last executing test programs: 7.477694429s ago: executing program 2 (id=6573): socket$kcm(0xa, 0x5, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x189703, 0x0) ioctl$TUNSETIFF(r0, 0x5452, &(0x7f0000000180)={'syzkaller0\x00'}) close(r0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000940)={0xffffffffffffffff, 0x58, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000980)=0xffffffffffffffff, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000a80)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000a00), &(0x7f0000000a40)='%ps \x00'}, 0x20) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c40)=@bpf_tracing={0x1a, 0x31, &(0x7f0000000600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xf32, 0x0, 0x0, 0x0, 0x9}, {}, {}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @snprintf, @alu={0x4, 0x0, 0x0, 0x0, 0x5, 0xfffffffffffffff4, 0x10}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfdbb, 0x0, 0x0, 0x0, 0x3}, @call={0x85, 0x0, 0x0, 0x28}, @map_fd={0x18, 0x4}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000007c0)='syzkaller\x00', 0x72e, 0xa9, &(0x7f0000000800)=""/169, 0x41100, 0x40, '\x00', r3, 0x1c, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f00000009c0)={0x0, 0x9, 0x314447ac, 0xd37}, 0x10, 0x9bca, r2, 0x5, &(0x7f0000000ac0)=[r5, r6], &(0x7f0000000b00)=[{0x2, 0x3, 0x4, 0x3}, {0x4, 0x2, 0xf, 0x2}, {0x3, 0x5}, {0x4, 0x1, 0x8, 0x6}, {0x4, 0x5, 0xb}], 0x10, 0x6}, 0x94) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="110000005200338f65277b9b108b4ab51c"], 0xfe33) recvmsg(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r7 = getpid() perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x0, 0x7fffffff, 0x2, 0x3cd, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, r7, 0x0, 0xffffffffffffffff, 0x2) syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x200, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) 4.713438542s ago: executing program 0 (id=6584): bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000240), 0x4) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000000), 0xe) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1200000024000000040000000200000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r1}, &(0x7f0000000700), &(0x7f0000000740)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000002c0)={r1, &(0x7f0000001500)="389b640e5e634f410871ae0792159941abe6ae195ff86fda631476b839b0aeab2b3185f37eb4dedfda47226c836738575f629ac6beddadf1d2f75093ba0610c48aa65677abdfee6db007e10dcc139a2c118147c19e614111a64f8f5f269fb4421d9ffd22bfe8a7157cf123fb852fa90b66acad3a26d356dea8503372d1620a6d5958fc348383f907e1f0b77b0da53c226b5a634ed55894e19beb536f", &(0x7f0000000000), 0x2}, 0x20) sendmsg$inet(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000080)="92", 0x1}], 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x158}, 0x40) close(0xffffffffffffffff) r2 = socket$kcm(0x11, 0x2, 0x0) socket$kcm(0x11, 0x2, 0x0) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r3, 0x107, 0x12, &(0x7f0000000b80)=r2, 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b90402000000e8fe55a1180015000600142603600e1209000a", 0x27}], 0x1}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB='V?\x00\x00-\x00'], 0xfe33) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)=@o_path={&(0x7f0000000100)='./file0\x00', 0x0, 0x4010, r4}, 0x18) r5 = socket$kcm(0x10, 0x400000002, 0x0) r6 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a7401", 0x17}], 0x1}, 0x40000) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="1700000054009155090893b31b71a54a07"], 0xfe33) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000b00)={r1, 0x58, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000060000000400000000000012020000000000000000000001050000018000000000000000010000850200000000000000010000000000000400000000da"], 0x0, 0x52}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000140)={r8, 0x20, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)=""/102, 0x66}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c40)={0x11, 0x10, &(0x7f0000000340)=ANY=[@ANYBLOB="180000200900000040b6f154d091db5d000000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x1, 0xb0, &(0x7f00000009c0)=""/176, 0x61980, 0x5, '\x00', r7, 0x0, r8, 0x8, &(0x7f0000000b40)={0x6, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000b80)=[r0], &(0x7f0000000bc0)=[{0x1, 0x5, 0x6, 0x2}, {0x1, 0x2, 0xf, 0xa}, {0x2, 0x4, 0x5, 0x1}, {0x2, 0x4, 0xe, 0x5}, {0x0, 0x2, 0xc}], 0x10, 0x9046}, 0x94) 4.582030684s ago: executing program 2 (id=6587): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x40eff, 0x3, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x1, 0x4, 0xfffffffc, 0xa}, {0x2, 0x0, 0x1, 0x5}], 0x10, 0x2}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000240)={0x0, 0x1000, 0x0, 0x0, &(0x7f0000000000)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x58}, 0x0) r4 = socket$kcm(0x2, 0x1000000000000002, 0x0) openat$cgroup_procs(r3, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) setsockopt$sock_attach_bpf(r4, 0x88, 0x64, &(0x7f00000009c0), 0x4) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4044044}, 0x40040d4) close(r6) sendmsg$kcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)}, 0x4c001) 4.477125301s ago: executing program 0 (id=6588): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020032000b35d25a806f8c6394f90324fc602f0009000a740200053582c137153e370248018000f01700d1", 0x2d}], 0x1}, 0x0) 4.408090523s ago: executing program 2 (id=6590): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32, @ANYBLOB='\x00\x00'], 0x50) socketpair(0x1, 0x3, 0x0, &(0x7f0000000200)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x161) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x28209, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x7, 0x0, 0x200, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffb, 0x81}, 0x100c, 0x0, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, 0x0) sendmsg$inet(r1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x20000402, r3}, 0x38) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000600)=""/182}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000880)='notify_on_release\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) write$cgroup_int(r5, &(0x7f0000000040), 0x1) socket$kcm(0x10, 0x2, 0x10) 4.323337627s ago: executing program 0 (id=6591): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 4.088560586s ago: executing program 2 (id=6594): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000006b113e0000000000851000000200000085080000b200000095003300000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000001200)={&(0x7f0000000f40)=@name={0x1e, 0x2, 0x2, {{0x2, 0x3}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x801}, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x4, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000001400)="2704020001f328000600002fb96d9af706e105000000890600fbff44ee1611d4b8bf4a31accbe16ae77256da82f6184b8a34f9015c749412c35e2f5fb293d18b5f2538b8d523", 0x46}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000280), 0xfdef) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x98, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x7, 0x10001, 0x3, 0x3000f, 0xffffffffffffffff, 0x68, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x0, 0xb}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r4) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1000000000000000, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x9, 0x2}, 0x80000, 0xca, 0x9, 0x0, 0x2, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x40, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000080000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) recvmsg$unix(r3, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYRES8=r4, @ANYRES8=r4], 0x9a) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r2}, 0x8) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0xa0800, 0x0) close(r6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000007c0)) ioctl$SIOCSIFHWADDR(r6, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) socket$kcm(0x10, 0x2, 0x0) 3.917540065s ago: executing program 0 (id=6605): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32, @ANYBLOB='\x00\x00'], 0x50) socketpair(0x1, 0x3, 0x0, &(0x7f0000000200)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x161) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x28209, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x7, 0x0, 0x200, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffb, 0x81}, 0x100c, 0x0, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, 0x0) sendmsg$inet(r1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x20000402, r3}, 0x38) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000600)=""/182}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000880)='notify_on_release\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) write$cgroup_int(r5, &(0x7f0000000040), 0x1) socket$kcm(0x10, 0x2, 0x10) 3.689142343s ago: executing program 2 (id=6597): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="180200000000ff0100000000000000008500000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000001700000095"], &(0x7f0000000480)='GPL\x00'}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1509, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x4, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0xa4, 0x101, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fd, 0x0, @perf_config_ext, 0x0, 0x201, 0x0, 0x7, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x2) socket$kcm(0x2a, 0x2, 0x0) socket$kcm(0x10, 0x400000002, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0e00009bd029ef8020ab070011000523a608463a", @ANYRES16=r0], 0xfe33) r1 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0xffffffffffffff70) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)="600000004e007f049e", 0x9}, {&(0x7f0000001500)="78cabf2dfb73fc0a7d0a0080f2dcb9fe06892544001100b80fe6aaeb1ae2f6e8bcb5ee52dc0605dd7e1a3c5102a1bca0b646a7ce904f090000003219c233e60ddc36024a99a63e729f9b06f96137c89dfc224f008c56815b5c4dfc8e59301e7fc676d0996a1f744033dda77bb8d87b62783ca0fecd26c5cb1fcb38f1b1a2ca76a81458cf360b5e1cf0cfca8f7169f3e687c062881996e7bec1f0e7211c0aa2a6f98a1ba2bf010ea87d770bd7467b326b03b75547ffe72d6c", 0xb8}], 0x2}, 0x24048040) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x0, 0x80000, 0x8, 0x0, 0x1}, 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="d80000001c0081054e81f782db44b904021d08040e000000200d10a118000c000600142603600e1208000f0000810401a8001600200001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 3.674306915s ago: executing program 0 (id=6598): socket$kcm(0xa, 0x5, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x189703, 0x0) ioctl$TUNSETIFF(r0, 0x5452, &(0x7f0000000180)={'syzkaller0\x00'}) close(r0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000940)={0xffffffffffffffff, 0x58, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000980)=0xffffffffffffffff, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000a80)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000a00), &(0x7f0000000a40)='%ps \x00'}, 0x20) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c40)=@bpf_tracing={0x1a, 0x31, &(0x7f0000000600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xf32, 0x0, 0x0, 0x0, 0x9}, {}, {}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @snprintf, @alu={0x4, 0x0, 0x0, 0x0, 0x5, 0xfffffffffffffff4, 0x10}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfdbb, 0x0, 0x0, 0x0, 0x3}, @call={0x85, 0x0, 0x0, 0x28}, @map_fd={0x18, 0x4}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000007c0)='syzkaller\x00', 0x72e, 0xa9, &(0x7f0000000800)=""/169, 0x41100, 0x40, '\x00', r3, 0x1c, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f00000009c0)={0x0, 0x9, 0x314447ac, 0xd37}, 0x10, 0x9bca, r2, 0x5, &(0x7f0000000ac0)=[r5, r6], &(0x7f0000000b00)=[{0x2, 0x3, 0x4, 0x3}, {0x4, 0x2, 0xf, 0x2}, {0x3, 0x5}, {0x4, 0x1, 0x8, 0x6}, {0x4, 0x5, 0xb}], 0x10, 0x6}, 0x94) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="110000005200338f65277b9b108b4ab51c"], 0xfe33) recvmsg(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r7 = getpid() perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x0, 0x7fffffff, 0x2, 0x3cd, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, r7, 0x0, 0xffffffffffffffff, 0x2) syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x200, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) 3.619661564s ago: executing program 1 (id=6599): bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000240), 0x4) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000000), 0xe) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1200000024000000040000000200000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r1}, &(0x7f0000000700), &(0x7f0000000740)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000002c0)={r1, &(0x7f0000001500)="389b640e5e634f410871ae0792159941abe6ae195ff86fda631476b839b0aeab2b3185f37eb4dedfda47226c836738575f629ac6beddadf1d2f75093ba0610c48aa65677abdfee6db007e10dcc139a2c118147c19e614111a64f8f5f269fb4421d9ffd22bfe8a7157cf123fb852fa90b66acad3a26d356dea8503372d1620a6d5958fc348383f907e1f0b77b0da53c226b5a634ed55894e19beb536f", &(0x7f0000000000), 0x2}, 0x20) sendmsg$inet(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000080)="92", 0x1}], 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x158}, 0x40) close(0xffffffffffffffff) r2 = socket$kcm(0x11, 0x2, 0x0) socket$kcm(0x11, 0x2, 0x0) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r3, 0x107, 0x12, &(0x7f0000000b80)=r2, 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b90402000000e8fe55a1180015000600142603600e1209000a", 0x27}], 0x1}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB='V?\x00\x00-\x00'], 0xfe33) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)=@o_path={&(0x7f0000000100)='./file0\x00', 0x0, 0x4010, r4}, 0x18) r5 = socket$kcm(0x10, 0x400000002, 0x0) r6 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a7401", 0x17}], 0x1}, 0x40000) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="1700000054009155090893b31b71a54a07"], 0xfe33) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000b00)={r1, 0x58, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000060000000400000000000012020000000000000000000001050000018000000000000000010000850200000000000000010000000000000400000000da"], 0x0, 0x52}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000140)={r8, 0x20, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)=""/102, 0x66}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c40)={0x11, 0x10, &(0x7f0000000340)=ANY=[@ANYBLOB="180000200900000040b6f154d091db5d000000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x1, 0xb0, &(0x7f00000009c0)=""/176, 0x61980, 0x5, '\x00', r7, 0x0, r8, 0x8, &(0x7f0000000b40)={0x6, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000b80)=[r0], &(0x7f0000000bc0)=[{0x1, 0x5, 0x6, 0x2}, {0x1, 0x2, 0xf, 0xa}, {0x2, 0x4, 0x5, 0x1}, {0x2, 0x4, 0xe, 0x5}, {0x0, 0x2, 0xc}], 0x10, 0x9046}, 0x94) 3.554801155s ago: executing program 1 (id=6600): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb01001800000000000000a4000000a4000000090000000500000000000002040000000a00000007000005000000800500000000000000070000000000000002000000000000000d00000003000000000028000a00000005000000670100000c0000000300000000000035080000000300beca25ec00000200000002000000060000000500000000000002030000000d00000004000006040000000a0000000700000004000000ffffffff02000000420400000a000000ffffff7f005f61410061616100"], &(0x7f00000002c0)=""/208, 0xc5, 0xd0, 0x1, 0x2}, 0x28) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xffffffffffffffae}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x11, 0x4, 0x4, 0x2, 0x0, 0x1, 0x1000000}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x6, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@call={0x85, 0x0, 0x0, 0x5}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r3, 0x2000012, 0xe, 0x0, &(0x7f0000000000)="63ec90c97b265715fe27cd9359a4", 0x0, 0xe6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xd}, 0x50) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xfdef) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000e40)={r1, 0xe0, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000b00)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f0000000b40)=[0x0], &(0x7f0000000bc0)=[0x0, 0x0, 0x0], 0x0, 0x76, &(0x7f0000000c00)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000c80), &(0x7f0000000cc0), 0x8, 0xa, 0x8, 0x8, &(0x7f0000000d00)}}, 0x10) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000f80)={&(0x7f0000001180)=ANY=[@ANYBLOB="9feb0100db4100000000000040000000400000000700000009000000000000110200000003000000080000000000000c01000000030000000000000b000000000000000000000800000000305f5f6f00007ba34ebfde1fbffe9f6f62cce982e24afad9d7d11fcf8ab6120d72ba24671716b0cbe74407d0bb057f1c1503968168daebe3d0"], &(0x7f0000000f00)=""/84, 0x5f, 0x54, 0x1, 0xd, 0x10000, @value=r1}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x3, 0x1, &(0x7f0000000680)=ANY=[@ANYBLOB="7171ffe6abff"], &(0x7f0000000780)='GPL\x00', 0x800, 0xd1, &(0x7f0000000a00)=""/209, 0x40f00, 0x10, '\x00', r5, @fallback=0x19, r6, 0x8, &(0x7f0000000fc0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001000)={0x5, 0xf, 0x8, 0x9327}, 0x10, 0x0, r1, 0x1, &(0x7f0000001040)=[r1], &(0x7f0000001080)=[{0x1, 0x2, 0x3, 0x1}], 0x10, 0x7fff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2f00020b, 0xf, 0x0, &(0x7f0000000240)="63ecedf7b98637fa929140ac5ea107", 0x0, 0xefdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) socket$kcm(0x10, 0x2, 0x0) r7 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r7, 0x0, 0x24, 0x0, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x60, 0x8}, {}, {0x2}]}) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000b80)}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x0, &(0x7f0000000500)=ANY=[@ANYRES8=r7], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r8, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="09000000ea000000080000009a", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xd, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r12, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r10, 0x0, 0xc5, 0xae, &(0x7f0000000840)="7432e0af9c893c751e42128fe04891b449ae9752eb4fb8b0b4699e2db61e7224f4855891707215eafbfb896bd7ab66f053a0972659f955184210f79906f363986336eedd18d04e302d0d6dab1eb234ba9e26c152c9a8fee9d5dca72491228084c1d106ed97fb4adcbae0b6e7bd2cf77e7b81417b9d567e384dd5c563dc42a28227c8f0a2ba5403d4ea19e790f3895d4fa359b54df32f76c4f3c9f2ac5ca231b64cd2bf18bc19cfacdf5c294b0f7d0114e3abafe845a36dc7e87d627650323033c467f04854", &(0x7f0000000980)=""/174, 0x8, 0x0, 0x1a, 0x49, &(0x7f00000005c0)="e01b934e05d415f57986d6756596807085b15e999796ed5680eb", &(0x7f0000000700)="dc67bc29dbd971c7224b40ba03a405ae6459c652276e1cc180aa7828a7957e7dcbed77f071f9c63dc806daa0dad22e2e044d94eff4c7a6a35e56872eececed7ff68d27fde81542daa6", 0x6, 0x0, 0x5022}, 0x50) sendmsg$tipc(r12, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0xfffffffffffffe05, 0x0, 0x0, 0x800}, 0x0) sendmsg$tipc(r12, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r11, 0x1, 0x21, &(0x7f00000000c0), 0x4) sendmsg$tipc(r12, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 3.507278983s ago: executing program 4 (id=6602): r0 = getpid() r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) syz_open_procfs$namespace(r0, &(0x7f0000000100)='ns/mnt\x00') 3.304438337s ago: executing program 4 (id=6604): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001880)="5c00000012006b949e3de3d86e6c1dffff137e03000000000000fcce1ef0f8001d000a00a0e6b1e517d34460bc24eab556a7e6241e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f408000300060100000800030011000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x4e1d, @local}, 0x10, 0x0}, 0x8850) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000240)={0x2, &(0x7f00000002c0)=[{0x30, 0xff, 0x86, 0xfffff018}, {0x6, 0xfd, 0x0, 0xfffffdff}]}) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3}, &(0x7f0000000200), &(0x7f0000000240)=r1}, 0x20) write$cgroup_subtree(r3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"/2813], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r4 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2}, {0x10000002, 0x0, 0xb, 0xc}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r4, 0x84, 0x64, &(0x7f0000000000), 0x10) sendmsg$inet(r4, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0x1fff8}], 0x1}, 0x80d1) close(r4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="180000003d000b08d25a80648c7494f90324fc600b0002400a0000", 0x1b}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1f, 0x14, &(0x7f0000001040)=ANY=[@ANYRES32, @ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) 2.999520328s ago: executing program 3 (id=6606): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 2.946274357s ago: executing program 3 (id=6607): socket$kcm(0x21, 0x2, 0x2) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r0, 0x6, 0xd, &(0x7f0000000000), 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x10, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb0}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="180000000000000000000000000000001802", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68886dd", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.892347036s ago: executing program 4 (id=6608): r0 = socket$kcm(0x10, 0xa, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a00000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000050010000000b68cab5982a671db00000000000000fdbe9de73e6786a80000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080180002d01010000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8992, &(0x7f0000000cc0)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf\xc8>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50x0}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)={@map=r3, 0xffffffffffffffff, 0x19, 0x10, 0xffffffffffffffff, @void, @value=r4, @void, @void, r2}, 0x20) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={@map=r1, r0, 0xa, 0x10, r1, @void, @value=r0, @void, @void, r2}, 0x20) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000000000085000000b300000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000700)={r6}, 0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r1, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000400)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f0000000440)=[0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0], 0x0, 0x57, &(0x7f00000004c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0x2b, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{r1, 0xffffffffffffffff}, &(0x7f0000000780), &(0x7f00000007c0)=r6}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_int(r9, &(0x7f00000000c0)='cpuset.memory_spread_page\x00', 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f0000001480)=ANY=[@ANYRESDEC], 0x6a) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000900)=@bpf_lsm={0x1d, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18006bb40000000000004f9e2ea80b9b258267e92b00000095000000002fedff00bb4b56067eb5775fd3b6d3cd6cd39541090de632ed165e7e9dfcccd58e35710c48e0e0118d0b35f6e819e129ed14a0f6821b9d0c931116fbddcb8adf11cf5c456389e44906f77d1b25ea2df4943af8a3a35dd514237386c049501de60fdef8d43d3c16e61f4180a1fd84f1180f1c0d2f133ca847afecbd9c34cbd6e87093ab7b4431ca808100f41751ed64e81a42fde17d8c91e3ba98d9649c5d1daef8d0863fc803bf0e"], &(0x7f0000000080)='syzkaller\x00', 0xc, 0x7d, &(0x7f00000002c0)=""/125, 0x41100, 0x20, '\x00', 0x0, 0x1b, r1, 0x8, &(0x7f0000000380)={0x9, 0x3}, 0x8, 0x10, &(0x7f00000003c0)={0x3, 0x1, 0x8, 0xa}, 0x10, r7, 0x0, 0x7, &(0x7f0000000840)=[r5, r5, r1, r1, r8, r5, r5, r1], &(0x7f0000000880)=[{0x0, 0x4, 0x9, 0x5}, {0x3, 0x5, 0x0, 0x9}, {0x1, 0x1, 0x0, 0x3}, {0x2, 0x3, 0x7, 0x7}, {0x3, 0x5, 0xa, 0x7}, {0x1, 0x4, 0x10, 0xa}, {0x3, 0x4, 0xc, 0x9}], 0x10, 0x7}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r6}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000dc0)={0x11, 0x16, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffb}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@map_fd={0x18, 0x8, 0x1, 0x0, r3}, @call={0x85, 0x0, 0x0, 0x1a}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x6}, @alu={0x7, 0x1, 0xb, 0x2, 0x4, 0x5e}, @generic={0x8, 0xb, 0x6, 0x8, 0xd18}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000b80)='GPL\x00', 0x7fff, 0xc5, &(0x7f0000000bc0)=""/197, 0x66115d35c69feafe, 0x6, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000cc0)=[r5], &(0x7f0000000d00)=[{0x2, 0x1, 0x10, 0x5}, {0x5, 0x2, 0x7}, {0x1, 0x4, 0x0, 0x9}, {0x0, 0x2, 0x10, 0x5}, {0x0, 0x5, 0x1, 0x3}, {0x5, 0x1, 0x0, 0x2}, {0x3, 0x2, 0xf}, {0x4, 0x2, 0x3, 0x5}, {0x5, 0x3, 0xe, 0x8}, {0x0, 0x3, 0x8, 0x5}], 0x10, 0x4}, 0x94) ioctl$TUNGETVNETBE(r1, 0x800454df, &(0x7f00000000c0)=0x1) ioctl$TUNGETFEATURES(r1, 0x5452, &(0x7f00000013c0)) 2.557290042s ago: executing program 3 (id=6611): bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x100080, 0x0, 0x0, 0x1}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socket$kcm(0x11, 0x2, 0x0) (async) close(0xffffffffffffffff) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="89000000120081ae08060cdc030ec0007f03e3f700000001", 0x18}], 0x1}, 0x0) (async, rerun: 64) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000100000000a500000000000018490000fe"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x19, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa7e3}, 0x94) (async, rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2e0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x12, 0x0, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b3114", 0x0, 0x0, 0x3}, 0x50) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d087277b9b108b4ab51c"], 0xfe33) r0 = socket$kcm(0x10, 0x2, 0x0) (async) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc29a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0x68000000}, 0x0) (async, rerun: 64) r1 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e23, 0x9, @private1}}, 0xa0, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x80fe) r2 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e23, 0xfffffffc, @private0={0xfc, 0x0, '\x00', 0x1}}}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x80fe) (async) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe000019"], 0xfe33) (async) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x10100) 2.38746546s ago: executing program 3 (id=6612): bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000240), 0x4) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000000), 0xe) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1200000024000000040000000200000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r1}, &(0x7f0000000700), &(0x7f0000000740)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000002c0)={r1, &(0x7f0000001500)="389b640e5e634f410871ae0792159941abe6ae195ff86fda631476b839b0aeab2b3185f37eb4dedfda47226c836738575f629ac6beddadf1d2f75093ba0610c48aa65677abdfee6db007e10dcc139a2c118147c19e614111a64f8f5f269fb4421d9ffd22bfe8a7157cf123fb852fa90b66acad3a26d356dea8503372d1620a6d5958fc348383f907e1f0b77b0da53c226b5a634ed55894e19beb536f", &(0x7f0000000000), 0x2}, 0x20) sendmsg$inet(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000080)="92", 0x1}], 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="2400000000000000000000000700000044140823e000000200000002e00000010000100000000000dc00000000000000000000000700000094040000863900000001000cb2ffb69602013567ffcb060f19367d2b99bdc0f59e428bc33a050a3660f2bb77c7045b050a31efe0215e235d56060495ae0144243471ac14142700000006ac1414bb00000001ac1414bb0000ffff0a01010200000009009404010000866000000000000c253d78b48f9458beb62d0102000d3bf9f2dbdddfea00b260f00503db010436b20603c70109e35e3ab5244a640709675e60e1799f870512e123b12c8654130f6a1f80f526064d12061127d9c9821b1bfe4b42fcb33e2e2d2594040000000000001400000000000000000000000200000022a20000000000001400000000000000000000000200000005000000000000001c"], 0x158}, 0x40) close(0xffffffffffffffff) r2 = socket$kcm(0x11, 0x2, 0x0) socket$kcm(0x11, 0x2, 0x0) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r3, 0x107, 0x12, &(0x7f0000000b80)=r2, 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b90402000000e8fe55a1180015000600142603600e1209000a", 0x27}], 0x1}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB='V?\x00\x00-\x00'], 0xfe33) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)=@o_path={&(0x7f0000000100)='./file0\x00', 0x0, 0x4010, r4}, 0x18) r5 = socket$kcm(0x10, 0x400000002, 0x0) r6 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a7401", 0x17}], 0x1}, 0x40000) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="1700000054009155090893b31b71a54a07"], 0xfe33) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000b00)={r1, 0x58, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000060000000400000000000012020000000000000000000001050000018000000000000000010000850200000000000000010000000000000400000000da"], 0x0, 0x52}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000140)={r8, 0x20, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)=""/102, 0x66}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c40)={0x11, 0x10, &(0x7f0000000340)=ANY=[@ANYBLOB="180000200900000040b6f154d091db5d000000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x1, 0xb0, &(0x7f00000009c0)=""/176, 0x61980, 0x5, '\x00', r7, 0x0, r8, 0x8, &(0x7f0000000b40)={0x6, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000b80)=[r0], &(0x7f0000000bc0)=[{0x1, 0x5, 0x6, 0x2}, {0x1, 0x2, 0xf, 0xa}, {0x2, 0x4, 0x5, 0x1}, {0x2, 0x4, 0xe, 0x5}, {0x0, 0x2, 0xc}], 0x10, 0x9046}, 0x94) 2.375583293s ago: executing program 1 (id=6613): socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xa, 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = perf_event_open(&(0x7f00000013c0)={0x1, 0x80, 0x0, 0x0, 0x28, 0x0, 0x0, 0x5d31, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.events\x00', 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={0x0, 0x0, 0x1a, 0x0, 0x1, 0x8}, 0x28) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r1, &(0x7f0000000500)="bb2e74712e5dc56fe20561267fe2132140216bd0cf5ed19c900b60c56299b526de548419e823947db4c9178170f0f80e16d2684cb1c7da078dbfd9636e730ed3589cf77bbd39f66eee4299554ca24d413ef55350d6b52e4c6d8e79ff9247eefde5f3a94b2f43155a9adaa39320d7026aac60e40b10b4ce5a9e9beb69a0da65f2241871ed55528bae458714a8eed6f2509ee800a58bff39b074a0508ec83e4b12fd513b2525bb2dcbb6746859676c8c2081b9bd58b7b85e532f71bd5bb502bd51c2a435dcb46e0e951507aefd988f930252adefda2c19110fa39dc8f2fb", &(0x7f0000000600)=""/111}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000001540)=ANY=[@ANYBLOB="0500000002002000070000000200000001000000e880497d54ae3648c469df9625a0193f62213e300696574797cb9a6145974f094bcc0058b297aae9d8451679f1b9079d7016d526e1eeced69a40a53e7a396404126c548d6c0c2fee3e10bb781536fc95c13ddddf6586c50ba3ee70cc20aecc1f8ef7", @ANYRES64, @ANYBLOB="740e00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28, @ANYRESDEC=r0], 0x50) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000001380)={r1, r1, 0x4, r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x11, 0x14, &(0x7f00000002c0)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_config_ext={0xfffffffffffffff8, 0x4}, 0x108278, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xb1}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x2a}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$PROG_LOAD(0x1c, &(0x7f0000000680)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001700)={r1, 0x0, 0x0, 0x0, &(0x7f0000000540), 0x0, 0x3, 0x0, 0xd00, 0x0, &(0x7f0000000680)="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", &(0x7f0000001680), 0x1, 0x0, 0x3}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$cgroup_ro(r1, &(0x7f0000000180)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f0000000280)={'wg0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}}) write$cgroup_pid(r1, &(0x7f00000002c0), 0x12) socketpair(0x26, 0x800, 0xc0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8914, &(0x7f0000000080)) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000380)={r4}, 0x8) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x98, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2001, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x4000000, 0x800000000000}, 0x4204, 0x200, 0x0, 0x0, 0x9, 0xffffffff, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r7) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$SIOCSIFHWADDR(r3, 0x8923, &(0x7f0000000300)={'wlan0\x00', @local}) 819.709413ms ago: executing program 4 (id=6614): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020032000b35d25a806f8c6394f90324fc602f0009000a740200053582c137153e370248018000f01700d1", 0x2d}], 0x1}, 0x0) 812.296534ms ago: executing program 1 (id=6615): r0 = getpid() r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21bef5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d55545a34effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f94306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a835701bea8240399c56ce8f58df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b262341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51427a7f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa08ad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282bffff2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae05334d5a44a020000001c0d882a564d74a7c72bf9a2152b261e58fea6d2f93589cfe261dc0410b5ccc92a5a0eab327a33431d62d2b7c75ce654d556c9e1817c1abca762ab53d40da51560351b673363652e1ecb56cfe4a746a45ab13c6014e9f361ab687d1cd1795ce9e05c817b83d76046bdb3709de5df7499a02d2f636a454b85b987580ada025d83bd7b8df28a540d5ec5537942e79f2f1ab25ea5f563bc77e4f9468bd309469880c7e34150ca886d1f9ac2f7e82dbe296c877d925c38c54cc8137b29028854b6bd57ca893927c331300e16aba792289e135589d93302fc37c73c303e383cdf8ef3f6d6265fe5ee01759d24027475c8901039a898582022bc95992b86dce0710887c8a625d9cbb897bdbfaf49a3f642a169827a9bae4fcfa5212461db000000000000e6ed75ca8fcda7ef3ee336189fef3b3ffb9f"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) syz_open_procfs$namespace(r0, &(0x7f0000000100)='ns/mnt\x00') 760.211903ms ago: executing program 3 (id=6616): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x18000000000002a0, 0x1c, 0x0, &(0x7f0000001280)="b9ffddc1ddcccdde75537d53888edfff70bf2dfe443b1b5e2a908137", 0x0, 0x3, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESOCT=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={0x0, 0x8}, 0x90, 0xa4, 0x0, 0x9, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000000000000000000020000085000000d000000095"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) syz_clone(0x100000, 0x0, 0x0, 0x0, 0x0, 0x0) 667.208028ms ago: executing program 4 (id=6617): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 659.14543ms ago: executing program 0 (id=6618): socket$kcm(0x11, 0x3, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x8, 0x0, 0x4000004, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x2e}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x34}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c00)={{r0}, &(0x7f0000001b80), &(0x7f0000001bc0)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000400)="b9ff030768045e207a1509cf36b9", 0x0, 0x500, 0x60000020, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 653.926561ms ago: executing program 2 (id=6619): socket$kcm(0x21, 0x2, 0x2) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r0, 0x6, 0xd, &(0x7f0000000000), 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x10, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb0}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="180000000000000000000000000000001802", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68886dd", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 652.317261ms ago: executing program 1 (id=6620): socket$kcm(0x11, 0x3, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x8, 0x0, 0x4000004, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x2e}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x34}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000040)={0xa, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000003}, 0x2, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETVNETLE(r4, 0x400454dc, &(0x7f0000000300)=0x1) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c00)={{r5}, &(0x7f0000001b80), &(0x7f0000001bc0)=r6}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r6, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000400)="b9ff030768045e207a1509cf36b9", 0x0, 0x500, 0x60000020, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r8 = getpid() sendmsg$unix(r7, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {r8, 0xee01}}}], 0x20, 0x114}, 0x10) r9 = perf_event_open$cgroup(&(0x7f0000000540)={0x4, 0x80, 0x0, 0x0, 0x5, 0x8, 0x0, 0xd, 0x20840, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x13, 0x0, @perf_bp={&(0x7f0000000340), 0x2efeba6141b4659f}, 0x2200, 0x0, 0x2, 0x1, 0xb2a, 0x8, 0xd1, 0x0, 0x10001, 0x0, 0x401}, r1, 0x1, r0, 0xa) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000600)={r8, r9, 0x0, 0x1, &(0x7f00000005c0)='\x00'}, 0x30) 0s ago: executing program 4 (id=6621): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32, @ANYBLOB='\x00\x00'], 0x50) socketpair(0x1, 0x3, 0x0, &(0x7f0000000200)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x161) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x28209, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x7, 0x0, 0x200, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffb, 0x81}, 0x100c, 0x0, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, 0x0) sendmsg$inet(r1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x20000402, r3}, 0x38) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000600)=""/182}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000880)='notify_on_release\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) write$cgroup_int(r5, &(0x7f0000000040), 0x1) socket$kcm(0x10, 0x2, 0x10) kernel console output (not intermixed with test programs): 1 48 [ 846.423399][T20990] RSP: 002b:00007f3840fa1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 846.431837][T20990] RAX: ffffffffffffffda RBX: 00007f3840415fa0 RCX: 00007f384019c819 [ 846.439834][T20990] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 846.447925][T20990] RBP: 00007f3840fa1090 R08: 0000000000000000 R09: 0000000000000000 [ 846.455915][T20990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 846.463907][T20990] R13: 00007f3840416038 R14: 00007f3840415fa0 R15: 00007ffd6849d9a8 [ 846.472629][T20990] [ 848.995638][T20979] mac80211_hwsim hwsim38 ªªªªªª: renamed from wlan0 [ 849.124479][T21007] FAULT_INJECTION: forcing a failure. [ 849.124479][T21007] name failslab, interval 1, probability 0, space 0, times 0 [ 849.171696][T21007] CPU: 1 PID: 21007 Comm: syz.1.5610 Not tainted syzkaller #0 [ 849.179225][T21007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 849.189317][T21007] Call Trace: [ 849.192629][T21007] [ 849.195843][T21007] dump_stack_lvl+0x188/0x24e [ 849.200571][T21007] ? show_regs_print_info+0x12/0x12 [ 849.205807][T21007] ? load_image+0x400/0x400 [ 849.210352][T21007] ? __might_sleep+0xd0/0xd0 [ 849.214976][T21007] ? __lock_acquire+0x7d10/0x7d10 [ 849.220045][T21007] should_fail_ex+0x399/0x4d0 [ 849.224862][T21007] should_failslab+0x5/0x20 [ 849.229402][T21007] slab_pre_alloc_hook+0x59/0x310 [ 849.234475][T21007] kmem_cache_alloc_node+0x5a/0x320 [ 849.239710][T21007] ? __alloc_skb+0xfc/0x7e0 [ 849.244264][T21007] __alloc_skb+0xfc/0x7e0 [ 849.248620][T21007] ? netlink_autobind+0xda/0x300 [ 849.253664][T21007] netlink_sendmsg+0x654/0xbd0 [ 849.258450][T21007] ? netlink_getsockopt+0x550/0x550 [ 849.263671][T21007] ? aa_sock_msg_perm+0x94/0x150 [ 849.268619][T21007] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 849.273909][T21007] ? security_socket_sendmsg+0x7c/0xa0 [ 849.279474][T21007] ? netlink_getsockopt+0x550/0x550 [ 849.284685][T21007] ____sys_sendmsg+0x5be/0x970 [ 849.289469][T21007] ? __sys_sendmsg_sock+0x30/0x30 [ 849.294499][T21007] ? __import_iovec+0x315/0x500 [ 849.299367][T21007] ? import_iovec+0x6f/0xa0 [ 849.303877][T21007] ___sys_sendmsg+0x2a2/0x360 [ 849.308591][T21007] ? __sys_sendmsg+0x290/0x290 [ 849.313392][T21007] ? __lock_acquire+0x7d10/0x7d10 [ 849.318457][T21007] __se_sys_sendmsg+0x1bb/0x2a0 [ 849.323319][T21007] ? __x64_sys_sendmsg+0x80/0x80 [ 849.328286][T21007] ? lockdep_hardirqs_on+0x94/0x140 [ 849.333582][T21007] do_syscall_64+0x4c/0xa0 [ 849.338003][T21007] ? clear_bhb_loop+0x60/0xb0 [ 849.342687][T21007] ? clear_bhb_loop+0x60/0xb0 [ 849.347373][T21007] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 849.353270][T21007] RIP: 0033:0x7f384019c819 [ 849.357687][T21007] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 849.377306][T21007] RSP: 002b:00007f3840fa1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 849.385984][T21007] RAX: ffffffffffffffda RBX: 00007f3840415fa0 RCX: 00007f384019c819 [ 849.393957][T21007] RDX: 0000000000000000 RSI: 0000200000000940 RDI: 0000000000000003 [ 849.402014][T21007] RBP: 00007f3840fa1090 R08: 0000000000000000 R09: 0000000000000000 [ 849.409982][T21007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 849.417948][T21007] R13: 00007f3840416038 R14: 00007f3840415fa0 R15: 00007ffd6849d9a8 [ 849.426215][T21007] [ 849.716457][T21025] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5605'. [ 849.912670][T21027] FAULT_INJECTION: forcing a failure. [ 849.912670][T21027] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 849.937115][T21027] CPU: 1 PID: 21027 Comm: syz.0.5608 Not tainted syzkaller #0 [ 849.944641][T21027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 849.954723][T21027] Call Trace: [ 849.958019][T21027] [ 849.960962][T21027] dump_stack_lvl+0x188/0x24e [ 849.965678][T21027] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 849.971861][T21027] ? show_regs_print_info+0x12/0x12 [ 849.977091][T21027] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 849.983295][T21027] should_fail_ex+0x399/0x4d0 [ 849.988000][T21027] _copy_to_user+0x2c/0x130 [ 849.992538][T21027] bpf_test_finish+0x266/0x600 [ 849.997335][T21027] ? convert___skb_to_skb+0x580/0x580 [ 850.002732][T21027] ? convert_skb_to___skb+0x420/0x420 [ 850.008145][T21027] bpf_prog_test_run_skb+0xc99/0x12a0 [ 850.013558][T21027] ? cpu_online+0xa0/0xa0 [ 850.018000][T21027] bpf_prog_test_run+0x31e/0x390 [ 850.022975][T21027] __sys_bpf+0x62b/0x780 [ 850.027257][T21027] ? bpf_link_show_fdinfo+0x380/0x380 [ 850.032930][T21027] ? lock_chain_count+0x20/0x20 [ 850.037857][T21027] __x64_sys_bpf+0x78/0x90 [ 850.042305][T21027] do_syscall_64+0x4c/0xa0 [ 850.046758][T21027] ? clear_bhb_loop+0x60/0xb0 [ 850.051466][T21027] ? clear_bhb_loop+0x60/0xb0 [ 850.056166][T21027] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 850.062078][T21027] RIP: 0033:0x7f3d8bd9c819 [ 850.066508][T21027] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 850.086152][T21027] RSP: 002b:00007f3d8cc0d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 850.094639][T21027] RAX: ffffffffffffffda RBX: 00007f3d8c015fa0 RCX: 00007f3d8bd9c819 [ 850.102645][T21027] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 850.110645][T21027] RBP: 00007f3d8cc0d090 R08: 0000000000000000 R09: 0000000000000000 [ 850.118830][T21027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 850.126836][T21027] R13: 00007f3d8c016038 R14: 00007f3d8c015fa0 R15: 00007ffc1249ac28 [ 850.134853][T21027] [ 850.268858][T21036] mac80211_hwsim hwsim27 ªªªªªª: renamed from wlan0 [ 850.694254][T20556] Bluetooth: hci0: ISO packet for unknown connection handle 3349 [ 851.902703][T21080] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5625'. [ 852.016612][T21088] netlink: 'syz.1.5630': attribute type 10 has an invalid length. [ 852.037674][T21086] delete_channel: no stack [ 852.596716][T20556] Bluetooth: hci3: ISO packet for unknown connection handle 3349 [ 855.526173][T21125] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5642'. [ 855.643235][T21128] netlink: 164 bytes leftover after parsing attributes in process `syz.4.5643'. [ 856.036361][T21151] device sit0 entered promiscuous mode [ 856.530017][T21169] ref_ctr_offset mismatch. inode: 0xb1b offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 856.749229][T21177] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5660'. [ 857.703990][T21217] FAULT_INJECTION: forcing a failure. [ 857.703990][T21217] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 857.741529][T21217] CPU: 0 PID: 21217 Comm: syz.1.5674 Not tainted syzkaller #0 [ 857.749097][T21217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 857.759184][T21217] Call Trace: [ 857.762661][T21217] [ 857.765623][T21217] dump_stack_lvl+0x188/0x24e [ 857.770598][T21217] ? show_regs_print_info+0x12/0x12 [ 857.775828][T21217] ? load_image+0x400/0x400 [ 857.780371][T21217] ? __lock_acquire+0x7d10/0x7d10 [ 857.785621][T21217] ? snprintf+0xe5/0x140 [ 857.789903][T21217] should_fail_ex+0x399/0x4d0 [ 857.794621][T21217] _copy_to_user+0x2c/0x130 [ 857.799150][T21217] simple_read_from_buffer+0xe3/0x150 [ 857.804551][T21217] proc_fail_nth_read+0x1a6/0x220 [ 857.809587][T21217] ? proc_fault_inject_write+0x310/0x310 [ 857.815225][T21217] ? fsnotify_perm+0x248/0x550 [ 857.819991][T21217] ? proc_fault_inject_write+0x310/0x310 [ 857.825632][T21217] vfs_read+0x2de/0xa00 [ 857.829793][T21217] ? kernel_read+0x1e0/0x1e0 [ 857.834390][T21217] ? __fget_files+0x28/0x4b0 [ 857.839005][T21217] ? __fget_files+0x28/0x4b0 [ 857.843622][T21217] ? __fget_files+0x43d/0x4b0 [ 857.848313][T21217] ? __fdget_pos+0x2ae/0x360 [ 857.852905][T21217] ? ksys_read+0x71/0x250 [ 857.857235][T21217] ksys_read+0x14c/0x250 [ 857.861491][T21217] ? vfs_write+0xa30/0xa30 [ 857.866041][T21217] ? lockdep_hardirqs_on+0x94/0x140 [ 857.871237][T21217] do_syscall_64+0x4c/0xa0 [ 857.875654][T21217] ? clear_bhb_loop+0x60/0xb0 [ 857.880328][T21217] ? clear_bhb_loop+0x60/0xb0 [ 857.885010][T21217] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 857.890901][T21217] RIP: 0033:0x7f384015d04e [ 857.895312][T21217] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 857.914921][T21217] RSP: 002b:00007f3840fa0fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 857.923335][T21217] RAX: ffffffffffffffda RBX: 00007f3840fa16c0 RCX: 00007f384015d04e [ 857.931303][T21217] RDX: 000000000000000f RSI: 00007f3840fa10a0 RDI: 0000000000000007 [ 857.939286][T21217] RBP: 00007f3840fa1090 R08: 0000000000000000 R09: 0000000000000000 [ 857.947472][T21217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 857.955447][T21217] R13: 00007f3840416038 R14: 00007f3840415fa0 R15: 00007ffd6849d9a8 [ 857.963521][T21217] [ 859.113490][T21251] netlink: 76 bytes leftover after parsing attributes in process `syz.3.5681'. [ 859.206970][T21237] netlink: 12030 bytes leftover after parsing attributes in process `syz.3.5681'. [ 859.325319][T21256] netlink: 'syz.2.5687': attribute type 39 has an invalid length. [ 860.307349][T21288] FAULT_INJECTION: forcing a failure. [ 860.307349][T21288] name failslab, interval 1, probability 0, space 0, times 0 [ 860.369734][T21288] CPU: 0 PID: 21288 Comm: syz.1.5697 Not tainted syzkaller #0 [ 860.377261][T21288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 860.387345][T21288] Call Trace: [ 860.390659][T21288] [ 860.393607][T21288] dump_stack_lvl+0x188/0x24e [ 860.398331][T21288] ? show_regs_print_info+0x12/0x12 [ 860.403647][T21288] ? load_image+0x400/0x400 [ 860.408186][T21288] ? __might_sleep+0xd0/0xd0 [ 860.412800][T21288] ? __lock_acquire+0x7d10/0x7d10 [ 860.417948][T21288] should_fail_ex+0x399/0x4d0 [ 860.422661][T21288] should_failslab+0x5/0x20 [ 860.427186][T21288] slab_pre_alloc_hook+0x59/0x310 [ 860.432238][T21288] ? __request_module+0x338/0xa00 [ 860.437292][T21288] __kmem_cache_alloc_node+0x4f/0x260 [ 860.442791][T21288] ? __request_module+0x338/0xa00 [ 860.447844][T21288] __kmalloc_node_track_caller+0x9e/0x230 [ 860.453780][T21288] kstrdup+0x37/0x70 [ 860.457720][T21288] __request_module+0x338/0xa00 [ 860.462597][T21288] ? trace_event_raw_event_lock+0x250/0x250 [ 860.468614][T21288] ? trace_event_raw_event_lock+0x250/0x250 [ 860.474628][T21288] ? copy_regset_to_user+0x1e0/0x1e0 [ 860.479949][T21288] ? aa_get_newest_label+0xf9/0x5b0 [ 860.485189][T21288] ? end_current_label_crit_section+0x170/0x170 [ 860.491475][T21288] ? apparmor_capable+0x12c/0x190 [ 860.496529][T21288] ? bpf_lsm_capable+0x5/0x10 [ 860.501228][T21288] ? security_capable+0x85/0xb0 [ 860.506203][T21288] ? dev_load+0x1d/0x1e0 [ 860.510467][T21288] dev_load+0x187/0x1e0 [ 860.514650][T21288] dev_ioctl+0x5e2/0xe80 [ 860.518919][T21288] ? get_user_ifreq+0xc7/0x170 [ 860.523716][T21288] sock_ioctl+0x691/0x710 [ 860.528104][T21288] ? sock_poll+0x410/0x410 [ 860.532559][T21288] ? bpf_lsm_file_ioctl+0x5/0x10 [ 860.537519][T21288] ? security_file_ioctl+0x7c/0xa0 [ 860.542664][T21288] ? sock_poll+0x410/0x410 [ 860.547111][T21288] __se_sys_ioctl+0xfa/0x170 [ 860.551742][T21288] do_syscall_64+0x4c/0xa0 [ 860.556183][T21288] ? clear_bhb_loop+0x60/0xb0 [ 860.560882][T21288] ? clear_bhb_loop+0x60/0xb0 [ 860.565588][T21288] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 860.571501][T21288] RIP: 0033:0x7f384019c819 [ 860.575939][T21288] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 860.595573][T21288] RSP: 002b:00007f3840fa1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 860.604121][T21288] RAX: ffffffffffffffda RBX: 00007f3840415fa0 RCX: 00007f384019c819 [ 860.612224][T21288] RDX: 0000200000000080 RSI: 00000000000089f0 RDI: 0000000000000005 [ 860.620235][T21288] RBP: 00007f3840fa1090 R08: 0000000000000000 R09: 0000000000000000 [ 860.628491][T21288] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 860.636491][T21288] R13: 00007f3840416038 R14: 00007f3840415fa0 R15: 00007ffd6849d9a8 [ 860.644525][T21288] [ 861.930029][T21309] netlink: 76 bytes leftover after parsing attributes in process `syz.3.5702'. [ 862.017238][T21301] netlink: 12030 bytes leftover after parsing attributes in process `syz.3.5702'. [ 862.239498][T21311] netlink: 'syz.1.5705': attribute type 39 has an invalid length. [ 862.653929][T21324] sctp: [Deprecated]: syz.0.5710 (pid 21324) Use of int in max_burst socket option deprecated. [ 862.653929][T21324] Use struct sctp_assoc_value instead [ 862.759339][T21324] FAULT_INJECTION: forcing a failure. [ 862.759339][T21324] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 862.768337][T21330] sctp: [Deprecated]: syz.2.5711 (pid 21330) Use of int in max_burst socket option deprecated. [ 862.768337][T21330] Use struct sctp_assoc_value instead [ 862.841190][T21324] CPU: 1 PID: 21324 Comm: syz.0.5710 Not tainted syzkaller #0 [ 862.848802][T21324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 862.858888][T21324] Call Trace: [ 862.862202][T21324] [ 862.865160][T21324] dump_stack_lvl+0x188/0x24e [ 862.869972][T21324] ? show_regs_print_info+0x12/0x12 [ 862.875211][T21324] ? load_image+0x400/0x400 [ 862.879749][T21324] ? __lock_acquire+0x7d10/0x7d10 [ 862.884824][T21324] ? snprintf+0xe5/0x140 [ 862.889106][T21324] should_fail_ex+0x399/0x4d0 [ 862.893824][T21324] _copy_to_user+0x2c/0x130 [ 862.898380][T21324] simple_read_from_buffer+0xe3/0x150 [ 862.903801][T21324] proc_fail_nth_read+0x1a6/0x220 [ 862.908860][T21324] ? proc_fault_inject_write+0x310/0x310 [ 862.914561][T21324] ? fsnotify_perm+0x248/0x550 [ 862.919395][T21324] ? proc_fault_inject_write+0x310/0x310 [ 862.925424][T21324] vfs_read+0x2de/0xa00 [ 862.929641][T21324] ? kernel_read+0x1e0/0x1e0 [ 862.934362][T21324] ? __fget_files+0x28/0x4b0 [ 862.938991][T21324] ? __fget_files+0x28/0x4b0 [ 862.943641][T21324] ? __fget_files+0x43d/0x4b0 [ 862.948364][T21324] ? __fdget_pos+0x2ae/0x360 [ 862.952986][T21324] ? ksys_read+0x71/0x250 [ 862.957351][T21324] ksys_read+0x14c/0x250 [ 862.961632][T21324] ? vfs_write+0xa30/0xa30 [ 862.966088][T21324] ? lockdep_hardirqs_on+0x94/0x140 [ 862.971326][T21324] do_syscall_64+0x4c/0xa0 [ 862.975962][T21324] ? clear_bhb_loop+0x60/0xb0 [ 862.980669][T21324] ? clear_bhb_loop+0x60/0xb0 [ 862.985389][T21324] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 862.991406][T21324] RIP: 0033:0x7f3d8bd5d04e [ 862.995893][T21324] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 863.015553][T21324] RSP: 002b:00007f3d8cc0cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 863.024010][T21324] RAX: ffffffffffffffda RBX: 00007f3d8cc0d6c0 RCX: 00007f3d8bd5d04e [ 863.032007][T21324] RDX: 000000000000000f RSI: 00007f3d8cc0d0a0 RDI: 0000000000000004 [ 863.040003][T21324] RBP: 00007f3d8cc0d090 R08: 0000000000000000 R09: 0000000000000000 [ 863.047999][T21324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 863.055993][T21324] R13: 00007f3d8c016038 R14: 00007f3d8c015fa0 R15: 00007ffc1249ac28 [ 863.064004][T21324] [ 863.280549][T21330] IPv6: Can't replace route, no match found [ 863.326441][T21330] mac80211_hwsim hwsim39 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 863.714840][T21350] netlink: 'syz.0.5719': attribute type 39 has an invalid length. [ 864.322127][T21360] netlink: 12286 bytes leftover after parsing attributes in process `syz.1.5720'. [ 864.351968][T21360] netlink: 76 bytes leftover after parsing attributes in process `syz.1.5720'. [ 864.463436][T21362] sctp: [Deprecated]: syz.2.5722 (pid 21362) Use of int in max_burst socket option deprecated. [ 864.463436][T21362] Use struct sctp_assoc_value instead [ 865.074654][T21384] netlink: 'syz.1.5730': attribute type 1 has an invalid length. [ 865.829500][T21408] netlink: 'syz.4.5738': attribute type 39 has an invalid length. [ 866.035406][ T4370] wlan1: Trigger new scan to find an IBSS to join [ 866.471749][T21414] netlink: 76 bytes leftover after parsing attributes in process `syz.0.5739'. [ 867.148688][T21420] device syzkaller0 entered promiscuous mode [ 869.075241][T17379] wlan1: Trigger new scan to find an IBSS to join [ 870.330217][T21434] netlink: 'syz.3.5747': attribute type 4 has an invalid length. [ 870.338081][T21434] netlink: 152 bytes leftover after parsing attributes in process `syz.3.5747'. [ 870.357164][T21434] net_ratelimit: 141 callbacks suppressed [ 870.357181][T21434] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 870.394305][T21449] netlink: 'syz.2.5751': attribute type 39 has an invalid length. [ 871.003329][ T5919] wlan1: Creating new IBSS network, BSSID 16:b1:ab:14:c6:8a [ 872.275852][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 872.282294][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 873.091740][T21499] netlink: 'syz.1.5768': attribute type 39 has an invalid length. [ 876.458905][T21536] netlink: 'syz.2.5780': attribute type 1 has an invalid length. [ 879.405814][T21591] netlink: 'syz.0.5800': attribute type 1 has an invalid length. [ 880.030709][T21608] netlink: 12286 bytes leftover after parsing attributes in process `syz.2.5806'. [ 880.168218][T21608] netlink: 76 bytes leftover after parsing attributes in process `syz.2.5806'. [ 881.020778][T21620] device syzkaller0 entered promiscuous mode [ 885.001455][T21647] netlink: 12030 bytes leftover after parsing attributes in process `syz.4.5816'. [ 885.012050][T21654] netlink: 76 bytes leftover after parsing attributes in process `syz.4.5816'. [ 886.129701][T21702] netlink: 12542 bytes leftover after parsing attributes in process `syz.3.5836'. [ 886.174568][T21702] netlink: 76 bytes leftover after parsing attributes in process `syz.3.5836'. [ 887.500450][T21731] netlink: 76 bytes leftover after parsing attributes in process `syz.3.5840'. [ 887.573250][T21717] netlink: 12030 bytes leftover after parsing attributes in process `syz.3.5840'. [ 888.376694][T21753] netlink: 12542 bytes leftover after parsing attributes in process `syz.0.5851'. [ 888.438028][T21753] netlink: 76 bytes leftover after parsing attributes in process `syz.0.5851'. [ 888.721876][T21755] device syzkaller0 entered promiscuous mode [ 891.965570][T21802] netlink: 12542 bytes leftover after parsing attributes in process `syz.3.5870'. [ 891.984094][T21804] netlink: 76 bytes leftover after parsing attributes in process `syz.3.5870'. [ 892.335536][T21814] netlink: 'syz.1.5873': attribute type 21 has an invalid length. [ 892.374013][T21814] netlink: 164 bytes leftover after parsing attributes in process `syz.1.5873'. [ 892.415499][T21819] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.5873'. [ 892.424981][T21819] bridge_slave_1: default FDB implementation only supports local addresses [ 892.469887][T21821] netlink: 'syz.0.5875': attribute type 3 has an invalid length. [ 892.478282][T21821] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.5875'. [ 892.596703][T21827] netlink: 'syz.1.5877': attribute type 1 has an invalid length. [ 892.611683][T21827] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.5877'. [ 894.076948][T21850] netlink: 12542 bytes leftover after parsing attributes in process `syz.2.5886'. [ 894.099055][T21850] netlink: 76 bytes leftover after parsing attributes in process `syz.2.5886'. [ 894.433982][T21850] device syzkaller0 entered promiscuous mode [ 897.927101][ T4283] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 897.937920][ T4283] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 897.963146][ T4283] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 897.971065][ T4283] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 897.995158][ T4283] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 898.002679][ T4283] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 898.209904][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 898.375626][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 898.540443][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 898.641938][T21925] FAULT_INJECTION: forcing a failure. [ 898.641938][T21925] name failslab, interval 1, probability 0, space 0, times 0 [ 898.686115][T21925] CPU: 0 PID: 21925 Comm: syz.1.5909 Not tainted syzkaller #0 [ 898.693639][T21925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 898.703724][T21925] Call Trace: [ 898.707028][T21925] [ 898.709981][T21925] dump_stack_lvl+0x188/0x24e [ 898.714691][T21925] ? show_regs_print_info+0x12/0x12 [ 898.719915][T21925] ? load_image+0x400/0x400 [ 898.724458][T21925] ? __might_sleep+0xd0/0xd0 [ 898.729061][T21925] ? __lock_acquire+0x7d10/0x7d10 [ 898.734106][T21925] ? skb_gro_incr_csum_unnecessary+0x300/0x300 [ 898.740325][T21925] should_fail_ex+0x399/0x4d0 [ 898.745034][T21925] should_failslab+0x5/0x20 [ 898.749642][T21925] slab_pre_alloc_hook+0x59/0x310 [ 898.754709][T21925] ? inet6_rtm_newroute+0x9f9/0x1bf0 [ 898.760034][T21925] __kmem_cache_alloc_node+0x4f/0x260 [ 898.765450][T21925] ? inet6_rtm_newroute+0x9f9/0x1bf0 [ 898.770765][T21925] kmalloc_trace+0x26/0xe0 [ 898.775206][T21925] inet6_rtm_newroute+0x9f9/0x1bf0 [ 898.780358][T21925] ? ipv6_route_sysctl_init+0x270/0x270 [ 898.785965][T21925] ? trace_contention_end+0x5f/0x170 [ 898.791296][T21925] ? rtnetlink_rcv_msg+0x226/0xfc0 [ 898.796425][T21925] ? rtnetlink_rcv_msg+0x226/0xfc0 [ 898.801555][T21925] ? ipv6_route_sysctl_init+0x270/0x270 [ 898.807129][T21925] rtnetlink_rcv_msg+0x87c/0xfc0 [ 898.812110][T21925] ? rtnetlink_bind+0x80/0x80 [ 898.816804][T21925] ? __local_bh_enable_ip+0x136/0x1c0 [ 898.822195][T21925] ? lockdep_hardirqs_on+0x94/0x140 [ 898.827420][T21925] ? __local_bh_enable_ip+0x136/0x1c0 [ 898.832818][T21925] ? _local_bh_enable+0xa0/0xa0 [ 898.837694][T21925] ? __dev_queue_xmit+0x26b/0x37c0 [ 898.842822][T21925] ? __dev_queue_xmit+0x26b/0x37c0 [ 898.848036][T21925] ? __dev_queue_xmit+0x1cd2/0x37c0 [ 898.853525][T21925] ? __dev_queue_xmit+0x26b/0x37c0 [ 898.858670][T21925] ? ref_tracker_free+0x68c/0x840 [ 898.863823][T21925] ? __copy_skb_header+0x3ba/0x4f0 [ 898.868971][T21925] ? refcount_inc+0x70/0x70 [ 898.873491][T21925] ? memcpy+0x3c/0x60 [ 898.877493][T21925] ? __copy_skb_header+0x3ba/0x4f0 [ 898.882717][T21925] ? __skb_clone+0x480/0x790 [ 898.887339][T21925] netlink_rcv_skb+0x1fb/0x450 [ 898.892135][T21925] ? rtnetlink_bind+0x80/0x80 [ 898.896831][T21925] ? netlink_ack+0x1170/0x1170 [ 898.901714][T21925] ? netlink_deliver_tap+0x2e/0x1b0 [ 898.906999][T21925] netlink_unicast+0x74d/0x8d0 [ 898.911797][T21925] netlink_sendmsg+0x8ad/0xbd0 [ 898.916590][T21925] ? netlink_getsockopt+0x550/0x550 [ 898.921812][T21925] ? aa_sock_msg_perm+0x94/0x150 [ 898.926768][T21925] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 898.932064][T21925] ? security_socket_sendmsg+0x7c/0xa0 [ 898.937659][T21925] ? netlink_getsockopt+0x550/0x550 [ 898.942898][T21925] ____sys_sendmsg+0x5be/0x970 [ 898.947806][T21925] ? __sys_sendmsg_sock+0x30/0x30 [ 898.952847][T21925] ? __import_iovec+0x315/0x500 [ 898.957717][T21925] ? import_iovec+0x6f/0xa0 [ 898.962236][T21925] ___sys_sendmsg+0x2a2/0x360 [ 898.966952][T21925] ? __sys_sendmsg+0x290/0x290 [ 898.971765][T21925] ? __lock_acquire+0x7d10/0x7d10 [ 898.976835][T21925] __se_sys_sendmsg+0x1bb/0x2a0 [ 898.981702][T21925] ? ct_nmi_exit+0x145/0x1c0 [ 898.986430][T21925] ? __x64_sys_sendmsg+0x80/0x80 [ 898.991408][T21925] ? lockdep_hardirqs_on+0x94/0x140 [ 898.996649][T21925] do_syscall_64+0x4c/0xa0 [ 899.001103][T21925] ? clear_bhb_loop+0x60/0xb0 [ 899.005802][T21925] ? clear_bhb_loop+0x60/0xb0 [ 899.010501][T21925] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 899.016507][T21925] RIP: 0033:0x7f384019c819 [ 899.020943][T21925] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 899.040751][T21925] RSP: 002b:00007f3840fa1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 899.049265][T21925] RAX: ffffffffffffffda RBX: 00007f3840415fa0 RCX: 00007f384019c819 [ 899.057251][T21925] RDX: 0000000000048002 RSI: 0000200000000040 RDI: 0000000000000003 [ 899.065261][T21925] RBP: 00007f3840fa1090 R08: 0000000000000000 R09: 0000000000000000 [ 899.073255][T21925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 899.081241][T21925] R13: 00007f3840416038 R14: 00007f3840415fa0 R15: 00007ffd6849d9a8 [ 899.089253][T21925] [ 899.116768][T21896] chnl_net:caif_netlink_parms(): no params data found [ 899.264685][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 899.278609][T21922] netlink: 12542 bytes leftover after parsing attributes in process `syz.0.5910'. [ 899.299929][T21926] netlink: 76 bytes leftover after parsing attributes in process `syz.0.5910'. [ 899.688624][T21922] device syzkaller0 entered promiscuous mode [ 899.739317][T21896] bridge0: port 1(bridge_slave_0) entered blocking state [ 899.746640][T21896] bridge0: port 1(bridge_slave_0) entered disabled state [ 899.755477][T21896] device bridge_slave_0 entered promiscuous mode [ 900.033214][ T4283] Bluetooth: hci4: command 0x0409 tx timeout [ 902.099706][T21896] bridge0: port 2(bridge_slave_1) entered blocking state [ 902.107090][T21896] bridge0: port 2(bridge_slave_1) entered disabled state [ 902.114292][T20556] Bluetooth: hci4: command 0x041b tx timeout [ 902.115787][T21896] device bridge_slave_1 entered promiscuous mode [ 902.136337][T21949] IPv6: Can't replace route, no match found [ 902.142427][T21961] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5921'. [ 902.215984][T21896] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 902.277322][T21896] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 902.377297][T21896] team0: Port device team_slave_0 added [ 902.441631][T21972] IPv6: Can't replace route, no match found [ 902.477992][T21896] team0: Port device team_slave_1 added [ 902.541157][ T11] device 0 left promiscuous mode [ 902.627317][ T11] device 1 left promiscuous mode [ 902.661776][T21896] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 902.680234][T21896] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 902.809854][T21896] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 902.994800][T21896] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 903.006734][T21896] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 903.094321][T21896] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 903.270042][T22000] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.5931'. [ 903.766382][T21896] device hsr_slave_0 entered promiscuous mode [ 903.787475][T21896] device hsr_slave_1 entered promiscuous mode [ 904.192967][ T4283] Bluetooth: hci4: command 0x040f tx timeout [ 904.595300][T22041] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.5942'. [ 904.796325][ T11] team0: Port device wlan1 removed [ 905.459823][ T11] device hsr_slave_0 left promiscuous mode [ 905.485035][ T11] device hsr_slave_1 left promiscuous mode [ 905.495776][ T11] device bridge_slave_1 left promiscuous mode [ 905.502401][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 905.539676][ T11] device bridge_slave_0 left promiscuous mode [ 905.577572][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 905.639808][ T11] device veth1_macvtap left promiscuous mode [ 905.663179][ T11] device veth1_vlan left promiscuous mode [ 906.273648][ T11] team0 (unregistering): Port device team_slave_1 removed [ 906.283428][ T4283] Bluetooth: hci4: command 0x0419 tx timeout [ 906.327663][ T11] team0 (unregistering): Port device team_slave_0 removed [ 906.370835][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 906.682773][ T11] bond0 (unregistering): Released all slaves [ 906.919110][T21896] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 906.987845][T21896] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 907.040680][T21896] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 907.074225][T21896] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 907.385109][T22104] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.5956'. [ 907.433336][T21896] 8021q: adding VLAN 0 to HW filter on device bond0 [ 907.517971][T17937] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 907.539336][T17937] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 907.598452][T21896] 8021q: adding VLAN 0 to HW filter on device team0 [ 907.686848][T17379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 907.702007][T17379] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 907.768658][T17379] bridge0: port 1(bridge_slave_0) entered blocking state [ 907.775859][T17379] bridge0: port 1(bridge_slave_0) entered forwarding state [ 907.843690][T17379] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 907.851905][T17379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 907.886768][T17379] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 907.924094][T17379] bridge0: port 2(bridge_slave_1) entered blocking state [ 907.931298][T17379] bridge0: port 2(bridge_slave_1) entered forwarding state [ 907.966206][T17379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 908.053787][ T5919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 908.086703][ T5919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 908.134843][ T5919] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 908.163629][ T5919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 908.211802][ T5919] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 908.240734][ T5919] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 908.283801][T17938] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 908.300436][T17938] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 908.316750][T17938] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 908.335931][T17938] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 908.364514][T22120] netlink: 'syz.2.5960': attribute type 39 has an invalid length. [ 908.415358][T21896] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 909.409376][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 909.479658][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 909.520867][T21896] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 909.607867][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 909.632538][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 909.708294][T17379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 909.738019][T17379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 909.778590][T21896] device veth0_vlan entered promiscuous mode [ 909.796705][T17379] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 909.824867][T17379] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 909.890620][T21896] device veth1_vlan entered promiscuous mode [ 910.050392][T17938] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 910.078713][T17938] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 910.111967][T22177] netlink: 'syz.0.5975': attribute type 39 has an invalid length. [ 910.150435][T21896] device veth0_macvtap entered promiscuous mode [ 910.199727][T21896] device veth1_macvtap entered promiscuous mode [ 910.307718][T21896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 910.348643][T21896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 910.404866][T21896] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 910.425876][T17379] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 910.466237][T17379] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 910.479731][T17379] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 910.501583][T17379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 910.599828][T21896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 910.634657][T21896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 910.647764][T21896] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 910.659551][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 910.678356][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 910.699504][T21896] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 910.718827][T21896] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 910.728576][T21896] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 910.744152][T21896] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 910.956846][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 910.975611][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 911.015456][T17938] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 911.112499][T17937] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 911.136827][T17937] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 911.162400][T17938] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 911.797119][T22230] netlink: 'syz.4.5987': attribute type 39 has an invalid length. [ 912.495125][T22251] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 912.551406][T22251] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 913.210832][ T4283] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 913.227359][ T4283] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 913.236337][ T4283] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 913.246384][ T4283] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 913.256336][ T4283] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 913.264094][ T4283] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 913.816501][T17938] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 914.060993][T17938] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 914.292653][T22288] FAULT_INJECTION: forcing a failure. [ 914.292653][T22288] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 914.314435][T22288] CPU: 0 PID: 22288 Comm: syz.1.6006 Not tainted syzkaller #0 [ 914.321963][T22288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 914.332036][T22288] Call Trace: [ 914.335331][T22288] [ 914.338269][T22288] dump_stack_lvl+0x188/0x24e [ 914.342989][T22288] ? show_regs_print_info+0x12/0x12 [ 914.348459][T22288] ? load_image+0x400/0x400 [ 914.353013][T22288] ? __lock_acquire+0x7d10/0x7d10 [ 914.358096][T22288] ? lockdep_hardirqs_on+0x94/0x140 [ 914.363352][T22288] should_fail_ex+0x399/0x4d0 [ 914.368063][T22288] _copy_to_user+0x2c/0x130 [ 914.372600][T22288] simple_read_from_buffer+0xe3/0x150 [ 914.378008][T22288] proc_fail_nth_read+0x1a6/0x220 [ 914.383072][T22288] ? proc_fault_inject_write+0x310/0x310 [ 914.388747][T22288] ? fsnotify_perm+0x248/0x550 [ 914.393538][T22288] ? proc_fault_inject_write+0x310/0x310 [ 914.399191][T22288] vfs_read+0x2de/0xa00 [ 914.403413][T22288] ? kernel_read+0x1e0/0x1e0 [ 914.408024][T22288] ? __fget_files+0x28/0x4b0 [ 914.412642][T22288] ? __fget_files+0x28/0x4b0 [ 914.417259][T22288] ? __fget_files+0x43d/0x4b0 [ 914.421970][T22288] ? __fdget_pos+0x2ae/0x360 [ 914.426573][T22288] ? ksys_read+0x71/0x250 [ 914.431019][T22288] ksys_read+0x14c/0x250 [ 914.435285][T22288] ? vfs_write+0xa30/0xa30 [ 914.439726][T22288] ? lockdep_hardirqs_on+0x94/0x140 [ 914.444953][T22288] do_syscall_64+0x4c/0xa0 [ 914.449406][T22288] ? clear_bhb_loop+0x60/0xb0 [ 914.454213][T22288] ? clear_bhb_loop+0x60/0xb0 [ 914.458912][T22288] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 914.464824][T22288] RIP: 0033:0x7f384015d04e [ 914.469264][T22288] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 914.488894][T22288] RSP: 002b:00007f3840fa0fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 914.497327][T22288] RAX: ffffffffffffffda RBX: 00007f3840fa16c0 RCX: 00007f384015d04e [ 914.505331][T22288] RDX: 000000000000000f RSI: 00007f3840fa10a0 RDI: 0000000000000007 [ 914.513327][T22288] RBP: 00007f3840fa1090 R08: 0000000000000000 R09: 0000000000000000 [ 914.521317][T22288] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 914.529302][T22288] R13: 00007f3840416038 R14: 00007f3840415fa0 R15: 00007ffd6849d9a8 [ 914.537314][T22288] [ 914.555317][T17938] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 914.690978][T17938] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 915.287273][T17938] device 0 left promiscuous mode [ 915.316766][T20556] Bluetooth: hci2: command 0x0409 tx timeout [ 915.486959][T22267] chnl_net:caif_netlink_parms(): no params data found [ 916.204307][T22267] bridge0: port 1(bridge_slave_0) entered blocking state [ 916.211578][T22267] bridge0: port 1(bridge_slave_0) entered disabled state [ 916.233756][T22267] device bridge_slave_0 entered promiscuous mode [ 916.284263][T22267] bridge0: port 2(bridge_slave_1) entered blocking state [ 916.312241][T22267] bridge0: port 2(bridge_slave_1) entered disabled state [ 916.374776][T22267] device bridge_slave_1 entered promiscuous mode [ 916.622171][T22267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 916.662646][T22323] netlink: 12542 bytes leftover after parsing attributes in process `syz.4.6014'. [ 916.765191][T22267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 916.785758][T22321] netlink: 76 bytes leftover after parsing attributes in process `syz.4.6014'. [ 916.982688][T22267] team0: Port device team_slave_0 added [ 917.024061][T22267] team0: Port device team_slave_1 added [ 917.102061][T22267] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 917.123136][T22267] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 917.163086][T22267] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 917.232207][T22267] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 917.240344][T22267] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 917.269987][T22267] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 917.383043][T22267] device hsr_slave_0 entered promiscuous mode [ 917.402133][T22267] device hsr_slave_1 entered promiscuous mode [ 917.408490][ T4278] Bluetooth: hci2: command 0x041b tx timeout [ 917.420588][T22267] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 917.436818][T22267] Cannot create hsr debugfs directory [ 918.007109][T17938] device veth1_macvtap left promiscuous mode [ 918.014526][T17938] device veth0_macvtap left promiscuous mode [ 918.020700][T17938] device veth1_vlan left promiscuous mode [ 918.047033][T17938] device veth0_vlan left promiscuous mode [ 918.307303][T17938] team0 (unregistering): Port device geneve1 removed [ 918.795630][T17938] team0 (unregistering): Port device team_slave_1 removed [ 918.839555][T17938] team0 (unregistering): Port device team_slave_0 removed [ 918.879420][T17938] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 919.198948][T17938] bond0 (unregistering): Released all slaves [ 919.249154][T22359] netlink: 'syz.1.6019': attribute type 21 has an invalid length. [ 919.473098][ T4278] Bluetooth: hci2: command 0x040f tx timeout [ 920.148892][T22267] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 920.193664][T22267] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 920.253575][T22267] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 920.298972][T22267] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 920.550019][T22267] 8021q: adding VLAN 0 to HW filter on device bond0 [ 920.620355][T17931] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 920.647686][T17931] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 920.706568][T22267] 8021q: adding VLAN 0 to HW filter on device team0 [ 920.759066][T17931] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 920.803523][T17931] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 920.837594][T17931] bridge0: port 1(bridge_slave_0) entered blocking state [ 920.844818][T17931] bridge0: port 1(bridge_slave_0) entered forwarding state [ 920.903572][T17931] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 920.952443][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 920.998629][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 921.057014][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 921.064325][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 921.117213][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 921.140135][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 921.241963][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 921.266252][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 921.347086][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 921.404564][T17379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 921.457045][T17379] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 921.491308][T17379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 921.510566][T17379] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 921.545840][T17937] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 921.554980][ T4278] Bluetooth: hci2: command 0x0419 tx timeout [ 921.572134][T17937] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 921.626655][T22267] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 922.741114][T22267] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 922.808700][T17938] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 922.828857][T17938] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 922.956826][ T5919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 922.975363][ T5919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 923.084466][T17379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 923.099652][T17379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 923.142111][T22267] device veth0_vlan entered promiscuous mode [ 923.149292][T17379] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 923.170009][T17379] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 923.199225][T22267] device veth1_vlan entered promiscuous mode [ 923.303548][T17931] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 923.326325][T17931] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 923.355052][T17931] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 923.393931][T17931] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 923.414477][T22267] device veth0_macvtap entered promiscuous mode [ 923.445150][T22267] device veth1_macvtap entered promiscuous mode [ 923.575966][T22267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 923.623024][T22267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 923.663689][T22267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 923.736018][T22267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 923.770131][T22267] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 923.836295][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 923.861952][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 923.909901][T22267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 923.933876][T22267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 923.953257][T22267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 923.973019][T22267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 924.007355][T22267] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 924.045952][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 924.075383][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 924.144113][T22267] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 924.172954][T22267] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 924.181710][T22267] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 924.221119][T22267] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 924.517565][T22507] FAULT_INJECTION: forcing a failure. [ 924.517565][T22507] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 924.562235][T22507] CPU: 1 PID: 22507 Comm: syz.4.6053 Not tainted syzkaller #0 [ 924.569855][T22507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 924.579940][T22507] Call Trace: [ 924.583237][T22507] [ 924.586187][T22507] dump_stack_lvl+0x188/0x24e [ 924.590910][T22507] ? show_regs_print_info+0x12/0x12 [ 924.596157][T22507] ? load_image+0x400/0x400 [ 924.600708][T22507] ? __lock_acquire+0x7d10/0x7d10 [ 924.605864][T22507] ? read_lock_is_recursive+0x10/0x10 [ 924.611313][T22507] should_fail_ex+0x399/0x4d0 [ 924.616063][T22507] _copy_to_user+0x2c/0x130 [ 924.620595][T22507] bpf_prog_test_run_syscall+0x332/0x4a0 [ 924.626259][T22507] ? sock_gen_cookie+0x60/0x60 [ 924.631052][T22507] ? sock_gen_cookie+0x60/0x60 [ 924.635848][T22507] bpf_prog_test_run+0x31e/0x390 [ 924.640911][T22507] __sys_bpf+0x62b/0x780 [ 924.645189][T22507] ? bpf_link_show_fdinfo+0x380/0x380 [ 924.650596][T22507] ? lock_chain_count+0x20/0x20 [ 924.655477][T22507] __x64_sys_bpf+0x78/0x90 [ 924.659913][T22507] do_syscall_64+0x4c/0xa0 [ 924.664348][T22507] ? clear_bhb_loop+0x60/0xb0 [ 924.669049][T22507] ? clear_bhb_loop+0x60/0xb0 [ 924.673756][T22507] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 924.679686][T22507] RIP: 0033:0x7f1c4719c819 [ 924.684552][T22507] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 924.704268][T22507] RSP: 002b:00007f1c4812d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 924.712729][T22507] RAX: ffffffffffffffda RBX: 00007f1c47415fa0 RCX: 00007f1c4719c819 [ 924.720815][T22507] RDX: 0000000000000010 RSI: 0000200000000400 RDI: 000000000000000a [ 924.728809][T22507] RBP: 00007f1c4812d090 R08: 0000000000000000 R09: 0000000000000000 [ 924.736812][T22507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 924.744893][T22507] R13: 00007f1c47416038 R14: 00007f1c47415fa0 R15: 00007fff278386d8 [ 924.752963][T22507] [ 924.955764][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 924.973145][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 925.036974][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 925.191978][ T5919] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 925.246931][ T5919] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 925.362134][ T5919] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 925.391683][T22524] mac80211_hwsim hwsim40 ªªªªªª: renamed from wlan0 [ 926.504896][T22552] FAULT_INJECTION: forcing a failure. [ 926.504896][T22552] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 926.553136][T22552] CPU: 0 PID: 22552 Comm: syz.0.6062 Not tainted syzkaller #0 [ 926.560668][T22552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 926.570753][T22552] Call Trace: [ 926.574121][T22552] [ 926.577075][T22552] dump_stack_lvl+0x188/0x24e [ 926.581794][T22552] ? show_regs_print_info+0x12/0x12 [ 926.587032][T22552] ? load_image+0x400/0x400 [ 926.591566][T22552] ? __lock_acquire+0x7d10/0x7d10 [ 926.596717][T22552] should_fail_ex+0x399/0x4d0 [ 926.601423][T22552] _copy_from_user+0x2c/0x170 [ 926.606229][T22552] __sys_bpf+0x2ea/0x780 [ 926.610521][T22552] ? bpf_link_show_fdinfo+0x380/0x380 [ 926.616037][T22552] ? lock_chain_count+0x20/0x20 [ 926.621009][T22552] __x64_sys_bpf+0x78/0x90 [ 926.625453][T22552] do_syscall_64+0x4c/0xa0 [ 926.629889][T22552] ? clear_bhb_loop+0x60/0xb0 [ 926.634591][T22552] ? clear_bhb_loop+0x60/0xb0 [ 926.639304][T22552] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 926.645574][T22552] RIP: 0033:0x7f51c919c819 [ 926.650191][T22552] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 926.670439][T22552] RSP: 002b:00007f51c73f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 926.678916][T22552] RAX: ffffffffffffffda RBX: 00007f51c9415fa0 RCX: 00007f51c919c819 [ 926.687173][T22552] RDX: 000000000000000c RSI: 0000200000000500 RDI: 000000000000000a [ 926.695247][T22552] RBP: 00007f51c73f6090 R08: 0000000000000000 R09: 0000000000000000 [ 926.703260][T22552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 926.711351][T22552] R13: 00007f51c9416038 R14: 00007f51c9415fa0 R15: 00007ffc81c5d7a8 [ 926.719529][T22552] [ 926.971574][ T4278] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 926.983800][ T4278] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 926.995415][ T4278] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 927.038560][ T4278] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 927.049378][ T4278] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 927.057265][ T4278] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 928.051161][T17379] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 928.262718][T17379] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 928.374783][T17379] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 928.419884][T22572] chnl_net:caif_netlink_parms(): no params data found [ 928.544691][T17379] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 928.708330][T22600] netlink: 12542 bytes leftover after parsing attributes in process `syz.3.6072'. [ 928.830950][T22609] netlink: 12542 bytes leftover after parsing attributes in process `syz.2.6076'. [ 928.846705][T22606] netlink: 'syz.4.6077': attribute type 10 has an invalid length. [ 928.865064][T22606] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6077'. [ 928.879588][T22606] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 928.902744][T22600] netlink: 76 bytes leftover after parsing attributes in process `syz.3.6072'. [ 929.005216][T22609] netlink: 76 bytes leftover after parsing attributes in process `syz.2.6076'. [ 929.046401][T22572] bridge0: port 1(bridge_slave_0) entered blocking state [ 929.054161][T22572] bridge0: port 1(bridge_slave_0) entered disabled state [ 929.062720][T22572] device bridge_slave_0 entered promiscuous mode [ 929.073271][T20556] Bluetooth: hci5: command 0x0409 tx timeout [ 929.158868][T22600] device syzkaller0 entered promiscuous mode [ 929.187234][T22616] netlink: 'syz.4.6078': attribute type 3 has an invalid length. [ 929.212563][T22614] device syzkaller0 entered promiscuous mode [ 929.212978][T22616] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.6078'. [ 929.251896][T22572] bridge0: port 2(bridge_slave_1) entered blocking state [ 929.259838][T22572] bridge0: port 2(bridge_slave_1) entered disabled state [ 929.269047][T22572] device bridge_slave_1 entered promiscuous mode [ 931.156257][T20556] Bluetooth: hci5: command 0x041b tx timeout [ 933.233083][T20556] Bluetooth: hci5: command 0x040f tx timeout [ 933.599380][T22572] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 933.612758][T22572] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 933.645707][T17379] device 0 left promiscuous mode [ 933.725426][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 933.731813][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 933.795996][T22572] team0: Port device team_slave_0 added [ 933.829768][T22572] team0: Port device team_slave_1 added [ 934.079044][T22645] mac80211_hwsim hwsim42 ªªªªªª: renamed from wlan0 [ 934.211640][T22572] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 934.227456][T22572] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 934.314679][T22572] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 934.475101][T22649] netlink: 'syz.2.6087': attribute type 39 has an invalid length. [ 934.506385][T22572] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 934.514354][T22572] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 934.639626][T22572] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 934.855765][T22659] netlink: 12542 bytes leftover after parsing attributes in process `syz.0.6088'. [ 935.025981][T22572] device hsr_slave_0 entered promiscuous mode [ 935.035300][T22572] device hsr_slave_1 entered promiscuous mode [ 935.090247][T22572] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 935.099866][T22572] Cannot create hsr debugfs directory [ 935.260275][T22673] device syzkaller0 entered promiscuous mode [ 935.313210][T20556] Bluetooth: hci5: command 0x0419 tx timeout [ 937.764692][T22678] netlink: 12542 bytes leftover after parsing attributes in process `syz.4.6092'. [ 937.789205][T22683] netlink: 76 bytes leftover after parsing attributes in process `syz.4.6092'. [ 937.862398][T22688] device syzkaller0 entered promiscuous mode [ 940.404397][T22708] netlink: 'syz.0.6104': attribute type 21 has an invalid length. [ 940.905902][T22722] netlink: 'syz.4.6099': attribute type 39 has an invalid length. [ 940.989592][T17379] device hsr_slave_0 left promiscuous mode [ 941.048724][T17379] device hsr_slave_1 left promiscuous mode [ 941.154300][T17379] device veth1_macvtap left promiscuous mode [ 941.162424][T17379] device veth0_macvtap left promiscuous mode [ 941.185044][T17379] device veth1_vlan left promiscuous mode [ 942.400149][T17379] team0 (unregistering): Port device geneve1 removed [ 942.968216][T17379] team0 (unregistering): Port device team_slave_1 removed [ 943.024150][T17379] team0 (unregistering): Port device team_slave_0 removed [ 943.077245][T17379] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 943.482643][T17379] bond0 (unregistering): Released all slaves [ 943.897864][T22572] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 944.016941][T22572] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 944.124090][T22572] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 944.216918][T22572] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 944.279193][T22761] netlink: 12542 bytes leftover after parsing attributes in process `syz.0.6106'. [ 944.382690][T22766] netlink: 76 bytes leftover after parsing attributes in process `syz.0.6106'. [ 945.010311][T22572] 8021q: adding VLAN 0 to HW filter on device bond0 [ 945.160100][T22771] netlink: 'syz.4.6111': attribute type 21 has an invalid length. [ 945.270646][T22781] netlink: 'syz.0.6112': attribute type 39 has an invalid length. [ 945.447217][T17931] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 945.460652][T17931] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 945.490415][T22572] 8021q: adding VLAN 0 to HW filter on device team0 [ 945.531156][T17931] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 945.566993][T17931] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 945.587494][T17931] bridge0: port 1(bridge_slave_0) entered blocking state [ 945.594818][T17931] bridge0: port 1(bridge_slave_0) entered forwarding state [ 945.616693][T17931] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 945.661848][ T4724] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 945.699720][ T4724] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 945.723668][ T4724] bridge0: port 2(bridge_slave_1) entered blocking state [ 945.730838][ T4724] bridge0: port 2(bridge_slave_1) entered forwarding state [ 945.779314][T17931] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 945.799647][T17931] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 945.837875][T17931] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 945.861819][T17931] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 945.924759][T17931] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 945.958960][T17931] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 946.005174][T17931] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 946.034534][ T4283] Bluetooth: hci1: command 0x0406 tx timeout [ 946.160658][T17931] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 946.173765][T17931] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 946.214539][T17931] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 946.255401][T17931] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 946.297985][T22572] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 946.491869][T22804] netlink: 'syz.3.6116': attribute type 27 has an invalid length. [ 946.525081][T22804] netlink: 164 bytes leftover after parsing attributes in process `syz.3.6116'. [ 947.267588][T22822] device syzkaller0 entered promiscuous mode [ 947.310375][T22826] netlink: 'syz.2.6123': attribute type 39 has an invalid length. [ 949.903558][T22572] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 949.923201][T17938] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 949.930768][T17938] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 949.990332][T17938] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 950.009841][T17938] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 950.078278][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 950.111573][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 950.142625][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 950.174767][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 950.197657][T22572] device veth0_vlan entered promiscuous mode [ 950.262590][T22572] device veth1_vlan entered promiscuous mode [ 950.369253][T22861] FAULT_INJECTION: forcing a failure. [ 950.369253][T22861] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 950.383105][T17379] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 950.413928][T17379] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 950.450760][T17379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 950.469254][T22861] CPU: 1 PID: 22861 Comm: syz.2.6131 Not tainted syzkaller #0 [ 950.476872][T22861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 950.486958][T22861] Call Trace: [ 950.490431][T22861] [ 950.493557][T22861] dump_stack_lvl+0x188/0x24e [ 950.498383][T22861] ? show_regs_print_info+0x12/0x12 [ 950.503756][T22861] ? load_image+0x400/0x400 [ 950.508310][T22861] ? __lock_acquire+0x7d10/0x7d10 [ 950.513376][T22861] ? lockdep_hardirqs_on+0x94/0x140 [ 950.518714][T22861] should_fail_ex+0x399/0x4d0 [ 950.523428][T22861] _copy_from_user+0x2c/0x170 [ 950.528409][T22861] __copy_msghdr+0x3b7/0x580 [ 950.533209][T22861] ___sys_sendmsg+0x210/0x360 [ 950.537918][T22861] ? __sys_sendmsg+0x290/0x290 [ 950.542738][T22861] ? __lock_acquire+0x7d10/0x7d10 [ 950.547813][T22861] __se_sys_sendmsg+0x1bb/0x2a0 [ 950.552780][T22861] ? ct_nmi_exit+0x145/0x1c0 [ 950.557398][T22861] ? __x64_sys_sendmsg+0x80/0x80 [ 950.562376][T22861] ? lockdep_hardirqs_on+0x94/0x140 [ 950.567954][T22861] do_syscall_64+0x4c/0xa0 [ 950.572398][T22861] ? clear_bhb_loop+0x60/0xb0 [ 950.577108][T22861] ? clear_bhb_loop+0x60/0xb0 [ 950.581837][T22861] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 950.587787][T22861] RIP: 0033:0x7fa44339c819 [ 950.592310][T22861] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 950.612159][T22861] RSP: 002b:00007fa4442d4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 950.620690][T22861] RAX: ffffffffffffffda RBX: 00007fa443615fa0 RCX: 00007fa44339c819 [ 950.628692][T22861] RDX: 00000000000003e8 RSI: 00002000000004c0 RDI: 0000000000000039 [ 950.636703][T22861] RBP: 00007fa4442d4090 R08: 0000000000000000 R09: 0000000000000000 [ 950.644699][T22861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 950.652832][T22861] R13: 00007fa443616038 R14: 00007fa443615fa0 R15: 00007fffb7cbb978 [ 950.660932][T22861] [ 950.688421][T17379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 950.708233][T22572] device veth0_macvtap entered promiscuous mode [ 950.742027][T22572] device veth1_macvtap entered promiscuous mode [ 950.812170][T22572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 950.851185][T22572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 950.881023][T22572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 950.912493][T22572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 950.950065][T22572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 950.976550][T22572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 951.017563][T22572] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 951.047897][T17931] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 951.060422][T17931] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 951.101613][T17931] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 951.146224][T17931] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 951.275336][T22572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 951.293082][T22572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 951.323005][T22572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 951.357130][T22572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 951.373733][T22572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 951.394792][T22572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 951.408657][T22572] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 951.423703][T22572] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 951.432664][T22572] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 951.448568][T22572] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 951.461515][T22572] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 951.488622][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 951.515973][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 951.670780][T22886] netlink: 'syz.2.6136': attribute type 39 has an invalid length. [ 951.764658][T17931] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 951.772628][T17931] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 951.841546][T17938] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 951.890676][T17938] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 951.930179][T17938] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 951.961692][T17379] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 952.349006][T22904] netlink: 1030 bytes leftover after parsing attributes in process `syz.0.6142'. [ 952.368700][T22908] netlink: 'syz.2.6143': attribute type 27 has an invalid length. [ 952.409813][T22908] netlink: 164 bytes leftover after parsing attributes in process `syz.2.6143'. [ 953.560814][T22928] netlink: 'syz.0.6149': attribute type 39 has an invalid length. [ 953.857806][T22934] netlink: 'syz.2.6151': attribute type 1 has an invalid length. [ 953.963004][T22934] netlink: 83992 bytes leftover after parsing attributes in process `syz.2.6151'. [ 954.045871][T22936] netlink: 16255 bytes leftover after parsing attributes in process `syz.4.6152'. [ 955.149850][T22947] FAULT_INJECTION: forcing a failure. [ 955.149850][T22947] name failslab, interval 1, probability 0, space 0, times 0 [ 955.219142][T22947] CPU: 1 PID: 22947 Comm: syz.4.6154 Not tainted syzkaller #0 [ 955.226940][T22947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 955.237004][T22947] Call Trace: [ 955.240279][T22947] [ 955.243321][T22947] dump_stack_lvl+0x188/0x24e [ 955.248119][T22947] ? show_regs_print_info+0x12/0x12 [ 955.253329][T22947] ? load_image+0x400/0x400 [ 955.258125][T22947] ? __might_sleep+0xd0/0xd0 [ 955.262729][T22947] ? __lock_acquire+0x7d10/0x7d10 [ 955.268061][T22947] should_fail_ex+0x399/0x4d0 [ 955.272946][T22947] should_failslab+0x5/0x20 [ 955.277539][T22947] slab_pre_alloc_hook+0x59/0x310 [ 955.282653][T22947] ? mutex_lock_nested+0x10/0x10 [ 955.287707][T22947] ? __ipv6_dev_mc_inc+0x3fa/0xa90 [ 955.292910][T22947] __kmem_cache_alloc_node+0x4f/0x260 [ 955.298386][T22947] ? __ipv6_dev_mc_inc+0x3fa/0xa90 [ 955.303505][T22947] kmalloc_trace+0x26/0xe0 [ 955.307957][T22947] __ipv6_dev_mc_inc+0x3fa/0xa90 [ 955.312918][T22947] __ipv6_sock_mc_join+0x53f/0x7b0 [ 955.318051][T22947] do_ipv6_setsockopt+0x23e0/0x3e30 [ 955.323282][T22947] ? sk_dst_reset+0xa0/0xa0 [ 955.327800][T22947] ? mark_lock+0x94/0x320 [ 955.332136][T22947] ? __lock_acquire+0x12f4/0x7d10 [ 955.337281][T22947] ? aa_label_sk_perm+0x456/0x5b0 [ 955.342310][T22947] ? verify_lock_unused+0x140/0x140 [ 955.347789][T22947] ? trace_call_bpf+0xbf/0x6b0 [ 955.352772][T22947] ? aa_sk_perm+0x950/0x950 [ 955.357334][T22947] ? migrate_enable+0x148/0x220 [ 955.362227][T22947] ? __might_sleep+0xd0/0xd0 [ 955.366839][T22947] ? __fget_files+0x28/0x4b0 [ 955.371444][T22947] ? aa_sk_perm+0x81f/0x950 [ 955.375969][T22947] ? aa_af_perm+0x340/0x340 [ 955.380569][T22947] ? __fget_files+0x43d/0x4b0 [ 955.385370][T22947] ? aa_sock_opt_perm+0x74/0x100 [ 955.390328][T22947] ipv6_setsockopt+0x55/0x190 [ 955.395020][T22947] ? sock_common_recvmsg+0x190/0x190 [ 955.400314][T22947] __sys_setsockopt+0x2bf/0x3d0 [ 955.405237][T22947] __x64_sys_setsockopt+0xb1/0xc0 [ 955.410271][T22947] do_syscall_64+0x4c/0xa0 [ 955.414865][T22947] ? clear_bhb_loop+0x60/0xb0 [ 955.419547][T22947] ? clear_bhb_loop+0x60/0xb0 [ 955.424250][T22947] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 955.430169][T22947] RIP: 0033:0x7f1c4719c819 [ 955.434694][T22947] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 955.454747][T22947] RSP: 002b:00007f1c4812d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 955.463190][T22947] RAX: ffffffffffffffda RBX: 00007f1c47415fa0 RCX: 00007f1c4719c819 [ 955.471184][T22947] RDX: 0000000000000014 RSI: 0000000000000029 RDI: 0000000000000005 [ 955.479159][T22947] RBP: 00007f1c4812d090 R08: 000000000000003d R09: 0000000000000000 [ 955.487506][T22947] R10: 0000200000000440 R11: 0000000000000246 R12: 0000000000000001 [ 955.495480][T22947] R13: 00007f1c47416038 R14: 00007f1c47415fa0 R15: 00007fff278386d8 [ 955.503650][T22947] [ 955.844335][T22962] netlink: 'syz.4.6158': attribute type 11 has an invalid length. [ 955.852936][T22962] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.6158'. [ 955.930024][T22961] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 956.052276][T22965] netlink: 'syz.4.6159': attribute type 27 has an invalid length. [ 956.072368][T22965] netlink: 164 bytes leftover after parsing attributes in process `syz.4.6159'. [ 956.580199][T22969] netlink: 15487 bytes leftover after parsing attributes in process `syz.4.6161'. [ 956.635314][T22972] netlink: 'syz.4.6161': attribute type 1 has an invalid length. [ 956.694277][T22972] netlink: 15487 bytes leftover after parsing attributes in process `syz.4.6161'. [ 956.734935][T22974] netlink: 'syz.0.6164': attribute type 39 has an invalid length. [ 956.865712][T22969] netlink: 14207 bytes leftover after parsing attributes in process `syz.4.6161'. [ 958.729949][T20556] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 958.740182][T20556] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 958.751424][T20556] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 958.768136][T20556] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 958.778527][T20556] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 958.789238][T20556] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 959.504972][T23025] netlink: 12542 bytes leftover after parsing attributes in process `syz.0.6180'. [ 959.520418][T23025] netlink: 76 bytes leftover after parsing attributes in process `syz.0.6180'. [ 959.645401][T23025] device syzkaller0 entered promiscuous mode [ 959.664272][T23017] chnl_net:caif_netlink_parms(): no params data found [ 959.883040][T23039] FAULT_INJECTION: forcing a failure. [ 959.883040][T23039] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 959.901945][T23039] CPU: 0 PID: 23039 Comm: syz.3.6185 Not tainted syzkaller #0 [ 959.909468][T23039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 959.919537][T23039] Call Trace: [ 959.922960][T23039] [ 959.925901][T23039] dump_stack_lvl+0x188/0x24e [ 959.930658][T23039] ? show_regs_print_info+0x12/0x12 [ 959.935872][T23039] ? load_image+0x400/0x400 [ 959.940485][T23039] ? __lock_acquire+0x7d10/0x7d10 [ 959.945695][T23039] should_fail_ex+0x399/0x4d0 [ 959.950463][T23039] _copy_from_user+0x2c/0x170 [ 959.955167][T23039] iovec_from_user+0x143/0x360 [ 959.960036][T23039] __import_iovec+0x6d/0x500 [ 959.964740][T23039] import_iovec+0x6f/0xa0 [ 959.969074][T23039] ___sys_sendmsg+0x252/0x360 [ 959.973769][T23039] ? __sys_sendmsg+0x290/0x290 [ 959.978557][T23039] ? __lock_acquire+0x7d10/0x7d10 [ 959.983611][T23039] __se_sys_sendmsg+0x1bb/0x2a0 [ 959.988489][T23039] ? __x64_sys_sendmsg+0x80/0x80 [ 959.993449][T23039] ? lockdep_hardirqs_on+0x94/0x140 [ 959.998672][T23039] do_syscall_64+0x4c/0xa0 [ 960.003095][T23039] ? clear_bhb_loop+0x60/0xb0 [ 960.007805][T23039] ? clear_bhb_loop+0x60/0xb0 [ 960.012602][T23039] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 960.018497][T23039] RIP: 0033:0x7f1e5a99c819 [ 960.022910][T23039] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 960.042608][T23039] RSP: 002b:00007f1e5b8f9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 960.051026][T23039] RAX: ffffffffffffffda RBX: 00007f1e5ac15fa0 RCX: 00007f1e5a99c819 [ 960.059087][T23039] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 960.067081][T23039] RBP: 00007f1e5b8f9090 R08: 0000000000000000 R09: 0000000000000000 [ 960.075154][T23039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 960.083222][T23039] R13: 00007f1e5ac16038 R14: 00007f1e5ac15fa0 R15: 00007ffef7e84dc8 [ 960.091215][T23039] [ 960.923136][ T4283] Bluetooth: hci3: command 0x0409 tx timeout [ 962.885602][T23017] bridge0: port 1(bridge_slave_0) entered blocking state [ 962.921003][T23017] bridge0: port 1(bridge_slave_0) entered disabled state [ 962.948974][T23017] device bridge_slave_0 entered promiscuous mode [ 962.984984][T23017] bridge0: port 2(bridge_slave_1) entered blocking state [ 962.993241][ T4283] Bluetooth: hci3: command 0x041b tx timeout [ 962.998027][T23017] bridge0: port 2(bridge_slave_1) entered disabled state [ 963.014308][T23017] device bridge_slave_1 entered promiscuous mode [ 963.142088][T23017] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 963.168078][T23017] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 963.276169][T23017] team0: Port device team_slave_0 added [ 963.295128][T23017] team0: Port device team_slave_1 added [ 963.357618][T23017] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 963.422952][T23017] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 963.497935][T23068] FAULT_INJECTION: forcing a failure. [ 963.497935][T23068] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 963.515623][T23068] CPU: 1 PID: 23068 Comm: syz.0.6196 Not tainted syzkaller #0 [ 963.523244][T23068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 963.533345][T23068] Call Trace: [ 963.533972][T23017] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 963.536722][T23068] [ 963.550260][T23068] dump_stack_lvl+0x188/0x24e [ 963.554969][T23068] ? show_regs_print_info+0x12/0x12 [ 963.560190][T23068] ? load_image+0x400/0x400 [ 963.564722][T23068] ? __lock_acquire+0x7d10/0x7d10 [ 963.569881][T23068] ? verify_lock_unused+0x140/0x140 [ 963.575106][T23068] should_fail_ex+0x399/0x4d0 [ 963.579823][T23068] prepare_alloc_pages+0x1e2/0x5f0 [ 963.585059][T23068] __alloc_pages+0x130/0x4f0 [ 963.589679][T23068] ? zone_statistics+0x170/0x170 [ 963.594651][T23068] ? verify_lock_unused+0x140/0x140 [ 963.599878][T23068] __folio_alloc+0xe/0x30 [ 963.604230][T23068] vma_alloc_folio+0x4a3/0x900 [ 963.609016][T23068] ? mpol_shared_policy_lookup+0x147/0x1e0 [ 963.614850][T23068] shmem_alloc_and_acct_folio+0x463/0xbc0 [ 963.620605][T23068] ? shmem_replace_folio+0xee0/0xee0 [ 963.625934][T23068] ? xas_load+0x127/0x140 [ 963.630301][T23068] ? __filemap_get_folio+0x10f/0xdb0 [ 963.636157][T23068] ? __filemap_get_folio+0xb24/0xdb0 [ 963.641568][T23068] ? __filemap_get_folio+0x10f/0xdb0 [ 963.646889][T23068] ? page_cache_prev_miss+0x380/0x380 [ 963.652296][T23068] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 963.658318][T23068] ? do_user_addr_fault+0x7a0/0xb10 [ 963.663570][T23068] ? lock_chain_count+0x20/0x20 [ 963.668448][T23068] shmem_get_folio_gfp+0x1361/0x3400 [ 963.673801][T23068] shmem_write_begin+0xee/0x3f0 [ 963.678692][T23068] generic_perform_write+0x2fa/0x5c0 [ 963.684030][T23068] ? generic_file_direct_write+0x330/0x330 [ 963.689860][T23068] ? __file_remove_privs+0x5f0/0x5f0 [ 963.695265][T23068] ? rwsem_write_trylock+0x135/0x1c0 [ 963.700580][T23068] ? clear_nonspinnable+0x60/0x60 [ 963.705635][T23068] ? generic_write_checks_count+0x3d9/0x4c0 [ 963.711572][T23068] __generic_file_write_iter+0x148/0x2a0 [ 963.717252][T23068] generic_file_write_iter+0xab/0x2e0 [ 963.722659][T23068] vfs_write+0x4b1/0xa30 [ 963.726953][T23068] ? file_end_write+0x250/0x250 [ 963.731839][T23068] ? __fget_files+0x43d/0x4b0 [ 963.736565][T23068] ? __fdget_pos+0x2ae/0x360 [ 963.741180][T23068] ? ksys_write+0x71/0x250 [ 963.745627][T23068] ksys_write+0x14c/0x250 [ 963.750090][T23068] ? __ia32_sys_read+0x80/0x80 [ 963.754894][T23068] ? lockdep_hardirqs_on+0x94/0x140 [ 963.760136][T23068] do_syscall_64+0x4c/0xa0 [ 963.764606][T23068] ? clear_bhb_loop+0x60/0xb0 [ 963.769308][T23068] ? clear_bhb_loop+0x60/0xb0 [ 963.774092][T23068] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 963.780298][T23068] RIP: 0033:0x7f51c919c819 [ 963.784733][T23068] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 963.804867][T23068] RSP: 002b:00007f51c73f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 963.813591][T23068] RAX: ffffffffffffffda RBX: 00007f51c9415fa0 RCX: 00007f51c919c819 [ 963.821639][T23068] RDX: 00000000002a979d RSI: 0000200000000000 RDI: 0000000000000006 [ 963.829652][T23068] RBP: 00007f51c73f6090 R08: 0000000000000000 R09: 0000000000000000 [ 963.837689][T23068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 963.845694][T23068] R13: 00007f51c9416038 R14: 00007f51c9415fa0 R15: 00007ffc81c5d7a8 [ 963.853816][T23068] [ 963.875779][T23017] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 963.882776][T23017] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 963.913200][T23017] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 964.081475][T23017] device hsr_slave_0 entered promiscuous mode [ 964.102014][T23017] device hsr_slave_1 entered promiscuous mode [ 964.118952][T23017] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 964.139056][T23017] Cannot create hsr debugfs directory [ 964.163744][T23072] netlink: 'syz.3.6198': attribute type 39 has an invalid length. [ 964.481451][T17931] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 964.567675][T23074] netlink: 12542 bytes leftover after parsing attributes in process `syz.1.6199'. [ 964.586886][T23078] netlink: 76 bytes leftover after parsing attributes in process `syz.1.6199'. [ 964.678029][T17931] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 964.934810][T23074] device syzkaller0 entered promiscuous mode [ 965.022230][T17931] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 965.074156][T20556] Bluetooth: hci3: command 0x040f tx timeout [ 967.163296][T20556] Bluetooth: hci3: command 0x0419 tx timeout [ 967.506758][T17931] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 967.519668][T23112] netlink: 'syz.0.6210': attribute type 39 has an invalid length. [ 967.801664][T23124] syz.1.6214[23124] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 967.801775][T23124] syz.1.6214[23124] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 967.870730][T17931] device 0 left promiscuous mode [ 969.064026][T23150] netlink: 'syz.1.6221': attribute type 39 has an invalid length. [ 969.508094][T23161] netlink: 'syz.2.6223': attribute type 39 has an invalid length. [ 969.534737][T23017] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 969.590617][T23017] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 969.755419][T23017] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 969.838593][T23017] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 970.232759][T23017] 8021q: adding VLAN 0 to HW filter on device bond0 [ 970.379499][T17938] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 970.397560][T17938] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 970.423697][T23017] 8021q: adding VLAN 0 to HW filter on device team0 [ 970.463846][T23190] FAULT_INJECTION: forcing a failure. [ 970.463846][T23190] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 970.491216][T23190] CPU: 1 PID: 23190 Comm: syz.2.6232 Not tainted syzkaller #0 [ 970.498743][T23190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 970.508818][T23190] Call Trace: [ 970.512122][T23190] [ 970.515083][T23190] dump_stack_lvl+0x188/0x24e [ 970.519793][T23190] ? show_regs_print_info+0x12/0x12 [ 970.525006][T23190] ? load_image+0x400/0x400 [ 970.529520][T23190] ? __lock_acquire+0x7d10/0x7d10 [ 970.534550][T23190] should_fail_ex+0x399/0x4d0 [ 970.539269][T23190] _copy_from_user+0x2c/0x170 [ 970.544034][T23190] iovec_from_user+0x143/0x360 [ 970.548805][T23190] __import_iovec+0x6d/0x500 [ 970.553484][T23190] ? __might_fault+0xa6/0x120 [ 970.558166][T23190] import_iovec+0x6f/0xa0 [ 970.562494][T23190] ___sys_recvmsg+0x4b6/0x590 [ 970.567200][T23190] ? __sys_recvmsg+0x290/0x290 [ 970.572029][T23190] ? common_file_perm+0x171/0x1c0 [ 970.577153][T23190] ? __fget_files+0x43d/0x4b0 [ 970.581861][T23190] __x64_sys_recvmsg+0x205/0x2e0 [ 970.586944][T23190] ? perf_trace_preemptirq_template+0x268/0x320 [ 970.593274][T23190] ? ___sys_recvmsg+0x590/0x590 [ 970.598282][T23190] ? lockdep_hardirqs_on+0x94/0x140 [ 970.603521][T23190] do_syscall_64+0x4c/0xa0 [ 970.608385][T23190] ? clear_bhb_loop+0x60/0xb0 [ 970.613101][T23190] ? clear_bhb_loop+0x60/0xb0 [ 970.617843][T23190] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 970.623739][T23190] RIP: 0033:0x7fa44339c819 [ 970.628237][T23190] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 970.648203][T23190] RSP: 002b:00007fa4442d4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 970.656730][T23190] RAX: ffffffffffffffda RBX: 00007fa443615fa0 RCX: 00007fa44339c819 [ 970.664715][T23190] RDX: 0000000000000000 RSI: 00002000000004c0 RDI: 0000000000000008 [ 970.672710][T23190] RBP: 00007fa4442d4090 R08: 0000000000000000 R09: 0000000000000000 [ 970.681036][T23190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 970.689011][T23190] R13: 00007fa443616038 R14: 00007fa443615fa0 R15: 00007fffb7cbb978 [ 970.697172][T23190] [ 970.793251][T17379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 970.802434][T17379] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 970.870150][T17379] bridge0: port 1(bridge_slave_0) entered blocking state [ 970.877388][T17379] bridge0: port 1(bridge_slave_0) entered forwarding state [ 971.003445][T17931] device veth1_macvtap left promiscuous mode [ 971.027224][T17931] device veth0_macvtap left promiscuous mode [ 971.084535][T17931] device veth1_vlan left promiscuous mode [ 971.253647][T23209] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.6238'. [ 972.328444][T17931] team0 (unregistering): Port device team_slave_1 removed [ 972.388572][T17931] team0 (unregistering): Port device team_slave_0 removed [ 972.440465][T17931] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 972.487878][T17931] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 972.815215][T17931] bond0 (unregistering): Released all slaves [ 972.857428][T17379] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 972.866273][T17379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 972.875755][T17379] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 972.884922][T17379] bridge0: port 2(bridge_slave_1) entered blocking state [ 972.892205][T17379] bridge0: port 2(bridge_slave_1) entered forwarding state [ 972.912244][T17379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 972.933497][T23203] netlink: 'syz.2.6236': attribute type 39 has an invalid length. [ 972.959638][T23213] mac80211_hwsim hwsim44 ªªªªªª: renamed from wlan0 [ 973.028616][T23229] netlink: 'syz.3.6245': attribute type 10 has an invalid length. [ 973.131898][T23229] team0: Port device wlan1 added [ 973.176208][T17379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 973.201547][T17379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 973.240286][T17379] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 973.315413][T17379] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 973.357401][ T5919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 973.453544][ T5919] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 973.463993][ T5919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 973.484110][ T5919] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 973.501362][ T5919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 973.511298][ T5919] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 973.531900][T23017] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 973.790071][T23256] FAULT_INJECTION: forcing a failure. [ 973.790071][T23256] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 973.912569][T23257] netlink: 'syz.1.6252': attribute type 3 has an invalid length. [ 973.914630][T23256] CPU: 1 PID: 23256 Comm: syz.2.6251 Not tainted syzkaller #0 [ 973.925490][T23257] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.6252'. [ 973.929098][T23256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 973.929117][T23256] Call Trace: [ 973.929127][T23256] [ 973.929139][T23256] dump_stack_lvl+0x188/0x24e [ 973.929181][T23256] ? show_regs_print_info+0x12/0x12 [ 973.929211][T23256] ? load_image+0x400/0x400 [ 973.929243][T23256] ? __might_fault+0xa6/0x120 [ 973.929279][T23256] should_fail_ex+0x399/0x4d0 [ 973.929312][T23256] copyin+0x1b/0x120 [ 973.929337][T23256] _copy_from_iter+0x447/0x1130 [ 973.929371][T23256] ? copyout_mc+0x110/0x110 [ 973.992579][T23256] ? __virt_addr_valid+0x188/0x540 [ 973.997724][T23256] ? __virt_addr_valid+0x188/0x540 [ 974.002859][T23256] ? __virt_addr_valid+0x465/0x540 [ 974.008016][T23256] ? __check_object_size+0x500/0xa40 [ 974.013350][T23256] netlink_sendmsg+0x755/0xbd0 [ 974.018165][T23256] ? netlink_getsockopt+0x550/0x550 [ 974.023390][T23256] ? aa_sock_msg_perm+0x94/0x150 [ 974.028427][T23256] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 974.033815][T23256] ? security_socket_sendmsg+0x7c/0xa0 [ 974.039299][T23256] ? netlink_getsockopt+0x550/0x550 [ 974.044517][T23256] ____sys_sendmsg+0x5be/0x970 [ 974.049308][T23256] ? __sys_sendmsg_sock+0x30/0x30 [ 974.054360][T23256] ? __import_iovec+0x315/0x500 [ 974.059232][T23256] ? import_iovec+0x6f/0xa0 [ 974.063781][T23256] ___sys_sendmsg+0x2a2/0x360 [ 974.068519][T23256] ? __sys_sendmsg+0x290/0x290 [ 974.073447][T23256] ? __lock_acquire+0x7d10/0x7d10 [ 974.078560][T23256] __se_sys_sendmsg+0x1bb/0x2a0 [ 974.083501][T23256] ? ct_nmi_exit+0x145/0x1c0 [ 974.088138][T23256] ? __x64_sys_sendmsg+0x80/0x80 [ 974.093142][T23256] ? lockdep_hardirqs_on+0x94/0x140 [ 974.098426][T23256] do_syscall_64+0x4c/0xa0 [ 974.102961][T23256] ? clear_bhb_loop+0x60/0xb0 [ 974.107674][T23256] ? clear_bhb_loop+0x60/0xb0 [ 974.112496][T23256] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 974.118426][T23256] RIP: 0033:0x7fa44339c819 [ 974.122897][T23256] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 974.142717][T23256] RSP: 002b:00007fa4442b3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 974.151175][T23256] RAX: ffffffffffffffda RBX: 00007fa443616090 RCX: 00007fa44339c819 [ 974.159412][T23256] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 000000000000000d [ 974.167543][T23256] RBP: 00007fa4442b3090 R08: 0000000000000000 R09: 0000000000000000 [ 974.175537][T23256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 974.183552][T23256] R13: 00007fa443616128 R14: 00007fa443616090 R15: 00007fffb7cbb978 [ 974.191582][T23256] [ 974.285576][T23257] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.6252'. [ 974.685364][T23278] netlink: 'syz.2.6256': attribute type 39 has an invalid length. [ 974.815676][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 974.837171][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 974.879117][T23017] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 975.863079][ T5919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 975.881159][ T5919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 976.016579][T23316] netlink: 'syz.0.6267': attribute type 39 has an invalid length. [ 976.057797][ T5919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 976.070443][ T5919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 976.100048][T23017] device veth0_vlan entered promiscuous mode [ 976.112346][ T5919] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 976.132793][ T5919] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 976.165917][T23017] device veth1_vlan entered promiscuous mode [ 976.268948][T17379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 976.296345][T17379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 976.380177][T23017] device veth0_macvtap entered promiscuous mode [ 976.538608][T23017] device veth1_macvtap entered promiscuous mode [ 976.720949][T23017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 976.794264][T23017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 976.804657][T23017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 976.815682][T23017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 976.850948][T23017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 976.871158][T23017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 976.882624][T23017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 976.900262][T23017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 976.912312][T23017] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 976.935316][ T4724] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 976.951100][ T4724] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 976.968879][ T4724] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 976.982512][ T4724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 977.010324][T23322] netlink: 12798 bytes leftover after parsing attributes in process `syz.0.6268'. [ 977.045560][T23017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 977.072023][T23017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 977.092905][T23017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 977.122528][T23017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 977.138475][T23017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 977.159484][T23017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 977.182928][T23017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 977.193831][T23017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 977.209130][T23346] FAULT_INJECTION: forcing a failure. [ 977.209130][T23346] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 977.212356][T23017] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 977.254506][T23328] netlink: 76 bytes leftover after parsing attributes in process `syz.0.6268'. [ 977.273265][T23346] CPU: 0 PID: 23346 Comm: syz.2.6274 Not tainted syzkaller #0 [ 977.280781][T23346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 977.290863][T23346] Call Trace: [ 977.294254][T23346] [ 977.297205][T23346] dump_stack_lvl+0x188/0x24e [ 977.301918][T23346] ? show_regs_print_info+0x12/0x12 [ 977.307255][T23346] ? load_image+0x400/0x400 [ 977.311782][T23346] ? __lock_acquire+0x7d10/0x7d10 [ 977.316881][T23346] ? tomoyo_path_number_perm+0x205/0x650 [ 977.322527][T23346] ? tomoyo_path_number_perm+0x5a4/0x650 [ 977.328446][T23346] should_fail_ex+0x399/0x4d0 [ 977.333161][T23346] _copy_from_user+0x2c/0x170 [ 977.337962][T23346] wext_handle_ioctl+0xc4/0x1d0 [ 977.342911][T23346] ? call_commit_handler+0xf0/0xf0 [ 977.348059][T23346] sock_ioctl+0x143/0x710 [ 977.352392][T23346] ? sock_poll+0x410/0x410 [ 977.356817][T23346] ? bpf_lsm_file_ioctl+0x5/0x10 [ 977.361757][T23346] ? security_file_ioctl+0x7c/0xa0 [ 977.366869][T23346] ? sock_poll+0x410/0x410 [ 977.371281][T23346] __se_sys_ioctl+0xfa/0x170 [ 977.375873][T23346] do_syscall_64+0x4c/0xa0 [ 977.380292][T23346] ? clear_bhb_loop+0x60/0xb0 [ 977.384969][T23346] ? clear_bhb_loop+0x60/0xb0 [ 977.389643][T23346] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 977.395532][T23346] RIP: 0033:0x7fa44339c819 [ 977.399940][T23346] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 977.419730][T23346] RSP: 002b:00007fa4442b3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 977.428214][T23346] RAX: ffffffffffffffda RBX: 00007fa443616090 RCX: 00007fa44339c819 [ 977.436188][T23346] RDX: 0000200000000000 RSI: 0000000000008b34 RDI: 0000000000000007 [ 977.444157][T23346] RBP: 00007fa4442b3090 R08: 0000000000000000 R09: 0000000000000000 [ 977.452118][T23346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 977.460106][T23346] R13: 00007fa443616128 R14: 00007fa443616090 R15: 00007fffb7cbb978 [ 977.468093][T23346] [ 977.475445][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 977.506221][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 977.625368][T23017] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 977.640314][T23017] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 977.649522][T23017] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 977.658476][T23017] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 977.729480][T23344] device syzkaller0 entered promiscuous mode [ 979.353316][T23353] netlink: 'syz.2.6277': attribute type 39 has an invalid length. [ 979.542016][ T5919] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 979.573604][ T5919] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 979.624212][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 979.656446][ T4370] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 979.664921][ T4370] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 979.686145][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 979.825693][T23365] netlink: 'syz.2.6282': attribute type 10 has an invalid length. [ 979.846808][T23365] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6282'. [ 979.927990][T23365] bridge0: port 3(veth0_vlan) entered blocking state [ 980.054785][T23365] bridge0: port 3(veth0_vlan) entered disabled state [ 980.150297][T23365] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 980.168183][T23374] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 980.234124][T23374] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 980.265186][T23374] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 980.303469][T23374] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 980.689755][T23385] netlink: 'syz.1.6288': attribute type 39 has an invalid length. [ 981.279867][T23409] netlink: 12798 bytes leftover after parsing attributes in process `syz.2.6293'. [ 981.314365][T23409] netlink: 76 bytes leftover after parsing attributes in process `syz.2.6293'. [ 981.702175][T23421] netlink: 'syz.4.6302': attribute type 39 has an invalid length. [ 982.423759][T23426] netlink: 'syz.0.6303': attribute type 10 has an invalid length. [ 982.432019][T23426] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6303'. [ 982.469849][T23426] bridge0: port 3(veth0_vlan) entered blocking state [ 982.481005][T23426] bridge0: port 3(veth0_vlan) entered disabled state [ 982.506904][T23426] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 982.872442][T23445] netlink: 'syz.3.6309': attribute type 2 has an invalid length. [ 982.916134][T23445] netlink: 10 bytes leftover after parsing attributes in process `syz.3.6309'. [ 983.326736][T23451] netlink: 12798 bytes leftover after parsing attributes in process `syz.2.6313'. [ 983.341938][T23451] netlink: 76 bytes leftover after parsing attributes in process `syz.2.6313'. [ 983.671420][T23451] device syzkaller0 entered promiscuous mode [ 983.703720][T23462] netlink: 'syz.3.6318': attribute type 39 has an invalid length. [ 986.002957][T23470] netlink: 12798 bytes leftover after parsing attributes in process `syz.1.6319'. [ 986.012368][T23476] netlink: 76 bytes leftover after parsing attributes in process `syz.1.6319'. [ 986.635917][T23503] netlink: 'syz.3.6328': attribute type 10 has an invalid length. [ 986.728444][T23503] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6328'. [ 986.770449][T23503] bridge0: port 3(veth0_vlan) entered blocking state [ 986.781118][T23503] bridge0: port 3(veth0_vlan) entered disabled state [ 986.801079][T23503] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 986.892655][T23508] netlink: 'syz.0.6330': attribute type 39 has an invalid length. [ 988.074581][T23529] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 988.214035][T23529] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 988.374246][T23529] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 988.465768][T23529] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 989.305810][T23533] netlink: 76 bytes leftover after parsing attributes in process `syz.3.6337'. [ 989.318374][T23530] netlink: 13054 bytes leftover after parsing attributes in process `syz.4.6335'. [ 989.329678][T23532] netlink: 76 bytes leftover after parsing attributes in process `syz.4.6335'. [ 989.473778][T23551] netlink: 'syz.1.6344': attribute type 39 has an invalid length. [ 989.831212][T23571] mac80211_hwsim hwsim46 ªªªªªª: renamed from wlan0 [ 990.584474][T23590] FAULT_INJECTION: forcing a failure. [ 990.584474][T23590] name failslab, interval 1, probability 0, space 0, times 0 [ 990.597200][T23590] CPU: 0 PID: 23590 Comm: syz.0.6356 Not tainted syzkaller #0 [ 990.604687][T23590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 990.614761][T23590] Call Trace: [ 990.618047][T23590] [ 990.621321][T23590] dump_stack_lvl+0x188/0x24e [ 990.626005][T23590] ? show_regs_print_info+0x12/0x12 [ 990.631209][T23590] ? load_image+0x400/0x400 [ 990.635715][T23590] should_fail_ex+0x399/0x4d0 [ 990.640504][T23590] should_failslab+0x5/0x20 [ 990.645018][T23590] slab_pre_alloc_hook+0x59/0x310 [ 990.650063][T23590] kmem_cache_alloc+0x56/0x2f0 [ 990.654832][T23590] ? sctp_get_port_local+0x6d7/0x1510 [ 990.660230][T23590] sctp_get_port_local+0x6d7/0x1510 [ 990.665434][T23590] ? sctp_do_bind+0x990/0x990 [ 990.670129][T23590] ? sctp_bind_addr_match+0x2c/0x2a0 [ 990.675511][T23590] sctp_do_bind+0x555/0x990 [ 990.680045][T23590] sctp_connect_new_asoc+0x266/0x6a0 [ 990.685332][T23590] ? __sctp_connect+0xd80/0xd80 [ 990.690171][T23590] ? __local_bh_enable_ip+0x136/0x1c0 [ 990.695539][T23590] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 990.701081][T23590] ? security_sctp_bind_connect+0x85/0xb0 [ 990.706809][T23590] sctp_sendmsg+0x15b0/0x2940 [ 990.711500][T23590] ? aa_sk_perm+0x791/0x950 [ 990.716004][T23590] ? sctp_getsockopt+0x8a0/0x8a0 [ 990.720946][T23590] ? __might_fault+0xa6/0x120 [ 990.725617][T23590] ? aa_af_perm+0x340/0x340 [ 990.730138][T23590] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 990.736570][T23590] ? inet_sendmsg+0xe5/0x2f0 [ 990.741151][T23590] ? inet_send_prepare+0x260/0x260 [ 990.746252][T23590] ____sys_sendmsg+0x5be/0x970 [ 990.751024][T23590] ? __sys_sendmsg_sock+0x30/0x30 [ 990.756055][T23590] ? __import_iovec+0x315/0x500 [ 990.760917][T23590] ? import_iovec+0x6f/0xa0 [ 990.765532][T23590] ___sys_sendmsg+0x2a2/0x360 [ 990.770313][T23590] ? __sys_sendmsg+0x290/0x290 [ 990.775099][T23590] ? __lock_acquire+0x7d10/0x7d10 [ 990.780149][T23590] __se_sys_sendmsg+0x1bb/0x2a0 [ 990.785006][T23590] ? __x64_sys_sendmsg+0x80/0x80 [ 990.789961][T23590] ? lockdep_hardirqs_on+0x94/0x140 [ 990.795158][T23590] do_syscall_64+0x4c/0xa0 [ 990.799573][T23590] ? clear_bhb_loop+0x60/0xb0 [ 990.804245][T23590] ? clear_bhb_loop+0x60/0xb0 [ 990.809027][T23590] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 990.814915][T23590] RIP: 0033:0x7f51c919c819 [ 990.819321][T23590] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 990.838924][T23590] RSP: 002b:00007f51c73f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 990.847338][T23590] RAX: ffffffffffffffda RBX: 00007f51c9415fa0 RCX: 00007f51c919c819 [ 990.855332][T23590] RDX: 0000000004000044 RSI: 00002000000003c0 RDI: 0000000000000003 [ 990.863305][T23590] RBP: 00007f51c73f6090 R08: 0000000000000000 R09: 0000000000000000 [ 990.871362][T23590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 990.879410][T23590] R13: 00007f51c9416038 R14: 00007f51c9415fa0 R15: 00007ffc81c5d7a8 [ 990.887388][T23590] [ 991.008626][T23593] netlink: 'syz.2.6358': attribute type 39 has an invalid length. [ 991.019221][T23596] netlink: 'syz.3.6359': attribute type 2 has an invalid length. [ 991.101255][T23596] netlink: 17267 bytes leftover after parsing attributes in process `syz.3.6359'. [ 991.225601][T23603] netlink: 12798 bytes leftover after parsing attributes in process `syz.4.6357'. [ 992.168307][T23638] netlink: 'syz.3.6373': attribute type 39 has an invalid length. [ 993.091162][T23654] netlink: 'syz.2.6378': attribute type 10 has an invalid length. [ 993.138615][T23654] batman_adv: batadv0: Adding interface: netdevsim0 [ 993.150012][T23654] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 993.180343][T23654] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 993.738280][T23668] netlink: 12798 bytes leftover after parsing attributes in process `syz.1.6381'. [ 993.765434][T23668] netlink: 76 bytes leftover after parsing attributes in process `syz.1.6381'. [ 994.006110][T23668] device syzkaller0 entered promiscuous mode [ 995.160067][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 995.169350][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 998.594572][T23765] netlink: 'syz.4.6414': attribute type 21 has an invalid length. [ 998.616711][T23765] netlink: 128 bytes leftover after parsing attributes in process `syz.4.6414'. [ 998.645696][T23765] netlink: 'syz.4.6414': attribute type 4 has an invalid length. [ 998.665290][T23770] netlink: 'syz.4.6414': attribute type 3 has an invalid length. [ 998.717447][T23765] netlink: 'syz.4.6414': attribute type 5 has an invalid length. [ 998.741044][T23770] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.6414'. [ 998.764916][T23765] netlink: 3 bytes leftover after parsing attributes in process `syz.4.6414'. [ 1000.350044][T23814] FAULT_INJECTION: forcing a failure. [ 1000.350044][T23814] name failslab, interval 1, probability 0, space 0, times 0 [ 1000.389257][T23814] CPU: 0 PID: 23814 Comm: syz.0.6428 Not tainted syzkaller #0 [ 1000.396778][T23814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1000.406863][T23814] Call Trace: [ 1000.410166][T23814] [ 1000.413298][T23814] dump_stack_lvl+0x188/0x24e [ 1000.418467][T23814] ? show_regs_print_info+0x12/0x12 [ 1000.423711][T23814] ? load_image+0x400/0x400 [ 1000.428243][T23814] ? __might_sleep+0xd0/0xd0 [ 1000.432859][T23814] ? __lock_acquire+0x7d10/0x7d10 [ 1000.437975][T23814] should_fail_ex+0x399/0x4d0 [ 1000.442686][T23814] should_failslab+0x5/0x20 [ 1000.447211][T23814] slab_pre_alloc_hook+0x59/0x310 [ 1000.452259][T23814] ? br_netlink_fini+0x30/0x30 [ 1000.457054][T23814] kmem_cache_alloc_node+0x5a/0x320 [ 1000.462280][T23814] ? __alloc_skb+0xfc/0x7e0 [ 1000.466852][T23814] __alloc_skb+0xfc/0x7e0 [ 1000.471230][T23814] rtmsg_ifinfo_build_skb+0x80/0x190 [ 1000.476578][T23814] rtnetlink_event+0xd1/0x1a0 [ 1000.481294][T23814] raw_notifier_call_chain+0xcb/0x160 [ 1000.486691][T23814] dev_set_mac_address+0x2e8/0x400 [ 1000.491811][T23814] ? dev_pre_changeaddr_notify+0x120/0x120 [ 1000.497844][T23814] ? rwsem_write_trylock+0x135/0x1c0 [ 1000.503134][T23814] ? clear_nonspinnable+0x60/0x60 [ 1000.508181][T23814] ? trace_contention_end+0x5f/0x170 [ 1000.513465][T23814] ? full_name_hash+0x8e/0xe0 [ 1000.518239][T23814] dev_set_mac_address_user+0x2d/0x50 [ 1000.523627][T23814] dev_ifsioc+0x74e/0xd40 [ 1000.527996][T23814] ? dev_ioctl+0xe80/0xe80 [ 1000.532533][T23814] ? apparmor_capable+0x12c/0x190 [ 1000.537600][T23814] ? full_name_hash+0x8e/0xe0 [ 1000.542292][T23814] ? dev_load+0x1d/0x1e0 [ 1000.546530][T23814] ? dev_load+0x1d/0x1e0 [ 1000.550781][T23814] dev_ioctl+0x55e/0xe80 [ 1000.555065][T23814] sock_do_ioctl+0x245/0x320 [ 1000.559685][T23814] ? sock_show_fdinfo+0xb0/0xb0 [ 1000.564550][T23814] sock_ioctl+0x4d2/0x710 [ 1000.568964][T23814] ? sock_poll+0x410/0x410 [ 1000.573474][T23814] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1000.578688][T23814] ? security_file_ioctl+0x7c/0xa0 [ 1000.583844][T23814] ? sock_poll+0x410/0x410 [ 1000.588286][T23814] __se_sys_ioctl+0xfa/0x170 [ 1000.592913][T23814] do_syscall_64+0x4c/0xa0 [ 1000.597385][T23814] ? clear_bhb_loop+0x60/0xb0 [ 1000.602101][T23814] ? clear_bhb_loop+0x60/0xb0 [ 1000.606811][T23814] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1000.612777][T23814] RIP: 0033:0x7f51c919c819 [ 1000.617192][T23814] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1000.636800][T23814] RSP: 002b:00007f51c73d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1000.645388][T23814] RAX: ffffffffffffffda RBX: 00007f51c9416090 RCX: 00007f51c919c819 [ 1000.653366][T23814] RDX: 0000200000000000 RSI: 0000000000008924 RDI: 000000000000000c [ 1000.661331][T23814] RBP: 00007f51c73d5090 R08: 0000000000000000 R09: 0000000000000000 [ 1000.669380][T23814] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1000.677353][T23814] R13: 00007f51c9416128 R14: 00007f51c9416090 R15: 00007ffc81c5d7a8 [ 1000.685356][T23814] [ 1000.720918][T23805] netlink: 1030 bytes leftover after parsing attributes in process `syz.1.6427'. [ 1000.966131][T23829] FAULT_INJECTION: forcing a failure. [ 1000.966131][T23829] name failslab, interval 1, probability 0, space 0, times 0 [ 1001.048021][T23829] CPU: 0 PID: 23829 Comm: syz.3.6435 Not tainted syzkaller #0 [ 1001.055550][T23829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1001.065780][T23829] Call Trace: [ 1001.069058][T23829] [ 1001.071992][T23829] dump_stack_lvl+0x188/0x24e [ 1001.076706][T23829] ? show_regs_print_info+0x12/0x12 [ 1001.081907][T23829] ? load_image+0x400/0x400 [ 1001.086501][T23829] ? __lock_acquire+0x7d10/0x7d10 [ 1001.091548][T23829] should_fail_ex+0x399/0x4d0 [ 1001.096239][T23829] should_failslab+0x5/0x20 [ 1001.100742][T23829] slab_pre_alloc_hook+0x59/0x310 [ 1001.105787][T23829] ? apparmor_sk_alloc_security+0x74/0x100 [ 1001.111688][T23829] __kmem_cache_alloc_node+0x4f/0x260 [ 1001.117170][T23829] ? apparmor_sk_alloc_security+0x74/0x100 [ 1001.122974][T23829] kmalloc_trace+0x26/0xe0 [ 1001.127400][T23829] apparmor_sk_alloc_security+0x74/0x100 [ 1001.133131][T23829] security_sk_alloc+0x6a/0xa0 [ 1001.137984][T23829] sk_prot_alloc+0x101/0x210 [ 1001.142586][T23829] sk_alloc+0x36/0x340 [ 1001.146653][T23829] ? rcu_read_unlock+0x8c/0xa0 [ 1001.151433][T23829] unix_create1+0xb3/0x710 [ 1001.155870][T23829] unix_create+0x143/0x1f0 [ 1001.160292][T23829] __sock_create+0x4a2/0x940 [ 1001.164899][T23829] __sys_socketpair+0x232/0x540 [ 1001.169760][T23829] __x64_sys_socketpair+0x97/0xb0 [ 1001.174827][T23829] do_syscall_64+0x4c/0xa0 [ 1001.179246][T23829] ? clear_bhb_loop+0x60/0xb0 [ 1001.183923][T23829] ? clear_bhb_loop+0x60/0xb0 [ 1001.188618][T23829] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1001.194598][T23829] RIP: 0033:0x7f1e5a99c819 [ 1001.199023][T23829] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1001.218716][T23829] RSP: 002b:00007f1e5b8f9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 1001.227313][T23829] RAX: ffffffffffffffda RBX: 00007f1e5ac15fa0 RCX: 00007f1e5a99c819 [ 1001.235399][T23829] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000001 [ 1001.243374][T23829] RBP: 00007f1e5b8f9090 R08: 0000000000000000 R09: 0000000000000000 [ 1001.251350][T23829] R10: 00002000000029c0 R11: 0000000000000246 R12: 0000000000000001 [ 1001.259336][T23829] R13: 00007f1e5ac16038 R14: 00007f1e5ac15fa0 R15: 00007ffef7e84dc8 [ 1001.267341][T23829] [ 1003.262597][T23884] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.6452'. [ 1003.460137][T23884] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6452'. [ 1003.941623][T23895] netlink: 'syz.0.6456': attribute type 10 has an invalid length. [ 1004.021457][T23895] device geneve0 entered promiscuous mode [ 1004.136602][T23895] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 1005.458008][T23950] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.6475'. [ 1006.242148][T23974] netlink: 12542 bytes leftover after parsing attributes in process `syz.2.6481'. [ 1006.326673][T23974] netlink: 76 bytes leftover after parsing attributes in process `syz.2.6481'. [ 1006.874042][T23974] device syzkaller0 entered promiscuous mode [ 1009.792314][T24019] netlink: 'syz.2.6496': attribute type 10 has an invalid length. [ 1009.835220][T24019] device geneve0 entered promiscuous mode [ 1010.022659][T24019] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 1010.151213][T24050] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.6505'. [ 1010.446153][T24058] netlink: 12542 bytes leftover after parsing attributes in process `syz.0.6507'. [ 1010.481874][T24058] netlink: 76 bytes leftover after parsing attributes in process `syz.0.6507'. [ 1010.522798][T24063] netlink: 'syz.4.6510': attribute type 21 has an invalid length. [ 1010.537119][T24063] netlink: 128 bytes leftover after parsing attributes in process `syz.4.6510'. [ 1010.553239][T24063] netlink: 'syz.4.6510': attribute type 5 has an invalid length. [ 1010.561366][T24063] netlink: 'syz.4.6510': attribute type 6 has an invalid length. [ 1010.579280][T24063] netlink: 3 bytes leftover after parsing attributes in process `syz.4.6510'. [ 1010.770453][T24072] FAULT_INJECTION: forcing a failure. [ 1010.770453][T24072] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1010.817774][T24072] CPU: 0 PID: 24072 Comm: syz.2.6513 Not tainted syzkaller #0 [ 1010.825310][T24072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1010.835476][T24072] Call Trace: [ 1010.838777][T24072] [ 1010.841733][T24072] dump_stack_lvl+0x188/0x24e [ 1010.846469][T24072] ? show_regs_print_info+0x12/0x12 [ 1010.851883][T24072] ? load_image+0x400/0x400 [ 1010.856416][T24072] ? __lock_acquire+0x7d10/0x7d10 [ 1010.861470][T24072] ? trace_call_bpf+0x5d6/0x6b0 [ 1010.866354][T24072] should_fail_ex+0x399/0x4d0 [ 1010.871149][T24072] _copy_from_user+0x2c/0x170 [ 1010.875889][T24072] __sys_bpf+0x2ea/0x780 [ 1010.879783][T24058] device syzkaller0 entered promiscuous mode [ 1010.880230][T24072] ? bpf_link_show_fdinfo+0x380/0x380 [ 1010.880275][T24072] ? lock_chain_count+0x20/0x20 [ 1010.880308][T24072] __x64_sys_bpf+0x78/0x90 [ 1010.901270][T24072] do_syscall_64+0x4c/0xa0 [ 1010.905717][T24072] ? clear_bhb_loop+0x60/0xb0 [ 1010.910593][T24072] ? clear_bhb_loop+0x60/0xb0 [ 1010.915369][T24072] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1010.921363][T24072] RIP: 0033:0x7fa44339c819 [ 1010.925832][T24072] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1010.945527][T24072] RSP: 002b:00007fa4442d4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1010.953939][T24072] RAX: ffffffffffffffda RBX: 00007fa443615fa0 RCX: 00007fa44339c819 [ 1010.962337][T24072] RDX: 000000000000000c RSI: 0000200000000500 RDI: 000000000000000a [ 1010.970307][T24072] RBP: 00007fa4442d4090 R08: 0000000000000000 R09: 0000000000000000 [ 1010.978272][T24072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1010.986239][T24072] R13: 00007fa443616038 R14: 00007fa443615fa0 R15: 00007fffb7cbb978 [ 1010.994217][T24072] [ 1013.312486][T24091] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.6519'. [ 1013.537568][T24098] netlink: 12542 bytes leftover after parsing attributes in process `syz.2.6530'. [ 1013.568766][T24102] netlink: 76 bytes leftover after parsing attributes in process `syz.2.6530'. [ 1013.979289][T24098] device syzkaller0 entered promiscuous mode [ 1013.995332][T24096] netlink: 'syz.1.6521': attribute type 10 has an invalid length. [ 1014.009423][T24096] device geneve0 entered promiscuous mode [ 1014.089244][T24096] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 1016.477549][T24150] netlink: 'syz.1.6537': attribute type 21 has an invalid length. [ 1016.504594][T24150] netlink: 128 bytes leftover after parsing attributes in process `syz.1.6537'. [ 1016.518201][T24150] netlink: 'syz.1.6537': attribute type 5 has an invalid length. [ 1016.543394][T24150] netlink: 'syz.1.6537': attribute type 6 has an invalid length. [ 1016.561742][T24150] netlink: 3 bytes leftover after parsing attributes in process `syz.1.6537'. [ 1017.326868][T24183] netlink: 12542 bytes leftover after parsing attributes in process `syz.1.6548'. [ 1017.382550][T24183] netlink: 76 bytes leftover after parsing attributes in process `syz.1.6548'. [ 1017.807849][T24208] FAULT_INJECTION: forcing a failure. [ 1017.807849][T24208] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1017.822342][T24183] device syzkaller0 entered promiscuous mode [ 1017.839461][T24208] CPU: 1 PID: 24208 Comm: syz.2.6555 Not tainted syzkaller #0 [ 1017.847011][T24208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1017.857175][T24208] Call Trace: [ 1017.860561][T24208] [ 1017.863521][T24208] dump_stack_lvl+0x188/0x24e [ 1017.868253][T24208] ? show_regs_print_info+0x12/0x12 [ 1017.873496][T24208] ? load_image+0x400/0x400 [ 1017.878066][T24208] ? __lock_acquire+0x7d10/0x7d10 [ 1017.883134][T24208] should_fail_ex+0x399/0x4d0 [ 1017.887848][T24208] _copy_from_user+0x2c/0x170 [ 1017.892589][T24208] ___sys_recvmsg+0x172/0x590 [ 1017.897325][T24208] ? __sys_recvmsg+0x290/0x290 [ 1017.902138][T24208] ? seqcount_lockdep_reader_access+0x177/0x1d0 [ 1017.908524][T24208] ? __fget_files+0x43d/0x4b0 [ 1017.913262][T24208] __x64_sys_recvmsg+0x205/0x2e0 [ 1017.918327][T24208] ? perf_trace_preemptirq_template+0x268/0x320 [ 1017.924607][T24208] ? ___sys_recvmsg+0x590/0x590 [ 1017.929942][T24208] ? lockdep_hardirqs_on+0x94/0x140 [ 1017.935182][T24208] do_syscall_64+0x4c/0xa0 [ 1017.939627][T24208] ? clear_bhb_loop+0x60/0xb0 [ 1017.944332][T24208] ? clear_bhb_loop+0x60/0xb0 [ 1017.949040][T24208] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1017.954999][T24208] RIP: 0033:0x7fa44339c819 [ 1017.959438][T24208] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1017.979077][T24208] RSP: 002b:00007fa4442d4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1017.987528][T24208] RAX: ffffffffffffffda RBX: 00007fa443615fa0 RCX: 00007fa44339c819 [ 1017.995524][T24208] RDX: 0000000000000000 RSI: 00002000000004c0 RDI: 0000000000000008 [ 1018.003526][T24208] RBP: 00007fa4442d4090 R08: 0000000000000000 R09: 0000000000000000 [ 1018.011527][T24208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1018.019526][T24208] R13: 00007fa443616038 R14: 00007fa443615fa0 R15: 00007fffb7cbb978 [ 1018.027548][T24208] [ 1020.304727][T24233] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6560'. [ 1020.418968][T24235] FAULT_INJECTION: forcing a failure. [ 1020.418968][T24235] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1020.480559][T24235] CPU: 1 PID: 24235 Comm: syz.2.6561 Not tainted syzkaller #0 [ 1020.488088][T24235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1020.498186][T24235] Call Trace: [ 1020.501512][T24235] [ 1020.504451][T24235] dump_stack_lvl+0x188/0x24e [ 1020.509209][T24235] ? show_regs_print_info+0x12/0x12 [ 1020.514637][T24235] ? load_image+0x400/0x400 [ 1020.519167][T24235] ? __might_fault+0xa6/0x120 [ 1020.524044][T24235] should_fail_ex+0x399/0x4d0 [ 1020.528741][T24235] copyin+0x1b/0x120 [ 1020.532671][T24235] _copy_from_iter+0x447/0x1130 [ 1020.537540][T24235] ? copyout_mc+0x110/0x110 [ 1020.542059][T24235] ? __virt_addr_valid+0x188/0x540 [ 1020.547182][T24235] ? __virt_addr_valid+0x188/0x540 [ 1020.552300][T24235] ? __virt_addr_valid+0x465/0x540 [ 1020.557422][T24235] ? __check_object_size+0x500/0xa40 [ 1020.562719][T24235] netlink_sendmsg+0x755/0xbd0 [ 1020.567514][T24235] ? netlink_getsockopt+0x550/0x550 [ 1020.572735][T24235] ? aa_sock_msg_perm+0x94/0x150 [ 1020.577685][T24235] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1020.582975][T24235] ? security_socket_sendmsg+0x7c/0xa0 [ 1020.588446][T24235] ? netlink_getsockopt+0x550/0x550 [ 1020.593655][T24235] ____sys_sendmsg+0x5be/0x970 [ 1020.598440][T24235] ? __sys_sendmsg_sock+0x30/0x30 [ 1020.603480][T24235] ? __import_iovec+0x315/0x500 [ 1020.608434][T24235] ? import_iovec+0x6f/0xa0 [ 1020.612954][T24235] ___sys_sendmsg+0x2a2/0x360 [ 1020.617648][T24235] ? __sys_sendmsg+0x290/0x290 [ 1020.622478][T24235] __se_sys_sendmsg+0x1bb/0x2a0 [ 1020.627344][T24235] ? __x64_sys_sendmsg+0x80/0x80 [ 1020.632305][T24235] ? lockdep_hardirqs_on+0x94/0x140 [ 1020.637518][T24235] do_syscall_64+0x4c/0xa0 [ 1020.641948][T24235] ? clear_bhb_loop+0x60/0xb0 [ 1020.646634][T24235] ? clear_bhb_loop+0x60/0xb0 [ 1020.651414][T24235] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1020.657504][T24235] RIP: 0033:0x7fa44339c819 [ 1020.662015][T24235] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1020.681645][T24235] RSP: 002b:00007fa4442d4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1020.690070][T24235] RAX: ffffffffffffffda RBX: 00007fa443615fa0 RCX: 00007fa44339c819 [ 1020.698050][T24235] RDX: 0000000000040000 RSI: 0000200000000040 RDI: 0000000000000003 [ 1020.706023][T24235] RBP: 00007fa4442d4090 R08: 0000000000000000 R09: 0000000000000000 [ 1020.714001][T24235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1020.721973][T24235] R13: 00007fa443616038 R14: 00007fa443615fa0 R15: 00007fffb7cbb978 [ 1020.729979][T24235] [ 1021.242038][T24260] netlink: 12542 bytes leftover after parsing attributes in process `syz.3.6570'. [ 1021.286335][T24260] netlink: 76 bytes leftover after parsing attributes in process `syz.3.6570'. [ 1021.443453][T24270] netlink: 212940 bytes leftover after parsing attributes in process `syz.4.6574'. [ 1021.604836][T24260] device syzkaller0 entered promiscuous mode [ 1021.659900][T20556] Bluetooth: hci2: unexpected event 0x16 length: 151 > 6 [ 1022.829606][T24297] FAULT_INJECTION: forcing a failure. [ 1022.829606][T24297] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1022.843422][T20556] Bluetooth: hci4: command 0x0406 tx timeout [ 1022.861303][T24297] CPU: 0 PID: 24297 Comm: syz.4.6582 Not tainted syzkaller #0 [ 1022.868797][T24297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1022.878950][T24297] Call Trace: [ 1022.882341][T24297] [ 1022.885271][T24297] dump_stack_lvl+0x188/0x24e [ 1022.889979][T24297] ? show_regs_print_info+0x12/0x12 [ 1022.895218][T24297] ? load_image+0x400/0x400 [ 1022.899757][T24297] ? __lock_acquire+0x7d10/0x7d10 [ 1022.904803][T24297] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 1022.910558][T24297] should_fail_ex+0x399/0x4d0 [ 1022.915255][T24297] _copy_from_user+0x2c/0x170 [ 1022.919945][T24297] ___sys_sendmsg+0x1c3/0x360 [ 1022.924925][T24297] ? __sys_sendmsg+0x290/0x290 [ 1022.929749][T24297] ? __lock_acquire+0x7d10/0x7d10 [ 1022.934835][T24297] __se_sys_sendmsg+0x1bb/0x2a0 [ 1022.939717][T24297] ? __x64_sys_sendmsg+0x80/0x80 [ 1022.944688][T24297] ? lockdep_hardirqs_on+0x94/0x140 [ 1022.950009][T24297] do_syscall_64+0x4c/0xa0 [ 1022.954479][T24297] ? clear_bhb_loop+0x60/0xb0 [ 1022.959355][T24297] ? clear_bhb_loop+0x60/0xb0 [ 1022.964041][T24297] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1022.969944][T24297] RIP: 0033:0x7f5530b9c819 [ 1022.974374][T24297] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1022.994069][T24297] RSP: 002b:00007f5531a90028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1023.002497][T24297] RAX: ffffffffffffffda RBX: 00007f5530e16180 RCX: 00007f5530b9c819 [ 1023.010471][T24297] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 000000000000000b [ 1023.018449][T24297] RBP: 00007f5531a90090 R08: 0000000000000000 R09: 0000000000000000 [ 1023.026459][T24297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1023.034628][T24297] R13: 00007f5530e16218 R14: 00007f5530e16180 R15: 00007ffd0a6fb928 [ 1023.042634][T24297] [ 1023.928772][T24294] netlink: 'syz.4.6582': attribute type 21 has an invalid length. [ 1023.936909][T24294] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6582'. [ 1024.100673][T24302] netlink: 10 bytes leftover after parsing attributes in process `syz.1.6583'. [ 1024.172417][T24303] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.6583'. [ 1024.217620][T24312] netlink: 'syz.3.6586': attribute type 21 has an invalid length. [ 1024.269268][T24312] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6586'. [ 1025.000659][T20556] Bluetooth: hci4: unexpected event 0x16 length: 151 > 6 [ 1025.129372][T24344] netlink: 12542 bytes leftover after parsing attributes in process `syz.2.6597'. [ 1025.200133][T24344] netlink: 76 bytes leftover after parsing attributes in process `syz.2.6597'. [ 1025.568529][T24344] device syzkaller0 entered promiscuous mode [ 1028.740061][T24412] BUG: kernel NULL pointer dereference, address: 0000000000000000 [ 1028.747939][T24412] #PF: supervisor instruction fetch in kernel mode [ 1028.754467][T24412] #PF: error_code(0x0010) - not-present page [ 1028.760484][T24412] PGD 74db2067 P4D 74db2067 PUD 0 [ 1028.765626][T24412] Oops: 0010 [#1] PREEMPT SMP KASAN [ 1028.770859][T24412] CPU: 1 PID: 24412 Comm: syz.0.6618 Not tainted syzkaller #0 [ 1028.778444][T24412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1028.788620][T24412] RIP: 0010:0x0 [ 1028.792112][T24412] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 1028.799607][T24412] RSP: 0018:ffffc90005847258 EFLAGS: 00010246 [ 1028.805708][T24412] RAX: 1ffffffff162d617 RBX: 1ffff92000b08e5c RCX: 0000000000000000 [ 1028.813796][T24412] RDX: ffffc90005847300 RSI: 0000000000000001 RDI: ffff88804015c000 [ 1028.821985][T24412] RBP: ffffc90005847370 R08: 0000000000000f9f R09: 0000000000400000 [ 1028.830085][T24412] R10: 000000000001f3e8 R11: ffffed100802b808 R12: ffffe8ffffd4c9f8 [ 1028.838096][T24412] R13: ffffffff8b16b0b8 R14: 0000000000000000 R15: ffff88804015c000 [ 1028.846101][T24412] FS: 00007f51c73d56c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1028.855072][T24412] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1028.861685][T24412] CR2: ffffffffffffffd6 CR3: 000000005ac72000 CR4: 00000000003506e0 [ 1028.869691][T24412] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 1028.877768][T24412] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1028.885755][T24412] Call Trace: [ 1028.889128][T24412] [ 1028.892085][T24412] bond_xdp_xmit+0x31e/0x550 [ 1028.896781][T24412] ? __rwlock_init+0x140/0x140 [ 1028.901546][T24412] ? bond_xdp_xmit+0x94/0x550 [ 1028.906245][T24412] ? bond_xdp+0x850/0x850 [ 1028.910611][T24412] ? _raw_spin_unlock+0x24/0x40 [ 1028.915485][T24412] ? page_pool_put_defragged_page+0x427/0x660 [ 1028.921570][T24412] bq_xmit_all+0xd3f/0x11b0 [ 1028.926090][T24412] ? __lock_acquire+0x7d10/0x7d10 [ 1028.931222][T24412] ? __dev_flush+0x1b0/0x1b0 [ 1028.935834][T24412] ? trace_event_raw_event_lock+0x250/0x250 [ 1028.941839][T24412] ? __next_zones_zonelist+0x99/0x120 [ 1028.947224][T24412] ? rcu_is_watching+0x11/0xa0 [ 1028.952005][T24412] ? rcu_lockdep_current_cpu_online+0x33/0x120 [ 1028.958259][T24412] ? rcu_read_lock_bh_held+0x76/0xf0 [ 1028.963550][T24412] ? rcu_read_lock_held+0x40/0x40 [ 1028.968581][T24412] bq_enqueue+0x337/0x3d0 [ 1028.972925][T24412] dev_map_enqueue_multi+0xecf/0x1020 [ 1028.978325][T24412] ? dev_map_enqueue+0x340/0x340 [ 1028.983271][T24412] ? rcu_lockdep_current_cpu_online+0x33/0x120 [ 1028.989610][T24412] ? rcu_read_lock_held+0x40/0x40 [ 1028.994816][T24412] ? rcu_is_watching+0x11/0xa0 [ 1028.999768][T24412] xdp_do_redirect_frame+0x477/0x650 [ 1029.005073][T24412] bpf_test_run_xdp_live+0xa99/0x1a90 [ 1029.010451][T24412] ? 0xffffffffa0004440 [ 1029.014613][T24412] ? bpf_test_run_xdp_live+0x518/0x1a90 [ 1029.020165][T24412] ? xdp_convert_md_to_buff+0x330/0x330 [ 1029.025735][T24412] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 1029.032159][T24412] ? bpf_test_init+0x119/0x140 [ 1029.036927][T24412] ? xdp_convert_md_to_buff+0x5b/0x330 [ 1029.042395][T24412] bpf_prog_test_run_xdp+0x736/0xf10 [ 1029.047696][T24412] ? dev_put+0x80/0x80 [ 1029.051775][T24412] ? dev_put+0x80/0x80 [ 1029.055844][T24412] bpf_prog_test_run+0x31e/0x390 [ 1029.060792][T24412] __sys_bpf+0x62b/0x780 [ 1029.065047][T24412] ? bpf_link_show_fdinfo+0x380/0x380 [ 1029.070445][T24412] ? lock_chain_count+0x20/0x20 [ 1029.075438][T24412] __x64_sys_bpf+0x78/0x90 [ 1029.079915][T24412] do_syscall_64+0x4c/0xa0 [ 1029.084352][T24412] ? clear_bhb_loop+0x60/0xb0 [ 1029.089052][T24412] ? clear_bhb_loop+0x60/0xb0 [ 1029.093743][T24412] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1029.099670][T24412] RIP: 0033:0x7f51c919c819 [ 1029.104108][T24412] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1029.123937][T24412] RSP: 002b:00007f51c73d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1029.132454][T24412] RAX: ffffffffffffffda RBX: 00007f51c9416090 RCX: 00007f51c919c819 [ 1029.140436][T24412] RDX: 0000000000000050 RSI: 0000200000000280 RDI: 000000000000000a [ 1029.148508][T24412] RBP: 00007f51c9232c91 R08: 0000000000000000 R09: 0000000000000000 [ 1029.156492][T24412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1029.164465][T24412] R13: 00007f51c9416128 R14: 00007f51c9416090 R15: 00007ffc81c5d7a8 [ 1029.172453][T24412] [ 1029.175480][T24412] Modules linked in: [ 1029.179385][T24412] CR2: 0000000000000000 [ 1029.183544][T24412] ---[ end trace 0000000000000000 ]--- [ 1029.189070][T24412] RIP: 0010:0x0 [ 1029.192536][T24412] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 1029.199904][T24412] RSP: 0018:ffffc90005847258 EFLAGS: 00010246 [ 1029.206067][T24412] RAX: 1ffffffff162d617 RBX: 1ffff92000b08e5c RCX: 0000000000000000 [ 1029.214043][T24412] RDX: ffffc90005847300 RSI: 0000000000000001 RDI: ffff88804015c000 [ 1029.222023][T24412] RBP: ffffc90005847370 R08: 0000000000000f9f R09: 0000000000400000 [ 1029.229998][T24412] R10: 000000000001f3e8 R11: ffffed100802b808 R12: ffffe8ffffd4c9f8 [ 1029.238670][T24412] R13: ffffffff8b16b0b8 R14: 0000000000000000 R15: ffff88804015c000 [ 1029.246819][T24412] FS: 00007f51c73d56c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1029.256189][T24412] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1029.262918][T24412] CR2: ffffffffffffffd6 CR3: 000000005ac72000 CR4: 00000000003506e0 [ 1029.270896][T24412] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 1029.278872][T24412] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1029.286869][T24412] Kernel panic - not syncing: Fatal exception in interrupt [ 1029.294178][T24412] Kernel Offset: disabled [ 1029.298584][T24412] Rebooting in 86400 seconds..