last executing test programs: 8.958522519s ago: executing program 1 (id=3555): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) sendmsg$inet(r0, &(0x7f0000002700)={&(0x7f0000000100)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000002680)=[{&(0x7f0000000400)="dff1355d57d2bd973f99bca52bd672f21a4c60f403655562a74b2668d7675acea1c4ce7f752606c3eda18f00000088574258f90a048b7dc452d6a8639d4489e5184c3d132ca29ea03ab8104b99ed481da166a0b7115e76fabcb25dd304ee9b15cfaba29eaf1e016871ad5196f9003c0fba256ab14d97339a902a3cf2d0ccd7bdc2acb93cf29f538cdbaa47da1e68672c9e24786699b02a5379076051eafe77f17d2bca666a83c0fe738506c100a9b56e1658212b807d750b5eba8bb090292bcc94dc5279f5a6086b9075cfff586fa28bf65ec3e80edcd1", 0xd7}, {&(0x7f0000000540)="2c85f065a412b50b873a0fca25c73a263261ee086027ec5e58840c554e38f4c65eb490180aecc39a394675fa6954d1b16a781743d1ec621893b1c9eda5d8abd9ba42593cea723a42a7a891590a3682c1e824a3ea82e55416e5bfaf9f940d94eb48fa0f9483fb891e948e0552d4b2a64963be47a658a0f6ae", 0x78}, {&(0x7f00000005c0)="f2fbf8bfee8f60fc44fabd4ea977a9e2ff1ca4d8a05081f2803a402df95a5cbbba74a5abc758ef64e98c40cacea3c2d151b88da5fc7a736ca1a028f1695732406fcd7c6db3cded74bd8582b1aa7c348a4ff59a94ca4a8c4ebc217e2104b323b4b866d490bd1b19df107c81e7c00f82c4503bbfdb3da7a8d5b6193e9fe5c1ff264c6fe1da371089fc6415093296a3f52abdd48ec2dff803527934a9be5922fa68b7ac25717b5a11a7895136ef9d", 0xad}, {&(0x7f0000000680)="94c8d7a3c5999a2f967257d83e31f1b8fe4c32977ac983c0f993ea705990b001b5e67e87412bde954f49f67753bafa991f8a7eab6232843a6a1470c51600d96503f1fb6c7def72b77044d7c59a54be20aca5687bae6ee918517d37922c0bfc596b893b917c94ba376e371409af9d7a0f3761c3f0ff0927e94c4fdb05fc79d083b845ed71a0042b36ed41ce98c4d9a84e4f150a634e5f18b7f587b8752f7d84d4de1007347efe66dabddb27e952628e920049b24cf29d4e7aead2f12ac3a36241b621d882e25315191c1f37a751715c1af8eacbe918307875ac73dbea5922b39f7ad84a8b22122ef26491b32eaafc3da654114e922330e302c96bb1d488bf8d7d28b51faa773d5abb5cf7688f10c9e3b44e9f27922e762ac35b6206342ab82797c16adda7677a22f36385894934419f8cd3a276f6b3c61b433961ff02fe8ecac4bfe7c4a5ddc3208d9a9100cf1e9b0d2eb43be5c1cb327f8ac25d0871ffe0cab98a00761ae527852de93ee05026ddd4eafe4434144cbfedf721e17156b1582fd3196de485d824ad126c31a3f2eabb286f18c6dad9ba9a13bfb9e8caed2c53dffa2202bb53c70ca7be10967d6619b52b76cfd6d0f5c4defaabd47a2ad161fb448daea521539c738fcfb42a00eb84205f1db55bcd9fdbd2b8ffa55cea054a1443aed28690c8648b9c1915d56545428b62236cf745fe590f86ec77e7425dabdf868c9beea618dcaf7fa024478cb688ab7446e3fd46ddc6901d6b37dedf289e928d33ef0d7b643ad74be0dc9901ecf529de7307a24415b8f17686096db71fec2a6b5d61616456efb7199477e3205825f9f68171e45840ffee6aa9ded1819e315473a1f78cdeab5b656116fc1a3547a3f098c805bd98f1e468e87ec1d4af39e0d6df89d17ccc76402a543d401858c511acf24e5e971846b75c5e1726dcf7b9f3c4212b61133357c82c52840491ae6541eb748b9f8b7d6ac1b025f93c4828aa72160f97ff0b684c897e1569e2e984da6edb0a7cee7295215cc45ddc1f902ffc6455a41862a3cd6da40609a54174f4aedff36293c3dceade277c4392a0ce4a94c3c65f4034742bc3fcc0ea43c79fd094c0397187d54d3b98b62b2a69721572505aeaed2a67bb802930dbaa398b6f85309afbad861ebaf79494b24cf754b8845a0ea9c9594c522e6727e6e3da18bd9b611c29d0c06eaff48887d2bae20029b8a918b2771f37918fcf7e5aa9c6a1466092671408c2411e1e0d218628bd78024e5fffca885932e264ff6b065c4b044b1ee37b8063b22b47737f3d5b6d8e9e3f1b5754db70b135233cf609d7e9f9a927ab155500f3d56746d5fe8a48b614e10c02ae450ba4fe8c16a5629247de0e371d984e8746010ddb3420b40c7775374a544035329eaf24ead2f76e4509d6c90dc2821ab78dc5bcde3c7c8708b7c6c28e0c612101beed84957f30b1ebcf3b53281e35644aef3c2f17046af0a2f76cbfbef270319004c7202cf7a1d70c46fbde947200f670b908a285345b5bfce9db4f967575d045dea97f0cae835b1f31cc61ccb9fdc6e570cc355092508777add25ac25a1b4641a3b66bae15c8d0370772de2a8ce040558cf85a1d7e6e56609cc6e1a4816fff25f548f7d0bd8359e46d6705567aef4389de3e90fc77f71df0e28d65b8bb6b0b0de6ddc414909e623756f0e572be9740504b5de2968e643ce57381c8ca2bc5dd6ac9a2ea6246f23064ec5eb32e1753a69eded4aabb24088acb7ac69fe3e656792467d0d28aa8aa60df60b4b64fa31a52e225ec0ebc0318afcaa321fca6057c76dfd9b926cf119445b35a3bca543c71a30c75498d1012eaf26210c8779c50c8a77a59863c3a8051f36eb8614fa942ccdf0d9b81b592c218fd9c69221a6fc46e654c14d16a4652a2ff62058e1cc48a2454c3a7716d5cf78caad762c36d2f164ec18c45b101aa7c564d4861f19af992efdb80b22a8bb9eaad7efc6170e4f39cdc3a2b42b660169da89e310ad552512ab20afbd27b66b2c751180c3064bbbddad4fdec53378ae22ade1f03d3bda523541d8735dda64c7408182635f138f00f2a68b0f2c76a9573255de2978f3a230e2bbd2cf2728be309815414b78ca9d7b67d7753712738078d2023739127c6caea02c9d1f98819fc1afd27e7bb4def53f66bfa6f2d52d62231f9f92287b49ccb23511ad176d2af206ca5101f8e6a6f1dd756eab6afb173d5a4b5747c39401fff94349e50ed7b6762705a355d6be4efaca3e978ff7dbdbf6b888a305d06723230ddf2df26f211d0b0a7c2d9aab728c81d2826ac2512b12c07ed8ca8777a12b6eb8b647b98b0c974c905146cf844b421af8d69c47fe047d357835bc1b9c4f7400557f4934df333e53b9472f9a4870d5a6cc8c6faf7e8a451881535227049d8923174baa0ba6eb988881c32b155cdd62e7f003e9b5e2aeb4955613cd8502da7cf637def6bbd3cea228813e17bbe7e5d70dfa47e2ae2213a6a5ba08cda38811e92ff51a5c00031afb7347e853d14551f8d7e85550dd7b8d64c2d8cb8605f3eac3261128eab4bba8b356db19635df96087c67f6e82f849b19bd11675fd6740bec1d9e342bfd8995835c2ffaac403ff7ffdf02e6ebaec3b7bd4df10a1bba14be209b3f4fbe3b5a246acb7c6fa13afb01276fd8355968be00ab37a0c13c088d05f3f31c5999c9b89b5c3f3c19d77e0a88428a523c540bf5f13605ae4a5708dbb1a603caf25949d21b61fd661a9b585d23e712afc9c659df61c59e2b8d37725caa16291ef6ec1abd9e5a12ad7fa2e0fad30c46c248c27b2d001fba3305727ffab7be712812ef191b115576033f0ebbd5b19e8cc3005a2a9600f24a3926bc80adc854afc209568825b49da11d23f2a4e769e6d94fda26a3ad53683a9a5e5da440e713c4b0d3a3dd42b55f22c135a5de9550769d428c7a3e9d122520a8920e78cd6ed02c8b93b31521f726fcc693bb738d01b5c3d31bab7e6eb1cd8ae94f1d20d167bdcaca04b0bda74bd0b968ef32037661ad7391ab4a2d69adfb8cfd7569c4c1b09ef2922a502bdf90b0cca446d25b96f87511ca734450786a0f31e3f28e54b84aa7421f87daa4f971599876097fb474c0a152a7b46a59c68fdbcd86f14af95fd05517efa1a8ed4cf0327546ee67e22a8472335144a2122d6fcb61ff3a271a5a0d89f7d126c35b2cf774e9c047726bc4afd86efe92d66ff963e4adf95e01c880cdf2a3e3b893a71ecae52ddfab206008ba22c07788034e70ca0625b6534663edbffc174e0a7be11167dcf157cc10b271171692c5ef6e01072dffb583fe0ef50c3d20da1a32f7387a8835ad348a0eccf72adfafd109be96365b62829d536df4f5ab93b51479dcacaf1d6902096f8c3276f0f53b50201287767e98fe462050914123940f861f5695e7f5e2693d93ab485aca2c06e97b59d5c6f84dc234031c466683161346f570cee5fcc73e2b9032ce4bb82aa9290a359e5cb6bf4aa392c49472945be1a166f0c57e305a573c272b46fb873f2e4c490966eef727d33782f7f5e81d778e8dea0e5bae89ae077bd7b932a29d97dc332532b84d62fc233317504d1c6ab3a26058dba88b5b614ac795b75feb67dfa26daa117309e36911bb171e7c0a1fe440b764a3c1edcbddb4a559334036fa05be5f1186a9e1312110f6ca4c0a6930883ea4b5098a125da402f592b9e3a7abc9e4da745c8e386cd26ed4f00abc954cdaa1b92791e34bd3fd80a68ff7545edb84e28f3b1c8a00185803606613cd1989b5a60ef3fd543cd5a15933ecffe5e1b8c0d79b005df3a80d158afb4c0c78b62af6b8999d907bcdedf41355f077a9481b47e92ff273de7fb387b18e49b104360982f5aed9c8ddea2d702739d5963bf62008ec8ceb9459727abd58cca5ebecf6997ad2599c74e8f79ec4cc1909de8dee5d2f4202d23b87c6bdbb92f9092c717d49e0b6630eca2b2aa6fb732db3ccc40ebebc5b57cbb1a1386628e73b128f1630417fcf4316975d643c58afff23f948007d5335855a76d031b82cdceecd738e4ec0f1d7e4226cb2a0551be258683510ba429e86d17b2502eef70a9d61f65a3ab19a4eac9c6e1c7a581d9ab21af4511277b70d5229bd7602ae51f9b4d3ecf2e5145af2d2ed0a1c2ef1dd09afd0711984e4301b7b957df405813b8a255842e20c230293db099339d77cddba4a140a1904a395dac7c15733c7d72f709167c2e46c55dbd05c630c9e23fce9b590201a7b27f42b44d215c1603e5b822bb7488966d75e8b308e0be2817c4f55e3fbeb77ed46b623a0634db3713be04460f8cf365045110471753772a120838dfce7222cd77829a7f309c199ad27e2eaf09e05f1473f586a9f5ec147902fd193bd650f67588a9d6f70cb184d7d85558c0f8f32f619e166780ce12094b62559dfbfa7b4a7ff152ce59c25fd17dbb9149d794efaa8b6527b6de4fedeac24b05d4f42d133195645a2903cbc57aee2265ec22e56c939705c325bf8c5b6cc7f63ce8b059f0d072d29df1a1852e373b4fd6013ee00791c7c82b56d6fc0309e070762253e80b712268ab7ece66e50652171434f4c8f3b1fc6ae507d3694ef533b7f9bd4b016215f174248d9be60977f979f3b55ec16f733e895b0a9d253c513159d14fddc5fa3486f48901e62cc8f69d6298964e0df47f7f0a470addc3900de2f3e29d558b5e847df986158eea167ab5121d30b3e8a31d3300d81ac9da2e28a77975453112a749c2d3d6061562b4a55a103aa8feb890bfb534f241841c9688d3674241a5829991084073f95ba0eb35b1b7ce21571b9b1e0187d5f0c9c0034c843065f1010a601c66cc51038c83cca904e5c1686377de3c2308687216080d2ee0c4662b6712e79c38171d985917e1f2d9db01bfa68f46d80967be9d1f1fd74502554537bf64669af2d36c453f3403b55a1f5fe6cc3a077124cd724069982dd6ce07a8ede0166838c323e665ed060516556e9d09588830313442b9d3aacab6bb3ae887d4504bc8810b8ccc6cc2467d1ba1897d89f2234a18554924a23f96b5fc840520744aff5e961fb93394b749e9034a6066e9a67bf78cdb4357432b451ad06ce4e0a899c5fa5adfb2439c67fb26342c8d21a800a5ab3da738bc990ef620dcbd2f0588d8ad601f9410a73c47b8f7ddac917b88413285fe956950bb00af280557c9f0adffc94e68858422453155e9ae1ef26f050af16974906c52faf9689835abf20efd3eb46e43c4dcef6f7ed78cd507462d37246a42593a4e8e9e566b212d552f78fdba21d9b6c96c26186f7ef1450093af1cccaf0ee1f02a9a3a952d2ec5f06ff45403ef7b9cd58ee6860c2f031bf923e3cbd34cba0f3e964995e23872dd0c82475d634958b303c2446b58c901f1fb00e9c6b457ed904936d39358d5506d9c17abd171fd946c80f0c7f309149d1803984a153d3ea14b0104c1170df64f1ccb341da1eb1881e8f10fc0e32924bd145a60aa3f6a093928d43acce0b1a45c679dfdcd0f7e0aea2232304aa2b5c7fcbe4f55b55386cd2cef29db2b84ffe7c6eac19f2ec113afc6f3f82b7eef951729dd17650ab49692d681696d9efc2f5f7e81179447a017a23b2c587662686dbe0df245e69afda5df742388c71e638c0550504c4997c2b9bdfb5aa9ae37da4f4190d2e52350c009453fdb4eaf6cefe872bb75856694b0272ccb75be413e16be61c623bbb1c857cbe22baea54df10c8e095df3d06f5f5aeecad8e2164c3e92add42b4ca80e31fdecaa11621ac26f638b201e04473038a93b2ae2e073b58c12d75c8aba8cec0e681b896ec", 0x1000}, {&(0x7f0000001680)="1218b36eb6b1fac862a3ba567746ee76aae1d031c948b684d763a2b49c63bbad37bbddfdff7fce234fa8b328a44b5a0979f373ebffde10b87cf22c8233f6b66d28a497bb470c36fca0042d5633c985d6fe2ded8fb014b2878d54d1b2ca2374f6e9a24aff786c1f80da47a80fdb633bd0a06e75593ab1e493c5845c2efd265050f616e8e8acb114b6f739b05ff08343003661c83e30cf1b7d1d9054fbc90b40a6948896746e8ace5d1509957adc56f60f49e45c210da77f46b9fa190a15be2014c377f56977225baaf071c2a35f07b84bd6fd40aee5549fd9673b52124133094ea94fdcf01807c10fbec2fb660eade40dacee27c751ea7f65d05484a0ce30b0df0213006227b1a714012578726444820794d509e52e49f03686976f5a4a60ab88d5cd68fd01926d2b5a0cf92ee5d9880163c44bfc1db08e6a8f95268d2c37b9933e06497ac4c158cdd09bcc734a4303359eb9ee683b8190d85073ee420644169747dd91df5b63568da63eddef41da2083287cee1c441e76c3777ada3b9c1e0f0adbbab33bd21a8eb48ba633fe52212bfb7b5395b4cca10d6aef640b7e518d36fb5034dd36ea49c2088e578cc33b4bc32ea0e6fa3346e5da79a67e37fd917330e6d13edc453287ecf948331dcccf9c24479a9e58d58ed58c0a854d6904dceb799e83975346b2aaed1c05031b08bcdb1787f29d69ea1e6a3dce105316f91af9a3b30b341adf20a853ca6842203bfbb344924ae830629de3ce2d90c047325cb92392d0756be922343ee5e47344fd7caf2494b2b3101dc781768d0a25ae0f5091007f3a15c52c4191b418fe4143559568907ac1b4cef42293823f4e8832b806e977154e5228a51a3649f37c0bca6588f5bbc079170e5b2811e72ef049f27a53fd88573e067aed9b1242c56b2ba27f87f62789fe4ea5b319e2d30aa6b72867f5088e53a0120edcc0039eae6e1cba3f48d76434283ec48e4b9dd14f5c5f0a56e7b041acd1ebe6729f6665b5c04f8e1260cd43d054469717f6171bb27ea4611bf320ec1b5d83870487a28c834335ad59881fecaf004bd58315ce270bac59ffe413fc82ab0f8812d875edc752d8a6cef24f1108ec97685527879fef0cc4814c35fa1cc7070a4051a885f88ebe9f5363a63a1404f98f1124513dc20ea5203785863186fdcde48fa329258991354f058bbdbc349eac6d62dd1716c1f6846d82e212854647928dc116f6a6caa78364c7fa96fc88f10cea583757ee0a6cd08aeb6615c6347d918ee11410ed963d423ae978d854dcffeb1b8a03979e2a7dd25a91b9cfb7408a668f47c8697472b0a3a6722a72aaf83e2c0c8f7a4a5e51dcef215c5ec1835e6eab12b91d1ff1a22a788d3a4f4c3108346a28bf072a911629dd2f9b8a2a3070d71e8a0881693185cba658b1a3b33c1e1b676ef23753a6940c7be74fb4fee7bf1b3ce4de82bfccd7d6b563391d3a2fd72b22910abc58bd50666ed10fa35f6680f7d92a74ad88af74983740e24e1bd21e6361a56215df7d1103130c08584092b3b38890e257d7fb2bdf13a93b3f4261480df06b4e7ac1946358a28866fea5b65fe7a9e08741fdc0698c5fc68dbedec5cad8927bbe24b4da74f73844abfa564f1f1ac18256415a8b2def5143cfe9e2c4eac930449fffdc9263234767e8f9c869545c3900e1b7452852427b139ee74e3747ba4c1a5d3beafdf7b1ff2bd82b305c220d8d7e35349580a74459faecc2e7b63f1fe7c321154630d9d01bc180b4a349b95f7370a3ada33dd3db9508d11a112158f9d56d2fbb9b4c0590725d801898bcca71bc7a7dcff85745437b98a28efdd54bf3447aa86ccd5d9e2733156d8f05eb7183fc0d777c5cbe230527bd5f22042ca9504b1fc28ba49fca2616dca1fd413cbe3ac0e42c679c820a954749b961e1607e63b4d365656da522378c6da820533ee3f31d787d27efaf5cb6314957594eb6be4c7f1236afc99caf7651e013c3b8fa8cd1e2d2cc66a9ad6833978ba852346b5319aad2a6a77e1c9ad21088c8551a68c1b8adc0e7c825662498734df3a5b5fc0701c99bdef8cd061fd6affef6b06d947eda480e3154e1b5a57b16c6266e27b94e2ef8e5b68c239fed78cf456001891c33d0aec9d73102dc6d1c0a053a58087f48a47bfd733a4ccdbba53627c1a0d152acbe891c3699300dfda836e587f3c391fbf77e4bf5c82d4a343465d8f663125c44f705fe98c85e6f8716b56e65b9c10d1fdbacbc14a20d72e80034c2488a527504c8db54a12cbd2a6b707ec780553a5f5726a8b31c800e318f857d96feb849a07bbb4892562532457cd89ac58ae3502a6a05852735d5e53f16ca8740ecb7bfceae9776f3bfbf5e3d34e7b6332f2f95d75eed7745e8ace4bbb07c3f9fe3e8e4e81edba98c2a7ea2aafcae7c4bc70ab76276b223fc3aa95d88bfc721d94c985c15e4b1e251dddbb837927e9d3dbcd475376d10550732e52e56acddbfc2c17cbe47d410b04f261018508e3fbb9e2e43c673e564144ec9b4c36600b584f2fe02c25cdc82a55cb5b8639e0f37b9d50e0fd8190df8d8e658209727befcd40e10b850e59e8876b47f8a49d58f8d2e519ade19517b2cba2613def8383fa3d8362308037a6d934c4f6ab7e0e14e7d0905dd5aabab6fd9350b0f3c78c2badecdfee0181205d113a1268214d853740b1e1f24fb8d9593bf35f1ff2482d06cb0ed085590cec1ad6613fda4919408453d88e762f1e3691ffab7397f645f28634ac45831706b54111ed1a4ad842fee51f7c5f901c548624bd3af0ff29823c5e1881b246c1b499a56942aa1232a58b93ef01078329a4f1a6163c31801a67768aee35fb10174cf020850e3216ddc92978944696714f5e812607ee356f6a52db3239ec784f449ac882c9324fb16ee1be7ff73027798b4ffc95ea51e835583bf8375bf35af857ba457f35506093b3ad63ca2d5c3fa7d38729e13976d2d41a229364d5ed28f5324fa4d212af5925816bb66554aa8128f2b884c1ee890bf8ab6849c8684a4caa6afac5769f8f66ba53f49766af0c355f2a3a90dfd4f5f96eeb05e0c88d9e315823757d28c99bdceb95e940ae7221e52c2169dee9d5a2227a0b2037d097900d171b566e831fb4e58653c8eca98e11244ae6bd0c37bbad2ee24bcb6bf74ce8dc3b14a65c41d9465063524dda09d7c4da607bc45b3a0dcbc5f77086a6e83c631fc2ff269feb2d85783d75fe4ac4f64178ee0964b2def8096cbce51974313c9e34d4ff9dd06ee0a0a0ed4985029619fea8f8fabac233a508f5fa57377daae214d4e10f4cae37b40f7fc5f0dba520113fcf184fbb21167485d39ef6a90821a619784773b8046afc3e6943d59f2b87509fd01d21997dfb13578bf471b7dbb1cd93da614518864cec4454678ed5494d43f59b2da7fc8ba5041df4e8c3c6608723fffd40e428848967304de203785ed9ab72b7ef39c88d3fe47bfd1acb296d4adbf58415bc5900a81e9aa8ddf819451fb127fde2b1d60d5c267065d95defe48a966e0f25cc070a2d71ce05402fd102bca92edb2bf3fdff8845385652ab7f54a518b84a236d67ef31ab3d960f10c11afac0cad94ed135b89f86911d6e7378847f613bd48ff4ceb5c4cc1244350fd40e83ad9c2e512985b29da9e1afda6f85d31b17cc356aad94502b764f1b389fe2cb6cbbe9a80e9600f2b473f58f8a3d775693561c4fe6653febb624a6aca1581011ac683c8ac7a5f4de0c4921add3a6a0c15573d8ef14a7fa1c473d6318fad62037c2f1e50d55a131be60aed479ac93870ca5309efdf2d7fd6bb0f564b1a89627909de363a7c0d80e09ce004a145814a6ed34b6d467fa2eeeaa9fdf4da18e76819eb1e55d2e76de312aff312a93443641d1ad69fdd268dd875cacdb8d3ab9dde5469396cbbd29506ce6df236b2cf04610a9805ada770e916116c9242213fc3bec2dd6c70de47b8d3c41b4d3ddb7a13f4891a28addd1e4954fc8d8446c277137502212909576bb4cf1066171eaf49ff07bcb5b7c89d7330775d79bd3fa44f228499fbaefe22cb13f08de6df73c469bcf36cb07cfcbbc972535ec1049fc230588783c5cd4defa595b180ed3bf816381cadc415e3aad018a558663cebcfa0ef758a936eb541cd1d9cf6a2db140235d702253db29e7c6d61ca24f7962701e9a7a8848a72dd50fb73dbe0903e036d903a8419e5936a75bab1b88dc68f5fc798de9f7303e4dc496e19983ace9cdf75b32233642335c55bfce738f648e1733858222298f8f15a2f52b7a55592c50cac0760e803e7c7a83841c9151e4f64e1f615d3068a4ea44f312b9b0d72e910b45213cef159926f9cc4b2390d49de4605f8cabbfba746852da88b093caa29bef48ba4575611bdab880afbb42c2472e782f773b2460f328747a57b5cb20f70e1cd42a4cf0717ceea8732a158a191e3a79ab9d4b575cda319bd2990a9ddcedd562b1676a967e1cf7ad88a95eef2800ecdaf603b66365c96ffeea58fe2b1018140da06cc47e8d3bc44ea789878f6e2f9594006b6bed52fdb097138fc57c1da503fd67ff98c7e1dedbfd3a24e61c7d99bf3886d37a5bc8533ac1733223410066e8b227aa4d348ac895a216a3ab9993afe41721104618537e15254163156fb53dd52cebbd2215a93624cfb4a0f80367b11a21c57c790c3610cc5fde2b54e4af5ba3068823b961e755d9a1296b0cd8af71be6048e6afb360a45b1c56fac1f1d1ff8d258ae2c0d1f19c21c250ace18e1b174f776c8374136aa7af71843dd91bbfa92641d35c6771351a83834ef156473c47c0224ee82688dc9f53b5a657a592c65ac31e57633e8aaffe8ccc69a48dafdd95b619ded8e891f6902f98330f649be02e725eb5fa93b6df3114dc88b18c05a0e7b3f807e55efcb82cf6a430d43ab6883c8d8cd056f72b242e058052c026fab1f9b55de98b0521301e3bb0dc248e31348c7d6eb9fa65353819b1657e74cc88d7742595ac36a1a5ddb1a3e9cef88d6af3b151344a7e80786c2e97fcec277fc7bf2ea0453b7627aa6e405409df6beeb60c7b9140fac924ba9a9f5773bb7946edb10851af70160db0a21593ae380b048075894fb5cb7b09d6059400a0cc156e41665006b0bb1d04fa5170a1d4c77c1736e747680a47d281f451e71232f590df2b00a5f735a3209cd0262f6f7695f8b22d75cd4305437bd73c1203992000d9f87a20bacb229af312f8ff084157451a38485269750ed4145e49add158a047fe4226e30e96a1d5e12f04ba07a59f243e8cbcfcaef4882254d5d079a6d569de466e53c4c2b6391a1bae43f565b9d8296d5e03d8876c76c54421833e37cbb45a2b13b64221577372605dcb0e98189bce7cafdc90eb71c60270a53ee1a2005b734677eb8a8955619fa66bd3762cc5ab8cb1938d6cc31c0844d43e19893a4d9e3eb5885c5fbba428247524fd1dd550cab5eeca574499ba8959cd4a987947b7ba51e394982069a060c601935d541ac95203e185138f4b7cf27ded32be2086406675bf8f8ee7f1793d86b0eec8151e46e06e5a857e86b3ac8f696c9274260fd088d192d151af243d8bfbe33f37e07d2fe01ac2cbca79bde046056bd5048520ca91f426a8535fa1e0e1824837c8e15d42dcee111a01d0095079fe4d62541f3d8ae4908a85b8f4ccc1337048ddb27fcd5c8bb173d934be97d10d9c58965e427222238ca71d3b998ea13b5fadd618236dcffec3cec703d4b4800d7e06273cfc2374915d4a7240b454d389bb516d6d5bd846312fbdfd0028181625b896d19ff17bad187ba3bc45872221059359f", 0x1000}], 0x5}, 0x4c080) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x183081, 0x0) close(r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000010000004000000040"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140), 0x1003, r2}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0), 0xffffffffffffffff, 0x6, r2}, 0x38) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000500)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22667f2c00dbf6e97158b33d4fec877f1b6d76745b686158bbcfe8875afdef00010000000029"], 0x280) 5.732759912s ago: executing program 1 (id=3571): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x85}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x80108907, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="5c00000012006b8c373be35c6e17aa31046a876c1d0000007ea60864160af26508001dc0c3000200340031009ee517d34460bc24eab556a705251e618294ff0051f60a84c9f472736f67c5e73bb9e5c446fa30be62cbd4938037e786", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) r4 = socket$kcm(0xa, 0x5, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0x58, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000680)='memory.numa_stat\x00', 0x0, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)={0x1b, 0x0, 0x0, 0xbea, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r2, 0x4, 0x5, 0x1}, 0x50) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000780)=@o_path={&(0x7f0000000740)='./file0\x00', 0x0, 0x8}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xe, 0x2, &(0x7f0000000080)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x5f3, 0x0, 0x0, 0x0, 0xebff}], &(0x7f0000000140)='syzkaller\x00', 0xb, 0xb5, &(0x7f0000000340)=""/181, 0x41100, 0x41, '\x00', r5, @sk_skb=0x5, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000640)={0x1, 0xa, 0x8, 0x17}, 0x10, 0xffffffffffffffff, r3, 0x0, &(0x7f00000007c0)=[r6, r7, 0x1, r8], 0x0, 0x10, 0xba38}, 0x94) setsockopt$sock_attach_bpf(r4, 0x84, 0x12, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x6, 0x5, &(0x7f0000000840)=ANY=[@ANYBLOB="180000000effd001000000000400070007010000080700007500fcff0000000095"], &(0x7f0000000100)='GPL\x00', 0x3, 0xfa, &(0x7f0000000a00)=""/250, 0x0, 0x0, '\x00', r9}, 0x94) socket$kcm(0x29, 0x2, 0x0) 4.889868471s ago: executing program 0 (id=3584): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x30001, 0x0) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x5, @perf_config_ext={0xf6}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x2, 0x3, 0x84) socket$kcm(0xa, 0x922000000003, 0x11) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) r2 = socket$kcm(0x2c, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1}, &(0x7f0000000080), &(0x7f00000001c0)=r2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={r1, &(0x7f0000000200)}, 0x20) 4.659907923s ago: executing program 0 (id=3576): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d010000000000008500"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f0000000080), 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, r2, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x96, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2000, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xeb, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, r3, 0xa) socketpair$unix(0x1, 0x2, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="5400020029000b05d25a806f8c6394f90424fc602f0011002e2f0100053582c137153e370248018000f017afd1bd", 0x33fe0}], 0x1}, 0x0) r5 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x100080, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000}, 0x0, 0xd, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ID(r5, 0x80082407, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8cff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x81}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2663}, 0x0) socket$kcm(0x10, 0x2, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000801801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000300)={r6}, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r8, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102033a00fe08000e40000200875a65969ff57b00ff0200000000000000000001ffaaaaaa"], 0xfdef) perf_event_open$cgroup(&(0x7f00000001c0)={0x2, 0x80, 0x8, 0xf1, 0x9, 0x1, 0x0, 0x9b4, 0x40, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0x1568, 0x10000}, 0x100400, 0x3, 0x1, 0x2, 0x40, 0x5c3c, 0x401, 0x0, 0x6f6e, 0x0, 0x3ff}, r8, 0x7, 0xffffffffffffffff, 0x6) 4.607312184s ago: executing program 1 (id=3577): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x297f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8, 0x0, 0x3, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000580)={0x5, 0x80, 0xec, 0x7, 0x40, 0x8, 0x0, 0x0, 0xd000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x2, @perf_bp={0x0, 0x2}, 0x986, 0xfc, 0x4, 0x0, 0x81, 0x9, 0x81, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000580)={0x5, 0x80, 0xec, 0xa, 0x40, 0x7, 0x0, 0x0, 0xd000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x2, @perf_bp={0x0, 0x2}, 0x986, 0xfc, 0x4, 0x9, 0x81, 0x9, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_clone(0x480, 0x0, 0x11, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x9, 0x0, 0x4000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r4, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r0}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x11, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000000008500000013000000b7080000000000007b8af8"], 0x0}, 0x94) socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f0000000700)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0xd180, 0x1, 0x1, 0x0, 0x4100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xfffffffeffffffff, r3, 0x8) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2000000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e", 0x21}], 0x1}, 0x40000) recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa35f022eb"], 0xcfa4) write$cgroup_subtree(r6, &(0x7f0000000000), 0xfdef) 3.858082191s ago: executing program 2 (id=3587): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8943, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x191, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000013c0)="d080", 0xfdef}], 0x1, 0x0, 0x0, 0x800300}, 0x20000801) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x40002002) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) close(0x3) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000015c0)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x4}}, @func={0x1}, @var={0x5, 0x0, 0x0, 0xe, 0x1}]}}, 0x0, 0x4e}, 0x28) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffffffffffffffe}, 0x20, 0x0, 0x0, 0x3, 0x800000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x14}, 0x94) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x800, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1400, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x200, 0x80220, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, @perf_bp={0x0, 0x2}, 0x411, 0x1, 0xc, 0x0, 0x81}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000d020000000000000001000004001800000000000002000000000000000000"], 0xffffffffffffffff, 0x3e, 0xb1, 0x2}, 0x20) 2.623267704s ago: executing program 2 (id=3590): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x85}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x80108907, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="5c00000012006b8c373be35c6e17aa31046a876c1d0000007ea60864160af26508001dc0c3000200340031009ee517d34460bc24eab556a705251e618294ff0051f60a84c9f472736f67c5e73bb9e5c446fa30be62cbd4938037e786", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) r4 = socket$kcm(0xa, 0x5, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0x58, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000680)='memory.numa_stat\x00', 0x0, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)={0x1b, 0x0, 0x0, 0xbea, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r2, 0x4, 0x5, 0x1}, 0x50) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000780)=@o_path={&(0x7f0000000740)='./file0\x00', 0x0, 0x8}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xe, 0x2, &(0x7f0000000080)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x5f3, 0x0, 0x0, 0x0, 0xebff}], &(0x7f0000000140)='syzkaller\x00', 0xb, 0xb5, &(0x7f0000000340)=""/181, 0x41100, 0x41, '\x00', r5, @sk_skb=0x5, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000640)={0x1, 0xa, 0x8, 0x17}, 0x10, 0xffffffffffffffff, r3, 0x0, &(0x7f00000007c0)=[r6, r7, 0x1, r8], 0x0, 0x10, 0xba38}, 0x94) setsockopt$sock_attach_bpf(r4, 0x84, 0x12, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x6, 0x5, &(0x7f0000000840)=ANY=[@ANYBLOB="180000000effd001000000000400070007010000080700007500fcff0000000095"], &(0x7f0000000100)='GPL\x00', 0x3, 0xfa, &(0x7f0000000a00)=""/250, 0x0, 0x0, '\x00', r9}, 0x94) socket$kcm(0x29, 0x2, 0x0) 2.623028393s ago: executing program 3 (id=3591): r0 = perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100000000000000, 0x2}}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) r2 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0xa, &(0x7f0000000080)=[{&(0x7f00000000c0)="6000000011007f059e", 0xc}, {&(0x7f0000000200)="78cabf2dfb73fc020700000000000602258f2e440ab8f9e6aaeb1ae2f6e8bcb5ee52dc06249798093c5102a1bca0b646a7ce904f6e6b788b3219c233e60ddc36024a99a63e72572c9f9b06f96137c8af12b66cb08fc63b", 0x57}], 0x2}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000240081064e81f782db44b9040a02080006000000e8fe0ba1f1ffffff0200142603600e120800080024000000a80009001100014003000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a80)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb01001800000000000000ffffffff58feffff"], &(0x7f00000009c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r4}, 0x8) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) r6 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x3e, &(0x7f00000002c0)=r5, 0x4) sendmsg$inet(r6, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1}, 0x3e8) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="d80000001c0081064e81f782db44b9040a1d08040e00000000000aa1180002000600142603600e1208000f0000810401a8001605200001400200000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) close(r1) socket$kcm(0x11, 0xa, 0x300) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000), 0xfffffff9) r8 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02002200356bd25a806f8c6394f91124fc6004000e000a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) 2.622751143s ago: executing program 0 (id=3592): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYRES32=r1], 0x0, 0xfffffdff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r5, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x8d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0x6f5f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$tipc(r6, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x5) ioctl$TUNSETOFFLOAD(r2, 0x400454ce, 0xa) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xa, r4, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{}, 0x0, 0x0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r7 = socket$kcm(0x15, 0x5, 0x0) setsockopt$sock_attach_bpf(r7, 0x114, 0x1d, 0x0, 0xfea5) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc8}, 0x0, 0x4, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd"], 0xfdef) close(r1) recvmsg$unix(r0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x30}, 0x0) write$cgroup_subtree(r8, &(0x7f0000000300)=ANY=[], 0xfdef) 2.622235893s ago: executing program 4 (id=3593): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0xb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c6, 0x0, @perf_bp={0x0, 0xc}, 0x200100, 0x3, 0xc2ba, 0x0, 0x4000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x2c, 0x1, 0x6, 0x0) socket$kcm(0xa, 0x3, 0x11) r1 = socket$kcm(0xa, 0x5, 0x0) r2 = socket$kcm(0x15, 0x5, 0x0) write$cgroup_devices(r2, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x7, 0x8, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYRES64=r1], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) perf_event_open(&(0x7f0000000a80)={0x4, 0x80, 0x0, 0x0, 0x0, 0xe7, 0x0, 0x5d31, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xc000, 0x0, 0x4200, 0x9, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x2, r0, 0xe) r3 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r3, &(0x7f0000000280)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0xfffffffb, @local, 0x4, 0x3}, 0x80, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB], 0x18}, 0x4004080) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1c00000033000b12c25aa9cb8c2194f90124fc60100c034006", 0x19}], 0x1}, 0x40004) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES64=0x0, @ANYBLOB], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x3, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300005500000085000000d000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e0019000f000000028000001294", 0x2e}], 0x1}, 0x0) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000b40)={'full', 0x20, 0x4, 0x20, 0xb}, 0x2f) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000040)="3c00000033000b1229ae3f7f03b261130124fc60100c03400180ffff002000119215a2681cf6e50400003d490d20b735b16b6a44799406db26a57b35", 0x3c}], 0x1}, 0x0) 2.522792004s ago: executing program 1 (id=3594): sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef42b000000e3bd6efb010511000b000a", 0x23}], 0x1, 0x0, 0x0, 0xc9e}, 0x0) r2 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[], 0xfe33) gettid() bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) write$cgroup_int(r1, 0x0, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r4, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x47}, 0x80, 0x0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000280)={'pimreg\x00', 0x5dcf70ef8daa5d0e}) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000300)={0x2, &(0x7f0000000340)=[{0x4c, 0x0, 0x0, 0x2}, {0x6}]}) r5 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x21}, 0x94) r7 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e23, 0xb00, @mcast1}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1000000000000000290000000b"], 0x10}, 0xf7e5) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) openat$cgroup_int(r1, &(0x7f0000000240)='cpuset.sched_load_balance\x00', 0x2, 0x0) 1.95488589s ago: executing program 4 (id=3595): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x8}, 0x10c006, 0xac5d, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[], 0x50) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x104010, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1c, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_bp={0x0, 0xf}, 0x102303, 0xe8, 0x0, 0x4, 0x0, 0x8, 0xffff, 0x0, 0x0, 0x0, 0x8001}, 0xffffffffffffffff, 0x0, r0, 0x0) 1.871160101s ago: executing program 3 (id=3596): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x17}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x25) 1.528743695s ago: executing program 0 (id=3597): r0 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x1a, &(0x7f0000000140), 0x4) sendmsg$kcm(r0, &(0x7f00000003c0)={&(0x7f0000000040)=@in6={0xa, 0x4e23, 0xd, @local, 0x7}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000740)="bb", 0x1}], 0x1}, 0x40040) (fail_nth: 23) 1.528011195s ago: executing program 4 (id=3598): r0 = perf_event_open$cgroup(&(0x7f0000000100)={0x5, 0x80, 0xb, 0x9, 0x1, 0xb, 0x0, 0x80000001, 0x80420, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xe27, 0x0, @perf_config_ext={0x6}, 0x40, 0x0, 0x6, 0x6, 0x8, 0x0, 0x7, 0x0, 0x53, 0x0, 0x2}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xdd, 0x708}, 0x0, 0x3, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b9040a1d080201000000040000a118000200ff21000097ff00000010000000000008003f16ea1f00084003bc5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f722f054f55153c6f94007134cf6ee08000a09108a8d8ef075c0100000000000000cb490000001fb791643a5e835913b06218df577b5ab4bcf151cdc280cc8a54440a6cdcdbd9d322fe7c9fd68775730d160036f4608a32660d8bcc0040a21ffc4fc84397ca3ce373e51e4194ddb57e481940c55a1c5667e0060000725c8bbb58", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x20004c04) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000180)='\x00') ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000080)=0x7c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1f, 0x9, &(0x7f0000000000)=@raw=[@printk={@u, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xbf}}, @exit], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) 1.444749885s ago: executing program 3 (id=3599): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair(0xa, 0x3, 0xff, &(0x7f0000000000)) socket$kcm(0x2, 0x1, 0x84) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x20}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0x18000000000002a0, 0x7ee, 0x0, &(0x7f0000000e80)="b9e403c6631e39495aa05dc7cf1c", 0x0, 0x7ab, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 1.425732736s ago: executing program 2 (id=3600): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x30001, 0x0) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x5, @perf_config_ext={0xf6}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x2, 0x3, 0x84) socket$kcm(0xa, 0x922000000003, 0x11) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = socket$kcm(0x2c, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1}, &(0x7f0000000080), &(0x7f00000001c0)=r2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={r1, &(0x7f0000000200)}, 0x20) 1.372535836s ago: executing program 1 (id=3601): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xdc, &(0x7f0000000380)=[{}], 0x8, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x2, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, 0x0, 0x0) socket$kcm(0x10, 0x7, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x300}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x301}, 0x90) 1.204069058s ago: executing program 3 (id=3602): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0xb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c6, 0x0, @perf_bp={0x0, 0xc}, 0x200100, 0x3, 0xc2ba, 0x0, 0x4000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x2c, 0x1, 0x6, 0x0) socket$kcm(0xa, 0x3, 0x11) r1 = socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x7, 0x8, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYRES64=r1], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) perf_event_open(&(0x7f0000000a80)={0x4, 0x80, 0x0, 0x0, 0x0, 0xe7, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xc000, 0x0, 0x200, 0x9, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x2, r0, 0x0) r2 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r2, &(0x7f0000000280)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0xfffffffb, @local, 0x4, 0x3}, 0x80, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB], 0x18}, 0x4004080) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1c00000033000b12c25aa9cb8c2194f90124fc60100c034006", 0x19}], 0x1}, 0x40004) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES64=0x0, @ANYBLOB], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000040)="3c00000033000b1229ae3f7f03b261130124fc60100c03400b80ffff002000119215a2681cf6e50400003d490d20b735b16b6a44799406db26a57b35", 0x3c}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x0) 904.497691ms ago: executing program 0 (id=3603): bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x1, 0x3, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x30}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xd50, 0xfffffffffffffee0, &(0x7f0000000000)="259a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r1 = perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x0, 0x7fffffff, 0x7, 0x9, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000001040)={0x5, 0x80, 0x9, 0x8, 0x3, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9, 0x2, @perf_bp={0x0, 0x1}, 0x1aa63, 0x0, 0x7fffffff, 0x1, 0x8, 0x3, 0x7, 0x0, 0x7fffffff, 0x0, 0x7}, 0xffffffffffffffff, 0x0, r1, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000740)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x4}, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xffffffffffffff85, &(0x7f0000000080), 0x1}, 0x4004) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d006a10000000e8fe55a118001500060014b9c3600e1209000a00440000", 0x2f}], 0x1}, 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x30004081) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x200, 0x1}, 0x4420, 0x0, 0xc2ba, 0x9, 0x4000000, 0x1}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x30041, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x1001, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x9a) socket$kcm(0x11, 0xa, 0x300) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000880)={0x1, 0x58, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0000010000000000002000"/20, @ANYRES32=r4, @ANYRES32, @ANYBLOB="03000000000000000500"/28], 0x50) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) 885.999891ms ago: executing program 2 (id=3604): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x30f6, 0x0, 0x7, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0), 0x4) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x10, &(0x7f0000000000)=r3, 0x8) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={0x0, 0x0}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x18, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0xffffffff}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9199b948c832b61b, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xb, 0xffffffffffffffff, 0x0) r5 = getpid() r6 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x4}, r5, 0x0, r4, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r6, 0x2401, 0x80ffff) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) getpid() bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x30e0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r7) bpf$MAP_CREATE(0x0, 0x0, 0x48) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0f0000000000008000000000000300decc040100", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000fdffffff0500"/24, @ANYRES32, @ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002200000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000d000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r7, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="d2ff03076003008cb89e08f086dd", 0x0, 0x5, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffff7}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000f7ffffff000000000000000000000900000000000047771afd358c06efa3636e0b95ac9c10b00583e8d6d1d7f76d9b63d55fac6eef861bd07a972590ef228a2c6507dd0c0e07058389d3b359298e7a48ea3171414eb87f5313aded66c8c1262d6753c4be8352683d6584bb0f49fa2a77ef4ce6553beda51ceac4ed6abf50d42655d8aae84c4e2b15d3dcc4a9d9fc3e23ba7de07c1e4c5b9157e6749c1724"], 0x50) 874.019941ms ago: executing program 4 (id=3605): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r0) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x108282, 0xac5d, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) recvmsg$unix(r0, &(0x7f0000000d40)={0x0, 0x1802, 0x0}, 0x20) 687.620483ms ago: executing program 3 (id=3606): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000002480)={r2, 0x58, &(0x7f0000002400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000002500)={0xfffffffa, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000002580)={0x14, 0x7, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000e000000181100007a755cf3d2384ea80bd48a2c18f4c35f7054d25a56484b43417fa6fddd70721a25dbb1b6115265c458b070891b872c8083f0bb885dc8aaacc20b78114fe2bb62aab1fc33", @ANYRES32=r2, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x1, 0x1000, &(0x7f0000001400)=""/4096, 0x41000, 0x55, '\x00', r3, @fallback, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f00000024c0)={0x3, 0xe, 0x10, 0x6}, 0x10, r4, r2, 0x4, 0x0, &(0x7f0000002540)=[{0x2, 0x4, 0x1, 0x3}, {0x2, 0x1, 0x10}, {0x2, 0x5, 0x7}, {0x5, 0x4, 0x7, 0x2}], 0x10, 0x32c}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x80) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) openat$cgroup(r5, &(0x7f0000001140)='syz0\x00', 0x200002, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000022003505d25a806f8c6394f90224fc60", 0x14}], 0x1}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000180)=ANY=[@ANYRES8=r1, @ANYBLOB="3ee901"], 0x9a) openat$cgroup_procs(r2, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000c40)=ANY=[@ANYBLOB="18030000000000000000000000000000851000000600000018100000", @ANYRES32, @ANYBLOB="00690000f6e9c21e2700cdca", @ANYRES32, @ANYBLOB="00000000000000008500000000000000950000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) 660.426573ms ago: executing program 1 (id=3607): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xdc, &(0x7f0000000380)=[{}], 0x8, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x2, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = getpid() r3 = perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xc, 0x7}, 0x8601, 0x2000000}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={r2, r3, 0x0, 0x1, &(0x7f0000000280)='\\{\x00'}, 0x12) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x5) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r9, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2160) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x100a19, 0xc8, 0x1, 0x0, 0x0, 0x9, 0xffc0}, 0x0, 0x2, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r13) recvmsg$unix(r12, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r14, &(0x7f0000000040)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce81e6972f00fe08000e40000200875a65969ff57b00ff020000000000000000000000000001", @ANYRES8=r11], 0xfdef) r15 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r15, 0x0, 0x0) socket$kcm(0x10, 0x7, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x301}, 0x90) 603.659704ms ago: executing program 2 (id=3608): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x81f, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x4}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe40, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x6b, 0x60000000}, 0x2c) 464.804846ms ago: executing program 0 (id=3609): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x8}, 0x10c006, 0xac5d, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[], 0x50) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1c, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_bp={0x0, 0xf}, 0x102303, 0xe8, 0x0, 0x4, 0x0, 0x8, 0xffff, 0x0, 0x0, 0x0, 0x8001}, 0xffffffffffffffff, 0x0, r0, 0x0) 464.545875ms ago: executing program 3 (id=3610): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000680)="e88536", 0x3}], 0x1, &(0x7f0000002640)=ANY=[@ANYBLOB="10000000006636674410d83c3d00000010000000000000000100000002000000"], 0x20}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$kcm(0xa, 0x3, 0x11) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000780)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x2a, &(0x7f0000000100)=r3, 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000000)={r1, r3}) recvmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r4 = socket$kcm(0x2, 0x1, 0x84) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x14690, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xb3a, 0xffffffffffbffff8}, 0x85e, 0x0, 0x6, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, 0x0) 447.099666ms ago: executing program 4 (id=3611): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020080ffffff180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{0x0}], 0x1}, 0x2040045) r0 = socket$kcm(0x10, 0x5, 0x0) (async, rerun: 32) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x120a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2b8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async, rerun: 32) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90f24fc60", 0x8c0}]}, 0x0) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000400000000000000008500000030000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002a0000009500"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e00800000000000000009b6f5bec", 0x0, 0xe160, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e00e020023200b02d25a80ef8cee795c7e6292d4da9d0d", 0x17}], 0x1}, 0x0) (async, rerun: 64) socketpair(0x2, 0x800, 0x2, &(0x7f00000001c0)) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) 367.028576ms ago: executing program 2 (id=3612): perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x5, 0xffffffffffffffff, 0x0) socketpair(0xa, 0x3, 0xff, &(0x7f0000000000)) socket$kcm(0x2, 0x1, 0x84) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x20}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0x18000000000002a0, 0x7ee, 0x0, &(0x7f0000000e80)="b9e403c6631e39495aa05dc7cf1c", 0x0, 0x7ab, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 0s ago: executing program 4 (id=3613): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x80, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0xff, 0x0, 0x0, 0x9, 0x0, 0x4, 0x5e6f8a6df01f948b, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x6}, 0x42, 0xc5, 0x0, 0x4, 0x9, 0x0, 0x214, 0x0, 0x2, 0x0, 0x400003ff}, 0x0, 0x7, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2000000}, 0x94) socket$kcm(0xa, 0x3, 0x3a) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x3, 0x0, 0x3, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@llc={0x1a, 0x110, 0x8, 0x10, 0x3, 0xbc, @broadcast}, 0x80, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000001001000001", @ANYRESHEX=r0, @ANYRESHEX=r2, @ANYRES8=r1], 0x18}, 0x0) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e21, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x20044010) close(r2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0035b69fdb90d984"], 0x0, 0x26}, 0x28) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x9, &(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x91, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0xd8, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000019c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10000}, 0x28) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={0x1}, 0x4) socketpair$unix(0x1, 0x5, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce8186762900fe08000e40000200875a65969ff57b00ff020000000000000000"], 0xfdef) r5 = bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="1b000000ff7f0000090000000c00000001a00100", @ANYRES32, @ANYBLOB="0300000000000000000000000000000000000000eb28b8115ac99192f57ee2d40be034d928bf0417108f76efd7957b6baa5d2ea08f934ab9e14583efb4236a4b", @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="01000000050000000100"/20, @ANYRES32, @ANYBLOB, @ANYRES32=r5, @ANYBLOB], 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0500000001f01f00350100007b00000001000000", @ANYRES32, @ANYBLOB="feffffff00000000004000006d1f4ec0e6bd471f", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYRES16=r6], &(0x7f00000001c0)='GPL\x00', 0x1000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r8 = openat$cgroup_devices(r7, &(0x7f0000000180)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r8, &(0x7f0000000080)=ANY=[@ANYBLOB='c *:', @ANYRESDEC], 0x1d) kernel console output (not intermixed with test programs): AX: ffffffffffffffda RBX: 00007f45dc215fa0 RCX: 00007f45dbf9cdd9 [ 1008.205703][T14196] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1008.213707][T14196] RBP: 00007f45dcf26090 R08: 0000000000000000 R09: 0000000000000000 [ 1008.221709][T14196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1008.229708][T14196] R13: 00007f45dc216038 R14: 00007f45dc215fa0 R15: 00007ffe6b3d4478 [ 1008.237722][T14196] [ 1008.264974][ T6048] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1008.275899][ T6048] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1008.297015][ T6048] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1008.338347][ T6048] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1008.359772][ T6048] bridge0: port 3(team0) entered disabled state [ 1008.404229][ T6048] device bridge_slave_1 left promiscuous mode [ 1008.425917][ T6048] bridge0: port 2(bridge_slave_1) entered disabled state [ 1008.441113][ T6048] device bridge_slave_0 left promiscuous mode [ 1008.447564][ T6048] bridge0: port 1(bridge_slave_0) entered disabled state [ 1008.522908][ T6048] device veth1_macvtap left promiscuous mode [ 1008.542430][ T6048] device veth1_vlan left promiscuous mode [ 1008.561190][ T6048] device veth0_vlan left promiscuous mode [ 1008.748319][T14207] delete_channel: no stack [ 1009.104206][ T4296] Bluetooth: hci2: command 0x040f tx timeout [ 1009.252567][ T6048] device macvlan0 left promiscuous mode [ 1009.272767][ T6048] team0 (unregistering): Port device macvlan0 removed [ 1009.618923][ T6048] device team_slave_1 left promiscuous mode [ 1009.625804][ T6048] team0 (unregistering): Port device team_slave_1 removed [ 1009.686203][ T6048] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1009.724419][ T6048] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1009.977403][ T6048] bond0 (unregistering): Released all slaves [ 1010.212873][T14223] delete_channel: no stack [ 1010.475034][T14233] netlink: 'syz.3.3055': attribute type 2 has an invalid length. [ 1010.492990][T14233] netlink: 'syz.3.3055': attribute type 8 has an invalid length. [ 1010.515310][T14233] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3055'. [ 1010.535120][T14235] netlink: 'syz.2.3057': attribute type 6 has an invalid length. [ 1010.543015][T14235] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.3057'. [ 1010.586162][T14230] delete_channel: no stack [ 1010.652900][T14067] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1010.695057][T14067] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1010.726920][T14067] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1010.746761][T14067] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1010.909150][T14242] netlink: 'syz.3.3059': attribute type 3 has an invalid length. [ 1010.931676][T14242] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.3059'. [ 1011.006480][T14067] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1011.056584][T14245] delete_channel: no stack [ 1011.089822][ T6060] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1011.110066][ T6060] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1011.148645][T14067] 8021q: adding VLAN 0 to HW filter on device team0 [ 1011.167768][ T6060] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1011.183676][T13881] Bluetooth: hci2: command 0x0419 tx timeout [ 1011.203388][ T6060] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1011.245507][ T6060] bridge0: port 1(bridge_slave_0) entered blocking state [ 1011.252715][ T6060] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1011.314829][ T6060] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1011.368546][ T6060] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1011.399847][ T6060] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1011.434142][ T6060] bridge0: port 2(bridge_slave_1) entered blocking state [ 1011.441357][ T6060] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1011.483943][ T6060] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1011.503215][ T6060] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1011.519312][ T6060] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1011.545254][ T6060] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1011.566437][ T6060] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1011.589553][T14261] netlink: 'syz.2.3062': attribute type 3 has an invalid length. [ 1011.687661][T14261] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3062'. [ 1011.778971][ T6051] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1011.801659][ T6051] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1011.821621][ T6051] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1011.842398][ T6051] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1011.860653][ T6051] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1011.881594][ T6051] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1011.903190][T14067] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1011.943774][T14272] delete_channel: no stack [ 1012.136340][T14264] device pim6reg1 entered promiscuous mode [ 1012.261646][T14282] netlink: 'syz.0.3068': attribute type 2 has an invalid length. [ 1012.283488][T14282] netlink: 'syz.0.3068': attribute type 8 has an invalid length. [ 1012.298534][T14282] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3068'. [ 1012.590608][T14281] delete_channel: no stack [ 1012.657631][T14295] delete_channel: no stack [ 1013.132149][ T6060] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1013.142687][ T6060] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1013.189858][T14067] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1013.574809][T14323] delete_channel: no stack [ 1013.737545][T14327] netlink: 'syz.3.3079': attribute type 3 has an invalid length. [ 1013.762323][T14327] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3079'. [ 1014.116399][T14344] FAULT_INJECTION: forcing a failure. [ 1014.116399][T14344] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1014.154962][T14345] netlink: 'syz.0.3082': attribute type 2 has an invalid length. [ 1014.174817][T14344] CPU: 0 PID: 14344 Comm: syz.1.3084 Not tainted syzkaller #0 [ 1014.182345][T14344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1014.184040][T14345] netlink: 'syz.0.3082': attribute type 8 has an invalid length. [ 1014.192414][T14344] Call Trace: [ 1014.203485][T14344] [ 1014.206447][T14344] dump_stack_lvl+0x188/0x24e [ 1014.211199][T14344] ? show_regs_print_info+0x12/0x12 [ 1014.216454][T14344] ? load_image+0x400/0x400 [ 1014.221011][T14344] ? __might_fault+0xa6/0x120 [ 1014.225740][T14344] should_fail_ex+0x399/0x4d0 [ 1014.226957][T14345] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3082'. [ 1014.230441][T14344] copyin+0x1b/0x120 [ 1014.243394][T14344] _copy_from_iter+0x447/0x1130 [ 1014.248291][T14344] ? copyout_mc+0x110/0x110 [ 1014.252836][T14344] ? __virt_addr_valid+0x188/0x540 [ 1014.257988][T14344] ? __virt_addr_valid+0x188/0x540 [ 1014.263143][T14344] ? __virt_addr_valid+0x465/0x540 [ 1014.268300][T14344] ? __check_object_size+0x500/0xa40 [ 1014.273624][T14344] kcm_sendmsg+0xc26/0x2310 [ 1014.278206][T14344] ? kcm_getsockopt+0x280/0x280 [ 1014.283101][T14344] ? aa_sock_msg_perm+0x94/0x150 [ 1014.288066][T14344] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1014.293377][T14344] ? security_socket_sendmsg+0x7c/0xa0 [ 1014.298874][T14344] ? kcm_getsockopt+0x280/0x280 [ 1014.303748][T14344] ____sys_sendmsg+0x5be/0x970 [ 1014.308546][T14344] ? __sys_sendmsg_sock+0x30/0x30 [ 1014.313594][T14344] ? __import_iovec+0x315/0x500 [ 1014.318492][T14344] ? import_iovec+0x6f/0xa0 [ 1014.323016][T14344] ___sys_sendmsg+0x2a2/0x360 [ 1014.327723][T14344] ? __sys_sendmsg+0x290/0x290 [ 1014.332528][T14344] ? __lock_acquire+0x7d10/0x7d10 [ 1014.337591][T14344] __se_sys_sendmsg+0x1bb/0x2a0 [ 1014.342485][T14344] ? __x64_sys_sendmsg+0x80/0x80 [ 1014.347469][T14344] ? lockdep_hardirqs_on+0x94/0x140 [ 1014.352691][T14344] do_syscall_64+0x4c/0xa0 [ 1014.357134][T14344] ? clear_bhb_loop+0x60/0xb0 [ 1014.361830][T14344] ? clear_bhb_loop+0x60/0xb0 [ 1014.366538][T14344] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1014.372454][T14344] RIP: 0033:0x7f7ca459cdd9 [ 1014.376896][T14344] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1014.396546][T14344] RSP: 002b:00007f7ca54c9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1014.405061][T14344] RAX: ffffffffffffffda RBX: 00007f7ca4815fa0 RCX: 00007f7ca459cdd9 [ 1014.413047][T14344] RDX: 0000000000000000 RSI: 0000200000002080 RDI: 0000000000000003 [ 1014.421039][T14344] RBP: 00007f7ca54c9090 R08: 0000000000000000 R09: 0000000000000000 [ 1014.429055][T14344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1014.437045][T14344] R13: 00007f7ca4816038 R14: 00007f7ca4815fa0 R15: 00007ffcf0236578 [ 1014.445056][T14344] [ 1014.504384][T14338] delete_channel: no stack [ 1014.551878][ T6052] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1014.570903][ T6052] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1014.632606][ T6036] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1014.683023][ T6036] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1014.705453][ T6036] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1014.744261][ T6036] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1014.765713][T14067] device veth0_vlan entered promiscuous mode [ 1014.792149][T14067] device veth1_vlan entered promiscuous mode [ 1014.887353][T14359] netlink: 'syz.3.3090': attribute type 3 has an invalid length. [ 1014.932768][T14359] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3090'. [ 1014.933491][ T6052] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1014.976024][ T6052] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1015.004986][ T6052] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1015.042349][ T6052] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1015.076687][T14067] device veth0_macvtap entered promiscuous mode [ 1015.102094][T14365] delete_channel: no stack [ 1015.119605][T14067] device veth1_macvtap entered promiscuous mode [ 1015.251666][T14067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1015.300759][T14067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1015.330091][T14067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1015.353270][T14067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1015.384466][T14067] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1015.425611][ T6046] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1015.437555][ T6046] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1015.466153][ T6046] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1015.491532][ T6046] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1015.570337][T14067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1015.623016][T14067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1015.632496][T14382] netlink: 'syz.3.3095': attribute type 3 has an invalid length. [ 1015.646111][T14382] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3095'. [ 1015.678010][T14067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1015.709486][T14067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1015.734223][T14067] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1015.742737][T14381] device pim6reg1 entered promiscuous mode [ 1015.826790][T14385] netlink: 'syz.0.3096': attribute type 2 has an invalid length. [ 1015.848405][T14385] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3096'. [ 1015.882206][ T6048] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1015.908654][ T6048] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1015.917647][T14384] delete_channel: no stack [ 1015.956250][T14067] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1015.972690][T14067] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1016.002348][T14067] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1016.013596][T14067] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1016.368420][T14407] delete_channel: no stack [ 1016.510673][ T6052] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1016.551284][ T6052] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1016.601824][ T6048] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1016.636343][ T6052] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1016.659451][ T6052] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1016.670049][ T6046] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1016.810624][T13881] Bluetooth: hci2: unexpected event 0x04 length: 151 > 10 [ 1017.045087][T14426] validate_nla: 1 callbacks suppressed [ 1017.045226][T14426] netlink: 'syz.3.3108': attribute type 2 has an invalid length. [ 1017.093729][T14426] netlink: 'syz.3.3108': attribute type 8 has an invalid length. [ 1017.111816][T14426] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3108'. [ 1017.193992][T14425] delete_channel: no stack [ 1017.616646][T13881] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1017.629231][T13881] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1017.637328][T13881] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1017.649892][T13881] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1017.657896][T13881] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1017.667128][T13881] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1017.698009][T14446] delete_channel: no stack [ 1017.800793][ T6036] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1017.957188][ T6036] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1018.070530][ T6036] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1018.116401][T13881] Bluetooth: hci0: unexpected event 0x04 length: 151 > 10 [ 1018.201435][ T6036] device netdevsim0 left promiscuous mode [ 1018.254579][ T6036] team0: Port device netdevsim0 removed [ 1018.262207][ T6036] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1018.518880][T14468] netlink: 'syz.2.3120': attribute type 2 has an invalid length. [ 1018.538697][T14468] netlink: 'syz.2.3120': attribute type 8 has an invalid length. [ 1018.564082][T14468] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3120'. [ 1018.582514][T14469] device pim6reg1 entered promiscuous mode [ 1018.628826][T14466] delete_channel: no stack [ 1018.865375][ T4296] Bluetooth: hci2: command 0x0409 tx timeout [ 1018.896775][T14480] delete_channel: no stack [ 1018.974192][T14441] chnl_net:caif_netlink_parms(): no params data found [ 1019.656785][T14441] bridge0: port 1(bridge_slave_0) entered blocking state [ 1019.707189][T14441] bridge0: port 1(bridge_slave_0) entered disabled state [ 1019.720465][T14441] device bridge_slave_0 entered promiscuous mode [ 1019.749747][ T4296] Bluetooth: hci4: command 0x0409 tx timeout [ 1019.888764][T14441] bridge0: port 2(bridge_slave_1) entered blocking state [ 1019.906046][T14441] bridge0: port 2(bridge_slave_1) entered disabled state [ 1019.930745][T14441] device bridge_slave_1 entered promiscuous mode [ 1020.002507][T14441] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1020.040505][T14441] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1020.107011][T14521] netlink: 'syz.4.3134': attribute type 2 has an invalid length. [ 1020.133784][T14521] netlink: 'syz.4.3134': attribute type 8 has an invalid length. [ 1020.145774][ T4296] Bluetooth: hci0: command 0x0409 tx timeout [ 1020.167168][T14521] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3134'. [ 1020.211055][T14519] delete_channel: no stack [ 1020.286371][T14528] delete_channel: no stack [ 1020.324729][T14441] team0: Port device team_slave_0 added [ 1020.332709][T14441] team0: Port device team_slave_1 added [ 1020.361682][ T4296] Bluetooth: hci1: unexpected event 0x04 length: 151 > 10 [ 1020.451992][T14441] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1020.484128][T14441] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1020.559084][T14441] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1020.626640][T14441] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1020.645061][T14441] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1020.715770][T14441] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1021.419836][T14441] device hsr_slave_0 entered promiscuous mode [ 1021.439850][T14441] device hsr_slave_1 entered promiscuous mode [ 1021.493896][T14441] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1021.544203][T14441] Cannot create hsr debugfs directory [ 1021.825542][T13881] Bluetooth: hci4: command 0x041b tx timeout [ 1022.258743][T14572] netlink: 'syz.1.3149': attribute type 2 has an invalid length. [ 1022.270726][T14572] netlink: 'syz.1.3149': attribute type 8 has an invalid length. [ 1022.303130][T14572] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3149'. [ 1022.367785][T14571] delete_channel: no stack [ 1022.385647][T13881] Bluetooth: hci1: command 0x0409 tx timeout [ 1022.439812][T14574] delete_channel: no stack [ 1022.468000][ T6036] device veth0_to_team left promiscuous mode [ 1022.483261][ T6036] Ÿë: port 1(veth0_to_team) entered disabled state [ 1022.507252][ T6036] device hsr_slave_0 left promiscuous mode [ 1022.524175][ T6036] device hsr_slave_1 left promiscuous mode [ 1022.533808][ T6036] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1022.541274][ T6036] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1022.569534][ T6036] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1022.595464][ T6036] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1022.620919][ T6036] bridge0: port 3(team0) entered disabled state [ 1022.639604][ T6036] bridge0: port 2(bridge_slave_1) entered disabled state [ 1022.681465][ T6036] device bridge_slave_0 left promiscuous mode [ 1022.705354][ T6036] bridge0: port 1(bridge_slave_0) entered disabled state [ 1022.754052][ T6036] device veth1_macvtap left promiscuous mode [ 1022.768150][ T6036] device veth0_macvtap left promiscuous mode [ 1022.774422][ T6036] device veth1_vlan left promiscuous mode [ 1022.780256][ T6036] device veth0_vlan left promiscuous mode [ 1023.903756][T13881] Bluetooth: hci4: command 0x040f tx timeout [ 1025.983986][T13881] Bluetooth: hci4: command 0x0419 tx timeout [ 1026.172161][T14611] delete_channel: no stack [ 1026.207975][T14606] delete_channel: no stack [ 1026.482418][ T6036] device team_slave_1 left promiscuous mode [ 1026.492521][ T6036] team0 (unregistering): Port device team_slave_1 removed [ 1026.515097][T14619] netlink: 'syz.4.3165': attribute type 29 has an invalid length. [ 1026.558873][ T6036] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1026.599133][ T6036] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1026.848746][ T6036] bond0 (unregistering): Released all slaves [ 1026.978494][T14610] netlink: 'syz.2.3161': attribute type 2 has an invalid length. [ 1026.998625][T14610] netlink: 'syz.2.3161': attribute type 8 has an invalid length. [ 1027.014069][T14610] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3161'. [ 1027.053790][T14619] netlink: 'syz.4.3165': attribute type 29 has an invalid length. [ 1027.171245][T14618] netlink: 'syz.4.3165': attribute type 29 has an invalid length. [ 1027.310108][T14631] netlink: 'syz.2.3168': attribute type 2 has an invalid length. [ 1027.728953][T14631] device 0 entered promiscuous mode [ 1028.085313][T14441] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1028.154458][T14441] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1028.194813][T14651] delete_channel: no stack [ 1028.214554][T14441] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1028.353641][T14441] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1028.429717][T14658] device pim6reg1 entered promiscuous mode [ 1028.693894][T14667] netlink: 'syz.4.3177': attribute type 2 has an invalid length. [ 1028.701775][T14667] netlink: 'syz.4.3177': attribute type 8 has an invalid length. [ 1028.767116][T14667] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3177'. [ 1028.868257][T14441] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1028.885428][ T6054] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1028.893305][ T6054] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1028.923216][T14441] 8021q: adding VLAN 0 to HW filter on device team0 [ 1028.958483][ T6054] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1028.976825][ T6054] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1028.999817][ T6054] bridge0: port 1(bridge_slave_0) entered blocking state [ 1029.007136][ T6054] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1029.049904][ T6054] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1029.059880][ T6054] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1029.076833][ T6054] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1029.089994][ T6054] bridge0: port 2(bridge_slave_1) entered blocking state [ 1029.097315][ T6054] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1029.112936][ T6054] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1029.137538][ T6054] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1029.148130][ T6054] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1029.167282][ T6054] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1029.250511][T14662] delete_channel: no stack [ 1031.563390][T14441] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1031.593592][T14441] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1031.627901][ T6054] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1031.637683][ T6054] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1031.647743][ T6054] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1031.665236][ T6054] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1031.694486][ T6054] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1031.705323][ T6054] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1031.732610][ T6054] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1031.748715][ T6054] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1032.608377][ T6060] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1032.625394][ T6060] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1032.659989][T14441] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1032.712385][ T6048] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1032.732078][ T6048] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1032.821877][ T6048] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1032.835948][ T6048] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1032.857792][T14441] device veth0_vlan entered promiscuous mode [ 1032.869341][ T6048] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1032.888283][ T6048] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1032.927126][T14441] device veth1_vlan entered promiscuous mode [ 1033.086957][T14709] delete_channel: no stack [ 1033.160909][T14441] device veth0_macvtap entered promiscuous mode [ 1033.176624][ T6054] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1033.220660][ T6054] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1033.229677][ T6054] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1033.242481][ T6054] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1033.391940][T14724] FAULT_INJECTION: forcing a failure. [ 1033.391940][T14724] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1033.438316][T14724] CPU: 1 PID: 14724 Comm: syz.2.3190 Not tainted syzkaller #0 [ 1033.446026][T14724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1033.456126][T14724] Call Trace: [ 1033.459441][T14724] [ 1033.462429][T14724] dump_stack_lvl+0x188/0x24e [ 1033.467156][T14724] ? show_regs_print_info+0x12/0x12 [ 1033.472419][T14724] ? load_image+0x400/0x400 [ 1033.476964][T14724] ? __lock_acquire+0x7d10/0x7d10 [ 1033.482037][T14724] should_fail_ex+0x399/0x4d0 [ 1033.486763][T14724] _copy_from_user+0x2c/0x170 [ 1033.491504][T14724] __sys_bpf+0x2ea/0x780 [ 1033.495803][T14724] ? bpf_link_show_fdinfo+0x380/0x380 [ 1033.501251][T14724] ? lock_chain_count+0x20/0x20 [ 1033.506245][T14724] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1033.512279][T14724] __x64_sys_bpf+0x78/0x90 [ 1033.516738][T14724] do_syscall_64+0x4c/0xa0 [ 1033.521200][T14724] ? clear_bhb_loop+0x60/0xb0 [ 1033.525948][T14724] ? clear_bhb_loop+0x60/0xb0 [ 1033.530698][T14724] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1033.536665][T14724] RIP: 0033:0x7f45dbf9cdd9 [ 1033.541117][T14724] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1033.560771][T14724] RSP: 002b:00007f45dcf05028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1033.569229][T14724] RAX: ffffffffffffffda RBX: 00007f45dc216090 RCX: 00007f45dbf9cdd9 [ 1033.577234][T14724] RDX: 0000000000000050 RSI: 0000200000000d80 RDI: 000000000000000a [ 1033.585240][T14724] RBP: 00007f45dcf05090 R08: 0000000000000000 R09: 0000000000000000 [ 1033.593264][T14724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1033.601283][T14724] R13: 00007f45dc216128 R14: 00007f45dc216090 R15: 00007ffe6b3d4478 [ 1033.609367][T14724] [ 1033.969923][T14715] delete_channel: no stack [ 1036.141402][T14441] device veth1_macvtap entered promiscuous mode [ 1036.158875][ T6054] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1036.170146][ T6054] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1036.184117][T14723] netlink: 'syz.3.3189': attribute type 2 has an invalid length. [ 1036.191901][T14723] netlink: 'syz.3.3189': attribute type 8 has an invalid length. [ 1036.210943][T14723] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3189'. [ 1036.266309][T14441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1036.286814][T14441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1036.311473][T14441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1036.336395][T14441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1036.374915][T14441] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1036.411364][ T6054] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1036.421055][ T6054] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1036.536110][T14441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1036.557478][T14441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1036.592264][T14441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1036.608918][T14441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1036.621139][T14441] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1036.635609][T14747] device pim6reg1 entered promiscuous mode [ 1036.748811][ T6052] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1036.772161][ T6052] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1036.842887][T14441] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1036.864246][T14441] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1036.873012][T14441] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1036.916016][T14441] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1037.022918][T14762] delete_channel: no stack [ 1037.560728][ T6048] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1037.589177][ T6048] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1037.620779][ T6060] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1037.722447][ T6060] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1037.740953][ T6060] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1037.761619][ T6046] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1037.938335][T14789] netlink: 'syz.4.3205': attribute type 2 has an invalid length. [ 1037.997690][T14789] netlink: 'syz.4.3205': attribute type 8 has an invalid length. [ 1038.078690][T14789] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3205'. [ 1038.148796][T14787] netlink: 'syz.0.3107': attribute type 3 has an invalid length. [ 1038.166465][T14787] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3107'. [ 1038.718793][ T4296] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1038.727810][ T4296] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1038.738145][ T4296] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1038.746600][ T4296] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1038.759140][ T4296] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1038.766590][ T4296] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1039.195699][T14803] chnl_net:caif_netlink_parms(): no params data found [ 1039.373436][T14803] bridge0: port 1(bridge_slave_0) entered blocking state [ 1039.397797][T14803] bridge0: port 1(bridge_slave_0) entered disabled state [ 1039.419187][T14803] device bridge_slave_0 entered promiscuous mode [ 1039.447417][T14803] bridge0: port 2(bridge_slave_1) entered blocking state [ 1039.467557][T14803] bridge0: port 2(bridge_slave_1) entered disabled state [ 1039.481598][T14803] device bridge_slave_1 entered promiscuous mode [ 1039.527021][T14803] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1039.578796][T14803] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1039.631557][T14803] team0: Port device team_slave_0 added [ 1039.648321][T14803] team0: Port device team_slave_1 added [ 1039.739210][T14803] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1039.758620][T14803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1039.831077][T14803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1039.868410][T14803] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1039.875579][T14803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1039.910250][T14803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1040.768874][T14803] device hsr_slave_0 entered promiscuous mode [ 1040.798117][T14803] device hsr_slave_1 entered promiscuous mode [ 1040.813964][T14784] delete_channel: no stack [ 1040.833905][T14803] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1040.841529][T14803] Cannot create hsr debugfs directory [ 1040.863709][ T4296] Bluetooth: hci3: command 0x0409 tx timeout [ 1041.440519][T14847] delete_channel: no stack [ 1041.484474][T14803] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1041.676860][T14803] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1041.847019][T14803] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1041.976795][T14803] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1042.148416][T14871] FAULT_INJECTION: forcing a failure. [ 1042.148416][T14871] name failslab, interval 1, probability 0, space 0, times 0 [ 1042.214499][T14866] netlink: 'syz.1.3218': attribute type 3 has an invalid length. [ 1042.223243][T14866] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3218'. [ 1042.243744][T14871] CPU: 0 PID: 14871 Comm: syz.2.3219 Not tainted syzkaller #0 [ 1042.251257][T14871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1042.261358][T14871] Call Trace: [ 1042.264667][T14871] [ 1042.267627][T14871] dump_stack_lvl+0x188/0x24e [ 1042.272348][T14871] ? show_regs_print_info+0x12/0x12 [ 1042.277581][T14871] ? load_image+0x400/0x400 [ 1042.282118][T14871] ? __might_sleep+0xd0/0xd0 [ 1042.286741][T14871] ? __lock_acquire+0x7d10/0x7d10 [ 1042.291801][T14871] ? mark_lock+0x94/0x320 [ 1042.296165][T14871] should_fail_ex+0x399/0x4d0 [ 1042.300870][T14871] should_failslab+0x5/0x20 [ 1042.305400][T14871] slab_pre_alloc_hook+0x59/0x310 [ 1042.310458][T14871] ? ip_options_get+0x4c/0x430 [ 1042.315259][T14871] __kmem_cache_alloc_node+0x4f/0x260 [ 1042.320667][T14871] ? ip_options_get+0x4c/0x430 [ 1042.325459][T14871] __kmalloc+0xa0/0x240 [ 1042.329655][T14871] ip_options_get+0x4c/0x430 [ 1042.334277][T14871] ? __sanitizer_cov_trace_switch+0x64/0xe0 [ 1042.340221][T14871] do_ip_setsockopt+0x1707/0x2ed0 [ 1042.345303][T14871] ? ip_sock_set_pktinfo+0x60/0x60 [ 1042.350464][T14871] ? __mutex_lock+0x1ab/0xaf0 [ 1042.355183][T14871] ? lock_chain_count+0x20/0x20 [ 1042.360073][T14871] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1042.366254][T14871] ? smc_setsockopt+0x18c/0xb80 [ 1042.371139][T14871] ? mutex_lock_nested+0x10/0x10 [ 1042.376114][T14871] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1042.382314][T14871] ip_setsockopt+0x5d/0x100 [ 1042.386874][T14871] ? sock_common_recvmsg+0x190/0x190 [ 1042.392211][T14871] smc_setsockopt+0x235/0xb80 [ 1042.396927][T14871] ? smc_shutdown+0x9a0/0x9a0 [ 1042.401633][T14871] ? aa_sock_opt_perm+0x74/0x100 [ 1042.406617][T14871] ? bpf_lsm_socket_setsockopt+0x5/0x10 [ 1042.412219][T14871] ? security_socket_setsockopt+0x7a/0xa0 [ 1042.418000][T14871] ? smc_shutdown+0x9a0/0x9a0 [ 1042.422714][T14871] __sys_setsockopt+0x2bf/0x3d0 [ 1042.427608][T14871] __x64_sys_setsockopt+0xb1/0xc0 [ 1042.432675][T14871] do_syscall_64+0x4c/0xa0 [ 1042.437128][T14871] ? clear_bhb_loop+0x60/0xb0 [ 1042.441834][T14871] ? clear_bhb_loop+0x60/0xb0 [ 1042.446544][T14871] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1042.452476][T14871] RIP: 0033:0x7f45dbf9cdd9 [ 1042.456927][T14871] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1042.476567][T14871] RSP: 002b:00007f45dcf26028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1042.485042][T14871] RAX: ffffffffffffffda RBX: 00007f45dc215fa0 RCX: 00007f45dbf9cdd9 [ 1042.493033][T14871] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000005 [ 1042.501025][T14871] RBP: 00007f45dcf26090 R08: 0000000000000000 R09: 0000000000000000 [ 1042.509019][T14871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1042.517009][T14871] R13: 00007f45dc216038 R14: 00007f45dc215fa0 R15: 00007ffe6b3d4478 [ 1042.525023][T14871] [ 1042.943939][ T4296] Bluetooth: hci3: command 0x041b tx timeout [ 1044.891891][T14869] netlink: 'syz.0.3217': attribute type 2 has an invalid length. [ 1044.899843][T14869] netlink: 'syz.0.3217': attribute type 8 has an invalid length. [ 1044.908574][T14863] delete_channel: no stack [ 1044.919226][T14869] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3217'. [ 1045.024199][ T4296] Bluetooth: hci3: command 0x040f tx timeout [ 1045.286893][T14803] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1045.334996][T14803] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1045.348261][T14803] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1045.410146][T14893] delete_channel: no stack [ 1045.439193][T14803] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1045.866156][T14912] netlink: 'syz.2.3231': attribute type 3 has an invalid length. [ 1045.888261][T14912] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3231'. [ 1045.952085][T14803] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1046.016613][ T4296] Bluetooth: hci2: unexpected event 0x04 length: 151 > 10 [ 1046.061655][T14803] 8021q: adding VLAN 0 to HW filter on device team0 [ 1046.135600][ T6051] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1046.161579][ T6051] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1047.103784][T13881] Bluetooth: hci3: command 0x0419 tx timeout [ 1048.064015][T13881] Bluetooth: hci2: command 0x0409 tx timeout [ 1049.170269][ T6048] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1049.185366][ T6048] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1049.194543][ T6048] bridge0: port 1(bridge_slave_0) entered blocking state [ 1049.201674][ T6048] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1049.210372][ T6048] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1049.233356][ T6048] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1049.244174][ T6048] bridge0: port 2(bridge_slave_1) entered blocking state [ 1049.251290][ T6048] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1049.260154][T14920] netlink: 'syz.2.3233': attribute type 2 has an invalid length. [ 1049.269588][T14920] netlink: 'syz.2.3233': attribute type 8 has an invalid length. [ 1049.278424][T14918] delete_channel: no stack [ 1049.283403][T14920] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3233'. [ 1049.301207][ T6048] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1049.357575][ T6048] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1049.367776][ T6048] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1049.378443][ T6048] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1049.397011][ T6048] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1049.423297][ T6048] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1049.439278][ T6048] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1049.520809][ T6048] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1049.538899][ T6048] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1049.560010][ T6048] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1049.579887][ T6048] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1049.597224][ T6048] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1049.620962][ T6036] device veth0_to_team left promiscuous mode [ 1049.645079][ T6036] Ÿë: port 1(veth0_to_team) entered disabled state [ 1049.672831][ T6036] device hsr_slave_0 left promiscuous mode [ 1049.680354][ T6036] device hsr_slave_1 left promiscuous mode [ 1049.687397][ T6036] bridge0: port 3(team0) entered disabled state [ 1049.696156][ T6036] device bridge_slave_1 left promiscuous mode [ 1049.702602][ T6036] bridge0: port 2(bridge_slave_1) entered disabled state [ 1049.711743][ T6036] device bridge_slave_0 left promiscuous mode [ 1049.718187][ T6036] bridge0: port 1(bridge_slave_0) entered disabled state [ 1049.769573][ T6036] device veth1_macvtap left promiscuous mode [ 1049.777971][ T6036] device veth1_vlan left promiscuous mode [ 1049.800506][ T6036] device veth0_vlan left promiscuous mode [ 1049.814187][T14935] delete_channel: no stack [ 1050.133395][T14945] netlink: 'syz.1.3242': attribute type 3 has an invalid length. [ 1050.154211][T14945] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3242'. [ 1053.465147][T14951] delete_channel: no stack [ 1053.582476][ T6036] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 1053.621856][ T6036] device team_slave_1 left promiscuous mode [ 1053.631978][ T6036] team0 (unregistering): Port device team_slave_1 removed [ 1053.697149][ T6036] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1053.736267][ T6036] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1053.975557][ T6036] bond0 (unregistering): Released all slaves [ 1054.100013][T14803] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1054.114232][T14924] device pim6reg1 entered promiscuous mode [ 1054.510679][T14953] netlink: 'syz.0.3246': attribute type 2 has an invalid length. [ 1054.524731][T14953] netlink: 'syz.0.3246': attribute type 8 has an invalid length. [ 1054.533340][T14953] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3246'. [ 1054.546226][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.552767][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.800735][T14966] delete_channel: no stack [ 1055.262411][ T6046] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1055.326790][ T6046] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1055.355822][T14803] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1055.433945][T14982] netlink: 'syz.1.3256': attribute type 3 has an invalid length. [ 1055.437121][ T6052] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1055.443453][T14982] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3256'. [ 1055.477204][ T6052] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1055.527339][ T6046] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1055.545482][ T6046] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1055.578184][T14803] device veth0_vlan entered promiscuous mode [ 1055.585417][ T6046] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1055.594258][ T6046] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1055.609786][T14803] device veth1_vlan entered promiscuous mode [ 1055.670900][ T6046] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1055.681240][ T6046] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1055.690340][ T6046] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1055.700521][ T6046] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1055.736140][T14803] device veth0_macvtap entered promiscuous mode [ 1055.809961][T14803] device veth1_macvtap entered promiscuous mode [ 1058.775789][T14990] delete_channel: no stack [ 1058.780499][T14996] netlink: 'syz.2.3261': attribute type 2 has an invalid length. [ 1058.795222][T14996] netlink: 'syz.2.3261': attribute type 8 has an invalid length. [ 1058.803150][T14996] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3261'. [ 1058.825968][ T6052] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1058.835296][T15000] delete_channel: no stack [ 1058.844804][ T6052] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1058.858761][T14803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1058.870323][T14803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1058.881082][T14803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1058.892003][T14803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1058.902452][T14803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1058.913466][T14803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1058.951613][T14803] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1058.983818][ T6052] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1058.998701][ T6052] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1059.016435][T14803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1059.032901][T14803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1059.052715][T14803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1059.073591][T14803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1059.083558][T14803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1059.106282][T14803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1059.136197][T14803] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1059.181052][ T6052] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1059.204470][ T6052] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1059.248792][T14803] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1059.268081][T14803] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1059.283661][T14803] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1059.292436][T14803] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1059.485876][ T6048] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1059.515919][ T6048] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1059.536720][ T6060] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1059.618857][ T6060] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1059.642591][ T6060] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1059.657412][T15020] netlink: 'syz.0.3269': attribute type 3 has an invalid length. [ 1059.743871][ T6060] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1059.771025][T15019] device pim6reg1 entered promiscuous mode [ 1059.793082][T15020] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3269'. [ 1063.803853][T15030] device pim6reg1 entered promiscuous mode [ 1063.849428][T15041] netlink: 'syz.0.3274': attribute type 2 has an invalid length. [ 1063.861735][T15041] netlink: 'syz.0.3274': attribute type 8 has an invalid length. [ 1063.882818][T15039] delete_channel: no stack [ 1063.888297][T15041] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3274'. [ 1064.222759][T15043] delete_channel: no stack [ 1064.558898][T15055] netlink: 'syz.3.3278': attribute type 3 has an invalid length. [ 1064.588496][T15055] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3278'. [ 1064.639015][T15049] device pim6reg1 entered promiscuous mode [ 1064.681049][T13881] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1064.691452][T13881] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1064.713719][T13881] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1064.723553][T13881] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1064.731807][T13881] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1064.739285][T13881] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1065.541210][ T6052] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1065.649130][ T6052] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1065.763119][ T6052] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1065.844407][ T6052] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1065.887438][T15056] chnl_net:caif_netlink_parms(): no params data found [ 1065.971574][T15081] netlink: 17023 bytes leftover after parsing attributes in process `syz.3.3284'. [ 1066.012782][T15080] device pim6reg1 entered promiscuous mode [ 1066.284223][T15088] netlink: 'syz.2.3286': attribute type 2 has an invalid length. [ 1066.305150][T15088] netlink: 'syz.2.3286': attribute type 8 has an invalid length. [ 1066.313243][T15088] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3286'. [ 1066.401424][T15056] bridge0: port 1(bridge_slave_0) entered blocking state [ 1066.409003][T15056] bridge0: port 1(bridge_slave_0) entered disabled state [ 1066.418244][T15056] device bridge_slave_0 entered promiscuous mode [ 1066.474400][T15056] bridge0: port 2(bridge_slave_1) entered blocking state [ 1066.514766][T15056] bridge0: port 2(bridge_slave_1) entered disabled state [ 1066.523026][T15056] device bridge_slave_1 entered promiscuous mode [ 1066.667560][T15056] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1066.783708][ T4296] Bluetooth: hci1: command 0x0409 tx timeout [ 1066.888148][T15084] delete_channel: no stack [ 1068.863746][ T4296] Bluetooth: hci1: command 0x041b tx timeout [ 1069.536312][T15095] delete_channel: no stack [ 1069.766506][T15056] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1070.465457][T15056] team0: Port device team_slave_0 added [ 1070.501514][T15056] team0: Port device team_slave_1 added [ 1070.943811][ T4296] Bluetooth: hci1: command 0x040f tx timeout [ 1070.959111][T15137] FAULT_INJECTION: forcing a failure. [ 1070.959111][T15137] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1071.013074][T15137] CPU: 0 PID: 15137 Comm: syz.4.3298 Not tainted syzkaller #0 [ 1071.020620][T15137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1071.030721][T15137] Call Trace: [ 1071.034043][T15137] [ 1071.037012][T15137] dump_stack_lvl+0x188/0x24e [ 1071.041741][T15137] ? show_regs_print_info+0x12/0x12 [ 1071.046984][T15137] ? load_image+0x400/0x400 [ 1071.051569][T15137] ? __lock_acquire+0x7d10/0x7d10 [ 1071.056666][T15137] should_fail_ex+0x399/0x4d0 [ 1071.061402][T15137] _copy_from_user+0x2c/0x170 [ 1071.066168][T15137] __sys_bpf+0x2ea/0x780 [ 1071.070469][T15137] ? bpf_link_show_fdinfo+0x380/0x380 [ 1071.075925][T15137] ? lock_chain_count+0x20/0x20 [ 1071.080835][T15137] __x64_sys_bpf+0x78/0x90 [ 1071.085316][T15137] do_syscall_64+0x4c/0xa0 [ 1071.089787][T15137] ? clear_bhb_loop+0x60/0xb0 [ 1071.094516][T15137] ? clear_bhb_loop+0x60/0xb0 [ 1071.099250][T15137] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1071.105185][T15137] RIP: 0033:0x7f9652b9cdd9 [ 1071.109637][T15137] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1071.129277][T15137] RSP: 002b:00007f9653a78028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1071.137718][T15137] RAX: ffffffffffffffda RBX: 00007f9652e15fa0 RCX: 00007f9652b9cdd9 [ 1071.145727][T15137] RDX: 0000000000000050 RSI: 0000200000000040 RDI: 000000000000000a [ 1071.153715][T15137] RBP: 00007f9653a78090 R08: 0000000000000000 R09: 0000000000000000 [ 1071.161702][T15137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1071.169692][T15137] R13: 00007f9652e16038 R14: 00007f9652e15fa0 R15: 00007ffd0d0c2768 [ 1071.177699][T15137] [ 1071.204173][T15056] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1071.216040][T15056] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1071.319970][T15056] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1071.383262][T15129] device pim6reg1 entered promiscuous mode [ 1071.500222][T15056] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1071.524503][T15056] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1071.595100][T15056] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1072.240197][T15142] delete_channel: no stack [ 1072.380771][T15145] netlink: 'syz.0.3300': attribute type 2 has an invalid length. [ 1072.396838][T15145] netlink: 'syz.0.3300': attribute type 8 has an invalid length. [ 1072.408709][T15145] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3300'. [ 1072.620426][T15056] device hsr_slave_0 entered promiscuous mode [ 1072.627973][T15056] device hsr_slave_1 entered promiscuous mode [ 1072.650699][T15056] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1072.660795][T15056] Cannot create hsr debugfs directory [ 1072.831161][T15174] netlink: 'syz.0.3305': attribute type 29 has an invalid length. [ 1072.865953][T15174] netlink: 'syz.0.3305': attribute type 29 has an invalid length. [ 1072.961936][T15172] netlink: 'syz.0.3305': attribute type 29 has an invalid length. [ 1073.023721][T13881] Bluetooth: hci1: command 0x0419 tx timeout [ 1073.344907][T15190] device pim6reg1 entered promiscuous mode [ 1073.536596][ T6052] device veth0_to_team left promiscuous mode [ 1073.542827][ T6052] Ÿë: port 1(veth0_to_team) entered disabled state [ 1073.580804][ T6052] device hsr_slave_0 left promiscuous mode [ 1073.594916][ T6052] device hsr_slave_1 left promiscuous mode [ 1073.604865][ T6052] bridge0: port 3(team0) entered disabled state [ 1073.636717][ T6052] device bridge_slave_0 left promiscuous mode [ 1073.643185][ T6052] bridge0: port 1(bridge_slave_0) entered disabled state [ 1073.688280][ T6052] device veth1_macvtap left promiscuous mode [ 1073.696296][ T6052] device veth0_macvtap left promiscuous mode [ 1073.702572][ T6052] device veth1_vlan left promiscuous mode [ 1073.711482][ T6052] device veth0_vlan left promiscuous mode [ 1074.366889][ T6052] device team_slave_1 left promiscuous mode [ 1074.376495][ T6052] team0 (unregistering): Port device team_slave_1 removed [ 1074.450553][ T6052] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1074.491569][ T6052] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1074.532580][ T6052] device bridge_slave_1 left promiscuous mode [ 1074.540029][ T6052] team0 (unregistering): Port device bridge_slave_1 removed [ 1074.745799][ T6052] bond0 (unregistering): Released all slaves [ 1074.829030][T15196] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1074.839363][T15196] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1074.849535][T15196] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1075.820359][T15209] delete_channel: no stack [ 1075.908953][T15213] netlink: 'syz.0.3312': attribute type 2 has an invalid length. [ 1075.928185][T15213] netlink: 'syz.0.3312': attribute type 8 has an invalid length. [ 1075.939527][T15213] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3312'. [ 1076.190198][T15222] FAULT_INJECTION: forcing a failure. [ 1076.190198][T15222] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1076.235369][T15222] CPU: 0 PID: 15222 Comm: syz.2.3315 Not tainted syzkaller #0 [ 1076.242908][T15222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1076.253020][T15222] Call Trace: [ 1076.256382][T15222] [ 1076.259356][T15222] dump_stack_lvl+0x188/0x24e [ 1076.264088][T15222] ? show_regs_print_info+0x12/0x12 [ 1076.269345][T15222] ? load_image+0x400/0x400 [ 1076.273902][T15222] ? __lock_acquire+0x7d10/0x7d10 [ 1076.278988][T15222] should_fail_ex+0x399/0x4d0 [ 1076.283719][T15222] _copy_from_user+0x2c/0x170 [ 1076.288457][T15222] __sys_bpf+0x2ea/0x780 [ 1076.292743][T15222] ? bpf_link_show_fdinfo+0x380/0x380 [ 1076.298162][T15222] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1076.304368][T15222] __x64_sys_bpf+0x78/0x90 [ 1076.308842][T15222] do_syscall_64+0x4c/0xa0 [ 1076.313313][T15222] ? clear_bhb_loop+0x60/0xb0 [ 1076.318045][T15222] ? clear_bhb_loop+0x60/0xb0 [ 1076.322758][T15222] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1076.328684][T15222] RIP: 0033:0x7f45dbf9cdd9 [ 1076.333121][T15222] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1076.352748][T15222] RSP: 002b:00007f45dcf26028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1076.361194][T15222] RAX: ffffffffffffffda RBX: 00007f45dc215fa0 RCX: 00007f45dbf9cdd9 [ 1076.369184][T15222] RDX: 0000000000000050 RSI: 0000200000000d80 RDI: 000000000000000a [ 1076.377179][T15222] RBP: 00007f45dcf26090 R08: 0000000000000000 R09: 0000000000000000 [ 1076.385168][T15222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1076.393174][T15222] R13: 00007f45dc216038 R14: 00007f45dc215fa0 R15: 00007ffe6b3d4478 [ 1076.401176][T15222] [ 1076.447228][T15228] netlink: 14556 bytes leftover after parsing attributes in process `syz.3.3317'. [ 1076.570534][T15056] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1076.609620][T15056] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1076.633443][T15056] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1076.654339][T15056] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1076.725929][T15237] FAULT_INJECTION: forcing a failure. [ 1076.725929][T15237] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1076.792528][T15237] CPU: 1 PID: 15237 Comm: syz.2.3320 Not tainted syzkaller #0 [ 1076.800071][T15237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1076.810163][T15237] Call Trace: [ 1076.813483][T15237] [ 1076.816455][T15237] dump_stack_lvl+0x188/0x24e [ 1076.821197][T15237] ? show_regs_print_info+0x12/0x12 [ 1076.826449][T15237] ? load_image+0x400/0x400 [ 1076.831015][T15237] ? __lock_acquire+0x7d10/0x7d10 [ 1076.836101][T15237] should_fail_ex+0x399/0x4d0 [ 1076.840828][T15237] _copy_from_user+0x2c/0x170 [ 1076.845567][T15237] __sys_bpf+0x2ea/0x780 [ 1076.849859][T15237] ? bpf_link_show_fdinfo+0x380/0x380 [ 1076.855267][T15237] ? lock_chain_count+0x20/0x20 [ 1076.860166][T15237] __x64_sys_bpf+0x78/0x90 [ 1076.864605][T15237] do_syscall_64+0x4c/0xa0 [ 1076.869048][T15237] ? clear_bhb_loop+0x60/0xb0 [ 1076.873752][T15237] ? clear_bhb_loop+0x60/0xb0 [ 1076.878458][T15237] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1076.884377][T15237] RIP: 0033:0x7f45dbf9cdd9 [ 1076.888810][T15237] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1076.908436][T15237] RSP: 002b:00007f45dcf26028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1076.916883][T15237] RAX: ffffffffffffffda RBX: 00007f45dc215fa0 RCX: 00007f45dbf9cdd9 [ 1076.924876][T15237] RDX: 0000000000000050 RSI: 0000200000000040 RDI: 000000000000000a [ 1076.932861][T15237] RBP: 00007f45dcf26090 R08: 0000000000000000 R09: 0000000000000000 [ 1076.940848][T15237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1076.948836][T15237] R13: 00007f45dc216038 R14: 00007f45dc215fa0 R15: 00007ffe6b3d4478 [ 1076.956834][T15237] [ 1077.010767][T15056] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1077.050445][ T6051] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1077.066435][ T6051] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1077.090016][T15056] 8021q: adding VLAN 0 to HW filter on device team0 [ 1077.139190][ T6048] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1077.165276][ T6048] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1077.184931][ T6048] bridge0: port 1(bridge_slave_0) entered blocking state [ 1077.192111][ T6048] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1077.216918][ T6048] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1077.284276][ T6054] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1077.304088][ T6054] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1077.343883][ T6054] bridge0: port 2(bridge_slave_1) entered blocking state [ 1077.351070][ T6054] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1077.399755][ T6054] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1077.450487][ T6054] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1077.471953][ T6054] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1077.527179][ T6054] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1077.629157][ T6054] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1077.644505][ T6054] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1077.675135][ T6054] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1077.712704][ T6054] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1077.745351][ T6054] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1077.789965][ T6054] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1077.829762][ T6054] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1077.900662][T15056] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1077.924554][T15250] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3323'. [ 1077.998154][T15253] device pim6reg1 entered promiscuous mode [ 1080.957333][T15270] delete_channel: no stack [ 1080.962694][T15273] netlink: 'syz.0.3326': attribute type 2 has an invalid length. [ 1080.976993][T15273] netlink: 'syz.0.3326': attribute type 8 has an invalid length. [ 1080.994998][T15273] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3326'. [ 1081.560872][T15056] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1081.602002][ T6060] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1081.627434][ T6060] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1081.662583][T15303] FAULT_INJECTION: forcing a failure. [ 1081.662583][T15303] name failslab, interval 1, probability 0, space 0, times 0 [ 1081.675607][T15303] CPU: 1 PID: 15303 Comm: syz.2.3329 Not tainted syzkaller #0 [ 1081.683110][T15303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1081.693213][T15303] Call Trace: [ 1081.696530][T15303] [ 1081.699506][T15303] dump_stack_lvl+0x188/0x24e [ 1081.704235][T15303] ? show_regs_print_info+0x12/0x12 [ 1081.709507][T15303] ? load_image+0x400/0x400 [ 1081.714084][T15303] ? mark_lock+0x94/0x320 [ 1081.718464][T15303] ? skb_network_protocol+0x525/0x780 [ 1081.723889][T15303] should_fail_ex+0x399/0x4d0 [ 1081.728619][T15303] should_failslab+0x5/0x20 [ 1081.733162][T15303] slab_pre_alloc_hook+0x59/0x310 [ 1081.738245][T15303] kmem_cache_alloc+0x56/0x2f0 [ 1081.743055][T15303] ? skb_clone+0x1e7/0x370 [ 1081.747521][T15303] skb_clone+0x1e7/0x370 [ 1081.751809][T15303] ? dev_queue_xmit_nit+0x231/0xbb0 [ 1081.757063][T15303] dev_queue_xmit_nit+0x249/0xbb0 [ 1081.762139][T15303] ? dev_queue_xmit_nit+0x29/0xbb0 [ 1081.767312][T15303] dev_hard_start_xmit+0x154/0x870 [ 1081.772481][T15303] __dev_queue_xmit+0x1aa3/0x37c0 [ 1081.777544][T15303] ? lock_chain_count+0x20/0x20 [ 1081.782454][T15303] ? __dev_queue_xmit+0x26b/0x37c0 [ 1081.787621][T15303] ? netdev_core_pick_tx+0x340/0x340 [ 1081.792963][T15303] ? ___neigh_create+0x1e06/0x24c0 [ 1081.798152][T15303] ? neigh_connected_output+0x3ac/0x450 [ 1081.803773][T15303] ip6_finish_output2+0xdd6/0x15d0 [ 1081.808956][T15303] ? ip6_mtu+0x79/0x3f0 [ 1081.813155][T15303] ? ip6_finish_output2+0x58f/0x15d0 [ 1081.818496][T15303] ? ip6_mtu+0x79/0x3f0 [ 1081.822692][T15303] ? nf_hook+0x390/0x390 [ 1081.826997][T15303] ? ip6_finish_output+0x577/0x820 [ 1081.832172][T15303] ? ip6_send_skb+0x10b/0x380 [ 1081.836905][T15303] ip6_send_skb+0x1d1/0x380 [ 1081.841480][T15303] rawv6_push_pending_frames+0x6e3/0x8d0 [ 1081.847185][T15303] ? raw6_getfrag+0x300/0x300 [ 1081.851911][T15303] ? rawv6_send_hdrinc+0x16c0/0x16c0 [ 1081.857258][T15303] rawv6_sendmsg+0x1293/0x1700 [ 1081.862090][T15303] ? compat_rawv6_ioctl+0x60/0x60 [ 1081.867184][T15303] ? aa_sk_perm+0x81f/0x950 [ 1081.871750][T15303] ? tomoyo_socket_sendmsg_permission+0x212/0x2f0 [ 1081.878225][T15303] ? inet_sendmsg+0x78/0x2f0 [ 1081.882847][T15303] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1081.888178][T15303] ? security_socket_sendmsg+0x7c/0xa0 [ 1081.893705][T15303] ? inet_send_prepare+0x260/0x260 [ 1081.898858][T15303] ____sys_sendmsg+0x5be/0x970 [ 1081.903676][T15303] ? __sys_sendmsg_sock+0x30/0x30 [ 1081.908744][T15303] ? __import_iovec+0x315/0x500 [ 1081.914081][T15303] ? import_iovec+0x6f/0xa0 [ 1081.918637][T15303] ___sys_sendmsg+0x2a2/0x360 [ 1081.923370][T15303] ? __sys_sendmsg+0x290/0x290 [ 1081.928203][T15303] ? __lock_acquire+0x7d10/0x7d10 [ 1081.933304][T15303] __se_sys_sendmsg+0x1bb/0x2a0 [ 1081.938215][T15303] ? __x64_sys_sendmsg+0x80/0x80 [ 1081.943231][T15303] ? lockdep_hardirqs_on+0x94/0x140 [ 1081.948476][T15303] do_syscall_64+0x4c/0xa0 [ 1081.952949][T15303] ? clear_bhb_loop+0x60/0xb0 [ 1081.957678][T15303] ? clear_bhb_loop+0x60/0xb0 [ 1081.962406][T15303] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1081.968354][T15303] RIP: 0033:0x7f45dbf9cdd9 [ 1081.972815][T15303] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1081.992484][T15303] RSP: 002b:00007f45dcf26028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1082.000945][T15303] RAX: ffffffffffffffda RBX: 00007f45dc215fa0 RCX: 00007f45dbf9cdd9 [ 1082.008962][T15303] RDX: 0000000020000000 RSI: 0000200000000400 RDI: 0000000000000003 [ 1082.016984][T15303] RBP: 00007f45dcf26090 R08: 0000000000000000 R09: 0000000000000000 [ 1082.024994][T15303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1082.033034][T15303] R13: 00007f45dc216038 R14: 00007f45dc215fa0 R15: 00007ffe6b3d4478 [ 1082.041086][T15303] [ 1082.071833][T15305] bridge0: port 3(syz_tun) entered blocking state [ 1082.092807][T15305] bridge0: port 3(syz_tun) entered disabled state [ 1082.104830][T15305] device syz_tun entered promiscuous mode [ 1082.111223][T15305] bridge0: port 3(syz_tun) entered blocking state [ 1082.118008][T15305] bridge0: port 3(syz_tun) entered forwarding state [ 1082.192942][ T6048] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1082.216799][ T6048] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1082.258417][T15056] device veth0_vlan entered promiscuous mode [ 1082.282298][ T6048] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1082.320546][ T6048] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1082.341763][T15309] netlink: 'syz.2.3331': attribute type 10 has an invalid length. [ 1082.361768][T15309] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3331'. [ 1082.404566][T15309] device team0 entered promiscuous mode [ 1082.410448][T15309] device team_slave_0 entered promiscuous mode [ 1082.424696][T15309] device team_slave_1 entered promiscuous mode [ 1082.445381][T15309] bridge0: port 3(team0) entered blocking state [ 1082.464965][T15309] bridge0: port 3(team0) entered disabled state [ 1082.528482][T15309] bridge0: port 3(team0) entered blocking state [ 1082.535686][T15309] bridge0: port 3(team0) entered forwarding state [ 1082.583830][ T6048] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1082.614643][ T6048] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1082.666022][T15056] device veth1_vlan entered promiscuous mode [ 1082.744373][T15056] device veth0_macvtap entered promiscuous mode [ 1082.752348][ T6048] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1082.762442][ T6048] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1082.772224][ T6048] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1082.781410][ T6048] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1082.816351][T15056] device veth1_macvtap entered promiscuous mode [ 1082.844956][ T6048] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1082.858448][ T6048] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1082.933187][T15056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1082.978181][T15056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1083.015763][T15056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1083.049646][T15056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1083.080859][T15056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1083.113289][T15056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1083.126733][T15056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1083.142751][T15056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1083.161304][T15056] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1083.173007][T15056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1083.196840][T15056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1083.212997][T15056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1083.216074][T15330] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.3335'. [ 1083.233860][T15056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1083.233922][T15056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1083.233943][T15056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1083.233977][T15056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1083.287104][T15056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1083.307424][T15056] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1083.321380][ T6048] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1083.335296][T15332] delete_channel: no stack [ 1083.337712][ T6048] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1083.360007][ T6048] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1083.369737][ T6048] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1083.384524][T15056] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1083.397089][T15056] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1083.408635][T15056] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1083.417896][T15056] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1083.573628][ T6048] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1083.581529][ T6048] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1083.618329][ T6052] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1083.705582][ T6046] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1083.734133][ T6046] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1083.762006][ T6052] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1083.888210][T15340] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.3336'. [ 1084.043393][T15345] netlink: 17023 bytes leftover after parsing attributes in process `syz.2.3337'. [ 1084.426914][T15358] netlink: 'syz.1.3341': attribute type 27 has an invalid length. [ 1084.448297][T15358] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3341'. [ 1084.500359][T15358] netlink: 'syz.1.3341': attribute type 12 has an invalid length. [ 1084.518689][T15358] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3341'. [ 1084.649167][T15366] netlink: 7527 bytes leftover after parsing attributes in process `syz.0.3343'. [ 1085.155543][T15374] device pim6reg1 entered promiscuous mode [ 1085.307300][T15384] netlink: 'syz.4.3344': attribute type 2 has an invalid length. [ 1085.340896][T15384] netlink: 'syz.4.3344': attribute type 3 has an invalid length. [ 1085.363920][T15384] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3344'. [ 1086.110146][T15395] netlink: 'syz.1.3349': attribute type 2 has an invalid length. [ 1086.121036][T15395] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3349'. [ 1086.137323][T15388] device pim6reg1 entered promiscuous mode [ 1087.252682][T15424] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.3358'. [ 1090.273011][T15416] netlink: 17023 bytes leftover after parsing attributes in process `syz.4.3355'. [ 1090.493739][T15440] FAULT_INJECTION: forcing a failure. [ 1090.493739][T15440] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1090.523594][T15440] CPU: 1 PID: 15440 Comm: syz.3.3362 Not tainted syzkaller #0 [ 1090.531156][T15440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1090.541292][T15440] Call Trace: [ 1090.544621][T15440] [ 1090.547599][T15440] dump_stack_lvl+0x188/0x24e [ 1090.552337][T15440] ? show_regs_print_info+0x12/0x12 [ 1090.557626][T15440] ? load_image+0x400/0x400 [ 1090.562220][T15440] ? __lock_acquire+0x7d10/0x7d10 [ 1090.567307][T15440] should_fail_ex+0x399/0x4d0 [ 1090.572039][T15440] _copy_from_user+0x2c/0x170 [ 1090.576780][T15440] iovec_from_user+0x143/0x360 [ 1090.581622][T15440] __import_iovec+0x6d/0x500 [ 1090.586271][T15440] ? __might_fault+0xa6/0x120 [ 1090.591012][T15440] import_iovec+0x6f/0xa0 [ 1090.595404][T15440] ___sys_recvmsg+0x4b6/0x590 [ 1090.600156][T15440] ? __sys_recvmsg+0x290/0x290 [ 1090.604991][T15440] ? common_file_perm+0x171/0x1c0 [ 1090.610076][T15440] ? __fget_files+0x43d/0x4b0 [ 1090.614860][T15440] __x64_sys_recvmsg+0x205/0x2e0 [ 1090.619883][T15440] ? ___sys_recvmsg+0x590/0x590 [ 1090.624817][T15440] ? lockdep_hardirqs_on+0x94/0x140 [ 1090.630065][T15440] do_syscall_64+0x4c/0xa0 [ 1090.634536][T15440] ? clear_bhb_loop+0x60/0xb0 [ 1090.639273][T15440] ? clear_bhb_loop+0x60/0xb0 [ 1090.644017][T15440] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1090.649942][T15440] RIP: 0033:0x7f412979cdd9 [ 1090.654382][T15440] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1090.674014][T15440] RSP: 002b:00007f412a717028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1090.682459][T15440] RAX: ffffffffffffffda RBX: 00007f4129a16090 RCX: 00007f412979cdd9 [ 1090.690460][T15440] RDX: 0000000040000100 RSI: 0000200000001140 RDI: 0000000000000004 [ 1090.698457][T15440] RBP: 00007f412a717090 R08: 0000000000000000 R09: 0000000000000000 [ 1090.706455][T15440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1090.714454][T15440] R13: 00007f4129a16128 R14: 00007f4129a16090 R15: 00007fff2aa94558 [ 1090.722472][T15440] [ 1090.914382][T15449] netlink: 'syz.0.3364': attribute type 3 has an invalid length. [ 1090.936151][T15449] netlink: 'syz.0.3364': attribute type 1 has an invalid length. [ 1090.954707][T15444] device pim6reg1 entered promiscuous mode [ 1090.980371][T15449] netlink: 198452 bytes leftover after parsing attributes in process `syz.0.3364'. [ 1091.973330][T15465] netlink: 134056 bytes leftover after parsing attributes in process `syz.0.3371'. [ 1092.158742][T15469] netlink: 10 bytes leftover after parsing attributes in process `syz.1.3373'. [ 1092.458340][T15477] device pim6reg1 entered promiscuous mode [ 1092.820422][T15480] netlink: 17023 bytes leftover after parsing attributes in process `syz.3.3375'. [ 1092.889505][T15491] netlink: 'syz.4.3380': attribute type 10 has an invalid length. [ 1092.901408][T15487] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.3378'. [ 1092.917046][T15491] netlink: 168 bytes leftover after parsing attributes in process `syz.4.3380'. [ 1093.390570][T15499] netlink: 'syz.1.3383': attribute type 10 has an invalid length. [ 1093.418425][T15499] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1093.473868][T15499] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1093.518656][T15499] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 1093.762930][T15513] netlink: 'syz.1.3399': attribute type 3 has an invalid length. [ 1093.787759][T15513] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3399'. [ 1093.812826][T15516] netlink: 'syz.4.3389': attribute type 27 has an invalid length. [ 1093.825844][T15516] netlink: 164 bytes leftover after parsing attributes in process `syz.4.3389'. [ 1096.582440][T15504] delete_channel: no stack [ 1096.599417][T15516] netlink: 'syz.4.3389': attribute type 12 has an invalid length. [ 1096.623740][T15516] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3389'. [ 1097.118760][T15543] FAULT_INJECTION: forcing a failure. [ 1097.118760][T15543] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1097.177792][T15543] CPU: 0 PID: 15543 Comm: syz.1.3396 Not tainted syzkaller #0 [ 1097.185329][T15543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1097.195417][T15543] Call Trace: [ 1097.198718][T15543] [ 1097.201679][T15543] dump_stack_lvl+0x188/0x24e [ 1097.206407][T15543] ? show_regs_print_info+0x12/0x12 [ 1097.211648][T15543] ? load_image+0x400/0x400 [ 1097.216185][T15543] ? __lock_acquire+0x7d10/0x7d10 [ 1097.221260][T15543] should_fail_ex+0x399/0x4d0 [ 1097.225988][T15543] _copy_from_user+0x2c/0x170 [ 1097.230715][T15543] kstrtouint_from_user+0xda/0x170 [ 1097.235890][T15543] ? kstrtol_from_user+0x190/0x190 [ 1097.241072][T15543] proc_fail_nth_write+0x8b/0x200 [ 1097.246142][T15543] ? proc_fail_nth_read+0x220/0x220 [ 1097.251385][T15543] ? common_file_perm+0x171/0x1c0 [ 1097.256470][T15543] ? proc_fail_nth_read+0x220/0x220 [ 1097.261706][T15543] vfs_write+0x2e6/0xa30 [ 1097.265994][T15543] ? file_end_write+0x250/0x250 [ 1097.270899][T15543] ? __fget_files+0x28/0x4b0 [ 1097.275537][T15543] ? __fget_files+0x28/0x4b0 [ 1097.280167][T15543] ? __fget_files+0x43d/0x4b0 [ 1097.284897][T15543] ? __fdget_pos+0x2ae/0x360 [ 1097.289523][T15543] ? ksys_write+0x71/0x250 [ 1097.293991][T15543] ksys_write+0x14c/0x250 [ 1097.298371][T15543] ? __ia32_sys_read+0x80/0x80 [ 1097.303191][T15543] ? lockdep_hardirqs_on+0x94/0x140 [ 1097.308441][T15543] do_syscall_64+0x4c/0xa0 [ 1097.312907][T15543] ? clear_bhb_loop+0x60/0xb0 [ 1097.317633][T15543] ? clear_bhb_loop+0x60/0xb0 [ 1097.322360][T15543] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1097.328290][T15543] RIP: 0033:0x7fc0eeb5d60e [ 1097.332737][T15543] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1097.352394][T15543] RSP: 002b:00007fc0efb26fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1097.360861][T15543] RAX: ffffffffffffffda RBX: 00007fc0efb276c0 RCX: 00007fc0eeb5d60e [ 1097.368873][T15543] RDX: 0000000000000001 RSI: 00007fc0efb270a0 RDI: 0000000000000004 [ 1097.376876][T15543] RBP: 00007fc0efb27090 R08: 0000000000000000 R09: 0000000000000000 [ 1097.384877][T15543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1097.392876][T15543] R13: 00007fc0eee16128 R14: 00007fc0eee16090 R15: 00007ffe8ba17c48 [ 1097.400902][T15543] [ 1099.723998][T15520] delete_channel: no stack [ 1099.753000][T15531] netlink: 'syz.0.3390': attribute type 2 has an invalid length. [ 1099.761108][T15531] netlink: 'syz.0.3390': attribute type 8 has an invalid length. [ 1099.770479][T15531] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3390'. [ 1099.800312][T15542] netlink: 17023 bytes leftover after parsing attributes in process `syz.3.3395'. [ 1100.204871][T15564] netlink: 'syz.3.3404': attribute type 27 has an invalid length. [ 1100.212998][T15564] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3404'. [ 1100.235460][T15562] netlink: 134056 bytes leftover after parsing attributes in process `syz.2.3405'. [ 1102.995508][T15556] delete_channel: no stack [ 1103.043733][T15566] netlink: 'syz.3.3404': attribute type 12 has an invalid length. [ 1103.051617][T15566] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3404'. [ 1103.332017][T15573] device pim6reg1 entered promiscuous mode [ 1106.497504][T15580] netlink: 'syz.2.3410': attribute type 2 has an invalid length. [ 1106.507741][T15586] netlink: 'syz.1.3411': attribute type 21 has an invalid length. [ 1106.521575][T15595] netlink: 'syz.0.3413': attribute type 2 has an invalid length. [ 1106.530883][T15595] netlink: 'syz.0.3413': attribute type 8 has an invalid length. [ 1106.541256][T15591] delete_channel: no stack [ 1106.546732][T15595] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3413'. [ 1106.563841][T15600] netlink: 17023 bytes leftover after parsing attributes in process `syz.3.3414'. [ 1106.849421][T15605] netlink: 'syz.1.3416': attribute type 10 has an invalid length. [ 1106.887052][T15605] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3416'. [ 1106.903023][T15603] device pim6reg1 entered promiscuous mode [ 1109.939326][T15608] delete_channel: no stack [ 1110.091630][T15623] netlink: 'syz.2.3420': attribute type 27 has an invalid length. [ 1110.113649][T15623] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3420'. [ 1110.187184][T15627] netlink: 134056 bytes leftover after parsing attributes in process `syz.4.3422'. [ 1110.415408][T15623] netlink: 'syz.2.3420': attribute type 12 has an invalid length. [ 1110.424577][T15623] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3420'. [ 1110.665911][T15635] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3424'. [ 1111.054340][T15648] netlink: 'syz.4.3426': attribute type 2 has an invalid length. [ 1111.073569][T15648] netlink: 'syz.4.3426': attribute type 8 has an invalid length. [ 1111.081422][T15648] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3426'. [ 1111.629237][T15637] delete_channel: no stack [ 1113.958162][T15659] FAULT_INJECTION: forcing a failure. [ 1113.958162][T15659] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1113.991709][T15659] CPU: 1 PID: 15659 Comm: syz.4.3434 Not tainted syzkaller #0 [ 1113.999232][T15659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1114.009310][T15659] Call Trace: [ 1114.012608][T15659] [ 1114.015566][T15659] dump_stack_lvl+0x188/0x24e [ 1114.020287][T15659] ? show_regs_print_info+0x12/0x12 [ 1114.025551][T15659] ? load_image+0x400/0x400 [ 1114.030086][T15659] ? __lock_acquire+0x7d10/0x7d10 [ 1114.035153][T15659] ? __fget_files+0x28/0x4b0 [ 1114.039784][T15659] should_fail_ex+0x399/0x4d0 [ 1114.044496][T15659] _copy_from_user+0x2c/0x170 [ 1114.049210][T15659] generic_map_update_batch+0x4f3/0x810 [ 1114.054818][T15659] ? rcu_read_unlock+0xa0/0xa0 [ 1114.059631][T15659] ? __fdget+0x17c/0x200 [ 1114.063930][T15659] ? rcu_read_unlock+0xa0/0xa0 [ 1114.068736][T15659] bpf_map_do_batch+0x466/0x600 [ 1114.073638][T15659] __sys_bpf+0x6f7/0x780 [ 1114.077931][T15659] ? bpf_link_show_fdinfo+0x380/0x380 [ 1114.083392][T15659] ? lock_chain_count+0x20/0x20 [ 1114.088291][T15659] __x64_sys_bpf+0x78/0x90 [ 1114.092724][T15659] do_syscall_64+0x4c/0xa0 [ 1114.097170][T15659] ? clear_bhb_loop+0x60/0xb0 [ 1114.101899][T15659] ? clear_bhb_loop+0x60/0xb0 [ 1114.106630][T15659] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1114.112576][T15659] RIP: 0033:0x7f9652b9cdd9 [ 1114.117032][T15659] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1114.136671][T15659] RSP: 002b:00007f9653a78028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1114.145118][T15659] RAX: ffffffffffffffda RBX: 00007f9652e15fa0 RCX: 00007f9652b9cdd9 [ 1114.153125][T15659] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a [ 1114.161136][T15659] RBP: 00007f9653a78090 R08: 0000000000000000 R09: 0000000000000000 [ 1114.169144][T15659] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1114.177153][T15659] R13: 00007f9652e16038 R14: 00007f9652e15fa0 R15: 00007ffd0d0c2768 [ 1114.185187][T15659] [ 1114.426540][T15668] netlink: 'syz.1.3445': attribute type 2 has an invalid length. [ 1114.451672][T15668] netlink: 'syz.1.3445': attribute type 8 has an invalid length. [ 1114.506655][T15668] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3445'. [ 1114.618722][T15677] device pim6reg1 entered promiscuous mode [ 1114.953594][T15688] netlink: 'syz.2.3440': attribute type 29 has an invalid length. [ 1115.034805][T15660] delete_channel: no stack [ 1115.043815][T15688] netlink: 'syz.2.3440': attribute type 29 has an invalid length. [ 1115.084060][T15689] netlink: 'syz.2.3440': attribute type 29 has an invalid length. [ 1115.990574][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.996914][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 1117.435408][T15700] netlink: 17023 bytes leftover after parsing attributes in process `syz.2.3446'. [ 1117.571714][T15708] netlink: 'syz.1.3458': attribute type 2 has an invalid length. [ 1117.618707][T15708] netlink: 'syz.1.3458': attribute type 8 has an invalid length. [ 1117.669438][T15708] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3458'. [ 1118.074056][ T4296] Bluetooth: hci5: command 0x0406 tx timeout [ 1120.461534][T15706] delete_channel: no stack [ 1123.166456][T15726] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3454'. [ 1123.179407][T15730] netlink: 'syz.4.3455': attribute type 21 has an invalid length. [ 1123.209338][T15730] netlink: 168 bytes leftover after parsing attributes in process `syz.4.3455'. [ 1123.231637][T15735] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.3456'. [ 1123.255550][T15756] netlink: 17023 bytes leftover after parsing attributes in process `syz.0.3461'. [ 1123.428295][T15760] netlink: 'syz.3.3462': attribute type 2 has an invalid length. [ 1123.468374][T15760] netlink: 'syz.3.3462': attribute type 8 has an invalid length. [ 1123.490006][T15760] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3462'. [ 1126.424168][T15758] delete_channel: no stack [ 1126.763028][T15781] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3470'. [ 1126.830010][T15781] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3470'. [ 1127.201337][T15800] netlink: 'syz.4.3477': attribute type 21 has an invalid length. [ 1128.084183][T15804] netlink: 'syz.1.3479': attribute type 10 has an invalid length. [ 1128.305063][T13881] Bluetooth: hci2: command 0x0406 tx timeout [ 1128.553784][T15796] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.3475'. [ 1129.088561][T15819] FAULT_INJECTION: forcing a failure. [ 1129.088561][T15819] name failslab, interval 1, probability 0, space 0, times 0 [ 1129.173363][T15819] CPU: 1 PID: 15819 Comm: syz.4.3482 Not tainted syzkaller #0 [ 1129.180931][T15819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1129.191052][T15819] Call Trace: [ 1129.194379][T15819] [ 1129.197361][T15819] dump_stack_lvl+0x188/0x24e [ 1129.202126][T15819] ? show_regs_print_info+0x12/0x12 [ 1129.207391][T15819] ? load_image+0x400/0x400 [ 1129.211966][T15819] ? __might_sleep+0xd0/0xd0 [ 1129.216680][T15819] ? __lock_acquire+0x7d10/0x7d10 [ 1129.221771][T15819] should_fail_ex+0x399/0x4d0 [ 1129.226524][T15819] should_failslab+0x5/0x20 [ 1129.231085][T15819] slab_pre_alloc_hook+0x59/0x310 [ 1129.236163][T15819] ? tomoyo_encode+0x27e/0x540 [ 1129.240999][T15819] __kmem_cache_alloc_node+0x4f/0x260 [ 1129.246448][T15819] ? tomoyo_encode+0x27e/0x540 [ 1129.251254][T15819] __kmalloc+0xa0/0x240 [ 1129.255484][T15819] tomoyo_encode+0x27e/0x540 [ 1129.260130][T15819] tomoyo_realpath_from_path+0x58e/0x5d0 [ 1129.265827][T15819] ? tomoyo_path_number_perm+0x205/0x650 [ 1129.271520][T15819] tomoyo_path_number_perm+0x22f/0x650 [ 1129.277039][T15819] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 1129.283680][T15819] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1129.289190][T15819] ? ksys_write+0x1c0/0x250 [ 1129.293760][T15819] ? common_file_perm+0x171/0x1c0 [ 1129.298938][T15819] ? __fget_files+0x28/0x4b0 [ 1129.303613][T15819] ? __fget_files+0x28/0x4b0 [ 1129.308363][T15819] security_file_ioctl+0x6c/0xa0 [ 1129.313371][T15819] __se_sys_ioctl+0x48/0x170 [ 1129.318034][T15819] do_syscall_64+0x4c/0xa0 [ 1129.322504][T15819] ? clear_bhb_loop+0x60/0xb0 [ 1129.327227][T15819] ? clear_bhb_loop+0x60/0xb0 [ 1129.331965][T15819] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1129.337901][T15819] RIP: 0033:0x7f9652b9cdd9 [ 1129.342351][T15819] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1129.361996][T15819] RSP: 002b:00007f9653a57028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1129.370471][T15819] RAX: ffffffffffffffda RBX: 00007f9652e16090 RCX: 00007f9652b9cdd9 [ 1129.378506][T15819] RDX: 0000200000000000 RSI: 0000000000008b18 RDI: 0000000000000009 [ 1129.386515][T15819] RBP: 00007f9653a57090 R08: 0000000000000000 R09: 0000000000000000 [ 1129.394536][T15819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1129.402568][T15819] R13: 00007f9652e16128 R14: 00007f9652e16090 R15: 00007ffd0d0c2768 [ 1129.410660][T15819] [ 1129.579302][T15819] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1129.662147][T15823] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3486'. [ 1129.875955][T15823] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3486'. [ 1130.378831][T15835] FAULT_INJECTION: forcing a failure. [ 1130.378831][T15835] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1130.398812][T15835] CPU: 1 PID: 15835 Comm: syz.1.3491 Not tainted syzkaller #0 [ 1130.406359][T15835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1130.416456][T15835] Call Trace: [ 1130.419767][T15835] [ 1130.422720][T15835] dump_stack_lvl+0x188/0x24e [ 1130.427460][T15835] ? show_regs_print_info+0x12/0x12 [ 1130.432707][T15835] ? load_image+0x400/0x400 [ 1130.437251][T15835] ? __lock_acquire+0x7d10/0x7d10 [ 1130.442330][T15835] should_fail_ex+0x399/0x4d0 [ 1130.447047][T15835] _copy_from_user+0x2c/0x170 [ 1130.451772][T15835] iovec_from_user+0x143/0x360 [ 1130.456569][T15835] __import_iovec+0x6d/0x500 [ 1130.461176][T15835] import_iovec+0x6f/0xa0 [ 1130.465544][T15835] ___sys_sendmsg+0x252/0x360 [ 1130.470274][T15835] ? __sys_sendmsg+0x290/0x290 [ 1130.475120][T15835] ? ktime_get_real_ts64+0x440/0x440 [ 1130.480497][T15835] __se_sys_sendmsg+0x1bb/0x2a0 [ 1130.485427][T15835] ? __x64_sys_sendmsg+0x80/0x80 [ 1130.490448][T15835] ? lockdep_hardirqs_on+0x94/0x140 [ 1130.495713][T15835] do_syscall_64+0x4c/0xa0 [ 1130.500233][T15835] ? clear_bhb_loop+0x60/0xb0 [ 1130.504941][T15835] ? clear_bhb_loop+0x60/0xb0 [ 1130.509687][T15835] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1130.515612][T15835] RIP: 0033:0x7fc0eeb9cdd9 [ 1130.520045][T15835] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1130.539683][T15835] RSP: 002b:00007fc0efb48028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1130.548119][T15835] RAX: ffffffffffffffda RBX: 00007fc0eee15fa0 RCX: 00007fc0eeb9cdd9 [ 1130.556146][T15835] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 1130.564135][T15835] RBP: 00007fc0efb48090 R08: 0000000000000000 R09: 0000000000000000 [ 1130.572131][T15835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1130.580129][T15835] R13: 00007fc0eee16038 R14: 00007fc0eee15fa0 R15: 00007ffe8ba17c48 [ 1130.588145][T15835] [ 1130.938433][T15856] netlink: 194236 bytes leftover after parsing attributes in process `syz.1.3494'. [ 1130.967731][T15856] netlink: zone id is out of range [ 1130.993774][T15856] netlink: get zone limit has 8 unknown bytes [ 1131.173087][T15860] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.3505'. [ 1131.453400][T15873] netlink: 'syz.0.3498': attribute type 10 has an invalid length. [ 1131.505579][T15875] FAULT_INJECTION: forcing a failure. [ 1131.505579][T15875] name failslab, interval 1, probability 0, space 0, times 0 [ 1131.538734][T15875] CPU: 1 PID: 15875 Comm: syz.1.3499 Not tainted syzkaller #0 [ 1131.546244][T15875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1131.556328][T15875] Call Trace: [ 1131.559635][T15875] [ 1131.562579][T15875] dump_stack_lvl+0x188/0x24e [ 1131.567297][T15875] ? sctp_sendmsg+0x15b0/0x2940 [ 1131.572192][T15875] ? ___sys_sendmsg+0x2a2/0x360 [ 1131.577106][T15875] ? show_regs_print_info+0x12/0x12 [ 1131.582334][T15875] ? load_image+0x400/0x400 [ 1131.586890][T15875] should_fail_ex+0x399/0x4d0 [ 1131.591613][T15875] should_failslab+0x5/0x20 [ 1131.596148][T15875] slab_pre_alloc_hook+0x59/0x310 [ 1131.601219][T15875] ? sctp_add_bind_addr+0x89/0x350 [ 1131.606402][T15875] __kmem_cache_alloc_node+0x4f/0x260 [ 1131.611819][T15875] ? sctp_add_bind_addr+0x89/0x350 [ 1131.616975][T15875] kmalloc_trace+0x26/0xe0 [ 1131.621454][T15875] sctp_add_bind_addr+0x89/0x350 [ 1131.626451][T15875] sctp_copy_local_addr_list+0x311/0x4e0 [ 1131.632118][T15875] ? sctp_copy_local_addr_list+0xa1/0x4e0 [ 1131.637867][T15875] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 1131.643989][T15875] ? sctp_v6_is_any+0x60/0x70 [ 1131.648726][T15875] ? sctp_copy_one_addr+0x93/0x660 [ 1131.653898][T15875] sctp_bind_addr_copy+0xaf/0x3c0 [ 1131.658985][T15875] ? sctp_assoc_set_bind_addr_from_ep+0xa1/0x190 [ 1131.665360][T15875] sctp_connect_new_asoc+0x2f5/0x6a0 [ 1131.670687][T15875] ? __sctp_connect+0xd80/0xd80 [ 1131.675567][T15875] ? __local_bh_enable_ip+0x136/0x1c0 [ 1131.680970][T15875] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 1131.686546][T15875] ? security_sctp_bind_connect+0x85/0xb0 [ 1131.692293][T15875] sctp_sendmsg+0x15b0/0x2940 [ 1131.697023][T15875] ? sctp_getsockopt+0x8a0/0x8a0 [ 1131.702010][T15875] ? __lock_acquire+0x7d10/0x7d10 [ 1131.707077][T15875] ? aa_af_perm+0x340/0x340 [ 1131.711623][T15875] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 1131.718082][T15875] ? inet_sendmsg+0xe5/0x2f0 [ 1131.722706][T15875] ? inet_send_prepare+0x260/0x260 [ 1131.727844][T15875] ____sys_sendmsg+0x5be/0x970 [ 1131.732669][T15875] ? __sys_sendmsg_sock+0x30/0x30 [ 1131.737752][T15875] ? __import_iovec+0x315/0x500 [ 1131.742649][T15875] ? import_iovec+0x6f/0xa0 [ 1131.747187][T15875] ___sys_sendmsg+0x2a2/0x360 [ 1131.751910][T15875] ? __sys_sendmsg+0x290/0x290 [ 1131.756737][T15875] ? __lock_acquire+0x7d10/0x7d10 [ 1131.761819][T15875] __se_sys_sendmsg+0x1bb/0x2a0 [ 1131.766721][T15875] ? __x64_sys_sendmsg+0x80/0x80 [ 1131.771717][T15875] ? lockdep_hardirqs_on+0x94/0x140 [ 1131.776946][T15875] do_syscall_64+0x4c/0xa0 [ 1131.781398][T15875] ? clear_bhb_loop+0x60/0xb0 [ 1131.786104][T15875] ? clear_bhb_loop+0x60/0xb0 [ 1131.790815][T15875] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1131.796741][T15875] RIP: 0033:0x7fc0eeb9cdd9 [ 1131.801191][T15875] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1131.820832][T15875] RSP: 002b:00007fc0efb48028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1131.829282][T15875] RAX: ffffffffffffffda RBX: 00007fc0eee15fa0 RCX: 00007fc0eeb9cdd9 [ 1131.837279][T15875] RDX: 0000000000000041 RSI: 0000200000000600 RDI: 0000000000000003 [ 1131.845290][T15875] RBP: 00007fc0efb48090 R08: 0000000000000000 R09: 0000000000000000 [ 1131.853281][T15875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1131.861289][T15875] R13: 00007fc0eee16038 R14: 00007fc0eee15fa0 R15: 00007ffe8ba17c48 [ 1131.869292][T15875] [ 1132.258993][T15879] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3502'. [ 1132.388178][T15879] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3502'. [ 1133.243861][T15882] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.3501'. [ 1134.405257][T15908] netlink: 'syz.0.3512': attribute type 49 has an invalid length. [ 1135.093182][T15917] netlink: 'syz.2.3516': attribute type 10 has an invalid length. [ 1135.181906][T15922] FAULT_INJECTION: forcing a failure. [ 1135.181906][T15922] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1135.265590][T15922] CPU: 1 PID: 15922 Comm: syz.3.3518 Not tainted syzkaller #0 [ 1135.273198][T15922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1135.283281][T15922] Call Trace: [ 1135.286597][T15922] [ 1135.289550][T15922] dump_stack_lvl+0x188/0x24e [ 1135.294273][T15922] ? show_regs_print_info+0x12/0x12 [ 1135.299701][T15922] ? load_image+0x400/0x400 [ 1135.304294][T15922] ? __lock_acquire+0x7d10/0x7d10 [ 1135.309368][T15922] ? __virt_addr_valid+0x188/0x540 [ 1135.314518][T15922] should_fail_ex+0x399/0x4d0 [ 1135.319227][T15922] _copy_from_user+0x2c/0x170 [ 1135.323944][T15922] bpf_test_init+0xde/0x140 [ 1135.328488][T15922] bpf_prog_test_run_xdp+0x484/0xf10 [ 1135.333832][T15922] ? dev_put+0x80/0x80 [ 1135.337940][T15922] ? dev_put+0x80/0x80 [ 1135.342052][T15922] bpf_prog_test_run+0x31e/0x390 [ 1135.347044][T15922] __sys_bpf+0x62b/0x780 [ 1135.351329][T15922] ? bpf_link_show_fdinfo+0x380/0x380 [ 1135.356760][T15922] ? lock_chain_count+0x20/0x20 [ 1135.361651][T15922] __x64_sys_bpf+0x78/0x90 [ 1135.366106][T15922] do_syscall_64+0x4c/0xa0 [ 1135.370572][T15922] ? clear_bhb_loop+0x60/0xb0 [ 1135.375296][T15922] ? clear_bhb_loop+0x60/0xb0 [ 1135.380011][T15922] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1135.385940][T15922] RIP: 0033:0x7f412979cdd9 [ 1135.390407][T15922] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1135.410055][T15922] RSP: 002b:00007f412a738028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1135.418498][T15922] RAX: ffffffffffffffda RBX: 00007f4129a15fa0 RCX: 00007f412979cdd9 [ 1135.426499][T15922] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 1135.434494][T15922] RBP: 00007f412a738090 R08: 0000000000000000 R09: 0000000000000000 [ 1135.442505][T15922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1135.450514][T15922] R13: 00007f4129a16038 R14: 00007f4129a15fa0 R15: 00007fff2aa94558 [ 1135.458547][T15922] [ 1137.385167][T15964] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3530'. [ 1137.424986][T15967] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.3532'. [ 1137.439906][T15968] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.3532'. [ 1137.465379][T15964] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3530'. [ 1137.488247][T15964] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1138.621813][T15995] FAULT_INJECTION: forcing a failure. [ 1138.621813][T15995] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1138.724819][T15995] CPU: 1 PID: 15995 Comm: syz.4.3541 Not tainted syzkaller #0 [ 1138.732430][T15995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1138.742503][T15995] Call Trace: [ 1138.745800][T15995] [ 1138.748767][T15995] dump_stack_lvl+0x188/0x24e [ 1138.753477][T15995] ? show_regs_print_info+0x12/0x12 [ 1138.758700][T15995] ? load_image+0x400/0x400 [ 1138.763226][T15995] ? __lock_acquire+0x7d10/0x7d10 [ 1138.768272][T15995] ? snprintf+0xe5/0x140 [ 1138.772530][T15995] should_fail_ex+0x399/0x4d0 [ 1138.777227][T15995] _copy_to_user+0x2c/0x130 [ 1138.781745][T15995] simple_read_from_buffer+0xe3/0x150 [ 1138.787134][T15995] proc_fail_nth_read+0x1a6/0x220 [ 1138.792172][T15995] ? proc_fault_inject_write+0x310/0x310 [ 1138.797826][T15995] ? fsnotify_perm+0x248/0x550 [ 1138.802610][T15995] ? proc_fault_inject_write+0x310/0x310 [ 1138.808257][T15995] vfs_read+0x2de/0xa00 [ 1138.812433][T15995] ? kernel_read+0x1e0/0x1e0 [ 1138.817044][T15995] ? __fget_files+0x28/0x4b0 [ 1138.821744][T15995] ? __fget_files+0x28/0x4b0 [ 1138.826361][T15995] ? __fget_files+0x43d/0x4b0 [ 1138.831092][T15995] ? __fdget_pos+0x2ae/0x360 [ 1138.835707][T15995] ? ksys_read+0x71/0x250 [ 1138.840053][T15995] ksys_read+0x14c/0x250 [ 1138.844317][T15995] ? vfs_write+0xa30/0xa30 [ 1138.848759][T15995] ? syscall_enter_from_user_mode+0x2a/0x80 [ 1138.854674][T15995] do_syscall_64+0x4c/0xa0 [ 1138.859112][T15995] ? clear_bhb_loop+0x60/0xb0 [ 1138.863805][T15995] ? clear_bhb_loop+0x60/0xb0 [ 1138.868526][T15995] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1138.874446][T15995] RIP: 0033:0x7f9652b5d60e [ 1138.878879][T15995] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1138.898499][T15995] RSP: 002b:00007f9653a77fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1138.906953][T15995] RAX: ffffffffffffffda RBX: 00007f9653a786c0 RCX: 00007f9652b5d60e [ 1138.914943][T15995] RDX: 000000000000000f RSI: 00007f9653a780a0 RDI: 0000000000000009 [ 1138.922924][T15995] RBP: 00007f9653a78090 R08: 0000000000000000 R09: 0000000000000000 [ 1138.930921][T15995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1138.938909][T15995] R13: 00007f9652e16038 R14: 00007f9652e15fa0 R15: 00007ffd0d0c2768 [ 1138.946906][T15995] [ 1139.099966][T16008] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1139.127698][T16008] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1139.295307][T16017] FAULT_INJECTION: forcing a failure. [ 1139.295307][T16017] name failslab, interval 1, probability 0, space 0, times 0 [ 1139.334551][T16017] CPU: 1 PID: 16017 Comm: syz.3.3548 Not tainted syzkaller #0 [ 1139.342074][T16017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1139.352151][T16017] Call Trace: [ 1139.355458][T16017] [ 1139.358430][T16017] dump_stack_lvl+0x188/0x24e [ 1139.363155][T16017] ? show_regs_print_info+0x12/0x12 [ 1139.368394][T16017] ? load_image+0x400/0x400 [ 1139.372943][T16017] ? _printk+0xa/0x130 [ 1139.377046][T16017] should_fail_ex+0x399/0x4d0 [ 1139.381752][T16017] should_failslab+0x5/0x20 [ 1139.386289][T16017] slab_pre_alloc_hook+0x59/0x310 [ 1139.391353][T16017] ? mark_lock+0x94/0x320 [ 1139.395755][T16017] kmem_cache_alloc_node+0x5a/0x320 [ 1139.401025][T16017] ? __lock_acquire+0x12f4/0x7d10 [ 1139.406106][T16017] ? __alloc_skb+0xfc/0x7e0 [ 1139.410655][T16017] __alloc_skb+0xfc/0x7e0 [ 1139.415054][T16017] alloc_skb_with_frags+0xa7/0x710 [ 1139.420224][T16017] sock_alloc_send_pskb+0x87f/0x9a0 [ 1139.425621][T16017] ? sock_kzfree_s+0x50/0x50 [ 1139.430245][T16017] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1139.436266][T16017] ? lock_chain_count+0x20/0x20 [ 1139.441169][T16017] tun_get_user+0x915/0x3c70 [ 1139.445825][T16017] ? ref_tracker_alloc+0x71/0x4b0 [ 1139.450893][T16017] ? kasan_check_range+0x92/0x290 [ 1139.455969][T16017] ? rcu_read_unlock+0xa0/0xa0 [ 1139.460780][T16017] ? tun_get+0x1c/0x2e0 [ 1139.464979][T16017] ? __lock_acquire+0x7d10/0x7d10 [ 1139.470039][T16017] ? tun_get+0x1c/0x2e0 [ 1139.474228][T16017] tun_chr_write_iter+0x112/0x1f0 [ 1139.479289][T16017] vfs_write+0x4b1/0xa30 [ 1139.483575][T16017] ? file_end_write+0x250/0x250 [ 1139.488485][T16017] ? __fget_files+0x43d/0x4b0 [ 1139.493224][T16017] ? __fdget_pos+0x1d4/0x360 [ 1139.497868][T16017] ? ksys_write+0x71/0x250 [ 1139.502343][T16017] ksys_write+0x14c/0x250 [ 1139.506727][T16017] ? __ia32_sys_read+0x80/0x80 [ 1139.511567][T16017] do_syscall_64+0x4c/0xa0 [ 1139.516036][T16017] ? clear_bhb_loop+0x60/0xb0 [ 1139.520744][T16017] ? clear_bhb_loop+0x60/0xb0 [ 1139.525455][T16017] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1139.531381][T16017] RIP: 0033:0x7f412979cdd9 [ 1139.535827][T16017] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1139.555459][T16017] RSP: 002b:00007f412a738028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1139.563895][T16017] RAX: ffffffffffffffda RBX: 00007f4129a15fa0 RCX: 00007f412979cdd9 [ 1139.571884][T16017] RDX: 000000000000ffc0 RSI: 0000200000000000 RDI: 00000000000000c8 [ 1139.579879][T16017] RBP: 00007f412a738090 R08: 0000000000000000 R09: 0000000000000000 [ 1139.587871][T16017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1139.595872][T16017] R13: 00007f4129a16038 R14: 00007f4129a15fa0 R15: 00007fff2aa94558 [ 1139.603876][T16017] [ 1139.833331][T16025] netlink: 'syz.3.3551': attribute type 49 has an invalid length. [ 1139.934287][T16031] FAULT_INJECTION: forcing a failure. [ 1139.934287][T16031] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1139.947934][T16031] CPU: 1 PID: 16031 Comm: syz.0.3553 Not tainted syzkaller #0 [ 1139.955433][T16031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1139.965520][T16031] Call Trace: [ 1139.968832][T16031] [ 1139.971788][T16031] dump_stack_lvl+0x188/0x24e [ 1139.976514][T16031] ? verify_lock_unused+0x140/0x140 [ 1139.981757][T16031] ? show_regs_print_info+0x12/0x12 [ 1139.987029][T16031] ? load_image+0x400/0x400 [ 1139.991586][T16031] ? mark_lock+0x94/0x320 [ 1139.995971][T16031] ? mark_lock+0x94/0x320 [ 1140.000366][T16031] should_fail_ex+0x399/0x4d0 [ 1140.005106][T16031] prepare_alloc_pages+0x1e2/0x5f0 [ 1140.010268][T16031] __alloc_pages+0x130/0x4f0 [ 1140.014928][T16031] ? zone_statistics+0x170/0x170 [ 1140.019914][T16031] ? rcu_is_watching+0x11/0xa0 [ 1140.024725][T16031] ? trace_contention_end+0x5f/0x170 [ 1140.030046][T16031] ? __mutex_lock+0x1ab/0xaf0 [ 1140.034763][T16031] alloc_pages_node+0x10a/0x170 [ 1140.039661][T16031] ? skb_attempt_defer_free+0x410/0x410 [ 1140.045247][T16031] ? __local_bh_disable_ip+0x104/0x1a0 [ 1140.050745][T16031] __napi_alloc_skb+0x351/0x530 [ 1140.055648][T16031] napi_get_frags+0x68/0x140 [ 1140.060287][T16031] ? tun_get_user+0x9ee/0x3c70 [ 1140.065114][T16031] tun_get_user+0xa07/0x3c70 [ 1140.069778][T16031] ? rcu_read_unlock+0xa0/0xa0 [ 1140.074600][T16031] ? tun_get+0x1c/0x2e0 [ 1140.078801][T16031] ? __lock_acquire+0x7d10/0x7d10 [ 1140.083876][T16031] ? tun_get+0x1c/0x2e0 [ 1140.088087][T16031] tun_chr_write_iter+0x112/0x1f0 [ 1140.093170][T16031] vfs_write+0x4b1/0xa30 [ 1140.097477][T16031] ? file_end_write+0x250/0x250 [ 1140.102374][T16031] ? __fget_files+0x43d/0x4b0 [ 1140.107132][T16031] ? __fdget_pos+0x1d4/0x360 [ 1140.111761][T16031] ? ksys_write+0x71/0x250 [ 1140.116235][T16031] ksys_write+0x14c/0x250 [ 1140.120620][T16031] ? __ia32_sys_read+0x80/0x80 [ 1140.125453][T16031] ? lockdep_hardirqs_on+0x94/0x140 [ 1140.130690][T16031] do_syscall_64+0x4c/0xa0 [ 1140.135155][T16031] ? clear_bhb_loop+0x60/0xb0 [ 1140.139871][T16031] ? clear_bhb_loop+0x60/0xb0 [ 1140.144582][T16031] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1140.150515][T16031] RIP: 0033:0x7f8b5f39cdd9 [ 1140.154969][T16031] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1140.174603][T16031] RSP: 002b:00007f8b6031a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1140.183053][T16031] RAX: ffffffffffffffda RBX: 00007f8b5f616090 RCX: 00007f8b5f39cdd9 [ 1140.191063][T16031] RDX: 0000000000000280 RSI: 0000200000000380 RDI: 0000000000000003 [ 1140.199176][T16031] RBP: 00007f8b6031a090 R08: 0000000000000000 R09: 0000000000000000 [ 1140.207184][T16031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1140.215209][T16031] R13: 00007f8b5f616128 R14: 00007f8b5f616090 R15: 00007fffceb8ed18 [ 1140.223239][T16031] [ 1141.501800][T16062] FAULT_INJECTION: forcing a failure. [ 1141.501800][T16062] name failslab, interval 1, probability 0, space 0, times 0 [ 1141.522047][T16062] CPU: 0 PID: 16062 Comm: syz.4.3562 Not tainted syzkaller #0 [ 1141.529557][T16062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1141.539648][T16062] Call Trace: [ 1141.542965][T16062] [ 1141.545934][T16062] dump_stack_lvl+0x188/0x24e [ 1141.550680][T16062] ? show_regs_print_info+0x12/0x12 [ 1141.555943][T16062] ? load_image+0x400/0x400 [ 1141.560506][T16062] ? __might_sleep+0xd0/0xd0 [ 1141.565148][T16062] ? __lock_acquire+0x7d10/0x7d10 [ 1141.570238][T16062] should_fail_ex+0x399/0x4d0 [ 1141.574966][T16062] should_failslab+0x5/0x20 [ 1141.579504][T16062] slab_pre_alloc_hook+0x59/0x310 [ 1141.584568][T16062] ? lockdep_hardirqs_on+0x94/0x140 [ 1141.589805][T16062] ? sctp_datamsg_from_user+0x84/0xee0 [ 1141.595339][T16062] __kmem_cache_alloc_node+0x4f/0x260 [ 1141.600755][T16062] ? sctp_datamsg_from_user+0x84/0xee0 [ 1141.606261][T16062] kmalloc_trace+0x26/0xe0 [ 1141.610716][T16062] sctp_datamsg_from_user+0x84/0xee0 [ 1141.616046][T16062] ? __sk_mem_raise_allocated+0xa48/0x13d0 [ 1141.621896][T16062] ? __sk_mem_schedule+0x7b/0xe0 [ 1141.626865][T16062] sctp_sendmsg_to_asoc+0x107b/0x1830 [ 1141.632285][T16062] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1141.638312][T16062] ? sctp_sendmsg+0xa7c/0x2940 [ 1141.643110][T16062] ? sctp_sendmsg_check_sflags+0x2d0/0x2d0 [ 1141.648950][T16062] ? __local_bh_enable_ip+0x136/0x1c0 [ 1141.654345][T16062] ? _local_bh_enable+0xa0/0xa0 [ 1141.659234][T16062] ? sctp_sendmsg_check_sflags+0x18d/0x2d0 [ 1141.665078][T16062] sctp_sendmsg+0x1984/0x2940 [ 1141.669795][T16062] ? aa_file_perm+0x112/0xf00 [ 1141.674505][T16062] ? aa_sk_perm+0x771/0x950 [ 1141.679043][T16062] ? sctp_getsockopt+0x8a0/0x8a0 [ 1141.684069][T16062] ? aa_af_perm+0x340/0x340 [ 1141.688626][T16062] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 1141.695068][T16062] ? aa_file_perm+0x3ea/0xf00 [ 1141.699778][T16062] ? inet_sendmsg+0x78/0x2f0 [ 1141.704395][T16062] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1141.709726][T16062] ? security_socket_sendmsg+0x7c/0xa0 [ 1141.715229][T16062] sock_write_iter+0x2d9/0x3e0 [ 1141.720021][T16062] ? sock_read_iter+0x3a0/0x3a0 [ 1141.724910][T16062] ? common_file_perm+0x171/0x1c0 [ 1141.729969][T16062] vfs_write+0x4b1/0xa30 [ 1141.734253][T16062] ? file_end_write+0x250/0x250 [ 1141.739138][T16062] ? __fget_files+0x43d/0x4b0 [ 1141.743873][T16062] ? __fdget_pos+0x1d4/0x360 [ 1141.748499][T16062] ? ksys_write+0x71/0x250 [ 1141.752952][T16062] ksys_write+0x14c/0x250 [ 1141.757315][T16062] ? __ia32_sys_read+0x80/0x80 [ 1141.762132][T16062] ? lockdep_hardirqs_on+0x94/0x140 [ 1141.767369][T16062] do_syscall_64+0x4c/0xa0 [ 1141.771820][T16062] ? clear_bhb_loop+0x60/0xb0 [ 1141.776535][T16062] ? clear_bhb_loop+0x60/0xb0 [ 1141.781241][T16062] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1141.787159][T16062] RIP: 0033:0x7f9652b9cdd9 [ 1141.791600][T16062] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1141.811236][T16062] RSP: 002b:00007f9653a36028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1141.819681][T16062] RAX: ffffffffffffffda RBX: 00007f9652e16180 RCX: 00007f9652b9cdd9 [ 1141.827677][T16062] RDX: 000000000000fdef RSI: 0000200000000440 RDI: 0000000000000003 [ 1141.835678][T16062] RBP: 00007f9653a36090 R08: 0000000000000000 R09: 0000000000000000 [ 1141.843666][T16062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1141.851651][T16062] R13: 00007f9652e16218 R14: 00007f9652e16180 R15: 00007ffd0d0c2768 [ 1141.859658][T16062] [ 1143.597508][T16080] netlink: 'syz.1.3571': attribute type 49 has an invalid length. [ 1143.906553][ T4296] Bluetooth: hci4: command 0x0406 tx timeout [ 1144.556851][T16093] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.3574'. [ 1144.819831][T16100] netlink: 'syz.3.3575': attribute type 46 has an invalid length. [ 1144.880335][T16106] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.3576'. [ 1144.951708][T16106] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 1145.396753][T16129] netlink: 'syz.3.3586': attribute type 3 has an invalid length. [ 1145.408735][T16129] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3586'. [ 1146.738143][T16140] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3591'. [ 1146.779773][T16146] netlink: 'syz.2.3590': attribute type 49 has an invalid length. [ 1146.803135][T16145] netlink: 10 bytes leftover after parsing attributes in process `syz.4.3593'. [ 1146.822088][T16140] netlink: 180 bytes leftover after parsing attributes in process `syz.3.3591'. [ 1146.901941][T16148] netlink: 'syz.1.3594': attribute type 10 has an invalid length. [ 1146.925319][T16148] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3594'. [ 1146.944362][T16148] device batadv_slave_1 entered promiscuous mode [ 1146.964059][T16140] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3591'. [ 1146.973701][T16145] tipc: Started in network mode [ 1146.978645][T16145] tipc: Node identity 9215a268, cluster identity 4711 [ 1147.132629][T16145] tipc: Node number set to 2450891368 [ 1147.818595][T16165] FAULT_INJECTION: forcing a failure. [ 1147.818595][T16165] name failslab, interval 1, probability 0, space 0, times 0 [ 1147.867205][T16168] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3598'. [ 1147.880114][T16165] CPU: 1 PID: 16165 Comm: syz.0.3597 Not tainted syzkaller #0 [ 1147.887621][T16165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1147.897708][T16165] Call Trace: [ 1147.901024][T16165] [ 1147.903994][T16165] dump_stack_lvl+0x188/0x24e [ 1147.908742][T16165] ? sctp_sendmsg+0x15b0/0x2940 [ 1147.913633][T16165] ? ___sys_sendmsg+0x2a2/0x360 [ 1147.918557][T16165] ? show_regs_print_info+0x12/0x12 [ 1147.923799][T16165] ? load_image+0x400/0x400 [ 1147.928354][T16165] should_fail_ex+0x399/0x4d0 [ 1147.933084][T16165] should_failslab+0x5/0x20 [ 1147.937620][T16165] slab_pre_alloc_hook+0x59/0x310 [ 1147.942685][T16165] ? sctp_add_bind_addr+0x89/0x350 [ 1147.947835][T16165] __kmem_cache_alloc_node+0x4f/0x260 [ 1147.953243][T16165] ? sctp_add_bind_addr+0x89/0x350 [ 1147.958391][T16165] kmalloc_trace+0x26/0xe0 [ 1147.962841][T16165] sctp_add_bind_addr+0x89/0x350 [ 1147.967820][T16165] sctp_copy_local_addr_list+0x311/0x4e0 [ 1147.973530][T16165] ? sctp_copy_local_addr_list+0xa1/0x4e0 [ 1147.979313][T16165] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 1147.985425][T16165] ? sctp_v6_is_any+0x60/0x70 [ 1147.990138][T16165] ? sctp_copy_one_addr+0x93/0x660 [ 1147.995301][T16165] sctp_bind_addr_copy+0xaf/0x3c0 [ 1148.000395][T16165] ? sctp_assoc_set_bind_addr_from_ep+0xa1/0x190 [ 1148.006777][T16165] sctp_connect_new_asoc+0x2f5/0x6a0 [ 1148.012104][T16165] ? __sctp_connect+0xd80/0xd80 [ 1148.016993][T16165] ? __local_bh_enable_ip+0x136/0x1c0 [ 1148.022396][T16165] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 1148.027977][T16165] ? security_sctp_bind_connect+0x85/0xb0 [ 1148.033734][T16165] sctp_sendmsg+0x15b0/0x2940 [ 1148.038462][T16165] ? aa_sk_perm+0x771/0x950 [ 1148.043006][T16165] ? sctp_getsockopt+0x8a0/0x8a0 [ 1148.047987][T16165] ? __might_fault+0xa6/0x120 [ 1148.052699][T16165] ? aa_af_perm+0x340/0x340 [ 1148.057239][T16165] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 1148.063703][T16165] ? inet_sendmsg+0xe5/0x2f0 [ 1148.068324][T16165] ? inet_send_prepare+0x260/0x260 [ 1148.073481][T16165] ____sys_sendmsg+0x5be/0x970 [ 1148.078305][T16165] ? __sys_sendmsg_sock+0x30/0x30 [ 1148.083367][T16165] ? __import_iovec+0x315/0x500 [ 1148.088264][T16165] ? import_iovec+0x6f/0xa0 [ 1148.092809][T16165] ___sys_sendmsg+0x2a2/0x360 [ 1148.097552][T16165] ? __sys_sendmsg+0x290/0x290 [ 1148.102381][T16165] ? __lock_acquire+0x7d10/0x7d10 [ 1148.107476][T16165] __se_sys_sendmsg+0x1bb/0x2a0 [ 1148.112381][T16165] ? __x64_sys_sendmsg+0x80/0x80 [ 1148.117376][T16165] ? lockdep_hardirqs_on+0x94/0x140 [ 1148.122614][T16165] do_syscall_64+0x4c/0xa0 [ 1148.127173][T16165] ? clear_bhb_loop+0x60/0xb0 [ 1148.131888][T16165] ? clear_bhb_loop+0x60/0xb0 [ 1148.136622][T16165] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1148.142577][T16165] RIP: 0033:0x7f8b5f39cdd9 [ 1148.147024][T16165] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1148.166671][T16165] RSP: 002b:00007f8b6033b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1148.175125][T16165] RAX: ffffffffffffffda RBX: 00007f8b5f615fa0 RCX: 00007f8b5f39cdd9 [ 1148.183152][T16165] RDX: 0000000000040040 RSI: 00002000000003c0 RDI: 0000000000000003 [ 1148.191156][T16165] RBP: 00007f8b6033b090 R08: 0000000000000000 R09: 0000000000000000 [ 1148.199161][T16165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1148.207162][T16165] R13: 00007f8b5f616038 R14: 00007f8b5f615fa0 R15: 00007fffceb8ed18 [ 1148.215179][T16165] [ 1148.479313][T16181] sctp: [Deprecated]: syz.2.3604 (pid 16181) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1148.479313][T16181] Use struct sctp_sack_info instead [ 1165.965795][ T4286] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1165.974731][ T4286] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1165.984581][ T4286] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1165.992432][ T4286] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1166.004412][ T4286] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1166.011748][ T4286] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1166.021176][ T4286] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1166.028541][ T4286] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1166.036860][ T4286] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1166.044188][ T4286] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1166.051816][ T4286] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1166.062266][ T4286] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1167.059438][ T4286] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1167.071220][ T4286] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1167.083691][ T4286] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1167.092392][ T4286] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1167.100693][ T4296] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 1167.113334][ T4296] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1167.469922][ T4286] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1167.486123][ T4286] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1167.494667][ T4286] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1167.502951][ T4286] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1167.513754][ T4286] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 1167.521337][ T4286] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1167.726126][ T4296] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1167.741243][ T4296] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1167.749513][ T4296] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1167.758849][ T4296] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1167.766778][ T4296] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 1167.774514][ T4296] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1168.092648][T16219] chnl_net:caif_netlink_parms(): no params data found [ 1168.144002][T16222] Bluetooth: hci6: command 0x0409 tx timeout [ 1168.150522][T16222] Bluetooth: hci0: command 0x0409 tx timeout [ 1168.639350][T16216] chnl_net:caif_netlink_parms(): no params data found [ 1168.661565][T16231] chnl_net:caif_netlink_parms(): no params data found [ 1168.683388][T16227] chnl_net:caif_netlink_parms(): no params data found [ 1168.707449][T16223] chnl_net:caif_netlink_parms(): no params data found [ 1169.183668][T16222] Bluetooth: hci7: command 0x0409 tx timeout [ 1169.462261][T16219] bridge0: port 1(bridge_slave_0) entered blocking state [ 1169.483165][T16219] bridge0: port 1(bridge_slave_0) entered disabled state [ 1169.492126][T16219] device bridge_slave_0 entered promiscuous mode [ 1169.583730][T16222] Bluetooth: hci9: command 0x0409 tx timeout [ 1169.823930][T16222] Bluetooth: hci8: command 0x0409 tx timeout [ 1169.847632][T16219] bridge0: port 2(bridge_slave_1) entered blocking state [ 1169.855766][T16219] bridge0: port 2(bridge_slave_1) entered disabled state [ 1169.874170][T16219] device bridge_slave_1 entered promiscuous mode [ 1170.223585][T16222] Bluetooth: hci0: command 0x041b tx timeout [ 1170.229754][T16222] Bluetooth: hci6: command 0x041b tx timeout [ 1170.247794][T16231] bridge0: port 1(bridge_slave_0) entered blocking state [ 1170.269076][T16231] bridge0: port 1(bridge_slave_0) entered disabled state [ 1170.277965][T16231] device bridge_slave_0 entered promiscuous mode [ 1170.314772][T16227] bridge0: port 1(bridge_slave_0) entered blocking state [ 1170.321928][T16227] bridge0: port 1(bridge_slave_0) entered disabled state [ 1170.344963][T16227] device bridge_slave_0 entered promiscuous mode [ 1170.364788][T16219] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1170.384653][T16223] bridge0: port 1(bridge_slave_0) entered blocking state [ 1170.391827][T16223] bridge0: port 1(bridge_slave_0) entered disabled state [ 1170.424894][T16223] device bridge_slave_0 entered promiscuous mode [ 1170.433816][T16231] bridge0: port 2(bridge_slave_1) entered blocking state [ 1170.440974][T16231] bridge0: port 2(bridge_slave_1) entered disabled state [ 1170.465171][T16231] device bridge_slave_1 entered promiscuous mode [ 1170.485074][T16216] bridge0: port 1(bridge_slave_0) entered blocking state [ 1170.492308][T16216] bridge0: port 1(bridge_slave_0) entered disabled state [ 1170.508081][T16216] device bridge_slave_0 entered promiscuous mode [ 1170.533073][T16227] bridge0: port 2(bridge_slave_1) entered blocking state [ 1170.541852][T16227] bridge0: port 2(bridge_slave_1) entered disabled state [ 1170.555057][T16227] device bridge_slave_1 entered promiscuous mode [ 1170.577911][T16219] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1170.599326][T16223] bridge0: port 2(bridge_slave_1) entered blocking state [ 1170.607265][T16223] bridge0: port 2(bridge_slave_1) entered disabled state [ 1170.615908][T16223] device bridge_slave_1 entered promiscuous mode [ 1170.650309][T16216] bridge0: port 2(bridge_slave_1) entered blocking state [ 1170.657934][T16216] bridge0: port 2(bridge_slave_1) entered disabled state [ 1170.680071][T16216] device bridge_slave_1 entered promiscuous mode [ 1170.786011][T16231] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1170.867029][T16219] team0: Port device team_slave_0 added [ 1170.877670][T16223] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1170.906119][T16231] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1170.919446][T16227] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1170.945486][T16216] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1170.958737][T16219] team0: Port device team_slave_1 added [ 1170.968524][T16223] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1171.013150][T16227] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1171.036290][T16216] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1171.139389][T16231] team0: Port device team_slave_0 added [ 1171.181087][T16219] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1171.189481][T16219] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1171.237180][T16219] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1171.263590][T16222] Bluetooth: hci7: command 0x041b tx timeout [ 1171.275376][T16223] team0: Port device team_slave_0 added [ 1171.284041][T16231] team0: Port device team_slave_1 added [ 1171.293019][T16227] team0: Port device team_slave_0 added [ 1171.664202][T16222] Bluetooth: hci9: command 0x041b tx timeout [ 1171.903864][T16222] Bluetooth: hci8: command 0x041b tx timeout [ 1172.304928][T16222] Bluetooth: hci6: command 0x040f tx timeout [ 1172.311053][T16222] Bluetooth: hci0: command 0x040f tx timeout [ 1173.344217][T16222] Bluetooth: hci7: command 0x040f tx timeout [ 1173.743713][T16222] Bluetooth: hci9: command 0x040f tx timeout [ 1173.984109][T16222] Bluetooth: hci8: command 0x040f tx timeout [ 1174.383868][T16222] Bluetooth: hci0: command 0x0419 tx timeout [ 1174.389970][T16222] Bluetooth: hci6: command 0x0419 tx timeout [ 1175.423660][T16222] Bluetooth: hci7: command 0x0419 tx timeout [ 1175.504240][ T126] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 0-.... } 2658 jiffies s: 88309 root: 0x1/. [ 1175.533755][ T126] rcu: blocking rcu_node structures (internal RCU debug): [ 1175.540947][ T126] Sending NMI from CPU 1 to CPUs 0: [ 1175.546369][ C0] NMI backtrace for cpu 0 [ 1175.546378][ C0] CPU: 0 PID: 16196 Comm: syz.3.3610 Not tainted syzkaller #0 [ 1175.546395][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1175.546404][ C0] RIP: 0010:asm_sysvec_irq_work+0x0/0x20 [ 1175.546432][ C0] Code: e9 b5 03 00 00 90 90 90 90 90 0f 01 ca fc 6a ff e8 b5 02 00 00 48 89 c4 48 89 e7 e8 ea b0 ed ff e9 95 03 00 00 90 90 90 90 90 <0f> 01 ca fc 6a ff e8 95 02 00 00 48 89 c4 48 89 e7 e8 ba b5 ed ff [ 1175.546446][ C0] RSP: 0018:ffffc9000e9ff3d8 EFLAGS: 00000006 [ 1175.546460][ C0] RAX: cf4c417510f88500 RBX: 1ffff92001d3fe88 RCX: cf4c417510f88500 [ 1175.546472][ C0] RDX: dffffc0000000000 RSI: ffffffff8a8c1120 RDI: ffffffff8adf1320 [ 1175.546484][ C0] RBP: ffffc9000e9ff4f0 R08: ffffffff90af92df R09: 1ffffffff215f25b [ 1175.546496][ C0] R10: dffffc0000000000 R11: fffffbfff215f25c R12: 0000000000000246 [ 1175.546508][ C0] R13: dffffc0000000000 R14: ffff8880b8e3b900 R15: 0000000000000001 [ 1175.546518][ C0] FS: 00007f412a7386c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1175.546533][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1175.546544][ C0] CR2: 00007f965394da08 CR3: 0000000062ec4000 CR4: 00000000003506f0 [ 1175.546558][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1175.546568][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1175.546579][ C0] Call Trace: [ 1175.546584][ C0] [ 1175.546589][ C0] RIP: 0010:rcu_read_unlock_special+0x7f/0x510 [ 1175.546608][ C0] Code: eb 03 48 b8 f1 f1 f1 f1 f8 f2 f2 f2 4a 89 04 2b 42 c7 44 2b 08 f8 f3 f3 f3 65 44 8b 35 d2 33 95 7e 41 f7 c6 00 00 f0 00 74 40 <48> c7 44 24 40 0e 36 e0 45 4a c7 04 2b 00 00 00 00 42 c7 44 2b 08 [ 1175.546621][ C0] RSP: 0018:ffffc9000e9ff400 EFLAGS: 00000206 [ 1175.546636][ C0] ? page_ext_get+0x1e/0x2a0 [ 1175.546660][ C0] ? __rcu_read_unlock+0xd0/0xd0 [ 1175.546678][ C0] ? page_ext_get+0x1de/0x2a0 [ 1175.546700][ C0] __rcu_read_unlock+0x78/0xd0 [ 1175.546717][ C0] page_ext_put+0x91/0xb0 [ 1175.546737][ C0] copy_page_range+0x24ea/0x3900 [ 1175.546783][ C0] ? pfn_valid+0x450/0x450 [ 1175.546812][ C0] ? up_write+0x1bb/0x420 [ 1175.546834][ C0] copy_mm+0xec3/0x1690 [ 1175.546863][ C0] ? copy_signal+0x680/0x680 [ 1175.546880][ C0] ? lockdep_init_map_type+0x98/0x8d0 [ 1175.546910][ C0] ? __init_rwsem+0x11e/0x160 [ 1175.546929][ C0] ? copy_signal+0x556/0x680 [ 1175.546948][ C0] copy_process+0x1979/0x4030 [ 1175.546964][ C0] ? plist_add+0x3d4/0x480 [ 1175.546992][ C0] ? copy_process+0x94d/0x4030 [ 1175.547014][ C0] ? idle_dummy+0x10/0x10 [ 1175.547031][ C0] ? __lock_acquire+0x7d10/0x7d10 [ 1175.547056][ C0] kernel_clone+0x24b/0x900 [ 1175.547073][ C0] ? trace_call_bpf+0x5d6/0x6b0 [ 1175.547095][ C0] ? trace_call_bpf+0xbf/0x6b0 [ 1175.547117][ C0] ? create_io_thread+0x170/0x170 [ 1175.547138][ C0] ? do_futex+0x310/0x320 [ 1175.547156][ C0] __x64_sys_clone+0x1a7/0x220 [ 1175.547175][ C0] ? __ia32_sys_vfork+0x140/0x140 [ 1175.547197][ C0] ? lock_chain_count+0x20/0x20 [ 1175.547222][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 1175.547241][ C0] do_syscall_64+0x4c/0xa0 [ 1175.547262][ C0] ? clear_bhb_loop+0x60/0xb0 [ 1175.547282][ C0] ? clear_bhb_loop+0x60/0xb0 [ 1175.547303][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1175.547323][ C0] RIP: 0033:0x7f412979cdd9 [ 1175.547337][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1175.547350][ C0] RSP: 002b:00007f412a737fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1175.547365][ C0] RAX: ffffffffffffffda RBX: 00007f4129a15fa0 RCX: 00007f412979cdd9 [ 1175.547378][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011 [ 1175.547388][ C0] RBP: 00007f4129832d69 R08: 0000000000000000 R09: 0000000000000000 [ 1175.547399][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1175.547409][ C0] R13: 00007f4129a16038 R14: 00007f4129a15fa0 R15: 00007fff2aa94558 [ 1175.547427][ C0] [ 1175.940993][T16222] Bluetooth: hci9: command 0x0419 tx timeout [ 1176.063831][T16222] Bluetooth: hci8: command 0x0419 tx timeout