last executing test programs: 2.716627622s ago: executing program 2 (id=3130): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x0) (async) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) socket$kcm(0xa, 0x5, 0x0) (async) r3 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r3, 0x29, 0x46, 0x0, 0x0) sendmsg$kcm(r3, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x0, @local, 0x3}, 0x80, &(0x7f0000000000)=[{&(0x7f00000002c0)='\t', 0x1}], 0x1}, 0x41) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0x4, &(0x7f0000000680)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x8c}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.386978891s ago: executing program 2 (id=3134): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xe8001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'bridge0\x00', 0x2}) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000000040)=""/23) socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0x19) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="62a02a3a340977726d"], 0xa) 2.06764875s ago: executing program 2 (id=3139): r0 = socket$kcm(0x2, 0xa, 0x2) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000018000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bc8900000000000035090100000000009500000000000000b7080000000000007b9a00fe00000000b509000000000000c3aaf0fff1000000bf8620000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004608ebff76000000bf9800000000000056080000000000008500000000000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x4000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SIOCSIFHWADDR(r0, 0x8918, 0x0) 1.935756688s ago: executing program 1 (id=3142): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000780)="1800000039000517d25a80648c63940d0324fc600b003540", 0x18}], 0x1, 0x0, 0xec0, 0x6c000000}, 0x0) 1.8844538s ago: executing program 3 (id=3143): r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xeb, 0x81, 0xad, 0x3, 0x0, 0xf, 0x88000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x10001, 0x1, @perf_bp={&(0x7f0000000080), 0x1}, 0x5, 0x5, 0x1, 0xe, 0xc, 0x1, 0x200, 0x0, 0x9, 0x0, 0x6}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x1) r1 = perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x5, 0x4, 0x70, 0x7, 0x0, 0x400, 0x88008, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x200, 0x4, @perf_config_ext={0x1, 0xfff}, 0x803, 0x4, 0x2, 0x5, 0x0, 0x7, 0x8, 0x0, 0x1, 0x0, 0x2}, 0xffffffffffffffff, 0x2, r0, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="96742bc29934c439c0d343e9433e246960df6cbec0a4d37452e76fa2555c56a6c474ce1d33eb4722f0942194c4eba7b780ec185f30ebeb94f571b0e9ea0d72cb55c064c1de60f539ec9cf56b32714c01ee86fe6b994b53eb1ac5ce486aa0e556e75c6601cc4ea283e3c7d850fc5b2f940f5e90b3c31fd08a9665e1ef6438fb220e0407288366cb93d6736c9d89ed0cdf5c057f5d363e9527bd7134a610a6dcd392d2c97c5788990d97ffa226c5f7862a7eef735e0a926a1cd2dc3f92b2bbbc8949f5e362213ebe7cb3720b5c3becea6f4894417c09b43deda983f3ff3d9ce3ef5550257ee36a8b4387300e7d43bf4ab43a1e73912dc3caa523ccd579f4", 0xfd}], 0x1}, 0x800) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002880)={0xffffffffffffffff, 0xe0, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000025c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9, &(0x7f0000002600)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000002640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xdf, &(0x7f0000002680)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f00000026c0), &(0x7f0000002700), 0x8, 0x91, 0x8, 0x8, &(0x7f0000002740)}}, 0x10) sendmsg$inet(r3, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002540)=[{&(0x7f0000000300)="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", 0x1000}, {&(0x7f0000001300)="2cffb2feeaa24904b9d6b792205c2ad493f6ca750626ed2ba248febad28b5bcbe5672c6f3fd6534b69c8d8147797dd142ffc4d849be2571dcb4a8e04ca56b47e770d96d7af182557e3e40d8ce14b9a03151eb3ef59f53181a11165f333651328c864e7d20fa8b52ffc9dff30cd261c741feb2cbd90db0fab48836125f2d418b3caaac0e7342ec441edfd10c5d5983dccca98452359f3b3d12bb8c0eaf296ccd16c061d9c94b461ce3bb28054e771dc7e9c", 0xb1}, {&(0x7f00000013c0)="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", 0x1000}, {&(0x7f00000023c0)="4298f4ba4763ae87474372231354ee28a63b820f52adf6f3e01a6accd03ce023d09d8caec7a6fae52ad8e16d2da09400e78927cc733360a6c96d58446b04f9ac580eb6648135c4d76123438a67b867cae8eb22f5e32ecee55010c53030b4e9255a9c019e622ca4b3d0b6dc8a3d6ac309f28ea5c23fa289c30db967ca3634320816976ed6cdec2eb67bcb806c347dc59336f6c8b3e72ac20200ee6d13c4d1e7839a36a6756b49213bee1f8bbcbe067a1e545e81728eb155c79f6260222471d9b0d34db6e05342bf509f519a5a000abde9d63e51621ba5faa3bf8bf43007ddba", 0xdf}, {&(0x7f00000024c0)="f66811dad625629e9ceef4a515460c0f4e74b9f285fab74a4bfe9ba52af6a41dff518da005dca883c2d5b0db353d9d4ffc9b493aa9e94483c4d2914b37bc65d4636e5975999175f564e1afcca375e3a286ca6cf48dbcd5819bba922d901e7f0903439829d88f9590560754512d0494a46df09265077803654c", 0x79}], 0x5, &(0x7f00000028c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xe}}, @ip_ttl={{0x14, 0x0, 0x2, 0xd}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @broadcast, @multicast1}}}], 0x50}, 0x1) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000002ac0)=r5, 0x4) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002bc0)={0x18, 0x4, &(0x7f0000002980)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x5}, [@exit]}, &(0x7f00000029c0)='syzkaller\x00', 0x6, 0x97, &(0x7f0000002a00)=""/151, 0x41100, 0x32, '\x00', r4, 0x0, r6, 0x8, &(0x7f0000002b00)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000002b40)={0x2, 0x1, 0x5, 0x9}, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002b80), 0x10, 0xb29}, 0x94) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000002c80)={0x0, 0xfff, 0x10}, 0xc) bpf$PROG_BIND_MAP(0x23, &(0x7f0000002cc0)={r7, r8}, 0xc) write$cgroup_type(0xffffffffffffffff, &(0x7f0000002d00), 0x9) r9 = socket$kcm(0x29, 0x1, 0x0) recvmsg$kcm(r9, &(0x7f0000003080)={&(0x7f0000002d40)=@tipc=@name, 0x80, &(0x7f0000002f80)=[{&(0x7f0000002dc0)=""/136, 0x88}, {&(0x7f0000002e80)=""/20, 0x14}, {&(0x7f0000002ec0)=""/185, 0xb9}], 0x3, &(0x7f0000002fc0)=""/145, 0x91}, 0x44) r10 = openat$tun(0xffffffffffffff9c, &(0x7f00000030c0), 0x349402, 0x0) ioctl$TUNSETVNETLE(r10, 0x400454dc, &(0x7f0000003100)=0x1) r11 = perf_event_open(&(0x7f00000032c0)={0x4, 0x80, 0x6, 0x5, 0x4, 0x7f, 0x0, 0x9, 0x8, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0xc0, 0x0, @perf_config_ext={0x1, 0x80000001}, 0x1040, 0x92, 0x8, 0x0, 0x6, 0x2, 0x6, 0x0, 0x1, 0x0, 0x2}, 0x0, 0xd, 0xffffffffffffffff, 0x3) sendmsg$unix(r2, &(0x7f00000033c0)={&(0x7f0000003140)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003280)=[{&(0x7f00000031c0)="44cb77f7ff2a0a7238f7359e0fcfc60c353666c47d6aad3cbfc8dc8c2681920bf92c3abbdf48f82f", 0x28}, {&(0x7f0000003200)="433bd9de7b0cdf5ad0596957b50842cd7db4fa29cdb3adb09ebf1f9d34f7b346325fc0ba69d23dfb92241064c63cdefe81d753a21c5638cd0727ea3ec5da8f019bfcdf784d3de916ff45727e29", 0x4d}], 0x2, &(0x7f0000003340)=[@rights={{0x28, 0x1, 0x1, [r9, r10, r11, r3, r0, r10]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xee01}}}, @rights={{0x14, 0x1, 0x1, [r2]}}], 0x60, 0x4}, 0x4001) mkdir(&(0x7f0000003400)='./file0\x00', 0x8) recvmsg(r9, &(0x7f0000004780)={&(0x7f0000003440)=@l2, 0x80, &(0x7f0000004700)=[{&(0x7f00000034c0)=""/4096, 0x1000}, {&(0x7f00000044c0)=""/247, 0xf7}, {&(0x7f00000045c0)=""/174, 0xae}, {&(0x7f0000004680)=""/85, 0x55}], 0x4, &(0x7f0000004740)}, 0x2000) recvmsg$unix(r2, &(0x7f0000005980)={&(0x7f00000047c0), 0x6e, &(0x7f0000005940)=[{&(0x7f0000004840)=""/198, 0xc6}, {&(0x7f0000004940)=""/4096, 0x1000}], 0x2}, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000005bc0)={0x13, 0x17, &(0x7f00000059c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfff}, [@jmp={0x5, 0x0, 0xb, 0xb, 0x2, 0x100, 0xfffffffffffffffc}, @tail_call={{0x18, 0x2, 0x1, 0x0, r8}}, @map_val={0x18, 0x6, 0x2, 0x0, r8, 0x0, 0x0, 0x0, 0x3}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x5}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xb}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @alu={0x7, 0x1, 0x0, 0x4, 0x1, 0x30, 0xfffffffffffffff0}]}, &(0x7f0000005a80)='GPL\x00', 0x1, 0x6, &(0x7f0000005ac0)=""/6, 0x40f00, 0x44, '\x00', r4, @fallback=0x8, 0xffffffffffffffff, 0x8, &(0x7f0000005b00)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000005b40)={0x3, 0xa, 0x3, 0x569}, 0x10, 0xffffffffffffffff, r7, 0x0, &(0x7f0000005b80)=[r8, r1, r1, r8, r8, r7, r8, r8, r8, r8], 0x0, 0x10, 0x3}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(r9, 0x89e0, &(0x7f0000005c80)={r9, r12}) socket$kcm(0x29, 0x7, 0x0) socket$kcm(0x29, 0x2, 0x0) r13 = getpid() perf_event_open(&(0x7f0000005cc0)={0x3, 0x80, 0x4, 0x81, 0x0, 0x8a, 0x0, 0x2, 0x10, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x5, 0x2, @perf_config_ext={0x5, 0x4}, 0x10008, 0xffff, 0x4, 0x8, 0x8000000000000000, 0xe, 0x4, 0x0, 0x8001, 0x0, 0x1}, r13, 0x5, r0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r11, 0x2401, 0x848a) sendmsg$inet(r9, &(0x7f0000006000)={&(0x7f0000005d40)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000005e40)=[{&(0x7f0000005d80)="3e564951db60fe47d5dcf078a6a0cf9e5382e9238110e170320b012630b3fa4ffe38fa5f2d39de9d8e9b8789fe861e0c9bf25abdb2f79493b98d00107d400df778e0d21c3f3ec5daeda586d2c779d0a556e19d83a18e726d2af149d8c5d8eda160192ab9cbb7fcf5", 0x68}, {&(0x7f0000005e00)="9f15720f8559c75c17123bc41d819d283a52fcfc334453d9595e9f46f2d06e88afc87225d5692654a5f118103ed37b66f60d", 0x32}], 0x2, &(0x7f0000005e80)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x100}}, @ip_retopts={{0xb0, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x4c, 0x9b, 0x3, 0xc, [{@loopback, 0x4}, {@loopback, 0x7fff}, {@broadcast, 0x200}, {@local, 0x7}, {@broadcast, 0xa}, {@multicast1, 0xfffffff7}, {@empty, 0xd6}, {@empty, 0x7fff}, {@dev={0xac, 0x14, 0x14, 0x35}, 0x7}]}, @timestamp_addr={0x44, 0x3c, 0x38, 0x1, 0x9, [{@private=0xa010101, 0x54d}, {@loopback, 0xe}, {@rand_addr=0x64010102, 0x5}, {@multicast2, 0x6}, {@multicast1, 0x6}, {@rand_addr=0x64010101, 0x9}, {@multicast2}]}, @ssrr={0x89, 0xf, 0xb9, [@multicast2, @multicast1, @empty]}, @timestamp={0x44, 0x8, 0x7f, 0x0, 0x1, [0x7ff]}]}}}, @ip_retopts={{0x6c, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x4, 0x93}, @ssrr={0x89, 0xf, 0x65, [@multicast1, @broadcast, @rand_addr=0x64010100]}, @ssrr={0x89, 0x1b, 0x2c, [@rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @dev={0xac, 0x14, 0x14, 0x29}, @broadcast, @dev={0xac, 0x14, 0x14, 0x3f}]}, @end, @end, @lsrr={0x83, 0x13, 0x68, [@loopback, @private=0xa010101, @broadcast, @local]}, @ssrr={0x89, 0x17, 0xac, [@multicast1, @remote, @private=0xa010100, @multicast1, @private=0xa010101]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_ttl={{0x14, 0x0, 0x2, 0x558}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}], 0x180}, 0x4000000) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000006040)) ioctl$TUNGETVNETLE(r10, 0x800454dd, &(0x7f0000006080)) 1.861797432s ago: executing program 0 (id=3144): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000180)="5c00000013006bec9e3be35c6e17aa31076b876c1d0000007ea60864160af36507000cc00400020208001a00ffa1000000080000eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000200ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x400c800) 1.71950692s ago: executing program 3 (id=3145): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x64b2074d57f2d605, 0x400000, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdir(0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) close(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x1000005, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000940)="d800000018007b7be00212ba0d0505040a003f00000f040b067c55a1bc0009001e0006990300000015", 0x29}], 0x1, 0x0, 0x0, 0x2663}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) r3 = socket$kcm(0xa, 0x6, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x5411, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="0200"}) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000002940)="2000000020008107090f9becdb4cb96b0200000000fbff010000000000000000", 0x20}], 0x1, 0x0, 0x0, 0x81000000}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 1.71874855s ago: executing program 1 (id=3146): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0x4}, 0x10, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c40)={0x3, 0x3, &(0x7f0000000c00)=ANY=[@ANYRESOCT=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) socketpair(0x28, 0xa, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) socket$kcm(0xa, 0x1, 0x106) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b000000000000000000000005000000000000", @ANYRES32, @ANYBLOB="07f94f00000000000000000900", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000010000000100"/24], 0x50) socketpair(0x1, 0x5, 0x3, &(0x7f0000000240)) socket$kcm(0xa, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) r5 = socket$kcm(0x21, 0x2, 0xa) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x74}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x21}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="100000000601000010010000ebfb0000"], 0x20}, 0xfc00) sendmsg$kcm(r4, &(0x7f0000000bc0)={&(0x7f0000000840)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x80, &(0x7f0000000b40)=[{&(0x7f00000008c0)="a5324eb4577ba1c89ada7e18d2297c23522160516fb2381c4a69290327f0a41a0e33d0f3d107fb3906d58ec9e0b7edae553e", 0x32}, {&(0x7f0000000900)}, {&(0x7f0000000940)="db3483192dd8d46ac5b0b4a782402709ad075bf424d51c79ef944f25d6774cac5ff9860bce6bbe4f450f82f7a26f4fe55e29e9", 0x33}, {&(0x7f00000009c0)="d5775a785fcce75ff7e1efa813ce0f677b72435f58ca784b24015da903b5824c4f8e1b738e59a8fc58e725632ca50ad106d15704be05602f1003703e361d72185e1a4f9f4b0357fb316d0ed4af416673601cccf690cbd20fd7d760fd8f0d5cb46e0f9c215b54d2f6a7be1b23821e11", 0x6f}, {&(0x7f0000000a40)="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", 0xfe}], 0x5, &(0x7f0000004000)=[{0x38, 0x107, 0x9, "92fea6a15c06c31ba7a1e5ec8dbeefed2331434a3b12f5b98537de9c135bc15b983a"}, {0xf0, 0x112, 0xb707, "74291004e5562a3c0005b0d27cd6ff4eb584b6f34078ff0953d89dc6a3b4d7e3d7f305bf3a47f5fb224d5449a4e926917fa37cfa4e67a1ea3034c2ff46d37e86fc1b282917952ce7ca9bb95d2287f7b3aac699df0db0f9b57223a0917040134882642212a4715a221f956a3b492c7072b14c9da462721e901b4c001984dee75ac6e4354d199cb9cc23161f42ede3e04bd6cf141d071f53ecfa08cdaef469aa595bfd60b474a3035978fca24c2f744a539a65346c2be37525e0a9224ebb33797c0b02cd1f8ca6d23d08a8a576bb8b065ae776171dc237640477f961c5c87c"}, {0x1010, 0x104, 0x0, "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"}, {0x1010, 0x116, 0x9, "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"}], 0x2148}, 0x8850) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x64, 0x64, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x1, 0x7}}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x1, 0x3}}, @int={0xa, 0x0, 0x0, 0x1, 0x0, 0x37, 0x0, 0x61, 0x2}, @fwd={0x7}, @typedef={0x4, 0x0, 0x0, 0x8, 0x3}, @typedef={0x6, 0x0, 0x0, 0x8, 0x4}]}}, 0x0, 0x7e}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r2, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000300), 0x0, 0xd9, &(0x7f00000003c0)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0xbe, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000004000000000000", @ANYRES32=0x1, @ANYBLOB='\x00\b\x00'/20, @ANYRES32=r7, @ANYRES32=r6, @ANYBLOB="02000000020000000400000000000000000080000000000000000001"], 0x50) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x891a, &(0x7f0000000000)={'wg1\x00', @random="0200e97fffff"}) close(0xffffffffffffffff) socket$kcm(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) 1.661579974s ago: executing program 0 (id=3147): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0x8}, 0x10c00, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5}, 0x0, 0x800, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x4, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce8100036c00fc08000000000200875a65969ff57b0000000000000000ff00000000ac1414aa"], 0xfdef) 1.315110984s ago: executing program 0 (id=3148): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x20) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r0}, 0xc) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000001304000fffff5f5f"], 0x0, 0x28, 0x0, 0x1}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000880)={r1, 0x20, &(0x7f0000000840)={&(0x7f0000002980)=""/4096, 0x1000, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r2 = socket$kcm(0x2, 0x3, 0x2) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f0000000100), 0x4) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000ac0)="4c000000140097f87059ae08060c040002ff0f020000000000001a350182fa73a69d35a21429b17cd02941601d60ffc0cca84708f7abca1b4e", 0x39}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r4, 0x84, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_lsm={0x3, 0x5, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="040000000000000f7910a2000019cc000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0xf}, 0x10}, 0x94) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.263939537s ago: executing program 3 (id=3149): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x18, 0x3, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x3, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000180)='syzkaller\x00', 0x1, 0x99, &(0x7f0000000240)=""/153}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r0}, 0x8) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xffdd) close(0xffffffffffffffff) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000000000f195"], 0x0}, 0x94) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000080)="63b0328e46002e92e40ccbbd6865", 0x0, 0x8002, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000001c0)=@base={0x21, 0x16, 0xb3, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x800000}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1f, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xd55}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @ldst={0x1, 0x3, 0x6, 0x7, 0x9, 0x20}, @call={0x85, 0x0, 0x0, 0xd1}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) 1.187626071s ago: executing program 1 (id=3150): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) r0 = socket$kcm(0x10, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001280)="16", 0x1}], 0x1}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="1400000037000b63717a3c4a01d8b45b0808aa78", 0x14}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x46, 0x0, &(0x7f0000000000)='\x00', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4) close(r0) 973.306693ms ago: executing program 1 (id=3151): r0 = socket$kcm(0x2, 0x200000000000006, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x7, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x3, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x10, 0x4b}}, &(0x7f0000000080)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x48) socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0xfffffffffffffffd}}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000080), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x10, 0x2, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = getpid() perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x5, 0x7, 0x0, 0xf1, 0x0, 0x80000001, 0x4400, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, @perf_config_ext={0x1, 0x7}, 0x88, 0x2, 0x9, 0x6, 0x9, 0x20000000, 0x1ff, 0x0, 0x7, 0x0, 0x6}, r2, 0x1, 0xffffffffffffffff, 0x0) openat$cgroup_devices(r1, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe}, 0x94) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x2, 0x6, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) 956.427024ms ago: executing program 3 (id=3152): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="c00e020030000b02d25a806f8c2d94f90324fc602f1a08000a740100053582c137153e370248018000f01700d1bd", 0x2e}, {&(0x7f00000000c0)="0fbabd6730bc", 0x6}], 0x2, 0x0, 0x0, 0x4000}, 0x0) 879.796189ms ago: executing program 0 (id=3153): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000004000000080000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/14, @ANYRES32=0x0, @ANYRES32], 0x48) r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r0, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="2c000000000040000000000007000000441805"], 0x30}, 0x40880) 792.075174ms ago: executing program 3 (id=3154): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0xfc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x4400, 0x4, 0x3, 0xe, 0x9a, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000980)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='&'], 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f0000000000)=@framed={{0x3e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x43}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) sendmsg$inet(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)="3f4332b356699e53f66a5c5adc6c1190fb", 0x11}, {&(0x7f0000001780)="fac37e37c8a366896854a0b4f1159c647413b26fc6b1100d7bdd35735c581a320a453c5fd1368213097cc948ecb9d6df2c3e151c380890cf79bb16061c0ffde522e692c1da43288308b2aaf866a2ebe170ffe49917f5d1f8b1d443a7fc127b7213c6131473ac546fa407580622e5e622435a05d799d0e040b20f0db267c658d94b008077788e80ab9d1cc923da409072c382e6a211e209e6fe5631e95c4af9c6ae594a4f255d7b420ed92834f679df4b2dbc052991d59842048b6a5a09fece0b9c1367470b300345addc5e4260d457642bfe01b3a4caf078132ac36a873db3ae11bfce75b212172742e79f678fdf0519c65b173784cf42ff58787b28ae3945331b8520f64246a992a2164b1c78ea17e27b2f40b04b1221f788bb9255be543070f386e098dfaa64342c376162d8ade5540a29f460f71a9f291ac8a68dbdf5a62375739ebb12c3f52a4c8426af40a217d8fbbbc4b68ba1095abb0dccd80abf1932dbb9d1b490063916bf88045c501bc107d8ec2d88bec68dc5fe67891a8283ca0ef5ca97499aa96c5298e9e8f6d6d138726f5ef5405042a3ca7415439ea1440a27f455ef33a9fdfc0783b4ab77bafce57a48693fb138b3faa068f8a7de9f3cc47bf52913dc77f6cc5c13321eb770298464f24c0478d6bf2ad68fb34f0a234b239d139743afb3f25fbcdc8244d095666c5f38f20cc3c9f88f66d9d83685964639e82b1a33d0555f7c59d90a231eb12e8cabd49b4a79061dbf3bc9edade7a5d6f385a3ca69d8883d53e8a200279dd6ac24417f0f128a49b0d0734bda231e318fe04a40440edd494551b054eb50b0c9df26846ba5fcf9f5c800e89a3264dc765b56129c7af28d5af22b71af5cc1beeda6238e458e289865a013b5f3f5fb60b46a4dcc4c144bffbf40da9741c8af75d35963f74c0ae6cf522b78e50dafef0505d3b65a58011fcf8478c5ac7d1e0daa418d257a27d9ee07297af5addcc65ba889356ff9405b7eb35e8c229ea8c0ffc9c3855e07d6fa00adad58377e6b20e5857dc802d06472c47c06566ac7f359d72a4bb4bde620f9395591bdd95e120e6ba01b8e2d1ab882423221443a9d3f010c2dfe769167a43043c5a5eda180e443642d1c7f3929bf3be356aa0a636d1728300ebbfc3a1e83a47e0da378b66612666baedb8a5a36014d85c49d60d8135aea42b2fd37a8a6a5577b93ad8c44aa29cf14feea0f1241098b9c3e409f5ba2ffe64eddc68e3ed142dd2b3e9f7be9b42d41b17f131d17171426270842c9d43fec5457d40e9abf58f6407542195e6af45fe8566c6b7a7dd86aebc6f9924856c46a345f2fa71cacb2161db8ab718dd281b94af717695bc00134f88d7f0d6290b535e023acc44a3d48e56de43c79eb51210631da814d8e9354d16d439b5719aad0675316bb56b63a722e5ab214bfa921dfdd37f8786f56dcb23c102de2528dc55c12be85259d00087584f7347ae51be5a296e6dfac69c3f28690b80dbbbb7149b4b302fbd556a1e42b75c3b3b915d4e1f32067335359df9a4eb5c6543200023493e85737001547e992290d114ebd2cc6b1ec9170d9f8371fd4c1d828d0f229e51db44ceec62c77bbe6dd5305a35cffdb2590adcdf3b4ba14e19cabb5b37cf2638cb554de882b375f962626b170b9133c201a10738964eee4ff9c041ebf876a0fbee0af991f4c91fee87e66e4bcc19330f0f6cf11d58bfd2f492d08aa129d9dff81de7a08e5be8de905905d91f220201883ab3141d7161217895d306da47c548393e9b5a6aedbb085e05fb83c96c6cfffb87f56591c8f0d1193734e2a378d85559efeebe13a0594d0038b2b17565d483ba1236e660f5b0df949d102aa920608b98e6395b0a331c8cac8819066ba13f2efb4d59888799d5971489e3940ba0f7f9cd54cf7927e0717c6bb47ef1ce5f0d96147a154f7528f4362a2156c3f3293f8c906b2f9be6f4f8a9ec405049dcdbe94aaca6119790b4665a07a22c0aaafaebf6cf34dc1bb88f0efd997861bb9582c325976f32003b912866e60e4aceb4ed19126960a5cc271c00d958a571898cc4bcc14388df5ae842f5fd307741aa5255c1d362fd645add864c9ce71265847498e87512cc28ffa1b03d5a4fe2cb765d4bbf46004d802065072d66a0dcad2728602e649e37b3f2211285888f0cc26b1cede1d936aedde8600393bc028b02bfa9bc460070fe8f5034b95c69605fb19aa24b9edfe7182461a2a599855deb7b63f247e5829bfbf3e16fd31c51d9c35c52cbdd4bec25708ec54df30d8cba0a3504eff63315f790c447001d4e4ca02cb75d26e73b53574052679955398b9e69a49e6254d799b60ec92a5283242112f7d12c0593f07495dcc5cefd0ac2a91153ed679bf848fb38d5b801415688b3d8f5eda4db95b61c542cd2b211901fc18986df6faa97a974213277a35bba8e0e156627fe88af530e9c9857cbbdafbea45b05b79bd01243842c7dca339619278aa6b1cdc0cc33cf1140680a1172653626ccb25dd271ee7f8157a154b8c6b3f56d60711e991faf111a42a93155f6fa327400756b1e373620e0d8a39feb411fe6885ed305a3e9839c3e1e58af1dbc1d87ecc26628d0bca45d271a9a3c31e313c7022b20f245abc7902eb137566ecf1adb7a67c55725bf28dd47742ad6208e3ec426b3eefcd88db85b9cf5d64ee7e7696a5e7552de2cc2fb7af5659e26b36d5a34ce18be845dced2d0707fff59c35d7f0fd0b92bfe4cdd44b2fbc1ef655d58c291e732f4f7e90893f2065ff85edff1c2d2e47857e7bc03e93bca86696c57db05d639e2e04ad288ea1449df50ce6e9854647a5e65b004da61ea0fa4be3ff8701409b64687105296bc1912b8f88982c2a516c103186d63539f596670827845b2aacc1c25177102cf8b00e8f1fd7d7bc4d78d4e02d1fa9b5dcc6064a321f41998ece772fb521fbd63f90983ee3d0e6d619daccd9ab4677a4cc1f8befa474840cde977c7df8dec861c7bfa6d64aacaa149007a77eed8582ab5da2c3e567539878154a36a772a207413910213e64213362411eac6a1b6ae9694c3b8cc9b853673a143c2caae36fd807861db521d99ffd968f6ef82b9941286a5a4657c7c73d0c99669c0d9a4057eca1a2930e86c50b4a340665f4bf16809e7ef4ba9e9a7244f6eed300f73012fb51e933f3c830ae8d105bd04816493978ebd276073da48a87b10e1cc8577622f91c598cae67fdc7a8d2cf342cd1b1a33eebc5adfb741f86109cad94b58efb6f0bd48f909abbd83533489d5d26c55a304772baa690f321b79a0d93652d592b43ad0834ab0db0d0d0afdb1c947914288b2edffdfb77d35f1b87094869928537f687523be0bd349170468cab5f400348a2d606e749c0d421eb95381553e7ddae8fd7167c9c6f47ed787cb2071c3c8a3dfe24857ba3481dab7762d64460a9a49a9a75a881a2101d7253a92e29129308530d707aa34d588e5ec49dbd2ed30091ab3abe9ce4e35c316a3c2d29fe471e438aefb3b2df2f760a503327132d2148d033aee4087903ae8afcfe61c36d8479e84d5ef5c780a0e34a211319c3e6fe1d2aa1327e54d8007d0f3c9a26bc88ff19d3e93606c7f0a5bb6a86f41c7e5ff9539f010121cf7404ce6174a4730fb9dac2fd147aeacb12224d43226ffab0f8fbc0c5f35edd70005beb2ee82e9d8493d9add3408744faaf534b08fcb3cf36dc5c30de7c9990574bbf8ca262e7b3b43399d5a2b6beccbc8c3076253cb9f5a2b657210354bfb302ff97574ff4f8c352858d28c80bcd398df343a3b97a0cba1541d5936b3f5ef9fac50c3b86017c5e39ef1f2d834fe0121a75a12dffc2e7d8b60cc08f100131d5d14262f32fd90b6eb14e367a7f7f30bc69f987a74299bdd4a63f487dc5b62df6f4ecef50b46e716789554cceb2ec9e984d55b59077434f669bd7a9b023cbbc37fd4e9d560423c111b05354f648c3e35ae9af1f5744d679a6c023250db3144022a86983b34130913e5184c4ee12b6819fa0c32fa368d3b89a61e2bad1f30f0fcbd3ff05eb7ef1b07f568140110afe6b49b0e7089990b870dfaca15b3024f63aa39d875dbb49d0a4869f6a092ee181bb8456054733ab2972846149e928d011c2925c4d27ec4f5b6f0192ffdc1d7b339c316da98f8a79068f0657b8b3e7530cb8d56e3801f4738a29e7d6aabaeabbf66e3ef7f53cdf9aa28985a6a281a4657ad7334efa33d6bf70087383164dc3d7b2d837bc1a0237141b6f4484043614280e5647390668cf94bb1570dcc27bd3bac3dab37197340cfc2cd147aceafff0684d62471aef65d303cbed7e8fae6ab204313c37da4aa62cb5c8c07f3f8354e6a18381803fcd0c50c18104a3a407416997a3c7f301d7df8d037557a56c72cc9521c19a8a19a472ba9f66347b07e65ca21f5205d74b74e2500d920b7365549e6ab33d7dc022b06517d52adf2c68abba2e1a5afd01944242c8423ded22e698bea82fe2a28af85ad3a8a8509c823e3b0ce63d4afb8da47f9b6b0ebe5620fa8dc0a210da110d32c994be73a8a4139930658728db50b384c28309f0265960c432da98665487c68ab682df4182553db94077235a234794bf7e7159127865ab2adb3750189765da365372512b0ddec1c9112cfe1ff548e33a7ca92249a1752bb1b256e71319bdd5787dd2bb0e788a0a37cb18834048607cbcbc1d6595eaa3a38b4f3e7ab435060d793c3ed505c03772cd76fdd365d23feb7ac6744ee97f56aae2ec84071fc59abbdff02794fc75dce1fab8407e82bf5ae7dfcf35e9fdefcdd053b196806edb890225e9cbe673cea3bbc7ba4ae72e9798676f4107aaee4ed09f508eb86e425a7da56a18f684f8d37c3ea6aa86d05fb182424e28fe3b7c60ebfe65f80dfff64c15cf8daa6b1a5cbe3eaca13b9fcaa17c24c2f43b622476e38750b4f561897d627fee3ae27dcdda94adf9cbcd61bb1a21d8ddccd1ea2d09b406b787a26948351cb6a4e1e76bc1b4827af8aa07f8b384b5c9d384c6deec58ba1436797df8800ad8cbb71b3c701cac73894cd56c9c11de8158b5cbb55d6d5d97fe31adb86f7dfd177cae77ef93ddd59e5e27b9d813162c8c6cc2287b7453f07504bb76048a25e2bb1978f1e395080afff0326d5ebf3fcafa780c5213fd23c0cebd89ccfaa9a8cbe40675d744a238b4ea6d5c7ebd649ab1aa12634dcc1680af344ee33f1ca0ec6ab018d7347b92c92bf2f274a692f750120a4e7f7d4aa5f9f95079e8b07240a892f93b9be7c0e29da2b0dcf3e4c19b2d52fb24614470fa78ac6832a30040a553071f3c46725952374f5510f0fb6f247be47a6413317daabf0ac7b693928976919ebdabd1389f79927ea63744f39389a69230aa5b237d52797f0ba274866aa9098d96c2fb9c19845294fcceae67df04215b5a8b50799f45604306d34e7faf0502666548e26c4d959fefb3d5b77224dccaa144ab3c2de949a6553b4a8802f1292bad9267a3169bcd9f61cf36cecda302a91b2b9f53f59a05dfaa7f2aa2e4c345d35888cff18a25ce0b9c4bd8f454e47de9f12b61c331f5aa3823588ef8acbc3818d0b7b88ca08ca11c41e7a61c593cf006beaa9b929ea8ca7c49819dd4612b991715acc52d70a5dea26fd63274a1f1f1c368ece11a6a1caadf8c70812fa47b410a08dbfe4a4b0f576e474f24fa5e4b27d4ea9f86ab887a0340861ff4617eb3de66d66120ce2b2701a39386055c3e195ad54220fff9fa36dbf5f369a49c3d00927ff3a80038058f97af38bdb744af26354b86b258b736fe3efa361c4c83a3c8688183da49", 0x1000}], 0x2}, 0x0) close(r4) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNGETDEVNETNS(r2, 0x54e3, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) close(r9) recvmsg$unix(r8, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x10020) write$cgroup_pid(r10, &(0x7f00000001c0), 0x12) 774.918255ms ago: executing program 2 (id=3155): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x29, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="b702000006000000bfa300000000000007030000407effff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca7ebfcd0cd00006ed3d09a6175037958e271b60dedf8937f02008b6d83923dd29c034055d47dafe6c8dc3d5d78c07f34e4d5b3185b310efd4989147a00000000f110026e6d2ef831ab7ea0c34f17e3adeef3bb622003b538dfd8e012e71f6420b90adddff61b5b0a341a2d7cbdb90000bdb2ca76050000003a14817ac61e4dd11183a13477bf7e060e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132658555cf476619f28d9961b626c57c2691208171656d60a17e3c1c4b751ca532e6ea09c346df3d7cb4ebd31a08b32808b80200000000000000334d83239d1d2e9ff10ff2d27080e71113610e10c358e8327e7050b6c860dac12233f9a1fb9c2aec61ce63a38d316ef49b66d6e42fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a5f3d74ca891c4594e8a4399e01eadd3964663e88535c133f7130856f75643619f567d2e24f29e5dad9326edb697a6ea0182babc18cefd07e002cab5ebfcaad34732181feb215139f15eadddcb0c7cbe31fbae7c34d5ac5e7e64c21add9191eadd6e1795ad6a0f7f8cd3fccbdc3dec04b25dfc17975238345d4f71af35910b158e56657b7218baaa7cbf781c0a99bd50499ccff0f000000000000c7beba3da8223fe5308e4e2833baace04f4087c4f0da0d9a88f9dbb593ddeb3f0932a4d0175b889b8eccf707882042e716df9b57b290c661d4e85031086e97bcc5ca0e221a0e34323c129102b7b7a643e82e88a1940b3c02ed9c92d6f64b1282dc519b00159830d7617001154c46bd3ca96318c570f0721fc7aa2a580900000000000000b4f22cdf550ef091a78098534f0d973058594119d06d5ea9a8d085734000000000000000c12346e47ad97f4ead7cf754a52e4b2d0f22d428bd705414888700a30e2366c6a06b3367a389ca39059787790017b0689a1f3db9c24db65c1e00015c1d573dab18fd0600885f1ea8f2fd299fc3cdafda323e9c7080397bc49d70c060d57bc88fbe09baa058b040360ab9261503d2f363fb099408885afc2bf9a4f8c3506b669e889f5e4be1b8e0d634ebc1057b7e98186fc5141bd670dba6f43279f73db9dec75070cd9ab0fd969169ef6d2857b6bf955012cf7fe50d133da86e0477e42b98a6cc999dc21c3ef408e633dfa35f14d6e734837d365e63845f3c1092f8e34fc7eac9e8af3904ea0f3698cd9492794b82649b50d726bff873339c4cad4ead1348474250eda2c8067ab730c1d85969b95a2a5687f2ed690000522a0b7426000000000000000000000000000000000000000093fc7a82b98f99d9dedf7ba17f5f0b6d15e552fbd21f7eecff10243a43af03eea84c4304a5d3f93c02000000000000000043e1ed82b9aa0ae92a499984a009000000937523f5292d12659906005cde64f903c3415c458a2b32c2318f0858f19c6def80e1481e8e1c0098fc3f38b7a57211adb15d824cfdcf229628c0de49860a44286fe0e257cfa4ce50f3d10763d442824414a73c06837fe08de62f8710ca977960b74d0000ce73da6022a8671d1a3575b4e18c28c73203bf134686dd65808452cb6b76fcb134252c78de9b240de7b4cd015a77f76bb6470c05fc980b3d8f3f964f432a4bf6cddd6222c2da006b6fdb9c8468ae1d986a893b9519444d16a6dfa92c04331a6698507048fab5ae402acd05fe621f22712dfd09004770b4278fa14547d8ce3c21188e5e4e2baacd98e8e451d6aaaf090000006ed1d9018000008dd952595d78e9583bf4ea5de36099e3cddcb24ebb6eddb9e87c9ece87a42c0000abdf0100000001000000aea1b6eca5a883702b0bf3aeebb225895db90e237157a34e9f447237ea5b391bddd1290f7ce987a0e36b8e71b1779bbe95ffa9c3e0f6ba66e4d48e75253e3d633811e4b3220616aafbe7a3a18375ae593eb58fd500426286472466823cb8e1800aaaa0d9463c0c4ea5541a55df6eeffec0b66482228816cdfccb98374c644eea45de7867a0efbad0ab2bc33b350440a90b791b2b33f74a112a3b91b40bed8db2df8633207f8387e04ca52ab0f3f7b058b13523b896800b992972d9609551c27a5916ea16069c5bf55b98d926d3c27e7945b2999600000000f857bc1332d200194f658b930780603134ae6b7f5092772bd5d880dbe21b790c475b14b7fe4fe002dffd651faa79bb0cee0cdac23c3218f2ddaa6f7ba04b696a30d313bed30ba8f35569a9b07ee7308da09c01a4b827aa17bc2213fc1572b0204dd456b11a454d1f3f14179974aae624ea59500f5e048b2780666de81a040663c57f49af25be909984aea1b81f33426f86b4b941c08dfe2bc8ec246ec1aae120c42405e428923f3a83d9ba5c373f5e8a54120b451e2806370f1ed60c9fd5d9af4d16cb0f413c324da52d4bd2e01d3ac2d578d72e2d63322dfc9245ce3e3a097fb82f4e3b61a57094616020f72f1c55ee3d325c7496a7c2f10cfea516ae436751227378f00ca0f1f6c1dcf879700dd90b96a330f92bff736c83ca53e7f02b734d1a9292896f5d7f244bfab4946c7042e88206f641eafcc5b4ba7a7880533cdeac995d1caf6936f356ecf07a0084e7adc2dc12417997b03087c7b3b44b06f6158a2a18ce0e56ffbeb22f40521dd9972583d413098aa80db98ef324a2bfb7961c07b47521973cf0bb6f5530f6216b447b35d6e06b72b22b29de42bb1bc8ce0a0e3500000000000000000000000000b92eb197e4149627920000008000000000801792756f90b37f0858efc387f559203f314a4b0ed750fa72e5948ac3fe5921c14ef578d413e7b2a9e2f87f7b44949fe14c00000000000047030c09f62d444b4981db81799776eeb444000000009705fa8b56779bc876ad4f8d8c8e50815c4c3b27487996c09121caf47f76158362c74904f89cbc588aae84567a83571ff72bb65c082b5a8dee145ff221159aed2768edc05a3167d84205d5af86553c21e1f023a51c0e179fccfbc201982e3ddcaa45613899d19082453b180ca0c525b8d3cfaf7d0bcddeb5d5c7166038f276a92941393ba5e51f77172822bd903d9f8b436656771774ed88daab0d0cfdd1bf4d30ab566e1a4cb3ad66d830e10f7c1de13218aea21e7def613204c2b7c1ad48b01c208f4032e93408000000000000e96db049b92fc32ee34fe7a3419c8fbf03d61c159dc5864e030000a2c55b614d622b8de966c97e1940026f96db3c78ca18c9f08d1c47edf1a4d7298109f31b6078711ee72eacab84213bf50000000000000000000000000000001217887d0452aa6d26e4614d511710abeec84b78c027c160ba375dfa55a49b832ce4dfb91122193d514ed992c07f8cd6d897b314907e15642da228dbc03429e6e0e7ac118ed351c3b0c44bf5d8b58be573f8333aa8cc2ec5b5e305b3dee2562d415b4b9ed530797f55f9fe8510423409629a09000000000000009a35d9ca93e4b4591679547b8de8af1782451f7b8e1de508f1e9e525210d62bc850f8035040ad9e562be58797515b737bfb21d35ac560f99dbd18dad5e6345a464955e8141d75b6177e4fa176a020b0000000000006e76f0294fee7d19a0f327f8796d77b6e24b8df4bb438b527d10e657d49b844198ea9f93c4fd6fd2daa9bd87fd1e02ecc8075dca1280c201043257e9bd3c9a7aa150eb1711632b76d4dc0555d4bfcfd057980136d6e9000003b24fa300ef90bfe4ad364256937796f941c2faad94785f48777941f0cd3dba54ab6a5d5e91e90ac9ae994c3d4108b2fe7eca9413ac9bc138c74800487eb19c48db3f79be964808f109b5e36fc7fdd41def361427b6b9c118e5c9a0a1d5ca24886e33a7f81b2188ec75a5fc9302e3695bdcc9ab11201ef940569c995c21eeaefe2e8fc02e0433dc7371d1f72124ba263e554c30fdd7cd8c2da1e8706417da9ad8916551a1182fac08603dfc2f2279ba161c13984cd753b54a85e6f3010975e9ff51318b09fa13e2d38ce013aab41524c298c3719e31bcb1f102eaeee69a19e006bcdb1acc2664efa949a1a07bb3d7848d5e1381fbe63c522053a3bb32eb6345e10f7a12bf84e0e196a00833f464dd2f6547f14ebf137fce33efeb813211f31ff24d7dbb00f2574ccda59b3ea068fc2a18c37ee579f5a9ecc47da73684bcadd209ae5bbb7147df74d027d8d0adcdb54182c9de8053fc8b1b9d19c16c53d34db6e26f6a88d449f6abf3010100007e206a758a3f02816b4e097cfa3d46e45e7949c5b10691d49b9693a798a330a1ccb32d49772e80862df36dc0156b3f72cd85083f8e96ca1697457ec722766bd46ee2424975a38149bd57e5c0eb4087fc243e7e51b0aca9f0ab0668d7f2ee9ad9f267d8804417aa7e36a64d489bb84a1483fd3c3ecb024060002858cbb1f7708f5b41fca2fee7c03b1f862ce88dc313d913e041dd7583a1ac41c466757c5dd07ea2c5d62a000000000000000019a4e9a9c2cbc906f97fd6eb71b18d09a5df123ebbdb2827b43aed6a29e9942e402c1ae52e9cb98f3019d364fc21ea12023db91ced3c2f06550cef8a79ed39091e4776001187d0ab2f82478431d36470cc008d745ce8fd64c9aa64da230bb080945a557081b767beb75b1ea856a55c71b8fda672289aa6088630d48ac8039f19fec3acbcc5944a4e6fd44af8f10110db730a8d0d41b4ea36f9510f843a471963bd4621b9e43f08d341bb69df430ac6398c1b28bdd33b69b4b86d7c5f30cf728294e8ea1861ce50c367498945285f73c94d91210652eb4f3077cab6be2a3512eddbcb63d091d69fb1b26c8ada9a9f9355aea34fe55fd0d3011cb83ac03268dc66dd108a4e9944241e1d4ba69212ee0e7526e72c19346d08d3c3c82cb987f1bd2fd9ce2c88082ea23abbf23c6bd43fc9f9f8ea7656e25d3d73cd056b1f782de1fe349fc33546558366ed99940c0fda039272d277a3576d4e0469779d711e10b6bf040f7274fd9577c1c33326d2e60ee611ae226ef00e2944fb727832dc8dad36a6072aacfc4bcefb808ab7b3b95e0f60616320b2a9e1f8fac812daac9983639b35184803b7d192ce1f226e97fa23c37ff95d067a54a8b412644cad9ecc251fbe418a81aaf00cc8d15758ff0eb885a40630396ba76b8fadc09e62ef70c8a0121e7e8322cb8bc0f50ad33a17143a29c14eca0e214d1257e4dd1b6244e31b888d8f3fa03208d3e9a4826a98f31995509015ebdc89f2f3106e54d5898d3758b9bfc9e4924e9cedf7f8fd584e7185703cc5f23741ffb480b5a87cd7efcceb409d354bdab211ebd50affffffff000000003a59a0f952153c2efd10e72ec9ee5fa2a00f9637851ddb81d059f9a363c4ada68dd25f19ee9e4841ac047c1b35ad6f9d54cf4939ce78a55a04e655d7746a3989c6f33b02f8497aacb6bfca7456111900000000000000000048d35af24acb66fdd4d1fb150138f0ee6abfc7049c94346868ed76d3a5df7335184386a5c532d425f1a098ff93efd05e5dd8b765121fbdfe5ef44f6472b939c31883f45889142e82086c2448da60d7a40774d71c2da2e7f6d4fe5d36923213cc7b7d71a1c90006e8f8d84953f284b0eb4366beff5df5595827dcd736e8cfab28cfa416e83c06213ca7fd21af56e3de1d80e77060447e20a8b317a4c06e24e99239824d08abf670a685bc46c8168bee4cfc30cc6d0dc030a592925bad3e0f805f0d4b2b600dc3f0c4c6f75bb4e49982f4198ac90ab77c5572c956d415858bad5ee117b3e5f1507bbd0d7a30388865deb11106a932"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r0, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e14f008004de7f9c764360000002100", 0x0, 0xe00, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x50) 672.358231ms ago: executing program 1 (id=3156): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0x8}, 0x10c00, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5}, 0x0, 0x800, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x4, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce8100036c00fc08000000000200875a65969ff57b0000000000000000ff00000000ac1414aa"], 0xfdef) 671.192211ms ago: executing program 0 (id=3164): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1400}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000400)={r2, 0x20, &(0x7f0000000200)={&(0x7f0000000080)=""/174, 0xae, 0x0, &(0x7f0000000140)=""/140, 0x8c}}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) 585.742696ms ago: executing program 2 (id=3157): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x64b2074d57f2d605, 0x400000, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdir(0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) close(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x1000005, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000940)="d800000018007b7be00212ba0d0505040a003f00000f040b067c55a1bc0009001e0006990300000015", 0x29}], 0x1, 0x0, 0x0, 0x2663}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) r3 = socket$kcm(0xa, 0x6, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x5411, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="0200"}) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000002940)="2000000020008107090f9becdb4cb96b0200000000fbff010000000000000000", 0x20}], 0x1, 0x0, 0x0, 0x81000000}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 539.192299ms ago: executing program 1 (id=3158): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000100)="cc7477876d36d7f62826e9dd3ef038b25788d25ef5eb65139c94a897fe130561e4de2deb99798c53", 0x28}, {&(0x7f00000001c0)="4f4e1155a8bb01806f32fb76981dc7fa9a0a66eca7e82ddafa58b504991813ed8c45fc06a771115ae5714ec1bb5681b634fc998f63d76bdac23ca33e7042505b9cf499c26e239c42dd610ee10fbb1c2dfc71dee3797878c1085f1401ac86d32482b5308ee54ccb9028f185088ea72b0d7322dd0aa65249a3e84910be", 0x7c}, {&(0x7f0000000280)="67a606909cc82e1c999548086c1dfe1806f4f73a3d92e0d649e2f35790cafd23933c7aac", 0x24}, {&(0x7f00000002c0)="a1d0b67f3e26b0f43386c0953393cd9145252fff127a27c01822006ee9adae8d3d69775643a6c11257fd190fc1458f3496e5c324e4373dc1635447803573cd11bec14dacf6f591e6f696124cf1d075cbb3d10a6fe022abbd2dcb00704cb9b564af49c032d53af5c5b7db461e919074862919b9d4cc54e0cf07e7e5320487b79c5d9edbf26cd5e2f79df4805941f9f8b9bb893db7548d935d8844b6b9613d84bb8248", 0xa2}, {&(0x7f0000000380)="b99c67daac3231cc452127bdc77d00a8", 0x10}, {&(0x7f0000000440)="d32bcf2b84dda765a586b844fa645847439f14fc12f10bab967ab6055be03c36dc47d15fee0d0475668fd08c68f7954d01ab58128e1af6f2900155811e680203d06c863795c2c03e986d6cf064d9926f3b91cdbaff69654a17a026850fb34746e8116a8afebc264ada", 0x69}], 0x6, &(0x7f0000000540)=[{0xc0, 0x29, 0x7fff, "44282c12fa1dff117e5ba98d1f261e14a91bff7dee055211423dabc81d4e46b36641c3cd50e4f6d491d6a3f566b453afadb1d3baa8c63dac168d4788550ee1830735298db23b47e11a18e3def28b91bcef63b36d2965c5241586ca6c762c542c14e40c12c962fe08e07a327092f451808b1a7e281d672a28062042c9bfc22163e96de15f206386eae42afa4387740123a82cfa797640d218636e3636182bc5d43f9fde6d48937c6b34d0e51102ba63"}], 0xc0}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x80) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89a2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f91324fc60", 0x8c0}], 0x1}, 0x0) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x891b, 0x0) socket$kcm(0x21, 0x2, 0x2) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000040)={r3}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={0xffffffffffffffff, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, &(0x7f0000000680)=[0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x2d, &(0x7f0000000700)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000740), &(0x7f0000000780), 0x8, 0x73, 0x8, 0x8, &(0x7f00000007c0)}}, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x4, &(0x7f00000003c0)=@framed={{}, [@ldst={0x1, 0x3, 0x2, 0x7, 0xb, 0x20, 0x10}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x1005, &(0x7f00000014c0)=""/4101, 0x0, 0xc, '\x00', r4}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0xa2532, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) getpid() r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000a00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe4, 0xe4, 0x4, [@restrict={0x9, 0x0, 0x0, 0xb, 0x5}, @const={0x6, 0x0, 0x0, 0xa, 0x2}, @union={0x5, 0x3, 0x0, 0x5, 0x0, 0x10001, [{0x3, 0x5, 0x10c}, {0xa, 0x1, 0x300}, {0x2, 0x0, 0x101}]}, @volatile={0x0, 0x0, 0x0, 0x9, 0x1}, @struct={0xa, 0x7, 0x0, 0x4, 0x1, 0x9, [{0x7, 0x5, 0x7586}, {0xe, 0x3, 0xffffffff}, {0xb, 0x4, 0x3}, {0x8, 0x3, 0x3}, {0x1, 0x3, 0x47dc}, {0x9, 0x5, 0x80}, {0xb, 0x5, 0x64}]}, @restrict={0xb}, @ptr={0x7, 0x0, 0x0, 0x2, 0x7}, @restrict={0x2, 0x0, 0x0, 0xb, 0x1}, @func={0x3, 0x0, 0x0, 0xc, 0x5}]}, {0x0, [0x2e, 0x5f]}}, &(0x7f0000002500)=""/4096, 0x100, 0x1000, 0x1, 0x7}, 0x28) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b80)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000b40)=r6}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000c40)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000bc0), &(0x7f0000000c00)=r6}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000c80)={0x1, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x25, 0x0, 0xfffffffffffffffd, &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41100, 0x1a, '\x00', r4, @fallback=0x1a, r7, 0x8, &(0x7f0000000080)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000400)={0x5, 0xe, 0x1, 0x10001}, 0x10, r5, r6, 0x6, &(0x7f0000000cc0)=[0xffffffffffffffff, r8, 0xffffffffffffffff, r9, r10], &(0x7f0000000d00)=[{0x1, 0x4, 0x1, 0x8}, {0x4, 0x1, 0xf, 0x1}, {0x5, 0x4, 0x3}, {0x0, 0x5, 0x6, 0xa}, {0x5, 0x5, 0xb, 0x8}, {0x5, 0x5, 0xc, 0xa}], 0x10, 0x4}, 0x94) 431.492145ms ago: executing program 0 (id=3159): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x280a01, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket$kcm(0x15, 0x5, 0x0) r3 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000440)={&(0x7f0000000080)=@in6={0xa, 0x4e20, 0x800000, @local, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000000180)=[{0x28, 0x29, 0x32, "977b3d2f56cfdf8bb5f2ac6dd52d09ebcb"}], 0x28}, 0x0) r4 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r4, 0x0, 0x485, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8914, &(0x7f0000000080)) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x95, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x11) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffeffffffff}, 0xc001, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r7) write$cgroup_devices(r6, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x4000, &(0x7f0000000400)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90424fc60", 0x14}], 0x1, 0x0, 0x0, 0x600}, 0x900) 356.413869ms ago: executing program 3 (id=3160): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000ff0f8a60140000009db900dc8d009500000004ff00000000cb6803eb1cc127f4fe86dfada2158a00000000"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) 0s ago: executing program 2 (id=3161): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0xf, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee688884746", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x50) kernel console output (not intermixed with test programs): ctive_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 369.432102][T10841] lowmem_reserve[]: 0 0 0 0 0 [ 369.444141][T10841] Node 1 Normal free:3895220kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:17532kB local_pcp:6944kB free_cma:0kB [ 369.524069][T10841] lowmem_reserve[]: 0 0 0 0 0 [ 369.544576][T10841] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 369.588192][T10841] Node 0 DMA32: 1225*4kB (UM) 1590*8kB (UM) 1475*16kB (UM) 762*32kB (UME) 1110*64kB (UME) 377*128kB (UM) 88*256kB (UME) 31*512kB (UM) 15*1024kB (UME) 11*2048kB (UME) 291*4096kB (UM) = 1453124kB [ 369.671537][T10841] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 369.736065][T10841] Node 1 Normal: 173*4kB (UME) 52*8kB (UME) 40*16kB (UME) 63*32kB (UME) 22*64kB (UME) 11*128kB (UME) 2*256kB (ME) 2*512kB (UE) 0*1024kB 2*2048kB (UE) 948*4096kB (M) = 3895220kB [ 369.826173][T10841] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 369.868149][T10841] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 369.907605][T10841] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 369.948628][T10841] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 369.987623][T10841] 59895 total pagecache pages [ 369.992396][T10841] 0 pages in swap cache [ 369.996602][T10841] Free swap = 124996kB [ 370.039430][T10841] Total swap = 124996kB [ 370.043683][T10841] 2097051 pages RAM [ 370.068848][T10841] 0 pages HighMem/MovableOnly [ 370.096190][T10841] 416922 pages reserved [ 370.105861][T10841] 0 pages cma reserved [ 370.587596][T10867] netlink: 'syz.1.1814': attribute type 21 has an invalid length. [ 370.617635][T10867] netlink: 'syz.1.1814': attribute type 1 has an invalid length. [ 370.659424][T10869] IPv6: Can't replace route, no match found [ 370.739297][T10873] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1813'. [ 370.876723][T10876] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1816'. [ 370.900722][T10876] openvswitch: netlink: IP tunnel attribute has 3064 unknown bytes. [ 370.994594][T10879] FAULT_INJECTION: forcing a failure. [ 370.994594][T10879] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 371.008038][T10879] CPU: 0 PID: 10879 Comm: syz.2.1817 Not tainted syzkaller #0 [ 371.015560][T10879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 371.025767][T10879] Call Trace: [ 371.029104][T10879] [ 371.032064][T10879] dump_stack_lvl+0x18c/0x250 [ 371.036787][T10879] ? shmem_get_folio_gfp+0x138f/0x2aa0 [ 371.042391][T10879] ? show_regs_print_info+0x20/0x20 [ 371.047742][T10879] ? load_image+0x400/0x400 [ 371.052281][T10879] ? shmem_get_folio_gfp+0x138f/0x2aa0 [ 371.057779][T10879] ? __lock_acquire+0x7d40/0x7d40 [ 371.062865][T10879] ? __rwlock_init+0x150/0x150 [ 371.067691][T10879] should_fail_ex+0x39d/0x4d0 [ 371.072459][T10879] copy_page_from_iter_atomic+0x2a8/0x1580 [ 371.078349][T10879] ? shmem_get_folio_gfp+0x26d8/0x2aa0 [ 371.083917][T10879] ? iov_iter_zero+0x1170/0x1170 [ 371.089021][T10879] ? shmem_write_begin+0x1cf/0x420 [ 371.094182][T10879] generic_perform_write+0x353/0x5c0 [ 371.099528][T10879] ? generic_file_direct_write+0x3e0/0x3e0 [ 371.105385][T10879] ? file_update_time+0x192/0x1a0 [ 371.110486][T10879] shmem_file_write_iter+0xfb/0x120 [ 371.115728][T10879] vfs_write+0x46c/0x990 [ 371.120018][T10879] ? file_end_write+0x250/0x250 [ 371.124908][T10879] ? __fget_files+0x43d/0x4b0 [ 371.129630][T10879] ? __fdget_pos+0x2a3/0x330 [ 371.134259][T10879] ? ksys_write+0x75/0x260 [ 371.138736][T10879] ksys_write+0x150/0x260 [ 371.143206][T10879] ? __ia32_sys_read+0x90/0x90 [ 371.148039][T10879] ? lockdep_hardirqs_on+0x98/0x150 [ 371.153311][T10879] do_syscall_64+0x55/0xa0 [ 371.157774][T10879] ? clear_bhb_loop+0x40/0x90 [ 371.162500][T10879] ? clear_bhb_loop+0x40/0x90 [ 371.167225][T10879] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 371.173171][T10879] RIP: 0033:0x7fb75559aeb9 [ 371.177798][T10879] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 371.197662][T10879] RSP: 002b:00007fb756500028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 371.206120][T10879] RAX: ffffffffffffffda RBX: 00007fb755815fa0 RCX: 00007fb75559aeb9 [ 371.214133][T10879] RDX: 0000000013bb711e RSI: 0000200000000180 RDI: 0000000000000004 [ 371.222139][T10879] RBP: 00007fb756500090 R08: 0000000000000000 R09: 0000000000000000 [ 371.230137][T10879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 371.238140][T10879] R13: 00007fb755816038 R14: 00007fb755815fa0 R15: 00007ffe50388608 [ 371.246203][T10879] [ 371.706425][T10889] netlink: 763 bytes leftover after parsing attributes in process `syz.0.1820'. [ 372.083163][T10894] netlink: 1010 bytes leftover after parsing attributes in process `syz.1.1823'. [ 372.274878][T10903] netlink: 'syz.1.1825': attribute type 29 has an invalid length. [ 372.287746][T10903] netlink: 'syz.1.1825': attribute type 29 has an invalid length. [ 372.308836][T10903] netlink: 'syz.1.1825': attribute type 29 has an invalid length. [ 372.348133][T10903] netlink: 'syz.1.1825': attribute type 29 has an invalid length. [ 372.397112][T10907] IPv6: …: Disabled Multicast RS [ 372.668489][T10911] IPv6: Can't replace route, no match found [ 372.746296][T10919] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1826'. [ 373.334324][T10927] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1833'. [ 373.354435][T10928] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1833'. [ 373.462826][T10931] netlink: 703 bytes leftover after parsing attributes in process `syz.0.1834'. [ 373.489134][T10927] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1833'. [ 373.824375][T10942] IPv6: Can't replace route, no match found [ 373.844412][T10942] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1839'. [ 373.941024][T10946] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1841'. [ 373.962790][T10946] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1841'. [ 374.995877][T10969] IPv6: Can't replace route, no match found [ 375.025057][ T5785] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 375.290157][T10983] netlink: 'syz.0.1852': attribute type 29 has an invalid length. [ 375.317881][T10983] netlink: 'syz.0.1852': attribute type 29 has an invalid length. [ 375.341413][T10983] netlink: 'syz.0.1852': attribute type 29 has an invalid length. [ 375.352406][T10983] netlink: 'syz.0.1852': attribute type 29 has an invalid length. [ 375.694982][T10995] sctp: [Deprecated]: syz.0.1859 (pid 10995) Use of int in maxseg socket option. [ 375.694982][T10995] Use struct sctp_assoc_value instead [ 375.949558][T11003] IPv6: Can't replace route, no match found [ 375.995287][T11008] FAULT_INJECTION: forcing a failure. [ 375.995287][T11008] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 376.047547][T11008] CPU: 0 PID: 11008 Comm: syz.1.1863 Not tainted syzkaller #0 [ 376.055105][T11008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 376.065220][T11008] Call Trace: [ 376.068545][T11008] [ 376.071519][T11008] dump_stack_lvl+0x18c/0x250 [ 376.076359][T11008] ? show_regs_print_info+0x20/0x20 [ 376.081885][T11008] ? load_image+0x400/0x400 [ 376.086452][T11008] ? __might_fault+0xaa/0x120 [ 376.091187][T11008] ? __lock_acquire+0x7d40/0x7d40 [ 376.096264][T11008] should_fail_ex+0x39d/0x4d0 [ 376.101005][T11008] _copy_from_user+0x2f/0xe0 [ 376.105643][T11008] __sys_bpf+0x23e/0x890 [ 376.109946][T11008] ? bpf_link_show_fdinfo+0x390/0x390 [ 376.115386][T11008] ? lock_chain_count+0x20/0x20 [ 376.120297][T11008] __x64_sys_bpf+0x7c/0x90 [ 376.124761][T11008] do_syscall_64+0x55/0xa0 [ 376.129231][T11008] ? clear_bhb_loop+0x40/0x90 [ 376.133965][T11008] ? clear_bhb_loop+0x40/0x90 [ 376.138701][T11008] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 376.144656][T11008] RIP: 0033:0x7fa9b0f9aeb9 [ 376.149142][T11008] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 376.168987][T11008] RSP: 002b:00007fa9af1d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 376.177627][T11008] RAX: ffffffffffffffda RBX: 00007fa9b1216090 RCX: 00007fa9b0f9aeb9 [ 376.185650][T11008] RDX: 0000000000000050 RSI: 00002000000007c0 RDI: 000000000000000a [ 376.193684][T11008] RBP: 00007fa9af1d5090 R08: 0000000000000000 R09: 0000000000000000 [ 376.201720][T11008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 376.209747][T11008] R13: 00007fa9b1216128 R14: 00007fa9b1216090 R15: 00007fff14b08d38 [ 376.217784][T11008] [ 376.416844][ T5785] Bluetooth: hci0: unexpected subevent 0x03 length: 150 > 9 [ 377.077582][ T5785] Bluetooth: hci1: command 0x0406 tx timeout [ 377.155907][T11032] netlink: 'syz.0.1870': attribute type 10 has an invalid length. [ 377.181692][T11032] batman_adv: batadv0: Adding interface: wlan0 [ 377.188944][T11032] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 377.232245][T11032] batman_adv: batadv0: Interface activated: wlan0 [ 377.451019][T11045] netlink: 'syz.1.1877': attribute type 10 has an invalid length. [ 378.026654][T11065] __nla_validate_parse: 3 callbacks suppressed [ 378.026675][T11065] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1886'. [ 378.078624][T11065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 378.096239][T11065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.126929][T11065] batadv_slave_1: entered promiscuous mode [ 379.015206][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.022020][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.091016][ T5785] Bluetooth: hci1: unexpected subevent 0x03 length: 150 > 9 [ 381.019782][T11126] IPv6: Can't replace route, no match found [ 381.278196][ T5785] Bluetooth: hci2: unexpected subevent 0x03 length: 150 > 9 [ 382.206072][T11151] FAULT_INJECTION: forcing a failure. [ 382.206072][T11151] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 382.237612][T11151] CPU: 0 PID: 11151 Comm: syz.3.1916 Not tainted syzkaller #0 [ 382.245170][T11151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 382.255461][T11151] Call Trace: [ 382.258791][T11151] [ 382.261761][T11151] dump_stack_lvl+0x18c/0x250 [ 382.266504][T11151] ? show_regs_print_info+0x20/0x20 [ 382.271818][T11151] ? load_image+0x400/0x400 [ 382.276378][T11151] ? __lock_acquire+0x7d40/0x7d40 [ 382.281486][T11151] should_fail_ex+0x39d/0x4d0 [ 382.286237][T11151] prepare_alloc_pages+0x1e2/0x5f0 [ 382.291424][T11151] __alloc_pages+0x134/0x460 [ 382.296068][T11151] ? zone_statistics+0x170/0x170 [ 382.301091][T11151] __folio_alloc+0x10/0x20 [ 382.305568][T11151] vma_alloc_folio+0x47a/0x8f0 [ 382.310391][T11151] ? mpol_shared_policy_lookup+0x14b/0x1e0 [ 382.316258][T11151] shmem_alloc_folio+0x1a9/0x2a0 [ 382.321269][T11151] ? folio_put+0xd0/0xd0 [ 382.325593][T11151] ? __vm_enough_memory+0x11b/0x370 [ 382.330943][T11151] ? shmem_inode_acct_block+0x35e/0x460 [ 382.336546][T11151] shmem_alloc_and_acct_folio+0x1e6/0x6d0 [ 382.342337][T11151] ? put_swap_device+0x230/0x230 [ 382.347341][T11151] ? xas_load+0x12b/0x140 [ 382.351721][T11151] ? filemap_get_entry+0xce/0x3f0 [ 382.356793][T11151] ? filemap_get_entry+0xce/0x3f0 [ 382.361964][T11151] ? filemap_get_entry+0x379/0x3f0 [ 382.367222][T11151] ? page_cache_prev_miss+0x390/0x390 [ 382.372647][T11151] ? mark_lock+0x94/0x320 [ 382.377035][T11151] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 382.383079][T11151] ? lock_chain_count+0x20/0x20 [ 382.387998][T11151] shmem_get_folio_gfp+0xcde/0x2aa0 [ 382.393294][T11151] shmem_write_begin+0xf2/0x420 [ 382.398210][T11151] generic_perform_write+0x2fe/0x5c0 [ 382.403573][T11151] ? generic_file_direct_write+0x3e0/0x3e0 [ 382.409434][T11151] ? down_write+0x16e/0x200 [ 382.414007][T11151] ? file_update_time+0x98/0x1a0 [ 382.419005][T11151] shmem_file_write_iter+0xfb/0x120 [ 382.424429][T11151] vfs_write+0x46c/0x990 [ 382.428735][T11151] ? file_end_write+0x250/0x250 [ 382.433650][T11151] ? __fget_files+0x43d/0x4b0 [ 382.438398][T11151] ? __fdget_pos+0x2a3/0x330 [ 382.443133][T11151] ? ksys_write+0x75/0x260 [ 382.447608][T11151] ksys_write+0x150/0x260 [ 382.452003][T11151] ? __ia32_sys_read+0x90/0x90 [ 382.456831][T11151] ? lockdep_hardirqs_on+0x98/0x150 [ 382.462084][T11151] do_syscall_64+0x55/0xa0 [ 382.466559][T11151] ? clear_bhb_loop+0x40/0x90 [ 382.471285][T11151] ? clear_bhb_loop+0x40/0x90 [ 382.476014][T11151] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 382.481962][T11151] RIP: 0033:0x7f2f48b9aeb9 [ 382.486511][T11151] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 382.506184][T11151] RSP: 002b:00007f2f49a43028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 382.514679][T11151] RAX: ffffffffffffffda RBX: 00007f2f48e15fa0 RCX: 00007f2f48b9aeb9 [ 382.522708][T11151] RDX: 00000000002a979d RSI: 0000200000000000 RDI: 0000000000000003 [ 382.530762][T11151] RBP: 00007f2f49a43090 R08: 0000000000000000 R09: 0000000000000000 [ 382.538779][T11151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 382.547149][T11151] R13: 00007f2f48e16038 R14: 00007f2f48e15fa0 R15: 00007ffff6b932b8 [ 382.555208][T11151] [ 383.851931][ T5785] Bluetooth: hci3: unexpected subevent 0x03 length: 150 > 9 [ 384.876617][T11189] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1933'. [ 385.311252][T11199] IPv6: Can't replace route, no match found [ 385.565477][T11207] FAULT_INJECTION: forcing a failure. [ 385.565477][T11207] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 385.599399][T11209] netlink: 'syz.3.1941': attribute type 21 has an invalid length. [ 385.608991][T11209] netlink: 'syz.3.1941': attribute type 1 has an invalid length. [ 385.619029][T11207] CPU: 1 PID: 11207 Comm: syz.0.1940 Not tainted syzkaller #0 [ 385.626570][T11207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 385.636676][T11207] Call Trace: [ 385.640083][T11207] [ 385.643057][T11207] dump_stack_lvl+0x18c/0x250 [ 385.647803][T11207] ? show_regs_print_info+0x20/0x20 [ 385.653065][T11207] ? load_image+0x400/0x400 [ 385.657628][T11207] ? __might_fault+0xaa/0x120 [ 385.662364][T11207] ? __lock_acquire+0x7d40/0x7d40 [ 385.667452][T11207] should_fail_ex+0x39d/0x4d0 [ 385.672200][T11207] _copy_from_user+0x2f/0xe0 [ 385.676839][T11207] ___sys_recvmsg+0x176/0x590 [ 385.681570][T11207] ? __sys_recvmsg+0x2a0/0x2a0 [ 385.686388][T11207] ? ksys_write+0x1c4/0x260 [ 385.690965][T11207] ? __fget_files+0x43d/0x4b0 [ 385.695715][T11207] __x64_sys_recvmsg+0x20c/0x2e0 [ 385.700705][T11207] ? ___sys_recvmsg+0x590/0x590 [ 385.705619][T11207] ? lockdep_hardirqs_on+0x98/0x150 [ 385.710869][T11207] do_syscall_64+0x55/0xa0 [ 385.715372][T11207] ? clear_bhb_loop+0x40/0x90 [ 385.720099][T11207] ? clear_bhb_loop+0x40/0x90 [ 385.724828][T11207] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 385.730787][T11207] RIP: 0033:0x7f34e9b9aeb9 [ 385.735273][T11207] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 385.754957][T11207] RSP: 002b:00007f34ea9a2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 385.763496][T11207] RAX: ffffffffffffffda RBX: 00007f34e9e15fa0 RCX: 00007f34e9b9aeb9 [ 385.771525][T11207] RDX: 0000000000000000 RSI: 0000200000000e80 RDI: 0000000000000003 [ 385.779550][T11207] RBP: 00007f34ea9a2090 R08: 0000000000000000 R09: 0000000000000000 [ 385.787572][T11207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 385.795590][T11207] R13: 00007f34e9e16038 R14: 00007f34e9e15fa0 R15: 00007ffdd69d8878 [ 385.803665][T11207] [ 385.813153][T11209] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1941'. [ 385.999605][T11204] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1934'. [ 386.234686][T11223] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1947'. [ 386.343231][T11227] netlink: 'syz.1.1946': attribute type 21 has an invalid length. [ 386.397426][T11227] netlink: 'syz.1.1946': attribute type 4 has an invalid length. [ 387.544528][T11239] IPv6: Can't replace route, no match found [ 387.729338][T11244] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1955'. [ 388.553690][T11258] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1957'. [ 388.641457][T11269] netlink: 'syz.3.1964': attribute type 1 has an invalid length. [ 389.318729][ T5785] Bluetooth: hci2: unexpected subevent 0x03 length: 150 > 9 [ 389.739204][T11296] IPv6: Can't replace route, no match found [ 389.764203][T11296] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1975'. [ 390.086159][ T5785] Bluetooth: hci2: unexpected subevent 0x03 length: 150 > 9 [ 390.101238][T11310] netlink: 'syz.2.1982': attribute type 27 has an invalid length. [ 390.109351][T11310] netlink: 2418 bytes leftover after parsing attributes in process `syz.2.1982'. [ 390.200433][T11312] netlink: 'syz.3.1983': attribute type 40 has an invalid length. [ 390.389633][T11317] IPv6: Can't replace route, no match found [ 390.409845][T11317] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1985'. [ 390.556187][ T5785] Bluetooth: hci2: unexpected subevent 0x03 length: 150 > 9 [ 390.951439][T11334] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 391.205594][T11346] IPv6: Can't replace route, no match found [ 391.220767][T11346] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1998'. [ 391.357598][ T5785] Bluetooth: hci0: unexpected subevent 0x03 length: 150 > 9 [ 391.958585][T11356] FAULT_INJECTION: forcing a failure. [ 391.958585][T11356] name failslab, interval 1, probability 0, space 0, times 0 [ 392.010340][T11356] CPU: 0 PID: 11356 Comm: syz.2.2004 Not tainted syzkaller #0 [ 392.017932][T11356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 392.028058][T11356] Call Trace: [ 392.031395][T11356] [ 392.034377][T11356] dump_stack_lvl+0x18c/0x250 [ 392.039229][T11356] ? show_regs_print_info+0x20/0x20 [ 392.044494][T11356] ? load_image+0x400/0x400 [ 392.049060][T11356] ? __might_sleep+0xe0/0xe0 [ 392.053710][T11356] ? __lock_acquire+0x7d40/0x7d40 [ 392.058791][T11356] should_fail_ex+0x39d/0x4d0 [ 392.063529][T11356] should_failslab+0x9/0x20 [ 392.068087][T11356] slab_pre_alloc_hook+0x59/0x310 [ 392.073170][T11356] ? bpf_prog_test_run_sk_lookup+0x4e9/0xbe0 [ 392.079214][T11356] ? bpf_prog_test_run_sk_lookup+0x4e9/0xbe0 [ 392.085258][T11356] __kmem_cache_alloc_node+0x53/0x250 [ 392.090725][T11356] ? bpf_prog_test_run_sk_lookup+0x4e9/0xbe0 [ 392.096773][T11356] __kmalloc+0xa4/0x230 [ 392.101177][T11356] bpf_prog_test_run_sk_lookup+0x4e9/0xbe0 [ 392.107052][T11356] ? __fget_files+0x28/0x4b0 [ 392.111748][T11356] ? __lock_acquire+0x7d40/0x7d40 [ 392.116872][T11356] ? bpf_test_timer_leave+0x150/0x150 [ 392.122314][T11356] ? bpf_test_timer_leave+0x150/0x150 [ 392.127735][T11356] bpf_prog_test_run+0x321/0x390 [ 392.132730][T11356] __sys_bpf+0x49d/0x890 [ 392.137186][T11356] ? bpf_link_show_fdinfo+0x390/0x390 [ 392.142703][T11356] ? lock_chain_count+0x20/0x20 [ 392.147600][T11356] __x64_sys_bpf+0x7c/0x90 [ 392.152060][T11356] do_syscall_64+0x55/0xa0 [ 392.156512][T11356] ? clear_bhb_loop+0x40/0x90 [ 392.161226][T11356] ? clear_bhb_loop+0x40/0x90 [ 392.165941][T11356] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 392.171893][T11356] RIP: 0033:0x7fb75559aeb9 [ 392.176345][T11356] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 392.196098][T11356] RSP: 002b:00007fb756500028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 392.204562][T11356] RAX: ffffffffffffffda RBX: 00007fb755815fa0 RCX: 00007fb75559aeb9 [ 392.212574][T11356] RDX: 0000000000000048 RSI: 0000200000000440 RDI: 000000000000000a [ 392.220762][T11356] RBP: 00007fb756500090 R08: 0000000000000000 R09: 0000000000000000 [ 392.228829][T11356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 392.236911][T11356] R13: 00007fb755816038 R14: 00007fb755815fa0 R15: 00007ffe50388608 [ 392.245041][T11356] [ 392.687146][T11368] IPv6: Can't replace route, no match found [ 392.723395][T11368] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2009'. [ 392.887143][ T5785] Bluetooth: hci1: unexpected subevent 0x03 length: 150 > 9 [ 392.946613][T11372] netlink: 'syz.2.2011': attribute type 10 has an invalid length. [ 392.955668][T11372] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2011'. [ 393.164071][T11385] netlink: 'syz.0.2015': attribute type 10 has an invalid length. [ 393.344258][T11393] netlink: 'syz.3.2019': attribute type 15 has an invalid length. [ 393.627195][T11396] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2028'. [ 393.915985][T11400] IPv6: Can't replace route, no match found [ 393.938774][T11400] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2021'. [ 394.437269][T11420] netlink: 'syz.0.2030': attribute type 10 has an invalid length. [ 394.455889][T11420] team0: Device veth0_vlan is up. Set it down before adding it as a team port [ 394.922594][T11431] netlink: 'syz.0.2034': attribute type 3 has an invalid length. [ 394.937030][T11431] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2034'. [ 395.068873][T11434] IPv6: Can't replace route, no match found [ 395.230670][T11433] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2035'. [ 395.535421][T11448] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.2042'. [ 395.843388][T11453] netlink: 'syz.1.2044': attribute type 21 has an invalid length. [ 395.880557][T11453] netlink: 'syz.1.2044': attribute type 6 has an invalid length. [ 395.904930][T11453] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2044'. [ 396.489939][T11461] IPv6: Can't replace route, no match found [ 396.537865][T11461] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2047'. [ 397.669180][T11487] IPv6: Can't replace route, no match found [ 397.682300][T11487] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2059'. [ 397.747202][T11488] netlink: 61211 bytes leftover after parsing attributes in process `syz.3.2058'. [ 398.188513][T11503] sctp: [Deprecated]: syz.1.2066 (pid 11503) Use of struct sctp_assoc_value in delayed_ack socket option. [ 398.188513][T11503] Use struct sctp_sack_info instead [ 398.490937][T11510] delete_channel: no stack [ 398.496783][T11514] IPv6: Can't replace route, no match found [ 398.509671][T11514] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2069'. [ 399.241593][T11537] IPv6: Can't replace route, no match found [ 399.256498][T11537] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2080'. [ 399.390793][T11547] netlink: 'syz.2.2083': attribute type 1 has an invalid length. [ 399.398929][T11547] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.2083'. [ 400.203413][ T5785] Bluetooth: hci3: Malformed LE Event: 0x02 [ 401.396385][T11597] netlink: set zone limit has 8 unknown bytes [ 401.402933][ T3383] page_pool_release_retry() stalled pool shutdown 1 inflight 60 sec [ 401.636390][T11603] netlink: 'syz.2.2105': attribute type 8 has an invalid length. [ 401.747643][T11606] FAULT_INJECTION: forcing a failure. [ 401.747643][T11606] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 401.762171][T11606] CPU: 1 PID: 11606 Comm: syz.1.2107 Not tainted syzkaller #0 [ 401.769714][T11606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 401.779829][T11606] Call Trace: [ 401.783170][T11606] [ 401.786162][T11606] dump_stack_lvl+0x18c/0x250 [ 401.791103][T11606] ? show_regs_print_info+0x20/0x20 [ 401.796381][T11606] ? load_image+0x400/0x400 [ 401.800951][T11606] ? __might_fault+0xaa/0x120 [ 401.805690][T11606] ? __lock_acquire+0x7d40/0x7d40 [ 401.810779][T11606] should_fail_ex+0x39d/0x4d0 [ 401.815532][T11606] _copy_from_user+0x2f/0xe0 [ 401.820187][T11606] generic_map_update_batch+0x59a/0x810 [ 401.825803][T11606] ? rcu_read_unlock+0xa0/0xa0 [ 401.830622][T11606] ? __fdget+0x180/0x210 [ 401.834976][T11606] ? rcu_read_unlock+0xa0/0xa0 [ 401.839790][T11606] bpf_map_do_batch+0x3d7/0x610 [ 401.844708][T11606] __sys_bpf+0x381/0x890 [ 401.849028][T11606] ? bpf_link_show_fdinfo+0x390/0x390 [ 401.854481][T11606] ? lock_chain_count+0x20/0x20 [ 401.859396][T11606] __x64_sys_bpf+0x7c/0x90 [ 401.863949][T11606] do_syscall_64+0x55/0xa0 [ 401.868601][T11606] ? clear_bhb_loop+0x40/0x90 [ 401.873333][T11606] ? clear_bhb_loop+0x40/0x90 [ 401.878068][T11606] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 401.884002][T11606] RIP: 0033:0x7fa9b0f9aeb9 [ 401.888449][T11606] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 401.908617][T11606] RSP: 002b:00007fa9af1f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 401.917063][T11606] RAX: ffffffffffffffda RBX: 00007fa9b1215fa0 RCX: 00007fa9b0f9aeb9 [ 401.925072][T11606] RDX: 0000000000000038 RSI: 0000200000000300 RDI: 000000000000001a [ 401.933082][T11606] RBP: 00007fa9af1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 401.941260][T11606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 401.949255][T11606] R13: 00007fa9b1216038 R14: 00007fa9b1215fa0 R15: 00007fff14b08d38 [ 401.957271][T11606] [ 402.369676][T11621] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2114'. [ 403.763814][T11658] netlink: 'syz.3.2127': attribute type 2 has an invalid length. [ 403.773206][T11658] netlink: 'syz.3.2127': attribute type 8 has an invalid length. [ 403.784309][T11658] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2127'. [ 403.801802][T11658] netlink: 'syz.3.2127': attribute type 10 has an invalid length. [ 403.810118][T11658] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2127'. [ 403.829586][T11658] bridge0: port 2(ipvlan1) entered blocking state [ 403.836474][T11658] bridge0: port 2(ipvlan1) entered disabled state [ 403.848978][T11658] ipvlan1: entered allmulticast mode [ 403.854752][T11658] veth0_vlan: entered allmulticast mode [ 403.866477][T11658] ipvlan1: left allmulticast mode [ 403.872583][T11658] veth0_vlan: left allmulticast mode [ 403.882122][T11658] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 405.234295][T11723] netlink: 'syz.2.2151': attribute type 10 has an invalid length. [ 405.276653][T11723] team0: Device vxcan1 is of different type [ 405.330293][T11727] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2153'. [ 406.420660][T11737] IPv6: Can't replace route, no match found [ 406.493314][T11741] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2157'. [ 406.953289][T11753] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2161'. [ 407.240200][T11752] netlink: 'syz.3.2163': attribute type 3 has an invalid length. [ 407.255300][T11752] netlink: 98920 bytes leftover after parsing attributes in process `syz.3.2163'. [ 408.842731][T11780] IPv6: Can't replace route, no match found [ 408.858494][T11780] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2170'. [ 410.879260][T11826] netlink: 'syz.2.2192': attribute type 21 has an invalid length. [ 410.887253][T11826] netlink: 'syz.2.2192': attribute type 1 has an invalid length. [ 412.528529][T11848] netlink: 'syz.2.2200': attribute type 3 has an invalid length. [ 412.598927][T11848] netlink: 98920 bytes leftover after parsing attributes in process `syz.2.2200'. [ 412.685807][T11858] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2203'. [ 412.747999][T11860] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2204'. [ 412.779471][T11858] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2203'. [ 413.489870][T11874] IPv6: Can't replace route, no match found [ 413.502561][T11874] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2207'. [ 414.090972][T11897] netlink: 'syz.0.2216': attribute type 3 has an invalid length. [ 414.137132][T11897] netlink: 98920 bytes leftover after parsing attributes in process `syz.0.2216'. [ 414.607247][T11903] IPv6: Can't replace route, no match found [ 414.651465][T11903] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2220'. [ 415.478032][T11933] IPv6: Can't replace route, no match found [ 415.494995][T11933] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2231'. [ 416.322575][T11937] netlink: 'syz.1.2233': attribute type 3 has an invalid length. [ 416.383771][T11937] netlink: 98920 bytes leftover after parsing attributes in process `syz.1.2233'. [ 416.923879][T11954] IPv6: Can't replace route, no match found [ 416.936530][T11954] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2241'. [ 417.122622][T11962] syzkaller0: entered promiscuous mode [ 417.128343][T11962] syzkaller0: entered allmulticast mode [ 417.456361][ T5785] Bluetooth: hci0: unexpected subevent 0x03 length: 150 > 9 [ 417.584867][T11977] netlink: 1057 bytes leftover after parsing attributes in process `syz.0.2248'. [ 419.463780][T11981] IPv6: Can't replace route, no match found [ 419.470929][T11985] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2250'. [ 419.484518][T11998] netlink: 'syz.2.2256': attribute type 10 has an invalid length. [ 419.498695][T11998] hsr_slave_0: left promiscuous mode [ 419.527665][T11998] hsr_slave_1: left promiscuous mode [ 419.620688][ T5785] Bluetooth: hci2: unexpected subevent 0x03 length: 150 > 9 [ 419.712831][T12002] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2259'. [ 419.733207][T12002] netlink: 'syz.1.2259': attribute type 3 has an invalid length. [ 419.742892][T12002] netlink: 'syz.1.2259': attribute type 16 has an invalid length. [ 419.767518][T12002] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2259'. [ 420.399754][T12024] netlink: 'syz.2.2266': attribute type 33 has an invalid length. [ 420.423258][T12024] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2266'. [ 420.459295][T12021] IPv6: Can't replace route, no match found [ 420.656777][T12029] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2267'. [ 420.993071][T12037] netlink: 'syz.3.2272': attribute type 3 has an invalid length. [ 421.017474][T12037] netlink: 'syz.3.2272': attribute type 1 has an invalid length. [ 421.037570][T12037] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.2272'. [ 421.801306][T12042] netlink: 'syz.0.2274': attribute type 33 has an invalid length. [ 421.837761][T12042] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2274'. [ 422.143587][T12058] netlink: 'syz.0.2279': attribute type 10 has an invalid length. [ 422.275987][T12058] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 422.288872][T12060] IPv6: Can't replace route, no match found [ 422.297879][T12060] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2281'. [ 422.632867][T12071] netlink: 'syz.3.2285': attribute type 21 has an invalid length. [ 422.667592][T12071] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2285'. [ 422.727991][T12071] netlink: 'syz.3.2285': attribute type 4 has an invalid length. [ 422.767552][T12071] netlink: 'syz.3.2285': attribute type 5 has an invalid length. [ 422.775757][T12071] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2285'. [ 423.193690][ T5779] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 423.203526][ T5779] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 423.212333][ T5779] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 423.223697][ T5779] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 423.236415][ T5779] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 423.244255][ T5779] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 423.401406][T12081] FAULT_INJECTION: forcing a failure. [ 423.401406][T12081] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 423.414961][T12081] CPU: 0 PID: 12081 Comm: syz.1.2287 Not tainted syzkaller #0 [ 423.422484][T12081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 423.432686][T12081] Call Trace: [ 423.436017][T12081] [ 423.439009][T12081] dump_stack_lvl+0x18c/0x250 [ 423.443755][T12081] ? show_regs_print_info+0x20/0x20 [ 423.449107][T12081] ? load_image+0x400/0x400 [ 423.453654][T12081] ? shmem_get_folio_gfp+0x138f/0x2aa0 [ 423.459186][T12081] ? __lock_acquire+0x7d40/0x7d40 [ 423.464248][T12081] ? __rwlock_init+0x150/0x150 [ 423.469136][T12081] should_fail_ex+0x39d/0x4d0 [ 423.473896][T12081] copy_page_from_iter_atomic+0x2a8/0x1580 [ 423.479738][T12081] ? shmem_get_folio_gfp+0x26d8/0x2aa0 [ 423.485358][T12081] ? iov_iter_zero+0x1170/0x1170 [ 423.490387][T12081] ? shmem_write_begin+0x1cf/0x420 [ 423.495827][T12081] generic_perform_write+0x353/0x5c0 [ 423.501172][T12081] ? generic_file_direct_write+0x3e0/0x3e0 [ 423.507020][T12081] ? down_write+0x16e/0x200 [ 423.511656][T12081] ? file_update_time+0x98/0x1a0 [ 423.516640][T12081] shmem_file_write_iter+0xfb/0x120 [ 423.521898][T12081] vfs_write+0x46c/0x990 [ 423.526200][T12081] ? file_end_write+0x250/0x250 [ 423.531105][T12081] ? __fget_files+0x43d/0x4b0 [ 423.535828][T12081] ? __fdget_pos+0x2a3/0x330 [ 423.540556][T12081] ? ksys_write+0x75/0x260 [ 423.545014][T12081] ksys_write+0x150/0x260 [ 423.549385][T12081] ? __ia32_sys_read+0x90/0x90 [ 423.554276][T12081] ? lockdep_hardirqs_on+0x98/0x150 [ 423.559602][T12081] do_syscall_64+0x55/0xa0 [ 423.564060][T12081] ? clear_bhb_loop+0x40/0x90 [ 423.568799][T12081] ? clear_bhb_loop+0x40/0x90 [ 423.573543][T12081] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 423.579575][T12081] RIP: 0033:0x7fa9b0f9aeb9 [ 423.584028][T12081] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 423.603769][T12081] RSP: 002b:00007fa9af1f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 423.612220][T12081] RAX: ffffffffffffffda RBX: 00007fa9b1215fa0 RCX: 00007fa9b0f9aeb9 [ 423.620222][T12081] RDX: 00000000002a979d RSI: 0000200000000000 RDI: 0000000000000003 [ 423.628219][T12081] RBP: 00007fa9af1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 423.636213][T12081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 423.644209][T12081] R13: 00007fa9b1216038 R14: 00007fa9b1215fa0 R15: 00007fff14b08d38 [ 423.652349][T12081] [ 424.037303][T12089] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 424.299389][T12077] chnl_net:caif_netlink_parms(): no params data found [ 424.316129][T12094] IPv6: Can't replace route, no match found [ 424.488655][T12077] bridge0: port 1(bridge_slave_0) entered blocking state [ 424.496364][T12077] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.518651][T12077] bridge_slave_0: entered allmulticast mode [ 424.551204][T12077] bridge_slave_0: entered promiscuous mode [ 424.569982][T12077] bridge0: port 2(bridge_slave_1) entered blocking state [ 424.577199][T12077] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.598445][T12077] bridge_slave_1: entered allmulticast mode [ 424.623755][T12077] bridge_slave_1: entered promiscuous mode [ 424.743384][T12077] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 424.785388][T12077] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 425.165270][T12077] team0: Port device team_slave_0 added [ 425.192043][T12077] team0: Port device team_slave_1 added [ 425.250845][T12077] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 425.268352][T12077] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 425.305097][T12077] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 425.322116][ T5785] Bluetooth: hci4: command tx timeout [ 425.331313][ T5785] Bluetooth: hci2: unexpected subevent 0x03 length: 150 > 9 [ 425.380199][T12077] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 425.387249][T12077] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 425.437746][T12077] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 425.528682][T12077] hsr_slave_0: entered promiscuous mode [ 425.542209][T12077] hsr_slave_1: entered promiscuous mode [ 426.085038][T12077] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.112543][T12133] IPv6: Can't replace route, no match found [ 426.124876][T12133] __nla_validate_parse: 1 callbacks suppressed [ 426.124888][T12133] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2305'. [ 426.252000][T12077] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.289356][T12138] FAULT_INJECTION: forcing a failure. [ 426.289356][T12138] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 426.310915][T12138] CPU: 1 PID: 12138 Comm: syz.0.2307 Not tainted syzkaller #0 [ 426.318459][T12138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 426.328562][T12138] Call Trace: [ 426.331872][T12138] [ 426.334829][T12138] dump_stack_lvl+0x18c/0x250 [ 426.339547][T12138] ? show_regs_print_info+0x20/0x20 [ 426.344777][T12138] ? load_image+0x400/0x400 [ 426.349581][T12138] ? __might_fault+0xaa/0x120 [ 426.354287][T12138] ? __lock_acquire+0x7d40/0x7d40 [ 426.359351][T12138] should_fail_ex+0x39d/0x4d0 [ 426.364069][T12138] _copy_from_user+0x2f/0xe0 [ 426.368700][T12138] ___sys_sendmsg+0x1c7/0x360 [ 426.373409][T12138] ? get_pid_task+0x20/0x1e0 [ 426.378125][T12138] ? __sys_sendmsg+0x2a0/0x2a0 [ 426.382938][T12138] ? __lock_acquire+0x7d40/0x7d40 [ 426.388030][T12138] __se_sys_sendmsg+0x1c2/0x2b0 [ 426.393090][T12138] ? __x64_sys_sendmsg+0x80/0x80 [ 426.398158][T12138] ? lockdep_hardirqs_on+0x98/0x150 [ 426.403390][T12138] do_syscall_64+0x55/0xa0 [ 426.407855][T12138] ? clear_bhb_loop+0x40/0x90 [ 426.412565][T12138] ? clear_bhb_loop+0x40/0x90 [ 426.417393][T12138] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 426.423495][T12138] RIP: 0033:0x7f34e9b9aeb9 [ 426.428024][T12138] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 426.447889][T12138] RSP: 002b:00007f34ea9a2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 426.456355][T12138] RAX: ffffffffffffffda RBX: 00007f34e9e15fa0 RCX: 00007f34e9b9aeb9 [ 426.464369][T12138] RDX: 0000000000000000 RSI: 0000200000001180 RDI: 0000000000000003 [ 426.472374][T12138] RBP: 00007f34ea9a2090 R08: 0000000000000000 R09: 0000000000000000 [ 426.480385][T12138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 426.488559][T12138] R13: 00007f34e9e16038 R14: 00007f34e9e15fa0 R15: 00007ffdd69d8878 [ 426.496657][T12138] [ 426.602165][ T5785] Bluetooth: hci1: unexpected subevent 0x03 length: 150 > 9 [ 426.623390][T12077] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.776004][T12077] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.215527][T12077] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 427.273149][T12077] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 427.313415][T12077] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 427.342966][T12077] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 427.397969][ T5785] Bluetooth: hci4: command tx timeout [ 427.553447][T12077] 8021q: adding VLAN 0 to HW filter on device bond0 [ 427.595417][T12077] 8021q: adding VLAN 0 to HW filter on device team0 [ 427.664247][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.671649][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 427.708973][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.716804][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 427.926245][T12174] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2320'. [ 427.983811][T12174] openvswitch: netlink: Flow key attribute not present in set flow. [ 428.576795][T12077] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 428.654850][T12077] veth0_vlan: entered promiscuous mode [ 428.715388][T12077] veth1_vlan: entered promiscuous mode [ 428.796401][T12077] veth0_macvtap: entered promiscuous mode [ 428.814492][T12077] veth1_macvtap: entered promiscuous mode [ 428.848333][T12077] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 428.879156][T12077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 428.890926][T12077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.914045][T12077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 428.972447][T12077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.039918][T12077] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 429.050908][T12205] netlink: 'syz.3.2330': attribute type 10 has an invalid length. [ 429.121232][T12205] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 429.132189][T12205] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 429.146436][T12207] IPv6: Can't replace route, no match found [ 429.156620][T12077] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.170780][T12077] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.181170][T12077] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.190912][T12077] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.211756][T12207] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2337'. [ 429.370144][T12212] netlink: 61967 bytes leftover after parsing attributes in process `syz.3.2332'. [ 429.416220][T12077] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 429.444833][T12077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.458823][T12077] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 429.471831][T12077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.479357][ T5785] Bluetooth: hci4: command tx timeout [ 429.559776][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 429.589750][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 429.657851][T12221] IPv6: Can't replace route, no match found [ 429.741979][T12224] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2335'. [ 429.752825][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 429.786967][T12218] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2333'. [ 429.797120][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 429.815576][T12218] openvswitch: netlink: Flow key attribute not present in set flow. [ 430.192135][T12236] syz.3.2340: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 430.222958][T12236] CPU: 0 PID: 12236 Comm: syz.3.2340 Not tainted syzkaller #0 [ 430.230703][T12236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 430.240823][T12236] Call Trace: [ 430.244143][T12236] [ 430.247116][T12236] dump_stack_lvl+0x18c/0x250 [ 430.251860][T12236] ? show_regs_print_info+0x20/0x20 [ 430.257200][T12236] ? load_image+0x400/0x400 [ 430.261779][T12236] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 430.268236][T12236] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 430.274777][T12236] warn_alloc+0x246/0x340 [ 430.279151][T12236] ? zone_watermark_ok_safe+0x230/0x230 [ 430.284750][T12236] ? kasan_set_track+0x5f/0x70 [ 430.289550][T12236] ? kasan_set_track+0x4e/0x70 [ 430.294340][T12236] ? __kasan_kmalloc+0x8f/0xa0 [ 430.299143][T12236] ? xsk_init_queue+0xad/0x100 [ 430.303938][T12236] ? xsk_setsockopt+0x4e5/0x760 [ 430.308909][T12236] ? do_sock_setsockopt+0x175/0x1a0 [ 430.314152][T12236] ? __x64_sys_setsockopt+0x182/0x200 [ 430.319564][T12236] __vmalloc_node_range+0x126/0x1330 [ 430.324914][T12236] ? free_vm_area+0x50/0x50 [ 430.329570][T12236] vmalloc_user+0x74/0x80 [ 430.333935][T12236] ? xskq_create+0xbf/0x170 [ 430.338476][T12236] xskq_create+0xbf/0x170 [ 430.342845][T12236] xsk_init_queue+0xad/0x100 [ 430.347476][T12236] xsk_setsockopt+0x4e5/0x760 [ 430.352189][T12236] ? xsk_poll+0x680/0x680 [ 430.356585][T12236] ? __fget_files+0x28/0x4b0 [ 430.361220][T12236] ? __fget_files+0x28/0x4b0 [ 430.366016][T12236] ? aa_sock_opt_perm+0x74/0x100 [ 430.370988][T12236] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 430.376572][T12236] ? security_socket_setsockopt+0x7e/0xa0 [ 430.382333][T12236] ? xsk_poll+0x680/0x680 [ 430.386700][T12236] do_sock_setsockopt+0x175/0x1a0 [ 430.391770][T12236] ? __fdget+0x180/0x210 [ 430.396138][T12236] __x64_sys_setsockopt+0x182/0x200 [ 430.401386][T12236] do_syscall_64+0x55/0xa0 [ 430.405845][T12236] ? clear_bhb_loop+0x40/0x90 [ 430.410563][T12236] ? clear_bhb_loop+0x40/0x90 [ 430.415276][T12236] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 430.421204][T12236] RIP: 0033:0x7f2f48b9aeb9 [ 430.425647][T12236] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 430.445293][T12236] RSP: 002b:00007f2f49a43028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 430.453748][T12236] RAX: ffffffffffffffda RBX: 00007f2f48e15fa0 RCX: 00007f2f48b9aeb9 [ 430.461768][T12236] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000006 [ 430.469782][T12236] RBP: 00007f2f48c08c1f R08: 0000000000000004 R09: 0000000000000000 [ 430.477789][T12236] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 430.485796][T12236] R13: 00007f2f48e16038 R14: 00007f2f48e15fa0 R15: 00007ffff6b932b8 [ 430.493810][T12236] [ 430.544752][T12236] Mem-Info: [ 430.579300][T12236] active_anon:12144 inactive_anon:0 isolated_anon:0 [ 430.579300][T12236] active_file:18520 inactive_file:40060 isolated_file:0 [ 430.579300][T12236] unevictable:768 dirty:133 writeback:0 [ 430.579300][T12236] slab_reclaimable:10394 slab_unreclaimable:94502 [ 430.579300][T12236] mapped:24517 shmem:1361 pagetables:554 [ 430.579300][T12236] sec_pagetables:0 bounce:0 [ 430.579300][T12236] kernel_misc_reclaimable:0 [ 430.579300][T12236] free:1335167 free_pcp:9726 free_cma:0 [ 430.636202][T12236] Node 0 active_anon:48476kB inactive_anon:0kB active_file:74080kB inactive_file:160036kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:98068kB dirty:532kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12744kB pagetables:2216kB sec_pagetables:0kB all_unreclaimable? no [ 430.709734][ T5785] Bluetooth: hci3: ISO packet for unknown connection handle 1854 [ 430.721287][T12236] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 430.763026][T12236] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 430.802125][T12236] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 430.809069][T12236] Node 0 DMA32 free:1430088kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:48540kB inactive_anon:0kB active_file:74080kB inactive_file:159212kB unevictable:1536kB writepending:528kB present:3129332kB managed:2586972kB mlocked:0kB bounce:0kB free_pcp:20868kB local_pcp:10784kB free_cma:0kB [ 430.853109][T12236] lowmem_reserve[]: 0 0 0 0 0 [ 430.860916][T12236] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:4kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB [ 430.918214][T12250] IPv6: Can't replace route, no match found [ 430.928530][T12236] lowmem_reserve[]: 0 0 0 0 0 [ 430.951975][T12236] Node 1 Normal free:3895220kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:17532kB local_pcp:10588kB free_cma:0kB [ 431.005385][T12251] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2345'. [ 431.074305][T12236] lowmem_reserve[]: 0 0 0 0 0 [ 431.092443][T12236] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 431.182421][T12236] Node 0 DMA32: 114*4kB (UME) 1438*8kB (ME) 771*16kB (UM) 729*32kB (UME) 1079*64kB (UME) 385*128kB (UME) 90*256kB (UM) 24*512kB (UME) 14*1024kB (UM) 11*2048kB (UME) 291*4096kB (UM) = 1430088kB [ 431.259161][T12236] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 431.305715][T12236] Node 1 Normal: 173*4kB (UME) 52*8kB (UME) 40*16kB (UME) 63*32kB (UME) 22*64kB (UME) 11*128kB (UME) 2*256kB (ME) 2*512kB (UE) 0*1024kB 2*2048kB (UE) 948*4096kB (M) = 3895220kB [ 431.354705][T12236] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 431.368003][T12236] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 431.395299][T12236] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 431.405898][T12236] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 431.415461][T12236] 59941 total pagecache pages [ 431.420381][T12236] 0 pages in swap cache [ 431.424659][T12236] Free swap = 124996kB [ 431.429048][T12236] Total swap = 124996kB [ 431.433409][T12236] 2097051 pages RAM [ 431.438105][T12236] 0 pages HighMem/MovableOnly [ 431.443021][T12236] 416922 pages reserved [ 431.451881][T12236] 0 pages cma reserved [ 431.565086][ T5785] Bluetooth: hci4: command tx timeout [ 431.734896][T12260] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2349'. [ 431.831101][T12263] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2351'. [ 431.855200][T12260] openvswitch: netlink: Flow key attribute not present in set flow. [ 432.213040][T12275] netlink: 'syz.0.2353': attribute type 1 has an invalid length. [ 432.252768][T12275] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.2353'. [ 432.529249][ T5785] Bluetooth: hci1: ISO packet for unknown connection handle 2562 [ 433.064539][ T5779] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 433.091538][ T5779] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 433.106007][ T5779] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 433.123046][ T5779] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 433.140803][ T5779] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 433.148797][ T5779] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 433.808248][T12288] netlink: 'syz.1.2360': attribute type 3 has an invalid length. [ 433.889033][T12288] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.2360'. [ 434.330037][T12283] chnl_net:caif_netlink_parms(): no params data found [ 434.830713][T12283] bridge0: port 1(bridge_slave_0) entered blocking state [ 434.958623][T12283] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.966070][T12283] bridge_slave_0: entered allmulticast mode [ 435.005321][T12283] bridge_slave_0: entered promiscuous mode [ 435.069091][T12283] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.114026][T12283] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.121742][T12283] bridge_slave_1: entered allmulticast mode [ 435.129683][T12283] bridge_slave_1: entered promiscuous mode [ 435.184105][T12302] netlink: 763 bytes leftover after parsing attributes in process `syz.1.2364'. [ 435.246356][ T5779] Bluetooth: hci0: command tx timeout [ 435.342396][T12283] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 435.372302][T12283] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 435.636094][T12283] team0: Port device team_slave_0 added [ 435.650620][T12283] team0: Port device team_slave_1 added [ 435.799825][T12283] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 435.806939][T12283] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 435.962066][T12283] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 436.019957][T12283] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 436.057457][T12283] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 436.147876][T12283] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 436.185771][T12316] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2368'. [ 436.490197][T12283] hsr_slave_0: entered promiscuous mode [ 436.554901][T12283] hsr_slave_1: entered promiscuous mode [ 436.615253][T12283] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 436.641938][T12283] Cannot create hsr debugfs directory [ 437.318239][ T5779] Bluetooth: hci0: command tx timeout [ 437.495057][T12283] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.720408][T12283] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.880586][T12339] IPv6: Can't replace route, no match found [ 437.916926][T12339] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2377'. [ 438.076221][T12283] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.317149][T12283] bond0: (slave netdevsim0): Releasing backup interface [ 438.326897][T12283] netdevsim netdevsim3 netdevsim0 (unregistering): left promiscuous mode [ 438.356971][T12283] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.385848][T12347] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2379'. [ 438.868553][T12352] netlink: 'syz.0.2378': attribute type 10 has an invalid length. [ 438.885560][T12352] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.2378'. [ 438.917021][T12354] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2381'. [ 439.154849][T12283] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 439.213653][T12283] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 439.256192][T12283] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 439.304144][T12283] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 439.387001][T12368] netlink: 'syz.0.2384': attribute type 10 has an invalid length. [ 439.397954][ T5779] Bluetooth: hci0: command tx timeout [ 439.408694][T12368] team0: Device veth0_vlan is up. Set it down before adding it as a team port [ 439.748729][T12381] IPv6: Can't replace route, no match found [ 439.761683][T12283] 8021q: adding VLAN 0 to HW filter on device bond0 [ 439.791422][T12381] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2386'. [ 439.822298][T12283] 8021q: adding VLAN 0 to HW filter on device team0 [ 439.855660][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.862993][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 439.931566][ T7623] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.939047][ T7623] bridge0: port 2(bridge_slave_1) entered forwarding state [ 440.073772][T12385] netlink: 'syz.2.2388': attribute type 2 has an invalid length. [ 440.117580][T12385] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2388'. [ 440.446827][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.455459][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.720049][T12283] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 440.846921][T12283] veth0_vlan: entered promiscuous mode [ 440.998230][T12283] veth1_vlan: entered promiscuous mode [ 441.038534][T12405] IPv6: Can't replace route, no match found [ 441.091277][T12405] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2394'. [ 441.235268][T12283] veth0_macvtap: entered promiscuous mode [ 441.276247][T12283] veth1_macvtap: entered promiscuous mode [ 441.354276][T12283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 441.382461][T12283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.409470][T12283] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 441.450365][T12283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 441.476862][T12283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.487467][ T5779] Bluetooth: hci0: command tx timeout [ 441.506961][T12283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 441.527413][T12283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.547715][T12283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 441.566755][T12283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.589737][T12283] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 441.645975][T12283] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.682510][T12283] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.700783][T12283] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.712217][T12283] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.112575][T12283] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 442.138074][T12421] netlink: 'syz.2.2399': attribute type 9 has an invalid length. [ 442.181697][T12283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.196864][T12421] netlink: 399 bytes leftover after parsing attributes in process `syz.2.2399'. [ 442.242860][T12283] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 442.294330][T12283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.471996][ T7623] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 442.500035][ T7623] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 442.771295][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 442.828560][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 443.545132][ T5779] Bluetooth: hci1: ISO packet for unknown connection handle 1854 [ 444.729731][T12447] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2407'. [ 444.813693][T12441] IPv6: Can't replace route, no match found [ 444.855989][ T5785] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 444.865778][ T5785] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 444.874361][ T5785] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 444.887742][T12454] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2405'. [ 444.902474][ T5785] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 444.911976][ T5785] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 444.938102][ T5785] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 445.038741][ T7607] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.164090][ T7607] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.306526][ T7607] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.455296][ T7607] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.234082][T12458] chnl_net:caif_netlink_parms(): no params data found [ 446.387149][T12485] netlink: 56537 bytes leftover after parsing attributes in process `syz.2.2415'. [ 446.791720][T12494] IPv6: Can't replace route, no match found [ 447.002760][ T5779] Bluetooth: hci2: command tx timeout [ 447.059539][T12494] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2417'. [ 447.712943][T12458] bridge0: port 1(bridge_slave_0) entered blocking state [ 447.756149][T12458] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.783872][T12458] bridge_slave_0: entered allmulticast mode [ 447.800089][T12458] bridge_slave_0: entered promiscuous mode [ 447.837599][T12523] netlink: 'syz.0.2423': attribute type 21 has an invalid length. [ 448.013883][T12526] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2423'. [ 448.032270][T12526] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 448.100411][T12525] ªªªªªª: renamed from vlan0 (while UP) [ 448.297972][T12458] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.326281][T12458] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.347617][T12458] bridge_slave_1: entered allmulticast mode [ 448.366509][T12458] bridge_slave_1: entered promiscuous mode [ 448.789019][T12458] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 448.834319][T12458] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 448.882633][T12532] syzkaller0: entered promiscuous mode [ 448.914247][T12532] syzkaller0: entered allmulticast mode [ 449.077709][ T5779] Bluetooth: hci2: command tx timeout [ 449.271657][T12458] team0: Port device team_slave_0 added [ 449.404546][T12458] team0: Port device team_slave_1 added [ 449.797782][ T5866] page_pool_release_retry() stalled pool shutdown 1 inflight 60 sec [ 449.848126][T12458] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 449.883105][T12458] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 449.915965][T12458] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 449.963995][T12458] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 449.995781][T12458] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 450.059158][T12458] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 450.194865][T12574] netlink: 'syz.2.2436': attribute type 19 has an invalid length. [ 450.344431][ T7607] ªªªªªª: left allmulticast mode [ 450.366121][ T7607] veth0_vlan: left allmulticast mode [ 450.395926][ T7607] ªªªªªª: left promiscuous mode [ 450.407655][ T7607] À: port 1(ªªªªªª) entered disabled state [ 450.442310][ T7607] veth0_to_team: left allmulticast mode [ 450.468364][ T7607] veth0_to_team: left promiscuous mode [ 450.474160][ T7607] Ÿë: port 1(veth0_to_team) entered disabled state [ 450.584354][ T7607] veth1_macvtap: left promiscuous mode [ 450.591511][ T7607] veth0_macvtap: left promiscuous mode [ 450.597166][ T7607] veth1_vlan: left promiscuous mode [ 450.605166][ T7607] veth0_vlan: left promiscuous mode [ 451.221347][ T5779] Bluetooth: hci2: command tx timeout [ 452.025273][ T7607] team0 (unregistering): Port device macvlan0 removed [ 452.615697][ T7607] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 452.761480][ T7607] team0 (unregistering): Port device team_slave_1 removed [ 452.860317][ T7607] team0 (unregistering): Port device C removed [ 452.960687][ T7607] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 453.073641][ T7607] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 453.246876][ T5779] Bluetooth: hci2: command tx timeout [ 453.710767][ T7607] bond0 (unregistering): (slave team0): Releasing backup interface [ 453.780319][ T7607] bond0 (unregistering): Released all slaves [ 454.083931][T12458] hsr_slave_0: entered promiscuous mode [ 454.113854][T12458] hsr_slave_1: entered promiscuous mode [ 454.127805][T12458] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 454.142419][T12458] Cannot create hsr debugfs directory [ 455.191892][T12665] netlink: 'syz.2.2467': attribute type 13 has an invalid length. [ 455.223800][T12665] netlink: 'syz.2.2467': attribute type 58 has an invalid length. [ 455.235347][T12665] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2467'. [ 455.253942][T12667] netlink: 61951 bytes leftover after parsing attributes in process `syz.0.2468'. [ 455.325245][T12665] netlink: 'syz.2.2467': attribute type 29 has an invalid length. [ 455.654141][T12665] netlink: 'syz.2.2467': attribute type 29 has an invalid length. [ 456.142648][T12679] sit0: entered allmulticast mode [ 456.736945][T12458] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 456.794413][T12458] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 456.858377][T12458] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 456.943601][T12458] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 457.342021][T12458] 8021q: adding VLAN 0 to HW filter on device bond0 [ 457.453730][T12458] 8021q: adding VLAN 0 to HW filter on device team0 [ 457.493050][ T7623] bridge0: port 1(bridge_slave_0) entered blocking state [ 457.500438][ T7623] bridge0: port 1(bridge_slave_0) entered forwarding state [ 457.567398][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 457.574626][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 458.361881][T12725] netlink: 'syz.2.2480': attribute type 10 has an invalid length. [ 458.466155][T12458] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 458.630283][T12458] veth0_vlan: entered promiscuous mode [ 458.690697][T12458] veth1_vlan: entered promiscuous mode [ 458.811821][T12458] veth0_macvtap: entered promiscuous mode [ 458.854771][T12458] veth1_macvtap: entered promiscuous mode [ 458.918263][T12458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 458.957462][T12458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 459.003968][T12458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 459.028730][T12458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 459.057189][T12458] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 459.083116][T12458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 459.094971][T12458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 459.141879][T12458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 459.166275][T12458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 459.176793][T12458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 459.193492][T12458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 459.205002][T12458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 459.226382][T12458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 459.264515][T12458] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 459.311940][T12458] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.346129][T12458] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.397626][T12458] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.430989][T12458] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.569018][T12751] ÿ: renamed from bond_slave_0 (while UP) [ 459.731325][T12755] netlink: 'syz.0.2491': attribute type 21 has an invalid length. [ 459.757857][T12755] netlink: 'syz.0.2491': attribute type 6 has an invalid length. [ 459.788423][T12755] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2491'. [ 459.862237][T12458] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 459.899191][T12458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 459.928023][T12458] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 459.953772][T12458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 460.038357][ T5785] Bluetooth: hci0: Malformed LE Event: 0x1d [ 460.140474][ T7644] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 460.198190][ T7644] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 460.328953][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 460.359204][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 462.011013][ T5785] Bluetooth: hci2: Malformed LE Event: 0x1d [ 462.150677][T12805] netlink: 1057 bytes leftover after parsing attributes in process `syz.3.2499'. [ 462.448940][T12808] netlink: 'syz.1.2503': attribute type 10 has an invalid length. [ 462.671320][T12808] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 462.728651][ T5779] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 462.767201][ T5779] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 462.776523][ T5779] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 462.792801][ T5779] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 462.808221][ T5779] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 462.817714][ T5779] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 464.414419][T12838] ªªªªªª: renamed from vlan0 (while UP) [ 464.475487][T12813] chnl_net:caif_netlink_parms(): no params data found [ 464.755218][T12845] netlink: 'syz.1.2509': attribute type 29 has an invalid length. [ 464.797934][T12845] netlink: 'syz.1.2509': attribute type 29 has an invalid length. [ 464.864623][T12847] netlink: 'syz.1.2509': attribute type 29 has an invalid length. [ 464.878854][T12845] netlink: 'syz.1.2509': attribute type 29 has an invalid length. [ 464.896400][T12813] bridge0: port 1(bridge_slave_0) entered blocking state [ 464.904090][T12813] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.916809][T12813] bridge_slave_0: entered allmulticast mode [ 464.923040][ T5785] Bluetooth: hci3: command tx timeout [ 464.936779][T12813] bridge_slave_0: entered promiscuous mode [ 464.957703][T12847] netlink: 'syz.1.2509': attribute type 29 has an invalid length. [ 464.968626][T12813] bridge0: port 2(bridge_slave_1) entered blocking state [ 464.976604][T12813] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.984033][T12813] bridge_slave_1: entered allmulticast mode [ 464.991976][T12813] bridge_slave_1: entered promiscuous mode [ 465.053255][T12813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 465.075091][T12813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 465.184874][T12813] team0: Port device team_slave_0 added [ 465.203558][T12813] team0: Port device team_slave_1 added [ 465.289489][T12813] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 465.310664][ T5785] Bluetooth: hci2: Malformed LE Event: 0x1d [ 465.317477][T12813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 465.360452][T12813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 465.373877][T12813] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 465.382409][T12813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 465.419239][T12813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 465.619460][T12813] hsr_slave_0: entered promiscuous mode [ 465.668896][T12813] hsr_slave_1: entered promiscuous mode [ 465.699922][T12813] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 465.737574][T12813] Cannot create hsr debugfs directory [ 465.866153][T12858] pim6reg: tun_chr_ioctl cmd 2147767521 [ 466.020765][T12864] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 466.075016][T12864] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 466.123418][T12864] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 466.182760][T12864] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 466.278352][ T5785] Bluetooth: hci0: Malformed LE Event: 0x1d [ 466.796574][T12813] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.000496][ T5785] Bluetooth: hci3: command tx timeout [ 467.047696][T12813] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.399500][T12881] netlink: 1057 bytes leftover after parsing attributes in process `syz.2.2521'. [ 467.423386][T12813] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.483401][T12888] netlink: 'syz.1.2525': attribute type 2 has an invalid length. [ 467.511575][T12888] netlink: 17267 bytes leftover after parsing attributes in process `syz.1.2525'. [ 467.757822][T12813] bond0: (slave netdevsim0): Releasing backup interface [ 467.773734][T12813] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.171657][T12813] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 468.209062][T12813] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 468.251193][T12813] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 468.291619][T12813] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 468.302186][ T5785] Bluetooth: hci0: Malformed LE Event: 0x1d [ 468.928577][T12813] 8021q: adding VLAN 0 to HW filter on device bond0 [ 469.078391][ T5785] Bluetooth: hci3: command tx timeout [ 469.681806][T12813] 8021q: adding VLAN 0 to HW filter on device team0 [ 469.742360][ T5785] Bluetooth: hci0: Malformed LE Event: 0x1d [ 469.752669][ T7642] bridge0: port 1(bridge_slave_0) entered blocking state [ 469.760072][ T7642] bridge0: port 1(bridge_slave_0) entered forwarding state [ 469.923053][ T7642] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.930367][ T7642] bridge0: port 2(bridge_slave_1) entered forwarding state [ 470.763897][T12933] syzkaller0: entered promiscuous mode [ 470.774033][T12933] syzkaller0: entered allmulticast mode [ 470.877225][T12930] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.2538'. [ 471.074471][T12813] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 471.161725][ T5785] Bluetooth: hci3: command tx timeout [ 471.187525][T12813] veth0_vlan: entered promiscuous mode [ 471.276234][T12813] veth1_vlan: entered promiscuous mode [ 471.322847][ T5785] Bluetooth: hci4: Malformed LE Event: 0x1d [ 471.402445][T12813] veth0_macvtap: entered promiscuous mode [ 471.466473][T12813] veth1_macvtap: entered promiscuous mode [ 471.504788][T12813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 471.523199][T12813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.544600][T12813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 471.555505][T12813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.576005][T12813] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 471.601975][T12813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 471.620941][T12813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.644486][T12813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 471.697425][T12813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.718118][T12813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 471.737802][T12813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.762796][T12813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 471.774336][T12813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.786872][T12813] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 471.840111][T12813] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.850528][T12813] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.859290][T12959] netlink: 1057 bytes leftover after parsing attributes in process `syz.2.2551'. [ 471.901553][T12813] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.917922][T12813] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.080444][ T5785] Bluetooth: hci0: Malformed LE Event: 0x1d [ 472.140542][T12813] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 472.176457][T12813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.192561][T12813] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 472.217578][T12813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.274936][ T7607] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 472.308360][T12961] netlink: 1057 bytes leftover after parsing attributes in process `syz.1.2552'. [ 472.321995][ T7607] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 472.423483][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 472.472176][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 472.823200][ T5785] Bluetooth: hci4: Malformed LE Event: 0x1d [ 473.173969][T12996] IPv6: Can't replace route, no match found [ 473.234204][T13000] IPv6: Can't replace route, no match found [ 473.273890][T12996] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2564'. [ 473.285868][T13000] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2566'. [ 473.424153][T13005] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 473.443135][T13005] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 473.470777][T13005] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 473.487024][T13005] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 473.659667][T13009] netlink: 'syz.0.2569': attribute type 10 has an invalid length. [ 473.668433][T13009] hsr_slave_0: left promiscuous mode [ 473.681953][T13009] hsr_slave_1: left promiscuous mode [ 473.883602][ T5785] Bluetooth: hci0: Malformed LE Event: 0x1d [ 474.406057][T13023] ±ÿ: renamed from team_slave_1 (while UP) [ 474.463694][T13025] IPv6: Can't replace route, no match found [ 474.476371][T13025] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2576'. [ 474.685258][T13030] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2579'. [ 474.781337][T13033] IPv6: Can't replace route, no match found [ 474.821114][T13033] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2578'. [ 475.085408][ T5785] Bluetooth: hci2: Malformed LE Event: 0x1d [ 476.054195][T13048] IPv6: Can't replace route, no match found [ 476.098200][T13048] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2586'. [ 476.712970][T13054] IPv6: Can't replace route, no match found [ 476.735287][T13054] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2589'. [ 476.856648][ T5785] Bluetooth: hci0: Malformed LE Event: 0x1d [ 477.360076][T13068] IPv6: Can't replace route, no match found [ 477.380974][T13072] netlink: 'syz.0.2598': attribute type 10 has an invalid length. [ 477.398186][T13074] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2597'. [ 477.420308][T13074] batadv_slave_1: entered promiscuous mode [ 477.447742][T13075] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2596'. [ 477.584097][ T5785] Bluetooth: hci2: Malformed LE Event: 0x1d [ 478.207910][T13104] FAULT_INJECTION: forcing a failure. [ 478.207910][T13104] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 478.241913][T13104] CPU: 1 PID: 13104 Comm: syz.3.2608 Not tainted syzkaller #0 [ 478.249581][T13104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 478.259781][T13104] Call Trace: [ 478.263103][T13104] [ 478.266075][T13104] dump_stack_lvl+0x18c/0x250 [ 478.271013][T13104] ? show_regs_print_info+0x20/0x20 [ 478.276360][T13104] ? load_image+0x400/0x400 [ 478.280931][T13104] ? __lock_acquire+0x7d40/0x7d40 [ 478.286022][T13104] should_fail_ex+0x39d/0x4d0 [ 478.290784][T13104] prepare_alloc_pages+0x1e2/0x5f0 [ 478.295979][T13104] __alloc_pages+0x134/0x460 [ 478.300623][T13104] ? zone_statistics+0x170/0x170 [ 478.305636][T13104] __folio_alloc+0x10/0x20 [ 478.310109][T13104] vma_alloc_folio+0x47a/0x8f0 [ 478.314928][T13104] ? mpol_shared_policy_lookup+0x14b/0x1e0 [ 478.320794][T13104] shmem_alloc_folio+0x1a9/0x2a0 [ 478.325785][T13104] ? folio_put+0xd0/0xd0 [ 478.330114][T13104] ? __vm_enough_memory+0x11b/0x370 [ 478.335395][T13104] ? shmem_inode_acct_block+0x35e/0x460 [ 478.340997][T13104] shmem_alloc_and_acct_folio+0x1e6/0x6d0 [ 478.346777][T13104] ? put_swap_device+0x230/0x230 [ 478.351772][T13104] ? xas_load+0x12b/0x140 [ 478.356160][T13104] ? filemap_get_entry+0xce/0x3f0 [ 478.361253][T13104] ? filemap_get_entry+0xce/0x3f0 [ 478.366344][T13104] ? filemap_get_entry+0x379/0x3f0 [ 478.371608][T13104] ? page_cache_prev_miss+0x390/0x390 [ 478.377029][T13104] ? mark_lock+0x94/0x320 [ 478.381443][T13104] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 478.387491][T13104] ? lock_chain_count+0x20/0x20 [ 478.392410][T13104] shmem_get_folio_gfp+0xcde/0x2aa0 [ 478.397704][T13104] shmem_write_begin+0xf2/0x420 [ 478.402622][T13104] generic_perform_write+0x2fe/0x5c0 [ 478.408000][T13104] ? generic_file_direct_write+0x3e0/0x3e0 [ 478.413869][T13104] ? down_write+0x16e/0x200 [ 478.418536][T13104] ? file_update_time+0x98/0x1a0 [ 478.423540][T13104] shmem_file_write_iter+0xfb/0x120 [ 478.428803][T13104] vfs_write+0x46c/0x990 [ 478.433218][T13104] ? file_end_write+0x250/0x250 [ 478.438145][T13104] ? __fget_files+0x43d/0x4b0 [ 478.442895][T13104] ? __fdget_pos+0x2a3/0x330 [ 478.447540][T13104] ? ksys_write+0x75/0x260 [ 478.452018][T13104] ksys_write+0x150/0x260 [ 478.456411][T13104] ? __ia32_sys_read+0x90/0x90 [ 478.461244][T13104] ? lockdep_hardirqs_on+0x98/0x150 [ 478.466522][T13104] do_syscall_64+0x55/0xa0 [ 478.471000][T13104] ? clear_bhb_loop+0x40/0x90 [ 478.475817][T13104] ? clear_bhb_loop+0x40/0x90 [ 478.480547][T13104] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 478.486493][T13104] RIP: 0033:0x7fe4a2d9aeb9 [ 478.490970][T13104] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 478.510630][T13104] RSP: 002b:00007fe4a3c47028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 478.519102][T13104] RAX: ffffffffffffffda RBX: 00007fe4a3015fa0 RCX: 00007fe4a2d9aeb9 [ 478.527142][T13104] RDX: 00000000002a979d RSI: 0000200000000000 RDI: 0000000000000003 [ 478.535393][T13104] RBP: 00007fe4a3c47090 R08: 0000000000000000 R09: 0000000000000000 [ 478.543505][T13104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 478.551616][T13104] R13: 00007fe4a3016038 R14: 00007fe4a3015fa0 R15: 00007ffe023cac88 [ 478.559662][T13104] [ 478.771042][T13112] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 479.330509][T13135] FAULT_INJECTION: forcing a failure. [ 479.330509][T13135] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 479.344811][T13135] CPU: 0 PID: 13135 Comm: syz.0.2619 Not tainted syzkaller #0 [ 479.352355][T13135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 479.362576][T13135] Call Trace: [ 479.365925][T13135] [ 479.368924][T13135] dump_stack_lvl+0x18c/0x250 [ 479.374052][T13135] ? show_regs_print_info+0x20/0x20 [ 479.379360][T13135] ? load_image+0x400/0x400 [ 479.383953][T13135] ? __might_fault+0xaa/0x120 [ 479.388718][T13135] ? __lock_acquire+0x7d40/0x7d40 [ 479.393843][T13135] should_fail_ex+0x39d/0x4d0 [ 479.398624][T13135] _copy_to_user+0x2f/0xa0 [ 479.403225][T13135] bpf_test_finish+0x19f/0x650 [ 479.408109][T13135] ? convert_skb_to___skb+0x420/0x420 [ 479.413561][T13135] ? read_tsc+0x9/0x20 [ 479.417727][T13135] bpf_prog_test_run_sk_lookup+0x980/0xbe0 [ 479.423604][T13135] ? __fget_files+0x28/0x4b0 [ 479.428299][T13135] ? bpf_test_timer_leave+0x150/0x150 [ 479.433766][T13135] ? bpf_test_timer_leave+0x150/0x150 [ 479.439213][T13135] bpf_prog_test_run+0x321/0x390 [ 479.444233][T13135] __sys_bpf+0x49d/0x890 [ 479.448551][T13135] ? bpf_link_show_fdinfo+0x390/0x390 [ 479.454038][T13135] ? lock_chain_count+0x20/0x20 [ 479.458971][T13135] __x64_sys_bpf+0x7c/0x90 [ 479.463452][T13135] do_syscall_64+0x55/0xa0 [ 479.467931][T13135] ? clear_bhb_loop+0x40/0x90 [ 479.472700][T13135] ? clear_bhb_loop+0x40/0x90 [ 479.477447][T13135] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 479.483419][T13135] RIP: 0033:0x7f977f59aeb9 [ 479.487900][T13135] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 479.507582][T13135] RSP: 002b:00007f9780477028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 479.516067][T13135] RAX: ffffffffffffffda RBX: 00007f977f815fa0 RCX: 00007f977f59aeb9 [ 479.524111][T13135] RDX: 0000000000000048 RSI: 0000200000000440 RDI: 000000000000000a [ 479.532230][T13135] RBP: 00007f9780477090 R08: 0000000000000000 R09: 0000000000000000 [ 479.540257][T13135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 479.548288][T13135] R13: 00007f977f816038 R14: 00007f977f815fa0 R15: 00007ffc8eeb8068 [ 479.556370][T13135] [ 479.764630][T13144] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.2622'. [ 479.776009][T13144] netlink: zone id is out of range [ 479.782201][T13144] netlink: zone id is out of range [ 479.794021][T13144] netlink: zone id is out of range [ 479.800146][T13144] netlink: zone id is out of range [ 479.805461][T13144] netlink: zone id is out of range [ 479.819492][T13144] netlink: zone id is out of range [ 479.824699][T13144] netlink: zone id is out of range [ 479.848378][T13144] netlink: zone id is out of range [ 479.853589][T13144] netlink: zone id is out of range [ 479.881235][T13144] netlink: zone id is out of range [ 480.516692][T13167] FAULT_INJECTION: forcing a failure. [ 480.516692][T13167] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 480.530323][T13167] CPU: 0 PID: 13167 Comm: syz.3.2632 Not tainted syzkaller #0 [ 480.537850][T13167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 480.547961][T13167] Call Trace: [ 480.551311][T13167] [ 480.554293][T13167] dump_stack_lvl+0x18c/0x250 [ 480.559393][T13167] ? show_regs_print_info+0x20/0x20 [ 480.564746][T13167] ? load_image+0x400/0x400 [ 480.569312][T13167] ? __lock_acquire+0x7d40/0x7d40 [ 480.574390][T13167] should_fail_ex+0x39d/0x4d0 [ 480.579215][T13167] _copy_from_user+0x2f/0xe0 [ 480.583865][T13167] __copy_msghdr+0x3bb/0x580 [ 480.588526][T13167] ___sys_sendmsg+0x214/0x360 [ 480.593274][T13167] ? get_pid_task+0x20/0x1e0 [ 480.597945][T13167] ? __sys_sendmsg+0x2a0/0x2a0 [ 480.602873][T13167] ? __lock_acquire+0x7d40/0x7d40 [ 480.607983][T13167] __se_sys_sendmsg+0x1c2/0x2b0 [ 480.612911][T13167] ? __x64_sys_sendmsg+0x80/0x80 [ 480.617914][T13167] ? lockdep_hardirqs_on+0x98/0x150 [ 480.623165][T13167] do_syscall_64+0x55/0xa0 [ 480.627639][T13167] ? clear_bhb_loop+0x40/0x90 [ 480.632361][T13167] ? clear_bhb_loop+0x40/0x90 [ 480.637112][T13167] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 480.643113][T13167] RIP: 0033:0x7fe4a2d9aeb9 [ 480.647582][T13167] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 480.667316][T13167] RSP: 002b:00007fe4a3c47028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 480.675768][T13167] RAX: ffffffffffffffda RBX: 00007fe4a3015fa0 RCX: 00007fe4a2d9aeb9 [ 480.683773][T13167] RDX: 0000000000000000 RSI: 0000200000001180 RDI: 0000000000000003 [ 480.691865][T13167] RBP: 00007fe4a3c47090 R08: 0000000000000000 R09: 0000000000000000 [ 480.699869][T13167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 480.707868][T13167] R13: 00007fe4a3016038 R14: 00007fe4a3015fa0 R15: 00007ffe023cac88 [ 480.715900][T13167] [ 480.895520][ T5785] Bluetooth: hci3: unexpected subevent 0x03 length: 150 > 9 [ 485.177184][T13225] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.2654'. [ 485.688552][T13239] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2657'. [ 485.698617][T13239] net_ratelimit: 331 callbacks suppressed [ 485.698633][T13239] openvswitch: netlink: Key type 29 is not supported [ 485.718555][ T5785] Bluetooth: hci4: unexpected subevent 0x03 length: 150 > 9 [ 486.104888][T13249] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2662'. [ 486.421096][ T5785] Bluetooth: hci2: unexpected subevent 0x03 length: 150 > 9 [ 486.791219][T13267] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2671'. [ 486.804759][T13271] netlink: 'syz.3.2672': attribute type 40 has an invalid length. [ 487.241548][T13266] can: request_module (can-proto-0) failed. [ 489.824547][ T5785] Bluetooth: hci4: unexpected subevent 0x03 length: 150 > 9 [ 489.869017][T13295] IPv6: Can't replace route, no match found [ 489.886688][T13295] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2682'. [ 490.046730][T13301] IPv6: Can't replace route, no match found [ 490.074195][T13301] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2683'. [ 490.292265][T13309] FAULT_INJECTION: forcing a failure. [ 490.292265][T13309] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 490.325543][T13309] CPU: 1 PID: 13309 Comm: syz.0.2686 Not tainted syzkaller #0 [ 490.333117][T13309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 490.343257][T13309] Call Trace: [ 490.346596][T13309] [ 490.349589][T13309] dump_stack_lvl+0x18c/0x250 [ 490.354353][T13309] ? show_regs_print_info+0x20/0x20 [ 490.359634][T13309] ? load_image+0x400/0x400 [ 490.364307][T13309] ? __might_fault+0xaa/0x120 [ 490.369058][T13309] ? __lock_acquire+0x7d40/0x7d40 [ 490.374190][T13309] should_fail_ex+0x39d/0x4d0 [ 490.378951][T13309] _copy_to_user+0x2f/0xa0 [ 490.383442][T13309] bpf_test_finish+0x25a/0x650 [ 490.388286][T13309] ? convert_skb_to___skb+0x420/0x420 [ 490.393731][T13309] ? read_tsc+0x9/0x20 [ 490.397895][T13309] bpf_prog_test_run_sk_lookup+0x980/0xbe0 [ 490.403782][T13309] ? __fget_files+0x28/0x4b0 [ 490.408489][T13309] ? bpf_test_timer_leave+0x150/0x150 [ 490.414058][T13309] ? bpf_test_timer_leave+0x150/0x150 [ 490.419518][T13309] bpf_prog_test_run+0x321/0x390 [ 490.424539][T13309] __sys_bpf+0x49d/0x890 [ 490.428858][T13309] ? bpf_link_show_fdinfo+0x390/0x390 [ 490.434337][T13309] ? lock_chain_count+0x20/0x20 [ 490.439281][T13309] __x64_sys_bpf+0x7c/0x90 [ 490.444080][T13309] do_syscall_64+0x55/0xa0 [ 490.448577][T13309] ? clear_bhb_loop+0x40/0x90 [ 490.453326][T13309] ? clear_bhb_loop+0x40/0x90 [ 490.458089][T13309] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 490.464062][T13309] RIP: 0033:0x7f977f59aeb9 [ 490.468545][T13309] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 490.488309][T13309] RSP: 002b:00007f9780477028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 490.497243][T13309] RAX: ffffffffffffffda RBX: 00007f977f815fa0 RCX: 00007f977f59aeb9 [ 490.505302][T13309] RDX: 0000000000000048 RSI: 0000200000000440 RDI: 000000000000000a [ 490.513542][T13309] RBP: 00007f9780477090 R08: 0000000000000000 R09: 0000000000000000 [ 490.521582][T13309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 490.529621][T13309] R13: 00007f977f816038 R14: 00007f977f815fa0 R15: 00007ffc8eeb8068 [ 490.537692][T13309] [ 490.554295][T13315] netlink: 'syz.2.2689': attribute type 10 has an invalid length. [ 490.756016][T13320] ªªªªªª: renamed from vlan0 (while UP) [ 490.797641][T13323] netlink: 'syz.0.2693': attribute type 15 has an invalid length. [ 490.866913][T13325] IPv6: Can't replace route, no match found [ 490.899961][T13325] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2694'. [ 491.139216][T13332] IPv6: Can't replace route, no match found [ 491.166313][T13332] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2696'. [ 491.260672][T13335] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2699'. [ 491.832258][T13350] IPv6: Can't replace route, no match found [ 491.863712][T13350] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2705'. [ 492.075413][T13356] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2707'. [ 492.972882][T13376] IPv6: Can't replace route, no match found [ 493.041507][T13376] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2716'. [ 493.717578][T13392] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2722'. [ 493.937016][T13398] netlink: 'syz.2.2724': attribute type 10 has an invalid length. [ 493.952349][T13398] netlink: 9279 bytes leftover after parsing attributes in process `syz.2.2724'. [ 494.034629][ T5785] Bluetooth: hci2: unexpected subevent 0x03 length: 150 > 9 [ 494.096587][T13400] IPv6: Can't replace route, no match found [ 494.144681][T13400] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2726'. [ 494.908189][T13418] ªªªªªª: renamed from vlan0 (while UP) [ 495.925186][ T5785] Bluetooth: hci4: unexpected subevent 0x03 length: 150 > 9 [ 496.082536][T13432] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2735'. [ 496.204234][T13438] IPv6: Can't replace route, no match found [ 496.226285][T13438] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2739'. [ 497.450992][ T5785] Bluetooth: hci0: unexpected subevent 0x03 length: 150 > 9 [ 498.807150][T13463] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.2748'. [ 499.016906][T13466] IPv6: Can't replace route, no match found [ 499.058414][T13466] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2749'. [ 500.172818][T13484] netlink: 'syz.0.2757': attribute type 7 has an invalid length. [ 500.189949][T13484] netlink: 140 bytes leftover after parsing attributes in process `syz.0.2757'. [ 501.569972][T13501] IPv6: Can't replace route, no match found [ 501.603415][T13496] delete_channel: no stack [ 501.611859][T13501] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2761'. [ 501.717260][T13505] netlink: 'syz.2.2762': attribute type 10 has an invalid length. [ 501.756363][T13505] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2762'. [ 501.795280][T13505] netlink: 'syz.2.2762': attribute type 10 has an invalid length. [ 501.836254][T13505] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2762'. [ 501.886049][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.893872][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 505.782990][T13546] IPv6: Can't replace route, no match found [ 505.802362][T13546] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2773'. [ 506.030407][ T5785] Bluetooth: hci0: unexpected subevent 0x03 length: 150 > 9 [ 507.471935][T13576] IPv6: Can't replace route, no match found [ 507.498755][T13576] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2785'. [ 507.973327][T13589] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.2790'. [ 508.555391][T13604] IPv6: Can't replace route, no match found [ 508.729224][T13604] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2797'. [ 508.802240][ T5785] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 509.011615][T13619] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2804'. [ 509.307815][ T59] gretap0 (unregistering): left allmulticast mode [ 509.326184][ T59] gretap0 (unregistering): left promiscuous mode [ 509.345247][ T59] Ÿë: port 1(gretap0) entered disabled state [ 509.449163][T13619] netlink: 'syz.1.2804': attribute type 1 has an invalid length. [ 509.484015][T13619] netlink: 'syz.1.2804': attribute type 4 has an invalid length. [ 509.558981][ T5785] Bluetooth: hci4: unexpected subevent 0x03 length: 150 > 9 [ 509.568116][T13619] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.2804'. [ 509.919351][T13641] IPv6: Can't replace route, no match found [ 509.940208][T13641] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2812'. [ 510.092803][ T5785] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 510.358991][ T5785] Bluetooth: hci0: unexpected subevent 0x03 length: 150 > 9 [ 510.459978][ T59] batman_adv: batadv0: Interface deactivated: wlan0 [ 510.526310][T13661] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.2820'. [ 511.890262][ T59] batman_adv: batadv0: Removing interface: wlan0 [ 511.903857][T13667] IPv6: NLM_F_CREATE should be specified when creating new route [ 511.968380][ T59] veth0_to_team: left allmulticast mode [ 511.974297][ T59] veth0_to_team: left promiscuous mode [ 511.999476][ T59] Ÿë: port 2(veth0_to_team) entered disabled state [ 512.126205][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 512.135790][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 512.180302][ T59] bridge0: port 3(team0) entered disabled state [ 512.193301][T13676] netlink: 'syz.2.2825': attribute type 28 has an invalid length. [ 512.211612][ T59] bridge_slave_1: left allmulticast mode [ 512.228217][T13676] netlink: 'syz.2.2825': attribute type 4 has an invalid length. [ 512.236062][T13676] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2825'. [ 512.245524][ T59] bridge_slave_1: left promiscuous mode [ 512.258427][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 512.275547][ T59] bridge_slave_0: left allmulticast mode [ 512.285228][ T5785] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 512.294421][ T59] bridge_slave_0: left promiscuous mode [ 512.316222][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 512.414757][ T5785] Bluetooth: hci2: unexpected subevent 0x03 length: 150 > 9 [ 512.457271][ T59] veth1_macvtap: left promiscuous mode [ 512.496116][ T59] veth0_macvtap: left promiscuous mode [ 512.516697][ T59] veth1_vlan: left promiscuous mode [ 512.540398][ T59] veth0_vlan: left promiscuous mode [ 513.193695][ T59] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 513.246569][ T59] team_slave_1 (unregistering): left promiscuous mode [ 513.254435][ T59] team_slave_1 (unregistering): left allmulticast mode [ 513.266877][ T59] team0 (unregistering): Port device team_slave_1 removed [ 513.313358][ T59] C (unregistering): left promiscuous mode [ 513.321292][ T59] C (unregistering): left allmulticast mode [ 513.331778][ T59] team0 (unregistering): Port device C removed [ 513.375602][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 513.430765][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 513.819717][ T59] bond0 (unregistering): Released all slaves [ 513.915738][T13674] IPv6: Can't replace route, no match found [ 513.925801][T13683] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2823'. [ 514.163946][T13702] netlink: 'syz.1.2831': attribute type 10 has an invalid length. [ 514.465503][ T5785] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 514.654851][T13717] netlink: 'syz.1.2835': attribute type 3 has an invalid length. [ 514.694597][T13717] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.2835'. [ 515.989373][T13729] IPv6: Can't replace route, no match found [ 516.011478][T13732] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2841'. [ 516.195962][ T5785] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 516.455903][T13749] netlink: 'syz.0.2847': attribute type 10 has an invalid length. [ 516.839456][ T59] gretap0 (unregistering): left allmulticast mode [ 516.846040][ T59] gretap0 (unregistering): left promiscuous mode [ 517.053221][ T59] Ÿë: port 1(gretap0) entered disabled state [ 517.627110][T13751] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2847'. [ 517.888199][T13760] syzkaller0: entered promiscuous mode [ 517.896688][T13767] netlink: 'syz.0.2851': attribute type 1 has an invalid length. [ 517.905182][T13760] syzkaller0: entered allmulticast mode [ 517.920473][T13767] netlink: 14207 bytes leftover after parsing attributes in process `syz.0.2851'. [ 518.542930][T13775] IPv6: Can't replace route, no match found [ 518.632621][ T59] batman_adv: batadv0: Interface deactivated: wlan0 [ 518.789932][ T59] batman_adv: batadv0: Removing interface: wlan0 [ 518.886519][ T5785] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 518.891509][T13778] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2854'. [ 518.947507][T13781] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2855'. [ 519.076908][ T59] veth0_to_team: left allmulticast mode [ 519.107378][ T59] veth0_to_team: left promiscuous mode [ 519.114439][ T59] Ÿë: port 2(veth0_to_team) entered disabled state [ 519.204769][ T59] hsr_slave_0: left promiscuous mode [ 519.215135][ T59] hsr_slave_1: left promiscuous mode [ 519.226455][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 519.257892][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 519.343103][ T59] veth0_macvtap: left promiscuous mode [ 519.358145][ T59] veth1_vlan: left promiscuous mode [ 519.365001][ T59] veth0_vlan: left promiscuous mode [ 520.274122][ T59] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 520.331627][ T59] team0 (unregistering): Port device team_slave_1 removed [ 520.383985][ T59] team0 (unregistering): Port device C removed [ 520.433197][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 520.495138][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 520.865321][ T59] bond0 (unregistering): Released all slaves [ 520.915946][T13816] IPv6: Can't replace route, no match found [ 520.958210][T13821] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2869'. [ 521.546459][T13839] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2875'. [ 522.113161][T13848] IPv6: Can't replace route, no match found [ 522.127038][T13849] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2880'. [ 524.351293][T13861] netlink: 'syz.0.2885': attribute type 10 has an invalid length. [ 524.538854][T13868] IPv6: Can't replace route, no match found [ 524.571405][T13872] netlink: 'syz.1.2890': attribute type 10 has an invalid length. [ 524.616675][T13868] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2889'. [ 524.758939][T13874] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2891'. [ 524.796094][T13874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 524.809385][T13874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 524.821030][T13874] batadv_slave_1: entered promiscuous mode [ 525.311575][T13889] netlink: 'syz.3.2898': attribute type 10 has an invalid length. [ 525.341301][T13889] hsr_slave_0: left promiscuous mode [ 525.377246][T13889] hsr_slave_1: left promiscuous mode [ 525.817673][T13899] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 525.853539][T13902] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2902'. [ 526.088586][T13911] FAULT_INJECTION: forcing a failure. [ 526.088586][T13911] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 526.127037][T13911] CPU: 0 PID: 13911 Comm: syz.0.2906 Not tainted syzkaller #0 [ 526.134617][T13911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 526.144751][T13911] Call Trace: [ 526.148142][T13911] [ 526.151143][T13911] dump_stack_lvl+0x18c/0x250 [ 526.155917][T13911] ? show_regs_print_info+0x20/0x20 [ 526.161203][T13911] ? load_image+0x400/0x400 [ 526.165789][T13911] ? __might_fault+0xaa/0x120 [ 526.170553][T13911] ? __lock_acquire+0x7d40/0x7d40 [ 526.175697][T13911] should_fail_ex+0x39d/0x4d0 [ 526.180493][T13911] _copy_to_user+0x2f/0xa0 [ 526.185005][T13911] bpf_test_finish+0x25a/0x650 [ 526.189975][T13911] ? convert_skb_to___skb+0x420/0x420 [ 526.195432][T13911] ? read_tsc+0x9/0x20 [ 526.199626][T13911] bpf_prog_test_run_sk_lookup+0x980/0xbe0 [ 526.205698][T13911] ? __fget_files+0x28/0x4b0 [ 526.210454][T13911] ? bpf_test_timer_leave+0x150/0x150 [ 526.215957][T13911] ? bpf_test_timer_leave+0x150/0x150 [ 526.221505][T13911] bpf_prog_test_run+0x321/0x390 [ 526.226619][T13911] __sys_bpf+0x49d/0x890 [ 526.230953][T13911] ? bpf_link_show_fdinfo+0x390/0x390 [ 526.236469][T13911] ? lock_chain_count+0x20/0x20 [ 526.241539][T13911] __x64_sys_bpf+0x7c/0x90 [ 526.246049][T13911] do_syscall_64+0x55/0xa0 [ 526.250559][T13911] ? clear_bhb_loop+0x40/0x90 [ 526.255307][T13911] ? clear_bhb_loop+0x40/0x90 [ 526.260134][T13911] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 526.266152][T13911] RIP: 0033:0x7f977f59aeb9 [ 526.270647][T13911] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 526.290347][T13911] RSP: 002b:00007f9780477028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 526.298944][T13911] RAX: ffffffffffffffda RBX: 00007f977f815fa0 RCX: 00007f977f59aeb9 [ 526.306990][T13911] RDX: 0000000000000048 RSI: 0000200000000440 RDI: 000000000000000a [ 526.315033][T13911] RBP: 00007f9780477090 R08: 0000000000000000 R09: 0000000000000000 [ 526.323362][T13911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 526.331436][T13911] R13: 00007f977f816038 R14: 00007f977f815fa0 R15: 00007ffc8eeb8068 [ 526.339625][T13911] [ 526.522476][T13915] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.2909'. [ 526.553444][T13915] netlink: zone id is out of range [ 526.577672][T13915] netlink: zone id is out of range [ 526.583051][T13915] netlink: zone id is out of range [ 526.606397][T13915] netlink: zone id is out of range [ 526.646675][T13915] netlink: zone id is out of range [ 526.655767][T13915] netlink: zone id is out of range [ 526.671984][T13915] netlink: zone id is out of range [ 526.678346][T13915] netlink: zone id is out of range [ 526.683537][T13915] netlink: zone id is out of range [ 526.702113][T13915] netlink: zone id is out of range [ 527.221506][T13930] netlink: 'syz.2.2912': attribute type 10 has an invalid length. [ 527.279769][T13930] hsr_slave_0: left promiscuous mode [ 527.301591][T13930] hsr_slave_1: left promiscuous mode [ 527.402949][T13934] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2913'. [ 527.591883][ T12] veth0_to_team: left allmulticast mode [ 527.637878][ T12] veth0_to_team: left promiscuous mode [ 527.644306][ T12] Ÿë: port 1(veth0_to_team) entered disabled state [ 527.700192][ T12] hsr_slave_0: left promiscuous mode [ 527.711308][ T12] hsr_slave_1: left promiscuous mode [ 527.721895][ T12] bridge_slave_0: left allmulticast mode [ 527.728254][ T12] bridge_slave_0: left promiscuous mode [ 527.734064][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 527.803708][ T12] veth1_macvtap: left promiscuous mode [ 527.813077][ T12] veth0_macvtap: left promiscuous mode [ 527.821429][ T12] veth1_vlan: left promiscuous mode [ 527.831059][ T12] veth0_vlan: left promiscuous mode [ 527.910621][T13953] FAULT_INJECTION: forcing a failure. [ 527.910621][T13953] name failslab, interval 1, probability 0, space 0, times 0 [ 527.953904][T13953] CPU: 1 PID: 13953 Comm: syz.2.2922 Not tainted syzkaller #0 [ 527.961597][T13953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 527.971708][T13953] Call Trace: [ 527.975030][T13953] [ 527.978000][T13953] dump_stack_lvl+0x18c/0x250 [ 527.983090][T13953] ? show_regs_print_info+0x20/0x20 [ 527.988364][T13953] ? load_image+0x400/0x400 [ 527.992936][T13953] ? __might_sleep+0xe0/0xe0 [ 527.997598][T13953] ? __lock_acquire+0x7d40/0x7d40 [ 528.002944][T13953] should_fail_ex+0x39d/0x4d0 [ 528.007683][T13953] should_failslab+0x9/0x20 [ 528.012244][T13953] slab_pre_alloc_hook+0x59/0x310 [ 528.017341][T13953] ? sock_kmalloc+0x96/0xf0 [ 528.021943][T13953] ? sock_kmalloc+0x96/0xf0 [ 528.026530][T13953] __kmem_cache_alloc_node+0x53/0x250 [ 528.031968][T13953] ? sock_kmalloc+0x96/0xf0 [ 528.036531][T13953] __kmalloc+0xa4/0x230 [ 528.040758][T13953] sock_kmalloc+0x96/0xf0 [ 528.045151][T13953] ____sys_sendmsg+0x1be/0x960 [ 528.049973][T13953] ? __lock_acquire+0x7d40/0x7d40 [ 528.055059][T13953] ? __asan_memset+0x22/0x40 [ 528.059729][T13953] ? __sys_sendmsg_sock+0x30/0x30 [ 528.064810][T13953] ? __import_iovec+0x3fa/0x850 [ 528.069759][T13953] ? import_iovec+0x73/0xa0 [ 528.074365][T13953] ___sys_sendmsg+0x2a6/0x360 [ 528.079098][T13953] ? get_pid_task+0x20/0x1e0 [ 528.083762][T13953] ? __sys_sendmsg+0x2a0/0x2a0 [ 528.088600][T13953] ? __lock_acquire+0x7d40/0x7d40 [ 528.093708][T13953] __se_sys_sendmsg+0x1c2/0x2b0 [ 528.098617][T13953] ? __x64_sys_sendmsg+0x80/0x80 [ 528.103632][T13953] ? lockdep_hardirqs_on+0x98/0x150 [ 528.108895][T13953] do_syscall_64+0x55/0xa0 [ 528.113451][T13953] ? clear_bhb_loop+0x40/0x90 [ 528.118182][T13953] ? clear_bhb_loop+0x40/0x90 [ 528.122911][T13953] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 528.128899][T13953] RIP: 0033:0x7fdf44f9aeb9 [ 528.133360][T13953] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 528.153107][T13953] RSP: 002b:00007fdf45dfa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 528.161615][T13953] RAX: ffffffffffffffda RBX: 00007fdf45215fa0 RCX: 00007fdf44f9aeb9 [ 528.169731][T13953] RDX: 0000000000000000 RSI: 0000200000001180 RDI: 0000000000000003 [ 528.177840][T13953] RBP: 00007fdf45dfa090 R08: 0000000000000000 R09: 0000000000000000 [ 528.185864][T13953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 528.193979][T13953] R13: 00007fdf45216038 R14: 00007fdf45215fa0 R15: 00007ffe92e8e318 [ 528.202027][T13953] [ 528.870967][T13967] netlink: 'syz.1.2927': attribute type 3 has an invalid length. [ 528.880177][T13967] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2927'. [ 529.161426][ T12] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 529.170627][ T12] batadv_slave_0 (unregistering): left promiscuous mode [ 529.221277][ T12] team0 (unregistering): Port device team_slave_1 removed [ 529.274058][ T12] team0 (unregistering): Port device C removed [ 529.322724][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 529.331659][ T12] bond_slave_1 (unregistering): left promiscuous mode [ 529.381116][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 529.390909][ T12] bond_slave_0 (unregistering): left promiscuous mode [ 529.436592][ T12] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 529.446644][ T12] bridge_slave_1 (unregistering): left promiscuous mode [ 529.749428][ T12] bond0 (unregistering): Released all slaves [ 529.854013][T13958] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2924'. [ 530.106938][T13982] netlink: 'syz.3.2930': attribute type 10 has an invalid length. [ 530.148338][T13982] 8021q: adding VLAN 0 to HW filter on device team0 [ 530.185579][T13982] bond0: (slave team0): Enslaving as an active interface with an up link [ 531.644640][T14001] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2938'. [ 532.440897][T14018] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2945'. [ 532.814143][T14038] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2951'. [ 534.158950][T14060] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 534.382237][T14065] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2961'. [ 534.612595][T14073] netlink: 'syz.0.2964': attribute type 10 has an invalid length. [ 537.759091][T14104] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2973'. [ 538.159492][T14123] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2980'. [ 539.303551][T14142] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2987'. [ 540.800442][T14168] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2997'. [ 541.424037][T14186] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3003'. [ 541.771743][T14195] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.3006'. [ 541.791847][T14195] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.3006'. [ 541.874460][T14195] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.3006'. [ 541.908353][T14195] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.3006'. [ 542.320671][T14206] delete_channel: no stack [ 542.460649][T14210] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3008'. [ 542.988248][T14218] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3013'. [ 543.680866][T14237] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3020'. [ 544.038613][T14243] FAULT_INJECTION: forcing a failure. [ 544.038613][T14243] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 544.071564][T14243] CPU: 0 PID: 14243 Comm: syz.0.3022 Not tainted syzkaller #0 [ 544.079116][T14243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 544.089337][T14243] Call Trace: [ 544.092670][T14243] [ 544.095643][T14243] dump_stack_lvl+0x18c/0x250 [ 544.100388][T14243] ? show_regs_print_info+0x20/0x20 [ 544.105689][T14243] ? load_image+0x400/0x400 [ 544.110249][T14243] ? __might_fault+0xaa/0x120 [ 544.114976][T14243] ? __lock_acquire+0x7d40/0x7d40 [ 544.120061][T14243] should_fail_ex+0x39d/0x4d0 [ 544.124809][T14243] _copy_from_user+0x2f/0xe0 [ 544.129468][T14243] generic_map_update_batch+0x54b/0x810 [ 544.135085][T14243] ? rcu_read_unlock+0xa0/0xa0 [ 544.139916][T14243] ? __fdget+0x180/0x210 [ 544.144213][T14243] ? rcu_read_unlock+0xa0/0xa0 [ 544.149022][T14243] bpf_map_do_batch+0x3d7/0x610 [ 544.153939][T14243] __sys_bpf+0x381/0x890 [ 544.158235][T14243] ? bpf_link_show_fdinfo+0x390/0x390 [ 544.163682][T14243] ? lock_chain_count+0x20/0x20 [ 544.168606][T14243] __x64_sys_bpf+0x7c/0x90 [ 544.173082][T14243] do_syscall_64+0x55/0xa0 [ 544.177606][T14243] ? clear_bhb_loop+0x40/0x90 [ 544.182343][T14243] ? clear_bhb_loop+0x40/0x90 [ 544.187116][T14243] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 544.193062][T14243] RIP: 0033:0x7f977f59aeb9 [ 544.197521][T14243] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 544.217188][T14243] RSP: 002b:00007f9780477028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 544.225655][T14243] RAX: ffffffffffffffda RBX: 00007f977f815fa0 RCX: 00007f977f59aeb9 [ 544.233676][T14243] RDX: 0000000000000038 RSI: 0000200000000300 RDI: 000000000000001a [ 544.241700][T14243] RBP: 00007f9780477090 R08: 0000000000000000 R09: 0000000000000000 [ 544.249714][T14243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 544.257716][T14243] R13: 00007f977f816038 R14: 00007f977f815fa0 R15: 00007ffc8eeb8068 [ 544.265850][T14243] [ 544.771389][T14263] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3030'. [ 545.339659][T14288] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3039'. [ 546.138495][T14318] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3050'. [ 546.825564][T14334] netlink: 'syz.3.3057': attribute type 10 has an invalid length. [ 546.857726][T14334] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3057'. [ 547.020992][T14334] bridge0: port 3(ipvlan1) entered blocking state [ 547.058895][T14334] bridge0: port 3(ipvlan1) entered disabled state [ 547.077032][T14334] ipvlan1: entered allmulticast mode [ 547.091721][T14334] veth0_vlan: entered allmulticast mode [ 547.112815][T14334] ipvlan1: left allmulticast mode [ 547.118951][T14334] veth0_vlan: left allmulticast mode [ 547.127278][T14334] net_ratelimit: 331 callbacks suppressed [ 547.127296][T14334] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 547.463571][T14334] syz.3.3057 (14334) used greatest stack depth: 18184 bytes left [ 547.599003][T14348] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3062'. [ 547.753694][T14358] IPv6: Can't replace route, no match found [ 547.770310][T14358] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3065'. [ 547.782847][T14359] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3065'. [ 548.133835][T14368] netlink: 'syz.2.3069': attribute type 1 has an invalid length. [ 548.154926][T14368] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.3069'. [ 548.751657][T14382] IPv6: NLM_F_CREATE should be specified when creating new route [ 548.956761][T14389] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3075'. [ 549.128000][T14397] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.3080'. [ 550.041175][T14367] Bluetooth: hci4: command 0x0406 tx timeout [ 550.097098][T14403] netlink: 'syz.2.3082': attribute type 10 has an invalid length. [ 550.339251][T14414] netlink: 'syz.3.3087': attribute type 29 has an invalid length. [ 550.357728][T14414] netlink: 'syz.3.3087': attribute type 29 has an invalid length. [ 550.386804][T14414] netlink: 'syz.3.3087': attribute type 29 has an invalid length. [ 550.410980][T14414] netlink: 'syz.3.3087': attribute type 29 has an invalid length. [ 550.481465][T14417] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3088'. [ 550.741059][T14427] netlink: 'syz.0.3093': attribute type 39 has an invalid length. [ 550.859989][T14428] netlink: 'syz.2.3091': attribute type 10 has an invalid length. [ 550.868280][T14428] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3091'. [ 550.881642][T14428] bridge0: port 3(ipvlan1) entered blocking state [ 550.893884][T14428] bridge0: port 3(ipvlan1) entered disabled state [ 550.903949][T14428] ipvlan1: entered allmulticast mode [ 550.939771][T14428] veth0_vlan: entered allmulticast mode [ 550.955963][T14428] ipvlan1: left allmulticast mode [ 550.971629][T14428] veth0_vlan: left allmulticast mode [ 550.980314][T14428] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 551.564066][T14441] tap0: tun_chr_ioctl cmd 35108 [ 551.572411][T14444] tap0: tun_chr_ioctl cmd 1074025688 [ 551.716543][T14447] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3098'. [ 551.869359][T14453] IPv6: NLM_F_CREATE should be specified when creating new route [ 552.604342][T14476] netlink: 'syz.0.3107': attribute type 10 has an invalid length. [ 552.624432][T14476] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3107'. [ 552.642390][T14476] bridge0: port 3(ipvlan1) entered blocking state [ 552.675547][T14476] bridge0: port 3(ipvlan1) entered disabled state [ 552.683677][T14476] ipvlan1: entered allmulticast mode [ 552.689768][T14476] veth0_vlan: entered allmulticast mode [ 552.698884][T14476] ipvlan1: left allmulticast mode [ 552.704169][T14476] veth0_vlan: left allmulticast mode [ 552.710978][T14476] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 552.732910][T14481] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3110'. [ 552.874994][T14485] netlink: 'syz.3.3114': attribute type 29 has an invalid length. [ 552.883485][T14485] netlink: 'syz.3.3114': attribute type 29 has an invalid length. [ 552.897062][T14485] netlink: 'syz.3.3114': attribute type 29 has an invalid length. [ 552.907110][T14485] netlink: 'syz.3.3114': attribute type 29 has an invalid length. [ 552.941303][T14485] netlink: 'syz.3.3114': attribute type 29 has an invalid length. [ 553.203756][T14491] netlink: 1010 bytes leftover after parsing attributes in process `syz.2.3117'. [ 553.228873][T14491] veth0_to_bond: default FDB implementation only supports local addresses [ 553.751035][T14500] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3121'. [ 553.993304][ T5785] Bluetooth: hci3: ISO packet for unknown connection handle 1854 [ 554.067779][T14511] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3126'. [ 554.609819][T14527] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3133'. [ 554.754395][T14531] tun0: tun_chr_ioctl cmd 2148553947 [ 555.174020][T14553] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3144'. [ 555.431640][T14556] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3145'. [ 556.505150][T14586] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3157'. [ 563.328327][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.334710][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 570.521942][T14367] Bluetooth: hci2: command 0x0406 tx timeout [ 583.317656][ T5779] Bluetooth: hci0: command 0x0406 tx timeout [ 585.887789][T14607] Bluetooth: hci3: command 0x0406 tx timeout [ 624.763288][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.772222][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 661.577320][ C1] rcu: INFO: rcu_preempt self-detected stall on CPU [ 661.583983][ C1] rcu: 1-....: (10499 ticks this GP) idle=8a7c/1/0x4000000000000000 softirq=49469/49471 fqs=4333 [ 661.595579][ C1] rcu: hardirqs softirqs csw/system [ 661.602021][ C1] rcu: number: 1396521 0 0 [ 661.608452][ C1] rcu: cputime: 16405 36074 72 ==> 52480(ms) [ 661.616569][ C1] rcu: (t=10500 jiffies g=63397 q=1479 ncpus=2) [ 661.622927][ C1] CPU: 1 PID: 14588 Comm: syz.1.3158 Not tainted syzkaller #0 [ 661.630430][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 661.640613][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x8/0x60 [ 661.646919][ C1] Code: 00 00 f3 0f 1e fa 53 48 89 fb e8 13 00 00 00 48 8b 3d 2c cd 03 0d 48 89 de 5b e9 93 57 57 00 cc cc cc f3 0f 1e fa 48 8b 04 24 <65> 48 8b 0d 00 a1 7c 7e 65 8b 15 01 a1 7c 7e 81 e2 00 01 ff 00 74 [ 661.666560][ C1] RSP: 0018:ffffc900001efca0 EFLAGS: 00000246 [ 661.672652][ C1] RAX: ffffffff813b6c79 RBX: ffffc900001f0ad0 RCX: ffff888029718000 [ 661.680821][ C1] RDX: 0000000000000100 RSI: 0000000000000002 RDI: ffffc900001f0ad0 [ 661.688863][ C1] RBP: ffffc900001f0ad0 R08: ffff888029718000 R09: 0000000000000003 [ 661.696852][ C1] R10: 0000000000000004 R11: 0000000000000100 R12: ffffc900001f1000 [ 661.704849][ C1] R13: 1ffff9200003dfbf R14: ffffc900001e9000 R15: dffffc0000000000 [ 661.712841][ C1] FS: 00007f32fe4166c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 661.721779][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 661.728373][ C1] CR2: 00002000000014c0 CR3: 000000005f3b9000 CR4: 00000000003506e0 [ 661.736468][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 661.744461][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 661.752535][ C1] Call Trace: [ 661.755827][ C1] [ 661.758684][ C1] __read_once_word_nocheck+0x9/0x10 [ 661.763985][ C1] deref_stack_reg+0x1bd/0x240 [ 661.768766][ C1] unwind_next_frame+0x1789/0x2970 [ 661.774265][ C1] ? ndisc_send_skb+0xc26/0x14f0 [ 661.779489][ C1] ? ndisc_send_skb+0xc26/0x14f0 [ 661.784449][ C1] ? stack_trace_save+0x100/0x100 [ 661.789503][ C1] arch_stack_walk+0x144/0x190 [ 661.794290][ C1] ? addrconf_rs_timer+0x2d5/0x630 [ 661.799443][ C1] stack_trace_save+0xaa/0x100 [ 661.804221][ C1] ? stack_trace_snprint+0xf0/0xf0 [ 661.809343][ C1] ? mark_lock+0x94/0x320 [ 661.813689][ C1] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 661.819678][ C1] kasan_set_track+0x4e/0x70 [ 661.824363][ C1] ? kasan_set_track+0x4e/0x70 [ 661.829147][ C1] ? kasan_save_free_info+0x2e/0x50 [ 661.834448][ C1] ? ____kasan_slab_free+0x126/0x1e0 [ 661.839739][ C1] ? slab_free_freelist_hook+0x130/0x1a0 [ 661.845388][ C1] ? kmem_cache_free+0xf8/0x270 [ 661.850274][ C1] ? skb_release_data+0x60a/0x800 [ 661.855317][ C1] ? kfree_skb_reason+0x10e/0x170 [ 661.860362][ C1] ? macsec_start_xmit+0x548/0x2fe0 [ 661.865571][ C1] ? dev_hard_start_xmit+0x246/0x740 [ 661.870867][ C1] ? __dev_queue_xmit+0x1ac2/0x36b0 [ 661.876074][ C1] ? ip6_finish_output2+0xe3d/0x1630 [ 661.881367][ C1] ? ndisc_send_skb+0xc26/0x14f0 [ 661.886340][ C1] ? kmem_cache_free+0xf8/0x270 [ 661.891219][ C1] kasan_save_free_info+0x2e/0x50 [ 661.896359][ C1] ____kasan_slab_free+0x126/0x1e0 [ 661.901581][ C1] slab_free_freelist_hook+0x130/0x1a0 [ 661.907091][ C1] ? skb_release_data+0x60a/0x800 [ 661.912354][ C1] kmem_cache_free+0xf8/0x270 [ 661.917068][ C1] skb_release_data+0x60a/0x800 [ 661.921958][ C1] kfree_skb_reason+0x10e/0x170 [ 661.926826][ C1] macsec_start_xmit+0x548/0x2fe0 [ 661.931909][ C1] ? validate_xmit_xfrm+0xbc/0x12c0 [ 661.937386][ C1] ? xfrm_init_replay+0x2a0/0x2a0 [ 661.942436][ C1] ? passthru_features_check+0x20/0x20 [ 661.947906][ C1] ? macsec_dev_stop+0x3e0/0x3e0 [ 661.952956][ C1] dev_hard_start_xmit+0x246/0x740 [ 661.958089][ C1] __dev_queue_xmit+0x1ac2/0x36b0 [ 661.963131][ C1] ? __dev_queue_xmit+0x26b/0x36b0 [ 661.968287][ C1] ? netdev_core_pick_tx+0x340/0x340 [ 661.973580][ C1] ? __asan_memcpy+0x40/0x70 [ 661.978185][ C1] ? eth_header+0x11b/0x200 [ 661.982706][ C1] ? llc_sysctl_exit+0x70/0x70 [ 661.987480][ C1] ? neigh_resolve_output+0x618/0x730 [ 661.992875][ C1] ip6_finish_output2+0xe3d/0x1630 [ 661.998000][ C1] ? ip6_finish_output2+0x645/0x1630 [ 662.003299][ C1] ? ip6_mtu+0x7d/0x3f0 [ 662.007483][ C1] ? nf_hook+0x390/0x390 [ 662.011737][ C1] ? ip6_finish_output+0x57b/0x820 [ 662.016861][ C1] ndisc_send_skb+0xc26/0x14f0 [ 662.021731][ C1] ? ndisc_send_skb+0x1f5/0x14f0 [ 662.026695][ C1] ? ndisc_mc_map+0x680/0x680 [ 662.031388][ C1] ? skb_dst+0xd0/0xd0 [ 662.035474][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 662.041663][ C1] addrconf_rs_timer+0x2d5/0x630 [ 662.046642][ C1] ? addrconf_disable_policy_idev+0x480/0x480 [ 662.052822][ C1] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 662.058817][ C1] call_timer_fn+0x189/0x540 [ 662.063416][ C1] ? addrconf_disable_policy_idev+0x480/0x480 [ 662.069501][ C1] ? call_timer_fn+0xd2/0x540 [ 662.074184][ C1] ? __run_timers+0x800/0x800 [ 662.078878][ C1] ? addrconf_disable_policy_idev+0x480/0x480 [ 662.084969][ C1] __run_timers+0x542/0x800 [ 662.089508][ C1] ? detach_timer+0x2b0/0x2b0 [ 662.094215][ C1] run_timer_softirq+0x67/0xf0 [ 662.099000][ C1] handle_softirqs+0x280/0x820 [ 662.103775][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 662.108552][ C1] ? do_softirq+0x1a0/0x1a0 [ 662.113064][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 662.118284][ C1] __irq_exit_rcu+0xd3/0x190 [ 662.122880][ C1] ? irq_exit_rcu+0x20/0x20 [ 662.127394][ C1] irq_exit_rcu+0x9/0x20 [ 662.131643][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 662.137290][ C1] [ 662.140245][ C1] [ 662.143186][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 662.149180][ C1] RIP: 0010:generic_exec_single+0x481/0x4f0 [ 662.155087][ C1] Code: 75 11 e8 02 02 0b 00 48 85 db 75 16 e8 f8 01 0b 00 eb 15 e8 f1 01 0b 00 e8 0c 29 08 09 48 85 db 74 ea e8 e2 01 0b 00 fb 31 c0 <48> c7 44 24 20 0e 36 e0 45 4b c7 04 2c 00 00 00 00 43 c7 44 2c 08 [ 662.174701][ C1] RSP: 0018:ffffc9000bbdfa00 EFLAGS: 00000246 [ 662.180866][ C1] RAX: 0000000000000000 RBX: 0000000000000200 RCX: 0000000000080000 [ 662.188843][ C1] RDX: ffffc900138dd000 RSI: 00000000000050d7 RDI: 00000000000050d8 [ 662.196818][ C1] RBP: ffffc9000bbdfad0 R08: ffffffff911bf5ff R09: 1ffffffff2237ebf [ 662.204798][ C1] R10: dffffc0000000000 R11: fffffbfff2237ec0 R12: 1ffff9200177bf44 [ 662.212791][ C1] R13: dffffc0000000000 R14: 0000000000000000 R15: 1ffff9200177bf65 [ 662.220871][ C1] ? event_function+0x300/0x300 [ 662.225737][ C1] ? smp_call_function_single+0x5a0/0x5a0 [ 662.231485][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 662.236692][ C1] ? smp_call_function_single+0xb0/0x5a0 [ 662.242338][ C1] smp_call_function_single+0x36d/0x5a0 [ 662.247900][ C1] ? event_function+0x300/0x300 [ 662.252758][ C1] ? flush_smp_call_function_queue+0x250/0x250 [ 662.258920][ C1] ? event_function+0x300/0x300 [ 662.263789][ C1] perf_install_in_context+0x5be/0x920 [ 662.269291][ C1] ? exclusive_event_installable+0x2c0/0x2c0 [ 662.275282][ C1] ? add_event_to_ctx+0x1180/0x1180 [ 662.280502][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 662.286760][ C1] __se_sys_perf_event_open+0x1836/0x1c50 [ 662.292500][ C1] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 662.298240][ C1] ? lock_chain_count+0x20/0x20 [ 662.303117][ C1] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 662.309214][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 662.314432][ C1] ? __x64_sys_perf_event_open+0x20/0xc0 [ 662.320075][ C1] do_syscall_64+0x55/0xa0 [ 662.324505][ C1] ? clear_bhb_loop+0x40/0x90 [ 662.329187][ C1] ? clear_bhb_loop+0x40/0x90 [ 662.333880][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 662.339792][ C1] RIP: 0033:0x7f32fd59aeb9 [ 662.344386][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 662.364105][ C1] RSP: 002b:00007f32fe416028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 662.372551][ C1] RAX: ffffffffffffffda RBX: 00007f32fd815fa0 RCX: 00007f32fd59aeb9 [ 662.380567][ C1] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000140 [ 662.388762][ C1] RBP: 00007f32fd608c1f R08: 0000000000000002 R09: 0000000000000000 [ 662.396832][ C1] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 662.405002][ C1] R13: 00007f32fd816038 R14: 00007f32fd815fa0 R15: 00007ffddb032b88 [ 662.413113][ C1]