last executing test programs: 20m3.783561575s ago: executing program 0 (id=6900): r0 = socket$kcm(0xa, 0x2, 0x3a) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x18000000000002a0, 0x1f, 0x62, &(0x7f0000000380)="b9e403c6630d698cb8a00b04339c", 0x0, 0x172, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @mcast2, 0x1a}, 0x2a, &(0x7f00000000c0)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000006c0)=""/163, 0xa3}], 0x1}, 0x60) 20m3.581780855s ago: executing program 0 (id=6902): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[@rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0x30, 0x4000004}, 0x20000000) r2 = perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x1, 0x0, 0xfe, 0x37, 0x0, 0xffb, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000040), 0x1}, 0x10008, 0x0, 0x4082c5, 0x0, 0x4}, 0x0, 0x1, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000000)=0x7) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x0) r3 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r3, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="020a000902000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8916, &(0x7f0000000000)={'veth1_to_bridge\x00', @random="02000400ac14"}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x8) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x513, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x202, 0x0, 0xffffffff, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0xa, 0x5, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001600)={@fallback=r5, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r7 = openat$cgroup_devices(r6, &(0x7f0000000200)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r7, &(0x7f0000000340)=ANY=[@ANYBLOB='b 75:*\tw\nr'], 0xa) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80044, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={0x0}, 0x0, 0x5}, 0xffffffffffffffff, 0xfffffeffffffffff, 0xffffffffffffffff, 0x3) socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10, 0x0}, 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000002a40)}, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000940)={0x0, 0x3e1, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081084e81f782db44b904021d080006067c09e8fe55a10a0015400800142603600e120800160000001001a8001600a400014003000000036004fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0x6000}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x4) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) 20m3.128265878s ago: executing program 0 (id=6906): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000040)={@cgroup=r0, r0, 0x2f}, 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=r0, 0x2f, 0x0, 0x2000000, &(0x7f0000000140)=[0x0], 0x1, 0x0, &(0x7f0000000200)=[0x0], 0x0, 0x0}, 0x24) 20m2.919438789s ago: executing program 0 (id=6909): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r0, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x7, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x16, &(0x7f0000000440)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0xc0, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000001a00000600"/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x4, 0x13, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r2, @ANYBLOB="00000000000092536b2ab9440000b7020000000000008500000017000000bf910000000000d4e9ff9ceab2c500b7020000010000008500000084000000b70000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000e40)=ANY=[@ANYBLOB="9feb010018000000000000007800000078000000030000000600000000000010080000000000000007000084fd0400000000000000000000020000000d00000000000000c5d4008ac29e54000900000002000000090000000400000003000000070000000200000004000000000000000e0000000400000007000000100000000700000001000000100000000000000b02000000956f0b3e3b1da5264ce07b4a608ab2c721838a567703e73b7efb9622d1e498901b7b06a812bcfa351341a2525ddbe44ccffdaaf026af75c4336fdfa0648116f89551790eb2"], &(0x7f0000000840)=""/171, 0x93, 0xab, 0x1, 0xf05, 0x10000}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xd, &(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRESDEC], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0x1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b00)={0x1b, 0x0, 0x0, 0x5, 0x0, r4, 0x75, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x5}, 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="5c00000014006b030231a6080c000af32c00e3f629c7b091ea1638d40df9056873fd7dc72e13bbb44a16d1009dfff1fc0000f800250f02000f00edaa000057d34060bc24cdb556bd05251e6194949a2756f475ce36c2ed10000000", 0x5b}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x8000, 0x4, 0x4, 0x4, 0x1, 0x1}, 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000700)={0x0, r5}, 0x8) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000940)={&(0x7f00000009c0)=ANY=[@ANYBLOB="9feb01001800000000000000d2000000d2000000040000000f0000000500000f02000000020000000800000000000000030000000100000000100000030000000700000000040000030000000700000007000000010000000d00000092815167d9a70f000000000000120300000007000000090000020400000007000000450600000900000003000000080000000800000010000000ff01000006000000090000000c0000009100000007000000020000000d0000000900000002000000ff7f00001000000000000002030000"], &(0x7f0000000380)=""/161, 0xf0, 0xa1, 0x1, 0x4}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x1a, 0x5, 0x7, 0x8, 0x4, r4, 0xb, '\x00', 0x0, r6, 0x0, 0x1, 0x2}, 0x50) r7 = socket$kcm(0x2, 0x5, 0x84) sendmsg$kcm(r7, &(0x7f0000000600)={&(0x7f0000000100)=@in={0x2, 0x4e23, @private=0xa010102}, 0x80, 0x0, 0x0, &(0x7f0000000540)=[{0x10, 0x84, 0x8}], 0x10}, 0x4045) r8 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r8, 0x0, 0x6, 0x0, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000e00)={0xffffffffffffffff, 0xe0, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0], 0x0, 0x86, &(0x7f0000000980)=[{}], 0x8, 0x10, &(0x7f0000000c40), &(0x7f0000000c80), 0x8, 0x53, 0x8, 0x8, &(0x7f0000000cc0)}}, 0x10) sendmsg$kcm(r9, &(0x7f0000000080)={0x0, 0x14, &(0x7f0000000440)=[{&(0x7f0000000280)="d8000000140081054e81f782db44b9040a1d08020a000600040000a118000200fe80000000000e1208000f0100a10401a80016eaa4000640fefffffeffffffffb94dcf5c0461c1d67f6f94007134cf6ee08002a0e408e8d8ef075c817bd6c496ddffaa2795edb1e61e0100000000000000cb090000001fb791643a5ee4001b14547df36745d6d930dfe1d9d322fe7c9fd68775730d96a4683f5aeb4edbb57a5025ccca9e00158c89ed6cb4d1ac95e7765e04c2360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b4", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 20m2.71881078s ago: executing program 0 (id=6912): r0 = socket$kcm(0xa, 0x2, 0x3a) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000380), 0x0, 0x172, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0xfff5, @mcast2, 0x1a}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) recvmsg$kcm(r0, 0x0, 0x60) 20m2.536146011s ago: executing program 0 (id=6914): perf_event_open(&(0x7f0000001c40)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x3f, 0x6, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x2, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000c40), 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000300), 0x12) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8003}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x8, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x60, &(0x7f0000000000)=[{&(0x7f0000000300)="2000004011008188040f80ec59acbc0413a181000d0000000001000000000000", 0x20}], 0x1}, 0x40000) 19m46.874894421s ago: executing program 32 (id=6914): perf_event_open(&(0x7f0000001c40)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x3f, 0x6, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x2, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000c40), 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000300), 0x12) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8003}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x8, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x60, &(0x7f0000000000)=[{&(0x7f0000000300)="2000004011008188040f80ec59acbc0413a181000d0000000001000000000000", 0x20}], 0x1}, 0x40000) 5.076061519s ago: executing program 3 (id=12867): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000071101b000000000006000000000000009500"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc9, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x20000000}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x4}, 0x10}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001240)={&(0x7f0000000240)=@isdn={0x22, 0xe, 0x2, 0x9, 0x7}, 0x80, &(0x7f00000011c0)=[{&(0x7f0000000dc0)="96", 0x1}, {&(0x7f0000000e00)="9c32ef81ccac8b7f59573abbc99d692bba303d05ab7d842a7e5646c2ff760a58a586c8a5a82c298184a1ae0d318e9672223906fc98477041b62345f76bc8b369c711db81596e", 0x46}, {&(0x7f0000000e80)="55ba2f07abc0eb3f2d0be808a0d84e57ec2d36df583448838f8b8485fe0c98804d9896c7d37c0e0af9a7bf7b9a6e870c03c9be247885f4d6e7ab88422e30eb3e61bd4b8cfbcbbbbe90b48ebfe6e695cc89a1ed0316e93c9ab64bfa40c9", 0x5d}, {&(0x7f0000000f00)="bf9f1cc8fff840cb7bda0e4713c4715bf8714011885ea07e8da8863a7376b9ceb01b050f059bb2ad3d34013a7294fa9e15309972bfa39f95bb14a939ebb262bedfd79a3cc81f4ce1c56cd2ecc5f0b0332ce767d8531c6ab02bb921a13c52b801d0be6b618ef26d0b6612ce18d4cddcc41d5f8b82d9b0f89930fec91a811fe7ccec0add3cb1df85513b68d13ec9ff4d46aeb4346775788804f0ee6f27250a49c3e072b538d81fed90e8e6", 0xaa}, {&(0x7f0000000fc0)="ee838596fa35f16c01e52ebf8a1cc44e3ff8b867147ba6779671cbe566762435f6700161a181bd55c85ed85f54cd81cecde41cc557dcc06c2e07ccc63263ca2f7dbe530c24552227776dbe7617a166d12c5667958addd00fb73dd9a57ad93434860c1e041a44d63e0d3ba71f48763e76ff42263b94703671efe453ffa22e1f6df4ef6d5e70238823efb2b6dcaccfa48fdf1a481bfa93b21fdec5fe73b9e06c87a6214538a54682d2f0a6f53ec970faa550265d13cca546280c1a30ae438e8f2de10b061d8e", 0xc5}, {&(0x7f00000010c0)="c085f9edef9d4fcb56a238ee7ee29fb07abe9744aa2b02b5dc2171be3c798f601261360485ab6ce93f20ec9c7f58af40c7383b9de98610ac16d1dfc4c449505deddd204fa4c0f34f87158456c48ce2239ba87e559c399f8f829ac5ed96804de4d7335e19da120f2f1bed93d2db3ea99239303d2ac84fbb166245d8462a619eea251561550ec4d659f21270fb08031b29fdc20452d97bc3b422123562ee8436fc2340f879a01fd091606079ab69c0aa2bee24b24809d64883664dbca7a6c956e2d2468df3e8952170de", 0xc9}, {&(0x7f0000001880)="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", 0xfff}], 0x7}, 0x40080) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000002c0)='blkio.throttle.write_bps_device\x00', 0x2, 0x0) write$cgroup_pressure(r2, &(0x7f0000000200)={'some', 0x20, 0x4, 0x20, 0x1}, 0x2f) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x200002, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x1, 0x84) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0xb67d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0, 0x8}, 0x21, 0x0, 0x0, 0x0, 0x2, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001201", 0x2e}], 0x1}, 0x0) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x4, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10}, 0x8, 0x8000000000ca, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0xffffff7e, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r8 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x5, 0x200}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9) write$cgroup_subtree(r7, &(0x7f0000000200)=ANY=[@ANYRES8=r6, @ANYRES8], 0x12) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r10) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x6}, 0x38) bpf$ITER_CREATE(0x21, &(0x7f0000000600)={r0}, 0x8) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r11, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) 3.936586833s ago: executing program 3 (id=12874): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x448, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x80040, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x2a, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, 0x0) 3.658633266s ago: executing program 3 (id=12876): r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x9, 0x5, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, [@btf_id={0x18, 0x3, 0x3, 0x0, 0x4}]}, &(0x7f0000000100)='GPL\x00', 0xfffffff7, 0xd, &(0x7f0000000140)=""/13, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x6, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f00000001c0)=[0xffffffffffffffff, 0x1, 0x1, r0, 0x1, r1, 0x1, 0xffffffffffffffff, 0x1], &(0x7f0000000200)=[{0x0, 0x2, 0x9, 0x3}, {0x3, 0x5, 0x6, 0x3}, {0x4, 0x1, 0x7, 0xa}, {0x1, 0x4, 0x9, 0x7}, {0x3, 0x2, 0x0, 0x1}, {0x3, 0x3, 0x8, 0xd}, {0x1, 0x5, 0x10, 0x4}, {0x4, 0x2, 0xc, 0x1}, {0x5, 0x4, 0x6}], 0x10, 0x8001}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) (async) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000003c0)=@generic={&(0x7f0000000380)='\x00', 0x0, 0x52d0db1475babeee}, 0x18) (async) r4 = gettid() r5 = perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x6, 0x1, 0x73, 0xfa, 0x0, 0x7, 0x80000, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7, 0x2, @perf_config_ext={0x10000, 0x101}, 0x1110d0, 0x8, 0x401, 0x2, 0xfffffffffffffff7, 0x1, 0xfff3, 0x0, 0x6, 0x0, 0xfffffffffffffff2}, r4, 0x7, 0xffffffffffffffff, 0x18) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000640)={0x1, 0x58, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$inet(r7, &(0x7f0000000740)={&(0x7f00000004c0)={0x2, 0x4e22, @private=0xa010102}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000500)="f36b76df6e945fdaf88fdb862fc6cd6edafb0d35876613c57294393ba9610b61a3b19e16441e8a79f180114a72b28b07f7bba91727f591cf88c04e62caded70a268f18fec9acfaf345dc8cfc", 0x4c}], 0x1, &(0x7f0000000680)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x10000}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @private=0xa010101, @multicast1}}}, @ip_retopts={{0x48, 0x0, 0x7, {[@timestamp_addr={0x44, 0x14, 0x44, 0x1, 0x5, [{@dev={0xac, 0x14, 0x14, 0x33}, 0x10000}, {@dev={0xac, 0x14, 0x14, 0x1d}}]}, @rr={0x7, 0x23, 0x1c, [@empty, @broadcast, @multicast1, @local, @dev={0xac, 0x14, 0x14, 0x1a}, @broadcast, @multicast2, @local]}]}}}, @ip_retopts={{0x28, 0x0, 0x7, {[@cipso={0x86, 0x16, 0x3, [{0x0, 0xc, "9a5cc96d9b19b951977e"}, {0x6, 0x4, '*G'}]}]}}}], 0xc0}, 0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r4, r5, 0x0, 0x5, &(0x7f0000000780)='syz1\x00'}, 0x30) (async) r9 = socket$kcm(0x29, 0x4, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89e2, &(0x7f0000000800)={r6}) r10 = getpid() r11 = perf_event_open(&(0x7f0000000840)={0x4, 0x80, 0x1, 0xf9, 0x0, 0x5, 0x0, 0xfffffffffffffff4, 0x4, 0x4, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_config_ext={0x7, 0x9}, 0x2000, 0xfffffffffffffff7, 0x1000, 0x4, 0xffffffffffffffff, 0xfffff801, 0x0, 0x0, 0x80000000, 0x0, 0x348}, r10, 0x6, r5, 0x9) (async) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b40)={0x18, 0x1a, &(0x7f00000008c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xde}, [@generic={0x4, 0x7, 0x1, 0x3ac5, 0x1}, @jmp={0x5, 0x1, 0xb, 0x2, 0x5, 0x100, 0x8}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x773}, @generic={0x4, 0x1, 0x2, 0x9, 0x7f}, @map_fd={0x18, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @tail_call, @call={0x85, 0x0, 0x0, 0x26}, @ldst={0x2, 0x3, 0x1, 0x6, 0x5, 0x34, 0x8}]}, &(0x7f00000009c0)='GPL\x00', 0xa0000000, 0x1000, &(0x7f0000000a00)=""/4096, 0x41000, 0x4, '\x00', r8, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001a00)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000001a40)={0x0, 0xe, 0x6, 0x4}, 0x10, 0x0, 0x0, 0x9, 0x0, &(0x7f0000001a80)=[{0x5, 0x4, 0x2, 0x6}, {0x1, 0x1, 0xc, 0xc}, {0x5, 0x2, 0x7, 0x3}, {0x3, 0x5, 0xb, 0x9}, {0x4, 0x2}, {0x1, 0x5, 0xf, 0x1}, {0x1, 0x3, 0x3, 0x9}, {0x4, 0x4, 0x3, 0xa}, {0x5, 0x4, 0xe, 0x3}], 0x10, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001e00)={r12, 0x0, 0x7b, 0x2, &(0x7f0000001c00)="adb4d1d32f25768e5653066fc4991ccbcd1b38878aa46bc3398e6797eb180bdde1e43c47d91a26ff359a5b257c2162f75f13ebb53d436b2a0efc22d4a002d607691b24d45394e7e8ee04a19777a8e75c5b3b89fb8035f7d6ac98efed02537a1c66b38823afa3d415c76c5278bc320cfa3266d5f58ff86f4c81fa2f", &(0x7f0000001c80)=""/2, 0x4, 0x0, 0xc5, 0x2d, &(0x7f0000001cc0)="7628cad71c143fa24ba1f230d10495eb04cada2524edd1f4043429fe340350de60643a8077bd4d082c80ee8f91f12498212a5d065e8a984493211bd9719f24e3f564a6059d083d8021c2846a0e85107e380d0369aa06c2554d79673cd390fc0ddadbbf75bb5b623b32757fdbf03d4913a9bcc990ff923a90f3c86eb4dde6e1a234cbeb2b1684e5ea86c7e69527784f2c0f75392e3b675985f281efda9f58255a37685ebed22bbb9ce3d0453ec242d79d98846a40608b6ec2b8a6161fcd273e1cd8759c6c18", &(0x7f0000001dc0)="2911c2e9aaf8916497274cafb7281ed2b3f6c85bef5a40a0087ee85a050ec50ff9f4f06a584875418470959a59", 0x3, 0x0, 0x4}, 0x50) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r3) (async) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40082404, &(0x7f0000001e80)=0x2) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000002180)={0xb, 0x1a, &(0x7f0000001ec0)=@raw=[@printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffffffff}}, @cb_func={0x18, 0x8, 0x4, 0x0, 0x6}, @generic={0xb, 0x7, 0x1, 0xfffd, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4fa2735e}}, @generic={0x6, 0xf, 0xd, 0x7, 0xfffffffb}, @generic={0x5, 0x4, 0xd, 0x0, 0x80000000}], &(0x7f0000001fc0)='GPL\x00', 0x0, 0xda, &(0x7f0000002000)=""/218, 0x41000, 0x68, '\x00', r8, @fallback=0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000002100)={0x3, 0x5, 0x6, 0xfff}, 0x10, 0xffffffffffffffff, r3, 0x4, 0x0, &(0x7f0000002140)=[{0x0, 0x5, 0x2, 0x9}, {0x3, 0x2, 0x6, 0x9}, {0x2, 0x5, 0x4, 0x2}, {0x0, 0x4, 0x1, 0x7}], 0x10, 0x9}, 0x94) setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f0000002240)=r13, 0x4) (async) r14 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002280)={0x1b, 0x0, 0x0, 0xa, 0x0, r6, 0x2, '\x00', r8, 0xffffffffffffffff, 0x2, 0x3, 0x1}, 0x50) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002380)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000002300), &(0x7f0000002340)=r13}, 0x20) r16 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000002580), 0x4) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000002640)={0x40000000, 0x0}, 0x8) (async) r18 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000026c0)=@generic={&(0x7f0000002680)='./file0\x00', 0x0, 0x10}, 0x18) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002780)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000002700), &(0x7f0000002740)=r12}, 0x20) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000027c0)={r11, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000002900)={0x15, 0x23, &(0x7f00000023c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xd5c9, 0x0, 0x0, 0x0, 0xfd67}, {{0x18, 0x1, 0x1, 0x0, r14}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r15}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x80000000}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xc50d}}]}, &(0x7f0000002500)='syzkaller\x00', 0x0, 0xc, &(0x7f0000002540)=""/12, 0x40f00, 0x60, '\x00', 0x0, @fallback=0x20, r16, 0x8, &(0x7f00000025c0)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000002600)={0x1, 0x1, 0x0, 0x955}, 0x10, r17, r12, 0x3, &(0x7f0000002880)=[r18, r19, r20, 0xffffffffffffffff], &(0x7f00000028c0)=[{0x1, 0x2, 0xc, 0x8}, {0x2, 0x2, 0x6, 0x2}, {0x1, 0x4, 0x8, 0xc}], 0x10, 0xffffffff}, 0x94) 3.436145179s ago: executing program 2 (id=12878): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = gettid() sendmsg$unix(r0, &(0x7f0000000740)={&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f00000001c0)=[@cred={{0x1c, 0x1, 0x2, {r1, 0xee01, 0xee00}}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0x38, 0x800}, 0x40800) sendmsg(0xffffffffffffffff, 0x0, 0x40e4804) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r2, 0x10d, 0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) sendmsg$sock(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000500)="7a6eca88ca428c8d4f36c8b8fc2047659bdcb41a9ebe5ac0bed120663c7a3c234c937452515eae867806e58adcd9", 0x2e}], 0x1}, 0x4804) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 3.435933639s ago: executing program 1 (id=12879): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000004c0)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000100000000000000010000850000007d000000b7080000000000007b8af8ff00000000b7080000001000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.435752839s ago: executing program 3 (id=12880): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) recvmsg$unix(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000002380)=[{&(0x7f0000002480)=""/195, 0xc3}], 0x1}, 0x2000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r4}, &(0x7f0000000000), &(0x7f00000000c0)=r1}, 0x20) sendmsg$inet(r1, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000300)="ffbc", 0x2}], 0x1}, 0xc001) close(r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000001080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x8}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}, {}, {0x85, 0x0, 0x0, 0xa7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r6}, 0xc) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001980)={0x18, 0x3, &(0x7f00000013c0)=@framed, &(0x7f0000001400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000240)=@generic={&(0x7f0000000000)='./file0\x00', r7}, 0x18) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff7) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="bc00"], 0x50) ioctl$TUNGETVNETLE(r0, 0x40047451, &(0x7f0000000040)) close(r0) 3.285171241s ago: executing program 1 (id=12882): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000071101b000000000006000000000000009500"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc9, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x20000000}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x4}, 0x10}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001240)={&(0x7f0000000240)=@isdn={0x22, 0xe, 0x2, 0x9, 0x7}, 0x80, &(0x7f00000011c0)=[{&(0x7f0000000dc0)="96", 0x1}, {&(0x7f0000000e00)="9c32ef81ccac8b7f59573abbc99d692bba303d05ab7d842a7e5646c2ff760a58a586c8a5a82c298184a1ae0d318e9672223906fc98477041b62345f76bc8b369c711db81596e", 0x46}, {&(0x7f0000000e80)="55ba2f07abc0eb3f2d0be808a0d84e57ec2d36df583448838f8b8485fe0c98804d9896c7d37c0e0af9a7bf7b9a6e870c03c9be247885f4d6e7ab88422e30eb3e61bd4b8cfbcbbbbe90b48ebfe6e695cc89a1ed0316e93c9ab64bfa40c9", 0x5d}, {&(0x7f0000000f00)="bf9f1cc8fff840cb7bda0e4713c4715bf8714011885ea07e8da8863a7376b9ceb01b050f059bb2ad3d34013a7294fa9e15309972bfa39f95bb14a939ebb262bedfd79a3cc81f4ce1c56cd2ecc5f0b0332ce767d8531c6ab02bb921a13c52b801d0be6b618ef26d0b6612ce18d4cddcc41d5f8b82d9b0f89930fec91a811fe7ccec0add3cb1df85513b68d13ec9ff4d46aeb4346775788804f0ee6f27250a49c3e072b538d81fed90e8e6", 0xaa}, {&(0x7f0000000fc0)="ee838596fa35f16c01e52ebf8a1cc44e3ff8b867147ba6779671cbe566762435f6700161a181bd55c85ed85f54cd81cecde41cc557dcc06c2e07ccc63263ca2f7dbe530c24552227776dbe7617a166d12c5667958addd00fb73dd9a57ad93434860c1e041a44d63e0d3ba71f48763e76ff42263b94703671efe453ffa22e1f6df4ef6d5e70238823efb2b6dcaccfa48fdf1a481bfa93b21fdec5fe73b9e06c87a6214538a54682d2f0a6f53ec970faa550265d13cca546280c1a30ae438e8f2de10b061d8e", 0xc5}, {&(0x7f00000010c0)="c085f9edef9d4fcb56a238ee7ee29fb07abe9744aa2b02b5dc2171be3c798f601261360485ab6ce93f20ec9c7f58af40c7383b9de98610ac16d1dfc4c449505deddd204fa4c0f34f87158456c48ce2239ba87e559c399f8f829ac5ed96804de4d7335e19da120f2f1bed93d2db3ea99239303d2ac84fbb166245d8462a619eea251561550ec4d659f21270fb08031b29fdc20452d97bc3b422123562ee8436fc2340f879a01fd091606079ab69c0aa2bee24b24809d64883664dbca7a6c956e2d2468df3e8952170de", 0xc9}, {&(0x7f0000001880)="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", 0xfff}], 0x7}, 0x40080) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000002c0)='blkio.throttle.write_bps_device\x00', 0x2, 0x0) write$cgroup_pressure(r2, &(0x7f0000000200)={'some', 0x20, 0x4, 0x20, 0x1}, 0x2f) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0xe, 0xfc, 0xff, 0x9, 0x0, 0x1ff, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6, 0x4, @perf_bp={0x0}, 0x420, 0x6d4a, 0x8, 0x0, 0xd, 0x2, 0x7, 0x0, 0x8001, 0x0, 0x5}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x1, 0x84) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0xb67d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0, 0x8}, 0x21, 0x0, 0x0, 0x0, 0x2, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001201", 0x2e}], 0x1}, 0x0) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x4, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10}, 0x8, 0x8000000000ca, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0xffffff7e, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r8 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x5, 0x200}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9) write$cgroup_subtree(r7, &(0x7f0000000200)=ANY=[@ANYRES8=r6, @ANYRES8], 0x12) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r10) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x6}, 0x38) bpf$ITER_CREATE(0x21, &(0x7f0000000600)={r0}, 0x8) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r11, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) 2.338587282s ago: executing program 2 (id=12885): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x448, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x2a, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, 0x0) 2.264256054s ago: executing program 1 (id=12886): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000040)={0x4, &(0x7f00000000c0)=[{0x25, 0x1, 0x3, 0xfffffffe}, {}, {0x28}, {0x6, 0x6}]}) (async) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000340), 0xc}, 0x4480, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) (async) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffcf9, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="5c00000026006bab9a1fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038000a004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509", 0x4e}, {&(0x7f0000000000)="92", 0x1}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) socket$kcm(0xa, 0x2, 0x0) (async) r5 = socket$kcm(0x23, 0x5, 0x0) sendmsg$kcm(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x10004000) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89ed, 0x0) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000800000089c4213f9ae378aa950000000000000008a2b300369e224267fbbb1827395617bbdbd7d536a3ddb1ccdd0ceb8ea0ecf92786f15c3a607f385308b5a43d80c26bdd1d60cf04762ce9519c4de297feabeece64d6ff8418ac826426f2abe30d0a4589d01495f1fbb77346a94fb924d5c0bc2f823000d260c205eb44522fcf37fab09b2fb48e9a1d78eff85b8db12cdbb6fe9d"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000900)=r7, 0x4) r8 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r8, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r8, 0x0, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.210389234s ago: executing program 3 (id=12887): socket$kcm(0x10, 0x5, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@cgroup, 0xa, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r0 = socket$kcm(0x2, 0x1, 0x84) r1 = socket$kcm(0x2, 0x5, 0x84) socket$kcm(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0x6, 0x8, &(0x7f00000002c0)="0000ffffffff", &(0x7f0000000300)=""/8, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680), 0xc) sendmsg$kcm(r1, &(0x7f00000016c0)={&(0x7f0000000080)=@l2={0x1f, 0x6, @none, 0x3, 0x1}, 0x80, &(0x7f00000013c0)=[{&(0x7f0000000180)="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", 0x1000}, {&(0x7f0000001180)="6465bcfa5e70c0d1d5d756a8177b9ab95bb5de6ce9dbbfbf4cfd877f17c1576d81238edf671adf49c567fee671514a755e9dcc5ad73369a1f9ba0fca6ffc10faa75ca6720a7d34a9ee67033cd84f820118dfec845db2dc313b2b3cd419ffceda2af204e0644f3285103c6a5a35ee189f3597afa6cd6410d60ade39aacdb1fe18fabe672b5072f2c0451b6936dde44fca9bb3ae9599d50ff392eb9aa13c80b96384d2bd3f775b810aa5e25b96ba53d474ed7d6adaab8f43050787685fef21", 0xbe}, {&(0x7f0000001240)}, {&(0x7f0000001340)="b55fceb578baf2a9fe7ea71b6093af5abe4faeb419ae5abfec08077104c66d3a31b4f900aab474a836cfa0aa19755f4be128af1c5f05afc534eccf8fc4abc40588f3f6d13a182652edc0c273e551", 0x4e}], 0x4, &(0x7f0000001700)=ANY=[@ANYBLOB="100000000000000001010000ff07000048000000000000000100000001000000f0dc9e869bb63c5e9d35ff3a4774daba339f9ab5a33e33c0a7cf5312e4b918113565a69767d6f440618fa98375dae6d6b7c09a008000000040000000000000000d01000004000000a2dd2ecdcf4e4a657a0c2bbf2ee180e8c41001aa373326a4f36e5fc3239d7782c40f57b007b0a90fbc0000000000000030000000000000000c01000005000000c76743b3b8d0962f1d54e265da304385bd236345b8fbb4724e7b000000000000800000000000000088000000100a0000f6487c6b3b0e26104d75dd397f3b61584be25981a62c3aeaf08679263acf7c14991f0c5411d8e8b5dbf0cd13a6041e141d3728ee2f6635298eb1f568e85ed8e98957d1543744f9aa284f0936ecd16a9a1c37355c6f3796dee72d3e93bf4a0ae4ba284096531984d85f3a85000000a0000000001700001100000003000000147b49ac3d04dce1b96e42f9036b020de83961c1fc1163613472c8140056b784a85a0fea69707ee257da7e2dd41d006cfcd18473f99e01ca4cf6a42c1a307314966b316ff3156db853d4ad6e3cbc199bc4a977e9758a384537f4a9fc736d0c8cfd05c9369400b3b429007b28409f9e091684137bbf44cbad7c082e252c479790e66e6651fa296b7b4b7eb78a90590000"], 0x1e8}, 0x24000000) perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x1718, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000012c0), 0x8}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) r4 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x9, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8931, &(0x7f0000000080)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8932, &(0x7f0000000080)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000003c00)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f0000000100)=r6, 0x4) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001280)=@generic={&(0x7f0000001240)='./file0\x00', r2}, 0x18) sendmsg$inet(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000c40)="02", 0x1}], 0x1}, 0x40400c5) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000400)="a5d0", 0x1650}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) r7 = socket$kcm(0x10, 0x2, 0x0) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) openat$cgroup_freezer_state(r8, &(0x7f0000001940), 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2000000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e", 0x21}], 0x1}, 0x20044000) setsockopt$sock_attach_bpf(r0, 0x84, 0x9, &(0x7f0000000380), 0x98) 2.140262775s ago: executing program 4 (id=12888): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000400000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x3, 0x25, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x3, 0x25, 0x4, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0}, 0x40) 2.103053955s ago: executing program 2 (id=12889): ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc0189436, 0x2000141a) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0x3}, 0x8808, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0xfffffffc, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x26, 0x5, 0x1ff, &(0x7f00000000c0)={0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2}}, @struct={0x0, 0x0, 0x0, 0x4, 0x0, 0x97}]}}, 0x0, 0x3e, 0x0, 0x0, 0xe9d}, 0x28) sendmsg$kcm(r1, &(0x7f00000002c0)={&(0x7f0000000100)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)="51a9830e05bacf8c673588c5ead68c3a497b16d3cc60", 0x16}, {&(0x7f00000001c0)="03597a42392d115851beae0333ec75b6f43fad3874b854288fc92b3570a40ba75d469c42ad909e4f094419ccfb46d5707bed1ee65bd298055712f63410efc355cc7ef75e4a1d8783d7485c040be7", 0x4e}, {&(0x7f0000000240)="f956e1b64b2fb2785e37d63ea8f9793a59b7b5a606d7ed9ec2bafc0062567f267ba48b4f", 0x24}], 0x3}, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x8000}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x25, 0x0, 0x3, 0x8}, {0x20}, {0x28, 0x0, 0x1, 0x1}, {0xb1, 0xb, 0x28, 0x8001}, {0x16, 0xfc, 0x5, 0xffffffff}]}) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f0000000040)={'wlan1\x00', @random="2e2ee363a4b1"}) 2.000382787s ago: executing program 1 (id=12890): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x6, 0x603}, 0x50) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x1, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x1, 0x3a0, 0x5}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1800, r3}, 0x38) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000640)={r3, &(0x7f0000000080), &(0x7f0000000540)=""/240}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000100), 0x200df000, r0, 0x0, 0x800000000}, 0x38) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffffffffffff49, &(0x7f0000000380)=[{&(0x7f0000000040)="c01803002e000b12d25a80648c2594f90124fc60100c044002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x746f2f51, &(0x7f0000000080)=[{&(0x7f0000000040)="3f0400001c00810ce00f80ecdb4cb9f207c804a01f000000020005fb0a0002000a0ada1b40d80300000000000000", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) 1.892041858s ago: executing program 4 (id=12891): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfb6}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r1, 0x0, 0xfe33) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x30, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe33, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000008c0)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x21}, 0x94) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001100)={0x9, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=r2, 0x4) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3eff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdb}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800"/13], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0xe, &(0x7f00000011c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000fcffffff0000000000000018120000", @ANYRES32=r5], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[], 0x0, 0x26}, 0x28) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d800000024008106", 0x8}], 0x1}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b00)={0x2, 0x4, 0x8, 0x1, 0x80, r5, 0x1180, '\x00', 0x0, r6, 0x2, 0x1, 0x1}, 0x50) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00002a"], 0xfe33) 1.836141018s ago: executing program 2 (id=12892): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) recvmsg$unix(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000002380)=[{&(0x7f0000002480)=""/195, 0xc3}], 0x1}, 0x2000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r4}, &(0x7f0000000000), &(0x7f00000000c0)=r1}, 0x20) sendmsg$inet(r1, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000300)="ffbc", 0x2}], 0x1}, 0xc001) close(r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000001080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x8}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}, {}, {0x85, 0x0, 0x0, 0xa7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r6}, 0xc) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001980)={0x18, 0x3, &(0x7f00000013c0)=@framed, &(0x7f0000001400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000240)=@generic={&(0x7f0000000000)='./file0\x00', r7}, 0x18) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4000000}, 0x2124, 0x6, 0x0, 0x8, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="bc00"], 0x50) ioctl$TUNGETVNETLE(r0, 0x40047451, &(0x7f0000000040)) close(r0) 1.545780782s ago: executing program 4 (id=12893): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x100904, 0x0, 0x0, 0x0, 0x200000, 0x7, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400020}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x104046, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f00000001c0)=r0) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="6485b835bceb1f0308d9871697cc3fdb699915b47fa691c441216f60bc0e8cfc788a8c67f0df9797554404f9b62eae06", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB="26f600"/12, @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), &(0x7f0000000080)=r4}, 0x20) sendmsg$inet(r5, &(0x7f0000000500)={0x0, 0x4000000, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) r8 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0xa}, 0x8000, 0x5, 0x43a1bd76, 0xf, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9) perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x4, 0x5}, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xb, 0xffffffffffffffff, 0xa) openat$ppp(0xffffffffffffff9c, &(0x7f0000000400), 0x620401, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{}, 0x0, 0x0}, 0x20) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0x7, 0xc}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.433394304s ago: executing program 2 (id=12894): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000071101b000000000006000000000000009500"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc9, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x20000000}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x4}, 0x10}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001240)={&(0x7f0000000240)=@isdn={0x22, 0xe, 0x2, 0x9, 0x7}, 0x80, &(0x7f00000011c0)=[{&(0x7f0000000dc0)="96", 0x1}, {&(0x7f0000000e00)="9c32ef81ccac8b7f59573abbc99d692bba303d05ab7d842a7e5646c2ff760a58a586c8a5a82c298184a1ae0d318e9672223906fc98477041b62345f76bc8b369c711db81596e", 0x46}, {&(0x7f0000000e80)="55ba2f07abc0eb3f2d0be808a0d84e57ec2d36df583448838f8b8485fe0c98804d9896c7d37c0e0af9a7bf7b9a6e870c03c9be247885f4d6e7ab88422e30eb3e61bd4b8cfbcbbbbe90b48ebfe6e695cc89a1ed0316e93c9ab64bfa40c9", 0x5d}, {&(0x7f0000000f00)="bf9f1cc8fff840cb7bda0e4713c4715bf8714011885ea07e8da8863a7376b9ceb01b050f059bb2ad3d34013a7294fa9e15309972bfa39f95bb14a939ebb262bedfd79a3cc81f4ce1c56cd2ecc5f0b0332ce767d8531c6ab02bb921a13c52b801d0be6b618ef26d0b6612ce18d4cddcc41d5f8b82d9b0f89930fec91a811fe7ccec0add3cb1df85513b68d13ec9ff4d46aeb4346775788804f0ee6f27250a49c3e072b538d81fed90e8e6", 0xaa}, {&(0x7f0000000fc0)="ee838596fa35f16c01e52ebf8a1cc44e3ff8b867147ba6779671cbe566762435f6700161a181bd55c85ed85f54cd81cecde41cc557dcc06c2e07ccc63263ca2f7dbe530c24552227776dbe7617a166d12c5667958addd00fb73dd9a57ad93434860c1e041a44d63e0d3ba71f48763e76ff42263b94703671efe453ffa22e1f6df4ef6d5e70238823efb2b6dcaccfa48fdf1a481bfa93b21fdec5fe73b9e06c87a6214538a54682d2f0a6f53ec970faa550265d13cca546280c1a30ae438e8f2de10b061d8e", 0xc5}, {&(0x7f00000010c0)="c085f9edef9d4fcb56a238ee7ee29fb07abe9744aa2b02b5dc2171be3c798f601261360485ab6ce93f20ec9c7f58af40c7383b9de98610ac16d1dfc4c449505deddd204fa4c0f34f87158456c48ce2239ba87e559c399f8f829ac5ed96804de4d7335e19da120f2f1bed93d2db3ea99239303d2ac84fbb166245d8462a619eea251561550ec4d659f21270fb08031b29fdc20452d97bc3b422123562ee8436fc2340f879a01fd091606079ab69c0aa2bee24b24809d64883664dbca7a6c956e2d2468df3e8952170de", 0xc9}, {&(0x7f0000001880)="6050e1e5556e467b13bb22d04c1183be17ac1ecf53de2da5c98ba7d9347d0206e7b0bb22239e236e59a77e31757698480fba665bdfb0c1015734996f389a6725f3b371dd63fc4e1939d063bc9e4268289eb10f86175311b3af5a56bbd67e5dc3763e494ecc74ef287291127fb758f5b97843750fcb4a11eb9583b60e763152feac90365a3b2a8fffd4f6fc5c21c6de83a30b3b9758021df6dea1298effaabfcf365961bf9a0f0c7e076afbf55fedcf815560d4a4c82a9d3e10f60f46322793173fe2c8b365cb8cf8c7d9aa3dd01748676b0a65bcabbb17cdb0b2db1782a4e002470b498dd9e3ac26806ce602f52b90f76abccccf81114c29b5c74c5f24cd1fe9fd0d5fe0c0a2554531c13a9c4a13f94af47e55fc2a2bac54b7bbda6b478a8782003de8b33f8a4f1d8a1c8b4a0754eaf7f5540e2c46acc113200f832a001906786258d560ee92cfa0c755a75250a4210d4739eb1724e6ce3ebf2f0e2c2c98e8b84ffcc5db2b5e7c1ecedf099a4a66ab3ecf7c5cd86d9e1be9696e054ea56c6d110aa389b3102901b0c9ef12178be9c24690b15af6e035177e9d24c252ff59b45c6642bbb556f046c821e05606af7068fc49c6b97321d014922974543b164b8a4eda05a09cdc03c787c520a3261711eb57619040b591861a31b9bb283152546d0df44e2e00652911b40650425eb24792768395f021c137fd87398f9c01f088fd6b35144f0600be3c147971ddaea5fc13494a9cf884f521f86309071b2daeba0f024e10a753be2e7d86cf7a6ffd7d7ced7606373a0bf43803ef3d5aaeecaa810053b8a07ffc51f8f4cbe96893e977bcc0ac42b83ba8a77b85b835e8c68616148c815e281e41856b62e2fae2ff5a3eaf57ff656dcb18b9590345aa75b93d174c6d92ee8a9f7f76900d7490e79f7ac43eb47dcb70fe6964d22a58e4625f4ab1f30fb5fa018fbef32f4e514e00e060956782530e75c9d30968a3f523789b2d840c33df3b921585e710f986233bf40c930b0503914f146ce6eeef5c0b7c2f19576a1097e898eb7ce02086ef27b5184af730d811182fe68602821fef552fde41097217c8d0e5558a30cdb504f23585fbefbf0a53cc0ab917309efd4c0b88b810d63814532c13505d50821ac03cb344eb44f7227b0cb3cc530ed6fb2e38aa92f2a25d7f358250c513eea15f835c235da3173a786b108570000e9d21aa9236c8b7b696a6beb9a199fb4bfcc1b67a7085109a105f81ffb424486c32bf199dd54d46e5c532573d4d210ba309768e6235c0c191024362e6fcb7e52b37a42d841311a094cab617d6a1d1ecfc3472f1ae8cb5afefd20156eee618b3a5c26e0e805d2d0cf97d20d14fd351f531858672d52c12e5932f4b025b976a822403fa62f5288a9978011c10a61b032595e89eb84c1d94bb021ab1a049438fccb1f79e2313e90817a3ac8d3e54d3e53c76484b41d0ac358db1726e608f8959765b445fdf7846709b47790ee4586ca6961af825c26daeaed022c19076e46cc9e2e46ab3d47c65e5973fb20416ca3ab3327c208a027e7a09443a34d402ca7271864beb289813f8244d2c15a6ad7f5f8b71bf4ab29a1c70e56db4cadff05bb2268e1d4460cbbe959d34cba912ad91a707e277eab88e940dd2cac3d33b388f77581544a6f9b4e810216a429156fb0366f908dd20028d9617fd895d5477f8cf1149786881eca8da7413cbc47b54607e0d279e1e07a468f080b86bbc507c853f1bec0b4e35ca30e78e69293200c23a8dfa16e11331778a4a95a34ed72d7ee880a48567f7c041831bab6745ae12cfaba2d90282fb0048ed23f34a9d7f26ff9cb41da7eea41a3e6eb96bd9ba9ae551aaf3a40f418754cb831b6c5203a74d7c9f346dd98d840954303f9dc7063a3359780fcfe8a9026a5adb8994afddc818c31c45b0c1b5b49c10e0315cbb12b651fda4e81ffda15301f01acd98f4140d366972b73977bb0fbc96bd23d481bba6c91e0c04ab0f761038049d7f0380e22bed251f605efa16b97318f03926ff74274208bd89548a47b6a32a55d845b439a5bafc6680736707a6ffca95c35fcfb31f0313309a690d94752a3866186084addc23fd5314a35593d0dd21413e3dc79d30eea8b9d260278f15c5c32d65a750fb2c7663a83745e04218b75ffc9e5c3538198e4454895291819b6ab2ef0fd05b5618af68be91bb8ca745690ec94a5000441a9ff74f6f0612d8732b8c139acb516de9e5e7ac415e27334481b7c0aca506ca04c45d23bb38926f7523c2a14dd358ca20ecd4a3bc9f9b9aa1a18d6dc492ac5389555618f02aed38fe00dde08c67ea6d8425b28c2d419658e6b3e069613e333b8d1b1bc2df5ecf91b3357f046bd2a4a47d36400278cd8df4e1c40c8102649abf952f03ef5a149077364375966b436a39a9fb45d330fbdad632df3c3d4efc93e04e4b687cc60ce526525899e706a9cc847efff46ee2c0f72bd8d5f5f7fbb6944f57efd18ffb1b86cc7d886cb54e11088b716c2737312b766b350e79ac3d8612928d8271660e304dbd621b44f5149be5928c90861466d2cafa0388128c64239c1fd26d0fe7cbb859abafe9d2fe4a03bcbc949724366a5c11610e3e5c74a204f5836eab2075a7583f3a65bc0c01564ff4ddf783acdec8409f892fb7a6de4db51906dcf097767cbe22979aea8fb1610f2f2c7988f10b35971892523c6e974b66218452d5cfa6313c821dacb136fbd5b341db880abb502fb8ec539b0865bea133d8dfd7d7ae4fd16177905e3b9f9615b24262d7594c48a01bc945134624a6f32755218aa69f2df32d9d2ed723fa0ad54211a117b8bd20b53dc7f4e3e915bcbb8764724d9c0bf81af2370864dd7375fa7b99bf3c7c0e32edf5313f3f9678a5dc4e862fcd7a2ab08cbb722d0f606451f2f2bfb74d89e8f2da7638f3bc2db10855e34f0496a0c1217d74673f243cef2bede8d07843d0c0238a214c2989d12b103c12a0ecab3d51f79791eb2626d26bc11cf2ff21fad15457ba879a58f1c4b8aa5d8c870d6c3cd7353059c23bf4e1a6b6aea80b32b645ae293209666701a8b3da0261534acb71d7611248708cbedf5009629dd30b6a3a8211045870c69e6372e2a1dc7e46a0e62d7788c12762775ea9b392f9fdf9cbab7a6aef6dfb1832eca86428c205cbb82e713d738e53c745f126b10edd94da463d33cd6e898683e1b88c5b48097d9ebc327b9d7e85cf7b2962ed808e602ce2a98e9e84c6a7e618cd715e76da953b2eef406c68467e6c6783b42ce3e846872f2b134d5bac6692a50c4c9db24e86d20e03b506aeffc09c8b4b5614b8b12167cd048a0ea4e1749f40151933eae181382867145fbc3e11edcab1f5877a21449d1259d27582220efd2135a07ea9482e858ca46b3863880845fc7436bacc46431f149ef2503e08fb53c5c4076e0ad94ac8de9fc52c7ae18bb41550d3a7feddbe1ee8e1f0a841bd23a97ecb1a53f20d582141b78ab02a694492d682aa65c83295ba76c94cc4f6b8284b56191d3cf668ab00dae96322f72811059502c19e0a7458ee7f53aa3aa6d58c20a604b48872172f62e7af16e3640af0a6323418b4620f8ae506a97882aa556bd96a838f218eb3674003b957dd70e63d3845536c0774281cf813873b890c8310c380aea85b200b3e6712d5cb404188499469c8065673f46027e9c7c1d5bcecc6b480746013d03f1694b56a0f822897197d041e888f2e667b4075a576464db170512d602a9b63c8a8746b8c8383013e943b0c819af2719b08e6d2168c5e13d9c1fb0129253f0fb09647b5b46014cdb2703b7801b3325bf3aac30bae60e9b79b2eb53de77be4e3107eabca2633e83fd3a94ad05136dc6fe50c7a1b130ce16bb1039c839a3a55c355baa326b2a182f44f7a644038bfd3eb9f74deb720988c54008f78063eb69ba16cc7a2b9f02a0b4cef4518de8554bdea10eb3bcd223227e8bd7bb74596a6fb553e8dd185ecd7ef0b6c7dcd50c92d42b488b1610baf34c2ccdee1566b32fcd130362ee7b142f879fc9ad7d80971d5596afd9f18ae4f0999afca0fcc762254619f7c72fee31c425e5441bb42dee361e1a2306cf83d43089449d07e314a757cfe69c3a2a92fb511de8dcb1ed8d5e28d0e84aa4fd7a07edade2f68d03947581e4d41f76e17ea871c3b5dd3764c47573dddf03118644b3fc304f64252b05092359e14dc2cd22b200d1c28c989f867336ef60628ae90059c9bb50a4ed1ca8071cfe0249e6a991e874b6f6a73f7ff11ba55079c0674cf411902df8befa3402847a7caac3567527d7d4c136ee0b5a4c8d9e5b479608aaf84aa986cc97099c4e3f9d847ca43322cf258d35c902d505139f0fc6f2eebf9049ad1b0cda733b8d4e66d0624ab60898b4a6fd12bebdee377592cd006458824ae3a5b7d9f4e89bb7ddcbdf948719a6087c8c4336ea39f7142008fd6b7712a6179a85c9fedb4bf1a26c66d05f09409716fb19521797a8709c385b77cf12785bcb6306b3f1d629d8f9f867d3ead19c21262ad6bbe1b6778fd3a024eaf9242a11e57deab5dd9282488f6c0a86b0d1d07c6cdce5bc2eb9b0fbf56ced92163058f1da177a1665ace981ab65991ced1beae9c191d89209df49f89de4c1b63407c2d853cafabe65e492b6ff82937f965b7324e2984a22dd091fb2a1c41dc7a02bd56f97300dd6604af9c96f38c44bdc9c5f70c55d6b792d84072bb69151ad5482cd7bd4d3ffe3a3e0e93cad4ec7446bfc4e98e1fb73c54a51d2197f80ca641f1c31f3e40abe3fb262c7a56e9b50fc871720d2bde9e6567ca8e93a19a02307be4585cd52daafaeb1c2b1e57b7d9a78a2cf6fffbe7657f4baa59318c6beff3b0b979456a7d1fe658ee575bdd74f58188ad27566c6df929e43cb83a7598105bd7a8abb9dbc0b2b6056ee67744735d57b04f0eb5a002742109b11ae36666d922890d3e8aff0411d7ef0bbc194009cb4bd88a27a8394d578980f426ed70ef98e7a0527b0e853c97f8685006c5d9d1376b69a538ea456fc4cce74432c077b6506714ea97d0969a6847a62312e3ac7bae777a8fdfe92924930efa8ecd3895fd26fa3bc3f1738811f2726d9d26113d3bdbe5fbf9e69770dcd58b6ea4b10593db8e417be2c638b8d038b91bdf94c061c03fb370ed272b71bbbef8f76907e11f1fc29bc441d2fdbdaf8837d2303a28588593db7845288a89c8857d577c497c7090a8d516b918ef0396b8164cf2dd110573d8f6175b1903d1b5ecf01143cc3ad337a0c688ce364c04a7c877c832c573b751560aa448430c41a485e625a90e58b94502340e217a702e485e130ebd7135092dd4de121d17aff9b19a32506992c5ddc5c1483dff0fe35f6ab896a6e391b58cf76cd795b9158d7033a85614d0c903ffdb1fe6fdab465642241a21a50f68bab6375fbc7532f15e9d64f52a334232d2397a54cfda801efc8ba0c6fa68c827e8eeef8ff4ccfa718e8ca59a120f623db0ef89573e2677276cd41f87bbeab7cf20febd1287a7331414613d72658aaddbbfdda39cb9b62e44209e729924fca6069dd4ab6480658939de5293671b0f13a3f5926d9f6823a41ce6d8c9c7bfbb651014505c04ee95dba2a60ebad20dbb69147509111919e7db7a57447d99e7173ebd232489466938fbdb612ba20c2f4157c6670eba82d1eefca5183aeb9f700251c7650f92ed8d600420755794c8a9bd67effea0f92085988c63822d1898f221a8c57039d34749f565567c5058939dd35f1d074e9c5244804173f14e23eaaec4fa470e765d32d0360b61e758b64524d3c0", 0xfff}], 0x7}, 0x40080) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000002c0)='blkio.throttle.write_bps_device\x00', 0x2, 0x0) write$cgroup_pressure(r2, &(0x7f0000000200)={'some', 0x20, 0x4, 0x20, 0x1}, 0x2f) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0xe, 0xfc, 0xff, 0x9, 0x0, 0x1ff, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6, 0x4, @perf_bp={0x0}, 0x420, 0x6d4a, 0x8, 0x0, 0xd, 0x2, 0x7, 0x0, 0x8001, 0x0, 0x5}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x1, 0x84) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0xb67d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0, 0x8}, 0x21, 0x0, 0x0, 0x0, 0x2, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001201", 0x2e}], 0x1}, 0x0) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x4, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10}, 0x8, 0x8000000000ca, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0xffffff7e, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r8 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x5, 0x200}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9) write$cgroup_subtree(r7, &(0x7f0000000200)=ANY=[@ANYRES8=r6, @ANYRES8], 0x12) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r10) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x6}, 0x38) bpf$ITER_CREATE(0x21, &(0x7f0000000600)={r0}, 0x8) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r11, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) 1.109870227s ago: executing program 3 (id=12895): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = gettid() sendmsg$unix(r0, &(0x7f0000000740)={&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f00000001c0)=[@cred={{0x1c, 0x1, 0x2, {r1, 0xee01, 0xee00}}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0x38, 0x800}, 0x40800) sendmsg(0xffffffffffffffff, 0x0, 0x40e4804) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r2, 0x10d, 0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) sendmsg$sock(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000500)="7a6eca88ca428c8d4f36c8b8fc2047659bdcb41a9ebe5ac0bed120663c7a3c234c937452515eae867806e58adcd9", 0x2e}], 0x1}, 0x4804) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.108233727s ago: executing program 1 (id=12903): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0xa, 0x1, 0x106) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}, 0x80, 0x0}, 0x2004c040) sendmsg$kcm(r0, &(0x7f00000019c0)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x703, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x401802, 0x4}, 0x80, 0x0}, 0x20040010) 372.315116ms ago: executing program 4 (id=12896): perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x8000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf8, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x1, 0x0, 0xfffffffffffffffa, 0x2, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000040), 0xcf) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001240)={&(0x7f0000000940)=@generic={0xa, "8ab77fa26849ff263ef30c98b353011a5990650042e2dacdc165ececece6be1862e2adacd2737d00ad6f9fa9f3d7145e15dd9fb1a7adc211220963ad5def53b911ba5b9da13641f982757012a7496de0b3a36f5849f260c603dbc317f54b901ee80ea6132ca6e88c776553e1833052ca376304313c5637786a36a4b83857"}, 0x80, 0x0}, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x2, 0x0, 0xf, 0x0, 0x0, 0x400, 0x1e37cf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x401, 0x200, 0x19, 0x7, 0x200004, 0x100}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={0x1, 0x58, &(0x7f0000000300)}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0)=0xffffffffffffffff, 0x4) r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x5, 0x0, 0x0) 232.252968ms ago: executing program 4 (id=12897): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x448, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x2a, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, 0x0) 217.246928ms ago: executing program 2 (id=12898): perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x2020) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x9, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r3, r2}, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x34}, 0x28) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x0, 0x3ff78000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) perf_event_open(&(0x7f00000007c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x8, 0x92}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94) write$cgroup_subtree(r4, 0x0, 0xfdef) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x7, 0x34328, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0x2}, 0x11278e, 0x10003, 0xfffffff8, 0x3, 0x100008, 0x20006, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x20}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20040018}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socketpair(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x541b, &(0x7f0000000080)) r8 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r8, &(0x7f0000004bc0)={&(0x7f0000000100)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000004940)=[{&(0x7f0000000140)="0f6816", 0x3}], 0x1, &(0x7f0000004ac0)=ANY=[@ANYBLOB="60000000000000000000000007000000890b0c7f000001ac1414aa4424a4c080000005ffffffff000000050000800000009307000000000000080000000004940d0d4c8664e8fc4e14d8607889131bac1414aaac1e000100000000e000000100140000000000000000000000020000007c0000000000000014000000000000000000000002000000000001000000000011000000000000000000000001000000000000000000000014000000000000000000000002000000ef000000000000001c"], 0xe0}, 0x88c) 143.543859ms ago: executing program 4 (id=12899): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081054e81f782ca9fb9040a1d08020a000000040000a118000200fe80000000000e1208000f0100810401a80016eaa40006400303000806600cfab94dcf5c0461c1d67f6f94007134cf6ee08002a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775570d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r3 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000500)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac00800020007000200060006c00364683b9dad7aa21240d69a6a818cf6c551ae60fc91b169edb1b175732b9f597fe3b6c5a3d77cc766307de2", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4000000) (fail_nth: 1) 0s ago: executing program 1 (id=12900): socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000000)={0x5, 0x80, 0x8, 0xeb, 0x7, 0x9, 0x0, 0x6, 0x10220, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0xffffffffffffffc0, 0x2}, 0x90020, 0x1, 0x1, 0x1c, 0x24, 0x408, 0x1, 0x0, 0x483, 0x0, 0x20008}) r0 = socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x2, 0x8}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x9, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000", @ANYBLOB="0000000000000000b7030000000000008500000087000000b7000000000000008500000008"], 0x0, 0xfffffffd, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x10, 0x3, 0x10) r2 = socket$kcm(0x2, 0x3, 0x106) sendmsg$inet(r2, &(0x7f0000000000)={&(0x7f0000000180)={0x2, 0x0, @dev}, 0x10, &(0x7f0000001640)=[{&(0x7f0000000540)="83ac6f4b600097ffffffd7965bf0", 0x14}], 0x13}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x3, 0x0, 0x0, {0xa, 0x1000, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x80, 0x0}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc/1/\x00\x82q\xee\xe5\xa0\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r4, &(0x7f00000011c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1e00000000000000010000000700000000000000", @ANYRES32=0x1, @ANYBLOB="00000000001c8900"/26, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x2000000, 0xe, 0x0, &(0x7f00000000c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0xffffffffffffff55, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) r7 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r7, 0x84, 0x9, &(0x7f0000000380), 0x98) ioctl$SIOCSIFHWADDR(r3, 0x8b0f, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000705d25a806c8c6394f90224fc60100005000a000200053582c137153e37000c0180fc0b10000900", 0x33fe0}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000705d25a806c8c6394f90224fc60100005000a000200053582c137153e37000c0180fc0b10000c00", 0x33fe0}], 0x1}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r8) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081054e81f782ca9fb9040a1d08020a000000040000a118000200fe80000000000e1208000f0100810401a80016eaa40006400303000806600cfab94dcf5c0461c1d67f6f94007134cf6ee08002a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775570d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) kernel console output (not intermixed with test programs): [ T8865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2462.054092][ T8865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2462.681395][ T8898] syzkaller0: entered promiscuous mode [ 2462.688165][ T8898] syzkaller0: entered allmulticast mode [ 2462.720307][ T8865] hsr_slave_0: entered promiscuous mode [ 2462.746132][ T8865] hsr_slave_1: entered promiscuous mode [ 2462.765099][ T8865] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2462.774477][ T8865] Cannot create hsr debugfs directory [ 2463.894020][ T8585] Bluetooth: hci0: command tx timeout [ 2465.975273][ T8585] Bluetooth: hci0: command tx timeout [ 2467.495045][ T8865] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2467.652725][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 2467.661054][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 2467.714390][ T8865] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2468.067969][ T8585] Bluetooth: hci0: command tx timeout [ 2468.162733][ T8924] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.11938'. [ 2468.173831][ T8924] bridge_slave_1: default FDB implementation only supports local addresses [ 2468.375860][ T8865] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2468.440402][ T8929] netlink: 'syz.3.11940': attribute type 8 has an invalid length. [ 2468.468003][ T8929] netlink: 'syz.3.11940': attribute type 9 has an invalid length. [ 2468.477398][ T8929] netlink: 'syz.3.11940': attribute type 10 has an invalid length. [ 2468.537991][ T8929] netlink: 'syz.3.11940': attribute type 11 has an invalid length. [ 2468.617909][ T8929] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11940'. [ 2468.771409][ T8865] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2469.439262][ T8865] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2469.475945][ T8865] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2469.514851][ T8865] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2469.542949][ T8865] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2469.847015][ T8865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2469.902451][ T8865] 8021q: adding VLAN 0 to HW filter on device team0 [ 2469.964264][T29688] bridge0: port 1(bridge_slave_0) entered blocking state [ 2469.971536][T29688] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2470.035966][T29688] bridge0: port 2(bridge_slave_1) entered blocking state [ 2470.043287][T29688] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2470.549675][ T8960] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.11949'. [ 2470.596256][ T8960] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 2470.622870][ T8585] Bluetooth: hci5: ISO packet for unknown connection handle 1854 [ 2470.623819][ T8964] netlink: 132 bytes leftover after parsing attributes in process `syz.1.11950'. [ 2470.653167][ T8960] CPU: 0 PID: 8960 Comm: syz.4.11949 Not tainted syzkaller #0 [ 2470.660687][ T8960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2470.670790][ T8960] Call Trace: [ 2470.674112][ T8960] [ 2470.677092][ T8960] dump_stack_lvl+0x18c/0x250 [ 2470.681894][ T8960] ? show_regs_print_info+0x20/0x20 [ 2470.687254][ T8960] ? load_image+0x420/0x420 [ 2470.691832][ T8960] sysfs_warn_dup+0x8e/0xa0 [ 2470.696482][ T8960] sysfs_do_create_link_sd+0xc0/0x110 [ 2470.701911][ T8960] device_add_class_symlinks+0x1cf/0x240 [ 2470.707622][ T8960] device_add+0x507/0xc20 [ 2470.712018][ T8960] wiphy_register+0x1dad/0x2ae0 [ 2470.716933][ T8960] ? cfg80211_event_work+0x40/0x40 [ 2470.722078][ T8960] ? minstrel_ht_alloc+0x88a/0x990 [ 2470.727242][ T8960] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 2470.733441][ T8960] ieee80211_register_hw+0x3464/0x4250 [ 2470.738963][ T8960] ? ieee80211_tasklet_handler+0x20/0x20 [ 2470.744626][ T8960] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 2470.750557][ T8960] ? __debug_object_init+0xec/0x450 [ 2470.755801][ T8960] ? __asan_memset+0x22/0x40 [ 2470.760603][ T8960] ? __hrtimer_init+0x186/0x270 [ 2470.765491][ T8960] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 2470.771299][ T8960] ? mac80211_hwsim_free+0x220/0x220 [ 2470.776608][ T8960] ? rcu_is_watching+0x15/0xb0 [ 2470.781433][ T8960] ? kstrndup+0xbd/0x140 [ 2470.785737][ T8960] hwsim_new_radio_nl+0xdc9/0x1a90 [ 2470.790900][ T8960] ? __nla_validate+0x50/0x50 [ 2470.795640][ T8960] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 2470.802020][ T8960] ? __nla_parse+0x40/0x50 [ 2470.806485][ T8960] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 2470.812862][ T8960] genl_family_rcv_msg_doit+0x211/0x310 [ 2470.818453][ T8960] ? end_current_label_crit_section+0x170/0x170 [ 2470.824743][ T8960] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 2470.830682][ T8960] ? bpf_lsm_capable+0x9/0x10 [ 2470.835440][ T8960] ? security_capable+0x89/0xb0 [ 2470.840334][ T8960] genl_rcv_msg+0x619/0x7a0 [ 2470.844881][ T8960] ? genl_bind+0x360/0x360 [ 2470.849332][ T8960] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 2470.855706][ T8960] netlink_rcv_skb+0x241/0x4d0 [ 2470.860530][ T8960] ? genl_bind+0x360/0x360 [ 2470.864975][ T8960] ? netlink_ack+0x1180/0x1180 [ 2470.869878][ T8960] ? __lock_acquire+0x7d40/0x7d40 [ 2470.875023][ T8960] ? net_generic+0x1e/0x240 [ 2470.879560][ T8960] ? down_read+0x1ac/0x2e0 [ 2470.884009][ T8960] genl_rcv+0x28/0x40 [ 2470.888034][ T8960] netlink_unicast+0x751/0x8d0 [ 2470.892847][ T8960] netlink_sendmsg+0x8d0/0xbf0 [ 2470.897660][ T8960] ? netlink_getsockopt+0x590/0x590 [ 2470.902918][ T8960] ? aa_sock_msg_perm+0x94/0x150 [ 2470.907894][ T8960] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2470.913223][ T8960] ? security_socket_sendmsg+0x80/0xa0 [ 2470.918708][ T8960] ? netlink_getsockopt+0x590/0x590 [ 2470.923945][ T8960] ____sys_sendmsg+0x5ba/0x960 [ 2470.928762][ T8960] ? __asan_memset+0x22/0x40 [ 2470.933411][ T8960] ? __sys_sendmsg_sock+0x30/0x30 [ 2470.938477][ T8960] ? __import_iovec+0x5f2/0x850 [ 2470.943394][ T8960] ? import_iovec+0x73/0xa0 [ 2470.947937][ T8960] ___sys_sendmsg+0x2a6/0x360 [ 2470.952656][ T8960] ? __sys_sendmsg+0x2a0/0x2a0 [ 2470.957489][ T8960] __se_sys_sendmsg+0x1c2/0x2b0 [ 2470.962383][ T8960] ? __x64_sys_sendmsg+0x80/0x80 [ 2470.967373][ T8960] ? lockdep_hardirqs_on+0x98/0x150 [ 2470.972618][ T8960] do_syscall_64+0x55/0xa0 [ 2470.977062][ T8960] ? clear_bhb_loop+0x40/0x90 [ 2470.981780][ T8960] ? clear_bhb_loop+0x40/0x90 [ 2470.986498][ T8960] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2470.992433][ T8960] RIP: 0033:0x7f82e9d9cdd9 [ 2470.996877][ T8960] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2471.016542][ T8960] RSP: 002b:00007f82ead26028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2471.025017][ T8960] RAX: ffffffffffffffda RBX: 00007f82ea015fa0 RCX: 00007f82e9d9cdd9 [ 2471.033061][ T8960] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 2471.041101][ T8960] RBP: 00007f82e9e32d69 R08: 0000000000000000 R09: 0000000000000000 [ 2471.049116][ T8960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2471.057124][ T8960] R13: 00007f82ea016038 R14: 00007f82ea015fa0 R15: 00007ffc40773a38 [ 2471.065172][ T8960] [ 2471.161597][ T8963] netlink: 'syz.4.11949': attribute type 10 has an invalid length. [ 2471.262233][ T8865] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2471.501508][ T5345] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2471.699559][ T8865] veth0_vlan: entered promiscuous mode [ 2471.775699][ T8865] veth1_vlan: entered promiscuous mode [ 2471.923904][ T8585] Bluetooth: hci2: ISO packet for unknown connection handle 5 [ 2471.995071][ T8865] veth0_macvtap: entered promiscuous mode [ 2472.075566][ T8865] veth1_macvtap: entered promiscuous mode [ 2472.153715][ T8865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2472.170063][ T8865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2472.183168][ T8865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2472.213303][ T8865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2472.229083][ T8865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2472.245862][ T8865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2472.272051][ T8865] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2472.305995][ T8865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2472.325958][ T8865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2472.336435][ T8865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2472.358558][ T8865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2472.380197][ T8865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2472.396210][ T8865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2472.434204][ T8865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2472.459465][ T8865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2472.491571][ T8865] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2472.565582][ T8982] netlink: 156 bytes leftover after parsing attributes in process `syz.1.11957'. [ 2473.407521][ T8865] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2473.427012][ T8865] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2473.436163][ T8865] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2473.456364][ T8865] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2473.650630][ T8992] netlink: 1 bytes leftover after parsing attributes in process `syz.1.11959'. [ 2473.849697][T29688] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2473.857687][T29688] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2473.990126][T29688] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2474.026318][T29688] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2475.309239][ T9020] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.11969'. [ 2476.562530][ T9038] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.11975'. [ 2476.850537][ T1553] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2476.872220][ T1553] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2476.882300][ T1553] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2476.899178][ T1553] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2476.914542][ T1553] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 2476.922144][ T1553] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2478.039262][ T9041] chnl_net:caif_netlink_parms(): no params data found [ 2478.198244][ T9062] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2478.205829][ T9062] IPv6: NLM_F_CREATE should be set when creating new route [ 2478.214230][ T9062] IPv6: NLM_F_CREATE should be set when creating new route [ 2478.222395][ T9062] IPv6: NLM_F_CREATE should be set when creating new route [ 2478.245662][ T9067] FAULT_INJECTION: forcing a failure. [ 2478.245662][ T9067] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2478.259759][ T9067] CPU: 1 PID: 9067 Comm: syz.1.11984 Not tainted syzkaller #0 [ 2478.267284][ T9067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2478.277429][ T9067] Call Trace: [ 2478.280751][ T9067] [ 2478.283729][ T9067] dump_stack_lvl+0x18c/0x250 [ 2478.288478][ T9067] ? show_regs_print_info+0x20/0x20 [ 2478.293778][ T9067] ? load_image+0x420/0x420 [ 2478.298338][ T9067] ? __might_fault+0xaa/0x120 [ 2478.303060][ T9067] should_fail_ex+0x39d/0x4d0 [ 2478.307785][ T9067] copyin+0x1a/0x90 [ 2478.311646][ T9067] _copy_from_iter+0x404/0x12e0 [ 2478.316540][ T9067] ? copyin+0x70/0x90 [ 2478.320570][ T9067] ? copyout_mc+0x70/0x70 [ 2478.324936][ T9067] ? copyout_mc+0x70/0x70 [ 2478.329304][ T9067] ? __virt_addr_valid+0x18c/0x540 [ 2478.334497][ T9067] ? page_copy_sane+0x16a/0x270 [ 2478.339396][ T9067] copy_page_from_iter+0x7b/0x100 [ 2478.344463][ T9067] skb_copy_datagram_from_iter+0x2e4/0x6e0 [ 2478.350313][ T9067] packet_sendmsg+0x33ff/0x4c30 [ 2478.355225][ T9067] ? __might_sleep+0xe0/0xe0 [ 2478.359854][ T9067] ? mark_lock+0x94/0x320 [ 2478.364224][ T9067] ? __lock_acquire+0x1273/0x7d40 [ 2478.369287][ T9067] ? verify_lock_unused+0x140/0x140 [ 2478.374523][ T9067] ? aa_sk_perm+0x83c/0x970 [ 2478.379070][ T9067] ? packet_getsockopt+0xad0/0xad0 [ 2478.384234][ T9067] ? tomoyo_gc_thread+0x84f/0x1410 [ 2478.389378][ T9067] ? aa_sock_msg_perm+0x94/0x150 [ 2478.394352][ T9067] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2478.399675][ T9067] ? security_socket_sendmsg+0x80/0xa0 [ 2478.405192][ T9067] ? packet_getsockopt+0xad0/0xad0 [ 2478.410350][ T9067] ____sys_sendmsg+0x5ba/0x960 [ 2478.415162][ T9067] ? __lock_acquire+0x7d40/0x7d40 [ 2478.420226][ T9067] ? __asan_memset+0x22/0x40 [ 2478.424854][ T9067] ? __sys_sendmsg_sock+0x30/0x30 [ 2478.429910][ T9067] ? __import_iovec+0x3fa/0x850 [ 2478.434886][ T9067] ? import_iovec+0x73/0xa0 [ 2478.439421][ T9067] ___sys_sendmsg+0x2a6/0x360 [ 2478.444133][ T9067] ? __sys_sendmsg+0x2a0/0x2a0 [ 2478.448961][ T9067] ? trace_call_bpf+0xc3/0x6c0 [ 2478.453784][ T9067] __se_sys_sendmsg+0x1c2/0x2b0 [ 2478.458670][ T9067] ? __x64_sys_sendmsg+0x80/0x80 [ 2478.463774][ T9067] ? lockdep_hardirqs_on+0x98/0x150 [ 2478.469022][ T9067] do_syscall_64+0x55/0xa0 [ 2478.473467][ T9067] ? clear_bhb_loop+0x40/0x90 [ 2478.478178][ T9067] ? clear_bhb_loop+0x40/0x90 [ 2478.482893][ T9067] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2478.488835][ T9067] RIP: 0033:0x7ff96a19cdd9 [ 2478.493288][ T9067] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2478.512942][ T9067] RSP: 002b:00007ff96b0b5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2478.521403][ T9067] RAX: ffffffffffffffda RBX: 00007ff96a415fa0 RCX: 00007ff96a19cdd9 [ 2478.529419][ T9067] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 2478.537428][ T9067] RBP: 00007ff96b0b5090 R08: 0000000000000000 R09: 0000000000000000 [ 2478.545427][ T9067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2478.553429][ T9067] R13: 00007ff96a416038 R14: 00007ff96a415fa0 R15: 00007ffd65086db8 [ 2478.561497][ T9067] [ 2478.653207][ T9041] bridge0: port 1(bridge_slave_0) entered blocking state [ 2478.665164][ T9041] bridge0: port 1(bridge_slave_0) entered disabled state [ 2478.677650][ T9041] bridge_slave_0: entered allmulticast mode [ 2478.699711][ T9041] bridge_slave_0: entered promiscuous mode [ 2478.803339][ T9041] bridge0: port 2(bridge_slave_1) entered blocking state [ 2478.818047][ T9041] bridge0: port 2(bridge_slave_1) entered disabled state [ 2478.869959][ T9041] bridge_slave_1: entered allmulticast mode [ 2478.889083][ T9041] bridge_slave_1: entered promiscuous mode [ 2478.936644][ T9071] netlink: 'syz.3.11985': attribute type 2 has an invalid length. [ 2478.945928][ T9071] netlink: 'syz.3.11985': attribute type 8 has an invalid length. [ 2478.960293][ T9071] netlink: 132 bytes leftover after parsing attributes in process `syz.3.11985'. [ 2479.017786][ T1553] Bluetooth: hci4: command tx timeout [ 2479.224840][ T9041] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2479.274359][ T9041] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2479.904377][ T9041] team0: Port device team_slave_0 added [ 2479.932393][ T9041] team0: Port device team_slave_1 added [ 2480.026515][ T9041] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2480.033717][ T9041] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2480.074444][ T9041] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2480.095394][ T9041] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2480.105432][ T9041] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2480.153065][ T9041] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2480.411251][ T9041] hsr_slave_0: entered promiscuous mode [ 2480.461225][ T9041] hsr_slave_1: entered promiscuous mode [ 2480.471501][ T9041] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2480.506153][ T9041] Cannot create hsr debugfs directory [ 2480.731990][ T9084] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2481.101414][ T1553] Bluetooth: hci4: command tx timeout [ 2481.473697][ T9041] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2481.740514][ T9041] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2482.053050][ T9041] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2482.399183][ T9041] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2482.633733][ T9100] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.11995'. [ 2482.903248][ T9041] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2482.953469][ T9041] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2482.986002][ T9041] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2483.044716][ T9041] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2483.208204][ T8585] Bluetooth: hci4: command tx timeout [ 2483.285840][ T9113] netlink: 144 bytes leftover after parsing attributes in process `syz.2.11997'. [ 2483.540934][ T9041] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2483.603055][ T9115] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2483.749169][ T9041] 8021q: adding VLAN 0 to HW filter on device team0 [ 2483.855858][ T5346] bridge0: port 1(bridge_slave_0) entered blocking state [ 2483.863201][ T5346] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2483.975414][ T5346] bridge0: port 2(bridge_slave_1) entered blocking state [ 2483.982785][ T5346] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2485.258509][ T8585] Bluetooth: hci4: command tx timeout [ 2485.525447][ T9127] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2485.548985][ T9127] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2485.704429][ T9127] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2485.748458][ T9127] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2486.328459][ T9131] C: renamed from team_slave_0 [ 2486.373306][ T9131] netlink: 'syz.3.12004': attribute type 2 has an invalid length. [ 2486.406546][ T9131] netlink: 128 bytes leftover after parsing attributes in process `syz.3.12004'. [ 2486.449013][ T9131] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 2486.815640][ T9041] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2487.475258][ T9160] netlink: 'syz.3.12011': attribute type 6 has an invalid length. [ 2487.503022][ T9160] netlink: 168 bytes leftover after parsing attributes in process `syz.3.12011'. [ 2487.749164][ T9041] veth0_vlan: entered promiscuous mode [ 2487.784924][ T9041] veth1_vlan: entered promiscuous mode [ 2487.880079][ T9172] netlink: 142592 bytes leftover after parsing attributes in process `syz.2.12015'. [ 2487.942998][ T9041] veth0_macvtap: entered promiscuous mode [ 2488.027601][ T9041] veth1_macvtap: entered promiscuous mode [ 2488.075179][ T9172] netlink: 'syz.2.12015': attribute type 1 has an invalid length. [ 2488.207151][ T9041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2488.233658][ T9041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2488.258733][ T9041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2488.280207][ T9041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2488.303926][ T9041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2488.328212][ T9041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2488.357668][ T9041] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2488.389142][ T9041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2488.402725][ T9041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2488.416589][ T9041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2488.428214][ T9041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2488.442944][ T9041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2488.461213][ T9041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2488.472282][ T9041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2488.483713][ T9041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2488.522648][ T9041] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2488.599745][ T9041] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2488.628590][ T9041] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2488.637388][ T9041] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2488.655869][ T9041] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2489.024341][ T3632] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2489.063173][ T3632] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2489.186022][ T5345] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2489.210486][ T5345] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2490.258147][ T9208] netlink: 'syz.3.12021': attribute type 10 has an invalid length. [ 2490.555541][ T9228] netlink: 'syz.1.12026': attribute type 10 has an invalid length. [ 2490.632180][ T9228] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 2491.687563][ T9246] FAULT_INJECTION: forcing a failure. [ 2491.687563][ T9246] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2491.720294][ T9242] netlink: 'syz.4.12030': attribute type 10 has an invalid length. [ 2491.729428][ T9246] CPU: 0 PID: 9246 Comm: syz.3.12032 Not tainted syzkaller #0 [ 2491.729459][ T9246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2491.729473][ T9246] Call Trace: [ 2491.729483][ T9246] [ 2491.729492][ T9246] dump_stack_lvl+0x18c/0x250 [ 2491.729535][ T9246] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2491.729566][ T9246] ? show_regs_print_info+0x20/0x20 [ 2491.729600][ T9246] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2491.729635][ T9246] ? dump_stack+0x9/0x20 [ 2491.729660][ T9246] should_fail_ex+0x39d/0x4d0 [ 2491.729698][ T9246] _copy_from_user+0x2f/0xe0 [ 2491.729728][ T9246] ___sys_sendmsg+0x1c7/0x360 [ 2491.729758][ T9246] ? __sys_sendmsg+0x2a0/0x2a0 [ 2491.729830][ T9246] __se_sys_sendmsg+0x1c2/0x2b0 [ 2491.729857][ T9246] ? __x64_sys_sendmsg+0x80/0x80 [ 2491.729896][ T9246] ? syscall_enter_from_user_mode+0x2e/0x80 [ 2491.729929][ T9246] do_syscall_64+0x55/0xa0 [ 2491.729948][ T9246] ? clear_bhb_loop+0x40/0x90 [ 2491.729974][ T9246] ? clear_bhb_loop+0x40/0x90 [ 2491.730003][ T9246] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2491.730029][ T9246] RIP: 0033:0x7f141d19cdd9 [ 2491.730048][ T9246] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2491.730068][ T9246] RSP: 002b:00007f141df85028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2491.730092][ T9246] RAX: ffffffffffffffda RBX: 00007f141d415fa0 RCX: 00007f141d19cdd9 [ 2491.730109][ T9246] RDX: 0000000024000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 2491.730123][ T9246] RBP: 00007f141df85090 R08: 0000000000000000 R09: 0000000000000000 [ 2491.730136][ T9246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2491.730150][ T9246] R13: 00007f141d416038 R14: 00007f141d415fa0 R15: 00007ffc453c6838 [ 2491.730182][ T9246] [ 2492.408130][ T9242] team0 (unregistering): Port device team_slave_0 removed [ 2492.429502][ T9242] team0 (unregistering): Port device team_slave_1 removed [ 2492.544754][ T9263] sit0: entered promiscuous mode [ 2497.601371][ T9337] netlink: 'syz.4.12064': attribute type 21 has an invalid length. [ 2497.622578][ T9337] netlink: 132 bytes leftover after parsing attributes in process `syz.4.12064'. [ 2497.827024][ T9343] FAULT_INJECTION: forcing a failure. [ 2497.827024][ T9343] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2497.867534][ T9343] CPU: 0 PID: 9343 Comm: syz.1.12066 Not tainted syzkaller #0 [ 2497.875108][ T9343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2497.885310][ T9343] Call Trace: [ 2497.888666][ T9343] [ 2497.891656][ T9343] dump_stack_lvl+0x18c/0x250 [ 2497.896414][ T9343] ? show_regs_print_info+0x20/0x20 [ 2497.901675][ T9343] ? load_image+0x420/0x420 [ 2497.906238][ T9343] ? __lock_acquire+0x7d40/0x7d40 [ 2497.911318][ T9343] ? snprintf+0xe9/0x140 [ 2497.915627][ T9343] should_fail_ex+0x39d/0x4d0 [ 2497.920472][ T9343] _copy_to_user+0x2f/0xa0 [ 2497.924957][ T9343] simple_read_from_buffer+0xe7/0x150 [ 2497.930409][ T9343] proc_fail_nth_read+0x1e8/0x260 [ 2497.935503][ T9343] ? proc_fault_inject_write+0x360/0x360 [ 2497.941204][ T9343] ? fsnotify_perm+0x271/0x5e0 [ 2497.946031][ T9343] ? proc_fault_inject_write+0x360/0x360 [ 2497.951746][ T9343] vfs_read+0x28b/0x970 [ 2497.955977][ T9343] ? kernel_read+0x1e0/0x1e0 [ 2497.960636][ T9343] ? __fget_files+0x28/0x4b0 [ 2497.965281][ T9343] ? __fget_files+0x28/0x4b0 [ 2497.969948][ T9343] ? __fget_files+0x43d/0x4b0 [ 2497.974690][ T9343] ? __fdget_pos+0x2a3/0x330 [ 2497.979694][ T9343] ? ksys_read+0x75/0x260 [ 2497.984102][ T9343] ksys_read+0x150/0x260 [ 2497.988423][ T9343] ? vfs_write+0x990/0x990 [ 2497.992941][ T9343] ? lockdep_hardirqs_on+0x98/0x150 [ 2497.998197][ T9343] do_syscall_64+0x55/0xa0 [ 2498.002661][ T9343] ? clear_bhb_loop+0x40/0x90 [ 2498.007389][ T9343] ? clear_bhb_loop+0x40/0x90 [ 2498.012130][ T9343] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2498.018083][ T9343] RIP: 0033:0x7ff96a15d60e [ 2498.022557][ T9343] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2498.042224][ T9343] RSP: 002b:00007ff96b0b4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2498.050698][ T9343] RAX: ffffffffffffffda RBX: 00007ff96b0b56c0 RCX: 00007ff96a15d60e [ 2498.058719][ T9343] RDX: 000000000000000f RSI: 00007ff96b0b50a0 RDI: 0000000000000006 [ 2498.066756][ T9343] RBP: 00007ff96b0b5090 R08: 0000000000000000 R09: 0000000000000000 [ 2498.074790][ T9343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2498.082911][ T9343] R13: 00007ff96a416038 R14: 00007ff96a415fa0 R15: 00007ffd65086db8 [ 2498.090950][ T9343] [ 2498.710548][ T8585] Bluetooth: hci4: unexpected event 0x04 length: 15 > 10 [ 2498.710586][ T8585] Bluetooth: unknown link type 48 [ 2498.722938][ T8585] Bluetooth: hci4: connection err: -111 [ 2499.074207][ T9361] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2499.119021][ T9361] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2499.859813][ T1553] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2499.875891][ T1553] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2499.893481][ T1553] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2499.925290][ T1553] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2499.939033][ T1553] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 2499.949268][ T1553] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2500.080145][ T9361] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2500.108921][ T9361] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2500.791838][ T9367] chnl_net:caif_netlink_parms(): no params data found [ 2501.094283][ T9367] bridge0: port 1(bridge_slave_0) entered blocking state [ 2501.101914][ T9367] bridge0: port 1(bridge_slave_0) entered disabled state [ 2501.109545][ T9367] bridge_slave_0: entered allmulticast mode [ 2501.117497][ T9367] bridge_slave_0: entered promiscuous mode [ 2501.150602][ T9367] bridge0: port 2(bridge_slave_1) entered blocking state [ 2501.168270][ T9367] bridge0: port 2(bridge_slave_1) entered disabled state [ 2501.180326][ T9367] bridge_slave_1: entered allmulticast mode [ 2501.198676][ T9367] bridge_slave_1: entered promiscuous mode [ 2501.314829][ T9367] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2501.331885][ T9367] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2501.439766][ T9367] team0: Port device team_slave_0 added [ 2501.459330][ T9367] team0: Port device team_slave_1 added [ 2501.614279][ T9367] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2501.657852][ T9367] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2501.767999][ T9367] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2501.862823][ T9367] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2501.913110][ T9367] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2502.047031][ T9367] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2502.058572][ T1553] Bluetooth: hci3: command tx timeout [ 2502.237380][ T9367] hsr_slave_0: entered promiscuous mode [ 2502.308866][ T9367] hsr_slave_1: entered promiscuous mode [ 2502.322314][ T9367] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2502.340113][ T9367] Cannot create hsr debugfs directory [ 2502.362456][ T9413] netlink: 'syz.2.12090': attribute type 10 has an invalid length. [ 2502.384807][ T9413] netlink: 55 bytes leftover after parsing attributes in process `syz.2.12090'. [ 2503.492303][T29686] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2504.036566][ T9443] netlink: 'syz.2.12097': attribute type 10 has an invalid length. [ 2504.104964][ T9443] netlink: 14 bytes leftover after parsing attributes in process `syz.2.12097'. [ 2504.234060][ T1553] Bluetooth: hci3: command tx timeout [ 2504.820646][ T9443] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2504.934652][ T9443] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2504.988529][ T9443] bond0 (unregistering): Released all slaves [ 2505.088117][ T9444] netlink: 'syz.2.12097': attribute type 10 has an invalid length. [ 2505.106646][ T9444] netlink: 2 bytes leftover after parsing attributes in process `syz.2.12097'. [ 2505.115990][ T9444] hsr0: entered promiscuous mode [ 2505.122905][ T9444] bridge0: port 3(hsr0) entered blocking state [ 2505.129640][ T9444] bridge0: port 3(hsr0) entered disabled state [ 2505.137694][ T9444] hsr0: entered allmulticast mode [ 2505.143042][ T9444] hsr_slave_0: entered allmulticast mode [ 2505.154987][ T9444] hsr_slave_1: entered allmulticast mode [ 2505.165731][ T9444] bridge0: port 3(hsr0) entered blocking state [ 2505.172175][ T9444] bridge0: port 3(hsr0) entered forwarding state [ 2505.440190][ T9452] netlink: 'syz.1.12102': attribute type 3 has an invalid length. [ 2505.461951][ T9452] netlink: 132 bytes leftover after parsing attributes in process `syz.1.12102'. [ 2505.555156][ T9367] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2505.710125][ T9367] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2505.859828][ T9367] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2506.146757][ T9367] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2506.288054][ T8585] Bluetooth: hci3: command tx timeout [ 2507.078729][ T9367] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2507.119734][ T9367] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2507.149103][ T9367] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2507.178556][ T9367] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2507.438322][ T9367] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2507.487304][ T9367] 8021q: adding VLAN 0 to HW filter on device team0 [ 2507.531322][ T5345] bridge0: port 1(bridge_slave_0) entered blocking state [ 2507.538600][ T5345] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2507.570704][ T5345] bridge0: port 2(bridge_slave_1) entered blocking state [ 2507.577958][ T5345] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2508.377967][ T8585] Bluetooth: hci3: command tx timeout [ 2508.666064][ T9367] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2508.789860][ T9367] veth0_vlan: entered promiscuous mode [ 2508.814220][ T9367] veth1_vlan: entered promiscuous mode [ 2508.866572][ T9367] veth0_macvtap: entered promiscuous mode [ 2508.902603][ T9367] veth1_macvtap: entered promiscuous mode [ 2508.974409][ T9367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2508.994676][ T9367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2509.007054][ T9367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2509.023490][ T9367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2509.035541][ T9367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2509.078117][ T9367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2509.105060][ T9367] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2509.159411][ T9367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2509.170901][ T9367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2509.192540][ T9367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2509.215233][ T9367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2509.242918][ T9367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2509.262903][ T9367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2509.274971][ T9367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2509.290897][ T9367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2509.328237][ T9367] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2509.365448][ T9367] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2509.381086][ T9367] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2509.394040][ T9367] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2509.407112][ T9367] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2510.435864][ T3632] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2510.444018][ T3632] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2510.672431][ T3632] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2510.689263][ T3632] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2510.754814][ T9525] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.12127'. [ 2512.516495][ T9556] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.12138'. [ 2513.660116][ T9580] netlink: 'syz.2.12148': attribute type 10 has an invalid length. [ 2513.671441][ T9580] netlink: 2 bytes leftover after parsing attributes in process `syz.2.12148'. [ 2513.847555][ T9584] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.12150'. [ 2515.201615][ T9609] netlink: 156 bytes leftover after parsing attributes in process `syz.2.12158'. [ 2516.115165][ T9619] netlink: 'syz.3.12162': attribute type 10 has an invalid length. [ 2516.180777][ T9619] netlink: 2 bytes leftover after parsing attributes in process `syz.3.12162'. [ 2516.250170][ T9619] hsr0: entered promiscuous mode [ 2516.282486][ T9619] bridge0: port 3(hsr0) entered blocking state [ 2516.368921][ T9619] bridge0: port 3(hsr0) entered disabled state [ 2516.380416][ T9619] hsr0: entered allmulticast mode [ 2516.394537][ T9619] hsr_slave_0: entered allmulticast mode [ 2516.418434][ T9619] hsr_slave_1: entered allmulticast mode [ 2516.618341][ T9619] bridge0: port 3(hsr0) entered blocking state [ 2516.624711][ T9619] bridge0: port 3(hsr0) entered forwarding state [ 2516.996422][ T9630] netlink: 'syz.4.12166': attribute type 2 has an invalid length. [ 2517.023312][ T9630] netlink: 'syz.4.12166': attribute type 8 has an invalid length. [ 2517.058199][ T9630] netlink: 132 bytes leftover after parsing attributes in process `syz.4.12166'. [ 2517.264624][ T9638] netlink: 'syz.1.12167': attribute type 2 has an invalid length. [ 2517.322864][ T9638] netlink: 132 bytes leftover after parsing attributes in process `syz.1.12167'. [ 2522.648957][ T9656] netlink: 156 bytes leftover after parsing attributes in process `syz.3.12172'. [ 2522.830886][ T9657] netlink: 'syz.1.12173': attribute type 21 has an invalid length. [ 2522.848922][ T9657] netlink: 164 bytes leftover after parsing attributes in process `syz.1.12173'. [ 2523.490770][ T9676] netlink: 'syz.2.12180': attribute type 1 has an invalid length. [ 2523.500429][ T9676] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.12180'. [ 2523.557550][ T9677] netlink: 'syz.1.12178': attribute type 2 has an invalid length. [ 2523.578325][ T9677] netlink: 'syz.1.12178': attribute type 8 has an invalid length. [ 2523.598440][ T9677] netlink: 132 bytes leftover after parsing attributes in process `syz.1.12178'. [ 2524.050618][ T9683] netlink: 60 bytes leftover after parsing attributes in process `syz.3.12181'. [ 2524.848915][ T9701] netlink: 'syz.1.12190': attribute type 33 has an invalid length. [ 2524.856942][ T9701] netlink: 36 bytes leftover after parsing attributes in process `syz.1.12190'. [ 2524.957621][ T9705] netlink: 156 bytes leftover after parsing attributes in process `syz.4.12192'. [ 2526.257657][ T9732] netlink: 'syz.2.12199': attribute type 2 has an invalid length. [ 2526.266243][ T9732] netlink: 'syz.2.12199': attribute type 8 has an invalid length. [ 2526.305184][ T9732] netlink: 132 bytes leftover after parsing attributes in process `syz.2.12199'. [ 2526.366653][ T9737] FAULT_INJECTION: forcing a failure. [ 2526.366653][ T9737] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2526.395200][ T9737] CPU: 0 PID: 9737 Comm: syz.1.12202 Not tainted syzkaller #0 [ 2526.402810][ T9737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2526.413003][ T9737] Call Trace: [ 2526.416323][ T9737] [ 2526.419305][ T9737] dump_stack_lvl+0x18c/0x250 [ 2526.424054][ T9737] ? show_regs_print_info+0x20/0x20 [ 2526.429321][ T9737] ? load_image+0x420/0x420 [ 2526.433895][ T9737] ? __might_fault+0xaa/0x120 [ 2526.438620][ T9737] ? __lock_acquire+0x7d40/0x7d40 [ 2526.443697][ T9737] should_fail_ex+0x39d/0x4d0 [ 2526.448433][ T9737] _copy_from_user+0x2f/0xe0 [ 2526.453076][ T9737] btf_new_fd+0x366/0x9f0 [ 2526.457472][ T9737] ? bpf_btf_show_fdinfo+0x80/0x80 [ 2526.462638][ T9737] ? capable+0x88/0xe0 [ 2526.466775][ T9737] __sys_bpf+0x670/0x890 [ 2526.471069][ T9737] ? bpf_link_show_fdinfo+0x390/0x390 [ 2526.476503][ T9737] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2526.482723][ T9737] __x64_sys_bpf+0x7c/0x90 [ 2526.487195][ T9737] do_syscall_64+0x55/0xa0 [ 2526.491657][ T9737] ? clear_bhb_loop+0x40/0x90 [ 2526.496409][ T9737] ? clear_bhb_loop+0x40/0x90 [ 2526.501139][ T9737] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2526.507095][ T9737] RIP: 0033:0x7ff96a19cdd9 [ 2526.511559][ T9737] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2526.531217][ T9737] RSP: 002b:00007ff96b0b5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2526.539689][ T9737] RAX: ffffffffffffffda RBX: 00007ff96a415fa0 RCX: 00007ff96a19cdd9 [ 2526.547708][ T9737] RDX: 0000000000000028 RSI: 00002000000001c0 RDI: 0000000000000012 [ 2526.555731][ T9737] RBP: 00007ff96b0b5090 R08: 0000000000000000 R09: 0000000000000000 [ 2526.563754][ T9737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2526.571778][ T9737] R13: 00007ff96a416038 R14: 00007ff96a415fa0 R15: 00007ffd65086db8 [ 2526.579816][ T9737] [ 2528.635949][ T9756] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.12204'. [ 2528.779765][ T9761] netlink: 'syz.1.12206': attribute type 10 has an invalid length. [ 2528.830233][ T9761] netlink: 55 bytes leftover after parsing attributes in process `syz.1.12206'. [ 2529.108765][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 2529.115333][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 2530.290588][ T9783] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.12214'. [ 2530.451537][ T9785] FAULT_INJECTION: forcing a failure. [ 2530.451537][ T9785] name failslab, interval 1, probability 0, space 0, times 0 [ 2530.508571][ T9785] CPU: 0 PID: 9785 Comm: syz.4.12215 Not tainted syzkaller #0 [ 2530.516127][ T9785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2530.526240][ T9785] Call Trace: [ 2530.529572][ T9785] [ 2530.532553][ T9785] dump_stack_lvl+0x18c/0x250 [ 2530.537407][ T9785] ? show_regs_print_info+0x20/0x20 [ 2530.542697][ T9785] ? load_image+0x420/0x420 [ 2530.547266][ T9785] ? __lock_acquire+0x7d40/0x7d40 [ 2530.552340][ T9785] ? slab_post_alloc_hook+0x8a/0x4b0 [ 2530.557707][ T9785] should_fail_ex+0x39d/0x4d0 [ 2530.562453][ T9785] should_failslab+0x9/0x20 [ 2530.567015][ T9785] slab_pre_alloc_hook+0x59/0x310 [ 2530.572105][ T9785] ? __build_skb_around+0x255/0x3d0 [ 2530.577363][ T9785] kmem_cache_alloc+0x5a/0x2d0 [ 2530.582191][ T9785] ? _sctp_make_chunk+0x14e/0x420 [ 2530.587283][ T9785] _sctp_make_chunk+0x14e/0x420 [ 2530.592204][ T9785] sctp_make_datafrag_empty+0x12b/0x240 [ 2530.597826][ T9785] ? sctp_make_ecne+0x340/0x340 [ 2530.602740][ T9785] ? sctp_auth_send_cid+0x69/0x250 [ 2530.607917][ T9785] sctp_datamsg_from_user+0x722/0xee0 [ 2530.613379][ T9785] sctp_sendmsg_to_asoc+0x107f/0x1830 [ 2530.618815][ T9785] ? __asan_memcpy+0x40/0x70 [ 2530.623482][ T9785] ? sctp_assoc_add_peer+0xcf3/0x1390 [ 2530.628967][ T9785] ? sctp_sendmsg_check_sflags+0x2d0/0x2d0 [ 2530.634844][ T9785] ? __sctp_connect+0xd80/0xd80 [ 2530.639777][ T9785] ? __local_bh_enable_ip+0x13a/0x1c0 [ 2530.645252][ T9785] ? _local_bh_enable+0xa0/0xa0 [ 2530.650161][ T9785] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 2530.656047][ T9785] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 2530.661919][ T9785] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 2530.667530][ T9785] ? security_sctp_bind_connect+0x89/0xb0 [ 2530.673317][ T9785] sctp_sendmsg+0x1b83/0x28c0 [ 2530.678083][ T9785] ? sctp_getsockopt+0xb60/0xb60 [ 2530.683065][ T9785] ? aa_sk_perm+0x83c/0x970 [ 2530.687615][ T9785] ? aa_af_perm+0x330/0x330 [ 2530.692161][ T9785] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 2530.698639][ T9785] ? sock_rps_record_flow+0x19/0x3f0 [ 2530.703964][ T9785] ? inet_sendmsg+0x7c/0x2f0 [ 2530.708586][ T9785] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2530.713938][ T9785] ? security_socket_sendmsg+0x80/0xa0 [ 2530.719470][ T9785] ? inet_send_prepare+0x260/0x260 [ 2530.724709][ T9785] ____sys_sendmsg+0x5ba/0x960 [ 2530.729506][ T9785] ? __lock_acquire+0x7d40/0x7d40 [ 2530.734572][ T9785] ? __asan_memset+0x22/0x40 [ 2530.739205][ T9785] ? __sys_sendmsg_sock+0x30/0x30 [ 2530.744277][ T9785] ? __import_iovec+0x5f2/0x850 [ 2530.749183][ T9785] ? import_iovec+0x73/0xa0 [ 2530.753748][ T9785] ___sys_sendmsg+0x2a6/0x360 [ 2530.758519][ T9785] ? __sys_sendmsg+0x2a0/0x2a0 [ 2530.763367][ T9785] ? __lock_acquire+0x7d40/0x7d40 [ 2530.768454][ T9785] __se_sys_sendmsg+0x1c2/0x2b0 [ 2530.773335][ T9785] ? __x64_sys_sendmsg+0x80/0x80 [ 2530.778327][ T9785] ? lockdep_hardirqs_on+0x98/0x150 [ 2530.783562][ T9785] do_syscall_64+0x55/0xa0 [ 2530.788010][ T9785] ? clear_bhb_loop+0x40/0x90 [ 2530.792730][ T9785] ? clear_bhb_loop+0x40/0x90 [ 2530.797437][ T9785] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2530.803363][ T9785] RIP: 0033:0x7f51e919cdd9 [ 2530.807825][ T9785] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2530.827494][ T9785] RSP: 002b:00007f51ea072028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2530.835975][ T9785] RAX: ffffffffffffffda RBX: 00007f51e9415fa0 RCX: 00007f51e919cdd9 [ 2530.843995][ T9785] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000003 [ 2530.852054][ T9785] RBP: 00007f51ea072090 R08: 0000000000000000 R09: 0000000000000000 [ 2530.860055][ T9785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2530.868064][ T9785] R13: 00007f51e9416038 R14: 00007f51e9415fa0 R15: 00007fffbbe67d48 [ 2530.876087][ T9785] [ 2531.640750][ T9800] netlink: 747 bytes leftover after parsing attributes in process `syz.2.12220'. [ 2531.944192][ T9805] netlink: 'syz.3.12222': attribute type 21 has an invalid length. [ 2531.993507][ T9805] netlink: 132 bytes leftover after parsing attributes in process `syz.3.12222'. [ 2532.344198][ T9808] netlink: 'syz.4.12224': attribute type 33 has an invalid length. [ 2532.356248][ T9808] netlink: 36 bytes leftover after parsing attributes in process `syz.4.12224'. [ 2534.486426][ T9863] FAULT_INJECTION: forcing a failure. [ 2534.486426][ T9863] name failslab, interval 1, probability 0, space 0, times 0 [ 2534.520741][ T9863] CPU: 1 PID: 9863 Comm: syz.4.12243 Not tainted syzkaller #0 [ 2534.528303][ T9863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2534.538421][ T9863] Call Trace: [ 2534.541757][ T9863] [ 2534.544729][ T9863] dump_stack_lvl+0x18c/0x250 [ 2534.549480][ T9863] ? show_regs_print_info+0x20/0x20 [ 2534.550984][ T9862] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.12242'. [ 2534.554721][ T9863] ? load_image+0x420/0x420 [ 2534.568592][ T9863] ? __might_sleep+0xe0/0xe0 [ 2534.573238][ T9863] ? __lock_acquire+0x7d40/0x7d40 [ 2534.578309][ T9863] ? perf_trace_preemptirq_template+0x269/0x330 [ 2534.584623][ T9863] should_fail_ex+0x39d/0x4d0 [ 2534.589454][ T9863] should_failslab+0x9/0x20 [ 2534.594010][ T9863] slab_pre_alloc_hook+0x59/0x310 [ 2534.599094][ T9863] ? lock_chain_count+0x20/0x20 [ 2534.603992][ T9863] ? sk_prot_alloc+0xe7/0x210 [ 2534.608721][ T9863] ? sk_prot_alloc+0xe7/0x210 [ 2534.613448][ T9863] __kmem_cache_alloc_node+0x53/0x250 [ 2534.618884][ T9863] ? sk_prot_alloc+0xe7/0x210 [ 2534.623615][ T9863] __kmalloc+0xa4/0x230 [ 2534.627843][ T9863] sk_prot_alloc+0xe7/0x210 [ 2534.632396][ T9863] ? sk_alloc+0x24/0x360 [ 2534.636709][ T9863] sk_alloc+0x3a/0x360 [ 2534.640826][ T9863] ? bpf_ctx_init+0x163/0x1a0 [ 2534.645543][ T9863] ? bpf_prog_test_run_skb+0x273/0x12b0 [ 2534.651161][ T9863] bpf_prog_test_run_skb+0x3a5/0x12b0 [ 2534.656586][ T9863] ? __fget_files+0x28/0x4b0 [ 2534.661234][ T9863] ? __fget_files+0x28/0x4b0 [ 2534.665882][ T9863] ? __fget_files+0x43d/0x4b0 [ 2534.670634][ T9863] ? cpu_online+0x60/0x60 [ 2534.675060][ T9863] bpf_prog_test_run+0x321/0x390 [ 2534.680067][ T9863] __sys_bpf+0x49d/0x890 [ 2534.684362][ T9863] ? bpf_link_show_fdinfo+0x390/0x390 [ 2534.689801][ T9863] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2534.696032][ T9863] __x64_sys_bpf+0x7c/0x90 [ 2534.700531][ T9863] do_syscall_64+0x55/0xa0 [ 2534.704997][ T9863] ? clear_bhb_loop+0x40/0x90 [ 2534.709728][ T9863] ? clear_bhb_loop+0x40/0x90 [ 2534.714611][ T9863] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2534.720564][ T9863] RIP: 0033:0x7f51e919cdd9 [ 2534.725068][ T9863] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2534.744735][ T9863] RSP: 002b:00007f51ea072028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2534.753225][ T9863] RAX: ffffffffffffffda RBX: 00007f51e9415fa0 RCX: 00007f51e919cdd9 [ 2534.761280][ T9863] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 000000000000000a [ 2534.769314][ T9863] RBP: 00007f51ea072090 R08: 0000000000000000 R09: 0000000000000000 [ 2534.777343][ T9863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2534.785409][ T9863] R13: 00007f51e9416038 R14: 00007f51e9415fa0 R15: 00007fffbbe67d48 [ 2534.793503][ T9863] [ 2535.041748][ T9870] netlink: 'syz.2.12244': attribute type 2 has an invalid length. [ 2535.073786][ T9870] netlink: 'syz.2.12244': attribute type 8 has an invalid length. [ 2535.127909][ T9870] netlink: 132 bytes leftover after parsing attributes in process `syz.2.12244'. [ 2535.161417][ T9872] netlink: 132 bytes leftover after parsing attributes in process `syz.3.12246'. [ 2535.535366][ T5321] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2535.902649][ T9886] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2536.159056][ T9895] FAULT_INJECTION: forcing a failure. [ 2536.159056][ T9895] name failslab, interval 1, probability 0, space 0, times 0 [ 2536.204498][ T9896] netlink: 'syz.4.12256': attribute type 21 has an invalid length. [ 2536.213753][ T9895] CPU: 1 PID: 9895 Comm: syz.1.12258 Not tainted syzkaller #0 [ 2536.221299][ T9895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2536.231410][ T9895] Call Trace: [ 2536.234731][ T9895] [ 2536.237706][ T9895] dump_stack_lvl+0x18c/0x250 [ 2536.242453][ T9895] ? show_regs_print_info+0x20/0x20 [ 2536.247718][ T9895] ? load_image+0x420/0x420 [ 2536.252283][ T9895] ? __might_sleep+0xe0/0xe0 [ 2536.256940][ T9895] ? __lock_acquire+0x7d40/0x7d40 [ 2536.262028][ T9895] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 2536.267814][ T9895] should_fail_ex+0x39d/0x4d0 [ 2536.272571][ T9895] should_failslab+0x9/0x20 [ 2536.277162][ T9895] slab_pre_alloc_hook+0x59/0x310 [ 2536.282277][ T9895] kmem_cache_alloc_node+0x60/0x320 [ 2536.287553][ T9895] ? __alloc_skb+0x103/0x2c0 [ 2536.292211][ T9895] __alloc_skb+0x103/0x2c0 [ 2536.296708][ T9895] netlink_dump+0x1ec/0xe50 [ 2536.301296][ T9895] ? __mutex_lock+0x315/0xcc0 [ 2536.306032][ T9895] ? netlink_lookup+0x200/0x200 [ 2536.311009][ T9895] ? netlink_autobind+0x300/0x300 [ 2536.316104][ T9895] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 2536.321888][ T9895] ? netlink_lookup+0x30/0x200 [ 2536.326715][ T9895] ? netlink_lookup+0x30/0x200 [ 2536.331541][ T9895] __netlink_dump_start+0x5f1/0x810 [ 2536.336819][ T9895] netlink_diag_handler_dump+0x19f/0x240 [ 2536.342500][ T9895] ? __lock_acquire+0x7d40/0x7d40 [ 2536.347566][ T9895] ? netlink_policy_dump_write+0x5f0/0x5f0 [ 2536.353405][ T9895] ? netlink_diag_handler_dump+0x240/0x240 [ 2536.359266][ T9895] ? netlink_diag_dump+0x230/0x230 [ 2536.364435][ T9895] ? sock_diag_lock_handler+0x19/0x280 [ 2536.369970][ T9895] ? sock_diag_lock_handler+0x19/0x280 [ 2536.375497][ T9895] ? netlink_policy_dump_write+0x5f0/0x5f0 [ 2536.381369][ T9895] sock_diag_rcv_msg+0x3d8/0x600 [ 2536.386463][ T9895] netlink_rcv_skb+0x241/0x4d0 [ 2536.391346][ T9895] ? sock_diag_bind+0xb0/0xb0 [ 2536.396086][ T9895] ? netlink_ack+0x1180/0x1180 [ 2536.400924][ T9895] ? __lock_acquire+0x7d40/0x7d40 [ 2536.406014][ T9895] ? netlink_deliver_tap+0x2e/0x1b0 [ 2536.411284][ T9895] sock_diag_rcv+0x2a/0x40 [ 2536.415754][ T9895] netlink_unicast+0x751/0x8d0 [ 2536.420682][ T9895] netlink_sendmsg+0x8d0/0xbf0 [ 2536.425513][ T9895] ? netlink_getsockopt+0x590/0x590 [ 2536.430780][ T9895] ? aa_sock_msg_perm+0x94/0x150 [ 2536.435771][ T9895] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2536.441128][ T9895] ? security_socket_sendmsg+0x80/0xa0 [ 2536.446641][ T9895] ? netlink_getsockopt+0x590/0x590 [ 2536.451903][ T9895] ____sys_sendmsg+0x5ba/0x960 [ 2536.456723][ T9895] ? __asan_memset+0x22/0x40 [ 2536.461376][ T9895] ? __sys_sendmsg_sock+0x30/0x30 [ 2536.466474][ T9895] ? __import_iovec+0x5f2/0x850 [ 2536.471388][ T9895] ? import_iovec+0x73/0xa0 [ 2536.475962][ T9895] ___sys_sendmsg+0x2a6/0x360 [ 2536.480788][ T9895] ? __sys_sendmsg+0x2a0/0x2a0 [ 2536.485649][ T9895] __se_sys_sendmsg+0x1c2/0x2b0 [ 2536.490568][ T9895] ? __x64_sys_sendmsg+0x80/0x80 [ 2536.495566][ T9895] ? syscall_enter_from_user_mode+0x2e/0x80 [ 2536.501513][ T9895] do_syscall_64+0x55/0xa0 [ 2536.505991][ T9895] ? clear_bhb_loop+0x40/0x90 [ 2536.510724][ T9895] ? clear_bhb_loop+0x40/0x90 [ 2536.515469][ T9895] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2536.521541][ T9895] RIP: 0033:0x7ff96a19cdd9 [ 2536.526007][ T9895] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2536.545669][ T9895] RSP: 002b:00007ff96b0b5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2536.554161][ T9895] RAX: ffffffffffffffda RBX: 00007ff96a415fa0 RCX: 00007ff96a19cdd9 [ 2536.562190][ T9895] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 2536.570229][ T9895] RBP: 00007ff96b0b5090 R08: 0000000000000000 R09: 0000000000000000 [ 2536.578253][ T9895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2536.586276][ T9895] R13: 00007ff96a416038 R14: 00007ff96a415fa0 R15: 00007ffd65086db8 [ 2536.594328][ T9895] [ 2536.612271][ T9896] netlink: 132 bytes leftover after parsing attributes in process `syz.4.12256'. [ 2536.634041][ T9892] netlink: 'syz.3.12257': attribute type 10 has an invalid length. [ 2536.676636][ T9892] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2536.706428][ T9892] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 2536.724890][ T9901] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.12259'. [ 2537.063147][ T9915] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2537.092140][ T9915] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2537.125008][ T9915] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2537.138460][ T9915] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2537.849531][ T9915] bond0: (slave batadv0): Releasing backup interface [ 2538.512131][ T9935] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.12270'. [ 2538.573416][ T9934] delete_channel: no stack [ 2539.053886][ T9943] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.12273'. [ 2540.670452][ T9971] FAULT_INJECTION: forcing a failure. [ 2540.670452][ T9971] name fail_futex, interval 1, probability 0, space 0, times 1 [ 2540.737141][ T9971] CPU: 1 PID: 9971 Comm: syz.1.12281 Not tainted syzkaller #0 [ 2540.744700][ T9971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2540.755066][ T9971] Call Trace: [ 2540.758388][ T9971] [ 2540.761364][ T9971] dump_stack_lvl+0x18c/0x250 [ 2540.766111][ T9971] ? show_regs_print_info+0x20/0x20 [ 2540.771379][ T9971] ? load_image+0x420/0x420 [ 2540.775945][ T9971] ? get_user_pages_fast_only+0xa0/0xa0 [ 2540.781555][ T9971] should_fail_ex+0x39d/0x4d0 [ 2540.786296][ T9971] get_futex_key+0x852/0x1010 [ 2540.791049][ T9971] ? futex_setup_timer+0xc0/0xc0 [ 2540.796049][ T9971] ? trace_call_bpf+0xc3/0x6c0 [ 2540.800877][ T9971] ? trace_call_bpf+0x5e9/0x6c0 [ 2540.805829][ T9971] futex_wake+0x127/0x4f0 [ 2540.810222][ T9971] ? futex_wake_mark+0x150/0x150 [ 2540.815232][ T9971] do_futex+0x35d/0x3e0 [ 2540.819435][ T9971] ? __might_fault+0xaa/0x120 [ 2540.824165][ T9971] ? __ia32_sys_get_robust_list+0x110/0x110 [ 2540.830144][ T9971] ? __might_fault+0xc6/0x120 [ 2540.834872][ T9971] mm_release+0x184/0x3a0 [ 2540.839252][ T9971] ? exit_mm_release+0x30/0x30 [ 2540.844091][ T9971] ? lockdep_hardirqs_on+0x98/0x150 [ 2540.849359][ T9971] exit_mm+0xa7/0x2c0 [ 2540.853403][ T9971] ? do_exit+0x2460/0x2460 [ 2540.857894][ T9971] ? taskstats_exit+0x35e/0x9e0 [ 2540.862821][ T9971] do_exit+0x8dd/0x2460 [ 2540.867039][ T9971] ? get_signal+0x1068/0x13f0 [ 2540.871771][ T9971] ? put_task_struct+0xc0/0xc0 [ 2540.876595][ T9971] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 2540.882628][ T9971] ? get_signal+0x1068/0x13f0 [ 2540.887357][ T9971] ? lock_chain_count+0x20/0x20 [ 2540.892267][ T9971] do_group_exit+0x21b/0x2d0 [ 2540.896915][ T9971] ? lockdep_hardirqs_on+0x98/0x150 [ 2540.902172][ T9971] get_signal+0x12fc/0x13f0 [ 2540.906756][ T9971] arch_do_signal_or_restart+0xc2/0x800 [ 2540.912384][ T9971] ? get_sigframe_size+0x20/0x20 [ 2540.917452][ T9971] ? exit_to_user_mode_loop+0x3b/0x110 [ 2540.923127][ T9971] exit_to_user_mode_loop+0x70/0x110 [ 2540.928491][ T9971] exit_to_user_mode_prepare+0xee/0x180 [ 2540.934219][ T9971] syscall_exit_to_user_mode+0x1a/0x50 [ 2540.939739][ T9971] do_syscall_64+0x61/0xa0 [ 2540.944213][ T9971] ? clear_bhb_loop+0x40/0x90 [ 2540.948942][ T9971] ? clear_bhb_loop+0x40/0x90 [ 2540.953693][ T9971] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2540.959651][ T9971] RIP: 0033:0x7ff96a19cdd9 [ 2540.964166][ T9971] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2540.983828][ T9971] RSP: 002b:00007ff96b094028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2540.992299][ T9971] RAX: fffffffffffffffc RBX: 00007ff96a416090 RCX: 00007ff96a19cdd9 [ 2541.000313][ T9971] RDX: 0000000000000048 RSI: 0000200000000780 RDI: 000000000000000a [ 2541.008325][ T9971] RBP: 00007ff96b094090 R08: 0000000000000000 R09: 0000000000000000 [ 2541.016374][ T9971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2541.024393][ T9971] R13: 00007ff96a416128 R14: 00007ff96a416090 R15: 00007ffd65086db8 [ 2541.032470][ T9971] [ 2542.778216][ T9983] netlink: 10 bytes leftover after parsing attributes in process `syz.3.12283'. [ 2543.569710][ T9993] netlink: 'syz.2.12290': attribute type 3 has an invalid length. [ 2543.628124][ T9993] netlink: 199824 bytes leftover after parsing attributes in process `syz.2.12290'. [ 2544.178623][T10007] netlink: 'syz.4.12292': attribute type 21 has an invalid length. [ 2544.186714][T10007] netlink: 152 bytes leftover after parsing attributes in process `syz.4.12292'. [ 2547.825480][T10038] netlink: 60 bytes leftover after parsing attributes in process `syz.1.12304'. [ 2547.909042][T10038] netlink: 60 bytes leftover after parsing attributes in process `syz.1.12304'. [ 2547.933095][T10035] netlink: 60 bytes leftover after parsing attributes in process `syz.1.12304'. [ 2549.387076][T10067] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.12315'. [ 2549.491614][T10067] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 2552.220734][T10104] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.12327'. [ 2552.533562][T10104] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 2553.654498][T10108] netlink: 'syz.2.12329': attribute type 21 has an invalid length. [ 2553.697352][T10108] netlink: 'syz.2.12329': attribute type 4 has an invalid length. [ 2553.737017][T10108] netlink: 132 bytes leftover after parsing attributes in process `syz.2.12329'. [ 2553.780471][T10110] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.12329'. [ 2553.837022][T10108] netlink: 'syz.2.12329': attribute type 1 has an invalid length. [ 2553.875217][T10108] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.12329'. [ 2553.929795][T10110] netlink: 144 bytes leftover after parsing attributes in process `syz.2.12329'. [ 2555.316593][T10124] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2555.439140][T10124] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.12332'. [ 2555.799993][T10126] mac80211_hwsim hwsim125 wlan1: entered allmulticast mode [ 2556.346411][T10137] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.12337'. [ 2556.824631][T10137] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 2558.062383][T10159] netlink: 60 bytes leftover after parsing attributes in process `syz.2.12343'. [ 2558.677249][T10159] netlink: 60 bytes leftover after parsing attributes in process `syz.2.12343'. [ 2558.850067][T10168] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.12346'. [ 2558.933593][T10168] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 2558.955617][T10168] CPU: 1 PID: 10168 Comm: syz.4.12346 Not tainted syzkaller #0 [ 2558.963262][T10168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2558.973468][T10168] Call Trace: [ 2558.976803][T10168] [ 2558.979782][T10168] dump_stack_lvl+0x18c/0x250 [ 2558.984522][T10168] ? show_regs_print_info+0x20/0x20 [ 2558.989786][T10168] ? load_image+0x420/0x420 [ 2558.994366][T10168] sysfs_warn_dup+0x8e/0xa0 [ 2558.998929][T10168] sysfs_do_create_link_sd+0xc0/0x110 [ 2559.004364][T10168] device_add_class_symlinks+0x1cf/0x240 [ 2559.010095][T10168] device_add+0x507/0xc20 [ 2559.014502][T10168] wiphy_register+0x1dad/0x2ae0 [ 2559.019420][T10168] ? cfg80211_event_work+0x40/0x40 [ 2559.024571][T10168] ? minstrel_ht_alloc+0x88a/0x990 [ 2559.029728][T10168] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 2559.035832][T10168] ieee80211_register_hw+0x3464/0x4250 [ 2559.041354][T10168] ? ieee80211_tasklet_handler+0x20/0x20 [ 2559.047016][T10168] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 2559.052959][T10168] ? __debug_object_init+0xec/0x450 [ 2559.058196][T10168] ? __asan_memset+0x22/0x40 [ 2559.062914][T10168] ? __hrtimer_init+0x186/0x270 [ 2559.067803][T10168] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 2559.073577][T10168] ? mac80211_hwsim_free+0x220/0x220 [ 2559.078894][T10168] ? rcu_is_watching+0x15/0xb0 [ 2559.083692][T10168] ? kstrndup+0xbd/0x140 [ 2559.087985][T10168] hwsim_new_radio_nl+0xdc9/0x1a90 [ 2559.093140][T10168] ? __nla_validate+0x50/0x50 [ 2559.097867][T10168] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 2559.104258][T10168] ? __nla_parse+0x40/0x50 [ 2559.108714][T10168] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 2559.115087][T10168] genl_family_rcv_msg_doit+0x211/0x310 [ 2559.120767][T10168] ? end_current_label_crit_section+0x170/0x170 [ 2559.127044][T10168] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 2559.132987][T10168] ? bpf_lsm_capable+0x9/0x10 [ 2559.137707][T10168] ? security_capable+0x89/0xb0 [ 2559.142606][T10168] genl_rcv_msg+0x619/0x7a0 [ 2559.147147][T10168] ? genl_bind+0x360/0x360 [ 2559.151592][T10168] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 2559.157965][T10168] ? ref_tracker_free+0x690/0x840 [ 2559.163031][T10168] netlink_rcv_skb+0x241/0x4d0 [ 2559.167866][T10168] ? genl_bind+0x360/0x360 [ 2559.172330][T10168] ? netlink_ack+0x1180/0x1180 [ 2559.177147][T10168] ? __lock_acquire+0x7d40/0x7d40 [ 2559.182308][T10168] ? down_read+0x1ac/0x2e0 [ 2559.186779][T10168] genl_rcv+0x28/0x40 [ 2559.190803][T10168] netlink_unicast+0x751/0x8d0 [ 2559.195626][T10168] netlink_sendmsg+0x8d0/0xbf0 [ 2559.200442][T10168] ? netlink_getsockopt+0x590/0x590 [ 2559.205696][T10168] ? aa_sock_msg_perm+0x94/0x150 [ 2559.210694][T10168] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2559.216026][T10168] ? security_socket_sendmsg+0x80/0xa0 [ 2559.221528][T10168] ? netlink_getsockopt+0x590/0x590 [ 2559.226777][T10168] ____sys_sendmsg+0x5ba/0x960 [ 2559.231581][T10168] ? __asan_memset+0x22/0x40 [ 2559.236210][T10168] ? __sys_sendmsg_sock+0x30/0x30 [ 2559.241262][T10168] ? __import_iovec+0x5f2/0x850 [ 2559.246149][T10168] ? import_iovec+0x73/0xa0 [ 2559.250688][T10168] ___sys_sendmsg+0x2a6/0x360 [ 2559.255411][T10168] ? __sys_sendmsg+0x2a0/0x2a0 [ 2559.260251][T10168] __se_sys_sendmsg+0x1c2/0x2b0 [ 2559.265170][T10168] ? __x64_sys_sendmsg+0x80/0x80 [ 2559.270162][T10168] ? lockdep_hardirqs_on+0x98/0x150 [ 2559.275397][T10168] do_syscall_64+0x55/0xa0 [ 2559.279851][T10168] ? clear_bhb_loop+0x40/0x90 [ 2559.284566][T10168] ? clear_bhb_loop+0x40/0x90 [ 2559.289291][T10168] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2559.295218][T10168] RIP: 0033:0x7f51e919cdd9 [ 2559.299668][T10168] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2559.319312][T10168] RSP: 002b:00007f51ea072028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2559.327772][T10168] RAX: ffffffffffffffda RBX: 00007f51e9415fa0 RCX: 00007f51e919cdd9 [ 2559.335790][T10168] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 2559.343793][T10168] RBP: 00007f51e9232d69 R08: 0000000000000000 R09: 0000000000000000 [ 2559.351805][T10168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2559.359998][T10168] R13: 00007f51e9416038 R14: 00007f51e9415fa0 R15: 00007fffbbe67d48 [ 2559.368056][T10168] [ 2559.811196][T10181] netlink: 'syz.3.12351': attribute type 10 has an invalid length. [ 2560.475266][T10181] team0: Port device geneve1 added [ 2560.551169][T10183] mac80211_hwsim hwsim127 wlan1: entered allmulticast mode [ 2560.879333][T10194] netlink: 65051 bytes leftover after parsing attributes in process `syz.4.12355'. [ 2560.914008][T10193] delete_channel: no stack [ 2562.373975][T10210] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.12360'. [ 2562.468969][T10205] netlink: 'syz.3.12359': attribute type 10 has an invalid length. [ 2562.500776][T10205] netlink: 2 bytes leftover after parsing attributes in process `syz.3.12359'. [ 2564.557629][T10251] netlink: 203516 bytes leftover after parsing attributes in process `syz.4.12374'. [ 2564.574727][T10251] netlink: del zone limit has 8 unknown bytes [ 2564.780683][T10260] netlink: 132 bytes leftover after parsing attributes in process `syz.3.12376'. [ 2565.950791][T10290] netlink: 'syz.1.12388': attribute type 1 has an invalid length. [ 2566.004048][T10290] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.12388'. [ 2566.031269][T10290] netlink: 9 bytes leftover after parsing attributes in process `syz.1.12388'. [ 2566.423828][T10305] FAULT_INJECTION: forcing a failure. [ 2566.423828][T10305] name failslab, interval 1, probability 0, space 0, times 0 [ 2566.448862][T10305] CPU: 1 PID: 10305 Comm: syz.4.12393 Not tainted syzkaller #0 [ 2566.456509][T10305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2566.466621][T10305] Call Trace: [ 2566.469948][T10305] [ 2566.472919][T10305] dump_stack_lvl+0x18c/0x250 [ 2566.477667][T10305] ? show_regs_print_info+0x20/0x20 [ 2566.482931][T10305] ? load_image+0x420/0x420 [ 2566.487497][T10305] ? __might_sleep+0xe0/0xe0 [ 2566.492142][T10305] ? __lock_acquire+0x7d40/0x7d40 [ 2566.497304][T10305] ? mark_lock+0x94/0x320 [ 2566.501705][T10305] should_fail_ex+0x39d/0x4d0 [ 2566.506450][T10305] should_failslab+0x9/0x20 [ 2566.511005][T10305] slab_pre_alloc_hook+0x59/0x310 [ 2566.516099][T10305] ? __get_vm_area_node+0x125/0x370 [ 2566.521355][T10305] __kmem_cache_alloc_node+0x53/0x250 [ 2566.526809][T10305] ? __get_vm_area_node+0x125/0x370 [ 2566.532061][T10305] kmalloc_node_trace+0x26/0xe0 [ 2566.536982][T10305] __get_vm_area_node+0x125/0x370 [ 2566.542086][T10305] __vmalloc_node_range+0x36e/0x1330 [ 2566.547433][T10305] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 2566.553049][T10305] ? mark_lock+0x94/0x320 [ 2566.557472][T10305] ? __lock_acquire+0x1347/0x7d40 [ 2566.562553][T10305] ? verify_lock_unused+0x140/0x140 [ 2566.567821][T10305] ? free_vm_area+0x50/0x50 [ 2566.572400][T10305] ? end_current_label_crit_section+0x170/0x170 [ 2566.578703][T10305] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 2566.584304][T10305] __vmalloc+0x7a/0x90 [ 2566.588467][T10305] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 2566.594071][T10305] bpf_prog_alloc_no_stats+0x47/0x440 [ 2566.599490][T10305] ? bpf_prog_alloc+0x2b/0x1a0 [ 2566.604309][T10305] bpf_prog_alloc+0x3d/0x1a0 [ 2566.608962][T10305] bpf_prog_load+0x6eb/0x1670 [ 2566.613706][T10305] ? map_freeze+0x420/0x420 [ 2566.618263][T10305] ? __might_fault+0xaa/0x120 [ 2566.622989][T10305] ? __lock_acquire+0x7d40/0x7d40 [ 2566.628059][T10305] ? file_end_write+0x159/0x250 [ 2566.632951][T10305] ? __might_fault+0xaa/0x120 [ 2566.637656][T10305] ? __might_fault+0xc6/0x120 [ 2566.642424][T10305] ? __might_fault+0xaa/0x120 [ 2566.647145][T10305] ? bpf_lsm_bpf+0x9/0x10 [ 2566.651560][T10305] ? security_bpf+0x7e/0xa0 [ 2566.656140][T10305] __sys_bpf+0x5ba/0x890 [ 2566.660427][T10305] ? bpf_link_show_fdinfo+0x390/0x390 [ 2566.665861][T10305] ? lock_chain_count+0x20/0x20 [ 2566.670760][T10305] __x64_sys_bpf+0x7c/0x90 [ 2566.675216][T10305] do_syscall_64+0x55/0xa0 [ 2566.679671][T10305] ? clear_bhb_loop+0x40/0x90 [ 2566.684397][T10305] ? clear_bhb_loop+0x40/0x90 [ 2566.689119][T10305] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2566.695045][T10305] RIP: 0033:0x7f51e919cdd9 [ 2566.699486][T10305] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2566.719127][T10305] RSP: 002b:00007f51ea072028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2566.727567][T10305] RAX: ffffffffffffffda RBX: 00007f51e9415fa0 RCX: 00007f51e919cdd9 [ 2566.735571][T10305] RDX: 0000000000000094 RSI: 0000200000000140 RDI: 0000000000000005 [ 2566.743573][T10305] RBP: 00007f51ea072090 R08: 0000000000000000 R09: 0000000000000000 [ 2566.751574][T10305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2566.759574][T10305] R13: 00007f51e9416038 R14: 00007f51e9415fa0 R15: 00007fffbbe67d48 [ 2566.767587][T10305] [ 2566.837485][T10305] syz.4.12393: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz4,mems_allowed=0-1 [ 2566.897830][T10305] CPU: 0 PID: 10305 Comm: syz.4.12393 Not tainted syzkaller #0 [ 2566.905467][T10305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2566.915591][T10305] Call Trace: [ 2566.918914][T10305] [ 2566.921885][T10305] dump_stack_lvl+0x18c/0x250 [ 2566.926632][T10305] ? show_regs_print_info+0x20/0x20 [ 2566.931889][T10305] ? load_image+0x420/0x420 [ 2566.936452][T10305] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 2566.942925][T10305] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 2566.949481][T10305] warn_alloc+0x246/0x340 [ 2566.953878][T10305] ? __get_vm_area_node+0x125/0x370 [ 2566.959129][T10305] ? zone_watermark_ok_safe+0x230/0x230 [ 2566.964738][T10305] ? rcu_is_watching+0x15/0xb0 [ 2566.969570][T10305] ? __get_vm_area_node+0x356/0x370 [ 2566.974856][T10305] __vmalloc_node_range+0x393/0x1330 [ 2566.980207][T10305] ? mark_lock+0x94/0x320 [ 2566.984600][T10305] ? __lock_acquire+0x1347/0x7d40 [ 2566.989694][T10305] ? verify_lock_unused+0x140/0x140 [ 2566.994965][T10305] ? free_vm_area+0x50/0x50 [ 2566.999532][T10305] ? end_current_label_crit_section+0x170/0x170 [ 2567.005843][T10305] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 2567.011440][T10305] __vmalloc+0x7a/0x90 [ 2567.015563][T10305] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 2567.021173][T10305] bpf_prog_alloc_no_stats+0x47/0x440 [ 2567.026598][T10305] ? bpf_prog_alloc+0x2b/0x1a0 [ 2567.031513][T10305] bpf_prog_alloc+0x3d/0x1a0 [ 2567.036155][T10305] bpf_prog_load+0x6eb/0x1670 [ 2567.040890][T10305] ? map_freeze+0x420/0x420 [ 2567.045447][T10305] ? __might_fault+0xaa/0x120 [ 2567.050173][T10305] ? __lock_acquire+0x7d40/0x7d40 [ 2567.055259][T10305] ? file_end_write+0x159/0x250 [ 2567.060174][T10305] ? __might_fault+0xaa/0x120 [ 2567.064895][T10305] ? __might_fault+0xc6/0x120 [ 2567.069622][T10305] ? __might_fault+0xaa/0x120 [ 2567.074406][T10305] ? bpf_lsm_bpf+0x9/0x10 [ 2567.078806][T10305] ? security_bpf+0x7e/0xa0 [ 2567.083381][T10305] __sys_bpf+0x5ba/0x890 [ 2567.087682][T10305] ? bpf_link_show_fdinfo+0x390/0x390 [ 2567.093141][T10305] ? lock_chain_count+0x20/0x20 [ 2567.098061][T10305] __x64_sys_bpf+0x7c/0x90 [ 2567.102527][T10305] do_syscall_64+0x55/0xa0 [ 2567.106990][T10305] ? clear_bhb_loop+0x40/0x90 [ 2567.111727][T10305] ? clear_bhb_loop+0x40/0x90 [ 2567.116460][T10305] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2567.122412][T10305] RIP: 0033:0x7f51e919cdd9 [ 2567.126870][T10305] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2567.146551][T10305] RSP: 002b:00007f51ea072028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2567.155037][T10305] RAX: ffffffffffffffda RBX: 00007f51e9415fa0 RCX: 00007f51e919cdd9 [ 2567.163066][T10305] RDX: 0000000000000094 RSI: 0000200000000140 RDI: 0000000000000005 [ 2567.171195][T10305] RBP: 00007f51ea072090 R08: 0000000000000000 R09: 0000000000000000 [ 2567.179229][T10305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2567.187255][T10305] R13: 00007f51e9416038 R14: 00007f51e9415fa0 R15: 00007fffbbe67d48 [ 2567.195349][T10305] [ 2567.217756][ T8585] Bluetooth: hci5: command 0x0406 tx timeout [ 2567.286333][T10305] Mem-Info: [ 2567.307941][T10305] active_anon:37015 inactive_anon:0 isolated_anon:0 [ 2567.307941][T10305] active_file:22961 inactive_file:40941 isolated_file:0 [ 2567.307941][T10305] unevictable:768 dirty:132 writeback:0 [ 2567.307941][T10305] slab_reclaimable:13404 slab_unreclaimable:175379 [ 2567.307941][T10305] mapped:42198 shmem:24404 pagetables:649 [ 2567.307941][T10305] sec_pagetables:0 bounce:0 [ 2567.307941][T10305] kernel_misc_reclaimable:0 [ 2567.307941][T10305] free:1205278 free_pcp:8254 free_cma:0 [ 2567.402621][T10309] veth0_vlan: entered allmulticast mode [ 2567.447816][T10305] Node 0 active_anon:150560kB inactive_anon:0kB active_file:91844kB inactive_file:163560kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:168792kB dirty:528kB writeback:0kB shmem:98380kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:15108kB pagetables:2596kB sec_pagetables:0kB all_unreclaimable? no [ 2567.493634][ T5341] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2567.508253][T10305] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 2567.577838][T10305] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2567.642984][T10305] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 2567.651408][T10305] Node 0 DMA32 free:895792kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:152120kB inactive_anon:0kB active_file:91844kB inactive_file:162736kB unevictable:1536kB writepending:528kB present:3129332kB managed:2586952kB mlocked:0kB bounce:0kB free_pcp:25884kB local_pcp:12436kB free_cma:0kB [ 2567.750380][T10312] veth0_vlan: left promiscuous mode [ 2567.761460][T10305] lowmem_reserve[]: 0 0 0 0 0 [ 2567.773330][T10305] Node 0 Normal free:4kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 2567.819139][T10312] veth0_vlan: entered promiscuous mode [ 2567.832853][T10319] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.12396'. [ 2567.853686][T10319] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 2567.870095][T10305] lowmem_reserve[]: 0 0 0 0 0 [ 2567.883295][T10305] Node 1 Normal free:3905924kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:7680kB local_pcp:0kB free_cma:0kB [ 2568.001817][T10305] lowmem_reserve[]: 0 0 0 0 0 [ 2568.016581][T10305] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 2568.067849][T10305] Node 0 DMA32: 77*4kB (UME) 747*8kB (UM) 213*16kB (UM) 274*32kB (UE) 32*64kB (UME) 289*128kB (ME) 198*256kB (M) 156*512kB (UME) 296*1024kB (UME) 26*2048kB (UM) 85*4096kB (M) = 892572kB [ 2568.125674][T10305] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 2568.183076][T10305] Node 1 Normal: 259*4kB (UME) 61*8kB (UME) 37*16kB (UME) 276*32kB (UME) 97*64kB (UE) 17*128kB (UME) 4*256kB (UE) 3*512kB (UME) 1*1024kB (E) 2*2048kB (UE) 947*4096kB (M) = 3905924kB [ 2568.208519][T10305] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2568.224925][T10305] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 2568.236209][T10305] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2568.256331][T10305] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 2568.286606][T10305] 89323 total pagecache pages [ 2568.304120][T10305] 0 pages in swap cache [ 2568.317185][T10305] Free swap = 124996kB [ 2568.334583][T10305] Total swap = 124996kB [ 2568.343878][T10310] syzkaller0: entered promiscuous mode [ 2568.355745][T10305] 2097051 pages RAM [ 2568.364460][T10305] 0 pages HighMem/MovableOnly [ 2568.411177][T10305] 416927 pages reserved [ 2568.415506][T10305] 0 pages cma reserved [ 2568.427935][T10310] syzkaller0: entered allmulticast mode [ 2571.087028][T10351] syz.3.12404[10351] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2571.099204][T10351] syz.3.12404[10351] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2572.305553][T10353] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2574.628024][T10356] netlink: 'syz.3.12406': attribute type 10 has an invalid length. [ 2574.636077][T10356] netlink: 152 bytes leftover after parsing attributes in process `syz.3.12406'. [ 2575.109597][T10364] netlink: 'syz.4.12410': attribute type 10 has an invalid length. [ 2575.137389][T10364] hsr0: entered promiscuous mode [ 2575.166156][T10364] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 2575.203420][T10364] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 2575.214759][T10364] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 2575.231397][T10364] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 2575.835792][T10383] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2575.978550][T10384] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2576.433786][T10390] netlink: 'syz.1.12416': attribute type 8 has an invalid length. [ 2576.496284][T10390] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.12416'. [ 2576.585313][T10395] netlink: 'syz.4.12417': attribute type 10 has an invalid length. [ 2576.636895][T10395] netlink: 152 bytes leftover after parsing attributes in process `syz.4.12417'. [ 2577.110502][T10412] netlink: 'syz.2.12424': attribute type 10 has an invalid length. [ 2578.326215][T10436] netlink: 'syz.2.12431': attribute type 10 has an invalid length. [ 2578.342069][T10436] netlink: 152 bytes leftover after parsing attributes in process `syz.2.12431'. [ 2578.633629][T10440] netlink: 56863 bytes leftover after parsing attributes in process `syz.4.12435'. [ 2578.873205][T10438] netlink: 'syz.3.12433': attribute type 9 has an invalid length. [ 2578.944015][T10443] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.12436'. [ 2579.004778][T10443] netlink: 'syz.2.12436': attribute type 10 has an invalid length. [ 2579.069849][T10445] netlink: 'syz.1.12434': attribute type 2 has an invalid length. [ 2579.128042][T10445] netlink: 'syz.1.12434': attribute type 8 has an invalid length. [ 2579.181920][T10446] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.12434'. [ 2579.188183][T10445] netlink: 132 bytes leftover after parsing attributes in process `syz.1.12434'. [ 2579.275662][T10450] FAULT_INJECTION: forcing a failure. [ 2579.275662][T10450] name failslab, interval 1, probability 0, space 0, times 0 [ 2579.307848][T10450] CPU: 1 PID: 10450 Comm: syz.4.12437 Not tainted syzkaller #0 [ 2579.315481][T10450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2579.325644][T10450] Call Trace: [ 2579.328971][T10450] [ 2579.331950][T10450] dump_stack_lvl+0x18c/0x250 [ 2579.336735][T10450] ? show_regs_print_info+0x20/0x20 [ 2579.341996][T10450] ? load_image+0x420/0x420 [ 2579.346900][T10450] ? __might_sleep+0xe0/0xe0 [ 2579.351539][T10450] ? __lock_acquire+0x7d40/0x7d40 [ 2579.356607][T10450] ? __lock_acquire+0x1273/0x7d40 [ 2579.361688][T10450] ? ima_match_policy+0x108/0x1ff0 [ 2579.366867][T10450] should_fail_ex+0x39d/0x4d0 [ 2579.371622][T10450] should_failslab+0x9/0x20 [ 2579.376216][T10450] slab_pre_alloc_hook+0x59/0x310 [ 2579.381315][T10450] kmem_cache_alloc_node+0x60/0x320 [ 2579.386559][T10450] ? __alloc_skb+0x103/0x2c0 [ 2579.391190][T10450] __alloc_skb+0x103/0x2c0 [ 2579.395656][T10450] alloc_skb_with_frags+0xca/0x7b0 [ 2579.400812][T10450] ? __lock_acquire+0x7d40/0x7d40 [ 2579.405883][T10450] ? mark_lock+0x94/0x320 [ 2579.410260][T10450] sock_alloc_send_pskb+0x883/0x9a0 [ 2579.415530][T10450] ? sock_kzfree_s+0x50/0x50 [ 2579.420166][T10450] ? verify_lock_unused+0x140/0x140 [ 2579.425411][T10450] ? dev_get_by_index+0x22/0x2d0 [ 2579.430386][T10450] ? dev_get_by_index+0x22/0x2d0 [ 2579.435368][T10450] packet_sendmsg+0x3017/0x4c30 [ 2579.440290][T10450] ? __might_sleep+0xe0/0xe0 [ 2579.444922][T10450] ? verify_lock_unused+0x140/0x140 [ 2579.450159][T10450] ? mark_lock+0x94/0x320 [ 2579.454544][T10450] ? __lock_acquire+0x1273/0x7d40 [ 2579.459601][T10450] ? verify_lock_unused+0x140/0x140 [ 2579.464833][T10450] ? aa_sk_perm+0x83c/0x970 [ 2579.469375][T10450] ? packet_getsockopt+0xad0/0xad0 [ 2579.474529][T10450] ? tomoyo_gc_thread+0x7d6/0x1410 [ 2579.479684][T10450] ? aa_sock_msg_perm+0x94/0x150 [ 2579.484681][T10450] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2579.490009][T10450] ? security_socket_sendmsg+0x80/0xa0 [ 2579.495510][T10450] ? packet_getsockopt+0xad0/0xad0 [ 2579.500665][T10450] ____sys_sendmsg+0x5ba/0x960 [ 2579.505464][T10450] ? __lock_acquire+0x7d40/0x7d40 [ 2579.510571][T10450] ? __asan_memset+0x22/0x40 [ 2579.515248][T10450] ? __sys_sendmsg_sock+0x30/0x30 [ 2579.520306][T10450] ? __import_iovec+0x3fa/0x850 [ 2579.525198][T10450] ? import_iovec+0x73/0xa0 [ 2579.529743][T10450] ___sys_sendmsg+0x2a6/0x360 [ 2579.534457][T10450] ? get_pid_task+0x20/0x1e0 [ 2579.539094][T10450] ? __sys_sendmsg+0x2a0/0x2a0 [ 2579.543904][T10450] ? __lock_acquire+0x7d40/0x7d40 [ 2579.548982][T10450] __se_sys_sendmsg+0x1c2/0x2b0 [ 2579.553870][T10450] ? __x64_sys_sendmsg+0x80/0x80 [ 2579.558853][T10450] ? lockdep_hardirqs_on+0x98/0x150 [ 2579.564093][T10450] do_syscall_64+0x55/0xa0 [ 2579.568540][T10450] ? clear_bhb_loop+0x40/0x90 [ 2579.573248][T10450] ? clear_bhb_loop+0x40/0x90 [ 2579.577962][T10450] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2579.583905][T10450] RIP: 0033:0x7f51e919cdd9 [ 2579.588356][T10450] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2579.608010][T10450] RSP: 002b:00007f51ea072028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2579.616463][T10450] RAX: ffffffffffffffda RBX: 00007f51e9415fa0 RCX: 00007f51e919cdd9 [ 2579.624472][T10450] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 2579.632567][T10450] RBP: 00007f51ea072090 R08: 0000000000000000 R09: 0000000000000000 [ 2579.640567][T10450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2579.648663][T10450] R13: 00007f51e9416038 R14: 00007f51e9415fa0 R15: 00007fffbbe67d48 [ 2579.656675][T10450] [ 2580.130934][T10451] validate_nla: 1 callbacks suppressed [ 2580.130954][T10451] netlink: 'syz.1.12434': attribute type 9 has an invalid length. [ 2580.244340][T10451] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.12434'. [ 2581.188482][T10477] netlink: 'syz.1.12446': attribute type 10 has an invalid length. [ 2581.227249][T10477] netlink: 152 bytes leftover after parsing attributes in process `syz.1.12446'. [ 2581.353013][T10479] netlink: 'syz.2.12448': attribute type 9 has an invalid length. [ 2581.434445][T10482] netlink: 60 bytes leftover after parsing attributes in process `syz.4.12449'. [ 2581.452204][T10482] netlink: 60 bytes leftover after parsing attributes in process `syz.4.12449'. [ 2581.473201][T10482] netlink: 60 bytes leftover after parsing attributes in process `syz.4.12449'. [ 2581.819480][T10486] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2582.381482][ T8585] Bluetooth: hci0: command 0x0406 tx timeout [ 2582.526335][T10506] netlink: 'syz.1.12457': attribute type 46 has an invalid length. [ 2582.626103][T10506] netlink: 'syz.1.12457': attribute type 46 has an invalid length. [ 2583.634298][T10517] netlink: 'syz.4.12461': attribute type 9 has an invalid length. [ 2584.320386][T10531] netlink: 'syz.1.12464': attribute type 1 has an invalid length. [ 2584.379792][T10531] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.12464'. [ 2585.965319][T10551] netlink: 'syz.3.12472': attribute type 8 has an invalid length. [ 2586.028227][T10551] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.12472'. [ 2586.173447][T10554] netlink: 'syz.1.12470': attribute type 29 has an invalid length. [ 2586.230173][T10554] netlink: 'syz.1.12470': attribute type 29 has an invalid length. [ 2586.303642][T10559] netlink: 'syz.1.12470': attribute type 29 has an invalid length. [ 2588.247999][T10583] netlink: 60 bytes leftover after parsing attributes in process `syz.4.12490'. [ 2588.257181][T10583] netlink: 60 bytes leftover after parsing attributes in process `syz.4.12490'. [ 2588.328699][T10587] netlink: 60 bytes leftover after parsing attributes in process `syz.4.12490'. [ 2588.403572][T10583] netlink: 60 bytes leftover after parsing attributes in process `syz.4.12490'. [ 2588.619598][T10596] netlink: 'syz.2.12485': attribute type 2 has an invalid length. [ 2588.655570][T10596] netlink: 'syz.2.12485': attribute type 11 has an invalid length. [ 2588.680833][T10596] netlink: 132 bytes leftover after parsing attributes in process `syz.2.12485'. [ 2588.758905][T10597] netlink: 'syz.3.12487': attribute type 21 has an invalid length. [ 2588.768010][T10597] netlink: 168 bytes leftover after parsing attributes in process `syz.3.12487'. [ 2588.779011][T10600] netlink: 184 bytes leftover after parsing attributes in process `syz.3.12487'. [ 2588.843858][T10597] netlink: 'syz.3.12487': attribute type 10 has an invalid length. [ 2588.858149][T10597] netlink: 40 bytes leftover after parsing attributes in process `syz.3.12487'. [ 2590.558833][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 2590.565410][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 2590.683069][T10617] netlink: 'syz.1.12492': attribute type 5 has an invalid length. [ 2590.704696][T10617] netlink: 168 bytes leftover after parsing attributes in process `syz.1.12492'. [ 2591.255845][T10630] netlink: 60 bytes leftover after parsing attributes in process `syz.2.12496'. [ 2591.268146][T10630] netlink: 60 bytes leftover after parsing attributes in process `syz.2.12496'. [ 2591.318686][T10630] netlink: 60 bytes leftover after parsing attributes in process `syz.2.12496'. [ 2591.372766][T10630] netlink: 60 bytes leftover after parsing attributes in process `syz.2.12496'. [ 2591.399498][T10632] netlink: 830 bytes leftover after parsing attributes in process `syz.3.12497'. [ 2591.692743][T10635] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.12497'. [ 2591.730910][T10632] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.12497'. [ 2591.946338][T10632] netlink: 14568 bytes leftover after parsing attributes in process `syz.3.12497'. [ 2592.028515][T10632] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.12497'. [ 2592.067528][T10632] bridge_slave_1: default FDB implementation only supports local addresses [ 2594.477623][T10684] netlink: 'syz.4.12511': attribute type 41 has an invalid length. [ 2594.896507][T10696] netlink: 'syz.3.12516': attribute type 5 has an invalid length. [ 2594.904665][T10696] netlink: 168 bytes leftover after parsing attributes in process `syz.3.12516'. [ 2595.354218][T10700] netlink: 'syz.2.12514': attribute type 21 has an invalid length. [ 2595.717120][T10700] netlink: 'syz.2.12514': attribute type 10 has an invalid length. [ 2596.894604][T10729] netlink: 'syz.2.12527': attribute type 10 has an invalid length. [ 2596.910848][T10729] geneve0: entered promiscuous mode [ 2597.578092][T10743] __nla_validate_parse: 3 callbacks suppressed [ 2597.578114][T10743] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.12534'. [ 2597.604432][T10743] bridge_slave_1: default FDB implementation only supports local addresses [ 2598.672200][T10761] netlink: 'syz.4.12541': attribute type 10 has an invalid length. [ 2598.683228][T10762] netlink: 196 bytes leftover after parsing attributes in process `syz.3.12539'. [ 2598.713079][T10761] netlink: 40 bytes leftover after parsing attributes in process `syz.4.12541'. [ 2598.876277][T10762] netlink: 'syz.3.12539': attribute type 29 has an invalid length. [ 2598.922838][T10762] netlink: 'syz.3.12539': attribute type 29 has an invalid length. [ 2599.011188][T10764] netlink: 'syz.3.12539': attribute type 29 has an invalid length. [ 2599.084326][T10766] netlink: 'syz.3.12539': attribute type 29 has an invalid length. [ 2599.489301][ T5321] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2599.948976][T10781] validate_nla: 1 callbacks suppressed [ 2599.949014][T10781] netlink: 'syz.3.12546': attribute type 9 has an invalid length. [ 2600.041896][T10784] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12548'. [ 2600.203112][T10786] netlink: 'syz.2.12549': attribute type 21 has an invalid length. [ 2600.233185][T10786] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2600.240937][T10786] IPv6: NLM_F_CREATE should be set when creating new route [ 2600.248910][T10786] IPv6: NLM_F_CREATE should be set when creating new route [ 2600.256827][T10786] IPv6: NLM_F_CREATE should be set when creating new route [ 2600.526239][T10788] netlink: 14 bytes leftover after parsing attributes in process `syz.4.12550'. [ 2600.587554][T10788] veth0_macvtap: left promiscuous mode [ 2601.659471][T10810] netlink: 15231 bytes leftover after parsing attributes in process `syz.3.12558'. [ 2601.761296][T10809] delete_channel: no stack [ 2602.069760][T10817] netlink: 'syz.2.12561': attribute type 9 has an invalid length. [ 2602.167582][T10814] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.12560'. [ 2602.681072][T10833] netlink: 'syz.2.12565': attribute type 9 has an invalid length. [ 2602.728237][T10833] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.12565'. [ 2602.852359][ T8585] Bluetooth: hci4: command 0x0406 tx timeout [ 2604.160765][T10852] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2604.445894][T10857] ip6gretap0: entered promiscuous mode [ 2608.179606][T10883] netlink: 'syz.2.12581': attribute type 3 has an invalid length. [ 2608.187626][T10883] netlink: 199824 bytes leftover after parsing attributes in process `syz.2.12581'. [ 2608.469363][T10889] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.12582'. [ 2609.279080][T10893] netlink: 'syz.1.12583': attribute type 12 has an invalid length. [ 2609.321033][T10893] netlink: 132 bytes leftover after parsing attributes in process `syz.1.12583'. [ 2609.354988][T10898] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2609.753548][T10906] FAULT_INJECTION: forcing a failure. [ 2609.753548][T10906] name failslab, interval 1, probability 0, space 0, times 0 [ 2609.766333][T10906] CPU: 0 PID: 10906 Comm: syz.3.12589 Not tainted syzkaller #0 [ 2609.773929][T10906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2609.784049][T10906] Call Trace: [ 2609.787450][T10906] [ 2609.790451][T10906] dump_stack_lvl+0x18c/0x250 [ 2609.795203][T10906] ? show_regs_print_info+0x20/0x20 [ 2609.800464][T10906] ? load_image+0x420/0x420 [ 2609.805026][T10906] ? kasan_quarantine_put+0xd8/0x220 [ 2609.810372][T10906] ? lockdep_hardirqs_on+0x98/0x150 [ 2609.815650][T10906] should_fail_ex+0x39d/0x4d0 [ 2609.820388][T10906] should_failslab+0x9/0x20 [ 2609.824930][T10906] slab_pre_alloc_hook+0x59/0x310 [ 2609.830002][T10906] kmem_cache_alloc+0x5a/0x2d0 [ 2609.834803][T10906] ? skb_clone+0x1eb/0x370 [ 2609.839252][T10906] skb_clone+0x1eb/0x370 [ 2609.843532][T10906] bpf_clone_redirect+0x167/0x4a0 [ 2609.848597][T10906] ? _local_bh_enable+0xa0/0xa0 [ 2609.853529][T10906] bpf_prog_a2368b0a7d3afd79+0x21/0x25 [ 2609.859040][T10906] bpf_test_run+0x2df/0x870 [ 2609.863590][T10906] ? bpf_test_run+0x174/0x870 [ 2609.868307][T10906] ? convert___skb_to_skb+0x590/0x590 [ 2609.873722][T10906] ? eth_get_headlen+0x210/0x210 [ 2609.878701][T10906] ? slab_build_skb+0x25f/0x3f0 [ 2609.883582][T10906] ? convert___skb_to_skb+0x3d/0x590 [ 2609.888907][T10906] bpf_prog_test_run_skb+0xad2/0x12b0 [ 2609.894321][T10906] ? cpu_online+0x60/0x60 [ 2609.898686][T10906] bpf_prog_test_run+0x321/0x390 [ 2609.903667][T10906] __sys_bpf+0x49d/0x890 [ 2609.907943][T10906] ? bpf_link_show_fdinfo+0x390/0x390 [ 2609.913394][T10906] ? lock_chain_count+0x20/0x20 [ 2609.918282][T10906] __x64_sys_bpf+0x7c/0x90 [ 2609.922731][T10906] do_syscall_64+0x55/0xa0 [ 2609.927181][T10906] ? clear_bhb_loop+0x40/0x90 [ 2609.931893][T10906] ? clear_bhb_loop+0x40/0x90 [ 2609.936606][T10906] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2609.942532][T10906] RIP: 0033:0x7f8318f9cdd9 [ 2609.946975][T10906] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2609.966621][T10906] RSP: 002b:00007f8319dbf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2609.975173][T10906] RAX: ffffffffffffffda RBX: 00007f8319215fa0 RCX: 00007f8318f9cdd9 [ 2609.983194][T10906] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 2609.991201][T10906] RBP: 00007f8319dbf090 R08: 0000000000000000 R09: 0000000000000000 [ 2609.999292][T10906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2610.007289][T10906] R13: 00007f8319216038 R14: 00007f8319215fa0 R15: 00007ffee3ecd4d8 [ 2610.015304][T10906] [ 2610.453105][T10911] netlink: 196 bytes leftover after parsing attributes in process `syz.2.12592'. [ 2610.483680][T10911] netlink: 'syz.2.12592': attribute type 29 has an invalid length. [ 2610.492814][T10911] netlink: 'syz.2.12592': attribute type 29 has an invalid length. [ 2610.517485][T10911] netlink: 'syz.2.12592': attribute type 29 has an invalid length. [ 2610.532172][T10911] netlink: 'syz.2.12592': attribute type 29 has an invalid length. [ 2610.591274][T10912] netlink: 'syz.2.12592': attribute type 29 has an invalid length. [ 2611.614525][T10934] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.12597'. [ 2611.689405][T10937] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.12600'. [ 2611.953915][T10940] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.12601'. [ 2611.989662][T10940] openvswitch: netlink: Key type 29 is not supported [ 2613.028928][T10949] netlink: 196 bytes leftover after parsing attributes in process `syz.4.12604'. [ 2613.775876][T10964] mac80211_hwsim hwsim129 wlan1: entered promiscuous mode [ 2613.832775][T10964] mac80211_hwsim hwsim129 wlan1: entered allmulticast mode [ 2614.478091][T10978] netlink: 'syz.2.12611': attribute type 12 has an invalid length. [ 2614.486836][T10978] netlink: 132 bytes leftover after parsing attributes in process `syz.2.12611'. [ 2614.516924][T10977] netlink: 'syz.3.12612': attribute type 9 has an invalid length. [ 2614.565025][T10977] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.12612'. [ 2614.882892][T10992] netlink: 196 bytes leftover after parsing attributes in process `syz.2.12618'. [ 2617.708085][T11017] netlink: 'syz.2.12626': attribute type 21 has an invalid length. [ 2617.738407][T11017] netlink: 156 bytes leftover after parsing attributes in process `syz.2.12626'. [ 2617.768429][T11017] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12626'. [ 2617.943886][T11022] netlink: 'syz.3.12627': attribute type 12 has an invalid length. [ 2617.958197][T11022] netlink: 132 bytes leftover after parsing attributes in process `syz.3.12627'. [ 2618.108889][T11026] netlink: 196 bytes leftover after parsing attributes in process `syz.4.12629'. [ 2620.002542][T11052] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2620.009899][T11052] IPv6: NLM_F_CREATE should be set when creating new route [ 2620.017238][T11052] IPv6: NLM_F_CREATE should be set when creating new route [ 2620.024564][T11052] IPv6: NLM_F_CREATE should be set when creating new route [ 2620.655216][T11060] netlink: 196 bytes leftover after parsing attributes in process `syz.2.12639'. [ 2621.002225][T11063] FAULT_INJECTION: forcing a failure. [ 2621.002225][T11063] name failslab, interval 1, probability 0, space 0, times 0 [ 2621.065147][T11063] CPU: 1 PID: 11063 Comm: syz.2.12640 Not tainted syzkaller #0 [ 2621.072870][T11063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2621.082966][T11063] Call Trace: [ 2621.086300][T11063] [ 2621.089275][T11063] dump_stack_lvl+0x18c/0x250 [ 2621.094029][T11063] ? show_regs_print_info+0x20/0x20 [ 2621.099281][T11063] ? load_image+0x420/0x420 [ 2621.103844][T11063] ? __might_sleep+0xe0/0xe0 [ 2621.108485][T11063] ? __lock_acquire+0x7d40/0x7d40 [ 2621.113566][T11063] should_fail_ex+0x39d/0x4d0 [ 2621.118320][T11063] should_failslab+0x9/0x20 [ 2621.122880][T11063] slab_pre_alloc_hook+0x59/0x310 [ 2621.127962][T11063] ? xfrm_state_walk_done+0x43/0x180 [ 2621.133297][T11063] kmem_cache_alloc_node+0x60/0x320 [ 2621.138549][T11063] ? __alloc_skb+0x103/0x2c0 [ 2621.143212][T11063] __alloc_skb+0x103/0x2c0 [ 2621.147675][T11063] pfkey_sendmsg+0xd61/0x10e0 [ 2621.152396][T11063] ? __might_sleep+0xe0/0xe0 [ 2621.157043][T11063] ? mark_lock+0x94/0x320 [ 2621.161420][T11063] ? __lock_acquire+0x1273/0x7d40 [ 2621.166485][T11063] ? pfkey_release+0x320/0x320 [ 2621.171318][T11063] ? aa_sock_msg_perm+0x94/0x150 [ 2621.176306][T11063] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2621.181641][T11063] ? security_socket_sendmsg+0x80/0xa0 [ 2621.187153][T11063] ? pfkey_release+0x320/0x320 [ 2621.191965][T11063] ____sys_sendmsg+0x5ba/0x960 [ 2621.196779][T11063] ? __asan_memset+0x22/0x40 [ 2621.201426][T11063] ? __sys_sendmsg_sock+0x30/0x30 [ 2621.206527][T11063] ? __import_iovec+0x5f2/0x850 [ 2621.211428][T11063] ? import_iovec+0x73/0xa0 [ 2621.215977][T11063] ___sys_sendmsg+0x2a6/0x360 [ 2621.220706][T11063] ? __sys_sendmsg+0x2a0/0x2a0 [ 2621.225539][T11063] ? trace_call_bpf+0xc3/0x6c0 [ 2621.230378][T11063] __se_sys_sendmsg+0x1c2/0x2b0 [ 2621.235277][T11063] ? __x64_sys_sendmsg+0x80/0x80 [ 2621.240275][T11063] ? lockdep_hardirqs_on+0x98/0x150 [ 2621.245527][T11063] do_syscall_64+0x55/0xa0 [ 2621.249977][T11063] ? clear_bhb_loop+0x40/0x90 [ 2621.254702][T11063] ? clear_bhb_loop+0x40/0x90 [ 2621.259428][T11063] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2621.265373][T11063] RIP: 0033:0x7faa9d99cdd9 [ 2621.269837][T11063] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2621.289552][T11063] RSP: 002b:00007faa9e91e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2621.298020][T11063] RAX: ffffffffffffffda RBX: 00007faa9dc16090 RCX: 00007faa9d99cdd9 [ 2621.306069][T11063] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 2621.314083][T11063] RBP: 00007faa9e91e090 R08: 0000000000000000 R09: 0000000000000000 [ 2621.322100][T11063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2621.330155][T11063] R13: 00007faa9dc16128 R14: 00007faa9dc16090 R15: 00007ffec040c0f8 [ 2621.338270][T11063] [ 2622.647062][T11072] skbuff: bad partial csum: csum=65535/127 headroom=178 headlen=65664 [ 2622.671935][T11074] netlink: 'syz.4.12641': attribute type 12 has an invalid length. [ 2622.686656][T11074] netlink: 132 bytes leftover after parsing attributes in process `syz.4.12641'. [ 2623.488788][ T8585] Bluetooth: hci3: command 0x0406 tx timeout [ 2623.848473][T11096] FAULT_INJECTION: forcing a failure. [ 2623.848473][T11096] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2623.890224][T11096] CPU: 0 PID: 11096 Comm: syz.4.12652 Not tainted syzkaller #0 [ 2623.897891][T11096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2623.908017][T11096] Call Trace: [ 2623.911342][T11096] [ 2623.914317][T11096] dump_stack_lvl+0x18c/0x250 [ 2623.919071][T11096] ? show_regs_print_info+0x20/0x20 [ 2623.924360][T11096] ? load_image+0x420/0x420 [ 2623.928920][T11096] ? __might_fault+0xaa/0x120 [ 2623.933666][T11096] ? __lock_acquire+0x7d40/0x7d40 [ 2623.938746][T11096] should_fail_ex+0x39d/0x4d0 [ 2623.943485][T11096] _copy_to_user+0x2f/0xa0 [ 2623.947954][T11096] bpf_test_finish+0x4e7/0x650 [ 2623.952775][T11096] ? convert___skb_to_skb+0x590/0x590 [ 2623.958195][T11096] ? convert_skb_to___skb+0x420/0x420 [ 2623.963650][T11096] bpf_prog_test_run_skb+0xcc3/0x12b0 [ 2623.969124][T11096] ? cpu_online+0x60/0x60 [ 2623.973533][T11096] bpf_prog_test_run+0x321/0x390 [ 2623.978535][T11096] __sys_bpf+0x49d/0x890 [ 2623.982838][T11096] ? bpf_link_show_fdinfo+0x390/0x390 [ 2623.988315][T11096] ? lock_chain_count+0x20/0x20 [ 2623.993219][T11096] __x64_sys_bpf+0x7c/0x90 [ 2623.997681][T11096] do_syscall_64+0x55/0xa0 [ 2624.002143][T11096] ? clear_bhb_loop+0x40/0x90 [ 2624.006897][T11096] ? clear_bhb_loop+0x40/0x90 [ 2624.011641][T11096] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2624.017591][T11096] RIP: 0033:0x7f51e919cdd9 [ 2624.022046][T11096] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2624.041706][T11096] RSP: 002b:00007f51ea072028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2624.050176][T11096] RAX: ffffffffffffffda RBX: 00007f51e9415fa0 RCX: 00007f51e919cdd9 [ 2624.058170][T11096] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 000000000000000a [ 2624.066165][T11096] RBP: 00007f51ea072090 R08: 0000000000000000 R09: 0000000000000000 [ 2624.074181][T11096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2624.082217][T11096] R13: 00007f51e9416038 R14: 00007f51e9415fa0 R15: 00007fffbbe67d48 [ 2624.090260][T11096] [ 2624.484641][T11101] netlink: 'syz.4.12654': attribute type 10 has an invalid length. [ 2624.507990][T11101] netlink: 40 bytes leftover after parsing attributes in process `syz.4.12654'. [ 2627.211708][T11125] netlink: 'syz.2.12665': attribute type 10 has an invalid length. [ 2627.222371][T11125] netlink: 40 bytes leftover after parsing attributes in process `syz.2.12665'. [ 2629.658378][T11138] netlink: 'syz.1.12669': attribute type 10 has an invalid length. [ 2629.687891][T11138] netlink: 40 bytes leftover after parsing attributes in process `syz.1.12669'. [ 2629.697295][T11138] team0: entered promiscuous mode [ 2629.727976][T11138] team_slave_0: entered promiscuous mode [ 2629.734891][T11138] team_slave_1: entered promiscuous mode [ 2629.778424][T11138] team0: entered allmulticast mode [ 2629.783788][T11138] team_slave_0: entered allmulticast mode [ 2629.845433][T11138] team_slave_1: entered allmulticast mode [ 2629.889229][T11138] bridge0: port 3(team0) entered blocking state [ 2629.939941][T11138] bridge0: port 3(team0) entered disabled state [ 2630.142495][T11138] bridge0: port 3(team0) entered blocking state [ 2630.150533][T11138] bridge0: port 3(team0) entered forwarding state [ 2630.630121][T11160] netlink: 156 bytes leftover after parsing attributes in process `syz.4.12678'. [ 2630.949755][T11166] netlink: 65055 bytes leftover after parsing attributes in process `syz.4.12681'. [ 2631.502327][ T5332] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2634.843051][T11197] netlink: 65055 bytes leftover after parsing attributes in process `syz.1.12694'. [ 2635.172025][T11204] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.12695'. [ 2637.511251][T11211] -1: renamed from batadv_slave_1 (while UP) [ 2637.582300][T11210] netlink: 'syz.1.12700': attribute type 10 has an invalid length. [ 2637.593399][T11210] netlink: 40 bytes leftover after parsing attributes in process `syz.1.12700'. [ 2638.158557][T11223] netlink: 'syz.4.12712': attribute type 9 has an invalid length. [ 2638.166462][T11223] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.12712'. [ 2638.522916][T11238] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.12709'. [ 2641.734528][T11255] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.12715'. [ 2641.766747][T11255] openvswitch: netlink: Flow key attribute not present in set flow. [ 2641.868393][T11258] netlink: 'syz.4.12717': attribute type 9 has an invalid length. [ 2641.876435][T11258] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.12717'. [ 2642.143782][T11263] FAULT_INJECTION: forcing a failure. [ 2642.143782][T11263] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2642.204836][T11263] CPU: 0 PID: 11263 Comm: syz.1.12718 Not tainted syzkaller #0 [ 2642.212480][T11263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2642.222743][T11263] Call Trace: [ 2642.226068][T11263] [ 2642.229047][T11263] dump_stack_lvl+0x18c/0x250 [ 2642.233851][T11263] ? show_regs_print_info+0x20/0x20 [ 2642.239112][T11263] ? load_image+0x420/0x420 [ 2642.243680][T11263] ? __might_fault+0xaa/0x120 [ 2642.248427][T11263] should_fail_ex+0x39d/0x4d0 [ 2642.253188][T11263] copyin+0x1a/0x90 [ 2642.257053][T11263] _copy_from_iter+0x54f/0x12e0 [ 2642.261956][T11263] ? copyin+0x70/0x90 [ 2642.266005][T11263] ? copyout_mc+0x70/0x70 [ 2642.270374][T11263] ? copyout_mc+0x70/0x70 [ 2642.274736][T11263] ? __virt_addr_valid+0x18c/0x540 [ 2642.279902][T11263] ? page_copy_sane+0x16a/0x270 [ 2642.284796][T11263] copy_page_from_iter+0x7b/0x100 [ 2642.289885][T11263] skb_copy_datagram_from_iter+0x2e4/0x6e0 [ 2642.295740][T11263] packet_sendmsg+0x33ff/0x4c30 [ 2642.300650][T11263] ? __might_sleep+0xe0/0xe0 [ 2642.305280][T11263] ? mark_lock+0x94/0x320 [ 2642.309657][T11263] ? __lock_acquire+0x1273/0x7d40 [ 2642.314705][T11263] ? verify_lock_unused+0x140/0x140 [ 2642.319943][T11263] ? aa_sk_perm+0x83c/0x970 [ 2642.324496][T11263] ? packet_getsockopt+0xad0/0xad0 [ 2642.329650][T11263] ? tomoyo_gc_thread+0x84f/0x1410 [ 2642.334797][T11263] ? aa_sock_msg_perm+0x94/0x150 [ 2642.339765][T11263] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2642.345076][T11263] ? security_socket_sendmsg+0x80/0xa0 [ 2642.350569][T11263] ? packet_getsockopt+0xad0/0xad0 [ 2642.355730][T11263] ____sys_sendmsg+0x5ba/0x960 [ 2642.360529][T11263] ? __lock_acquire+0x7d40/0x7d40 [ 2642.365586][T11263] ? __asan_memset+0x22/0x40 [ 2642.370216][T11263] ? __sys_sendmsg_sock+0x30/0x30 [ 2642.375266][T11263] ? __import_iovec+0x3fa/0x850 [ 2642.380159][T11263] ? import_iovec+0x73/0xa0 [ 2642.384694][T11263] ___sys_sendmsg+0x2a6/0x360 [ 2642.389404][T11263] ? get_pid_task+0x20/0x1e0 [ 2642.394026][T11263] ? __sys_sendmsg+0x2a0/0x2a0 [ 2642.398923][T11263] ? __lock_acquire+0x7d40/0x7d40 [ 2642.404006][T11263] __se_sys_sendmsg+0x1c2/0x2b0 [ 2642.408893][T11263] ? __x64_sys_sendmsg+0x80/0x80 [ 2642.413866][T11263] ? lockdep_hardirqs_on+0x98/0x150 [ 2642.419094][T11263] do_syscall_64+0x55/0xa0 [ 2642.423530][T11263] ? clear_bhb_loop+0x40/0x90 [ 2642.428240][T11263] ? clear_bhb_loop+0x40/0x90 [ 2642.432980][T11263] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2642.438913][T11263] RIP: 0033:0x7ff96a19cdd9 [ 2642.443357][T11263] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2642.463036][T11263] RSP: 002b:00007ff96b0b5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2642.471494][T11263] RAX: ffffffffffffffda RBX: 00007ff96a415fa0 RCX: 00007ff96a19cdd9 [ 2642.479585][T11263] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 2642.487584][T11263] RBP: 00007ff96b0b5090 R08: 0000000000000000 R09: 0000000000000000 [ 2642.495691][T11263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2642.503694][T11263] R13: 00007ff96a416038 R14: 00007ff96a415fa0 R15: 00007ffd65086db8 [ 2642.511727][T11263] [ 2642.545027][T11263] skbuff: bad partial csum: csum=65535/127 headroom=178 headlen=65664 [ 2643.250712][T11282] netlink: 'syz.2.12726': attribute type 2 has an invalid length. [ 2643.277854][T11282] netlink: 'syz.2.12726': attribute type 8 has an invalid length. [ 2643.285791][T11282] netlink: 132 bytes leftover after parsing attributes in process `syz.2.12726'. [ 2643.405616][T11285] netlink: 'syz.4.12727': attribute type 9 has an invalid length. [ 2643.446791][T11285] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.12727'. [ 2645.950472][T11321] netlink: 208156 bytes leftover after parsing attributes in process `syz.1.12737'. [ 2646.103775][T11327] netlink: 'syz.4.12738': attribute type 9 has an invalid length. [ 2646.124019][T11327] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.12738'. [ 2646.184287][T11329] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.12739'. [ 2646.639795][T11338] FAULT_INJECTION: forcing a failure. [ 2646.639795][T11338] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2646.722114][T11338] CPU: 1 PID: 11338 Comm: syz.2.12743 Not tainted syzkaller #0 [ 2646.729840][T11338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2646.739943][T11338] Call Trace: [ 2646.743263][T11338] [ 2646.746237][T11338] dump_stack_lvl+0x18c/0x250 [ 2646.750981][T11338] ? show_regs_print_info+0x20/0x20 [ 2646.756263][T11338] ? load_image+0x420/0x420 [ 2646.760827][T11338] ? __lock_acquire+0x7d40/0x7d40 [ 2646.765923][T11338] ? snprintf+0xe9/0x140 [ 2646.770230][T11338] should_fail_ex+0x39d/0x4d0 [ 2646.774977][T11338] _copy_to_user+0x2f/0xa0 [ 2646.779450][T11338] simple_read_from_buffer+0xe7/0x150 [ 2646.784927][T11338] proc_fail_nth_read+0x1e8/0x260 [ 2646.790003][T11338] ? proc_fault_inject_write+0x360/0x360 [ 2646.795689][T11338] ? fsnotify_perm+0x271/0x5e0 [ 2646.800510][T11338] ? proc_fault_inject_write+0x360/0x360 [ 2646.806200][T11338] vfs_read+0x28b/0x970 [ 2646.810412][T11338] ? kernel_read+0x1e0/0x1e0 [ 2646.815060][T11338] ? __fget_files+0x28/0x4b0 [ 2646.819721][T11338] ? __fget_files+0x28/0x4b0 [ 2646.824371][T11338] ? __fget_files+0x43d/0x4b0 [ 2646.829110][T11338] ? __fdget_pos+0x2a3/0x330 [ 2646.833742][T11338] ? ksys_read+0x75/0x260 [ 2646.838139][T11338] ksys_read+0x150/0x260 [ 2646.842436][T11338] ? vfs_write+0x990/0x990 [ 2646.846904][T11338] ? lockdep_hardirqs_on+0x98/0x150 [ 2646.852156][T11338] do_syscall_64+0x55/0xa0 [ 2646.856628][T11338] ? clear_bhb_loop+0x40/0x90 [ 2646.861372][T11338] ? clear_bhb_loop+0x40/0x90 [ 2646.866096][T11338] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2646.872033][T11338] RIP: 0033:0x7faa9d95d60e [ 2646.876483][T11338] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2646.896129][T11338] RSP: 002b:00007faa9e93efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2646.904572][T11338] RAX: ffffffffffffffda RBX: 00007faa9e93f6c0 RCX: 00007faa9d95d60e [ 2646.912566][T11338] RDX: 000000000000000f RSI: 00007faa9e93f0a0 RDI: 0000000000000004 [ 2646.920568][T11338] RBP: 00007faa9e93f090 R08: 0000000000000000 R09: 0000000000000000 [ 2646.928572][T11338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2646.936592][T11338] R13: 00007faa9dc16038 R14: 00007faa9dc15fa0 R15: 00007ffec040c0f8 [ 2646.944609][T11338] [ 2647.371155][T11344] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.12745'. [ 2650.163535][T11371] netlink: 'syz.1.12750': attribute type 9 has an invalid length. [ 2650.186665][T11371] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.12750'. [ 2652.248560][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 2652.258369][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 2652.287642][T11395] netlink: 'syz.1.12757': attribute type 2 has an invalid length. [ 2652.463685][T11404] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.12759'. [ 2652.560444][T11407] netlink: 'syz.4.12761': attribute type 9 has an invalid length. [ 2652.636157][T11407] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.12761'. [ 2652.864859][T11415] netlink: 'syz.2.12764': attribute type 10 has an invalid length. [ 2653.482494][T11429] netlink: 'syz.2.12769': attribute type 21 has an invalid length. [ 2653.506360][T11429] netlink: 168 bytes leftover after parsing attributes in process `syz.2.12769'. [ 2656.018487][ T1553] Bluetooth: hci4: unexpected event 0x07 length: 15 < 255 [ 2656.155990][T11439] netlink: 'syz.1.12773': attribute type 9 has an invalid length. [ 2656.168341][T11439] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.12773'. [ 2656.666432][T11444] netlink: 4083 bytes leftover after parsing attributes in process `syz.4.12774'. [ 2656.858909][T11441] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.12775'. [ 2657.276749][T11441] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 2657.476974][T11459] netlink: 10 bytes leftover after parsing attributes in process `syz.2.12779'. [ 2658.131087][T11476] netlink: 'syz.1.12784': attribute type 9 has an invalid length. [ 2658.154395][T11476] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.12784'. [ 2661.239652][T11511] netlink: 'syz.4.12796': attribute type 9 has an invalid length. [ 2661.247658][T11511] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.12796'. [ 2662.604747][T11538] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.12807'. [ 2662.736287][T11539] netlink: 'syz.4.12805': attribute type 10 has an invalid length. [ 2662.896044][T11548] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.12811'. [ 2664.150019][ T5321] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2664.709130][T11569] FAULT_INJECTION: forcing a failure. [ 2664.709130][T11569] name failslab, interval 1, probability 0, space 0, times 0 [ 2664.722919][T11569] CPU: 1 PID: 11569 Comm: syz.2.12818 Not tainted syzkaller #0 [ 2664.730546][T11569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2664.740653][T11569] Call Trace: [ 2664.743993][T11569] [ 2664.747135][T11569] dump_stack_lvl+0x18c/0x250 [ 2664.751883][T11569] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2664.758105][T11569] ? show_regs_print_info+0x20/0x20 [ 2664.763369][T11569] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2664.769639][T11569] should_fail_ex+0x39d/0x4d0 [ 2664.774439][T11569] should_failslab+0x9/0x20 [ 2664.779040][T11569] slab_pre_alloc_hook+0x59/0x310 [ 2664.784132][T11569] ? skb_network_protocol+0x529/0x780 [ 2664.789567][T11569] kmem_cache_alloc_node+0x60/0x320 [ 2664.794824][T11569] ? __alloc_skb+0x103/0x2c0 [ 2664.799479][T11569] __alloc_skb+0x103/0x2c0 [ 2664.803953][T11569] skb_segment+0xee2/0x3f50 [ 2664.808514][T11569] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 2664.814595][T11569] udp6_ufo_fragment+0x9b7/0xf40 [ 2664.819604][T11569] ? udpv6_offload_exit+0x20/0x20 [ 2664.824725][T11569] ipv6_gso_segment+0xb8b/0x2140 [ 2664.829748][T11569] ? inet6_del_offload+0x50/0x50 [ 2664.834750][T11569] ? inet6_del_offload+0x50/0x50 [ 2664.839747][T11569] skb_mac_gso_segment+0x320/0x640 [ 2664.844912][T11569] ? skb_mac_gso_segment+0x185/0x640 [ 2664.850245][T11569] ? skb_eth_gso_segment+0x270/0x270 [ 2664.855590][T11569] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 2664.861622][T11569] ? lock_chain_count+0x20/0x20 [ 2664.866545][T11569] nsh_gso_segment+0x4c7/0xc60 [ 2664.871384][T11569] ? nsh_pop+0x570/0x570 [ 2664.875760][T11569] skb_mac_gso_segment+0x320/0x640 [ 2664.880931][T11569] ? skb_mac_gso_segment+0x185/0x640 [ 2664.886264][T11569] ? skb_eth_gso_segment+0x270/0x270 [ 2664.891617][T11569] __skb_gso_segment+0x302/0x4a0 [ 2664.896608][T11569] validate_xmit_skb+0x565/0xf60 [ 2664.901599][T11569] ? perf_trace_run_bpf_submit+0x125/0x1c0 [ 2664.907469][T11569] ? validate_xmit_skb_list+0x120/0x120 [ 2664.913089][T11569] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 2664.919140][T11569] validate_xmit_skb_list+0x84/0x120 [ 2664.924490][T11569] sch_direct_xmit+0xe0/0x4c0 [ 2664.929229][T11569] ? mrp_pdu_parse_vecattr_event+0x2a0/0x2a0 [ 2664.935269][T11569] __dev_queue_xmit+0x165d/0x3660 [ 2664.940366][T11569] ? __dev_queue_xmit+0x265/0x3660 [ 2664.945563][T11569] ? netdev_core_pick_tx+0x340/0x340 [ 2664.950896][T11569] ? virtio_net_hdr_to_skb+0xa45/0x1510 [ 2664.956503][T11569] ? packet_extra_vlan_len_allowed+0x200/0x200 [ 2664.962713][T11569] ? skb_copy_datagram_from_iter+0x62e/0x6e0 [ 2664.968744][T11569] ? packet_xmit+0x66/0x330 [ 2664.973290][T11569] ? packet_sendmsg+0x3916/0x4c30 [ 2664.978370][T11569] packet_sendmsg+0x3a0e/0x4c30 [ 2664.983321][T11569] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 2664.989364][T11569] ? lock_chain_count+0x20/0x20 [ 2664.994282][T11569] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2665.000580][T11569] ? packet_getsockopt+0xad0/0xad0 [ 2665.005777][T11569] ? security_socket_sendmsg+0x5a/0xa0 [ 2665.011291][T11569] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2665.016632][T11569] ? security_socket_sendmsg+0x80/0xa0 [ 2665.022138][T11569] ? packet_getsockopt+0xad0/0xad0 [ 2665.027305][T11569] ____sys_sendmsg+0x5ba/0x960 [ 2665.032221][T11569] ? __asan_memset+0x22/0x40 [ 2665.036866][T11569] ? __sys_sendmsg_sock+0x30/0x30 [ 2665.041933][T11569] ? __import_iovec+0x3fa/0x850 [ 2665.046843][T11569] ? import_iovec+0x73/0xa0 [ 2665.051407][T11569] ___sys_sendmsg+0x2a6/0x360 [ 2665.056149][T11569] ? __sys_sendmsg+0x2a0/0x2a0 [ 2665.061022][T11569] __se_sys_sendmsg+0x1c2/0x2b0 [ 2665.065940][T11569] ? __x64_sys_sendmsg+0x80/0x80 [ 2665.070955][T11569] ? lockdep_hardirqs_on+0x98/0x150 [ 2665.076214][T11569] do_syscall_64+0x55/0xa0 [ 2665.080699][T11569] ? clear_bhb_loop+0x40/0x90 [ 2665.085427][T11569] ? clear_bhb_loop+0x40/0x90 [ 2665.090159][T11569] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2665.096106][T11569] RIP: 0033:0x7faa9d99cdd9 [ 2665.100572][T11569] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2665.120224][T11569] RSP: 002b:00007faa9e93f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2665.128693][T11569] RAX: ffffffffffffffda RBX: 00007faa9dc15fa0 RCX: 00007faa9d99cdd9 [ 2665.136709][T11569] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005 [ 2665.144728][T11569] RBP: 00007faa9e93f090 R08: 0000000000000000 R09: 0000000000000000 [ 2665.152738][T11569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2665.160757][T11569] R13: 00007faa9dc16038 R14: 00007faa9dc15fa0 R15: 00007ffec040c0f8 [ 2665.168786][T11569] [ 2665.745260][T11591] netlink: 'syz.3.12823': attribute type 10 has an invalid length. [ 2666.413133][T11607] netlink: 'syz.4.12833': attribute type 4 has an invalid length. [ 2666.484323][T11607] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.12833'. [ 2666.639407][T11604] netlink: 'syz.2.12831': attribute type 10 has an invalid length. [ 2666.664631][T11604] netlink: 2 bytes leftover after parsing attributes in process `syz.2.12831'. [ 2669.136026][T11645] netlink: 'syz.4.12849': attribute type 10 has an invalid length. [ 2669.424341][T11659] netlink: 'syz.3.12851': attribute type 10 has an invalid length. [ 2669.834718][T11659] team0 (unregistering): Port device team_slave_0 removed [ 2669.937571][T11659] team0 (unregistering): Port device team_slave_1 removed [ 2669.979545][T11659] team0 (unregistering): Port device geneve1 removed [ 2670.262133][T11668] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2670.270030][T11668] IPv6: NLM_F_CREATE should be set when creating new route [ 2670.278276][T11668] IPv6: NLM_F_CREATE should be set when creating new route [ 2670.286390][T11668] IPv6: NLM_F_CREATE should be set when creating new route [ 2670.429288][T11671] netlink: 'syz.3.12857': attribute type 10 has an invalid length. [ 2670.649940][T11671] veth0_macvtap: left promiscuous mode [ 2671.302907][T11687] netlink: 'syz.3.12862': attribute type 21 has an invalid length. [ 2671.819267][ T1553] Bluetooth: hci4: unexpected event 0x04 length: 15 > 10 [ 2672.976234][T11721] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.12873'. [ 2673.131337][T11721] netlink: 'syz.1.12873': attribute type 15 has an invalid length. [ 2673.222748][T11726] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2673.889009][ T1553] Bluetooth: hci4: command 0x0406 tx timeout [ 2674.903853][T11767] mac80211_hwsim hwsim125 ..ãc¤±: renamed from wlan1 [ 2675.260144][T11772] netlink: 'syz.1.12890': attribute type 4 has an invalid length. [ 2675.328970][T11777] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.12890'. [ 2675.370632][T11772] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.12890'. [ 2677.151710][T11796] FAULT_INJECTION: forcing a failure. [ 2677.151710][T11796] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2677.196996][T11796] CPU: 1 PID: 11796 Comm: syz.4.12899 Not tainted syzkaller #0 [ 2677.204635][T11796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2677.214751][T11796] Call Trace: [ 2677.218068][T11796] [ 2677.221040][T11796] dump_stack_lvl+0x18c/0x250 [ 2677.225778][T11796] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2677.231986][T11796] ? show_regs_print_info+0x20/0x20 [ 2677.237233][T11796] ? load_image+0x420/0x420 [ 2677.241803][T11796] should_fail_ex+0x39d/0x4d0 [ 2677.246553][T11796] _copy_from_user+0x2f/0xe0 [ 2677.251200][T11796] ___sys_sendmsg+0x1c7/0x360 [ 2677.255926][T11796] ? perf_trace_run_bpf_submit+0x125/0x1c0 [ 2677.261908][T11796] ? __sys_sendmsg+0x2a0/0x2a0 [ 2677.266721][T11796] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 2677.272799][T11796] ? lockdep_hardirqs_on+0x98/0x150 [ 2677.278077][T11796] ? kasan_check_range+0x89/0x290 [ 2677.283169][T11796] __se_sys_sendmsg+0x1c2/0x2b0 [ 2677.288068][T11796] ? __x64_sys_sendmsg+0x80/0x80 [ 2677.293259][T11796] ? syscall_enter_from_user_mode+0x2e/0x80 [ 2677.299214][T11796] do_syscall_64+0x55/0xa0 [ 2677.303677][T11796] ? clear_bhb_loop+0x40/0x90 [ 2677.308398][T11796] ? clear_bhb_loop+0x40/0x90 [ 2677.313126][T11796] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2677.319066][T11796] RIP: 0033:0x7f51e919cdd9 [ 2677.323525][T11796] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2677.343177][T11796] RSP: 002b:00007f51ea072028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2677.351639][T11796] RAX: ffffffffffffffda RBX: 00007f51e9415fa0 RCX: 00007f51e919cdd9 [ 2677.359651][T11796] RDX: 0000000004000000 RSI: 0000200000000040 RDI: 0000000000000007 [ 2677.367664][T11796] RBP: 00007f51ea072090 R08: 0000000000000000 R09: 0000000000000000 [ 2677.375678][T11796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2677.383701][T11796] R13: 00007f51e9416038 R14: 00007f51e9415fa0 R15: 00007fffbbe67d48 [ 2677.391736][T11796] [ 2678.267582][T11799] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.12900'. [ 2678.317064][T11799] openvswitch: netlink: IP tunnel attribute has 3044 unknown bytes. [ 2696.133461][ T5332] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2781.917676][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 2781.924553][ C0] rcu: 0-....: (10499 ticks this GP) idle=3f1c/1/0x4000000000000000 softirq=184710/184710 fqs=4549 [ 2781.937034][ C0] rcu: hardirqs softirqs csw/system [ 2781.943467][ C0] rcu: number: 1286256 0 0 [ 2781.949892][ C0] rcu: cputime: 24870 27608 35 ==> 52480(ms) [ 2781.957742][ C0] rcu: (t=10500 jiffies g=293629 q=763 ncpus=2) [ 2781.964115][ C0] CPU: 0 PID: 11794 Comm: syz.2.12898 Not tainted syzkaller #0 [ 2781.971716][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2781.981835][ C0] RIP: 0010:is_bpf_text_address+0x135/0x2a0 [ 2781.987800][ C0] Code: e3 03 8d 2c 5b 48 f7 dd 4d 8d a4 2f e0 fd ff ff 4c 89 e0 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 e7 e8 6f e0 4a 00 4d 8b 24 24 <4c> 89 e7 4c 89 f6 e8 40 ab f2 ff 4d 39 f4 76 0c e8 26 a9 f2 ff b8 [ 2782.007478][ C0] RSP: 0018:ffffc90000007488 EFLAGS: 00000246 [ 2782.013608][ C0] RAX: 1ffff11011d38a29 RBX: 0000000000000000 RCX: ffff888092a35a00 [ 2782.021637][ C0] RDX: 0000000000000100 RSI: ffffffff8b1c8f80 RDI: ffffffff8b1c8f40 [ 2782.029665][ C0] RBP: 0000000000000000 R08: dffffc0000000000 R09: 1ffffffff2238ca0 [ 2782.037738][ C0] R10: dffffc0000000000 R11: fffffbfff2238ca1 R12: ffffffffa0000994 [ 2782.045825][ C0] R13: dffffc0000000000 R14: 00007faa9d99cdd9 R15: ffff88808e9c5368 [ 2782.053811][ C0] FS: 00007faa9e93f6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 2782.062757][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2782.069348][ C0] CR2: 00007f51ea051d58 CR3: 000000005e4cd000 CR4: 00000000003506f0 [ 2782.077330][ C0] DR0: 0000000000000000 DR1: 0000200000000300 DR2: 0000200000000300 [ 2782.085317][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 2782.093298][ C0] Call Trace: [ 2782.096585][ C0] [ 2782.099439][ C0] ? is_bpf_text_address+0x26/0x2a0 [ 2782.104651][ C0] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2782.110741][ C0] kernel_text_address+0xa0/0xd0 [ 2782.115696][ C0] __kernel_text_address+0xd/0x30 [ 2782.120743][ C0] unwind_get_return_address+0x5d/0xc0 [ 2782.126207][ C0] ? stack_trace_save+0x100/0x100 [ 2782.131242][ C0] arch_stack_walk+0x11d/0x190 [ 2782.136026][ C0] stack_trace_save+0xaa/0x100 [ 2782.140800][ C0] ? stack_trace_snprint+0xf0/0xf0 [ 2782.145920][ C0] ? mark_lock+0x94/0x320 [ 2782.150262][ C0] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 2782.156254][ C0] kasan_set_track+0x4e/0x70 [ 2782.160939][ C0] ? kasan_set_track+0x4e/0x70 [ 2782.165713][ C0] ? kasan_save_free_info+0x2e/0x50 [ 2782.170922][ C0] ? ____kasan_slab_free+0x126/0x1e0 [ 2782.176223][ C0] ? slab_free_freelist_hook+0x130/0x1a0 [ 2782.181861][ C0] ? kmem_cache_free+0xf8/0x270 [ 2782.186743][ C0] ? netlink_broadcast_filtered+0x101c/0x1110 [ 2782.192835][ C0] ? nlmsg_notify+0xf0/0x1a0 [ 2782.197439][ C0] ? br_multicast_del_pg+0x4b7/0xee0 [ 2782.202757][ C0] ? br_multicast_port_group_expired+0x5ce/0x710 [ 2782.209102][ C0] ? call_timer_fn+0x189/0x540 [ 2782.213875][ C0] ? __run_timers+0x542/0x800 [ 2782.218574][ C0] ? run_timer_softirq+0x67/0xf0 [ 2782.223516][ C0] ? handle_softirqs+0x280/0x820 [ 2782.228454][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 2782.233218][ C0] ? irq_exit_rcu+0x9/0x20 [ 2782.237635][ C0] ? sysvec_apic_timer_interrupt+0xa4/0xc0 [ 2782.243472][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2782.249655][ C0] ? unwind_next_frame+0x47c/0x2970 [ 2782.254884][ C0] ? arch_stack_walk+0x144/0x190 [ 2782.259827][ C0] ? stack_trace_save+0xaa/0x100 [ 2782.264774][ C0] ? save_stack+0x125/0x230 [ 2782.269284][ C0] ? __set_page_owner+0x1d/0x60 [ 2782.274147][ C0] ? post_alloc_hook+0x1c1/0x200 [ 2782.279099][ C0] ? get_page_from_freelist+0x1951/0x19e0 [ 2782.284824][ C0] ? __alloc_pages+0x1f0/0x460 [ 2782.289607][ C0] ? __folio_alloc+0x10/0x20 [ 2782.294204][ C0] ? vma_alloc_folio+0x47a/0x8f0 [ 2782.299147][ C0] ? handle_mm_fault+0x1b3b/0x4c00 [ 2782.304263][ C0] ? do_user_addr_fault+0x730/0x12c0 [ 2782.309653][ C0] ? exc_page_fault+0x64/0x100 [ 2782.314454][ C0] ? asm_exc_page_fault+0x26/0x30 [ 2782.319487][ C0] ? rep_movs_alternative+0x15/0x90 [ 2782.324691][ C0] ? _copy_to_user+0x85/0xa0 [ 2782.329287][ C0] ? bpf_verifier_vlog+0x2fa/0x870 [ 2782.334434][ C0] ? verbose+0x11e/0x1a0 [ 2782.338726][ C0] ? print_insn_state+0x130/0x160 [ 2782.343767][ C0] ? do_check+0x4fd1/0xdbf0 [ 2782.348280][ C0] ? do_check_common+0xadb/0x13e0 [ 2782.353318][ C0] ? bpf_check+0x658e/0xeba0 [ 2782.357917][ C0] ? bpf_prog_load+0x1163/0x1670 [ 2782.362867][ C0] ? __sys_bpf+0x5ba/0x890 [ 2782.367289][ C0] ? __x64_sys_bpf+0x7c/0x90 [ 2782.371881][ C0] ? do_syscall_64+0x55/0xa0 [ 2782.376494][ C0] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2782.382612][ C0] ? kmem_cache_free+0xf8/0x270 [ 2782.387478][ C0] kasan_save_free_info+0x2e/0x50 [ 2782.392516][ C0] ____kasan_slab_free+0x126/0x1e0 [ 2782.397638][ C0] slab_free_freelist_hook+0x130/0x1a0 [ 2782.403109][ C0] ? netlink_broadcast_filtered+0x101c/0x1110 [ 2782.409204][ C0] kmem_cache_free+0xf8/0x270 [ 2782.413899][ C0] netlink_broadcast_filtered+0x101c/0x1110 [ 2782.419815][ C0] ? nla_put+0xd0/0x150 [ 2782.424011][ C0] nlmsg_notify+0xf0/0x1a0 [ 2782.428444][ C0] br_multicast_del_pg+0x4b7/0xee0 [ 2782.433587][ C0] ? br_multicast_find_del_pg+0x117/0x140 [ 2782.439314][ C0] br_multicast_port_group_expired+0x5ce/0x710 [ 2782.445507][ C0] call_timer_fn+0x189/0x540 [ 2782.450109][ C0] ? br_multicast_destroy_port_group+0xd0/0xd0 [ 2782.456278][ C0] ? call_timer_fn+0xd2/0x540 [ 2782.460974][ C0] ? __run_timers+0x800/0x800 [ 2782.465696][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 2782.470903][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 2782.476115][ C0] ? br_multicast_destroy_port_group+0xd0/0xd0 [ 2782.482288][ C0] __run_timers+0x542/0x800 [ 2782.486809][ C0] ? detach_timer+0x2b0/0x2b0 [ 2782.491498][ C0] ? run_timer_softirq+0x30/0xf0 [ 2782.496448][ C0] run_timer_softirq+0x67/0xf0 [ 2782.501229][ C0] handle_softirqs+0x280/0x820 [ 2782.506269][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 2782.511051][ C0] ? do_softirq+0x1a0/0x1a0 [ 2782.515568][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 2782.520782][ C0] __irq_exit_rcu+0xd3/0x190 [ 2782.525413][ C0] ? irq_exit_rcu+0x20/0x20 [ 2782.529955][ C0] irq_exit_rcu+0x9/0x20 [ 2782.534201][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 2782.539935][ C0] [ 2782.542876][ C0] [ 2782.545817][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2782.551809][ C0] RIP: 0010:unwind_next_frame+0x47c/0x2970 [ 2782.557651][ C0] Code: fc 49 39 dc 76 0d e8 e3 e5 4b 00 4d 29 e4 e9 a4 00 00 00 4c 89 e5 4c 89 64 24 28 48 ba 00 00 00 00 00 fc ff df 4c 8b 74 24 48 <48> 89 d8 4c 29 e0 48 89 c1 48 c1 f9 02 48 c1 e8 3f 48 01 c8 48 83 [ 2782.577277][ C0] RSP: 0018:ffffc90003846518 EFLAGS: 00000287 [ 2782.583354][ C0] RAX: ffffffff813b3c99 RBX: ffffffff8f0689a4 RCX: 0000000000080000 [ 2782.591337][ C0] RDX: dffffc0000000000 RSI: 0000000000018026 RDI: 0000000000018027 [ 2782.599338][ C0] RBP: ffffffff8f0689a0 R08: ffffc900038466b0 R09: 0000000000000008 [ 2782.607332][ C0] R10: 0000000000000004 R11: 0000000000000002 R12: ffffffff8f0689a4 [ 2782.615326][ C0] R13: ffffffff8aa01260 R14: ffffffff8aa01255 R15: ffffffff8f0689a8 [ 2782.623393][ C0] ? asm_exc_page_fault+0x25/0x30 [ 2782.628426][ C0] ? asm_exc_page_fault+0x30/0x30 [ 2782.633462][ C0] ? unwind_next_frame+0x4d9/0x2970 [ 2782.638688][ C0] ? unwind_next_frame+0x4d9/0x2970 [ 2782.643918][ C0] ? asm_exc_page_fault+0x25/0x30 [ 2782.648952][ C0] ? asm_exc_page_fault+0x26/0x30 [ 2782.653991][ C0] ? asm_exc_page_fault+0x26/0x30 [ 2782.659022][ C0] ? stack_trace_save+0x100/0x100 [ 2782.664059][ C0] arch_stack_walk+0x144/0x190 [ 2782.668849][ C0] ? asm_exc_page_fault+0x26/0x30 [ 2782.673889][ C0] stack_trace_save+0xaa/0x100 [ 2782.678680][ C0] ? stack_trace_snprint+0xf0/0xf0 [ 2782.683822][ C0] save_stack+0x125/0x230 [ 2782.688159][ C0] ? __reset_page_owner+0x190/0x190 [ 2782.693394][ C0] ? post_alloc_hook+0x1c1/0x200 [ 2782.698376][ C0] ? get_page_from_freelist+0x1951/0x19e0 [ 2782.704136][ C0] ? __alloc_pages+0x1f0/0x460 [ 2782.708908][ C0] ? __folio_alloc+0x10/0x20 [ 2782.713504][ C0] ? vma_alloc_folio+0x47a/0x8f0 [ 2782.718446][ C0] ? handle_mm_fault+0x1b3b/0x4c00 [ 2782.723564][ C0] ? do_user_addr_fault+0x730/0x12c0 [ 2782.728869][ C0] ? exc_page_fault+0x64/0x100 [ 2782.733643][ C0] ? asm_exc_page_fault+0x26/0x30 [ 2782.738684][ C0] ? get_page_from_freelist+0x6a8/0x19e0 [ 2782.744326][ C0] ? __lock_acquire+0x7d40/0x7d40 [ 2782.749369][ C0] __set_page_owner+0x1d/0x60 [ 2782.754083][ C0] post_alloc_hook+0x1c1/0x200 [ 2782.758865][ C0] get_page_from_freelist+0x1951/0x19e0 [ 2782.764430][ C0] ? perf_trace_lock_acquire+0x34f/0x410 [ 2782.770085][ C0] ? __next_zones_zonelist+0x9d/0x130 [ 2782.775492][ C0] ? prepare_alloc_pages+0x366/0x5f0 [ 2782.780792][ C0] __alloc_pages+0x1f0/0x460 [ 2782.785390][ C0] ? zone_statistics+0x170/0x170 [ 2782.790343][ C0] ? mt_find+0x169/0x650 [ 2782.794613][ C0] ? handle_mm_fault+0xe7/0x4c00 [ 2782.799566][ C0] __folio_alloc+0x10/0x20 [ 2782.804005][ C0] vma_alloc_folio+0x47a/0x8f0 [ 2782.808785][ C0] handle_mm_fault+0x1b3b/0x4c00 [ 2782.813733][ C0] ? handle_mm_fault+0xe7/0x4c00 [ 2782.818687][ C0] ? numa_migrate_prep+0x350/0x350 [ 2782.823831][ C0] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 2782.829128][ C0] do_user_addr_fault+0x730/0x12c0 [ 2782.834265][ C0] exc_page_fault+0x64/0x100 [ 2782.838872][ C0] asm_exc_page_fault+0x26/0x30 [ 2782.843734][ C0] RIP: 0010:rep_movs_alternative+0x15/0x90 [ 2782.849551][ C0] Code: 8b 1c 24 4c 8b 64 24 08 48 83 c4 10 c3 cc cc cc cc cc cc cc cc f3 0f 1e fa 48 83 f9 40 73 40 83 f9 08 73 21 85 c9 74 0f 8a 06 <88> 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 66 2e 0f 1f 84 00 00 00 [ 2782.869191][ C0] RSP: 0018:ffffc90003846f50 EFLAGS: 00050206 [ 2782.875454][ C0] RAX: ffffffff842a2030 RBX: 0000000000000003 RCX: 0000000000000003 [ 2782.883444][ C0] RDX: 0000000000000000 RSI: ffff88807a10868c RDI: 000020000000cf3d [ 2782.891427][ C0] RBP: 0000000000000003 R08: ffff88807a10868e R09: 1ffff1100f4210d1 [ 2782.899408][ C0] R10: dffffc0000000000 R11: ffffed100f4210d2 R12: 000020000000cf40 [ 2782.907410][ C0] R13: 0000000000000000 R14: 000020000000cf3d R15: ffff88807a10868c [ 2782.915418][ C0] ? _copy_to_user+0x40/0xa0 [ 2782.920125][ C0] _copy_to_user+0x85/0xa0 [ 2782.924557][ C0] bpf_verifier_vlog+0x2fa/0x870 [ 2782.929517][ C0] verbose+0x11e/0x1a0 [ 2782.933607][ C0] ? check_func_arg_reg_off+0x2f0/0x2f0 [ 2782.939189][ C0] ? __kernel_text_address+0xd/0x30 [ 2782.944405][ C0] ? unwind_get_return_address+0x91/0xc0 [ 2782.950091][ C0] ? stack_trace_save+0x100/0x100 [ 2782.955858][ C0] ? arch_stack_walk+0x160/0x190 [ 2782.960818][ C0] print_insn_state+0x130/0x160 [ 2782.965699][ C0] do_check+0x4fd1/0xdbf0 [ 2782.970051][ C0] ? stack_trace_save+0xaa/0x100 [ 2782.975021][ C0] ? stack_trace_snprint+0xf0/0xf0 [ 2782.980155][ C0] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 2782.985896][ C0] ? kasan_set_track+0x4e/0x70 [ 2782.990763][ C0] ? __sys_bpf+0x5ba/0x890 [ 2782.995189][ C0] ? __x64_sys_bpf+0x7c/0x90 [ 2782.999821][ C0] ? init_func_state+0x2cf0/0x2cf0 [ 2783.004944][ C0] ? __asan_memset+0x22/0x40 [ 2783.009549][ C0] ? check_func_arg_reg_off+0x2f0/0x2f0 [ 2783.015127][ C0] ? print_verifier_state+0x3010/0x3010 [ 2783.020703][ C0] do_check_common+0xadb/0x13e0 [ 2783.025581][ C0] bpf_check+0x658e/0xeba0 [ 2783.030028][ C0] ? perf_tp_event+0x1520/0x1520 [ 2783.034990][ C0] ? perf_swevent_event+0x4be/0x570 [ 2783.040207][ C0] ? perf_tp_event+0x13d7/0x1520 [ 2783.045179][ C0] ? bpf_get_btf_vmlinux+0x20/0x20 [ 2783.050335][ C0] ? perf_trace_run_bpf_submit+0x1c0/0x1c0 [ 2783.056213][ C0] ? verify_lock_unused+0x140/0x140 [ 2783.061710][ C0] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 2783.067452][ C0] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 2783.073445][ C0] ? lock_chain_count+0x20/0x20 [ 2783.078313][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2783.084487][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 2783.089717][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2783.095893][ C0] ? seqcount_lockdep_reader_access+0x191/0x1d0 [ 2783.102148][ C0] ? seqcount_lockdep_reader_access+0x19a/0x1d0 [ 2783.108404][ C0] ? ktime_get_real_ts64+0x440/0x440 [ 2783.113702][ C0] ? do_raw_spin_unlock+0x121/0x230 [ 2783.119278][ C0] ? bpf_obj_name_cpy+0x194/0x1e0 [ 2783.124328][ C0] bpf_prog_load+0x1163/0x1670 [ 2783.129134][ C0] ? map_freeze+0x420/0x420 [ 2783.133680][ C0] ? __might_fault+0xaa/0x120 [ 2783.138368][ C0] ? __might_fault+0xc6/0x120 [ 2783.143072][ C0] ? __might_fault+0xaa/0x120 [ 2783.147799][ C0] ? bpf_lsm_bpf+0x9/0x10 [ 2783.152143][ C0] ? security_bpf+0x7e/0xa0 [ 2783.156661][ C0] __sys_bpf+0x5ba/0x890 [ 2783.160918][ C0] ? bpf_link_show_fdinfo+0x390/0x390 [ 2783.166329][ C0] ? lock_chain_count+0x20/0x20 [ 2783.171186][ C0] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 2783.177196][ C0] __x64_sys_bpf+0x7c/0x90 [ 2783.181647][ C0] do_syscall_64+0x55/0xa0 [ 2783.186072][ C0] ? clear_bhb_loop+0x40/0x90 [ 2783.190794][ C0] ? clear_bhb_loop+0x40/0x90 [ 2783.195504][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2783.201412][ C0] RIP: 0033:0x7faa9d99cdd9 [ 2783.205862][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2783.225496][ C0] RSP: 002b:00007faa9e93f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2783.233935][ C0] RAX: ffffffffffffffda RBX: 00007faa9dc15fa0 RCX: 00007faa9d99cdd9 [ 2783.241937][ C0] RDX: 0000000000000048 RSI: 000020000000e000 RDI: 0000000000000005 [ 2783.249917][ C0] RBP: 00007faa9da32d69 R08: 0000000000000000 R09: 0000000000000000 [ 2783.257898][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2783.265901][ C0] R13: 00007faa9dc16038 R14: 00007faa9dc15fa0 R15: 00007ffec040c0f8 [ 2783.273900][ C0] [ 2783.939587][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 2783.946007][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 2783.962044][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 2783.969209][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 2787.171994][ T8585] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2787.183776][ T8585] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2787.198967][ T8585] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2787.215874][ T8585] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2787.224406][ T8585] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 2787.232640][ T8585] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2789.338267][ T1553] Bluetooth: hci2: command tx timeout [ 2789.475479][T11823] chnl_net:caif_netlink_parms(): no params data found [ 2790.359290][ T1553] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 2790.372046][ T1553] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 2790.380449][ T1553] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 2790.389997][ T1553] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 2790.400845][ T1553] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 2790.408700][ T1553] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 2790.999081][T11823] bridge0: port 1(bridge_slave_0) entered blocking state [ 2791.006310][T11823] bridge0: port 1(bridge_slave_0) entered disabled state [ 2791.068566][T11823] bridge_slave_0: entered allmulticast mode [ 2791.106654][T11823] bridge_slave_0: entered promiscuous mode [ 2791.199774][T11823] bridge0: port 2(bridge_slave_1) entered blocking state [ 2791.207011][T11823] bridge0: port 2(bridge_slave_1) entered disabled state [ 2791.277760][T11823] bridge_slave_1: entered allmulticast mode [ 2791.318962][T11823] bridge_slave_1: entered promiscuous mode [ 2791.418055][ T8585] Bluetooth: hci2: command tx timeout [ 2791.580185][T11823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2791.676454][T11823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2791.896685][T11823] team0: Port device team_slave_0 added