last executing test programs: 4.326199553s ago: executing program 1 (id=6588): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x10, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x360}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xa, 0x0, &(0x7f00000004c0)="04dde1152379be503e95", 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x60}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007"], 0x0, 0x5}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa06"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 4.316708713s ago: executing program 3 (id=6589): socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x1e, 0x7, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$kcm(0x21, 0x2, 0x2) recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r1, &(0x7f0000000180)=ANY=[@ANYBLOB=','], 0x9a) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x8402, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x2000009, 0x20, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext, 0x100080}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x9e6, 0x5, 0x4, 0x20005, 0xfffd, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x200281, 0x0) socket$kcm(0x1e, 0x1, 0x0) socket$kcm(0x1e, 0x4, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0xa0}, 0x0) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r5, 0x81000600, 0xe80, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888100", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.938570067s ago: executing program 1 (id=6583): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x3500000000000000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x72, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x33}, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000100100000100000000000000000000001000000000000000100100000b"], 0x28}, 0x4044454) r1 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0xb, &(0x7f00000000c0), 0x42) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x2000) r2 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r2, 0x1, 0xc, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0700000004000000000900000100000028"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r4}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x3b}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016000000b30000007f"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="180300000000000000000000009bd63f0c83c4aed537000000851000000600000018100000", @ANYRES32=r5, @ANYBLOB="000000000000000066000000866f000018000000000000000000000000000000950000000000000064030000080000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r4, 0x0, 0x0}, 0x10) sendmsg$kcm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e00000011008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x24000000) socket$kcm(0x29, 0x7, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{0x1}, &(0x7f0000000200), &(0x7f0000000240)=r4}, 0x20) r6 = socket$kcm(0x10, 0x2, 0x4) close(r6) socket$kcm(0x10, 0x400000002, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001d00)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8fff7ff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b70500000000e000720a23fe000000008500000012000000b70000000000000095000000000000004e6258941c823b7505608556ba4ababb42684e890d31ae450400373a0a5447a801b8c1c4f0c4bd97c6555e61345400f9bd42abeb9ade0105000000000000a21902ff07000094a2b51c21df74924f5436a6ed89b98f75e800230c49c90fe1336481f3b92a63336c36fcd745d61d7739c6554ca201000000bebbe8282f8b1e26407437a397bf8f50e87ed4d27adfd876bffc402887781979461c4363bc5c9b6202ea471428197ef88bc333fbcec0ea4334844d232279ae95a90fd41d528f58d305000000435883df6c10ce86188c92292b2d0226082960be682836bdff8b0971f2a5405e453228e7b1005bd73479358a90df3e481947de6453736aa572158af6ea63d6d418fbbd2bba050000001da000ef78df03000000d19913a5fb03c79dac2e489f68127892658115e7ffb588a71dffffff951b8535167ab8069a2c92a3aa18e22517000026637b4c34bf2d0aa304ed42bf70480e9e97203fd169411f37fddd1f7fbe16dbbc0f307bceb5064f388a0350c3dc928b0e638b1e2b2a9d25264233e5d45eb377f56b95241024dbe30f67191c2b56b70328d6d3215dfffe5d89af1d10599bd494d921d1fb2db99b6aba0fa978f41eb1d4c553e5a9326ed550c13f8dd36716a899a1e79234294707c5312b924d142c17b20bb80ee202222c03fa84ccc374e717f694018630366397266090a82343aedfbf7afe892390c2eb775b0d16073da2229958db05de7df6ab7600004000010000006d8081cb3bf251d906c00da0e23b50465f8394820be571e3592d0000c7ef10fdc462e7040e7074ec43aa461fc54401a76406db718d4efd6c1bd10ce1d087cf9bba461162555a95524c84df0952d32093082b7aa71304e0d2d9ec310d1b676b378a5879e47941de1a28c3a8f400000000000000000e032b7d2badd0bc6617a859b7ac273b6304555f664469cec152030f06cc0ca1765838eb5590264736fbccfc3a8f4e3b10daf6a275daf5db2dac7096fe8ac8876acaad043663b3b0fedb05e6d31408fa20140c9d2db1c59ac8a3ce28e489d67d87d3a107ccea3007f58f2c5017e8807107f79ac50cc1d4f546b4443d137eb706b71b1767a10cca7a7c82b76c96e874aff249f36329a6526b354b6e674b08f7ef492b804c4b08fb10de807d79fd782027318cd7632e22d2faa16209272b39b5ec8d239832ea02cc88e249a2e77753a58987547571fbc8de747faab724bebb6401412b496e078fcb6c78ab447e871b76a8b0506f49594aa1d610567e14d739a60ff3ce04d0d2e5681e787c7e1ad25467bb81f2f448128207fe07a83759ec30cf9e0a3fd3f2fcee97fe8d273f8e712a8a64eaf2d89a1fa44554357fcd7ab531ff7a41c27164fca430a62d015b477de61853f5ee2e25b00a63642ec32ece2ff3bb5883deb895f52a923b5c744d8dccdd6a09ded8b90f1eeda8e6e884a4f090edb6ab9fc8107846508d51f3735493d5860cf80200ce31b92eb3563d485b5a7d192092d7a9fd2bc67d305d1d4573aad5f6501d1cd27657ce17330402dacb78d72d776330711645eed7d4c292f4448733c0826c4eb950f3d40457f82d7f792d106518f6bde874aff9e2bea7d73f74bebeeacfc700000000000000000000d40d73be47803297db004264c8c70b7761b22a7114a078a87d63d63b0c9dcc263a5b773bfeba212abef4181ad9e4872e328c0f105d51e3d167a2b717051d7681ba04552eeba18a000000b22b50d76d85040c9000ea68a528049a60d5e26b20455194f4be3b8466fd66d0e6cefcff7891c485d61cb66f4076cd60a22733cb00cf7cc12ca7d9bb864c0e650236a79a5c85349a9b1e6bbc3bace197e72490c566431cd3a08e9d1b641c1ba1f661d01573b904c3fa1427370fa15cecd294ac21fefe3d161fdf58e8bc5957ef145839f4370176e1be88d2e3516a1998c1621a00b4438b85a4dfee6f61827a1e50e158038b037dfda3ffb35069e41fc740ae720800de53948f176c3c15f3a529c02434b920d87f12a6e3420a2fdcb3559e7a5b1ddbb06b7a5977f63bfac701e673bf626d126b213c92e7169a930beb8d76f9db34e8098bea301baa96916d6458c923866dc192928b320738d1b298fb55f2a64500000000000000000000000000509885a38d9d995a46817e7ff7acddcc5f9253c63f86baf33f92820c9ff497cf76b6482c3ab53fb6ecea6d220b91b99b2fb4279ab09ae0645ab92df309000000000000a4868411948f8e3e259b717d722a1eebd3f6860a17f1ae9e10a1178f6aef4951b192d13e9600c1f700ca7b1d127e451034469bf2a8f93dbae6ad8e932e431dc18323794156238625bb9c45c5a76a68a8646e701b29a71ffbd854f50f195823106a5625ff94221f1f04c72525b50aae69081de9626de9847bf53475d90642d9730101d80b1b0000000000000000822b0641698d60160d9157548302dd2636d12c431f96728ae4a45361e6d47a1c4a52d67c0f0a62585c09fcfd70d0f249f87c44b47283c1c6f2430d70c751e4ada9b646e6e7c1719faee476d88a2943c71a21db55b7497dd7ed385ac2e8cb916390a3a0ed52e7371e1a141e69afa07b46ac20f3521fb251b72c82ee1c7eb4f67c0deed5618d0db925ce7a7c50a99835544c540f5d528587d1a26e78df1bc9a8e4d90c57d0b8122eae7b23e4456624f5337c16c42648c7a3d0b799ad409befe0cbe2aa781ba826918df7aa80dff4f62258e54419629eb1d37de7f6a3512bd618781d1ad3a4d4b0da44df9f9a93f0487f79a9b16dfa6f68b06ce6a96ca344d194cded05702c2300d1a4f451b33830765f8131f6c28fada65701851bba089b8a8347900e72d68cea965feb6a06225dd3f0e135323a5bde3b43c9d242b73abf9e05336af040a4a6bb5918146393f1d50705c1d1e986bf2f690de51ee8727d37339df5391db535bb1e9bb3e5dadb6e5a2bb4faa2dcbc6ca9b40ac96e448b9dadeb08fc2cf3a960f22bf20b9e967b7a75687372b8e3edc543896c360674d901a7f56b07ba1479b46eea3d94026a9c7e670ab40bb2c1ca1a7c90299361239bef773140af974c7efc285a64633d21513481b3ac62dec9fa3e8ce6156d76b82baa145bc550b0ccbc0934ccfea45292caa2f0654fe18dc0669a4f2af9fa232a293ad94261f55675cc686db72783a6bacc0df6a1ea943ae266af112f35319980cd681811a369e0d03cf7d22bed7cbe1afe498b88942b1bf7edae441a0d0d88fce65cb4e848793a28cbd7373f6acd3b5a48c034e487750388929d37fa3165f205dab3be5f3e5781a84298687cbf02dcaf0e14a2b260293f349d076eb75a2ddc5382d106f0beea02aa45018fe36d1176cf7704383b6922d10dc80bc7feca3982ae232d4bb47c722c83a7cf6ee8832f038b072eb803a47cd7f753e80c9f6eedb8"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1d4}, 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r7, 0x300f000, 0xe, 0x0, &(0x7f0000000080)="00693cda000028eddb0000200000", 0x0, 0x48b8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 2.887002078s ago: executing program 3 (id=6584): socket$kcm(0x2, 0x200000000000001, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x3, 0xffffffff}, @const={0x0, 0x0, 0x0, 0x2}, @func_proto={0x2, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x44}, 0x20) socket$kcm(0x2, 0x1, 0x84) socket$kcm(0x2c, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x248, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000, 0x10001}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23ffffff, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000850000007d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f0000000040)}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x400}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1}, 0x0, 0x0}, 0x20) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000080)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080b01000000e8fe55a1180015000600142603600e12080018", 0x2b}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8001c00180081064e81f782db44b9b545c7910006007c09e8fe55a10a0017", 0x1f}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f7d28344b904020000", 0x2}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x33fe0) 2.396911953s ago: executing program 3 (id=6591): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000080000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b000000950000000000000032b3ef"], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x8, 0x0, 0x4000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000280)=@nameseq={0x1e, 0x1, 0x0, {0x20000401}}, 0x10, 0x0}, 0x0) 2.1913164s ago: executing program 3 (id=6593): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x11, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x360}, [@call={0x85, 0x0, 0x0, 0x41}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa06"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.128830122s ago: executing program 1 (id=6595): bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$kcm(0x15, 0x5, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000100)=@ieee802154={0x24, @none={0x0, 0x2}}, 0x80, 0x0}, 0x4000040) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="0500000000fffffeff000000", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r6}, &(0x7f00000006c0), &(0x7f0000000700)=r4}, 0x20) sendmsg$inet(r3, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1, 0x0, 0x0, 0x6000}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r9, @ANYRES32=r8, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r9}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20) 2.045128645s ago: executing program 4 (id=6597): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21bef5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d55545a34effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f94306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a835701bea8240399c56ce8f58df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b262341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51427a7f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa08ad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282bffff2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae05334d5a44a020000001c0d882a564d74a7c72bf9a2152b261e58fea6d2f93589cfe261dc0410b5ccc92a5a0eab327a33431d62d2b7c75ce654d556c9e1817c1abca762ab53d40da51560351b673363652e1ecb56cfe4a746a45ab13c6014e9f361ab687d1cd1795ce9e05c817b83d76046bdb3709de5df7499a02d2f636a454b85b987580ada025d83bd7b8df28a540d5ec5537942e79f2f1ab25ea5f563bc77e4f9468bd309469880c7e34150ca886d1f9ac2f7e82dbe296c877d925c38c54cc8137b29028854b6bd57ca893927c331300e16aba792289e135589d93302fc37c73c303e383cdf8ef3f6d6265fe5ee01759d24027475c8901039a898582022bc95992b86dce0710887c8a625d9cbb897bdbfaf49a3f642a169827a9bae4fcfa5212461db000000000000e6ed75ca8fcda7ef3ee336189fef3b3ffb9f38fefc5ff39c4e69e3fa1f8b10ee97123e99b61eba065b1ad67530e7c4f11f9da7ae000002000000610101ad7f79cb9bbf64a0fc109f49fe8799fe266e2ccac80fefe750151f5ddfe51833ec65ece70e07ce8ab5d97db47da8f80000664dc0b86ae2b3ff9d4e220752a6b2f3ea9f793612386496dca5af7b8952aafa796ea7b156d19612297c63bb20e1e0469f7615f67a9218cbace38f5236821314f76302b98afa93044b83989339ca10e6ae30e70e17a82f03e915b8425e8e7a91614306d2ae0bc3550d856f2d7293672b5673d264fc886b0c8bdf436a0fcd21bf9da7bdca98e34cd6e59b0a7ce4ba1b466561aaa35448dff47bb1d7df23d467689a6669e4300d5acf12e4d0b35abf9156"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r3 = bpf$ITER_CREATE(0xb, &(0x7f00000002c0)={r2}, 0x8) write$cgroup_type(r3, &(0x7f0000000040), 0x9) 1.979191807s ago: executing program 3 (id=6598): r0 = socket$kcm(0x23, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x11, 0x15, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000002000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000025000000850000008200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000090000017b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x61800, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x6, 0xffffffffffffffff, 0x2) close(r0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x100, 0x2000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01001800000000000000100000001000000002000000000000000001050800"/42], 0x0, 0x2a}, 0x20) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=ANY=[@ANYBLOB="1d00000004000000410000000000000001000000", @ANYRES32=0x1, @ANYBLOB='\x00\x00\x00\x00\x00Qi\x00'/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="020000000600"/28], 0x48) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)='cpuset.mem_hardwall\x00', 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x210}) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@hci={0x1f, 0xdd86, 0x2}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000080)="27030200f00f00000600002fb9088965c7297a05a2019e6bafedef4e39ffffffffe1053742e0e4650058f7000000886411001144b6000300b8bf4a31accb", 0x3e}, {&(0x7f0000002500)="4fc9316bdf97a94aa4c01a71f2b55527cb347f01679ab78becd1455755985051a9b55a7c5e6cb0a37cd9c92a4b8e06a53af164e81ae37d251ce1818e9e6973374feaab4d2422070084af233d99a2dd7106672e6520a5ab0801d45a30bc7923756426ed6029cea34be70fd52bfbde2bb1171c48961a58bc64c2dafc47263af31c8d405d712a94a8f88b4e74d1e510c60100010000000000b6d31f118703445f42717726b721981296ae4348b0767e6b67335a9da9d3d4936b861ea72bb996e01bb88357f9bed242d7c1bd6b09940e23a2f9903cd9925d22f8112f9741e5658b5e62a4b23a292c858fcb8362e401d3", 0xee}, {&(0x7f00000001c0)="b6986e54ee7137807146de0ab782b34caded5e870ee7caf6296abeb8a420c3316d8feddfc875d2cb880b7880d6ce92860ccd4f7d6a5f4ae59c2ef4178d2a6e151b9177cfe4a70abc1e1267d0993ebb2a6d21ee884efb8ffba185c10803067b80f3428de425c426dd3cc9eddeab744f710419fde96d", 0x75}, {&(0x7f0000000880)="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", 0x178}, {&(0x7f0000002400)}, {&(0x7f0000002600)}], 0x6}, 0x60404) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x8d2142, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x140, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000001, 0x0, @perf_config_ext, 0x5601, 0x0, 0xffff, 0x1, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x800000004136}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8001, 0x3}, 0x0, 0x0, 0xfffffffc, 0x0, 0xb6eb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000003000000000000000040000018010000786c6c250000000000202020731af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ff0000008500000006000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x5, 0x4, 0x6d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x147b8, 0xfffffffffffffffc, 0x0, 0x0, 0x3ffff, 0x7}, 0x0, 0x4000000000000200, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xf6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x378f}, 0x1, 0xfffffffffffffffe, 0x4, 0x6, 0xfffffffffffffffe, 0x2080000a, 0xfffc, 0x0, 0x5}, 0x0, 0x4, 0xffffffffffffffff, 0xd) r5 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x23, &(0x7f0000000040)=r3, 0x4) sendmsg$kcm(r5, &(0x7f00000001c0)={&(0x7f0000000a00)=@in6={0xa, 0x4e23, 0xe, @empty, 0x7}, 0x80, 0x0}, 0x48084) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000f2dcc6d0e5bfb6ecc27477a80d1fcf4b137d054bd61743b079bac97f2141d9f3fc65776a653c4ec621d3c20287f5605901decf24849b329a36c04e4b9ed84e68605ca797889c2552b819a920c3ea749c4760aa70f09c9c56b6a43f7c5b6d22e5b85ad8359b1ca3ce6562fb42785fa4a7fee635efcaa4ba6fab659971224383e4bf1cf7f3e03373a9750690557a2efd747ce8afce6d4cd5"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x210, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0x0, 0xfffffffc, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) 1.936623219s ago: executing program 0 (id=6599): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400}, 0x8008) socket$kcm(0x10, 0x2, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x4e) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) close(0xffffffffffffffff) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="b702000014000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d640500000000006504040001001f000404000001007d60b7030000000000006a0a00fe00000100850000000d000000b7000000000000009500000000000000c74396c8e3ebbadc20e5a7ef8c9ac1465cbf188ef10871b81ac7553358380b3a1f59916ffc9bf0bdf81524f07fb2819bf5774fedda52e39c90af27db5b56024df96b4673b4e8d5467e114604ea09b290a248a120c9c6cd87cef9000000a39c15a7ef365cc27dfeac7b9b0e9048517354b0ca4f9cf8b59ee6fa003fe1f2c4c15f20a07db4583a462d8be6602186fd68ee14a19ea2eb42122b8635a66ce6b5b92356081bc0f18a0ca83dbc089a9813c1efa26001b3f486ebfaae85c4d0b96778478ae5355e6f923b11056969f486f80a35f7f2339704fa93fa915ab8e1e0d7f31ebd19455e6827cd493907bf9d0000000000000000000000004e1fa60acabcf0553910ca2e5ea499fd5889dde9261f0848a5b8af657bfc96049308e8953431b269053627a1523551c160c813969925a892d266792352ec0204596a37ce8d6d260b32239bddbce2e79f93cb5a0ad897adb53b397d07c50f84b74f2605a565ee149016aa75ea31c0087dcd821b47c8b36efc6da4fb2ea7f1f36c85856b73ac9872babc62149699b6b8c796a79d833eb4b5ca668d430db5653a2b3c5b87e17ca1"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x20, 0x0, &(0x7f00000002c0)="b90103616908068c3c270040e700009e0dc5cf1d66fff2fcffff8100632f2991", 0x0, 0x8104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.819638232s ago: executing program 4 (id=6600): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21bef5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d55545a34effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f94306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a835701bea8240399c56ce8f58df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b262341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51427a7f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa08ad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282bffff2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae05334d5a44a020000001c0d882a564d74a7c72bf9a2152b261e58fea6d2f93589cfe261dc0410b5ccc92a5a0eab327a33431d62d2b7c75ce654d556c9e1817c1abca762ab53d40da51560351b673363652e1ecb56cfe4a746a45ab13c6014e9f361ab687d1cd1795ce9e05c817b83d76046bdb3709de5df7499a02d2f636a454b85b987580ada025d83bd7b8df28a540d5ec5537942e79f2f1ab25ea5f563bc77e4f9468bd309469880c7e34150ca886d1f9ac2f7e82dbe296c877d925c38c54cc8137b29028854b6bd57ca893927c331300e16aba792289e135589d93302fc37c73c303e383cdf8ef3f6d6265fe5ee01759d24027475c8901039a898582022bc95992b86dce0710887c8a625d9cbb897bdbfaf49a3f642a169827a9bae4fcfa5212461db000000000000e6ed75ca8fcda7ef3ee336189fef3b3ffb9f38fefc5ff39c4e69e3fa1f8b10ee97123e99b61eba065b1ad67530e7c4f11f9da7ae000002000000610101ad7f79cb9bbf64a0fc109f49fe8799fe266e2ccac80fefe750151f5ddfe51833ec65ece70e07ce8ab5d97db47da8f80000664dc0b86ae2b3ff9d4e220752a6b2f3ea9f793612386496dca5af7b8952aafa796ea7b156d19612297c63bb20e1e0469f7615f67a9218cbace38f5236821314f76302b98afa93044b83989339ca10e6ae30e70e17a82f03e915b8425e8e7a91614306d2ae0bc3550d856f2d7293672b5673d264fc886b0c8bdf436a0fcd21bf9da7bdca98e34cd6e59b0a7ce4ba1b466561aaa35448dff47bb1d7df23d467689a6669e4300d5acf12e4d0b35abf91569f605b2f6df0"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r3 = bpf$ITER_CREATE(0xb, &(0x7f00000002c0)={r2}, 0x8) write$cgroup_type(r3, &(0x7f0000000040), 0x9) 1.763221064s ago: executing program 2 (id=6601): r0 = socket$kcm(0xa, 0x3, 0x73) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0xfc, @empty=0xf5ff}, 0x1b, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f00000011c0)="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", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x3e}}, @ip_tos_u8={{0x38, 0x29, 0x2}}, @ip_tos_u8={{0x100000000000000}}], 0x50}, 0xff00) 1.677563417s ago: executing program 0 (id=6602): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_config_ext={0xcf, 0xd}, 0x21, 0x1, 0x0, 0x4, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001480)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x11, 0x1c, &(0x7f0000000900)=ANY=[@ANYBLOB="1808000001000100000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500060000000000000000000000000035090100000000009500000000000000b7020000000000007baaf8ff00000200b609000000000000dbaaf8ffa0000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffc702000008000000182200005b97a984b66075211c492b652992ba7869af62d9b70543e7f249e1f1ce8fe4cdb631e533099dc4491ef13adbb06b4307be29e8e7c8f1aed125161e0c0da2eac1f79454271ea310f3afc6532dca6c1650b10ffd5d92f01ec568b802b9645d6e373a157f611025497442fe2b79b462ddb6445207129d6f5529508a02850b02e1c0ae415fdcc7006b2dac5a801443c586b64d7ea524fdbf7df06e5ff0", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000001140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x6, 0x3, 0x2, &(0x7f0000000440)) 1.649731157s ago: executing program 2 (id=6603): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000080000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b000000950000000000000032b3ef"], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x8, 0x0, 0x4000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000280)=@nameseq={0x1e, 0x1, 0x0, {0x20000401}}, 0x10, 0x0}, 0x0) 1.639057418s ago: executing program 4 (id=6604): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x100000000002, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x2}, 0x10c002, 0xac5d, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x17, 0x0, 0x8400, 0x1, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, 0x0, 0x0}, 0x20) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x400, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x29}, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[], 0x28}, 0xfc40) sendmsg$kcm(r2, &(0x7f0000000e40)={&(0x7f0000000440)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x80, &(0x7f0000000b00)=[{0x0}, {0x0}, {&(0x7f0000000800)="3b117fcc70bf7522e103ab4be258aec91c4aceb29bdcf1e6869a4342edfc03be8c46cf920782f4784dedd2fd87fea55081d8d68f66984c7cafe5dbf981f3e17a2257ccc08458f36919b8e2919570230eaf6154223af4b3900b9bb3291770b14b94df691d2ddb788d80dbf105be030ba23774fc5fa744dc238d665fcb97eddc4dc2f467a04c1b4d8295be2987f3b68960853d04523be57019d9d395996fc52a9f4ffde5244f0848663c4e682e90cd220414b6e4b5889fa9b7b78579cd22d7ace3e5654ae87d87e8dfbd2aa98b9f587ed738a065f226bfdbd1904b", 0xda}, {&(0x7f0000000900)}, {0x0}], 0x5, &(0x7f0000000b80)=[{0x80, 0x107, 0x5, "4985333d2adf488d09b7bf3e4694c2a9e7bb060dd3d10811d7d2a15ea5beae7dce979622408d82342ef9497db8bbc3e1f2bdbd99ac65e318e8c089cf744c519a6dcc0fa0aea3d0df4bd248481e76d5eca96b3bd0d42d3f82024534eca1647e475abb3af9ebe1d9ebc7"}, {0x88, 0x109, 0x6, "529304371a20de9ee5d9dfecbfe9c4f34ac9653472099eb61481f0b4b5f9e1705844dc228f9ea4b03ab337bf91a171777fd8996821b9fb6970eda755dfcd1cbad76b893c3300425811da0b72bd47fae49cb598ef2716b54d60d7e04d1f91b4c7ec2ff9674ba967d998f3dbfb9b600e7034eb61a3"}, {0xc0, 0x114, 0x13b9, "a7cc5131935baf4989c5d9ae093b39f110bf3be0507c1c485052d45db29fec20bc75b8b01866219268ceb65d78c7a2c0fde879c3226781c7c3ec8af65c177214464c853fd131bd7a186307bd164b23f878fdd0f536837e3714986ce8f061ceca36978769ab58864d71b1bb5cc3440f656e9d04aca29531d2c5b4878fc0f888621a71a70dcca9b36b5499facddbd5facc61270fc603c30430c25c73a7c9821ef454058df1e1d7577974167491ca72bc9e"}], 0x1c8}, 0xc004800) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x10, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="18060000ffffffff000000000000000018020000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000006b000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xc, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800003b3f8848"], 0x0, 0x1, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000003000000000000008f8d1a1c99b140380000000000000000"], 0x50) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x87, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_config_ext={0xf6, 0xfffffffffffffffd}, 0x10c002, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f00000001c0), 0x8}, 0x100e64, 0xc78, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000004080000000000000003000000000000000000000002000000000000000000000000000002000000000000000000000004"], 0x0, 0x56}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0200000004000000080000008001000080000000", @ANYRESHEX=r5, @ANYBLOB="0000000000006b6efb525623a1c20000000000004ae4dd5d0e1a112adca41963164cb1c63c2688acff36dbd6412bace747f98794a9b6fd6d50a151543c0d1083a6f3af3753b1f34c12f73fbb673ed111dd762c6cedd5ee09e1d6f272d50b63293dd239b57dc4b174b08bbd4e624faa0da4281dce95018151a0fef05468a530e5cdecaa123489150617451d1d2a711fd5b4ac927c00ec8d73e7009647b60700cb06e713617c1d2e2595182f7385656443a00fe3", @ANYRES32=0x0, @ANYRES32=r5, @ANYRES16=r2], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0}, 0x94) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000a40)={r4, &(0x7f0000000600), &(0x7f0000000980)=""/164}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000300)=""/180}, 0x20) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)='cpuset.mem_hardwall\x00', 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f1, &(0x7f0000000080)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x0, 0x26, 0x53, &(0x7f0000000200)="42dfcc2619c07d3731ca52c9c26c6f4ca0f3ebf404073cdc7ee5c9675b655bbf742e30c032e0", &(0x7f00000002c0)=""/83, 0x80000000, 0x0, 0xd1, 0x6d, &(0x7f00000006c0)="4503c10be5a14be5c9e0d278e4ea7ad5a9e07a15680133d82113e6f57ded7af8e7ee6c002239c5c797064ff804edd3a8a90e95f5ca413bc240b485d8bccab504bfbfea6724078139d1506ec4a42a6b5ef47acfd6bde42d85877f9d8a10a0be798ce993388b1101a604785594cae9be2ae84032759f3ea27a8e24a85b4cdd27d45d5ae4d79ce268b305561bfbda20548dbe47351526e2d0051999006be9236c360983aafababa86742f3e9e535f331360daeda6962159e4ef275d02f9332ad0f9d3eb83cdaa8aca3acfe5ff9c6cbc600ce8", &(0x7f00000005c0)="f24c69b4fa90526b6d1fc90e36d02abf158eac9c820df6b6a0f16b7a0100d4e87a4c484b2817634647e575e44373f3d66b2226eb2c8a100f99965a25fd027383b57994f2a0068d539884fba068a9e62b4e0e4ea1c2ccb3f5e652e29b755ca041a866fdf96d971e313a5d61b876", 0x1, 0x0, 0x2}, 0x50) 1.201727432s ago: executing program 2 (id=6605): socket$kcm(0x2, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="110000004e0033"], 0xfe33) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x3, 0x84) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x1ff) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0b00000005000000010001000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES16=0x0, @ANYBLOB="0000000000000000000000000000ebffffffffffffff000000000000ffccd9b155bf894eb8fdd39e0db0e40876c5dd50c3c15515dbf1e43696f6521c97c3490cafa1b97dcf365b3ff3dcb3de91f193993cf98842e1bb0e9594adf87726da1ff12e587d923c4c011bd2875f7e56a3c74798657c208b603c23c564926e8c"], 0x48) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x14090, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0xb3b, 0xfffffffffffffff8}, 0x840, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000980)={&(0x7f0000000a00)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000500000084132f89a4020000000000000700000000c96270956cc2f953cf768638e61facdbf1add5c730e2c4772b456bd3b554584fe92d430f03f5d43a0d1c6da5ab839b75e97fa8d604cf68f1d357c00802c6ab13f4811cbd59decb61bc7e26b39b071ffaa2f4412cdd334b194ab07fe0c03079c507ee7d"], &(0x7f0000000bc0)=""/205, 0x29, 0xcd, 0x1}, 0x28) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x200, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x100}) ioctl$TUNSETLINK(r1, 0x400454cc, 0x2) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x1c, 0x1, 0x0, 0xfe, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0xff, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x2}, 0x0, 0x9, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000001340)=@hci={0x1f, 0xd00, 0xe}, 0x80, &(0x7f0000002540)=[{&(0x7f00000006c0)='v', 0x1}], 0x1}, 0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc///\x00\x82q\xee\x00!\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="8510000004000000950000000000000018000000000000000000000000000000950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r5, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001680)=[0x0], 0x0, 0x0, 0x13, 0x0, 0x0, 0xfffffffffffffec9, 0x0, 0x0, 0x0, 0xd0, 0x8, 0x19, 0x0}}, 0x10) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r7}, 0xc) socket$kcm(0xa, 0x5, 0x0) 1.201326492s ago: executing program 0 (id=6606): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x3500000000000000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x72, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x33}, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000100100000100000000000000000000001000000000000000100100000b"], 0x28}, 0x4044454) r1 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0xb, &(0x7f00000000c0), 0x42) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x2000) r2 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r2, 0x1, 0xc, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0700000004000000000900000100000028"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r5}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x3b}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r6 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016000000b30000007f"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="180300000000000000000000009bd63f0c83c4aed537000000851000000600000018100000", @ANYRES32=r6, @ANYBLOB="000000000000000066000000866f000018000000000000000000000000000000950000000000000064030000080000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r5, 0x0, 0x0}, 0x10) sendmsg$kcm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e00000011008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x24000000) socket$kcm(0x29, 0x7, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{0x1}, &(0x7f0000000200), &(0x7f0000000240)=r5}, 0x20) r7 = socket$kcm(0x10, 0x2, 0x4) close(r7) socket$kcm(0x10, 0x400000002, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001d00)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8fff7ff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b70500000000e000720a23fe000000008500000012000000b70000000000000095000000000000004e6258941c823b7505608556ba4ababb42684e890d31ae450400373a0a5447a801b8c1c4f0c4bd97c6555e61345400f9bd42abeb9ade0105000000000000a21902ff07000094a2b51c21df74924f5436a6ed89b98f75e800230c49c90fe1336481f3b92a63336c36fcd745d61d7739c6554ca201000000bebbe8282f8b1e26407437a397bf8f50e87ed4d27adfd876bffc402887781979461c4363bc5c9b6202ea471428197ef88bc333fbcec0ea4334844d232279ae95a90fd41d528f58d305000000435883df6c10ce86188c92292b2d0226082960be682836bdff8b0971f2a5405e453228e7b1005bd73479358a90df3e481947de6453736aa572158af6ea63d6d418fbbd2bba050000001da000ef78df03000000d19913a5fb03c79dac2e489f68127892658115e7ffb588a71dffffff951b8535167ab8069a2c92a3aa18e22517000026637b4c34bf2d0aa304ed42bf70480e9e97203fd169411f37fddd1f7fbe16dbbc0f307bceb5064f388a0350c3dc928b0e638b1e2b2a9d25264233e5d45eb377f56b95241024dbe30f67191c2b56b70328d6d3215dfffe5d89af1d10599bd494d921d1fb2db99b6aba0fa978f41eb1d4c553e5a9326ed550c13f8dd36716a899a1e79234294707c5312b924d142c17b20bb80ee202222c03fa84ccc374e717f694018630366397266090a82343aedfbf7afe892390c2eb775b0d16073da2229958db05de7df6ab7600004000010000006d8081cb3bf251d906c00da0e23b50465f8394820be571e3592d0000c7ef10fdc462e7040e7074ec43aa461fc54401a76406db718d4efd6c1bd10ce1d087cf9bba461162555a95524c84df0952d32093082b7aa71304e0d2d9ec310d1b676b378a5879e47941de1a28c3a8f400000000000000000e032b7d2badd0bc6617a859b7ac273b6304555f664469cec152030f06cc0ca1765838eb5590264736fbccfc3a8f4e3b10daf6a275daf5db2dac7096fe8ac8876acaad043663b3b0fedb05e6d31408fa20140c9d2db1c59ac8a3ce28e489d67d87d3a107ccea3007f58f2c5017e8807107f79ac50cc1d4f546b4443d137eb706b71b1767a10cca7a7c82b76c96e874aff249f36329a6526b354b6e674b08f7ef492b804c4b08fb10de807d79fd782027318cd7632e22d2faa16209272b39b5ec8d239832ea02cc88e249a2e77753a58987547571fbc8de747faab724bebb6401412b496e078fcb6c78ab447e871b76a8b0506f49594aa1d610567e14d739a60ff3ce04d0d2e5681e787c7e1ad25467bb81f2f448128207fe07a83759ec30cf9e0a3fd3f2fcee97fe8d273f8e712a8a64eaf2d89a1fa44554357fcd7ab531ff7a41c27164fca430a62d015b477de61853f5ee2e25b00a63642ec32ece2ff3bb5883deb895f52a923b5c744d8dccdd6a09ded8b90f1eeda8e6e884a4f090edb6ab9fc8107846508d51f3735493d5860cf80200ce31b92eb3563d485b5a7d192092d7a9fd2bc67d305d1d4573aad5f6501d1cd27657ce17330402dacb78d72d776330711645eed7d4c292f4448733c0826c4eb950f3d40457f82d7f792d106518f6bde874aff9e2bea7d73f74bebeeacfc700000000000000000000d40d73be47803297db004264c8c70b7761b22a7114a078a87d63d63b0c9dcc263a5b773bfeba212abef4181ad9e4872e328c0f105d51e3d167a2b717051d7681ba04552eeba18a000000b22b50d76d85040c9000ea68a528049a60d5e26b20455194f4be3b8466fd66d0e6cefcff7891c485d61cb66f4076cd60a22733cb00cf7cc12ca7d9bb864c0e650236a79a5c85349a9b1e6bbc3bace197e72490c566431cd3a08e9d1b641c1ba1f661d01573b904c3fa1427370fa15cecd294ac21fefe3d161fdf58e8bc5957ef145839f4370176e1be88d2e3516a1998c1621a00b4438b85a4dfee6f61827a1e50e158038b037dfda3ffb35069e41fc740ae720800de53948f176c3c15f3a529c02434b920d87f12a6e3420a2fdcb3559e7a5b1ddbb06b7a5977f63bfac701e673bf626d126b213c92e7169a930beb8d76f9db34e8098bea301baa96916d6458c923866dc192928b320738d1b298fb55f2a64500000000000000000000000000509885a38d9d995a46817e7ff7acddcc5f9253c63f86baf33f92820c9ff497cf76b6482c3ab53fb6ecea6d220b91b99b2fb4279ab09ae0645ab92df309000000000000a4868411948f8e3e259b717d722a1eebd3f6860a17f1ae9e10a1178f6aef4951b192d13e9600c1f700ca7b1d127e451034469bf2a8f93dbae6ad8e932e431dc18323794156238625bb9c45c5a76a68a8646e701b29a71ffbd854f50f195823106a5625ff94221f1f04c72525b50aae69081de9626de9847bf53475d90642d9730101d80b1b0000000000000000822b0641698d60160d9157548302dd2636d12c431f96728ae4a45361e6d47a1c4a52d67c0f0a62585c09fcfd70d0f249f87c44b47283c1c6f2430d70c751e4ada9b646e6e7c1719faee476d88a2943c71a21db55b7497dd7ed385ac2e8cb916390a3a0ed52e7371e1a141e69afa07b46ac20f3521fb251b72c82ee1c7eb4f67c0deed5618d0db925ce7a7c50a99835544c540f5d528587d1a26e78df1bc9a8e4d90c57d0b8122eae7b23e4456624f5337c16c42648c7a3d0b799ad409befe0cbe2aa781ba826918df7aa80dff4f62258e54419629eb1d37de7f6a3512bd618781d1ad3a4d4b0da44df9f9a93f0487f79a9b16dfa6f68b06ce6a96ca344d194cded05702c2300d1a4f451b33830765f8131f6c28fada65701851bba089b8a8347900e72d68cea965feb6a06225dd3f0e135323a5bde3b43c9d242b73abf9e05336af040a4a6bb5918146393f1d50705c1d1e986bf2f690de51ee8727d37339df5391db535bb1e9bb3e5dadb6e5a2bb4faa2dcbc6ca9b40ac96e448b9dadeb08fc2cf3a960f22bf20b9e967b7a75687372b8e3edc543896c360674d901a7f56b07ba1479b46eea3d94026a9c7e670ab40bb2c1ca1a7c90299361239bef773140af974c7efc285a64633d21513481b3ac62dec9fa3e8ce6156d76b82baa145bc550b0ccbc0934ccfea45292caa2f0654fe18dc0669a4f2af9fa232a293ad94261f55675cc686db72783a6bacc0df6a1ea943ae266af112f35319980cd681811a369e0d03cf7d22bed7cbe1afe498b88942b1bf7edae441a0d0d88fce65cb4e848793a28cbd7373f6acd3b5a48c034e487750388929d37fa3165f205dab3be5f3e5781a84298687cbf02dcaf0e14a2b260293f349d076eb75a2ddc5382d106f0beea02aa45018fe36d1176cf7704383b6922d10dc80bc7feca3982ae232d4bb47c722c83a7cf6ee8832f038b072eb803a47cd7f753e80c9f6eedb8"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1d4}, 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r8, 0x300f000, 0xe, 0x0, &(0x7f0000000080)="00693cda000028eddb0000200000", 0x0, 0x48b8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 1.201154702s ago: executing program 4 (id=6607): r0 = socket$kcm(0x2a, 0x2, 0x0) r1 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(r1, 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f00000001c0), 0xc) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x40010120) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x541b, 0x0) sendmsg$kcm(r0, &(0x7f0000001540)={&(0x7f0000000040)=@qipcrtr={0x2a, 0x1, 0x4000}, 0x80, 0x0}, 0x0) 958.661619ms ago: executing program 3 (id=6608): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21bef5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d55545a34effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f94306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a835701bea8240399c56ce8f58df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b262341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51427a7f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa08ad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282bffff2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae05334d5a44a020000001c0d882a564d74a7c72bf9a2152b261e58fea6d2f93589cfe261dc0410b5cc"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r3 = bpf$ITER_CREATE(0xb, &(0x7f00000002c0)={r2}, 0x8) write$cgroup_int(r3, &(0x7f00000001c0), 0xfffffdef) write$cgroup_type(r3, &(0x7f0000000040), 0x9) 955.340239ms ago: executing program 1 (id=6618): socket$kcm(0xa, 0x5, 0x0) (async, rerun: 32) r0 = perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) (rerun: 32) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x800}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x50) (async) socket$kcm(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f0000000c40)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @cgroup_skb, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$kcm(0x10, 0x3, 0x10) (async) r3 = socket$kcm(0xa, 0x5, 0x0) ioctl$TUNGETDEVNETNS(r3, 0x8918, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0xfffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) r4 = socket$kcm(0x10, 0x7, 0x10) sendmsg$kcm(r4, 0x0, 0x0) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[], 0x48) (async) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) (async) r6 = socket$kcm(0x2c, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r5}, &(0x7f0000000080), &(0x7f00000001c0)=r6}, 0x20) close(r6) (async) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="d80000001c0081064e81f782db44b9040a1d080404000000000081a1180002000600142603600e1208000f0000810401a8001605200001400200000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 930.60043ms ago: executing program 4 (id=6609): r0 = perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x9) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9c, 0x10}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x15, 0xa, 0x0, 0x0, 0x60, 0x61, 0x11, 0x54}, [@initr0]}, 0x0, 0x4}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], &(0x7f00000007c0)=""/232, 0x35, 0xe8, 0x1, 0x0, 0x10000, @value=r1}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000004000000001800000000000001000000", @ANYRES32, @ANYBLOB="0200000000000000000003000000000000000000", @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="010000000300"], 0x50) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) 708.853097ms ago: executing program 0 (id=6610): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r3 = bpf$ITER_CREATE(0xb, &(0x7f00000002c0)={r2}, 0x8) write$cgroup_type(r3, &(0x7f0000000040), 0x9) 654.249499ms ago: executing program 1 (id=6611): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x10, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x360}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xa, 0x0, &(0x7f00000004c0)="04dde1152379be503e95", 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x60}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007"], 0x0, 0x5}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa0677"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 623.10434ms ago: executing program 2 (id=6612): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400}, 0x8008) socket$kcm(0x10, 0x2, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x4e) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) close(0xffffffffffffffff) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x20, 0x0, &(0x7f00000002c0)="b90103616908068c3c270040e700009e0dc5cf1d66fff2fcffff8100632f2991", 0x0, 0x8104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 613.463741ms ago: executing program 4 (id=6613): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x5c1a41, 0x0) ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, 0xa0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x201}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], 0x0}, 0x94) r2 = socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x12120) setsockopt$sock_attach_bpf(r2, 0x84, 0x14, &(0x7f0000000000)=r5, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8, 0x10}, 0x10020, 0x0, 0x3, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000000080000000000000000000850000001800000085000000a000000095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xc7, &(0x7f0000000140)=""/199}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a800000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x11}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYRES8=r1], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x110}, 0x10140) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socket$kcm(0x10, 0x2, 0x4) socket$kcm(0xa, 0x6, 0x0) r8 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000540)}, 0x805) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x20) r9 = socket$kcm(0xa, 0x0, 0x0) setsockopt$sock_attach_bpf(r9, 0x29, 0x23, 0x0, 0x0) sendmsg$kcm(r9, 0x0, 0xc000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r10, &(0x7f0000000080)={0x0, 0x69, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 411.365376ms ago: executing program 0 (id=6614): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r3 = bpf$ITER_CREATE(0xb, &(0x7f00000002c0)={r2}, 0x8) write$cgroup_type(r3, &(0x7f0000000040), 0x9) 411.049087ms ago: executing program 1 (id=6615): bpf$ITER_CREATE(0x21, &(0x7f0000000b80), 0x8) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x7fffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0xf6}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x96) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3, 0xffffffffffffffff}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000200000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, @perf_config_ext, 0x806, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="7638300c000000000000e9000000", 0x0, 0x2f000000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000500)="0afff088a8", 0x0, 0xc339, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x8}, 0x2a) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876cff0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a70d251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4080) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030029000b12d25a80648c2594f90124fc60100c020000040000053582c137153e370248078000", 0x29}], 0x1}, 0x0) close(r6) recvmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x40000100) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r7}, 0xc) recvmsg$kcm(r0, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) 352.854208ms ago: executing program 2 (id=6616): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_config_ext={0xcf, 0xd}, 0x21, 0x1, 0x0, 0x4, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001480)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x6, 0x3, 0x2, &(0x7f0000000440)) 178.797394ms ago: executing program 0 (id=6617): socket$kcm(0x10, 0x7, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="d8000000180081054e81f782db4cb904021d0800fe00fe05e8fe55a10a0015000600142603600e1208000f007f370401a8001600200001401c00010003580461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090014d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00350db798262f3d40fad95667e006dcdf63951f215c3b8b6ad2cba0e2375ee535e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6f4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) (fail_nth: 3) 0s ago: executing program 2 (id=6619): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x1, 0x0, 0x0, 0x1, 0x5, 0x20, 0x0, 0x0, 0xf3b8f362ca66eff5}]}}, 0x0, 0x2a}, 0x28) socket$kcm(0x10, 0x7, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x3, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x6, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="d8000000180081054e81f782db4cb904021d0800fe00fe05e8fe55a10a0015000600142603600e1208000f007f370401a8001600200001401c00010003580461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090014d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00350db798262f3d40fad95667e006dcdf63951f215c3b8b6ad2cba0e2375ee535e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6f4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) kernel console output (not intermixed with test programs): 4][T21029] ? trace_event_raw_event_lock+0x250/0x250 [ 1139.831917][T21029] netlink_rcv_skb+0x1fb/0x450 [ 1139.836728][T21029] ? rtnetlink_bind+0x80/0x80 [ 1139.841450][T21029] ? netlink_ack+0x1170/0x1170 [ 1139.846278][T21029] ? netlink_deliver_tap+0x2e/0x1b0 [ 1139.851527][T21029] netlink_unicast+0x74d/0x8d0 [ 1139.856354][T21029] netlink_sendmsg+0x8ad/0xbd0 [ 1139.861191][T21029] ? netlink_getsockopt+0x550/0x550 [ 1139.866480][T21029] ? aa_sock_msg_perm+0x94/0x150 [ 1139.871457][T21029] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1139.876811][T21029] ? security_socket_sendmsg+0x7c/0xa0 [ 1139.882315][T21029] ? netlink_getsockopt+0x550/0x550 [ 1139.887584][T21029] ____sys_sendmsg+0x5be/0x970 [ 1139.892419][T21029] ? __sys_sendmsg_sock+0x30/0x30 [ 1139.897481][T21029] ? __import_iovec+0x315/0x500 [ 1139.902391][T21029] ? import_iovec+0x6f/0xa0 [ 1139.906956][T21029] ___sys_sendmsg+0x2a2/0x360 [ 1139.911684][T21029] ? __sys_sendmsg+0x290/0x290 [ 1139.916540][T21029] ? __lock_acquire+0x7d10/0x7d10 [ 1139.921665][T21029] __se_sys_sendmsg+0x1bb/0x2a0 [ 1139.926557][T21029] ? ct_nmi_exit+0x145/0x1c0 [ 1139.931201][T21029] ? __x64_sys_sendmsg+0x80/0x80 [ 1139.936213][T21029] ? lockdep_hardirqs_on+0x94/0x140 [ 1139.941464][T21029] do_syscall_64+0x4c/0xa0 [ 1139.945918][T21029] ? clear_bhb_loop+0x60/0xb0 [ 1139.950641][T21029] ? clear_bhb_loop+0x60/0xb0 [ 1139.955373][T21029] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1139.961311][T21029] RIP: 0033:0x7f159cd9ce59 [ 1139.965766][T21029] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1139.985423][T21029] RSP: 002b:00007f159dd38028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1139.993883][T21029] RAX: ffffffffffffffda RBX: 00007f159d015fa0 RCX: 00007f159cd9ce59 [ 1140.001906][T21029] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 1140.010049][T21029] RBP: 00007f159dd38090 R08: 0000000000000000 R09: 0000000000000000 [ 1140.018065][T21029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1140.026069][T21029] R13: 00007f159d016038 R14: 00007f159d015fa0 R15: 00007fff8007fcc8 [ 1140.034115][T21029] [ 1140.091276][T21033] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.5894'. [ 1142.038217][T21052] netlink: 'syz.3.5900': attribute type 10 has an invalid length. [ 1142.061717][T21052] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5900'. [ 1142.074368][T21052] device team0 entered promiscuous mode [ 1142.080077][T21052] device team_slave_0 entered promiscuous mode [ 1142.095333][T21052] device team_slave_1 entered promiscuous mode [ 1142.102101][T21052] bridge0: port 3(team0) entered blocking state [ 1142.117244][T21052] bridge0: port 3(team0) entered disabled state [ 1142.131674][T21052] bridge0: port 3(team0) entered blocking state [ 1142.138252][T21052] bridge0: port 3(team0) entered forwarding state [ 1143.259696][T21064] netlink: 'syz.2.5904': attribute type 25 has an invalid length. [ 1143.280224][T21064] netlink: 'syz.2.5904': attribute type 28 has an invalid length. [ 1143.570899][T21089] FAULT_INJECTION: forcing a failure. [ 1143.570899][T21089] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1143.694258][T21089] CPU: 0 PID: 21089 Comm: syz.2.5911 Not tainted syzkaller #0 [ 1143.701820][T21089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1143.711930][T21089] Call Trace: [ 1143.715260][T21089] [ 1143.718237][T21089] dump_stack_lvl+0x188/0x24e [ 1143.722978][T21089] ? show_regs_print_info+0x12/0x12 [ 1143.728236][T21089] ? load_image+0x400/0x400 [ 1143.732811][T21089] ? __lock_acquire+0x7d10/0x7d10 [ 1143.737901][T21089] ? snprintf+0xe5/0x140 [ 1143.742222][T21089] should_fail_ex+0x399/0x4d0 [ 1143.746959][T21089] _copy_to_user+0x2c/0x130 [ 1143.751523][T21089] simple_read_from_buffer+0xe3/0x150 [ 1143.756979][T21089] proc_fail_nth_read+0x1a6/0x220 [ 1143.762075][T21089] ? proc_fault_inject_write+0x310/0x310 [ 1143.767775][T21089] ? fsnotify_perm+0x248/0x550 [ 1143.772614][T21089] ? proc_fault_inject_write+0x310/0x310 [ 1143.778371][T21089] vfs_read+0x2de/0xa00 [ 1143.782610][T21089] ? kernel_read+0x1e0/0x1e0 [ 1143.787280][T21089] ? __fget_files+0x28/0x4b0 [ 1143.791936][T21089] ? __fget_files+0x28/0x4b0 [ 1143.796566][T21089] ? __fget_files+0x43d/0x4b0 [ 1143.801520][T21089] ? __fdget_pos+0x2ae/0x360 [ 1143.806151][T21089] ? ksys_read+0x71/0x250 [ 1143.810525][T21089] ksys_read+0x14c/0x250 [ 1143.814816][T21089] ? vfs_write+0xa30/0xa30 [ 1143.819278][T21089] ? lockdep_hardirqs_on+0x94/0x140 [ 1143.824522][T21089] do_syscall_64+0x4c/0xa0 [ 1143.828965][T21089] ? clear_bhb_loop+0x60/0xb0 [ 1143.833683][T21089] ? clear_bhb_loop+0x60/0xb0 [ 1143.838403][T21089] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1143.844342][T21089] RIP: 0033:0x7f03edd5d68e [ 1143.848792][T21089] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1143.868430][T21089] RSP: 002b:00007f03ebfd4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1143.876882][T21089] RAX: ffffffffffffffda RBX: 00007f03ebfd56c0 RCX: 00007f03edd5d68e [ 1143.885012][T21089] RDX: 000000000000000f RSI: 00007f03ebfd50a0 RDI: 0000000000000005 [ 1143.893027][T21089] RBP: 00007f03ebfd5090 R08: 0000000000000000 R09: 0000000000000000 [ 1143.901030][T21089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1143.909033][T21089] R13: 00007f03ee016128 R14: 00007f03ee016090 R15: 00007ffc0eeee8b8 [ 1143.917066][T21089] [ 1144.340997][T21105] net_ratelimit: 5231 callbacks suppressed [ 1144.341038][T21105] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1144.366731][T21105] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1144.386534][T21105] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1144.404616][T21105] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1144.421010][T21105] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1144.436142][T21105] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1144.452754][T21105] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1144.472045][T21105] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1144.495736][T21105] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1144.544392][T21105] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1145.039353][T21112] FAULT_INJECTION: forcing a failure. [ 1145.039353][T21112] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1145.053032][T21112] CPU: 1 PID: 21112 Comm: syz.1.5921 Not tainted syzkaller #0 [ 1145.060539][T21112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1145.070630][T21112] Call Trace: [ 1145.073932][T21112] [ 1145.077684][T21112] dump_stack_lvl+0x188/0x24e [ 1145.082404][T21112] ? show_regs_print_info+0x12/0x12 [ 1145.087645][T21112] ? load_image+0x400/0x400 [ 1145.092188][T21112] ? __lock_acquire+0x7d10/0x7d10 [ 1145.097254][T21112] ? slab_post_alloc_hook+0x4b/0x480 [ 1145.102565][T21112] should_fail_ex+0x399/0x4d0 [ 1145.107287][T21112] prepare_alloc_pages+0x1e2/0x5f0 [ 1145.112440][T21112] __alloc_pages+0x130/0x4f0 [ 1145.117061][T21112] ? kasan_populate_vmalloc_pte+0xa4/0xf0 [ 1145.122817][T21112] ? zone_statistics+0x170/0x170 [ 1145.127792][T21112] ? __rwlock_init+0x140/0x140 [ 1145.132626][T21112] ? do_raw_spin_unlock+0x11d/0x230 [ 1145.137861][T21112] __get_free_pages+0x8/0x30 [ 1145.142485][T21112] kasan_populate_vmalloc_pte+0x31/0xf0 [ 1145.148057][T21112] ? __apply_to_page_range+0x977/0xd10 [ 1145.153549][T21112] __apply_to_page_range+0x989/0xd10 [ 1145.158872][T21112] ? kasan_populate_vmalloc+0x70/0x70 [ 1145.164294][T21112] alloc_vmap_area+0x178f/0x18c0 [ 1145.169274][T21112] ? vm_map_ram+0xab0/0xab0 [ 1145.173799][T21112] ? rcu_is_watching+0x11/0xa0 [ 1145.178599][T21112] __get_vm_area_node+0x158/0x330 [ 1145.183654][T21112] __vmalloc_node_range+0x357/0x13b0 [ 1145.188957][T21112] ? stack_map_alloc+0x303/0x520 [ 1145.193937][T21112] ? free_vm_area+0x50/0x50 [ 1145.198463][T21112] ? apparmor_capable+0x12c/0x190 [ 1145.203519][T21112] ? bpf_lsm_capable+0x5/0x10 [ 1145.208222][T21112] ? security_capable+0x85/0xb0 [ 1145.213095][T21112] bpf_map_area_alloc+0xd4/0xe0 [ 1145.217988][T21112] ? stack_map_alloc+0x303/0x520 [ 1145.222951][T21112] stack_map_alloc+0x303/0x520 [ 1145.227742][T21112] map_create+0x534/0x1000 [ 1145.232189][T21112] ? bpf_lsm_bpf+0x5/0x10 [ 1145.236542][T21112] __sys_bpf+0x38b/0x780 [ 1145.240809][T21112] ? bpf_link_show_fdinfo+0x380/0x380 [ 1145.246222][T21112] ? lock_chain_count+0x20/0x20 [ 1145.251112][T21112] __x64_sys_bpf+0x78/0x90 [ 1145.255564][T21112] do_syscall_64+0x4c/0xa0 [ 1145.260003][T21112] ? clear_bhb_loop+0x60/0xb0 [ 1145.264715][T21112] ? clear_bhb_loop+0x60/0xb0 [ 1145.269436][T21112] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1145.275366][T21112] RIP: 0033:0x7f1c10f9ce59 [ 1145.279814][T21112] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1145.299437][T21112] RSP: 002b:00007f1c11e48028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1145.307884][T21112] RAX: ffffffffffffffda RBX: 00007f1c11215fa0 RCX: 00007f1c10f9ce59 [ 1145.316002][T21112] RDX: 0000000000000050 RSI: 00002000000006c0 RDI: 0000000000000000 [ 1145.324011][T21112] RBP: 00007f1c11e48090 R08: 0000000000000000 R09: 0000000000000000 [ 1145.332014][T21112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1145.340019][T21112] R13: 00007f1c11216038 R14: 00007f1c11215fa0 R15: 00007ffe6f2f86b8 [ 1145.348049][T21112] [ 1145.749760][T21125] syzkaller0: tun_chr_ioctl cmd 1074812118 [ 1147.977646][T21172] syzkaller0: tun_chr_ioctl cmd 1074812118 [ 1149.065351][T21180] netlink: 'syz.3.5948': attribute type 10 has an invalid length. [ 1149.120956][T21180] bridge0: port 3(team0) entered disabled state [ 1149.238254][T21180] bridge0: port 3(team0) entered disabled state [ 1149.274619][T21180] device team_slave_0 left promiscuous mode [ 1149.299364][T21180] team0 (unregistering): Port device team_slave_0 removed [ 1149.343978][T21180] device team_slave_1 left promiscuous mode [ 1149.368297][T21180] team0 (unregistering): Port device team_slave_1 removed [ 1149.410344][T21189] netlink: 'syz.1.5950': attribute type 10 has an invalid length. [ 1150.317933][T21227] net_ratelimit: 937 callbacks suppressed [ 1150.317972][T21227] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1150.396105][T21227] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1150.450427][T21229] netlink: 'syz.4.5965': attribute type 10 has an invalid length. [ 1150.468199][T21227] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1150.520058][T21227] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1150.571259][T21227] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1150.623342][T21227] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1150.673469][T21227] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1150.728458][T21227] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1150.783683][T21227] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1150.808850][T21227] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1151.380738][T21234] netlink: 128 bytes leftover after parsing attributes in process `syz.4.5967'. [ 1151.390050][T21234] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1151.529974][T21239] device syzkaller0 entered promiscuous mode [ 1152.135970][T21254] netlink: 64859 bytes leftover after parsing attributes in process `syz.4.5974'. [ 1154.979024][T21242] netlink: 'syz.3.5971': attribute type 10 has an invalid length. [ 1155.003927][T21254] device macsec0 entered promiscuous mode [ 1155.236931][T21268] netlink: 'syz.0.5979': attribute type 10 has an invalid length. [ 1155.548792][T21282] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5984'. [ 1155.564445][T21280] netlink: 2 bytes leftover after parsing attributes in process `syz.3.5985'. [ 1155.579708][T21280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1155.591508][T21280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1155.603013][T21280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1155.614681][T21280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1155.631206][T21280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1155.668273][T21280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1155.686906][T21280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1155.706368][T21280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1155.739853][T21280] device batadv_slave_1 entered promiscuous mode [ 1156.146331][T21293] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.5990'. [ 1156.165321][T21293] net_ratelimit: 1952 callbacks suppressed [ 1156.165523][T21293] netlink: zone id is out of range [ 1156.194576][T21293] netlink: zone id is out of range [ 1156.208637][T21293] netlink: zone id is out of range [ 1156.219704][T21293] netlink: zone id is out of range [ 1156.229334][T21293] netlink: zone id is out of range [ 1156.240846][T21293] netlink: zone id is out of range [ 1156.251166][T21293] netlink: zone id is out of range [ 1156.263347][T21293] netlink: zone id is out of range [ 1156.275086][T21293] netlink: zone id is out of range [ 1156.296646][T21293] netlink: zone id is out of range [ 1157.705905][T21314] netlink: 'syz.4.5997': attribute type 10 has an invalid length. [ 1158.058314][T21321] netlink: 128 bytes leftover after parsing attributes in process `syz.2.6000'. [ 1158.067729][T21321] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1158.074939][T21321] FAULT_INJECTION: forcing a failure. [ 1158.074939][T21321] name failslab, interval 1, probability 0, space 0, times 0 [ 1158.098809][T21321] CPU: 0 PID: 21321 Comm: syz.2.6000 Not tainted syzkaller #0 [ 1158.106351][T21321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1158.116453][T21321] Call Trace: [ 1158.119775][T21321] [ 1158.122757][T21321] dump_stack_lvl+0x188/0x24e [ 1158.127483][T21321] ? show_regs_print_info+0x12/0x12 [ 1158.132724][T21321] ? load_image+0x400/0x400 [ 1158.137307][T21321] ? __might_sleep+0xd0/0xd0 [ 1158.141953][T21321] ? __lock_acquire+0x7d10/0x7d10 [ 1158.147042][T21321] should_fail_ex+0x399/0x4d0 [ 1158.151859][T21321] should_failslab+0x5/0x20 [ 1158.156402][T21321] slab_pre_alloc_hook+0x59/0x310 [ 1158.161519][T21321] ? fib6_info_alloc+0x2e/0xe0 [ 1158.166331][T21321] __kmem_cache_alloc_node+0x4f/0x260 [ 1158.171747][T21321] ? fib6_info_alloc+0x2e/0xe0 [ 1158.176602][T21321] __kmalloc+0xa0/0x240 [ 1158.180822][T21321] fib6_info_alloc+0x2e/0xe0 [ 1158.185475][T21321] ip6_route_info_create+0x44f/0x1210 [ 1158.190905][T21321] ? __kasan_kmalloc+0x8e/0xa0 [ 1158.195733][T21321] ? add_addr+0x8c/0x2c0 [ 1158.200033][T21321] ? l3mdev_fib_table+0x18/0x160 [ 1158.205028][T21321] addrconf_f6i_alloc+0x1ec/0x430 [ 1158.210104][T21321] ? ip6_route_del+0x14f0/0x14f0 [ 1158.215130][T21321] ipv6_add_addr+0x461/0xfc0 [ 1158.219796][T21321] ? ipv6_count_addresses+0x190/0x190 [ 1158.225220][T21321] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1158.230931][T21321] ? mutex_unlock+0x10/0x10 [ 1158.235497][T21321] add_addr+0x8c/0x2c0 [ 1158.239621][T21321] addrconf_init_auto_addrs+0x45b/0xaf0 [ 1158.245219][T21321] ? addrconf_dad_run+0x1d0/0x1d0 [ 1158.250300][T21321] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1158.256347][T21321] ? _printk+0xda/0x130 [ 1158.260566][T21321] ? load_image+0x400/0x400 [ 1158.265121][T21321] ? __local_bh_enable_ip+0x136/0x1c0 [ 1158.270541][T21321] ? addrconf_link_ready+0x116/0x170 [ 1158.275885][T21321] addrconf_notify+0xaca/0xf40 [ 1158.280718][T21321] raw_notifier_call_chain+0xcb/0x160 [ 1158.286156][T21321] netdev_state_change+0xe0/0x170 [ 1158.291233][T21321] ? netdev_features_change+0xd0/0xd0 [ 1158.296696][T21321] do_setlink+0x36bf/0x3e60 [ 1158.301274][T21321] ? nlmsg_parse_deprecated_strict+0x110/0x110 [ 1158.307482][T21321] ? stack_trace_save+0xa6/0xf0 [ 1158.312387][T21321] ? __stack_depot_save+0x35/0x460 [ 1158.317562][T21321] ? __lock_acquire+0x12f4/0x7d10 [ 1158.322661][T21321] ? __nla_validate_parse+0x2072/0x2ac0 [ 1158.328259][T21321] ? netlink_rcv_skb+0x1fb/0x450 [ 1158.333242][T21321] ? netlink_unicast+0x74d/0x8d0 [ 1158.338244][T21321] ? __nla_validate+0x50/0x50 [ 1158.342997][T21321] ? validate_linkmsg+0x3db/0x4c0 [ 1158.348089][T21321] rtnl_newlink+0x17d9/0x20a0 [ 1158.352815][T21321] ? rtnl_newlink+0x5d1/0x20a0 [ 1158.357636][T21321] ? rtnl_setlink+0x510/0x510 [ 1158.362365][T21321] ? trace_raw_output_contention_end+0xd0/0xd0 [ 1158.368579][T21321] ? rcu_is_watching+0x11/0xa0 [ 1158.373397][T21321] ? trace_contention_end+0x5f/0x170 [ 1158.378736][T21321] ? __mutex_lock+0x1ab/0xaf0 [ 1158.383500][T21321] ? rcu_read_unlock+0x8c/0xa0 [ 1158.388322][T21321] ? rtnetlink_rcv_msg+0x226/0xfc0 [ 1158.393490][T21321] ? rtnetlink_rcv_msg+0x226/0xfc0 [ 1158.398649][T21321] ? rtnl_setlink+0x510/0x510 [ 1158.403367][T21321] rtnetlink_rcv_msg+0x87c/0xfc0 [ 1158.408402][T21321] ? rtnetlink_bind+0x80/0x80 [ 1158.413127][T21321] ? mark_lock+0x94/0x320 [ 1158.417517][T21321] ? __lock_acquire+0x12f4/0x7d10 [ 1158.422618][T21321] ? verify_lock_unused+0x140/0x140 [ 1158.427883][T21321] ? netlink_sendmsg+0x654/0xbd0 [ 1158.432956][T21321] ? verify_lock_unused+0x140/0x140 [ 1158.438235][T21321] netlink_rcv_skb+0x1fb/0x450 [ 1158.443051][T21321] ? rtnetlink_bind+0x80/0x80 [ 1158.447775][T21321] ? netlink_ack+0x1170/0x1170 [ 1158.452584][T21321] ? netlink_deliver_tap+0x2e/0x1b0 [ 1158.457844][T21321] netlink_unicast+0x74d/0x8d0 [ 1158.462662][T21321] netlink_sendmsg+0x8ad/0xbd0 [ 1158.467522][T21321] ? netlink_getsockopt+0x550/0x550 [ 1158.472774][T21321] ? aa_sock_msg_perm+0x94/0x150 [ 1158.477754][T21321] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1158.483077][T21321] ? security_socket_sendmsg+0x7c/0xa0 [ 1158.488577][T21321] ? netlink_getsockopt+0x550/0x550 [ 1158.493820][T21321] ____sys_sendmsg+0x5be/0x970 [ 1158.498647][T21321] ? __sys_sendmsg_sock+0x30/0x30 [ 1158.503729][T21321] ? __import_iovec+0x315/0x500 [ 1158.508642][T21321] ? import_iovec+0x6f/0xa0 [ 1158.513199][T21321] ___sys_sendmsg+0x2a2/0x360 [ 1158.517936][T21321] ? __sys_sendmsg+0x290/0x290 [ 1158.522779][T21321] ? __lock_acquire+0x7d10/0x7d10 [ 1158.527891][T21321] __se_sys_sendmsg+0x1bb/0x2a0 [ 1158.532794][T21321] ? ct_nmi_exit+0x145/0x1c0 [ 1158.537453][T21321] ? __x64_sys_sendmsg+0x80/0x80 [ 1158.542451][T21321] ? lockdep_hardirqs_on+0x94/0x140 [ 1158.547710][T21321] do_syscall_64+0x4c/0xa0 [ 1158.552178][T21321] ? clear_bhb_loop+0x60/0xb0 [ 1158.556925][T21321] ? clear_bhb_loop+0x60/0xb0 [ 1158.561702][T21321] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1158.567665][T21321] RIP: 0033:0x7f03edd9ce59 [ 1158.572131][T21321] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1158.591800][T21321] RSP: 002b:00007f03ebff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1158.600281][T21321] RAX: ffffffffffffffda RBX: 00007f03ee015fa0 RCX: 00007f03edd9ce59 [ 1158.608304][T21321] RDX: 0000000000000000 RSI: 0000200000000940 RDI: 0000000000000003 [ 1158.616320][T21321] RBP: 00007f03ebff6090 R08: 0000000000000000 R09: 0000000000000000 [ 1158.624378][T21321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1158.632390][T21321] R13: 00007f03ee016038 R14: 00007f03ee015fa0 R15: 00007ffc0eeee8b8 [ 1158.640422][T21321] [ 1158.983391][T21326] netlink: 'syz.1.6001': attribute type 16 has an invalid length. [ 1158.997625][T21326] netlink: 'syz.1.6001': attribute type 3 has an invalid length. [ 1159.006884][T21326] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6001'. [ 1160.701188][T21332] netlink: 'syz.4.6004': attribute type 16 has an invalid length. [ 1160.734426][T21332] netlink: 156 bytes leftover after parsing attributes in process `syz.4.6004'. [ 1160.817862][T21334] FAULT_INJECTION: forcing a failure. [ 1160.817862][T21334] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1160.832277][T21334] CPU: 1 PID: 21334 Comm: syz.3.6003 Not tainted syzkaller #0 [ 1160.839808][T21334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1160.849910][T21334] Call Trace: [ 1160.853226][T21334] [ 1160.856193][T21334] dump_stack_lvl+0x188/0x24e [ 1160.860930][T21334] ? show_regs_print_info+0x12/0x12 [ 1160.866178][T21334] ? load_image+0x400/0x400 [ 1160.870791][T21334] ? __lock_acquire+0x7d10/0x7d10 [ 1160.875876][T21334] ? __rcu_read_unlock+0x78/0xd0 [ 1160.880861][T21334] should_fail_ex+0x399/0x4d0 [ 1160.885602][T21334] _copy_to_user+0x2c/0x130 [ 1160.890161][T21334] bpf_test_finish+0x4a2/0x600 [ 1160.895004][T21334] ? dst_hold+0xb0/0xb0 [ 1160.899205][T21334] ? convert_skb_to___skb+0x420/0x420 [ 1160.904649][T21334] bpf_prog_test_run_skb+0x10e2/0x1890 [ 1160.910179][T21334] ? cpu_online+0xa0/0xa0 [ 1160.914589][T21334] bpf_prog_test_run+0x31e/0x390 [ 1160.919588][T21334] __sys_bpf+0x62b/0x780 [ 1160.923882][T21334] ? bpf_link_show_fdinfo+0x380/0x380 [ 1160.929326][T21334] __x64_sys_bpf+0x78/0x90 [ 1160.933800][T21334] do_syscall_64+0x4c/0xa0 [ 1160.938252][T21334] ? clear_bhb_loop+0x60/0xb0 [ 1160.942978][T21334] ? clear_bhb_loop+0x60/0xb0 [ 1160.947684][T21334] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1160.953608][T21334] RIP: 0033:0x7f159cd9ce59 [ 1160.958053][T21334] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1160.977775][T21334] RSP: 002b:00007f159dd38028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1160.986214][T21334] RAX: ffffffffffffffda RBX: 00007f159d015fa0 RCX: 00007f159cd9ce59 [ 1160.994210][T21334] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 000000000000000a [ 1161.002207][T21334] RBP: 00007f159dd38090 R08: 0000000000000000 R09: 0000000000000000 [ 1161.010205][T21334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1161.018199][T21334] R13: 00007f159d016038 R14: 00007f159d015fa0 R15: 00007fff8007fcc8 [ 1161.026202][T21334] [ 1161.222255][T21345] net_ratelimit: 364 callbacks suppressed [ 1161.222294][T21345] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1161.242888][T21345] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1161.253474][T21345] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1161.310497][T21345] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1161.342115][T21345] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1161.375718][T21345] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1161.404380][T21345] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1161.424391][T21345] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1161.444054][T21345] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1161.464159][T21345] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1162.066556][ T4277] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1162.079200][ T4277] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1162.102375][ T4277] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1162.120218][ T4277] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1162.135365][ T4277] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1162.142824][ T4277] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1162.362483][T21360] netlink: 'syz.1.6014': attribute type 10 has an invalid length. [ 1163.027774][T21370] device syzkaller0 entered promiscuous mode [ 1164.213910][T20727] Bluetooth: hci1: command 0x0409 tx timeout [ 1164.253172][T21355] chnl_net:caif_netlink_parms(): no params data found [ 1164.345375][ T9] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1164.379191][T21382] netlink: 152 bytes leftover after parsing attributes in process `syz.4.6020'. [ 1164.489102][ T9] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1164.636269][T21392] FAULT_INJECTION: forcing a failure. [ 1164.636269][T21392] name failslab, interval 1, probability 0, space 0, times 0 [ 1164.726121][T21392] CPU: 0 PID: 21392 Comm: syz.3.6022 Not tainted syzkaller #0 [ 1164.733677][T21392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1164.743780][T21392] Call Trace: [ 1164.747097][T21392] [ 1164.750075][T21392] dump_stack_lvl+0x188/0x24e [ 1164.754813][T21392] ? show_regs_print_info+0x12/0x12 [ 1164.760057][T21392] ? load_image+0x400/0x400 [ 1164.764615][T21392] ? __might_sleep+0xd0/0xd0 [ 1164.769260][T21392] ? __lock_acquire+0x7d10/0x7d10 [ 1164.774341][T21392] ? is_bpf_text_address+0x28b/0x2a0 [ 1164.779680][T21392] should_fail_ex+0x399/0x4d0 [ 1164.784412][T21392] should_failslab+0x5/0x20 [ 1164.788965][T21392] slab_pre_alloc_hook+0x59/0x310 [ 1164.794038][T21392] ? tcp_sendmsg_fastopen+0x1d5/0x600 [ 1164.799464][T21392] __kmem_cache_alloc_node+0x4f/0x260 [ 1164.804920][T21392] ? tcp_sendmsg_fastopen+0x1d5/0x600 [ 1164.810391][T21392] kmalloc_trace+0x26/0xe0 [ 1164.814876][T21392] tcp_sendmsg_fastopen+0x1d5/0x600 [ 1164.820134][T21392] tcp_sendmsg_locked+0x3616/0x3a90 [ 1164.825376][T21392] ? verify_lock_unused+0x140/0x140 [ 1164.830691][T21392] ? __might_sleep+0xd0/0xd0 [ 1164.835328][T21392] ? mark_lock+0x94/0x320 [ 1164.839708][T21392] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1164.845736][T21392] ? lock_chain_count+0x20/0x20 [ 1164.850641][T21392] ? tcp_sendmsg+0x1d/0x40 [ 1164.855114][T21392] ? tcp_set_state+0x520/0x520 [ 1164.859945][T21392] tcp_sendmsg+0x2b/0x40 [ 1164.864253][T21392] ? inet6_compat_ioctl+0x3c0/0x3c0 [ 1164.869534][T21392] ____sys_sendmsg+0x5be/0x970 [ 1164.874374][T21392] ? __sys_sendmsg_sock+0x30/0x30 [ 1164.879458][T21392] ? __import_iovec+0x315/0x500 [ 1164.884374][T21392] ? import_iovec+0x6f/0xa0 [ 1164.889015][T21392] ___sys_sendmsg+0x2a2/0x360 [ 1164.893769][T21392] ? __sys_sendmsg+0x290/0x290 [ 1164.898608][T21392] ? __lock_acquire+0x7d10/0x7d10 [ 1164.903746][T21392] __se_sys_sendmsg+0x1bb/0x2a0 [ 1164.908650][T21392] ? __x64_sys_sendmsg+0x80/0x80 [ 1164.913656][T21392] ? lockdep_hardirqs_on+0x94/0x140 [ 1164.919010][T21392] do_syscall_64+0x4c/0xa0 [ 1164.923475][T21392] ? clear_bhb_loop+0x60/0xb0 [ 1164.928271][T21392] ? clear_bhb_loop+0x60/0xb0 [ 1164.933037][T21392] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1164.938987][T21392] RIP: 0033:0x7f159cd9ce59 [ 1164.943446][T21392] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1164.963097][T21392] RSP: 002b:00007f159dd38028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1164.971564][T21392] RAX: ffffffffffffffda RBX: 00007f159d015fa0 RCX: 00007f159cd9ce59 [ 1164.979582][T21392] RDX: 0000000024040081 RSI: 0000200000002180 RDI: 0000000000000003 [ 1164.987598][T21392] RBP: 00007f159dd38090 R08: 0000000000000000 R09: 0000000000000000 [ 1164.995620][T21392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1165.003640][T21392] R13: 00007f159d016038 R14: 00007f159d015fa0 R15: 00007fff8007fcc8 [ 1165.011675][T21392] [ 1165.178593][T21399] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.6024'. [ 1165.271754][ T9] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1165.449280][T21355] bridge0: port 1(bridge_slave_0) entered blocking state [ 1165.468639][T21355] bridge0: port 1(bridge_slave_0) entered disabled state [ 1165.486440][T21355] device bridge_slave_0 entered promiscuous mode [ 1165.517989][T21355] bridge0: port 2(bridge_slave_1) entered blocking state [ 1165.541290][T21355] bridge0: port 2(bridge_slave_1) entered disabled state [ 1165.553382][T21355] device bridge_slave_1 entered promiscuous mode [ 1165.568988][T21396] netlink: 'syz.1.6025': attribute type 10 has an invalid length. [ 1165.710263][T21404] netlink: 'syz.3.6027': attribute type 10 has an invalid length. [ 1166.293777][T20727] Bluetooth: hci1: command 0x041b tx timeout [ 1166.932785][ T9] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1167.006621][T21355] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1167.070245][T21420] device syzkaller0 entered promiscuous mode [ 1167.113491][T21355] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1167.213849][T21432] FAULT_INJECTION: forcing a failure. [ 1167.213849][T21432] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1167.234459][T21432] CPU: 0 PID: 21432 Comm: syz.2.6035 Not tainted syzkaller #0 [ 1167.242014][T21432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1167.252119][T21432] Call Trace: [ 1167.255440][T21432] [ 1167.258406][T21432] dump_stack_lvl+0x188/0x24e [ 1167.263174][T21432] ? show_regs_print_info+0x12/0x12 [ 1167.268428][T21432] ? load_image+0x400/0x400 [ 1167.272981][T21432] ? __lock_acquire+0x7d10/0x7d10 [ 1167.278056][T21432] ? lockdep_hardirqs_on+0x94/0x140 [ 1167.283303][T21432] should_fail_ex+0x399/0x4d0 [ 1167.288022][T21432] _copy_from_user+0x2c/0x170 [ 1167.292745][T21432] br_dev_siocdevprivate+0x115/0x17a0 [ 1167.298252][T21432] ? br_handle_local_finish+0x20/0x20 [ 1167.303680][T21432] ? __mutex_lock+0x806/0xaf0 [ 1167.308401][T21432] ? __lock_acquire+0x7d10/0x7d10 [ 1167.313479][T21432] ? do_raw_spin_lock+0x128/0x2f0 [ 1167.318553][T21432] ? __rwlock_init+0x140/0x140 [ 1167.323374][T21432] ? do_raw_spin_unlock+0x11d/0x230 [ 1167.328633][T21432] ? full_name_hash+0x8e/0xe0 [ 1167.333379][T21432] dev_ifsioc+0xa4a/0xd40 [ 1167.337771][T21432] ? dev_ioctl+0xe80/0xe80 [ 1167.342255][T21432] ? full_name_hash+0x8e/0xe0 [ 1167.346981][T21432] ? dev_load+0x1d/0x1e0 [ 1167.351270][T21432] ? dev_load+0x1d/0x1e0 [ 1167.355562][T21432] dev_ioctl+0x5f8/0xe80 [ 1167.359851][T21432] ? get_user_ifreq+0xc7/0x170 [ 1167.364661][T21432] sock_ioctl+0x691/0x710 [ 1167.369041][T21432] ? sock_poll+0x410/0x410 [ 1167.373503][T21432] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1167.378484][T21432] ? security_file_ioctl+0x7c/0xa0 [ 1167.383650][T21432] ? sock_poll+0x410/0x410 [ 1167.388124][T21432] __se_sys_ioctl+0xfa/0x170 [ 1167.392763][T21432] do_syscall_64+0x4c/0xa0 [ 1167.397218][T21432] ? clear_bhb_loop+0x60/0xb0 [ 1167.401946][T21432] ? clear_bhb_loop+0x60/0xb0 [ 1167.406688][T21432] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1167.412646][T21432] RIP: 0033:0x7f03edd9ce59 [ 1167.417109][T21432] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1167.436774][T21432] RSP: 002b:00007f03ebff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1167.445233][T21432] RAX: ffffffffffffffda RBX: 00007f03ee015fa0 RCX: 00007f03edd9ce59 [ 1167.453252][T21432] RDX: 0000200000000080 RSI: 00000000000089f0 RDI: 0000000000000009 [ 1167.461267][T21432] RBP: 00007f03ebff6090 R08: 0000000000000000 R09: 0000000000000000 [ 1167.469273][T21432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1167.477282][T21432] R13: 00007f03ee016038 R14: 00007f03ee015fa0 R15: 00007ffc0eeee8b8 [ 1167.485358][T21432] [ 1167.571064][T21355] team0: Port device team_slave_0 added [ 1167.633756][T21355] team0: Port device team_slave_1 added [ 1167.809596][T21355] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1167.817165][T21355] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1167.896032][T21355] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1167.925020][T21355] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1167.947331][T21355] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1167.989915][T21355] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1168.390967][ T4277] Bluetooth: hci1: command 0x040f tx timeout [ 1168.578180][T21355] device hsr_slave_0 entered promiscuous mode [ 1168.621960][T21355] device hsr_slave_1 entered promiscuous mode [ 1168.641820][T21355] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1168.667431][T21355] Cannot create hsr debugfs directory [ 1168.684935][ T9] tipc: Left network mode [ 1170.070420][T21459] netlink: 'syz.4.6043': attribute type 10 has an invalid length. [ 1170.271648][T21476] netlink: 140 bytes leftover after parsing attributes in process `syz.3.6045'. [ 1170.288848][T21476] netlink: 10 bytes leftover after parsing attributes in process `syz.3.6045'. [ 1170.298635][ T41] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1170.453864][T20727] Bluetooth: hci1: command 0x0419 tx timeout [ 1170.673930][T21476] bond0: (slave bond_slave_0): Releasing backup interface [ 1170.721276][T21476] net_ratelimit: 1932 callbacks suppressed [ 1170.721298][T21476] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 1171.383575][T21503] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1171.426522][T21503] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1171.469953][T21503] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1171.512187][T21503] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1171.581127][T21503] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1171.652574][T21503] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1171.692834][T21503] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1171.758078][T21503] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1171.793337][T21503] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1172.330086][T21514] netlink: 'syz.3.6055': attribute type 10 has an invalid length. [ 1172.452626][ T9] device gretap0 left promiscuous mode [ 1172.471393][ T9] : port 1(gretap0) entered disabled state [ 1173.495410][T21530] netlink: 152 bytes leftover after parsing attributes in process `syz.3.6060'. [ 1173.694792][T21532] netlink: 140 bytes leftover after parsing attributes in process `syz.4.6061'. [ 1173.718847][T21532] netlink: 10 bytes leftover after parsing attributes in process `syz.4.6061'. [ 1173.741951][T21532] bond0: (slave bond_slave_0): Releasing backup interface [ 1175.807248][T21355] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1176.012282][T21355] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1176.037091][T21355] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1176.063386][T21554] netlink: 'syz.3.6069': attribute type 10 has an invalid length. [ 1176.129016][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1176.149812][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1176.170009][T21564] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6073'. [ 1176.312988][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1176.355851][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1176.385473][ T9] device bridge_slave_1 left promiscuous mode [ 1176.407671][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 1176.435222][ T9] device bridge_slave_0 left promiscuous mode [ 1176.458597][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 1176.558406][ T9] device veth1_macvtap left promiscuous mode [ 1176.572809][ T9] device veth0_macvtap left promiscuous mode [ 1176.603268][ T9] device veth1_vlan left promiscuous mode [ 1176.630476][ T9] device veth0_vlan left promiscuous mode [ 1177.195659][T21588] net_ratelimit: 2234 callbacks suppressed [ 1177.195701][T21588] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1177.223304][T21588] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1177.270201][T21588] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1177.314153][T21588] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1177.339825][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.346228][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.397222][T21588] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1177.441301][T21588] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1177.497457][T21588] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1177.517939][T21588] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1177.532926][T21588] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1177.552632][T21588] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1179.944649][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1179.988360][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1180.239258][ T9] bond0 (unregistering): Released all slaves [ 1180.326438][T21355] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1180.351548][T21609] netlink: 'syz.3.6085': attribute type 10 has an invalid length. [ 1180.648962][T21355] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1180.703980][T21621] netlink: 'syz.4.6089': attribute type 16 has an invalid length. [ 1180.712158][T21621] netlink: 156 bytes leftover after parsing attributes in process `syz.4.6089'. [ 1180.808220][T21355] 8021q: adding VLAN 0 to HW filter on device team0 [ 1180.838457][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1180.851933][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1180.879468][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1180.899897][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1180.929119][ T4326] bridge0: port 1(bridge_slave_0) entered blocking state [ 1180.936561][ T4326] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1180.965105][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1180.994343][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1181.025111][ T4326] bridge0: port 2(bridge_slave_1) entered blocking state [ 1181.032342][ T4326] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1181.094426][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1181.122128][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1181.157680][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1181.211983][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1181.236287][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1181.274643][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1181.293124][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1181.308971][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1181.326340][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1181.345550][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1181.382549][T21355] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1181.420132][T21355] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1181.454574][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1181.476268][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1182.294721][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1182.312703][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1182.351579][T21355] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1182.447176][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1182.466445][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1182.542330][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1182.561536][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1182.619431][T21355] device veth0_vlan entered promiscuous mode [ 1182.640769][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1182.652784][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1182.681252][T21657] netlink: 'syz.3.6099': attribute type 10 has an invalid length. [ 1182.772031][T21355] device veth1_vlan entered promiscuous mode [ 1182.915259][T20578] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1182.940388][T20578] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1182.976886][T21355] device veth0_macvtap entered promiscuous mode [ 1183.022099][T21355] device veth1_macvtap entered promiscuous mode [ 1183.109519][T21355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1183.147835][T21355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1183.180081][T21355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1183.212848][T21355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1183.249737][T21355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1183.293722][T21355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1183.323062][T21355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1183.353637][T21355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1183.385747][T21355] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1183.397310][T20369] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1183.432727][T20369] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1183.504579][T20369] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1183.532366][T20369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1183.619945][T21355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1183.683566][T21355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1183.693462][T21355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1183.743044][T21355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1183.767764][T21355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1183.779358][T21355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1183.790100][T21355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1183.806868][T21355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1183.818811][T21355] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1183.838097][T21684] netlink: 15999 bytes leftover after parsing attributes in process `syz.1.6105'. [ 1183.850345][T21685] netlink: 15999 bytes leftover after parsing attributes in process `syz.1.6105'. [ 1183.909008][T20369] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1183.923357][T20369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1183.975427][T21355] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1183.997592][T21355] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1184.026680][T21355] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1184.180010][T21355] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1184.222954][T21689] netlink: 'syz.2.6106': attribute type 16 has an invalid length. [ 1184.290298][T21689] netlink: 156 bytes leftover after parsing attributes in process `syz.2.6106'. [ 1184.558190][T20578] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1184.587040][T20578] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1184.631620][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1184.691153][T20369] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1184.733920][T20369] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1184.743036][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1184.832593][T21707] net_ratelimit: 289 callbacks suppressed [ 1184.832636][T21707] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1184.875910][T21707] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1184.901411][T21707] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1184.945911][T21707] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1184.998864][T21714] netlink: 'syz.4.6113': attribute type 10 has an invalid length. [ 1185.007790][T21707] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1185.056032][T21707] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1185.138588][T21712] netlink: 'syz.0.6009': attribute type 10 has an invalid length. [ 1185.164356][T21707] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1185.186295][T21716] FAULT_INJECTION: forcing a failure. [ 1185.186295][T21716] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1185.244286][T21707] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1185.273906][T21716] CPU: 0 PID: 21716 Comm: syz.1.6114 Not tainted syzkaller #0 [ 1185.281450][T21716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1185.291578][T21716] Call Trace: [ 1185.294897][T21716] [ 1185.297954][T21716] dump_stack_lvl+0x188/0x24e [ 1185.302682][T21716] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1185.308901][T21716] ? show_regs_print_info+0x12/0x12 [ 1185.314149][T21716] ? load_image+0x400/0x400 [ 1185.318731][T21716] should_fail_ex+0x399/0x4d0 [ 1185.323464][T21716] _copy_from_user+0x2c/0x170 [ 1185.328203][T21716] kstrtouint_from_user+0xda/0x170 [ 1185.333372][T21716] ? kstrtol_from_user+0x190/0x190 [ 1185.338575][T21716] proc_fail_nth_write+0x8b/0x200 [ 1185.343628][T21716] ? proc_fail_nth_read+0x220/0x220 [ 1185.348874][T21716] ? proc_fail_nth_read+0x220/0x220 [ 1185.354096][T21716] vfs_write+0x2e6/0xa30 [ 1185.358378][T21716] ? file_end_write+0x250/0x250 [ 1185.363272][T21716] ? __fget_files+0x28/0x4b0 [ 1185.367890][T21716] ? __fget_files+0x28/0x4b0 [ 1185.372514][T21716] ? __fget_files+0x43d/0x4b0 [ 1185.377229][T21716] ? __fdget_pos+0x2ae/0x360 [ 1185.381850][T21716] ? ksys_write+0x71/0x250 [ 1185.386303][T21716] ksys_write+0x14c/0x250 [ 1185.390688][T21716] ? __ia32_sys_read+0x80/0x80 [ 1185.395485][T21716] ? syscall_enter_from_user_mode+0x2a/0x80 [ 1185.401413][T21716] do_syscall_64+0x4c/0xa0 [ 1185.405867][T21716] ? clear_bhb_loop+0x60/0xb0 [ 1185.410571][T21716] ? clear_bhb_loop+0x60/0xb0 [ 1185.415304][T21716] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1185.421223][T21716] RIP: 0033:0x7f1c10f5d68e [ 1185.425656][T21716] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1185.445280][T21716] RSP: 002b:00007f1c11e47fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1185.453718][T21716] RAX: ffffffffffffffda RBX: 00007f1c11e486c0 RCX: 00007f1c10f5d68e [ 1185.461710][T21716] RDX: 0000000000000001 RSI: 00007f1c11e480a0 RDI: 0000000000000005 [ 1185.469700][T21716] RBP: 00007f1c11e48090 R08: 0000000000000000 R09: 0000000000000000 [ 1185.477721][T21716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1185.485739][T21716] R13: 00007f1c11216038 R14: 00007f1c11215fa0 R15: 00007ffe6f2f86b8 [ 1185.493752][T21716] [ 1185.554034][T21707] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1185.609123][T21707] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1186.021598][T21712] team0 (unregistering): Port device team_slave_0 removed [ 1186.373387][ T4277] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1186.395496][ T4277] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1186.404197][ T4277] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1186.413006][ T4277] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1186.421062][ T4277] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1186.429542][ T4277] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1186.704926][T21712] team0 (unregistering): Port device team_slave_1 removed [ 1186.835227][T12621] bond0: (slave syz_tun): Releasing backup interface [ 1187.030660][T20578] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1187.072541][T21740] netlink: 'syz.1.6123': attribute type 16 has an invalid length. [ 1187.223974][T21740] netlink: 156 bytes leftover after parsing attributes in process `syz.1.6123'. [ 1187.310153][T21746] netlink: 'syz.3.6125': attribute type 10 has an invalid length. [ 1187.321032][T21742] netlink: 'syz.4.6121': attribute type 17 has an invalid length. [ 1187.382914][T21742] netlink: 148 bytes leftover after parsing attributes in process `syz.4.6121'. [ 1187.479705][T20578] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1187.566716][T21750] device syzkaller0 entered promiscuous mode [ 1187.645216][T20578] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1187.771543][T20578] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1188.186443][T21771] netlink: 'syz.1.6134': attribute type 10 has an invalid length. [ 1188.453835][T20727] Bluetooth: hci3: command 0x0409 tx timeout [ 1188.461835][T21731] chnl_net:caif_netlink_parms(): no params data found [ 1189.071112][T21731] bridge0: port 1(bridge_slave_0) entered blocking state [ 1189.116708][T21731] bridge0: port 1(bridge_slave_0) entered disabled state [ 1189.178686][T21731] device bridge_slave_0 entered promiscuous mode [ 1189.251790][T21786] netlink: 'syz.0.6137': attribute type 21 has an invalid length. [ 1189.273391][T21731] bridge0: port 2(bridge_slave_1) entered blocking state [ 1189.314401][T21731] bridge0: port 2(bridge_slave_1) entered disabled state [ 1189.332322][T21731] device bridge_slave_1 entered promiscuous mode [ 1189.340666][T21792] syz.3.6139[21792] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1189.358576][T21788] netlink: 'syz.4.6138': attribute type 10 has an invalid length. [ 1189.418424][T20727] Bluetooth: hci0: unexpected event 0x17 length: 15 > 6 [ 1189.566020][T21731] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1189.620423][T21731] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1189.696331][T21731] team0: Port device team_slave_0 added [ 1189.713399][T21731] team0: Port device team_slave_1 added [ 1189.783278][T21731] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1189.812980][T21731] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1189.885266][T21731] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1189.912591][T21731] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1189.928189][T21731] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1189.963665][T21731] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1190.166860][T20578] tipc: Left network mode [ 1190.207005][T21731] device hsr_slave_0 entered promiscuous mode [ 1190.284091][T21731] device hsr_slave_1 entered promiscuous mode [ 1190.320076][T21731] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1190.333019][T21731] Cannot create hsr debugfs directory [ 1190.543711][T20727] Bluetooth: hci3: command 0x041b tx timeout [ 1190.562762][T21811] netdevsim netdevsim0: Direct firmware load for .net/syz1 failed with error -2 [ 1190.573796][T21811] netdevsim netdevsim0: Falling back to sysfs fallback for: .net/syz1 [ 1190.922784][T21815] netlink: 'syz.1.6145': attribute type 10 has an invalid length. [ 1192.318042][T21837] netlink: 'syz.0.6153': attribute type 10 has an invalid length. [ 1192.613760][T20727] Bluetooth: hci3: command 0x040f tx timeout [ 1192.684433][T21849] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1192.709283][T21849] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1192.750346][T21849] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1192.781459][T21849] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1192.812455][T21849] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1192.974011][T21849] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1193.017679][T21849] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1193.039018][T21849] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1193.070876][T21849] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1193.102148][T21849] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1193.708735][T21850] netlink: 'syz.3.6167': attribute type 10 has an invalid length. [ 1194.233301][T20578] device gretap0 left promiscuous mode [ 1194.243991][T20578] : port 1(gretap0) entered disabled state [ 1194.286660][T21868] netlink: 'syz.0.6160': attribute type 10 has an invalid length. [ 1194.706317][T20727] Bluetooth: hci3: command 0x0419 tx timeout [ 1195.728145][T21899] netlink: 'syz.0.6171': attribute type 10 has an invalid length. [ 1196.556591][T21731] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1196.604433][T21921] netlink: 'syz.0.6176': attribute type 10 has an invalid length. [ 1196.612749][T21731] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1196.672377][T21930] FAULT_INJECTION: forcing a failure. [ 1196.672377][T21930] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1196.696857][T20578] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1196.753785][T20578] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1196.793875][T21930] CPU: 0 PID: 21930 Comm: syz.1.6178 Not tainted syzkaller #0 [ 1196.801426][T21930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1196.811533][T21930] Call Trace: [ 1196.814854][T21930] [ 1196.817821][T21930] dump_stack_lvl+0x188/0x24e [ 1196.822548][T21930] ? show_regs_print_info+0x12/0x12 [ 1196.827790][T21930] ? load_image+0x400/0x400 [ 1196.832357][T21930] ? __lock_acquire+0x7d10/0x7d10 [ 1196.837439][T21930] ? 0xffffffffa00009f8 [ 1196.841644][T21930] should_fail_ex+0x399/0x4d0 [ 1196.846367][T21930] ? 0xffffffffa00024e4 [ 1196.850543][T21930] _copy_to_user+0x2c/0x130 [ 1196.855077][T21930] ? 0xffffffffa00024e4 [ 1196.859253][T21930] bpf_obj_get_info_by_fd+0x198a/0x2f50 [ 1196.864838][T21930] ? __lock_acquire+0x7d10/0x7d10 [ 1196.869904][T21930] ? bpf_map_get_fd_by_id+0x310/0x310 [ 1196.875345][T21930] ? get_pid_task+0x1c/0x1e0 [ 1196.879992][T21930] ? __might_fault+0xa6/0x120 [ 1196.884719][T21930] ? __might_fault+0xc2/0x120 [ 1196.889417][T21930] ? __might_fault+0xa6/0x120 [ 1196.894116][T21930] ? bpf_lsm_bpf+0x5/0x10 [ 1196.898468][T21930] ? security_bpf+0x7a/0xa0 [ 1196.903000][T21930] __sys_bpf+0x505/0x780 [ 1196.907275][T21930] ? bpf_link_show_fdinfo+0x380/0x380 [ 1196.912696][T21930] ? lock_chain_count+0x20/0x20 [ 1196.917587][T21930] __x64_sys_bpf+0x78/0x90 [ 1196.922036][T21930] do_syscall_64+0x4c/0xa0 [ 1196.926475][T21930] ? clear_bhb_loop+0x60/0xb0 [ 1196.931190][T21930] ? clear_bhb_loop+0x60/0xb0 [ 1196.935902][T21930] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1196.941825][T21930] RIP: 0033:0x7f1c10f9ce59 [ 1196.946267][T21930] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1196.965904][T21930] RSP: 002b:00007f1c11e48028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1196.974371][T21930] RAX: ffffffffffffffda RBX: 00007f1c11215fa0 RCX: 00007f1c10f9ce59 [ 1196.982370][T21930] RDX: 0000000000000010 RSI: 0000200000000340 RDI: 000000000000000f [ 1196.990366][T21930] RBP: 00007f1c11e48090 R08: 0000000000000000 R09: 0000000000000000 [ 1196.998361][T21930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1197.006361][T21930] R13: 00007f1c11216038 R14: 00007f1c11215fa0 R15: 00007ffe6f2f86b8 [ 1197.014375][T21930] [ 1197.721164][T20578] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1197.730652][T20578] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1197.762400][T20578] bridge0: port 3(bond0) entered disabled state [ 1197.828625][T20578] device bridge_slave_1 left promiscuous mode [ 1197.841169][T20578] bridge0: port 2(bridge_slave_1) entered disabled state [ 1197.879544][T20578] device bridge_slave_0 left promiscuous mode [ 1197.897461][T20578] bridge0: port 1(bridge_slave_0) entered disabled state [ 1197.969286][T20578] device veth1_macvtap left promiscuous mode [ 1197.990238][T20578] device veth0_macvtap left promiscuous mode [ 1198.009387][T20578] device veth1_vlan left promiscuous mode [ 1199.511305][T20578] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1199.521701][T20578] device bond_slave_1 left promiscuous mode [ 1199.562786][T20578] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1199.572057][T20578] device bond_slave_0 left promiscuous mode [ 1199.863012][T20578] bond0 (unregistering): Released all slaves [ 1199.976631][T21731] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1199.999992][T21937] netlink: 'syz.1.6180': attribute type 10 has an invalid length. [ 1200.013974][T21948] netlink: 'syz.4.6183': attribute type 39 has an invalid length. [ 1200.032170][T21951] netlink: 'syz.3.6184': attribute type 10 has an invalid length. [ 1200.041588][T21731] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1200.323454][T21731] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1200.406406][T21967] netlink: 'syz.0.6190': attribute type 10 has an invalid length. [ 1200.426344][T21971] netlink: 'syz.1.6191': attribute type 10 has an invalid length. [ 1200.488383][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1200.497889][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1200.536865][T21731] 8021q: adding VLAN 0 to HW filter on device team0 [ 1200.572464][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1200.608926][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1200.642471][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 1200.649780][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1200.737768][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1200.761820][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1200.827923][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1200.860144][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 1200.867423][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1200.905773][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1200.926347][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1200.965257][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1200.991161][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1201.034085][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1201.043303][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1201.061233][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1201.073147][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1201.090363][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1201.126313][T21731] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1201.203495][T21731] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1201.261070][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1201.284896][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1201.907963][T21997] netlink: 'syz.1.6198': attribute type 10 has an invalid length. [ 1202.709769][ T5470] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1202.733418][ T5470] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1202.767598][T21731] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1202.862513][T22016] FAULT_INJECTION: forcing a failure. [ 1202.862513][T22016] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1202.890838][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1202.908289][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1202.935272][T22016] CPU: 0 PID: 22016 Comm: syz.0.6202 Not tainted syzkaller #0 [ 1202.942843][T22016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1202.952980][T22016] Call Trace: [ 1202.956310][T22016] [ 1202.959310][T22016] dump_stack_lvl+0x188/0x24e [ 1202.964067][T22016] ? show_regs_print_info+0x12/0x12 [ 1202.969342][T22016] ? load_image+0x400/0x400 [ 1202.973938][T22016] ? __might_fault+0xa6/0x120 [ 1202.978697][T22016] should_fail_ex+0x399/0x4d0 [ 1202.983446][T22016] copyin+0x1b/0x120 [ 1202.987443][T22016] _copy_from_iter+0x559/0x1130 [ 1202.992409][T22016] ? copyout_mc+0x110/0x110 [ 1202.996971][T22016] ? __virt_addr_valid+0x188/0x540 [ 1203.002165][T22016] ? __virt_addr_valid+0x188/0x540 [ 1203.007344][T22016] ? __virt_addr_valid+0x465/0x540 [ 1203.012538][T22016] ? __check_object_size+0x500/0xa40 [ 1203.017891][T22016] netlink_sendmsg+0x755/0xbd0 [ 1203.022715][T22016] ? netlink_getsockopt+0x550/0x550 [ 1203.027984][T22016] ? aa_sock_msg_perm+0x94/0x150 [ 1203.032984][T22016] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1203.038303][T22016] ? security_socket_sendmsg+0x7c/0xa0 [ 1203.043800][T22016] ? netlink_getsockopt+0x550/0x550 [ 1203.049038][T22016] ____sys_sendmsg+0x5be/0x970 [ 1203.053864][T22016] ? __sys_sendmsg_sock+0x30/0x30 [ 1203.058921][T22016] ? __import_iovec+0x315/0x500 [ 1203.063855][T22016] ? import_iovec+0x6f/0xa0 [ 1203.068399][T22016] ___sys_sendmsg+0x2a2/0x360 [ 1203.073117][T22016] ? __sys_sendmsg+0x290/0x290 [ 1203.077949][T22016] ? __lock_acquire+0x7d10/0x7d10 [ 1203.083091][T22016] __se_sys_sendmsg+0x1bb/0x2a0 [ 1203.087987][T22016] ? __x64_sys_sendmsg+0x80/0x80 [ 1203.093015][T22016] ? lockdep_hardirqs_on+0x94/0x140 [ 1203.098260][T22016] do_syscall_64+0x4c/0xa0 [ 1203.102746][T22016] ? clear_bhb_loop+0x60/0xb0 [ 1203.107504][T22016] ? clear_bhb_loop+0x60/0xb0 [ 1203.112255][T22016] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1203.118218][T22016] RIP: 0033:0x7fa2fdd9ce59 [ 1203.122703][T22016] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1203.142365][T22016] RSP: 002b:00007fa2fec2a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1203.150833][T22016] RAX: ffffffffffffffda RBX: 00007fa2fe015fa0 RCX: 00007fa2fdd9ce59 [ 1203.158951][T22016] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000009 [ 1203.167028][T22016] RBP: 00007fa2fec2a090 R08: 0000000000000000 R09: 0000000000000000 [ 1203.175090][T22016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1203.183108][T22016] R13: 00007fa2fe016038 R14: 00007fa2fe015fa0 R15: 00007ffd36384b88 [ 1203.191155][T22016] [ 1203.211411][ T5470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1203.259959][ T5470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1203.292040][ T5470] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1203.325556][ T5470] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1203.363131][T21731] device veth0_vlan entered promiscuous mode [ 1203.425782][T21731] device veth1_vlan entered promiscuous mode [ 1203.559618][ T5470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1203.591116][ T5470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1203.636029][T21731] device veth0_macvtap entered promiscuous mode [ 1203.681798][T21731] device veth1_macvtap entered promiscuous mode [ 1203.783647][T21731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1203.807121][T21731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1203.817695][T21731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1203.828363][T21731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1203.838355][T21731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1203.849117][T21731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1203.859109][T21731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1203.884702][T21731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1203.900351][T21731] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1203.931851][T21731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1203.958538][T21731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1203.973387][T21731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1203.986098][T21731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1203.997009][T21731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1204.009921][T21731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1204.051665][T21731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1204.071229][T21731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1204.099591][T21731] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1204.135214][T20578] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1204.152660][T20578] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1204.208370][T20578] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1204.235245][T20578] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1204.258992][T20578] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1204.280521][T20578] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1204.299145][T22029] netlink: 'syz.3.6206': attribute type 10 has an invalid length. [ 1204.334674][T22030] netlink: 'syz.4.6205': attribute type 10 has an invalid length. [ 1204.345016][T21731] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1204.365223][T21731] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1204.383602][T21731] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1204.402596][T21731] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1204.971807][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1204.983562][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1205.033882][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1205.119514][T20369] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1205.138664][T20369] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1205.168322][T20369] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1205.324889][T22047] netlink: 'syz.1.6210': attribute type 10 has an invalid length. [ 1206.730881][ T4277] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1206.740855][ T4277] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1206.753858][ T4277] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1206.799682][ T4277] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1206.815791][ T4277] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1206.823464][ T4277] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1207.288724][T22085] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6219'. [ 1207.543852][T22079] chnl_net:caif_netlink_parms(): no params data found [ 1207.749503][T22094] netlink: 'syz.3.6220': attribute type 10 has an invalid length. [ 1207.789122][T22079] bridge0: port 1(bridge_slave_0) entered blocking state [ 1207.803753][T22079] bridge0: port 1(bridge_slave_0) entered disabled state [ 1207.831646][T22079] device bridge_slave_0 entered promiscuous mode [ 1207.880744][T22079] bridge0: port 2(bridge_slave_1) entered blocking state [ 1207.920416][T22079] bridge0: port 2(bridge_slave_1) entered disabled state [ 1207.953298][T22079] device bridge_slave_1 entered promiscuous mode [ 1208.048961][T22079] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1208.102290][T22079] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1208.348093][ T4324] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1208.476951][T22079] team0: Port device team_slave_0 added [ 1208.574248][T22079] team0: Port device team_slave_1 added [ 1208.763469][ T4324] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1208.853875][ T4277] Bluetooth: hci2: command 0x0409 tx timeout [ 1209.609926][T22079] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1209.639367][T22079] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1209.773855][T22079] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1209.805873][T22131] netlink: 'syz.1.6227': attribute type 10 has an invalid length. [ 1209.963417][ T4324] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1210.014655][T22079] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1210.021787][T22079] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1210.182545][T22079] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1210.933630][ T4277] Bluetooth: hci2: command 0x041b tx timeout [ 1211.073357][ T4324] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1211.216478][T22159] netlink: 'syz.3.6234': attribute type 10 has an invalid length. [ 1211.409160][T22079] device hsr_slave_0 entered promiscuous mode [ 1211.418799][T22153] netlink: 'syz.1.6233': attribute type 7 has an invalid length. [ 1211.439306][T22153] netlink: 'syz.1.6233': attribute type 1 has an invalid length. [ 1211.454066][T22079] device hsr_slave_1 entered promiscuous mode [ 1211.460639][T22153] netlink: 184904 bytes leftover after parsing attributes in process `syz.1.6233'. [ 1211.484326][T22079] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1211.512468][T22079] Cannot create hsr debugfs directory [ 1211.769202][ T4324] device 0 left promiscuous mode [ 1211.961630][T22178] netlink: 126288 bytes leftover after parsing attributes in process `syz.3.6238'. [ 1212.140016][T22177] netlink: 'syz.2.6240': attribute type 10 has an invalid length. [ 1212.272658][T22186] netlink: 'syz.3.6238': attribute type 29 has an invalid length. [ 1212.431763][T22178] can: request_module (can-proto-4) failed. [ 1212.871086][T22177] team0 (unregistering): Port device team_slave_0 removed [ 1212.958576][T22177] team0 (unregistering): Port device team_slave_1 removed [ 1213.010654][ T4324] tipc: Left network mode [ 1213.014030][ T4277] Bluetooth: hci2: command 0x040f tx timeout [ 1213.027365][T22186] netlink: 'syz.3.6238': attribute type 29 has an invalid length. [ 1214.138185][T22220] netlink: 'syz.2.6250': attribute type 29 has an invalid length. [ 1215.094730][ T4277] Bluetooth: hci2: command 0x0419 tx timeout [ 1217.159591][T22187] netlink: 'syz.3.6238': attribute type 29 has an invalid length. [ 1217.327838][T22220] netlink: 'syz.2.6250': attribute type 29 has an invalid length. [ 1217.358689][T22227] netlink: 'syz.2.6250': attribute type 10 has an invalid length. [ 1217.980478][T22227] batman_adv: batadv0: Adding interface: netdevsim0 [ 1218.008048][T22227] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1218.073771][T22227] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 1218.465166][T22250] netlink: 'syz.0.6256': attribute type 10 has an invalid length. [ 1220.568388][T22284] FAULT_INJECTION: forcing a failure. [ 1220.568388][T22284] name failslab, interval 1, probability 0, space 0, times 0 [ 1220.618659][T22284] CPU: 1 PID: 22284 Comm: syz.0.6264 Not tainted syzkaller #0 [ 1220.626213][T22284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1220.636316][T22284] Call Trace: [ 1220.639637][T22284] [ 1220.642603][T22284] dump_stack_lvl+0x188/0x24e [ 1220.647337][T22284] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1220.653543][T22284] ? show_regs_print_info+0x12/0x12 [ 1220.658796][T22284] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1220.665011][T22284] ? dump_stack+0x5/0x12 [ 1220.669310][T22284] should_fail_ex+0x399/0x4d0 [ 1220.674040][T22284] should_failslab+0x5/0x20 [ 1220.678585][T22284] slab_pre_alloc_hook+0x59/0x310 [ 1220.683655][T22284] ? slab_free_freelist_hook+0x131/0x1a0 [ 1220.689343][T22284] ? create_local_trace_uprobe+0x154/0x6e0 [ 1220.695199][T22284] __kmem_cache_alloc_node+0x4f/0x260 [ 1220.700617][T22284] ? kern_path+0x3b/0x50 [ 1220.704908][T22284] ? create_local_trace_uprobe+0x154/0x6e0 [ 1220.710771][T22284] kmalloc_trace+0x26/0xe0 [ 1220.715243][T22284] create_local_trace_uprobe+0x154/0x6e0 [ 1220.720965][T22284] ? bpf_get_uprobe_info+0x520/0x520 [ 1220.726308][T22284] ? _copy_from_user+0x10b/0x170 [ 1220.731314][T22284] perf_uprobe_init+0xef/0x190 [ 1220.736134][T22284] perf_uprobe_event_init+0xe2/0x170 [ 1220.741477][T22284] perf_try_init_event+0x12b/0x3d0 [ 1220.746638][T22284] perf_event_alloc+0xf5c/0x21b0 [ 1220.751703][T22284] ? perf_event_alloc+0xbe2/0x21b0 [ 1220.756867][T22284] ? find_lively_task_by_vpid+0x19/0x290 [ 1220.762555][T22284] __se_sys_perf_event_open+0x6fd/0x1ec0 [ 1220.768247][T22284] ? clockevents_program_event+0x22c/0x310 [ 1220.774178][T22284] ? __sched_clock_gtod_offset+0xe0/0xe0 [ 1220.779867][T22284] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 1220.785555][T22284] ? lockdep_hardirqs_on+0x94/0x140 [ 1220.790797][T22284] ? __x64_sys_perf_event_open+0x1c/0xc0 [ 1220.796474][T22284] do_syscall_64+0x4c/0xa0 [ 1220.800933][T22284] ? clear_bhb_loop+0x60/0xb0 [ 1220.805669][T22284] ? clear_bhb_loop+0x60/0xb0 [ 1220.810404][T22284] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1220.816355][T22284] RIP: 0033:0x7fa2fdd9ce59 [ 1220.820813][T22284] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1220.840468][T22284] RSP: 002b:00007fa2fec09028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1220.848927][T22284] RAX: ffffffffffffffda RBX: 00007fa2fe016090 RCX: 00007fa2fdd9ce59 [ 1220.856940][T22284] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000001080 [ 1220.865046][T22284] RBP: 00007fa2fec09090 R08: 0000000000000000 R09: 0000000000000000 [ 1220.873068][T22284] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 1220.881286][T22284] R13: 00007fa2fe016128 R14: 00007fa2fe016090 R15: 00007ffd36384b88 [ 1220.889348][T22284] [ 1220.997486][T22268] netlink: 'syz.3.6263': attribute type 10 has an invalid length. [ 1221.014702][T22270] netlink: 'syz.2.6262': attribute type 10 has an invalid length. [ 1221.075860][ T4324] device gretap0 left promiscuous mode [ 1221.091820][ T4324] : port 1(gretap0) entered disabled state [ 1221.173919][T22284] trace_uprobe: Failed to allocate trace_uprobe.(-12) [ 1221.220185][T22079] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1221.319576][T22079] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1221.465236][T22079] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1221.781780][T22298] netlink: 'syz.0.6268': attribute type 10 has an invalid length. [ 1221.803115][T22079] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1222.469113][T22079] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1222.541992][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1222.554452][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1222.595230][T22079] 8021q: adding VLAN 0 to HW filter on device team0 [ 1222.614254][T22313] netlink: 'syz.0.6272': attribute type 29 has an invalid length. [ 1222.666709][T22313] netlink: 'syz.0.6272': attribute type 29 has an invalid length. [ 1222.682280][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1222.692640][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1222.748810][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 1222.756110][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1222.815331][T22315] netlink: 'syz.0.6272': attribute type 29 has an invalid length. [ 1222.910358][T22319] netlink: 'syz.0.6272': attribute type 29 has an invalid length. [ 1222.995313][T22313] netlink: 'syz.0.6272': attribute type 29 has an invalid length. [ 1223.004567][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1223.021056][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1223.099066][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1223.146851][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 1223.154156][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1223.225845][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1223.270561][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1223.336330][T22313] netlink: 'syz.0.6272': attribute type 10 has an invalid length. [ 1223.841866][T22313] batman_adv: batadv0: Adding interface: netdevsim0 [ 1223.861816][T22313] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1223.963718][T22313] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 1223.994257][T22325] netlink: 'syz.2.6274': attribute type 10 has an invalid length. [ 1224.013870][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1224.045373][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1224.064655][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1224.101102][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1224.110165][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1224.131416][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1224.195153][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1224.227654][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1224.315867][T22338] netlink: 'syz.0.6276': attribute type 10 has an invalid length. [ 1224.329255][T22336] netlink: 'syz.1.6277': attribute type 10 has an invalid length. [ 1224.357899][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1224.396541][T22079] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1224.957360][T22352] netlink: 'syz.2.6279': attribute type 10 has an invalid length. [ 1226.349319][ T4324] device hsr_slave_0 left promiscuous mode [ 1226.370608][ T4324] device hsr_slave_1 left promiscuous mode [ 1226.387501][ T4324] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1226.418904][ T4324] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1226.461523][ T4324] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1226.493221][ T4324] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1226.589861][ T4324] device bridge_slave_1 left promiscuous mode [ 1226.708922][ T4324] bridge0: port 2(bridge_slave_1) entered disabled state [ 1226.741670][ T4324] device bridge_slave_0 left promiscuous mode [ 1226.754159][ T4324] bridge0: port 1(bridge_slave_0) entered disabled state [ 1227.166617][ T4324] device veth1_macvtap left promiscuous mode [ 1227.172736][ T4324] device veth0_macvtap left promiscuous mode [ 1227.200045][ T4324] device veth1_vlan left promiscuous mode [ 1227.220331][ T4324] device veth0_vlan left promiscuous mode [ 1228.242967][ T4324] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1228.574793][ T4324] bond0 (unregistering): Released all slaves [ 1228.657281][T22378] validate_nla: 5 callbacks suppressed [ 1228.657307][T22378] netlink: 'syz.3.6287': attribute type 10 has an invalid length. [ 1228.680181][T22378] batman_adv: batadv0: Adding interface: netdevsim0 [ 1228.695422][T22378] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1228.721510][T22378] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 1228.732754][T22391] netlink: 'syz.1.6290': attribute type 10 has an invalid length. [ 1228.754210][T22396] netlink: 'syz.0.6291': attribute type 10 has an invalid length. [ 1228.768098][T22396] netlink: 'syz.0.6291': attribute type 4 has an invalid length. [ 1228.781573][T22396] netlink: 116 bytes leftover after parsing attributes in process `syz.0.6291'. [ 1230.531522][T22421] netlink: 212168 bytes leftover after parsing attributes in process `syz.3.6301'. [ 1232.810065][T22409] netlink: 'syz.0.6297': attribute type 10 has an invalid length. [ 1232.825374][T22417] netlink: 'syz.2.6300': attribute type 10 has an invalid length. [ 1232.854886][T22421] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1232.872061][ T5470] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1232.880213][T22421] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1232.890388][T22421] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1232.890606][ T5470] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1232.973908][T22079] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1233.178523][T22435] netlink: 'syz.0.6304': attribute type 10 has an invalid length. [ 1234.911029][T22457] netlink: 'syz.1.6313': attribute type 10 has an invalid length. [ 1235.308265][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1235.328673][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1235.392819][T20578] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1235.406260][T20578] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1235.425670][T22079] device veth0_vlan entered promiscuous mode [ 1235.449758][T20578] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1235.463111][T20578] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1235.489378][T22079] device veth1_vlan entered promiscuous mode [ 1235.560828][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1235.576406][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1235.596818][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1235.612952][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1235.634880][T22079] device veth0_macvtap entered promiscuous mode [ 1235.660802][T22079] device veth1_macvtap entered promiscuous mode [ 1235.699431][T22079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1235.719392][T22079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1235.732839][T22079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1235.752834][T20727] Bluetooth: hci0: command 0x0406 tx timeout [ 1235.759287][T22079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1235.779385][T22079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1235.799703][T22079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1235.811590][T22079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1235.843693][T22079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1235.856038][T22079] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1235.864538][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1235.877183][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1235.886895][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1235.897053][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1235.909981][T22079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1235.921490][T22079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1235.943620][T22079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1235.962699][T22079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1235.980906][T22079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1236.002173][T22079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1236.021319][T22079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1236.032396][T22079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1236.056681][T22079] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1236.071493][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1236.082048][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1236.102809][T22079] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1236.122468][T22079] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1236.140733][T22079] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1236.152490][T22079] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1237.043682][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1237.051594][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1237.077023][T20369] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1237.183420][T22467] netlink: 'syz.1.6314': attribute type 10 has an invalid length. [ 1237.202385][ T4324] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1237.238351][T22472] netlink: 'syz.0.6317': attribute type 10 has an invalid length. [ 1237.238382][ T4324] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1237.359296][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1237.965729][T22484] delete_channel: no stack [ 1238.170275][T22489] netlink: 'syz.4.6323': attribute type 10 has an invalid length. [ 1238.778510][ T4277] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1238.788308][ T4281] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1238.796756][ T4277] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1238.805640][ T4277] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1238.814085][ T4277] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1238.822827][ T4277] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1238.863761][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.870534][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.423612][T22489] team0 (unregistering): Port device team_slave_0 removed [ 1239.502846][T22489] team0 (unregistering): Port device team_slave_1 removed [ 1240.853996][T20727] Bluetooth: hci4: command 0x0409 tx timeout [ 1242.580708][ T9] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1242.708216][ T9] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1242.788657][T22509] netlink: 'syz.4.6328': attribute type 10 has an invalid length. [ 1242.868195][ T9] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1242.947493][T20727] Bluetooth: hci4: command 0x041b tx timeout [ 1243.086352][ T9] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1243.196116][T22497] chnl_net:caif_netlink_parms(): no params data found [ 1243.283399][T22518] netlink: 'syz.3.6331': attribute type 10 has an invalid length. [ 1243.733919][T22497] bridge0: port 1(bridge_slave_0) entered blocking state [ 1243.741103][T22497] bridge0: port 1(bridge_slave_0) entered disabled state [ 1243.758733][T22531] delete_channel: no stack [ 1243.779961][T22497] device bridge_slave_0 entered promiscuous mode [ 1243.794273][T22497] bridge0: port 2(bridge_slave_1) entered blocking state [ 1243.801492][T22497] bridge0: port 2(bridge_slave_1) entered disabled state [ 1243.810704][T22497] device bridge_slave_1 entered promiscuous mode [ 1244.385840][T22497] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1244.426350][T22497] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1244.453877][ T9] tipc: Left network mode [ 1244.537777][T22497] team0: Port device team_slave_0 added [ 1244.683252][T22546] netlink: 14 bytes leftover after parsing attributes in process `syz.0.6339'. [ 1244.714957][T22546] net_ratelimit: 752 callbacks suppressed [ 1244.714997][T22546] openvswitch: netlink: Message has 6 unknown bytes. [ 1245.031904][T20727] Bluetooth: hci4: command 0x040f tx timeout [ 1245.604421][T22497] team0: Port device team_slave_1 added [ 1245.633896][T22542] netlink: 'syz.4.6337': attribute type 10 has an invalid length. [ 1245.641891][T22557] netlink: 'syz.0.6342': attribute type 10 has an invalid length. [ 1245.760451][T22497] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1245.809969][T22497] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1245.917734][T22497] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1246.004168][T22497] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1246.011202][T22497] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1246.097801][T22497] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1246.837473][T22584] netlink: 154020 bytes leftover after parsing attributes in process `syz.0.6351'. [ 1246.866628][T22584] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 1247.094491][T20727] Bluetooth: hci4: command 0x0419 tx timeout [ 1249.237796][T22497] device hsr_slave_0 entered promiscuous mode [ 1249.251193][T22497] device hsr_slave_1 entered promiscuous mode [ 1249.262162][T22497] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1249.277309][T22497] Cannot create hsr debugfs directory [ 1249.414054][T22589] netlink: 14 bytes leftover after parsing attributes in process `syz.3.6352'. [ 1249.431058][T22589] openvswitch: netlink: Message has 6 unknown bytes. [ 1249.709372][T22599] netlink: 'syz.2.6354': attribute type 10 has an invalid length. [ 1250.624476][ T9] device hsr_slave_0 left promiscuous mode [ 1250.635631][ T9] device hsr_slave_1 left promiscuous mode [ 1250.653179][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1250.685692][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1250.710460][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1250.763584][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1253.546847][ T9] bridge0: port 3(dummy0) entered disabled state [ 1253.578710][ T9] device bridge_slave_1 left promiscuous mode [ 1253.589581][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 1253.607831][ T9] device bridge_slave_0 left promiscuous mode [ 1253.614197][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 1253.647212][ T9] device veth1_macvtap left promiscuous mode [ 1253.653319][ T9] device veth0_macvtap left promiscuous mode [ 1253.661540][ T9] device veth1_vlan left promiscuous mode [ 1253.667705][ T9] device veth0_vlan left promiscuous mode [ 1254.270719][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1254.321753][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1254.760849][ T9] bond0 (unregistering): Released all slaves [ 1255.227734][T22497] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1255.294546][T22497] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1255.357267][T22497] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1255.411454][T22497] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1255.646873][T22646] netlink: 'syz.3.6367': attribute type 10 has an invalid length. [ 1255.849046][T22497] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1255.898330][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1255.914191][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1255.957364][T22497] 8021q: adding VLAN 0 to HW filter on device team0 [ 1256.007066][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1256.024745][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1256.073032][ T4324] bridge0: port 1(bridge_slave_0) entered blocking state [ 1256.080444][ T4324] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1256.174458][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1256.237759][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1256.279420][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1256.325629][ T4324] bridge0: port 2(bridge_slave_1) entered blocking state [ 1256.332885][ T4324] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1256.388435][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1256.418951][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1256.486717][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1256.509192][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1256.585446][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1256.614884][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1256.642119][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1256.695385][T22497] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1256.739175][T22497] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1256.812514][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1256.846850][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1256.886767][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1256.914517][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1256.962138][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1257.605731][T22703] netlink: 'syz.2.6381': attribute type 10 has an invalid length. [ 1257.989761][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1258.004601][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1258.030568][T22497] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1258.167488][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1258.199941][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1258.270709][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1258.297739][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1258.329542][T22497] device veth0_vlan entered promiscuous mode [ 1258.350396][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1258.359411][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1258.409617][T22497] device veth1_vlan entered promiscuous mode [ 1258.501678][ T5470] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1258.524329][ T5470] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1258.563317][ T5470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1258.654813][ T5470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1258.771745][T22497] device veth0_macvtap entered promiscuous mode [ 1258.792876][T22497] device veth1_macvtap entered promiscuous mode [ 1258.903324][T22497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1258.988093][T22497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1259.122665][T22497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1259.143859][T22497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1259.155640][T22497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1259.166552][T22497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1259.456138][T22497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1259.538701][T22497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1259.637356][T22497] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1259.649049][ T5470] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1259.688347][ T5470] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1259.766062][ T5470] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1259.815966][ T5470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1259.837227][T22497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1259.856543][T22497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1259.871295][T22497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1259.889479][T22497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1259.901556][T22497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1259.922081][T22497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1259.932951][T22497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1259.951449][T22497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1259.963362][T22497] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1259.981807][ T5470] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1260.009345][ T5470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1260.043384][T22497] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1260.070323][T22497] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1260.082179][T22497] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1260.109910][T22497] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1261.666854][T20369] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1261.703624][T20369] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1261.712211][T20369] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1261.785738][ T5470] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1261.803423][ T5470] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1261.813165][T20369] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1262.036073][T22767] netlink: 'syz.2.6396': attribute type 10 has an invalid length. [ 1264.917646][T22805] netlink: 'syz.0.6410': attribute type 10 has an invalid length. [ 1265.271852][T22821] FAULT_INJECTION: forcing a failure. [ 1265.271852][T22821] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1265.341997][T22821] CPU: 1 PID: 22821 Comm: syz.2.6416 Not tainted syzkaller #0 [ 1265.349642][T22821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1265.359743][T22821] Call Trace: [ 1265.363069][T22821] [ 1265.366037][T22821] dump_stack_lvl+0x188/0x24e [ 1265.370768][T22821] ? show_regs_print_info+0x12/0x12 [ 1265.376008][T22821] ? load_image+0x400/0x400 [ 1265.380563][T22821] ? __lock_acquire+0x7d10/0x7d10 [ 1265.385665][T22821] ? lockdep_hardirqs_on+0x94/0x140 [ 1265.390925][T22821] should_fail_ex+0x399/0x4d0 [ 1265.395660][T22821] _copy_from_user+0x2c/0x170 [ 1265.400401][T22821] kstrtouint_from_user+0xda/0x170 [ 1265.405577][T22821] ? kstrtol_from_user+0x190/0x190 [ 1265.410763][T22821] proc_fail_nth_write+0x8b/0x200 [ 1265.415840][T22821] ? proc_fail_nth_read+0x220/0x220 [ 1265.421088][T22821] ? common_file_perm+0x171/0x1c0 [ 1265.426162][T22821] ? proc_fail_nth_read+0x220/0x220 [ 1265.431411][T22821] vfs_write+0x2e6/0xa30 [ 1265.435720][T22821] ? file_end_write+0x250/0x250 [ 1265.440642][T22821] ? __fget_files+0x28/0x4b0 [ 1265.445321][T22821] ? __fget_files+0x28/0x4b0 [ 1265.449971][T22821] ? __fget_files+0x43d/0x4b0 [ 1265.454727][T22821] ? __fdget_pos+0x2ae/0x360 [ 1265.459374][T22821] ? ksys_write+0x71/0x250 [ 1265.463885][T22821] ksys_write+0x14c/0x250 [ 1265.468276][T22821] ? __ia32_sys_read+0x80/0x80 [ 1265.473099][T22821] ? syscall_enter_from_user_mode+0x2a/0x80 [ 1265.479051][T22821] do_syscall_64+0x4c/0xa0 [ 1265.483518][T22821] ? clear_bhb_loop+0x60/0xb0 [ 1265.488253][T22821] ? clear_bhb_loop+0x60/0xb0 [ 1265.492991][T22821] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1265.498943][T22821] RIP: 0033:0x7f5f24b5d68e [ 1265.503407][T22821] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1265.523071][T22821] RSP: 002b:00007f5f25a1afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1265.531539][T22821] RAX: ffffffffffffffda RBX: 00007f5f25a1b6c0 RCX: 00007f5f24b5d68e [ 1265.539553][T22821] RDX: 0000000000000001 RSI: 00007f5f25a1b0a0 RDI: 0000000000000008 [ 1265.547569][T22821] RBP: 00007f5f25a1b090 R08: 0000000000000000 R09: 0000000000000000 [ 1265.547704][T22825] FAULT_INJECTION: forcing a failure. [ 1265.547704][T22825] name failslab, interval 1, probability 0, space 0, times 0 [ 1265.555582][T22821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1265.555625][T22821] R13: 00007f5f24e16038 R14: 00007f5f24e15fa0 R15: 00007ffc495e0b38 [ 1265.555689][T22821] [ 1265.636502][T22825] CPU: 1 PID: 22825 Comm: syz.4.6418 Not tainted syzkaller #0 [ 1265.644046][T22825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1265.654233][T22825] Call Trace: [ 1265.657568][T22825] [ 1265.660532][T22825] dump_stack_lvl+0x188/0x24e [ 1265.665261][T22825] ? show_regs_print_info+0x12/0x12 [ 1265.670504][T22825] ? load_image+0x400/0x400 [ 1265.675111][T22825] ? __might_sleep+0xd0/0xd0 [ 1265.679764][T22825] ? __lock_acquire+0x7d10/0x7d10 [ 1265.684856][T22825] should_fail_ex+0x399/0x4d0 [ 1265.689596][T22825] should_failslab+0x5/0x20 [ 1265.694159][T22825] slab_pre_alloc_hook+0x59/0x310 [ 1265.699248][T22825] kmem_cache_alloc_node+0x5a/0x320 [ 1265.704480][T22825] ? __alloc_skb+0xfc/0x7e0 [ 1265.709144][T22825] __alloc_skb+0xfc/0x7e0 [ 1265.713513][T22825] ? netlink_autobind+0xda/0x300 [ 1265.718513][T22825] netlink_sendmsg+0x654/0xbd0 [ 1265.723351][T22825] ? netlink_getsockopt+0x550/0x550 [ 1265.728620][T22825] ? aa_sock_msg_perm+0x94/0x150 [ 1265.733628][T22825] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1265.738966][T22825] ? security_socket_sendmsg+0x7c/0xa0 [ 1265.744496][T22825] ? netlink_getsockopt+0x550/0x550 [ 1265.749746][T22825] ____sys_sendmsg+0x5be/0x970 [ 1265.754571][T22825] ? __sys_sendmsg_sock+0x30/0x30 [ 1265.759644][T22825] ? __import_iovec+0x315/0x500 [ 1265.764553][T22825] ? import_iovec+0x6f/0xa0 [ 1265.769116][T22825] ___sys_sendmsg+0x2a2/0x360 [ 1265.773844][T22825] ? __sys_sendmsg+0x290/0x290 [ 1265.778665][T22825] ? __lock_acquire+0x7d10/0x7d10 [ 1265.783753][T22825] __se_sys_sendmsg+0x1bb/0x2a0 [ 1265.788637][T22825] ? __x64_sys_sendmsg+0x80/0x80 [ 1265.793620][T22825] ? lockdep_hardirqs_on+0x94/0x140 [ 1265.798862][T22825] do_syscall_64+0x4c/0xa0 [ 1265.803302][T22825] ? clear_bhb_loop+0x60/0xb0 [ 1265.808016][T22825] ? clear_bhb_loop+0x60/0xb0 [ 1265.812733][T22825] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1265.818666][T22825] RIP: 0033:0x7fb725f9ce59 [ 1265.823114][T22825] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1265.842863][T22825] RSP: 002b:00007fb7241f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1265.851309][T22825] RAX: ffffffffffffffda RBX: 00007fb726215fa0 RCX: 00007fb725f9ce59 [ 1265.859307][T22825] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1265.867301][T22825] RBP: 00007fb7241f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1265.875293][T22825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1265.883288][T22825] R13: 00007fb726216038 R14: 00007fb726215fa0 R15: 00007ffc34a84728 [ 1265.891292][T22825] [ 1265.931669][T22828] FAULT_INJECTION: forcing a failure. [ 1265.931669][T22828] name failslab, interval 1, probability 0, space 0, times 0 [ 1265.945176][T22828] CPU: 0 PID: 22828 Comm: syz.3.6419 Not tainted syzkaller #0 [ 1265.952699][T22828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1265.962802][T22828] Call Trace: [ 1265.966118][T22828] [ 1265.969089][T22828] dump_stack_lvl+0x188/0x24e [ 1265.973820][T22828] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1265.980030][T22828] ? show_regs_print_info+0x12/0x12 [ 1265.985363][T22828] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1265.992029][T22828] should_fail_ex+0x399/0x4d0 [ 1265.996842][T22828] should_failslab+0x5/0x20 [ 1266.001391][T22828] slab_pre_alloc_hook+0x59/0x310 [ 1266.006461][T22828] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1266.012678][T22828] ? sctp_auth_asoc_copy_shkeys+0x148/0x5a0 [ 1266.018620][T22828] __kmem_cache_alloc_node+0x4f/0x260 [ 1266.024052][T22828] ? sctp_auth_asoc_copy_shkeys+0x148/0x5a0 [ 1266.029992][T22828] kmalloc_trace+0x26/0xe0 [ 1266.034466][T22828] sctp_auth_asoc_copy_shkeys+0x148/0x5a0 [ 1266.040243][T22828] sctp_association_new+0x15e5/0x25d0 [ 1266.045688][T22828] sctp_connect_new_asoc+0x2da/0x6a0 [ 1266.051028][T22828] ? __sctp_connect+0xd80/0xd80 [ 1266.055925][T22828] ? _local_bh_enable+0xa0/0xa0 [ 1266.060820][T22828] ? sctp_endpoint_lookup_assoc+0x77/0x260 [ 1266.066677][T22828] ? sctp_endpoint_lookup_assoc+0x77/0x260 [ 1266.072529][T22828] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 1266.078138][T22828] ? security_sctp_bind_connect+0x85/0xb0 [ 1266.083914][T22828] sctp_sendmsg+0x165d/0x2a40 [ 1266.088658][T22828] ? sctp_getsockopt+0x8a0/0x8a0 [ 1266.093643][T22828] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1266.099883][T22828] ? aa_af_perm+0x340/0x340 [ 1266.104525][T22828] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 1266.111016][T22828] ? inet_sendmsg+0x78/0x2f0 [ 1266.115652][T22828] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1266.121002][T22828] ? security_socket_sendmsg+0x7c/0xa0 [ 1266.126506][T22828] ? inet_send_prepare+0x260/0x260 [ 1266.131666][T22828] ____sys_sendmsg+0x5be/0x970 [ 1266.136499][T22828] ? __sys_sendmsg_sock+0x30/0x30 [ 1266.141577][T22828] ? __import_iovec+0x315/0x500 [ 1266.146487][T22828] ? import_iovec+0x6f/0xa0 [ 1266.151046][T22828] ___sys_sendmsg+0x2a2/0x360 [ 1266.155776][T22828] ? __sys_sendmsg+0x290/0x290 [ 1266.160617][T22828] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 1266.166424][T22828] __se_sys_sendmsg+0x1bb/0x2a0 [ 1266.171324][T22828] ? __x64_sys_sendmsg+0x80/0x80 [ 1266.176449][T22828] ? syscall_enter_from_user_mode+0x2a/0x80 [ 1266.182399][T22828] do_syscall_64+0x4c/0xa0 [ 1266.186868][T22828] ? clear_bhb_loop+0x60/0xb0 [ 1266.191606][T22828] ? clear_bhb_loop+0x60/0xb0 [ 1266.196336][T22828] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1266.202282][T22828] RIP: 0033:0x7f159cd9ce59 [ 1266.206744][T22828] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1266.226424][T22828] RSP: 002b:00007f159dd38028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1266.234887][T22828] RAX: ffffffffffffffda RBX: 00007f159d015fa0 RCX: 00007f159cd9ce59 [ 1266.242913][T22828] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000005 [ 1266.250928][T22828] RBP: 00007f159dd38090 R08: 0000000000000000 R09: 0000000000000000 [ 1266.258948][T22828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1266.266963][T22828] R13: 00007f159d016038 R14: 00007f159d015fa0 R15: 00007fff8007fcc8 [ 1266.275012][T22828] [ 1266.676188][T22832] netlink: 'syz.0.6421': attribute type 10 has an invalid length. [ 1267.086095][T22844] netlink: 'syz.4.6427': attribute type 10 has an invalid length. [ 1267.123860][T22850] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6430'. [ 1267.701944][T22863] device syzkaller0 entered promiscuous mode [ 1268.366468][T22892] netlink: 'syz.2.6441': attribute type 2 has an invalid length. [ 1268.383772][T22892] netlink: 170140 bytes leftover after parsing attributes in process `syz.2.6441'. [ 1270.398485][T22890] netlink: 'syz.1.6440': attribute type 10 has an invalid length. [ 1270.476705][T22890] team0 (unregistering): Port device team_slave_0 removed [ 1270.499803][T22890] team0 (unregistering): Port device team_slave_1 removed [ 1270.539669][T22894] netlink: 'syz.3.6442': attribute type 10 has an invalid length. [ 1270.558167][T22897] netlink: 'syz.4.6443': attribute type 10 has an invalid length. [ 1270.868643][T22909] netlink: 'syz.2.6446': attribute type 3 has an invalid length. [ 1270.881924][T22909] netlink: 'syz.2.6446': attribute type 1 has an invalid length. [ 1270.933882][T22909] netlink: 120 bytes leftover after parsing attributes in process `syz.2.6446'. [ 1271.509996][T22930] netlink: 830 bytes leftover after parsing attributes in process `syz.0.6455'. [ 1271.920401][T22937] netlink: 'syz.4.6458': attribute type 10 has an invalid length. [ 1272.250868][T22940] netlink: 'syz.0.6459': attribute type 10 has an invalid length. [ 1272.316057][T22948] netlink: 'syz.1.6461': attribute type 10 has an invalid length. [ 1272.825251][T22952] netlink: 'syz.3.6463': attribute type 10 has an invalid length. [ 1272.867242][T22952] bridge0: port 2(bridge_slave_1) entered disabled state [ 1272.877723][T22952] bridge0: port 1(bridge_slave_0) entered disabled state [ 1276.122961][T22979] netlink: 'syz.1.6468': attribute type 11 has an invalid length. [ 1276.180308][T22982] netlink: 'syz.4.6472': attribute type 10 has an invalid length. [ 1277.949005][T23024] netlink: 'syz.4.6485': attribute type 10 has an invalid length. [ 1278.310489][T23033] netlink: 'syz.3.6488': attribute type 11 has an invalid length. [ 1280.812956][T23059] FAULT_INJECTION: forcing a failure. [ 1280.812956][T23059] name failslab, interval 1, probability 0, space 0, times 0 [ 1280.871203][T23059] CPU: 1 PID: 23059 Comm: syz.4.6499 Not tainted syzkaller #0 [ 1280.878761][T23059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1280.888872][T23059] Call Trace: [ 1280.892203][T23059] [ 1280.895176][T23059] dump_stack_lvl+0x188/0x24e [ 1280.899906][T23059] ? show_regs_print_info+0x12/0x12 [ 1280.905161][T23059] ? load_image+0x400/0x400 [ 1280.909728][T23059] ? __might_sleep+0xd0/0xd0 [ 1280.914367][T23059] ? __lock_acquire+0x7d10/0x7d10 [ 1280.919448][T23059] ? aa_file_perm+0x3ea/0xf00 [ 1280.924170][T23059] should_fail_ex+0x399/0x4d0 [ 1280.928921][T23059] should_failslab+0x5/0x20 [ 1280.933468][T23059] slab_pre_alloc_hook+0x59/0x310 [ 1280.938556][T23059] ? kernfs_fop_write_iter+0x155/0x520 [ 1280.944086][T23059] __kmem_cache_alloc_node+0x4f/0x260 [ 1280.949521][T23059] ? kernfs_fop_write_iter+0x155/0x520 [ 1280.955037][T23059] __kmalloc+0xa0/0x240 [ 1280.959245][T23059] kernfs_fop_write_iter+0x155/0x520 [ 1280.964591][T23059] vfs_write+0x4b1/0xa30 [ 1280.968903][T23059] ? file_end_write+0x250/0x250 [ 1280.973819][T23059] ? __fget_files+0x43d/0x4b0 [ 1280.978592][T23059] ? __fdget_pos+0x2ae/0x360 [ 1280.983240][T23059] ? ksys_write+0x71/0x250 [ 1280.987718][T23059] ksys_write+0x14c/0x250 [ 1280.992126][T23059] ? __ia32_sys_read+0x80/0x80 [ 1280.996957][T23059] ? lockdep_hardirqs_on+0x94/0x140 [ 1281.002215][T23059] do_syscall_64+0x4c/0xa0 [ 1281.006679][T23059] ? clear_bhb_loop+0x60/0xb0 [ 1281.011415][T23059] ? clear_bhb_loop+0x60/0xb0 [ 1281.016155][T23059] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1281.022122][T23059] RIP: 0033:0x7fb725f9ce59 [ 1281.026608][T23059] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1281.046337][T23059] RSP: 002b:00007fb7241f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1281.054809][T23059] RAX: ffffffffffffffda RBX: 00007fb726215fa0 RCX: 00007fb725f9ce59 [ 1281.062855][T23059] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000004 [ 1281.070888][T23059] RBP: 00007fb7241f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1281.078922][T23059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1281.086942][T23059] R13: 00007fb726216038 R14: 00007fb726215fa0 R15: 00007ffc34a84728 [ 1281.094984][T23059] [ 1281.180170][T23062] netlink: 'syz.3.6502': attribute type 10 has an invalid length. [ 1281.297468][T23065] netlink: 'syz.2.6501': attribute type 10 has an invalid length. [ 1281.437500][T23069] netlink: 'syz.0.6504': attribute type 10 has an invalid length. [ 1284.254690][T23069] bridge0: port 2(bridge_slave_1) entered disabled state [ 1284.262127][T23069] bridge0: port 1(bridge_slave_0) entered disabled state [ 1284.324099][T23080] netlink: 'syz.4.6505': attribute type 11 has an invalid length. [ 1284.561672][T23088] netlink: 830 bytes leftover after parsing attributes in process `syz.3.6506'. [ 1285.537140][T23112] netlink: 'syz.3.6516': attribute type 10 has an invalid length. [ 1286.854532][T23107] FAULT_INJECTION: forcing a failure. [ 1286.854532][T23107] name failslab, interval 1, probability 0, space 0, times 0 [ 1286.877674][T23107] CPU: 1 PID: 23107 Comm: syz.1.6515 Not tainted syzkaller #0 [ 1286.885317][T23107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1286.895433][T23107] Call Trace: [ 1286.898771][T23107] [ 1286.901828][T23107] dump_stack_lvl+0x188/0x24e [ 1286.906565][T23107] ? show_regs_print_info+0x12/0x12 [ 1286.911819][T23107] ? load_image+0x400/0x400 [ 1286.916388][T23107] ? __might_sleep+0xd0/0xd0 [ 1286.921025][T23107] ? __lock_acquire+0x7d10/0x7d10 [ 1286.926129][T23107] should_fail_ex+0x399/0x4d0 [ 1286.930871][T23107] should_failslab+0x5/0x20 [ 1286.934942][ T4277] Bluetooth: hci1: command 0x0406 tx timeout [ 1286.935415][T23107] slab_pre_alloc_hook+0x59/0x310 [ 1286.946515][T23107] ? __lock_acquire+0x7d10/0x7d10 [ 1286.951605][T23107] ? kvmalloc_node+0x6c/0x180 [ 1286.956349][T23107] __kmem_cache_alloc_node+0x4f/0x260 [ 1286.961780][T23107] ? schedule_delayed_monitor_work+0x160/0x160 [ 1286.968000][T23107] ? kvmalloc_node+0x6c/0x180 [ 1286.972750][T23107] __kmalloc_node+0xa0/0x240 [ 1286.977407][T23107] kvmalloc_node+0x6c/0x180 [ 1286.981986][T23107] bpf_test_run_xdp_live+0x1dd/0x1a90 [ 1286.987419][T23107] ? 0xffffffffa00041c0 [ 1286.991621][T23107] ? text_poke_copy+0x79/0x90 [ 1286.996364][T23107] ? 0xffffffffa00041c0 [ 1287.000562][T23107] ? 0xffffffffa00041c0 [ 1287.004778][T23107] ? bpf_dispatcher_change_prog+0xcbb/0xf10 [ 1287.010730][T23107] ? 0xffffffffa00041c0 [ 1287.014945][T23107] ? xdp_convert_md_to_buff+0x330/0x330 [ 1287.020592][T23107] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 1287.026913][T23107] ? bpf_prog_test_run_xdp+0x6ac/0xf10 [ 1287.032448][T23107] bpf_prog_test_run_xdp+0x736/0xf10 [ 1287.037820][T23107] ? dev_put+0x80/0x80 [ 1287.041973][T23107] ? dev_put+0x80/0x80 [ 1287.046118][T23107] bpf_prog_test_run+0x31e/0x390 [ 1287.051128][T23107] __sys_bpf+0x62b/0x780 [ 1287.055443][T23107] ? bpf_link_show_fdinfo+0x380/0x380 [ 1287.060902][T23107] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1287.067138][T23107] __x64_sys_bpf+0x78/0x90 [ 1287.071672][T23107] do_syscall_64+0x4c/0xa0 [ 1287.076149][T23107] ? clear_bhb_loop+0x60/0xb0 [ 1287.080893][T23107] ? clear_bhb_loop+0x60/0xb0 [ 1287.085642][T23107] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1287.091616][T23107] RIP: 0033:0x7f058979ce59 [ 1287.096085][T23107] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1287.115751][T23107] RSP: 002b:00007f058a6e1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1287.124229][T23107] RAX: ffffffffffffffda RBX: 00007f0589a15fa0 RCX: 00007f058979ce59 [ 1287.132283][T23107] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 1287.140312][T23107] RBP: 00007f058a6e1090 R08: 0000000000000000 R09: 0000000000000000 [ 1287.148341][T23107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1287.156375][T23107] R13: 00007f0589a16038 R14: 00007f0589a15fa0 R15: 00007fffee9ee448 [ 1287.164419][T23107] [ 1287.916540][T23122] netlink: 'syz.2.6520': attribute type 10 has an invalid length. [ 1287.938203][T23122] bridge0: port 2(bridge_slave_1) entered disabled state [ 1287.948177][T23122] bridge0: port 1(bridge_slave_0) entered disabled state [ 1288.080300][T23124] netlink: 'syz.4.6519': attribute type 10 has an invalid length. [ 1288.607586][T23152] netlink: 'syz.0.6529': attribute type 29 has an invalid length. [ 1288.617431][T23150] netlink: 'syz.4.6530': attribute type 10 has an invalid length. [ 1288.648945][T23152] netlink: 'syz.0.6529': attribute type 29 has an invalid length. [ 1288.685948][T23155] netlink: 'syz.0.6529': attribute type 29 has an invalid length. [ 1288.734432][T23152] netlink: 'syz.0.6529': attribute type 29 has an invalid length. [ 1288.754227][T23152] netlink: 'syz.0.6529': attribute type 29 has an invalid length. [ 1295.293635][T23191] validate_nla: 1 callbacks suppressed [ 1295.293655][T23191] netlink: 'syz.1.6541': attribute type 10 has an invalid length. [ 1295.614410][T23202] netlink: 'syz.2.6546': attribute type 10 has an invalid length. [ 1295.900560][T23209] netlink: 'syz.1.6551': attribute type 10 has an invalid length. [ 1295.916292][T23211] netlink: 'syz.0.6552': attribute type 10 has an invalid length. [ 1300.019093][T23249] netlink: 'syz.1.6564': attribute type 10 has an invalid length. [ 1300.068469][T23247] netlink: 'syz.2.6565': attribute type 10 has an invalid length. [ 1300.210239][T23252] netlink: 'syz.3.6567': attribute type 10 has an invalid length. [ 1300.234971][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.241362][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.455410][T23258] IPv6: Can't replace route, no match found [ 1305.586313][T23309] netlink: 168 bytes leftover after parsing attributes in process `syz.3.6584'. [ 1305.604731][T23307] netlink: 'syz.1.6583': attribute type 10 has an invalid length. [ 1307.206958][T23352] netlink: 'syz.0.6606': attribute type 10 has an invalid length. [ 1307.872507][T23379] netlink: 'syz.4.6613': attribute type 29 has an invalid length. [ 1307.916210][T23379] netlink: 'syz.4.6613': attribute type 29 has an invalid length. [ 1308.167835][T23388] FAULT_INJECTION: forcing a failure. [ 1308.167835][T23388] name failslab, interval 1, probability 0, space 0, times 0 [ 1308.212633][T23388] CPU: 0 PID: 23388 Comm: syz.0.6617 Not tainted syzkaller #0 [ 1308.220208][T23388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1308.230315][T23388] Call Trace: [ 1308.233633][T23388] [ 1308.236689][T23388] dump_stack_lvl+0x188/0x24e [ 1308.241423][T23388] ? show_regs_print_info+0x12/0x12 [ 1308.246681][T23388] ? load_image+0x400/0x400 [ 1308.251252][T23388] ? __might_sleep+0xd0/0xd0 [ 1308.255892][T23388] ? __lock_acquire+0x7d10/0x7d10 [ 1308.260977][T23388] should_fail_ex+0x399/0x4d0 [ 1308.265734][T23388] should_failslab+0x5/0x20 [ 1308.270275][T23388] slab_pre_alloc_hook+0x59/0x310 [ 1308.275352][T23388] kmem_cache_alloc_node+0x5a/0x320 [ 1308.280595][T23388] ? __alloc_skb+0xfc/0x7e0 [ 1308.285177][T23388] __alloc_skb+0xfc/0x7e0 [ 1308.289559][T23388] ? netlink_autobind+0xda/0x300 [ 1308.294566][T23388] netlink_sendmsg+0x654/0xbd0 [ 1308.299377][T23388] ? netlink_getsockopt+0x550/0x550 [ 1308.304616][T23388] ? aa_sock_msg_perm+0x94/0x150 [ 1308.309606][T23388] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1308.314936][T23388] ? security_socket_sendmsg+0x7c/0xa0 [ 1308.320531][T23388] ? netlink_getsockopt+0x550/0x550 [ 1308.325774][T23388] ____sys_sendmsg+0x5be/0x970 [ 1308.330596][T23388] ? __sys_sendmsg_sock+0x30/0x30 [ 1308.335665][T23388] ? __import_iovec+0x315/0x500 [ 1308.340564][T23388] ? import_iovec+0x6f/0xa0 [ 1308.345195][T23388] ___sys_sendmsg+0x2a2/0x360 [ 1308.349988][T23388] ? __sys_sendmsg+0x290/0x290 [ 1308.354818][T23388] ? __lock_acquire+0x7d10/0x7d10 [ 1308.359930][T23388] __se_sys_sendmsg+0x1bb/0x2a0 [ 1308.364832][T23388] ? __x64_sys_sendmsg+0x80/0x80 [ 1308.369827][T23388] ? lockdep_hardirqs_on+0x94/0x140 [ 1308.375089][T23388] do_syscall_64+0x4c/0xa0 [ 1308.379575][T23388] ? clear_bhb_loop+0x60/0xb0 [ 1308.384314][T23388] ? clear_bhb_loop+0x60/0xb0 [ 1308.389060][T23388] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1308.395012][T23388] RIP: 0033:0x7fa2fdd9ce59 [ 1308.399479][T23388] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1308.419144][T23388] RSP: 002b:00007fa2fec2a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1308.427608][T23388] RAX: ffffffffffffffda RBX: 00007fa2fe015fa0 RCX: 00007fa2fdd9ce59 [ 1308.435664][T23388] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000004 [ 1308.443677][T23388] RBP: 00007fa2fec2a090 R08: 0000000000000000 R09: 0000000000000000 [ 1308.451690][T23388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1308.459704][T23388] R13: 00007fa2fe016038 R14: 00007fa2fe015fa0 R15: 00007ffd36384b88 [ 1308.467732][T23388] [ 1308.618482][ C1] [ 1308.618492][ C1] ================================ [ 1308.618498][ C1] WARNING: inconsistent lock state [ 1308.618517][ C1] syzkaller #0 Not tainted [ 1308.618528][ C1] -------------------------------- [ 1308.618534][ C1] inconsistent {INITIAL USE} -> {IN-NMI} usage. [ 1308.618543][ C1] syz.2.6619/23390 [HC1[1]:SC0[0]:HE0:SE1] takes: [ 1308.618564][ C1] ffff88807c6a9068 (&htab->lockdep_key){....}-{2:2}, at: htab_lock_bucket+0x179/0x2f0 [ 1308.618644][ C1] {INITIAL USE} state was registered at: [ 1308.618652][ C1] lock_acquire+0x1bb/0x4a0 [ 1308.618679][ C1] _raw_spin_lock+0x2a/0x40 [ 1308.618703][ C1] htab_lock_bucket+0x179/0x2f0 [ 1308.618724][ C1] htab_lru_map_update_elem+0x31e/0xe80 [ 1308.618745][ C1] bpf_map_update_value+0x59e/0x670 [ 1308.618769][ C1] generic_map_update_batch+0x54b/0x810 [ 1308.618793][ C1] bpf_map_do_batch+0x466/0x600 [ 1308.618820][ C1] __sys_bpf+0x6f7/0x780 [ 1308.618845][ C1] __x64_sys_bpf+0x78/0x90 [ 1308.618881][ C1] do_syscall_64+0x4c/0xa0 [ 1308.618898][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1308.618924][ C1] irq event stamp: 3112 [ 1308.618931][ C1] hardirqs last enabled at (3111): [] syscall_enter_from_user_mode+0x21/0x80 [ 1308.618962][ C1] hardirqs last disabled at (3112): [] exc_debug+0x6e/0x130 [ 1308.618986][ C1] softirqs last enabled at (2154): [] bpf_prog_load+0x1127/0x1560 [ 1308.619025][ C1] softirqs last disabled at (2152): [] bpf_ksym_add+0x29/0x340 [ 1308.619046][ C1] [ 1308.619046][ C1] other info that might help us debug this: [ 1308.619052][ C1] Possible unsafe locking scenario: [ 1308.619052][ C1] [ 1308.619057][ C1] CPU0 [ 1308.619061][ C1] ---- [ 1308.619064][ C1] lock(&htab->lockdep_key); [ 1308.619077][ C1] [ 1308.619081][ C1] lock(&htab->lockdep_key); [ 1308.619092][ C1] [ 1308.619092][ C1] *** DEADLOCK *** [ 1308.619092][ C1] [ 1308.619097][ C1] no locks held by syz.2.6619/23390. [ 1308.619105][ C1] [ 1308.619105][ C1] stack backtrace: [ 1308.619110][ C1] CPU: 1 PID: 23390 Comm: syz.2.6619 Not tainted syzkaller #0 [ 1308.619128][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1308.619140][ C1] Call Trace: [ 1308.619146][ C1] <#DB> [ 1308.619155][ C1] dump_stack_lvl+0x188/0x24e [ 1308.619181][ C1] ? show_regs_print_info+0x12/0x12 [ 1308.619213][ C1] ? print_usage_bug+0x42a/0x690 [ 1308.619242][ C1] ? verify_lock_unused+0x18/0x140 [ 1308.619278][ C1] lock_acquire+0x2df/0x4a0 [ 1308.619312][ C1] ? htab_lock_bucket+0x179/0x2f0 [ 1308.619339][ C1] ? read_lock_is_recursive+0x10/0x10 [ 1308.619370][ C1] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 1308.619411][ C1] ? perf_trace_lock+0x301/0x390 [ 1308.619438][ C1] _raw_spin_lock+0x2a/0x40 [ 1308.619461][ C1] ? htab_lock_bucket+0x179/0x2f0 [ 1308.619483][ C1] htab_lock_bucket+0x179/0x2f0 [ 1308.619511][ C1] ? htab_lru_map_delete_node+0x630/0x630 [ 1308.619548][ C1] ? htab_map_hash+0x329/0x6d0 [ 1308.619576][ C1] htab_lru_map_delete_elem+0x1ad/0x780 [ 1308.619607][ C1] ? bpf_overflow_handler+0xd9/0x7c0 [ 1308.619634][ C1] ? htab_lru_map_update_elem+0xe80/0xe80 [ 1308.619674][ C1] bpf_prog_2c29ac5cdc6b1842+0x3a/0x3e [ 1308.619698][ C1] bpf_overflow_handler+0x522/0x7c0 [ 1308.619722][ C1] ? perf_trace_run_bpf_submit+0x1c0/0x1c0 [ 1308.619756][ C1] ? bpf_overflow_handler+0xd9/0x7c0 [ 1308.619779][ C1] ? perf_swevent_overflow+0x230/0x230 [ 1308.619813][ C1] ? __perf_event_account_interrupt+0x187/0x280 [ 1308.619849][ C1] __perf_event_overflow+0x448/0x610 [ 1308.619891][ C1] perf_swevent_event+0x315/0x570 [ 1308.619926][ C1] ? perf_tp_event+0xc30/0xc30 [ 1308.619957][ C1] ? __bpf_trace_bpf_trace_printk+0x20/0x20 [ 1308.620002][ C1] perf_bp_event+0x312/0x3f0 [ 1308.620050][ C1] ? perf_event_free_bpf_prog+0x110/0x110 [ 1308.620124][ C1] ? atomic_notifier_call_chain+0x2c/0x2b0 [ 1308.620152][ C1] ? read_lock_is_recursive+0x10/0x10 [ 1308.620191][ C1] hw_breakpoint_exceptions_notify+0x152/0x470 [ 1308.620229][ C1] atomic_notifier_call_chain+0x17a/0x2b0 [ 1308.620252][ C1] ? atomic_notifier_call_chain+0x2c/0x2b0 [ 1308.620282][ C1] notify_die+0x141/0x1a0 [ 1308.620310][ C1] ? srcu_init_notifier_head+0x90/0x90 [ 1308.620355][ C1] notify_debug+0x20/0x30 [ 1308.620379][ C1] exc_debug+0xd9/0x130 [ 1308.620406][ C1] asm_exc_debug+0x1a/0x40 [ 1308.620433][ C1] RIP: 0010:copy_user_enhanced_fast_string+0xa/0x40 [ 1308.620455][ C1] Code: ff c9 75 f2 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 8d 0c ca 89 ca eb 20 0f 01 cb 83 fa 40 72 38 89 d1 a4 31 c0 0f 01 ca c3 89 ca eb 0a 90 90 90 90 90 90 90 90 90 90 [ 1308.620473][ C1] RSP: 0018:ffffc900044a7d48 EFLAGS: 00050202 [ 1308.620489][ C1] RAX: ffffffff84116f01 RBX: 0000000000000050 RCX: 000000000000000f [ 1308.620503][ C1] RDX: 0000000000000050 RSI: 0000200000000301 RDI: ffffc900044a7e01 [ 1308.620517][ C1] RBP: 0000000000000000 R08: ffffc900044a7e0f R09: 1ffff92000894fc1 [ 1308.620530][ C1] R10: dffffc0000000000 R11: fffff52000894fc2 R12: 00007fffffffefb0 [ 1308.620544][ C1] R13: 0000000000000050 R14: ffffc900044a7dc0 R15: 00002000000002c0 [ 1308.620569][ C1] ? _copy_from_user+0xc1/0x170 [ 1308.620605][ C1] [ 1308.620611][ C1] [ 1308.620617][ C1] _copy_from_user+0xf4/0x170 [ 1308.620646][ C1] __sys_bpf+0x2ea/0x780 [ 1308.620678][ C1] ? bpf_link_show_fdinfo+0x380/0x380 [ 1308.620730][ C1] ? lock_chain_count+0x20/0x20 [ 1308.620771][ C1] __x64_sys_bpf+0x78/0x90 [ 1308.620800][ C1] do_syscall_64+0x4c/0xa0 [ 1308.620818][ C1] ? clear_bhb_loop+0x60/0xb0 [ 1308.620845][ C1] ? clear_bhb_loop+0x60/0xb0 [ 1308.620878][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1308.620906][ C1] RIP: 0033:0x7f5f24b9ce59 [ 1308.620923][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1308.620939][ C1] RSP: 002b:00007f5f25a1b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1308.620958][ C1] RAX: ffffffffffffffda RBX: 00007f5f24e15fa0 RCX: 00007f5f24b9ce59 [ 1308.620972][ C1] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000001c [ 1308.620984][ C1] RBP: 00007f5f24c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 1308.620996][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1308.621008][ C1] R13: 00007f5f24e16038 R14: 00007f5f24e15fa0 R15: 00007ffc495e0b38 [ 1308.621060][ C1] [ 1309.264048][T23390] netlink: 'syz.2.6619': attribute type 21 has an invalid length. [ 1309.272003][T23390] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6619'. [ 1309.318229][T23390] netlink: 'syz.2.6619': attribute type 1 has an invalid length. [ 1312.533647][T20727] Bluetooth: hci3: command 0x0406 tx timeout