last executing test programs: 9.142928555s ago: executing program 1 (id=6153): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0xa020, 0x0, 0x1780, 0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89b1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0x0, 0x7}, 0x0, 0x8, 0x0, 0x4, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x80, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000780)={'pim6reg0\x00', 0x400}) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x202}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="8500000002"], 0x0}, 0x94) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, &(0x7f0000000080)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x42, &(0x7f0000000040), 0x3b) socket$kcm(0x2, 0x1, 0x84) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xa, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180200000300000000000000000000008500000027000000850000000800000095000000000000001644ac29e83946cfc7968102c7dc48c4a4fbacec981fda152b00c5ebc7733d2ed95abd36a3210100000000000000e3368079af8ecb3664"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe3f}, 0x46) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) mkdir(&(0x7f0000000040)='./file0\x00', 0x70) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r1, 0x18000000000002a0, 0x12, 0x0, &(0x7f0000000080)="5af21a8fb0f0b3d3d13731fda883ccc26d2a", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 8.340095604s ago: executing program 1 (id=6159): perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x2) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x50) r2 = perf_event_open$cgroup(&(0x7f0000000740)={0x4, 0x80, 0x6, 0xaa, 0xdf, 0x1, 0x0, 0x8726, 0x3004, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x101, 0x1, @perf_bp={&(0x7f0000000280), 0x9}, 0x110909, 0x3, 0x0, 0x4, 0x10, 0x6f86, 0xff, 0x0, 0x5, 0x0, 0x40}, 0xffffffffffffffff, 0xf, r0, 0x8) bpf$TOKEN_CREATE(0x24, &(0x7f00000007c0)={0x0, r2}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000ba05000018150000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000807b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000001e00000018010000756c6c2500000000002020207b1af8ff00050000bfa100000000000007010000f8ffffffb702000008000000b703000009000000850000002300000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r5, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r3) socket$kcm(0x10, 0x2, 0x10) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r1, 0x0, 0x0}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r6 = syz_clone(0x0, 0x0, 0x0, &(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500)="e98246f476224f8113757692122a6a72be8f900d8f503c6edc5acec5f1ef6d9e6b9a5342cb0b17c52aa4527a93ee0089622b2f8c77154e38600568d0b6bc9b14e56f4e55befa7252b02d66627f02293c7b3f6e0f2da5af5fedc6e9423e8ef67a314ab44af05ac4b46339383c7a030a2b9ff22121d9a9d6a7f6dcd0535b58537347bf4bd9d7b0083a63488c5ef9e274f1912df893155d00a99deaadad809d54b7a83adf86acc03167432b7a19fa1dcf4d987a82baaf6f8eec34784fe6f69b12") perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x2, 0x3, 0x48, 0x3, 0x0, 0x6, 0x8b, 0x7, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x3, 0x3465}, 0x21281, 0x5c0695fe, 0x1, 0x0, 0x401, 0x9, 0x6, 0x0, 0x9, 0x0, 0x1}, r6, 0xf, 0xffffffffffffffff, 0xa) write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0), 0x12) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8924, &(0x7f0000000000)={'wlan1\x00', @random="0100c3201000"}) 8.027172352s ago: executing program 1 (id=6164): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x2f9, 0x403d87c21de2ff3f, &(0x7f0000000040)="b90103606989068c3c27004065582f9e0ff008001fffffe1ffff8100632f080686dd00017f020001be", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="9209558f0c5fb25cd57f98113135c3171b8b331fbc04f0e6955a796ff8e3aae3cac46cec3030dfc999058aea01f0e6dcf2f9d480d328655aca003927bd50ed49d4843c8a0a2a4b26ceb747947200bd644c85e7a8a7d7cfce840c02a7d69c9e0bca410f64d43290abbbf3131e1fa8bd8c3e5f19d5a491d3d4c1a0fe47de9eebaf073ac3da6256bdb681d18fbd607c9b0d710442bcf78bc36fd3c035812bde582a262bff0e4d6181c818fccf542868c6e602d97bea23a101955dc76bcc984142ab305387aa348566d688edd291a3e9d08952adbdf60462bb7f7faebcdfccf17115708b0d73d0f3a469ce7d8374219b3f92c92bcec4958d474bb281c26691949d054b784a5866f081e53eb9cfd7"}, 0x28) 7.913919045s ago: executing program 1 (id=6165): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000040000100800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4000000) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001ec0)={&(0x7f0000001cc0)="ac74ca859b30d3ef5612ccb813236bf166abbd540515d82bf13384b2f96904e79435582598c0a6ee554b02df12d60214104c20b8cfc7e55ca2818a8c23bdf79b49fa6952f478d540039cb3e82d2f861c3ba5b5e36a98810acb50cb8a8be4a4f9cc962ec91845568c708411db936f8e4779c6b992ca8ef932bc62b21cc91211c1b0d73b3b27668def21a1b0da7a29b96626626601b47f1d3eebbde84a2175a4a8af45a0a215ef96ebf4f0f05c61e17518e0737da2dd35416f477a6af59d2bedd1a425d0f3dd9f", &(0x7f0000001dc0)=""/56, &(0x7f0000001e00)="112b0d4af7500744bc38922f530b08627c99d3100294bc3796bc71b2c0734d0dc9617610b29990f71366d9f0273be0d0cdb84fad162d8e8bc721427ed3eefef9574146043745", &(0x7f0000001e80)="e6bd6dcd726264b195ac4252d573895f6f", 0x174fb77c, r0, 0x4}, 0x38) socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, @perf_config_ext={0xfffffffffffff56a, 0x100000000}, 0x250a, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b81, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x9, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000140)="d80000001c0081044e81f782db44b904021d08020e0000008100e0a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) sendmsg(r1, &(0x7f0000001c80)={&(0x7f00000003c0)=@in6={0xa, 0x4e23, 0x0, @loopback, 0x601a}, 0x80, &(0x7f0000001ac0)=[{&(0x7f0000000580)="45d3e0eabe372e8f633559ce505d62ed876a55331d66302a485ab9878918f2674531f681dd95904d7ea48b4bf25fbe26a1fd66ee7a43976e15ef6f4990e746013ca2d6496565c8aba9503ea5c88bda8fbaefe09b33e5e29f1d138b05ce617757bf2cc67904c31f224da732beb6fa778ddbf12f004a53c41a630aad9519b9f3135687784fb0ddf9da4a54e9968964bdd3d50fa95bc33e902818f163a1899c68efabad5e0ff38e87cbe9048f049b906adca36c8963426cb59582a38fdce782ef28a218da7dcd", 0xc5}, {&(0x7f0000000680)="61901af1d4a2a503d609079ee7f2d6cd4f27d92bc3cc5b32b388bd9efc6bde9c904b11aff38d834f77f01ec54518ec93fa4c174e2fc456eae7ac09e0f95614cf9b8b4ff54d510d9682d768b213c9580c49c68169db6a4eb5a15277f67e51346d5be2", 0x62}, {&(0x7f0000000700)="38603a9a287baa14153bda86f8082b91fde4e13004253137d99fc2142501b7088a479719894c2c93f9eaa8ff60f7150be4060b5347ab55161d0d1e03", 0x3c}, {&(0x7f0000000780)="5854b2c05bd79aaf3a0654fedba66d60851573300d82f150925982eca6e4f92211f30731165c4feb37fe706d4e1947b68a8cbf2f025a664fc53adf8a55ed8559c4587561d1849d3d30f986aab7a756e09f8e", 0x52}, {&(0x7f0000000800)}, {&(0x7f0000000840)="cf956e8f2afc58572cf29516de495458863dbf7041", 0x15}, {&(0x7f0000000980)="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", 0x1000}, {&(0x7f0000001980)="f10c112e9e0e", 0x6}, {&(0x7f00000019c0)="abec27acaf7f41faaec749b344782aa06f655b305c3e5315a5f86268acaa8f33f11b83f595e5089af3cc55094539365757d52a7102e6a52f68b9f5ddbc7c3317968ed7fc11cab8b729c9eb074fa9a108844674a194e2f506e058933361de07acd90274d06e4187ee073d25136a8d81b04b8ae48baabb073e6bddc501a8438a389905dd53b47d92514c37e910334e63a21129e152dadfba981a5ac9069670c81cb0fd3e058d2c5a6fad1655bfdc028f849d07594ef41222c962a8c574", 0xbc}, {&(0x7f0000001a80)="9277165253fc3f61790b7cbbd1e73500370545f41fde213942b243f5bae37ec1c2d2777f", 0x24}], 0xa, &(0x7f0000001b80)=[{0x80, 0x114, 0x800, "c417e943d955c5675c1f1872016b3d86dc2bec4dfb7167b37bfa2a62276dac8fcc6be857cd6e7ae9dd092d445474a77f8181283ec8c0369360be3d598e509ca0a68c0bf9b74a810b3a6eeb09020aca2d9c2e909244d691ee8864797e8bd4daf7ffdf7209667b4bed1b28a91350"}, {0x18, 0x103, 0x5, "63d7442bd42c9a"}, {0x30, 0x110, 0x6, "1f4c575b963fad23ad7b4ba8fa2df2ec2d0d9266bb49b786b27d400b7e8c0106"}], 0xc8}, 0x2c040000) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="d80000001c0081054e81f782db44b904021d08040e000000200d10a118000c000600142603600e1208000f0000810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee0800080e408e8d8ef52a98516277ce06ebace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad8099639cace81ed0bffec193e2a9ecbee5de6ccd4d6e4ed6f3d93452a92954b43370e970189", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) sendmsg$inet(r1, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e22, @multicast1=0xe000004f}, 0x10, 0x0}, 0x4840) r4 = socket$kcm(0x10, 0x5, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="c00e020023000b02d25a80d0bcb924f93045fc60040f12", 0x17}], 0x1}, 0x4010) r5 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b9040a1d08020a000000040000a1180002003f00000000000e1208000f0100810401a80016ea1f0006400303000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08002a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_time\x00', 0x100002, 0x0) sendmsg$kcm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90124fc60", 0x14}], 0x1}, 0x0) socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x66, 0xc, 0x0, 0x0, 0x0, 0x7, 0xa0080, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x6, 0x1}, 0x8092, 0x20000003, 0x1ff, 0x4, 0x6, 0x658, 0x8, 0x0, 0x0, 0x0, 0x44000000002008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r7 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 6.157396139s ago: executing program 3 (id=6177): r0 = perf_event_open$cgroup(&(0x7f0000000380)={0x0, 0x80, 0x7, 0xff, 0x6, 0x0, 0x0, 0x22b, 0x4008c, 0x4, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x81, 0x2, @perf_bp={&(0x7f00000001c0), 0x4}, 0x20, 0x8, 0x17f, 0x1, 0x7, 0x1, 0x4, 0x0, 0x800}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x38b) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x7, 0x4, 0x40, 0x557, 0x28}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0xe, 0x40, 0x3, 0x41}, 0x50) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9b, 0x1, 0x0, 0x0, 0x0, 0x1, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x2000, 0x4, 0xfffffffe, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xd, 0x2, 0x81, 0x0, 0x0, 0x2, 0x60020, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0xfffffffffffffffc, 0x4}, 0xc800, 0x0, 0x2, 0x9, 0xb0, 0x5, 0x0, 0x0, 0xd4, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f0000000680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x9, [@volatile={0x0, 0x0, 0x0, 0x9, 0x5}, @var={0x7, 0x0, 0x0, 0xe, 0x5}, @type_tag={0x1, 0x0, 0x0, 0x12, 0x1}, @type_tag={0x1, 0x0, 0x0, 0x12, 0x3}, @union={0x0, 0x0, 0x0, 0x2, 0x0, 0x2}]}, {0x0, [0x61, 0x0, 0x0, 0x0, 0x0, 0x2e, 0x61]}}, 0x0, 0x61, 0x0, 0x0, 0x2}, 0x28) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRES64=r1], 0x48) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8901, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000480), 0x70698f34faa73687}, 0xb0, 0x0, 0x0, 0x7, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x29, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d08007b490d4f1e81f8d815000200ff05142603600e12080005007a010401a80016002000034004110000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000400)=@l2={0x1f, 0x5a6, @any, 0xfff7, 0x2}, 0x80, &(0x7f00000008c0)=[{&(0x7f00000005c0)="60d7df7c93c90b2f1dc95094aa32132641f77db2353d72e6b8eb78b772e729bbae5a5fed6053f67655d2e277c7ee12a74a840e0f4b1a9a378ba58602a0e2e649665150adec83fba1521cac9ae27d800d1bf6441c08be185f5c61322f8276dc63485727105e52c9665d2d7a038ace83e194a2fd80c41932ffff7d5953e1b16e3c0f0fb96048df7b1747d7e08de4009f0b58244d4eff3d190b147f7872f3bfdfb95068", 0xa2}, {&(0x7f00000007c0)="3b50ad85cebcbcd8213ad092efc9e14ee78df8b0847a2abeb5559738aac31b065772ecdf129d344420067521eb1af8604f17da38072415e065eccbcecf9a6afba193aed07e7ed4880c97b60bad4eb144fbcbb7ab8bca8688885f2cf0af22eb609b4915f332090dc64468949cc5dca6589019c2244b46e2bc3f9c91d8bc5bdbc5565d05e4b48b43aaaa453da99f1dcfe589b5c3f7fbc1c3baafd470be77c89886220342aa582c4af97859a56f20326718ae9ce1fff07caf0978a62ac8605a4b5b0de416335e", 0xc5}], 0x2, &(0x7f0000000900)=[@timestamping={{0x14, 0x1, 0x25, 0xb}}, @mark={{0x14, 0x1, 0x24, 0x5}}, @mark={{0x14, 0x1, 0x24, 0x4}}], 0x48}, 0x4008804) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0x88}, 0x40000100) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7f, 0x2, @perf_bp={0x0, 0x9}, 0x0, 0x32, 0x43a1bd76, 0x6, 0x9, 0x2, 0x812, 0x0, 0x0, 0x0, 0x22009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1224, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x19, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r7}, 0x94) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000780)=@generic={0x0, r8}, 0x18) ioctl$TUNGETVNETLE(r2, 0xc008744c, &(0x7f0000000180)) 5.625492932s ago: executing program 3 (id=6181): r0 = perf_event_open$cgroup(&(0x7f0000000380)={0x0, 0x80, 0x7, 0xff, 0x6, 0x0, 0x0, 0x22b, 0x4008c, 0x4, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x81, 0x2, @perf_bp={&(0x7f00000001c0), 0x4}, 0x20, 0x8, 0x17f, 0x1, 0x7, 0x1, 0x4, 0x0, 0x800}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x38b) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x7, 0x4, 0x40, 0x557, 0x28}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0xe, 0x40, 0x3, 0x41}, 0x50) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9b, 0x1, 0x0, 0x0, 0x0, 0x1, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x2000, 0x4, 0xfffffffe, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xd, 0x2, 0x81, 0x0, 0x0, 0x2, 0x60020, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0xfffffffffffffffc, 0x4}, 0xc800, 0x0, 0x2, 0x9, 0xb0, 0x5, 0x0, 0x0, 0xd4, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f0000000680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x9, [@volatile={0x0, 0x0, 0x0, 0x9, 0x5}, @var={0x7, 0x0, 0x0, 0xe, 0x5}, @type_tag={0x1, 0x0, 0x0, 0x12, 0x1}, @type_tag={0x1, 0x0, 0x0, 0x12, 0x3}, @union={0x0, 0x0, 0x0, 0x2, 0x0, 0x2}]}, {0x0, [0x61, 0x0, 0x0, 0x0, 0x0, 0x2e, 0x61]}}, 0x0, 0x61, 0x0, 0x0, 0x2}, 0x28) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRES64=r1], 0x48) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8901, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000480), 0x70698f34faa73687}, 0xb0, 0x0, 0x0, 0x7, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x29, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d08007b490d4f1e81f8d815000200ff05142603600e12080005007a010401a80016002000034004110000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000400)=@l2={0x1f, 0x5a6, @any, 0xfff7, 0x2}, 0x80, &(0x7f00000008c0)=[{&(0x7f00000005c0)="60d7df7c93c90b2f1dc95094aa32132641f77db2353d72e6b8eb78b772e729bbae5a5fed6053f67655d2e277c7ee12a74a840e0f4b1a9a378ba58602a0e2e649665150adec83fba1521cac9ae27d800d1bf6441c08be185f5c61322f8276dc63485727105e52c9665d2d7a038ace83e194a2fd80c41932ffff7d5953e1b16e3c0f0fb96048df7b1747d7e08de4009f0b58244d4eff3d190b147f7872f3bfdfb95068", 0xa2}, {&(0x7f00000007c0)="3b50ad85cebcbcd8213ad092efc9e14ee78df8b0847a2abeb5559738aac31b065772ecdf129d344420067521eb1af8604f17da38072415e065eccbcecf9a6afba193aed07e7ed4880c97b60bad4eb144fbcbb7ab8bca8688885f2cf0af22eb609b4915f332090dc64468949cc5dca6589019c2244b46e2bc3f9c91d8bc5bdbc5565d05e4b48b43aaaa453da99f1dcfe589b5c3f7fbc1c3baafd470be77c89886220342aa582c4af97859a56f20326718ae9ce1fff07caf0978a62ac8605a4b5b0de416335e", 0xc5}], 0x2, &(0x7f0000000900)=[@timestamping={{0x14, 0x1, 0x25, 0xb}}, @mark={{0x14, 0x1, 0x24, 0x5}}, @mark={{0x14, 0x1, 0x24, 0x4}}], 0x48}, 0x4008804) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0x88}, 0x40000100) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7f, 0x2, @perf_bp={0x0, 0x9}, 0x0, 0x32, 0x43a1bd76, 0x6, 0x9, 0x2, 0x812, 0x0, 0x0, 0x0, 0x22009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1224, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="080000000000007f000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r7, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x19, r7, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r8}, 0x94) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000780)=@generic={0x0, r9}, 0x18) 4.584582308s ago: executing program 3 (id=6185): close(0xffffffffffffffff) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000002c0)={r0}, 0x8) write$cgroup_int(r1, &(0x7f00000001c0), 0xfffffdef) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000180)={r1}, 0x8) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0xb, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r2, &(0x7f0000000240)=ANY=[], 0x9a) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) ioctl$PERF_EVENT_IOC_REFRESH(r4, 0x2402, 0x0) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x6, 0x0, 0x0, 0x5, 0x8, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0xb5, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x11) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) syz_clone(0x48400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000100), 0x174) syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x20083500, 0x0, 0x0, 0x0, 0x0, 0x0) 4.211006487s ago: executing program 2 (id=6187): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="61123000000000006113100000000000bf2020000000000016000200071b48013f030100000000009500000000000000bc26000000000000bf67000000000000070200500fff07186702000003000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 3.789397967s ago: executing program 0 (id=6189): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xe, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0xc800, 0x5, 0xfffffffc, 0x9, 0xb0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0xa001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_open_procfs$namespace(0x0, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x4040001) recvmsg$unix(r1, &(0x7f00000038c0)={0x0, 0x0, 0x0}, 0x10043) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000061193c000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xe, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0xc800, 0x5, 0xfffffffc, 0x9, 0xb0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0xa001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x50) (async) syz_open_procfs$namespace(0x0, 0x0) (async) close(r0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) sendmsg$inet(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x4040001) (async) recvmsg$unix(r1, &(0x7f00000038c0)={0x0, 0x0, 0x0}, 0x10043) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000061193c000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async) 3.788328957s ago: executing program 2 (id=6190): r0 = perf_event_open$cgroup(&(0x7f0000000380)={0x0, 0x80, 0x7, 0xff, 0x6, 0x0, 0x0, 0x22b, 0x4008c, 0x4, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x81, 0x2, @perf_bp={&(0x7f00000001c0), 0x4}, 0x20, 0x8, 0x17f, 0x1, 0x7, 0x1, 0x4, 0x0, 0x800}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x38b) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x7, 0x4, 0x40, 0x557, 0x28}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0xe, 0x40, 0x3, 0x41}, 0x50) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9b, 0x1, 0x0, 0x0, 0x0, 0x1, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x2000, 0x4, 0xfffffffe, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xd, 0x2, 0x81, 0x0, 0x0, 0x2, 0x60020, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0xfffffffffffffffc, 0x4}, 0xc800, 0x0, 0x2, 0x9, 0xb0, 0x5, 0x0, 0x0, 0xd4, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f0000000680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x9, [@volatile={0x0, 0x0, 0x0, 0x9, 0x5}, @var={0x7, 0x0, 0x0, 0xe, 0x5}, @type_tag={0x1, 0x0, 0x0, 0x12, 0x1}, @type_tag={0x1, 0x0, 0x0, 0x12, 0x3}, @union={0x0, 0x0, 0x0, 0x2, 0x0, 0x2}]}, {0x0, [0x61, 0x0, 0x0, 0x0, 0x0, 0x2e, 0x61]}}, 0x0, 0x61, 0x0, 0x0, 0x2}, 0x28) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRES64=r1], 0x48) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8901, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000480), 0x70698f34faa73687}, 0xb0, 0x0, 0x0, 0x7, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x29, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d08007b490d4f1e81f8d815000200ff05142603600e12080005007a010401a80016002000034004110000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000400)=@l2={0x1f, 0x5a6, @any, 0xfff7, 0x2}, 0x80, &(0x7f00000008c0)=[{&(0x7f00000005c0)="60d7df7c93c90b2f1dc95094aa32132641f77db2353d72e6b8eb78b772e729bbae5a5fed6053f67655d2e277c7ee12a74a840e0f4b1a9a378ba58602a0e2e649665150adec83fba1521cac9ae27d800d1bf6441c08be185f5c61322f8276dc63485727105e52c9665d2d7a038ace83e194a2fd80c41932ffff7d5953e1b16e3c0f0fb96048df7b1747d7e08de4009f0b58244d4eff3d190b147f7872f3bfdfb95068", 0xa2}, {&(0x7f00000007c0)="3b50ad85cebcbcd8213ad092efc9e14ee78df8b0847a2abeb5559738aac31b065772ecdf129d344420067521eb1af8604f17da38072415e065eccbcecf9a6afba193aed07e7ed4880c97b60bad4eb144fbcbb7ab8bca8688885f2cf0af22eb609b4915f332090dc64468949cc5dca6589019c2244b46e2bc3f9c91d8bc5bdbc5565d05e4b48b43aaaa453da99f1dcfe589b5c3f7fbc1c3baafd470be77c89886220342aa582c4af97859a56f20326718ae9ce1fff07caf0978a62ac8605a4b5b0de416335e", 0xc5}], 0x2, &(0x7f0000000900)=[@timestamping={{0x14, 0x1, 0x25, 0xb}}, @mark={{0x14, 0x1, 0x24, 0x5}}, @mark={{0x14, 0x1, 0x24, 0x4}}], 0x48}, 0x4008804) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0x88}, 0x40000100) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7f, 0x2, @perf_bp={0x0, 0x9}, 0x0, 0x32, 0x43a1bd76, 0x6, 0x9, 0x2, 0x812, 0x0, 0x0, 0x0, 0x22009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1224, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x19, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r7}, 0x94) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000780)=@generic={0x0, r8}, 0x18) ioctl$TUNGETVNETLE(r2, 0xc008744c, &(0x7f0000000180)) 3.220850681s ago: executing program 0 (id=6191): r0 = perf_event_open$cgroup(&(0x7f0000000380)={0x0, 0x80, 0x7, 0xff, 0x6, 0x0, 0x0, 0x22b, 0x4008c, 0x4, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x81, 0x2, @perf_bp={&(0x7f00000001c0), 0x4}, 0x20, 0x8, 0x17f, 0x1, 0x7, 0x1, 0x4, 0x0, 0x800}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x38b) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x7, 0x4, 0x40, 0x557, 0x28}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0xe, 0x40, 0x3, 0x41}, 0x50) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9b, 0x1, 0x0, 0x0, 0x0, 0x1, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x2000, 0x4, 0xfffffffe, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xd, 0x2, 0x81, 0x0, 0x0, 0x2, 0x60020, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0xfffffffffffffffc, 0x4}, 0xc800, 0x0, 0x2, 0x9, 0xb0, 0x5, 0x0, 0x0, 0xd4, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f0000000680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x9, [@volatile={0x0, 0x0, 0x0, 0x9, 0x5}, @var={0x7, 0x0, 0x0, 0xe, 0x5}, @type_tag={0x1, 0x0, 0x0, 0x12, 0x1}, @type_tag={0x1, 0x0, 0x0, 0x12, 0x3}, @union={0x0, 0x0, 0x0, 0x2, 0x0, 0x2}]}, {0x0, [0x61, 0x0, 0x0, 0x0, 0x0, 0x2e, 0x61]}}, 0x0, 0x61, 0x0, 0x0, 0x2}, 0x28) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRES64=r1], 0x48) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8901, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000480), 0x70698f34faa73687}, 0xb0, 0x0, 0x0, 0x7, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x29, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d08007b490d4f1e81f8d815000200ff05142603600e12080005007a010401a80016002000034004110000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000400)=@l2={0x1f, 0x5a6, @any, 0xfff7, 0x2}, 0x80, &(0x7f00000008c0)=[{&(0x7f00000005c0)="60d7df7c93c90b2f1dc95094aa32132641f77db2353d72e6b8eb78b772e729bbae5a5fed6053f67655d2e277c7ee12a74a840e0f4b1a9a378ba58602a0e2e649665150adec83fba1521cac9ae27d800d1bf6441c08be185f5c61322f8276dc63485727105e52c9665d2d7a038ace83e194a2fd80c41932ffff7d5953e1b16e3c0f0fb96048df7b1747d7e08de4009f0b58244d4eff3d190b147f7872f3bfdfb95068", 0xa2}, {&(0x7f00000007c0)="3b50ad85cebcbcd8213ad092efc9e14ee78df8b0847a2abeb5559738aac31b065772ecdf129d344420067521eb1af8604f17da38072415e065eccbcecf9a6afba193aed07e7ed4880c97b60bad4eb144fbcbb7ab8bca8688885f2cf0af22eb609b4915f332090dc64468949cc5dca6589019c2244b46e2bc3f9c91d8bc5bdbc5565d05e4b48b43aaaa453da99f1dcfe589b5c3f7fbc1c3baafd470be77c89886220342aa582c4af97859a56f20326718ae9ce1fff07caf0978a62ac8605a4b5b0de416335e", 0xc5}], 0x2, &(0x7f0000000900)=[@timestamping={{0x14, 0x1, 0x25, 0xb}}, @mark={{0x14, 0x1, 0x24, 0x5}}, @mark={{0x14, 0x1, 0x24, 0x4}}], 0x48}, 0x4008804) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0x88}, 0x40000100) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1224, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="080000000000007f000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r7, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x19, r7, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r8}, 0x94) 3.172393922s ago: executing program 2 (id=6192): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0xa020, 0x0, 0x1780, 0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89b1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0x0, 0x7}, 0x0, 0x8, 0x0, 0x4, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x80, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000780)={'pim6reg0\x00', 0x400}) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x202}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="8500000002"], 0x0}, 0x94) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x42, &(0x7f0000000040), 0x3b) socket$kcm(0x2, 0x1, 0x84) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xa, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180200000300000000000000000000008500000027000000850000000800000095000000000000001644ac29e83946cfc7968102c7dc48c4a4fbacec981fda152b00c5ebc7733d2ed95abd36a3210100000000000000e3368079af8ecb3664"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe3f}, 0x46) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) mkdir(&(0x7f0000000040)='./file0\x00', 0x70) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r2, 0x18000000000002a0, 0x12, 0x0, &(0x7f0000000080)="5af21a8fb0f0b3d3d13731fda883ccc26d2a", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.660913445s ago: executing program 2 (id=6193): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610414000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7000}, 0x48) 2.431176421s ago: executing program 2 (id=6194): perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0xfd, 0x0, 0xa, 0xff, 0x0, 0x10000000c, 0x42002, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8001, 0x3}, 0x0, 0xc8, 0x10, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffd, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0xa0, 0x5, 0x2, 0x0, 0x0, 0x0, 0x9, 0x4022, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xfffffffc, 0x5, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd632000fc04082f00db5b686158bbcfe8875a060305000023000000000000e80300000000ac1414aa3a2008"], 0xfdef) 2.260142295s ago: executing program 2 (id=6195): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='net_prio.prioidx\x00', 0x0, 0x0) openat$cgroup_ro(r0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000007118bc000000000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = socket$kcm(0x2, 0x5, 0x106) setsockopt$sock_attach_bpf(r1, 0x1, 0x41, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x24000000) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) write$cgroup_int(r4, &(0x7f0000000080)=0x6, 0x12) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001740)={r0, &(0x7f0000000700)="8f59b8099cd1e55732730de317a82e2307e832cbd4a3135c63b9d4f5e34797f65f6b2001beda6e1e6fe27acb4a08fd0d105cedac015f9d55ff1c96fb0fddfaeb3dac8c0f4a8edfa476fe45f436a705d2727254a904e0d407037eeea8f043380bd291a328c31d8fdd287e82b252910a225a31b0f0ac0f6bfd6af8334a2c34a421277a63f2322906440abba08fd3e1eada578d001fb99cdbb84df633f924657b4d0b3cd52d3e7216f8b07611598572c4c264a06964b1ddece199e9733d2412e348d52e1533d6c4d3e39f4c72efec9caa9e404b7df419b5e216a6af6191079c98dd815e5511b9c76f871a6761ee373cf5c8f332d9ffd5f46e3fde128be0b163f09ffb7c8d303bdd00ccfc8867d8df62178164185d7639f5adff00a55d5c7b47b8991fd2fc288d34850e7f11d9845bcf7c60b6b978b6f7d16fc2a7cdaf8e8c878d566bf07e23021b04f1b55eb881f0e851831613be620542be41d6efeb7a3f254f92da1ad58c6413e8c64ddfc593b75904296638f43cd6be9fcf54b3284b96b86bbb120e018c66ae30271182eb9a9183a16f5f2705520c50f0919d31a8c8a860874f8d5e2ef916c9283c30983e66336dacabb48f1d3404c1875032a6f08b34877c832d98c45160664dfa7f9356e61796ca8080b65ceab87fbba63832b03ef35fa4e6d56ce5b2de01af528ee78c616a2d646d18a1167106d86eb382024e7b82e1d068f932b4a1304ba9bcc7c4c2192c17691f036e39b627c6405430eafd802a883754fc456a80ca8ef504dc90b41480d68f864a3f267863d762378741824cfb71f8e309379c03c77e864d003c66b70b249a559c372196df77dfe40da23d130a509ce0dccf1c5b33eb9af0b4e3d303236d48567b0de6aa3077704b8022d4a9da4f506395863ab21644dd0eb2ce7e725494c57c1700bb03ec04032f44a87efb788c6edf1beb3650e0ecf56790e225de70ad32fac2e20832d9ebd02bba1f402fa96b797e3c58b7e052939eafceb558421d3faad6b4de887161cb64b7f2b3dd831abcb7f1fbe4a98f14bfc3c662d8c1841fde3afc74d68b9e4fb9b9fd49c2e0b1c6e67a70a9eece55e31dd11e2a945bd4ed46a434086296667e1d2c42a63b02e72c105f3e4d19a20f7bfbaadfa0a2dae91dd527779f79398335ada49cb33e22bcb019b311e5a051e040d25f7d9ee930b988f03aec15e23671f736bd64608c1d171bfcc496d229675d74df43db6c757a1d7622d201f93a455551e1ea9b96123f4e4adb066829783573deb685f05d59a62f7856af061d0d3d3284860685db615c0bfae1ea316d9523bd1ef0f5b88efc2a6fe3c90f85f2d94e3c929e2dcb567b5d6404c0400d14976e6c46c2b11e0b80b2f889ae95dfb731948d9ff162f263f601eefb88fabde5b56aef1f91f3763ade4d6f07bc2b17190036b5df055060f70aa169e5a72dc85aa2d0a16777f6ea958828131e72912fffc623d2166a6d03c41a1f905c6acad2cccdb3f7cccb17abd6fc21197ef691e0f5aa035a8e36a2e21151e0cd49c1bcfde4852c1885e4ff3383409f8de91586ccb2fb1157b9ae86e17fed64b29b5958331eca8467bca1f3852923a5492f841bc8040be08e23b43474c66af5a5a6ae77cf4663ba10e346e6c72b4b27c025da6251a74ff1994a40ed0d32e0a5a1a17039b93db91105b00ad407c24219682f953786688e2c0335fed5025bcc1035bf80aaec540f3582272d8fe2ae297f80d14c16bb1bfb419fe4b60d3140df298c47d9112a66f2e3aad27cff14c1e2695583c00511bda0b957f423c1371eb8d9c5fb759b46034f5117a1d46ce1431ce9111718a1f0aa63d5a98d38a3b009d6b7d27f97f1ce87b7a77566b41a3bb91d5d3dcf06407eb0553f14c230830a5eb37f3bd636e88cc49e3a181952fc04bbd2d6ffab83be30d46f237cd23fe248f564f1667363852fba8151f5748accb075dbc152f9408d6195b5300384e8e399c02b0ad1598ec269e1a61b5b8ace93d416a054137ace25174980e7efbd88e29a054d07d7d9d9ec47f1f82f316baabe8cf762992e92db5c4f9c742b083b6e6f3494df5a3464f42b09b0cfeba0e379d94277d5ea86589181a4269a65866411c825f4ed78ca5cd8b53f34506e20556aa76b8be60ea2e3f7df2f38a3256731d901db761ded64376df272a7e15ed748e9db4f334927bd8f0bfb8e20518ce3b5cea0c35da080edd15725b68719cf1c6c3e56ae30bccf41801576a8001b454666c9a77e32ba0b58c6c9c426341b455ea5b5a6bee8ab2286f8014d028dfb541a1e6ab3f40e5c3cbba7d94b19d3a4118bf4c82a78d11d7710d9059285f6dd536760e18e91cb956c1dbcc3125a2f48acfcce9b93b996e14588c8eb6fb713e501aa922cb1a526f66e9dd536cb099c75996dd4bdbc66daa5daf0ed60a59e430350e9dff28c3e795c153587eb0e7b1920dbe7aa2ff39858392889b880bc3015905e0f5417eda0ac6d7b9034cf61c707e1aa48cd4ad8f3701bae9ea4be2a5c8f25eab9614377d94b3187b0121db01de949a8d57205e1c31d8f851df96ef45a01d3e493d51dec371c447ee73e3af74f9d56d4b31145b14eeddc21523ae81340b1c9b8b4d37970968d5a49161b923fdd9be3c618c366de68609c0f8f19cbdb82c6ed72398166edc576c2711efc93475152de12f5ef8a4bf610f86e53d449c9f57ca84e9ec39779344e88f0f7a7cad4193d9d53ba1b7a1d47ae28d33b24fd42c2af6e5c6e2d52a5f26d151d1bbfb17733564efd1afc8f306c77fdf619209367a079bff26badb706b1cacc0b4e547390602094f8c573aca302193bae0f75154ca33049235fd08ec8b4c3630b82187be99dd630ebe8dde8ec03400080f55e5ae6aa48efd168d1b0e5de4177f3887791061c55bf5756631fcf6f3be45f1a8b6f6c4c911452e443e13a75a277c4ea112477a429ec74c70caf5f640d06cbd679c0de1ee902dc38c5d96aa53c65a67d2bef28479120ea0e1e7ae5fc7d9cfc2c0dfbc17880c04bf8f2c44154864d0046fc0b3e826325c5bb225db6210f9e800029f72268a3dec2c7c48f4da89791e540aaf900510e4cc5badd1a45aaf01dca700c1e73d43582e4b983c2f94f01ba819905e92376def5cd0224d4108e9d8f9c151c0cb4042eaa681b85af833fc8b4b99ef36cac3a448a4be634d72fd7cf42dce454e6f8873e73fc58a6013e6e9886596bd2876f7cecdc46f2fa64475e9508ecd46d8733fd83d7db7e148e8d13faae9e552c2a64821fe15da6258d16bf831c68e0e81d304a1fa5a83648ef5d49cb511ae7059aea856c6cfcfc14377992afcb017d6ace548d3488fbc8dffa500cd1889600a6da88e600944baa839ecddbc1ea044b3c554bb86d7cd94b519653302d054d0f4abe18aac22996bdfdd3885fe40b6bf9b5f0663f5647b89bd80f94d3658d85be3a2147bfbe7792d30c75de3b85b8e31f29be3ab21bc70098344db0d3043934e6024cfb0eb8fc9ba720612a59eb11499b64e06bea64502e4e69119987510eae99a9645d06e3409f57a6d1a6933737078de7bc6128e293290f7dae0c7d60bf3984ae28003524912d17d3c448ec976bc17e68144a1fea494a7444a056b574b323ab86e5ba894b80f2d70d44fb0510f1c8bee893cade42114c0a5d2b3fe08b8e6bbc53797d50de186a1be3ebf177857a608ffc513e1acf8fcbcc8addeb3cf5ba4e19f8536c2bbd2070d8b0cbfe910d517ef55a8c84d0d5d1fc1d5a687c0f53b4727bdc4271a077c4d23c6a21058f158d1fd97eb60aa9bf140eda9e37492bd7a9f67c1e2d948f2bca0fc54b3873a1d93064ff7f184031c29bb057ac771b1aa02b360f0e5106ccd205d51e12194a2d70006642e1c4c47cce03f48d6c61b6b0a7ec5846a6a362ce0f290b51ac2032a926d10fd790cbcd00e4a50864e6f4793d251d77b287e70e7075a84d0629c358fc9b2a3045a222fd36b8094ab1dacc144aa61904c7678c8b2814b74c6f48552ff34511c940b73aeae933b39c78879184c3b9ca8fbb2a95cd0f688df881e28c030f226873bfa24c00bbc4db71111d215a89fddfe533176cce2af61581c630d23c8145e18fbca02c51ef03989e84673ddef93faba7aa20bf0fa4b1337822ab7028ff2bbb955b990d8c91461ffb1a2cc86bd0e02f742473693c7716bb11221117caf8f6d826604b73bac9172792efc09b45442a70300bd907ff40c50e4533f57a52dc05a57672645a097348ab5026b4664a7733bd0fb000f96e86a564c0f260f4c19bbc12e60d370ce3b916c8c4e46040f39836ab904af9d88b8b78777815dac52ffff5083ca070c19a293775408254da975c36cf1032929e30b53353b16b130526ff5bf0b469a8d276ef794306b581e2dc8002f3aa72a41540cd29d30b43492d25bcfbc15777788cbdb0a2929c752fee0963cf5bec22e8a382254cf2f245d5660ef2f4bf5d4e48628bb8744189c6678788b035698c15a15bb59c70f670acc96243efea086a903eea9d51b6fe3dd54eeb50b48e9777e9d5165d6ba9b13bde061d3ff04b41bf7176b1840b06e2889cfffd54bfb345f11fb4b79f78e9880043babe2c5296a8668b985dd7d412c22b9f9c7289a691782153b5d5fb81371ae8bb47baf5600552968e670ba32e9bb43e5f2aaa209844b28e053bcb9c0f83268e0f1dd4e2cdc89baa0f6339094d2728ce258cf5dfd02a2c174bf2778e6c2f0c94539c9e08075d9c11f2f6561affb827e01dcdc9b6cdecb4365b0c0ba086188595b2d6b48b025212cb3a3e721625723238f237c36b4ad97273de5f87fc3358f098c63988eba58effa18f44e5d93b2f97a3cd12e9b0b50bf886c4dad38aa070c0b1d21b967bcdc2fea944508b44e9500c6ef83d4e26fcb97ac495250cfa06dfae7f206151fa721c01561a36d6d221461bc2580061a73ccf3074d6dd44dc7a2188a9b96f3b7f99a14301924b05a6a311870c678199b76cfd3e52864aa70188078ae4d710c571b56127d4ba60426741a032351483b28bd69079760af8a382baeaacd65077f4a317706a13da79f595b43615154eaa62180d3ef9a78416627acf5c6c5cc4a0dfd1e575a09f7ca5fcead617803348b9e6163bc56d4d12ec65ddc064791a41128e6572dfd2c16d68efc4b74edd6af5f3c94cc2aee35cc412c9fd8e9ceb4712b767c261531513e4a0f9b033a89973eda0d0e421749f32332d749b0c8fe002b6d238e90ca5c0622e9750c304e3767532b4f8177dc06c714e5a90586ebd5c50b726630a21bd11f23c21e3bc9d987c23af0f6bb5cace08233ebeb8fc1f13396098bf0f549cfc2c7fbd3868fd50bcab4e1040f7ecb4022e59a3ed00a216998234d6cac489a27467ce9171e8f9b786456033c26079ff4cd910a9d1bdad10f3dc113c31c3a3d6184febecbb7cae889c7249d64dcbb4575c628ac791186d7e3c3659d00dd7b5afb5a4843fe1ee368d91870cf9362a86635d96f45452a17d21f0ff3b7b03af471b8d5cfbb41d8f947874a3d844ec3226a9256ed8fc3904ff47dddced88c9d697155e59f2bffe1c1724b76b11d4079737ec8d6b61055b2e65e0403cec0f8ba9d742bd8691298a487454346ffdcf808805d6c0dc1b6e3938d7dc8a78284ce640fb69908ca7afc070b6cba0f54e877a91ade39431f051c41e16158e31425c37fa1043c97098672498f42bb6b706728270c45f9583f15990c3086d106d7d6aa6bbc4aeb3ac73a92e31eaf323087a7124f1c0421d39fcf49d6beed8650666c284bdd39600a3f44680a3dff42cb635129dd90072078c26c83198f7d0", &(0x7f0000001700)=""/44}, 0x20) close(r4) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb}, 0x50) socket$kcm(0x10, 0x2, 0x4) syz_clone(0x41200000, 0x0, 0x0, 0x0, 0x0, 0x0) 2.130540088s ago: executing program 0 (id=6196): mkdir(&(0x7f0000000000)='./cgroup/../file0/file0/file0\x00', 0x116) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = syz_clone(0x20900000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, 0x0, 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000005c0)=r0, 0x12) 2.094404759s ago: executing program 3 (id=6197): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x2d1}, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x19, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0), 0x8) openat$cgroup_ro(r2, 0x0, 0x0, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r2, 0x0, 0x0}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x7, 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x2, 0x300}, {0x6e, 0x0, 0xd}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xc, 0x9, 0x0, 0x0, 0x20000f15}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x2000, 0x7}}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.113178563s ago: executing program 1 (id=6198): perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x2) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0500000001f01f00008000007b00000001"], 0x50) r2 = perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0xf, r0, 0x8) bpf$TOKEN_CREATE(0x24, &(0x7f00000007c0)={0x0, r2}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ff"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000ba05000018150000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000807b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000001e00000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000009000000850000002300000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0xf8ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r4, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x10, 0x2, 0x10) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r1, 0x0, 0x0}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r5 = syz_clone(0x0, &(0x7f0000000380)="6f1051c68f7c24fa91aafa12fc9fa44203f4e20fac33501ab6abe2b8b45dc66dac01b748454ac6c731c493338ccfdb672d16d0a3c3d0a6f01953d981ad18a9c3ef9c057d2be506feb0304d3d0c8fc867ac537c9b73b6d904ef01a2447ead4282deba410585b989baa304c2d66ff34b292fc3f93c16cc7d988a61cfb0bfbb449dfbaa376f10a909fcd1e3a86ffdaf5576d53757d58821e72987325c23999a567bb3a0fa50a50fa409b6c7734497139f18932370b460c3edae881d3089b8e4173988f09ca524662453f18acbb054186d9ec8755ef73530fcd4881286e56fbde7", 0xdf, &(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500)="e98246f476224f8113757692122a6a72be8f900d8f503c6edc5acec5f1ef6d9e6b9a5342cb0b17c52aa4527a93ee0089622b2f8c77154e38600568d0b6bc9b14e56f4e55befa7252b02d66627f02293c7b3f6e0f2da5af5fedc6e9423e8ef67a314ab44af05ac4b46339383c7a030a2b9ff22121d9a9d6a7f6dcd0535b58537347bf4bd9d7b0083a63488c5ef9e274f1912df893155d00a99deaad") perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x2, 0x3, 0x48, 0x3, 0x0, 0x6, 0x8b, 0x7, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x3, 0x3465}, 0x21281, 0x5c0695fe, 0x1, 0x0, 0x401, 0x9, 0x6, 0x0, 0x9, 0x0, 0x1}, r5, 0xf, 0xffffffffffffffff, 0xa) write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0), 0x12) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f0000000000)={'wlan1\x00', @random="0100c3201000"}) 947.281077ms ago: executing program 0 (id=6199): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="d8000000190081044e81f782db4cb904021d0800fd007c05e8fe55a108001e0001400203b4000e4190000900ac00060211000000160012000a0002000d48035c3b61c1d67f01282e8d61421f25e1ef6530a68000a007a290457f01a7cee4090000001fb791643a5ee4e11bad15e473dfc6d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f2155e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af22a3fd0a2c46ac381ee", 0xd8}], 0x1}, 0x80) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910300000000000730a00ff000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x1a, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48) r2 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r1}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x78, 0x78, 0x7, [@float={0x6, 0x0, 0x0, 0x10, 0x8}, @struct={0x9, 0x8, 0x0, 0x4, 0x1, 0x9, [{0x8, 0x2, 0x8}, {0x3, 0x2, 0x142}, {0x4, 0x5, 0x9}, {0xf, 0x6, 0x3}, {0x8, 0x5, 0x3}, {0x0, 0x2}, {0x7, 0x1, 0x7}, {0xfffffffc, 0x5, 0x2}]}]}, {0x0, [0x2e, 0x2e, 0x0, 0x2e, 0x5f]}}, &(0x7f0000000240)=""/122, 0x97, 0x7a, 0x1, 0x1, 0x10000, @value=r2}, 0x28) 850.45376ms ago: executing program 3 (id=6200): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e020000000000000000"], 0x0, 0x37, 0x0, 0x1}, 0x28) r0 = socket$kcm(0x2, 0x1000000000000005, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1400000016000b63d25a80dc9f14e53420", 0x11}], 0x1}, 0x0) sendmsg$inet(r0, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0xc, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x2, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/31], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000080000000100000601000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) 624.303195ms ago: executing program 0 (id=6201): r0 = perf_event_open$cgroup(&(0x7f0000000380)={0x0, 0x80, 0x7, 0xff, 0x6, 0x0, 0x0, 0x22b, 0x4008c, 0x4, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x81, 0x2, @perf_bp={&(0x7f00000001c0), 0x4}, 0x20, 0x8, 0x17f, 0x1, 0x7, 0x1, 0x4, 0x0, 0x800}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x38b) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x7, 0x4, 0x40, 0x557, 0x28}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0xe, 0x40, 0x3, 0x41}, 0x50) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9b, 0x1, 0x0, 0x0, 0x0, 0x1, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x2000, 0x4, 0xfffffffe, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xd, 0x2, 0x81, 0x0, 0x0, 0x2, 0x60020, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0xfffffffffffffffc, 0x4}, 0xc800, 0x0, 0x2, 0x9, 0xb0, 0x5, 0x0, 0x0, 0xd4, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f0000000680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x9, [@volatile={0x0, 0x0, 0x0, 0x9, 0x5}, @var={0x7, 0x0, 0x0, 0xe, 0x5}, @type_tag={0x1, 0x0, 0x0, 0x12, 0x1}, @type_tag={0x1, 0x0, 0x0, 0x12, 0x3}, @union={0x0, 0x0, 0x0, 0x2, 0x0, 0x2}]}, {0x0, [0x61, 0x0, 0x0, 0x0, 0x0, 0x2e, 0x61]}}, 0x0, 0x61, 0x0, 0x0, 0x2}, 0x28) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRES64=r1], 0x48) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8901, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000480), 0x70698f34faa73687}, 0xb0, 0x0, 0x0, 0x7, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x29, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d08007b490d4f1e81f8d815000200ff05142603600e12080005007a010401a80016002000034004110000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000400)=@l2={0x1f, 0x5a6, @any, 0xfff7, 0x2}, 0x80, &(0x7f00000008c0)=[{&(0x7f00000005c0)="60d7df7c93c90b2f1dc95094aa32132641f77db2353d72e6b8eb78b772e729bbae5a5fed6053f67655d2e277c7ee12a74a840e0f4b1a9a378ba58602a0e2e649665150adec83fba1521cac9ae27d800d1bf6441c08be185f5c61322f8276dc63485727105e52c9665d2d7a038ace83e194a2fd80c41932ffff7d5953e1b16e3c0f0fb96048df7b1747d7e08de4009f0b58244d4eff3d190b147f7872f3bfdfb95068", 0xa2}, {&(0x7f00000007c0)="3b50ad85cebcbcd8213ad092efc9e14ee78df8b0847a2abeb5559738aac31b065772ecdf129d344420067521eb1af8604f17da38072415e065eccbcecf9a6afba193aed07e7ed4880c97b60bad4eb144fbcbb7ab8bca8688885f2cf0af22eb609b4915f332090dc64468949cc5dca6589019c2244b46e2bc3f9c91d8bc5bdbc5565d05e4b48b43aaaa453da99f1dcfe589b5c3f7fbc1c3baafd470be77c89886220342aa582c4af97859a56f20326718ae9ce1fff07caf0978a62ac8605a4b5b0de416335e", 0xc5}], 0x2, &(0x7f0000000900)=[@timestamping={{0x14, 0x1, 0x25, 0xb}}, @mark={{0x14, 0x1, 0x24, 0x5}}, @mark={{0x14, 0x1, 0x24, 0x4}}], 0x48}, 0x4008804) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0x88}, 0x40000100) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7f, 0x2, @perf_bp={0x0, 0x9}, 0x0, 0x32, 0x43a1bd76, 0x6, 0x9, 0x2, 0x812, 0x0, 0x0, 0x0, 0x22009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1224, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="080000000000007f000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r7, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x19, r7, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r8}, 0x94) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000780)=@generic={0x0, r9}, 0x18) ioctl$TUNGETVNETLE(r2, 0xc008744c, &(0x7f0000000180)) 404.424191ms ago: executing program 3 (id=6202): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0xa020, 0x0, 0x1780, 0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89b1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0x0, 0x7}, 0x0, 0x8, 0x0, 0x4, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x80, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000780)={'pim6reg0\x00', 0x400}) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x202}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="8500000002"], 0x0}, 0x94) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) socketpair$unix(0x1, 0x2, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x42, &(0x7f0000000040), 0x3b) socket$kcm(0x2, 0x1, 0x84) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xa, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180200000300000000000000000000008500000027000000850000000800000095000000000000001644ac29e83946cfc7968102c7dc48c4a4fbacec981fda152b00c5ebc7733d2ed95abd36a3210100000000000000e3368079af8ecb3664"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe3f}, 0x46) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) mkdir(&(0x7f0000000040)='./file0\x00', 0x70) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r1, 0x18000000000002a0, 0x12, 0x0, &(0x7f0000000080)="5af21a8fb0f0b3d3d13731fda883ccc26d2a", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 326.046052ms ago: executing program 1 (id=6203): perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x2) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x50) r2 = perf_event_open$cgroup(&(0x7f0000000740)={0x4, 0x80, 0x6, 0xaa, 0xdf, 0x1, 0x0, 0x8726, 0x3004, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x101, 0x1, @perf_bp={&(0x7f0000000280), 0x9}, 0x110909, 0x3, 0x0, 0x4, 0x10, 0x6f86, 0xff, 0x0, 0x5, 0x0, 0x40}, 0xffffffffffffffff, 0xf, r0, 0x8) bpf$TOKEN_CREATE(0x24, &(0x7f00000007c0)={0x0, r2}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000ba05000018150000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000807b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000001e00000018010000756c6c2500000000002020207b1af8ff000f0000bfa100000000000007010000f8ffffffb702000008000000b703000009000000850000002300000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r5, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r3) socket$kcm(0x10, 0x2, 0x10) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r1, 0x0, 0x0}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r6 = syz_clone(0x0, 0x0, 0x0, &(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500)="e98246f476224f8113757692122a6a72be8f900d8f503c6edc5acec5f1ef6d9e6b9a5342cb0b17c52aa4527a93ee0089622b2f8c77154e38600568d0b6bc9b14e56f4e55befa7252b02d66627f02293c7b3f6e0f2da5af5fedc6e9423e8ef67a314ab44af05ac4b46339383c7a030a2b9ff22121d9a9d6a7f6dcd0535b58537347bf4bd9d7b0083a63488c5ef9e274f1912df893155d00a99deaadad809d54b7a83adf86acc03167432b7a19fa1dcf4d987a82baaf6f8eec34784fe6f69b12") perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x2, 0x3, 0x48, 0x3, 0x0, 0x6, 0x8b, 0x7, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x3, 0x3465}, 0x21281, 0x5c0695fe, 0x1, 0x0, 0x401, 0x9, 0x6, 0x0, 0x9, 0x0, 0x1}, r6, 0xf, 0xffffffffffffffff, 0xa) write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0), 0x12) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8924, &(0x7f0000000000)={'wlan1\x00', @random="0100c3201000"}) 0s ago: executing program 0 (id=6204): r0 = perf_event_open$cgroup(&(0x7f0000000380)={0x0, 0x80, 0x7, 0xff, 0x6, 0x0, 0x0, 0x22b, 0x4008c, 0x4, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x81, 0x2, @perf_bp={&(0x7f00000001c0), 0x4}, 0x20, 0x8, 0x17f, 0x1, 0x7, 0x1, 0x4, 0x0, 0x800}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x38b) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x7, 0x4, 0x40, 0x557, 0x28}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0xe, 0x40, 0x3, 0x41}, 0x50) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9b, 0x1, 0x0, 0x0, 0x0, 0x1, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x2000, 0x4, 0xfffffffe, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xd, 0x2, 0x81, 0x0, 0x0, 0x2, 0x60020, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0xfffffffffffffffc, 0x4}, 0xc800, 0x0, 0x2, 0x9, 0xb0, 0x5, 0x0, 0x0, 0xd4, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f0000000680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x9, [@volatile={0x0, 0x0, 0x0, 0x9, 0x5}, @var={0x7, 0x0, 0x0, 0xe, 0x5}, @type_tag={0x1, 0x0, 0x0, 0x12, 0x1}, @type_tag={0x1, 0x0, 0x0, 0x12, 0x3}, @union={0x0, 0x0, 0x0, 0x2, 0x0, 0x2}]}, {0x0, [0x61, 0x0, 0x0, 0x0, 0x0, 0x2e, 0x61]}}, 0x0, 0x61, 0x0, 0x0, 0x2}, 0x28) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRES64=r1], 0x48) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8901, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000480), 0x70698f34faa73687}, 0xb0, 0x0, 0x0, 0x7, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x29, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d08007b490d4f1e81f8d815000200ff05142603600e12080005007a010401a80016002000034004110000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000400)=@l2={0x1f, 0x5a6, @any, 0xfff7, 0x2}, 0x80, &(0x7f00000008c0)=[{&(0x7f00000005c0)="60d7df7c93c90b2f1dc95094aa32132641f77db2353d72e6b8eb78b772e729bbae5a5fed6053f67655d2e277c7ee12a74a840e0f4b1a9a378ba58602a0e2e649665150adec83fba1521cac9ae27d800d1bf6441c08be185f5c61322f8276dc63485727105e52c9665d2d7a038ace83e194a2fd80c41932ffff7d5953e1b16e3c0f0fb96048df7b1747d7e08de4009f0b58244d4eff3d190b147f7872f3bfdfb95068", 0xa2}, {&(0x7f00000007c0)="3b50ad85cebcbcd8213ad092efc9e14ee78df8b0847a2abeb5559738aac31b065772ecdf129d344420067521eb1af8604f17da38072415e065eccbcecf9a6afba193aed07e7ed4880c97b60bad4eb144fbcbb7ab8bca8688885f2cf0af22eb609b4915f332090dc64468949cc5dca6589019c2244b46e2bc3f9c91d8bc5bdbc5565d05e4b48b43aaaa453da99f1dcfe589b5c3f7fbc1c3baafd470be77c89886220342aa582c4af97859a56f20326718ae9ce1fff07caf0978a62ac8605a4b5b0de416335e", 0xc5}], 0x2, &(0x7f0000000900)=[@timestamping={{0x14, 0x1, 0x25, 0xb}}, @mark={{0x14, 0x1, 0x24, 0x5}}, @mark={{0x14, 0x1, 0x24, 0x4}}], 0x48}, 0x4008804) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0x88}, 0x40000100) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1224, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="080000000000007f000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r7, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x19, r7, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r8}, 0x94) kernel console output (not intermixed with test programs): ump_stack_lvl+0x18c/0x250 [ 658.585181][T17544] ? show_regs_print_info+0x20/0x20 [ 658.590412][T17544] ? load_image+0x420/0x420 [ 658.594949][T17544] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 658.601400][T17544] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 658.607934][T17544] warn_alloc+0x246/0x340 [ 658.612285][T17544] ? __get_vm_area_node+0x125/0x370 [ 658.617516][T17544] ? zone_watermark_ok_safe+0x230/0x230 [ 658.623082][T17544] ? rcu_is_watching+0x15/0xb0 [ 658.627888][T17544] ? __get_vm_area_node+0x356/0x370 [ 658.633122][T17544] __vmalloc_node_range+0x394/0x1320 [ 658.638428][T17544] ? mark_lock+0x94/0x320 [ 658.642761][T17544] ? __lock_acquire+0x1431/0x7eb0 [ 658.647802][T17544] ? aa_get_newest_label+0xfd/0x5c0 [ 658.653019][T17544] ? free_vm_area+0x50/0x50 [ 658.657523][T17544] ? end_current_label_crit_section+0x170/0x170 [ 658.663766][T17544] ? verify_lock_unused+0x140/0x140 [ 658.668964][T17544] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 658.674512][T17544] __vmalloc+0x7a/0x90 [ 658.678585][T17544] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 658.684130][T17544] bpf_prog_alloc_no_stats+0x46/0x430 [ 658.689507][T17544] bpf_prog_alloc+0x3d/0x1a0 [ 658.694109][T17544] bpf_prog_load+0x6b2/0x1610 [ 658.698825][T17544] ? map_freeze+0x420/0x420 [ 658.703331][T17544] ? __might_fault+0xaa/0x120 [ 658.708004][T17544] ? __lock_acquire+0x7eb0/0x7eb0 [ 658.713026][T17544] ? file_end_write+0x159/0x250 [ 658.717887][T17544] ? __might_fault+0xaa/0x120 [ 658.722560][T17544] ? __might_fault+0xc6/0x120 [ 658.727231][T17544] ? __might_fault+0xaa/0x120 [ 658.731907][T17544] ? bpf_lsm_bpf+0x9/0x10 [ 658.736241][T17544] ? security_bpf+0x7e/0xa0 [ 658.740745][T17544] __sys_bpf+0x5ba/0x890 [ 658.744990][T17544] ? bpf_link_show_fdinfo+0x560/0x560 [ 658.750373][T17544] ? lock_chain_count+0x20/0x20 [ 658.755243][T17544] __x64_sys_bpf+0x7c/0x90 [ 658.759660][T17544] do_syscall_64+0x55/0xb0 [ 658.764078][T17544] ? clear_bhb_loop+0x40/0x90 [ 658.768750][T17544] ? clear_bhb_loop+0x40/0x90 [ 658.773427][T17544] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 658.779325][T17544] RIP: 0033:0x7fa443d9e199 [ 658.783740][T17544] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 658.803346][T17544] RSP: 002b:00007fa444bb1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 658.811781][T17544] RAX: ffffffffffffffda RBX: 00007fa444025fa0 RCX: 00007fa443d9e199 [ 658.819751][T17544] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 658.827720][T17544] RBP: 00007fa444bb1090 R08: 0000000000000000 R09: 0000000000000000 [ 658.835685][T17544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 658.843739][T17544] R13: 00007fa444026038 R14: 00007fa444025fa0 R15: 00007ffcfed33a98 [ 658.851741][T17544] [ 658.882804][T17544] Mem-Info: [ 658.886500][T17544] active_anon:8200 inactive_anon:0 isolated_anon:0 [ 658.886500][T17544] active_file:18575 inactive_file:40193 isolated_file:0 [ 658.886500][T17544] unevictable:768 dirty:132 writeback:0 [ 658.886500][T17544] slab_reclaimable:11210 slab_unreclaimable:92140 [ 658.886500][T17544] mapped:24523 shmem:1361 pagetables:531 [ 658.886500][T17544] sec_pagetables:0 bounce:0 [ 658.886500][T17544] kernel_misc_reclaimable:0 [ 658.886500][T17544] free:1342013 free_pcp:8648 free_cma:0 [ 658.970667][T17544] Node 0 active_anon:32792kB inactive_anon:0kB active_file:74300kB inactive_file:160576kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:98088kB dirty:592kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10960kB pagetables:2096kB sec_pagetables:0kB all_unreclaimable? no [ 659.008781][T17544] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 659.162384][T17544] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 659.207453][T17544] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 659.213460][T17544] Node 0 DMA32 free:1454884kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:32744kB inactive_anon:0kB active_file:74300kB inactive_file:159744kB unevictable:1536kB writepending:568kB present:3129332kB managed:2586780kB mlocked:0kB bounce:0kB free_pcp:20536kB local_pcp:12724kB free_cma:0kB [ 659.244355][T17544] lowmem_reserve[]: 0 0 0 0 0 [ 659.249124][T17544] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:832kB unevictable:0kB writepending:4kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 659.292975][T17544] lowmem_reserve[]: 0 0 0 0 0 [ 659.297818][T17544] Node 1 Normal free:3897556kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:13024kB local_pcp:2816kB free_cma:0kB [ 659.366433][T17544] lowmem_reserve[]: 0 0 0 0 0 [ 659.388618][T17544] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 659.425954][T17544] Node 0 DMA32: 1656*4kB (UME) 1647*8kB (UME) 1071*16kB (UME) 1273*32kB (UME) 775*64kB (UME) 420*128kB (UME) 185*256kB (UME) 77*512kB (UME) 29*1024kB (UME) 11*2048kB (UME) 277*4096kB (UM) = 1454632kB [ 659.493795][T17544] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 659.537512][T17544] Node 1 Normal: 253*4kB (UME) 54*8kB (UME) 43*16kB (UME) 196*32kB (UME) 48*64kB (UME) 10*128kB (UME) 3*256kB (UME) 2*512kB (UE) 0*1024kB 2*2048kB (UE) 947*4096kB (M) = 3897556kB [ 659.578897][T17544] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 659.589717][T17544] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 659.612647][T17450] page_pool_release_retry() stalled pool shutdown 1 inflight 60 sec [ 659.643063][T17544] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 659.703029][T17544] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 659.730464][T17544] 60129 total pagecache pages [ 659.743811][T17544] 0 pages in swap cache [ 659.748017][T17544] Free swap = 124996kB [ 659.772585][T17544] Total swap = 124996kB [ 659.790241][T17544] 2097051 pages RAM [ 659.800359][T17544] 0 pages HighMem/MovableOnly [ 659.810484][T17544] 416970 pages reserved [ 659.820486][T17544] 0 pages cma reserved [ 660.081779][T17567] netlink: 'syz.2.3908': attribute type 9 has an invalid length. [ 660.117431][T17567] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.3908'. [ 661.196161][T17612] netlink: 'syz.3.3925': attribute type 10 has an invalid length. [ 661.328988][T17612] bridge0: port 2(bridge_slave_1) entered disabled state [ 661.355850][T17612] bridge_slave_1: left allmulticast mode [ 661.390656][T17612] bridge_slave_1: left promiscuous mode [ 661.408734][T17612] bridge0: port 2(bridge_slave_1) entered disabled state [ 661.444605][T17612] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 661.742364][T17626] bridge_slave_1: left allmulticast mode [ 661.774052][T17626] bridge_slave_1: left promiscuous mode [ 661.779911][T17626] bridge0: port 2(bridge_slave_1) entered disabled state [ 661.821568][T17626] bridge_slave_0: left allmulticast mode [ 661.832200][T17626] bridge_slave_0: left promiscuous mode [ 661.848164][T17626] bridge0: port 1(bridge_slave_0) entered disabled state [ 662.495158][T17662] netlink: 'syz.1.3939': attribute type 19 has an invalid length. [ 662.520212][T17662] netlink: 'syz.1.3939': attribute type 19 has an invalid length. [ 662.560486][T17662] netlink: 'syz.1.3939': attribute type 19 has an invalid length. [ 662.601550][T17662] netlink: 'syz.1.3939': attribute type 19 has an invalid length. [ 662.655325][T17662] netlink: 'syz.1.3939': attribute type 19 has an invalid length. [ 662.697990][T17662] netlink: 'syz.1.3939': attribute type 19 has an invalid length. [ 662.729333][T17662] netlink: 'syz.1.3939': attribute type 19 has an invalid length. [ 662.754469][T17662] netlink: 'syz.1.3939': attribute type 19 has an invalid length. [ 662.789562][T17662] netlink: 'syz.1.3939': attribute type 19 has an invalid length. [ 662.823475][T17662] netlink: 'syz.1.3939': attribute type 19 has an invalid length. [ 662.913153][T17675] @0Ù: renamed from bond_slave_1 (while UP) [ 663.860171][T17706] veth0_vlan: entered allmulticast mode [ 664.167408][T17706] veth0_vlan: left promiscuous mode [ 664.279333][T17706] veth0_vlan: entered promiscuous mode [ 664.398174][T17706] team0: Device veth0_vlan failed to register rx_handler [ 664.934440][T17728] syzkaller0: entered promiscuous mode [ 664.946462][T17728] syzkaller0: entered allmulticast mode [ 665.033448][T17725] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 665.734146][T17749] IPv6: NLM_F_CREATE should be specified when creating new route [ 665.756576][T17749] IPv6: Can't replace route, no match found [ 668.089928][T17790] validate_nla: 27 callbacks suppressed [ 668.089946][T17790] netlink: 'syz.0.3985': attribute type 1 has an invalid length. [ 668.653998][T17808] netlink: 'syz.0.3992': attribute type 10 has an invalid length. [ 669.287819][T17828] netlink: 'syz.0.4001': attribute type 10 has an invalid length. [ 669.469457][T17828] team0: Device wg1 is of different type [ 672.928503][T17327] Bluetooth: hci3: ISO packet for unknown connection handle 11 [ 672.932691][T17938] tap0: tun_chr_ioctl cmd 1074025673 [ 672.936475][T17327] Bluetooth: hci3: ISO packet for unknown connection handle 11 [ 673.013367][T17937] tap0: tun_chr_ioctl cmd 1074025677 [ 673.066182][T17937] tap0: linktype set to 777 [ 673.494912][T17946] netlink: 'syz.0.4047': attribute type 3 has an invalid length. [ 673.546587][T17946] netlink: 201372 bytes leftover after parsing attributes in process `syz.0.4047'. [ 674.760083][T17987] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.4063'. [ 675.163591][T18000] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.4068'. [ 677.319372][T18017] netlink: 188 bytes leftover after parsing attributes in process `syz.2.4074'. [ 682.040191][T18128] netlink: 188 bytes leftover after parsing attributes in process `syz.1.4108'. [ 684.911957][T18194] netlink: 'syz.2.4130': attribute type 10 has an invalid length. [ 684.965842][T18194] bridge0: port 2(bridge_slave_1) entered disabled state [ 685.014146][T18194] bridge_slave_1: left allmulticast mode [ 685.020152][T18194] bridge_slave_1: left promiscuous mode [ 685.085393][T18194] bridge0: port 2(bridge_slave_1) entered disabled state [ 685.181098][T18194] : (slave bridge_slave_1): Enslaving as an active interface with an up link [ 685.505793][T18217] tap0: tun_chr_ioctl cmd 2147767519 [ 685.930218][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.936965][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.118497][T18235] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.4146'. [ 687.530013][T18259] netlink: 65027 bytes leftover after parsing attributes in process `syz.2.4154'. [ 687.605342][T18265] netlink: 'syz.3.4156': attribute type 46 has an invalid length. [ 688.142230][T18273] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 691.588867][T18366] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 693.689523][T18414] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.479719][T17327] Bluetooth: hci3: ISO packet for unknown connection handle 5 [ 695.613943][T18464] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0500:0023 with DS=0x32 [ 695.803460][T18470] FAULT_INJECTION: forcing a failure. [ 695.803460][T18470] name failslab, interval 1, probability 0, space 0, times 0 [ 695.877883][T18470] CPU: 0 PID: 18470 Comm: syz.1.4225 Not tainted syzkaller #0 [ 695.885511][T18470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 695.895596][T18470] Call Trace: [ 695.898896][T18470] [ 695.901853][T18470] dump_stack_lvl+0x18c/0x250 [ 695.906574][T18470] ? show_regs_print_info+0x20/0x20 [ 695.911904][T18470] ? load_image+0x420/0x420 [ 695.916451][T18470] ? __might_sleep+0xe0/0xe0 [ 695.921070][T18470] ? __lock_acquire+0x7eb0/0x7eb0 [ 695.926128][T18470] should_fail_ex+0x394/0x4c0 [ 695.930839][T18470] should_failslab+0x9/0x20 [ 695.935371][T18470] slab_pre_alloc_hook+0x59/0x300 [ 695.940445][T18470] kmem_cache_alloc_node+0x5e/0x310 [ 695.945672][T18470] ? __alloc_skb+0x103/0x2c0 [ 695.950272][T18470] __alloc_skb+0x103/0x2c0 [ 695.954696][T18470] alloc_skb_with_frags+0xcd/0x7a0 [ 695.959817][T18470] sock_alloc_send_pskb+0x883/0x9a0 [ 695.965034][T18470] ? sock_kzfree_s+0x50/0x50 [ 695.969638][T18470] tun_get_user+0xa44/0x3d30 [ 695.974332][T18470] ? trace_event_raw_event_lock+0x240/0x240 [ 695.980222][T18470] ? aa_file_perm+0x3e3/0xee0 [ 695.984905][T18470] ? rcu_read_unlock+0xa0/0xa0 [ 695.989689][T18470] ? tun_get+0x1c/0x2e0 [ 695.993948][T18470] ? __lock_acquire+0x7eb0/0x7eb0 [ 695.998997][T18470] ? tun_get+0x1c/0x2e0 [ 696.003177][T18470] tun_chr_write_iter+0x119/0x200 [ 696.008218][T18470] vfs_write+0x474/0x9a0 [ 696.012483][T18470] ? file_end_write+0x250/0x250 [ 696.017351][T18470] ? __fget_files+0x3fc/0x460 [ 696.022067][T18470] ? __fdget_pos+0x1d8/0x330 [ 696.026663][T18470] ? ksys_write+0x74/0x260 [ 696.031083][T18470] ksys_write+0x151/0x260 [ 696.035417][T18470] ? __ia32_sys_read+0x90/0x90 [ 696.040186][T18470] ? lockdep_hardirqs_on+0x98/0x150 [ 696.045389][T18470] do_syscall_64+0x55/0xb0 [ 696.049814][T18470] ? clear_bhb_loop+0x40/0x90 [ 696.054577][T18470] ? clear_bhb_loop+0x40/0x90 [ 696.059300][T18470] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 696.065218][T18470] RIP: 0033:0x7fe7a2f9e199 [ 696.069646][T18470] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 696.089339][T18470] RSP: 002b:00007fe7a3e2d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 696.097754][T18470] RAX: ffffffffffffffda RBX: 00007fe7a3225fa0 RCX: 00007fe7a2f9e199 [ 696.105746][T18470] RDX: 000000000000fdef RSI: 0000200000000180 RDI: 00000000000000c8 [ 696.113741][T18470] RBP: 00007fe7a3e2d090 R08: 0000000000000000 R09: 0000000000000000 [ 696.121728][T18470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 696.129731][T18470] R13: 00007fe7a3226038 R14: 00007fe7a3225fa0 R15: 00007fff341407a8 [ 696.137721][T18470] [ 697.728388][T18489] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4234'. [ 697.905301][T18489] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4234'. [ 697.996324][T18505] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0500:0023 with DS=0x32 [ 698.685412][T18521] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.4245'. [ 698.755627][T18521] netlink: 'syz.3.4245': attribute type 2 has an invalid length. [ 700.205419][T18569] netlink: 'syz.1.4261': attribute type 2 has an invalid length. [ 700.790596][T18587] netlink: 140 bytes leftover after parsing attributes in process `syz.1.4268'. [ 700.833125][T18587] netlink: 10 bytes leftover after parsing attributes in process `syz.1.4268'. [ 700.874570][T18587] bond0: (slave bond_slave_0): Releasing backup interface [ 700.912678][T18587] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 701.621980][T18620] netlink: 'syz.2.4282': attribute type 21 has an invalid length. [ 701.671494][T18620] netlink: 16166 bytes leftover after parsing attributes in process `syz.2.4282'. [ 702.503186][T18647] netlink: 'syz.2.4292': attribute type 22 has an invalid length. [ 702.511072][T18647] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4292'. [ 703.161239][T18673] netlink: 'syz.0.4302': attribute type 9 has an invalid length. [ 703.183083][T18673] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.4302'. [ 704.075624][T18683] hsr0: entered promiscuous mode [ 704.088723][T18683] hsr0: entered allmulticast mode [ 704.098811][T18683] hsr_slave_0: entered allmulticast mode [ 704.114803][T18683] hsr_slave_1: entered allmulticast mode [ 704.690047][T18707] syz.3.4312[18707] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 704.690455][T18707] syz.3.4312[18707] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 704.739353][T18704] syz.3.4312[18704] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 704.806953][T18704] syz.3.4312[18704] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 705.358751][T18727] netlink: 168 bytes leftover after parsing attributes in process `syz.1.4319'. [ 705.823060][T18739] netlink: 40227 bytes leftover after parsing attributes in process `syz.1.4324'. [ 708.767396][T18754] netlink: 'syz.3.4327': attribute type 22 has an invalid length. [ 708.783138][T18754] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4327'. [ 708.818630][T18750] delete_channel: no stack [ 708.999408][T18767] FAULT_INJECTION: forcing a failure. [ 708.999408][T18767] name failslab, interval 1, probability 0, space 0, times 0 [ 709.049305][T18767] CPU: 1 PID: 18767 Comm: syz.1.4331 Not tainted syzkaller #0 [ 709.056834][T18767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 709.066916][T18767] Call Trace: [ 709.070220][T18767] [ 709.073180][T18767] dump_stack_lvl+0x18c/0x250 [ 709.077896][T18767] ? show_regs_print_info+0x20/0x20 [ 709.083128][T18767] ? load_image+0x420/0x420 [ 709.087667][T18767] ? __might_sleep+0xe0/0xe0 [ 709.092288][T18767] ? __lock_acquire+0x7eb0/0x7eb0 [ 709.097347][T18767] should_fail_ex+0x394/0x4c0 [ 709.102066][T18767] should_failslab+0x9/0x20 [ 709.106599][T18767] slab_pre_alloc_hook+0x59/0x300 [ 709.111663][T18767] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 709.117423][T18767] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 709.123176][T18767] __kmem_cache_alloc_node+0x53/0x250 [ 709.128601][T18767] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 709.134350][T18767] __kmalloc+0xa7/0x240 [ 709.138556][T18767] tomoyo_realpath_from_path+0xe6/0x5c0 [ 709.144147][T18767] ? tomoyo_domain+0xd6/0x120 [ 709.148848][T18767] tomoyo_path_number_perm+0x248/0x5e0 [ 709.154313][T18767] ? tomoyo_path_number_perm+0x217/0x5e0 [ 709.159964][T18767] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 709.165428][T18767] ? ksys_write+0x1d2/0x260 [ 709.169958][T18767] ? __fget_files+0x28/0x460 [ 709.174557][T18767] security_file_ioctl+0x70/0xa0 [ 709.179498][T18767] __se_sys_ioctl+0x48/0x170 [ 709.184089][T18767] do_syscall_64+0x55/0xb0 [ 709.188507][T18767] ? clear_bhb_loop+0x40/0x90 [ 709.193179][T18767] ? clear_bhb_loop+0x40/0x90 [ 709.197936][T18767] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 709.203830][T18767] RIP: 0033:0x7fe7a2f9e199 [ 709.208251][T18767] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 709.227852][T18767] RSP: 002b:00007fe7a3e0c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 709.236263][T18767] RAX: ffffffffffffffda RBX: 00007fe7a3226090 RCX: 00007fe7a2f9e199 [ 709.244228][T18767] RDX: 0000200000000400 RSI: 000000000000891b RDI: 0000000000000005 [ 709.252193][T18767] RBP: 00007fe7a3e0c090 R08: 0000000000000000 R09: 0000000000000000 [ 709.260161][T18767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 709.268238][T18767] R13: 00007fe7a3226128 R14: 00007fe7a3226090 R15: 00007fff341407a8 [ 709.276398][T18767] [ 709.285778][T18767] ERROR: Out of memory at tomoyo_realpath_from_path. [ 709.859400][T18788] netlink: 'syz.1.4340': attribute type 22 has an invalid length. [ 710.049880][T18788] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4340'. [ 710.714167][T18810] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.4346'. [ 711.090957][T18823] syzkaller0: entered promiscuous mode [ 711.099992][T18823] syzkaller0: entered allmulticast mode [ 713.691191][T18860] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4363'. [ 713.781584][T18860] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4363'. [ 713.814528][T18861] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4363'. [ 713.845580][T18860] netlink: 'syz.3.4363': attribute type 21 has an invalid length. [ 713.867366][T18860] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4363'. [ 714.187560][T17327] Bluetooth: hci1: unexpected subevent 0x0a length: 150 > 30 [ 714.197089][T17327] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:0' [ 714.206857][T17327] CPU: 1 PID: 17327 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 714.214550][T17327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 714.224635][T17327] Workqueue: hci1 hci_rx_work [ 714.229466][T17327] Call Trace: [ 714.232765][T17327] [ 714.235730][T17327] dump_stack_lvl+0x18c/0x250 [ 714.240451][T17327] ? show_regs_print_info+0x20/0x20 [ 714.245680][T17327] ? load_image+0x420/0x420 [ 714.250237][T17327] sysfs_create_dir_ns+0x26e/0x2a0 [ 714.255393][T17327] ? __lock_acquire+0x7eb0/0x7eb0 [ 714.260443][T17327] ? sysfs_warn_dup+0xa0/0xa0 [ 714.265245][T17327] ? do_raw_spin_unlock+0x121/0x230 [ 714.270482][T17327] kobject_add_internal+0x617/0xc90 [ 714.275798][T17327] kobject_add+0x164/0x240 [ 714.280253][T17327] ? kobject_init+0x1d0/0x1d0 [ 714.284966][T17327] ? get_device_parent+0x366/0x390 [ 714.290155][T17327] device_add+0x3fa/0xc40 [ 714.294535][T17327] hci_conn_add_sysfs+0xd5/0x1e0 [ 714.299599][T17327] le_conn_complete_evt+0xe9a/0x1480 [ 714.305067][T17327] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 714.311363][T17327] ? bt_info+0x180/0x180 [ 714.315638][T17327] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 714.321396][T17327] ? mutex_unlock+0x10/0x10 [ 714.326049][T17327] ? skb_pull_data+0xf0/0x1f0 [ 714.330984][T17327] hci_le_enh_conn_complete_evt+0x189/0x460 [ 714.337145][T17327] ? hci_le_remote_conn_param_req_evt+0xcb0/0xcb0 [ 714.344574][T17327] ? hci_remote_host_features_evt+0x150/0x150 [ 714.350671][T17327] hci_event_packet+0x7b4/0x1280 [ 714.355676][T17327] ? __lock_acquire+0x7eb0/0x7eb0 [ 714.360731][T17327] ? lock_chain_count+0x20/0x20 [ 714.365604][T17327] ? bis_list+0x290/0x290 [ 714.370569][T17327] ? kcov_remote_start+0x513/0x810 [ 714.375753][T17327] ? lockdep_hardirqs_on+0x98/0x150 [ 714.380995][T17327] ? hci_send_to_monitor+0xd7/0x4f0 [ 714.386426][T17327] hci_rx_work+0x43a/0xd60 [ 714.390917][T17327] ? process_scheduled_works+0x975/0x1600 [ 714.396682][T17327] process_scheduled_works+0xa60/0x1600 [ 714.402416][T17327] ? worker_attach_to_pool+0x370/0x370 [ 714.407950][T17327] ? assign_work+0x3cc/0x5d0 [ 714.412626][T17327] worker_thread+0xa5e/0xfe0 [ 714.417292][T17327] ? _raw_spin_unlock+0x40/0x40 [ 714.422254][T17327] ? __kthread_parkme+0x71/0x1c0 [ 714.427242][T17327] kthread+0x2fa/0x390 [ 714.431335][T17327] ? pr_cont_work+0x550/0x550 [ 714.436037][T17327] ? kthread_blkcg+0xd0/0xd0 [ 714.440655][T17327] ret_from_fork+0x48/0x80 [ 714.445097][T17327] ? kthread_blkcg+0xd0/0xd0 [ 714.449706][T17327] ret_from_fork_asm+0x11/0x20 [ 714.454561][T17327] [ 714.460635][T17327] kobject: kobject_add_internal failed for hci1:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 714.474883][T17327] Bluetooth: hci1: failed to register connection device [ 714.871981][T18888] FAULT_INJECTION: forcing a failure. [ 714.871981][T18888] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 714.902971][T18888] CPU: 0 PID: 18888 Comm: syz.3.4372 Not tainted syzkaller #0 [ 714.910521][T18888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 714.920618][T18888] Call Trace: [ 714.923926][T18888] [ 714.926875][T18888] dump_stack_lvl+0x18c/0x250 [ 714.931613][T18888] ? show_regs_print_info+0x20/0x20 [ 714.936878][T18888] ? load_image+0x420/0x420 [ 714.941421][T18888] ? __might_fault+0xaa/0x120 [ 714.946226][T18888] ? __lock_acquire+0x7eb0/0x7eb0 [ 714.951291][T18888] should_fail_ex+0x394/0x4c0 [ 714.956008][T18888] _copy_from_iter+0x1cd/0x1290 [ 714.960890][T18888] ? __might_fault+0xaa/0x120 [ 714.965609][T18888] ? copyout_mc+0x70/0x70 [ 714.969980][T18888] ? copyout_mc+0x70/0x70 [ 714.974335][T18888] ? __virt_addr_valid+0x10c/0x380 [ 714.979501][T18888] ? page_copy_sane+0x16a/0x270 [ 714.984476][T18888] copy_page_from_iter+0x7b/0x100 [ 714.989543][T18888] skb_copy_datagram_from_iter+0x2ea/0x6f0 [ 714.995392][T18888] tun_get_user+0xc99/0x3d30 [ 715.000018][T18888] ? trace_event_raw_event_lock+0x240/0x240 [ 715.005942][T18888] ? aa_file_perm+0x3e3/0xee0 [ 715.010658][T18888] ? rcu_read_unlock+0xa0/0xa0 [ 715.015475][T18888] ? tun_get+0x1c/0x2e0 [ 715.019663][T18888] ? __lock_acquire+0x7eb0/0x7eb0 [ 715.024720][T18888] ? tun_get+0x1c/0x2e0 [ 715.028910][T18888] tun_chr_write_iter+0x119/0x200 [ 715.033973][T18888] vfs_write+0x474/0x9a0 [ 715.038258][T18888] ? file_end_write+0x250/0x250 [ 715.043140][T18888] ? __fget_files+0x3fc/0x460 [ 715.047866][T18888] ? __fdget_pos+0x1d8/0x330 [ 715.052483][T18888] ? ksys_write+0x74/0x260 [ 715.056922][T18888] ksys_write+0x151/0x260 [ 715.061272][T18888] ? __ia32_sys_read+0x90/0x90 [ 715.066050][T18888] ? lockdep_hardirqs_on+0x98/0x150 [ 715.071253][T18888] do_syscall_64+0x55/0xb0 [ 715.075676][T18888] ? clear_bhb_loop+0x40/0x90 [ 715.080438][T18888] ? clear_bhb_loop+0x40/0x90 [ 715.085114][T18888] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 715.091034][T18888] RIP: 0033:0x7f1e7259e199 [ 715.095454][T18888] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 715.115071][T18888] RSP: 002b:00007f1e73460028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 715.123497][T18888] RAX: ffffffffffffffda RBX: 00007f1e72825fa0 RCX: 00007f1e7259e199 [ 715.131471][T18888] RDX: 000000000000fdef RSI: 0000200000000180 RDI: 00000000000000c8 [ 715.139441][T18888] RBP: 00007f1e73460090 R08: 0000000000000000 R09: 0000000000000000 [ 715.147419][T18888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 715.155395][T18888] R13: 00007f1e72826038 R14: 00007f1e72825fa0 R15: 00007ffc15a72288 [ 715.163385][T18888] [ 716.563340][T17327] Bluetooth: hci1: command 0x0406 tx timeout [ 718.717082][T18909] netlink: 2 bytes leftover after parsing attributes in process `syz.0.4378'. [ 719.752318][T18946] FAULT_INJECTION: forcing a failure. [ 719.752318][T18946] name failslab, interval 1, probability 0, space 0, times 0 [ 719.809059][T18946] CPU: 1 PID: 18946 Comm: syz.0.4392 Not tainted syzkaller #0 [ 719.816590][T18946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 719.826678][T18946] Call Trace: [ 719.829995][T18946] [ 719.832956][T18946] dump_stack_lvl+0x18c/0x250 [ 719.837689][T18946] ? show_regs_print_info+0x20/0x20 [ 719.842927][T18946] ? load_image+0x420/0x420 [ 719.847466][T18946] ? __might_sleep+0xe0/0xe0 [ 719.852094][T18946] ? __lock_acquire+0x7eb0/0x7eb0 [ 719.857154][T18946] ? lock_chain_count+0x20/0x20 [ 719.862042][T18946] should_fail_ex+0x394/0x4c0 [ 719.866762][T18946] should_failslab+0x9/0x20 [ 719.871304][T18946] slab_pre_alloc_hook+0x59/0x300 [ 719.876375][T18946] ? _raw_spin_unlock+0x40/0x40 [ 719.881259][T18946] ? string+0x257/0x290 [ 719.885455][T18946] ? __request_module+0x2d1/0x600 [ 719.890520][T18946] __kmem_cache_alloc_node+0x53/0x250 [ 719.895934][T18946] ? __request_module+0x2d1/0x600 [ 719.900989][T18946] kmalloc_trace+0x2a/0xe0 [ 719.905440][T18946] __request_module+0x2d1/0x600 [ 719.910330][T18946] ? module_enforce_rwx_sections+0x150/0x150 [ 719.916353][T18946] ? bpf_lsm_capable+0x9/0x10 [ 719.921057][T18946] ? security_capable+0x89/0xb0 [ 719.925943][T18946] ? dev_load+0x21/0x1f0 [ 719.930303][T18946] dev_load+0x18b/0x1f0 [ 719.934494][T18946] devinet_ioctl+0x127/0x1d70 [ 719.939312][T18946] ? __might_fault+0xc6/0x120 [ 719.944028][T18946] ? inet_ifa_byprefix+0x2a0/0x2a0 [ 719.949286][T18946] ? _copy_from_user+0xa5/0xe0 [ 719.954101][T18946] ? get_user_ifreq+0x12b/0x180 [ 719.959081][T18946] inet_ioctl+0x392/0x560 [ 719.963448][T18946] ? tomoyo_path_number_perm+0x217/0x5e0 [ 719.969124][T18946] ? inet_shutdown+0x370/0x370 [ 719.973920][T18946] ? slab_free_freelist_hook+0x130/0x1a0 [ 719.979590][T18946] ? tomoyo_path_number_perm+0x4b7/0x5e0 [ 719.985282][T18946] ? __kmem_cache_free+0xba/0x1f0 [ 719.990371][T18946] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 719.995891][T18946] ? packet_ioctl+0x1c4/0x350 [ 720.000640][T18946] sock_do_ioctl+0xfc/0x310 [ 720.005191][T18946] ? sock_show_fdinfo+0xb0/0xb0 [ 720.010094][T18946] sock_ioctl+0x5be/0x7e0 [ 720.014471][T18946] ? sock_poll+0x3e0/0x3e0 [ 720.018940][T18946] ? bpf_lsm_file_ioctl+0x9/0x10 [ 720.024004][T18946] ? security_file_ioctl+0x80/0xa0 [ 720.029163][T18946] ? sock_poll+0x3e0/0x3e0 [ 720.033623][T18946] __se_sys_ioctl+0xfd/0x170 [ 720.038262][T18946] do_syscall_64+0x55/0xb0 [ 720.042721][T18946] ? clear_bhb_loop+0x40/0x90 [ 720.047436][T18946] ? clear_bhb_loop+0x40/0x90 [ 720.052148][T18946] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 720.058081][T18946] RIP: 0033:0x7f0a9539e199 [ 720.062527][T18946] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 720.082428][T18946] RSP: 002b:00007f0a96284028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 720.090880][T18946] RAX: ffffffffffffffda RBX: 00007f0a95626090 RCX: 00007f0a9539e199 [ 720.098889][T18946] RDX: 0000200000000400 RSI: 000000000000891b RDI: 0000000000000005 [ 720.106897][T18946] RBP: 00007f0a96284090 R08: 0000000000000000 R09: 0000000000000000 [ 720.114899][T18946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 720.122898][T18946] R13: 00007f0a95626128 R14: 00007f0a95626090 R15: 00007ffd56f4f068 [ 720.130920][T18946] [ 720.502438][T18951] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.4393'. [ 720.512006][T18951] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.4393'. [ 720.528822][T18949] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.4393'. [ 720.540918][T18951] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.4393'. [ 720.569387][T18949] netlink: 'syz.2.4393': attribute type 10 has an invalid length. [ 720.598907][T18949] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4393'. [ 720.659219][T18949] batman_adv: batadv0: Adding interface: veth1_virt_wifi [ 720.671827][T18949] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 720.708742][T18949] batman_adv: batadv0: Interface activated: veth1_virt_wifi [ 722.717521][T17327] Bluetooth: hci3: unexpected subevent 0x0a length: 150 > 30 [ 724.031595][T18998] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 724.040804][T18998] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 724.804276][T17327] Bluetooth: hci3: command 0x0406 tx timeout [ 727.017686][T18998] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 727.032843][T18998] batman_adv: batadv0: Removing interface: virt_wifi0 [ 728.139653][T19035] netlink: 65027 bytes leftover after parsing attributes in process `syz.0.4422'. [ 728.600742][T19064] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.4429'. [ 729.278843][T19101] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4442'. [ 729.520819][T19109] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.4445'. [ 730.078935][T19132] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0500:0023 with DS=0x32 [ 730.160636][T19132] netlink: 'syz.3.4453': attribute type 10 has an invalid length. [ 730.206331][T19132] veth0_macvtap: left promiscuous mode [ 730.719093][T19151] netlink: 105940 bytes leftover after parsing attributes in process `syz.0.4461'. [ 730.787572][T19151] netlink: 156 bytes leftover after parsing attributes in process `syz.0.4461'. [ 730.821185][T19151] netlink: 'syz.0.4461': attribute type 28 has an invalid length. [ 730.853797][T19151] netlink: 'syz.0.4461': attribute type 29 has an invalid length. [ 730.855738][T19155] netlink: 'syz.1.4464': attribute type 9 has an invalid length. [ 730.862642][T19151] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4461'. [ 730.889592][T19155] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.4464'. [ 730.994651][T19156] netlink: 'syz.1.4464': attribute type 9 has an invalid length. [ 731.013907][T19156] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.4464'. [ 731.125317][T19157] netlink: 'syz.1.4464': attribute type 9 has an invalid length. [ 731.149836][T19157] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.4464'. [ 733.377075][T19206] netlink: 65027 bytes leftover after parsing attributes in process `syz.2.4481'. [ 733.904502][T19224] netlink: 203972 bytes leftover after parsing attributes in process `syz.3.4485'. [ 733.942732][T19224] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 734.809940][T19245] netlink: 144 bytes leftover after parsing attributes in process `syz.0.4495'. [ 735.434866][T19251] netlink: 65027 bytes leftover after parsing attributes in process `syz.1.4496'. [ 735.655323][T19264] bridge_slave_0: left allmulticast mode [ 735.661359][T19264] bridge_slave_0: left promiscuous mode [ 735.675080][T19264] bridge0: port 1(bridge_slave_0) entered disabled state [ 737.274397][T19313] netlink: 'syz.0.4518': attribute type 9 has an invalid length. [ 737.282456][T19313] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.4518'. [ 738.068398][T19331] syzkaller0: entered promiscuous mode [ 738.141802][T19331] syzkaller0: entered allmulticast mode [ 740.219832][T19356] delete_channel: no stack [ 741.970339][T19381] netlink: 'syz.3.4546': attribute type 9 has an invalid length. [ 741.978811][T19381] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.4546'. [ 742.092254][T19380] bridge_slave_1: left allmulticast mode [ 742.102771][T19380] bridge_slave_1: left promiscuous mode [ 742.112404][T19380] bridge0: port 2(bridge_slave_1) entered disabled state [ 742.141227][T19380] bridge_slave_0: left allmulticast mode [ 742.152461][T19380] bridge_slave_0: left promiscuous mode [ 742.170039][T19380] bridge0: port 1(bridge_slave_0) entered disabled state [ 742.596796][T19390] syzkaller0: entered promiscuous mode [ 742.602423][T19390] syzkaller0: entered allmulticast mode [ 742.708645][T19402] netlink: 'syz.2.4544': attribute type 17 has an invalid length. [ 742.733025][T19402] netlink: 148 bytes leftover after parsing attributes in process `syz.2.4544'. [ 745.440679][T19426] FAULT_INJECTION: forcing a failure. [ 745.440679][T19426] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 745.456093][T19426] CPU: 0 PID: 19426 Comm: syz.1.4563 Not tainted syzkaller #0 [ 745.463605][T19426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 745.473775][T19426] Call Trace: [ 745.477063][T19426] [ 745.480001][T19426] dump_stack_lvl+0x18c/0x250 [ 745.484704][T19426] ? show_regs_print_info+0x20/0x20 [ 745.489920][T19426] ? load_image+0x420/0x420 [ 745.494437][T19426] ? __might_fault+0xaa/0x120 [ 745.499122][T19426] ? __lock_acquire+0x7eb0/0x7eb0 [ 745.504682][T19426] should_fail_ex+0x394/0x4c0 [ 745.509371][T19426] _copy_from_iter+0x1cd/0x1290 [ 745.514226][T19426] ? __might_fault+0xaa/0x120 [ 745.518911][T19426] ? copyout_mc+0x70/0x70 [ 745.523246][T19426] ? copyout_mc+0x70/0x70 [ 745.527603][T19426] ? __virt_addr_valid+0x10c/0x380 [ 745.532737][T19426] ? page_copy_sane+0x16a/0x270 [ 745.537605][T19426] copy_page_from_iter+0x7b/0x100 [ 745.542646][T19426] skb_copy_datagram_from_iter+0x2ea/0x6f0 [ 745.548470][T19426] tun_get_user+0xc99/0x3d30 [ 745.553077][T19426] ? aa_file_perm+0x3e3/0xee0 [ 745.557761][T19426] ? rcu_read_unlock+0xa0/0xa0 [ 745.562538][T19426] ? tun_get+0x1c/0x2e0 [ 745.566698][T19426] ? __lock_acquire+0x7eb0/0x7eb0 [ 745.571735][T19426] ? tun_get+0x1c/0x2e0 [ 745.575924][T19426] tun_chr_write_iter+0x119/0x200 [ 745.580955][T19426] vfs_write+0x474/0x9a0 [ 745.585250][T19426] ? file_end_write+0x250/0x250 [ 745.590124][T19426] ? __fget_files+0x3fc/0x460 [ 745.594812][T19426] ? __fdget_pos+0x1d8/0x330 [ 745.599449][T19426] ? ksys_write+0x74/0x260 [ 745.603873][T19426] ksys_write+0x151/0x260 [ 745.608222][T19426] ? __ia32_sys_read+0x90/0x90 [ 745.612999][T19426] ? lockdep_hardirqs_on+0x98/0x150 [ 745.618216][T19426] do_syscall_64+0x55/0xb0 [ 745.622638][T19426] ? clear_bhb_loop+0x40/0x90 [ 745.627325][T19426] ? clear_bhb_loop+0x40/0x90 [ 745.632003][T19426] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 745.637904][T19426] RIP: 0033:0x7fe7a2f9e199 [ 745.642330][T19426] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 745.661942][T19426] RSP: 002b:00007fe7a3e2d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 745.670361][T19426] RAX: ffffffffffffffda RBX: 00007fe7a3225fa0 RCX: 00007fe7a2f9e199 [ 745.678360][T19426] RDX: 000000000000fdef RSI: 0000200000000180 RDI: 00000000000000c8 [ 745.686381][T19426] RBP: 00007fe7a3e2d090 R08: 0000000000000000 R09: 0000000000000000 [ 745.694362][T19426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 745.702331][T19426] R13: 00007fe7a3226038 R14: 00007fe7a3225fa0 R15: 00007fff341407a8 [ 745.710353][T19426] [ 746.771113][T19461] FAULT_INJECTION: forcing a failure. [ 746.771113][T19461] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 746.788175][T19461] CPU: 0 PID: 19461 Comm: syz.3.4569 Not tainted syzkaller #0 [ 746.795702][T19461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 746.805793][T19461] Call Trace: [ 746.809105][T19461] [ 746.812058][T19461] dump_stack_lvl+0x18c/0x250 [ 746.816787][T19461] ? show_regs_print_info+0x20/0x20 [ 746.821997][T19461] ? load_image+0x420/0x420 [ 746.826547][T19461] ? __might_fault+0xaa/0x120 [ 746.831228][T19461] ? __lock_acquire+0x7eb0/0x7eb0 [ 746.836263][T19461] should_fail_ex+0x394/0x4c0 [ 746.840962][T19461] _copy_from_iter+0x1cd/0x1290 [ 746.845820][T19461] ? __might_fault+0xaa/0x120 [ 746.850508][T19461] ? copyout_mc+0x70/0x70 [ 746.854847][T19461] ? copyout_mc+0x70/0x70 [ 746.859181][T19461] ? __virt_addr_valid+0x10c/0x380 [ 746.864310][T19461] ? page_copy_sane+0x16a/0x270 [ 746.869174][T19461] copy_page_from_iter+0x7b/0x100 [ 746.874211][T19461] skb_copy_datagram_from_iter+0x2ea/0x6f0 [ 746.880027][T19461] tun_get_user+0xc99/0x3d30 [ 746.884631][T19461] ? aa_file_perm+0x3e3/0xee0 [ 746.889313][T19461] ? rcu_read_unlock+0xa0/0xa0 [ 746.894100][T19461] ? tun_get+0x1c/0x2e0 [ 746.898262][T19461] ? __lock_acquire+0x7eb0/0x7eb0 [ 746.903296][T19461] ? tun_get+0x1c/0x2e0 [ 746.907462][T19461] tun_chr_write_iter+0x119/0x200 [ 746.912580][T19461] vfs_write+0x474/0x9a0 [ 746.916831][T19461] ? file_end_write+0x250/0x250 [ 746.921690][T19461] ? __fget_files+0x3fc/0x460 [ 746.926382][T19461] ? __fdget_pos+0x1d8/0x330 [ 746.930977][T19461] ? ksys_write+0x74/0x260 [ 746.935404][T19461] ksys_write+0x151/0x260 [ 746.939746][T19461] ? __ia32_sys_read+0x90/0x90 [ 746.944523][T19461] ? lockdep_hardirqs_on+0x98/0x150 [ 746.949738][T19461] do_syscall_64+0x55/0xb0 [ 746.954167][T19461] ? clear_bhb_loop+0x40/0x90 [ 746.958847][T19461] ? clear_bhb_loop+0x40/0x90 [ 746.963540][T19461] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 746.969443][T19461] RIP: 0033:0x7f1e7259e199 [ 746.973862][T19461] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 746.993508][T19461] RSP: 002b:00007f1e73460028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 747.001930][T19461] RAX: ffffffffffffffda RBX: 00007f1e72825fa0 RCX: 00007f1e7259e199 [ 747.009972][T19461] RDX: 000000000000fdef RSI: 0000200000000180 RDI: 00000000000000c8 [ 747.018031][T19461] RBP: 00007f1e73460090 R08: 0000000000000000 R09: 0000000000000000 [ 747.026002][T19461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 747.035865][T19461] R13: 00007f1e72826038 R14: 00007f1e72825fa0 R15: 00007ffc15a72288 [ 747.043865][T19461] [ 747.368073][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.375610][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.298584][T19511] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.4588'. [ 748.377870][T19515] sctp: [Deprecated]: syz.0.4590 (pid 19515) Use of struct sctp_assoc_value in delayed_ack socket option. [ 748.377870][T19515] Use struct sctp_sack_info instead [ 748.426215][T19511] netlink: 'syz.3.4588': attribute type 13 has an invalid length. [ 748.442943][T19511] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4588'. [ 748.489665][T19511] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 748.705233][T19524] C: renamed from team_slave_0 (while UP) [ 748.758802][T19524] netlink: 'syz.1.4593': attribute type 3 has an invalid length. [ 748.783656][T19524] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4593'. [ 748.832293][T19528] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0500:0023 with DS=0x32 [ 750.336306][T19554] netlink: 6 bytes leftover after parsing attributes in process `syz.2.4604'. [ 750.383012][T19554] openvswitch: netlink: Flow actions attr not present in new flow. [ 751.060784][T19580] netlink: 'syz.2.4613': attribute type 2 has an invalid length. [ 751.097745][T19580] netlink: 'syz.2.4613': attribute type 1 has an invalid length. [ 751.134761][T19580] netlink: 'syz.2.4613': attribute type 2 has an invalid length. [ 751.163062][T19580] netlink: 198048 bytes leftover after parsing attributes in process `syz.2.4613'. [ 751.879075][T19602] FAULT_INJECTION: forcing a failure. [ 751.879075][T19602] name failslab, interval 1, probability 0, space 0, times 0 [ 751.891810][T19602] CPU: 0 PID: 19602 Comm: syz.0.4621 Not tainted syzkaller #0 [ 751.899395][T19602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 751.909488][T19602] Call Trace: [ 751.912801][T19602] [ 751.915766][T19602] dump_stack_lvl+0x18c/0x250 [ 751.920484][T19602] ? show_regs_print_info+0x20/0x20 [ 751.925721][T19602] ? load_image+0x420/0x420 [ 751.930278][T19602] should_fail_ex+0x394/0x4c0 [ 751.935003][T19602] should_failslab+0x9/0x20 [ 751.939547][T19602] slab_pre_alloc_hook+0x59/0x300 [ 751.944629][T19602] kmem_cache_alloc+0x5a/0x2c0 [ 751.949455][T19602] ? __nf_conntrack_alloc+0x93/0x370 [ 751.954792][T19602] __nf_conntrack_alloc+0x93/0x370 [ 751.959970][T19602] init_conntrack+0x166/0xe20 [ 751.964700][T19602] ? early_drop+0x7f0/0x7f0 [ 751.969240][T19602] ? nf_conntrack_find_get+0x670/0x670 [ 751.974728][T19602] ? __siphash_unaligned+0x25c/0x3d0 [ 751.980142][T19602] nf_conntrack_in+0xc29/0x15b0 [ 751.985054][T19602] ? nf_ct_pernet+0x270/0x270 [ 751.989890][T19602] ? ip6t_do_table+0x1cb/0x1570 [ 751.994771][T19602] ? ip6t_alloc_initial_table+0x640/0x640 [ 752.000532][T19602] ? ipv6_defrag+0x2d6/0x3a0 [ 752.005153][T19602] ? ipv4_conntrack_local+0x200/0x200 [ 752.010553][T19602] nf_hook_slow+0xbd/0x200 [ 752.015007][T19602] NF_HOOK+0x21d/0x3b0 [ 752.019104][T19602] ? sock_wfree+0x24f/0x600 [ 752.023633][T19602] ? ip6_rcv_core+0x1082/0x1700 [ 752.028513][T19602] ? net_zcopy_put_abort+0x90/0x90 [ 752.033666][T19602] ? NF_HOOK+0x9f/0x3b0 [ 752.037850][T19602] ? ip6_rcv_core+0x1700/0x1700 [ 752.042942][T19602] ? net_zcopy_put_abort+0x90/0x90 [ 752.048119][T19602] ? ip6_rcv_finish_core+0x420/0x420 [ 752.053452][T19602] __netif_receive_skb+0xcc/0x290 [ 752.058515][T19602] ? netif_receive_skb+0x106/0x720 [ 752.063662][T19602] netif_receive_skb+0x1bc/0x720 [ 752.068638][T19602] ? __bpf_trace_tasklet+0x160/0x160 [ 752.073952][T19602] ? enqueue_to_backlog+0xe90/0xe90 [ 752.079181][T19602] ? perf_trace_preemptirq_template+0xac/0x330 [ 752.085386][T19602] ? tun_rx_batched+0x186/0x790 [ 752.090280][T19602] tun_rx_batched+0x1df/0x790 [ 752.095003][T19602] ? pskb_may_pull+0xf0/0xf0 [ 752.099625][T19602] ? __local_bh_enable_ip+0x13a/0x1c0 [ 752.105026][T19602] ? lockdep_hardirqs_on+0x98/0x150 [ 752.110259][T19602] ? read_lock_is_recursive+0x20/0x20 [ 752.115665][T19602] ? __local_bh_enable_ip+0x13a/0x1c0 [ 752.121251][T19602] ? _local_bh_enable+0xa0/0xa0 [ 752.126132][T19602] ? skb_copy_datagram_from_iter+0x63c/0x6f0 [ 752.132154][T19602] tun_get_user+0x286c/0x3d30 [ 752.136877][T19602] ? tun_get_user+0x2488/0x3d30 [ 752.141770][T19602] ? aa_file_perm+0x3e3/0xee0 [ 752.146570][T19602] ? rcu_read_unlock+0xa0/0xa0 [ 752.151405][T19602] ? tun_get+0x1c/0x2e0 [ 752.155592][T19602] ? __lock_acquire+0x7eb0/0x7eb0 [ 752.160674][T19602] ? tun_get+0x1c/0x2e0 [ 752.164908][T19602] tun_chr_write_iter+0x119/0x200 [ 752.169989][T19602] vfs_write+0x474/0x9a0 [ 752.174285][T19602] ? file_end_write+0x250/0x250 [ 752.179179][T19602] ? __fget_files+0x3fc/0x460 [ 752.183905][T19602] ? __fdget_pos+0x1d8/0x330 [ 752.188533][T19602] ? ksys_write+0x74/0x260 [ 752.192984][T19602] ksys_write+0x151/0x260 [ 752.197349][T19602] ? __ia32_sys_read+0x90/0x90 [ 752.202152][T19602] ? lockdep_hardirqs_on+0x98/0x150 [ 752.207381][T19602] do_syscall_64+0x55/0xb0 [ 752.211831][T19602] ? clear_bhb_loop+0x40/0x90 [ 752.216532][T19602] ? clear_bhb_loop+0x40/0x90 [ 752.221240][T19602] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 752.227177][T19602] RIP: 0033:0x7f0a9539e199 [ 752.231619][T19602] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 752.251367][T19602] RSP: 002b:00007f0a962a5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 752.259821][T19602] RAX: ffffffffffffffda RBX: 00007f0a95625fa0 RCX: 00007f0a9539e199 [ 752.267825][T19602] RDX: 000000000000fdef RSI: 0000200000000180 RDI: 00000000000000c8 [ 752.275829][T19602] RBP: 00007f0a962a5090 R08: 0000000000000000 R09: 0000000000000000 [ 752.283832][T19602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 752.291835][T19602] R13: 00007f0a95626038 R14: 00007f0a95625fa0 R15: 00007ffd56f4f068 [ 752.299856][T19602] [ 752.310912][ T5780] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 752.321650][ T5780] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 752.333284][ T5780] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 752.344297][ T5780] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 752.353441][ T5780] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 752.363297][ T5780] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 753.100534][ T4611] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 753.472387][ T4611] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 753.718933][ T4611] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 753.761768][T19604] chnl_net:caif_netlink_parms(): no params data found [ 753.946674][ T4611] netdevsim netdevsim2 ÿÿÿÿÿÿ (unregistering): left allmulticast mode [ 753.982580][ T4611] netdevsim netdevsim2 ÿÿÿÿÿÿ (unregistering): left promiscuous mode [ 754.004881][ T4611] bridge0: port 3(ÿÿÿÿÿÿ) entered disabled state [ 754.030922][ T4611] netdevsim netdevsim2 ÿÿÿÿÿÿ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 754.297081][T19604] bridge0: port 1(bridge_slave_0) entered blocking state [ 754.347045][T19604] bridge0: port 1(bridge_slave_0) entered disabled state [ 754.366997][T19604] bridge_slave_0: entered allmulticast mode [ 754.376193][T19604] bridge_slave_0: entered promiscuous mode [ 754.403460][T17327] Bluetooth: hci0: command tx timeout [ 754.411820][T19604] bridge0: port 2(bridge_slave_1) entered blocking state [ 754.443097][T19604] bridge0: port 2(bridge_slave_1) entered disabled state [ 754.450389][T19604] bridge_slave_1: entered allmulticast mode [ 754.524653][T19604] bridge_slave_1: entered promiscuous mode [ 754.656038][T19604] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 754.749107][T19604] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 754.874582][T19604] team0: Port device team_slave_0 added [ 754.888470][T19666] netlink: 'syz.3.4639': attribute type 29 has an invalid length. [ 754.896413][T19604] team0: Port device team_slave_1 added [ 754.933384][T19666] netlink: 'syz.3.4639': attribute type 29 has an invalid length. [ 754.975915][T19604] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 754.989144][T19604] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 755.032231][T19674] FAULT_INJECTION: forcing a failure. [ 755.032231][T19674] name failslab, interval 1, probability 0, space 0, times 0 [ 755.045364][T19674] CPU: 1 PID: 19674 Comm: syz.0.4640 Not tainted syzkaller #0 [ 755.052856][T19674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 755.062940][T19674] Call Trace: [ 755.066242][T19674] [ 755.069181][T19674] dump_stack_lvl+0x18c/0x250 [ 755.073872][T19674] ? show_regs_print_info+0x20/0x20 [ 755.079079][T19674] ? load_image+0x420/0x420 [ 755.083593][T19674] should_fail_ex+0x394/0x4c0 [ 755.088286][T19674] should_failslab+0x9/0x20 [ 755.092795][T19674] slab_pre_alloc_hook+0x59/0x300 [ 755.097928][T19674] ? nf_ct_ext_add+0x1ab/0x3e0 [ 755.102715][T19674] ? nf_ct_ext_add+0x1ab/0x3e0 [ 755.107483][T19674] __kmem_cache_alloc_node+0x53/0x250 [ 755.112874][T19674] ? nf_ct_ext_add+0x1ab/0x3e0 [ 755.117648][T19674] __kmalloc_node_track_caller+0xa4/0x230 [ 755.123376][T19674] krealloc+0x86/0x120 [ 755.127451][T19674] nf_ct_ext_add+0x1ab/0x3e0 [ 755.132041][T19674] init_conntrack+0x561/0xe20 [ 755.136726][T19674] ? early_drop+0x7f0/0x7f0 [ 755.141234][T19674] ? nf_conntrack_find_get+0x670/0x670 [ 755.146698][T19674] ? __siphash_unaligned+0x25c/0x3d0 [ 755.151990][T19674] nf_conntrack_in+0xc29/0x15b0 [ 755.156863][T19674] ? nf_ct_pernet+0x270/0x270 [ 755.161550][T19674] ? ip6t_do_table+0x1cb/0x1570 [ 755.166408][T19674] ? ip6t_alloc_initial_table+0x640/0x640 [ 755.172135][T19674] ? ipv6_defrag+0x2d6/0x3a0 [ 755.176724][T19674] ? ipv4_conntrack_local+0x200/0x200 [ 755.182097][T19674] nf_hook_slow+0xbd/0x200 [ 755.186526][T19674] NF_HOOK+0x21d/0x3b0 [ 755.190601][T19674] ? sock_wfree+0x24f/0x600 [ 755.195106][T19674] ? ip6_rcv_core+0x1082/0x1700 [ 755.199958][T19674] ? net_zcopy_put_abort+0x90/0x90 [ 755.205077][T19674] ? NF_HOOK+0x9f/0x3b0 [ 755.209235][T19674] ? ip6_rcv_core+0x1700/0x1700 [ 755.214087][T19674] ? net_zcopy_put_abort+0x90/0x90 [ 755.219284][T19674] ? ip6_rcv_finish_core+0x420/0x420 [ 755.224597][T19674] __netif_receive_skb+0xcc/0x290 [ 755.229642][T19674] ? netif_receive_skb+0x106/0x720 [ 755.234759][T19674] netif_receive_skb+0x1bc/0x720 [ 755.239699][T19674] ? __bpf_trace_tasklet+0x160/0x160 [ 755.244987][T19674] ? enqueue_to_backlog+0xe90/0xe90 [ 755.250184][T19674] ? perf_trace_preemptirq_template+0xac/0x330 [ 755.256430][T19674] ? tun_rx_batched+0x186/0x790 [ 755.261289][T19674] tun_rx_batched+0x1df/0x790 [ 755.265974][T19674] ? pskb_may_pull+0xf0/0xf0 [ 755.270564][T19674] ? __local_bh_enable_ip+0x13a/0x1c0 [ 755.275935][T19674] ? lockdep_hardirqs_on+0x98/0x150 [ 755.281220][T19674] ? read_lock_is_recursive+0x20/0x20 [ 755.286678][T19674] ? __local_bh_enable_ip+0x13a/0x1c0 [ 755.292051][T19674] ? _local_bh_enable+0xa0/0xa0 [ 755.296903][T19674] ? skb_copy_datagram_from_iter+0x63c/0x6f0 [ 755.302897][T19674] tun_get_user+0x286c/0x3d30 [ 755.307592][T19674] ? tun_get_user+0x2488/0x3d30 [ 755.312454][T19674] ? aa_file_perm+0x3e3/0xee0 [ 755.317137][T19674] ? rcu_read_unlock+0xa0/0xa0 [ 755.321913][T19674] ? tun_get+0x1c/0x2e0 [ 755.326069][T19674] ? __lock_acquire+0x7eb0/0x7eb0 [ 755.331097][T19674] ? tun_get+0x1c/0x2e0 [ 755.335259][T19674] tun_chr_write_iter+0x119/0x200 [ 755.340287][T19674] vfs_write+0x474/0x9a0 [ 755.344542][T19674] ? file_end_write+0x250/0x250 [ 755.349410][T19674] ? __fget_files+0x3fc/0x460 [ 755.354101][T19674] ? __fdget_pos+0x1d8/0x330 [ 755.358694][T19674] ? ksys_write+0x74/0x260 [ 755.363126][T19674] ksys_write+0x151/0x260 [ 755.367546][T19674] ? __ia32_sys_read+0x90/0x90 [ 755.372314][T19674] ? lockdep_hardirqs_on+0x98/0x150 [ 755.377515][T19674] do_syscall_64+0x55/0xb0 [ 755.381952][T19674] ? clear_bhb_loop+0x40/0x90 [ 755.386656][T19674] ? clear_bhb_loop+0x40/0x90 [ 755.391347][T19674] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 755.397264][T19674] RIP: 0033:0x7f0a9539e199 [ 755.401690][T19674] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 755.421313][T19674] RSP: 002b:00007f0a962a5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 755.429784][T19674] RAX: ffffffffffffffda RBX: 00007f0a95625fa0 RCX: 00007f0a9539e199 [ 755.437771][T19674] RDX: 000000000000fdef RSI: 0000200000000180 RDI: 00000000000000c8 [ 755.445853][T19674] RBP: 00007f0a962a5090 R08: 0000000000000000 R09: 0000000000000000 [ 755.453918][T19674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 755.461902][T19674] R13: 00007f0a95626038 R14: 00007f0a95625fa0 R15: 00007ffd56f4f068 [ 755.469888][T19674] [ 755.474079][T19604] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 755.487028][T19604] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 755.494074][T19604] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 755.520076][T19604] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 755.628529][T19604] hsr_slave_0: entered promiscuous mode [ 756.073441][T19604] hsr_slave_1: entered promiscuous mode [ 756.482981][T17327] Bluetooth: hci0: command tx timeout [ 756.604719][T19604] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 756.632244][T19604] Cannot create hsr debugfs directory [ 758.563061][T17327] Bluetooth: hci0: command tx timeout [ 758.622768][T19679] netlink: 'syz.3.4641': attribute type 21 has an invalid length. [ 758.630812][T19679] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4641'. [ 758.641269][T19682] virt_wifi0: entered promiscuous mode [ 758.649787][T19682] virt_wifi0: entered allmulticast mode [ 760.643592][T17327] Bluetooth: hci0: command tx timeout [ 763.146783][T19754] netlink: 'syz.0.4652': attribute type 21 has an invalid length. [ 763.155101][T19754] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4652'. [ 763.167048][T19759] virt_wifi0: entered promiscuous mode [ 763.172553][T19759] virt_wifi0: entered allmulticast mode [ 763.179359][T19757] netlink: 'syz.3.4655': attribute type 39 has an invalid length. [ 763.806187][T19604] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 763.917634][T19604] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 763.951668][T19604] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 763.998542][T19604] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 764.334774][T19800] netlink: 'syz.0.4667': attribute type 39 has an invalid length. [ 764.526448][ T4611] hsr_slave_0: left promiscuous mode [ 764.533659][ T4611] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 764.573001][ T4611] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 764.618545][ T4611] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 764.636258][ T4611] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 764.715577][ T4611] batman_adv: batadv0: Interface deactivated: veth1_virt_wifi [ 764.730947][ T4611] batman_adv: batadv0: Removing interface: veth1_virt_wifi [ 764.747913][ T4611] bridge_slave_0: left allmulticast mode [ 764.758144][ T4611] bridge_slave_0: left promiscuous mode [ 764.764442][ T4611] bridge0: port 1(bridge_slave_0) entered disabled state [ 764.792548][ T4611] veth0_macvtap: left promiscuous mode [ 764.798519][ T4611] veth1_vlan: left promiscuous mode [ 764.804441][ T4611] veth0_vlan: left promiscuous mode [ 765.519118][ T4611] team0 (unregistering): Port device team_slave_1 removed [ 765.560991][ T4611] team0 (unregistering): Port device C removed [ 765.607534][ T4611]  (unregistering): (slave 4@0Ù): Releasing backup interface [ 765.655905][ T4611]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 765.699732][ T4611]  (unregistering): (slave bridge_slave_1): Releasing backup interface [ 765.991734][ T4611]  (unregistering): Released all slaves [ 766.182241][T19604] 8021q: adding VLAN 0 to HW filter on device bond0 [ 766.218497][T19829] netlink: 'syz.3.4670': attribute type 2 has an invalid length. [ 766.231907][T19829] netlink: 'syz.3.4670': attribute type 8 has an invalid length. [ 766.240028][T19829] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4670'. [ 766.296947][T19604] 8021q: adding VLAN 0 to HW filter on device team0 [ 766.357291][ T5935] bridge0: port 1(bridge_slave_0) entered blocking state [ 766.364508][ T5935] bridge0: port 1(bridge_slave_0) entered forwarding state [ 766.391006][ T5935] bridge0: port 2(bridge_slave_1) entered blocking state [ 766.398331][ T5935] bridge0: port 2(bridge_slave_1) entered forwarding state [ 766.949508][T19850] netdevsim netdevsim0 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP) [ 767.286035][T19604] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 767.499449][T19604] veth0_vlan: entered promiscuous mode [ 767.551020][T19604] veth1_vlan: entered promiscuous mode [ 767.649564][T19604] veth0_macvtap: entered promiscuous mode [ 767.719036][T19604] veth1_macvtap: entered promiscuous mode [ 767.770944][T19604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 767.802440][T19604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 767.820066][T19604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 767.858595][T19604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 767.954965][T19604] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 768.007823][T19604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 768.062934][T19604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 768.114427][T19604] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 768.177311][T19604] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 768.243054][T19604] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 768.251815][T19604] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 768.322523][T19604] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 768.420104][T19896] netlink: 'syz.0.4683': attribute type 4 has an invalid length. [ 768.500314][T19891] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.4683'. [ 769.303232][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 769.311107][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 769.370793][ T4611] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 769.393042][ T4611] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 769.714877][T19912] netdevsim netdevsim3 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP) [ 769.730860][T19911] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.4687'. [ 769.925413][ T5780] Bluetooth: hci2: command 0x0406 tx timeout [ 771.097437][T19951] sctp: [Deprecated]: syz.3.4700 (pid 19951) Use of struct sctp_assoc_value in delayed_ack socket option. [ 771.097437][T19951] Use struct sctp_sack_info instead [ 772.299698][T19984] netlink: 16358 bytes leftover after parsing attributes in process `syz.1.4711'. [ 772.434089][T19994] netlink: 'syz.1.4711': attribute type 15 has an invalid length. [ 772.493759][T19994] netlink: 'syz.1.4711': attribute type 16 has an invalid length. [ 772.570723][T19994] netlink: 'syz.1.4711': attribute type 20 has an invalid length. [ 772.622942][T19994] netlink: 'syz.1.4711': attribute type 21 has an invalid length. [ 772.659988][T19994] netlink: 'syz.1.4711': attribute type 23 has an invalid length. [ 772.696618][T19994] netlink: 'syz.1.4711': attribute type 25 has an invalid length. [ 772.733750][T19994] netlink: 'syz.1.4711': attribute type 27 has an invalid length. [ 772.741805][T19994] netlink: 'syz.1.4711': attribute type 28 has an invalid length. [ 772.827789][T19994] netlink: 'syz.1.4711': attribute type 29 has an invalid length. [ 774.076353][T20030] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.4725'. [ 774.703838][T20034] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4726'. [ 774.762288][T20034] netlink: get zone limit has 4 unknown bytes [ 774.999879][T20036] validate_nla: 1 callbacks suppressed [ 774.999974][T20036] netlink: 'syz.0.4726': attribute type 9 has an invalid length. [ 775.098756][T20036] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.4726'. [ 777.927635][T17327] Bluetooth: hci0: unexpected event 0x3c length: 15 > 7 [ 777.927930][T17327] Bluetooth: hci0: unexpected event 0x3c length: 15 > 7 [ 779.576962][T20140] netlink: 'syz.0.4760': attribute type 17 has an invalid length. [ 779.672966][T20140] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4760'. [ 779.722078][T20140] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 781.409962][T20183] netlink: 'syz.0.4779': attribute type 10 has an invalid length. [ 781.484912][T20183] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 782.503577][ T5780] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 782.524704][ T5780] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 782.535294][ T5780] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 782.555219][ T5780] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 782.564611][ T5780] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 782.572214][ T5780] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 782.961413][T20207] chnl_net:caif_netlink_parms(): no params data found [ 783.260217][T20207] bridge0: port 1(bridge_slave_0) entered blocking state [ 783.267808][T20207] bridge0: port 1(bridge_slave_0) entered disabled state [ 783.275749][T20207] bridge_slave_0: entered allmulticast mode [ 783.289874][T20207] bridge_slave_0: entered promiscuous mode [ 783.300189][T20207] bridge0: port 2(bridge_slave_1) entered blocking state [ 783.308033][T20207] bridge0: port 2(bridge_slave_1) entered disabled state [ 783.315387][T20207] bridge_slave_1: entered allmulticast mode [ 783.322835][T20207] bridge_slave_1: entered promiscuous mode [ 783.359077][T20207] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 783.376308][T20207] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 783.486047][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 783.579902][T20207] team0: Port device team_slave_0 added [ 783.596003][T20207] team0: Port device team_slave_1 added [ 783.642594][T20207] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 783.652387][T20207] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 783.679492][T20207] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 783.710023][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 783.757168][T20207] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 783.769546][T20207] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 783.806402][T20207] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 783.845499][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 784.066404][T20207] hsr_slave_0: entered promiscuous mode [ 784.086801][T20207] hsr_slave_1: entered promiscuous mode [ 784.654378][ T5780] Bluetooth: hci3: command tx timeout [ 785.296910][T20290] C: renamed from team_slave_0 (while UP) [ 785.378058][T20290] netlink: 'syz.3.4815': attribute type 2 has an invalid length. [ 785.413354][T20290] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4815'. [ 785.454827][T20290] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 785.856150][T20310] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4818'. [ 786.726561][ T5780] Bluetooth: hci3: command tx timeout [ 788.041098][T20310] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4818'. [ 788.248429][T20207] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 788.299515][T20207] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 788.533034][T20207] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 788.569705][T20207] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 788.803783][ T5780] Bluetooth: hci3: command tx timeout [ 789.134483][T20207] 8021q: adding VLAN 0 to HW filter on device bond0 [ 789.294596][T20207] 8021q: adding VLAN 0 to HW filter on device team0 [ 789.407535][ T5932] bridge0: port 1(bridge_slave_0) entered blocking state [ 789.414783][ T5932] bridge0: port 1(bridge_slave_0) entered forwarding state [ 789.432533][ T5932] bridge0: port 2(bridge_slave_1) entered blocking state [ 789.439789][ T5932] bridge0: port 2(bridge_slave_1) entered forwarding state [ 789.506553][T20352] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.4829'. [ 789.648213][T20351] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4829'. [ 789.987395][ T12] hsr_slave_0: left promiscuous mode [ 790.103715][ T12] hsr_slave_1: left promiscuous mode [ 790.150442][ T12] veth1_macvtap: left promiscuous mode [ 790.163440][ T12] veth0_macvtap: left promiscuous mode [ 790.849604][ T12] team0 (unregistering): Port device team_slave_1 removed [ 790.897985][T17327] Bluetooth: hci3: command tx timeout [ 790.928173][ T12] team0 (unregistering): Port device team_slave_0 removed [ 791.007844][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 791.088884][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 791.166293][ T12] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 791.495611][ T12] bond0 (unregistering): Released all slaves [ 791.680564][T20378] netlink: 'syz.1.4835': attribute type 4 has an invalid length. [ 791.703120][T20378] netlink: 116 bytes leftover after parsing attributes in process `syz.1.4835'. [ 791.739986][T20378] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 791.858811][T20207] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 792.129516][T20207] veth0_vlan: entered promiscuous mode [ 792.186429][T20207] veth1_vlan: entered promiscuous mode [ 792.244686][T20207] veth0_macvtap: entered promiscuous mode [ 792.256238][T20207] veth1_macvtap: entered promiscuous mode [ 792.297636][T20207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 792.317431][T20207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 792.335202][T20207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 792.349228][T20207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 792.369290][T20207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 792.380107][T20207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 792.394948][T20207] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 792.421221][T20207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 792.438160][T20207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 792.448514][T20207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 792.466390][T20207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 792.479676][T20207] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 792.500438][T20207] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 792.510648][T20207] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 792.524543][T20207] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 792.533479][T20207] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 792.707872][ T5935] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 792.726404][ T5935] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 792.768142][T16867] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 792.781877][T16867] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 793.102005][T20412] netlink: 'syz.0.4785': attribute type 1 has an invalid length. [ 793.133068][T20412] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.4785'. [ 794.996747][T20473] netlink: 'syz.3.4868': attribute type 41 has an invalid length. [ 796.167683][T20507] netlink: 'syz.2.4878': attribute type 9 has an invalid length. [ 796.198894][T20507] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.4878'. [ 797.993736][T20534] netlink: 'syz.2.4889': attribute type 10 has an invalid length. [ 798.036858][T20534] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4889'. [ 798.096702][T20534] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 798.245218][T20534] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 799.719458][T20559] netlink: 'syz.3.4898': attribute type 19 has an invalid length. [ 800.417316][T20581] netlink: 'syz.3.4906': attribute type 21 has an invalid length. [ 800.483731][T20581] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4906'. [ 800.500845][T20584] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.4906'. [ 800.543166][T20581] netlink: 'syz.3.4906': attribute type 4 has an invalid length. [ 800.550965][T20581] netlink: 'syz.3.4906': attribute type 3 has an invalid length. [ 800.612962][T20581] netlink: 3 bytes leftover after parsing attributes in process `syz.3.4906'. [ 801.773647][T20610] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.4916'. [ 801.788628][T20610] netlink: 6324 bytes leftover after parsing attributes in process `syz.1.4916'. [ 802.418376][T20628] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.4922'. [ 805.517479][T20612] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4916'. [ 805.526720][T20631] netlink: 'syz.2.4922': attribute type 33 has an invalid length. [ 805.534826][T20631] netlink: 160 bytes leftover after parsing attributes in process `syz.2.4922'. [ 805.572520][T20615] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4916'. [ 808.401261][T20679] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.4947'. [ 808.817875][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.824922][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.886737][T20721] netlink: 'syz.3.4955': attribute type 10 has an invalid length. [ 810.071308][T20721] 8021q: adding VLAN 0 to HW filter on device bond0 [ 810.106434][T20721] team0: Port device bond0 added [ 810.304129][T20730] netlink: 11254 bytes leftover after parsing attributes in process `syz.0.4958'. [ 810.334705][T20730] netlink: 'syz.0.4958': attribute type 7 has an invalid length. [ 810.342513][T20730] netlink: 11254 bytes leftover after parsing attributes in process `syz.0.4958'. [ 811.571272][T20763] netlink: 'syz.1.4968': attribute type 3 has an invalid length. [ 811.614378][T20763] netlink: 201372 bytes leftover after parsing attributes in process `syz.1.4968'. [ 813.102371][T20789] netlink: 61211 bytes leftover after parsing attributes in process `syz.3.4974'. [ 814.016129][T20809] netlink: 'syz.0.4981': attribute type 1 has an invalid length. [ 814.097182][T20809] netlink: 'syz.0.4981': attribute type 10 has an invalid length. [ 814.100915][T20807] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.4979'. [ 814.119047][T20809] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4981'. [ 814.146470][T20809] team0: entered promiscuous mode [ 814.151894][T20809] team_slave_0: entered promiscuous mode [ 814.162286][T20809] team_slave_1: entered promiscuous mode [ 814.176815][T20809] team0: entered allmulticast mode [ 814.183900][T20809] team_slave_0: entered allmulticast mode [ 814.190166][T20809] team_slave_1: entered allmulticast mode [ 814.210043][T20809] bridge0: port 3(team0) entered blocking state [ 814.228467][T20809] bridge0: port 3(team0) entered disabled state [ 814.281523][T20809] bridge0: port 3(team0) entered blocking state [ 814.288371][T20809] bridge0: port 3(team0) entered forwarding state [ 815.815911][T20827] netlink: 'syz.1.4986': attribute type 17 has an invalid length. [ 815.839098][T20827] netlink: 'syz.1.4986': attribute type 16 has an invalid length. [ 815.857169][T20827] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4986'. [ 815.913437][T20832] FAULT_INJECTION: forcing a failure. [ 815.913437][T20832] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 815.932293][T20832] CPU: 1 PID: 20832 Comm: syz.0.4988 Not tainted syzkaller #0 [ 815.939821][T20832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 815.949923][T20832] Call Trace: [ 815.953237][T20832] [ 815.956186][T20832] dump_stack_lvl+0x18c/0x250 [ 815.961081][T20832] ? show_regs_print_info+0x20/0x20 [ 815.966320][T20832] ? load_image+0x420/0x420 [ 815.970865][T20832] ? __lock_acquire+0x7eb0/0x7eb0 [ 815.975939][T20832] ? snprintf+0xe9/0x140 [ 815.980219][T20832] should_fail_ex+0x394/0x4c0 [ 815.984920][T20832] _copy_to_user+0x2f/0xa0 [ 815.989365][T20832] simple_read_from_buffer+0xe7/0x150 [ 815.994820][T20832] proc_fail_nth_read+0x1e8/0x260 [ 815.999864][T20832] ? proc_fault_inject_write+0x360/0x360 [ 816.005530][T20832] ? fsnotify_perm+0x271/0x5e0 [ 816.010373][T20832] ? proc_fault_inject_write+0x360/0x360 [ 816.016039][T20832] vfs_read+0x298/0x990 [ 816.020220][T20832] ? kernel_read+0x1e0/0x1e0 [ 816.025661][T20832] ? __fget_files+0x28/0x460 [ 816.030725][T20832] ? __fget_files+0x3fc/0x460 [ 816.035424][T20832] ? __fdget_pos+0x2a3/0x330 [ 816.040022][T20832] ? ksys_read+0x74/0x260 [ 816.044463][T20832] ksys_read+0x151/0x260 [ 816.048718][T20832] ? vfs_write+0x9a0/0x9a0 [ 816.053240][T20832] ? lockdep_hardirqs_on+0x98/0x150 [ 816.058471][T20832] do_syscall_64+0x55/0xb0 [ 816.062897][T20832] ? clear_bhb_loop+0x40/0x90 [ 816.067579][T20832] ? clear_bhb_loop+0x40/0x90 [ 816.072305][T20832] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 816.078220][T20832] RIP: 0033:0x7f5dd195e9ce [ 816.082644][T20832] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 816.102271][T20832] RSP: 002b:00007f5dcfbf5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 816.110720][T20832] RAX: ffffffffffffffda RBX: 00007f5dcfbf66c0 RCX: 00007f5dd195e9ce [ 816.118962][T20832] RDX: 000000000000000f RSI: 00007f5dcfbf60a0 RDI: 0000000000000005 [ 816.127022][T20832] RBP: 00007f5dcfbf6090 R08: 0000000000000000 R09: 0000000000000000 [ 816.135003][T20832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 816.142988][T20832] R13: 00007f5dd1c26128 R14: 00007f5dd1c26090 R15: 00007fff2b544c28 [ 816.150992][T20832] [ 816.992321][T20857] netlink: 'syz.2.4996': attribute type 1 has an invalid length. [ 817.012060][T20859] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.5006'. [ 817.280159][T20857] netlink: 'syz.2.4996': attribute type 10 has an invalid length. [ 817.378890][T20857] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4996'. [ 817.453391][T20857] team0: entered promiscuous mode [ 817.458726][T20857] team_slave_0: entered promiscuous mode [ 817.533860][T20857] team_slave_1: entered promiscuous mode [ 817.584494][T20857] team0: entered allmulticast mode [ 817.655468][T20857] team_slave_0: entered allmulticast mode [ 817.703123][T20857] team_slave_1: entered allmulticast mode [ 817.787138][T20857] bridge0: port 3(team0) entered blocking state [ 817.845559][T20857] bridge0: port 3(team0) entered disabled state [ 817.886635][T20857] bridge0: port 3(team0) entered blocking state [ 817.893184][T20857] bridge0: port 3(team0) entered forwarding state [ 817.994642][T20874] netlink: 'syz.1.5001': attribute type 21 has an invalid length. [ 819.791242][T20903] netlink: 'syz.0.5021': attribute type 10 has an invalid length. [ 819.810930][T20903] hsr0: entered promiscuous mode [ 819.823907][T20903] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 819.884058][T20907] netlink: 'syz.1.5013': attribute type 1 has an invalid length. [ 819.966723][T20905] netlink: 'syz.1.5013': attribute type 10 has an invalid length. [ 819.986395][T20905] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5013'. [ 820.006940][T20905] team0: entered promiscuous mode [ 820.038036][T20905] C: entered promiscuous mode [ 820.048756][T20905] team_slave_1: entered promiscuous mode [ 820.064123][T20905] geneve1: entered promiscuous mode [ 820.075072][T20905] team0: entered allmulticast mode [ 820.083120][T20905] C: entered allmulticast mode [ 820.091937][T20905] team_slave_1: entered allmulticast mode [ 820.109016][T20913] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.5014'. [ 820.111166][T20905] geneve1: entered allmulticast mode [ 820.139137][T20905] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 821.968374][T20943] netlink: 'syz.2.5027': attribute type 21 has an invalid length. [ 822.016055][T20945] netlink: 'syz.3.5028': attribute type 10 has an invalid length. [ 822.053318][T20945] hsr0: entered promiscuous mode [ 822.062183][T20945] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 824.447536][T20996] nr0: port 1(hsr0) entered blocking state [ 824.461876][T20996] nr0: port 1(hsr0) entered disabled state [ 824.481106][T20997] netlink: 'syz.2.5043': attribute type 10 has an invalid length. [ 824.522938][T20997] hsr0: entered promiscuous mode [ 824.530525][T20997] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 824.675383][T21007] netlink: 'syz.3.5045': attribute type 1 has an invalid length. [ 826.159380][T21036] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.5058'. [ 826.541582][T21055] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.5061'. [ 827.008572][T21070] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.5070'. [ 827.382267][T21082] netlink: 'syz.1.5075': attribute type 19 has an invalid length. [ 828.392119][T21100] syzkaller0: entered promiscuous mode [ 828.436560][T21100] syzkaller0: entered allmulticast mode [ 831.683500][T21125] netlink: 188 bytes leftover after parsing attributes in process `syz.2.5091'. [ 832.021580][T21152] syzkaller0: entered promiscuous mode [ 832.037649][T21152] syzkaller0: entered allmulticast mode [ 833.004379][T21180] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.5107'. [ 834.909417][T21182] netlink: 144 bytes leftover after parsing attributes in process `syz.2.5109'. [ 835.330185][T21200] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 835.709943][T21205] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.5119'. [ 836.323648][T21226] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5125'. [ 836.333017][T21226] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5125'. [ 836.404961][T21220] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5125'. [ 836.431346][T21229] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5125'. [ 836.462237][T21220] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5125'. [ 836.478366][T21223] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5125'. [ 837.245001][T21251] netlink: 'syz.1.5132': attribute type 1 has an invalid length. [ 837.273627][T21251] __nla_validate_parse: 1 callbacks suppressed [ 837.273646][T21251] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.5132'. [ 837.390877][T21251] netlink: 'syz.1.5132': attribute type 46 has an invalid length. [ 837.415430][T21254] netlink: 'syz.3.5133': attribute type 9 has an invalid length. [ 837.427753][T21254] netlink: 61967 bytes leftover after parsing attributes in process `syz.3.5133'. [ 837.905214][T21271] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 838.495923][T21283] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.5145'. [ 838.728398][T21290] netlink: 'syz.1.5147': attribute type 1 has an invalid length. [ 838.763104][T21290] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.5147'. [ 838.797598][T21290] netlink: 9 bytes leftover after parsing attributes in process `syz.1.5147'. [ 838.872137][ T5780] Bluetooth: hci2: ISO packet for unknown connection handle 0 [ 838.880055][ T5780] Bluetooth: hci2: ISO packet for unknown connection handle 0 [ 838.888176][ T5780] Bluetooth: hci2: ISO packet for unknown connection handle 0 [ 838.896200][ T5780] Bluetooth: hci2: ISO packet for unknown connection handle 0 [ 838.903975][ T5780] Bluetooth: hci2: ISO packet for unknown connection handle 0 [ 838.911647][ T5780] Bluetooth: hci2: ISO packet for unknown connection handle 0 [ 838.919387][ T5780] Bluetooth: hci2: ISO packet for unknown connection handle 0 [ 838.927049][ T5780] Bluetooth: hci2: ISO packet for unknown connection handle 0 [ 838.935069][ T5780] Bluetooth: hci2: ISO packet for unknown connection handle 0 [ 838.942808][ T5780] Bluetooth: hci2: ISO packet for unknown connection handle 0 [ 838.952314][ T5780] Bluetooth: hci2: ISO packet for unknown connection handle 0 [ 838.960040][ T5780] Bluetooth: hci2: ISO packet for unknown connection handle 0 [ 838.967829][ T5780] Bluetooth: hci2: ISO packet for unknown connection handle 0 [ 838.975514][ T5780] Bluetooth: hci2: ISO packet for unknown connection handle 0 [ 838.983307][ T5780] Bluetooth: hci2: ISO packet for unknown connection handle 0 [ 838.990875][ T5780] Bluetooth: hci2: ISO packet for unknown connection handle 0 [ 838.998978][ T5780] Bluetooth: hci2: ISO packet for unknown connection handle 0 [ 839.006677][ T5780] Bluetooth: hci2: ISO packet for unknown connection handle 0 [ 839.014348][ T5780] Bluetooth: hci2: ISO packet for unknown connection handle 0 [ 839.021922][ T5780] Bluetooth: hci2: ISO packet for unknown connection handle 0 [ 839.029549][ T5780] Bluetooth: hci2: ISO packet for unknown connection handle 0 [ 839.037225][ T5780] Bluetooth: hci2: ISO packet for unknown connection handle 0 [ 839.045352][ T5780] Bluetooth: hci2: ISO packet for unknown connection handle 0 [ 839.053064][ T5780] Bluetooth: hci2: ISO packet for unknown connection handle 0 [ 839.060617][ T5780] Bluetooth: hci2: ISO packet for unknown connection handle 0 [ 839.068389][ T5780] Bluetooth: hci2: ISO packet for unknown connection handle 0 [ 839.076096][ T5780] Bluetooth: hci2: ISO packet for unknown connection handle 0 [ 839.083733][ T5780] Bluetooth: hci2: ISO packet for unknown connection handle 0 [ 839.091298][ T5780] Bluetooth: hci2: ISO packet for unknown connection handle 0 [ 839.099295][ T5780] Bluetooth: hci2: ISO packet for unknown connection handle 0 [ 839.107177][ T5780] Bluetooth: hci2: ISO packet for unknown connection handle 0 [ 839.114897][ T5780] Bluetooth: hci2: ISO packet for unknown connection handle 0 [ 839.122567][ T5780] Bluetooth: hci2: ISO packet for unknown connection handle 0 [ 839.690554][T21314] netlink: 'syz.2.5155': attribute type 29 has an invalid length. [ 839.773774][T21314] netlink: 'syz.2.5155': attribute type 29 has an invalid length. [ 839.831930][T21317] netlink: 'syz.2.5155': attribute type 29 has an invalid length. [ 839.900471][T21319] netlink: 'syz.2.5155': attribute type 29 has an invalid length. [ 839.938772][T21314] netlink: 'syz.2.5155': attribute type 29 has an invalid length. [ 840.784819][T21341] netlink: 10 bytes leftover after parsing attributes in process `syz.0.5167'. [ 843.003395][T21387] netlink: 'syz.2.5179': attribute type 3 has an invalid length. [ 843.043109][T21387] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5179'. [ 843.849052][T21402] netlink: 'syz.3.5186': attribute type 46 has an invalid length. [ 843.965902][T21402] netlink: 'syz.3.5186': attribute type 46 has an invalid length. [ 844.401479][T21413] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5190'. [ 844.441031][T21413] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 845.197393][T21425] delete_channel: no stack [ 845.252441][T21431] netlink: 196 bytes leftover after parsing attributes in process `syz.0.5195'. [ 845.883799][T21443] netlink: 'syz.3.5200': attribute type 10 has an invalid length. [ 845.891692][T21443] netlink: 168 bytes leftover after parsing attributes in process `syz.3.5200'. [ 846.089338][T21458] FAULT_INJECTION: forcing a failure. [ 846.089338][T21458] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 846.131215][T21458] CPU: 0 PID: 21458 Comm: syz.2.5205 Not tainted syzkaller #0 [ 846.138844][T21458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 846.149018][T21458] Call Trace: [ 846.152341][T21458] [ 846.155283][T21458] dump_stack_lvl+0x18c/0x250 [ 846.159988][T21458] ? show_regs_print_info+0x20/0x20 [ 846.165206][T21458] ? load_image+0x420/0x420 [ 846.169719][T21458] ? __might_fault+0xaa/0x120 [ 846.174402][T21458] ? __lock_acquire+0x7eb0/0x7eb0 [ 846.179430][T21458] should_fail_ex+0x394/0x4c0 [ 846.184116][T21458] _copy_to_iter+0x1ce/0x1110 [ 846.189070][T21458] ? __lock_acquire+0x7eb0/0x7eb0 [ 846.194131][T21458] ? __mutex_trylock_common+0x160/0x270 [ 846.199720][T21458] ? trace_raw_output_contention_end+0xd0/0xd0 [ 846.205889][T21458] ? iov_iter_init+0x1e0/0x1e0 [ 846.210751][T21458] ? __virt_addr_valid+0x10c/0x380 [ 846.215892][T21458] ? __check_object_size+0x4fc/0xa40 [ 846.221224][T21458] __skb_datagram_iter+0xdb/0x780 [ 846.226280][T21458] ? unix_stream_read_generic+0x657/0x1ea0 [ 846.232102][T21458] ? skb_copy_datagram_iter+0x200/0x200 [ 846.237650][T21458] ? do_raw_spin_lock+0x11f/0x2b0 [ 846.242696][T21458] skb_copy_datagram_iter+0xb1/0x200 [ 846.247987][T21458] unix_stream_read_actor+0x6c/0xa0 [ 846.253216][T21458] unix_stream_read_generic+0xcf1/0x1ea0 [ 846.258894][T21458] ? unix_stream_read_actor+0xa0/0xa0 [ 846.264281][T21458] ? unix_bpf_recvmsg+0xa6c/0xdd0 [ 846.269342][T21458] ? trace_contention_end+0x39/0xe0 [ 846.274541][T21458] ? __mutex_lock+0x30d/0xc80 [ 846.279230][T21458] __unix_stream_recvmsg+0xfc/0x150 [ 846.284441][T21458] ? scm_recv_unix+0x850/0x850 [ 846.289213][T21458] ? __unix_stream_recvmsg+0x150/0x150 [ 846.294774][T21458] unix_bpf_recvmsg+0xc63/0xdd0 [ 846.299659][T21458] ? __might_sleep+0xe0/0xe0 [ 846.304255][T21458] ? unix_stream_bpf_update_proto+0x310/0x310 [ 846.310331][T21458] ? aa_sk_perm+0x83c/0x970 [ 846.314872][T21458] unix_stream_recvmsg+0x150/0x1c0 [ 846.319991][T21458] ? unix_stream_sendmsg+0xbf0/0xbf0 [ 846.325277][T21458] ? __lock_acquire+0x135d/0x7eb0 [ 846.330306][T21458] ? __unix_stream_recvmsg+0x150/0x150 [ 846.335777][T21458] ? aa_sock_msg_perm+0x94/0x150 [ 846.340748][T21458] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 846.346042][T21458] ? security_socket_recvmsg+0x89/0xb0 [ 846.351513][T21458] ? unix_stream_sendmsg+0xbf0/0xbf0 [ 846.356810][T21458] ____sys_recvmsg+0x2bd/0x5d0 [ 846.361598][T21458] ? __sys_recvmsg_sock+0x50/0x50 [ 846.366642][T21458] ? import_iovec+0x73/0xa0 [ 846.371156][T21458] ___sys_recvmsg+0x214/0x590 [ 846.375872][T21458] ? __sys_recvmsg+0x2a0/0x2a0 [ 846.380706][T21458] ? ksys_write+0x1d2/0x260 [ 846.385282][T21458] ? __fget_files+0x3fc/0x460 [ 846.389988][T21458] __x64_sys_recvmsg+0x21e/0x2f0 [ 846.394941][T21458] ? ___sys_recvmsg+0x590/0x590 [ 846.399808][T21458] ? lockdep_hardirqs_on+0x98/0x150 [ 846.405018][T21458] do_syscall_64+0x55/0xb0 [ 846.409442][T21458] ? clear_bhb_loop+0x40/0x90 [ 846.414152][T21458] ? clear_bhb_loop+0x40/0x90 [ 846.418831][T21458] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 846.424728][T21458] RIP: 0033:0x7f115079e199 [ 846.429148][T21458] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 846.448949][T21458] RSP: 002b:00007f11516b4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 846.457493][T21458] RAX: ffffffffffffffda RBX: 00007f1150a25fa0 RCX: 00007f115079e199 [ 846.465561][T21458] RDX: 0000000000002002 RSI: 0000200000000480 RDI: 0000000000000003 [ 846.473540][T21458] RBP: 00007f11516b4090 R08: 0000000000000000 R09: 0000000000000000 [ 846.481622][T21458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 846.489640][T21458] R13: 00007f1150a26038 R14: 00007f1150a25fa0 R15: 00007fff2e5db478 [ 846.497629][T21458] [ 847.235587][T21476] tap0: tun_chr_ioctl cmd 1074025680 [ 847.293292][T21475] tap0: tun_chr_ioctl cmd 1074025694 [ 847.335625][T21475] netlink: 'syz.3.5213': attribute type 2 has an invalid length. [ 847.387920][T21475] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.5213'. [ 850.548985][T21522] FAULT_INJECTION: forcing a failure. [ 850.548985][T21522] name failslab, interval 1, probability 0, space 0, times 0 [ 850.580235][T21522] CPU: 0 PID: 21522 Comm: syz.2.5229 Not tainted syzkaller #0 [ 850.587772][T21522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 850.597855][T21522] Call Trace: [ 850.601175][T21522] [ 850.604135][T21522] dump_stack_lvl+0x18c/0x250 [ 850.608860][T21522] ? show_regs_print_info+0x20/0x20 [ 850.614092][T21522] ? load_image+0x420/0x420 [ 850.618639][T21522] ? __might_sleep+0xe0/0xe0 [ 850.623439][T21522] ? __lock_acquire+0x7eb0/0x7eb0 [ 850.628499][T21522] should_fail_ex+0x394/0x4c0 [ 850.633220][T21522] should_failslab+0x9/0x20 [ 850.637774][T21522] slab_pre_alloc_hook+0x59/0x300 [ 850.642914][T21522] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 850.648659][T21522] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 850.654579][T21522] __kmem_cache_alloc_node+0x53/0x250 [ 850.659989][T21522] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 850.665736][T21522] __kmalloc+0xa7/0x240 [ 850.670013][T21522] tomoyo_realpath_from_path+0xe6/0x5c0 [ 850.675583][T21522] ? tomoyo_domain+0xd6/0x120 [ 850.680290][T21522] tomoyo_path_number_perm+0x248/0x5e0 [ 850.685780][T21522] ? tomoyo_path_number_perm+0x217/0x5e0 [ 850.691449][T21522] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 850.696951][T21522] ? ksys_write+0x1d2/0x260 [ 850.701527][T21522] ? __fget_files+0x28/0x460 [ 850.706170][T21522] security_file_ioctl+0x70/0xa0 [ 850.711142][T21522] __se_sys_ioctl+0x48/0x170 [ 850.715756][T21522] do_syscall_64+0x55/0xb0 [ 850.720190][T21522] ? clear_bhb_loop+0x40/0x90 [ 850.724882][T21522] ? clear_bhb_loop+0x40/0x90 [ 850.729573][T21522] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 850.735560][T21522] RIP: 0033:0x7f115079e199 [ 850.739976][T21522] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 850.759584][T21522] RSP: 002b:00007f11516b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 850.768000][T21522] RAX: ffffffffffffffda RBX: 00007f1150a25fa0 RCX: 00007f115079e199 [ 850.775978][T21522] RDX: 0000000000000000 RSI: 000000004004743b RDI: 0000000000000004 [ 850.784841][T21522] RBP: 00007f11516b4090 R08: 0000000000000000 R09: 0000000000000000 [ 850.792910][T21522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 850.800984][T21522] R13: 00007f1150a26038 R14: 00007f1150a25fa0 R15: 00007fff2e5db478 [ 850.808970][T21522] [ 850.833188][T21522] ERROR: Out of memory at tomoyo_realpath_from_path. [ 851.232097][T21535] netlink: 'syz.2.5234': attribute type 17 has an invalid length. [ 851.240997][T21535] netlink: 'syz.2.5234': attribute type 16 has an invalid length. [ 851.249969][T21535] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5234'. [ 851.359060][T21538] netlink: 'syz.1.5235': attribute type 19 has an invalid length. [ 851.383408][T21538] netlink: 55 bytes leftover after parsing attributes in process `syz.1.5235'. [ 851.416735][T21539] netlink: 'syz.1.5235': attribute type 19 has an invalid length. [ 851.453423][T21539] netlink: 55 bytes leftover after parsing attributes in process `syz.1.5235'. [ 852.101096][T21562] netlink: 'syz.0.5242': attribute type 33 has an invalid length. [ 852.143103][T21562] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.5242'. [ 852.235142][T21565] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5243'. [ 854.250449][T21619] : renamed from bond0 (while UP) [ 857.459528][T21637] netlink: 'syz.2.5268': attribute type 1 has an invalid length. [ 857.471110][T21637] netlink: 'syz.2.5268': attribute type 3 has an invalid length. [ 857.488104][T21637] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5268'. [ 858.558137][T21665] mac80211_hwsim hwsim43 wlan1: entered promiscuous mode [ 858.588434][T21665] mac80211_hwsim hwsim43 wlan1: entered allmulticast mode [ 858.668630][T21658] delete_channel: no stack [ 860.737492][T21710] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.5295'. [ 860.847126][T21716] netlink: 199824 bytes leftover after parsing attributes in process `syz.2.5295'. [ 861.561598][T21723] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.5297'. [ 865.622563][T21739] netlink: 'syz.3.5304': attribute type 2 has an invalid length. [ 865.630508][T21739] netlink: 'syz.3.5304': attribute type 8 has an invalid length. [ 865.638915][T21739] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5304'. [ 866.163963][T21754] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.5306'. [ 867.163660][T21779] mac80211_hwsim hwsim36 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 867.179312][T21780] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.5315'. [ 867.264577][T21779] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.5319'. [ 870.185156][T21793] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.5324'. [ 870.245875][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.253176][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.270266][T21800] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5326'. [ 870.310034][T21800] netlink: 128 bytes leftover after parsing attributes in process `syz.2.5326'. [ 870.788138][T21809] veth1_macvtap: left promiscuous mode [ 870.876536][T21809] macsec0: entered allmulticast mode [ 871.052086][ T5932] wlan1: Trigger new scan to find an IBSS to join [ 871.438989][T21819] netlink: 'syz.3.5332': attribute type 1 has an invalid length. [ 871.525475][T21819] netlink: 154788 bytes leftover after parsing attributes in process `syz.3.5332'. [ 872.437428][T21851] syzkaller0: entered promiscuous mode [ 872.467628][T21851] syzkaller0: entered allmulticast mode [ 872.529085][T21853] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 65487 [ 873.449238][T21859] veth1_macvtap: left promiscuous mode [ 873.463630][T21859] macsec0: entered allmulticast mode [ 873.720775][T21871] netlink: 188 bytes leftover after parsing attributes in process `syz.0.5347'. [ 874.389919][T17327] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 874.416507][T17327] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 874.433493][T17327] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 874.451290][T17327] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 874.471661][T17327] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 874.479614][T17327] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 874.541506][T21885] netlink: 'syz.0.5353': attribute type 12 has an invalid length. [ 874.618344][T21885] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5353'. [ 874.998807][ T9126] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 875.094967][T21896] veth1_macvtap: left promiscuous mode [ 875.138803][T21896] macsec0: entered allmulticast mode [ 875.316601][ T9126] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 875.606712][ T9126] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 875.893571][T21886] chnl_net:caif_netlink_parms(): no params data found [ 876.004325][ T5937] wlan1: Trigger new scan to find an IBSS to join [ 876.112650][T21924] netlink: 'syz.3.5363': attribute type 17 has an invalid length. [ 876.133190][T21924] netlink: 148 bytes leftover after parsing attributes in process `syz.3.5363'. [ 876.563702][T17327] Bluetooth: hci1: command tx timeout [ 876.634495][T21935] netlink: 'syz.0.5366': attribute type 10 has an invalid length. [ 876.663565][T21935] netlink: 55 bytes leftover after parsing attributes in process `syz.0.5366'. [ 877.083424][T21886] bridge0: port 1(bridge_slave_0) entered blocking state [ 877.094339][T21886] bridge0: port 1(bridge_slave_0) entered disabled state [ 877.115842][T21886] bridge_slave_0: entered allmulticast mode [ 877.128299][T21886] bridge_slave_0: entered promiscuous mode [ 877.145116][T21886] bridge0: port 2(bridge_slave_1) entered blocking state [ 877.152378][T21886] bridge0: port 2(bridge_slave_1) entered disabled state [ 877.168203][T21886] bridge_slave_1: entered allmulticast mode [ 877.195858][T21886] bridge_slave_1: entered promiscuous mode [ 877.330788][T21886] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 877.365782][T21886] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 877.455942][T17327] Bluetooth: hci0: command 0x0406 tx timeout [ 877.483992][T21886] team0: Port device team_slave_0 added [ 877.895210][T21886] team0: Port device team_slave_1 added [ 878.152724][T21886] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 878.188353][T21886] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 878.229121][T21886] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 878.397023][T21886] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 878.404515][T21886] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 878.449198][T21886] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 878.651153][ T5780] Bluetooth: hci1: command tx timeout [ 878.761196][T21984] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.5378'. [ 878.848813][T21886] hsr_slave_0: entered promiscuous mode [ 878.868411][T21886] hsr_slave_1: entered promiscuous mode [ 878.880856][T21886] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 878.896662][T21886] Cannot create hsr debugfs directory [ 879.497243][ T9126] bond0: (slave wlan1): Releasing backup interface [ 879.831691][ T9126] nr0: port 1(hsr0) entered disabled state [ 879.894507][ T5780] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 880.032275][ T9126] hsr_slave_0: left promiscuous mode [ 880.069055][ T9126] hsr_slave_1: left promiscuous mode [ 880.088455][ T9126] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 880.107524][ T9126] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 880.153757][ T9126] veth1_macvtap: left promiscuous mode [ 880.159498][ T9126] veth0_macvtap: left promiscuous mode [ 880.181064][ T9126] veth1_vlan: left promiscuous mode [ 880.497852][ T9126] geneve1 (unregistering): left promiscuous mode [ 880.521006][ T9126] geneve1 (unregistering): left allmulticast mode [ 880.544752][ T9126] team0 (unregistering): Port device geneve1 removed [ 880.732551][ T5780] Bluetooth: hci1: command tx timeout [ 881.053001][ T12] wlan1: Trigger new scan to find an IBSS to join [ 881.540152][ T9126] team_slave_1 (unregistering): left promiscuous mode [ 881.547437][ T9126] team_slave_1 (unregistering): left allmulticast mode [ 881.560447][ T9126] team0 (unregistering): Port device team_slave_1 removed [ 881.605621][ T9126] C (unregistering): left promiscuous mode [ 881.611489][ T9126] C (unregistering): left allmulticast mode [ 881.619030][ T9126] team0 (unregistering): Port device C removed [ 881.662188][ T9126] bond0 (unregistering): (slave 4@0Ù): Releasing backup interface [ 881.924927][ T5780] Bluetooth: hci0: command 0x0406 tx timeout [ 881.974236][ T5937] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 882.060730][ T9126] bond0 (unregistering): Released all slaves [ 882.354042][T22030] syzkaller0: entered promiscuous mode [ 882.359578][T22030] syzkaller0: entered allmulticast mode [ 882.747378][T22052] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5393'. [ 882.817667][ T5780] Bluetooth: hci1: command tx timeout [ 884.936407][T22052] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5393'. [ 885.300721][T21886] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 885.367315][T21886] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 885.421460][T21886] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 885.491756][T21886] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 885.752691][T21886] 8021q: adding VLAN 0 to HW filter on device bond0 [ 885.822270][T22075] netlink: 'syz.2.5401': attribute type 21 has an invalid length. [ 885.846108][T21886] 8021q: adding VLAN 0 to HW filter on device team0 [ 885.898890][ T5928] bridge0: port 1(bridge_slave_0) entered blocking state [ 885.906153][ T5928] bridge0: port 1(bridge_slave_0) entered forwarding state [ 885.975556][ T5928] bridge0: port 2(bridge_slave_1) entered blocking state [ 885.982947][ T5928] bridge0: port 2(bridge_slave_1) entered forwarding state [ 886.680017][T21886] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 886.801612][T21886] veth0_vlan: entered promiscuous mode [ 886.844059][T21886] veth1_vlan: entered promiscuous mode [ 886.952647][T21886] veth0_macvtap: entered promiscuous mode [ 886.993878][T21886] veth1_macvtap: entered promiscuous mode [ 887.041752][T21886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 887.082982][T21886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 887.104431][T21886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 887.133230][T21886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 887.154909][T21886] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 887.182791][T21886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 887.223048][T21886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 887.248739][T21886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 887.269679][T21886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 887.308069][T21886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 887.330178][T21886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 887.357851][T21886] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 887.392837][T22131] netlink: 'syz.2.5412': attribute type 5 has an invalid length. [ 887.401040][T22131] netlink: 128 bytes leftover after parsing attributes in process `syz.2.5412'. [ 887.436480][T21886] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 887.471609][T21886] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 887.497321][T21886] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 887.516597][T21886] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 887.744907][ T5928] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 887.752783][ T5928] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 887.862535][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 887.902940][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 888.200487][T22156] netlink: 'syz.3.5416': attribute type 21 has an invalid length. [ 889.452087][T22185] sctp: [Deprecated]: syz.2.5425 (pid 22185) Use of int in maxseg socket option. [ 889.452087][T22185] Use struct sctp_assoc_value instead [ 889.512432][T22194] netlink: 'syz.0.5427': attribute type 12 has an invalid length. [ 889.527031][T22194] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.5427'. [ 890.458676][T22222] netlink: 202920 bytes leftover after parsing attributes in process `syz.0.5433'. [ 890.996147][T22231] netlink: 'syz.2.5436': attribute type 29 has an invalid length. [ 891.031198][T22231] netlink: 'syz.2.5436': attribute type 29 has an invalid length. [ 891.087293][T22232] netlink: 'syz.1.5437': attribute type 21 has an invalid length. [ 893.241565][T22256] netlink: 148 bytes leftover after parsing attributes in process `syz.0.5446'. [ 894.263968][T22273] netlink: 'syz.0.5452': attribute type 21 has an invalid length. [ 896.730485][T22336] netlink: 'syz.0.5479': attribute type 1 has an invalid length. [ 896.753077][T22336] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.5479'. [ 896.762610][T22336] netlink: 1 bytes leftover after parsing attributes in process `syz.0.5479'. [ 896.804358][T22340] netlink: 'syz.2.5481': attribute type 2 has an invalid length. [ 896.819736][T22340] netlink: 'syz.2.5481': attribute type 9 has an invalid length. [ 896.828211][T22340] netlink: 'syz.2.5481': attribute type 10 has an invalid length. [ 896.838106][T22340] netlink: 'syz.2.5481': attribute type 11 has an invalid length. [ 896.847613][T22340] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5481'. [ 897.812528][T22374] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 897.842779][T22375] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 897.930200][T22374] netlink: 'syz.3.5490': attribute type 27 has an invalid length. [ 897.981406][T22374] netlink: 'syz.3.5490': attribute type 28 has an invalid length. [ 898.003065][T22374] netlink: 'syz.3.5490': attribute type 29 has an invalid length. [ 898.033044][T22374] netlink: 'syz.3.5490': attribute type 30 has an invalid length. [ 898.057947][T22374] netlink: 'syz.3.5490': attribute type 31 has an invalid length. [ 901.046364][T22433] netlink: 10 bytes leftover after parsing attributes in process `syz.2.5511'. [ 901.787340][T22457] netlink: 212412 bytes leftover after parsing attributes in process `syz.3.5517'. [ 901.913223][T22457] openvswitch: netlink: Flow key attr not present in new flow. [ 905.638369][T22486] netlink: 188 bytes leftover after parsing attributes in process `syz.1.5526'. [ 907.443658][T22540] netlink: 128 bytes leftover after parsing attributes in process `syz.3.5543'. [ 907.488495][T22540] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 907.832607][T22552] bridge_slave_1: left allmulticast mode [ 907.893611][T22552] bridge_slave_1: left promiscuous mode [ 907.910074][T22552] bridge0: port 2(bridge_slave_1) entered disabled state [ 907.961116][T22552] bridge_slave_0: left allmulticast mode [ 907.972793][T22552] bridge_slave_0: left promiscuous mode [ 907.980954][T22552] bridge0: port 1(bridge_slave_0) entered disabled state [ 908.163299][T17327] Bluetooth: hci3: command 0x0406 tx timeout [ 909.045982][ T9126] wlan1: Trigger new scan to find an IBSS to join [ 910.312746][T22611] TCP: TCP_TX_DELAY enabled [ 910.525842][T22621] validate_nla: 14 callbacks suppressed [ 910.525860][T22621] netlink: 'syz.2.5573': attribute type 29 has an invalid length. [ 910.583704][T22621] netlink: 'syz.2.5573': attribute type 29 has an invalid length. [ 910.704029][T22619] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.5570'. [ 910.781798][T22619] bridge_slave_1: default FDB implementation only supports local addresses [ 911.163673][T22611] syzkaller0: entered allmulticast mode [ 913.830603][T22695] netlink: 'syz.3.5580': attribute type 10 has an invalid length. [ 914.013775][T10903] wlan1: Trigger new scan to find an IBSS to join [ 915.503437][ T4451] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 915.941719][T22722] syzkaller0: entered promiscuous mode [ 916.049675][T22722] syzkaller0: entered allmulticast mode [ 920.011168][T22759] syzkaller0: entered promiscuous mode [ 920.047294][T22759] syzkaller0: entered allmulticast mode [ 920.085364][T22766] netlink: 'syz.0.5606': attribute type 4 has an invalid length. [ 924.053806][T22813] netlink: 'syz.0.5624': attribute type 2 has an invalid length. [ 924.080049][T22813] netlink: 'syz.0.5624': attribute type 8 has an invalid length. [ 924.104254][T22813] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5624'. [ 924.129880][T22816] netlink: 'syz.0.5624': attribute type 2 has an invalid length. [ 924.158278][T22816] netlink: 'syz.0.5624': attribute type 8 has an invalid length. [ 924.168360][T22816] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5624'. [ 924.224311][T22812] netlink: 'syz.0.5624': attribute type 2 has an invalid length. [ 924.234376][T22812] netlink: 'syz.0.5624': attribute type 8 has an invalid length. [ 924.242843][T22812] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5624'. [ 925.535440][T22855] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.5638'. [ 925.617668][T22855] netlink: 'syz.3.5638': attribute type 3 has an invalid length. [ 925.658008][T22855] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5638'. [ 927.727641][T22911] netlink: 16399 bytes leftover after parsing attributes in process `syz.0.5658'. [ 927.951341][T22923] netlink: 'syz.1.5663': attribute type 2 has an invalid length. [ 927.990895][T22923] netlink: 'syz.1.5663': attribute type 8 has an invalid length. [ 928.042485][T22923] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5663'. [ 928.308938][T22923] syzkaller0: entered promiscuous mode [ 928.337774][T22923] syzkaller0: entered allmulticast mode [ 929.281850][T22954] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5670'. [ 929.347041][T22956] netlink: 'syz.2.5670': attribute type 9 has an invalid length. [ 929.355373][T22956] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.5670'. [ 931.697697][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.704161][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 933.196609][T22973] netlink: 180 bytes leftover after parsing attributes in process `syz.1.5677'. [ 933.252291][T22955] netlink: 'syz.2.5670': attribute type 9 has an invalid length. [ 933.271829][T22955] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.5670'. [ 933.811988][T23001] syzkaller0: entered promiscuous mode [ 933.839154][T23001] syzkaller0: entered allmulticast mode [ 935.558247][T23029] netlink: 'syz.3.5694': attribute type 29 has an invalid length. [ 935.566361][T23029] netlink: 'syz.3.5694': attribute type 3 has an invalid length. [ 935.574353][T23029] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5694'. [ 936.648221][T23033] netlink: 61211 bytes leftover after parsing attributes in process `syz.3.5694'. [ 937.231222][T23055] netlink: 144 bytes leftover after parsing attributes in process `syz.3.5701'. [ 941.242118][T23126] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5726'. [ 941.261774][T23126] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5726'. [ 941.282625][T23126] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5726'. [ 944.885170][T23176] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.5743'. [ 945.504669][ T4451] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 949.595357][T23287] netlink: 'syz.1.5784': attribute type 10 has an invalid length. [ 949.616198][T23287] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5784'. [ 949.654669][T23287] batman_adv: batadv0: Adding interface: virt_wifi0 [ 949.693412][T23287] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 949.764427][T23287] batman_adv: batadv0: Interface activated: virt_wifi0 [ 952.825061][T23350] netlink: 'syz.0.5804': attribute type 6 has an invalid length. [ 952.873335][T23350] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.5804'. [ 952.884175][T23352] netlink: 'syz.3.5805': attribute type 10 has an invalid length. [ 952.892064][T23352] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5805'. [ 952.923105][T23352] virt_wifi0: left promiscuous mode [ 952.943093][T23352] virt_wifi0: left allmulticast mode [ 952.949404][T23352] batman_adv: batadv0: Adding interface: virt_wifi0 [ 952.973461][T23352] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 953.037578][T23352] batman_adv: batadv0: Interface activated: virt_wifi0 [ 953.057423][T23353] netlink: 'syz.0.5804': attribute type 21 has an invalid length. [ 953.093168][T23353] netlink: 156 bytes leftover after parsing attributes in process `syz.0.5804'. [ 954.094595][T23376] netlink: 180 bytes leftover after parsing attributes in process `syz.1.5811'. [ 954.154846][T23381] netlink: 168 bytes leftover after parsing attributes in process `syz.3.5814'. [ 954.195124][T23381] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5814'. [ 954.999506][T23395] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.5818'. [ 956.012431][T10903] wlan1: Trigger new scan to find an IBSS to join [ 957.032846][T23444] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5837'. [ 960.083171][T23456] netlink: 'syz.0.5842': attribute type 10 has an invalid length. [ 960.259132][T23456] 8021q: adding VLAN 0 to HW filter on device bond0 [ 960.278539][T23456] bond0: entered promiscuous mode [ 960.284950][T23456] bond_slave_0: entered promiscuous mode [ 960.292594][T23456] bond_slave_1: entered promiscuous mode [ 960.301372][T23456] bond0: entered allmulticast mode [ 960.307312][T23456] bond_slave_0: entered allmulticast mode [ 960.322815][T23456] bond_slave_1: entered allmulticast mode [ 960.347503][T23456] team0: Port device bond0 added [ 963.252154][T23525] netlink: 'syz.2.5859': attribute type 3 has an invalid length. [ 963.273875][T23525] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.5859'. [ 963.332197][T23531] netlink: 'syz.2.5859': attribute type 10 has an invalid length. [ 963.369480][T23531] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5859'. [ 963.399119][T23531] batman_adv: batadv0: Adding interface: veth1_virt_wifi [ 963.427320][T23531] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 963.473004][T23531] batman_adv: batadv0: Interface activated: veth1_virt_wifi [ 964.965076][T23564] netlink: 188 bytes leftover after parsing attributes in process `syz.3.5873'. [ 966.010760][T10904] wlan1: Trigger new scan to find an IBSS to join [ 968.287051][T23637] netlink: 'syz.3.5897': attribute type 2 has an invalid length. [ 968.303580][T23637] netlink: 164 bytes leftover after parsing attributes in process `syz.3.5897'. [ 969.026063][T23647] netlink: 'syz.1.5903': attribute type 29 has an invalid length. [ 969.632714][T23668] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.5909'. [ 970.013005][T10904] wlan1: Trigger new scan to find an IBSS to join [ 970.612307][T23708] netlink: 15999 bytes leftover after parsing attributes in process `syz.1.5923'. [ 970.855270][T23715] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.5925'. [ 972.728165][T23745] netlink: 'syz.3.5937': attribute type 29 has an invalid length. [ 972.749998][T23745] netlink: 'syz.3.5937': attribute type 29 has an invalid length. [ 972.762414][T23747] netlink: 'syz.3.5937': attribute type 29 has an invalid length. [ 973.060757][T23760] tap0: tun_chr_ioctl cmd 2147767520 [ 973.226896][T23767] netlink: 'syz.1.5942': attribute type 2 has an invalid length. [ 973.243022][T23767] netlink: 184 bytes leftover after parsing attributes in process `syz.1.5942'. [ 973.523354][T23773] tap0: tun_chr_ioctl cmd 1074025677 [ 973.528893][T23773] tap0: linktype set to 0 [ 973.565768][T23774] tap0: tun_chr_ioctl cmd 1074025677 [ 973.580187][T23774] tap0: linktype set to 270 [ 973.627431][T23778] netlink: 'syz.3.5946': attribute type 1 has an invalid length. [ 973.643412][T23778] netlink: 'syz.3.5946': attribute type 4 has an invalid length. [ 973.659833][T23778] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.5946'. [ 973.695479][T23778] netlink: 40459 bytes leftover after parsing attributes in process `syz.3.5946'. [ 973.761947][T23778] netlink: 40459 bytes leftover after parsing attributes in process `syz.3.5946'. [ 974.076846][T23784] netlink: 'syz.3.5949': attribute type 9 has an invalid length. [ 974.097896][T23784] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.5949'. [ 975.592112][T23830] netlink: 61211 bytes leftover after parsing attributes in process `syz.1.5967'. [ 977.054981][ T4451] wlan1: Trigger new scan to find an IBSS to join [ 980.066195][T23891] netlink: 830 bytes leftover after parsing attributes in process `syz.2.5989'. [ 980.964013][T10903] wlan1: Trigger new scan to find an IBSS to join [ 981.275900][T23905] syzkaller0: entered promiscuous mode [ 981.328410][T23905] syzkaller0: entered allmulticast mode [ 982.169288][ T60] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 982.451352][T23920] netlink: 76 bytes leftover after parsing attributes in process `syz.0.5996'. [ 982.479271][T23926] netlink: 830 bytes leftover after parsing attributes in process `syz.3.5999'. [ 983.071611][T23942] syzkaller0: entered promiscuous mode [ 983.091918][T23942] syzkaller0: entered allmulticast mode [ 986.604042][T23968] netlink: 830 bytes leftover after parsing attributes in process `syz.1.6013'. [ 987.987995][T23995] syzkaller0: entered promiscuous mode [ 987.998516][T23995] syzkaller0: entered allmulticast mode [ 991.726115][T24066] netlink: 'syz.3.6050': attribute type 10 has an invalid length. [ 991.763359][T24066] netlink: 2 bytes leftover after parsing attributes in process `syz.3.6050'. [ 991.800691][T24061] netlink: 'syz.3.6050': attribute type 10 has an invalid length. [ 991.813226][T24061] netlink: 2 bytes leftover after parsing attributes in process `syz.3.6050'. [ 992.259935][T24084] netlink: 'syz.3.6059': attribute type 8 has an invalid length. [ 992.270538][T24084] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.6059'. [ 992.738101][T24094] netlink: 'syz.1.6064': attribute type 5 has an invalid length. [ 992.783334][T24094] netlink: 176 bytes leftover after parsing attributes in process `syz.1.6064'. [ 993.127925][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.142596][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 994.364206][T24155] netlink: 'syz.0.6085': attribute type 10 has an invalid length. [ 994.382710][T24155] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6085'. [ 994.411340][T24155] caif0: entered promiscuous mode [ 994.418281][T24155] caif0: entered allmulticast mode [ 994.438849][T24155] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 994.964020][ T5925] wlan1: Trigger new scan to find an IBSS to join [ 995.059638][T24189] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.6094'. [ 996.112038][T24229] netlink: 'syz.3.6109': attribute type 2 has an invalid length. [ 996.570392][T24247] netlink: 'syz.1.6115': attribute type 10 has an invalid length. [ 996.788267][T24247] team0: Port device geneve1 added [ 998.015683][ T5925] wlan1: Trigger new scan to find an IBSS to join [ 999.048356][T24296] netlink: 'syz.1.6130': attribute type 21 has an invalid length. [ 999.079406][T24296] netlink: 'syz.1.6130': attribute type 6 has an invalid length. [ 999.114220][T24296] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6130'. [ 999.883393][T24316] syzkaller0: entered promiscuous mode [ 999.890175][T24316] syzkaller0: entered allmulticast mode [ 1000.328003][T24291] Bluetooth: hci1: command 0x0406 tx timeout [ 1002.008585][ T5930] wlan1: Trigger new scan to find an IBSS to join [ 1002.945452][ T5930] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 1003.647995][T24357] netlink: 72 bytes leftover after parsing attributes in process `syz.1.6151'. [ 1004.036755][T24370] netlink: 192 bytes leftover after parsing attributes in process `syz.3.6155'. [ 1004.486557][T24376] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.6158'. [ 1004.514835][T24376] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 1004.533058][T24376] openvswitch: netlink: Message has 1 unknown bytes. [ 1004.644750][T24376] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.6158'. [ 1005.049395][T24399] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6165'. [ 1005.129983][T24399] netlink: 'syz.1.6165': attribute type 12 has an invalid length. [ 1005.163094][T24399] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6165'. [ 1005.184333][T24399] netlink: 8335 bytes leftover after parsing attributes in process `syz.1.6165'. [ 1005.216150][T24399] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6165'. [ 1007.044962][ T5930] wlan1: Trigger new scan to find an IBSS to join [ 1012.003599][ T5930] wlan1: Trigger new scan to find an IBSS to join [ 1013.400295][ T5928] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 1013.426610][ T5928] ------------[ cut here ]------------ [ 1013.432493][ T5928] WARNING: CPU: 0 PID: 5928 at net/wireless/ibss.c:37 __cfg80211_ibss_joined+0x3cb/0x430 [ 1013.442738][ T5928] Modules linked in: [ 1013.446706][ T5928] CPU: 0 PID: 5928 Comm: kworker/u4:16 Not tainted syzkaller #0 [ 1013.454561][ T5928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1013.464747][ T5928] Workqueue: cfg80211 cfg80211_event_work [ 1013.470603][ T5928] RIP: 0010:__cfg80211_ibss_joined+0x3cb/0x430 [ 1013.476884][ T5928] Code: 04 25 28 00 00 00 48 3b 44 24 60 75 57 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 5e 19 95 f7 0f 0b eb bf e8 55 19 95 f7 <0f> 0b eb b6 e8 4c 19 95 f7 0f 0b e9 e2 fd ff ff e8 40 19 95 f7 0f [ 1013.496979][ T5928] RSP: 0018:ffffc900052efa40 EFLAGS: 00010293 [ 1013.503397][ T5928] RAX: ffffffff89f2775b RBX: dffffc0000000000 RCX: ffff888021d40000 [ 1013.511410][ T5928] RDX: 0000000000000000 RSI: ffffffff8acacce0 RDI: ffffffff8b1d4020 [ 1013.519490][ T5928] RBP: ffffc900052efaf8 R08: ffffffff911f056f R09: 1ffffffff223e0ad [ 1013.527614][ T5928] R10: dffffc0000000000 R11: fffffbfff223e0ae R12: ffff88807a6b8d10 [ 1013.535672][ T5928] R13: ffff88804dc1b618 R14: 1ffff92000a5df4c R15: 000000000000001f [ 1013.543757][ T5928] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1013.552724][ T5928] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1013.559394][ T5928] CR2: 00007f03933eb880 CR3: 000000005e85e000 CR4: 00000000003506f0 [ 1013.567455][ T5928] DR0: 0000000000000000 DR1: 0000200000000300 DR2: 0000200000000300 [ 1013.575524][ T5928] DR3: 0000200000000300 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1013.583724][ T5928] Call Trace: [ 1013.587356][ T5928] [ 1013.590331][ T5928] ? trace_rdev_return_void+0x1c0/0x1c0 [ 1013.596003][ T5928] cfg80211_process_wdev_events+0x396/0x500 [ 1013.602026][ T5928] cfg80211_process_rdev_events+0xa1/0x110 [ 1013.611092][ T5928] cfg80211_event_work+0x2f/0x40 [ 1013.616612][ T5928] ? process_scheduled_works+0x975/0x1600 [ 1013.622380][ T5928] process_scheduled_works+0xa60/0x1600 [ 1013.628041][ T5928] ? worker_attach_to_pool+0x370/0x370 [ 1013.633674][ T5928] ? assign_work+0x3cc/0x5d0 [ 1013.638316][ T5928] worker_thread+0xa5e/0xfe0 [ 1013.643022][ T5928] kthread+0x2fa/0x390 [ 1013.647120][ T5928] ? pr_cont_work+0x550/0x550 [ 1013.651843][ T5928] ? kthread_blkcg+0xd0/0xd0 [ 1013.656533][ T5928] ret_from_fork+0x48/0x80 [ 1013.660982][ T5928] ? kthread_blkcg+0xd0/0xd0 [ 1013.665693][ T5928] ret_from_fork_asm+0x11/0x20 [ 1013.670516][ T5928] [ 1013.673642][ T5928] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1013.680953][ T5928] CPU: 0 PID: 5928 Comm: kworker/u4:16 Not tainted syzkaller #0 [ 1013.688605][ T5928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1013.698694][ T5928] Workqueue: cfg80211 cfg80211_event_work [ 1013.704458][ T5928] Call Trace: [ 1013.707755][ T5928] [ 1013.710710][ T5928] dump_stack_lvl+0x18c/0x250 [ 1013.715514][ T5928] ? show_regs_print_info+0x20/0x20 [ 1013.720748][ T5928] ? load_image+0x420/0x420 [ 1013.725293][ T5928] panic+0x2ca/0x720 [ 1013.729233][ T5928] ? bpf_jit_dump+0xd0/0xd0 [ 1013.733776][ T5928] ? ret_from_fork_asm+0x11/0x20 [ 1013.738837][ T5928] __warn+0x2e0/0x470 [ 1013.742845][ T5928] ? __cfg80211_ibss_joined+0x3cb/0x430 [ 1013.748441][ T5928] ? __cfg80211_ibss_joined+0x3cb/0x430 [ 1013.753994][ T5928] report_bug+0x2be/0x4f0 [ 1013.758319][ T5928] ? __cfg80211_ibss_joined+0x3cb/0x430 [ 1013.763861][ T5928] ? __cfg80211_ibss_joined+0x3cb/0x430 [ 1013.769401][ T5928] ? __cfg80211_ibss_joined+0x3cd/0x430 [ 1013.774948][ T5928] handle_bug+0xcf/0x120 [ 1013.779195][ T5928] exc_invalid_op+0x1a/0x50 [ 1013.783699][ T5928] asm_exc_invalid_op+0x1a/0x20 [ 1013.788551][ T5928] RIP: 0010:__cfg80211_ibss_joined+0x3cb/0x430 [ 1013.794707][ T5928] Code: 04 25 28 00 00 00 48 3b 44 24 60 75 57 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 5e 19 95 f7 0f 0b eb bf e8 55 19 95 f7 <0f> 0b eb b6 e8 4c 19 95 f7 0f 0b e9 e2 fd ff ff e8 40 19 95 f7 0f [ 1013.814315][ T5928] RSP: 0018:ffffc900052efa40 EFLAGS: 00010293 [ 1013.820391][ T5928] RAX: ffffffff89f2775b RBX: dffffc0000000000 RCX: ffff888021d40000 [ 1013.828469][ T5928] RDX: 0000000000000000 RSI: ffffffff8acacce0 RDI: ffffffff8b1d4020 [ 1013.836446][ T5928] RBP: ffffc900052efaf8 R08: ffffffff911f056f R09: 1ffffffff223e0ad [ 1013.844421][ T5928] R10: dffffc0000000000 R11: fffffbfff223e0ae R12: ffff88807a6b8d10 [ 1013.852416][ T5928] R13: ffff88804dc1b618 R14: 1ffff92000a5df4c R15: 000000000000001f [ 1013.860483][ T5928] ? __cfg80211_ibss_joined+0x3cb/0x430 [ 1013.866043][ T5928] ? trace_rdev_return_void+0x1c0/0x1c0 [ 1013.871681][ T5928] cfg80211_process_wdev_events+0x396/0x500 [ 1013.877586][ T5928] cfg80211_process_rdev_events+0xa1/0x110 [ 1013.883410][ T5928] cfg80211_event_work+0x2f/0x40 [ 1013.888367][ T5928] ? process_scheduled_works+0x975/0x1600 [ 1013.894086][ T5928] process_scheduled_works+0xa60/0x1600 [ 1013.899657][ T5928] ? worker_attach_to_pool+0x370/0x370 [ 1013.905130][ T5928] ? assign_work+0x3cc/0x5d0 [ 1013.909726][ T5928] worker_thread+0xa5e/0xfe0 [ 1013.914335][ T5928] kthread+0x2fa/0x390 [ 1013.918412][ T5928] ? pr_cont_work+0x550/0x550 [ 1013.923093][ T5928] ? kthread_blkcg+0xd0/0xd0 [ 1013.927795][ T5928] ret_from_fork+0x48/0x80 [ 1013.932215][ T5928] ? kthread_blkcg+0xd0/0xd0 [ 1013.936802][ T5928] ret_from_fork_asm+0x11/0x20 [ 1013.941577][ T5928] [ 1013.944728][ T5928] Kernel Offset: disabled [ 1013.949118][ T5928] Rebooting in 86400 seconds..