last executing test programs: 5.70396766s ago: executing program 4 (id=4148): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000001c0)={r1, r0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="140000002a000b6c8cff00f9", 0xc}], 0x1}, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r2, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0e0000000400000004"], 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x13, 0x1c, &(0x7f0000000d80)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x9, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb9d0018000000000000002806"], 0x0, 0x42}, 0x28) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x0, 0x0, 0x0, 0x9, 0x0, 0x10000000000000, 0x180, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe1, 0x4a302b3c}, 0xa100, 0xc8, 0x5, 0x5, 0x8001, 0x0, 0x8}, 0x0, 0xc, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={0xffffffffffffffff, 0x18000000000002a0, 0x7, 0x0, &(0x7f0000000000)="b9ff0300600d69", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x15) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000bc0)=ANY=[@ANYBLOB="b702000004000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d83b23dd29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e1a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c11160fb20b1c581e7b0915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080e71113610e10d858e8327ef01fb6c86adac12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab3aa32f948c06b59b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2abd18cae1bd4f4390af9a9ceafd07ed00b0000002cab154ad029a1090000002780870014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a2a71bc85018e5ff2c910496f18afc9ffc2cc788bee1b47683db01a469398685211bbae3e26d0a5752813bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a7237841cef384b22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2acb72c7ead0509d380578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9624d37c10223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c74f0e2a9bf62ffec6459db40000000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced84680900000000000000d16d7d9158ffffffff00000000ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d2782a70cf44ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a9e90d767671414c99d4894edff8249dc1e3428d2129369ee1b85af1eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1038deb359454a3f2239cfe35f81b7aded448859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b2042b8ff8c21ad702cca54728acad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd20785f653b621491dc6aaee0d40973109644fb94c06006e3c1be2f633c1d987591ec3db58a7bb3042ec3f77abb21338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e155f455010b0cb578af7dc7d5e87d4cd376444e2de02f47c61e8e84ff828de453f3489460fd83210e95307e676e1fb4d5865c0ca177a4c7fbb4e62b4450900576b2b5cc7f819abd0f885cc4806f47ffbff01000054f5a2d3875e46000000000000e734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d3676329a18cda690d192a070886df42b2708398773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169cdfaa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c30930804fdc3690d10ecb65dc5b47481ed51a6359cade91fd645c6d924f36a86bf1eee2e8893e903054d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf817becd9e5a225d67521d1128eac7d80a6225c3e2f0932223bfbf69ff86"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) bpf$LINK_DETACH(0x22, &(0x7f00000005c0)=r1, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB="18030000000000000000000000100000851000000600000018000000000000000000000000000000950000000000000064030000fcffffff950000000000ff00"], &(0x7f0000000040)='GPL\x00'}, 0x94) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)}, {&(0x7f00000009c0)="ec7647dfaa40e0d3373cec45beb1a591c99386ea019a26a2aca73099929d5e7c060339e6273387c64eb3b8cab447e1a1138e561598c0c06cf378a0296fb1bebb10467099d112ea7cec3d9b6a2d15f0663809668ebe5bf1856382b0d745fa54cc44ef5cf2449c70f00f46f7022f1a7bfeafdab35b3c07051ba08439f4bc33b88122b8a07beaf88d89af1eff9ab64592a48446e705dd6029115e38fefd8936d4bc8d4b5dc06aa2b6ed934897b5c9498928edce4a23496e190375dd9a3124092df0e4c9a151c3a2f36af0dbf6ae6d1aff198990e14958e100a95d7048163bbcdde3", 0xe0}], 0x2}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x1b, &(0x7f0000000380), 0x0, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x29, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b4000000000000007910280000000000", @ANYRESDEC], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @sk_reuseport}, 0x94) 5.662076481s ago: executing program 2 (id=4149): socketpair(0x3, 0x0, 0x979, &(0x7f0000000000)) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x200, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x200, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="9219e84f6bf7f2b562cab974db71a1f1b022dd34849b848e24e6fb1dd4f099fb4b3fb618373673790f6a277b1476d31fafb74d0d474160936a82fe616ca096a9ad0015ab9595e0ca3f9dc6a11e3a6f1f40a880e9c6d2487d8110c87709df7a0ea1d9079bfcc966e2482dc68cc47bc6b1b880057c60322b65591c1e5c46a61162ab65ba13dcb5e7e4a022443ec5c738da8f96cfe25ef3e36d8fa04424529966f3e671", @ANYBLOB='-\f\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYRESOCT], 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="9219e84f6bf7f2b562cab974db71a1f1b022dd34849b848e24e6fb1dd4f099fb4b3fb618373673790f6a277b1476d31fafb74d0d474160936a82fe616ca096a9ad0015ab9595e0ca3f9dc6a11e3a6f1f40a880e9c6d2487d8110c87709df7a0ea1d9079bfcc966e2482dc68cc47bc6b1b880057c60322b65591c1e5c46a61162ab65ba13dcb5e7e4a022443ec5c738da8f96cfe25ef3e36d8fa04424529966f3e671", @ANYBLOB='-\f\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYRESOCT], 0x50) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0xcaa, 0x12) (async) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0xcaa, 0x12) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x81, 0x86e46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1400, 0x8, 0x80, 0x0, 0x0, 0xffff0000, 0x0, 0x0, 0x18345fb3, 0x0, 0x4000000000000001}, 0x0, 0x0, 0xffffffffffffffff, 0x3) (async) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x81, 0x86e46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1400, 0x8, 0x80, 0x0, 0x0, 0xffff0000, 0x0, 0x0, 0x18345fb3, 0x0, 0x4000000000000001}, 0x0, 0x0, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x3f}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'batadv0\x00', 0x200}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x0) (async) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0500000005000000020000000700000000000000", @ANYRES32=0x1, @ANYBLOB="00000100"/16, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffbfffff01"], 0x48) r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2b8, 0x2, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc, 0x0, 0x0, 0x5, 0x0, 0xd000000000000000}, 0x0, 0x100000000, r4, 0x0) (async) r5 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc, 0x0, 0x0, 0x5, 0x0, 0xd000000000000000}, 0x0, 0x100000000, r4, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d0800fe007c05e8fe55a115000100ff11142603600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff8d}, 0x48) r9 = socket$kcm(0xa, 0x2, 0x73) setsockopt$sock_attach_bpf(r9, 0x29, 0x11, &(0x7f0000000140)=r8, 0x4) (async) setsockopt$sock_attach_bpf(r9, 0x29, 0x11, &(0x7f0000000140)=r8, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r3}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r10, r2}, 0xc) socket$kcm(0x10, 0x3, 0x10) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={r10, r3}, 0xc) 5.436972067s ago: executing program 0 (id=4151): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)=ANY=[], 0xd) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x88, 0x67, &(0x7f00000002c0), 0x4) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x2, 0x5, 0x84) socket$kcm(0x10, 0x3, 0x10) write$cgroup_type(0xffffffffffffffff, &(0x7f00000001c0), 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22}, [@printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x40000000}, {0x85, 0x0, 0x0, 0x62}}]}, &(0x7f0000000000)='GPL\x00', 0x5, 0xfe7, &(0x7f0000001e00)=""/4071}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000000)=@framed={{0x4e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x4f}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) close(0xffffffffffffffff) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x12) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_pressure(r0, &(0x7f00000000c0)='cpu.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r1, &(0x7f0000000080)={'full', 0x20, 0x4000000000004, 0x20, 0xfffffffffffffffe}, 0x4) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x8954, &(0x7f0000000040)) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0x1f, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) openat$cgroup_int(r3, &(0x7f0000000100)='hugetlb.1GB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$sock(r4, &(0x7f0000000cc0)={0x0, 0x0, 0x0}, 0x881) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r5, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) socket$kcm(0x10, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000b80)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='.//\x00\x00\x00') 5.380763308s ago: executing program 4 (id=4153): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[], 0xfe33) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xe, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="120000000a0000"], 0x50) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) r3 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x29, 0x3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b000000050000000500000009"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r4, 0x0, &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000002c0)=r5, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x60006000, 0x0, 0x77, &(0x7f0000000000), &(0x7f0000001c40)="beb61ec2ca90080239f2a54e2368fa761313c3a024a98109ba1e2e7b780d03c54b7a83d56fce397842e724674507d531762055fca371ea775f418df7bee236c9b9968146efb3232ae3413b617445e98bb644a892b9337f1a9135d9f30457a8ffb21aef4a95a155fab70a40b086056b0f63331a66b3457c", 0x2}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8001, 0x3}, 0x0, 0x0, 0xfffffffc, 0x0, 0xb6eb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000003000000000000000040000018010000786c6c250000000000202020731af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ff0000008500000006000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000001d40)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={r8, &(0x7f0000000300), 0x0}, 0x20) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000004880)=""/4129, 0x1021}, {&(0x7f0000003840)=""/4160, 0x1040}], 0x2}, 0x12100) 4.938850169s ago: executing program 0 (id=4154): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x5, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe69, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000000, &(0x7f00000001c0)="ebc3bbcffa173a36d3b39aff12ea34c6e0a56cc32a4f89dde22cb0e4f387e4c603d7aa66abcce985599fe72d2796c935", 0x30, &(0x7f0000000200), &(0x7f0000000280), &(0x7f0000000300)="5042acdd925899a9adc2ddd86aa1c833914818874b5594a3c6fd9ed5cad0a5e4629f4da8a2226f83239b0e70dfacb6be3fe6947223d5f2b6a43bc755e05ec86ed535d64bb82ddb0d1dc3e4085bb3390709c7216507c6d798165bc468b6338634b7eb77c0caa7ab046c3fe069ed4ee60d6288b390eebb08f0a4c9d3f93a2ec9cff02c1c586960e5806c7ca2e1e0570862acb2") bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000400)={r3, r2, 0x0, 0x1, &(0x7f00000003c0)='\x00'}, 0x30) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000580)="5c00000052006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038021d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d49380e78ff6a1577ae18c819945fb4e37e70e4509c5", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x10) recvmsg$kcm(r4, 0x0, 0x0) recvmsg$kcm(r4, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = perf_event_open(0x0, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.self_freezing\x00', 0x26e1, 0x0) ioctl$SIOCSIFHWADDR(r6, 0xc0045878, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, 0xffffffffffffffff) r7 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r7, &(0x7f0000000140)={'full', 0x20, 0xe62}, 0x2f) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0}, 0x2404c8c5) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x20004cc1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000030000000100000001000013040000000000000101000000ff010000002e00"], &(0x7f00000005c0)=""/217, 0x33, 0xd9, 0x1}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x31}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x300}, 0x48) 4.811966272s ago: executing program 3 (id=4156): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x33c5c7fe60a346e6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func={0x8, 0x0, 0x0, 0xc, 0x5}, @func={0x4, 0x0, 0x0, 0xc, 0x3}, @float={0xe, 0x0, 0x0, 0x10, 0x2}]}}, 0x0, 0x3e, 0x0, 0x0, 0xf}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socket$kcm(0xa, 0x5, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r0 = socket$kcm(0x11, 0x20000000000000a, 0x300) setsockopt$sock_attach_bpf(r0, 0x1, 0x28, &(0x7f0000000000), 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c102, 0xac5d, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x73) bpf$MAP_CREATE(0x0, 0x0, 0x50) write$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x6, 0x0, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x891c, &(0x7f0000000040)={'ip6_vti0\x00', @random="02000400"}) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000700)="d80000001000810468f70082db44b904021d080b01000000e8fe55a11800150006001400000000120800040043000000a80016000a00014006000d00036010fab94dcf5c0461c1d67f6f94000534cf6ee08000a0e408e8dd095618e1f4dff3a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x20000004) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)="9d71069f725945c76ea0b81d3870a9eefe8c021ce75a1742204c03e2aebe43d534eec6d8eed9732e356d702c2cc341b3c215c1ff6b39ae995c9f08a199863ecaffe003fc5d4d0746710da3400fee06554c1255e66f903baa76e8c03b92b4e59dc2037e7d1f8395dd829f1efdb6b77740bc048a9d32fc4486eb962de3e23fb9ca53699929ebe2507779937968c132a8cded05d2dc6abb3926384d57ad19db688b8c8e9ac797f882", 0xa7}], 0x1}, 0x41) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000002c0)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac00400020208000200030001f403000500eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20004080) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8993, &(0x7f0000000040)={'bond0\x00', @random='\x00\x00\x00\x00\x00 '}) 4.791993482s ago: executing program 2 (id=4157): perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x2, 0x5, 0x0, 0x2, 0x40440, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x841, 0x10}, 0x8, 0x8000000000ca, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0xffffff7e, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0xfffffffffffffd49, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x20) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="85feff0fc9"], 0x0}, 0x94) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x9b, 0x1, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x8}, 0x100e68, 0x1, 0x4000, 0x8, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000b00)={&(0x7f0000000940)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf0, 0xf0, 0x7, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x2, 0x5}]}, @int={0x4, 0x0, 0x0, 0x1, 0x0, 0x76, 0x0, 0x29, 0x2}, @type_tag={0x4, 0x0, 0x0, 0x12, 0x2}, @enum={0x10, 0x6, 0x0, 0x6, 0x4, [{0xd, 0x7}, {0x7, 0xb9d}, {0x2, 0x2}, {0x7, 0x8}, {0xf, 0x80}, {0xf, 0x8}]}, @decl_tag={0x9, 0x0, 0x0, 0x11, 0x4, 0x1}, @union={0xa, 0x0, 0x0, 0x5, 0x1, 0x7}, @int={0xf, 0x0, 0x0, 0x1, 0x0, 0x80, 0x0, 0x26, 0xff2d0e1df3696a1}, @const={0x1, 0x0, 0x0, 0xa, 0x4}, @func_proto={0x0, 0x8, 0x0, 0xd, 0x0, [{0x9}, {0x5, 0x1}, {0xe, 0x5}, {0x6, 0x3}, {0xe, 0x1}, {0xc}, {0xb, 0x2}, {0x2, 0x5}]}]}, {0x0, [0x5f, 0x0, 0x0, 0x30, 0x30]}}, &(0x7f0000000ac0)=""/57, 0x10f, 0x39, 0x1, 0x9}, 0x28) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r3], 0x12) 4.358167823s ago: executing program 2 (id=4158): socket$kcm(0x10, 0x400000002, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000001, 0x1, @perf_bp={0x0}, 0x8061, 0x3, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x4, 0x80, 0x2, 0x0, 0x1c, 0x0, 0x0, 0x8, 0xa2786, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x3}, 0x9644, 0x400000a6, 0x2, 0x7, 0x10000, 0x9f9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x5, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x3, 0x3}, 0x101239, 0xc8, 0x6, 0x0, 0x0, 0x3, 0xffc0}, 0x0, 0x6, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e488a86317ce81"], 0xfdef) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000017c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x80fe, 0x7, @dev={0xfe, 0x80, '\x00', 0x3e}, 0xe, 0x2}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000004c0)="7f", 0x1}], 0x1, &(0x7f0000000ac0)=ANY=[@ANYRES16=r3, @ANYBLOB="428417c12cc6b5298807181a90365916610235872e111bc7d7a9a04cba0151796efcf02e59a27a51373169712f1fe0a6a412ae5494bde37ce213824fbddeffe290e12695b250b4f91eab9a19797e955de35eaea4c2340a251791290acdbf747503fba8e744b2c666feafada7d5ff2c9ac715465d97c3fd399b97bd8174bcc3fafbc5e2e0934fc43cc21db4865fa7d7dfb7dd8a713be217ebbc281018522f0b40a6d91ffd1933160eb5b9ea3f37153cc5a6d0d7bccb81d0ebbdffdef2fef61f23ab09257a94b661c73a93c5458372ab600f8e63581f9d68b2006c35c4e3cea7ee579fd640c0fdcfde6f04728284716784b14c603e413eeb3fef", @ANYRES64, @ANYRESDEC=0x0, @ANYRES16=r1, @ANYBLOB="327c026991a4add2ebb4f7bd334ca24da16e0d325da8bc447c62843ae2ab516538c30f00009ac8ca936f3197c3642bd025d6ddcedfcb6db93af7e3852d2dde086727403e8250917aad52ad40e5fc3b29c709692ec42af9a7cb4b804f1b6c2eae4a1f40f09448c85b1624b84451dd6776aa98733726127fe4842622365c7a7736ccfdc8560d107fe7756ab738d263540f58a3eefa7d9aa9d2cc09c4c5151a9ea8d99e61d6a30ba93e9d7d4a308d3295eafa2661276f5deb1e004f841345632994ae4d7d7f67f544b22f045af6564b646cbc044c523f64549f965b1d9b"], 0xd0}, 0x480c4) r7 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r7, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000080)={0x0, 0x20, &(0x7f0000000680)=[{&(0x7f0000000340)="d80000001c0081044e81f782db44b904021d0802010000001c00f0a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x20004800) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x6, 0x830d}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r9, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r10, &(0x7f0000000280)={0x0, 0xffffffffffffffa2, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x8080}, 0x8000) socket$kcm(0x11, 0x200000000000003, 0x300) 4.293585114s ago: executing program 0 (id=4160): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1f00000004000000060000000700000080130000", @ANYRES32, @ANYBLOB="0000000000000000008000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000001"], 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcffffff00000e1208000f0100810401a80016ea1f0006", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b9040a", 0x11}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000580)=ANY=[], 0xfe33) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1e, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21bef5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d55545a34effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b93ab56e381a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f94306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d71f4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5"], 0x0, 0x100005, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7}, 0x94) 4.254714885s ago: executing program 3 (id=4161): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x100, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400, 0x8}, 0x4202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce2200182f00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa35f088be"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7000000, 0xd00}, 0x48) 4.106621739s ago: executing program 4 (id=4163): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x78}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0x2, 0x0}, 0x8) r1 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r1, &(0x7f00000029c0)={&(0x7f0000000100)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000002780)=[{&(0x7f00000006c0)='{', 0x1}], 0x1}, 0x4000040) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000001040)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000140)="71b6745b87cc14837cd2559ab3075fccbcee74c6db022e1eac", 0x19}, {&(0x7f0000001080)="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", 0x4cc}], 0x2}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x7b, &(0x7f0000000000)=r3, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"/2812], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, r0}, 0x94) socket$kcm(0x2, 0x5, 0x84) r4 = socket$kcm(0x2, 0x5, 0x84) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="1809000000001800000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r5}, &(0x7f0000000540), &(0x7f0000000580)=r6}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r5, &(0x7f0000000780)}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x20100, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) syz_clone(0x1000, 0x0, 0x0, &(0x7f0000000280), 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x19, 0x20, &(0x7f00000009c0)=ANY=[@ANYBLOB="0800c5cedff86066000002000000005abb340000009e88ffff181100006193bcf4afce4ee45ea57f87e4172540ba523abe", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018170000", @ANYRES32, @ANYBLOB="000000000000000018360000010000000000000000000000185400000b00000000000000000000008500000096000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000004000000850000000600000018440000040000000000000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000440)='GPL\x00', 0xffff, 0x1b, &(0x7f0000000500)=""/27, 0x1f00, 0x3, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000540)={0x2, 0xc, 0x4, 0x9}, 0x10, 0xffffffffffffffff, r7, 0x8, 0x0, &(0x7f0000000580)=[{0x5, 0x1, 0x2}, {0x2, 0x3, 0x4}, {0x4, 0x4, 0x8, 0x6}, {0x1, 0x2, 0x800, 0xa}, {0x4, 0x3, 0x8, 0x7}, {0x3, 0x2, 0xd, 0x3}, {0x3, 0x3, 0xb, 0xa}, {0x4, 0x2, 0xd, 0xc}], 0x10, 0x7f}, 0x94) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000780)={0x0, 0x8, 0x10}, 0xc) bpf$PROG_BIND_MAP(0x23, &(0x7f00000007c0)={r8, r9}, 0xc) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$TUNSETOFFLOAD(r11, 0x40086602, 0x8230794d6280073) setsockopt$sock_attach_bpf(r4, 0x84, 0x10, &(0x7f0000000000)=r10, 0x8) 3.700085729s ago: executing program 0 (id=4164): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000039c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffffe8}, 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000003c0), 0x0, 0x1200000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff070000000000000000000085000000ae00000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000001380)=0x100) r2 = socket$kcm(0x15, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000001c0)) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x4, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f0000001300)={0x6, 0x80, 0x53, 0x6, 0x5, 0x0, 0x0, 0x1ff, 0x1001, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x531, 0x2, @perf_config_ext={0x0, 0x8000000000000000}, 0x10, 0xfff, 0x5, 0x6, 0x9, 0x1, 0x9, 0x0, 0x1, 0x0, 0x81}, 0x0, 0xe, r4, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r3) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00'}, 0x94) r8 = socket$kcm(0x2, 0x1, 0x84) sendmsg$kcm(r8, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[{0x30, 0x84, 0x1, "45aa2d35ae9705d6cb50e70e429e7713ef24bf05b97621efc92a"}], 0x30}, 0x8040) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r7, 0x58, &(0x7f00000002c0)}, 0x10) r9 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r10 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x7400}, 0x240000c0) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4d) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syz_tun\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r11, 0x8946, &(0x7f0000000080)) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000004680)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x4, 0x1076, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x26}, 0x70) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r0) setsockopt$sock_attach_bpf(r10, 0x29, 0x3b, &(0x7f0000000100)=r12, 0x120) sendmsg$kcm(r10, &(0x7f0000000080)={&(0x7f0000001580)=@l2tp6={0xa, 0x0, 0x0, @loopback, 0x3, 0x5c4}, 0x80, &(0x7f00000029c0)=[{&(0x7f0000001480)="89", 0x1}], 0x1}, 0xc9) 3.699887039s ago: executing program 1 (id=4165): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x0) r0 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r0, &(0x7f0000000700)={&(0x7f0000000000)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000040)="97cafecd000000096902e00001088fee", 0x10}], 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="280000000000000000000000070000000717a87f000001ac141400e0000001ac1e0001ac1414bb011c000000000000000000000008000000", @ANYRES64=r0], 0x48}, 0x0) 3.432473465s ago: executing program 1 (id=4166): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='devices.list\x00', 0x0, 0x0) r1 = socket$kcm(0x28, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x300, 0x32, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x2c014) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000640)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000680)={r2, r0}) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000540)=@bpf_tracing={0x1a, 0x5, &(0x7f00000000c0)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x6}], &(0x7f0000000100)='GPL\x00', 0x5fa8, 0xfb, &(0x7f00000002c0)=""/251, 0x41100, 0x2, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000440)={0x1, 0x800b, 0x8, 0x5}, 0x10, 0x14aae, 0xffffffffffffffff, 0x9, 0x0, &(0x7f0000000480)=[{0x4, 0x5, 0xb, 0xb}, {0x4, 0x3, 0x1, 0xc}, {0x4, 0x4, 0x4}, {0x4, 0x3, 0xf, 0x2}, {0x0, 0x3, 0x8, 0xb}, {0x1, 0x5, 0x4, 0x7}, {0x1, 0x3, 0xc, 0x8}, {0x400003, 0x5, 0xd, 0x8}, {0x5, 0x3, 0x3, 0x7}], 0x10, 0x2}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000600)={r1, r3}) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001800599c6d0e00009bd029ef80"], 0xfe33) sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019000800004460bc06000000a701251e6182949a3651fbffffffd4d4938037e7c7a0a03400ac09c51c268811000096859fc57a00000000000000002571cd53b9851b30", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8000) recvmsg$kcm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000004480)=""/4126, 0x101e}, {&(0x7f0000002180)=""/4063, 0xfdf}, {&(0x7f00000001c0)=""/244, 0xf4}], 0x3}, 0x120) 3.196486722s ago: executing program 3 (id=4167): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)=ANY=[], 0xd) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x88, 0x67, &(0x7f00000002c0), 0x4) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x2, 0x5, 0x84) socket$kcm(0x10, 0x3, 0x10) write$cgroup_type(0xffffffffffffffff, &(0x7f00000001c0), 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22}, [@printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x40000000}, {0x85, 0x0, 0x0, 0x62}}]}, &(0x7f0000000000)='GPL\x00', 0x5, 0xfe7, &(0x7f0000001e00)=""/4071}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000000)=@framed={{0x4e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x4f}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) close(0xffffffffffffffff) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x12) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_pressure(r0, &(0x7f00000000c0)='cpu.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r1, &(0x7f0000000080)={'full', 0x20, 0x4000000000004, 0x20, 0xfffffffffffffffe}, 0x4) (fail_nth: 3) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x8954, &(0x7f0000000040)) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0x1f, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) openat$cgroup_int(r3, &(0x7f0000000100)='hugetlb.1GB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$sock(r4, &(0x7f0000000cc0)={0x0, 0x0, 0x0}, 0x881) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r5, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) socket$kcm(0x10, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000b80)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='.//\x00\x00\x00') 2.707272943s ago: executing program 2 (id=4168): bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100808, 0x0, 0x8000, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x200000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x12}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce8100033200fb80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000280)) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xfc79, &(0x7f0000000140)=[{&(0x7f00000004c0)="d800000018009f064e81f744db4cb904021d0800fd02fe02e8fe50a10a001100250000000c600e41b0000900ac00082025000000a4000b000a00ff150048035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d31afe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffff5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a4500000000", 0xd8}], 0x1}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0xf, 0x11000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x50) r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0xffffffffffffff00, 0x1}, 0x201, 0x0, 0x3, 0x7, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$kcm(0x10, 0x400000002, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000a00)=ANY=[@ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="41499482c6fc0000", @ANYRES32=r7, @ANYRES32=0x0, @ANYBLOB, @ANYRES64=0x0], 0x20) bpf$ENABLE_STATS(0x20, &(0x7f0000000340), 0x4) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) 2.637699645s ago: executing program 1 (id=4169): perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x2, 0x5, 0x0, 0x2, 0x40440, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x841, 0x10}, 0x8, 0x8000000000ca, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0xffffff7e, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0xfffffffffffffd49, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x20) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="85feff0fc9"], 0x0}, 0x94) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x9b, 0x1, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x8}, 0x100e68, 0x1, 0x4000, 0x8, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000b00)={&(0x7f0000000940)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf0, 0xf0, 0x7, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x2, 0x5}]}, @int={0x4, 0x0, 0x0, 0x1, 0x0, 0x76, 0x0, 0x29, 0x2}, @type_tag={0x4, 0x0, 0x0, 0x12, 0x2}, @enum={0x10, 0x6, 0x0, 0x6, 0x4, [{0xd, 0x7}, {0x7, 0xb9d}, {0x2, 0x2}, {0x7, 0x8}, {0xf, 0x80}, {0xf, 0x8}]}, @decl_tag={0x9, 0x0, 0x0, 0x11, 0x4, 0x1}, @union={0xa, 0x0, 0x0, 0x5, 0x1, 0x7}, @int={0xf, 0x0, 0x0, 0x1, 0x0, 0x80, 0x0, 0x26, 0xff2d0e1df3696a1}, @const={0x1, 0x0, 0x0, 0xa, 0x4}, @func_proto={0x0, 0x8, 0x0, 0xd, 0x0, [{0x9}, {0x5, 0x1}, {0xe, 0x5}, {0x6, 0x3}, {0xe, 0x1}, {0xc}, {0xb, 0x2}, {0x2, 0x5}]}]}, {0x0, [0x5f, 0x0, 0x0, 0x30, 0x30]}}, &(0x7f0000000ac0)=""/57, 0x10f, 0x39, 0x1, 0x9}, 0x28) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r3], 0x12) 2.606707176s ago: executing program 0 (id=4170): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xc, 0xc, &(0x7f0000000300)=ANY=[@ANYRESOCT=r0, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000008000000850000001500000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0x17, 0x0, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x78, 0x78, 0x7, [@const={0x3, 0x0, 0x0, 0xa, 0x2}, @struct={0x8, 0x8, 0x0, 0x4, 0x0, 0xb1b0, [{0x6, 0x3, 0x27}, {0x6, 0x4, 0x58ead57b}, {0x5, 0x2, 0x94}, {0x3, 0x1, 0x10}, {0x4, 0x3, 0x1}, {0x7, 0x1, 0x3}, {0x0, 0x1}, {0x6, 0x4, 0x1}]}]}, {0x0, [0x30, 0x0, 0x61, 0x61, 0x2e]}}, &(0x7f0000000140)=""/154, 0x97, 0x9a, 0x1, 0x9b, 0x10000}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x3, 0x3ff, 0x9, 0x0, r1, 0x6, '\x00', 0x0, r3, 0x2, 0x0, 0x3, 0x7}, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x2b}]}, &(0x7f0000000080)='GPL\x00', 0x5, 0x98, &(0x7f00000002c0)=""/152}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x5, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000100)={r5, &(0x7f0000000080), &(0x7f0000000200)=""/167}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x4, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)={[{0x2b, 'cpu'}]}, 0x5) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x12, 0x80000001, 0x8, 0xc, 0x4, 0xffffffffffffffff, 0x2}, 0x50) openat$cgroup_int(r4, &(0x7f0000000180)='cpu.weight\x00', 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) write$cgroup_int(r6, &(0x7f0000002180)=0x2, 0x12) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000001c0)={[{0x2d, 'cpu'}]}, 0x5) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x60, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x80) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="d8000000140081044e81f782db44b9040a1d080201000000040000a118000200ff020000000000000000000000000001a80016ea1f00084003bc5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f722f054f55153c6f94007134cf6ee08000a09108e8d8ef075c0100000000000000cb490000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e0060000000000000580bb9ad809d5e1cace81b341139fe3cd4032e8edb12d", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0xc04) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffd}, 0x100) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="2e00000010008188040f80ec59acbc041389810039000000030fe30c000000000e0027008f000000028002922d1f", 0x2e}], 0x1}, 0x40) 2.582311277s ago: executing program 3 (id=4171): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = socket$kcm(0x21, 0x2, 0xa) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB], 0xcfa4) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000c00000009"], 0x50) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000040)={r0}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000800000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) 2.536178747s ago: executing program 4 (id=4172): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x18, 0x0, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff200000000021", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x50) 2.401299451s ago: executing program 1 (id=4173): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x33c5c7fe60a346e6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func={0x8, 0x0, 0x0, 0xc, 0x5}, @func={0x4, 0x0, 0x0, 0xc, 0x3}, @float={0xe, 0x0, 0x0, 0x10, 0x2}]}}, 0x0, 0x3e, 0x0, 0x0, 0xf}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socket$kcm(0xa, 0x5, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r0 = socket$kcm(0x11, 0x20000000000000a, 0x300) setsockopt$sock_attach_bpf(r0, 0x1, 0x28, &(0x7f0000000000), 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c102, 0xac5d, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x73) bpf$MAP_CREATE(0x0, 0x0, 0x50) write$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x6, 0x0, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x891c, &(0x7f0000000040)={'ip6_vti0\x00', @random="02000400"}) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000700)="d80000001000810468f70082db44b904021d080b01000000e8fe55a11800150006001400000000120800040043000000a80016000a00014006000d00036010fab94dcf5c0461c1d67f6f94000534cf6ee08000a0e408e8dd095618e1f4dff3a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x20000004) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)="9d71069f725945c76ea0b81d3870a9eefe8c021ce75a1742204c03e2aebe43d534eec6d8eed9732e356d702c2cc341b3c215c1ff6b39ae995c9f08a199863ecaffe003fc5d4d0746710da3400fee06554c1255e66f903baa76e8c03b92b4e59dc2037e7d1f8395dd829f1efdb6b77740bc048a9d32fc4486eb962de3e23fb9ca53699929ebe2507779937968c132a8cded05d2dc6abb3926384d57ad19db688b8c8e9ac797f882", 0xa7}], 0x1}, 0x41) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000002c0)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac00400020208000200030001f403000500eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20004080) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8993, &(0x7f0000000040)={'bond0\x00', @random='\x00\x00\x00\x00\x00 '}) 2.319737863s ago: executing program 4 (id=4174): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1f00000004000000060000000700000080130000", @ANYRES32, @ANYBLOB="0000000000000000008000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000001"], 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcffffff00000e1208000f0100810401a80016ea1f0006", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b9040a", 0x11}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000580)=ANY=[], 0xfe33) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1e, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x0, 0x100005, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7}, 0x94) 2.233724815s ago: executing program 3 (id=4175): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="9dffffff00000000000000000000000000000004", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x4) socket$kcm(0xa, 0x6, 0x0) socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0xc000) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x69, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000d00)=""/242, 0xfffffd63}, {&(0x7f0000000240)=""/205, 0xcd}, {&(0x7f0000000380)=""/210, 0xd2}, {&(0x7f00000006c0)=""/188, 0xc9}, {&(0x7f0000000f40)=""/213, 0xd5}, {&(0x7f0000002100)=""/4077, 0xfed}, {&(0x7f00000007c0)=""/211, 0xd3}, {&(0x7f0000000b00)=""/231, 0xe7}, {&(0x7f0000000480)=""/176, 0xb0}, {&(0x7f0000000c00)=""/208, 0xd0}], 0xa, 0x0, 0x0, 0x6000000}, 0x40012100) 2.05653519s ago: executing program 4 (id=4176): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) close(r0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f00000004c0)={&(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e21, @multicast2}, 0x2, 0x2, 0x0, 0x1}}, 0x80, 0x0, 0x0, 0x0, 0x2f}, 0x2000f765) openat$tun(0xffffffffffffff9c, 0x0, 0x16040, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @random="0100"}) r2 = socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0x20000, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r3, 0x8008743f, &(0x7f0000000180)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000040)={r5}) 1.961446342s ago: executing program 2 (id=4177): socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x100}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r1}, 0x4) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd63"], 0xfdef) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x3300, 0x3a00, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.60921569s ago: executing program 3 (id=4178): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7fff}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000009c0)={&(0x7f0000000900)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x9c, 0x9c, 0x6, [@enum={0x1, 0x6, 0x0, 0x6, 0x4, [{0x5, 0x9}, {0xc, 0x5}, {0x7, 0x5}, {0x1, 0x6d13}, {0x8, 0x4}, {0x7, 0xd750}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x5, 0x1}}, @restrict={0x7, 0x0, 0x0, 0xb, 0x5}, @enum={0xc, 0x6, 0x0, 0x6, 0x4, [{0x1, 0xb}, {0x4, 0x101}, {0x2, 0x2}, {0xc, 0x1}, {0x0, 0x200}, {0x6, 0x4}]}]}, {0x0, [0x0, 0x5f, 0x30, 0x5f]}}, 0xfffffffffffffffd, 0xba, 0x0, 0x1, 0x3}, 0x28) r3 = socket$kcm(0x10, 0x2, 0x4) r4 = perf_event_open$cgroup(&(0x7f0000000a00)={0x4, 0x80, 0x8, 0x3, 0xe, 0x0, 0x0, 0x1, 0x7ca5b5aa67bfca19, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xb94, 0x1, @perf_config_ext={0x2, 0x7}, 0x101100, 0x3, 0x5, 0x3, 0xbc9, 0x711, 0x3, 0x0, 0xf1, 0x0, 0xffffffffffffffbf}, 0xffffffffffffffff, 0xc, r1, 0xd) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000a80)={0x4dc}, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0x40042409, 0x1) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) socketpair(0xb, 0x1, 0x6, &(0x7f00000007c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r5, &(0x7f0000000180)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="27030202590400000000002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada300c9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2c23620", 0x40}, {&(0x7f0000000280)="fe112162c63e6da8bc8432294ef18af53cc330a62a2c7035246635093ba4d30fcf19a90804f04a10939db8f4e13069cda6d167bf1b68c94d8d694d6ad1a4d51a715975560ad48770706eb1b88d021e1119f2eb75275cfe77f862368649be0f7aff5e7826729816e3d3e7986d9434f891c71ca6e4210c6757083cfd8e732048c504f28b6d309fc129ed8eb5a82e224eb648f90134d1d315977c6ea360a7fece4baa3dd7dcc970759f29df0e86469e954e2b050e87b203ca27a2a519b7555c3b73f2681d49442d9647ff5ea64110cc5020fdeafe53a7d8be70f3260816bc376bcdc5352771fa55d9733e27730ec7103520e8359c78edd21ee6c68feb3685a55722f5da09ffe8ba9f05081a8d214156376f99906245f2f390ad717979d98f0574f8c5b52dcc2fa494f461be6c2560ddbaafb80c5b4583cbe56d24f14ab78fd718947077ea736251c7b8eee267267534c84daa6f095e94bfb85986a03ddea362cc7e6682884e710727c1163cd4f336c13b844605b7a815fe39e43bd0d2e414410a82958455b8a6bd9194c631d66295675fed64c04107a595c421111a3af6e9fadab5c9", 0x1a1}, {&(0x7f0000000540)="6fe4dd9eeb85271de1b87ef9440284", 0xf}], 0x4}, 0x200400c4) socketpair(0x1, 0x1, 0x0, 0x0) r6 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40, 0x64b}, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xd, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="720ac4ff000000007110ca00"], 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d649379071c33390e418ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fcb4e0b6eab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afcc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab2e4b380a00d72bc0480f949c479757306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a662d8bc9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e558d17879570c8ad95a1c57a05f4f979ea13201bafe4f0f6ea508000000a0c548552b5708005647323c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151fcda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177dc46c4604bca492ecec37e83efceefd7ca2533659edc8bef9cb85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d350000000000000000e0f209150a07682c4e14e3a83558df6fe2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e5a61561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a2946501559335781092cf8ce987c56cd31121624d7455f2a3666276c3c0e812b28e2f30d035cee5d0e77a3c72208ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463aaf28345bde0c195bc9f022ca8ce37ed85464c31679043e7f9d04bb5cb51da0b7958989fd70f241262d0af3246eb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a0600adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cd50feeb7bfad9b7be3283b6450d264e77124d18d4f5987baab97a9bfbd8f185b5631820420b75b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff201000000000000002e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa66237e0dacc107f532348cc2116473381e961f3d9c8c21579fe3245097c280abe51427b9f6cd72b5da6d0252803c66730cd5eac907f09b1a4090631e1b9e16587bb5f721303e6b89e5c54d680ac66d09af0a1f5b83e69a39265964279d174b0000000000000000000000fa08ad0731ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282b6caa2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae0533496b6d58da50ee80a6b9a7438978c5465113f668eb4484350048289d07dbef325d3221a7cb35f812f257941a9781e3214c2a3dcf89d99844b762a9cf17548c54fccad2c7ae8072b82e0880815daf966bd5343c1635e123f868a7167cfcff33320253af570f4ef9c0254afdd89ac3943562b530dd88da8a94013bbaf204bebc38055adc39f07f7c22711f4d1f6dcc928d1578a093c072e0b92babc76f47ee367e745a024a2278319d9a4d1378482b74c516647652bfb6e93002494a5cd74e2a9a4734487062437da23e1efa6ef7674108aaa3ffac859c3577c2637bb3bdc69bc365b1f20dba96b8acca62f3f80045318de0facf2ed44b814e842c2a520159bb6c320cec0910c0b8bd3d547bdfba2e0bb24d117ed0388afd37affbad2f9c77c9c1314a16ffe64f5e3744a2fffd7039670f5706e589a4c3868ffd08cd0e05023f4d8f95712207450e39a7550f42419bf30b31cac3fa1404e449c1cee0fff0d86a98dc9bf38a1e0b4fa5225dae5e781b43545b51681b2158f41bab16f8a7df758b00ffa6e8522bd83e320ff897f177367278a1f0cdbde082d9983308b40c39740b6fd1ba4aa10c3a19c7374278d00000000"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b40)={{r2}, &(0x7f0000000ac0), &(0x7f0000000b00)}, 0x20) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x6, 0xc, 0x0, 0x0, 0x0, 0x2000, 0x848, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x4, @perf_config_ext={0x4, 0x3}, 0x0, 0xc, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x89a0, &(0x7f0000000080)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r10, 0x89a2, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89a3, &(0x7f0000000080)) 1.531347082s ago: executing program 2 (id=4179): socket$kcm(0x10, 0x400000002, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000001, 0x1, @perf_bp={0x0}, 0x8061, 0x3, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x4, 0x80, 0x2, 0x0, 0x1c, 0x0, 0x0, 0x8, 0xa2786, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x3}, 0x9644, 0x400000a6, 0x2, 0x7, 0x10000, 0x9f9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x5, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x3, 0x3}, 0x101239, 0xc8, 0x6, 0x0, 0x0, 0x3, 0xffc0}, 0x0, 0x6, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e488a86317ce81"], 0xfdef) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000017c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x80fe, 0x7, @dev={0xfe, 0x80, '\x00', 0x3e}, 0xe, 0x2}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000004c0)="7f", 0x1}], 0x1, &(0x7f0000000ac0)=ANY=[@ANYRES16=r3, @ANYBLOB="428417c12cc6b5298807181a90365916610235872e111bc7d7a9a04cba0151796efcf02e59a27a51373169712f1fe0a6a412ae5494bde37ce213824fbddeffe290e12695b250b4f91eab9a19797e955de35eaea4c2340a251791290acdbf747503fba8e744b2c666feafada7d5ff2c9ac715465d97c3fd399b97bd8174bcc3fafbc5e2e0934fc43cc21db4865fa7d7dfb7dd8a713be217ebbc281018522f0b40a6d91ffd1933160eb5b9ea3f37153cc5a6d0d7bccb81d0ebbdffdef2fef61f23ab09257a94b661c73a93c5458372ab600f8e63581f9d68b2006c35c4e3cea7ee579fd640c0fdcfde6f04728284716784b14c603e413eeb3fef", @ANYRES64, @ANYRESDEC=0x0, @ANYRES16=r1, @ANYBLOB="327c026991a4add2ebb4f7bd334ca24da16e0d325da8bc447c62843ae2ab516538c30f00009ac8ca936f3197c3642bd025d6ddcedfcb6db93af7e3852d2dde086727403e8250917aad52ad40e5fc3b29c709692ec42af9a7cb4b804f1b6c2eae4a1f40f09448c85b1624b84451dd6776aa98733726127fe4842622365c7a7736ccfdc8560d107fe7756ab738d263540f58a3eefa7d9aa9d2cc09c4c5151a9ea8d99e61d6a30ba93e9d7d4a308d3295eafa2661276f5deb1e004f841345632994ae4d7d7f67f544b22f045af6564b646cbc044c523f64549f965b1d9b"], 0xd0}, 0x480c4) r7 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r7, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000080)={0x0, 0x20, &(0x7f0000000680)=[{&(0x7f0000000340)="d80000001c0081044e81f782db44b904021d0802010000001c00f0a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x20004800) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x6, 0x830d}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r9, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r10, &(0x7f0000000280)={0x0, 0xffffffffffffffa2, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x8080}, 0x8000) socket$kcm(0x11, 0x200000000000003, 0x300) 1.529783012s ago: executing program 1 (id=4180): socket$kcm(0xa, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.kill\x00', 0x0, 0x0) ioctl$TUNSETCARRIER(r0, 0x400454e2, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000005c0)={r0, 0x0, 0x0}, 0x10) write$cgroup_int(r0, &(0x7f0000000040)=0xa6, 0x12) openat$tun(0xffffffffffffff9c, 0x0, 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80210, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x87}, @printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x20}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f00000001c0)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1e, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x0, 0x100005, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="0100000005000000fd09000084"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000e40), 0x800, r3}, 0x38) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1a}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, 0x0) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, &(0x7f0000000840)=""/121, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r3}, 0x38) 1.443119034s ago: executing program 0 (id=4181): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x100, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x8}, 0x4202, 0x0, 0xffffffff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x5) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce2200182f00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa35f088be"], 0xfdef) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x1}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={0x1, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@base={0x6, 0x8001, 0xb3, 0xd65, 0x1000, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x4}, 0x50) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a00)={0xffffffffffffffff, 0x8ca}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={0x1, 0xffffffffffffffff}, 0x4) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x8, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x3, 0x3d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r7) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000860629c98500000015000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r10, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0857f9f582f0300000000000000", 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x80000001, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x5}, 0x50) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=@base={0x16, 0x6, 0x200, 0x7fffffff, 0x4, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x5}, 0x50) r13 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b80)={0x1b, 0x0, 0x0, 0x100, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x4}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c80)={0x11, 0x2c, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0xc085, 0x0, 0x0, 0x0, 0x7}, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x1}, @cb_func={0x18, 0x1, 0x4, 0x0, 0x6}, @call={0x85, 0x0, 0x0, 0xac}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000840)='syzkaller\x00', 0x2, 0x45, &(0x7f0000000880)=""/69, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000940)={0x2, 0xd, 0xfffffff9, 0xa}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000c00)=[r4, r5, r6, r11, r12, r13], &(0x7f0000000c40)=[{0x4, 0x3, 0x9, 0x4}], 0x10, 0x7ff}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) gettid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001740)=[{&(0x7f0000000200)}, {0x0}, {&(0x7f00000006c0)}], 0x3, 0x0, 0x0, 0x4004804}, 0x0) r14 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r14, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x8004ff00, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7000000}, 0x48) 0s ago: executing program 1 (id=4182): r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000380)=@l2tp={0x2, 0x0, @multicast1, 0x4}, 0x4, 0x0}, 0x0) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016000000b30000007f"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_val={0x18, 0x3, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x8}, @generic={0x66}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffffd}, @exit, @alu={0x4, 0x0, 0x4, 0x3, 0x0, 0x0, 0x8}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28}, 0x94) kernel console output (not intermixed with test programs): 585.888263][T14069] ? load_image+0x410/0x410 [ 585.892791][T14069] ? __lock_acquire+0x7c40/0x7c40 [ 585.897854][T14069] should_fail_ex+0x390/0x4c0 [ 585.902568][T14069] _copy_to_user+0x2c/0x130 [ 585.907107][T14069] bpf_test_finish+0x198/0x600 [ 585.911912][T14069] ? convert_skb_to___skb+0x420/0x420 [ 585.917319][T14069] ? bpf_test_init+0x119/0x140 [ 585.922114][T14069] bpf_prog_test_run_xdp+0x827/0xf80 [ 585.927432][T14069] ? __lock_acquire+0x7c40/0x7c40 [ 585.932493][T14069] ? dev_put+0x80/0x80 [ 585.936590][T14069] ? dev_put+0x80/0x80 [ 585.940688][T14069] bpf_prog_test_run+0x31c/0x390 [ 585.945658][T14069] __sys_bpf+0x62b/0x780 [ 585.949933][T14069] ? bpf_link_show_fdinfo+0x380/0x380 [ 585.955350][T14069] ? lock_chain_count+0x20/0x20 [ 585.960236][T14069] __x64_sys_bpf+0x78/0x90 [ 585.964684][T14069] do_syscall_64+0x4c/0xa0 [ 585.969127][T14069] ? clear_bhb_loop+0x60/0xb0 [ 585.973842][T14069] ? clear_bhb_loop+0x60/0xb0 [ 585.978601][T14069] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 585.984527][T14069] RIP: 0033:0x7f040d39de99 [ 585.988965][T14069] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 586.008596][T14069] RSP: 002b:00007f040e323028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 586.017037][T14069] RAX: ffffffffffffffda RBX: 00007f040d625fa0 RCX: 00007f040d39de99 [ 586.025028][T14069] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 000000000000000a [ 586.033019][T14069] RBP: 00007f040e323090 R08: 0000000000000000 R09: 0000000000000000 [ 586.041009][T14069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 586.049024][T14069] R13: 00007f040d626038 R14: 00007f040d625fa0 R15: 00007ffdf1583f78 [ 586.057032][T14069] [ 586.065151][ T4284] Bluetooth: hci1: command 0x0409 tx timeout [ 586.483742][ T4284] Bluetooth: hci4: unexpected event 0x04 length: 15 > 10 [ 586.822496][T14095] netlink: 37955 bytes leftover after parsing attributes in process `syz.1.3499'. [ 586.841854][T14101] netlink: 136124 bytes leftover after parsing attributes in process `syz.2.3504'. [ 587.484246][ T4289] Bluetooth: hci5: command 0x0409 tx timeout [ 587.792105][ T4289] Bluetooth: hci4: unexpected event 0x04 length: 15 > 10 [ 588.534806][ T4284] Bluetooth: hci4: command 0x0409 tx timeout [ 588.845206][ T4289] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 588.858102][ T4289] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 588.867127][ T4289] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 588.876142][ T4289] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 588.886779][ T49] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 588.895212][ T49] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 589.133328][T14128] chnl_net:caif_netlink_parms(): no params data found [ 589.252199][T14128] bridge0: port 1(bridge_slave_0) entered blocking state [ 589.272387][T14128] bridge0: port 1(bridge_slave_0) entered disabled state [ 589.295557][T14128] device bridge_slave_0 entered promiscuous mode [ 589.316224][T14128] bridge0: port 2(bridge_slave_1) entered blocking state [ 589.335634][T14128] bridge0: port 2(bridge_slave_1) entered disabled state [ 589.355903][T14128] device bridge_slave_1 entered promiscuous mode [ 589.442857][T14128] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 589.456684][T14128] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 589.492809][T14128] team0: Port device team_slave_0 added [ 589.505438][T14128] team0: Port device team_slave_1 added [ 589.533139][T14128] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 589.540406][T14128] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 589.567191][T14128] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 589.581071][T14128] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 589.588781][T14128] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 589.616169][T14128] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 590.489644][T14128] device hsr_slave_0 entered promiscuous mode [ 590.507254][T14128] device hsr_slave_1 entered promiscuous mode [ 590.632980][ T4284] Bluetooth: hci4: command 0x0409 tx timeout [ 590.924229][ T4284] Bluetooth: hci2: command 0x0409 tx timeout [ 590.983456][ T4284] Bluetooth: hci4: unexpected event 0x05 length: 15 > 4 [ 590.998145][T14144] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3520'. [ 591.032208][T14147] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.3521'. [ 591.157285][T14128] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.334612][T14145] device syzkaller0 entered promiscuous mode [ 591.393838][T14128] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.559410][T14128] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.689000][T14161] netlink: 'syz.2.3526': attribute type 10 has an invalid length. [ 591.719045][T14128] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.744677][T14164] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3526'. [ 591.755869][T14161] netlink: 'syz.2.3526': attribute type 39 has an invalid length. [ 591.991695][T14172] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.3531'. [ 593.009372][ T4284] Bluetooth: hci2: command 0x041b tx timeout [ 593.848316][T14170] device macvlan0 left promiscuous mode [ 593.870598][T14176] netlink: 'syz.3.3533': attribute type 21 has an invalid length. [ 593.900645][T14176] netlink: 'syz.3.3533': attribute type 6 has an invalid length. [ 593.913206][T14176] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3533'. [ 594.241460][ T4284] Bluetooth: hci4: unexpected event 0x05 length: 15 > 4 [ 594.686398][T14128] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 594.845282][T14128] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 594.968089][ T4284] Bluetooth: hci1: unexpected event 0x04 length: 15 > 10 [ 595.025588][T14128] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 595.094324][ T4289] Bluetooth: hci2: command 0x040f tx timeout [ 595.195479][T14128] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 595.291702][T14195] netlink: 'syz.0.3538': attribute type 21 has an invalid length. [ 595.848039][T14204] netlink: 16410 bytes leftover after parsing attributes in process `syz.4.3541'. [ 596.012018][T10339] team0: Port device wlan1 removed [ 596.201624][T14207] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3542'. [ 596.337834][T14210] netlink: 'syz.2.3543': attribute type 10 has an invalid length. [ 596.472375][T14211] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3543'. [ 596.503206][T14213] netlink: 'syz.2.3543': attribute type 39 has an invalid length. [ 596.669209][T14128] 8021q: adding VLAN 0 to HW filter on device bond0 [ 596.710120][T10339] device vlan0 left promiscuous mode [ 596.716743][T10339] : port 1(vlan0) entered disabled state [ 596.778107][T10339] device hsr_slave_0 left promiscuous mode [ 597.004233][ T4289] Bluetooth: hci1: command 0x0409 tx timeout [ 597.167278][ T4289] Bluetooth: hci2: command 0x0419 tx timeout [ 597.375576][T10339] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 597.393811][T10339] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 597.415911][T10339] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 597.423462][T10339] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 597.483692][T10339] device veth1_vlan left promiscuous mode [ 597.759555][T14228] netlink: 180900 bytes leftover after parsing attributes in process `syz.0.3547'. [ 597.779532][T14228] openvswitch: netlink: Flow actions attr not present in new flow. [ 598.591200][T10339] device team_slave_1 left promiscuous mode [ 598.599338][T10339] team0 (unregistering): Port device team_slave_1 removed [ 598.662496][T10339] device team_slave_0 left promiscuous mode [ 598.677958][T10339] team0 (unregistering): Port device team_slave_0 removed [ 599.271943][T10321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 599.280297][T10321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 599.317485][T14128] 8021q: adding VLAN 0 to HW filter on device team0 [ 599.491214][T10315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 599.513767][T10315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 599.551471][T10315] bridge0: port 1(bridge_slave_0) entered blocking state [ 599.558710][T10315] bridge0: port 1(bridge_slave_0) entered forwarding state [ 599.570854][ T4289] Bluetooth: hci1: unexpected event 0x04 length: 15 > 10 [ 599.577037][T10315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 599.600138][T10315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 599.610312][T10315] bridge0: port 2(bridge_slave_1) entered blocking state [ 599.617511][T10315] bridge0: port 2(bridge_slave_1) entered forwarding state [ 599.638398][T10315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 599.653879][T10315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 599.667404][T10315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 599.717637][T14233] netlink: 126288 bytes leftover after parsing attributes in process `syz.4.3550'. [ 599.904966][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 599.923219][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 599.933498][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 599.945471][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 599.955849][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 600.059066][T14233] netlink: 'syz.4.3550': attribute type 21 has an invalid length. [ 600.110264][T10321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 600.135340][T10321] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 600.168688][T10321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 600.181974][T10321] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 600.204846][T14128] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 600.739297][T14246] netlink: 16410 bytes leftover after parsing attributes in process `syz.4.3554'. [ 601.035280][T14251] netlink: 'syz.2.3556': attribute type 10 has an invalid length. [ 601.069731][T14253] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3555'. [ 601.105581][T14251] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3556'. [ 601.185300][T14255] netlink: 'syz.2.3556': attribute type 39 has an invalid length. [ 601.221874][ T4284] Bluetooth: hci5: unexpected event 0x05 length: 15 > 4 [ 601.302074][T10333] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 601.350847][T10333] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 601.372673][T14128] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 601.412117][T10333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 601.432847][T10333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 601.485248][T10333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 601.495774][T10333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 601.518291][T14128] device veth0_vlan entered promiscuous mode [ 601.534344][T14264] netlink: 'syz.2.3560': attribute type 1 has an invalid length. [ 601.542668][T10333] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 601.561839][T10333] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 601.581598][T14128] device veth1_vlan entered promiscuous mode [ 601.637030][T14269] netlink: 'syz.3.3562': attribute type 29 has an invalid length. [ 601.649735][T10333] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 601.662559][ T4284] Bluetooth: hci1: command 0x0409 tx timeout [ 601.677646][T10333] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 601.690147][T10333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 601.699767][T10333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 601.709677][T14269] netlink: 'syz.3.3562': attribute type 29 has an invalid length. [ 601.722986][T14271] netlink: 'syz.3.3562': attribute type 29 has an invalid length. [ 601.736525][T14128] device veth0_macvtap entered promiscuous mode [ 601.775764][T14269] netlink: 'syz.3.3562': attribute type 29 has an invalid length. [ 601.799483][T14128] device veth1_macvtap entered promiscuous mode [ 601.816205][T14269] netlink: 'syz.3.3562': attribute type 29 has an invalid length. [ 601.837109][T14269] netlink: 'syz.3.3562': attribute type 29 has an invalid length. [ 601.862424][T14128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 601.876020][T14128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 601.895293][T14128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 601.908148][T14128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 601.919200][T14128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 601.941201][T14128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 601.964115][T14128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 601.987752][T14128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 602.008834][T14128] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 602.030311][T14128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 602.047280][T14128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 602.061554][T14128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 602.075257][T14128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 602.090564][T14128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 602.102608][T14128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 602.113078][T14128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 602.136540][T14128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 602.152963][T14128] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 602.164579][T14277] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3564'. [ 602.174811][T10339] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 602.183655][T10339] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 602.193468][T10339] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 602.203802][T10339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 602.214319][T10339] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 602.223632][T10339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 602.241153][T14128] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.252886][T14128] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.262651][T14128] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.271828][T14128] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.464248][ T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 602.472240][ T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 602.508682][T14284] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.3567'. [ 602.552132][T10321] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 602.583091][T10339] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 602.611453][T10339] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 602.659684][T10339] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 602.867105][T14292] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3571'. [ 602.918779][T14292] device macvlan0 entered promiscuous mode [ 603.256398][T14300] netlink: 180900 bytes leftover after parsing attributes in process `syz.3.3573'. [ 603.276338][T14300] openvswitch: netlink: Flow actions attr not present in new flow. [ 603.513379][T14309] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3574'. [ 603.776815][ T5882] bond0: (slave syz_tun): Releasing backup interface [ 603.807570][T14315] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3577'. [ 603.901230][ T4289] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 603.912335][ T4289] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 603.924364][ T4289] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 603.932365][ T4289] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 603.940348][ T4289] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 603.950300][ T4289] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 604.031471][T10321] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.179165][T10321] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.295485][T10321] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.324477][T14325] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.3580'. [ 604.422874][T10321] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.808673][T14317] chnl_net:caif_netlink_parms(): no params data found [ 605.131566][T10321] tipc: Left network mode [ 605.183635][T14317] bridge0: port 1(bridge_slave_0) entered blocking state [ 605.231997][T14317] bridge0: port 1(bridge_slave_0) entered disabled state [ 605.240627][T14317] device bridge_slave_0 entered promiscuous mode [ 605.270540][T14348] FAULT_INJECTION: forcing a failure. [ 605.270540][T14348] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 605.292998][T14317] bridge0: port 2(bridge_slave_1) entered blocking state [ 605.304304][T14317] bridge0: port 2(bridge_slave_1) entered disabled state [ 605.323078][T14317] device bridge_slave_1 entered promiscuous mode [ 605.358204][T14348] CPU: 1 PID: 14348 Comm: syz.0.3586 Not tainted syzkaller #0 [ 605.365769][T14348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 605.375873][T14348] Call Trace: [ 605.379217][T14348] [ 605.382186][T14348] dump_stack_lvl+0x188/0x24e [ 605.386946][T14348] ? show_regs_print_info+0x12/0x12 [ 605.392208][T14348] ? load_image+0x410/0x410 [ 605.396759][T14348] ? __lock_acquire+0x7c40/0x7c40 [ 605.401840][T14348] ? __bpf_prog_test_run_raw_tp+0x2a6/0x430 [ 605.407796][T14348] should_fail_ex+0x390/0x4c0 [ 605.412539][T14348] _copy_to_user+0x2c/0x130 [ 605.417094][T14348] bpf_prog_test_run_raw_tp+0x4de/0x680 [ 605.422704][T14348] ? trace_bpf_test_finish+0x220/0x220 [ 605.428227][T14348] ? trace_bpf_test_finish+0x220/0x220 [ 605.433738][T14348] bpf_prog_test_run+0x31c/0x390 [ 605.438744][T14348] __sys_bpf+0x62b/0x780 [ 605.443071][T14348] ? bpf_link_show_fdinfo+0x380/0x380 [ 605.448522][T14348] ? lock_chain_count+0x20/0x20 [ 605.453442][T14348] __x64_sys_bpf+0x78/0x90 [ 605.457917][T14348] do_syscall_64+0x4c/0xa0 [ 605.462390][T14348] ? clear_bhb_loop+0x60/0xb0 [ 605.467119][T14348] ? clear_bhb_loop+0x60/0xb0 [ 605.471908][T14348] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 605.477843][T14348] RIP: 0033:0x7f90b879de99 [ 605.482280][T14348] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 605.501910][T14348] RSP: 002b:00007f90b95d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 605.510357][T14348] RAX: ffffffffffffffda RBX: 00007f90b8a25fa0 RCX: 00007f90b879de99 [ 605.518353][T14348] RDX: 000000000000000c RSI: 00002000000004c0 RDI: 000000000000000a [ 605.526351][T14348] RBP: 00007f90b95d7090 R08: 0000000000000000 R09: 0000000000000000 [ 605.534345][T14348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 605.542337][T14348] R13: 00007f90b8a26038 R14: 00007f90b8a25fa0 R15: 00007ffd0f94f7b8 [ 605.550350][T14348] [ 605.727982][T14317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 605.793479][T14317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 605.979244][T14317] team0: Port device team_slave_0 added [ 606.032230][T14317] team0: Port device team_slave_1 added [ 606.046323][ T4289] Bluetooth: hci0: command 0x0409 tx timeout [ 606.139502][T14317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 606.147082][T14317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 606.194420][T14317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 606.304172][T14317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 606.311283][T14317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 606.364831][T14317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 606.409030][T10321] device gretap0 left promiscuous mode [ 606.464337][T10321] : port 1(gretap0) entered disabled state [ 606.555855][T14317] device hsr_slave_0 entered promiscuous mode [ 606.594169][T14317] device hsr_slave_1 entered promiscuous mode [ 606.624113][T14317] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 606.642622][T14377] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.3592'. [ 606.655125][T14317] Cannot create hsr debugfs directory [ 606.734004][T14373] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3590'. [ 607.049242][T14391] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3595'. [ 607.410730][T10321] team0: Port device wlan1 removed [ 607.702536][ T4289] Bluetooth: hci4: unexpected event 0x05 length: 15 > 4 [ 608.134718][ T4289] Bluetooth: hci0: command 0x041b tx timeout [ 608.223173][T14407] validate_nla: 6 callbacks suppressed [ 608.223192][T14407] netlink: 'syz.4.3598': attribute type 10 has an invalid length. [ 608.237399][T14407] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3598'. [ 608.247038][T14407] device hsr0 entered promiscuous mode [ 608.252906][T14407] bridge0: port 3(hsr0) entered blocking state [ 608.259666][T14407] bridge0: port 3(hsr0) entered disabled state [ 608.296949][T14407] bridge0: port 3(hsr0) entered blocking state [ 608.303415][T14407] bridge0: port 3(hsr0) entered forwarding state [ 608.403651][T10321] device veth0_to_team left promiscuous mode [ 608.441570][T10321] : port 2(veth0_to_team) entered disabled state [ 608.486810][T10321] device vlan0 left promiscuous mode [ 608.516616][T10321] : port 1(vlan0) entered disabled state [ 608.595096][T10321] device hsr_slave_0 left promiscuous mode [ 608.627204][T10321] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 608.675907][T10321] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 608.716168][T10321] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 608.765408][T10321] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 608.808180][T10321] device bridge_slave_0 left promiscuous mode [ 608.827982][T10321] bridge0: port 1(bridge_slave_0) entered disabled state [ 608.886978][T10321] device veth1_macvtap left promiscuous mode [ 608.911409][T10321] device veth0_macvtap left promiscuous mode [ 608.929540][T10321] device veth1_vlan left promiscuous mode [ 609.783935][T10321] team0 (unregistering): Port device macvlan0 removed [ 610.059879][T10321] team0 (unregistering): Port device team_slave_1 removed [ 610.104539][T10321] team0 (unregistering): Port device team_slave_0 removed [ 610.145836][T10321] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 610.194789][T10321] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 610.204896][ T4289] Bluetooth: hci0: command 0x040f tx timeout [ 610.247359][T10321] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 610.512021][T10321] team0 (unregistering): Port device bridge0 removed [ 610.545570][T10321] bond0 (unregistering): Released all slaves [ 610.629449][T14421] device wlan1 entered promiscuous mode [ 610.653618][T14424] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3603'. [ 610.692739][T14444] netlink: 'syz.3.3608': attribute type 10 has an invalid length. [ 610.732762][T14444] FAULT_INJECTION: forcing a failure. [ 610.732762][T14444] name failslab, interval 1, probability 0, space 0, times 0 [ 610.760663][T14444] CPU: 1 PID: 14444 Comm: syz.3.3608 Not tainted syzkaller #0 [ 610.768221][T14444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 610.778324][T14444] Call Trace: [ 610.781647][T14444] [ 610.784623][T14444] dump_stack_lvl+0x188/0x24e [ 610.789365][T14444] ? show_regs_print_info+0x12/0x12 [ 610.794614][T14444] ? load_image+0x410/0x410 [ 610.799194][T14444] should_fail_ex+0x390/0x4c0 [ 610.803935][T14444] should_failslab+0x5/0x20 [ 610.808489][T14444] slab_pre_alloc_hook+0x59/0x300 [ 610.813570][T14444] ? br_netlink_fini+0x30/0x30 [ 610.818474][T14444] kmem_cache_alloc_node+0x5a/0x310 [ 610.823724][T14444] ? if_nlmsg_size+0x659/0x960 [ 610.828615][T14444] ? __alloc_skb+0xf9/0x7d0 [ 610.833174][T14444] __alloc_skb+0xf9/0x7d0 [ 610.837574][T14444] rtmsg_ifinfo_build_skb+0x80/0x190 [ 610.842918][T14444] rtmsg_ifinfo+0xc4/0x200 [ 610.847398][T14444] __dev_notify_flags+0xef/0x310 [ 610.852393][T14444] ? __dev_change_flags+0x6a0/0x6a0 [ 610.857648][T14444] ? __dev_change_flags+0x4ce/0x6a0 [ 610.862901][T14444] ? printk_sprint+0x460/0x460 [ 610.867794][T14444] ? dev_get_flags+0x1c0/0x1c0 [ 610.872626][T14444] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 610.878570][T14444] ? _raw_spin_unlock+0x40/0x40 [ 610.883476][T14444] dev_change_flags+0xda/0x1a0 [ 610.888300][T14444] do_setlink+0xbc7/0x29c0 [ 610.892776][T14444] ? load_image+0x410/0x410 [ 610.897339][T14444] ? nlmsg_parse_deprecated_strict+0x110/0x110 [ 610.903562][T14444] ? __nla_validate_parse+0x1f67/0x2970 [ 610.909189][T14444] ? __nla_validate+0x50/0x50 [ 610.913960][T14444] ? validate_linkmsg+0x3db/0x4c0 [ 610.919048][T14444] rtnl_newlink+0x16e4/0x1f90 [ 610.923797][T14444] ? rtnl_newlink+0x481/0x1f90 [ 610.928647][T14444] ? rtnl_setlink+0x510/0x510 [ 610.933390][T14444] ? __rwlock_init+0x140/0x140 [ 610.938215][T14444] ? do_raw_spin_unlock+0x11d/0x230 [ 610.943475][T14444] ? __mutex_lock+0x7f6/0xae0 [ 610.948222][T14444] ? __mutex_lock+0x3ba/0xae0 [ 610.952989][T14444] ? rtnl_setlink+0x510/0x510 [ 610.957743][T14444] rtnetlink_rcv_msg+0x863/0xfb0 [ 610.962754][T14444] ? rtnetlink_rcv_msg+0x220/0xfb0 [ 610.967932][T14444] ? rtnetlink_bind+0x80/0x80 [ 610.972655][T14444] ? __local_bh_enable_ip+0x136/0x1c0 [ 610.978067][T14444] ? lockdep_hardirqs_on+0x94/0x140 [ 610.983298][T14444] ? __local_bh_enable_ip+0x136/0x1c0 [ 610.988708][T14444] ? _local_bh_enable+0xa0/0xa0 [ 610.993587][T14444] ? __dev_queue_xmit+0x281/0x3810 [ 610.998736][T14444] ? __dev_queue_xmit+0x281/0x3810 [ 611.003885][T14444] ? __dev_queue_xmit+0x1d84/0x3810 [ 611.009131][T14444] ? __dev_queue_xmit+0x281/0x3810 [ 611.014293][T14444] ? ref_tracker_free+0x682/0x830 [ 611.019365][T14444] ? refcount_inc+0x70/0x70 [ 611.023897][T14444] ? memcpy+0x3c/0x60 [ 611.027914][T14444] ? __copy_skb_header+0x3ba/0x4f0 [ 611.033062][T14444] ? __skb_clone+0x446/0x6c0 [ 611.037695][T14444] netlink_rcv_skb+0x1ef/0x440 [ 611.042502][T14444] ? rtnetlink_bind+0x80/0x80 [ 611.047214][T14444] ? netlink_ack+0x1160/0x1160 [ 611.052021][T14444] ? netlink_deliver_tap+0x2e/0x1b0 [ 611.057294][T14444] netlink_unicast+0x7ad/0x920 [ 611.062159][T14444] netlink_sendmsg+0x8ad/0xbd0 [ 611.066974][T14444] ? netlink_getsockopt+0x550/0x550 [ 611.072249][T14444] ? apparmor_socket_sendmsg+0x8a/0x330 [ 611.077835][T14444] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 611.083143][T14444] ? security_socket_sendmsg+0x7c/0xa0 [ 611.088631][T14444] ? netlink_getsockopt+0x550/0x550 [ 611.093866][T14444] ____sys_sendmsg+0x5ed/0x9a0 [ 611.098675][T14444] ? __sys_sendmsg_sock+0x30/0x30 [ 611.103730][T14444] ? __import_iovec+0x306/0x510 [ 611.108624][T14444] ? import_iovec+0x6f/0xa0 [ 611.113164][T14444] ___sys_sendmsg+0x2a2/0x360 [ 611.117893][T14444] ? __sys_sendmsg+0x2a0/0x2a0 [ 611.122706][T14444] ? __lock_acquire+0x7c40/0x7c40 [ 611.127790][T14444] __se_sys_sendmsg+0x1c3/0x2b0 [ 611.132676][T14444] ? __x64_sys_sendmsg+0x80/0x80 [ 611.137660][T14444] ? lockdep_hardirqs_on+0x94/0x140 [ 611.142891][T14444] do_syscall_64+0x4c/0xa0 [ 611.147345][T14444] ? clear_bhb_loop+0x60/0xb0 [ 611.152074][T14444] ? clear_bhb_loop+0x60/0xb0 [ 611.156787][T14444] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 611.162780][T14444] RIP: 0033:0x7f39f799de99 [ 611.167244][T14444] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 611.186891][T14444] RSP: 002b:00007f39f8780028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 611.195338][T14444] RAX: ffffffffffffffda RBX: 00007f39f7c25fa0 RCX: 00007f39f799de99 [ 611.203351][T14444] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 611.211351][T14444] RBP: 00007f39f8780090 R08: 0000000000000000 R09: 0000000000000000 [ 611.219349][T14444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 611.227343][T14444] R13: 00007f39f7c26038 R14: 00007f39f7c25fa0 R15: 00007ffd628ecc78 [ 611.235356][T14444] [ 611.495634][T14448] netlink: 'syz.4.3610': attribute type 10 has an invalid length. [ 611.509949][T14453] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3610'. [ 611.525161][T14455] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.3611'. [ 611.539153][T14448] netlink: 'syz.4.3610': attribute type 39 has an invalid length. [ 611.791800][T14464] netlink: 'syz.4.3615': attribute type 2 has an invalid length. [ 611.809116][T14464] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3615'. [ 611.877224][T14462] netlink: 'syz.0.3613': attribute type 10 has an invalid length. [ 611.900712][T14462] device macvlan0 left promiscuous mode [ 612.003123][T14462] team0: Port device macvlan0 added [ 612.192059][T14317] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 612.252282][T14317] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 612.284131][ T4289] Bluetooth: hci0: command 0x0419 tx timeout [ 612.312357][T14317] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 612.335408][T14317] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 612.594443][T14485] FAULT_INJECTION: forcing a failure. [ 612.594443][T14485] name failslab, interval 1, probability 0, space 0, times 0 [ 612.644511][T14485] CPU: 1 PID: 14485 Comm: syz.1.3618 Not tainted syzkaller #0 [ 612.652170][T14485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 612.662305][T14485] Call Trace: [ 612.665635][T14485] [ 612.668609][T14485] dump_stack_lvl+0x188/0x24e [ 612.673356][T14485] ? show_regs_print_info+0x12/0x12 [ 612.678645][T14485] ? load_image+0x410/0x410 [ 612.683210][T14485] ? __might_sleep+0xd0/0xd0 [ 612.687873][T14485] ? __lock_acquire+0x7c40/0x7c40 [ 612.693019][T14485] should_fail_ex+0x390/0x4c0 [ 612.697763][T14485] should_failslab+0x5/0x20 [ 612.702316][T14485] slab_pre_alloc_hook+0x59/0x300 [ 612.707386][T14485] ? tomoyo_encode+0x28a/0x550 [ 612.712201][T14485] __kmem_cache_alloc_node+0x4f/0x270 [ 612.717643][T14485] ? tomoyo_encode+0x28a/0x550 [ 612.722460][T14485] __kmalloc+0xa3/0x240 [ 612.726678][T14485] tomoyo_encode+0x28a/0x550 [ 612.731326][T14485] tomoyo_realpath_from_path+0x578/0x5c0 [ 612.737025][T14485] ? tomoyo_domain+0xd2/0x120 [ 612.741759][T14485] ? tomoyo_path_number_perm+0x205/0x650 [ 612.747446][T14485] tomoyo_path_number_perm+0x22f/0x650 [ 612.752962][T14485] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 612.758454][T14485] ? ksys_write+0x1ce/0x260 [ 612.762995][T14485] ? common_file_perm+0x171/0x1c0 [ 612.768091][T14485] ? __fget_files+0x28/0x460 [ 612.772727][T14485] security_file_ioctl+0x6c/0xa0 [ 612.777701][T14485] __se_sys_ioctl+0x48/0x170 [ 612.782327][T14485] do_syscall_64+0x4c/0xa0 [ 612.786774][T14485] ? clear_bhb_loop+0x60/0xb0 [ 612.791478][T14485] ? clear_bhb_loop+0x60/0xb0 [ 612.796190][T14485] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 612.802116][T14485] RIP: 0033:0x7f9ff439de99 [ 612.806564][T14485] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 612.826201][T14485] RSP: 002b:00007f9ff5314028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 612.834637][T14485] RAX: ffffffffffffffda RBX: 00007f9ff4625fa0 RCX: 00007f9ff439de99 [ 612.842643][T14485] RDX: 0000200000000080 RSI: 00000000000089a2 RDI: 000000000000000c [ 612.850654][T14485] RBP: 00007f9ff5314090 R08: 0000000000000000 R09: 0000000000000000 [ 612.858669][T14485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 612.866669][T14485] R13: 00007f9ff4626038 R14: 00007f9ff4625fa0 R15: 00007fffddcf4908 [ 612.874685][T14485] [ 612.926824][T14317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 612.987916][T10339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 612.996725][T10339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 613.038221][T14317] 8021q: adding VLAN 0 to HW filter on device team0 [ 613.056278][T10339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 613.082579][T10339] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 613.105032][T10339] bridge0: port 1(bridge_slave_0) entered blocking state [ 613.112409][T10339] bridge0: port 1(bridge_slave_0) entered forwarding state [ 613.164466][T14485] ERROR: Out of memory at tomoyo_realpath_from_path. [ 613.188942][T10339] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 613.198176][T10339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 613.237316][T10339] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 613.265262][T10339] bridge0: port 2(bridge_slave_1) entered blocking state [ 613.272526][T10339] bridge0: port 2(bridge_slave_1) entered forwarding state [ 613.322880][T10339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 613.355529][T10339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 613.375118][T14485] : port 1(vlan0) entered blocking state [ 613.380982][T14485] : port 1(vlan0) entered disabled state [ 613.407424][T14485] device vlan0 entered promiscuous mode [ 613.443885][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 613.480854][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 613.510587][T14501] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.3623'. [ 613.517656][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 613.546998][T14498] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.3621'. [ 613.581011][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 613.602338][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 613.626921][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 613.652825][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 613.700601][T10337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 613.729545][T10337] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 613.765132][T14317] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 613.806895][T14504] netlink: 'syz.1.3624': attribute type 10 has an invalid length. [ 613.862907][T14504] device syz_tun entered promiscuous mode [ 614.017557][T14504] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 614.042855][T14507] netlink: 'syz.3.3626': attribute type 2 has an invalid length. [ 614.065556][T14507] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3626'. [ 614.223120][T14505] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3624'. [ 614.252810][T14510] netlink: 'syz.1.3624': attribute type 39 has an invalid length. [ 614.261006][T14510] device macvlan0 entered promiscuous mode [ 614.718960][T14530] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 614.752373][T14532] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3630'. [ 614.982890][ T4284] Bluetooth: hci5: unexpected event 0x04 length: 15 > 10 [ 615.028316][T10321] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 615.078420][T10321] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 615.109636][T14539] netlink: 'syz.0.3635': attribute type 10 has an invalid length. [ 615.135673][T14539] netlink: 55 bytes leftover after parsing attributes in process `syz.0.3635'. [ 616.205473][ T4289] Bluetooth: hci5: command 0x0406 tx timeout [ 616.700080][T14539] team0: Port device macvlan0 removed [ 616.930312][T14317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 616.969745][T14558] netlink: 'syz.1.3638': attribute type 27 has an invalid length. [ 617.315528][T10315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 617.332936][T10315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 617.381079][T10333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 617.392028][T10333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 617.418988][T14317] device veth0_vlan entered promiscuous mode [ 617.446241][T10333] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 617.463183][T10333] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 617.491895][T14581] : port 1(gretap0) entered blocking state [ 617.507573][T14581] : port 1(gretap0) entered disabled state [ 617.537968][T14581] device gretap0 entered promiscuous mode [ 617.574173][T14585] : port 2(veth0_to_team) entered blocking state [ 617.588090][T14585] : port 2(veth0_to_team) entered disabled state [ 617.620696][T14585] device veth0_to_team entered promiscuous mode [ 617.650212][T14317] device veth1_vlan entered promiscuous mode [ 617.797673][T10321] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 617.823988][T14588] netlink: 188 bytes leftover after parsing attributes in process `syz.4.3644'. [ 617.825119][T10321] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 617.885770][T10321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 617.913645][T10321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 617.923811][T14593] netlink: 105 bytes leftover after parsing attributes in process `syz.4.3644'. [ 617.936446][T14593] netlink: 105 bytes leftover after parsing attributes in process `syz.4.3644'. [ 617.970382][T14317] device veth0_macvtap entered promiscuous mode [ 617.986722][T10321] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 618.015195][T14317] device veth1_macvtap entered promiscuous mode [ 618.086239][T14317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 618.144180][T14317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 618.214124][T14317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 618.233753][T14317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 618.254213][T14317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 618.284738][ T4289] Bluetooth: hci5: command 0x0409 tx timeout [ 618.302357][T14317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 618.312552][T14317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 618.323458][T14317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 618.335744][T14317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 618.345223][T14599] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3646'. [ 618.400756][T10321] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 618.416903][T10321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 618.457751][T14317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 618.508638][T14317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 618.534152][T14317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 618.554494][T14317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 618.577111][T14317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 618.604390][T14317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 618.642048][T14317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 618.686571][T14317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 618.701773][T14317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 618.713791][T10315] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 618.763519][T10315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 618.807719][T14317] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 618.824114][T14317] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 618.833671][T14317] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 618.858661][T14317] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 618.927831][T14614] sctp: [Deprecated]: syz.1.3651 (pid 14614) Use of int in maxseg socket option. [ 618.927831][T14614] Use struct sctp_assoc_value instead [ 619.158218][T10321] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 619.207618][T10321] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 619.367262][T10321] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 619.488674][T10333] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 619.524694][T10333] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 619.570283][T10333] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 619.611917][ T4289] Bluetooth: hci2: unexpected event 0x04 length: 15 > 10 [ 619.828386][T14634] netlink: 'syz.1.3658': attribute type 2 has an invalid length. [ 619.894325][T14634] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3658'. [ 620.323358][T14650] netlink: 'syz.2.3660': attribute type 10 has an invalid length. [ 620.407580][T14650] device syz_tun entered promiscuous mode [ 620.592526][T14650] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 620.643705][T14654] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3660'. [ 620.704912][T14655] netlink: 'syz.2.3660': attribute type 39 has an invalid length. [ 620.731622][T14655] device macvlan0 entered promiscuous mode [ 621.245033][ T4284] Bluetooth: hci0: unexpected event 0x04 length: 15 > 10 [ 621.245550][ T5859] bond0: (slave syz_tun): Releasing backup interface [ 621.476202][ T4284] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 621.494425][ T4284] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 621.505637][ T4284] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 621.521764][ T4284] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 621.529940][ T4284] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 621.541083][ T4284] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 621.644182][ T4289] Bluetooth: hci2: command 0x0409 tx timeout [ 621.676937][T14687] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.3670'. [ 622.392419][T14697] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.3673'. [ 623.377153][ T49] Bluetooth: hci0: command 0x0409 tx timeout [ 623.568498][ T49] Bluetooth: hci1: command 0x0409 tx timeout [ 623.774823][T14682] chnl_net:caif_netlink_parms(): no params data found [ 623.973921][T10321] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.032694][T14682] bridge0: port 1(bridge_slave_0) entered blocking state [ 624.040593][T14682] bridge0: port 1(bridge_slave_0) entered disabled state [ 624.061848][T14682] device bridge_slave_0 entered promiscuous mode [ 624.098663][T14682] bridge0: port 2(bridge_slave_1) entered blocking state [ 624.124400][T14682] bridge0: port 2(bridge_slave_1) entered disabled state [ 624.164461][T14682] device bridge_slave_1 entered promiscuous mode [ 624.318558][T10321] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.419314][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.425947][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.850778][T10321] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 625.048152][T14682] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 625.214677][T14682] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 625.451760][T10321] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 625.580502][T14723] netlink: 'syz.0.3679': attribute type 10 has an invalid length. [ 625.636820][T14723] bridge0: port 2(bridge_slave_1) entered disabled state [ 625.697119][ T4289] Bluetooth: hci1: command 0x041b tx timeout [ 625.721115][T14723] device bridge_slave_1 left promiscuous mode [ 625.801840][T14723] bridge0: port 2(bridge_slave_1) entered disabled state [ 625.944595][T14723] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 626.045807][ T4289] Bluetooth: hci0: ISO packet for unknown connection handle 3152 [ 626.179665][T14682] team0: Port device team_slave_0 added [ 626.254747][T14682] team0: Port device team_slave_1 added [ 626.347759][T14682] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 626.354987][T14682] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 626.383506][T14682] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 626.454315][T14682] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 626.461369][T14682] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 626.594235][T14682] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 626.940917][T14733] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.3684'. [ 626.962374][T14682] device hsr_slave_0 entered promiscuous mode [ 626.989926][T14682] device hsr_slave_1 entered promiscuous mode [ 627.021531][T14682] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 627.031654][T14682] Cannot create hsr debugfs directory [ 627.731175][ T4289] Bluetooth: hci1: command 0x040f tx timeout [ 628.746194][T14771] netlink: 'syz.4.3694': attribute type 2 has an invalid length. [ 628.764638][T14771] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3694'. [ 629.030518][T10321] device wlan1 left promiscuous mode [ 629.080737][T10321] team0: Port device wlan1 removed [ 629.170748][T14789] FAULT_INJECTION: forcing a failure. [ 629.170748][T14789] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 629.266133][T14789] CPU: 0 PID: 14789 Comm: syz.0.3700 Not tainted syzkaller #0 [ 629.273696][T14789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 629.283827][T14789] Call Trace: [ 629.287167][T14789] [ 629.290138][T14789] dump_stack_lvl+0x188/0x24e [ 629.294882][T14789] ? show_regs_print_info+0x12/0x12 [ 629.300142][T14789] ? load_image+0x410/0x410 [ 629.304738][T14789] ? __might_fault+0xa6/0x120 [ 629.309468][T14789] should_fail_ex+0x390/0x4c0 [ 629.314224][T14789] copyin+0x1b/0x120 [ 629.318189][T14789] _copy_from_iter+0x447/0x1130 [ 629.323104][T14789] ? copyout_mc+0x110/0x110 [ 629.327650][T14789] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 629.333866][T14789] ? lockdep_hardirqs_on+0x94/0x140 [ 629.339109][T14789] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 629.345309][T14789] ? page_copy_sane+0x4e/0x390 [ 629.350110][T14789] copy_page_from_iter+0x77/0x100 [ 629.355171][T14789] skb_copy_datagram_from_iter+0x2c5/0x6b0 [ 629.361017][T14789] packet_sendmsg+0x36d2/0x4de0 [ 629.365974][T14789] ? aa_sk_perm+0x950/0x950 [ 629.370516][T14789] ? __might_sleep+0xd0/0xd0 [ 629.375134][T14789] ? irqentry_enter+0x33/0x50 [ 629.379842][T14789] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 629.385862][T14789] ? aa_sk_perm+0x81f/0x950 [ 629.390395][T14789] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 629.396585][T14789] ? aa_af_perm+0x340/0x340 [ 629.401114][T14789] ? packet_getsockopt+0x980/0x980 [ 629.406274][T14789] ? apparmor_socket_sendmsg+0x239/0x330 [ 629.411941][T14789] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 629.417254][T14789] ? security_socket_sendmsg+0x7c/0xa0 [ 629.422745][T14789] ? packet_getsockopt+0x980/0x980 [ 629.427892][T14789] ____sys_sendmsg+0x5ed/0x9a0 [ 629.432699][T14789] ? __sys_sendmsg_sock+0x30/0x30 [ 629.437765][T14789] ? __import_iovec+0x306/0x510 [ 629.442676][T14789] ? import_iovec+0x6f/0xa0 [ 629.447225][T14789] ___sys_sendmsg+0x2a2/0x360 [ 629.451966][T14789] ? __sys_sendmsg+0x2a0/0x2a0 [ 629.456782][T14789] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 629.462567][T14789] __se_sys_sendmsg+0x1c3/0x2b0 [ 629.467459][T14789] ? __x64_sys_sendmsg+0x80/0x80 [ 629.472444][T14789] ? syscall_enter_from_user_mode+0x2a/0x80 [ 629.478371][T14789] do_syscall_64+0x4c/0xa0 [ 629.482844][T14789] ? clear_bhb_loop+0x60/0xb0 [ 629.487566][T14789] ? clear_bhb_loop+0x60/0xb0 [ 629.492283][T14789] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 629.498212][T14789] RIP: 0033:0x7f90b879de99 [ 629.502653][T14789] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 629.522295][T14789] RSP: 002b:00007f90b95d7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 629.530746][T14789] RAX: ffffffffffffffda RBX: 00007f90b8a25fa0 RCX: 00007f90b879de99 [ 629.538756][T14789] RDX: 00000000200400c4 RSI: 0000200000000180 RDI: 0000000000000007 [ 629.546794][T14789] RBP: 00007f90b95d7090 R08: 0000000000000000 R09: 0000000000000000 [ 629.554794][T14789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 629.562807][T14789] R13: 00007f90b8a26038 R14: 00007f90b8a25fa0 R15: 00007ffd0f94f7b8 [ 629.570853][T14789] [ 629.773466][T10321] device vlan0 left promiscuous mode [ 629.785952][T10321] : port 1(vlan0) entered disabled state [ 629.804415][ T4289] Bluetooth: hci1: command 0x0419 tx timeout [ 629.818641][T10321] device hsr_slave_0 left promiscuous mode [ 629.840105][T10321] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 629.860173][T10321] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 629.874464][T10321] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 629.890110][T10321] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 629.904977][T10321] bridge0: port 3(team0) entered disabled state [ 629.913435][T10321] device bridge_slave_1 left promiscuous mode [ 629.921413][T10321] bridge0: port 2(bridge_slave_1) entered disabled state [ 629.934959][T10321] device bridge_slave_0 left promiscuous mode [ 629.956446][T14798] netlink: 'syz.4.3702': attribute type 3 has an invalid length. [ 629.965462][T10321] bridge0: port 1(bridge_slave_0) entered disabled state [ 629.986583][T14798] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3702'. [ 630.045444][T10321] device veth1_vlan left promiscuous mode [ 630.052874][T10321] device veth0_vlan left promiscuous mode [ 630.112158][ T4289] Bluetooth: hci4: ISO packet for unknown connection handle 3152 [ 630.377379][T10321] device geneve1 left promiscuous mode [ 630.386781][T10321] team0 (unregistering): Port device geneve1 removed [ 630.481833][T10321] team0 (unregistering): Port device macvlan0 removed [ 630.782794][T10321] device team_slave_1 left promiscuous mode [ 630.791246][T10321] team0 (unregistering): Port device team_slave_1 removed [ 630.837390][T10321] device team_slave_0 left promiscuous mode [ 630.844677][T10321] team0 (unregistering): Port device team_slave_0 removed [ 630.896292][T10321] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 630.946843][T10321] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 631.303474][T10321] bond0 (unregistering): Released all slaves [ 631.414160][T14805] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3703'. [ 631.497982][T14682] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 631.550663][T14682] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 631.586011][T14682] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 631.644904][T14682] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 631.747686][T14822] netlink: 'syz.2.3707': attribute type 2 has an invalid length. [ 631.771817][T14822] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3707'. [ 632.045142][T14682] 8021q: adding VLAN 0 to HW filter on device bond0 [ 632.109712][T14833] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.3710'. [ 632.132632][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 632.151813][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 632.192769][T14682] 8021q: adding VLAN 0 to HW filter on device team0 [ 632.271535][T10305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 632.282627][T10305] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 632.333581][T10305] bridge0: port 1(bridge_slave_0) entered blocking state [ 632.340842][T10305] bridge0: port 1(bridge_slave_0) entered forwarding state [ 632.364864][T10305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 632.383028][T10305] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 632.392406][T10305] bridge0: port 2(bridge_slave_1) entered blocking state [ 632.399647][T10305] bridge0: port 2(bridge_slave_1) entered forwarding state [ 632.438195][T10305] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 632.493666][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 632.539174][T10337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 632.585118][T10337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 632.630373][T10337] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 632.674821][T10337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 632.705289][T10337] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 632.728104][T10337] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 632.770278][T10337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 632.796691][T10337] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 632.829061][T10337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 632.860184][T10337] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 632.893623][T14682] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 633.800544][T10337] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 633.819510][T10337] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 633.845064][T14682] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 633.898937][T10337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 633.908289][T10337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 633.934157][T10337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 633.945329][T10337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 633.958238][T14682] device veth0_vlan entered promiscuous mode [ 633.975340][T10333] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 633.990742][T10333] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 634.010200][T14682] device veth1_vlan entered promiscuous mode [ 634.044949][T14682] device veth0_macvtap entered promiscuous mode [ 634.062915][T10333] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 634.077003][T10333] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 634.086625][T10333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 634.101262][T10333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 634.115071][T14682] device veth1_macvtap entered promiscuous mode [ 634.131340][T10333] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 634.144509][T10333] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 634.169526][T14682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 634.186318][T14682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 634.201631][T14682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 634.215345][T14682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 634.227408][T14682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 634.238426][T14682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 634.249322][T14682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 634.260486][T14682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 634.272550][T14682] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 634.281859][T10315] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 634.292129][T10315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 634.305591][T14682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 634.316985][T14682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 634.327872][T14682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 634.339840][T14682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 634.351507][T14682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 634.368269][T14682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 634.379991][T14682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 634.395770][T14682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 634.416767][T14682] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 634.430777][T10333] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 634.444371][T10333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 634.465737][T14682] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.476114][T14682] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.484978][T14682] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.493909][T14682] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 636.152830][T10321] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 636.172452][T10321] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 636.206694][T10321] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 636.230398][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 636.245848][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 636.261444][T10315] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 636.285327][T14877] netlink: 'syz.4.3722': attribute type 2 has an invalid length. [ 636.343540][T14877] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3722'. [ 636.578327][T14884] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3663'. [ 636.822067][T14893] netlink: 'syz.2.3728': attribute type 21 has an invalid length. [ 636.870253][T14893] IPv6: NLM_F_CREATE should be specified when creating new route [ 636.880473][T14893] IPv6: Can't replace route, no match found [ 636.975707][T14893] netlink: 'syz.2.3728': attribute type 1 has an invalid length. [ 637.009439][T14894] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3728'. [ 637.019328][T14893] netlink: 14207 bytes leftover after parsing attributes in process `syz.2.3728'. [ 637.080720][T14900] sock: sock_set_timeout: `syz.4.3731' (pid 14900) tries to set negative timeout [ 637.269499][T14905] netlink: 'syz.0.3732': attribute type 3 has an invalid length. [ 637.278946][T14905] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3732'. [ 637.557890][T14911] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3735'. [ 637.567335][T14911] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3735'. [ 637.577618][T14911] netlink: 33 bytes leftover after parsing attributes in process `syz.4.3735'. [ 637.587623][T14911] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3735'. [ 637.597118][T14911] netlink: 33 bytes leftover after parsing attributes in process `syz.4.3735'. [ 637.613536][T14911] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3735'. [ 637.624761][T14911] netlink: 33 bytes leftover after parsing attributes in process `syz.4.3735'. [ 637.650701][T14915] netlink: 'syz.2.3737': attribute type 2 has an invalid length. [ 637.720004][T14915] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3737'. [ 637.746156][T14916] FAULT_INJECTION: forcing a failure. [ 637.746156][T14916] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 637.795235][T14916] CPU: 0 PID: 14916 Comm: syz.3.3736 Not tainted syzkaller #0 [ 637.802806][T14916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 637.812914][T14916] Call Trace: [ 637.816280][T14916] [ 637.819254][T14916] dump_stack_lvl+0x188/0x24e [ 637.824010][T14916] ? show_regs_print_info+0x12/0x12 [ 637.829278][T14916] ? load_image+0x410/0x410 [ 637.833847][T14916] ? __lock_acquire+0x7c40/0x7c40 [ 637.838993][T14916] should_fail_ex+0x390/0x4c0 [ 637.843746][T14916] _copy_from_iter+0x1c0/0x1130 [ 637.848657][T14916] ? lockdep_hardirqs_on+0x94/0x140 [ 637.853913][T14916] ? copyout_mc+0x110/0x110 [ 637.858480][T14916] ? __virt_addr_valid+0x188/0x540 [ 637.863655][T14916] ? __virt_addr_valid+0x188/0x540 [ 637.868829][T14916] ? __virt_addr_valid+0x467/0x540 [ 637.874001][T14916] ? __phys_addr_symbol+0x2b/0x70 [ 637.879086][T14916] ? __check_object_size+0x4f6/0xa70 [ 637.884461][T14916] kernfs_fop_write_iter+0x19a/0x520 [ 637.889801][T14916] vfs_write+0x482/0x9a0 [ 637.894112][T14916] ? file_end_write+0x250/0x250 [ 637.899040][T14916] ? __fget_files+0x3fc/0x460 [ 637.903797][T14916] ? __fdget_pos+0x2ae/0x360 [ 637.908458][T14916] ? ksys_write+0x70/0x260 [ 637.912943][T14916] ksys_write+0x14d/0x260 [ 637.917336][T14916] ? __ia32_sys_read+0x80/0x80 [ 637.922167][T14916] ? lockdep_hardirqs_on+0x94/0x140 [ 637.927424][T14916] do_syscall_64+0x4c/0xa0 [ 637.931928][T14916] ? clear_bhb_loop+0x60/0xb0 [ 637.936671][T14916] ? clear_bhb_loop+0x60/0xb0 [ 637.941418][T14916] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 637.947373][T14916] RIP: 0033:0x7ff27c59de99 [ 637.951836][T14916] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 637.971499][T14916] RSP: 002b:00007ff27d3af028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 637.979975][T14916] RAX: ffffffffffffffda RBX: 00007ff27c825fa0 RCX: 00007ff27c59de99 [ 637.988045][T14916] RDX: 0000000000000004 RSI: 0000200000000080 RDI: 0000000000000008 [ 637.996072][T14916] RBP: 00007ff27d3af090 R08: 0000000000000000 R09: 0000000000000000 [ 638.004090][T14916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 638.012107][T14916] R13: 00007ff27c826038 R14: 00007ff27c825fa0 R15: 00007ffec6cc7648 [ 638.020147][T14916] [ 638.200277][ T4289] Bluetooth: hci4: unexpected event 0x05 length: 15 > 4 [ 638.727936][T14943] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3747'. [ 642.044182][ T4289] Bluetooth: hci4: command 0x0406 tx timeout [ 643.456309][T14949] FAULT_INJECTION: forcing a failure. [ 643.456309][T14949] name failslab, interval 1, probability 0, space 0, times 0 [ 643.482316][T14949] CPU: 0 PID: 14949 Comm: syz.0.3749 Not tainted syzkaller #0 [ 643.489846][T14949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 643.499949][T14949] Call Trace: [ 643.503316][T14949] [ 643.506311][T14949] dump_stack_lvl+0x188/0x24e [ 643.511066][T14949] ? show_regs_print_info+0x12/0x12 [ 643.516311][T14949] ? load_image+0x410/0x410 [ 643.520876][T14949] ? __might_sleep+0xd0/0xd0 [ 643.525512][T14949] ? __lock_acquire+0x7c40/0x7c40 [ 643.530605][T14949] should_fail_ex+0x390/0x4c0 [ 643.535353][T14949] should_failslab+0x5/0x20 [ 643.539896][T14949] slab_pre_alloc_hook+0x59/0x300 [ 643.544971][T14949] ? mq_init+0x14b/0x650 [ 643.549270][T14949] __kmem_cache_alloc_node+0x4f/0x270 [ 643.554700][T14949] ? mq_init+0x14b/0x650 [ 643.558996][T14949] __kmalloc+0xa3/0x240 [ 643.563206][T14949] ? qdisc_create_dflt+0x5f/0x490 [ 643.568294][T14949] mq_init+0x14b/0x650 [ 643.572418][T14949] ? sock_ioctl+0x48a/0x700 [ 643.576970][T14949] ? __se_sys_ioctl+0xfa/0x170 [ 643.581790][T14949] ? do_syscall_64+0x4c/0xa0 [ 643.586449][T14949] ? qdisc_alloc+0x8f/0xa40 [ 643.591010][T14949] ? trace_net_dev_xmit_timeout+0x240/0x240 [ 643.596957][T14949] ? qdisc_alloc+0x776/0xa40 [ 643.601627][T14949] qdisc_create_dflt+0x11a/0x490 [ 643.606611][T14949] ? dev_activate+0x1b7/0x1150 [ 643.611439][T14949] dev_activate+0x1dc/0x1150 [ 643.616111][T14949] __dev_open+0x343/0x430 [ 643.620503][T14949] ? dev_open+0x190/0x190 [ 643.624900][T14949] __dev_change_flags+0x1e4/0x6a0 [ 643.629983][T14949] ? __rwlock_init+0x140/0x140 [ 643.634819][T14949] ? dev_get_flags+0x1c0/0x1c0 [ 643.639634][T14949] ? do_raw_spin_unlock+0x11d/0x230 [ 643.644909][T14949] dev_change_flags+0x78/0x1a0 [ 643.649743][T14949] dev_ifsioc+0x130/0xd50 [ 643.654152][T14949] ? dev_ioctl+0xe80/0xe80 [ 643.658630][T14949] ? apparmor_capable+0x12c/0x190 [ 643.663705][T14949] ? full_name_hash+0x8e/0xe0 [ 643.668436][T14949] ? dev_load+0x1d/0x1e0 [ 643.672720][T14949] ? dev_load+0x1d/0x1e0 [ 643.677023][T14949] dev_ioctl+0x55e/0xe80 [ 643.681330][T14949] sock_do_ioctl+0x245/0x320 [ 643.685971][T14949] ? sock_show_fdinfo+0xb0/0xb0 [ 643.690907][T14949] sock_ioctl+0x48a/0x700 [ 643.695286][T14949] ? sock_poll+0x420/0x420 [ 643.699777][T14949] ? bpf_lsm_file_ioctl+0x5/0x10 [ 643.704779][T14949] ? security_file_ioctl+0x7c/0xa0 [ 643.709936][T14949] ? sock_poll+0x420/0x420 [ 643.714396][T14949] __se_sys_ioctl+0xfa/0x170 [ 643.719056][T14949] do_syscall_64+0x4c/0xa0 [ 643.723516][T14949] ? clear_bhb_loop+0x60/0xb0 [ 643.728239][T14949] ? clear_bhb_loop+0x60/0xb0 [ 643.732968][T14949] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 643.738907][T14949] RIP: 0033:0x7f90b879de99 [ 643.743378][T14949] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 643.763025][T14949] RSP: 002b:00007f90b95d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 643.771486][T14949] RAX: ffffffffffffffda RBX: 00007f90b8a25fa0 RCX: 00007f90b879de99 [ 643.779497][T14949] RDX: 0000200000002280 RSI: 0000000000008914 RDI: 0000000000000006 [ 643.787510][T14949] RBP: 00007f90b95d7090 R08: 0000000000000000 R09: 0000000000000000 [ 643.795517][T14949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 643.803528][T14949] R13: 00007f90b8a26038 R14: 00007f90b8a25fa0 R15: 00007ffd0f94f7b8 [ 643.811588][T14949] [ 643.828248][T14949] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 643.852942][T14952] netlink: 'syz.1.3751': attribute type 2 has an invalid length. [ 643.862213][T14952] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3751'. [ 644.289939][ T49] Bluetooth: hci5: unexpected event 0x05 length: 15 > 4 [ 646.785995][T14959] netlink: 'syz.3.3753': attribute type 25 has an invalid length. [ 646.801577][T14959] netlink: 'syz.3.3753': attribute type 9 has an invalid length. [ 646.810756][T14959] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3753'. [ 646.820958][T14965] device bond_slave_1 entered promiscuous mode [ 646.831253][T14966] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3755'. [ 646.898757][T14978] device syzkaller0 entered promiscuous mode [ 646.923083][T14985] IPv6: : Disabled Multicast RS [ 647.450773][T14999] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.3762'. [ 647.515474][ T49] Bluetooth: hci0: unexpected event 0x04 length: 15 > 10 [ 647.563598][T15000] netlink: 16399 bytes leftover after parsing attributes in process `syz.1.3764'. [ 647.781498][T15010] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3766'. [ 647.888996][ T49] Bluetooth: hci1: unexpected event 0x05 length: 15 > 4 [ 648.728874][T15026] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3772'. [ 649.328885][T15037] netlink: 'syz.2.3775': attribute type 2 has an invalid length. [ 649.349122][T15037] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3775'. [ 649.586994][ T49] Bluetooth: hci0: command 0x0409 tx timeout [ 650.148836][T15053] netlink: 16410 bytes leftover after parsing attributes in process `syz.4.3778'. [ 650.385376][ T4289] Bluetooth: hci2: unexpected event 0x04 length: 15 > 10 [ 650.598696][T15062] netlink: 16399 bytes leftover after parsing attributes in process `syz.2.3781'. [ 650.752011][T15070] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3784'. [ 650.910474][ T4289] Bluetooth: hci4: unexpected event 0x05 length: 15 > 4 [ 651.284437][T15079] FAULT_INJECTION: forcing a failure. [ 651.284437][T15079] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 651.413457][T15079] CPU: 1 PID: 15079 Comm: syz.2.3787 Not tainted syzkaller #0 [ 651.421043][T15079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 651.431189][T15079] Call Trace: [ 651.434536][T15079] [ 651.437530][T15079] dump_stack_lvl+0x188/0x24e [ 651.442320][T15079] ? show_regs_print_info+0x12/0x12 [ 651.447614][T15079] ? load_image+0x410/0x410 [ 651.452259][T15079] ? __lock_acquire+0x7c40/0x7c40 [ 651.457377][T15079] ? unix_ioctl+0x255/0x6a0 [ 651.462074][T15079] should_fail_ex+0x390/0x4c0 [ 651.466863][T15079] _copy_from_user+0x2c/0x170 [ 651.471635][T15079] sock_do_ioctl+0x18c/0x320 [ 651.476311][T15079] ? sock_show_fdinfo+0xb0/0xb0 [ 651.481299][T15079] sock_ioctl+0x48a/0x700 [ 651.485716][T15079] ? sock_poll+0x420/0x420 [ 651.490259][T15079] ? bpf_lsm_file_ioctl+0x5/0x10 [ 651.495285][T15079] ? security_file_ioctl+0x7c/0xa0 [ 651.500482][T15079] ? sock_poll+0x420/0x420 [ 651.504976][T15079] __se_sys_ioctl+0xfa/0x170 [ 651.509694][T15079] do_syscall_64+0x4c/0xa0 [ 651.514217][T15079] ? clear_bhb_loop+0x60/0xb0 [ 651.518952][T15079] ? clear_bhb_loop+0x60/0xb0 [ 651.523686][T15079] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 651.529627][T15079] RIP: 0033:0x7f75af79de99 [ 651.534102][T15079] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 651.553759][T15079] RSP: 002b:00007f75b05fc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 651.562252][T15079] RAX: ffffffffffffffda RBX: 00007f75afa26090 RCX: 00007f75af79de99 [ 651.570285][T15079] RDX: 0000200000000080 RSI: 0000000000008914 RDI: 0000000000000008 [ 651.578303][T15079] RBP: 00007f75b05fc090 R08: 0000000000000000 R09: 0000000000000000 [ 651.586320][T15079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 651.594355][T15079] R13: 00007f75afa26128 R14: 00007f75afa26090 R15: 00007ffe27c198f8 [ 651.602421][T15079] [ 651.983538][T15082] netlink: 'syz.0.3788': attribute type 2 has an invalid length. [ 652.043699][T15082] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3788'. [ 652.557914][ T4289] Bluetooth: hci2: command 0x0409 tx timeout [ 652.708015][T15087] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3789'. [ 653.665356][T15090] FAULT_INJECTION: forcing a failure. [ 653.665356][T15090] name failslab, interval 1, probability 0, space 0, times 0 [ 653.727431][T15090] CPU: 1 PID: 15090 Comm: syz.4.3790 Not tainted syzkaller #0 [ 653.735031][T15090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 653.745171][T15090] Call Trace: [ 653.748519][T15090] [ 653.751521][T15090] dump_stack_lvl+0x188/0x24e [ 653.756302][T15090] ? show_regs_print_info+0x12/0x12 [ 653.761593][T15090] ? load_image+0x410/0x410 [ 653.766199][T15090] ? __might_sleep+0xd0/0xd0 [ 653.770873][T15090] ? __lock_acquire+0x7c40/0x7c40 [ 653.776016][T15090] should_fail_ex+0x390/0x4c0 [ 653.780796][T15090] should_failslab+0x5/0x20 [ 653.785383][T15090] slab_pre_alloc_hook+0x59/0x300 [ 653.790487][T15090] ? trace_contention_end+0x5f/0x170 [ 653.795868][T15090] ? dev_exception_add+0x93/0x490 [ 653.801071][T15090] __kmem_cache_alloc_node+0x4f/0x270 [ 653.806540][T15090] ? dev_exception_add+0x93/0x490 [ 653.811674][T15090] __kmalloc_node_track_caller+0xa0/0x240 [ 653.817502][T15090] kmemdup+0x27/0x60 [ 653.821569][T15090] dev_exception_add+0x93/0x490 [ 653.826542][T15090] ? kstrtoull+0x12c/0x1c0 [ 653.831135][T15090] devcgroup_access_write+0x1064/0x1950 [ 653.836775][T15090] ? dev_exceptions_copy+0x3a0/0x3a0 [ 653.842348][T15090] ? dev_exceptions_copy+0x3a0/0x3a0 [ 653.847744][T15090] cgroup_file_write+0x2c9/0x6a0 [ 653.852889][T15090] ? kernfs_fop_write_iter+0x1d8/0x520 [ 653.858454][T15090] ? cgroup_seqfile_stop+0xd0/0xd0 [ 653.863647][T15090] ? __virt_addr_valid+0x188/0x540 [ 653.868853][T15090] ? __virt_addr_valid+0x188/0x540 [ 653.874120][T15090] ? cgroup_seqfile_stop+0xd0/0xd0 [ 653.879313][T15090] kernfs_fop_write_iter+0x3a0/0x520 [ 653.884700][T15090] vfs_write+0x482/0x9a0 [ 653.889118][T15090] ? file_end_write+0x250/0x250 [ 653.894077][T15090] ? __fget_files+0x3fc/0x460 [ 653.898885][T15090] ? __fdget_pos+0x2ae/0x360 [ 653.903570][T15090] ? ksys_write+0x70/0x260 [ 653.908084][T15090] ksys_write+0x14d/0x260 [ 653.912512][T15090] ? __ia32_sys_read+0x80/0x80 [ 653.917380][T15090] ? lockdep_hardirqs_on+0x94/0x140 [ 653.922671][T15090] do_syscall_64+0x4c/0xa0 [ 653.927167][T15090] ? clear_bhb_loop+0x60/0xb0 [ 653.931923][T15090] ? clear_bhb_loop+0x60/0xb0 [ 653.936694][T15090] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 653.942665][T15090] RIP: 0033:0x7f040d39de99 [ 653.947162][T15090] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 653.966845][T15090] RSP: 002b:00007f040e323028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 653.975350][T15090] RAX: ffffffffffffffda RBX: 00007f040d625fa0 RCX: 00007f040d39de99 [ 653.983410][T15090] RDX: 000000000000000a RSI: 0000200000000140 RDI: 0000000000000004 [ 653.991457][T15090] RBP: 00007f040e323090 R08: 0000000000000000 R09: 0000000000000000 [ 653.999504][T15090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 654.007549][T15090] R13: 00007f040d626038 R14: 00007f040d625fa0 R15: 00007ffdf1583f78 [ 654.015663][T15090] [ 655.217922][T15101] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.3793'. [ 655.625333][ T49] Bluetooth: hci5: unexpected event 0x04 length: 15 > 10 [ 657.423183][ T49] Bluetooth: hci5: unexpected event 0x05 length: 15 > 4 [ 657.646084][ T49] Bluetooth: hci5: command 0x0409 tx timeout [ 659.349501][T15122] netlink: 'syz.0.3799': attribute type 13 has an invalid length. [ 659.382921][T15122] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3799'. [ 659.454354][T15122] syz_tun: refused to change device tx_queue_len [ 659.492858][T15122] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 659.869200][T15128] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3801'. [ 661.233387][T15145] FAULT_INJECTION: forcing a failure. [ 661.233387][T15145] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 661.302354][T15145] CPU: 1 PID: 15145 Comm: syz.3.3807 Not tainted syzkaller #0 [ 661.309909][T15145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 661.320029][T15145] Call Trace: [ 661.323359][T15145] [ 661.326337][T15145] dump_stack_lvl+0x188/0x24e [ 661.331081][T15145] ? show_regs_print_info+0x12/0x12 [ 661.336343][T15145] ? load_image+0x410/0x410 [ 661.340912][T15145] ? __lock_acquire+0x7c40/0x7c40 [ 661.346020][T15145] should_fail_ex+0x390/0x4c0 [ 661.350778][T15145] _copy_from_user+0x2c/0x170 [ 661.355516][T15145] __copy_msghdr+0x384/0x560 [ 661.360178][T15145] ___sys_sendmsg+0x210/0x360 [ 661.364918][T15145] ? __sys_sendmsg+0x2a0/0x2a0 [ 661.369801][T15145] __se_sys_sendmsg+0x1c3/0x2b0 [ 661.374738][T15145] ? __x64_sys_sendmsg+0x80/0x80 [ 661.379755][T15145] ? lockdep_hardirqs_on+0x94/0x140 [ 661.385017][T15145] do_syscall_64+0x4c/0xa0 [ 661.389494][T15145] ? clear_bhb_loop+0x60/0xb0 [ 661.394229][T15145] ? clear_bhb_loop+0x60/0xb0 [ 661.398977][T15145] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 661.404934][T15145] RIP: 0033:0x7ff27c59de99 [ 661.409407][T15145] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 661.429078][T15145] RSP: 002b:00007ff27d3af028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 661.437546][T15145] RAX: ffffffffffffffda RBX: 00007ff27c825fa0 RCX: 00007ff27c59de99 [ 661.445561][T15145] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000005 [ 661.453567][T15145] RBP: 00007ff27d3af090 R08: 0000000000000000 R09: 0000000000000000 [ 661.461570][T15145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 661.469572][T15145] R13: 00007ff27c826038 R14: 00007ff27c825fa0 R15: 00007ffec6cc7648 [ 661.477590][T15145] [ 661.556250][ T4289] Bluetooth: hci2: unexpected event 0x04 length: 15 > 10 [ 661.558691][ T49] Bluetooth: hci5: unexpected event 0x05 length: 15 > 4 [ 661.632183][T15155] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.3811'. [ 661.811805][T15161] FAULT_INJECTION: forcing a failure. [ 661.811805][T15161] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 661.858841][T15161] CPU: 0 PID: 15161 Comm: syz.1.3814 Not tainted syzkaller #0 [ 661.866409][T15161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 661.876544][T15161] Call Trace: [ 661.879876][T15161] [ 661.882857][T15161] dump_stack_lvl+0x188/0x24e [ 661.887612][T15161] ? show_regs_print_info+0x12/0x12 [ 661.892876][T15161] ? load_image+0x410/0x410 [ 661.897463][T15161] ? __lock_acquire+0x7c40/0x7c40 [ 661.902573][T15161] ? snprintf+0xe5/0x140 [ 661.906895][T15161] should_fail_ex+0x390/0x4c0 [ 661.911657][T15161] _copy_to_user+0x2c/0x130 [ 661.916230][T15161] simple_read_from_buffer+0xe3/0x150 [ 661.921688][T15161] proc_fail_nth_read+0x1a6/0x220 [ 661.926788][T15161] ? proc_fault_inject_write+0x310/0x310 [ 661.932524][T15161] ? fsnotify_perm+0x248/0x550 [ 661.937358][T15161] ? proc_fault_inject_write+0x310/0x310 [ 661.943063][T15161] vfs_read+0x2db/0x960 [ 661.947308][T15161] ? kernel_read+0x1e0/0x1e0 [ 661.952026][T15161] ? __fget_files+0x28/0x460 [ 661.956697][T15161] ? __fget_files+0x3fc/0x460 [ 661.961474][T15161] ? __fdget_pos+0x2ae/0x360 [ 661.966141][T15161] ? ksys_read+0x70/0x260 [ 661.970579][T15161] ksys_read+0x14d/0x260 [ 661.974907][T15161] ? vfs_write+0x9a0/0x9a0 [ 661.979419][T15161] ? lockdep_hardirqs_on+0x94/0x140 [ 661.984696][T15161] do_syscall_64+0x4c/0xa0 [ 661.989179][T15161] ? clear_bhb_loop+0x60/0xb0 [ 661.993941][T15161] ? clear_bhb_loop+0x60/0xb0 [ 661.998694][T15161] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 662.004680][T15161] RIP: 0033:0x7f9ff435e6ce [ 662.009161][T15161] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 662.028848][T15161] RSP: 002b:00007f9ff5313fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 662.037351][T15161] RAX: ffffffffffffffda RBX: 00007f9ff53146c0 RCX: 00007f9ff435e6ce [ 662.045394][T15161] RDX: 000000000000000f RSI: 00007f9ff53140a0 RDI: 0000000000000005 [ 662.053447][T15161] RBP: 00007f9ff5314090 R08: 0000000000000000 R09: 0000000000000000 [ 662.061485][T15161] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 662.069536][T15161] R13: 00007f9ff4626038 R14: 00007f9ff4625fa0 R15: 00007fffddcf4908 [ 662.077616][T15161] [ 662.274946][T15164] delete_channel: no stack [ 663.566577][ T49] Bluetooth: hci2: command 0x0409 tx timeout [ 664.092726][T15196] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3822'. [ 664.277684][ T4289] Bluetooth: hci4: unexpected event 0x04 length: 15 > 10 [ 664.324911][T15207] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.3827'. [ 664.640491][ T4289] Bluetooth: hci4: unexpected event 0x05 length: 15 > 4 [ 665.135763][T15216] delete_channel: no stack [ 665.328532][T15222] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3832'. [ 665.562212][T15235] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3837'. [ 666.334290][ T4289] Bluetooth: hci4: command 0x0409 tx timeout [ 666.659606][T15265] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3846'. [ 666.771669][T15271] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3850'. [ 667.096818][ T4289] Bluetooth: hci2: unexpected event 0x05 length: 15 > 4 [ 667.743604][T15305] netlink: 154020 bytes leftover after parsing attributes in process `syz.3.3861'. [ 667.797928][T15305] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 668.049930][T15313] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3863'. [ 668.139171][ T4289] Bluetooth: hci0: unexpected event 0x05 length: 15 > 4 [ 668.364923][T15321] syzkaller1: tun_chr_ioctl cmd 1074025676 [ 668.391265][T15321] syzkaller1: owner set to 0 [ 668.428884][T15321] device syzkaller0 entered promiscuous mode [ 668.526444][T15329] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 65487 [ 668.917651][T15341] netlink: 'syz.4.3872': attribute type 3 has an invalid length. [ 668.941265][T15341] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3872'. [ 669.209677][T15334] : port 1(team0) entered blocking state [ 669.220896][T15334] : port 1(team0) entered disabled state [ 669.229848][T15334] device team0 entered promiscuous mode [ 669.239942][T15334] device team_slave_0 entered promiscuous mode [ 669.251809][T15334] device team_slave_1 entered promiscuous mode [ 669.265721][T15332] .6\bY4: renamed from lo [ 669.345577][T15339] netlink: 'syz.4.3872': attribute type 10 has an invalid length. [ 669.383168][T15339] bridge0: port 2(bridge_slave_1) entered disabled state [ 669.433022][T15339] device bridge_slave_1 left promiscuous mode [ 669.445717][T15339] bridge0: port 2(bridge_slave_1) entered disabled state [ 669.481070][T15339] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 669.626605][T15349] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3874'. [ 669.709210][T15345] netlink: 'syz.0.3873': attribute type 21 has an invalid length. [ 669.737678][T15345] netlink: 'syz.0.3873': attribute type 6 has an invalid length. [ 669.766830][T15345] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3873'. [ 669.818311][T15354] netlink: 'syz.3.3875': attribute type 1 has an invalid length. [ 669.847374][T15354] netlink: 112865 bytes leftover after parsing attributes in process `syz.3.3875'. [ 670.095295][T15358] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3877'. [ 670.142045][T15360] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.3878'. [ 670.914766][T15384] netlink: 'syz.1.3887': attribute type 10 has an invalid length. [ 671.058579][T15389] netlink: 'syz.1.3887': attribute type 3 has an invalid length. [ 671.120171][T15384] bridge0: port 2(bridge_slave_1) entered disabled state [ 671.363980][T15384] device bridge_slave_1 left promiscuous mode [ 671.406901][T15384] bridge0: port 2(bridge_slave_1) entered disabled state [ 671.557421][T15384] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 671.991452][T15405] __nla_validate_parse: 5 callbacks suppressed [ 671.991497][T15405] netlink: 763 bytes leftover after parsing attributes in process `syz.3.3892'. [ 672.056737][T15406] netlink: 'syz.3.3892': attribute type 10 has an invalid length. [ 672.128986][T15406] team0: Port device wlan1 added [ 672.139127][T15408] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3893'. [ 672.512246][T15424] : port 1(team0) entered blocking state [ 672.534274][T15424] : port 1(team0) entered disabled state [ 672.541950][T15424] device team0 entered promiscuous mode [ 672.572970][T15424] device team_slave_0 entered promiscuous mode [ 672.589504][T15424] device team_slave_1 entered promiscuous mode [ 672.605289][T15424] device wlan1 entered promiscuous mode [ 672.701713][T15435] FAULT_INJECTION: forcing a failure. [ 672.701713][T15435] name failslab, interval 1, probability 0, space 0, times 0 [ 672.721921][T15436] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3900'. [ 672.734550][T15435] CPU: 0 PID: 15435 Comm: syz.1.3903 Not tainted syzkaller #0 [ 672.742089][T15435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 672.752207][T15435] Call Trace: [ 672.755532][T15435] [ 672.758506][T15435] dump_stack_lvl+0x188/0x24e [ 672.763258][T15435] ? show_regs_print_info+0x12/0x12 [ 672.768523][T15435] ? load_image+0x410/0x410 [ 672.773080][T15435] ? __might_sleep+0xd0/0xd0 [ 672.777720][T15435] ? __lock_acquire+0x7c40/0x7c40 [ 672.782818][T15435] should_fail_ex+0x390/0x4c0 [ 672.787569][T15435] should_failslab+0x5/0x20 [ 672.792118][T15435] slab_pre_alloc_hook+0x59/0x300 [ 672.797227][T15435] kmem_cache_alloc_node+0x5a/0x310 [ 672.802489][T15435] ? __alloc_skb+0xf9/0x7d0 [ 672.807056][T15435] __alloc_skb+0xf9/0x7d0 [ 672.811455][T15435] tcp_stream_alloc_skb+0x3e/0x330 [ 672.816618][T15435] tcp_connect+0x15e9/0x4a50 [ 672.821257][T15435] ? tcp_fastopen_defer_connect+0xde/0x360 [ 672.827122][T15435] ? secure_ipv6_port_ephemeral+0x200/0x200 [ 672.833099][T15435] tcp_v4_connect+0xf83/0x18a0 [ 672.837924][T15435] ? tcp_twsk_unique+0x970/0x970 [ 672.842916][T15435] __inet_stream_connect+0x242/0xe10 [ 672.848273][T15435] ? inet_dgram_connect+0x340/0x340 [ 672.853544][T15435] tcp_sendmsg_fastopen+0x38f/0x600 [ 672.858801][T15435] tcp_sendmsg_locked+0x356b/0x39e0 [ 672.864049][T15435] ? __might_sleep+0xd0/0xd0 [ 672.868686][T15435] ? is_bpf_text_address+0x22/0x2a0 [ 672.873939][T15435] ? __might_sleep+0xd0/0xd0 [ 672.878575][T15435] ? mark_lock+0x94/0x320 [ 672.882967][T15435] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 672.889010][T15435] ? lock_chain_count+0x20/0x20 [ 672.893932][T15435] ? tcp_sendmsg+0x1d/0x40 [ 672.898403][T15435] ? tcp_set_state+0x520/0x520 [ 672.903224][T15435] tcp_sendmsg+0x2b/0x40 [ 672.907515][T15435] ? inet_send_prepare+0x250/0x250 [ 672.912698][T15435] ____sys_sendmsg+0x5ed/0x9a0 [ 672.917520][T15435] ? __lock_acquire+0x7c40/0x7c40 [ 672.922604][T15435] ? __sys_sendmsg_sock+0x30/0x30 [ 672.927684][T15435] ? __import_iovec+0x306/0x510 [ 672.932598][T15435] ? import_iovec+0x6f/0xa0 [ 672.937179][T15435] ___sys_sendmsg+0x2a2/0x360 [ 672.941932][T15435] ? __sys_sendmsg+0x2a0/0x2a0 [ 672.946762][T15435] ? __lock_acquire+0x7c40/0x7c40 [ 672.951870][T15435] __se_sys_sendmsg+0x1c3/0x2b0 [ 672.956779][T15435] ? __x64_sys_sendmsg+0x80/0x80 [ 672.961791][T15435] ? lockdep_hardirqs_on+0x94/0x140 [ 672.967046][T15435] do_syscall_64+0x4c/0xa0 [ 672.971523][T15435] ? clear_bhb_loop+0x60/0xb0 [ 672.976254][T15435] ? clear_bhb_loop+0x60/0xb0 [ 672.980973][T15435] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 672.986933][T15435] RIP: 0033:0x7f9ff439de99 [ 672.991386][T15435] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 673.011041][T15435] RSP: 002b:00007f9ff5314028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 673.019512][T15435] RAX: ffffffffffffffda RBX: 00007f9ff4625fa0 RCX: 00007f9ff439de99 [ 673.027538][T15435] RDX: 00000000200440e4 RSI: 00002000000004c0 RDI: 0000000000000004 [ 673.035584][T15435] RBP: 00007f9ff5314090 R08: 0000000000000000 R09: 0000000000000000 [ 673.043603][T15435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 673.051651][T15435] R13: 00007f9ff4626038 R14: 00007f9ff4625fa0 R15: 00007fffddcf4908 [ 673.059686][T15435] [ 673.074829][T15438] netlink: 'syz.2.3902': attribute type 10 has an invalid length. [ 673.125825][T15438] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3902'. [ 673.153671][T15438] netlink: 'syz.2.3902': attribute type 39 has an invalid length. [ 673.584729][T15452] bridge0: port 2(bridge_slave_1) entered disabled state [ 673.705328][T15452] device bridge_slave_1 left promiscuous mode [ 673.757007][T15452] bridge0: port 2(bridge_slave_1) entered disabled state [ 673.788550][T15457] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3907'. [ 673.873089][T15452] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 673.938351][T15458] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3908'. [ 674.186504][T15474] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.3913'. [ 674.451627][T15478] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3915'. [ 674.585530][T15484] validate_nla: 2 callbacks suppressed [ 674.585572][T15484] netlink: 'syz.0.3918': attribute type 10 has an invalid length. [ 674.621286][T15484] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3918'. [ 674.654421][T15489] netlink: 'syz.2.3920': attribute type 4 has an invalid length. [ 674.673153][T15489] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3920'. [ 674.682592][T15484] netlink: 'syz.0.3918': attribute type 39 has an invalid length. [ 675.466561][T15509] FAULT_INJECTION: forcing a failure. [ 675.466561][T15509] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 675.504792][T15510] FAULT_INJECTION: forcing a failure. [ 675.504792][T15510] name failslab, interval 1, probability 0, space 0, times 0 [ 675.551638][T15509] CPU: 0 PID: 15509 Comm: syz.1.3926 Not tainted syzkaller #0 [ 675.559199][T15509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 675.569303][T15509] Call Trace: [ 675.572617][T15509] [ 675.575601][T15509] dump_stack_lvl+0x188/0x24e [ 675.580329][T15509] ? show_regs_print_info+0x12/0x12 [ 675.585577][T15509] ? load_image+0x410/0x410 [ 675.590114][T15509] ? __lock_acquire+0x7c40/0x7c40 [ 675.595194][T15509] should_fail_ex+0x390/0x4c0 [ 675.599902][T15509] _copy_to_user+0x2c/0x130 [ 675.604463][T15509] bpf_test_finish+0x266/0x600 [ 675.609259][T15509] ? convert_skb_to___skb+0x420/0x420 [ 675.614658][T15509] ? bpf_test_init+0x119/0x140 [ 675.619448][T15509] bpf_prog_test_run_xdp+0x827/0xf80 [ 675.624762][T15509] ? __lock_acquire+0x7c40/0x7c40 [ 675.629829][T15509] ? dev_put+0x80/0x80 [ 675.633936][T15509] ? dev_put+0x80/0x80 [ 675.638037][T15509] bpf_prog_test_run+0x31c/0x390 [ 675.643035][T15509] __sys_bpf+0x62b/0x780 [ 675.647315][T15509] ? bpf_link_show_fdinfo+0x380/0x380 [ 675.652757][T15509] ? lock_chain_count+0x20/0x20 [ 675.657645][T15509] __x64_sys_bpf+0x78/0x90 [ 675.662114][T15509] do_syscall_64+0x4c/0xa0 [ 675.666558][T15509] ? clear_bhb_loop+0x60/0xb0 [ 675.671264][T15509] ? clear_bhb_loop+0x60/0xb0 [ 675.675974][T15509] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 675.681891][T15509] RIP: 0033:0x7f9ff439de99 [ 675.686429][T15509] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 675.706062][T15509] RSP: 002b:00007f9ff5314028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 675.714499][T15509] RAX: ffffffffffffffda RBX: 00007f9ff4625fa0 RCX: 00007f9ff439de99 [ 675.722517][T15509] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 000000000000000a [ 675.730536][T15509] RBP: 00007f9ff5314090 R08: 0000000000000000 R09: 0000000000000000 [ 675.738531][T15509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 675.746523][T15509] R13: 00007f9ff4626038 R14: 00007f9ff4625fa0 R15: 00007fffddcf4908 [ 675.754529][T15509] [ 675.770730][T15510] CPU: 0 PID: 15510 Comm: syz.3.3925 Not tainted syzkaller #0 [ 675.778372][T15510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 675.788475][T15510] Call Trace: [ 675.791792][T15510] [ 675.794769][T15510] dump_stack_lvl+0x188/0x24e [ 675.799510][T15510] ? show_regs_print_info+0x12/0x12 [ 675.804763][T15510] ? load_image+0x410/0x410 [ 675.809307][T15510] ? __local_bh_enable_ip+0x136/0x1c0 [ 675.814709][T15510] ? lockdep_hardirqs_on+0x94/0x140 [ 675.819937][T15510] ? __local_bh_enable_ip+0x136/0x1c0 [ 675.825341][T15510] should_fail_ex+0x390/0x4c0 [ 675.830061][T15510] should_failslab+0x5/0x20 [ 675.834592][T15510] slab_pre_alloc_hook+0x59/0x300 [ 675.839640][T15510] ? sctp_get_port_local+0xd22/0x1500 [ 675.845053][T15510] ? sctp_add_bind_addr+0x89/0x350 [ 675.850198][T15510] __kmem_cache_alloc_node+0x4f/0x270 [ 675.855604][T15510] ? sctp_add_bind_addr+0x89/0x350 [ 675.860744][T15510] kmalloc_trace+0x26/0xe0 [ 675.865193][T15510] sctp_add_bind_addr+0x89/0x350 [ 675.870158][T15510] ? sctp_auto_asconf_init+0x14d/0x1d0 [ 675.875661][T15510] sctp_do_bind+0x57e/0x8f0 [ 675.880205][T15510] sctp_connect_new_asoc+0x266/0x6a0 [ 675.885530][T15510] ? __sctp_connect+0xd80/0xd80 [ 675.890406][T15510] ? __local_bh_enable_ip+0x136/0x1c0 [ 675.895804][T15510] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 675.901392][T15510] ? security_sctp_bind_connect+0x85/0xb0 [ 675.907145][T15510] sctp_sendmsg+0x1686/0x2940 [ 675.911872][T15510] ? sctp_getsockopt+0x8a0/0x8a0 [ 675.916846][T15510] ? __might_fault+0xa6/0x120 [ 675.921553][T15510] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 675.928002][T15510] ? aa_sock_msg_perm+0x94/0x150 [ 675.932978][T15510] ? inet_sendmsg+0xca/0x2a0 [ 675.937593][T15510] ? inet_send_prepare+0x250/0x250 [ 675.942737][T15510] ____sys_sendmsg+0x5ed/0x9a0 [ 675.947548][T15510] ? __sys_sendmsg_sock+0x30/0x30 [ 675.952625][T15510] ? __import_iovec+0x306/0x510 [ 675.957515][T15510] ? import_iovec+0x6f/0xa0 [ 675.962074][T15510] ___sys_sendmsg+0x2a2/0x360 [ 675.966787][T15510] ? __sys_sendmsg+0x2a0/0x2a0 [ 675.971608][T15510] ? __lock_acquire+0x7c40/0x7c40 [ 675.976684][T15510] __se_sys_sendmsg+0x1c3/0x2b0 [ 675.981572][T15510] ? __x64_sys_sendmsg+0x80/0x80 [ 675.986557][T15510] ? lockdep_hardirqs_on+0x94/0x140 [ 675.991786][T15510] do_syscall_64+0x4c/0xa0 [ 675.996237][T15510] ? clear_bhb_loop+0x60/0xb0 [ 676.000949][T15510] ? clear_bhb_loop+0x60/0xb0 [ 676.005659][T15510] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 676.011582][T15510] RIP: 0033:0x7ff27c59de99 [ 676.016018][T15510] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 676.035646][T15510] RSP: 002b:00007ff27d38e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 676.044083][T15510] RAX: ffffffffffffffda RBX: 00007ff27c826090 RCX: 00007ff27c59de99 [ 676.052078][T15510] RDX: 00000000000003e8 RSI: 00002000000004c0 RDI: 000000000000000a [ 676.060073][T15510] RBP: 00007ff27d38e090 R08: 0000000000000000 R09: 0000000000000000 [ 676.068070][T15510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 676.076071][T15510] R13: 00007ff27c826128 R14: 00007ff27c826090 R15: 00007ffec6cc7648 [ 676.084089][T15510] [ 676.185563][T15515] FAULT_INJECTION: forcing a failure. [ 676.185563][T15515] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 676.229287][T15515] CPU: 0 PID: 15515 Comm: syz.4.3929 Not tainted syzkaller #0 [ 676.236839][T15515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 676.246949][T15515] Call Trace: [ 676.250266][T15515] [ 676.253249][T15515] dump_stack_lvl+0x188/0x24e [ 676.257996][T15515] ? show_regs_print_info+0x12/0x12 [ 676.263253][T15515] ? load_image+0x410/0x410 [ 676.267817][T15515] ? __lock_acquire+0x7c40/0x7c40 [ 676.272924][T15515] should_fail_ex+0x390/0x4c0 [ 676.277663][T15515] _copy_from_user+0x2c/0x170 [ 676.282398][T15515] __sys_bpf+0x2ea/0x780 [ 676.286700][T15515] ? bpf_link_show_fdinfo+0x380/0x380 [ 676.292136][T15515] ? lock_chain_count+0x20/0x20 [ 676.297053][T15515] __x64_sys_bpf+0x78/0x90 [ 676.301530][T15515] do_syscall_64+0x4c/0xa0 [ 676.306021][T15515] ? clear_bhb_loop+0x60/0xb0 [ 676.310723][T15515] ? clear_bhb_loop+0x60/0xb0 [ 676.315423][T15515] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 676.321370][T15515] RIP: 0033:0x7f040d39de99 [ 676.325809][T15515] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 676.345473][T15515] RSP: 002b:00007f040e302028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 676.353955][T15515] RAX: ffffffffffffffda RBX: 00007f040d626090 RCX: 00007f040d39de99 [ 676.361967][T15515] RDX: 0000000000000094 RSI: 0000200000000400 RDI: 0000000000000005 [ 676.369969][T15515] RBP: 00007f040e302090 R08: 0000000000000000 R09: 0000000000000000 [ 676.377995][T15515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 676.386044][T15515] R13: 00007f040d626128 R14: 00007f040d626090 R15: 00007ffdf1583f78 [ 676.394059][T15515] [ 676.685996][T15525] netlink: 'syz.4.3931': attribute type 10 has an invalid length. [ 676.702069][T15525] netlink: 'syz.4.3931': attribute type 39 has an invalid length. [ 677.028929][T15539] netlink: 'syz.3.3936': attribute type 2 has an invalid length. [ 677.046210][T15539] __nla_validate_parse: 7 callbacks suppressed [ 677.046229][T15539] netlink: 199848 bytes leftover after parsing attributes in process `syz.3.3936'. [ 677.085455][T15539] tipc: Started in network mode [ 677.097237][T15539] tipc: Node identity 9215a268, cluster identity 4711 [ 677.108899][T15539] tipc: Node number set to 2450891368 [ 677.116346][T15545] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.3941'. [ 677.279993][T15551] netlink: 'syz.0.3943': attribute type 10 has an invalid length. [ 677.913908][T15571] FAULT_INJECTION: forcing a failure. [ 677.913908][T15571] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 677.957546][T15571] CPU: 0 PID: 15571 Comm: syz.3.3952 Not tainted syzkaller #0 [ 677.965093][T15571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 677.975191][T15571] Call Trace: [ 677.978518][T15571] [ 677.981484][T15571] dump_stack_lvl+0x188/0x24e [ 677.986269][T15571] ? show_regs_print_info+0x12/0x12 [ 677.991518][T15571] ? load_image+0x410/0x410 [ 677.996161][T15571] ? __lock_acquire+0x7c40/0x7c40 [ 678.001241][T15571] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 678.007286][T15571] ? perf_tp_event+0xc10/0xc10 [ 678.012113][T15571] should_fail_ex+0x390/0x4c0 [ 678.016850][T15571] _copy_from_user+0x2c/0x170 [ 678.021578][T15571] ___sys_sendmsg+0x1c3/0x360 [ 678.026324][T15571] ? __sys_sendmsg+0x2a0/0x2a0 [ 678.031188][T15571] __se_sys_sendmsg+0x1c3/0x2b0 [ 678.036082][T15571] ? ct_nmi_exit+0x145/0x1c0 [ 678.040714][T15571] ? __x64_sys_sendmsg+0x80/0x80 [ 678.045730][T15571] ? lockdep_hardirqs_on+0x94/0x140 [ 678.050980][T15571] do_syscall_64+0x4c/0xa0 [ 678.055530][T15571] ? clear_bhb_loop+0x60/0xb0 [ 678.060261][T15571] ? clear_bhb_loop+0x60/0xb0 [ 678.064990][T15571] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 678.070966][T15571] RIP: 0033:0x7ff27c59de99 [ 678.075440][T15571] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 678.095098][T15571] RSP: 002b:00007ff27d3af028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 678.103611][T15571] RAX: ffffffffffffffda RBX: 00007ff27c825fa0 RCX: 00007ff27c59de99 [ 678.111638][T15571] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 678.119638][T15571] RBP: 00007ff27d3af090 R08: 0000000000000000 R09: 0000000000000000 [ 678.127639][T15571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 678.135638][T15571] R13: 00007ff27c826038 R14: 00007ff27c825fa0 R15: 00007ffec6cc7648 [ 678.143648][T15571] [ 678.218943][ T4289] Bluetooth: hci0: unexpected event 0x04 length: 15 > 10 [ 678.301512][T15578] netlink: 'syz.4.3954': attribute type 10 has an invalid length. [ 678.350865][T15582] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3954'. [ 678.425947][T15578] netlink: 'syz.4.3954': attribute type 39 has an invalid length. [ 679.182364][T15600] netlink: 'syz.0.3963': attribute type 1 has an invalid length. [ 679.311699][T15609] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3962'. [ 680.200611][ T49] Bluetooth: hci4: unexpected event 0x04 length: 15 > 10 [ 680.284697][ T4289] Bluetooth: hci0: command 0x0409 tx timeout [ 682.214440][ T49] Bluetooth: hci4: command 0x0409 tx timeout [ 682.569828][T15619] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.3969'. [ 682.743955][T15627] netlink: 'syz.1.3968': attribute type 3 has an invalid length. [ 683.081624][T15627] netlink: 'syz.1.3968': attribute type 1 has an invalid length. [ 683.204228][T15627] netlink: 198452 bytes leftover after parsing attributes in process `syz.1.3968'. [ 683.798504][T15638] netlink: 'syz.2.3974': attribute type 46 has an invalid length. [ 683.840599][T15627] device syzkaller0 entered promiscuous mode [ 683.883360][T15638] netlink: 'syz.2.3974': attribute type 46 has an invalid length. [ 683.911256][T15633] netlink: 'syz.3.3973': attribute type 10 has an invalid length. [ 683.925490][T15633] device syz_tun entered promiscuous mode [ 683.965828][T15633] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 683.993929][T15636] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3973'. [ 684.017762][T15640] netlink: 'syz.3.3973': attribute type 39 has an invalid length. [ 684.067264][T15640] device macvlan0 entered promiscuous mode [ 684.524483][ T4289] Bluetooth: hci4: unexpected event 0x04 length: 15 > 10 [ 685.820000][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.842671][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.545838][T15672] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3985'. [ 686.607027][ T49] Bluetooth: hci4: command 0x0409 tx timeout [ 686.742630][ T4289] Bluetooth: hci1: unexpected event 0x04 length: 15 > 10 [ 686.842849][T15683] netlink: 'syz.4.3989': attribute type 10 has an invalid length. [ 686.910834][T15688] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3989'. [ 686.953979][T15683] netlink: 'syz.4.3989': attribute type 39 has an invalid length. [ 687.381596][T15702] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3998'. [ 687.516144][T15706] netlink: 'syz.1.4000': attribute type 12 has an invalid length. [ 687.535014][T15706] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4000'. [ 687.963824][T15710] netlink: 'syz.2.4001': attribute type 1 has an invalid length. [ 688.247501][ T4289] Bluetooth: hci0: unexpected event 0x04 length: 15 > 10 [ 688.498570][T15729] netlink: 'syz.2.4010': attribute type 10 has an invalid length. [ 688.537715][T15729] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4010'. [ 688.571357][T15729] netlink: 'syz.2.4010': attribute type 39 has an invalid length. [ 688.684863][T15733] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4012'. [ 688.726402][T15736] netlink: 'syz.3.4014': attribute type 12 has an invalid length. [ 688.744211][T15736] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4014'. [ 688.764541][ T4289] Bluetooth: hci1: command 0x0409 tx timeout [ 690.284876][ T49] Bluetooth: hci0: command 0x0409 tx timeout [ 690.305356][T15753] netlink: 'syz.1.4018': attribute type 25 has an invalid length. [ 690.314689][T15753] netlink: 'syz.1.4018': attribute type 9 has an invalid length. [ 690.353530][T15753] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4018'. [ 690.395121][ T49] Bluetooth: hci0: unexpected event 0x04 length: 15 > 10 [ 690.442462][T15762] netlink: 'syz.0.4022': attribute type 27 has an invalid length. [ 690.661494][T15766] netlink: 'syz.0.4025': attribute type 10 has an invalid length. [ 690.696636][T15766] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4025'. [ 690.723147][T15766] netlink: 'syz.0.4025': attribute type 39 has an invalid length. [ 691.118369][T15776] netlink: 'syz.1.4029': attribute type 10 has an invalid length. [ 691.341999][T15786] netlink: 188 bytes leftover after parsing attributes in process `syz.0.4034'. [ 691.686593][T15796] netlink: 63719 bytes leftover after parsing attributes in process `syz.0.4038'. [ 691.849892][T15804] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4039'. [ 691.962869][T15807] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4043'. [ 692.180834][T15812] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4044'. [ 692.447187][ T4289] Bluetooth: hci0: command 0x0409 tx timeout [ 693.529045][T15850] validate_nla: 5 callbacks suppressed [ 693.529065][T15850] netlink: 'syz.3.4058': attribute type 2 has an invalid length. [ 693.575764][T15849] netlink: 'syz.2.4057': attribute type 10 has an invalid length. [ 693.597206][T15849] __nla_validate_parse: 1 callbacks suppressed [ 693.597245][T15849] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4057'. [ 693.617354][T15849] netlink: 'syz.2.4057': attribute type 39 has an invalid length. [ 693.865006][T15858] netlink: 'syz.2.4061': attribute type 10 has an invalid length. [ 694.206492][T15870] netlink: 'syz.2.4065': attribute type 10 has an invalid length. [ 694.233286][T15870] bridge0: port 1(bridge_slave_0) entered disabled state [ 694.323285][T15870] bridge0: port 1(bridge_slave_0) entered blocking state [ 694.332258][T15870] bridge0: port 1(bridge_slave_0) entered forwarding state [ 694.430928][T15870] team0: Port device bridge0 added [ 695.640797][T15902] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4075'. [ 695.696619][T15904] netlink: 'syz.2.4076': attribute type 10 has an invalid length. [ 695.841851][T15911] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4079'. [ 695.874443][T15913] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4077'. [ 696.009439][T15914] : port 1(vlan0) entered blocking state [ 696.016690][T15914] : port 1(vlan0) entered disabled state [ 696.044451][T15914] device vlan0 entered promiscuous mode [ 696.707900][T15937] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4088'. [ 696.807998][T15940] FAULT_INJECTION: forcing a failure. [ 696.807998][T15940] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 696.822987][T15934] netlink: 'syz.3.4086': attribute type 10 has an invalid length. [ 696.873274][T15941] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4086'. [ 696.884990][T15940] CPU: 1 PID: 15940 Comm: syz.0.4090 Not tainted syzkaller #0 [ 696.892527][T15940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 696.895733][T15943] netlink: 'syz.1.4089': attribute type 29 has an invalid length. [ 696.902617][T15940] Call Trace: [ 696.902643][T15940] [ 696.902653][T15940] dump_stack_lvl+0x188/0x24e [ 696.902694][T15940] ? show_regs_print_info+0x12/0x12 [ 696.902745][T15940] ? load_image+0x410/0x410 [ 696.902774][T15940] ? __lock_acquire+0x7c40/0x7c40 [ 696.902818][T15940] ? snprintf+0xe5/0x140 [ 696.902857][T15940] should_fail_ex+0x390/0x4c0 [ 696.945434][T15940] _copy_to_user+0x2c/0x130 [ 696.949997][T15940] simple_read_from_buffer+0xe3/0x150 [ 696.955421][T15940] proc_fail_nth_read+0x1a6/0x220 [ 696.960544][T15940] ? proc_fault_inject_write+0x310/0x310 [ 696.966235][T15940] ? fsnotify_perm+0x248/0x550 [ 696.971093][T15940] ? proc_fault_inject_write+0x310/0x310 [ 696.976788][T15940] vfs_read+0x2db/0x960 [ 696.981017][T15940] ? kernel_read+0x1e0/0x1e0 [ 696.985664][T15940] ? __fget_files+0x28/0x460 [ 696.990304][T15940] ? __fget_files+0x3fc/0x460 [ 696.995026][T15940] ? __fdget_pos+0x2ae/0x360 [ 696.999668][T15940] ? ksys_read+0x70/0x260 [ 697.004068][T15940] ksys_read+0x14d/0x260 [ 697.008367][T15940] ? vfs_write+0x9a0/0x9a0 [ 697.012849][T15940] ? lockdep_hardirqs_on+0x94/0x140 [ 697.018093][T15940] do_syscall_64+0x4c/0xa0 [ 697.022559][T15940] ? clear_bhb_loop+0x60/0xb0 [ 697.027288][T15940] ? clear_bhb_loop+0x60/0xb0 [ 697.032025][T15940] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 697.037966][T15940] RIP: 0033:0x7f90b875e6ce [ 697.042433][T15940] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 697.062096][T15940] RSP: 002b:00007f90b95d6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 697.070554][T15940] RAX: ffffffffffffffda RBX: 00007f90b95d76c0 RCX: 00007f90b875e6ce [ 697.078564][T15940] RDX: 000000000000000f RSI: 00007f90b95d70a0 RDI: 0000000000000005 [ 697.086567][T15940] RBP: 00007f90b95d7090 R08: 0000000000000000 R09: 0000000000000000 [ 697.094568][T15940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 697.102566][T15940] R13: 00007f90b8a26038 R14: 00007f90b8a25fa0 R15: 00007ffd0f94f7b8 [ 697.110592][T15940] [ 697.153408][T15943] netlink: 'syz.1.4089': attribute type 29 has an invalid length. [ 697.184314][T15946] netlink: 'syz.3.4086': attribute type 39 has an invalid length. [ 697.197634][T15949] FAULT_INJECTION: forcing a failure. [ 697.197634][T15949] name failslab, interval 1, probability 0, space 0, times 0 [ 697.267631][T15949] CPU: 1 PID: 15949 Comm: syz.2.4091 Not tainted syzkaller #0 [ 697.275262][T15949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 697.285367][T15949] Call Trace: [ 697.288677][T15949] [ 697.291643][T15949] dump_stack_lvl+0x188/0x24e [ 697.296387][T15949] ? show_regs_print_info+0x12/0x12 [ 697.301655][T15949] ? load_image+0x410/0x410 [ 697.306218][T15949] ? __might_sleep+0xd0/0xd0 [ 697.310863][T15949] ? __lock_acquire+0x7c40/0x7c40 [ 697.311142][T15951] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4092'. [ 697.315923][T15949] should_fail_ex+0x390/0x4c0 [ 697.315962][T15949] should_failslab+0x5/0x20 [ 697.334236][T15949] slab_pre_alloc_hook+0x59/0x300 [ 697.339322][T15949] ? apparmor_sk_alloc_security+0x74/0x100 [ 697.345184][T15949] __kmem_cache_alloc_node+0x4f/0x270 [ 697.350608][T15949] ? apparmor_sk_alloc_security+0x74/0x100 [ 697.355102][T15954] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4092'. [ 697.356451][T15949] kmalloc_trace+0x26/0xe0 [ 697.369969][T15949] apparmor_sk_alloc_security+0x74/0x100 [ 697.375662][T15949] security_sk_alloc+0x6a/0xa0 [ 697.380485][T15949] sk_prot_alloc+0x101/0x210 [ 697.385119][T15949] ? sk_alloc+0x20/0x330 [ 697.389412][T15949] sk_alloc+0x36/0x330 [ 697.393531][T15949] ? bpf_ctx_init+0x154/0x190 [ 697.398268][T15949] bpf_prog_test_run_skb+0x36d/0x18e0 [ 697.403737][T15949] ? __fget_files+0x28/0x460 [ 697.408389][T15949] ? __fget_files+0x3fc/0x460 [ 697.413139][T15949] ? cpu_online+0xa0/0xa0 [ 697.417523][T15949] bpf_prog_test_run+0x31c/0x390 [ 697.422529][T15949] __sys_bpf+0x62b/0x780 [ 697.426839][T15949] ? bpf_link_show_fdinfo+0x380/0x380 [ 697.432285][T15949] ? lock_chain_count+0x20/0x20 [ 697.437201][T15949] __x64_sys_bpf+0x78/0x90 [ 697.441678][T15949] do_syscall_64+0x4c/0xa0 [ 697.446164][T15949] ? clear_bhb_loop+0x60/0xb0 [ 697.450890][T15949] ? clear_bhb_loop+0x60/0xb0 [ 697.455615][T15949] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 697.461560][T15949] RIP: 0033:0x7f75af79de99 [ 697.466021][T15949] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 697.485683][T15949] RSP: 002b:00007f75b061d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 697.494179][T15949] RAX: ffffffffffffffda RBX: 00007f75afa25fa0 RCX: 00007f75af79de99 [ 697.502232][T15949] RDX: 0000000000000048 RSI: 0000200000000900 RDI: 000000000000000a [ 697.510268][T15949] RBP: 00007f75b061d090 R08: 0000000000000000 R09: 0000000000000000 [ 697.518285][T15949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 697.526303][T15949] R13: 00007f75afa26038 R14: 00007f75afa25fa0 R15: 00007ffe27c198f8 [ 697.534349][T15949] [ 698.674119][T15973] bridge0: port 1(bridge_slave_0) entered disabled state [ 698.847682][T15986] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4100'. [ 698.949572][T15989] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4102'. [ 699.003793][T15994] validate_nla: 2 callbacks suppressed [ 699.003813][T15994] netlink: 'syz.4.4104': attribute type 22 has an invalid length. [ 699.191092][T15999] netlink: 'syz.2.4106': attribute type 10 has an invalid length. [ 699.211055][T15999] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4106'. [ 699.228976][T15999] netlink: 'syz.2.4106': attribute type 39 has an invalid length. [ 699.392754][T16004] netlink: 'syz.2.4108': attribute type 25 has an invalid length. [ 699.408703][T16004] netlink: 'syz.2.4108': attribute type 29 has an invalid length. [ 699.421096][T16005] netlink: 5 bytes leftover after parsing attributes in process `syz.2.4108'. [ 699.442829][T16006] netlink: 5 bytes leftover after parsing attributes in process `syz.2.4108'. [ 700.160751][T16024] netlink: 'syz.4.4118': attribute type 10 has an invalid length. [ 700.216646][T16024] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4118'. [ 700.320528][T16028] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4116'. [ 700.343169][T16024] netlink: 'syz.4.4118': attribute type 39 has an invalid length. [ 700.789944][T16038] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 700.797693][T16038] IPv6: NLM_F_CREATE should be set when creating new route [ 700.805926][T16038] IPv6: NLM_F_CREATE should be set when creating new route [ 700.813656][T16038] IPv6: NLM_F_CREATE should be set when creating new route [ 701.046063][T16040] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4120'. [ 701.215985][T16046] netlink: 188 bytes leftover after parsing attributes in process `syz.3.4122'. [ 702.260150][T16066] FAULT_INJECTION: forcing a failure. [ 702.260150][T16066] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 702.394096][T16066] CPU: 1 PID: 16066 Comm: syz.1.4128 Not tainted syzkaller #0 [ 702.401652][T16066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 702.411757][T16066] Call Trace: [ 702.415086][T16066] [ 702.418057][T16066] dump_stack_lvl+0x188/0x24e [ 702.422797][T16066] ? show_regs_print_info+0x12/0x12 [ 702.428067][T16066] ? load_image+0x410/0x410 [ 702.432631][T16066] ? __lock_acquire+0x7c40/0x7c40 [ 702.437723][T16066] should_fail_ex+0x390/0x4c0 [ 702.442463][T16066] _copy_from_user+0x2c/0x170 [ 702.447200][T16066] iovec_from_user+0x143/0x360 [ 702.452028][T16066] __import_iovec+0x6c/0x510 [ 702.456680][T16066] ? __might_fault+0xa6/0x120 [ 702.461407][T16066] import_iovec+0x6f/0xa0 [ 702.465794][T16066] ___sys_recvmsg+0x4b2/0x590 [ 702.470538][T16066] ? __sys_recvmsg+0x2a0/0x2a0 [ 702.475384][T16066] ? trace_call_bpf+0xbf/0x6b0 [ 702.480211][T16066] ? trace_call_bpf+0x5d6/0x6b0 [ 702.485132][T16066] ? __fget_files+0x3fc/0x460 [ 702.489882][T16066] __x64_sys_recvmsg+0x20d/0x2e0 [ 702.494880][T16066] ? perf_trace_preemptirq_template+0x268/0x320 [ 702.501183][T16066] ? ___sys_recvmsg+0x590/0x590 [ 702.506108][T16066] ? lockdep_hardirqs_on+0x94/0x140 [ 702.511340][T16066] do_syscall_64+0x4c/0xa0 [ 702.515792][T16066] ? clear_bhb_loop+0x60/0xb0 [ 702.520542][T16066] ? clear_bhb_loop+0x60/0xb0 [ 702.525249][T16066] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 702.531175][T16066] RIP: 0033:0x7f9ff439de99 [ 702.535616][T16066] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 702.555253][T16066] RSP: 002b:00007f9ff52f3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 702.563693][T16066] RAX: ffffffffffffffda RBX: 00007f9ff4626090 RCX: 00007f9ff439de99 [ 702.571687][T16066] RDX: 0000000000002000 RSI: 00002000000003c0 RDI: 0000000000000008 [ 702.579687][T16066] RBP: 00007f9ff52f3090 R08: 0000000000000000 R09: 0000000000000000 [ 702.587685][T16066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 702.595683][T16066] R13: 00007f9ff4626128 R14: 00007f9ff4626090 R15: 00007fffddcf4908 [ 702.603691][T16066] [ 703.794545][T16095] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4137'. [ 704.212255][T16104] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4138'. [ 704.386128][ T4289] Bluetooth: hci0: unexpected event 0x04 length: 15 > 10 [ 705.731265][T16132] netlink: 'syz.2.4149': attribute type 3 has an invalid length. [ 705.774191][T16132] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4149'. [ 706.010480][T16140] netlink: 'syz.3.4152': attribute type 17 has an invalid length. [ 706.122931][T16140] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4152'. [ 706.143825][T16140] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 706.213856][T16141] netlink: 'syz.3.4152': attribute type 17 has an invalid length. [ 706.234139][T16141] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4152'. [ 706.454192][ T49] Bluetooth: hci0: command 0x0409 tx timeout [ 706.462339][T16149] netlink: 'syz.1.4155': attribute type 10 has an invalid length. [ 706.545373][T16149] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4155'. [ 706.588480][ T49] Bluetooth: hci0: unexpected event 0x04 length: 15 > 10 [ 706.606048][T16156] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 706.668139][T16156] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 706.694884][T16149] netlink: 'syz.1.4155': attribute type 39 has an invalid length. [ 707.038857][T16166] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4160'. [ 707.219326][T16163] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4158'. [ 707.916370][T16184] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4166'. [ 708.001219][T16184] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4166'. [ 708.007144][T16172] sctp: [Deprecated]: syz.4.4163 (pid 16172) Use of struct sctp_assoc_value in delayed_ack socket option. [ 708.007144][T16172] Use struct sctp_sack_info instead [ 708.037908][T16187] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4166'. [ 708.095771][T16186] FAULT_INJECTION: forcing a failure. [ 708.095771][T16186] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 708.134670][T16186] CPU: 0 PID: 16186 Comm: syz.3.4167 Not tainted syzkaller #0 [ 708.142297][T16186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 708.152394][T16186] Call Trace: [ 708.155716][T16186] [ 708.158680][T16186] dump_stack_lvl+0x188/0x24e [ 708.163422][T16186] ? show_regs_print_info+0x12/0x12 [ 708.168671][T16186] ? load_image+0x410/0x410 [ 708.173228][T16186] ? __lock_acquire+0x7c40/0x7c40 [ 708.178298][T16186] ? lockdep_hardirqs_on+0x94/0x140 [ 708.183546][T16186] should_fail_ex+0x390/0x4c0 [ 708.188275][T16186] _copy_to_user+0x2c/0x130 [ 708.192831][T16186] simple_read_from_buffer+0xe3/0x150 [ 708.198230][T16186] proc_fail_nth_read+0x1a6/0x220 [ 708.203281][T16186] ? proc_fault_inject_write+0x310/0x310 [ 708.208942][T16186] ? fsnotify_perm+0x248/0x550 [ 708.213828][T16186] ? proc_fault_inject_write+0x310/0x310 [ 708.219485][T16186] vfs_read+0x2db/0x960 [ 708.223677][T16186] ? kernel_read+0x1e0/0x1e0 [ 708.228302][T16186] ? __fget_files+0x28/0x460 [ 708.232926][T16186] ? __fget_files+0x3fc/0x460 [ 708.237661][T16186] ? __fdget_pos+0x2ae/0x360 [ 708.242288][T16186] ? ksys_read+0x70/0x260 [ 708.246657][T16186] ksys_read+0x14d/0x260 [ 708.250937][T16186] ? vfs_write+0x9a0/0x9a0 [ 708.255394][T16186] ? trace_sys_enter+0x22/0x80 [ 708.260278][T16186] do_syscall_64+0x4c/0xa0 [ 708.264732][T16186] ? clear_bhb_loop+0x60/0xb0 [ 708.269443][T16186] ? clear_bhb_loop+0x60/0xb0 [ 708.274155][T16186] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 708.280118][T16186] RIP: 0033:0x7ff27c55e6ce [ 708.284569][T16186] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 708.304222][T16186] RSP: 002b:00007ff27d3aefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 708.312685][T16186] RAX: ffffffffffffffda RBX: 00007ff27d3af6c0 RCX: 00007ff27c55e6ce [ 708.320685][T16186] RDX: 000000000000000f RSI: 00007ff27d3af0a0 RDI: 0000000000000009 [ 708.328684][T16186] RBP: 00007ff27d3af090 R08: 0000000000000000 R09: 0000000000000000 [ 708.336679][T16186] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 708.344673][T16186] R13: 00007ff27c826038 R14: 00007ff27c825fa0 R15: 00007ffec6cc7648 [ 708.352712][T16186] [ 708.604478][ T4289] Bluetooth: hci0: command 0x0409 tx timeout [ 708.630197][ T4289] Bluetooth: hci2: unexpected event 0x04 length: 15 > 10 [ 708.967192][T16198] netlink: 'syz.0.4170': attribute type 10 has an invalid length. [ 709.000102][T16205] netlink: 'syz.3.4175': attribute type 29 has an invalid length. [ 709.268103][T16205] netlink: 'syz.3.4175': attribute type 29 has an invalid length. [ 709.298277][T16206] netlink: 'syz.3.4175': attribute type 29 has an invalid length. [ 709.338728][T16207] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 709.389441][T16207] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 709.477563][T16198] netlink: 'syz.0.4170': attribute type 39 has an invalid length. [ 710.684818][ T49] Bluetooth: hci2: command 0x0409 tx timeout [ 711.577971][ T49] Bluetooth: hci2: unexpected event 0x04 length: 15 > 10 [ 713.584557][ T4289] Bluetooth: hci2: command 0x0409 tx timeout [ 728.884403][ T49] Bluetooth: hci0: command 0x0406 tx timeout [ 737.039272][T14803] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 1-.... } 2670 jiffies s: 63709 root: 0x2/. [ 737.075038][T14803] rcu: blocking rcu_node structures (internal RCU debug): [ 737.082260][T14803] Sending NMI from CPU 0 to CPUs 1: [ 737.087791][ C1] NMI backtrace for cpu 1 [ 737.087802][ C1] CPU: 1 PID: 16218 Comm: syz.3.4178 Not tainted syzkaller #0 [ 737.087819][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 737.087829][ C1] RIP: 0010:__virt_addr_valid+0x134/0x540 [ 737.087859][ C1] Code: 20 00 74 0c 48 c7 c7 20 00 c7 96 e8 56 72 99 00 48 8b 05 bf 11 8d 15 48 85 c0 74 42 48 89 d9 48 c1 e9 22 4c 8d 34 c8 4c 89 f0 <48> c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 29 72 99 00 4d 8b 3e [ 737.087873][ C1] RSP: 0018:ffffc900001e05e0 EFLAGS: 00000046 [ 737.087888][ C1] RAX: ffff88823ffef000 RBX: 00000000b8f3bbf0 RCX: 0000000000000000 [ 737.087900][ C1] RDX: 0000000000000100 RSI: 00000000b8f3bbf0 RDI: 00003fffffffffff [ 737.087919][ C1] RBP: 0000000000000001 R08: ffff8880b8f3bbfb R09: 1ffff110171e777f [ 737.087931][ C1] R10: dffffc0000000000 R11: ffffed10171e7780 R12: dffffc0000000000 [ 737.087944][ C1] R13: dffffc0000000001 R14: ffff88823ffef000 R15: 0000000000000000 [ 737.087956][ C1] FS: 00007ff27d3af6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 737.087971][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 737.087982][ C1] CR2: 00007ff27c5eb580 CR3: 000000013febe000 CR4: 00000000003506e0 [ 737.087998][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 737.088007][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 737.088017][ C1] Call Trace: [ 737.088023][ C1] [ 737.088032][ C1] kasan_addr_to_slab+0x9/0xc0 [ 737.088056][ C1] __kasan_record_aux_stack+0xf/0xc0 [ 737.088073][ C1] irq_work_queue_on+0x10f/0x260 [ 737.088101][ C1] rcu_read_unlock_special+0x3c9/0x510 [ 737.088124][ C1] ? __rcu_read_unlock+0xd0/0xd0 [ 737.088142][ C1] ? __cant_sleep+0x220/0x220 [ 737.088163][ C1] __rcu_read_unlock+0x78/0xd0 [ 737.088178][ C1] ? trace_call_bpf+0xbf/0x6b0 [ 737.088201][ C1] trace_call_bpf+0x5bb/0x6b0 [ 737.088224][ C1] ? trace_call_bpf+0xbf/0x6b0 [ 737.088250][ C1] ? __bpf_trace_bpf_trace_printk+0x20/0x20 [ 737.088276][ C1] ? kvm_sched_clock_read+0x14/0x40 [ 737.088292][ C1] ? sched_clock_cpu+0x6e/0x260 [ 737.088395][ C1] perf_trace_run_bpf_submit+0x79/0x1c0 [ 737.088427][ C1] perf_trace_preemptirq_template+0x268/0x320 [ 737.088452][ C1] ? asm_sysvec_irq_work+0x16/0x20 [ 737.088476][ C1] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 737.088501][ C1] ? __irq_exit_rcu+0x147/0x230 [ 737.088518][ C1] ? irq_exit_rcu+0x20/0x20 [ 737.088535][ C1] ? asm_sysvec_irq_work+0x16/0x20 [ 737.088557][ C1] trace_irq_enable_rcuidle+0xd3/0x140 [ 737.088583][ C1] trace_hardirqs_on+0x24/0x40 [ 737.088603][ C1] asm_sysvec_irq_work+0x16/0x20 [ 737.088625][ C1] RIP: 0010:rcu_read_unlock_special+0x7f/0x510 [ 737.088642][ C1] Code: eb 03 48 b8 f1 f1 f1 f1 f8 f2 f2 f2 4a 89 04 2b 42 c7 44 2b 08 f8 f3 f3 f3 65 44 8b 35 a2 7c 95 7e 41 f7 c6 00 00 f0 00 74 40 <48> c7 44 24 40 0e 36 e0 45 4a c7 04 2b 00 00 00 00 42 c7 44 2b 08 [ 737.088656][ C1] RSP: 0018:ffffc900001e0ae0 EFLAGS: 00000206 [ 737.088669][ C1] RAX: 2b95d2ab9ab3e600 RBX: 1ffff9200003c164 RCX: 2b95d2ab9ab3e600 [ 737.088681][ C1] RDX: dffffc0000000000 RSI: ffffffff8a8c17a0 RDI: ffffffff8adf5de0 [ 737.088694][ C1] RBP: ffffc900001e0bd0 R08: ffffffff90b0f24f R09: 1ffffffff2161e49 [ 737.088706][ C1] R10: dffffc0000000000 R11: fffffbfff2161e4a R12: 0000000000000246 [ 737.088718][ C1] R13: dffffc0000000000 R14: ffff8880b8f3bb00 R15: 0000000000000002 [ 737.088740][ C1] ? mac80211_hwsim_beacon_tx+0x78a/0xae0 [ 737.088791][ C1] ? __rcu_read_unlock+0xd0/0xd0 [ 737.088816][ C1] __rcu_read_unlock+0x78/0xd0 [ 737.088831][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x26/0x170 [ 737.088883][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 737.088900][ C1] ieee80211_iterate_active_interfaces_atomic+0x156/0x170 [ 737.088934][ C1] mac80211_hwsim_beacon+0xb7/0x1b0 [ 737.088983][ C1] __hrtimer_run_queues+0x522/0xc90 [ 737.089006][ C1] ? hw_scan_work+0xf00/0xf00 [ 737.089037][ C1] ? hrtimer_interrupt+0x980/0x980 [ 737.089061][ C1] hrtimer_run_softirq+0x173/0x290 [ 737.089084][ C1] handle_softirqs+0x291/0x910 [ 737.089103][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 737.089122][ C1] ? do_softirq+0x210/0x210 [ 737.089136][ C1] ? hrtimer_interrupt+0x775/0x980 [ 737.089157][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 737.089175][ C1] __irq_exit_rcu+0x13b/0x230 [ 737.089191][ C1] ? irq_exit_rcu+0x20/0x20 [ 737.089214][ C1] irq_exit_rcu+0x5/0x20 [ 737.089228][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 737.089244][ C1] [ 737.089249][ C1] [ 737.089254][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 737.089276][ C1] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x4/0x80 [ 737.089306][ C1] Code: 77 22 89 ff 89 f6 49 ff c0 4c 89 01 48 c7 44 11 08 03 00 00 00 48 89 7c 11 10 48 89 74 11 18 48 89 44 11 20 c3 90 48 8b 04 24 <65> 48 8b 15 e4 37 80 7e 65 8b 0d e5 37 80 7e 81 e1 00 01 ff 00 74 [ 737.089320][ C1] RSP: 0018:ffffc90003dd76f8 EFLAGS: 00000246 [ 737.089333][ C1] RAX: ffffffff8205baaf RBX: ffffffff8b981280 RCX: 0000000000000072 [ 737.089344][ C1] RDX: 000000000000000c RSI: 00000000fffffffc RDI: 0000000000000000 [ 737.089354][ C1] RBP: ffff888058ad5150 R08: 0000000000000000 R09: ffff888058ad56b8 [ 737.089366][ C1] R10: dffffc0000000000 R11: ffffed100b15aad9 R12: 000000000000000c [ 737.089377][ C1] R13: 00000000fffffffc R14: ffff888058ad5078 R15: 00000000fffffff0 [ 737.089393][ C1] ? insert_header+0x98f/0xdb0 [ 737.089432][ C1] insert_header+0x98f/0xdb0 [ 737.089465][ C1] __register_sysctl_table+0xdde/0xed0 [ 737.089494][ C1] __addrconf_sysctl_register+0x271/0x3e0 [ 737.089521][ C1] ? addrconf_verify_work+0x30/0x30 [ 737.089542][ C1] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 737.089571][ C1] addrconf_sysctl_register+0x15c/0x1b0 [ 737.089594][ C1] ipv6_add_dev+0xbd4/0x1110 [ 737.089617][ C1] addrconf_notify+0x634/0xf60 [ 737.089637][ C1] ? ip6mr_device_event+0x1dd/0x200 [ 737.089681][ C1] ? raw_notifier_call_chain+0xa3/0x160 [ 737.089744][ C1] raw_notifier_call_chain+0xcb/0x160 [ 737.089767][ C1] register_netdevice+0x16a8/0x1b80 [ 737.089800][ C1] ? netif_stacked_transfer_operstate+0x200/0x200 [ 737.089825][ C1] ? memset+0x1e/0x40 [ 737.089844][ C1] ? alloc_netdev_mqs+0xb56/0xf10 [ 737.089872][ C1] br_add_bridge+0x9f/0xe0 [ 737.089899][ C1] br_ioctl_stub+0x5e2/0xcf0 [ 737.089922][ C1] ? rcu_is_watching+0x11/0xa0 [ 737.089947][ C1] ? rcu_read_unlock+0xa0/0xa0 [ 737.089963][ C1] ? __mutex_lock+0x1ab/0xae0 [ 737.089996][ C1] ? mutex_lock_nested+0x10/0x10 [ 737.090030][ C1] ? rcu_read_unlock+0xa0/0xa0 [ 737.090045][ C1] sock_ioctl+0x453/0x700 [ 737.090062][ C1] ? sock_poll+0x420/0x420 [ 737.090084][ C1] ? bpf_lsm_file_ioctl+0x5/0x10 [ 737.090106][ C1] ? security_file_ioctl+0x7c/0xa0 [ 737.090125][ C1] ? sock_poll+0x420/0x420 [ 737.090140][ C1] __se_sys_ioctl+0xfa/0x170 [ 737.090165][ C1] do_syscall_64+0x4c/0xa0 [ 737.090188][ C1] ? clear_bhb_loop+0x60/0xb0 [ 737.090209][ C1] ? clear_bhb_loop+0x60/0xb0 [ 737.090232][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 737.090253][ C1] RIP: 0033:0x7ff27c59de99 [ 737.090268][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 737.090281][ C1] RSP: 002b:00007ff27d3af028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 737.090297][ C1] RAX: ffffffffffffffda RBX: 00007ff27c825fa0 RCX: 00007ff27c59de99 [ 737.090309][ C1] RDX: 0000200000000080 RSI: 00000000000089a0 RDI: 000000000000000e [ 737.090319][ C1] RBP: 00007ff27c633eaf R08: 0000000000000000 R09: 0000000000000000 [ 737.090330][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 737.090339][ C1] R13: 00007ff27c826038 R14: 00007ff27c825fa0 R15: 00007ffec6cc7648 [ 737.090361][ C1] [ 744.234750][ T4289] Bluetooth: hci1: command 0x0406 tx timeout