.533207][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 683.554313][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 683.576825][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 683.598540][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 683.636545][T14601] -: renamed from syzkaller0 [ 683.650580][T14403] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 683.669158][T14403] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 683.684357][T14403] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 683.697178][T14403] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 683.801221][T14608] netlink: 10 bytes leftover after parsing attributes in process `syz.4.3340'. [ 684.035872][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 684.055288][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 684.105337][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 684.203571][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 684.220568][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 684.258885][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 684.609349][T14636] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3347'. [ 684.684773][T14634] netlink: 'syz.2.3346': attribute type 25 has an invalid length. [ 684.702971][T14634] netlink: 'syz.2.3346': attribute type 29 has an invalid length. [ 684.735708][T14641] netlink: 5 bytes leftover after parsing attributes in process `syz.2.3346'. [ 684.900272][T14646] device veth1_macvtap left promiscuous mode [ 685.387250][T14658] can: request_module (can-proto-0) failed. [ 685.508509][T14646] device veth1_macvtap entered promiscuous mode [ 685.515321][T14646] device macsec0 entered promiscuous mode [ 685.662701][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.669127][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.034341][T14672] netlink: 'syz.2.3358': attribute type 10 has an invalid length. [ 687.976860][T14718] netlink: 'syz.1.3373': attribute type 25 has an invalid length. [ 688.054984][T14718] netlink: 'syz.1.3373': attribute type 29 has an invalid length. [ 688.406250][T14719] can: request_module (can-proto-0) failed. [ 688.801155][T14730] netlink: 'syz.2.3377': attribute type 1 has an invalid length. [ 688.829163][T14730] netlink: 4070 bytes leftover after parsing attributes in process `syz.2.3377'. [ 688.902278][T14733] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 689.011571][T14733] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 689.459866][T14748] netlink: 188 bytes leftover after parsing attributes in process `syz.3.3385'. [ 689.507192][T14748] ksmbd: Daemon and kernel module version mismatch. ksmbd: 2, kernel module: 1. User-space ksmbd should terminate. [ 689.689314][ T9445] team0: Port device wlan1 removed [ 689.732787][T14755] netlink: 14568 bytes leftover after parsing attributes in process `syz.4.3387'. [ 689.796989][T14761] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3388'. [ 689.994345][ T9445] device hsr_slave_0 left promiscuous mode [ 690.019378][ T9445] device hsr_slave_1 left promiscuous mode [ 690.039564][ T9445] device bridge_slave_1 left promiscuous mode [ 690.045833][ T9445] bridge0: port 2(bridge_slave_1) entered disabled state [ 690.086416][ T9445] device bridge_slave_0 left promiscuous mode [ 690.150752][T14770] netlink: 105128 bytes leftover after parsing attributes in process `syz.4.3392'. [ 690.167678][ T9445] bridge0: port 1(bridge_slave_0) entered disabled state [ 690.527295][T14775] can: request_module (can-proto-0) failed. [ 690.735432][ T9445] device veth1_vlan left promiscuous mode [ 691.622066][ T9445] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 691.675521][ T9445] team0 (unregistering): Port device team_slave_1 removed [ 691.721350][ T9445] team0 (unregistering): Port device team_slave_0 removed [ 691.780927][ T9445] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 692.072275][ T9445] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 692.123516][ T9445] bond0 (unregistering): Released all slaves [ 692.214104][T14794] netlink: 'syz.3.3399': attribute type 15 has an invalid length. [ 692.236998][T14794] netlink: 'syz.3.3399': attribute type 7 has an invalid length. [ 692.478968][T14812] netlink: 'syz.3.3404': attribute type 27 has an invalid length. [ 692.651319][T14812] bond0: (slave bond_slave_0): Releasing backup interface [ 693.782772][T14821] netlink: 14568 bytes leftover after parsing attributes in process `syz.2.3403'. [ 694.045744][T14830] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3409'. [ 694.279017][T14840] netlink: 'syz.2.3412': attribute type 21 has an invalid length. [ 697.295311][T14868] FAULT_INJECTION: forcing a failure. [ 697.295311][T14868] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 697.362018][T14866] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 697.389957][T14868] CPU: 1 PID: 14868 Comm: syz.0.3421 Not tainted syzkaller #0 [ 697.397491][T14868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 697.407569][T14868] Call Trace: [ 697.410874][T14868] [ 697.413827][T14868] dump_stack_lvl+0x188/0x24e [ 697.414745][T14866] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 697.418514][T14868] ? show_regs_print_info+0x12/0x12 [ 697.418544][T14868] ? load_image+0x410/0x410 [ 697.418585][T14868] ? __lock_acquire+0x7bd0/0x7bd0 [ 697.418613][T14868] ? lockdep_hardirqs_on+0x94/0x140 [ 697.418639][T14868] should_fail_ex+0x390/0x4c0 [ 697.418665][T14868] _copy_from_user+0x2c/0x170 [ 697.418692][T14868] do_ipv6_setsockopt+0x312/0x3c30 [ 697.418729][T14868] ? sk_dst_reset+0xa0/0xa0 [ 697.418752][T14868] ? mark_lock+0x94/0x320 [ 697.418780][T14868] ? __lock_acquire+0x130c/0x7bd0 [ 697.418817][T14868] ? __lock_acquire+0x13e3/0x7bd0 [ 697.418851][T14868] ? verify_lock_unused+0x140/0x140 [ 697.493052][T14868] ? mark_lock+0x94/0x320 [ 697.497390][T14868] ? __lock_acquire+0x130c/0x7bd0 [ 697.502425][T14868] ? mark_lock+0x94/0x320 [ 697.506758][T14868] ? aa_label_sk_perm+0x4cc/0x660 [ 697.511780][T14868] ? verify_lock_unused+0x140/0x140 [ 697.516980][T14868] ? aa_sk_perm+0x950/0x950 [ 697.521487][T14868] ? __might_sleep+0xd0/0xd0 [ 697.526079][T14868] ? __fget_files+0x28/0x460 [ 697.530672][T14868] ipv6_setsockopt+0x55/0x190 [ 697.535353][T14868] dccp_setsockopt+0x17d/0x8a0 [ 697.540188][T14868] ? dccp_ioctl+0x1d0/0x1d0 [ 697.544683][T14868] ? aa_sock_opt_perm+0x74/0x100 [ 697.549614][T14868] ? sock_common_setsockopt+0x32/0xb0 [ 697.554998][T14868] ? sock_common_recvmsg+0x190/0x190 [ 697.560280][T14868] __sys_setsockopt+0x2bf/0x3d0 [ 697.565135][T14868] __x64_sys_setsockopt+0xb1/0xc0 [ 697.570158][T14868] do_syscall_64+0x4c/0xa0 [ 697.574575][T14868] ? clear_bhb_loop+0x60/0xb0 [ 697.579243][T14868] ? clear_bhb_loop+0x60/0xb0 [ 697.583909][T14868] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 697.589798][T14868] RIP: 0033:0x7fed44f9ce59 [ 697.594208][T14868] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 697.613808][T14868] RSP: 002b:00007fed431f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 697.622215][T14868] RAX: ffffffffffffffda RBX: 00007fed45216090 RCX: 00007fed44f9ce59 [ 697.630180][T14868] RDX: 000000000000001b RSI: 0000000000000029 RDI: 0000000000000007 [ 697.638146][T14868] RBP: 00007fed431f6090 R08: 0000000000000120 R09: 0000000000000000 [ 697.646111][T14868] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 697.654074][T14868] R13: 00007fed45216128 R14: 00007fed45216090 R15: 00007ffd05e9ab28 [ 697.662049][T14868] [ 697.815574][T14877] netlink: 188 bytes leftover after parsing attributes in process `syz.1.3425'. [ 697.839909][T14877] ksmbd: Daemon and kernel module version mismatch. ksmbd: 2, kernel module: 1. User-space ksmbd should terminate. [ 700.762799][T14920] netlink: 188 bytes leftover after parsing attributes in process `syz.0.3438'. [ 700.812852][T14920] ksmbd: Daemon and kernel module version mismatch. ksmbd: 2, kernel module: 1. User-space ksmbd should terminate. [ 704.488690][T14964] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3455'. [ 705.245882][T14986] netlink: 14560 bytes leftover after parsing attributes in process `syz.0.3465'. [ 705.632838][T14995] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.3468'. [ 705.646473][T14999] netlink: 16222 bytes leftover after parsing attributes in process `syz.0.3470'. [ 705.679483][T14995] bridge: RTM_NEWNEIGH with invalid ether address [ 706.383116][T15015] netlink: 'syz.2.3475': attribute type 10 has an invalid length. [ 706.703422][T15019] netlink: 14560 bytes leftover after parsing attributes in process `syz.4.3479'. [ 708.218832][ T4275] Bluetooth: hci1: command 0x0406 tx timeout [ 708.915335][T15068] netlink: 14548 bytes leftover after parsing attributes in process `syz.1.3495'. [ 709.630740][T15090] netlink: 'syz.4.3506': attribute type 11 has an invalid length. [ 709.638885][T15090] netlink: 140 bytes leftover after parsing attributes in process `syz.4.3506'. [ 709.889559][T15095] netlink: 10 bytes leftover after parsing attributes in process `syz.1.3507'. [ 710.178521][T15099] netlink: 'syz.3.3508': attribute type 19 has an invalid length. [ 710.188839][T15099] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3508'. [ 713.945796][T15113] netlink: 'syz.2.3511': attribute type 15 has an invalid length. [ 713.969029][T15113] netlink: 'syz.2.3511': attribute type 7 has an invalid length. [ 713.976941][T15113] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3511'. [ 714.004877][T15116] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3511'. [ 714.139644][T15116] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 714.179152][T15116] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 714.205811][T15116] bond0 (unregistering): Released all slaves [ 714.221161][T15108] netlink: 14548 bytes leftover after parsing attributes in process `syz.1.3513'. [ 714.241969][T15113] netlink: 'syz.2.3511': attribute type 27 has an invalid length. [ 714.289609][T15121] netlink: 'syz.3.3514': attribute type 22 has an invalid length. [ 714.372445][T15121] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3514'. [ 714.517616][T15122] delete_channel: no stack [ 715.595343][T15157] netlink: 14548 bytes leftover after parsing attributes in process `syz.2.3530'. [ 716.304486][T15174] netlink: 'syz.0.3537': attribute type 10 has an invalid length. [ 716.651293][T15178] netlink: 'syz.3.3538': attribute type 10 has an invalid length. [ 719.731494][T15232] netlink: 14548 bytes leftover after parsing attributes in process `syz.3.3557'. [ 720.945806][T15256] delete_channel: no stack [ 721.312037][T15268] netlink: 14548 bytes leftover after parsing attributes in process `syz.4.3571'. [ 722.424731][T15297] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.3582'. [ 722.852281][T15304] netlink: 14548 bytes leftover after parsing attributes in process `syz.2.3583'. [ 722.891781][T15306] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.3584'. [ 722.919022][T15306] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 722.926909][T15306] CPU: 1 PID: 15306 Comm: syz.0.3584 Not tainted syzkaller #0 [ 722.934391][T15306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 722.944466][T15306] Call Trace: [ 722.947756][T15306] [ 722.950700][T15306] dump_stack_lvl+0x188/0x24e [ 722.955405][T15306] ? show_regs_print_info+0x12/0x12 [ 722.960630][T15306] ? load_image+0x410/0x410 [ 722.965177][T15306] sysfs_warn_dup+0x8a/0xa0 [ 722.969708][T15306] sysfs_do_create_link_sd+0xc0/0x110 [ 722.975099][T15306] device_add+0x83b/0x1050 [ 722.979532][T15306] wiphy_register+0x1d8b/0x2aa0 [ 722.984425][T15306] ? cfg80211_event_work+0x40/0x40 [ 722.989555][T15306] ? minstrel_ht_alloc+0x894/0xa20 [ 722.994679][T15306] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 723.000750][T15306] ieee80211_register_hw+0x2d48/0x39f0 [ 723.006215][T15306] ? ieee80211_register_hw+0xed1/0x39f0 [ 723.011755][T15306] ? ieee80211_register_hw+0xed1/0x39f0 [ 723.017302][T15306] ? ieee80211_tasklet_handler+0x20/0x20 [ 723.022924][T15306] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 723.028816][T15306] ? __debug_object_init+0xed/0x440 [ 723.034013][T15306] ? memset+0x1e/0x40 [ 723.037993][T15306] ? __hrtimer_init+0x189/0x270 [ 723.042841][T15306] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 723.048563][T15306] ? memcpy+0x3c/0x60 [ 723.052542][T15306] hwsim_new_radio_nl+0xab7/0xc90 [ 723.057570][T15306] genl_family_rcv_msg_doit+0x22f/0x350 [ 723.063143][T15306] ? end_current_label_crit_section+0x170/0x170 [ 723.069386][T15306] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 723.075278][T15306] ? bpf_lsm_capable+0x5/0x10 [ 723.079950][T15306] ? security_capable+0x85/0xb0 [ 723.084798][T15306] genl_rcv_msg+0x601/0x790 [ 723.089303][T15306] ? genl_bind+0x360/0x360 [ 723.093714][T15306] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 723.100050][T15306] netlink_rcv_skb+0x1ef/0x440 [ 723.104809][T15306] ? genl_bind+0x360/0x360 [ 723.109219][T15306] ? netlink_ack+0x1160/0x1160 [ 723.113989][T15306] ? down_read+0x1a8/0x2d0 [ 723.118406][T15306] genl_rcv+0x24/0x40 [ 723.122383][T15306] netlink_unicast+0x7ad/0x920 [ 723.127154][T15306] netlink_sendmsg+0x8ad/0xbd0 [ 723.131919][T15306] ? netlink_getsockopt+0x550/0x550 [ 723.137120][T15306] ? aa_sock_msg_perm+0x94/0x150 [ 723.142061][T15306] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 723.147338][T15306] ? security_socket_sendmsg+0x7c/0xa0 [ 723.152796][T15306] ? netlink_getsockopt+0x550/0x550 [ 723.157990][T15306] ____sys_sendmsg+0x5ed/0x9a0 [ 723.162763][T15306] ? __sys_sendmsg_sock+0x30/0x30 [ 723.167779][T15306] ? __import_iovec+0x306/0x510 [ 723.172633][T15306] ? import_iovec+0x6f/0xa0 [ 723.177133][T15306] ___sys_sendmsg+0x2a2/0x360 [ 723.181812][T15306] ? __sys_sendmsg+0x2a0/0x2a0 [ 723.186609][T15306] __se_sys_sendmsg+0x1c3/0x2b0 [ 723.191461][T15306] ? __x64_sys_sendmsg+0x80/0x80 [ 723.196491][T15306] ? lockdep_hardirqs_on+0x94/0x140 [ 723.201691][T15306] do_syscall_64+0x4c/0xa0 [ 723.206122][T15306] ? clear_bhb_loop+0x60/0xb0 [ 723.210816][T15306] ? clear_bhb_loop+0x60/0xb0 [ 723.215504][T15306] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 723.221402][T15306] RIP: 0033:0x7fed44f9ce59 [ 723.225815][T15306] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 723.245415][T15306] RSP: 002b:00007fed45d74028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 723.253826][T15306] RAX: ffffffffffffffda RBX: 00007fed45215fa0 RCX: 00007fed44f9ce59 [ 723.261789][T15306] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 723.269754][T15306] RBP: 00007fed45032e6f R08: 0000000000000000 R09: 0000000000000000 [ 723.277716][T15306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 723.285677][T15306] R13: 00007fed45216038 R14: 00007fed45215fa0 R15: 00007ffd05e9ab28 [ 723.293657][T15306] [ 724.039868][T15317] netlink: 'syz.4.3586': attribute type 25 has an invalid length. [ 724.053834][T15316] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.3587'. [ 724.096219][T15316] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 724.114657][T15316] CPU: 0 PID: 15316 Comm: syz.3.3587 Not tainted syzkaller #0 [ 724.122188][T15316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 724.132278][T15316] Call Trace: [ 724.135577][T15316] [ 724.138533][T15316] dump_stack_lvl+0x188/0x24e [ 724.143260][T15316] ? show_regs_print_info+0x12/0x12 [ 724.148490][T15316] ? load_image+0x410/0x410 [ 724.153042][T15316] sysfs_warn_dup+0x8a/0xa0 [ 724.157579][T15316] sysfs_do_create_link_sd+0xc0/0x110 [ 724.162991][T15316] device_add+0x83b/0x1050 [ 724.167439][T15316] wiphy_register+0x1d8b/0x2aa0 [ 724.172340][T15316] ? cfg80211_event_work+0x40/0x40 [ 724.177481][T15316] ? minstrel_ht_alloc+0x894/0xa20 [ 724.182627][T15316] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 724.188732][T15316] ieee80211_register_hw+0x2d48/0x39f0 [ 724.194235][T15316] ? ieee80211_register_hw+0xed1/0x39f0 [ 724.199810][T15316] ? ieee80211_register_hw+0xed1/0x39f0 [ 724.205393][T15316] ? ieee80211_tasklet_handler+0x20/0x20 [ 724.211058][T15316] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 724.216988][T15316] ? __debug_object_init+0xed/0x440 [ 724.222216][T15316] ? memset+0x1e/0x40 [ 724.226200][T15316] ? __hrtimer_init+0x189/0x270 [ 724.231071][T15316] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 724.236813][T15316] ? memcpy+0x3c/0x60 [ 724.240802][T15316] hwsim_new_radio_nl+0xab7/0xc90 [ 724.245844][T15316] genl_family_rcv_msg_doit+0x22f/0x350 [ 724.251402][T15316] ? end_current_label_crit_section+0x170/0x170 [ 724.257653][T15316] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 724.263554][T15316] ? bpf_lsm_capable+0x5/0x10 [ 724.268231][T15316] ? security_capable+0x85/0xb0 [ 724.273087][T15316] genl_rcv_msg+0x601/0x790 [ 724.277596][T15316] ? genl_bind+0x360/0x360 [ 724.282012][T15316] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 724.288347][T15316] netlink_rcv_skb+0x1ef/0x440 [ 724.293108][T15316] ? genl_bind+0x360/0x360 [ 724.297524][T15316] ? netlink_ack+0x1160/0x1160 [ 724.302290][T15316] ? down_read+0x1a8/0x2d0 [ 724.306705][T15316] genl_rcv+0x24/0x40 [ 724.310683][T15316] netlink_unicast+0x7ad/0x920 [ 724.315456][T15316] netlink_sendmsg+0x8ad/0xbd0 [ 724.320225][T15316] ? netlink_getsockopt+0x550/0x550 [ 724.325422][T15316] ? aa_sock_msg_perm+0x94/0x150 [ 724.330365][T15316] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 724.335647][T15316] ? security_socket_sendmsg+0x7c/0xa0 [ 724.341101][T15316] ? netlink_getsockopt+0x550/0x550 [ 724.346297][T15316] ____sys_sendmsg+0x5ed/0x9a0 [ 724.351066][T15316] ? __sys_sendmsg_sock+0x30/0x30 [ 724.356086][T15316] ? __import_iovec+0x306/0x510 [ 724.360940][T15316] ? import_iovec+0x6f/0xa0 [ 724.365444][T15316] ___sys_sendmsg+0x2a2/0x360 [ 724.370125][T15316] ? __sys_sendmsg+0x2a0/0x2a0 [ 724.374925][T15316] __se_sys_sendmsg+0x1c3/0x2b0 [ 724.379778][T15316] ? __x64_sys_sendmsg+0x80/0x80 [ 724.384725][T15316] ? lockdep_hardirqs_on+0x94/0x140 [ 724.389932][T15316] do_syscall_64+0x4c/0xa0 [ 724.394343][T15316] ? clear_bhb_loop+0x60/0xb0 [ 724.399017][T15316] ? clear_bhb_loop+0x60/0xb0 [ 724.403690][T15316] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 724.409590][T15316] RIP: 0033:0x7f6da779ce59 [ 724.414003][T15316] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 724.433609][T15316] RSP: 002b:00007f6da86a5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 724.442019][T15316] RAX: ffffffffffffffda RBX: 00007f6da7a15fa0 RCX: 00007f6da779ce59 [ 724.449988][T15316] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 724.457950][T15316] RBP: 00007f6da7832e6f R08: 0000000000000000 R09: 0000000000000000 [ 724.465914][T15316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 724.473881][T15316] R13: 00007f6da7a16038 R14: 00007f6da7a15fa0 R15: 00007ffd0ac86b08 [ 724.481862][T15316] [ 726.022643][T15356] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3595'. [ 726.100833][T15355] netlink: 14548 bytes leftover after parsing attributes in process `syz.3.3598'. [ 726.628178][T15371] device syzkaller0 entered promiscuous mode [ 728.698900][ T4287] Bluetooth: hci5: command 0x0406 tx timeout [ 730.172017][T15403] netlink: 14548 bytes leftover after parsing attributes in process `syz.2.3612'. [ 730.181644][T15409] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 730.189280][T15409] IPv6: NLM_F_CREATE should be set when creating new route [ 730.196550][T15409] IPv6: NLM_F_CREATE should be set when creating new route [ 730.203822][T15409] IPv6: NLM_F_CREATE should be set when creating new route [ 730.405189][T15417] device syzkaller0 entered promiscuous mode [ 731.136037][T15442] netlink: 15743 bytes leftover after parsing attributes in process `syz.4.3626'. [ 732.584747][T15467] netlink: 134056 bytes leftover after parsing attributes in process `syz.0.3633'. [ 734.088782][T15463] netlink: 14548 bytes leftover after parsing attributes in process `syz.1.3631'. [ 734.102907][T15467] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 734.113659][T15467] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 734.148919][T15467] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 734.259949][T15474] netlink: 'syz.4.3635': attribute type 28 has an invalid length. [ 734.288719][T15474] netlink: 'syz.4.3635': attribute type 29 has an invalid length. [ 734.296588][T15474] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3635'. [ 734.456831][T15481] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.3638'. [ 734.487358][T15485] netlink: 'syz.1.3638': attribute type 3 has an invalid length. [ 734.540191][T15485] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3638'. [ 734.702274][T15491] netlink: 16054 bytes leftover after parsing attributes in process `syz.0.3640'. [ 734.850039][T15493] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3641'. [ 734.917662][T15498] netlink: 'syz.2.3642': attribute type 22 has an invalid length. [ 734.984561][T15498] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3642'. [ 736.008235][T15535] netlink: 'syz.2.3655': attribute type 39 has an invalid length. [ 736.486860][T15541] device syzkaller0 entered promiscuous mode [ 736.703159][T15550] netlink: 'syz.4.3659': attribute type 33 has an invalid length. [ 736.734107][T15550] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3659'. [ 737.616086][T15573] netlink: 146340 bytes leftover after parsing attributes in process `syz.2.3667'. [ 737.671552][T15573] openvswitch: netlink: Key type 386 is out of range max 32 [ 741.035837][T15583] -: renamed from syzkaller0 [ 741.318179][T15595] netlink: 10 bytes leftover after parsing attributes in process `syz.0.3675'. [ 742.164888][T15624] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3685'. [ 742.700321][T15641] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 742.744849][T15634] netlink: 'syz.2.3690': attribute type 21 has an invalid length. [ 742.774236][T15636] netlink: 'syz.0.3691': attribute type 25 has an invalid length. [ 742.783883][T15636] netlink: 'syz.0.3691': attribute type 29 has an invalid length. [ 742.793013][T15642] netlink: 5 bytes leftover after parsing attributes in process `syz.0.3691'. [ 742.990867][T15647] device syzkaller0 entered promiscuous mode [ 743.602583][T15664] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3701'. [ 743.912705][T15677] netlink: 'syz.2.3706': attribute type 10 has an invalid length. [ 744.018929][T15683] netlink: 'syz.1.3708': attribute type 10 has an invalid length. [ 744.186974][T15683] team0: Device wg1 is of different type [ 745.010133][T15708] netlink: 168 bytes leftover after parsing attributes in process `syz.4.3718'. [ 745.769263][T15733] netlink: 'syz.2.3727': attribute type 3 has an invalid length. [ 745.800420][T15735] netlink: 'syz.2.3727': attribute type 3 has an invalid length. [ 745.808195][T15735] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3727'. [ 745.870715][T15733] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3727'. [ 746.780347][T15755] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3734'. [ 747.103494][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.112114][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.145417][T15763] netlink: 'syz.0.3737': attribute type 25 has an invalid length. [ 747.256523][T15763] netlink: 'syz.0.3737': attribute type 29 has an invalid length. [ 747.284006][T15766] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3737'. [ 747.367188][T15774] netlink: 132028 bytes leftover after parsing attributes in process `syz.3.3740'. [ 748.164135][T15794] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 748.331480][T15794] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 748.907205][T15798] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3748'. [ 749.178906][ T4275] Bluetooth: hci0: command 0x0406 tx timeout [ 749.949484][T15817] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3755'. [ 750.757419][T15841] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3763'. [ 751.487083][T15866] netlink: 103592 bytes leftover after parsing attributes in process `syz.3.3773'. [ 752.501880][T15877] netlink: 'syz.3.3776': attribute type 2 has an invalid length. [ 752.573747][T15877] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3776'. [ 752.941721][T15888] netlink: 'syz.3.3780': attribute type 15 has an invalid length. [ 752.968758][T15888] netlink: 'syz.3.3780': attribute type 7 has an invalid length. [ 753.222292][T15888] netlink: 'syz.3.3780': attribute type 10 has an invalid length. [ 753.316753][T15888] bridge0: port 2(bridge_slave_1) entered disabled state [ 753.325084][T15888] bridge0: port 1(bridge_slave_0) entered disabled state [ 753.403146][T15888] bridge0: port 2(bridge_slave_1) entered blocking state [ 753.410939][T15888] bridge0: port 2(bridge_slave_1) entered listening state [ 753.420023][T15888] bridge0: port 1(bridge_slave_0) entered blocking state [ 753.427431][T15888] bridge0: port 1(bridge_slave_0) entered listening state [ 753.458554][T15888] team0: Port device bridge0 added [ 753.495892][T15898] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3781'. [ 753.569485][T15894] netlink: 'syz.4.3782': attribute type 4 has an invalid length. [ 753.741039][T15902] netlink: 'syz.1.3785': attribute type 27 has an invalid length. [ 754.431557][T15902] bond0: (slave bond_slave_0): Releasing backup interface [ 754.731310][T15905] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 754.741235][T15911] netlink: 'syz.0.3788': attribute type 15 has an invalid length. [ 754.765422][T15911] netlink: 'syz.0.3788': attribute type 7 has an invalid length. [ 754.773841][T15905] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 754.798697][T15905] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 754.843054][T15917] netlink: 'syz.2.3789': attribute type 10 has an invalid length. [ 754.928786][T15917] team0: Device dummy0 is up. Set it down before adding it as a team port [ 755.902542][T15949] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3800'. [ 756.022668][T15946] netlink: 14548 bytes leftover after parsing attributes in process `syz.4.3798'. [ 756.283959][T15954] netlink: 'syz.2.3802': attribute type 4 has an invalid length. [ 756.337023][T15954] netlink: 193092 bytes leftover after parsing attributes in process `syz.2.3802'. [ 756.499184][T15962] netlink: 196 bytes leftover after parsing attributes in process `syz.3.3804'. [ 757.071298][T15972] FAULT_INJECTION: forcing a failure. [ 757.071298][T15972] name failslab, interval 1, probability 0, space 0, times 0 [ 757.122165][T15972] CPU: 0 PID: 15972 Comm: syz.2.3807 Not tainted syzkaller #0 [ 757.129687][T15972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 757.139757][T15972] Call Trace: [ 757.143047][T15972] [ 757.145992][T15972] dump_stack_lvl+0x188/0x24e [ 757.150688][T15972] ? sctp_sendmsg+0x1686/0x2940 [ 757.155553][T15972] ? ___sys_sendmsg+0x2a2/0x360 [ 757.160422][T15972] ? show_regs_print_info+0x12/0x12 [ 757.165640][T15972] ? load_image+0x410/0x410 [ 757.170180][T15972] should_fail_ex+0x390/0x4c0 [ 757.174868][T15972] should_failslab+0x5/0x20 [ 757.179365][T15972] slab_pre_alloc_hook+0x59/0x300 [ 757.184409][T15972] ? sctp_add_bind_addr+0x89/0x350 [ 757.189527][T15972] __kmem_cache_alloc_node+0x4f/0x270 [ 757.194897][T15972] ? sctp_add_bind_addr+0x89/0x350 [ 757.200000][T15972] kmalloc_trace+0x26/0xe0 [ 757.204421][T15972] sctp_add_bind_addr+0x89/0x350 [ 757.209360][T15972] sctp_copy_local_addr_list+0x317/0x4d0 [ 757.215004][T15972] ? sctp_copy_local_addr_list+0xa0/0x4d0 [ 757.220732][T15972] ? sctp_do_8_2_transport_strike+0x900/0x900 [ 757.226798][T15972] ? sctp_v4_is_any+0x31/0x50 [ 757.231472][T15972] ? sctp_copy_one_addr+0x93/0x660 [ 757.236580][T15972] sctp_bind_addr_copy+0xaf/0x3c0 [ 757.241951][T15972] ? sctp_assoc_set_bind_addr_from_ep+0xa1/0x190 [ 757.248280][T15972] sctp_connect_new_asoc+0x2f5/0x6a0 [ 757.253563][T15972] ? __sctp_connect+0xd80/0xd80 [ 757.258408][T15972] ? __local_bh_enable_ip+0x136/0x1c0 [ 757.263778][T15972] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 757.269316][T15972] ? security_sctp_bind_connect+0x85/0xb0 [ 757.275030][T15972] sctp_sendmsg+0x1686/0x2940 [ 757.279711][T15972] ? sctp_getsockopt+0x8a0/0x8a0 [ 757.284641][T15972] ? __might_fault+0xa6/0x120 [ 757.289313][T15972] ? aa_af_perm+0x340/0x340 [ 757.293812][T15972] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 757.300229][T15972] ? inet_sendmsg+0xca/0x2a0 [ 757.304821][T15972] ? inet_send_prepare+0x250/0x250 [ 757.309930][T15972] ____sys_sendmsg+0x5ed/0x9a0 [ 757.314693][T15972] ? __sys_sendmsg_sock+0x30/0x30 [ 757.319706][T15972] ? __import_iovec+0x306/0x510 [ 757.324557][T15972] ? import_iovec+0x6f/0xa0 [ 757.329054][T15972] ___sys_sendmsg+0x2a2/0x360 [ 757.333724][T15972] ? lock_chain_count+0x20/0x20 [ 757.338572][T15972] ? __sys_sendmsg+0x2a0/0x2a0 [ 757.343346][T15972] ? __lock_acquire+0x7bd0/0x7bd0 [ 757.348385][T15972] __se_sys_sendmsg+0x1c3/0x2b0 [ 757.353225][T15972] ? ct_nmi_exit+0x145/0x1c0 [ 757.357816][T15972] ? __x64_sys_sendmsg+0x80/0x80 [ 757.362758][T15972] ? lockdep_hardirqs_on+0x94/0x140 [ 757.367956][T15972] do_syscall_64+0x4c/0xa0 [ 757.372364][T15972] ? clear_bhb_loop+0x60/0xb0 [ 757.377030][T15972] ? clear_bhb_loop+0x60/0xb0 [ 757.381698][T15972] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 757.387589][T15972] RIP: 0033:0x7f590a39ce59 [ 757.391998][T15972] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 757.411597][T15972] RSP: 002b:00007f590b2cc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 757.420002][T15972] RAX: ffffffffffffffda RBX: 00007f590a616090 RCX: 00007f590a39ce59 [ 757.427967][T15972] RDX: 00000000000003e8 RSI: 00002000000004c0 RDI: 0000000000000015 [ 757.435929][T15972] RBP: 00007f590b2cc090 R08: 0000000000000000 R09: 0000000000000000 [ 757.443891][T15972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 757.451851][T15972] R13: 00007f590a616128 R14: 00007f590a616090 R15: 00007ffd8b9b0368 [ 757.459828][T15972] [ 758.886295][T15978] validate_nla: 1 callbacks suppressed [ 758.886328][T15978] netlink: 'syz.0.3809': attribute type 27 has an invalid length. [ 759.028867][T15978] netlink: 'syz.0.3809': attribute type 4 has an invalid length. [ 759.042409][T15978] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3809'. [ 759.624268][T15993] netlink: 14548 bytes leftover after parsing attributes in process `syz.2.3815'. [ 760.401399][T16019] netlink: 'syz.4.3824': attribute type 10 has an invalid length. [ 760.428921][T16019] netlink: 55 bytes leftover after parsing attributes in process `syz.4.3824'. [ 761.807225][T16036] netlink: 'syz.0.3831': attribute type 29 has an invalid length. [ 761.842514][T16036] netlink: 'syz.0.3831': attribute type 29 has an invalid length. [ 762.065536][T16043] device bridge_slave_1 left promiscuous mode [ 762.075712][T16043] bridge0: port 2(bridge_slave_1) entered disabled state [ 762.105064][T16043] device bridge_slave_0 left promiscuous mode [ 762.138909][T16043] bridge0: port 1(bridge_slave_0) entered disabled state [ 762.295742][T16051] netlink: 14548 bytes leftover after parsing attributes in process `syz.3.3833'. [ 762.312267][T16053] FAULT_INJECTION: forcing a failure. [ 762.312267][T16053] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 762.336820][T16053] CPU: 1 PID: 16053 Comm: syz.0.3837 Not tainted syzkaller #0 [ 762.344330][T16053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 762.354401][T16053] Call Trace: [ 762.357694][T16053] [ 762.360640][T16053] dump_stack_lvl+0x188/0x24e [ 762.365338][T16053] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 762.371521][T16053] ? show_regs_print_info+0x12/0x12 [ 762.376737][T16053] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 762.382919][T16053] ? dump_stack+0x5/0x12 [ 762.387183][T16053] should_fail_ex+0x390/0x4c0 [ 762.391882][T16053] _copy_from_user+0x2c/0x170 [ 762.396582][T16053] copy_from_sockptr+0x69/0x80 [ 762.401370][T16053] do_ipv6_setsockopt+0x10ae/0x3c30 [ 762.406602][T16053] ? sk_dst_reset+0xa0/0xa0 [ 762.411128][T16053] ? mark_lock+0x94/0x320 [ 762.415485][T16053] ? __lock_acquire+0x130c/0x7bd0 [ 762.420542][T16053] ? __lock_acquire+0x13e3/0x7bd0 [ 762.425598][T16053] ? verify_lock_unused+0x140/0x140 [ 762.430823][T16053] ? mark_lock+0x94/0x320 [ 762.435183][T16053] ? __lock_acquire+0x130c/0x7bd0 [ 762.440250][T16053] ? aa_label_sk_perm+0x4cc/0x660 [ 762.445294][T16053] ? verify_lock_unused+0x140/0x140 [ 762.450518][T16053] ? mark_lock+0x94/0x320 [ 762.454874][T16053] ? aa_sk_perm+0x950/0x950 [ 762.459414][T16053] ? __might_sleep+0xd0/0xd0 [ 762.464040][T16053] ipv6_setsockopt+0x55/0x190 [ 762.468744][T16053] dccp_setsockopt+0x17d/0x8a0 [ 762.473531][T16053] ? dccp_ioctl+0x1d0/0x1d0 [ 762.478052][T16053] ? aa_sock_opt_perm+0x74/0x100 [ 762.483009][T16053] ? sock_common_setsockopt+0x32/0xb0 [ 762.488405][T16053] ? sock_common_recvmsg+0x190/0x190 [ 762.493719][T16053] __sys_setsockopt+0x2bf/0x3d0 [ 762.498590][T16053] __x64_sys_setsockopt+0xb1/0xc0 [ 762.503633][T16053] do_syscall_64+0x4c/0xa0 [ 762.508064][T16053] ? clear_bhb_loop+0x60/0xb0 [ 762.512750][T16053] ? clear_bhb_loop+0x60/0xb0 [ 762.517445][T16053] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 762.523361][T16053] RIP: 0033:0x7fed44f9ce59 [ 762.527790][T16053] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 762.547412][T16053] RSP: 002b:00007fed431f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 762.555847][T16053] RAX: ffffffffffffffda RBX: 00007fed45216090 RCX: 00007fed44f9ce59 [ 762.563840][T16053] RDX: 000000000000001b RSI: 0000000000000029 RDI: 0000000000000007 [ 762.571827][T16053] RBP: 00007fed431f6090 R08: 0000000000000120 R09: 0000000000000000 [ 762.579819][T16053] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 762.587803][T16053] R13: 00007fed45216128 R14: 00007fed45216090 R15: 00007ffd05e9ab28 [ 762.595819][T16053] [ 764.279336][T16086] Dead loop on virtual device ip6_vti0, fix it urgently! [ 764.538713][ T4287] Bluetooth: hci2: command 0x0406 tx timeout [ 764.694135][T16088] netlink: 14548 bytes leftover after parsing attributes in process `syz.1.3853'. [ 767.408197][T16111] FAULT_INJECTION: forcing a failure. [ 767.408197][T16111] name failslab, interval 1, probability 0, space 0, times 0 [ 767.420878][T16111] CPU: 1 PID: 16111 Comm: syz.0.3861 Not tainted syzkaller #0 [ 767.428354][T16111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 767.438412][T16111] Call Trace: [ 767.441686][T16111] [ 767.444615][T16111] dump_stack_lvl+0x188/0x24e [ 767.449292][T16111] ? trace_fib6_table_lookup+0xaf/0x250 [ 767.454837][T16111] ? show_regs_print_info+0x12/0x12 [ 767.460030][T16111] ? load_image+0x410/0x410 [ 767.464531][T16111] ? fib6_table_lookup+0xa8c/0xae0 [ 767.469652][T16111] should_fail_ex+0x390/0x4c0 [ 767.474328][T16111] should_failslab+0x5/0x20 [ 767.478825][T16111] slab_pre_alloc_hook+0x59/0x300 [ 767.483849][T16111] kmem_cache_alloc_node+0x5a/0x310 [ 767.489039][T16111] ? __alloc_skb+0xf9/0x7d0 [ 767.493536][T16111] __alloc_skb+0xf9/0x7d0 [ 767.497861][T16111] alloc_skb_with_frags+0xa7/0x710 [ 767.502973][T16111] ? mark_lock+0x94/0x320 [ 767.507306][T16111] sock_alloc_send_pskb+0x87f/0x9a0 [ 767.512601][T16111] ? sock_kzfree_s+0x50/0x50 [ 767.517183][T16111] ? mark_lock+0x94/0x320 [ 767.521509][T16111] ? verify_lock_unused+0x140/0x140 [ 767.526703][T16111] ? __lock_acquire+0x130c/0x7bd0 [ 767.531733][T16111] __ip6_append_data+0x2a91/0x3ed0 [ 767.536858][T16111] ? __lock_acquire+0x7bd0/0x7bd0 [ 767.541880][T16111] ? __in6_dev_get+0xd0/0xd0 [ 767.546625][T16111] ? ip6_mtu+0x79/0x3f0 [ 767.550781][T16111] ? ip6_setup_cork+0xff0/0xff0 [ 767.555628][T16111] ? ip6_setup_cork+0xa4a/0xff0 [ 767.560475][T16111] ip6_append_data+0x1c8/0x3d0 [ 767.565240][T16111] ? __in6_dev_get+0xd0/0xd0 [ 767.569832][T16111] icmp6_send+0x1342/0x1a60 [ 767.574341][T16111] ? icmp6_send+0xb7d/0x1a60 [ 767.578926][T16111] ? icmpv6_push_pending_frames+0x4b0/0x4b0 [ 767.584811][T16111] ? __local_bh_enable_ip+0x136/0x1c0 [ 767.590182][T16111] ? lockdep_hardirqs_on+0x94/0x140 [ 767.595387][T16111] ? ip6_mtu+0x31a/0x3f0 [ 767.599630][T16111] icmpv6_ndo_send+0x195/0x520 [ 767.604444][T16111] ? memset+0x1e/0x40 [ 767.608417][T16111] ? ip6_update_pmtu+0x360/0x360 [ 767.613344][T16111] ? xfrm_lookup_with_ifid+0x1b27/0x1fc0 [ 767.618969][T16111] ? udp6_set_csum+0xec0/0xec0 [ 767.623726][T16111] ? lockdep_hardirqs_on+0x94/0x140 [ 767.628922][T16111] ? ip6_rt_update_pmtu+0x31/0xc0 [ 767.633940][T16111] tnl_update_pmtu+0xd6c/0x1040 [ 767.638793][T16111] ip_tunnel_xmit+0xd47/0x25d0 [ 767.643572][T16111] ? ip4_dst_hoplimit+0x2d0/0x2d0 [ 767.648594][T16111] ? netif_skb_features+0xafa/0x1630 [ 767.653877][T16111] ? kernel_text_address+0x9c/0xd0 [ 767.658983][T16111] ? validate_xmit_xfrm+0xb4/0x11d0 [ 767.664181][T16111] ? skb_push+0x8a/0xd0 [ 767.668331][T16111] ? gre_build_header+0x251/0x9a0 [ 767.673354][T16111] ipgre_xmit+0x7e4/0xb60 [ 767.677682][T16111] dev_hard_start_xmit+0x292/0x8b0 [ 767.682801][T16111] ? validate_xmit_skb_list+0x120/0x120 [ 767.688349][T16111] __dev_queue_xmit+0x1b4b/0x3810 [ 767.693375][T16111] ? __dev_queue_xmit+0x281/0x3810 [ 767.698486][T16111] ? netdev_core_pick_tx+0x360/0x360 [ 767.703780][T16111] ? skb_release_data+0x1d3/0x7e0 [ 767.708804][T16111] __bpf_redirect+0x8c7/0x1110 [ 767.713572][T16111] bpf_clone_redirect+0x311/0x4a0 [ 767.718602][T16111] bpf_prog_da1e0ee5f8d5c8f5+0x55/0x5a [ 767.724059][T16111] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 767.730034][T16111] ? __lock_acquire+0x7bd0/0x7bd0 [ 767.735051][T16111] ? lock_chain_count+0x20/0x20 [ 767.739898][T16111] ? seqcount_lockdep_reader_access+0x127/0x1d0 [ 767.746131][T16111] ? lockdep_hardirqs_on+0x94/0x140 [ 767.751326][T16111] ? ktime_get+0x7b/0x270 [ 767.755650][T16111] ? seqcount_lockdep_reader_access+0x18d/0x1d0 [ 767.761899][T16111] ? ktime_get_real_ts64+0x440/0x440 [ 767.767191][T16111] ? read_lock_is_recursive+0x10/0x10 [ 767.772574][T16111] ? __cant_sleep+0x220/0x220 [ 767.777255][T16111] ? bpf_test_timer_continue+0x142/0x380 [ 767.782894][T16111] bpf_test_run+0x2b6/0x830 [ 767.787419][T16111] ? dst_hold+0xb0/0xb0 [ 767.791578][T16111] ? eth_get_headlen+0x200/0x200 [ 767.796522][T16111] ? __build_skb+0x24b/0x3b0 [ 767.801116][T16111] bpf_prog_test_run_skb+0xdaf/0x18e0 [ 767.806499][T16111] ? cpu_online+0xa0/0xa0 [ 767.810840][T16111] bpf_prog_test_run+0x31c/0x390 [ 767.815790][T16111] __sys_bpf+0x62b/0x780 [ 767.820035][T16111] ? bpf_link_show_fdinfo+0x380/0x380 [ 767.825416][T16111] ? lock_chain_count+0x20/0x20 [ 767.830282][T16111] __x64_sys_bpf+0x78/0x90 [ 767.834704][T16111] do_syscall_64+0x4c/0xa0 [ 767.839115][T16111] ? clear_bhb_loop+0x60/0xb0 [ 767.843786][T16111] ? clear_bhb_loop+0x60/0xb0 [ 767.848460][T16111] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 767.854353][T16111] RIP: 0033:0x7fed44f9ce59 [ 767.858771][T16111] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 767.878376][T16111] RSP: 002b:00007fed45d74028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 767.886784][T16111] RAX: ffffffffffffffda RBX: 00007fed45215fa0 RCX: 00007fed44f9ce59 [ 767.894750][T16111] RDX: 0000000000000028 RSI: 00002000000000c0 RDI: 000000000000000a [ 767.902718][T16111] RBP: 00007fed45d74090 R08: 0000000000000000 R09: 0000000000000000 [ 767.910690][T16111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 767.918654][T16111] R13: 00007fed45216038 R14: 00007fed45215fa0 R15: 00007ffd05e9ab28 [ 767.926630][T16111] [ 768.858662][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 768.865884][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 769.321233][T16138] netlink: 'syz.1.3867': attribute type 21 has an invalid length. [ 769.330062][T16138] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3867'. [ 769.413216][T16142] netlink: 10 bytes leftover after parsing attributes in process `syz.0.3869'. [ 769.633820][T16131] device aaaaaaaaaaaaaaa entered promiscuous mode [ 769.736590][T16149] netlink: 14548 bytes leftover after parsing attributes in process `syz.4.3870'. [ 769.858311][T16151] netlink: 'syz.2.3871': attribute type 27 has an invalid length. [ 769.914295][T16151] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3871'. [ 769.996272][T16158] netlink: 126632 bytes leftover after parsing attributes in process `syz.0.3874'. [ 770.038168][T16158] netlink: 8192 bytes leftover after parsing attributes in process `syz.0.3874'. [ 770.956983][T16191] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3883'. [ 771.144245][T16195] netlink: 14548 bytes leftover after parsing attributes in process `syz.0.3886'. [ 771.438833][T16203] netlink: 196 bytes leftover after parsing attributes in process `syz.0.3889'. [ 771.447982][T16203] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 776.033836][T16220] netlink: 'syz.2.3895': attribute type 17 has an invalid length. [ 776.049168][T16220] netlink: 'syz.2.3895': attribute type 16 has an invalid length. [ 776.057017][T16220] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3895'. [ 776.069346][T16223] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3895'. [ 776.117609][T16239] netlink: 14548 bytes leftover after parsing attributes in process `syz.3.3900'. [ 776.413090][T16256] netlink: 'syz.2.3906': attribute type 10 has an invalid length. [ 776.426249][T16256] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3906'. [ 776.467033][T16256] bridge0: port 3(veth0_to_bridge) entered blocking state [ 776.496279][T16256] bridge0: port 3(veth0_to_bridge) entered disabled state [ 776.564887][T16256] device veth0_to_bridge entered promiscuous mode [ 776.572519][T16256] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 776.586467][T16256] bridge0: port 3(veth0_to_bridge) entered blocking state [ 776.593727][T16256] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 776.649004][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 776.661346][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 776.673714][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 776.686084][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 776.698414][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 776.710789][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 776.723122][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 776.735480][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 776.747854][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 776.760231][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 777.044699][T16268] netlink: 16222 bytes leftover after parsing attributes in process `syz.3.3912'. [ 777.552892][T16284] netlink: 'syz.0.3903': attribute type 1 has an invalid length. [ 777.599064][T16284] netlink: 'syz.0.3903': attribute type 3 has an invalid length. [ 777.656404][T16284] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3903'. [ 778.023886][T16281] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3903'. [ 778.068815][T16281] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3903'. [ 778.114526][T16291] netlink: 14548 bytes leftover after parsing attributes in process `syz.4.3915'. [ 778.492700][T16298] netlink: 'syz.4.3919': attribute type 10 has an invalid length. [ 778.609796][T16301] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3921'. [ 778.622940][T16298] team0: Port device netdevsim0 added [ 779.251535][T16314] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 781.658732][ C1] net_ratelimit: 8077 callbacks suppressed [ 781.658752][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 781.676890][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 781.689166][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 781.701436][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 781.713724][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 781.726013][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 781.738311][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 781.750602][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 781.762884][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 781.775159][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 782.785129][T16352] netlink: 'syz.3.3939': attribute type 10 has an invalid length. [ 783.133568][T16360] netlink: 'syz.1.3943': attribute type 29 has an invalid length. [ 783.623181][T16360] netlink: 'syz.1.3943': attribute type 29 has an invalid length. [ 784.245570][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 784.252868][ C1] bridge0: topology change detected, propagating [ 784.259473][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 784.259756][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 784.266676][ C1] bridge0: topology change detected, propagating [ 785.808809][T16401] delete_channel: no stack [ 785.870669][T16413] __nla_validate_parse: 1 callbacks suppressed [ 785.870689][T16413] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3957'. [ 786.668839][ C1] net_ratelimit: 6255 callbacks suppressed [ 786.668859][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 786.687306][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 786.699636][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 786.712161][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 786.724468][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 786.737020][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 786.749363][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 786.761918][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 786.774276][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 786.786858][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 788.467654][T16454] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 788.526967][T16454] pim6reg0: linktype set to 780 [ 788.824614][T16459] netlink: 'syz.1.3973': attribute type 3 has an invalid length. [ 788.871929][T16459] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3973'. [ 789.159625][T16461] syzkaller0: tun_chr_ioctl cmd 1074025680 [ 790.156257][ T4287] Bluetooth: hci4: command 0x0406 tx timeout [ 790.622902][T16485] netlink: 'syz.0.3982': attribute type 10 has an invalid length. [ 791.688906][ C1] net_ratelimit: 3719 callbacks suppressed [ 791.688927][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 791.707234][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 791.719948][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 791.732433][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 791.745213][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 791.757733][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 791.770523][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 791.782976][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 791.795758][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 791.808224][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 793.318225][T16513] FAULT_INJECTION: forcing a failure. [ 793.318225][T16513] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 793.660785][T16513] CPU: 0 PID: 16513 Comm: syz.4.3992 Not tainted syzkaller #0 [ 793.668312][T16513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 793.678395][T16513] Call Trace: [ 793.681692][T16513] [ 793.684643][T16513] dump_stack_lvl+0x188/0x24e [ 793.689358][T16513] ? show_regs_print_info+0x12/0x12 [ 793.694579][T16513] ? load_image+0x410/0x410 [ 793.699116][T16513] ? __lock_acquire+0x7bd0/0x7bd0 [ 793.704176][T16513] ? lockdep_hardirqs_on+0x94/0x140 [ 793.709414][T16513] should_fail_ex+0x390/0x4c0 [ 793.714123][T16513] _copy_from_user+0x2c/0x170 [ 793.718827][T16513] copy_from_sockptr+0x69/0x80 [ 793.723623][T16513] packet_setsockopt+0xa3a/0x1230 [ 793.728676][T16513] ? packet_ioctl+0x240/0x240 [ 793.733375][T16513] ? __fget_files+0x28/0x460 [ 793.737995][T16513] ? perf_trace_preemptirq_template+0x268/0x320 [ 793.744263][T16513] ? aa_sk_perm+0x81f/0x950 [ 793.748805][T16513] ? aa_af_perm+0x340/0x340 [ 793.753330][T16513] ? __fget_files+0x3fc/0x460 [ 793.758016][T16513] ? aa_sock_opt_perm+0x74/0x100 [ 793.762952][T16513] ? bpf_lsm_socket_setsockopt+0x5/0x10 [ 793.768492][T16513] ? security_socket_setsockopt+0x7a/0xa0 [ 793.774206][T16513] ? packet_ioctl+0x240/0x240 [ 793.778881][T16513] __sys_setsockopt+0x2bf/0x3d0 [ 793.783732][T16513] __x64_sys_setsockopt+0xb1/0xc0 [ 793.788755][T16513] do_syscall_64+0x4c/0xa0 [ 793.793165][T16513] ? clear_bhb_loop+0x60/0xb0 [ 793.797835][T16513] ? clear_bhb_loop+0x60/0xb0 [ 793.802512][T16513] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 793.808405][T16513] RIP: 0033:0x7f3fa899ce59 [ 793.812815][T16513] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 793.832415][T16513] RSP: 002b:00007f3fa6bd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 793.840823][T16513] RAX: ffffffffffffffda RBX: 00007f3fa8c16090 RCX: 00007f3fa899ce59 [ 793.848787][T16513] RDX: 0000000000000012 RSI: 0000000000000107 RDI: 0000000000000004 [ 793.856753][T16513] RBP: 00007f3fa6bd5090 R08: 0000000000000004 R09: 0000000000000000 [ 793.864719][T16513] R10: 00002000000008c0 R11: 0000000000000246 R12: 0000000000000001 [ 793.872683][T16513] R13: 00007f3fa8c16128 R14: 00007f3fa8c16090 R15: 00007ffce5988768 [ 793.880661][T16513] [ 796.699904][ C1] net_ratelimit: 4140 callbacks suppressed [ 796.699923][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 796.718152][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 796.730542][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 796.742892][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 796.755324][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 796.767624][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 796.780016][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 796.792322][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 796.804736][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 796.817041][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 801.728692][ C1] net_ratelimit: 7404 callbacks suppressed [ 801.728711][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 801.746877][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:f0:af:cd:1d:92, vlan:0) [ 801.759759][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 801.772168][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 801.784461][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 801.796879][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 801.809209][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:f0:af:cd:1d:92, vlan:0) [ 801.822126][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 801.834517][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 801.846789][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 802.512715][T16550] netlink: 'syz.2.4004': attribute type 2 has an invalid length. [ 802.684099][T16550] device 0 entered promiscuous mode [ 802.963411][T16552] delete_channel: no stack [ 803.635388][T16573] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.4014'. [ 803.688093][T16573] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 803.813083][T16573] CPU: 0 PID: 16573 Comm: syz.0.4014 Not tainted syzkaller #0 [ 803.820624][T16573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 803.830712][T16573] Call Trace: [ 803.834021][T16573] [ 803.836981][T16573] dump_stack_lvl+0x188/0x24e [ 803.841708][T16573] ? show_regs_print_info+0x12/0x12 [ 803.846951][T16573] ? load_image+0x410/0x410 [ 803.851513][T16573] sysfs_warn_dup+0x8a/0xa0 [ 803.856059][T16573] sysfs_do_create_link_sd+0xc0/0x110 [ 803.861481][T16573] device_add+0x83b/0x1050 [ 803.865943][T16573] wiphy_register+0x1d8b/0x2aa0 [ 803.870851][T16573] ? cfg80211_event_work+0x40/0x40 [ 803.876002][T16573] ? minstrel_ht_alloc+0x894/0xa20 [ 803.881162][T16573] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 803.887272][T16573] ieee80211_register_hw+0x2d48/0x39f0 [ 803.892793][T16573] ? ieee80211_register_hw+0xed1/0x39f0 [ 803.898355][T16573] ? ieee80211_register_hw+0xed1/0x39f0 [ 803.903904][T16573] ? ieee80211_tasklet_handler+0x20/0x20 [ 803.909531][T16573] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 803.915422][T16573] ? __debug_object_init+0xed/0x440 [ 803.920622][T16573] ? memset+0x1e/0x40 [ 803.924603][T16573] ? __hrtimer_init+0x189/0x270 [ 803.929452][T16573] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 803.935173][T16573] ? memcpy+0x3c/0x60 [ 803.939153][T16573] hwsim_new_radio_nl+0xab7/0xc90 [ 803.944188][T16573] genl_family_rcv_msg_doit+0x22f/0x350 [ 803.949729][T16573] ? end_current_label_crit_section+0x170/0x170 [ 803.955969][T16573] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 803.961884][T16573] ? bpf_lsm_capable+0x5/0x10 [ 803.966557][T16573] ? security_capable+0x85/0xb0 [ 803.971411][T16573] genl_rcv_msg+0x601/0x790 [ 803.975919][T16573] ? genl_bind+0x360/0x360 [ 803.980333][T16573] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 803.986666][T16573] netlink_rcv_skb+0x1ef/0x440 [ 803.991429][T16573] ? genl_bind+0x360/0x360 [ 803.995846][T16573] ? netlink_ack+0x1160/0x1160 [ 804.000608][T16573] ? down_read+0x1a8/0x2d0 [ 804.005022][T16573] genl_rcv+0x24/0x40 [ 804.008997][T16573] netlink_unicast+0x7ad/0x920 [ 804.013766][T16573] netlink_sendmsg+0x8ad/0xbd0 [ 804.018533][T16573] ? netlink_getsockopt+0x550/0x550 [ 804.023734][T16573] ? aa_sock_msg_perm+0x94/0x150 [ 804.028668][T16573] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 804.033944][T16573] ? security_socket_sendmsg+0x7c/0xa0 [ 804.039396][T16573] ? netlink_getsockopt+0x550/0x550 [ 804.044587][T16573] ____sys_sendmsg+0x5ed/0x9a0 [ 804.049359][T16573] ? __sys_sendmsg_sock+0x30/0x30 [ 804.054373][T16573] ? __import_iovec+0x306/0x510 [ 804.059224][T16573] ? import_iovec+0x6f/0xa0 [ 804.063731][T16573] ___sys_sendmsg+0x2a2/0x360 [ 804.068408][T16573] ? __sys_sendmsg+0x2a0/0x2a0 [ 804.073200][T16573] __se_sys_sendmsg+0x1c3/0x2b0 [ 804.078046][T16573] ? __x64_sys_sendmsg+0x80/0x80 [ 804.082999][T16573] ? lockdep_hardirqs_on+0x94/0x140 [ 804.088198][T16573] do_syscall_64+0x4c/0xa0 [ 804.092606][T16573] ? clear_bhb_loop+0x60/0xb0 [ 804.097274][T16573] ? clear_bhb_loop+0x60/0xb0 [ 804.101949][T16573] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 804.107839][T16573] RIP: 0033:0x7fed44f9ce59 [ 804.112249][T16573] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 804.131854][T16573] RSP: 002b:00007fed45d74028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 804.140266][T16573] RAX: ffffffffffffffda RBX: 00007fed45215fa0 RCX: 00007fed44f9ce59 [ 804.148230][T16573] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 804.156198][T16573] RBP: 00007fed45032e6f R08: 0000000000000000 R09: 0000000000000000 [ 804.164162][T16573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 804.172130][T16573] R13: 00007fed45216038 R14: 00007fed45215fa0 R15: 00007ffd05e9ab28 [ 804.180111][T16573] [ 804.587216][T16576] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.4016'. [ 804.633252][T16576] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 805.668501][T16595] netlink: 'syz.4.4019': attribute type 2 has an invalid length. [ 805.847814][T16595] device 0 entered promiscuous mode [ 806.390587][T16606] netlink: 144 bytes leftover after parsing attributes in process `syz.4.4024'. [ 806.629617][ C1] bridge0: topology change detected, propagating [ 806.636679][ C1] bridge0: port 3(veth0_to_bridge) entered blocking state [ 807.371248][T16633] netlink: 212940 bytes leftover after parsing attributes in process `syz.4.4034'. [ 807.951312][T16649] netlink: 'syz.0.4039': attribute type 20 has an invalid length. [ 807.996884][T16649] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.4039'. [ 808.038793][T16649] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.4039'. [ 808.057983][T16651] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.4039'. [ 808.475629][T16660] device syzkaller0 entered promiscuous mode [ 808.541732][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.548137][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.296712][T16704] netlink: 134056 bytes leftover after parsing attributes in process `syz.3.4055'. [ 812.840660][T16704] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 812.859996][T16704] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 812.880279][T16704] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 813.085663][T16714] netlink: 'syz.0.4057': attribute type 10 has an invalid length. [ 813.867971][T16732] net_ratelimit: 3473 callbacks suppressed [ 813.867991][T16732] sock: sock_set_timeout: `syz.2.4061' (pid 16732) tries to set negative timeout [ 813.887369][T16732] netlink: 'syz.2.4061': attribute type 29 has an invalid length. [ 813.895979][T16732] netlink: 'syz.2.4061': attribute type 29 has an invalid length. [ 813.946020][T16732] netlink: 'syz.2.4061': attribute type 29 has an invalid length. [ 813.979836][T16732] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4061'. [ 814.045808][T16738] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 814.144596][T16738] device syzkaller0 entered promiscuous mode [ 816.482051][T16759] Ÿë: port 1(gretap0) entered blocking state [ 816.494772][T16759] Ÿë: port 1(gretap0) entered disabled state [ 816.503616][T16759] device gretap0 entered promiscuous mode [ 817.377431][T16788] netlink: 146340 bytes leftover after parsing attributes in process `syz.4.4081'. [ 817.416250][T16788] openvswitch: netlink: Key type 386 is out of range max 32 [ 818.259811][T16799] device syzkaller0 entered promiscuous mode [ 821.618132][T16832] bridge0: port 3(veth0_to_bridge) entered disabled state [ 821.625543][T16832] bridge0: port 2(bridge_slave_1) entered disabled state [ 821.632856][T16832] bridge0: port 1(bridge_slave_0) entered disabled state [ 821.651924][T16840] netlink: 164 bytes leftover after parsing attributes in process `syz.1.4095'. [ 821.664726][T16838] netlink: 10 bytes leftover after parsing attributes in process `syz.0.4094'. [ 822.524224][T16872] netlink: 'syz.0.4105': attribute type 25 has an invalid length. [ 822.541625][T16872] netlink: 'syz.0.4105': attribute type 29 has an invalid length. [ 822.584587][T16877] netlink: 5 bytes leftover after parsing attributes in process `syz.0.4105'. [ 822.816823][T16885] netlink: 'syz.3.4112': attribute type 10 has an invalid length. [ 822.944452][T16890] netlink: 'syz.1.4114': attribute type 21 has an invalid length. [ 822.974187][T16890] netlink: 'syz.1.4114': attribute type 1 has an invalid length. [ 822.983895][T16890] netlink: 100 bytes leftover after parsing attributes in process `syz.1.4114'. [ 825.589715][T16912] device caif0 entered promiscuous mode [ 826.996456][T16954] netlink: 'syz.0.4137': attribute type 25 has an invalid length. [ 827.004731][T16954] netlink: 'syz.0.4137': attribute type 29 has an invalid length. [ 827.089121][T16954] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4137'. [ 827.236797][T16959] netlink: 'syz.4.4138': attribute type 28 has an invalid length. [ 827.245584][T16959] netlink: 2 bytes leftover after parsing attributes in process `syz.4.4138'. [ 827.337021][T16964] netlink: 132028 bytes leftover after parsing attributes in process `syz.3.4139'. [ 827.570838][T16967] device syzkaller0 entered promiscuous mode [ 827.707255][T16974] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 827.789503][T16974] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 831.739563][T17017] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.4156'. [ 832.139112][T17035] netlink: 73640 bytes leftover after parsing attributes in process `syz.1.4164'. [ 833.507251][T17064] netlink: 'syz.2.4172': attribute type 2 has an invalid length. [ 833.576495][T17064] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4172'. [ 833.883414][T17073] netlink: 'syz.2.4176': attribute type 15 has an invalid length. [ 833.922001][T17073] netlink: 'syz.2.4176': attribute type 7 has an invalid length. [ 834.017979][T17073] netlink: 'syz.2.4176': attribute type 39 has an invalid length. [ 834.741785][T17095] netlink: 'syz.1.4184': attribute type 5 has an invalid length. [ 834.824289][T17098] netlink: 'syz.1.4184': attribute type 5 has an invalid length. [ 834.961136][T17105] delete_channel: no stack [ 835.323283][T17111] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4189'. [ 835.642191][T17115] netlink: 'syz.0.4191': attribute type 4 has an invalid length. [ 835.688724][T17115] netlink: 'syz.0.4191': attribute type 8 has an invalid length. [ 835.709427][T17115] netlink: 193092 bytes leftover after parsing attributes in process `syz.0.4191'. [ 841.092657][T17186] netlink: 'syz.4.4215': attribute type 29 has an invalid length. [ 841.106515][T17186] netlink: 'syz.4.4215': attribute type 29 has an invalid length. [ 841.141128][T17190] netlink: 'syz.0.4216': attribute type 21 has an invalid length. [ 841.518287][T17200] netlink: 'syz.0.4221': attribute type 21 has an invalid length. [ 841.538976][T17200] netlink: 156 bytes leftover after parsing attributes in process `syz.0.4221'. [ 841.677352][T17209] FAULT_INJECTION: forcing a failure. [ 841.677352][T17209] name failslab, interval 1, probability 0, space 0, times 0 [ 841.739382][T17209] CPU: 0 PID: 17209 Comm: syz.1.4223 Not tainted syzkaller #0 [ 841.746901][T17209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 841.756959][T17209] Call Trace: [ 841.760237][T17209] [ 841.763163][T17209] dump_stack_lvl+0x188/0x24e [ 841.767842][T17209] ? show_regs_print_info+0x12/0x12 [ 841.773036][T17209] ? load_image+0x410/0x410 [ 841.777544][T17209] ? __might_sleep+0xd0/0xd0 [ 841.782126][T17209] ? __lock_acquire+0x7bd0/0x7bd0 [ 841.787156][T17209] should_fail_ex+0x390/0x4c0 [ 841.791833][T17209] should_failslab+0x5/0x20 [ 841.796332][T17209] slab_pre_alloc_hook+0x59/0x300 [ 841.801356][T17209] ? sock_kmalloc+0x92/0xf0 [ 841.805860][T17209] __kmem_cache_alloc_node+0x4f/0x270 [ 841.811228][T17209] ? __ipv6_chk_addr_and_flags+0x5db/0x6b0 [ 841.817036][T17209] ? sock_kmalloc+0x92/0xf0 [ 841.821538][T17209] __kmalloc+0xa3/0x240 [ 841.825698][T17209] sock_kmalloc+0x92/0xf0 [ 841.830026][T17209] ipv6_sock_ac_join+0x24f/0x6b0 [ 841.834963][T17209] do_ipv6_setsockopt+0x1c70/0x3c30 [ 841.840171][T17209] ? sk_dst_reset+0xa0/0xa0 [ 841.844672][T17209] ? __lock_acquire+0x13e3/0x7bd0 [ 841.849703][T17209] ? trace_call_bpf+0xbf/0x6b0 [ 841.854472][T17209] ? __lock_acquire+0x7bd0/0x7bd0 [ 841.859501][T17209] ? migrate_enable+0x148/0x220 [ 841.864349][T17209] ? trace_call_bpf+0xbf/0x6b0 [ 841.869112][T17209] ? trace_call_bpf+0xbf/0x6b0 [ 841.873872][T17209] ? trace_call_bpf+0x5d6/0x6b0 [ 841.878724][T17209] ? trace_call_bpf+0xbf/0x6b0 [ 841.883487][T17209] ? mark_lock+0x94/0x320 [ 841.887838][T17209] ? __bpf_trace_bpf_trace_printk+0x20/0x20 [ 841.893753][T17209] ? __lock_acquire+0x7bd0/0x7bd0 [ 841.898789][T17209] ? perf_trace_preemptirq_template+0x268/0x320 [ 841.905033][T17209] ? aa_label_sk_perm+0x4cc/0x660 [ 841.910062][T17209] ? aa_sk_perm+0x950/0x950 [ 841.914573][T17209] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 841.920730][T17209] ? __might_sleep+0xd0/0xd0 [ 841.925323][T17209] ? __might_resched+0x6/0x5f0 [ 841.930105][T17209] ipv6_setsockopt+0x55/0x190 [ 841.934823][T17209] dccp_setsockopt+0x17d/0x8a0 [ 841.939594][T17209] ? dccp_ioctl+0x1d0/0x1d0 [ 841.944099][T17209] ? aa_sock_opt_perm+0x74/0x100 [ 841.949034][T17209] ? sock_common_setsockopt+0x32/0xb0 [ 841.954407][T17209] ? sock_common_recvmsg+0x190/0x190 [ 841.959693][T17209] __sys_setsockopt+0x2bf/0x3d0 [ 841.964543][T17209] __x64_sys_setsockopt+0xb1/0xc0 [ 841.969567][T17209] do_syscall_64+0x4c/0xa0 [ 841.973978][T17209] ? clear_bhb_loop+0x60/0xb0 [ 841.978662][T17209] ? clear_bhb_loop+0x60/0xb0 [ 841.983351][T17209] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 841.989248][T17209] RIP: 0033:0x7f30fed9ce59 [ 841.993664][T17209] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 842.013271][T17209] RSP: 002b:00007f30ffc33028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 842.021682][T17209] RAX: ffffffffffffffda RBX: 00007f30ff016090 RCX: 00007f30fed9ce59 [ 842.029649][T17209] RDX: 000000000000001b RSI: 0000000000000029 RDI: 0000000000000007 [ 842.037613][T17209] RBP: 00007f30ffc33090 R08: 0000000000000120 R09: 0000000000000000 [ 842.045599][T17209] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 842.053572][T17209] R13: 00007f30ff016128 R14: 00007f30ff016090 R15: 00007ffcf4805bb8 [ 842.061555][T17209] [ 842.253017][T17212] device syzkaller0 entered promiscuous mode [ 842.271987][T17212] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 65487 [ 842.931969][T17237] Dead loop on virtual device ip6_vti0, fix it urgently! [ 843.976994][T17265] netlink: 'syz.1.4242': attribute type 21 has an invalid length. [ 844.008859][T17265] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4242'. [ 844.431934][T17279] netlink: 'syz.3.4239': attribute type 8 has an invalid length. [ 844.586011][T17279] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.4239'. [ 844.986685][T17293] netlink: 'syz.0.4250': attribute type 27 has an invalid length. [ 845.007442][T17293] netlink: 164 bytes leftover after parsing attributes in process `syz.0.4250'. [ 846.722916][T17325] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4259'. [ 846.956637][T17330] netlink: 212940 bytes leftover after parsing attributes in process `syz.4.4261'. [ 849.223567][T17370] netlink: 'syz.1.4274': attribute type 3 has an invalid length. [ 849.271879][T17370] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4274'. [ 852.409612][T17366] netlink: 'syz.3.4272': attribute type 10 has an invalid length. [ 852.417467][T17366] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4272'. [ 852.872159][ T4287] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18 [ 853.585403][T17397] netlink: 'syz.0.4285': attribute type 10 has an invalid length. [ 853.634092][T17397] team0: Port device netdevsim0 added [ 853.966222][T17409] netlink: 16222 bytes leftover after parsing attributes in process `syz.2.4278'. [ 854.636845][T17430] FAULT_INJECTION: forcing a failure. [ 854.636845][T17430] name failslab, interval 1, probability 0, space 0, times 0 [ 854.674398][T17430] CPU: 0 PID: 17430 Comm: syz.3.4295 Not tainted syzkaller #0 [ 854.681934][T17430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 854.692017][T17430] Call Trace: [ 854.695318][T17430] [ 854.698263][T17430] dump_stack_lvl+0x188/0x24e [ 854.702974][T17430] ? show_regs_print_info+0x12/0x12 [ 854.708205][T17430] ? load_image+0x410/0x410 [ 854.712743][T17430] ? __might_sleep+0xd0/0xd0 [ 854.717369][T17430] ? __lock_acquire+0x7bd0/0x7bd0 [ 854.722429][T17430] ? verify_lock_unused+0x140/0x140 [ 854.727667][T17430] should_fail_ex+0x390/0x4c0 [ 854.732386][T17430] should_failslab+0x5/0x20 [ 854.736917][T17430] slab_pre_alloc_hook+0x59/0x300 [ 854.741977][T17430] ? __get_vm_area_node+0x122/0x330 [ 854.747206][T17430] __kmem_cache_alloc_node+0x4f/0x270 [ 854.752611][T17430] ? __get_vm_area_node+0x122/0x330 [ 854.757842][T17430] kmalloc_node_trace+0x22/0xe0 [ 854.762726][T17430] __get_vm_area_node+0x122/0x330 [ 854.767778][T17430] ? __local_bh_enable_ip+0x136/0x1c0 [ 854.773181][T17430] __vmalloc_node_range+0x357/0x1380 [ 854.778499][T17430] ? netlink_sendmsg+0x5ec/0xbd0 [ 854.783476][T17430] ? netlink_insert+0x28d/0x13b0 [ 854.788450][T17430] ? free_vm_area+0x50/0x50 [ 854.792990][T17430] ? netlink_sendmsg+0x5ec/0xbd0 [ 854.797953][T17430] vmalloc+0x75/0x80 [ 854.801367][T17429] netlink: 14548 bytes leftover after parsing attributes in process `syz.2.4296'. [ 854.801856][T17430] ? netlink_sendmsg+0x5ec/0xbd0 [ 854.801883][T17430] netlink_sendmsg+0x5ec/0xbd0 [ 854.801912][T17430] ? netlink_getsockopt+0x550/0x550 [ 854.801932][T17430] ? aa_file_perm+0x3ea/0xf00 [ 854.801955][T17430] ? aa_file_perm+0x112/0xf00 [ 854.801973][T17430] ? aa_sock_msg_perm+0x94/0x150 [ 854.801995][T17430] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 854.802015][T17430] ? security_socket_sendmsg+0x7c/0xa0 [ 854.851092][T17430] sock_write_iter+0x2d5/0x3e0 [ 854.855886][T17430] ? sock_read_iter+0x3a0/0x3a0 [ 854.860768][T17430] ? common_file_perm+0x171/0x1c0 [ 854.865834][T17430] vfs_write+0x482/0x9a0 [ 854.870111][T17430] ? file_end_write+0x250/0x250 [ 854.874991][T17430] ? __fget_files+0x3fc/0x460 [ 854.879701][T17430] ? __fdget_pos+0x1d4/0x360 [ 854.884314][T17430] ? ksys_write+0x70/0x260 [ 854.888766][T17430] ksys_write+0x14d/0x260 [ 854.893128][T17430] ? __ia32_sys_read+0x80/0x80 [ 854.897922][T17430] ? lockdep_hardirqs_on+0x94/0x140 [ 854.903156][T17430] do_syscall_64+0x4c/0xa0 [ 854.903449][T17437] netlink: 14548 bytes leftover after parsing attributes in process `syz.1.4298'. [ 854.907585][T17430] ? clear_bhb_loop+0x60/0xb0 [ 854.907612][T17430] ? clear_bhb_loop+0x60/0xb0 [ 854.907630][T17430] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 854.907657][T17430] RIP: 0033:0x7f6da779ce59 [ 854.907674][T17430] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 854.907689][T17430] RSP: 002b:00007f6da86a5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 854.907709][T17430] RAX: ffffffffffffffda RBX: 00007f6da7a15fa0 RCX: 00007f6da779ce59 [ 854.907725][T17430] RDX: 0000000000033fe0 RSI: 0000200000000000 RDI: 000000000000000d [ 854.980539][T17430] RBP: 00007f6da86a5090 R08: 0000000000000000 R09: 0000000000000000 [ 854.988536][T17430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 854.996532][T17430] R13: 00007f6da7a16038 R14: 00007f6da7a15fa0 R15: 00007ffd0ac86b08 [ 855.004548][T17430] [ 855.119254][T17430] syz.3.4295: vmalloc error: size 213312, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 855.138812][T17430] CPU: 0 PID: 17430 Comm: syz.3.4295 Not tainted syzkaller #0 [ 855.146330][T17430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 855.156387][T17430] Call Trace: [ 855.159672][T17430] [ 855.162599][T17430] dump_stack_lvl+0x188/0x24e [ 855.167279][T17430] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 855.173693][T17430] ? show_regs_print_info+0x12/0x12 [ 855.178885][T17430] ? load_image+0x410/0x410 [ 855.183391][T17430] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 855.189800][T17430] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 855.196299][T17430] warn_alloc+0x242/0x330 [ 855.200637][T17430] ? __get_vm_area_node+0x122/0x330 [ 855.205837][T17430] ? zone_watermark_ok_safe+0x270/0x270 [ 855.211382][T17430] ? rcu_is_watching+0x11/0xa0 [ 855.216150][T17430] ? __get_vm_area_node+0x318/0x330 [ 855.221345][T17430] ? __local_bh_enable_ip+0x136/0x1c0 [ 855.226831][T17430] __vmalloc_node_range+0x37c/0x1380 [ 855.232137][T17430] ? netlink_insert+0x28d/0x13b0 [ 855.237086][T17430] ? free_vm_area+0x50/0x50 [ 855.241599][T17430] ? netlink_sendmsg+0x5ec/0xbd0 [ 855.246536][T17430] vmalloc+0x75/0x80 [ 855.250432][T17430] ? netlink_sendmsg+0x5ec/0xbd0 [ 855.255367][T17430] netlink_sendmsg+0x5ec/0xbd0 [ 855.260135][T17430] ? netlink_getsockopt+0x550/0x550 [ 855.265337][T17430] ? aa_file_perm+0x3ea/0xf00 [ 855.270012][T17430] ? aa_file_perm+0x112/0xf00 [ 855.274679][T17430] ? aa_sock_msg_perm+0x94/0x150 [ 855.279609][T17430] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 855.284892][T17430] ? security_socket_sendmsg+0x7c/0xa0 [ 855.290347][T17430] sock_write_iter+0x2d5/0x3e0 [ 855.295113][T17430] ? sock_read_iter+0x3a0/0x3a0 [ 855.299968][T17430] ? common_file_perm+0x171/0x1c0 [ 855.304991][T17430] vfs_write+0x482/0x9a0 [ 855.309241][T17430] ? file_end_write+0x250/0x250 [ 855.314105][T17430] ? __fget_files+0x3fc/0x460 [ 855.318789][T17430] ? __fdget_pos+0x1d4/0x360 [ 855.323387][T17430] ? ksys_write+0x70/0x260 [ 855.327802][T17430] ksys_write+0x14d/0x260 [ 855.332158][T17430] ? __ia32_sys_read+0x80/0x80 [ 855.336921][T17430] ? lockdep_hardirqs_on+0x94/0x140 [ 855.342124][T17430] do_syscall_64+0x4c/0xa0 [ 855.346535][T17430] ? clear_bhb_loop+0x60/0xb0 [ 855.351209][T17430] ? clear_bhb_loop+0x60/0xb0 [ 855.355884][T17430] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 855.361784][T17430] RIP: 0033:0x7f6da779ce59 [ 855.366198][T17430] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 855.385799][T17430] RSP: 002b:00007f6da86a5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 855.394209][T17430] RAX: ffffffffffffffda RBX: 00007f6da7a15fa0 RCX: 00007f6da779ce59 [ 855.402175][T17430] RDX: 0000000000033fe0 RSI: 0000200000000000 RDI: 000000000000000d [ 855.410148][T17430] RBP: 00007f6da86a5090 R08: 0000000000000000 R09: 0000000000000000 [ 855.418111][T17430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 855.426079][T17430] R13: 00007f6da7a16038 R14: 00007f6da7a15fa0 R15: 00007ffd0ac86b08 [ 855.434056][T17430] [ 855.458897][T17430] Mem-Info: [ 855.462257][T17430] active_anon:12769 inactive_anon:0 isolated_anon:0 [ 855.462257][T17430] active_file:21970 inactive_file:40260 isolated_file:0 [ 855.462257][T17430] unevictable:768 dirty:172 writeback:0 [ 855.462257][T17430] slab_reclaimable:23119 slab_unreclaimable:98418 [ 855.462257][T17430] mapped:34619 shmem:6065 pagetables:626 [ 855.462257][T17430] sec_pagetables:0 bounce:0 [ 855.462257][T17430] kernel_misc_reclaimable:0 [ 855.462257][T17430] free:1304052 free_pcp:11013 free_cma:0 [ 855.515379][T17430] Node 0 active_anon:53076kB inactive_anon:0kB active_file:87880kB inactive_file:160832kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:140376kB dirty:688kB writeback:0kB shmem:24624kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:10148kB pagetables:2504kB sec_pagetables:0kB all_unreclaimable? no [ 855.551742][T17430] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 855.584729][T17430] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 855.623308][T17430] lowmem_reserve[]: 0 2527 2528 2528 2528 [ 855.638816][T17430] Node 0 DMA32 free:1302068kB boost:0kB min:34692kB low:43364kB high:52036kB reserved_highatomic:0KB active_anon:59876kB inactive_anon:0kB active_file:87880kB inactive_file:160832kB unevictable:1536kB writepending:688kB present:3129332kB managed:2592972kB mlocked:0kB bounce:0kB free_pcp:14760kB local_pcp:11916kB free_cma:0kB [ 855.694870][T17430] lowmem_reserve[]: 0 0 1 1 1 [ 855.700679][T17430] Node 0 Normal free:20kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:20kB local_pcp:12kB free_cma:0kB [ 855.729255][T17430] lowmem_reserve[]: 0 0 0 0 0 [ 855.734773][T17430] Node 1 Normal free:3898260kB boost:0kB min:55192kB low:68988kB high:82784kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:20624kB local_pcp:10752kB free_cma:0kB [ 855.767600][T17430] lowmem_reserve[]: 0 0 0 0 0 [ 855.773881][T17430] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 855.794105][T17430] Node 0 DMA32: 2567*4kB (UME) 2549*8kB (UME) 2637*16kB (UME) 1231*32kB (UME) 1888*64kB (UME) 1503*128kB (UME) 542*256kB (UM) 255*512kB (UME) 61*1024kB (UME) 8*2048kB (UM) 127*4096kB (UM) = 1293812kB [ 855.824589][T17430] Node 0 Normal: 3*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB [ 855.852848][T17430] Node 1 Normal: 171*4kB (UM) 45*8kB (UME) 32*16kB (UME) 34*32kB (UE) 25*64kB (UME) 4*128kB (UME) 5*256kB (UME) 2*512kB (ME) 0*1024kB 2*2048kB (UE) 949*4096kB (M) = 3898260kB [ 855.892181][T17430] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 855.902567][T17430] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 855.914369][T17430] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 855.924683][T17430] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 855.935248][T17430] 74014 total pagecache pages [ 855.959154][T17430] 0 pages in swap cache [ 855.970050][T17430] Free swap = 124996kB [ 855.984855][T17430] Total swap = 124996kB [ 855.989618][T17430] 2097051 pages RAM [ 855.993632][T17430] 0 pages HighMem/MovableOnly [ 856.095936][T17430] 415207 pages reserved [ 856.107936][T17430] 0 pages cma reserved [ 856.823294][T17473] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.4310'. [ 856.855253][T17476] tap1: tun_chr_ioctl cmd 2147767517 [ 856.888351][T17476] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4311'. [ 858.200512][T17503] delete_channel: no stack [ 858.245912][T17503] delete_channel: no stack [ 858.288888][T17503] delete_channel: no stack [ 858.330308][T17503] delete_channel: no stack [ 858.334992][T17503] delete_channel: no stack [ 858.386116][T17508] À: port 1(vlan0) entered blocking state [ 858.420933][T17508] À: port 1(vlan0) entered disabled state [ 858.442485][T17503] delete_channel: no stack [ 858.447184][T17503] delete_channel: no stack [ 858.479121][T17508] device vlan0 entered promiscuous mode [ 858.523076][T17503] delete_channel: no stack [ 858.527724][T17503] delete_channel: no stack [ 858.609069][T17503] delete_channel: no stack [ 858.613755][T17503] delete_channel: no stack [ 858.779160][T17503] delete_channel: no stack [ 858.784067][T17503] delete_channel: no stack [ 858.935407][T17503] delete_channel: no stack [ 858.968360][T17503] delete_channel: no stack [ 859.050014][T17503] delete_channel: no stack [ 859.054617][T17503] delete_channel: no stack [ 859.168801][T17503] delete_channel: no stack [ 859.228771][T17503] delete_channel: no stack [ 859.233386][T17503] delete_channel: no stack [ 859.237955][T17503] delete_channel: no stack [ 859.378807][T17503] delete_channel: no stack [ 859.696040][T17521] delete_channel: no stack [ 859.926535][T17533] device sit0 entered promiscuous mode [ 861.120504][T17567] FAULT_INJECTION: forcing a failure. [ 861.120504][T17567] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 861.197043][T17567] CPU: 1 PID: 17567 Comm: syz.4.4339 Not tainted syzkaller #0 [ 861.204577][T17567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 861.214661][T17567] Call Trace: [ 861.217956][T17567] [ 861.220905][T17567] dump_stack_lvl+0x188/0x24e [ 861.225614][T17567] ? show_regs_print_info+0x12/0x12 [ 861.230839][T17567] ? load_image+0x410/0x410 [ 861.235373][T17567] ? __lock_acquire+0x7bd0/0x7bd0 [ 861.240433][T17567] should_fail_ex+0x390/0x4c0 [ 861.245146][T17567] _copy_from_user+0x2c/0x170 [ 861.249851][T17567] ___sys_sendmsg+0x1c3/0x360 [ 861.254547][T17567] ? __sys_sendmsg+0x2a0/0x2a0 [ 861.259354][T17567] ? __lock_acquire+0x7bd0/0x7bd0 [ 861.264427][T17567] __se_sys_sendmsg+0x1c3/0x2b0 [ 861.269300][T17567] ? __x64_sys_sendmsg+0x80/0x80 [ 861.274278][T17567] ? lockdep_hardirqs_on+0x94/0x140 [ 861.279506][T17567] do_syscall_64+0x4c/0xa0 [ 861.283944][T17567] ? clear_bhb_loop+0x60/0xb0 [ 861.288644][T17567] ? clear_bhb_loop+0x60/0xb0 [ 861.293344][T17567] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 861.299241][T17567] RIP: 0033:0x7f3fa899ce59 [ 861.303648][T17567] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 861.323250][T17567] RSP: 002b:00007f3fa6bf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 861.331675][T17567] RAX: ffffffffffffffda RBX: 00007f3fa8c15fa0 RCX: 00007f3fa899ce59 [ 861.339650][T17567] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 861.347626][T17567] RBP: 00007f3fa6bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 861.355597][T17567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 861.363563][T17567] R13: 00007f3fa8c16038 R14: 00007f3fa8c15fa0 R15: 00007ffce5988768 [ 861.371543][T17567] [ 861.743322][T17582] netlink: 'syz.0.4345': attribute type 3 has an invalid length. [ 861.779141][T17582] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.4345'. [ 863.210173][T17609] netlink: 'syz.4.4352': attribute type 10 has an invalid length. [ 864.584212][T17630] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4360'. [ 864.617010][T17630] netlink: 'syz.0.4360': attribute type 10 has an invalid length. [ 864.639728][T17630] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 865.409873][T17654] device syzkaller0 entered promiscuous mode [ 865.488943][T17657] netlink: 'syz.3.4369': attribute type 10 has an invalid length. [ 865.565684][T17657] team0: Device vxcan1 is of different type [ 865.968167][T17668] netlink: 'syz.4.4373': attribute type 29 has an invalid length. [ 866.009042][T17668] netlink: 'syz.4.4373': attribute type 29 has an invalid length. [ 866.899009][T17693] netlink: 'syz.2.4381': attribute type 29 has an invalid length. [ 866.955666][T17693] netlink: 'syz.2.4381': attribute type 29 has an invalid length. [ 867.162820][T17700] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.4384'. [ 867.373965][T17700] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 867.709993][T17704] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.4386'. [ 867.775121][T17704] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 867.808664][T17704] CPU: 1 PID: 17704 Comm: syz.3.4386 Not tainted syzkaller #0 [ 867.816195][T17704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 867.826287][T17704] Call Trace: [ 867.829595][T17704] [ 867.832547][T17704] dump_stack_lvl+0x188/0x24e [ 867.837274][T17704] ? show_regs_print_info+0x12/0x12 [ 867.842511][T17704] ? load_image+0x410/0x410 [ 867.847086][T17704] sysfs_warn_dup+0x8a/0xa0 [ 867.851633][T17704] sysfs_do_create_link_sd+0xc0/0x110 [ 867.857046][T17704] device_add+0x83b/0x1050 [ 867.861506][T17704] wiphy_register+0x1d8b/0x2aa0 [ 867.866413][T17704] ? cfg80211_event_work+0x40/0x40 [ 867.871557][T17704] ? minstrel_ht_alloc+0x894/0xa20 [ 867.876719][T17704] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 867.882828][T17704] ieee80211_register_hw+0x2d48/0x39f0 [ 867.888334][T17704] ? ieee80211_register_hw+0xed1/0x39f0 [ 867.893909][T17704] ? ieee80211_register_hw+0xed1/0x39f0 [ 867.899499][T17704] ? ieee80211_tasklet_handler+0x20/0x20 [ 867.905167][T17704] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 867.911100][T17704] ? __debug_object_init+0xed/0x440 [ 867.916341][T17704] ? memset+0x1e/0x40 [ 867.920352][T17704] ? __hrtimer_init+0x189/0x270 [ 867.925235][T17704] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 867.930999][T17704] ? memcpy+0x3c/0x60 [ 867.935016][T17704] hwsim_new_radio_nl+0xab7/0xc90 [ 867.940091][T17704] genl_family_rcv_msg_doit+0x22f/0x350 [ 867.945671][T17704] ? end_current_label_crit_section+0x170/0x170 [ 867.951951][T17704] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 867.957889][T17704] ? bpf_lsm_capable+0x5/0x10 [ 867.962601][T17704] ? security_capable+0x85/0xb0 [ 867.967488][T17704] genl_rcv_msg+0x601/0x790 [ 867.972037][T17704] ? genl_bind+0x360/0x360 [ 867.976479][T17704] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 867.982854][T17704] netlink_rcv_skb+0x1ef/0x440 [ 867.987649][T17704] ? genl_bind+0x360/0x360 [ 867.992100][T17704] ? netlink_ack+0x1160/0x1160 [ 867.996901][T17704] ? down_read+0x1a8/0x2d0 [ 868.001342][T17704] genl_rcv+0x24/0x40 [ 868.005351][T17704] netlink_unicast+0x7ad/0x920 [ 868.010154][T17704] netlink_sendmsg+0x8ad/0xbd0 [ 868.014955][T17704] ? netlink_getsockopt+0x550/0x550 [ 868.020191][T17704] ? aa_sock_msg_perm+0x94/0x150 [ 868.025160][T17704] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 868.030483][T17704] ? security_socket_sendmsg+0x7c/0xa0 [ 868.035969][T17704] ? netlink_getsockopt+0x550/0x550 [ 868.041203][T17704] ____sys_sendmsg+0x5ed/0x9a0 [ 868.046007][T17704] ? __sys_sendmsg_sock+0x30/0x30 [ 868.051058][T17704] ? __import_iovec+0x306/0x510 [ 868.055946][T17704] ? import_iovec+0x6f/0xa0 [ 868.060478][T17704] ___sys_sendmsg+0x2a2/0x360 [ 868.065221][T17704] ? __sys_sendmsg+0x2a0/0x2a0 [ 868.070075][T17704] __se_sys_sendmsg+0x1c3/0x2b0 [ 868.074960][T17704] ? __x64_sys_sendmsg+0x80/0x80 [ 868.079948][T17704] ? lockdep_hardirqs_on+0x94/0x140 [ 868.085182][T17704] do_syscall_64+0x4c/0xa0 [ 868.089628][T17704] ? clear_bhb_loop+0x60/0xb0 [ 868.094331][T17704] ? clear_bhb_loop+0x60/0xb0 [ 868.099037][T17704] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 868.104966][T17704] RIP: 0033:0x7f6da779ce59 [ 868.109407][T17704] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 868.129045][T17704] RSP: 002b:00007f6da86a5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 868.137502][T17704] RAX: ffffffffffffffda RBX: 00007f6da7a15fa0 RCX: 00007f6da779ce59 [ 868.145597][T17704] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 868.153607][T17704] RBP: 00007f6da7832e6f R08: 0000000000000000 R09: 0000000000000000 [ 868.161606][T17704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 868.169609][T17704] R13: 00007f6da7a16038 R14: 00007f6da7a15fa0 R15: 00007ffd0ac86b08 [ 868.177644][T17704] [ 868.802610][T17729] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4392'. [ 869.988993][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.995345][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.533258][T17764] netlink: 202920 bytes leftover after parsing attributes in process `syz.3.4405'. [ 870.807008][T17760] netlink: 'syz.4.4404': attribute type 3 has an invalid length. [ 870.835104][T17760] netlink: 199824 bytes leftover after parsing attributes in process `syz.4.4404'. [ 870.933157][T17770] device syzkaller0 entered promiscuous mode [ 871.139771][T17782] netlink: 'syz.4.4413': attribute type 29 has an invalid length. [ 871.405997][T17782] netlink: 'syz.4.4413': attribute type 29 has an invalid length. [ 871.536383][T17784] netlink: 'syz.4.4413': attribute type 29 has an invalid length. [ 873.210015][T17811] netlink: 134056 bytes leftover after parsing attributes in process `syz.0.4420'. [ 876.133065][T17815] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4422'. [ 876.133590][T17811] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 876.160120][T17811] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 876.178662][T17811] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 876.630110][T17836] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4428'. [ 877.146630][T17850] netlink: 'syz.0.4433': attribute type 2 has an invalid length. [ 877.185418][T17850] netlink: 'syz.0.4433': attribute type 10 has an invalid length. [ 877.214418][T17850] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 877.292206][T17850] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 877.566649][T17865] netlink: 'syz.3.4438': attribute type 39 has an invalid length. [ 877.853360][T17867] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.4440'. [ 878.605778][T17884] netlink: 146340 bytes leftover after parsing attributes in process `syz.2.4443'. [ 878.686098][T17884] openvswitch: netlink: Key type 386 is out of range max 32 [ 879.153465][T17904] syzkaller1: tun_chr_ioctl cmd 2147767506 [ 879.621637][T17916] netlink: 164 bytes leftover after parsing attributes in process `syz.4.4454'. [ 879.687521][T17914] netlink: 10 bytes leftover after parsing attributes in process `syz.0.4453'. [ 880.113359][T17925] device syzkaller0 entered promiscuous mode [ 880.672564][T17941] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.4463'. [ 880.707376][T17944] netlink: 'syz.0.4463': attribute type 2 has an invalid length. [ 880.758771][T17935] -: renamed from syzkaller0 [ 884.679635][T17953] netlink: 'syz.1.4467': attribute type 21 has an invalid length. [ 884.694571][T17959] netlink: 5 bytes leftover after parsing attributes in process `syz.2.4469'. [ 885.026464][T17964] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4471'. [ 886.165419][T17994] device caif0 entered promiscuous mode [ 887.852882][T18043] netlink: 'syz.0.4496': attribute type 25 has an invalid length. [ 887.888735][T18043] netlink: 'syz.0.4496': attribute type 29 has an invalid length. [ 887.897095][T18044] netlink: 5 bytes leftover after parsing attributes in process `syz.0.4496'. [ 888.022911][T18047] netlink: 136124 bytes leftover after parsing attributes in process `syz.3.4498'. [ 889.061995][T18068] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 889.120414][T18068] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 890.657586][T18098] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4514'. [ 891.195819][T18121] netlink: 73384 bytes leftover after parsing attributes in process `syz.1.4522'. [ 891.750889][T18133] netlink: 'syz.1.4525': attribute type 1 has an invalid length. [ 891.769920][T18133] netlink: 16134 bytes leftover after parsing attributes in process `syz.1.4525'. [ 892.137067][T18141] netlink: 'syz.2.4527': attribute type 2 has an invalid length. [ 892.218859][T18141] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4527'. [ 892.481267][T18149] netlink: 'syz.4.4531': attribute type 2 has an invalid length. [ 892.533017][T18149] netlink: 'syz.4.4531': attribute type 1 has an invalid length. [ 892.598982][T18149] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4531'. [ 893.748606][T18170] netlink: 'syz.0.4537': attribute type 15 has an invalid length. [ 893.783351][T18170] netlink: 'syz.0.4537': attribute type 7 has an invalid length. [ 893.809071][T18172] netlink: 'syz.4.4535': attribute type 2 has an invalid length. [ 893.833418][T18175] netlink: 'syz.4.4535': attribute type 10 has an invalid length. [ 893.903540][T18175] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 894.044498][T18175] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 894.196951][T18177] netlink: 'syz.0.4537': attribute type 39 has an invalid length. [ 896.463077][T18207] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4548'. [ 896.875820][ C1] ================================================================== [ 896.884003][ C1] BUG: KASAN: slab-out-of-bounds in __bpf_get_stackid+0x6c9/0x920 [ 896.891805][ C1] Write of size 40 at addr ffff88808a12c690 by task syz.4.4549/18209 [ 896.899924][ C1] [ 896.902236][ C1] CPU: 1 PID: 18209 Comm: syz.4.4549 Not tainted syzkaller #0 [ 896.909674][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 896.919713][ C1] Call Trace: [ 896.922979][ C1] [ 896.925814][ C1] dump_stack_lvl+0x188/0x24e [ 896.930480][ C1] ? __lock_acquire+0x7bd0/0x7bd0 [ 896.935495][ C1] ? show_regs_print_info+0x12/0x12 [ 896.940677][ C1] ? load_image+0x410/0x410 [ 896.945170][ C1] ? __virt_addr_valid+0x467/0x540 [ 896.950271][ C1] ? __bpf_get_stackid+0x6c9/0x920 [ 896.955365][ C1] print_report+0xa8/0x210 [ 896.959775][ C1] kasan_report+0x10b/0x140 [ 896.964271][ C1] ? __bpf_get_stackid+0x6c9/0x920 [ 896.969368][ C1] kasan_check_range+0x235/0x290 [ 896.974299][ C1] ? __bpf_get_stackid+0x6c9/0x920 [ 896.979395][ C1] memcpy+0x3c/0x60 [ 896.983192][ C1] __bpf_get_stackid+0x6c9/0x920 [ 896.988117][ C1] bpf_get_stackid_pe+0x33f/0x400 [ 896.993130][ C1] bpf_prog_b5e50ceca154b88e+0x28/0x40 [ 896.998578][ C1] bpf_overflow_handler+0x50b/0x790 [ 897.003766][ C1] ? bpf_overflow_handler+0xd9/0x790 [ 897.009036][ C1] ? perf_swevent_overflow+0x230/0x230 [ 897.014481][ C1] ? sched_clock_cpu+0x6e/0x260 [ 897.019386][ C1] ? __perf_event_account_interrupt+0x187/0x280 [ 897.025615][ C1] __perf_event_overflow+0x457/0x630 [ 897.030890][ C1] perf_swevent_hrtimer+0x472/0x630 [ 897.036079][ C1] ? cpu_clock_event_read+0x50/0x50 [ 897.041271][ C1] ? do_raw_spin_unlock+0x11d/0x230 [ 897.046454][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 897.052333][ C1] ? _raw_spin_unlock+0x40/0x40 [ 897.057180][ C1] __hrtimer_run_queues+0x4e7/0xc90 [ 897.062371][ C1] ? ktime_get_update_offsets_now+0x95/0x3e0 [ 897.068341][ C1] ? cpu_clock_event_read+0x50/0x50 [ 897.073530][ C1] ? hrtimer_interrupt+0x980/0x980 [ 897.078624][ C1] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 897.084675][ C1] hrtimer_interrupt+0x399/0x980 [ 897.089606][ C1] __sysvec_apic_timer_interrupt+0x153/0x5a0 [ 897.095647][ C1] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 897.101266][ C1] [ 897.104182][ C1] [ 897.107096][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 897.113067][ C1] RIP: 0010:perf_ioctl+0x1fea/0x23e0 [ 897.118342][ C1] Code: 30 da ff 45 31 ff eb 08 41 89 c7 e8 00 30 da ff 48 8b 7c 24 18 e8 c6 d5 8b 08 4c 8b 74 24 10 4d 63 ff 4d 89 6e 22 4d 89 6e 2a <48> 8b 5c 24 78 48 89 df 48 83 c7 48 e8 a5 d5 8b 08 48 89 df e8 5d [ 897.137936][ C1] RSP: 0018:ffffc900060b7c40 EFLAGS: 00000246 [ 897.144006][ C1] RAX: ffffffff81a7e020 RBX: 0000000000000000 RCX: 0000000000080000 [ 897.151977][ C1] RDX: ffffc9001324a000 RSI: 0000000000000be5 RDI: 0000000000000be6 [ 897.159940][ C1] RBP: ffffc900060b7ed8 R08: ffff888075fe82f7 R09: 1ffff1100ebfd05e [ 897.167895][ C1] R10: dffffc0000000000 R11: ffffed100ebfd05f R12: 0000000040042408 [ 897.175852][ C1] R13: f8f8f8f8f8f8f8f8 R14: fffff52000c16f98 R15: 0000000000000000 [ 897.183817][ C1] ? perf_ioctl+0xee0/0x23e0 [ 897.188405][ C1] ? ktime_get+0x7b/0x270 [ 897.192722][ C1] ? perf_poll+0x1b0/0x1b0 [ 897.197131][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 897.203117][ C1] ? lock_chain_count+0x20/0x20 [ 897.207976][ C1] ? lock_chain_count+0x20/0x20 [ 897.212832][ C1] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 897.218988][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 897.224175][ C1] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 897.230321][ C1] ? perf_poll+0x1b0/0x1b0 [ 897.234725][ C1] ? __se_sys_ioctl+0xee/0x170 [ 897.239481][ C1] ? perf_poll+0x1b0/0x1b0 [ 897.243882][ C1] __se_sys_ioctl+0xfa/0x170 [ 897.248458][ C1] do_syscall_64+0x4c/0xa0 [ 897.252861][ C1] ? clear_bhb_loop+0x60/0xb0 [ 897.257520][ C1] ? clear_bhb_loop+0x60/0xb0 [ 897.262180][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 897.268063][ C1] RIP: 0033:0x7f3fa899ce59 [ 897.272465][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 897.292062][ C1] RSP: 002b:00007f3fa6bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 897.300470][ C1] RAX: ffffffffffffffda RBX: 00007f3fa8c15fa0 RCX: 00007f3fa899ce59 [ 897.308477][ C1] RDX: 0000000000000006 RSI: 0000000040042408 RDI: 0000000000000007 [ 897.316436][ C1] RBP: 00007f3fa8a32e6f R08: 0000000000000000 R09: 0000000000000000 [ 897.324395][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 897.332349][ C1] R13: 00007f3fa8c16038 R14: 00007f3fa8c15fa0 R15: 00007ffce5988768 [ 897.340312][ C1] [ 897.343319][ C1] [ 897.345624][ C1] Allocated by task 18209: [ 897.350022][ C1] kasan_set_track+0x4b/0x70 [ 897.354604][ C1] __kasan_kmalloc+0x8e/0xa0 [ 897.359182][ C1] __kmalloc_node+0xb2/0x240 [ 897.363766][ C1] bpf_map_area_alloc+0x47/0xe0 [ 897.368613][ C1] prealloc_elems_and_freelist+0x86/0x1c0 [ 897.374319][ C1] stack_map_alloc+0x386/0x510 [ 897.379067][ C1] map_create+0x524/0xff0 [ 897.383382][ C1] __sys_bpf+0x38b/0x780 [ 897.387608][ C1] __x64_sys_bpf+0x78/0x90 [ 897.392009][ C1] do_syscall_64+0x4c/0xa0 [ 897.396408][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 897.402288][ C1] [ 897.404594][ C1] Last potentially related work creation: [ 897.410293][ C1] kasan_save_stack+0x3a/0x60 [ 897.414955][ C1] __kasan_record_aux_stack+0xb2/0xc0 [ 897.420330][ C1] call_rcu+0x14f/0x950 [ 897.424474][ C1] nf_unregister_net_hooks+0xc7/0x130 [ 897.429899][ C1] nf_defrag_ipv4_disable+0x91/0xe0 [ 897.435082][ C1] nf_ct_netns_put+0x2d6/0x510 [ 897.439870][ C1] nf_conncount_destroy+0x3d/0x150 [ 897.444996][ C1] ovs_ct_exit+0x98/0x200 [ 897.449367][ C1] ovs_exit_net+0xe9/0x7a0 [ 897.453794][ C1] cleanup_net+0x703/0xba0 [ 897.458192][ C1] process_one_work+0x8ab/0x1160 [ 897.463112][ C1] worker_thread+0xaf5/0x12a0 [ 897.467771][ C1] kthread+0x29d/0x330 [ 897.471868][ C1] ret_from_fork+0x1f/0x30 [ 897.476284][ C1] [ 897.478594][ C1] The buggy address belongs to the object at ffff88808a12c680 [ 897.478594][ C1] which belongs to the cache kmalloc-cg-64 of size 64 [ 897.492717][ C1] The buggy address is located 16 bytes inside of [ 897.492717][ C1] 64-byte region [ffff88808a12c680, ffff88808a12c6c0) [ 897.505801][ C1] [ 897.508106][ C1] The buggy address belongs to the physical page: [ 897.514560][ C1] page:ffffea0002284b00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x8a12c [ 897.524693][ C1] memcg:ffff88802ee6be01 [ 897.528910][ C1] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 897.536450][ C1] raw: 00fff00000000200 ffffea000168b080 dead000000000002 ffff888017442780 [ 897.545018][ C1] raw: 0000000000000000 0000000080200020 00000001ffffffff ffff88802ee6be01 [ 897.553575][ C1] page dumped because: kasan: bad access detected [ 897.559976][ C1] page_owner tracks the page as allocated [ 897.565670][ C1] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 13264, tgid 13264 (syz-executor), ts 747482290436, free_ts 747478398205 [ 897.584229][ C1] post_alloc_hook+0x173/0x1a0 [ 897.588990][ C1] get_page_from_freelist+0x206b/0x2180 [ 897.594524][ C1] __alloc_pages+0x1ec/0x4f0 [ 897.599100][ C1] alloc_slab_page+0x5d/0x180 [ 897.603763][ C1] new_slab+0x87/0x2d0 [ 897.607818][ C1] ___slab_alloc+0xbc5/0x1240 [ 897.612478][ C1] __kmem_cache_alloc_node+0x126/0x270 [ 897.617919][ C1] kmalloc_trace+0x26/0xe0 [ 897.622323][ C1] alloc_fdtable+0xca/0x2c0 [ 897.626814][ C1] dup_fd+0x743/0xa20 [ 897.630785][ C1] copy_files+0x72/0xe0 [ 897.634982][ C1] copy_process+0x1862/0x40c0 [ 897.639645][ C1] kernel_clone+0x24b/0x900 [ 897.644129][ C1] __x64_sys_clone+0x1a7/0x220 [ 897.648880][ C1] do_syscall_64+0x4c/0xa0 [ 897.653278][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 897.659160][ C1] page last free stack trace: [ 897.663814][ C1] free_unref_page_prepare+0x8e5/0x9e0 [ 897.669262][ C1] free_unref_page+0x2e/0x3f0 [ 897.673925][ C1] __vunmap+0x874/0xa40 [ 897.678063][ C1] __do_replace+0x86d/0x980 [ 897.682608][ C1] do_ip6t_set_ctl+0xb3d/0xe10 [ 897.687356][ C1] nf_setsockopt+0x25f/0x280 [ 897.691931][ C1] __sys_setsockopt+0x2bf/0x3d0 [ 897.696766][ C1] __x64_sys_setsockopt+0xb1/0xc0 [ 897.701771][ C1] do_syscall_64+0x4c/0xa0 [ 897.706172][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 897.712051][ C1] [ 897.714360][ C1] Memory state around the buggy address: [ 897.719969][ C1] ffff88808a12c580: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 897.728011][ C1] ffff88808a12c600: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 897.736053][ C1] >ffff88808a12c680: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 897.744095][ C1] ^ [ 897.749531][ C1] ffff88808a12c700: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc [ 897.757571][ C1] ffff88808a12c780: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 897.765614][ C1] ================================================================== [ 897.773670][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 897.780842][ C1] CPU: 1 PID: 18209 Comm: syz.4.4549 Not tainted syzkaller #0 [ 897.788280][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 897.798318][ C1] Call Trace: [ 897.801584][ C1] [ 897.804415][ C1] dump_stack_lvl+0x188/0x24e [ 897.809079][ C1] ? memcpy+0x3c/0x60 [ 897.813047][ C1] ? show_regs_print_info+0x12/0x12 [ 897.818227][ C1] ? load_image+0x410/0x410 [ 897.822813][ C1] panic+0x2d3/0x710 [ 897.826696][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 897.831184][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 897.837065][ C1] ? _raw_spin_unlock+0x40/0x40 [ 897.841900][ C1] ? print_memory_metadata+0x314/0x400 [ 897.847352][ C1] check_panic_on_warn+0x80/0xa0 [ 897.852276][ C1] ? __bpf_get_stackid+0x6c9/0x920 [ 897.857377][ C1] end_report+0x66/0x110 [ 897.861611][ C1] kasan_report+0x118/0x140 [ 897.866100][ C1] ? __bpf_get_stackid+0x6c9/0x920 [ 897.871199][ C1] kasan_check_range+0x235/0x290 [ 897.876125][ C1] ? __bpf_get_stackid+0x6c9/0x920 [ 897.881218][ C1] memcpy+0x3c/0x60 [ 897.885013][ C1] __bpf_get_stackid+0x6c9/0x920 [ 897.889936][ C1] bpf_get_stackid_pe+0x33f/0x400 [ 897.894950][ C1] bpf_prog_b5e50ceca154b88e+0x28/0x40 [ 897.900399][ C1] bpf_overflow_handler+0x50b/0x790 [ 897.905584][ C1] ? bpf_overflow_handler+0xd9/0x790 [ 897.910854][ C1] ? perf_swevent_overflow+0x230/0x230 [ 897.916297][ C1] ? sched_clock_cpu+0x6e/0x260 [ 897.921136][ C1] ? __perf_event_account_interrupt+0x187/0x280 [ 897.927366][ C1] __perf_event_overflow+0x457/0x630 [ 897.932638][ C1] perf_swevent_hrtimer+0x472/0x630 [ 897.937825][ C1] ? cpu_clock_event_read+0x50/0x50 [ 897.943017][ C1] ? do_raw_spin_unlock+0x11d/0x230 [ 897.948199][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 897.954083][ C1] ? _raw_spin_unlock+0x40/0x40 [ 897.958922][ C1] __hrtimer_run_queues+0x4e7/0xc90 [ 897.964105][ C1] ? ktime_get_update_offsets_now+0x95/0x3e0 [ 897.970070][ C1] ? cpu_clock_event_read+0x50/0x50 [ 897.975258][ C1] ? hrtimer_interrupt+0x980/0x980 [ 897.980352][ C1] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 897.986403][ C1] hrtimer_interrupt+0x399/0x980 [ 897.991332][ C1] __sysvec_apic_timer_interrupt+0x153/0x5a0 [ 897.997299][ C1] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 898.002918][ C1] [ 898.005834][ C1] [ 898.008751][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 898.014719][ C1] RIP: 0010:perf_ioctl+0x1fea/0x23e0 [ 898.019993][ C1] Code: 30 da ff 45 31 ff eb 08 41 89 c7 e8 00 30 da ff 48 8b 7c 24 18 e8 c6 d5 8b 08 4c 8b 74 24 10 4d 63 ff 4d 89 6e 22 4d 89 6e 2a <48> 8b 5c 24 78 48 89 df 48 83 c7 48 e8 a5 d5 8b 08 48 89 df e8 5d [ 898.039583][ C1] RSP: 0018:ffffc900060b7c40 EFLAGS: 00000246 [ 898.045639][ C1] RAX: ffffffff81a7e020 RBX: 0000000000000000 RCX: 0000000000080000 [ 898.053600][ C1] RDX: ffffc9001324a000 RSI: 0000000000000be5 RDI: 0000000000000be6 [ 898.061642][ C1] RBP: ffffc900060b7ed8 R08: ffff888075fe82f7 R09: 1ffff1100ebfd05e [ 898.069602][ C1] R10: dffffc0000000000 R11: ffffed100ebfd05f R12: 0000000040042408 [ 898.077557][ C1] R13: f8f8f8f8f8f8f8f8 R14: fffff52000c16f98 R15: 0000000000000000 [ 898.085517][ C1] ? perf_ioctl+0xee0/0x23e0 [ 898.090101][ C1] ? ktime_get+0x7b/0x270 [ 898.094419][ C1] ? perf_poll+0x1b0/0x1b0 [ 898.098823][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 898.104790][ C1] ? lock_chain_count+0x20/0x20 [ 898.109625][ C1] ? lock_chain_count+0x20/0x20 [ 898.114461][ C1] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 898.120601][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 898.125784][ C1] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 898.131923][ C1] ? perf_poll+0x1b0/0x1b0 [ 898.136331][ C1] ? __se_sys_ioctl+0xee/0x170 [ 898.141081][ C1] ? perf_poll+0x1b0/0x1b0 [ 898.145482][ C1] __se_sys_ioctl+0xfa/0x170 [ 898.150061][ C1] do_syscall_64+0x4c/0xa0 [ 898.154482][ C1] ? clear_bhb_loop+0x60/0xb0 [ 898.159145][ C1] ? clear_bhb_loop+0x60/0xb0 [ 898.163821][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 898.169815][ C1] RIP: 0033:0x7f3fa899ce59 [ 898.174227][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 898.193824][ C1] RSP: 002b:00007f3fa6bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 898.202226][ C1] RAX: ffffffffffffffda RBX: 00007f3fa8c15fa0 RCX: 00007f3fa899ce59 [ 898.210188][ C1] RDX: 0000000000000006 RSI: 0000000040042408 RDI: 0000000000000007 [ 898.218148][ C1] RBP: 00007f3fa8a32e6f R08: 0000000000000000 R09: 0000000000000000 [ 898.226119][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 898.234086][ C1] R13: 00007f3fa8c16038 R14: 00007f3fa8c15fa0 R15: 00007ffce5988768 [ 898.242060][ C1] [ 898.245343][ C1] Kernel Offset: disabled [ 898.249654][ C1] Rebooting in 86400 seconds..