last executing test programs: 8.582168513s ago: executing program 1 (id=12643): socket$kcm(0x2, 0x3, 0x2) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x21, 0x2, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0], 0x0, 0x25, &(0x7f0000000180), 0x4e, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0x27, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000540)=ANY=[], &(0x7f0000000c00)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x11, '\x00', r0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x0, 0xb, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000880)={r2, 0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair(0x1, 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0x800, 0x0, 0x0, 0xfffffffffffffde1, 0x0, 0x0, 0x5}, 0x50) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x8805) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) socket$kcm(0x21, 0x2, 0xa) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) 8.530945836s ago: executing program 2 (id=12645): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305829, &(0x7f0000000040)) getpid() ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='mem\x00\x10\x00\x00\x00\x00\x00\x00I\xa2l') r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) write$cgroup_subtree(r1, &(0x7f0000000100)={[{0x0, 'io'}]}, 0x4) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x10) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r2, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) close(r3) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000008000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0xfca804a0, 0x4, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 8.522128716s ago: executing program 3 (id=12646): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4043, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4000000}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) socket$kcm(0x11, 0x200000000000002, 0x300) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc0080002a107000200060001c003", 0x31}, {&(0x7f0000000300)="0e11c87e6c96ec4bc04cb33ff683a061dc636db2c572b881bb4cc9a1354e2fc000c35da27279cff682dd98", 0x2b}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="39000000140081ae50003c00fbff008311001f9f660fcf065c05acb612f691f3bd3508abca1be6eeb89c44ebb37358582bb8b7d553b4e92155", 0x39}], 0x1}, 0x0) recvmsg(r3, &(0x7f0000001c80)={0x0, 0x0, 0x0}, 0x2000) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000440), &(0x7f00000003c0)='%ps \x00'}, 0x20) sendmsg$inet(r3, &(0x7f00000005c0)={&(0x7f0000000280)={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000380)="11fad2023a2094dacb7d", 0xa}], 0x1, &(0x7f00000006c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_retopts={{0x94, 0x0, 0x7, {[@ssrr={0x89, 0xb, 0xaa, [@empty, @multicast2]}, @timestamp={0x44, 0x18, 0xd8, 0x0, 0x4, [0x1, 0x0, 0x4, 0x1, 0x4]}, @rr={0x7, 0xb, 0xfb, [@empty, @multicast2]}, @cipso={0x86, 0x53, 0x1, [{0x0, 0xf, "72868f48f89fe7183bb71e493f"}, {0x0, 0x10, "267083cbc6637d942dc9115d1f36"}, {0x7, 0xf, "da8b4afaf50e597ed6cb4e88ad"}, {0x5, 0x11, "be0fdf26f0fcb7fbb9e2990d6ef02a"}, {0x7, 0xe, "65c56a82330b62ea2701ceca"}]}]}}}], 0xb0}, 0x40) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r4, 0xffffffffffffffff}, 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r1}, 0x8) r6 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r6, 0x0, 0x28, 0x0, 0x4b) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000ffff0b867b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x1d, 0xa, 0xa, 0x0, 0x0, 0x61, 0x10, 0x10}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r7, 0x0, 0xe, 0x48000000, &(0x7f0000000300)="40f0538ef047b21fb60068305500", 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open$cgroup(&(0x7f00000001c0)={0x5, 0x80, 0x7, 0x6, 0x2e, 0x3, 0x0, 0x9, 0x800, 0x6, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000040), 0xf}, 0x0, 0xe, 0x7ff, 0x5, 0x9, 0x2, 0x2, 0x0, 0xfffffff7, 0x0, 0x2}, 0xffffffffffffffff, 0x3, r0, 0x3) 8.27551356s ago: executing program 1 (id=12648): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB], 0xfe33) 7.906060972s ago: executing program 0 (id=12651): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020732500000000000709007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000008500000050000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000006000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.bfq.io_serviced\x00', 0x0, 0x0) socket$kcm(0x10, 0x2, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) socket$kcm(0x11, 0x200000000000002, 0x300) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8003fffe, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x104007, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0x602f, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff200000000021000aac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) 7.830037256s ago: executing program 2 (id=12652): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() syz_open_procfs$namespace(r0, &(0x7f0000000040)='ns/user\x00') r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)}, 0x0) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0xffffffffffffff1e) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000240)='GPL\x00'}, 0x90) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100), 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8982, &(0x7f0000000080)) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) 7.75971136s ago: executing program 3 (id=12653): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x21, 0x2, 0x2) r1 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)={[{0x2d, 'cpu'}]}, 0x5) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) r3 = socket$kcm(0x2, 0x5, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x4) sendmsg$inet(r3, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1}, 0x3e8) 7.750020371s ago: executing program 1 (id=12654): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x0, 0x0, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd9a0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x104007, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000013c0)="d080", 0xfdef}], 0x1, 0x0, 0x0, 0x800300}, 0x20000801) recvmsg(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x40002002) ioctl$SIOCSIFHWADDR(r0, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x8, 0x0, 0xee, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001a00)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000480)="b9fb0307683a0600000000378100", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0xe4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0xa, 0x2, 0x0) close(r4) socket$kcm(0x2, 0x3, 0x73) setsockopt$sock_attach_bpf(r4, 0x0, 0x4, 0x0, 0x0) sendmsg$inet(r4, &(0x7f0000000340)={&(0x7f0000000140)={0x2, 0x4e22, @dev}, 0x10, 0x0}, 0x400c080) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000200)="a3d97a8f23df13964d15dff34b691526a65fa77546cbf3cd194874acb58711851e9dd830483bbeac789ee1c28feee52067ac821364ca1438058fb4e186c6d4a573f88f57b6e6b3e10032b26acf97f1a4ceea1ab69f387ef240e59a6d07fc0f457dc86b5a11a56dda777968f25c5b02aad49e7c45fa05475214", 0x79}, {&(0x7f0000000280)="11c6a6d414d1373b04eee689cc3a54c90bcc07c889d8b7ea228d9f4a086ec7f085c49963870b6cdd873f30952fe805477cd7cdd1edc5d76c7654e32ef2053d4cb89425f260b529f50bd7f21a3749e065636852aa8d59381a9ead4aaa5a2ef8095402b10a928c0262dbfb4ad8a63ced54178a62dce8f01cd994cc2cedde5423e9db3b90ebb978caabe5d7ee6bf5ea915cf6c5b4cd290b88cf802488ca051fa2644b75d3723a16bc109b2548104e165c2cee41066ce653a5fd5734439c865f4000989bf4b5c98297ca8706b75c1cf93b3fae4ec32c1390", 0xd6}, {&(0x7f0000000500)="3f0091aa11aa0a1322a5026f79df447e2b43cbe7ff490f48f1562db00c45dbce1cf3f00ad209f37685f7e2232f4772c138d0633211027708a6e12109fbbe327e97dbed63fc86d1892332717f809d6251c7ab730b5fc2aa9870b60880de0dae9fb2bbe643463a", 0x66}], 0x3, &(0x7f0000000380)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}}}], 0x20}, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x31}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) socket$kcm(0x11, 0x200000000000002, 0x300) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) 7.107447898s ago: executing program 0 (id=12656): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x1, 0x0, 0x0, 0x8}], 0x10, 0x3}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x10}}], 0x10}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee688892f", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000000), 0x8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1\x00'}) r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x208, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000aecd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad94ed406f21caf5adcf920569c00cc1199684fa75814709fea019af247c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c1faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6fab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b79db2e3d5986c82b5aa94e539b204d58f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c7160ec83070000020000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72b0000000000001cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2cc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78ac02ca3cdf6a662db1c9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad943e392955f4f979ea13201bafedcd2063d11dd665647223c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd89346cfbb5567e54d3504723177d356c4604b7a492ecec37e83efceefd7ca2533659edc8be05cc85451c6a14507434eb54b6f43caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffca9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a294351c5356c1d06c92cf8ce3c7c56cd31121624d74517fd3666277f670e812b28e2f30d035cee5d0e77a3c7220000000000000005a474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f034b8d3ebce68663ef5af469abe75b314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041e12282ce24463aaf28345bd168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f09000000000000004fc4bda3453602004535a976eacd3adaa4d2ee6fe0d072ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d401adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb40f7f02f750d6c977a191852c9ae031db044b2353199546609f9f69a6cfefdf879d447df53f3b9b70d10355b00300000000000000553d18a6cc50feeb7bfad9b7be3283b6450d264e7712d2f1d7004548b19162cef04d18d4f58fab987baab97a9bfbd8f185b5631820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe527340935aa3c0b4f3f45b418a18217747ae442e31560e5b741445ea2a1acee2a81425ff000000d2a0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51423b9f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f88735fce5115dc83ed73d8ee4a91322608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf5000000000000fa08ad0631c4b839688b22c4da2a6bc4cf45854d221a2d5f96bc64647f15daa2ba79cd0f4254ed55217912ef84bd2927df82fc061aef2920c49b2a90886da75561173fa186cb7ee86dd4285c4721eb428c953296bb2f5d825da54dbef07c1b349b4901e093d13e6b9a0000009b5b22e887bc061d40bcaf0aa18623fd9b7179ccc692ba74b531b65c4decf9d080a8ac7e82d4cde1267aa64b2a94fd87a009e6742c2ddc3a9d7eccbb1831b1fa218277c2814a91cab7cb59c697166d6f1bb1a360470000000000000000000000000000000000000000000000000000f9f9b4ce7e871f507084c8c88e0652decbe579b03ed84ea94597dd1059620a050f69ea03b99b4e19d35f4a3b54e96ae2172effecec80f6baa4bf69a6ebf5392882df78b0983e662dc0cb64b77f3f006b6b25443197ae93f0be6de5a703d003f00720943c0e4b33af00000000000000000021a688b2d7007fcc4b59f719afb0b3b7e0aee306ca70fe42bf4984a68f40e1fc043a03a17e4744359b87dc27c82d51cbeb64e52a"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1c}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0x20, &(0x7f0000000480)={&(0x7f00000005c0)=""/168, 0xa8, 0x0, &(0x7f0000000680)=""/177, 0xb1}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x12, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="18210000a07c0eca212c4514769c8830e4a57d5f79e6a74a71a51f31a807a5dc1f47ebc0cceb9013a2417f63ee6d03b3761fd9716cc3", @ANYRES32, @ANYBLOB="000000000600000004220600e4000000"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0xe6, &(0x7f0000000280)=""/230, 0x41000, 0x80, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x4, 0x8, 0x7fffffff, 0x68}, 0x10, r6, 0xffffffffffffffff, 0x7, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000780)=[{0x5, 0x5, 0x5, 0x7}, {0x2, 0x2, 0xf, 0xb}, {0x0, 0x5, 0x6, 0x1}, {0x5, 0x5, 0x1, 0x5}, {0x2, 0x1, 0xe, 0x1}, {0x5, 0x2, 0x5, 0x1}, {0x0, 0x3, 0x6, 0xa}], 0x10, 0x9}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x12) r7 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r8 = openat$cgroup_pressure(r7, &(0x7f0000000040)='memory.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r8, &(0x7f0000000080)={'some', 0x20, 0x2000000008, 0x20, 0x10000000fffff}, 0x2f) r9 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xef, 0x2, 0x0, 0x0, 0x0, 0x3, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x0, 0x6, 0x6, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x40082406, &(0x7f0000000100)='cpu&-0!|!') close(r8) socketpair(0x15, 0x1, 0x9, &(0x7f00000008c0)) 7.106920518s ago: executing program 2 (id=12657): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x1, 0x0, 0x0, 0x8}], 0x10, 0x3}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x10}}], 0x10}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee688892f", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000000), 0x8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1\x00'}) r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x208, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1c}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0x20, &(0x7f0000000480)={&(0x7f00000005c0)=""/168, 0xa8, 0x0, &(0x7f0000000680)=""/177, 0xb1}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x12, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="18210000a07c0eca212c4514769c8830e4a57d5f79e6a74a71a51f31a807a5dc1f47ebc0cceb9013a2417f63ee6d03b3761fd9716cc3689822", @ANYRES32, @ANYBLOB="000000000600000004220600e4000000"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0xe6, &(0x7f0000000280)=""/230, 0x41000, 0x80, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x4, 0x8, 0x7fffffff, 0x68}, 0x10, r6, 0xffffffffffffffff, 0x7, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000780)=[{0x5, 0x5, 0x5, 0x7}, {0x2, 0x2, 0xf, 0xb}, {0x0, 0x5, 0x6, 0x1}, {0x5, 0x5, 0x1, 0x5}, {0x2, 0x1, 0xe, 0x1}, {0x5, 0x2, 0x5, 0x1}, {0x0, 0x3, 0x6, 0xa}], 0x10, 0x9}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x12) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_pressure(r7, &(0x7f0000000040)='memory.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r8, &(0x7f0000000080)={'some', 0x20, 0x2000000008, 0x20, 0x10000000fffff}, 0x2f) r9 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xef, 0x2, 0x0, 0x0, 0x0, 0x3, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x0, 0x6, 0x6, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x40082406, &(0x7f0000000100)='cpu&-0!|!') close(r8) socketpair(0x15, 0x1, 0x9, &(0x7f00000008c0)) 7.050672782s ago: executing program 3 (id=12658): socket$kcm(0x2, 0x3, 0x2) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x21, 0x2, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0], 0x0, 0x25, &(0x7f0000000180), 0x4e, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0x27, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000540)=ANY=[], &(0x7f0000000c00)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x11, '\x00', r0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x0, 0xb, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000880)={r2, 0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair(0x1, 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0x800, 0x0, 0x0, 0xfffffffffffffde1, 0x0, 0x0, 0x5}, 0x50) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x8805) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) socket$kcm(0x21, 0x2, 0xa) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)}, 0x0) 7.050083902s ago: executing program 4 (id=12659): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x2, 0x5, 0x84) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'ip6tnl0\x00', @random="0600002000"}) socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) 3.931739092s ago: executing program 3 (id=12660): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x5, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x42008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x0, 0x17}, 0x0, 0xc8, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x7, 0xffffffffffffffff, 0xb) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x1f, &(0x7f0000000980)=ANY=[@ANYBLOB="18000000e200000000000000ffff000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7020000000000008500000086000000147930000000000018140000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af80729e4500000020000007b8af0ff00000000f8ffffffbfa400000000000007040000f0ff7f0018230010000000000000000800000000000001800000010074810f8bacaa0a02a62c19e3cc401da8ad90579fd228f2b889192ab8fd193d33d05ac3eeb38034baa2375310053d55134ad2ec3fa54fa9c3a9ab70f3140113455c4ed1350000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a5000000851000000800000018120000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000950000000000000087080000010000009500000000000000"], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0xbe, &(0x7f00000005c0)=""/190, 0x1e00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x6, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000500)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000006c0)=[{0x5, 0x1, 0xa, 0x4}, {0x0, 0x1, 0xf, 0xb}, {0x1, 0x2, 0xb, 0x8}, {0x3, 0x1, 0x8, 0x5}, {0x3, 0x3, 0xc, 0xc}, {0x2, 0x1, 0xb}], 0x10, 0x7}, 0x94) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000025c0)="d8000000240081064e81f882db44b9040a02080006000000e8fe0ba1f1ffffff0200142603600e120800080024000000a80009001100014003000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a94c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970179b1b36165fb55c82148d29e", 0xd8}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce81e6978800fe08000e40000200875a65969ff57b00ff020000000000000000000000000001e2607e15e697ab"], 0xfdef) 3.872169536s ago: executing program 2 (id=12661): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r2, 0x5}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={r1, 0x58, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440), 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000780)={0x1b, 0x0, 0x0, 0x10001, 0x0, r1, 0x6, '\x00', r3, r4, 0x5, 0x5, 0x2}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x100080, 0x0, 0x0, 0x1}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0x12, &(0x7f00000008c0)=r8, 0x4) r9 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r11) recvmsg$unix(r10, &(0x7f0000000400)={0x0, 0xfffffffffffffc9a, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r9, 0x107, 0x12, &(0x7f00000008c0)=r12, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1}, &(0x7f00000006c0), &(0x7f0000000700)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r1, &(0x7f00000007c0)}, 0x20) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4000}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) 3.871342366s ago: executing program 4 (id=12662): r0 = socket$kcm(0xa, 0x3, 0x73) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @multicast2}, 0x3c, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x34}}, @ip_tos_u8={{0x14, 0x29, 0x8}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @remote}}}], 0x50}, 0x0) (async) r1 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r1, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0) recvmsg$kcm(r1, &(0x7f0000000280)={&(0x7f00000001c0)=@nl=@proc, 0x80, &(0x7f0000000940)=[{&(0x7f0000000000)=""/20, 0x14}], 0x1}, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_clone(0x1000, 0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000c40)=[{0x0, 0x4, 0x10006}]}, 0x94) (async, rerun: 64) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x7c3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async, rerun: 64) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x60}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r2, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) (async) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async, rerun: 64) socket$kcm(0x2, 0x5, 0x84) (async, rerun: 64) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[], 0x48) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, 0x0, 0x0) (rerun: 64) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\n\x00'/20, @ANYRES32, @ANYBLOB], 0x48) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r3) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) (async) ioctl$SIOCSIFHWADDR(r3, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100ffffffff"}) (async) perf_event_open$cgroup(&(0x7f00000000c0)={0x2, 0x80, 0xc, 0x19, 0x7, 0x39, 0x0, 0x41, 0x40000, 0x4, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x401, 0x2, @perf_bp={&(0x7f0000000040)}, 0x10, 0x229, 0x4, 0x7, 0x1f02, 0x401a2, 0x9, 0x0, 0x8454, 0x0, 0xdb3}, r1, 0x2, 0xffffffffffffffff, 0x9) 3.821693179s ago: executing program 1 (id=12663): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305829, &(0x7f0000000040)) getpid() ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='mem\x00\x10\x00\x00\x00\x00\x00\x00I\xa2l') r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) write$cgroup_subtree(r1, &(0x7f0000000100)={[{0x0, 'io'}]}, 0x4) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x10) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r2, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) close(r3) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000008000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0xfca804a0, 0x4, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 3.819696099s ago: executing program 0 (id=12664): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r1, 0x0, 0x10001) perf_event_open$cgroup(&(0x7f0000000040)={0x4, 0x80, 0xb2, 0x7, 0x3, 0xa, 0x0, 0x9, 0x1c440, 0x9, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x405, 0x2, @perf_config_ext={0xffffffff7fffffff, 0x2}, 0x100608, 0xffffffffffffffff, 0x2, 0x8, 0x10001, 0x80000003, 0xdb7d, 0x0, 0x7, 0x0, 0x1}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0xd) bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) mkdir(0x0, 0x8) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x1ff}, 0x100c, 0x8, 0x0, 0x2, 0x0, 0x7, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) sendmsg$inet(r2, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000004c0)="d8000000180081064e81f782db4cb904021d0800fd02fe02e8fe50a10a000400250000000c600e41b0000900ac0008032500000004000b00bc00ff150048035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x0) sendmsg$inet(r3, 0x0, 0x0) 3.582570663s ago: executing program 4 (id=12665): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x806, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000061043c000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) r0 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000700000095000000000000006100000600"], 0x0, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="850000002200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/ipc\x00') bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x0, 0xcc0, 0xfffffffffffffde6, &(0x7f00000001c0)="348b0d151f8218e3c73697e4080049c416b90900000093291cfc5e8b99005e8b9900", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000850000000800000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) setsockopt$sock_attach_bpf(r0, 0x10d, 0xa, &(0x7f0000000000)=r2, 0x11) setsockopt$sock_attach_bpf(r0, 0x10d, 0xa, &(0x7f0000000040)=r2, 0x4) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480f0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 3.572111993s ago: executing program 3 (id=12666): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x31}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) socket$kcm(0x11, 0x200000000000002, 0x300) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x8000000, 0xe, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888100", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.561614604s ago: executing program 2 (id=12667): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000900)=@framed={{0x18, 0x0, 0x0, 0x0, 0x204}, [@call={0x85, 0x0, 0x0, 0x60}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x5}, 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000002c0)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x53, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x1}, 0x6402, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x18, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000200)=0x100000000, 0x12) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r3}, 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) sendmsg$tipc(r6, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x1000000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440), 0x8, 0x0, 0x0, 0xffe, &(0x7f0000000480), &(0x7f0000002940)="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", 0x5, 0x0, 0x3}, 0x50) 3.437541881s ago: executing program 0 (id=12668): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020732500000000000709007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000008500000050000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000006000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.bfq.io_serviced\x00', 0x0, 0x0) socket$kcm(0x10, 0x2, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab0300817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014751c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa407e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a0c93d47018c12e7ba8188a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab188dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b4896c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987595ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e547f7ad33850d9feccd0111a2e3700845dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005202000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a12489c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af14915f29b719f54926fc32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b4c8787361f3289f86ae826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa520000afe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da357f9e93ce055019c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c672b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981fd9086e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b6059b9ef90c2f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c33f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217bcfd1ef24284de8a0a9f068f297037d6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2826b47ad8ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d0f889d518f64ee50f562b5fdb1f76d4a7fe14701f8ed0c6a55d66a6efea3e449e6b478abc5b196dd5308cb20c4e2a0bd702651bb39f10523102dcd8ece692159028f314e0d6bfa400475c6699fdc40efe0948e3cef7419a7f113134e5ee20fd87c4521ccfbd32d6f147f743d30866bdd86ca8bf0c7bcc475f4ed53517aaa51f1c151d859a7f0b53abd332c84bdad313e82ac3777a6f7f649ff8a25f6dfe09cb29213896b49a825257bf143e9fa3bbd47009e66fe5705b3ef2b40a182e408c680727d64e00e1ce508f8fd64ac6c84ccc28fc333067de63b9bb5daaa12ce60ee3779ded79651be69d2a413cd948a873dd7ad7017b150828cf100d3df8537f22aff58343c9ee966fceb594bbe10b911427f76a25a219be2f85287b7f83d323a30991067ad1369792166062085ff20c5fb9f6e4f78dd09c7d2d6ca3c8a5d0d26ccbe576f44a1bc94194817"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) socket$kcm(0x11, 0x200000000000002, 0x300) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8003fffe, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x104007, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0x602f, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff200000000021000aac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) 3.406394363s ago: executing program 1 (id=12669): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000b80), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5c00000012006b9c9e3fe3d86e6c1d0000157ea60864160af36504b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c2151fef08d8cdbf9367b4fad1f60a64c9f408000300060100000400000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x20000010) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000000c0), 0x8) r1 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, 0x0, 0x0) 3.252314832s ago: executing program 4 (id=12670): socket$kcm(0x2, 0x3, 0x2) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x21, 0x2, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0], 0x0, 0x25, &(0x7f0000000180), 0x4e, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0x27, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000540)=ANY=[], &(0x7f0000000c00)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x11, '\x00', r0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x0, 0xb, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000880)={r2, 0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair(0x1, 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0x800, 0x0, 0x0, 0xfffffffffffffde1, 0x0, 0x0, 0x5}, 0x50) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x8805) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) socket$kcm(0x21, 0x2, 0xa) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)}, 0x0) 373.031529ms ago: executing program 1 (id=12671): socket$kcm(0x11, 0x3, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x4, 0x0, 0x2, 0x30000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0}, 0x10b44b, 0x0, 0x5, 0x0, 0x40000, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(0x0, 0x0, 0xfffffffffffeffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000001440)={0x5, 0x80, 0x1b, 0x9, 0x0, 0x8d, 0x0, 0xb9, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x14869, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, r0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0xc0, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x87fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x3080, 0x0, 0x400000, 0x7, 0x40000, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) socket$kcm(0x2, 0x5, 0x84) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r3 = socket$kcm(0xa, 0x5, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x10, &(0x7f0000000f40)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="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"], 0x0}, 0x90) setsockopt$sock_attach_bpf(r3, 0x29, 0x23, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000200)={@map=r2, 0xffffffffffffffff, 0x38, 0x20}, 0x20) r5 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x4, &(0x7f0000000040)=r4, 0x4) sendmsg$kcm(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000d80)="d80000001c0081064e81f782db44b9040a1d080404000000000081a1180002000607000000600e1208000f0000810401a8001605200001400200000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db7b8000000404344ed5dd18e92b54c1442be8e2e590acff6cc7e2cc9c0c3f94d2aab3d5ca946fc16aaad694590e61374536d6b8863d9a7a7d8ebff30671847fea38977dd15d6b1bbc4", 0xe5}], 0x1, 0x0, 0x0, 0x7400}, 0x24000000) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x20, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x3, 0xfc, 0x0, 0x0, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfa81, 0x0, @perf_config_ext={0x80000000, 0xa10}, 0x0, 0x8000, 0x0, 0x0, 0x1ff, 0x2, 0xfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0xb, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000aecd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad94ed406f21caf5adcf920569c00cc1199684fa75814709fea019af247c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c1faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6fab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b79db2e3d5986c82b5aa94e539b204d58f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c7160ec83070000020000004015cf10453f6c0b973b4861ea30df81a484ebad04859d928365a7ea3fab8b4b380a00d72b0000000000001cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2cc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78ac02ca3cdf6a662db1c9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad943e392955f4f979ea13201bafedcd2063d11dd665647223c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd89346cfbb5567e54d3504723177d356c4604b7a492ecec37e83efceefd7ca25b3659edc8be05cc85451c6a14507434eb54b6f43caea5c4bf5f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffca9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730af36bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a294351c5356c1d06c92cf8ce3c7c56cd31121624d74517fd3666277f670e812b28e2f30d035cee5d0e77a3c7220000000000000005a474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f034b8d3ebce68663ef5af469abe75b314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041e12282ce24463aaf28345bd168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f09000000000000004fc4bda3453602004535a976eacd3adaa4d2ee6fe0d072ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d401adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb40f7f02f750d6c977a191852c9ae031db044b2353199546609f9f69a6cfefdf879d447df53f3b9b70d10355b00300000000000000553d18a6cc50feeb7bfad9b7be3283b6450d26ce7712d2f1d7004548b19162cef04d18d4f58fab987baab97a9bfbd8f185b5631820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe527340935aa3c0b4f3f45b418a18217747ae442e31560e5b741445ea2a1acee2a81425ff000000d2a0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51423b9f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f88735fce5115dc83ed73d8ee4a91322608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf5000000000000fa08ad0631c4b839688b22c4da2a6bc4cf45854d221a2d5f96bc64647f15daa2ba79cd0f4254ed55217912ef84bd2927df82fc061aef2920c49b2a90886da75561173fa186cb7ee86dd4285c4721eb428c953296bb2f5d825da54dbef07c1b349b4901e093d13e6b9a0000009b5b22e887bc061d40bcaf0aa18623fd9b7179ccc692ba74b531b65c4decf9d080a8ac7e82d4cde1267aa64b2a94fd87a009e6742c2ddc3a9d7eccbb1831b1fa218277c2814a91cab7cb59c697166d6f1bb1a360470000000000000000000000000000000000000000000000000000f9f9b4ce7e871f507084c8c88e0652cecbe579b03ed84ea94597dd1059620a050f69ea03b99b4e19d35f4a3b54e96ae2172effecec80f6baa4bf69a6ebf5392882df78b0983e662dc0cb64b77f3f006b6b25443197ae93f0be6de5a703d003f00720943c0e4b33af00000000000000000021a688b204007fcc4b59f719afb0b3b7e0aee306ca70fe42bf4984a68f40e1fc043a03a17e4744359b87dc27c82d51cbeb64e52a28daeb6a78d6fe06181ecc840000000000000000c87bd5b7cb8c5ae18218963f6d71cfa8b8afb7a4ade932aa3c4701a1c3284cf6b08a4c265dbf4c96cf1ccbcf8f43fd0abf415e581956070f52673a4fa63fb36788bbbcdc0cb1519e8e8fdd9c1463230ce4ccfa63d7069135d9804765a62bd12c2cf3"], &(0x7f0000000000)='GPL\x00', 0x5, 0xca, &(0x7f0000001080)=""/202, 0x0, 0x46, '\x00', 0x0, @fallback=0x2b, r2}, 0x94) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000440)={r2, &(0x7f0000000280)="0a5ab1d307113f77327697b2fbfeeae47afe9d"}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000f00)={{r2}, &(0x7f00000001c0), 0x0}, 0x20) write$cgroup_subtree(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="2b72646d6120065e65742000080000000000000000000000696d6974202d7edbd41816c52725ff187a6eb576d839948479355d8e39c80b439b044b8a0af71c17cd782fa8941c9428b713787933d8492f91480e81e4d61109d0ab14c427bd5d76866d4b4c2177fd6c3464933f2032ee790fbdb346523a15d7eee50806bd8f1495c34d5f5e2cca832b32f897ab7c69515fb2b196aea0ef2600"/162], 0x26) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x400000002, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000940)="2e00000010008188e6b62aa73772cc9f1ba1f848310000005e140602000000000e000a001000000002800000128c", 0x2e}], 0x1}, 0x0) 372.371429ms ago: executing program 2 (id=12672): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0xffffffff, 0x0, 0xb}, {0x10000002, 0x0, 0x4, 0x2}]}, 0x94) close(0x3) (async) close(0x3) socket$kcm(0x21, 0x2, 0x2) (async) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x20, &(0x7f0000000340)={&(0x7f0000000240)=""/218, 0xda, 0x0, 0x0}}, 0x10) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x20, &(0x7f0000000340)={&(0x7f0000000240)=""/218, 0xda, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400)=r0, 0x4) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400)=r0, 0x4) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400)=r0, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000440)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) unlink(&(0x7f0000000540)='./file0\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r3 = socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) (async) close(r5) recvmsg$unix(r4, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x20) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000340)=@generic={&(0x7f0000000040)='./file0\x00', r2}, 0x18) (async) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000340)=@generic={&(0x7f0000000040)='./file0\x00', r2}, 0x18) setsockopt$sock_attach_bpf(r3, 0x84, 0x64, &(0x7f0000000000)=r6, 0x10) (async) setsockopt$sock_attach_bpf(r3, 0x84, 0x64, &(0x7f0000000000)=r6, 0x10) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000140)=[{&(0x7f00000005c0)="df", 0x1}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) close(0xffffffffffffffff) sendmsg$tipc(0xffffffffffffffff, 0x0, 0xd962baf708dae759) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8, 0x0, 0x4, 0x0, 0x0, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000600)=ANY=[@ANYBLOB="18000b000000000000000000cd860f5e23a59809f210c8b68f6111e9dc960f294e2d160ff100000000000000000000000021", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000000c000000b4000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000600)=ANY=[@ANYBLOB="18000b000000000000000000cd860f5e23a59809f210c8b68f6111e9dc960f294e2d160ff100000000000000000000000021", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000000c000000b4000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 371.265449ms ago: executing program 0 (id=12673): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x1, 0x0, 0x0, 0x8}], 0x10, 0x3}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x10}}], 0x10}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee688892f", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000000), 0x8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1\x00'}) r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x208, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000aecd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad94ed406f21caf5adcf920569c00cc1199684fa75814709fea019af247c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c1faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6fab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b79db2e3d5986c82b5aa94e539b204d58f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c7160ec83070000020000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72b0000000000001cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2cc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78ac02ca3cdf6a662db1c9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad943e392955f4f979ea13201bafedcd2063d11dd665647223c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd89346cfbb5567e54d3504723177d356c4604b7a492ecec37e83efceefd7ca2533659edc8be05cc85451c6a14507434eb54b6f43caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffca9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a294351c5356c1d06c92cf8ce3c7c56cd31121624d74517fd3666277f670e812b28e2f30d035cee5d0e77a3c7220000000000000005a474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f034b8d3ebce68663ef5af469abe75b314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041e12282ce24463aaf28345bd168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f09000000000000004fc4bda3453602004535a976eacd3adaa4d2ee6fe0d072ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d401adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb40f7f02f750d6c977a191852c9ae031db044b2353199546609f9f69a6cfefdf879d447df53f3b9b70d10355b00300000000000000553d18a6cc50feeb7bfad9b7be3283b6450d264e7712d2f1d7004548b19162cef04d18d4f58fab987baab97a9bfbd8f185b5631820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe527340935aa3c0b4f3f45b418a18217747ae442e31560e5b741445ea2a1acee2a81425ff000000d2a0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51423b9f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f88735fce5115dc83ed73d8ee4a91322608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf5000000000000fa08ad0631c4b839688b22c4da2a6bc4cf45854d221a2d5f96bc64647f15daa2ba79cd0f4254ed55217912ef84bd2927df82fc061aef2920c49b2a90886da75561173fa186cb7ee86dd4285c4721eb428c953296bb2f5d825da54dbef07c1b349b4901e093d13e6b9a0000009b5b22e887bc061d40bcaf0aa18623fd9b7179ccc692ba74b531b65c4decf9d080a8ac7e82d4cde1267aa64b2a94fd87a009e6742c2ddc3a9d7eccbb1831b1fa218277c2814a91cab7cb59c697166d6f1bb1a360470000000000000000000000000000000000000000000000000000f9f9b4ce7e871f507084c8c88e0652decbe579b03ed84ea94597dd1059620a050f69ea03b99b4e19d35f4a3b54e96ae2172effecec80f6baa4bf69a6ebf5392882df78b0983e662dc0cb64b77f3f006b6b25443197ae93f0be6de5a703d003f00720943c0e4b33af00000000000000000021a688b2d7007fcc4b"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1c}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0x20, &(0x7f0000000480)={&(0x7f00000005c0)=""/168, 0xa8, 0x0, &(0x7f0000000680)=""/177, 0xb1}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x12, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="18210000a07c0eca212c4514769c8830e4a57d5f79e6a74a71a51f31a807a5dc1f47ebc0cceb9013a2417f63ee6d03b3761fd9716cc3689822", @ANYRES32, @ANYBLOB="000000000600000004220600e4000000"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0xe6, &(0x7f0000000280)=""/230, 0x41000, 0x80, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x4, 0x8, 0x7fffffff, 0x68}, 0x10, r6, 0xffffffffffffffff, 0x7, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000780)=[{0x5, 0x5, 0x5, 0x7}, {0x2, 0x2, 0xf, 0xb}, {0x0, 0x5, 0x6, 0x1}, {0x5, 0x5, 0x1, 0x5}, {0x2, 0x1, 0xe, 0x1}, {0x5, 0x2, 0x5, 0x1}, {0x0, 0x3, 0x6, 0xa}], 0x10, 0x9}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x12) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_pressure(r7, &(0x7f0000000040)='memory.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r8, &(0x7f0000000080)={'some', 0x20, 0x2000000008, 0x20, 0x10000000fffff}, 0x2f) r9 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xef, 0x2, 0x0, 0x0, 0x0, 0x3, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x0, 0x6, 0x6, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x40082406, &(0x7f0000000100)='cpu&-0!|!') close(r8) socketpair(0x15, 0x1, 0x9, &(0x7f00000008c0)) 354.72964ms ago: executing program 4 (id=12674): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x2, 0x5, 0x84) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000aecd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad94ed406f21caf5adcf920569c00cc1199684fa75814709fea019af247c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c1faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6fab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b79db2e3d5986c82b5aa94e539b204d58f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c7160ec83070000020000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72b0000000000001cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2cc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78ac02ca3cdf6a662db1c9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad943e392955f4f979ea13201bafedcd2063d11dd665647223c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd89346cfbb5567e54d3504723177d356c4604b7a492ecec37e83efceefd7ca2533659edc8be05cc85451c6a14507434eb54b6f43caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffca9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a294351c5356c1d06c92cf8ce3c7c56cd31121624d74517fd3666277f670e812b28e2f30d035cee5d0e77a3c7220000000000000005a474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f034b8d3ebce68663ef5af469abe75b314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041e12282ce24463aaf28345bd168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f09000000000000004fc4bda3453602004535a976eacd3adaa4d2ee6fe0d072ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d401adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb40f7f02f750d6c977a191852c9ae031db044b2353199546609f9f69a6cfefdf879d447df53f3b9b70d10355b00300000000000000553d18a6cc50feeb7bfad9b7be3283b6450d264e7712d2f1d7004548b19162cef04d18d4f58fab987baab97a9bfbd8f185b5631820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe527340935aa3c0b4f3f45b418a18217747ae442e31560e5b741445ea2a1acee2a81425ff000000d2a0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51423b9f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f88735fce5115dc83ed73d8ee4a91322608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf5000000000000fa08ad0631c4b839688b22c4da2a6bc4cf45854d221a2d5f96bc64647f15daa2ba79cd0f4254ed55217912ef84bd2927df82fc061aef2920c49b2a90886da75561173fa186cb7ee86dd4285c4721eb428c953296bb2f5d825da54dbef07c1b349b4901e093d13e6b9a0000009b5b22e887bc061d40bcaf0aa18623fd9b7179ccc692ba74b531b65c4decf9d080a8ac7e82d4cde1267aa64b2a94fd87a009e6742c2ddc3a9d7eccbb1831b1fa218277c2814a91cab7cb59c697166d6f1bb1a36047000000000000"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'ip6tnl0\x00', @random="0600002000"}) socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)}, 0x0) 278.546644ms ago: executing program 3 (id=12675): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x1, 0x0, 0x0, 0x8}], 0x10, 0x3}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x10}}], 0x10}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee688892f", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000000), 0x8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1\x00'}) r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x208, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000aecd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad94ed406f21caf5adcf920569c00cc1199684fa75814709fea019af247c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c1faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6fab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b79db2e3d5986c82b5aa94e539b204d58f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c7160ec83070000020000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72b0000000000001cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2cc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78ac02ca3cdf6a662db1c9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad943e392955f4f979ea13201bafedcd2063d11dd665647223c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd89346cfbb5567e54d3504723177d356c4604b7a492ecec37e83efceefd7ca2533659edc8be05cc85451c6a14507434eb54b6f43caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffca9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a294351c5356c1d06c92cf8ce3c7c56cd31121624d74517fd3666277f670e812b28e2f30d035cee5d0e77a3c7220000000000000005a474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f034b8d3ebce68663ef5af469abe75b314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041e12282ce24463aaf28345bd168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f09000000000000004fc4bda3453602004535a976eacd3adaa4d2ee6fe0d072ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d401adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb40f7f02f750d6c977a191852c9ae031db044b2353199546609f9f69a6cfefdf879d447df53f3b9b70d10355b00300000000000000553d18a6cc50feeb7bfad9b7be3283b6450d264e7712d2f1d7004548b19162cef04d18d4f58fab987baab97a9bfbd8f185b5631820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe527340935aa3c0b4f3f45b418a18217747ae442e31560e5b741445ea2a1acee2a81425ff000000d2a0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51423b9f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f88735fce5115dc83ed73d8ee4a91322608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf5000000000000fa08ad0631c4b839688b22c4da2a6bc4cf45854d221a2d5f96bc64647f15daa2ba79cd0f4254ed55217912ef84bd2927df82fc061aef2920c49b2a90886da75561173fa186cb7ee86dd4285c4721eb428c953296bb2f5d825da54dbef07c1b349b4901e093d13e6b9a0000009b5b22e887bc061d40bcaf0aa18623fd9b7179ccc692ba74b531b65c4decf9d080a8ac7e82d4cde1267aa64b2a94fd87a009e6742c2ddc3a9d7eccbb1831b1fa218277c2814a91cab7cb59c697166d6f1bb1a360470000000000000000000000000000000000000000000000000000f9f9b4ce7e871f507084c8c88e0652decbe579b03ed84ea94597dd1059620a050f69ea03b99b4e19d35f4a3b54e96ae2172effecec80f6baa4bf69a6ebf5392882df78b0983e662dc0cb64b77f3f006b6b25443197ae93f0be6de5a703d003f00720943c0e4b33af00000000000000000021a688b2d7007fcc4b59f719afb0b3b7e0aee306ca70fe42bf4984a68f40e1fc043a03a17e4744359b87dc27c82d51cbeb64e52a"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1c}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0x20, &(0x7f0000000480)={&(0x7f00000005c0)=""/168, 0xa8, 0x0, &(0x7f0000000680)=""/177, 0xb1}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x12, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="18210000a07c0eca212c4514769c8830e4a57d5f79e6a74a71a51f31a807a5dc1f47ebc0cceb9013a2417f63ee6d03b3761fd9716cc3", @ANYRES32, @ANYBLOB="000000000600000004220600e4000000"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0xe6, &(0x7f0000000280)=""/230, 0x41000, 0x80, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x4, 0x8, 0x7fffffff, 0x68}, 0x10, r6, 0xffffffffffffffff, 0x7, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000780)=[{0x5, 0x5, 0x5, 0x7}, {0x2, 0x2, 0xf, 0xb}, {0x0, 0x5, 0x6, 0x1}, {0x5, 0x5, 0x1, 0x5}, {0x2, 0x1, 0xe, 0x1}, {0x5, 0x2, 0x5, 0x1}, {0x0, 0x3, 0x6, 0xa}], 0x10, 0x9}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x12) r7 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r8 = openat$cgroup_pressure(r7, &(0x7f0000000040)='memory.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r8, &(0x7f0000000080)={'some', 0x20, 0x2000000008, 0x20, 0x10000000fffff}, 0x2f) r9 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xef, 0x2, 0x0, 0x0, 0x0, 0x3, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x0, 0x6, 0x6, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x40082406, &(0x7f0000000100)='cpu&-0!|!') close(r8) socketpair(0x15, 0x1, 0x9, &(0x7f00000008c0)) 33.355289ms ago: executing program 0 (id=12676): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$kcm(0xa, 0x5, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0xf, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x104007, 0xac5d, 0x0, 0x0, 0x10001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @const={0x0, 0x0, 0x0, 0xb}, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x3e}, 0x20) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1}, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000010c0)={r4, 0xfffffffffffffd62, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0}}, 0x10) sendmsg$inet(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x3, 0x0, 0x0, 0x1f00c00e}, 0x4071) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r6) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000001280), 0x4) write$cgroup_pid(r6, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x2002) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0}, 0x28) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x5) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000000700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)=ANY=[@ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="05"], 0x10) socket$kcm(0x18, 0x7, 0x0) 0s ago: executing program 4 (id=12677): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, 0x0, 0x3000c085) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x5, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x42008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x0, 0x17}, 0x0, 0xc8, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x7, 0xffffffffffffffff, 0xb) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x1f, &(0x7f0000000980)=ANY=[@ANYBLOB="18000000e200000000000000ffff000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7020000000000008500000086000000147930000000000018140000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af80729e4500000020000007b8af0ff00000000f8ffffffbfa400000000000007040000f0ff7f0018230010000000000000000800000000000001800000010074810f8bacaa0a02a62c19e3cc401da8ad90579fd228f2b889192ab8fd193d33d05ac3eeb38034baa2375310053d55134ad2ec3fa54fa9c3a9ab70f3140113455c4ed1350000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a5000000851000000800000018120000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000950000000000000087080000010000009500000000000000"], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0xbe, &(0x7f00000005c0)=""/190, 0x1e00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x6, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000500)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000006c0)=[{0x5, 0x1, 0xa, 0x4}, {0x0, 0x1, 0xf, 0xb}, {0x1, 0x2, 0xb, 0x8}, {0x3, 0x1, 0x8, 0x5}, {0x3, 0x3, 0xc, 0xc}, {0x2, 0x1, 0xb}], 0x10, 0x7}, 0x94) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000025c0)="d8000000240081064e81f882db44b9040a02080006000000e8fe0ba1f1ffffff0200142603600e120800080024000000a80009001100014003000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a94c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970179b1b36165fb55c82148d29e", 0xd8}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce81e6978800fe08000e40000200875a65969ff57b00ff020000000000000000000000000001e2607e15e697ab"], 0xfdef) kernel console output (not intermixed with test programs): atadv_slave_1 [ 2481.187248][T10267] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2481.217692][T10267] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2482.468415][T10267] device hsr_slave_0 entered promiscuous mode [ 2482.500567][T10267] device hsr_slave_1 entered promiscuous mode [ 2482.523324][T23697] Bluetooth: hci5: command 0x0409 tx timeout [ 2482.817510][T10284] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.11862'. [ 2482.969885][T10267] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2483.040724][T10292] netlink: 60 bytes leftover after parsing attributes in process `syz.0.11866'. [ 2483.059436][T10284] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.11862'. [ 2483.088904][ T877] bond0: (slave syz_tun): Releasing backup interface [ 2483.107109][T10292] netlink: 60 bytes leftover after parsing attributes in process `syz.0.11866'. [ 2483.116915][T10290] IPv6: Can't replace route, no match found [ 2483.128147][T10285] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.11862'. [ 2483.183160][T10267] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2483.198773][T10296] netlink: 60 bytes leftover after parsing attributes in process `syz.0.11866'. [ 2483.208752][T10288] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.11862'. [ 2483.221955][T10292] netlink: 60 bytes leftover after parsing attributes in process `syz.0.11866'. [ 2483.243044][T15370] device 0 left promiscuous mode [ 2483.354632][T10267] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2483.571529][T10303] netlink: 'syz.0.11870': attribute type 10 has an invalid length. [ 2483.617053][T10267] bond0: (slave netdevsim0): Releasing backup interface [ 2483.651746][T10267] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2484.602987][T10269] Bluetooth: hci5: command 0x041b tx timeout [ 2486.683118][T10269] Bluetooth: hci5: command 0x040f tx timeout [ 2487.123331][T10267] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2487.187099][T10267] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2487.200316][T10267] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2487.210968][T10267] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2487.338794][T10330] FAULT_INJECTION: forcing a failure. [ 2487.338794][T10330] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2487.388945][T10330] CPU: 0 PID: 10330 Comm: syz.3.11875 Not tainted syzkaller #0 [ 2487.396584][T10330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2487.406677][T10330] Call Trace: [ 2487.409984][T10330] [ 2487.412943][T10330] dump_stack_lvl+0x188/0x24e [ 2487.418193][T10330] ? show_regs_print_info+0x12/0x12 [ 2487.423429][T10330] ? load_image+0x400/0x400 [ 2487.427971][T10330] ? __lock_acquire+0x7d10/0x7d10 [ 2487.433043][T10330] should_fail_ex+0x399/0x4d0 [ 2487.437782][T10330] _copy_from_user+0x2c/0x170 [ 2487.442589][T10330] iovec_from_user+0x143/0x360 [ 2487.447389][T10330] __import_iovec+0x6d/0x500 [ 2487.452046][T10330] ? __might_fault+0xc2/0x120 [ 2487.456769][T10330] import_iovec+0x6f/0xa0 [ 2487.461137][T10330] ___sys_sendmsg+0x252/0x360 [ 2487.465867][T10330] ? __sys_sendmsg+0x290/0x290 [ 2487.470696][T10330] ? __lock_acquire+0x7d10/0x7d10 [ 2487.475780][T10330] __se_sys_sendmsg+0x1bb/0x2a0 [ 2487.480772][T10330] ? __x64_sys_sendmsg+0x80/0x80 [ 2487.485767][T10330] ? lockdep_hardirqs_on+0x94/0x140 [ 2487.491015][T10330] do_syscall_64+0x4c/0xa0 [ 2487.495473][T10330] ? clear_bhb_loop+0x60/0xb0 [ 2487.500188][T10330] ? clear_bhb_loop+0x60/0xb0 [ 2487.504900][T10330] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2487.510832][T10330] RIP: 0033:0x7f3eaa39aeb9 [ 2487.515282][T10330] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2487.534920][T10330] RSP: 002b:00007f3eab2ce028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2487.543365][T10330] RAX: ffffffffffffffda RBX: 00007f3eaa615fa0 RCX: 00007f3eaa39aeb9 [ 2487.551450][T10330] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000003 [ 2487.559469][T10330] RBP: 00007f3eab2ce090 R08: 0000000000000000 R09: 0000000000000000 [ 2487.567483][T10330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2487.575493][T10330] R13: 00007f3eaa616038 R14: 00007f3eaa615fa0 R15: 00007ffebf29cf58 [ 2487.583519][T10330] [ 2487.765519][T10335] IPv6: Can't replace route, no match found [ 2487.929658][T10267] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2487.948801][T10340] netlink: 60 bytes leftover after parsing attributes in process `syz.0.11879'. [ 2487.977062][T10340] netlink: 60 bytes leftover after parsing attributes in process `syz.0.11879'. [ 2488.005792][T10342] netlink: 'syz.3.11880': attribute type 10 has an invalid length. [ 2488.097742][T10342] team0: Port device veth0_to_hsr added [ 2488.114444][T10343] netlink: 60 bytes leftover after parsing attributes in process `syz.0.11879'. [ 2488.242343][T15370] team0: Port device wlan1 removed [ 2488.270242][T10345] netlink: 'syz.2.11881': attribute type 10 has an invalid length. [ 2488.306490][T10340] netlink: 60 bytes leftover after parsing attributes in process `syz.0.11879'. [ 2488.329065][ T9405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2488.343693][ T9405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2488.369374][T10267] 8021q: adding VLAN 0 to HW filter on device team0 [ 2488.407163][ T9405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2488.459572][ T9405] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2488.490061][ T9405] bridge0: port 1(bridge_slave_0) entered blocking state [ 2488.497343][ T9405] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2488.522648][ T9405] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2488.554459][ T1768] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2488.597128][ T1768] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2488.639603][ T1768] bridge0: port 2(bridge_slave_1) entered blocking state [ 2488.646864][ T1768] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2488.763364][T10269] Bluetooth: hci5: command 0x0419 tx timeout [ 2488.838854][T10355] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.11884'. [ 2489.013142][ T9405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2489.108479][ T9405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2489.128950][ T9405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2489.166356][ T9405] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2489.218249][ T9405] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2489.227984][T10352] delete_channel: no stack [ 2489.245811][ T9405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2489.300501][ T9405] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2489.330839][ T9405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2489.361968][ T9405] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2489.448602][ T9405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2489.504885][ T9405] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2489.528481][T10267] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2490.093648][T10386] netlink: 60 bytes leftover after parsing attributes in process `syz.0.11895'. [ 2490.188574][T10386] netlink: 60 bytes leftover after parsing attributes in process `syz.0.11895'. [ 2490.231588][T10392] netlink: 60 bytes leftover after parsing attributes in process `syz.0.11895'. [ 2490.280644][T10388] netlink: 'syz.2.11894': attribute type 10 has an invalid length. [ 2490.301584][T10389] netlink: 60 bytes leftover after parsing attributes in process `syz.0.11895'. [ 2490.346571][T15370] device bridge_slave_1 left promiscuous mode [ 2490.370905][T15370] bridge0: port 2(bridge_slave_1) entered disabled state [ 2490.419587][T15370] device bridge_slave_0 left promiscuous mode [ 2490.443885][T15370] bridge0: port 1(bridge_slave_0) entered disabled state [ 2490.596458][T15370] device veth1_macvtap left promiscuous mode [ 2490.609589][T15370] device veth0_macvtap left promiscuous mode [ 2491.107520][T15370] team0 (unregistering): Port device geneve1 removed [ 2492.136303][T15370] team0 (unregistering): Port device team_slave_1 removed [ 2492.199268][T15370] team0 (unregistering): Port device team_slave_0 removed [ 2492.244062][T15370] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2492.292647][T15370] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2492.566742][T15370] team0 (unregistering): Port device dummy0 removed [ 2492.595021][T15370] bond0 (unregistering): (slave team0): Releasing backup interface [ 2492.605887][T15370] team0 (unregistering): Port device bridge0 removed [ 2492.643136][T15370] bond0 (unregistering): Released all slaves [ 2492.749166][T20236] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2492.757482][T20236] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2492.796244][T10267] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2492.878903][ T1768] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2492.911763][ T1768] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2492.963904][T10420] netlink: 65055 bytes leftover after parsing attributes in process `syz.4.11903'. [ 2492.979325][T10267] device veth0_vlan entered promiscuous mode [ 2493.001588][ T1768] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2493.015026][ T1768] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2493.035756][T20236] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2493.056948][T20236] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2493.116589][T10267] device veth1_vlan entered promiscuous mode [ 2493.142226][T10424] netlink: 65043 bytes leftover after parsing attributes in process `syz.2.11905'. [ 2493.292116][T10419] delete_channel: no stack [ 2493.344557][T20236] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2493.359391][T20236] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2493.381319][T20236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2493.455503][T20236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2493.526437][T10267] device veth0_macvtap entered promiscuous mode [ 2493.606031][T10267] device veth1_macvtap entered promiscuous mode [ 2493.754647][T10267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2493.792947][T10267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2493.843085][T10267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2493.875713][T10267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2493.901338][T10267] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2493.916976][T10436] netlink: 60 bytes leftover after parsing attributes in process `syz.4.11907'. [ 2494.009578][T20236] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2494.022353][T20236] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2494.047579][T20236] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2494.059755][T20236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2494.073149][T10435] netlink: 'syz.2.11906': attribute type 10 has an invalid length. [ 2494.088049][T10267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2494.123228][T10267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2494.137786][T10267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2494.183079][T10267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2494.207103][T10267] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2494.216858][T10436] netlink: 60 bytes leftover after parsing attributes in process `syz.4.11907'. [ 2494.234530][T10437] netlink: 60 bytes leftover after parsing attributes in process `syz.4.11907'. [ 2494.257110][T20236] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2494.282648][T20236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2494.305475][T10438] netlink: 60 bytes leftover after parsing attributes in process `syz.4.11907'. [ 2494.327339][T10267] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2494.343889][T10267] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2494.376161][T10267] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2494.402929][T10267] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2494.910299][T10267] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 2494.949110][T10450] netlink: 60 bytes leftover after parsing attributes in process `syz.4.11911'. [ 2494.959492][T10267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2494.993852][T10450] netlink: 60 bytes leftover after parsing attributes in process `syz.4.11911'. [ 2495.015095][ T9405] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2495.111705][T10451] netlink: 60 bytes leftover after parsing attributes in process `syz.4.11911'. [ 2495.136100][ T9405] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2495.147775][T10450] netlink: 60 bytes leftover after parsing attributes in process `syz.4.11911'. [ 2495.160682][T20236] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2495.193032][ T8781] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2495.211787][T20236] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2495.246051][ T9405] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2495.539622][T10462] netlink: 65043 bytes leftover after parsing attributes in process `syz.3.11917'. [ 2495.908656][T10466] delete_channel: no stack [ 2496.035970][T10474] netlink: 'syz.1.11921': attribute type 10 has an invalid length. [ 2496.089203][T10474] batman_adv: batadv0: Adding interface: wlan0 [ 2496.132872][T10474] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2496.213472][T10474] batman_adv: batadv0: Interface activated: wlan0 [ 2498.322173][T10517] __nla_validate_parse: 7 callbacks suppressed [ 2498.322218][T10517] netlink: 60 bytes leftover after parsing attributes in process `syz.3.11934'. [ 2498.399375][T10520] netlink: 'syz.4.11936': attribute type 10 has an invalid length. [ 2498.410723][T10521] netlink: 65055 bytes leftover after parsing attributes in process `syz.1.11935'. [ 2498.423224][T10517] netlink: 60 bytes leftover after parsing attributes in process `syz.3.11934'. [ 2498.432759][T10522] netlink: 60 bytes leftover after parsing attributes in process `syz.3.11934'. [ 2498.519685][T10517] netlink: 60 bytes leftover after parsing attributes in process `syz.3.11934'. [ 2498.601095][T10519] delete_channel: no stack [ 2498.609020][T10525] netlink: 65043 bytes leftover after parsing attributes in process `syz.2.11937'. [ 2499.153247][T10537] : port 1(veth0_to_team) entered blocking state [ 2499.174341][T10537] : port 1(veth0_to_team) entered disabled state [ 2499.189775][T10537] device veth0_to_team entered promiscuous mode [ 2500.928009][T10564] netlink: 'syz.4.11949': attribute type 10 has an invalid length. [ 2500.968699][T10570] netlink: 60 bytes leftover after parsing attributes in process `syz.1.11951'. [ 2500.998552][T10570] netlink: 60 bytes leftover after parsing attributes in process `syz.1.11951'. [ 2501.028019][T10573] netlink: 60 bytes leftover after parsing attributes in process `syz.1.11951'. [ 2501.052760][T10570] netlink: 60 bytes leftover after parsing attributes in process `syz.1.11951'. [ 2501.217127][T10575] netlink: 'syz.3.11953': attribute type 10 has an invalid length. [ 2501.666137][T10591] ksmbd: Unknown IPC event: 10, ignore. [ 2504.924931][T10610] netlink: 'syz.4.11965': attribute type 10 has an invalid length. [ 2504.961331][T10612] __nla_validate_parse: 3 callbacks suppressed [ 2504.961371][T10612] netlink: 65043 bytes leftover after parsing attributes in process `syz.1.11976'. [ 2505.032750][T10617] netlink: 60 bytes leftover after parsing attributes in process `syz.2.11966'. [ 2505.042131][T10617] netlink: 60 bytes leftover after parsing attributes in process `syz.2.11966'. [ 2505.125874][T10620] netlink: 60 bytes leftover after parsing attributes in process `syz.2.11966'. [ 2505.174108][T10619] netlink: 'syz.0.11967': attribute type 10 has an invalid length. [ 2505.204687][T10622] netlink: 'syz.4.11969': attribute type 2 has an invalid length. [ 2505.226670][T10617] netlink: 60 bytes leftover after parsing attributes in process `syz.2.11966'. [ 2505.272143][T10622] netlink: 'syz.4.11969': attribute type 10 has an invalid length. [ 2505.319021][T10622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2505.369311][T10622] team0: Port device bond0 added [ 2505.947692][T10642] netlink: 132 bytes leftover after parsing attributes in process `syz.4.11977'. [ 2505.996151][T10642] netlink: 188 bytes leftover after parsing attributes in process `syz.4.11977'. [ 2506.021072][T10642] ksmbd: Unknown IPC event: 10, ignore. [ 2507.213381][T10654] netlink: 'syz.0.11981': attribute type 10 has an invalid length. [ 2507.277276][T10656] netlink: 'syz.4.11982': attribute type 10 has an invalid length. [ 2507.445279][T10656] team0: Port device bond0 removed [ 2507.978363][T10675] netlink: 65043 bytes leftover after parsing attributes in process `syz.3.11989'. [ 2508.000654][T10677] netlink: 154020 bytes leftover after parsing attributes in process `syz.0.11990'. [ 2508.064008][T10677] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 2508.218557][T10681] netlink: 10 bytes leftover after parsing attributes in process `syz.4.11991'. [ 2508.310173][T10690] ksmbd: Unknown IPC event: 10, ignore. [ 2509.046672][T10700] FAULT_INJECTION: forcing a failure. [ 2509.046672][T10700] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2509.068849][T10700] CPU: 0 PID: 10700 Comm: syz.1.11998 Not tainted syzkaller #0 [ 2509.076502][T10700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2509.086697][T10700] Call Trace: [ 2509.090028][T10700] [ 2509.093007][T10700] dump_stack_lvl+0x188/0x24e [ 2509.097745][T10700] ? show_regs_print_info+0x12/0x12 [ 2509.103017][T10700] ? load_image+0x400/0x400 [ 2509.107571][T10700] ? __lock_acquire+0x7d10/0x7d10 [ 2509.112697][T10700] should_fail_ex+0x399/0x4d0 [ 2509.117446][T10700] _copy_from_user+0x2c/0x170 [ 2509.122180][T10700] __copy_msghdr+0x3b7/0x580 [ 2509.126833][T10700] ___sys_sendmsg+0x210/0x360 [ 2509.131577][T10700] ? __sys_sendmsg+0x290/0x290 [ 2509.136421][T10700] ? __lock_acquire+0x7d10/0x7d10 [ 2509.141534][T10700] __se_sys_sendmsg+0x1bb/0x2a0 [ 2509.146442][T10700] ? __x64_sys_sendmsg+0x80/0x80 [ 2509.151453][T10700] ? lockdep_hardirqs_on+0x94/0x140 [ 2509.156729][T10700] do_syscall_64+0x4c/0xa0 [ 2509.161200][T10700] ? clear_bhb_loop+0x60/0xb0 [ 2509.165957][T10700] ? clear_bhb_loop+0x60/0xb0 [ 2509.170692][T10700] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2509.176636][T10700] RIP: 0033:0x7f64a639aeb9 [ 2509.181111][T10700] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2509.200773][T10700] RSP: 002b:00007f64a45f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2509.209258][T10700] RAX: ffffffffffffffda RBX: 00007f64a6615fa0 RCX: 00007f64a639aeb9 [ 2509.217287][T10700] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 2509.225310][T10700] RBP: 00007f64a45f6090 R08: 0000000000000000 R09: 0000000000000000 [ 2509.233336][T10700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2509.241353][T10700] R13: 00007f64a6616038 R14: 00007f64a6615fa0 R15: 00007fff0f939d48 [ 2509.249392][T10700] [ 2509.531328][T10697] netlink: 'syz.3.11997': attribute type 10 has an invalid length. [ 2510.218147][T10724] __nla_validate_parse: 5 callbacks suppressed [ 2510.218167][T10724] netlink: 14 bytes leftover after parsing attributes in process `syz.3.12005'. [ 2510.377813][T10729] FAULT_INJECTION: forcing a failure. [ 2510.377813][T10729] name failslab, interval 1, probability 0, space 0, times 0 [ 2510.472741][T10729] CPU: 1 PID: 10729 Comm: syz.2.12006 Not tainted syzkaller #0 [ 2510.480422][T10729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2510.490623][T10729] Call Trace: [ 2510.493980][T10729] [ 2510.496983][T10729] dump_stack_lvl+0x188/0x24e [ 2510.501766][T10729] ? show_regs_print_info+0x12/0x12 [ 2510.507052][T10729] ? load_image+0x400/0x400 [ 2510.511645][T10729] ? __lock_acquire+0x7d10/0x7d10 [ 2510.516769][T10729] should_fail_ex+0x399/0x4d0 [ 2510.521535][T10729] should_failslab+0x5/0x20 [ 2510.526096][T10729] slab_pre_alloc_hook+0x59/0x310 [ 2510.531182][T10729] ? percpu_ref_put+0x12/0x100 [ 2510.536029][T10729] kmem_cache_alloc+0x56/0x2f0 [ 2510.540838][T10729] ? fib_insert_alias+0x309/0x1280 [ 2510.546014][T10729] fib_insert_alias+0x309/0x1280 [ 2510.551010][T10729] ? rcu_is_watching+0x11/0xa0 [ 2510.555835][T10729] ? kmem_cache_alloc+0x151/0x2f0 [ 2510.560926][T10729] ? fib_table_insert+0x4b4/0x1b20 [ 2510.566119][T10729] fib_table_insert+0x687/0x1b20 [ 2510.571139][T10729] ? verify_lock_unused+0xd0/0x140 [ 2510.576383][T10729] ? l3mdev_fib_table+0x18/0x160 [ 2510.581375][T10729] ? fib_new_table+0x106/0x2d0 [ 2510.586213][T10729] fib_magic+0x2e1/0x3c0 [ 2510.590541][T10729] ? fib_add_ifaddr+0x5e0/0x5e0 [ 2510.595484][T10729] ? kmem_cache_free+0xf7/0x290 [ 2510.600392][T10729] ? addr_event+0x83/0x470 [ 2510.604863][T10729] fib_add_ifaddr+0x140/0x5e0 [ 2510.609628][T10729] ? is_eth_active_slave_of_bonding_rcu+0x260/0x260 [ 2510.616297][T10729] fib_inetaddr_event+0x13c/0x1c0 [ 2510.621401][T10729] blocking_notifier_call_chain+0x103/0x1b0 [ 2510.627365][T10729] __inet_insert_ifa+0x9b8/0xb80 [ 2510.632506][T10729] ? inet_rcu_free_ifa+0xc0/0xc0 [ 2510.637603][T10729] devinet_ioctl+0x1263/0x1af0 [ 2510.642474][T10729] inet_ioctl+0x2fa/0x460 [ 2510.646899][T10729] ? inet_shutdown+0x370/0x370 [ 2510.651714][T10729] ? slab_free_freelist_hook+0x131/0x1a0 [ 2510.657421][T10729] ? tomoyo_path_number_perm+0x4fb/0x650 [ 2510.663131][T10729] ? __kmem_cache_free+0xb6/0x1f0 [ 2510.668271][T10729] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 2510.673835][T10729] sock_do_ioctl+0xfb/0x320 [ 2510.678424][T10729] ? sock_show_fdinfo+0xb0/0xb0 [ 2510.683399][T10729] sock_ioctl+0x4d2/0x710 [ 2510.687824][T10729] ? sock_poll+0x410/0x410 [ 2510.692363][T10729] ? bpf_lsm_file_ioctl+0x5/0x10 [ 2510.697370][T10729] ? security_file_ioctl+0x7c/0xa0 [ 2510.702563][T10729] ? sock_poll+0x410/0x410 [ 2510.707075][T10729] __se_sys_ioctl+0xfa/0x170 [ 2510.711747][T10729] do_syscall_64+0x4c/0xa0 [ 2510.716217][T10729] ? clear_bhb_loop+0x60/0xb0 [ 2510.720950][T10729] ? clear_bhb_loop+0x60/0xb0 [ 2510.725688][T10729] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2510.731636][T10729] RIP: 0033:0x7fbcf2b9aeb9 [ 2510.736119][T10729] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2510.755878][T10729] RSP: 002b:00007fbcf3a4e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2510.764356][T10729] RAX: ffffffffffffffda RBX: 00007fbcf2e15fa0 RCX: 00007fbcf2b9aeb9 [ 2510.772380][T10729] RDX: 0000200000000040 RSI: 0000000000008916 RDI: 0000000000000003 [ 2510.780401][T10729] RBP: 00007fbcf3a4e090 R08: 0000000000000000 R09: 0000000000000000 [ 2510.788422][T10729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2510.796451][T10729] R13: 00007fbcf2e16038 R14: 00007fbcf2e15fa0 R15: 00007ffdcef25aa8 [ 2510.804517][T10729] [ 2511.730650][T10757] netlink: 'syz.3.12020': attribute type 2 has an invalid length. [ 2511.771715][T10757] netlink: 'syz.3.12020': attribute type 8 has an invalid length. [ 2511.794768][T10757] netlink: 132 bytes leftover after parsing attributes in process `syz.3.12020'. [ 2511.887997][T10765] netlink: 65043 bytes leftover after parsing attributes in process `syz.2.12023'. [ 2512.572719][T10772] FAULT_INJECTION: forcing a failure. [ 2512.572719][T10772] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2512.587065][T10772] CPU: 1 PID: 10772 Comm: syz.4.12024 Not tainted syzkaller #0 [ 2512.594682][T10772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2512.604863][T10772] Call Trace: [ 2512.608185][T10772] [ 2512.611162][T10772] dump_stack_lvl+0x188/0x24e [ 2512.615891][T10772] ? show_regs_print_info+0x12/0x12 [ 2512.621162][T10772] ? load_image+0x400/0x400 [ 2512.625707][T10772] ? __lock_acquire+0x7d10/0x7d10 [ 2512.630776][T10772] should_fail_ex+0x399/0x4d0 [ 2512.635504][T10772] _copy_from_user+0x2c/0x170 [ 2512.640260][T10772] bpf_prog_test_run_skb+0x262/0x12a0 [ 2512.645663][T10772] ? __fget_files+0x28/0x4b0 [ 2512.650320][T10772] ? __fget_files+0x28/0x4b0 [ 2512.654949][T10772] ? __fget_files+0x43d/0x4b0 [ 2512.659685][T10772] ? cpu_online+0xa0/0xa0 [ 2512.664054][T10772] bpf_prog_test_run+0x31e/0x390 [ 2512.669062][T10772] __sys_bpf+0x62b/0x780 [ 2512.673343][T10772] ? bpf_link_show_fdinfo+0x380/0x380 [ 2512.678789][T10772] ? lock_chain_count+0x20/0x20 [ 2512.683713][T10772] __x64_sys_bpf+0x78/0x90 [ 2512.688176][T10772] do_syscall_64+0x4c/0xa0 [ 2512.692640][T10772] ? clear_bhb_loop+0x60/0xb0 [ 2512.697355][T10772] ? clear_bhb_loop+0x60/0xb0 [ 2512.702081][T10772] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2512.708015][T10772] RIP: 0033:0x7fc036d9aeb9 [ 2512.712458][T10772] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2512.732103][T10772] RSP: 002b:00007fc037b88028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2512.740547][T10772] RAX: ffffffffffffffda RBX: 00007fc037015fa0 RCX: 00007fc036d9aeb9 [ 2512.748550][T10772] RDX: 0000000000000024 RSI: 0000200000000640 RDI: 000000000000000a [ 2512.756549][T10772] RBP: 00007fc037b88090 R08: 0000000000000000 R09: 0000000000000000 [ 2512.764553][T10772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2512.772599][T10772] R13: 00007fc037016038 R14: 00007fc037015fa0 R15: 00007fff5ce596f8 [ 2512.780638][T10772] [ 2514.125571][T10802] FAULT_INJECTION: forcing a failure. [ 2514.125571][T10802] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2514.162938][T10802] CPU: 1 PID: 10802 Comm: syz.1.12035 Not tainted syzkaller #0 [ 2514.170579][T10802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2514.180683][T10802] Call Trace: [ 2514.184009][T10802] [ 2514.186979][T10802] dump_stack_lvl+0x188/0x24e [ 2514.191723][T10802] ? show_regs_print_info+0x12/0x12 [ 2514.196992][T10802] ? load_image+0x400/0x400 [ 2514.201562][T10802] ? __lock_acquire+0x7d10/0x7d10 [ 2514.206727][T10802] ? snprintf+0xe5/0x140 [ 2514.211005][T10802] should_fail_ex+0x399/0x4d0 [ 2514.215727][T10802] _copy_to_user+0x2c/0x130 [ 2514.220267][T10802] simple_read_from_buffer+0xe3/0x150 [ 2514.225684][T10802] proc_fail_nth_read+0x1a6/0x220 [ 2514.230749][T10802] ? proc_fault_inject_write+0x310/0x310 [ 2514.236414][T10802] ? fsnotify_perm+0x248/0x550 [ 2514.241211][T10802] ? proc_fault_inject_write+0x310/0x310 [ 2514.246881][T10802] vfs_read+0x2de/0xa00 [ 2514.251080][T10802] ? kernel_read+0x1e0/0x1e0 [ 2514.255713][T10802] ? __fget_files+0x28/0x4b0 [ 2514.260338][T10802] ? __fget_files+0x28/0x4b0 [ 2514.264964][T10802] ? __fget_files+0x43d/0x4b0 [ 2514.269692][T10802] ? __fdget_pos+0x2ae/0x360 [ 2514.274319][T10802] ? ksys_read+0x71/0x250 [ 2514.278693][T10802] ksys_read+0x14c/0x250 [ 2514.282986][T10802] ? vfs_write+0xa30/0xa30 [ 2514.287447][T10802] ? lockdep_hardirqs_on+0x94/0x140 [ 2514.292685][T10802] do_syscall_64+0x4c/0xa0 [ 2514.297226][T10802] ? clear_bhb_loop+0x60/0xb0 [ 2514.301934][T10802] ? clear_bhb_loop+0x60/0xb0 [ 2514.306644][T10802] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2514.312567][T10802] RIP: 0033:0x7f64a635b78e [ 2514.317021][T10802] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2514.336667][T10802] RSP: 002b:00007f64a45f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2514.345205][T10802] RAX: ffffffffffffffda RBX: 00007f64a45f66c0 RCX: 00007f64a635b78e [ 2514.353203][T10802] RDX: 000000000000000f RSI: 00007f64a45f60a0 RDI: 0000000000000005 [ 2514.361211][T10802] RBP: 00007f64a45f6090 R08: 0000000000000000 R09: 0000000000000000 [ 2514.369219][T10802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2514.377236][T10802] R13: 00007f64a6616038 R14: 00007f64a6615fa0 R15: 00007fff0f939d48 [ 2514.385251][T10802] [ 2514.471044][ T1201] bond0: (slave syz_tun): Releasing backup interface [ 2514.650566][ T8781] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2514.762231][T23697] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2514.773610][T23697] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2514.787002][T23697] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2514.795636][T23697] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2514.808461][T23697] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2514.815967][T23697] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2514.954413][ T8781] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2515.040732][T10817] netlink: 65043 bytes leftover after parsing attributes in process `syz.1.12037'. [ 2515.159399][ T8781] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2515.296054][ T8781] bond0: (slave netdevsim0): Releasing backup interface [ 2515.315415][ T8781] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2516.402433][T10841] netlink: 188 bytes leftover after parsing attributes in process `syz.0.12044'. [ 2516.442364][T10841] ksmbd: Unknown IPC event: 10, ignore. [ 2516.717942][T10813] chnl_net:caif_netlink_parms(): no params data found [ 2516.739586][T10840] netlink: 132 bytes leftover after parsing attributes in process `syz.0.12044'. [ 2516.853089][T10269] Bluetooth: hci1: command 0x0409 tx timeout [ 2517.476666][T10813] bridge0: port 1(bridge_slave_0) entered blocking state [ 2517.488747][T10813] bridge0: port 1(bridge_slave_0) entered disabled state [ 2517.519484][T10813] device bridge_slave_0 entered promiscuous mode [ 2517.547429][T10813] bridge0: port 2(bridge_slave_1) entered blocking state [ 2517.587606][T10813] bridge0: port 2(bridge_slave_1) entered disabled state [ 2517.598139][T10882] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.12055'. [ 2517.614279][T10813] device bridge_slave_1 entered promiscuous mode [ 2517.728822][T10878] netlink: 65043 bytes leftover after parsing attributes in process `syz.1.12053'. [ 2517.858307][T10813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2517.955881][T10813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2518.175695][T10813] team0: Port device team_slave_0 added [ 2518.311227][T10813] team0: Port device team_slave_1 added [ 2518.932959][T10269] Bluetooth: hci1: command 0x041b tx timeout [ 2519.255589][T10912] netlink: 188 bytes leftover after parsing attributes in process `syz.0.12060'. [ 2519.298821][T10912] ksmbd: Unknown IPC event: 10, ignore. [ 2519.407940][T10813] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2519.422938][T10813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2519.506135][T10813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2519.553530][T10813] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2519.586799][T10813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2519.667725][T10813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2519.737594][T10909] netlink: 132 bytes leftover after parsing attributes in process `syz.0.12060'. [ 2520.627955][T10813] device hsr_slave_0 entered promiscuous mode [ 2520.655924][T10813] device hsr_slave_1 entered promiscuous mode [ 2520.681578][T10813] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2520.709950][T10813] Cannot create hsr debugfs directory [ 2520.777929][ T8781] device bridge_slave_1 left promiscuous mode [ 2520.804459][ T8781] bridge0: port 2(bridge_slave_1) entered disabled state [ 2520.841821][ T8781] device bridge_slave_0 left promiscuous mode [ 2520.859094][T10933] netlink: 'syz.1.12064': attribute type 2 has an invalid length. [ 2520.877647][ T8781] bridge0: port 1(bridge_slave_0) entered disabled state [ 2520.902968][T10933] netlink: 10 bytes leftover after parsing attributes in process `syz.1.12064'. [ 2521.013439][T10269] Bluetooth: hci1: command 0x040f tx timeout [ 2521.308145][ T8781] device veth1_macvtap left promiscuous mode [ 2521.319635][ T8781] device veth0_macvtap left promiscuous mode [ 2521.334847][ T8781] device veth1_vlan left promiscuous mode [ 2521.337759][T10938] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.12065'. [ 2521.989332][ T8781] team0 (unregistering): Port device geneve1 removed [ 2522.541367][ T8781] team0 (unregistering): Port device veth0_to_hsr removed [ 2522.692389][ T8781] team0 (unregistering): Port device team_slave_1 removed [ 2522.761444][ T8781] team0 (unregistering): Port device team_slave_0 removed [ 2522.825864][ T8781] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2522.897029][ T8781] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2523.083650][T10269] Bluetooth: hci1: command 0x0419 tx timeout [ 2523.311927][ T8781] team0 (unregistering): Port device dummy0 removed [ 2523.372922][ T8781] bond0 (unregistering): (slave team0): Releasing backup interface [ 2523.419847][ T8781] bond0 (unregistering): Released all slaves [ 2523.577789][T10941] netlink: 'syz.0.12066': attribute type 21 has an invalid length. [ 2523.588611][T10941] netlink: 132 bytes leftover after parsing attributes in process `syz.0.12066'. [ 2523.636081][T10946] IPv6: NLM_F_CREATE should be specified when creating new route [ 2523.663467][T10946] netlink: 1 bytes leftover after parsing attributes in process `syz.4.12065'. [ 2524.084665][T10960] netlink: 65043 bytes leftover after parsing attributes in process `syz.4.12070'. [ 2524.113255][T10958] netlink: 'syz.2.12069': attribute type 10 has an invalid length. [ 2524.411134][T10973] netlink: 132 bytes leftover after parsing attributes in process `syz.2.12073'. [ 2524.452736][T10973] netlink: 188 bytes leftover after parsing attributes in process `syz.2.12073'. [ 2524.489504][T10973] ksmbd: Unknown IPC event: 10, ignore. [ 2524.747376][T10813] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2524.765236][T10813] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2524.777671][T10813] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2524.788827][T10813] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2524.942468][T10813] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2524.994219][ T9411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2525.018387][ T9411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2525.066742][T10813] 8021q: adding VLAN 0 to HW filter on device team0 [ 2525.101479][T15370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2525.122320][T15370] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2525.151804][T15370] bridge0: port 1(bridge_slave_0) entered blocking state [ 2525.159067][T15370] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2525.209441][T15370] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2525.218797][T15370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2525.239826][T15370] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2525.258731][T15370] bridge0: port 2(bridge_slave_1) entered blocking state [ 2525.265968][T15370] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2525.392175][ T8781] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2525.436145][ T1768] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2525.454579][ T1768] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2525.474501][ T1768] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2525.503926][ T1768] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2525.538481][ T1768] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2525.584472][ T1768] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2525.604667][ T1768] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2525.634378][ T1768] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2525.667910][ T1768] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2525.702616][ T1768] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2525.739982][T10813] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2526.190146][T11017] netlink: 17861 bytes leftover after parsing attributes in process `syz.2.12081'. [ 2527.209399][T15370] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2527.253607][T15370] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2527.293944][T10813] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2527.301124][T11038] netlink: 132 bytes leftover after parsing attributes in process `syz.0.12087'. [ 2527.346677][T11041] netlink: 188 bytes leftover after parsing attributes in process `syz.0.12087'. [ 2527.368480][T11041] ksmbd: Unknown IPC event: 10, ignore. [ 2527.457157][T11046] netlink: 60 bytes leftover after parsing attributes in process `syz.4.12089'. [ 2528.000163][T11046] netlink: 60 bytes leftover after parsing attributes in process `syz.4.12089'. [ 2528.042693][ T1768] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2528.063922][ T1768] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2528.170537][T20236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2528.206574][T20236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2528.241798][T10813] device veth0_vlan entered promiscuous mode [ 2528.257780][T20236] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2528.278554][T20236] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2528.305955][T10813] device veth1_vlan entered promiscuous mode [ 2528.619545][T10813] device veth0_macvtap entered promiscuous mode [ 2528.627937][ T9411] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2528.644810][ T9411] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2528.667940][ T9411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2528.699219][ T9411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2528.738912][ T9411] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2528.862902][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 2528.869330][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 2528.906338][T10813] device veth1_macvtap entered promiscuous mode [ 2528.922245][T11078] netlink: 'syz.4.12092': attribute type 10 has an invalid length. [ 2528.934217][T11086] __nla_validate_parse: 2 callbacks suppressed [ 2528.934234][T11086] netlink: 128 bytes leftover after parsing attributes in process `syz.0.12094'. [ 2528.972186][T10813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2529.017137][T10813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2529.034485][T10813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2529.052813][T10813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2529.103160][T10813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2529.128268][T10813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2529.167281][T10813] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2529.220704][T26892] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2529.270696][T26892] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2529.289289][T26892] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2529.317683][T10813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2529.341219][T10813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2529.354739][T10813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2529.374804][T10813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2529.390482][T10813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2529.412693][T10813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2529.457411][T10813] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2529.528451][T26892] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2529.539028][T26892] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2529.556212][T10813] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2529.566175][T10813] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2529.576531][T10813] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2529.597132][T10813] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2529.618427][T11110] netlink: 132 bytes leftover after parsing attributes in process `syz.0.12100'. [ 2529.660705][T11110] netlink: 188 bytes leftover after parsing attributes in process `syz.0.12100'. [ 2529.712717][T11110] ksmbd: Unknown IPC event: 10, ignore. [ 2529.760311][T10813] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 2529.775552][T10813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2529.788003][T10813] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 2529.798107][T10813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2529.845314][T26892] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2529.867490][T26892] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2529.918210][ T8781] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2529.974027][ T1768] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2530.044618][ T1768] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2530.132143][T20236] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2530.208197][T11116] netlink: 'syz.1.12110': attribute type 10 has an invalid length. [ 2530.696717][T11126] netlink: 60 bytes leftover after parsing attributes in process `syz.2.12102'. [ 2530.714040][T11126] netlink: 60 bytes leftover after parsing attributes in process `syz.2.12102'. [ 2530.727134][T11126] netlink: 60 bytes leftover after parsing attributes in process `syz.2.12102'. [ 2530.737415][T11126] netlink: 60 bytes leftover after parsing attributes in process `syz.2.12102'. [ 2530.767010][T11129] IPv6: Can't replace route, no match found [ 2531.013294][T11136] netlink: 65043 bytes leftover after parsing attributes in process `syz.4.12106'. [ 2531.567146][T11152] netlink: 132 bytes leftover after parsing attributes in process `syz.1.12109'. [ 2531.753543][T11152] netlink: 'syz.1.12109': attribute type 10 has an invalid length. [ 2531.854272][T11152] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 2531.939723][T11158] netlink: 'syz.2.12112': attribute type 10 has an invalid length. [ 2532.108683][T11167] netlink: 188 bytes leftover after parsing attributes in process `syz.0.12114'. [ 2532.198905][T11167] ksmbd: Unknown IPC event: 10, ignore. [ 2532.460733][T11177] netlink: 'syz.2.12117': attribute type 10 has an invalid length. [ 2533.103406][T11199] netlink: 'syz.4.12123': attribute type 33 has an invalid length. [ 2533.896113][T11224] netlink: 'syz.2.12130': attribute type 10 has an invalid length. [ 2533.947809][T11229] __nla_validate_parse: 2 callbacks suppressed [ 2533.947831][T11229] netlink: 132 bytes leftover after parsing attributes in process `syz.4.12132'. [ 2534.020470][T11229] netlink: 188 bytes leftover after parsing attributes in process `syz.4.12132'. [ 2534.064255][T11229] ksmbd: Unknown IPC event: 10, ignore. [ 2534.485809][T11246] IPv6: ADDRCONF(NETDEV_CHANGE): batadv0: link becomes ready [ 2534.781947][T11256] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.12140'. [ 2534.935998][T11260] netlink: 156 bytes leftover after parsing attributes in process `syz.2.12140'. [ 2536.197244][T11285] netlink: 'syz.0.12145': attribute type 10 has an invalid length. [ 2536.477412][T11299] FAULT_INJECTION: forcing a failure. [ 2536.477412][T11299] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2536.528644][T11299] CPU: 1 PID: 11299 Comm: syz.0.12149 Not tainted syzkaller #0 [ 2536.536314][T11299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2536.546449][T11299] Call Trace: [ 2536.549799][T11299] [ 2536.552795][T11299] dump_stack_lvl+0x188/0x24e [ 2536.557565][T11299] ? show_regs_print_info+0x12/0x12 [ 2536.562855][T11299] ? load_image+0x400/0x400 [ 2536.567453][T11299] ? __lock_acquire+0x7d10/0x7d10 [ 2536.572567][T11299] ? snprintf+0xe5/0x140 [ 2536.576897][T11299] should_fail_ex+0x399/0x4d0 [ 2536.581699][T11299] _copy_to_user+0x2c/0x130 [ 2536.586300][T11299] simple_read_from_buffer+0xe3/0x150 [ 2536.591780][T11299] proc_fail_nth_read+0x1a6/0x220 [ 2536.596920][T11299] ? proc_fault_inject_write+0x310/0x310 [ 2536.602653][T11299] ? fsnotify_perm+0x248/0x550 [ 2536.607500][T11299] ? proc_fault_inject_write+0x310/0x310 [ 2536.613226][T11299] vfs_read+0x2de/0xa00 [ 2536.617499][T11299] ? kernel_read+0x1e0/0x1e0 [ 2536.622187][T11299] ? __fget_files+0x28/0x4b0 [ 2536.626857][T11299] ? __fget_files+0x28/0x4b0 [ 2536.631572][T11299] ? __fget_files+0x43d/0x4b0 [ 2536.636349][T11299] ? __fdget_pos+0x2ae/0x360 [ 2536.641014][T11299] ? ksys_read+0x71/0x250 [ 2536.645441][T11299] ksys_read+0x14c/0x250 [ 2536.649753][T11299] ? vfs_write+0xa30/0xa30 [ 2536.654240][T11299] ? lockdep_hardirqs_on+0x94/0x140 [ 2536.659507][T11299] do_syscall_64+0x4c/0xa0 [ 2536.663998][T11299] ? clear_bhb_loop+0x60/0xb0 [ 2536.668727][T11299] ? clear_bhb_loop+0x60/0xb0 [ 2536.673460][T11299] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2536.679424][T11299] RIP: 0033:0x7fb7f195b78e [ 2536.683889][T11299] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2536.703542][T11299] RSP: 002b:00007fb7f28c3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2536.712012][T11299] RAX: ffffffffffffffda RBX: 00007fb7f28c46c0 RCX: 00007fb7f195b78e [ 2536.720050][T11299] RDX: 000000000000000f RSI: 00007fb7f28c40a0 RDI: 0000000000000007 [ 2536.728076][T11299] RBP: 00007fb7f28c4090 R08: 0000000000000000 R09: 0000000000000000 [ 2536.736099][T11299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2536.744124][T11299] R13: 00007fb7f1c16038 R14: 00007fb7f1c15fa0 R15: 00007ffca51a6368 [ 2536.752192][T11299] [ 2537.512192][T11308] netlink: 132 bytes leftover after parsing attributes in process `syz.1.12152'. [ 2538.689085][T11330] netlink: 'syz.2.12160': attribute type 10 has an invalid length. [ 2539.448376][T11349] netlink: 'syz.3.12166': attribute type 10 has an invalid length. [ 2539.489874][T11349] batman_adv: batadv0: Adding interface: wlan0 [ 2539.574761][T11349] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2539.720797][T11349] batman_adv: batadv0: Interface activated: wlan0 [ 2540.002519][T11357] netlink: 132 bytes leftover after parsing attributes in process `syz.0.12167'. [ 2540.514105][T11369] netlink: 'syz.2.12172': attribute type 10 has an invalid length. [ 2542.153438][T11403] netlink: 'syz.4.12182': attribute type 10 has an invalid length. [ 2542.161670][T11403] netlink: 55 bytes leftover after parsing attributes in process `syz.4.12182'. [ 2542.264566][T11407] netlink: 'syz.1.12183': attribute type 10 has an invalid length. [ 2542.965945][T11421] netlink: 'syz.4.12187': attribute type 3 has an invalid length. [ 2542.981307][T11421] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.12187'. [ 2545.026191][T11424] netlink: 'syz.3.12188': attribute type 10 has an invalid length. [ 2545.474395][T11429] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 2545.680496][T11429] device syzkaller0 entered promiscuous mode [ 2546.517933][T11453] netlink: 132 bytes leftover after parsing attributes in process `syz.3.12198'. [ 2547.411593][T11472] netlink: 14 bytes leftover after parsing attributes in process `syz.0.12205'. [ 2547.467691][T11472] device hsr_slave_0 left promiscuous mode [ 2547.496513][T11472] device hsr_slave_1 left promiscuous mode [ 2547.602152][T11475] netlink: 'syz.4.12206': attribute type 39 has an invalid length. [ 2548.834513][T11505] netlink: 'syz.4.12216': attribute type 10 has an invalid length. [ 2550.716081][T11525] FAULT_INJECTION: forcing a failure. [ 2550.716081][T11525] name failslab, interval 1, probability 0, space 0, times 0 [ 2550.742721][T11525] CPU: 1 PID: 11525 Comm: syz.0.12222 Not tainted syzkaller #0 [ 2550.750377][T11525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2550.760485][T11525] Call Trace: [ 2550.763813][T11525] [ 2550.766784][T11525] dump_stack_lvl+0x188/0x24e [ 2550.771530][T11525] ? show_regs_print_info+0x12/0x12 [ 2550.776791][T11525] ? load_image+0x400/0x400 [ 2550.781353][T11525] ? __might_sleep+0xd0/0xd0 [ 2550.785987][T11525] ? __lock_acquire+0x7d10/0x7d10 [ 2550.791070][T11525] should_fail_ex+0x399/0x4d0 [ 2550.795820][T11525] should_failslab+0x5/0x20 [ 2550.800377][T11525] slab_pre_alloc_hook+0x59/0x310 [ 2550.805451][T11525] ? __schedule+0x119d/0x40e0 [ 2550.810179][T11525] ? rtnl_newlink+0x109/0x2080 [ 2550.814997][T11525] __kmem_cache_alloc_node+0x4f/0x260 [ 2550.820428][T11525] ? rtnl_newlink+0x109/0x2080 [ 2550.825249][T11525] kmalloc_trace+0x26/0xe0 [ 2550.829744][T11525] rtnl_newlink+0x109/0x2080 [ 2550.834410][T11525] ? __schedule+0x11d9/0x40e0 [ 2550.839151][T11525] ? __mutex_lock+0x806/0xaf0 [ 2550.843882][T11525] ? __lock_acquire+0x7d10/0x7d10 [ 2550.848959][T11525] ? do_raw_spin_lock+0x128/0x2f0 [ 2550.854036][T11525] ? rtnl_setlink+0x510/0x510 [ 2550.858767][T11525] ? __rwlock_init+0x140/0x140 [ 2550.863600][T11525] ? do_raw_spin_unlock+0x11d/0x230 [ 2550.868846][T11525] ? __mutex_lock+0x810/0xaf0 [ 2550.873591][T11525] ? __mutex_lock+0x3b2/0xaf0 [ 2550.878335][T11525] ? rtnetlink_rcv_msg+0x824/0xfc0 [ 2550.883614][T11525] ? mutex_lock_nested+0x10/0x10 [ 2550.888636][T11525] ? rtnetlink_rcv_msg+0x226/0xfc0 [ 2550.893811][T11525] ? rtnetlink_rcv_msg+0x226/0xfc0 [ 2550.898984][T11525] ? rtnl_setlink+0x510/0x510 [ 2550.903729][T11525] rtnetlink_rcv_msg+0x87c/0xfc0 [ 2550.908793][T11525] ? rtnetlink_bind+0x80/0x80 [ 2550.913537][T11525] ? __local_bh_enable_ip+0x136/0x1c0 [ 2550.918964][T11525] ? lockdep_hardirqs_on+0x94/0x140 [ 2550.924249][T11525] ? __local_bh_enable_ip+0x136/0x1c0 [ 2550.929723][T11525] ? _local_bh_enable+0xa0/0xa0 [ 2550.934637][T11525] ? __dev_queue_xmit+0x26b/0x37f0 [ 2550.939810][T11525] ? __dev_queue_xmit+0x26b/0x37f0 [ 2550.944971][T11525] ? __dev_queue_xmit+0x1c61/0x37f0 [ 2550.950267][T11525] ? __dev_queue_xmit+0x26b/0x37f0 [ 2550.955436][T11525] ? perf_trace_lock+0xf8/0x390 [ 2550.960350][T11525] ? __copy_skb_header+0x3ba/0x4f0 [ 2550.965524][T11525] ? trace_event_raw_event_lock+0x250/0x250 [ 2550.971474][T11525] ? __skb_clone+0x480/0x790 [ 2550.976148][T11525] netlink_rcv_skb+0x1fb/0x450 [ 2550.981017][T11525] ? rtnetlink_bind+0x80/0x80 [ 2550.985759][T11525] ? netlink_ack+0x1170/0x1170 [ 2550.990600][T11525] ? netlink_deliver_tap+0x2e/0x1b0 [ 2550.995850][T11525] netlink_unicast+0x74d/0x8d0 [ 2551.000652][T11525] netlink_sendmsg+0x8ad/0xbd0 [ 2551.005450][T11525] ? netlink_getsockopt+0x550/0x550 [ 2551.010679][T11525] ? aa_sock_msg_perm+0x94/0x150 [ 2551.015651][T11525] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2551.020989][T11525] ? security_socket_sendmsg+0x7c/0xa0 [ 2551.026515][T11525] ? netlink_getsockopt+0x550/0x550 [ 2551.031792][T11525] ____sys_sendmsg+0x5be/0x970 [ 2551.036696][T11525] ? __sys_sendmsg_sock+0x30/0x30 [ 2551.041866][T11525] ? __import_iovec+0x315/0x500 [ 2551.046770][T11525] ? import_iovec+0x6f/0xa0 [ 2551.051335][T11525] ___sys_sendmsg+0x2a2/0x360 [ 2551.056067][T11525] ? __sys_sendmsg+0x290/0x290 [ 2551.060889][T11525] ? __lock_acquire+0x7d10/0x7d10 [ 2551.065960][T11525] __se_sys_sendmsg+0x1bb/0x2a0 [ 2551.070856][T11525] ? __x64_sys_sendmsg+0x80/0x80 [ 2551.075842][T11525] ? lockdep_hardirqs_on+0x94/0x140 [ 2551.081106][T11525] do_syscall_64+0x4c/0xa0 [ 2551.085593][T11525] ? clear_bhb_loop+0x60/0xb0 [ 2551.090403][T11525] ? clear_bhb_loop+0x60/0xb0 [ 2551.095114][T11525] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2551.101025][T11525] RIP: 0033:0x7fb7f199aeb9 [ 2551.105487][T11525] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2551.125174][T11525] RSP: 002b:00007fb7f28c4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2551.133602][T11525] RAX: ffffffffffffffda RBX: 00007fb7f1c15fa0 RCX: 00007fb7f199aeb9 [ 2551.141585][T11525] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 2551.149572][T11525] RBP: 00007fb7f28c4090 R08: 0000000000000000 R09: 0000000000000000 [ 2551.157559][T11525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2551.165577][T11525] R13: 00007fb7f1c16038 R14: 00007fb7f1c15fa0 R15: 00007ffca51a6368 [ 2551.173608][T11525] [ 2551.707751][T11549] netlink: 'syz.1.12231': attribute type 10 has an invalid length. [ 2552.174249][T10269] Bluetooth: hci1: unexpected subevent 0x0c length: 150 > 5 [ 2555.118773][T11579] netlink: 'syz.1.12239': attribute type 10 has an invalid length. [ 2555.186400][T11579] 8021q: adding VLAN 0 to HW filter on device team0 [ 2555.231609][T11579] bond0: (slave team0): Enslaving as an active interface with an up link [ 2555.284581][T11587] bridge0: port 1(bond0) entered blocking state [ 2555.299232][T11587] bridge0: port 1(bond0) entered disabled state [ 2555.319544][T11587] device bond0 entered promiscuous mode [ 2555.360299][T11587] device bond_slave_0 entered promiscuous mode [ 2555.378380][T11587] device bond_slave_1 entered promiscuous mode [ 2555.386547][T11587] device netdevsim0 entered promiscuous mode [ 2555.611555][T11595] netlink: 'syz.4.12245': attribute type 10 has an invalid length. [ 2557.435741][T11610] batman_adv: batadv0: Interface deactivated: wlan0 [ 2557.668042][T11630] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.12254'. [ 2557.719497][T11630] netlink: 'syz.1.12254': attribute type 29 has an invalid length. [ 2557.795970][T11630] netlink: 'syz.1.12254': attribute type 3 has an invalid length. [ 2557.873371][T11630] netlink: 132 bytes leftover after parsing attributes in process `syz.1.12254'. [ 2558.269363][T11648] netlink: 'syz.4.12260': attribute type 10 has an invalid length. [ 2558.296431][T11653] netlink: 132 bytes leftover after parsing attributes in process `syz.2.12261'. [ 2559.938536][T11681] IPv6: Can't replace route, no match found [ 2560.410195][T10269] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 2560.412961][T11693] netlink: 'syz.1.12274': attribute type 10 has an invalid length. [ 2560.433924][T10269] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 2560.441776][T10269] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:0' [ 2560.452099][T10269] CPU: 1 PID: 10269 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 2560.459810][T10269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2560.469930][T10269] Workqueue: hci1 hci_rx_work [ 2560.474679][T10269] Call Trace: [ 2560.478096][T10269] [ 2560.481074][T10269] dump_stack_lvl+0x188/0x24e [ 2560.485852][T10269] ? show_regs_print_info+0x12/0x12 [ 2560.491114][T10269] ? load_image+0x400/0x400 [ 2560.495735][T10269] sysfs_create_dir_ns+0x26a/0x290 [ 2560.500940][T10269] ? sysfs_warn_dup+0xa0/0xa0 [ 2560.505695][T10269] ? do_raw_spin_unlock+0x11d/0x230 [ 2560.510960][T10269] kobject_add_internal+0x61c/0xcc0 [ 2560.516238][T10269] kobject_add+0x160/0x230 [ 2560.520759][T10269] ? kobject_init+0x1d0/0x1d0 [ 2560.525521][T10269] ? klist_children_get+0x50/0x50 [ 2560.530607][T10269] ? get_device_parent+0x121/0x3f0 [ 2560.535786][T10269] device_add+0x483/0xfb0 [ 2560.540171][T10269] ? kmem_cache_free+0xf7/0x290 [ 2560.545069][T10269] hci_conn_add_sysfs+0xd1/0x1e0 [ 2560.550047][T10269] le_conn_complete_evt+0x105f/0x1670 [ 2560.555469][T10269] ? le_conn_complete_evt+0xe6/0x1670 [ 2560.560897][T10269] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 2560.567176][T10269] ? bt_info+0x180/0x180 [ 2560.571463][T10269] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 2560.577165][T10269] ? skb_pull_data+0xf7/0x200 [ 2560.581913][T10269] hci_le_conn_complete_evt+0x183/0x440 [ 2560.587504][T10269] ? hci_remote_host_features_evt+0x270/0x270 [ 2560.593717][T10269] hci_event_packet+0x7b6/0x1280 [ 2560.598723][T10269] ? bis_list+0x280/0x280 [ 2560.603088][T10269] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 2560.609022][T10269] ? kcov_remote_start+0x4c7/0x7e0 [ 2560.614173][T10269] ? mt_dump_node+0x8f0/0x1920 [ 2560.618982][T10269] ? hci_send_to_monitor+0x9c/0x4a0 [ 2560.624220][T10269] hci_rx_work+0x3eb/0xd40 [ 2560.628666][T10269] ? _raw_spin_unlock+0x40/0x40 [ 2560.633559][T10269] ? process_one_work+0x7b0/0x1160 [ 2560.638717][T10269] process_one_work+0x8a2/0x1160 [ 2560.643721][T10269] ? worker_detach_from_pool+0x240/0x240 [ 2560.649426][T10269] ? _raw_spin_lock_irq+0xb7/0xf0 [ 2560.654500][T10269] ? _raw_spin_lock_irqsave+0x100/0x100 [ 2560.660111][T10269] ? kthread_data+0x4b/0xc0 [ 2560.664659][T10269] worker_thread+0xaa2/0x1270 [ 2560.669399][T10269] ? __kthread_parkme+0x162/0x1c0 [ 2560.674468][T10269] kthread+0x29d/0x330 [ 2560.678574][T10269] ? worker_clr_flags+0x1a0/0x1a0 [ 2560.683630][T10269] ? kthread_blkcg+0xd0/0xd0 [ 2560.688354][T10269] ret_from_fork+0x1f/0x30 [ 2560.692826][T10269] [ 2560.699740][T10269] kobject_add_internal failed for hci1:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 2560.713348][T10269] Bluetooth: hci1: failed to register connection device [ 2561.579539][T11711] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.12279'. [ 2562.121302][T11725] batman_adv: batadv0: Interface deactivated: wlan0 [ 2562.453153][T10269] Bluetooth: hci1: command 0x2016 tx timeout [ 2563.014474][T11743] netlink: 'syz.0.12290': attribute type 10 has an invalid length. [ 2564.066552][T11756] IPv6: Can't replace route, no match found [ 2564.367198][T11768] netlink: 'syz.0.12298': attribute type 29 has an invalid length. [ 2564.525816][T10269] Bluetooth: hci1: command 0x2016 tx timeout [ 2567.228909][T11768] netlink: 'syz.0.12298': attribute type 29 has an invalid length. [ 2567.745321][T11800] netlink: 'syz.1.12307': attribute type 39 has an invalid length. [ 2573.355603][T11879] netlink: 14 bytes leftover after parsing attributes in process `syz.1.12333'. [ 2573.865900][T11879] device hsr_slave_1 left promiscuous mode [ 2574.768952][T10269] Bluetooth: hci0: unexpected subevent 0x0e length: 150 > 15 [ 2578.450432][T11947] netlink: 'syz.4.12355': attribute type 10 has an invalid length. [ 2579.269391][ T2074] bond0: (slave syz_tun): Releasing backup interface [ 2579.493745][T32463] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2579.504258][T32463] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2579.518223][T32463] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2579.533362][T23697] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2579.552598][T32463] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 2579.560337][T32463] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2579.836352][T15370] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2579.907072][T11957] netlink: 'syz.1.12368': attribute type 10 has an invalid length. [ 2579.955255][T15370] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2580.337405][T15370] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2580.548518][T15370] bond0: (slave netdevsim0): Releasing backup interface [ 2580.570443][T15370] device netdevsim0 left promiscuous mode [ 2580.591474][T15370] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2581.647674][T10269] Bluetooth: hci0: command 0x0409 tx timeout [ 2581.723909][T11962] chnl_net:caif_netlink_parms(): no params data found [ 2582.001766][T11962] bridge0: port 1(bridge_slave_0) entered blocking state [ 2582.021584][T11962] bridge0: port 1(bridge_slave_0) entered disabled state [ 2582.032279][T11962] device bridge_slave_0 entered promiscuous mode [ 2582.090349][T11962] bridge0: port 2(bridge_slave_1) entered blocking state [ 2582.110839][T11962] bridge0: port 2(bridge_slave_1) entered disabled state [ 2582.120697][T11962] device bridge_slave_1 entered promiscuous mode [ 2582.211792][T11962] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2582.256124][T11962] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2582.428213][T11962] team0: Port device team_slave_0 added [ 2582.582132][T12010] netlink: 'syz.3.12374': attribute type 10 has an invalid length. [ 2582.618839][T11962] team0: Port device team_slave_1 added [ 2582.629088][T12017] IPv6: Can't replace route, no match found [ 2582.751686][T11962] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2582.788339][T11962] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2582.927609][T11962] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2582.967062][T12034] netlink: 1041 bytes leftover after parsing attributes in process `syz.4.12381'. [ 2583.036587][T11962] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2583.053175][T11962] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2583.144258][T11962] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2583.561644][T12044] netlink: 65027 bytes leftover after parsing attributes in process `syz.3.12383'. [ 2583.684632][T11962] device hsr_slave_0 entered promiscuous mode [ 2583.710375][T11962] device hsr_slave_1 entered promiscuous mode [ 2583.723626][T10269] Bluetooth: hci0: command 0x041b tx timeout [ 2583.746283][T11962] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2583.807075][T11962] Cannot create hsr debugfs directory [ 2583.879789][T12053] netlink: 65027 bytes leftover after parsing attributes in process `syz.4.12384'. [ 2584.828442][T15370] device wlan1 left promiscuous mode [ 2584.861871][T15370] team0: Port device wlan1 removed [ 2584.919390][T12070] netlink: 65027 bytes leftover after parsing attributes in process `syz.4.12388'. [ 2584.982650][T12074] FAULT_INJECTION: forcing a failure. [ 2584.982650][T12074] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2584.985828][T12072] netlink: 'syz.2.12389': attribute type 10 has an invalid length. [ 2585.025460][T12074] CPU: 1 PID: 12074 Comm: syz.4.12388 Not tainted syzkaller #0 [ 2585.033099][T12074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2585.043204][T12074] Call Trace: [ 2585.046528][T12074] [ 2585.049511][T12074] dump_stack_lvl+0x188/0x24e [ 2585.054248][T12074] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2585.060468][T12074] ? show_regs_print_info+0x12/0x12 [ 2585.065765][T12074] ? load_image+0x400/0x400 [ 2585.069656][T12075] IPv6: Can't replace route, no match found [ 2585.070311][T12074] should_fail_ex+0x399/0x4d0 [ 2585.080992][T12074] _copy_to_user+0x2c/0x130 [ 2585.085554][T12074] simple_read_from_buffer+0xe3/0x150 [ 2585.090985][T12074] proc_fail_nth_read+0x1a6/0x220 [ 2585.096043][T12074] ? proc_fault_inject_write+0x310/0x310 [ 2585.101712][T12074] ? fsnotify_perm+0x248/0x550 [ 2585.106505][T12074] ? proc_fault_inject_write+0x310/0x310 [ 2585.112212][T12074] vfs_read+0x2de/0xa00 [ 2585.116405][T12074] ? kernel_read+0x1e0/0x1e0 [ 2585.121026][T12074] ? __fget_files+0x28/0x4b0 [ 2585.125649][T12074] ? __fget_files+0x28/0x4b0 [ 2585.130277][T12074] ? __fget_files+0x43d/0x4b0 [ 2585.135001][T12074] ? __fdget_pos+0x2ae/0x360 [ 2585.139623][T12074] ? ksys_read+0x71/0x250 [ 2585.143992][T12074] ksys_read+0x14c/0x250 [ 2585.148273][T12074] ? vfs_write+0xa30/0xa30 [ 2585.152738][T12074] do_syscall_64+0x4c/0xa0 [ 2585.157192][T12074] ? clear_bhb_loop+0x60/0xb0 [ 2585.161894][T12074] ? clear_bhb_loop+0x60/0xb0 [ 2585.166602][T12074] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2585.172528][T12074] RIP: 0033:0x7fc036d5b78e [ 2585.176971][T12074] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2585.196609][T12074] RSP: 002b:00007fc034ff5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2585.205049][T12074] RAX: ffffffffffffffda RBX: 00007fc034ff66c0 RCX: 00007fc036d5b78e [ 2585.213051][T12074] RDX: 000000000000000f RSI: 00007fc034ff60a0 RDI: 000000000000000b [ 2585.221051][T12074] RBP: 00007fc034ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 2585.229045][T12074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2585.237037][T12074] R13: 00007fc037016128 R14: 00007fc037016090 R15: 00007fff5ce596f8 [ 2585.245130][T12074] [ 2585.409727][T15370] batman_adv: batadv0: Removing interface: [ 2585.552864][T15370] device veth0_to_team left promiscuous mode [ 2585.559078][T15370] : port 1(veth0_to_team) entered disabled state [ 2585.625647][T15370] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2585.656188][T15370] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2585.677277][T15370] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2585.690312][T15370] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2585.727844][T15370] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 2585.752292][T15370] batman_adv: batadv0: Removing interface: virt_wifi0 [ 2585.781197][T15370] device bond0 left promiscuous mode [ 2585.801072][T15370] device bond_slave_0 left promiscuous mode [ 2585.808124][T10269] Bluetooth: hci0: command 0x040f tx timeout [ 2585.833143][T15370] device bond_slave_1 left promiscuous mode [ 2585.853164][T15370] bridge0: port 1(bond0) entered disabled state [ 2585.886132][T15370] bridge0: port 3(team0) entered disabled state [ 2585.899947][T12085] can: request_module (can-proto-0) failed. [ 2585.911005][T15370] device bridge_slave_1 left promiscuous mode [ 2585.938085][T15370] bridge0: port 2(bridge_slave_1) entered disabled state [ 2585.948766][T12097] netlink: 188 bytes leftover after parsing attributes in process `syz.1.12395'. [ 2585.960024][T12097] ksmbd: Unknown IPC event: 10, ignore. [ 2586.026412][T15370] device veth1_macvtap left promiscuous mode [ 2586.040440][T15370] device veth1_vlan left promiscuous mode [ 2586.079727][T15370] device veth0_vlan left promiscuous mode [ 2586.091375][T12100] netlink: 'syz.3.12392': attribute type 2 has an invalid length. [ 2587.884288][T10269] Bluetooth: hci0: command 0x0419 tx timeout [ 2588.923888][T15370] device macvlan0 left promiscuous mode [ 2588.931371][T15370] team0 (unregistering): Port device macvlan0 removed [ 2589.254239][T15370] device team_slave_1 left promiscuous mode [ 2589.261009][T15370] team0 (unregistering): Port device team_slave_1 removed [ 2589.310442][T15370] device team_slave_0 left promiscuous mode [ 2589.317950][T15370] team0 (unregistering): Port device team_slave_0 removed [ 2589.371603][T15370] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2589.423344][T15370] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2589.790049][T15370] bond0 (unregistering): Released all slaves [ 2589.907528][T12086] netlink: 'syz.3.12392': attribute type 10 has an invalid length. [ 2589.921604][T12086] team0: Device ip6_vti0 is of different type [ 2590.248401][T12119] IPv6: Can't replace route, no match found [ 2590.278544][T12118] netlink: 'syz.4.12403': attribute type 10 has an invalid length. [ 2590.293407][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 2590.300826][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 2590.430691][T12125] netlink: 60 bytes leftover after parsing attributes in process `syz.1.12404'. [ 2590.548362][T12125] netlink: 60 bytes leftover after parsing attributes in process `syz.1.12404'. [ 2590.700037][T12126] netlink: 60 bytes leftover after parsing attributes in process `syz.1.12404'. [ 2590.721402][T12132] netlink: 'syz.2.12407': attribute type 7 has an invalid length. [ 2590.847551][T11962] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2590.940913][T11962] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2590.994840][T11962] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2591.045047][T11962] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2591.278404][T12156] FAULT_INJECTION: forcing a failure. [ 2591.278404][T12156] name failslab, interval 1, probability 0, space 0, times 0 [ 2591.354013][T12156] CPU: 1 PID: 12156 Comm: syz.3.12411 Not tainted syzkaller #0 [ 2591.361686][T12156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2591.371793][T12156] Call Trace: [ 2591.375115][T12156] [ 2591.378098][T12156] dump_stack_lvl+0x188/0x24e [ 2591.382843][T12156] ? show_regs_print_info+0x12/0x12 [ 2591.388101][T12156] ? load_image+0x400/0x400 [ 2591.392707][T12156] ? __might_sleep+0xd0/0xd0 [ 2591.397356][T12156] ? __lock_acquire+0x7d10/0x7d10 [ 2591.402498][T12156] should_fail_ex+0x399/0x4d0 [ 2591.407336][T12156] should_failslab+0x5/0x20 [ 2591.411904][T12156] slab_pre_alloc_hook+0x59/0x310 [ 2591.416992][T12156] ? __get_vm_area_node+0x122/0x330 [ 2591.422253][T12156] __kmem_cache_alloc_node+0x4f/0x260 [ 2591.427732][T12156] ? lockdep_hardirqs_on+0x94/0x140 [ 2591.432993][T12156] ? __get_vm_area_node+0x122/0x330 [ 2591.438254][T12156] kmalloc_node_trace+0x22/0xe0 [ 2591.443176][T12156] __get_vm_area_node+0x122/0x330 [ 2591.448022][T12148] netlink: 14601 bytes leftover after parsing attributes in process `syz.2.12410'. [ 2591.448248][T12156] ? __get_vm_area_node+0x1/0x330 [ 2591.462628][T12156] __vmalloc_node_range+0x357/0x13b0 [ 2591.467973][T12156] ? bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 2591.473618][T12156] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2591.480037][T12156] ? free_vm_area+0x50/0x50 [ 2591.484645][T12156] ? end_current_label_crit_section+0x170/0x170 [ 2591.490995][T12156] ? lockdep_hardirqs_on+0x94/0x140 [ 2591.496262][T12156] ? bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 2591.501870][T12156] __vmalloc+0x76/0x80 [ 2591.505992][T12156] ? bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 2591.511604][T12156] bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 2591.517059][T12156] ? bpf_lsm_capable+0x5/0x10 [ 2591.521795][T12156] ? security_capable+0x85/0xb0 [ 2591.526706][T12156] bpf_prog_alloc+0x1c/0x1b0 [ 2591.531372][T12156] bpf_prog_load+0x7c9/0x1560 [ 2591.536135][T12156] ? map_freeze+0x390/0x390 [ 2591.540702][T12156] ? __might_fault+0xa6/0x120 [ 2591.545452][T12156] ? __might_fault+0xa6/0x120 [ 2591.550190][T12156] ? __might_fault+0xc2/0x120 [ 2591.554916][T12156] ? __might_fault+0xa6/0x120 [ 2591.559659][T12156] ? bpf_lsm_bpf+0x5/0x10 [ 2591.564059][T12156] ? security_bpf+0x7a/0xa0 [ 2591.568623][T12156] __sys_bpf+0x5b8/0x780 [ 2591.572930][T12156] ? bpf_link_show_fdinfo+0x380/0x380 [ 2591.578383][T12156] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2591.584609][T12156] __x64_sys_bpf+0x78/0x90 [ 2591.589092][T12156] do_syscall_64+0x4c/0xa0 [ 2591.593567][T12156] ? clear_bhb_loop+0x60/0xb0 [ 2591.598291][T12156] ? clear_bhb_loop+0x60/0xb0 [ 2591.603033][T12156] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2591.608989][T12156] RIP: 0033:0x7ff24079aeb9 [ 2591.613452][T12156] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2591.616142][T11962] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2591.633083][T12156] RSP: 002b:00007ff24172c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2591.633121][T12156] RAX: ffffffffffffffda RBX: 00007ff240a15fa0 RCX: 00007ff24079aeb9 [ 2591.633138][T12156] RDX: 0000000000000048 RSI: 000020000000e000 RDI: 0000000000000005 [ 2591.633153][T12156] RBP: 00007ff24172c090 R08: 0000000000000000 R09: 0000000000000000 [ 2591.633167][T12156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2591.633181][T12156] R13: 00007ff240a16038 R14: 00007ff240a15fa0 R15: 00007ffd5c40e218 [ 2591.633214][T12156] [ 2591.899876][ T9411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2591.922500][ T9411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2591.983861][T11962] 8021q: adding VLAN 0 to HW filter on device team0 [ 2592.025897][T15367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2592.047330][T15367] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2592.081481][T15367] bridge0: port 1(bridge_slave_0) entered blocking state [ 2592.088966][T15367] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2592.147981][T15367] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2592.194465][T15367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2592.246240][T15367] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2592.277137][T15367] bridge0: port 2(bridge_slave_1) entered blocking state [ 2592.284490][T15367] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2592.340204][T15367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2592.393530][T15367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2592.432356][T15370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2592.461286][T15370] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2592.627108][T12156] syz.3.12411: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 2592.694382][T12156] CPU: 1 PID: 12156 Comm: syz.3.12411 Not tainted syzkaller #0 [ 2592.702130][T12156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2592.712258][T12156] Call Trace: [ 2592.715582][T12156] [ 2592.718556][T12156] dump_stack_lvl+0x188/0x24e [ 2592.723292][T12156] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 2592.729767][T12156] ? show_regs_print_info+0x12/0x12 [ 2592.735034][T12156] ? load_image+0x400/0x400 [ 2592.739602][T12156] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 2592.746092][T12156] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 2592.752649][T12156] warn_alloc+0x242/0x330 [ 2592.757061][T12156] ? __get_vm_area_node+0x122/0x330 [ 2592.762325][T12156] ? zone_watermark_ok_safe+0x270/0x270 [ 2592.767942][T12156] ? rcu_is_watching+0x11/0xa0 [ 2592.772789][T12156] ? __get_vm_area_node+0x318/0x330 [ 2592.778054][T12156] ? __get_vm_area_node+0x1/0x330 [ 2592.783165][T12156] __vmalloc_node_range+0x37c/0x13b0 [ 2592.788556][T12156] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2592.794630][T12156] ? free_vm_area+0x50/0x50 [ 2592.799181][T12156] ? end_current_label_crit_section+0x170/0x170 [ 2592.805475][T12156] ? lockdep_hardirqs_on+0x94/0x140 [ 2592.810740][T12156] ? bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 2592.816347][T12156] __vmalloc+0x76/0x80 [ 2592.820465][T12156] ? bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 2592.826071][T12156] bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 2592.831497][T12156] ? bpf_lsm_capable+0x5/0x10 [ 2592.836224][T12156] ? security_capable+0x85/0xb0 [ 2592.841131][T12156] bpf_prog_alloc+0x1c/0x1b0 [ 2592.845784][T12156] bpf_prog_load+0x7c9/0x1560 [ 2592.850547][T12156] ? map_freeze+0x390/0x390 [ 2592.855102][T12156] ? __might_fault+0xa6/0x120 [ 2592.859860][T12156] ? __might_fault+0xa6/0x120 [ 2592.864582][T12156] ? __might_fault+0xc2/0x120 [ 2592.869301][T12156] ? __might_fault+0xa6/0x120 [ 2592.874033][T12156] ? bpf_lsm_bpf+0x5/0x10 [ 2592.878406][T12156] ? security_bpf+0x7a/0xa0 [ 2592.882967][T12156] __sys_bpf+0x5b8/0x780 [ 2592.887272][T12156] ? bpf_link_show_fdinfo+0x380/0x380 [ 2592.892735][T12156] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2592.898989][T12156] __x64_sys_bpf+0x78/0x90 [ 2592.903473][T12156] do_syscall_64+0x4c/0xa0 [ 2592.907948][T12156] ? clear_bhb_loop+0x60/0xb0 [ 2592.912705][T12156] ? clear_bhb_loop+0x60/0xb0 [ 2592.917569][T12156] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2592.923586][T12156] RIP: 0033:0x7ff24079aeb9 [ 2592.928066][T12156] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2592.947739][T12156] RSP: 002b:00007ff24172c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2592.956218][T12156] RAX: ffffffffffffffda RBX: 00007ff240a15fa0 RCX: 00007ff24079aeb9 [ 2592.964268][T12156] RDX: 0000000000000048 RSI: 000020000000e000 RDI: 0000000000000005 [ 2592.972323][T12156] RBP: 00007ff24172c090 R08: 0000000000000000 R09: 0000000000000000 [ 2592.980400][T12156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2592.988434][T12156] R13: 00007ff240a16038 R14: 00007ff240a15fa0 R15: 00007ffd5c40e218 [ 2592.996506][T12156] [ 2593.043128][T12156] Mem-Info: [ 2593.046431][T12156] active_anon:7720 inactive_anon:0 isolated_anon:0 [ 2593.046431][T12156] active_file:22032 inactive_file:40911 isolated_file:0 [ 2593.046431][T12156] unevictable:768 dirty:175 writeback:2 [ 2593.046431][T12156] slab_reclaimable:21450 slab_unreclaimable:94214 [ 2593.046431][T12156] mapped:30262 shmem:1363 pagetables:603 [ 2593.046431][T12156] sec_pagetables:0 bounce:0 [ 2593.046431][T12156] kernel_misc_reclaimable:0 [ 2593.046431][T12156] free:1313680 free_pcp:12502 free_cma:0 [ 2593.163895][T15370] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2593.171595][T12156] Node 0 active_anon:30880kB inactive_anon:0kB active_file:88128kB inactive_file:163444kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:121048kB dirty:700kB writeback:8kB shmem:3916kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:11176kB pagetables:2412kB sec_pagetables:0kB all_unreclaimable? no [ 2593.171668][T12156] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 2593.229723][T15370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2593.255258][T15370] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2593.271030][T15370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2593.285826][T12177] netlink: 'syz.2.12417': attribute type 21 has an invalid length. [ 2593.295387][T15370] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2593.314114][ T8781] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2593.339768][ T8781] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2593.390201][T11962] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2593.458517][T12156] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2593.582918][T12156] lowmem_reserve[]: 0 2527 2528 2528 2528 [ 2593.593533][T12156] Node 0 DMA32 free:1364012kB boost:0kB min:34692kB low:43364kB high:52036kB reserved_highatomic:0KB active_anon:30680kB inactive_anon:0kB active_file:88128kB inactive_file:163444kB unevictable:1536kB writepending:708kB present:3129332kB managed:2592980kB mlocked:0kB bounce:0kB free_pcp:9912kB local_pcp:3068kB free_cma:0kB [ 2593.730188][T12156] lowmem_reserve[]: 0 0 1 1 1 [ 2593.775513][T12156] Node 0 Normal free:8kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:24kB local_pcp:12kB free_cma:0kB [ 2593.883243][T12156] lowmem_reserve[]: 0 0 0 0 0 [ 2593.888086][T12156] Node 1 Normal free:3894856kB boost:0kB min:55192kB low:68988kB high:82784kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:20952kB local_pcp:14928kB free_cma:0kB [ 2594.003086][T12156] lowmem_reserve[]: 0 0 0 0 0 [ 2594.007963][T12156] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 2594.051733][T12156] Node 0 DMA32: 2091*4kB (UME) 656*8kB (UME) 2698*16kB (UME) 960*32kB (UME) 769*64kB (UME) 190*128kB (UME) 199*256kB (UME) 173*512kB (UM) 99*1024kB (UM) 31*2048kB (UME) 218*4096kB (UM) = 1358348kB [ 2594.109134][T12156] Node 0 Normal: 2*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2594.146849][T12200] netlink: 188 bytes leftover after parsing attributes in process `syz.4.12422'. [ 2594.156565][T12156] Node 1 Normal: 244*4kB (UME) 49*8kB (UME) 25*16kB (UME) 45*32kB (UE) 19*64kB (UME) 14*128kB (UME) 2*256kB (UM) 2*512kB (UM) 2*1024kB (UE) 1*2048kB (E) 948*4096kB (M) = 3894856kB [ 2594.193084][T12200] ksmbd: Unknown IPC event: 10, ignore. [ 2594.242464][T12156] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2594.284799][T12156] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 2594.313108][T12156] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2594.324807][T12156] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 2594.341633][T12156] 64305 total pagecache pages [ 2594.346615][T12156] 0 pages in swap cache [ 2594.350916][T12156] Free swap = 124728kB [ 2594.355367][T12156] Total swap = 124996kB [ 2594.359711][T12156] 2097051 pages RAM [ 2594.363877][T12156] 0 pages HighMem/MovableOnly [ 2594.368725][T12156] 415205 pages reserved [ 2594.373157][T12156] 0 pages cma reserved [ 2596.895314][T12207] netlink: 14601 bytes leftover after parsing attributes in process `syz.3.12424'. [ 2596.932073][T11962] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2596.947928][T20236] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2596.963282][T20236] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2597.023124][ T9405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2597.057904][ T9405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2597.157475][T12219] IPv6: Can't replace route, no match found [ 2597.183495][T15370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2597.198164][T15370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2597.264483][T15370] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2597.294292][T15370] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2597.318126][T11962] device veth0_vlan entered promiscuous mode [ 2597.500597][T11962] device veth1_vlan entered promiscuous mode [ 2597.633801][T15370] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2597.648916][T15370] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2597.676394][T15370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2597.710028][T15370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2597.751161][T11962] device veth0_macvtap entered promiscuous mode [ 2597.795108][T11962] device veth1_macvtap entered promiscuous mode [ 2597.994675][T12234] netlink: 'syz.3.12431': attribute type 21 has an invalid length. [ 2598.169860][T12243] FAULT_INJECTION: forcing a failure. [ 2598.169860][T12243] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2598.252914][T12243] CPU: 0 PID: 12243 Comm: syz.1.12434 Not tainted syzkaller #0 [ 2598.260678][T12243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2598.270828][T12243] Call Trace: [ 2598.274167][T12243] [ 2598.277162][T12243] dump_stack_lvl+0x188/0x24e [ 2598.281934][T12243] ? show_regs_print_info+0x12/0x12 [ 2598.287222][T12243] ? load_image+0x400/0x400 [ 2598.291813][T12243] ? __lock_acquire+0x7d10/0x7d10 [ 2598.296947][T12243] should_fail_ex+0x399/0x4d0 [ 2598.301732][T12243] _copy_from_user+0x2c/0x170 [ 2598.306505][T12243] ___sys_sendmsg+0x1c3/0x360 [ 2598.311300][T12243] ? __sys_sendmsg+0x290/0x290 [ 2598.316231][T12243] ? __lock_acquire+0x7d10/0x7d10 [ 2598.321432][T12243] __se_sys_sendmsg+0x1bb/0x2a0 [ 2598.326378][T12243] ? __x64_sys_sendmsg+0x80/0x80 [ 2598.331433][T12243] ? lockdep_hardirqs_on+0x94/0x140 [ 2598.336705][T12243] do_syscall_64+0x4c/0xa0 [ 2598.341169][T12243] ? clear_bhb_loop+0x60/0xb0 [ 2598.345883][T12243] ? clear_bhb_loop+0x60/0xb0 [ 2598.350618][T12243] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2598.356558][T12243] RIP: 0033:0x7f64a639aeb9 [ 2598.361023][T12243] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2598.380685][T12243] RSP: 002b:00007f64a45f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2598.389151][T12243] RAX: ffffffffffffffda RBX: 00007f64a6615fa0 RCX: 00007f64a639aeb9 [ 2598.397198][T12243] RDX: 0000000020000000 RSI: 0000200000000100 RDI: 0000000000000006 [ 2598.405248][T12243] RBP: 00007f64a45f6090 R08: 0000000000000000 R09: 0000000000000000 [ 2598.413291][T12243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2598.421313][T12243] R13: 00007f64a6616038 R14: 00007f64a6615fa0 R15: 00007fff0f939d48 [ 2598.429400][T12243] [ 2598.756096][T11962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2598.797896][T11962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2598.818645][T11962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2598.839980][T11962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2598.881932][T11962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2598.932017][T11962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2598.964609][T11962] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2598.972069][T15370] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2599.013881][T15370] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2599.022164][T15370] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2599.054504][T15370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2599.082333][T11962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2599.121744][T11962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2599.158669][T11962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2599.179713][T11962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2599.197331][T11962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2599.208373][T11962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2599.241731][T11962] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2599.304439][ T9411] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2599.347841][ T9411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2599.411575][T11962] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2599.440891][T11962] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2599.462849][T11962] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2599.492276][T11962] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2599.543864][T12257] netlink: 14601 bytes leftover after parsing attributes in process `syz.4.12438'. [ 2599.582246][T12266] netlink: 16278 bytes leftover after parsing attributes in process `syz.3.12440'. [ 2599.825069][T11962] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 2599.853095][T11962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2599.873636][T12272] IPv6: Can't replace route, no match found [ 2599.889173][ T9411] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2599.925240][ T9411] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2599.969555][T26892] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2600.007275][T26892] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2600.039104][T26892] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2600.091428][ T9411] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2600.231486][T12282] netlink: 'syz.4.12444': attribute type 10 has an invalid length. [ 2600.318569][T12286] netlink: 'syz.1.12446': attribute type 21 has an invalid length. [ 2600.345111][T12290] netlink: 'syz.0.12351': attribute type 10 has an invalid length. [ 2601.130484][T12290] team0: Port device geneve1 added [ 2602.156138][T12319] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 2602.247967][T12314] netlink: 14601 bytes leftover after parsing attributes in process `syz.0.12451'. [ 2602.348433][T23697] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2602.358949][T23697] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2602.367105][T23697] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2602.376430][T23697] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2602.384367][T23697] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 2602.391642][T23697] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2602.603045][T32463] Bluetooth: hci5: command 0x0406 tx timeout [ 2602.666978][T12330] netlink: 188 bytes leftover after parsing attributes in process `syz.0.12455'. [ 2602.721567][T12330] ksmbd: Unknown IPC event: 10, ignore. [ 2602.790225][T12326] IPv6: Can't replace route, no match found [ 2602.935668][T20236] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2603.068242][T20236] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2603.197777][T12342] netlink: 'syz.1.12458': attribute type 10 has an invalid length. [ 2603.317147][T12347] netlink: 60 bytes leftover after parsing attributes in process `syz.0.12460'. [ 2603.341385][T20236] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2603.498164][T20236] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2604.453620][T32463] Bluetooth: hci3: command 0x0409 tx timeout [ 2604.766740][T12369] netlink: 'syz.3.12464': attribute type 21 has an invalid length. [ 2604.795951][T12321] chnl_net:caif_netlink_parms(): no params data found [ 2605.019687][T12378] netlink: 188 bytes leftover after parsing attributes in process `syz.3.12467'. [ 2605.040766][T12378] ksmbd: Unknown IPC event: 10, ignore. [ 2605.084132][T12383] IPv6: Can't replace route, no match found [ 2605.415854][T12390] netlink: 'syz.1.12470': attribute type 10 has an invalid length. [ 2605.822282][T12397] netlink: 132 bytes leftover after parsing attributes in process `syz.4.12472'. [ 2605.996347][T12321] bridge0: port 1(bridge_slave_0) entered blocking state [ 2606.012992][T12321] bridge0: port 1(bridge_slave_0) entered disabled state [ 2606.021430][T12321] device bridge_slave_0 entered promiscuous mode [ 2606.144765][T12321] bridge0: port 2(bridge_slave_1) entered blocking state [ 2606.152106][T12321] bridge0: port 2(bridge_slave_1) entered disabled state [ 2606.204199][T12321] device bridge_slave_1 entered promiscuous mode [ 2606.212260][T12410] netlink: 'syz.3.12476': attribute type 10 has an invalid length. [ 2606.313070][T12412] netlink: 'syz.4.12477': attribute type 10 has an invalid length. [ 2606.447378][T12321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2606.486352][T12321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2606.523054][T23697] Bluetooth: hci3: command 0x041b tx timeout [ 2606.724223][T12423] netlink: 'syz.3.12480': attribute type 2 has an invalid length. [ 2607.044099][T20236] team0: Port device wlan1 removed [ 2607.106934][T12321] team0: Port device team_slave_0 added [ 2607.137392][T12425] netlink: 'syz.3.12480': attribute type 21 has an invalid length. [ 2607.163127][T12425] netlink: 'syz.3.12480': attribute type 3 has an invalid length. [ 2607.171054][T12425] netlink: 144 bytes leftover after parsing attributes in process `syz.3.12480'. [ 2607.264390][T12423] device 0 entered promiscuous mode [ 2607.351348][T12428] IPv6: Can't replace route, no match found [ 2607.370355][T12321] team0: Port device team_slave_1 added [ 2607.605814][T20236] batman_adv: batadv0: Removing interface: wlan0 [ 2607.664306][T12321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2607.671347][T12321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2607.778179][T12321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2607.860501][T12321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2607.876979][T12321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2607.974904][T12321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2608.041268][T20236] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2608.058539][T20236] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2608.073605][T20236] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2608.102439][T20236] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2608.134118][T20236] device bridge_slave_1 left promiscuous mode [ 2608.155725][T20236] bridge0: port 2(bridge_slave_1) entered disabled state [ 2608.192850][T20236] device bridge_slave_0 left promiscuous mode [ 2608.214049][T20236] bridge0: port 1(bridge_slave_0) entered disabled state [ 2608.326977][T20236] device veth1_macvtap left promiscuous mode [ 2608.346899][T20236] device veth0_macvtap left promiscuous mode [ 2608.367172][T20236] device veth1_vlan left promiscuous mode [ 2608.388390][T20236] device veth0_vlan left promiscuous mode [ 2608.518634][T20236] team0 (unregistering): Port device geneve1 removed [ 2608.609925][T23697] Bluetooth: hci3: command 0x040f tx timeout [ 2609.020005][T20236] team0 (unregistering): Port device team_slave_1 removed [ 2609.066997][T20236] team0 (unregistering): Port device team_slave_0 removed [ 2609.642605][T12444] device syzkaller0 entered promiscuous mode [ 2609.681663][T12463] netlink: 132 bytes leftover after parsing attributes in process `syz.1.12487'. [ 2610.689031][T23697] Bluetooth: hci3: command 0x0419 tx timeout [ 2612.422406][T12467] netlink: 'syz.0.12490': attribute type 10 has an invalid length. [ 2612.593538][T12321] device hsr_slave_0 entered promiscuous mode [ 2612.642373][T12321] device hsr_slave_1 entered promiscuous mode [ 2612.667045][T12321] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2612.678724][T12321] Cannot create hsr debugfs directory [ 2612.723958][T12476] netlink: 'syz.3.12493': attribute type 10 has an invalid length. [ 2612.746555][T12479] IPv6: Can't replace route, no match found [ 2613.477973][T12508] netlink: 60 bytes leftover after parsing attributes in process `syz.4.12503'. [ 2613.597028][T12508] netlink: 60 bytes leftover after parsing attributes in process `syz.4.12503'. [ 2613.613415][T12512] netlink: 60 bytes leftover after parsing attributes in process `syz.4.12503'. [ 2613.629320][T12506] netlink: 132 bytes leftover after parsing attributes in process `syz.3.12500'. [ 2614.106967][T12321] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2614.154243][T12321] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2614.208525][T12321] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2614.248019][T12321] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2615.077295][T12528] netlink: 'syz.1.12507': attribute type 10 has an invalid length. [ 2615.256728][T12321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2615.307435][T20236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2615.327588][T20236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2615.362463][T12321] 8021q: adding VLAN 0 to HW filter on device team0 [ 2615.416527][T15370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2615.449605][T15370] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2615.483406][T15370] bridge0: port 1(bridge_slave_0) entered blocking state [ 2615.490648][T15370] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2615.529118][T15370] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2615.540861][T15370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2615.551773][T15370] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2615.599465][T15370] bridge0: port 2(bridge_slave_1) entered blocking state [ 2615.606825][T15370] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2615.646026][T15370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2615.707027][T15370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2615.730879][T15370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2615.762502][T15370] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2615.776376][T15370] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2615.792889][T12556] netlink: 'syz.1.12513': attribute type 10 has an invalid length. [ 2615.839181][T12556] team0: Port device macvlan0 added [ 2615.858534][T15370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2615.876695][T15370] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2615.888811][T15370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2615.902552][T15370] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2615.929379][T12321] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2615.962588][T12321] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2615.988689][T15370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2616.002228][T15370] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2616.299316][T12574] netlink: 188 bytes leftover after parsing attributes in process `syz.0.12517'. [ 2616.354126][T12574] ksmbd: Unknown IPC event: 10, ignore. [ 2616.868194][T12582] netlink: 'syz.0.12518': attribute type 10 has an invalid length. [ 2617.179485][T12592] IPv6: pim6reg1: Disabled Multicast RS [ 2617.372189][T12321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2617.407887][T26892] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2617.420431][T26892] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2617.494192][T15370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2617.523887][T15370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2617.583851][T15370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2617.604197][T15370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2617.637787][T12321] device veth0_vlan entered promiscuous mode [ 2617.656066][T15370] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2617.684632][T15370] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2617.742280][T12321] device veth1_vlan entered promiscuous mode [ 2617.798573][ T9405] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2617.867422][T26892] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2617.898387][T26892] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2617.936308][T12321] device veth0_macvtap entered promiscuous mode [ 2617.983552][T12321] device veth1_macvtap entered promiscuous mode [ 2618.027150][T12617] netlink: 188 bytes leftover after parsing attributes in process `syz.4.12528'. [ 2618.039442][T12321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2618.057965][T12614] netlink: 154788 bytes leftover after parsing attributes in process `syz.1.12527'. [ 2618.068555][T12617] ksmbd: Unknown IPC event: 10, ignore. [ 2618.075337][T12321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2618.088512][T12321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2618.108227][T12614] openvswitch: netlink: Message has 48126 unknown bytes. [ 2618.115815][T12321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2618.128415][T12321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2618.141341][T12321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2618.180714][T12321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2618.189887][T12618] netlink: 'syz.0.12529': attribute type 9 has an invalid length. [ 2618.206136][ T9411] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2618.217035][ T9411] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2618.226191][ T9411] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2618.235966][ T9411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2618.248777][T12321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2618.277537][T12321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2618.311350][T12321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2618.338038][T12321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2618.376315][T12321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2618.407727][T12321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2618.434006][T12321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2618.445848][ T9405] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2618.458575][ T9405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2618.473393][T12321] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2618.482549][T12321] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2618.494373][T12321] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2618.503673][T12321] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2618.617677][T12628] Q6\bY4: renamed from lo [ 2618.638535][T12321] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 2618.654451][T12321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2618.689354][T15370] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2618.716020][T15370] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2618.733833][ T9405] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2618.743762][ T9405] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2618.759197][T15370] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2618.778708][T15370] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2619.032907][T12633] netlink: 'syz.3.12532': attribute type 10 has an invalid length. [ 2619.487675][T12644] IPv6: Can't replace route, no match found [ 2619.678996][ T2492] bond0: (slave syz_tun): Releasing backup interface [ 2619.778998][T23697] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2619.788374][T23697] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2619.798370][T23697] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2619.808926][T23697] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2619.819082][T23697] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 2619.828420][T23697] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2619.963215][ T9411] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2620.030335][T12654] IPv6: pim6reg1: Disabled Multicast RS [ 2620.180112][ T9411] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2620.320204][ T9411] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2620.375104][T12670] netlink: 'syz.2.12540': attribute type 25 has an invalid length. [ 2620.386685][T12670] netlink: 'syz.2.12540': attribute type 1 has an invalid length. [ 2620.405128][T12670] bridge0: port 1(bridge_slave_0) entered learning state [ 2620.474619][ T9411] bond0: (slave netdevsim0): Releasing backup interface [ 2620.512307][ T9411] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2620.690026][T12675] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 2621.085998][T12681] netlink: 'syz.1.12543': attribute type 10 has an invalid length. [ 2621.212552][T12652] chnl_net:caif_netlink_parms(): no params data found [ 2621.755091][T12701] IPv6: Can't replace route, no match found [ 2621.773954][T12652] bridge0: port 1(bridge_slave_0) entered blocking state [ 2621.808921][T12652] bridge0: port 1(bridge_slave_0) entered disabled state [ 2621.830561][T12652] device bridge_slave_0 entered promiscuous mode [ 2621.883082][T32463] Bluetooth: hci2: command 0x0409 tx timeout [ 2621.994196][T12652] bridge0: port 2(bridge_slave_1) entered blocking state [ 2622.001397][T12652] bridge0: port 2(bridge_slave_1) entered disabled state [ 2622.050704][T12652] device bridge_slave_1 entered promiscuous mode [ 2623.973007][T32463] Bluetooth: hci2: command 0x041b tx timeout [ 2624.906521][T12716] netlink: 'syz.2.12552': attribute type 10 has an invalid length. [ 2624.980858][T12716] team0: Port device macvlan0 added [ 2625.009694][T12652] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2625.165265][T12652] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2625.315980][T12652] team0: Port device team_slave_0 added [ 2625.368014][T12739] netlink: 'syz.0.12558': attribute type 10 has an invalid length. [ 2625.630767][T12652] team0: Port device team_slave_1 added [ 2625.650013][T12745] netlink: 60 bytes leftover after parsing attributes in process `syz.3.12557'. [ 2625.688518][T12748] IPv6: Can't replace route, no match found [ 2625.819674][T12652] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2625.886945][T12652] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2625.991732][T12652] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2626.048463][T32463] Bluetooth: hci2: command 0x040f tx timeout [ 2626.172651][T12652] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2626.193210][T12652] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2626.311522][T12652] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2626.555904][ T9411] bond0: (slave wlan1): Releasing backup interface [ 2626.620987][T12774] netlink: 'syz.0.12567': attribute type 10 has an invalid length. [ 2626.676514][T12774] bond0: (slave bond_slave_0): Releasing backup interface [ 2626.879290][T12652] device hsr_slave_0 entered promiscuous mode [ 2626.899976][T12652] device hsr_slave_1 entered promiscuous mode [ 2626.927407][T12652] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2626.957526][T12652] Cannot create hsr debugfs directory [ 2627.384718][ T9411] device hsr_slave_0 left promiscuous mode [ 2627.398763][ T9411] device hsr_slave_1 left promiscuous mode [ 2627.431622][ T9411] device bridge_slave_1 left promiscuous mode [ 2627.454282][ T9411] bridge0: port 2(bridge_slave_1) entered disabled state [ 2627.472472][ T9411] device bridge_slave_0 left promiscuous mode [ 2627.479112][ T9411] bridge0: port 1(bridge_slave_0) entered disabled state [ 2627.541134][ T9411] device veth1_macvtap left promiscuous mode [ 2627.706553][T12803] netlink: 188 bytes leftover after parsing attributes in process `syz.3.12575'. [ 2627.726782][T12803] ksmbd: Unknown IPC event: 10, ignore. [ 2627.805179][ T9411] team0 (unregistering): Port device geneve1 removed [ 2628.123092][T32463] Bluetooth: hci2: command 0x0419 tx timeout [ 2628.345154][ T9411] team0 (unregistering): Port device team_slave_1 removed [ 2628.396324][ T9411] team0 (unregistering): Port device team_slave_0 removed [ 2628.447670][ T9411] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2628.501618][ T9411] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2628.781247][ T9411] team0 (unregistering): Port device bridge0 removed [ 2628.818505][ T9411] bond0 (unregistering): Released all slaves [ 2628.932976][T12791] netlink: 'syz.1.12572': attribute type 10 has an invalid length. [ 2628.947091][T12797] IPv6: Can't replace route, no match found [ 2629.291172][T12816] netlink: 'syz.1.12588': attribute type 10 has an invalid length. [ 2630.215122][T12652] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2630.237817][T12652] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2630.261243][T12652] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2630.281640][T12652] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2630.604087][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2630.953184][T12652] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2630.998343][T26892] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2631.013832][T26892] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2631.210534][T12652] 8021q: adding VLAN 0 to HW filter on device team0 [ 2631.313659][ T9411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2631.336551][ T9411] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2631.390276][ T9411] bridge0: port 1(bridge_slave_0) entered blocking state [ 2631.397558][ T9411] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2631.426369][ T9411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2631.476363][ T9411] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2631.489771][ T9411] bridge0: port 2(bridge_slave_1) entered blocking state [ 2631.497011][ T9411] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2631.516402][ T9411] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2631.529535][T12872] netlink: 'syz.1.12592': attribute type 10 has an invalid length. [ 2631.542018][T12874] netlink: 'syz.3.12593': attribute type 10 has an invalid length. [ 2631.561063][T12874] bond0: (slave bond_slave_0): Releasing backup interface [ 2631.611029][T12880] netlink: 188 bytes leftover after parsing attributes in process `syz.2.12595'. [ 2631.641387][T12880] ksmbd: Unknown IPC event: 10, ignore. [ 2631.773440][ T9411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2631.833518][T15370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2631.913599][T15370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2631.936240][T15370] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2631.946107][T15370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2631.959456][T15370] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2631.969435][T15370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2631.992224][T15370] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2632.016636][T12652] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2632.037873][T12652] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2632.076756][T15370] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2632.104843][T15370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2632.140625][T15370] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2632.336960][T12898] FAULT_INJECTION: forcing a failure. [ 2632.336960][T12898] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2632.360487][T12898] CPU: 0 PID: 12898 Comm: syz.1.12601 Not tainted syzkaller #0 [ 2632.368138][T12898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2632.378245][T12898] Call Trace: [ 2632.381593][T12898] [ 2632.384567][T12898] dump_stack_lvl+0x188/0x24e [ 2632.389338][T12898] ? show_regs_print_info+0x12/0x12 [ 2632.394608][T12898] ? load_image+0x400/0x400 [ 2632.399167][T12898] ? __lock_acquire+0x7d10/0x7d10 [ 2632.404256][T12898] should_fail_ex+0x399/0x4d0 [ 2632.409001][T12898] _copy_from_user+0x2c/0x170 [ 2632.413727][T12898] __sys_bpf+0x2ea/0x780 [ 2632.418005][T12898] ? bpf_link_show_fdinfo+0x380/0x380 [ 2632.423420][T12898] ? lock_chain_count+0x20/0x20 [ 2632.428337][T12898] __x64_sys_bpf+0x78/0x90 [ 2632.432799][T12898] do_syscall_64+0x4c/0xa0 [ 2632.437257][T12898] ? clear_bhb_loop+0x60/0xb0 [ 2632.442079][T12898] ? clear_bhb_loop+0x60/0xb0 [ 2632.446787][T12898] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2632.452711][T12898] RIP: 0033:0x7f64a639aeb9 [ 2632.457159][T12898] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2632.476793][T12898] RSP: 002b:00007f64a45d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2632.485265][T12898] RAX: ffffffffffffffda RBX: 00007f64a6616090 RCX: 00007f64a639aeb9 [ 2632.493265][T12898] RDX: 0000000000000094 RSI: 0000200000000340 RDI: 0000000000000005 [ 2632.501268][T12898] RBP: 00007f64a45d5090 R08: 0000000000000000 R09: 0000000000000000 [ 2632.509289][T12898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2632.517297][T12898] R13: 00007f64a6616128 R14: 00007f64a6616090 R15: 00007fff0f939d48 [ 2632.525317][T12898] [ 2633.085909][T12916] netlink: 'syz.2.12606': attribute type 10 has an invalid length. [ 2633.293673][T15370] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2633.301203][T15370] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2633.335730][T12921] netlink: 188 bytes leftover after parsing attributes in process `syz.0.12607'. [ 2633.365493][T12921] ksmbd: Unknown IPC event: 10, ignore. [ 2633.392315][T12652] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2633.500183][T12926] netlink: 'syz.3.12608': attribute type 29 has an invalid length. [ 2633.520891][T12926] netlink: 'syz.3.12608': attribute type 29 has an invalid length. [ 2633.621855][T12929] netlink: 'syz.1.12609': attribute type 10 has an invalid length. [ 2633.678525][T12929] bond0: (slave bond_slave_0): Releasing backup interface [ 2634.954758][T26892] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2634.974061][T26892] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2635.039547][T26892] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2635.058696][T26892] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2635.096054][T12652] device veth0_vlan entered promiscuous mode [ 2635.112098][T26892] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2635.120733][T26892] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2635.155318][T12652] device veth1_vlan entered promiscuous mode [ 2635.260594][T26892] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2635.278767][T26892] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2635.297751][T26892] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2635.318134][T26892] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2635.338940][T12652] device veth0_macvtap entered promiscuous mode [ 2637.425438][T26892] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2637.436479][T12652] device veth1_macvtap entered promiscuous mode [ 2637.508497][T12652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2637.583793][T12652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2637.602678][T12652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2637.626453][T12652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2637.667090][T12652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2637.677988][T12652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2637.702919][T12652] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2637.715756][T12652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2637.757976][T12652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2637.801821][T12652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2637.852958][T12652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2637.863395][T12652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2637.890335][T12652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2637.916567][T12652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2637.928734][T12652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2637.949029][T12652] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2637.968306][T12996] netlink: 'syz.0.12619': attribute type 10 has an invalid length. [ 2637.987034][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2638.006458][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2638.046426][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2638.084045][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2638.253412][T12652] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2638.262209][T12652] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2638.271712][T12652] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2638.284602][T12652] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2638.453174][T32463] Bluetooth: hci1: command 0x0406 tx timeout [ 2638.483823][T12652] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 2638.498347][T12652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2638.532023][ T9411] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2638.572908][ T9411] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2638.647607][T25376] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2638.661884][T13014] netlink: 'syz.1.12624': attribute type 10 has an invalid length. [ 2638.687135][T13014] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 2638.851255][T13015] netlink: 'syz.0.12631': attribute type 10 has an invalid length. [ 2638.877592][T13017] netlink: 'syz.2.12622': attribute type 10 has an invalid length. [ 2638.925527][T13017] bond0: (slave bond_slave_0): Releasing backup interface [ 2639.037955][T13022] netlink: 152 bytes leftover after parsing attributes in process `syz.1.12625'. [ 2639.097347][T20236] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2639.127152][T20236] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2639.274163][T20236] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2639.841950][T13043] netlink: 188 bytes leftover after parsing attributes in process `syz.2.12630'. [ 2639.882702][T13043] ksmbd: Unknown IPC event: 10, ignore. [ 2640.267995][T13056] netlink: 'syz.4.12636': attribute type 10 has an invalid length. [ 2641.304918][T13081] netlink: 15487 bytes leftover after parsing attributes in process `syz.0.12642'. [ 2641.724845][T13094] netlink: 188 bytes leftover after parsing attributes in process `syz.4.12647'. [ 2641.739740][T13092] netlink: 'syz.3.12646': attribute type 1 has an invalid length. [ 2641.765511][T13094] ksmbd: Unknown IPC event: 10, ignore. [ 2641.782810][T13092] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2641.898045][T13100] FAULT_INJECTION: forcing a failure. [ 2641.898045][T13100] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2641.938927][T13100] CPU: 1 PID: 13100 Comm: syz.0.12649 Not tainted syzkaller #0 [ 2641.946571][T13100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2641.956677][T13100] Call Trace: [ 2641.959998][T13100] [ 2641.962974][T13100] dump_stack_lvl+0x188/0x24e [ 2641.967727][T13100] ? show_regs_print_info+0x12/0x12 [ 2641.972996][T13100] ? load_image+0x400/0x400 [ 2641.977561][T13100] ? __lock_acquire+0x7d10/0x7d10 [ 2641.982664][T13100] should_fail_ex+0x399/0x4d0 [ 2641.987410][T13100] _copy_from_user+0x2c/0x170 [ 2641.992167][T13100] __sys_bpf+0x2ea/0x780 [ 2641.996483][T13100] ? bpf_link_show_fdinfo+0x380/0x380 [ 2642.001932][T13100] ? lock_chain_count+0x20/0x20 [ 2642.006852][T13100] __x64_sys_bpf+0x78/0x90 [ 2642.011348][T13100] do_syscall_64+0x4c/0xa0 [ 2642.015822][T13100] ? clear_bhb_loop+0x60/0xb0 [ 2642.020570][T13100] ? clear_bhb_loop+0x60/0xb0 [ 2642.025302][T13100] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2642.031246][T13100] RIP: 0033:0x7ff28559aeb9 [ 2642.035706][T13100] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2642.055370][T13100] RSP: 002b:00007ff286391028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2642.063842][T13100] RAX: ffffffffffffffda RBX: 00007ff285815fa0 RCX: 00007ff28559aeb9 [ 2642.071867][T13100] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 2642.079884][T13100] RBP: 00007ff286391090 R08: 0000000000000000 R09: 0000000000000000 [ 2642.087896][T13100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2642.095907][T13100] R13: 00007ff285816038 R14: 00007ff285815fa0 R15: 00007ffe22299e28 [ 2642.104050][T13100] [ 2642.339535][T13105] netlink: 'syz.4.12650': attribute type 10 has an invalid length. [ 2646.266467][T13135] netlink: 188 bytes leftover after parsing attributes in process `syz.3.12660'. [ 2646.309792][T13135] ksmbd: Unknown IPC event: 10, ignore. [ 2646.454758][T13148] netlink: 'syz.0.12664': attribute type 4 has an invalid length. [ 2646.672392][T13151] netlink: 'syz.4.12665': attribute type 10 has an invalid length. [ 2649.818279][T13167] netlink: 132 bytes leftover after parsing attributes in process `syz.1.12671'. [ 2649.919379][T13167] netlink: 'syz.1.12671': attribute type 10 has an invalid length. [ 2649.996380][T13167] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 2650.112578][T15370] ------------[ cut here ]------------ [ 2650.118829][T15370] intf 08:02:11:00:00:01 [link=0]: bad STA 06:00:00:00:00:37 bandwidth 20 MHz (0) > channel config 1 MHz (8) [ 2650.211458][T15370] WARNING: CPU: 0 PID: 15370 at drivers/net/wireless/mac80211_hwsim.c:2438 mac80211_hwsim_sta_rc_update+0x541/0x6e0 [ 2650.224123][T15370] Modules linked in: [ 2650.228150][T15370] CPU: 0 PID: 15370 Comm: kworker/u4:13 Not tainted syzkaller #0 [ 2650.236003][T15370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2650.246173][T15370] Workqueue: phy338 ieee80211_iface_work [ 2650.251955][T15370] RIP: 0010:mac80211_hwsim_sta_rc_update+0x541/0x6e0 [ 2650.258769][T15370] Code: e8 c4 0c 00 00 48 c7 c7 80 00 28 8b 48 8b 74 24 28 89 ea 48 8b 4c 24 10 41 89 d8 45 89 e1 41 57 50 e8 f3 1c 52 fb 48 83 c4 10 <0f> 0b e9 8b fe ff ff e8 93 aa 86 fb 0f 0b e9 7f fe ff ff e8 87 aa [ 2650.278598][T15370] RSP: 0018:ffffc900047877f8 EFLAGS: 00010282 [ 2650.284900][T15370] RAX: dc5abb0ab01ba400 RBX: 0000000000000014 RCX: ffff88801a3a0000 [ 2650.293058][T15370] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 2650.301093][T15370] RBP: 0000000000000000 R08: ffffc90004787467 R09: 1ffff920008f0e8c [ 2650.309849][T15370] R10: dffffc0000000000 R11: fffff520008f0e8d R12: 0000000000000000 [ 2650.318082][T15370] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000008 [ 2650.326157][T15370] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 2650.335184][T15370] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2650.341843][T15370] CR2: 0000000000000004 CR3: 000000002f798000 CR4: 00000000003506f0 [ 2650.349926][T15370] DR0: 0000000000000000 DR1: 0000200000000300 DR2: 0000000000000000 [ 2650.357999][T15370] DR3: 000000000000002a DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 2650.366092][T15370] Call Trace: [ 2650.369431][T15370] [ 2650.372424][T15370] ? mac80211_hwsim_sta_rc_update+0x53/0x6e0 [ 2650.378564][T15370] mac80211_hwsim_sta_add+0x92/0x280 [ 2650.383954][T15370] ? mac80211_hwsim_sw_scan_complete+0xd0/0xd0 [ 2650.390187][T15370] drv_sta_state+0x62a/0x1280 [ 2650.395014][T15370] sta_info_insert_rcu+0xc1e/0x1550 [ 2650.400301][T15370] ? sta_info_insert_rcu+0x1b0/0x1550 [ 2650.405811][T15370] ieee80211_ibss_finish_sta+0x286/0x360 [ 2650.411553][T15370] ? ieee80211_ibss_work+0x10f0/0x10f0 [ 2650.417141][T15370] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2650.423237][T15370] ieee80211_ibss_work+0x23c/0x10f0 [ 2650.428516][T15370] ? lockdep_hardirqs_on+0x94/0x140 [ 2650.433863][T15370] ? kcov_remote_stop+0x174/0x6e0 [ 2650.438957][T15370] ? ieee80211_ibss_rx_queued_mgmt+0x2cd0/0x2cd0 [ 2650.445412][T15370] ? skb_dequeue+0x120/0x150 [ 2650.450078][T15370] ? ieee80211_iface_work+0x97c/0xc80 [ 2650.455559][T15370] ? ieee80211_iface_work+0xb98/0xc80 [ 2650.461004][T15370] ? _raw_spin_unlock_irq+0x1f/0x40 [ 2650.466316][T15370] ? process_one_work+0x7b0/0x1160 [ 2650.471489][T15370] process_one_work+0x8a2/0x1160 [ 2650.476578][T15370] ? worker_detach_from_pool+0x240/0x240 [ 2650.482400][T15370] ? _raw_spin_lock_irq+0x86/0xf0 [ 2650.487543][T15370] ? _raw_spin_lock_irq+0xb7/0xf0 [ 2650.492641][T15370] ? _raw_spin_lock_irqsave+0x100/0x100 [ 2650.498335][T15370] ? kthread_data+0x4b/0xc0 [ 2650.502950][T15370] worker_thread+0xaa2/0x1270 [ 2650.507741][T15370] kthread+0x29d/0x330 [ 2650.511904][T15370] ? worker_clr_flags+0x1a0/0x1a0 [ 2650.517039][T15370] ? kthread_blkcg+0xd0/0xd0 [ 2650.521707][T15370] ret_from_fork+0x1f/0x30 [ 2650.526262][T15370] [ 2650.529334][T15370] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 2650.536655][T15370] CPU: 0 PID: 15370 Comm: kworker/u4:13 Not tainted syzkaller #0 [ 2650.544483][T15370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2650.554598][T15370] Workqueue: phy338 ieee80211_iface_work [ 2650.560307][T15370] Call Trace: [ 2650.563624][T15370] [ 2650.566605][T15370] dump_stack_lvl+0x188/0x24e [ 2650.571341][T15370] ? memcpy+0x3c/0x60 [ 2650.575380][T15370] ? show_regs_print_info+0x12/0x12 [ 2650.580737][T15370] ? load_image+0x400/0x400 [ 2650.585320][T15370] panic+0x2e5/0x730 [ 2650.589290][T15370] ? bpf_jit_dump+0xd0/0xd0 [ 2650.593863][T15370] ? ret_from_fork+0x1f/0x30 [ 2650.598531][T15370] __warn+0x2f8/0x4f0 [ 2650.602572][T15370] ? mac80211_hwsim_sta_rc_update+0x541/0x6e0 [ 2650.608721][T15370] ? mac80211_hwsim_sta_rc_update+0x541/0x6e0 [ 2650.614849][T15370] report_bug+0x2ba/0x4f0 [ 2650.619229][T15370] ? mac80211_hwsim_sta_rc_update+0x541/0x6e0 [ 2650.625361][T15370] handle_bug+0x3a/0x70 [ 2650.629581][T15370] exc_invalid_op+0x16/0x40 [ 2650.634139][T15370] asm_exc_invalid_op+0x16/0x20 [ 2650.639035][T15370] RIP: 0010:mac80211_hwsim_sta_rc_update+0x541/0x6e0 [ 2650.645781][T15370] Code: e8 c4 0c 00 00 48 c7 c7 80 00 28 8b 48 8b 74 24 28 89 ea 48 8b 4c 24 10 41 89 d8 45 89 e1 41 57 50 e8 f3 1c 52 fb 48 83 c4 10 <0f> 0b e9 8b fe ff ff e8 93 aa 86 fb 0f 0b e9 7f fe ff ff e8 87 aa [ 2650.665444][T15370] RSP: 0018:ffffc900047877f8 EFLAGS: 00010282 [ 2650.671545][T15370] RAX: dc5abb0ab01ba400 RBX: 0000000000000014 RCX: ffff88801a3a0000 [ 2650.679544][T15370] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 2650.687543][T15370] RBP: 0000000000000000 R08: ffffc90004787467 R09: 1ffff920008f0e8c [ 2650.695626][T15370] R10: dffffc0000000000 R11: fffff520008f0e8d R12: 0000000000000000 [ 2650.703630][T15370] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000008 [ 2650.711654][T15370] ? mac80211_hwsim_sta_rc_update+0x53/0x6e0 [ 2650.717702][T15370] mac80211_hwsim_sta_add+0x92/0x280 [ 2650.723030][T15370] ? mac80211_hwsim_sw_scan_complete+0xd0/0xd0 [ 2650.729243][T15370] drv_sta_state+0x62a/0x1280 [ 2650.733962][T15370] sta_info_insert_rcu+0xc1e/0x1550 [ 2650.739204][T15370] ? sta_info_insert_rcu+0x1b0/0x1550 [ 2650.744616][T15370] ieee80211_ibss_finish_sta+0x286/0x360 [ 2650.750289][T15370] ? ieee80211_ibss_work+0x10f0/0x10f0 [ 2650.755782][T15370] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2650.761812][T15370] ieee80211_ibss_work+0x23c/0x10f0 [ 2650.767046][T15370] ? lockdep_hardirqs_on+0x94/0x140 [ 2650.772400][T15370] ? kcov_remote_stop+0x174/0x6e0 [ 2650.777465][T15370] ? ieee80211_ibss_rx_queued_mgmt+0x2cd0/0x2cd0 [ 2650.783832][T15370] ? skb_dequeue+0x120/0x150 [ 2650.788469][T15370] ? ieee80211_iface_work+0x97c/0xc80 [ 2650.793877][T15370] ? ieee80211_iface_work+0xb98/0xc80 [ 2650.799290][T15370] ? _raw_spin_unlock_irq+0x1f/0x40 [ 2650.804524][T15370] ? process_one_work+0x7b0/0x1160 [ 2650.809694][T15370] process_one_work+0x8a2/0x1160 [ 2650.814683][T15370] ? worker_detach_from_pool+0x240/0x240 [ 2650.820342][T15370] ? _raw_spin_lock_irq+0x86/0xf0 [ 2650.825404][T15370] ? _raw_spin_lock_irq+0xb7/0xf0 [ 2650.830467][T15370] ? _raw_spin_lock_irqsave+0x100/0x100 [ 2650.836055][T15370] ? kthread_data+0x4b/0xc0 [ 2650.840598][T15370] worker_thread+0xaa2/0x1270 [ 2650.845358][T15370] kthread+0x29d/0x330 [ 2650.849468][T15370] ? worker_clr_flags+0x1a0/0x1a0 [ 2650.854521][T15370] ? kthread_blkcg+0xd0/0xd0 [ 2650.859147][T15370] ret_from_fork+0x1f/0x30 [ 2650.863608][T15370] [ 2650.867243][T15370] Kernel Offset: disabled [ 2650.871668][T15370] Rebooting in 86400 seconds..