last executing test programs: 8.081503615s ago: executing program 3 (id=12605): socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000001, 0x1, @perf_bp={0x0}, 0x8061, 0x3, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x40, 0x5}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x71, 0x5, 0x8, 0x8, 0x0, 0x1f, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x1}, 0xb06, 0x3, 0x8, 0x1, 0x7f, 0x800, 0x5, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac59}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x3000c085) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4) sendmsg$sock(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000001900)="f4aa6a36e2", 0x5}], 0x1}, 0x8001) 7.770986832s ago: executing program 3 (id=12610): r0 = socket$kcm(0x21, 0x2, 0x2) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x8, 0x2}, 0x80, 0x0}, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) (async) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x53}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000}, 0x48) (async, rerun: 64) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x120a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2b8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async, rerun: 64) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x4110, 0x0, 0x0, 0x5, 0x0, 0x9}, 0x0, 0x0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x7f) (async, rerun: 64) recvmsg(0xffffffffffffffff, 0x0, 0x1f00) (async, rerun: 64) r3 = socket$kcm(0x10, 0x2, 0x10) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0), 0x4) (async) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000022003505d25a806f8c6394f97e24fc60", 0x14}], 0x1, 0x0, 0x0, 0x74000000}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) (async, rerun: 64) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (rerun: 64) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030030000b12d25a80648c2594f90124fc60100c044002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0xa}, 0x0) 6.818815905s ago: executing program 3 (id=12615): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x2, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x400, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xb11}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180200004200000000000000000000008500000087000000180100002078642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) socket$kcm(0xa, 0x3, 0x87) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0xfe, 0xbd, 0x76, 0x0, 0x0, 0x0, 0x4401, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x4}, 0x2802, 0xc8, 0x6, 0x0, 0x0, 0xc, 0x0, 0x0, 0xb, 0x0, 0x1}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) close(r1) r2 = socket$kcm(0xa, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x4, 0x1076, &(0x7f0000000300)=""/4096, 0x0, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffed1}, 0x70) setsockopt$sock_attach_bpf(r2, 0x29, 0x37, &(0x7f0000000100)=r3, 0x120) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x4, 0x1000, &(0x7f0000000300)=""/4096, 0x0, 0x4, '\x00', 0x0, @xdp}, 0x94) setsockopt$sock_attach_bpf(r1, 0x29, 0x39, &(0x7f0000000100)=r4, 0x120) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1400000004000000040000000200020000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="feff1f000200"], 0x50) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102038700fe08000e40000200875a65969ff57b00ff020000000000000000000000000001"], 0xfdef) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000029000b05d25a806f8c6394f90424fc60", 0x14}], 0x1}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2008020022003507d25a806f8c6394f90524fc600df01141090005000400000037153e370248038011f01700d1", 0x2d}], 0x1}, 0x0) 6.389645096s ago: executing program 3 (id=12623): socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000001, 0x1, @perf_bp={0x0}, 0x8061, 0x3, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x40, 0x5}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x71, 0x5, 0x8, 0x8, 0x0, 0x1f, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x1}, 0xb06, 0x3, 0x8, 0x1, 0x7f, 0x800, 0x5, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac59}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x3000c085) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4) sendmsg$sock(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000001900)="f4aa6a36e2", 0x5}], 0x1}, 0x8001) 6.002505855s ago: executing program 3 (id=12625): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="180800000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100013800002c00000000000000b7020000000000007b9af8ff00000000b509000000000000dbaaf8fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffc7020000", @ANYBLOB="0000000000000000b7050000080000f84508f0ff76000000bf9800000000000056080000000000008500000007000000b700000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)=r0}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0x58, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000780)={&(0x7f00000006c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3d, 0x3d, 0x8, [@datasec={0x3, 0x4, 0x0, 0xf, 0x1, [{0x1, 0x1, 0x9}, {0x2, 0x3, 0x3}, {0x4, 0x8, 0x4}, {0x1, 0x3, 0x200}], '\t'}]}, {0x0, [0x30, 0x30, 0x5f, 0x61, 0x30, 0x2e]}}, &(0x7f0000000740)=""/47, 0x60, 0x2f, 0x1, 0x1}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000900)={0xdc4, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1e, 0x0, 0x0, &(0x7f0000000500)='syzkaller\x00', 0x6, 0xaa, &(0x7f0000000540)=""/170, 0x40f00, 0x24, '\x00', r2, @sk_lookup=0x24, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000800)={0x2, 0x0, 0xd, 0x7}, 0x10, r4, r0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1e, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000fbdeffff0000000000000000850000004100000085000000070000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_lookup, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0}, 0x94) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x3, 0x0, r1, 0x910, '\x00', 0x0, r0, 0x3, 0x0, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x618}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, 0x0, 0x0) r6 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080400007c09e8fe55a10a0015c00500142603600e1208000f0000000401a80016001100014003000300036010fab94dcf5c0461c1d6900094007134cf6ee08000a0e4", 0x55}], 0x1}, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={&(0x7f0000000100)=@in={0x2, 0x4e21, @remote}, 0x80, &(0x7f0000000000)=[{&(0x7f00000006c0)='@', 0x1}], 0x1, &(0x7f0000000040)=[{0x18, 0x84, 0x0, 'r'}], 0x18}, 0x41) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020200600000000000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000070000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020200600000000000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x7, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x61, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8912, &(0x7f0000000080)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x12, 0x11, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@map_fd={0x18, 0x0, 0x1, 0x0, r1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x8, '\x00', 0x0, @cgroup_sock_addr=0x33}, 0x94) 4.96427193s ago: executing program 3 (id=12628): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)="1400000035000b45d30000000000000002d25a80", 0x14}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0x9, &(0x7f0000000380), 0x9c) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0xa, 0x3, 0x11) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open$cgroup(&(0x7f0000000240)={0x3, 0x80, 0x2, 0xe0, 0x8, 0xa, 0x0, 0x8, 0x20000, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x4, @perf_config_ext={0x24000000000000, 0x81}, 0x820, 0x1, 0x2, 0x7, 0xc, 0x1f, 0x9, 0x0, 0x3, 0x0, 0x7fffffff}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000004000000280000002800000002004aaed8f900000200f30e000000040e000000000000000900000002000000050000000000000b"], 0x0, 0x42, 0x0, 0x1}, 0x28) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0x200000000000001, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) 3.74134815s ago: executing program 1 (id=12640): r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000004740)={&(0x7f0000000040)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000004640)=ANY=[@ANYBLOB="1800000000002000000000ffff0c000102"], 0x18}, 0x40000d0) (async) sendmsg$inet(r0, &(0x7f0000004740)={&(0x7f0000000040)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000004640)=ANY=[@ANYBLOB="1800000000002000000000ffff0c000102"], 0x18}, 0x40000d0) 3.69861332s ago: executing program 0 (id=12641): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2b6, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002f000b08d25a80648c7494f90424fc600b0002", 0x17}], 0x1}, 0x0) r3 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="934300005a"], 0xfe33) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x48, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x1, 0x1, 0x0, 0x12, 0x0, 0x0, 0xfffd, 0x0, 0x2}, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) sendmsg$inet(r0, &(0x7f00000007c0)={&(0x7f0000000040)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000240)="cc", 0x1}], 0x1}, 0x24044851) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000030000000400000002"], 0x48) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@cgroup, 0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r5 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x5}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, r5, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r8, &(0x7f0000000180), 0x40010) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xb}, [@generic={0x73, 0x1, 0x1, 0x3d}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x8946, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x11, &(0x7f0000000000)=r4, 0x8) 3.459584206s ago: executing program 2 (id=12642): socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000001, 0x1, @perf_bp={0x0}, 0x8061, 0x3, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x40, 0x5}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x71, 0x5, 0x8, 0x8, 0x0, 0x1f, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x1}, 0xb06, 0x3, 0x8, 0x1, 0x7f, 0x800, 0x5, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x7229784) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000980)=ANY=[@ANYBLOB="06000000000000006911d3f50000000085100000029f4b080000000005f4000095000000000000009500a54f9883fb"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac59}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x3000c085) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000100)=r2, 0x4) sendmsg$sock(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000001900)="f4aa6a36e2", 0x5}], 0x1}, 0x8001) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 3.32160197s ago: executing program 1 (id=12643): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x806, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r0 = socket$kcm(0xa, 0x6, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000700000095000000000000006100000600"], 0x0, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="5c00000013006bcd9e3fe3dc6e48aa31086b87003000000000000000160af365040014000d0002008bc3a0e68bd607ab6b716b7feab556a705251e6182940800000000ff1282bb2352d1f006baa45e3bbd225a8941b1436e000a84c9", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x24040110) syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/ipc\x00') bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x0, 0xcc0, 0xfffffffffffffde6, &(0x7f00000001c0)="348b0d151f8218e3c73697e4080049c416b90900000093291cfc5e8b99005e8b9900", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e00000085000000080000"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) setsockopt$sock_attach_bpf(r0, 0x10d, 0xa, &(0x7f0000000000)=r3, 0x11) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000800)={r1, 0x0, 0x92, 0xe9, &(0x7f00000003c0)="1ad032bf086a52e755f927784072829955116d5fdb5f2c5461d716b2b30016caa31d6bd158115074a664460a0adcc5e2ad1b7295174f75b5345833503f65588e470069c03d9be4cc9edfd2f2d216f417e09d8be40bc355bb978d1cad5bc17e7a7ba6e7ed2b635aea94dbf31bbbe11f9c4f0787cd5cc4cd656a81dd9f0b1f80420bf78406786e100ef3214ff11aac1edd2da6", &(0x7f0000000600)=""/233, 0x8, 0x0, 0xa9, 0x7, &(0x7f0000000700)="176e6f1cc77302208b9ccf76f10545c850aa260e432c5394e8444128bda70f716feec3faf6e726beb65aa6f9b11265d1a0164f5ffba23e55dab7c3ebeafd5d8add01eaf0415acc6fc81f701da1ef2eb72393208ff0a629bf7d4b5bea491da28bb45f655de91934cddfe13624397e19120281c25bfb124cc4ecb7dfc3e1a7c384a5b42f3eed5830094ed6e47a4ce4ce259af9575195785a827989dfca51965c5cbe5b00e719b1220d3a", &(0x7f00000007c0)="5ccc5d0addf7a1", 0x5, 0x0, 0x9}, 0x50) setsockopt$sock_attach_bpf(r0, 0x10d, 0xa, &(0x7f0000000040)=r3, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="1303000054009155090893b31b"], 0xfe33) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000980)}, 0x0) 2.89970905s ago: executing program 0 (id=12644): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b00)={0xffffffffffffffff, 0xe0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x8, &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x60, &(0x7f00000008c0)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000900), &(0x7f0000000940), 0x8, 0xb4, 0x8, 0x8, &(0x7f0000000980)}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe69, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r3, &(0x7f0000000180), 0x40010) 2.729037994s ago: executing program 1 (id=12645): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)="1400000035000b45d30000000000000002d25a80", 0x14}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0x9, &(0x7f0000000380), 0x9c) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0xa, 0x3, 0x11) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open$cgroup(&(0x7f0000000240)={0x3, 0x80, 0x2, 0xe0, 0x8, 0xa, 0x0, 0x8, 0x20000, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x4, @perf_config_ext={0x24000000000000, 0x81}, 0x820, 0x1, 0x2, 0x7, 0xc, 0x1f, 0x9, 0x0, 0x3, 0x0, 0x7fffffff}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000004000000280000002800000002004aaed8f900000200f30e000000040e000000000000000900000002000000050000000000000b"], 0x0, 0x42, 0x0, 0x1}, 0x28) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0x200000000000001, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) 2.727454334s ago: executing program 2 (id=12646): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f00000000c0), 0x12) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[], 0x50) (async) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x19, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20000000}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000180)=r4, 0x4) (async) sendmsg$inet(r6, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) (async) write$cgroup_int(r3, &(0x7f0000000100)=0x1, 0x12) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000540)={r3, &(0x7f0000000380)="947c72284f0d2e95cdb965cc53117fa51a4df078a613539e4245a5a7fb6dc469fe74a334e3e73e3212d0da3bbac6f88adcec5074191a237cf4765fe38edb1d12684010111677f0a6896af41319c7ee4da50230b0d3258af7476756eb70cc660645e5b88d5dbdc7b35efc7edf30b750941daa57fa2336556288587340ac8165cf84d0d0e17d9ba5dc836c4c2d50d32652dd7a04c091b01069a4075b480f8c8341ff1b4960e45b4c6e8a470de662db9a6a851193afd83073b7f9c1cf45b2a096fb782f885c824e6f57a788a0f42c", &(0x7f0000000480)=""/144}, 0x20) (async) r7 = socket$kcm(0x2, 0x1000000000000002, 0x0) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ced4fbd44e24eb0d34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3a06d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796efea77aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2acb72e7ead0509d380578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece72f2090000f44a3210223fdae7ed04935c3c90941576aebc8619d73415cda2130f5011e4845505000001000000004f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c040035cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bf463261135e24d154114df1381b02a0dcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f884cc4806f40300966fcf1e54f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e1700000000000000000000000000000000000000000000000000000520500002952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9a33c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a62415f78000000005f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c81c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b40824095135861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac00000b0000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e5dd921a5eadd4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293d5c833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e602c28ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f257aac5af18d8c6b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e29b10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe8e4cd14dc5c1eb98b63198f6f830745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b51c34a5384f2cf51180c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af243b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380ecf1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb79f558982d57c556ca1427b5960b79990565ca2a20996fcba472213744d3a156979651596afde2b0089f023fcfccd072bd6ea8445fc787390d71ec61d5b7b0f05f6931914bf49aa0d66eff294271a93e32f54f281068514a4cd2d0700a43df59e9924e4affdbd22405e675e9d7cdc10546571131831d4dc8c8363077a908d9ae4f27ff095f5b07667f93a3573d3fabfca58ee0a6b6a691102bb3c7be4dc5b816853275e7ae8c13ec341bad15353fad794b46c4fd73e1b4cc78de2156cb158870d5b8446dae9ba5f7f244e6cf8f6791671057347208a313ebbcb72b04706005670f2b0055e440d72c7c3316982c6ebe8675458cf6bb393b007f5cedb7bc411834600000000000000000000000000a20071b07d568a8150ed646b4978d0226d9651647a5999ae7c7c85322a215fcdb1adbad63499518fe0d10145d430422c78367dfa941f74b63f3884565ac89c673da2c2b1172be5f2cd1f3f453ebddd432bd24c73fa773b739e20fcec16a821230654a383ac1868495f67d942c772ca75e09073dbe9307ff5cac7c2c411149a4d989a8a019e068da218d4bc34e4102fd2f97397331e4cd70b4915582b635f07ca87f00dc929f902540f565c20add8675b79e005cf0277d954697317b907b77fa5d6b7feaebaf676a2a37de8aa70748fee4bc198ffd3e2de11eb0eff896fd94de0805ba6b1054a7b3e300d4581e9af62a1ecaee96d2819b3d192e5b9561eb622da25450f586be14017a1cf74f89a1dd18af004decfe266134c3d036ae7996931fe6008a73ed34c35f0da4ffee1fe63bc1af6ef1b4731d50b8ceb582a1e9c6e8d97f8290cc105754f592d16ccdb1df8636d7ca5e372cea97dd0f005cc7092b126dd46758917fb0d94b8483d403bd451429cc1660f0b5a529d8134dc2702f6d8e2f943d98fbe50a3ba653f13f98a00fcbf311f9758ade8e4eb87b4b9fb2d387f5d8c4bdcab2fff9ed8c9de961fd831a070381c8020352fea7c334b2959ddd956701a7ea415e224a81c9fa1ebbabe74f7743e09b6c8b72650b51d5c2000ef3679c039b3604374fc1af7ab354204afbd24f0e701bc08a98452ce2668617e85e0d876f5a8b6d9b777f1c384d8a9883e4262defb6b9aab8d5b76bc91ca50f87966797da2499ca0ac76707c0408a7b6d8708fe7714988babdc11f"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000001580)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0xffffff95, 0x0, 0xffffffffffffffff, 0xd}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r9, 0x0, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0xf02e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) setsockopt$sock_attach_bpf(r7, 0x88, 0x67, &(0x7f00000002c0)=r8, 0x4) (async) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000180)={'veth0\x00', 0x600}) (async) sendmsg$inet(r7, &(0x7f00000000c0)={&(0x7f0000000080)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000140)='i-', 0xffe3}], 0x1, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xd}, @private=0xa010102}}}], 0x20}, 0x0) 2.676818935s ago: executing program 4 (id=12647): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000380)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000000000004b68675f8001d000a00a0e69ee517d34460bc24", 0x2e}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x44014) 2.559836518s ago: executing program 0 (id=12648): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r0 = perf_event_open(&(0x7f0000000080)={0x8, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x48) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x11, 0x2, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000016000b1ed2bfd66488252a24fc600000", 0x14}], 0x1}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) r2 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x48, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x1, 0x1, 0x0, 0x12, 0x0, 0x0, 0xfffd, 0x0, 0x2}, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r4) sendmsg$inet(r2, &(0x7f00000007c0)={&(0x7f0000000040)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000240)="cc", 0x1}], 0x1}, 0x24044851) sendmsg$inet(r2, &(0x7f0000000840)={&(0x7f0000000280)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000740)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1}, 0x48000) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x11, &(0x7f0000000000)=r5, 0x8) socket$kcm(0x29, 0x2, 0x0) 2.539580859s ago: executing program 2 (id=12649): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x2, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x400, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xb11}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180200004200000000000000000000008500000087000000180100002078642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) socket$kcm(0xa, 0x3, 0x87) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0xfe, 0xbd, 0x76, 0x0, 0x0, 0x0, 0x4401, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x4}, 0x2802, 0xc8, 0x6, 0x0, 0x0, 0xc, 0x0, 0x0, 0xb, 0x0, 0x1}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) close(r1) r2 = socket$kcm(0xa, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="18020000e2ffffff00000000000000c685000000360000009500001800000000922ae83713ab9600010000801b10fb54a8cb72d232ad558c46fff4208d4990ec11ce9413ac30e00bd0081f8504e19a5183d769676520e98a263345e44d5ad12bca35510100c4d86abeb12303ff1c9fe0d0020000d60400000007d3670000008aff66d6b3181ffc1d62a3954c1198bbc4fa13aee48ca9e8969faebf3183fe803ab3f5024b52dc265b36fc9dae00a09404f01f9504d0976d252bd8d24538556e5e57bee3b8cf464ef3c6a7def8bad3ca6e3abdb21696e340bb8e2a093add57196b40def3858ef569147fa4108328392d322ab5df10a2f69a6bdf72ee7944e810d0223917c3d042410f57466f59544047d6d8ac44060000000000ee16c729300d2301800000000000002b5a8b05fcc154ad5290a8cdb97c343f454ff69dd6cbde49b28a6cb5f4fc0001745cff6e00e7ffffff0000acf3209a08439f1ff01779b6f6df7e02aa6d7760525b595fe1f697bc114ed1778e97a3f0395f946974cfb458be2a34cf924dc37b5592bf17956f3547497aba814382ff67b345b677a9d6523d87008000000400000000003fe8613ca29ff92be0d8deffff7b68136b0046d535dd39c0f35408869e9b342b953f91447e6b9eab304f134306320600a44095254b45a6c1312a13696c7202df5f764713504facc532c5a6d44d99ec7530ed7b0311000000000000e54e9072a22d911f4a2c2e2fa806e63c5cd98a8569a6d6bcfb000064885117e2ad910eae67e0ebe380d0f648713e68153579e02d71c58d147b00821ab9a6475b31e1ebf1369a04000000fbf3983f283f2f00000000992774814d63c933912d000006000000a66acb0a38856929e7d8b1b06c9bd5d7e5490f3b8596b694ea9483bd4bd287c83dd998a74694d18bdd8ad0983bc90770bbd26a82b9d99d5fc04563b523c47ef8c33400e90d02000000000000000edf1147a7afe772cd45af8aeffe2753088e02ca6bb2feec446ce7dbce66f0a93a03371320980865c7c62ea4d8f8a864dce9fa85aeb0454349100296ee2dba39c3f6fd6cf96714e11fe03b5062809a7418b165dd0336d226bac1e1223be1c97b15175d0e664beb126000e96549e1a1228c686edb475b705eaa9515c96f4fc6b3c925ea404e0f1de61026dc6c6618580fd6ce9eac602c1756f6d1056712412131ed9925989e01eae489ec7052e0ed72c326c7a8aa63999e2297c54ce1822d14b7c7699a9d0600f11f2e7f474cffbc35bc8623cd5eb68af82275a940be0400000000000000bcc3fbe7d90de96d6a8e9f32f18d1f606b381e4903b500000000000000000000004a2357ba5f03000000000000005dcf4f2aaee86d4802000000000000007cdb686d5da2a42e4b5024b6535811f362201d4f82012e6af704973d04ea923c19e6cb723c1923b3eea2d73e176dff383c9fbbac53dfdcb1a68c98e96fe39eec23963faf3ebed3409144c7c53d6318ced678a621450a9b01e9f2772e5f2999d3435da02556e36c3215d2bd4e96c93bff3ad06b11cb2d7556414a86dfa94bb7aa52c7febb1e9b2efcbbc5bccf9d39bed802f4f056976ada362ee9cc624ec454b90200fd9603f96908bddc14500000000000000000000000000044d917c62b27679913075731e8fddb07c10c82002d60181588ae63a440454287de9e340f611267f37bdd0f2d21cb06fcaf45a0a297e396f428d43371424b307eef82c5d6d19f3ef0d3b8f7fa51957e3099caab31133b34a1d3eebc0f0c9056df2e9667ba0b55695c7894010079b07e7aef7785e2486472b5cba1f3346c1e8e23deb8c83ab6eb2c72c484241dc3b66da78260f800fffd39368b952f6f4a10295c50c887a31d8b543c5d10f2dbd4d0b84eaad43feb6e169a9f2fcff7000000000000000000e011bc6366f56fa787f212c1f8c0f47f5078191c8a02ad436725771738a2a98891971e3b932352896e1ea10f62e8ef7a87e16151b39d6c27575714540d8c293a3fa4b5a867152823ed853140edda002c16c842b168bb55f6bb713deb57d0aa78d6d4e5fc5be2c402bd246128f41bcb02000000892b135a92e8c844938aa98ba4839a1408a696454d40e5eed4d4dce481ca86bfac54c330331b7f2cde17cbaeb0377696faf546ecbe742d73d47d726a50f6e752f3325255bd7e8b5923aa3cfb6f7e06494f21ca4501391358000000000000000000000800000000000000000075aa0000000000000000000000005560bd9eb81e839e4992e64b074a66cccccf00334fa94da8477be7d99b558ec6a5b1596ac1e7617c6b32eed0cc70286caf2c5189a103f4b0b04aff171c4d388ccf67fea37e782f025c94c853cde330a193a967d907a8c88fcb033e680f559a72150cb900bafcd536f48797915a2fe9922ce27300009e1b36aa4730117d9b00000000003c630000000000008fbbd11b015c415ca04192fbfb1a8b0e3460af35771dbac10062835c9bab3ad09f7a022c52d8000000000000000000004000000000000000000000000000000000000000000400000000000000000000000000006ec473c54399b7b8aa1ee46132fc45da8292631178cecf19550108b8b8423de42957ffe9bb6d752e68d2bc2ce777a17bf4dfdfee5de0f3e4dadf51ab9562827b762fa611ba5f32861c19dffe1dc9fd5c41cd46cf131fd6b0c2ddad90ac33f768f9ecc70327c59918fa5a249befe98262f53c8182d95f6da3698a6a88c2c31d801a8f1f5e0ce05138d5422da0a6a62b9dfe1f39775d1d0c9186096415f544aaf76b0a1c877a6c826a5adcfb22c4a0e5a46271caa3eaf4f389dd5f3c20dbddc0377a4266d7b9fd61b9287e9b4be0a413ee31be0ddecab0ef7b25cba1fb3654ddf291ecb7768ac1e177042cb4c452fa6b3966950000000000000000c187da23d6855500fe8510b51e13a890e394b84a6ea2cc8d42b97c697c29122298d55e2e1cca8e07abda2606a3f381c64b9fec0000000a7965e4854e8e3572ad5149b3872342dea9252132860c9af1bd5fe263c0313dea5d6e0c11a466d6892ed65f34667dd79b07b5cbdd8aa7dd561a26b5562d4861a7e1b0f48930e0b696ea3bee7eb72794e163d7aeac9a0fa5403ac9cb421eae283b0550f1d0d339cd7b96e71d3ab48ad9d7975e0c9b117f71d3ab80a0c9b0284ecc469fa6181c9c71fce07a6ffb23296a107763138e8d9876291af2076890c47925ac773d95d2ca42acb3e5f3a1550665b898462c139ffd0106bc8a61b6117d252efcab7106b4c3a3c13a70ff452e9d2096142c517b0e91b5cf88332faca5b3ee96363065c3ce32d3d39ec36e20d597e05664f2526bd918090649da11f7299789d00f5024df1e99d3efecb9b457642fe810370ba4fbe00fa60a28af966a27a1659e448bbe43a1dcd2ea760018b57a36ac41ef2051a7b703d55c0602540663016e20d50385766df4dac47802a55bd38dd767ee9960c6daa704fc5d01a14591f26b7b538c9bb22f6a2f7a34d1b9edfde3be9e25a110228c64253588ff420644dbc0854e69a7bdda72f93ceaccf92cfe7dd6296c950db10f6dd8a5ef9b73cf6a12a1ba16fdc7e35b805f4fd2fcff0a623722149c1465e4de2d53f0f10b14c21865027abc71a12cb1e9f8029c7a20000000eeb0d53a83e518c8d2052c08b515d9d0bde24ac4e798040c7db0bb03c019507d6377f3d5dd94a27abc6d6b120d61f772407e0d2cb50d29168b68aef9f176b4c3aa8b21279d4ea9c1f669aa8c2c17d5b3a8d1dda58d26f1019af04b7774c85d5bce8be010f27c5211938031c3404680b01279c778bd1fe1b48c4b5b8e0fe756e54a8d76b7cec5e3407d93b4eadc446440607de844acf5524a4657e33af2115547b735b57b5092d0bc8fa6acb832509abe0882d570ce400aaebd7baff88526608d6991aac95751671174129457e4a03aca69d82b64b89e6ad6ed1e275ec5002e48170e4c7b4f3971481098dedb88fba90770e44bf404d5a97fefe2fe8e459fe45933b78c7ab5fe985a480193a20fb07da1455fb283df68af569ac82aa6dc703e29bf158931fb79f2abfa6ff7eb8c4f381c9da58bea460e2ead969933e5391970ca4fddd64da2e5df9c4d82044068caaaab771b37bb06bbe673056d849825525f1120b2250f6b8520381f7a74b1c687781cb6b23e67b918844b83dbaeeb559ec8520d710dd6d6b4e64838bd434a36ed03fc0c488b24571032ffbc9f8ce97041e1bc4729d539358dc9599c1266b9ce2cb6dd0ad57a6e9d3d4a11a27f70b2934c96237e2ba09c58eeda678d4d08b6da99b7a86e946215afb1b48792fde54492e306cb5342e2589874b603a1de972b1f09cc350096f5c3e814118af9ba0793cfdf20c77b34eacfdf63ce59ec4d2f867bf884e941559b068d908325667672b5e1cf71f4829c0493e8b141489ed926b822becead7a0a2b4a4c008ab16b616d60f345e4da54f06443507efe57ea62399ef4eb11b2f559e1b056456a53998bf1c6d13c92e75136147f91ae3a75ca15eb1b51bf700b3c0bf54bc3745ff313c5e75dc66386897f6ee45429371b8d0878c469953a63baf85c1390da13efc353ccbef950c29f39ddf436f0d9bf1be1515ed251d8b6f11ecb16b1e8d1ed04196e9b6c2f9e068b7749bb6c1f533e493f22c901662c65cb761dc2eeff2f698bd4dbae83e2dfdc4f1c7f918a00515c1bc189d10ec22b35c92725cbf0ba244fd029c4f026f68e000000060000ab0476c3fd7f7c1e5c000000000000000000000011e43e39d3f4394fbfa13c416b1c443c5e52eea726491ad75100ebad7c6d5a665c59a3fb158e43da904f19e7e8daa4e90390b8da945f6cd78536c0d2be07221f85ad46b180f256d4d84592691d15d65896b66b63a46705338b67b72dc1c3075fcdc5cbffb0366151632ba5be8ae815dfea9fadfd31c473a24a73d3e5116c3023b3563c72d26fbd59877132bde5ca4ef8d92fd3613c768b35223f6fd0b5e9a8b98cccf1e2b4612e620e3a159d6365c9045aaa826aa0ee6d26cf0397ce674c20824584b464ebdc2f3ea26a7aec4570b242a6677a4e9187f8591c3a9bdc00000000002364bbd93964a8d0bdc802b9be250000000000000000000000000000dd4a009b2ba0d648a6975bcb66956a963912e26eb226af29c9f9f6261884db2d6b172b240dae6c7af327a27c533ab69811ca700d51724999cb8c0a8cace25602c3ecb9f0bcbe9ca6c9a444feb4cd9abbf2db2d583d5279de7f4130"], &(0x7f0000000040)='GPL\x00', 0x4, 0x1076, &(0x7f0000000300)=""/4096, 0x0, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffed1}, 0x70) setsockopt$sock_attach_bpf(r2, 0x29, 0x37, &(0x7f0000000100)=r3, 0x120) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x4, 0x1000, &(0x7f0000000300)=""/4096, 0x0, 0x4, '\x00', 0x0, @xdp}, 0x94) setsockopt$sock_attach_bpf(r1, 0x29, 0x39, &(0x7f0000000100)=r4, 0x120) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1400000004000000040000000200020000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="feff1f000200"], 0x50) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102038700fe08000e40000200875a65969ff57b00ff020000000000000000000000000001"], 0xfdef) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000029000b05d25a806f8c6394f90424fc60", 0x14}], 0x1}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2008020022003507d25a806f8c6394f90524fc600df01141090005000400000037153e370248038011f01700d1", 0x2d}], 0x1}, 0x0) 2.538595108s ago: executing program 4 (id=12650): r0 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0xef) sendmsg$kcm(r1, &(0x7f0000000040)={&(0x7f0000000280)=@caif=@dgm={0x25, 0x6, 0x9}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000480)="620427605902000000a0002f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7992570484d6a5d0292ea0c3f97b7cbff701684b13c5593262534a7af9eab48f2ca2d74d9a4de33", 0xda}, {&(0x7f0000000840)="294f28dfe56d2c8ba23606bc7ecd1f634665cb5bed07bac5684da6eb21da1d6926910c5a0c653b0106869a8049d2a44ce42557b2e72e2bd367e9d01a5e7380cc4fc8e7c9044cc4115b978ca7427d749beaefdf2e48b369cb169ad7b1ced26bb161297c7e56a3e83e91b379c179017f8b4657d1b22eca6bca33036d33e1a684059c5301001ca6637ac780ab2bcfc22a666cd4e5876f11e9aee4724b7cb59731c97e70ebd7f7483994eb07de2f5d6a9448c3206cff6d290b433f331c2399e99ee3bdecf5689eddc3e54908000000a933bbc47b65ca6e9d7efbee6e3b1dbe87313111e85336d6890002db17751b6044f964dc90ea466f90856112be7f0a54b39a3f66cc4c39544300093158af39cdde429f50d8c7fbc0efaccca18e94b87dc586ee60baa55469755ab00e92b607f2aeee00ad72fb29c1847f85b2f8ec3a34864b18eaaa131a4940c9af11606e5d9360c3f4a2c8308d50c34b1bbaac018469ac346dc2a539e20350297097e7bf21ea0c2a0aa083b2b3543af05c7fb5391a1c81304b520fafb941b2dc3cfb03c3dd8567a459752a5ca573ee7cf4f518af508d141c98dc9914df1521e9ee49decdf2418e7f74adea9fda805bc75906dafd279aee36397966427cdef205c67fbbb3", 0x1cb}, {&(0x7f0000000a40)="0a985d7879f1bb", 0xfcb9}], 0x3}, 0x8045) 2.377569992s ago: executing program 1 (id=12651): socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x40, 0x5}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x71, 0x5, 0x8, 0x8, 0x0, 0x1f, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x1}, 0xb06, 0x3, 0x8, 0x1, 0x7f, 0x800, 0x5, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x7229784) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000980)=ANY=[@ANYBLOB="06000000000000006911d3f50000000085100000029f4b080000000005f4000095000000000000009500a54f9883fb21724a3bf195164556290500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac59}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x3000c085) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000100)=r2, 0x4) sendmsg$sock(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000001900)="f4aa6a36e2", 0x5}], 0x1}, 0x8001) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 2.150355248s ago: executing program 4 (id=12652): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x803e}, 0x0) 1.869191395s ago: executing program 4 (id=12653): perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000140)}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000340)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000380)=[0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0], 0x0, 0x55, &(0x7f0000000440)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f00000004c0), &(0x7f0000000500), 0x8, 0xc2, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001640)={0x609f5c19, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000016c0)={0xb, 0x6, &(0x7f0000000b80)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @map_idx={0x18, 0x1, 0x5, 0x0, 0xb}], &(0x7f0000000600)='GPL\x00', 0x5, 0x85, &(0x7f0000000780)=""/133, 0x1e00, 0x65, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, &(0x7f00000015c0)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000001600)={0x3, 0xe, 0x6, 0x8}, 0x10, r2, 0xffffffffffffffff, 0x4, 0x0, &(0x7f0000001680)=[{0x3, 0x2, 0xb, 0xc}, {0x5, 0x2, 0x6, 0xb}, {0x5, 0x4, 0xc, 0x1}, {0x1, 0x5, 0xc, 0x4}], 0x10, 0x8}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0x8, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7fffffff}, [@map_idx={0x18, 0xa, 0x5, 0x0, 0x9}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0xb042, 0x0, 0x0, 0x0, 0x7e1e}]}, &(0x7f0000000780)='syzkaller\x00', 0x0, 0xec, &(0x7f00000007c0)=""/236, 0x41100, 0x40, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x8, &(0x7f00000008c0)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000900)={0x5, 0x9, 0x7ff, 0x6}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x10, 0xc, &(0x7f00000001c0)=@raw=[@alu={0x4, 0x1, 0xd, 0x3, 0x5, 0xfffffffffffffff4, 0x10}, @map_fd={0x18, 0x3, 0x1, 0x0, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], &(0x7f0000000240)='syzkaller\x00', 0x8, 0x3a, &(0x7f0000000280)=""/58, 0x41100, 0x1, '\x00', r1, @fallback=0x1e, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000700)={0x3, 0x10, 0x800, 0x3}, 0x10, r2, r3, 0xa, 0x0, &(0x7f0000000a00)=[{0x4, 0x5, 0x3, 0x2}, {0x5, 0x3, 0xe}, {0x2, 0x2, 0xb, 0x8}, {0x4, 0x1, 0x1, 0x2}, {0x2, 0x4, 0x6, 0x1}, {0x3, 0x5, 0x9, 0x7}, {0x2, 0x3, 0x7, 0xc}, {0x0, 0x3, 0x5, 0x1}, {0x2, 0x4, 0x2, 0x5}, {0x1, 0x5, 0x8, 0x3}], 0x10, 0xfffffffb}, 0x94) r4 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r4, &(0x7f00000017c0)={&(0x7f0000000040)=@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000000c0)="83", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000084000000070000007fffffff8d000000b8"], 0xd0}, 0x480c4) 1.740772708s ago: executing program 4 (id=12654): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000940)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10020, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8e24, 0x8}, 0x0, 0x0, 0xfffffffe, 0x3, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1100000004000000040000000010"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0xffffffff, r1}, 0x38) 1.575400122s ago: executing program 1 (id=12655): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000300)="d8000000180081054e81f783db4cb9040a1d3f0006007c09e8fc55a10a0015000600142603600e1208000f001d000401a8000100fe80ffff00000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbaceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) 1.433611655s ago: executing program 2 (id=12656): socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000001, 0x1, @perf_bp={0x0}, 0x8061, 0x3, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x40, 0x5}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x71, 0x5, 0x8, 0x8, 0x0, 0x1f, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x1}, 0xb06, 0x3, 0x8, 0x1, 0x7f, 0x800, 0x5, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x7229784) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000980)=ANY=[@ANYBLOB="06000000000000006911d3f50000000085100000029f4b080000000005f4000095000000000000009500a54f9883fb"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac59}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x3000c085) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000100)=r2, 0x4) sendmsg$sock(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000001900)="f4aa6a36e2", 0x5}], 0x1}, 0x8001) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 1.386257576s ago: executing program 0 (id=12657): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b00)={0xffffffffffffffff, 0xe0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x8, &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x60, &(0x7f00000008c0)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000900), &(0x7f0000000940), 0x8, 0xb4, 0x8, 0x8, &(0x7f0000000980)}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe69, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r3, &(0x7f0000000180), 0x40010) 993.502125ms ago: executing program 1 (id=12658): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="180800000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100013800002c00000000000000b7020000000000007b9af8ff00000000b509000000000000dbaaf8fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffc7020000", @ANYBLOB="0000000000000000b7050000080000f84508f0ff76000000bf9800000000000056080000000000008500000007000000b700000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)=r0}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0x58, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000780)={&(0x7f00000006c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3d, 0x3d, 0x8, [@datasec={0x3, 0x4, 0x0, 0xf, 0x1, [{0x1, 0x1, 0x9}, {0x2, 0x3, 0x3}, {0x4, 0x8, 0x4}, {0x1, 0x3, 0x200}], '\t'}]}, {0x0, [0x30, 0x30, 0x5f, 0x61, 0x30, 0x2e]}}, &(0x7f0000000740)=""/47, 0x60, 0x2f, 0x1, 0x1}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000900)={0xdc4, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1e, 0x0, 0x0, &(0x7f0000000500)='syzkaller\x00', 0x6, 0xaa, &(0x7f0000000540)=""/170, 0x40f00, 0x24, '\x00', r2, @sk_lookup=0x24, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000800)={0x2, 0x0, 0xd, 0x7}, 0x10, r4, r0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1e, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000fbdeffff0000000000000000850000004100000085000000070000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_lookup, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0}, 0x94) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x3, 0x0, r1, 0x910, '\x00', 0x0, r0, 0x3, 0x0, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x618}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, 0x0, 0x0) r6 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080400007c09e8fe55a10a0015c00500142603600e1208000f0000000401a80016001100014003000300036010fab94dcf5c0461c1d6900094007134cf6ee08000a0e4", 0x55}], 0x1}, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={&(0x7f0000000100)=@in={0x2, 0x4e21, @remote}, 0x80, &(0x7f0000000000)=[{&(0x7f00000006c0)='@', 0x1}], 0x1, &(0x7f0000000040)=[{0x18, 0x84, 0x0, 'r'}], 0x18}, 0x41) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020200600000000000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000070000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020200600000000000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x7, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x61, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8912, &(0x7f0000000080)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x12, 0x11, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@map_fd={0x18, 0x0, 0x1, 0x0, r1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x8, '\x00', 0x0, @cgroup_sock_addr=0x33}, 0x94) 796.81379ms ago: executing program 0 (id=12659): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1f, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000fcffffff000000000800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000002f200207b8af8ff00000000bfa200000000000007020000f8ffffffb700000008000000b70400000208000085000000a800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000001d955bb551be5193360200000000000400000000040000000000000000"], 0x0, 0x26}, 0x20) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000002000000000000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x1, 0x0, 0x0, 0x18}, 0x80) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRESDEC=r2], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d36, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x1, 0x0, 0x6, 0x0, 0x9, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0x3100, 0x3100, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=0xffffffffffffffff, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000080)={r7, r4, 0x0, r4}, 0x10) 525.434067ms ago: executing program 2 (id=12660): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)="1400000035000b45d30000000000000002d25a80", 0x14}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0x9, &(0x7f0000000380), 0x9c) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0xa, 0x3, 0x11) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open$cgroup(&(0x7f0000000240)={0x3, 0x80, 0x2, 0xe0, 0x8, 0xa, 0x0, 0x8, 0x20000, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x4, @perf_config_ext={0x24000000000000, 0x81}, 0x820, 0x1, 0x2, 0x7, 0xc, 0x1f, 0x9, 0x0, 0x3, 0x0, 0x7fffffff}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000004000000280000002800000002004aaed8f900000200f30e000000040e000000000000000900000002000000050000000000000b"], 0x0, 0x42, 0x0, 0x1}, 0x28) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0x200000000000001, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) 406.037839ms ago: executing program 0 (id=12661): r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000001b00)={0x0, 0x0, 0x0}, 0x20000000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000240)=ANY=[@ANYRES16=r0], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) socket$kcm(0x29, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x10, 0x2, 0x0, 0xff, 0x0, 0xcbf0, 0x241a2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x3, @perf_config_ext={0xffff8880b8709000, 0x6}, 0x1, 0x3, 0xffffffff, 0x0, 0x4, 0xfffffffc, 0x8000, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000040)=r1, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b"], 0x50) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, &(0x7f0000000080)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x50) socket$kcm(0x11, 0x2, 0x300) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x804, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d80000001c0081044e81f782db44b9040a1d08020a000000401296a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x8309}, 0x0, 0x2, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0xf, &(0x7f0000000080)=[{&(0x7f00000000c0)="0209070002000000e4a17c45c8d260c90ec56959a440278950ff8cdca342f51686908ea4fe07dee035abee82755979fbd7991b71517d20096811c5a663a947eaf378bf56aaccdde0d91d2fa08aba131d91a15f81bfd1e961e534a605e9196747aaf27c0ec3994018ec333b40070beae950827d3efce8a34af6c67c60ee83b76c1132f55a7ccf7843a9a1de5284a60a57f66fa52701bccb915def033b664bc63242c782ecc7", 0x10}], 0x1}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2e0, 0x2f, 0x0, &(0x7f0000000100)="b9ff03076044238cb89e14f008000de0ffff00184000632b77fbac14140ce000006a62079f4b4d2f87e505ca6aab84", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 216.905984ms ago: executing program 4 (id=12662): socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0xd, &(0x7f0000000000), 0x8) r1 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r1, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000380)=[{0x0, 0x2b}, {&(0x7f0000000000)="54fb", 0x2}], 0x2}, 0x4080) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$kcm(0xa, 0x5, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x6, 0x0, 0x3, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x1, @perf_bp={0x0, 0x1}, 0x21, 0x4, 0x0, 0x4, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x588a, 0x0, 0x0, 0x0, 0x96e, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r2, 0x0, 0xfe33) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffd, 0x40000000}, 0x10c002, 0xac5d, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6143, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x800}, 0x0, 0xffefffffffffffff, r3, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={0x0, &(0x7f0000000580)=""/229, 0x0, 0xe5, 0x1}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0400000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x008', @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="000000000100"/28], 0x48) socketpair(0x1, 0x1, 0x0, 0x0) r5 = socket$kcm(0x21, 0x2, 0x2) setsockopt$sock_attach_bpf(r5, 0x1, 0x7, &(0x7f0000000040), 0x4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, &(0x7f0000000080)) syz_clone(0x40a00480, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x4000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, @perf_config_ext={0x0, 0x9}, 0x100000, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x0, 0x0) r6 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b070002000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) recvmsg(r6, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x22) recvmsg$kcm(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x40) bpf$MAP_CREATE(0x500, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'lo\x00', @random='\x00\x00\x00\x00\x00 '}) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0900000005000000008000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000080000000000000000000000000000000397b7081dc53aaf35cd428eccbeff07aa8d866dc4b7166f0a6dc234afc73d2c6b5b985cd1dd87d2b786cd603cddd47f278167ec43c712b4774278b7307efbc3b00ef5b1e613d8da9d462cca1183a0d96cdc5da6cb3950cf637aff5fcd6bc58e160031c6dbc272aac91a7535846dc4d630a7803d70eb56588bc992ee36af1074f4ec9c89dcaf8d8932fbe7829f1840451a523296e4f0e5f6e47a826412bb561b6960e696edb83db4df49abc250454ab7970d422ad0fce5f61d7cd102f8a55dd2e926f43308a926907b1724c7b8d919ed969f8193d4e45876cff7dba58cf790ee3faa9bbb32e773705233a5778bbf818d7103827e1ff70de8940b3593376d07e6eea9b55c380cdbc8ab54c59e9d1595f3e7762e359a596fb7973775fabaf1fef08353f110a0dd1e04d8b796244953d2b464eb4757f450c2229aa88d9a226c19f4e79943a0f6c9ea1de790ef6e28408e04486"], 0x50) 0s ago: executing program 2 (id=12663): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)="1400000035000b45d30000000000000002d25a80", 0x14}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0x9, &(0x7f0000000380), 0x9c) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0xa, 0x3, 0x11) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open$cgroup(&(0x7f0000000240)={0x3, 0x80, 0x2, 0xe0, 0x8, 0xa, 0x0, 0x8, 0x20000, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x4, @perf_config_ext={0x24000000000000, 0x81}, 0x820, 0x1, 0x2, 0x7, 0xc, 0x1f, 0x9, 0x0, 0x3, 0x0, 0x7fffffff}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000004000000280000002800000002004aaed8f900000200f30e000000040e000000000000000900000002000000050000000000000b"], 0x0, 0x42, 0x0, 0x1}, 0x28) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(0x0, 0x0, 0x200000000000001, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x7f, 0x0, 0x0, 0xffffffff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): sr: link becomes ready [ 1641.018518][ T934] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1641.074695][ T2332] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1641.091825][ T2332] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1641.099391][ T2628] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.10034'. [ 1641.118434][ T939] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1641.138528][ T939] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1642.062237][ T941] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1642.088658][ T941] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1642.112848][ T2332] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1642.799311][ T2670] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.10044'. [ 1642.829743][ T2670] netlink: 43 bytes leftover after parsing attributes in process `syz.2.10044'. [ 1642.895485][ T2674] netlink: 'syz.3.10046': attribute type 3 has an invalid length. [ 1642.959723][ T2677] netlink: 188 bytes leftover after parsing attributes in process `syz.1.10047'. [ 1643.187311][ T939] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1643.200421][ T939] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1643.262654][ T934] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1643.280942][ T934] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1643.308295][ T2332] device veth0_vlan entered promiscuous mode [ 1643.324232][ T934] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1643.349415][ T934] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1643.380310][ T2332] device veth1_vlan entered promiscuous mode [ 1643.498399][ T938] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1643.522474][ T938] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1643.552175][ T938] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1643.611714][ T938] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1643.668045][ T2332] device veth0_macvtap entered promiscuous mode [ 1643.745003][ T2332] device veth1_macvtap entered promiscuous mode [ 1643.882543][ T2332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1643.895565][ T2332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1643.929305][ T2332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1643.958997][ T2332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1643.980834][ T2332] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1643.994815][ T938] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1644.030650][ T938] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1644.067434][ T938] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1644.076729][ T938] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1644.111668][ T2332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1644.144147][ T2332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1644.168362][ T2332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1644.184944][ T2332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1644.197049][ T2332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1644.209596][ T2332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1644.223206][ T2332] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1644.242788][ T934] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1644.262710][ T934] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1644.285087][ T2332] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1644.295247][ T2332] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1644.308044][ T2332] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1644.319003][ T2332] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1644.444972][ T936] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1644.470749][ T936] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1644.502064][ T936] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1644.541205][ T936] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1644.559155][ T936] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1644.569087][ T934] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1644.654864][ T2722] FAULT_INJECTION: forcing a failure. [ 1644.654864][ T2722] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1644.697610][ T2722] CPU: 0 PID: 2722 Comm: syz.3.10059 Not tainted syzkaller #0 [ 1644.705307][ T2722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1644.715477][ T2722] Call Trace: [ 1644.718863][ T2722] [ 1644.721894][ T2722] dump_stack_lvl+0x188/0x24e [ 1644.726688][ T2722] ? show_regs_print_info+0x12/0x12 [ 1644.732231][ T2722] ? load_image+0x410/0x410 [ 1644.736896][ T2722] ? __lock_acquire+0x7c40/0x7c40 [ 1644.741989][ T2722] should_fail_ex+0x390/0x4c0 [ 1644.746729][ T2722] _copy_from_user+0x2c/0x170 [ 1644.751623][ T2722] iovec_from_user+0x143/0x360 [ 1644.756694][ T2722] __import_iovec+0x6c/0x510 [ 1644.761668][ T2722] import_iovec+0x6f/0xa0 [ 1644.766295][ T2722] ___sys_sendmsg+0x252/0x360 [ 1644.771131][ T2722] ? __sys_sendmsg+0x2a0/0x2a0 [ 1644.776037][ T2722] ? __lock_acquire+0x7c40/0x7c40 [ 1644.781477][ T2722] __se_sys_sendmsg+0x1c3/0x2b0 [ 1644.786359][ T2722] ? ct_nmi_exit+0x145/0x1c0 [ 1644.791076][ T2722] ? __x64_sys_sendmsg+0x80/0x80 [ 1644.796076][ T2722] ? lockdep_hardirqs_on+0x94/0x140 [ 1644.801834][ T2722] do_syscall_64+0x4c/0xa0 [ 1644.806370][ T2722] ? clear_bhb_loop+0x60/0xb0 [ 1644.811531][ T2722] ? clear_bhb_loop+0x60/0xb0 [ 1644.816239][ T2722] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1644.822268][ T2722] RIP: 0033:0x7f5f1f59de99 [ 1644.826800][ T2722] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1644.846868][ T2722] RSP: 002b:00007f5f203d2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1644.855575][ T2722] RAX: ffffffffffffffda RBX: 00007f5f1f825fa0 RCX: 00007f5f1f59de99 [ 1644.863661][ T2722] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000006 [ 1644.871665][ T2722] RBP: 00007f5f203d2090 R08: 0000000000000000 R09: 0000000000000000 [ 1644.879755][ T2722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1644.888204][ T2722] R13: 00007f5f1f826038 R14: 00007f5f1f825fa0 R15: 00007fff865af498 [ 1644.896402][ T2722] [ 1646.823370][ T2768] net_ratelimit: 3319 callbacks suppressed [ 1646.823388][ T2768] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1646.863934][ T2768] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1646.873196][ T2768] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1646.882712][ T2768] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1646.891865][ T2768] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1646.901238][ T2768] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1646.910456][ T2768] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1646.919636][ T2768] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1646.928750][ T2768] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1646.937868][ T2768] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1650.035042][ T2869] netlink: 'syz.0.10101': attribute type 4 has an invalid length. [ 1650.051384][ T2870] netlink: 'syz.0.10101': attribute type 4 has an invalid length. [ 1650.109329][ T2870] netlink: 'syz.0.10101': attribute type 21 has an invalid length. [ 1650.272884][ T2874] netlink: 'syz.0.10101': attribute type 21 has an invalid length. [ 1651.726731][ T2909] netlink: 'syz.3.10114': attribute type 3 has an invalid length. [ 1651.740554][ T2909] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.10114'. [ 1652.277012][ T2923] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.10117'. [ 1652.286770][ T2923] netlink: 43 bytes leftover after parsing attributes in process `syz.2.10117'. [ 1652.297745][ T2918] device syzkaller0 entered promiscuous mode [ 1652.311686][ T2923] netlink: 'syz.2.10117': attribute type 10 has an invalid length. [ 1652.335312][ T2923] team0: Device hsr_slave_0 failed to register rx_handler [ 1658.849278][ T937] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1660.146471][ T3054] netlink: 'syz.0.10160': attribute type 3 has an invalid length. [ 1660.169469][ T3054] netlink: 199824 bytes leftover after parsing attributes in process `syz.0.10160'. [ 1660.447416][ T3067] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.10165'. [ 1660.828648][ T3076] bridge0: port 2(bridge_slave_1) entered disabled state [ 1660.836771][ T3076] bridge0: port 1(bridge_slave_0) entered disabled state [ 1661.145549][ T3089] netlink: 164 bytes leftover after parsing attributes in process `syz.0.10171'. [ 1661.588782][ T3097] netlink: 72 bytes leftover after parsing attributes in process `syz.1.10177'. [ 1662.425647][ T3128] FAULT_INJECTION: forcing a failure. [ 1662.425647][ T3128] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1662.521282][ T3128] CPU: 1 PID: 3128 Comm: syz.4.10188 Not tainted syzkaller #0 [ 1662.529002][ T3128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1662.539281][ T3128] Call Trace: [ 1662.542594][ T3128] [ 1662.545697][ T3128] dump_stack_lvl+0x188/0x24e [ 1662.550442][ T3128] ? show_regs_print_info+0x12/0x12 [ 1662.555782][ T3128] ? load_image+0x410/0x410 [ 1662.560359][ T3128] ? __lock_acquire+0x7c40/0x7c40 [ 1662.565482][ T3128] should_fail_ex+0x390/0x4c0 [ 1662.570241][ T3128] _copy_from_user+0x2c/0x170 [ 1662.575686][ T3128] vmemdup_user+0xa8/0x1d0 [ 1662.580180][ T3128] map_lookup_and_delete_elem+0x3d9/0x870 [ 1662.586072][ T3128] ? bpf_lsm_bpf+0x5/0x10 [ 1662.590476][ T3128] __sys_bpf+0x5cc/0x780 [ 1662.594969][ T3128] ? bpf_link_show_fdinfo+0x380/0x380 [ 1662.600536][ T3128] ? lock_chain_count+0x20/0x20 [ 1662.605654][ T3128] __x64_sys_bpf+0x78/0x90 [ 1662.610127][ T3128] do_syscall_64+0x4c/0xa0 [ 1662.614592][ T3128] ? clear_bhb_loop+0x60/0xb0 [ 1662.619324][ T3128] ? clear_bhb_loop+0x60/0xb0 [ 1662.624323][ T3128] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1662.630276][ T3128] RIP: 0033:0x7f581b19de99 [ 1662.634768][ T3128] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1662.655643][ T3128] RSP: 002b:00007f581c13b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1662.664368][ T3128] RAX: ffffffffffffffda RBX: 00007f581b425fa0 RCX: 00007f581b19de99 [ 1662.672567][ T3128] RDX: 0000000000000020 RSI: 0000200000000380 RDI: 0000000000000015 [ 1662.680763][ T3128] RBP: 00007f581c13b090 R08: 0000000000000000 R09: 0000000000000000 [ 1662.688879][ T3128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1662.697170][ T3128] R13: 00007f581b426038 R14: 00007f581b425fa0 R15: 00007ffd0130eec8 [ 1662.705417][ T3128] [ 1663.000572][ T3145] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.10193'. [ 1663.091463][ T3150] netlink: 132 bytes leftover after parsing attributes in process `syz.1.10195'. [ 1663.802282][ T3171] netlink: 'syz.2.10204': attribute type 10 has an invalid length. [ 1664.025059][ T3171] team0: Port device geneve1 added [ 1664.132755][ T3167] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10203'. [ 1664.220875][ T3182] netlink: 'syz.2.10207': attribute type 10 has an invalid length. [ 1664.266745][ T3182] netlink: 40 bytes leftover after parsing attributes in process `syz.2.10207'. [ 1664.297967][ T3182] device team0 entered promiscuous mode [ 1664.333244][ T3182] device team_slave_0 entered promiscuous mode [ 1664.353535][ T3182] device team_slave_1 entered promiscuous mode [ 1664.413912][ T3186] netlink: 'syz.2.10207': attribute type 11 has an invalid length. [ 1664.439312][ T3182] device geneve1 entered promiscuous mode [ 1664.454619][ T3186] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.10207'. [ 1664.462121][ T3182] bridge0: port 3(team0) entered blocking state [ 1664.543603][ T3182] bridge0: port 3(team0) entered disabled state [ 1664.589517][ T3191] netlink: 'syz.2.10207': attribute type 11 has an invalid length. [ 1664.655637][ T3182] bridge0: port 3(team0) entered blocking state [ 1664.662650][ T3182] bridge0: port 3(team0) entered forwarding state [ 1664.697536][ T3191] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.10207'. [ 1664.734855][ T3186] netlink: 'syz.2.10207': attribute type 21 has an invalid length. [ 1665.204058][ T3181] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1665.446419][ T3222] __nla_validate_parse: 1 callbacks suppressed [ 1665.446459][ T3222] netlink: 40 bytes leftover after parsing attributes in process `syz.3.10220'. [ 1665.746595][ T3234] net_ratelimit: 55 callbacks suppressed [ 1665.746637][ T3234] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1665.761927][ T3234] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1665.771597][ T3234] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1665.781209][ T3234] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1665.790811][ T3234] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1665.800103][ T3234] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1665.809431][ T3234] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1665.818849][ T3234] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1665.828483][ T3234] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1665.838434][ T3234] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1668.493681][ T3276] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10236'. [ 1668.494249][ T3273] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1668.509723][ T3276] netlink: 152 bytes leftover after parsing attributes in process `syz.0.10236'. [ 1668.553161][ T3273] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1668.573320][ T3273] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1669.321288][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1669.327962][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 1671.334241][ T3318] net_ratelimit: 5688 callbacks suppressed [ 1671.334280][ T3318] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1671.352415][ T3318] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1671.362604][ T3318] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1671.372193][ T3318] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1671.381736][ T3318] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1671.391735][ T3318] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1671.401257][ T3318] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1671.410890][ T3318] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1671.420460][ T3318] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1671.429929][ T3318] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1672.360435][ T3337] netlink: 'syz.4.10260': attribute type 21 has an invalid length. [ 1672.498932][ T3340] netlink: 152 bytes leftover after parsing attributes in process `syz.2.10261'. [ 1672.550959][ T3344] netlink: 40 bytes leftover after parsing attributes in process `syz.0.10262'. [ 1674.578194][ T3400] netlink: 'syz.1.10281': attribute type 21 has an invalid length. [ 1675.300224][ T3418] netlink: 'syz.1.10288': attribute type 21 has an invalid length. [ 1675.353617][ T3418] netlink: 156 bytes leftover after parsing attributes in process `syz.1.10288'. [ 1675.388850][ T3426] netlink: 'syz.3.10289': attribute type 3 has an invalid length. [ 1675.397035][ T3418] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10288'. [ 1675.453094][ T3426] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.10289'. [ 1675.902933][ T3427] device syzkaller0 entered promiscuous mode [ 1676.140109][ T3444] netlink: 'syz.1.10295': attribute type 3 has an invalid length. [ 1676.174577][ T3444] netlink: 132 bytes leftover after parsing attributes in process `syz.1.10295'. [ 1676.489320][ T3455] delete_channel: no stack [ 1676.495090][ T3455] delete_channel: no stack [ 1677.521179][ T3470] net_ratelimit: 7351 callbacks suppressed [ 1677.521209][ T3470] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1677.536768][ T3470] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1677.546467][ T3470] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1677.555949][ T3470] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1677.565370][ T3470] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1677.574630][ T3470] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1677.584205][ T3470] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1677.593740][ T3470] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1677.602905][ T3470] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1677.612377][ T3470] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1679.618846][ T3451] netlink: 'syz.2.10297': attribute type 21 has an invalid length. [ 1679.642597][ T3476] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1679.683226][ T3476] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1679.692864][ T3476] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1679.935243][ T3487] netlink: 'syz.1.10310': attribute type 3 has an invalid length. [ 1679.994927][ T3487] netlink: 'syz.1.10310': attribute type 8 has an invalid length. [ 1680.023818][ T3487] netlink: 'syz.1.10310': attribute type 7 has an invalid length. [ 1680.078430][ T3487] netlink: 194740 bytes leftover after parsing attributes in process `syz.1.10310'. [ 1681.522268][ T3521] netlink: 40 bytes leftover after parsing attributes in process `syz.1.10325'. [ 1682.252594][ T3541] netlink: 'syz.4.10331': attribute type 3 has an invalid length. [ 1682.346731][ T3541] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.10331'. [ 1682.450549][ T3547] netlink: 'syz.1.10329': attribute type 2 has an invalid length. [ 1682.501085][ T3547] netlink: 'syz.1.10329': attribute type 10 has an invalid length. [ 1682.858158][ T3563] net_ratelimit: 6649 callbacks suppressed [ 1682.858213][ T3563] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1682.874106][ T3563] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1682.883537][ T3563] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1682.892984][ T3563] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1682.902477][ T3563] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1682.912062][ T3563] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1682.921604][ T3563] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1682.931175][ T3563] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1682.940691][ T3563] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1682.950255][ T3563] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1684.477729][ T3603] netlink: 'syz.3.10347': attribute type 21 has an invalid length. [ 1684.710751][ T3607] netlink: 'syz.0.10349': attribute type 21 has an invalid length. [ 1685.012699][ T3614] netlink: 'syz.3.10350': attribute type 10 has an invalid length. [ 1685.053649][ T3614] netlink: 55 bytes leftover after parsing attributes in process `syz.3.10350'. [ 1686.669449][ T3650] netlink: 9275 bytes leftover after parsing attributes in process `syz.4.10359'. [ 1687.167330][ T3655] netlink: 14 bytes leftover after parsing attributes in process `syz.0.10361'. [ 1688.009260][ T3665] device syzkaller0 entered promiscuous mode [ 1688.027130][ T3674] FAULT_INJECTION: forcing a failure. [ 1688.027130][ T3674] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1688.095305][ T3674] CPU: 0 PID: 3674 Comm: syz.3.10366 Not tainted syzkaller #0 [ 1688.103104][ T3674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1688.114760][ T3674] Call Trace: [ 1688.118123][ T3674] [ 1688.121086][ T3674] dump_stack_lvl+0x188/0x24e [ 1688.126136][ T3674] ? show_regs_print_info+0x12/0x12 [ 1688.131616][ T3674] ? load_image+0x410/0x410 [ 1688.136180][ T3674] ? __lock_acquire+0x7c40/0x7c40 [ 1688.141672][ T3674] should_fail_ex+0x390/0x4c0 [ 1688.146415][ T3674] _copy_from_user+0x2c/0x170 [ 1688.151236][ T3674] iovec_from_user+0x143/0x360 [ 1688.156052][ T3674] __import_iovec+0x6c/0x510 [ 1688.160775][ T3674] import_iovec+0x6f/0xa0 [ 1688.165239][ T3674] ___sys_sendmsg+0x252/0x360 [ 1688.170201][ T3674] ? __sys_sendmsg+0x2a0/0x2a0 [ 1688.175051][ T3674] ? __lock_acquire+0x7c40/0x7c40 [ 1688.180445][ T3674] __se_sys_sendmsg+0x1c3/0x2b0 [ 1688.185428][ T3674] ? __x64_sys_sendmsg+0x80/0x80 [ 1688.191168][ T3674] ? lockdep_hardirqs_on+0x94/0x140 [ 1688.196685][ T3674] do_syscall_64+0x4c/0xa0 [ 1688.201273][ T3674] ? clear_bhb_loop+0x60/0xb0 [ 1688.206115][ T3674] ? clear_bhb_loop+0x60/0xb0 [ 1688.211369][ T3674] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1688.217736][ T3674] RIP: 0033:0x7f5f1f59de99 [ 1688.222498][ T3674] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1688.242575][ T3674] RSP: 002b:00007f5f203d2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1688.251112][ T3674] RAX: ffffffffffffffda RBX: 00007f5f1f825fa0 RCX: 00007f5f1f59de99 [ 1688.259395][ T3674] RDX: 0000000000000000 RSI: 0000200000000ac0 RDI: 0000000000000003 [ 1688.267599][ T3674] RBP: 00007f5f203d2090 R08: 0000000000000000 R09: 0000000000000000 [ 1688.275701][ T3674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1688.284169][ T3674] R13: 00007f5f1f826038 R14: 00007f5f1f825fa0 R15: 00007fff865af498 [ 1688.292193][ T3674] [ 1688.883105][ T3686] net_ratelimit: 4856 callbacks suppressed [ 1688.883132][ T3686] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1688.899586][ T3686] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1688.908958][ T3686] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1688.918226][ T3686] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1688.927564][ T3686] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1688.936741][ T3686] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1688.946157][ T3686] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1688.955655][ T3686] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1688.965425][ T3686] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1688.974999][ T3686] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1689.987660][ T938] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1692.784433][ T3700] netlink: 'syz.1.10376': attribute type 10 has an invalid length. [ 1692.792589][ T3700] netlink: 168 bytes leftover after parsing attributes in process `syz.1.10376'. [ 1692.832518][ T3702] netlink: 'syz.1.10376': attribute type 10 has an invalid length. [ 1692.870408][ T3702] team0: Port device wlan1 added [ 1693.909622][ T3724] net_ratelimit: 4791 callbacks suppressed [ 1693.909644][ T3724] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1693.924868][ T3724] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1693.934147][ T3724] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1693.943588][ T3724] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1693.952792][ T3724] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1693.962017][ T3724] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1693.971236][ T3724] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1693.980529][ T3724] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1693.989806][ T3724] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1693.999160][ T3724] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1694.266045][ T3743] netlink: 'syz.4.10390': attribute type 29 has an invalid length. [ 1694.307028][ T3743] netlink: 'syz.4.10390': attribute type 29 has an invalid length. [ 1694.344564][ T3743] netlink: 'syz.4.10390': attribute type 29 has an invalid length. [ 1695.400212][ T935] wlan1: Trigger new scan to find an IBSS to join [ 1695.696814][ T3783] netlink: 132 bytes leftover after parsing attributes in process `syz.0.10405'. [ 1697.085915][ T3823] netlink: 'syz.2.10417': attribute type 10 has an invalid length. [ 1700.344243][ T937] wlan1: Trigger new scan to find an IBSS to join [ 1700.441610][ T3868] device syzkaller0 entered promiscuous mode [ 1700.600426][ T3880] net_ratelimit: 5559 callbacks suppressed [ 1700.600467][ T3880] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1700.616352][ T3880] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1700.625729][ T3880] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1700.635462][ T3880] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1700.645123][ T3880] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1700.654840][ T3880] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1700.664328][ T3880] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1700.673728][ T3880] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1700.683273][ T3880] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1700.692764][ T3880] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1701.541239][ T938] wlan1: Creating new IBSS network, BSSID 8a:ef:66:e4:d0:5b [ 1701.722953][ T935] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1705.717830][ T3898] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1705.744291][ T3898] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1705.759489][ T3898] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1706.011046][ T3916] net_ratelimit: 1462 callbacks suppressed [ 1706.011066][ T3916] wlan1: mtu less than device minimum [ 1706.089915][ T3925] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1706.099530][ T3925] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1706.109272][ T3925] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1706.119190][ T3925] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1706.121673][ T3916] netlink: 'syz.0.10447': attribute type 2 has an invalid length. [ 1706.128977][ T3925] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1706.146792][ T3925] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1706.156549][ T3925] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1706.166447][ T3925] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1706.176307][ T3925] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1706.911627][ T3920] netlink: 'syz.0.10447': attribute type 10 has an invalid length. [ 1706.955933][ T3920] device bridge_slave_1 left promiscuous mode [ 1706.962292][ T3920] bridge0: port 2(bridge_slave_1) entered disabled state [ 1706.991365][ T3920] team0: Port device bridge_slave_1 added [ 1713.455959][ T4079] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1713.465125][ T4079] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1713.476271][ T4079] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1713.484725][ T4079] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1716.173619][ T4145] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1716.181735][ T4145] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1716.192257][ T4145] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1716.200696][ T4145] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1719.360299][ T4205] delete_channel: no stack [ 1719.366991][ T4205] delete_channel: no stack [ 1721.641100][ T4242] delete_channel: no stack [ 1721.652699][ T4242] delete_channel: no stack [ 1728.616199][ T4352] netlink: 'syz.3.10588': attribute type 27 has an invalid length. [ 1728.640104][ T4352] netlink: 'syz.3.10588': attribute type 25 has an invalid length. [ 1728.939041][ T4356] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10591'. [ 1730.363647][ T4381] netlink: 'syz.2.10598': attribute type 1 has an invalid length. [ 1730.398546][ T4381] netlink: 'syz.2.10598': attribute type 3 has an invalid length. [ 1730.417089][ T4381] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10598'. [ 1730.682457][ T4386] netlink: 'syz.2.10601': attribute type 39 has an invalid length. [ 1730.756440][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.763296][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 1731.560503][ T938] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1732.775967][T30939] Bluetooth: hci3: unexpected event 0x23 length: 15 > 13 [ 1732.799144][ T4408] netlink: 'syz.0.10610': attribute type 6 has an invalid length. [ 1734.150327][ T4428] device syzkaller0 entered promiscuous mode [ 1734.810910][ T4441] netlink: 'syz.3.10618': attribute type 10 has an invalid length. [ 1734.843936][ T4441] device veth1_macvtap left promiscuous mode [ 1736.199554][ T4453] netlink: 14 bytes leftover after parsing attributes in process `syz.3.10622'. [ 1736.240569][ T4453] net_ratelimit: 3511 callbacks suppressed [ 1736.240601][ T4453] openvswitch: netlink: Message has 6 unknown bytes. [ 1738.941472][ T4459] netlink: 128 bytes leftover after parsing attributes in process `syz.3.10624'. [ 1738.951073][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1738.960202][ T4459] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1742.735230][ T4511] netlink: 10 bytes leftover after parsing attributes in process `syz.1.10641'. [ 1744.363014][T30939] Bluetooth: hci4: unexpected event 0x23 length: 15 > 13 [ 1744.403374][ T4525] netlink: 'syz.4.10646': attribute type 6 has an invalid length. [ 1744.666022][ T4532] netlink: 'syz.3.10647': attribute type 3 has an invalid length. [ 1744.684358][ T4532] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.10647'. [ 1746.376520][ T4552] netlink: 156 bytes leftover after parsing attributes in process `syz.3.10656'. [ 1748.183111][T30939] Bluetooth: hci4: command 0x0406 tx timeout [ 1748.203383][ T4569] device sit0 entered promiscuous mode [ 1750.739938][ T4619] netlink: 'syz.1.10679': attribute type 21 has an invalid length. [ 1750.814530][ T4629] device sit0 entered promiscuous mode [ 1752.259835][ T4651] netlink: 60 bytes leftover after parsing attributes in process `syz.3.10692'. [ 1752.319711][ T4651] netlink: 60 bytes leftover after parsing attributes in process `syz.3.10692'. [ 1752.336337][ T4656] netlink: 60 bytes leftover after parsing attributes in process `syz.3.10692'. [ 1752.376028][ T4651] netlink: 60 bytes leftover after parsing attributes in process `syz.3.10692'. [ 1752.525639][ T4658] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.10693'. [ 1753.034061][ T4671] netlink: 'syz.0.10697': attribute type 2 has an invalid length. [ 1753.064089][ T4671] FAULT_INJECTION: forcing a failure. [ 1753.064089][ T4671] name failslab, interval 1, probability 0, space 0, times 0 [ 1753.124195][ T4671] CPU: 0 PID: 4671 Comm: syz.0.10697 Not tainted syzkaller #0 [ 1753.131863][ T4671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1753.142339][ T4671] Call Trace: [ 1753.146005][ T4671] [ 1753.149402][ T4671] dump_stack_lvl+0x188/0x24e [ 1753.154749][ T4671] ? show_regs_print_info+0x12/0x12 [ 1753.160256][ T4671] ? load_image+0x410/0x410 [ 1753.164800][ T4671] ? __might_sleep+0xd0/0xd0 [ 1753.169507][ T4671] ? __lock_acquire+0x7c40/0x7c40 [ 1753.175011][ T4671] ? _raw_spin_unlock_irqrestore+0xbc/0x120 [ 1753.181273][ T4671] ? trace_raw_output_percpu_destroy_chunk+0xc0/0xc0 [ 1753.189154][ T4671] should_fail_ex+0x390/0x4c0 [ 1753.193979][ T4671] should_failslab+0x5/0x20 [ 1753.198490][ T4671] slab_pre_alloc_hook+0x59/0x300 [ 1753.203782][ T4671] ? ovs_dp_cmd_new+0x460/0xb80 [ 1753.208799][ T4671] __kmem_cache_alloc_node+0x4f/0x270 [ 1753.214756][ T4671] ? ovs_dp_cmd_new+0x460/0xb80 [ 1753.219655][ T4671] kmalloc_trace+0x26/0xe0 [ 1753.224159][ T4671] ovs_dp_cmd_new+0x460/0xb80 [ 1753.229489][ T4671] ? destroy_dp_rcu+0xa0/0xa0 [ 1753.234554][ T4671] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 1753.241086][ T4671] genl_family_rcv_msg_doit+0x22f/0x350 [ 1753.246948][ T4671] ? end_current_label_crit_section+0x170/0x170 [ 1753.253751][ T4671] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1753.260256][ T4671] ? bpf_lsm_capable+0x5/0x10 [ 1753.265335][ T4671] ? security_capable+0x85/0xb0 [ 1753.270444][ T4671] genl_rcv_msg+0x601/0x790 [ 1753.275108][ T4671] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1753.281407][ T4671] ? genl_bind+0x360/0x360 [ 1753.286130][ T4671] ? destroy_dp_rcu+0xa0/0xa0 [ 1753.290937][ T4671] netlink_rcv_skb+0x1ef/0x440 [ 1753.295974][ T4671] ? genl_bind+0x360/0x360 [ 1753.300581][ T4671] ? netlink_ack+0x1160/0x1160 [ 1753.305762][ T4671] ? down_read+0x1a8/0x2d0 [ 1753.310255][ T4671] genl_rcv+0x24/0x40 [ 1753.314492][ T4671] netlink_unicast+0x7ad/0x920 [ 1753.319376][ T4671] netlink_sendmsg+0x8ad/0xbd0 [ 1753.324379][ T4671] ? netlink_getsockopt+0x550/0x550 [ 1753.329783][ T4671] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1753.336387][ T4671] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1753.341899][ T4671] ? security_socket_sendmsg+0x7c/0xa0 [ 1753.347511][ T4671] ? netlink_getsockopt+0x550/0x550 [ 1753.352790][ T4671] ____sys_sendmsg+0x5ed/0x9a0 [ 1753.357593][ T4671] ? __sys_sendmsg_sock+0x30/0x30 [ 1753.362637][ T4671] ? __import_iovec+0x306/0x510 [ 1753.367727][ T4671] ? import_iovec+0x6f/0xa0 [ 1753.372560][ T4671] ___sys_sendmsg+0x2a2/0x360 [ 1753.377266][ T4671] ? __sys_sendmsg+0x2a0/0x2a0 [ 1753.382147][ T4671] ? ktime_get+0x7b/0x270 [ 1753.386776][ T4671] __se_sys_sendmsg+0x1c3/0x2b0 [ 1753.392016][ T4671] ? ct_nmi_exit+0x145/0x1c0 [ 1753.396956][ T4671] ? __x64_sys_sendmsg+0x80/0x80 [ 1753.401959][ T4671] ? lockdep_hardirqs_on+0x94/0x140 [ 1753.407729][ T4671] do_syscall_64+0x4c/0xa0 [ 1753.412405][ T4671] ? clear_bhb_loop+0x60/0xb0 [ 1753.417577][ T4671] ? clear_bhb_loop+0x60/0xb0 [ 1753.422751][ T4671] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1753.429045][ T4671] RIP: 0033:0x7ff020b9de99 [ 1753.433661][ T4671] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1753.454002][ T4671] RSP: 002b:00007ff021ae9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1753.463000][ T4671] RAX: ffffffffffffffda RBX: 00007ff020e25fa0 RCX: 00007ff020b9de99 [ 1753.471405][ T4671] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 1753.479885][ T4671] RBP: 00007ff021ae9090 R08: 0000000000000000 R09: 0000000000000000 [ 1753.488536][ T4671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1753.497069][ T4671] R13: 00007ff020e26038 R14: 00007ff020e25fa0 R15: 00007ffc08c0a3c8 [ 1753.505458][ T4671] [ 1754.246167][ T4683] device sit0 entered promiscuous mode [ 1755.477553][ T4724] FAULT_INJECTION: forcing a failure. [ 1755.477553][ T4724] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1755.502039][ T4724] CPU: 0 PID: 4724 Comm: syz.3.10714 Not tainted syzkaller #0 [ 1755.509750][ T4724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1755.520365][ T4724] Call Trace: [ 1755.523679][ T4724] [ 1755.526733][ T4724] dump_stack_lvl+0x188/0x24e [ 1755.531606][ T4724] ? show_regs_print_info+0x12/0x12 [ 1755.536887][ T4724] ? load_image+0x410/0x410 [ 1755.541434][ T4724] ? __lock_acquire+0x7c40/0x7c40 [ 1755.546515][ T4724] should_fail_ex+0x390/0x4c0 [ 1755.551333][ T4724] _copy_from_user+0x2c/0x170 [ 1755.556173][ T4724] iovec_from_user+0x143/0x360 [ 1755.561035][ T4724] __import_iovec+0x6c/0x510 [ 1755.565678][ T4724] import_iovec+0x6f/0xa0 [ 1755.570038][ T4724] ___sys_sendmsg+0x252/0x360 [ 1755.574999][ T4724] ? __sys_sendmsg+0x2a0/0x2a0 [ 1755.579791][ T4724] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 1755.585659][ T4724] __se_sys_sendmsg+0x1c3/0x2b0 [ 1755.590920][ T4724] ? __x64_sys_sendmsg+0x80/0x80 [ 1755.595879][ T4724] ? syscall_enter_from_user_mode+0x2a/0x80 [ 1755.601885][ T4724] do_syscall_64+0x4c/0xa0 [ 1755.606423][ T4724] ? clear_bhb_loop+0x60/0xb0 [ 1755.611118][ T4724] ? clear_bhb_loop+0x60/0xb0 [ 1755.615802][ T4724] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1755.621732][ T4724] RIP: 0033:0x7f5f1f59de99 [ 1755.626258][ T4724] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1755.646663][ T4724] RSP: 002b:00007f5f203d2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1755.655350][ T4724] RAX: ffffffffffffffda RBX: 00007f5f1f825fa0 RCX: 00007f5f1f59de99 [ 1755.663507][ T4724] RDX: 0000000000000000 RSI: 00002000000006c0 RDI: 0000000000000004 [ 1755.671470][ T4724] RBP: 00007f5f203d2090 R08: 0000000000000000 R09: 0000000000000000 [ 1755.679555][ T4724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1755.687575][ T4724] R13: 00007f5f1f826038 R14: 00007f5f1f825fa0 R15: 00007fff865af498 [ 1755.695595][ T4724] [ 1756.916400][ T4753] device sit0 entered promiscuous mode [ 1757.068767][ T4758] netlink: 188 bytes leftover after parsing attributes in process `syz.1.10724'. [ 1758.288365][ T4788] netlink: 'syz.0.10733': attribute type 2 has an invalid length. [ 1758.529147][ T4789] netlink: 'syz.4.10732': attribute type 7 has an invalid length. [ 1758.677141][ T4789] netlink: 191184 bytes leftover after parsing attributes in process `syz.4.10732'. [ 1759.641166][ T4816] netlink: 39415 bytes leftover after parsing attributes in process `syz.3.10742'. [ 1759.914675][ T4828] netlink: 'syz.0.10745': attribute type 12 has an invalid length. [ 1759.962483][ T4828] netlink: 132 bytes leftover after parsing attributes in process `syz.0.10745'. [ 1760.116846][ T4833] netlink: 'syz.4.10747': attribute type 9 has an invalid length. [ 1760.133228][ T4833] netlink: 399 bytes leftover after parsing attributes in process `syz.4.10747'. [ 1760.485342][ T4840] netlink: 'syz.2.10748': attribute type 7 has an invalid length. [ 1760.507069][ T4840] netlink: 191184 bytes leftover after parsing attributes in process `syz.2.10748'. [ 1762.348413][ T4879] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1762.355992][ T4879] IPv6: NLM_F_CREATE should be set when creating new route [ 1762.363429][ T4879] IPv6: NLM_F_CREATE should be set when creating new route [ 1762.370702][ T4879] IPv6: NLM_F_CREATE should be set when creating new route [ 1763.821616][ T4901] netlink: 'syz.2.10769': attribute type 21 has an invalid length. [ 1763.850923][ T4901] netlink: 14548 bytes leftover after parsing attributes in process `syz.2.10769'. [ 1766.530095][ T4951] netlink: 'syz.4.10785': attribute type 3 has an invalid length. [ 1766.542869][ T4951] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.10785'. [ 1769.467255][ T4955] device syzkaller0 entered promiscuous mode [ 1769.491013][ T4971] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1769.523910][ T4971] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1769.547142][ T4971] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1773.883884][ T5015] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1773.884171][ T5022] netlink: 'syz.2.10807': attribute type 10 has an invalid length. [ 1773.893676][ T5015] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1773.893703][ T5015] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1773.985390][ T5023] netlink: 14601 bytes leftover after parsing attributes in process `syz.2.10807'. [ 1774.518098][ T5043] netlink: 'syz.1.10813': attribute type 10 has an invalid length. [ 1774.559034][ T5043] netlink: 40 bytes leftover after parsing attributes in process `syz.1.10813'. [ 1774.589083][ T5043] device team0 entered promiscuous mode [ 1774.608891][ T5043] device team_slave_0 entered promiscuous mode [ 1774.622302][ T5043] device team_slave_1 entered promiscuous mode [ 1774.630275][ T5043] device bridge_slave_1 entered promiscuous mode [ 1774.638641][ T5043] device wlan1 entered promiscuous mode [ 1774.651818][ T5043] bridge0: port 2(team0) entered blocking state [ 1774.660901][ T5043] bridge0: port 2(team0) entered disabled state [ 1774.672039][ T5043] bridge0: port 2(team0) entered blocking state [ 1774.678626][ T5043] bridge0: port 2(team0) entered forwarding state [ 1774.737101][ T5049] FAULT_INJECTION: forcing a failure. [ 1774.737101][ T5049] name failslab, interval 1, probability 0, space 0, times 0 [ 1774.756121][ T5049] CPU: 0 PID: 5049 Comm: syz.2.10815 Not tainted syzkaller #0 [ 1774.763795][ T5049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1774.774272][ T5049] Call Trace: [ 1774.777597][ T5049] [ 1774.780552][ T5049] dump_stack_lvl+0x188/0x24e [ 1774.785267][ T5049] ? show_regs_print_info+0x12/0x12 [ 1774.790592][ T5049] ? load_image+0x410/0x410 [ 1774.795547][ T5049] ? __lock_acquire+0x7c40/0x7c40 [ 1774.800621][ T5049] ? percpu_ref_put+0x12/0x100 [ 1774.805625][ T5049] should_fail_ex+0x390/0x4c0 [ 1774.810509][ T5049] should_failslab+0x5/0x20 [ 1774.815221][ T5049] slab_pre_alloc_hook+0x59/0x300 [ 1774.820720][ T5049] kmem_cache_alloc+0x56/0x2f0 [ 1774.825649][ T5049] ? anon_vma_fork+0xe1/0x520 [ 1774.830495][ T5049] anon_vma_fork+0xe1/0x520 [ 1774.835310][ T5049] ? dup_userfaultfd+0x131/0x630 [ 1774.840397][ T5049] ? vm_area_dup+0x11f/0x1a0 [ 1774.845212][ T5049] copy_mm+0xc1d/0x1680 [ 1774.849473][ T5049] ? copy_signal+0x640/0x640 [ 1774.854195][ T5049] ? lockdep_init_map_type+0x98/0x8d0 [ 1774.859996][ T5049] ? __init_rwsem+0x11e/0x160 [ 1774.865263][ T5049] ? copy_signal+0x51f/0x640 [ 1774.870541][ T5049] copy_process+0x19a6/0x40c0 [ 1774.875472][ T5049] ? copy_process+0x974/0x40c0 [ 1774.880936][ T5049] ? idle_dummy+0x10/0x10 [ 1774.885715][ T5049] kernel_clone+0x24b/0x900 [ 1774.890351][ T5049] ? ksys_write+0x1ce/0x260 [ 1774.895019][ T5049] ? create_io_thread+0x170/0x170 [ 1774.900114][ T5049] __x64_sys_clone+0x1a7/0x220 [ 1774.905009][ T5049] ? __fget_files+0x3fc/0x460 [ 1774.909790][ T5049] ? __ia32_sys_vfork+0x140/0x140 [ 1774.914924][ T5049] ? lock_chain_count+0x20/0x20 [ 1774.919844][ T5049] ? lockdep_hardirqs_on+0x94/0x140 [ 1774.925144][ T5049] do_syscall_64+0x4c/0xa0 [ 1774.929601][ T5049] ? clear_bhb_loop+0x60/0xb0 [ 1774.934300][ T5049] ? clear_bhb_loop+0x60/0xb0 [ 1774.939128][ T5049] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1774.945115][ T5049] RIP: 0033:0x7fcb2119de99 [ 1774.949585][ T5049] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1774.969504][ T5049] RSP: 002b:00007fcb2206efd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1774.978086][ T5049] RAX: ffffffffffffffda RBX: 00007fcb21425fa0 RCX: 00007fcb2119de99 [ 1774.986102][ T5049] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020800000 [ 1774.994108][ T5049] RBP: 00007fcb2206f090 R08: 0000000000000000 R09: 0000000000000000 [ 1775.002303][ T5049] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1775.010481][ T5049] R13: 00007fcb21426038 R14: 00007fcb21425fa0 R15: 00007ffc18d15dd8 [ 1775.018526][ T5049] [ 1777.454439][ T5088] netlink: 'syz.2.10829': attribute type 3 has an invalid length. [ 1777.493594][ T5088] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.10829'. [ 1780.121475][ T5169] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.10858'. [ 1780.146934][ T5169] netlink: 43 bytes leftover after parsing attributes in process `syz.2.10858'. [ 1780.181472][ T5169] netlink: 'syz.2.10858': attribute type 10 has an invalid length. [ 1780.201518][ T5169] team0: Device hsr_slave_0 failed to register rx_handler [ 1780.842312][ T5182] FAULT_INJECTION: forcing a failure. [ 1780.842312][ T5182] name failslab, interval 1, probability 0, space 0, times 0 [ 1780.883246][ T5182] CPU: 1 PID: 5182 Comm: syz.2.10864 Not tainted syzkaller #0 [ 1780.890970][ T5182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1780.901067][ T5182] Call Trace: [ 1780.904392][ T5182] [ 1780.907346][ T5182] dump_stack_lvl+0x188/0x24e [ 1780.912058][ T5182] ? show_regs_print_info+0x12/0x12 [ 1780.917510][ T5182] ? load_image+0x410/0x410 [ 1780.922081][ T5182] ? __might_sleep+0xd0/0xd0 [ 1780.926726][ T5182] ? __lock_acquire+0x7c40/0x7c40 [ 1780.931795][ T5182] should_fail_ex+0x390/0x4c0 [ 1780.936867][ T5182] should_failslab+0x5/0x20 [ 1780.941517][ T5182] slab_pre_alloc_hook+0x59/0x300 [ 1780.946618][ T5182] kmem_cache_alloc_node+0x5a/0x310 [ 1780.951968][ T5182] ? __alloc_skb+0xf9/0x7d0 [ 1780.956526][ T5182] __alloc_skb+0xf9/0x7d0 [ 1780.960903][ T5182] netlink_sendmsg+0x654/0xbd0 [ 1780.965970][ T5182] ? netlink_getsockopt+0x550/0x550 [ 1780.971201][ T5182] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1780.976787][ T5182] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1780.982105][ T5182] ? security_socket_sendmsg+0x7c/0xa0 [ 1780.987703][ T5182] ? netlink_getsockopt+0x550/0x550 [ 1780.992955][ T5182] ____sys_sendmsg+0x5ed/0x9a0 [ 1780.998199][ T5182] ? __sys_sendmsg_sock+0x30/0x30 [ 1781.003802][ T5182] ? __import_iovec+0x306/0x510 [ 1781.009149][ T5182] ? import_iovec+0x6f/0xa0 [ 1781.013892][ T5182] ___sys_sendmsg+0x2a2/0x360 [ 1781.018896][ T5182] ? __sys_sendmsg+0x2a0/0x2a0 [ 1781.023848][ T5182] ? trace_call_bpf+0xbf/0x6b0 [ 1781.028861][ T5182] __se_sys_sendmsg+0x1c3/0x2b0 [ 1781.033762][ T5182] ? perf_trace_preemptirq_template+0x268/0x320 [ 1781.040041][ T5182] ? __x64_sys_sendmsg+0x80/0x80 [ 1781.045199][ T5182] ? lockdep_hardirqs_on+0x94/0x140 [ 1781.050510][ T5182] do_syscall_64+0x4c/0xa0 [ 1781.054947][ T5182] ? clear_bhb_loop+0x60/0xb0 [ 1781.059668][ T5182] ? clear_bhb_loop+0x60/0xb0 [ 1781.064526][ T5182] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1781.070487][ T5182] RIP: 0033:0x7fcb2119de99 [ 1781.075410][ T5182] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1781.095418][ T5182] RSP: 002b:00007fcb2206f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1781.104528][ T5182] RAX: ffffffffffffffda RBX: 00007fcb21425fa0 RCX: 00007fcb2119de99 [ 1781.112693][ T5182] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000006 [ 1781.121058][ T5182] RBP: 00007fcb2206f090 R08: 0000000000000000 R09: 0000000000000000 [ 1781.129343][ T5182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1781.137714][ T5182] R13: 00007fcb21426038 R14: 00007fcb21425fa0 R15: 00007ffc18d15dd8 [ 1781.146010][ T5182] [ 1782.724029][ T5225] netlink: 'syz.4.10878': attribute type 19 has an invalid length. [ 1782.732458][ T5225] netlink: 156 bytes leftover after parsing attributes in process `syz.4.10878'. [ 1784.238615][ T5263] netlink: 'syz.2.10892': attribute type 29 has an invalid length. [ 1784.252053][ T5263] netlink: 'syz.2.10892': attribute type 29 has an invalid length. [ 1784.282303][ T5263] netlink: 'syz.2.10892': attribute type 29 has an invalid length. [ 1784.311132][ T5263] netlink: 'syz.2.10892': attribute type 29 has an invalid length. [ 1784.378557][ T5263] netlink: 'syz.2.10892': attribute type 29 has an invalid length. [ 1788.428609][ T5337] IPv6: …: Disabled Multicast RS [ 1788.920976][ T5349] netlink: 'syz.1.10924': attribute type 3 has an invalid length. [ 1788.953248][ T5349] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.10924'. [ 1792.194309][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1792.200904][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 1793.132434][ T5440] netlink: 'syz.1.10958': attribute type 12 has an invalid length. [ 1793.162500][ T5440] netlink: 132 bytes leftover after parsing attributes in process `syz.1.10958'. [ 1794.909485][ T5471] netlink: 40 bytes leftover after parsing attributes in process `syz.1.10967'. [ 1797.783524][ T5526] netlink: 152 bytes leftover after parsing attributes in process `syz.0.10985'. [ 1799.369881][ T5569] netlink: 'syz.1.10999': attribute type 21 has an invalid length. [ 1800.606312][ T5610] device syzkaller0 entered promiscuous mode [ 1806.036018][ T5699] netlink: 'syz.1.11044': attribute type 1 has an invalid length. [ 1806.066208][ T5699] netlink: 'syz.1.11044': attribute type 4 has an invalid length. [ 1806.095781][ T5699] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.11044'. [ 1806.124103][ T5704] wlan1: mtu less than device minimum [ 1806.188983][ T5704] netlink: 'syz.4.11045': attribute type 2 has an invalid length. [ 1806.230537][ T5704] netlink: 14 bytes leftover after parsing attributes in process `syz.4.11045'. [ 1806.249729][ T5704] netlink: 'syz.4.11045': attribute type 10 has an invalid length. [ 1806.287264][ T5704] bridge0: port 2(bridge_slave_1) entered disabled state [ 1806.312373][ T5704] device bridge_slave_1 left promiscuous mode [ 1806.341328][ T5704] bridge0: port 2(bridge_slave_1) entered disabled state [ 1806.522411][ T5704] team0: Port device bridge_slave_1 added [ 1808.301797][ T5757] netlink: 'syz.1.11063': attribute type 21 has an invalid length. [ 1808.494846][ T5765] netlink: 14 bytes leftover after parsing attributes in process `syz.4.11065'. [ 1808.537890][ T5765] openvswitch: netlink: Message has 6 unknown bytes. [ 1811.803499][ T5831] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.11088'. [ 1811.821162][ T5831] netlink: 14 bytes leftover after parsing attributes in process `syz.0.11088'. [ 1811.841820][ T5831] openvswitch: netlink: Message has 6 unknown bytes. [ 1818.151618][ T5952] netlink: 14548 bytes leftover after parsing attributes in process `syz.4.11127'. [ 1818.988162][ T5971] netlink: 177648 bytes leftover after parsing attributes in process `syz.0.11136'. [ 1820.022740][ T5986] netlink: 'syz.2.11141': attribute type 27 has an invalid length. [ 1820.035046][ T5986] netlink: 'syz.2.11141': attribute type 25 has an invalid length. [ 1822.455443][ T6026] netlink: 152 bytes leftover after parsing attributes in process `syz.3.11154'. [ 1822.809579][ T6037] netlink: 14 bytes leftover after parsing attributes in process `syz.4.11158'. [ 1822.883248][ T6037] openvswitch: netlink: Message has 6 unknown bytes. [ 1823.980631][ T6057] netlink: 14 bytes leftover after parsing attributes in process `syz.0.11162'. [ 1824.008336][ T6057] openvswitch: netlink: Message has 6 unknown bytes. [ 1824.275910][ T6059] FAULT_INJECTION: forcing a failure. [ 1824.275910][ T6059] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1824.356622][ T6059] CPU: 0 PID: 6059 Comm: syz.2.11164 Not tainted syzkaller #0 [ 1824.364180][ T6059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1824.374303][ T6059] Call Trace: [ 1824.377643][ T6059] [ 1824.380629][ T6059] dump_stack_lvl+0x188/0x24e [ 1824.385385][ T6059] ? show_regs_print_info+0x12/0x12 [ 1824.390736][ T6059] ? load_image+0x410/0x410 [ 1824.395484][ T6059] ? __lock_acquire+0x7c40/0x7c40 [ 1824.400679][ T6059] should_fail_ex+0x390/0x4c0 [ 1824.405526][ T6059] _copy_from_user+0x2c/0x170 [ 1824.410558][ T6059] iovec_from_user+0x143/0x360 [ 1824.415485][ T6059] __import_iovec+0x6c/0x510 [ 1824.420157][ T6059] import_iovec+0x6f/0xa0 [ 1824.424551][ T6059] ___sys_sendmsg+0x252/0x360 [ 1824.429304][ T6059] ? __sys_sendmsg+0x2a0/0x2a0 [ 1824.434276][ T6059] ? __lock_acquire+0x7c40/0x7c40 [ 1824.439409][ T6059] __se_sys_sendmsg+0x1c3/0x2b0 [ 1824.444405][ T6059] ? ct_nmi_exit+0x145/0x1c0 [ 1824.449137][ T6059] ? __x64_sys_sendmsg+0x80/0x80 [ 1824.454145][ T6059] ? lockdep_hardirqs_on+0x94/0x140 [ 1824.459375][ T6059] do_syscall_64+0x4c/0xa0 [ 1824.463798][ T6059] ? clear_bhb_loop+0x60/0xb0 [ 1824.468568][ T6059] ? clear_bhb_loop+0x60/0xb0 [ 1824.473265][ T6059] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1824.479169][ T6059] RIP: 0033:0x7fcb2119de99 [ 1824.483620][ T6059] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1824.503670][ T6059] RSP: 002b:00007fcb2206f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1824.512272][ T6059] RAX: ffffffffffffffda RBX: 00007fcb21425fa0 RCX: 00007fcb2119de99 [ 1824.520244][ T6059] RDX: 0000000000000000 RSI: 0000200000000ac0 RDI: 0000000000000004 [ 1824.528234][ T6059] RBP: 00007fcb2206f090 R08: 0000000000000000 R09: 0000000000000000 [ 1824.536209][ T6059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1824.544211][ T6059] R13: 00007fcb21426038 R14: 00007fcb21425fa0 R15: 00007ffc18d15dd8 [ 1824.552236][ T6059] [ 1825.747299][ T6095] netlink: 'syz.3.11177': attribute type 3 has an invalid length. [ 1825.785438][ T6095] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.11177'. [ 1826.107654][ T6100] netlink: 128 bytes leftover after parsing attributes in process `syz.4.11181'. [ 1826.136025][ T6100] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1826.199522][ T6100] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1829.578470][ T6180] netlink: 10 bytes leftover after parsing attributes in process `syz.4.11210'. [ 1829.736138][ T6193] netlink: 144 bytes leftover after parsing attributes in process `syz.4.11214'. [ 1830.697614][ T6209] netlink: 'syz.0.11221': attribute type 27 has an invalid length. [ 1830.723468][ T6209] netlink: 164 bytes leftover after parsing attributes in process `syz.0.11221'. [ 1831.445956][ T6229] netlink: 'syz.3.11229': attribute type 2 has an invalid length. [ 1831.455395][ T6229] netlink: 199848 bytes leftover after parsing attributes in process `syz.3.11229'. [ 1831.612757][ T6233] netlink: 14 bytes leftover after parsing attributes in process `syz.2.11230'. [ 1831.638944][ T6233] openvswitch: netlink: Message has 6 unknown bytes. [ 1832.541494][ T6243] netlink: 156 bytes leftover after parsing attributes in process `syz.4.11235'. [ 1833.304859][ T4283] Bluetooth: hci1: ISO packet for unknown connection handle 2622 [ 1833.810041][ T6272] netlink: 'syz.0.11247': attribute type 10 has an invalid length. [ 1833.922312][ T6277] netlink: 'syz.1.11248': attribute type 2 has an invalid length. [ 1833.938394][ T6277] netlink: 199848 bytes leftover after parsing attributes in process `syz.1.11248'. [ 1834.416273][ T6272] team0 (unregistering): Port device team_slave_0 removed [ 1834.566213][ T6272] team0 (unregistering): Port device team_slave_1 removed [ 1834.629175][ T6272] team0 (unregistering): Port device bridge0 removed [ 1834.710141][ T6272] team0 (unregistering): Port device bridge_slave_1 removed [ 1834.805166][ T6279] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1835.571434][ T6327] netlink: 'syz.1.11265': attribute type 27 has an invalid length. [ 1835.583300][ T6327] netlink: 164 bytes leftover after parsing attributes in process `syz.1.11265'. [ 1836.044854][ T6336] netlink: 'syz.2.11268': attribute type 2 has an invalid length. [ 1836.083094][ T6336] netlink: 199848 bytes leftover after parsing attributes in process `syz.2.11268'. [ 1836.158349][ T6340] netlink: 22 bytes leftover after parsing attributes in process `syz.0.11271'. [ 1836.337555][ T6346] netlink: 'syz.0.11275': attribute type 3 has an invalid length. [ 1836.366301][ T6346] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.11275'. [ 1836.409854][ T6346] netlink: 'syz.0.11275': attribute type 3 has an invalid length. [ 1836.418406][ T6346] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.11275'. [ 1836.444964][ T6346] netlink: 'syz.0.11275': attribute type 3 has an invalid length. [ 1836.465313][ T6346] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.11275'. [ 1836.507635][ T6351] netlink: 14 bytes leftover after parsing attributes in process `syz.0.11275'. [ 1836.536642][ T6351] openvswitch: netlink: Message has 6 unknown bytes. [ 1838.058363][ T6384] netlink: 'syz.4.11285': attribute type 29 has an invalid length. [ 1838.096177][ T6384] netlink: 'syz.4.11285': attribute type 29 has an invalid length. [ 1838.158061][ T6382] netlink: 'syz.4.11285': attribute type 29 has an invalid length. [ 1838.306299][ T6393] netlink: 'syz.1.11288': attribute type 1 has an invalid length. [ 1838.348707][ T6393] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11288'. [ 1838.430457][ T6400] netlink: 'syz.0.11293': attribute type 4 has an invalid length. [ 1838.481299][ T6400] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.11293'. [ 1838.541829][ T6400] sctp: [Deprecated]: syz.0.11293 (pid 6400) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1838.541829][ T6400] Use struct sctp_sack_info instead [ 1840.744787][ T6441] netlink: 'syz.1.11306': attribute type 10 has an invalid length. [ 1840.768246][ T6445] netlink: 'syz.4.11307': attribute type 2 has an invalid length. [ 1840.862366][ T6441] device wg1 entered promiscuous mode [ 1840.883432][ T6441] team0: Device wg1 is of different type [ 1841.484760][ T6470] netlink: 'syz.4.11314': attribute type 13 has an invalid length. [ 1841.505683][ T6470] netlink: 152 bytes leftover after parsing attributes in process `syz.4.11314'. [ 1842.449146][ T6470] erspan0: refused to change device tx_queue_len [ 1842.456779][ T6470] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 1842.490640][ T6472] netlink: 3 bytes leftover after parsing attributes in process `syz.4.11314'. [ 1844.445512][ T6541] netlink: 'syz.2.11336': attribute type 4 has an invalid length. [ 1844.454583][ T6541] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.11336'. [ 1844.470022][ T6541] sctp: [Deprecated]: syz.2.11336 (pid 6541) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1844.470022][ T6541] Use struct sctp_sack_info instead [ 1847.163061][ T6579] netlink: 11262 bytes leftover after parsing attributes in process `syz.1.11349'. [ 1847.886869][ T935] tipc: Subscription rejected, illegal request [ 1849.415227][ T6641] delete_channel: no stack [ 1850.995012][ T6676] netlink: 'syz.2.11385': attribute type 2 has an invalid length. [ 1851.056519][ T6678] netlink: 'syz.4.11386': attribute type 15 has an invalid length. [ 1851.067384][ T6678] netlink: 'syz.4.11386': attribute type 7 has an invalid length. [ 1851.086202][ T6680] netlink: 15039 bytes leftover after parsing attributes in process `syz.2.11387'. [ 1851.090972][ T6678] netlink: 52 bytes leftover after parsing attributes in process `syz.4.11386'. [ 1851.113576][ T6680] netlink: 'syz.2.11387': attribute type 2 has an invalid length. [ 1851.122077][ T6680] netlink: 193088 bytes leftover after parsing attributes in process `syz.2.11387'. [ 1852.748887][ T6722] netlink: 'syz.1.11401': attribute type 21 has an invalid length. [ 1852.793442][ T6722] netlink: 'syz.1.11401': attribute type 22 has an invalid length. [ 1852.807108][ T6722] netlink: 'syz.1.11401': attribute type 22 has an invalid length. [ 1852.822716][ T6722] netlink: 'syz.1.11401': attribute type 15 has an invalid length. [ 1852.842914][ T6722] netlink: 6124 bytes leftover after parsing attributes in process `syz.1.11401'. [ 1853.062198][ T957] tipc: Subscription rejected, illegal request [ 1853.327558][ T6741] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1853.640802][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.647281][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 1854.023886][ T6737] delete_channel: no stack [ 1854.849598][ T940] tipc: Subscription rejected, illegal request [ 1859.618228][ T6812] netlink: 'syz.2.11437': attribute type 10 has an invalid length. [ 1859.628369][ T6813] netlink: 'syz.2.11437': attribute type 1 has an invalid length. [ 1859.683511][ T6813] netlink: 'syz.2.11437': attribute type 4 has an invalid length. [ 1859.691458][ T6813] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.11437'. [ 1860.838953][ T6825] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1860.846871][ T6825] IPv6: NLM_F_CREATE should be set when creating new route [ 1860.855344][ T6825] IPv6: NLM_F_CREATE should be set when creating new route [ 1860.863050][ T6825] IPv6: NLM_F_CREATE should be set when creating new route [ 1860.925401][ T6828] netlink: 'syz.1.11443': attribute type 2 has an invalid length. [ 1860.956947][ T6828] netlink: 60 bytes leftover after parsing attributes in process `syz.1.11443'. [ 1861.020880][ T6833] netlink: 'syz.3.11445': attribute type 3 has an invalid length. [ 1861.058341][ T6833] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.11445'. [ 1862.250050][ T6869] netlink: 'syz.2.11459': attribute type 4 has an invalid length. [ 1862.932323][ T6884] netlink: 'syz.1.11462': attribute type 1 has an invalid length. [ 1862.956799][ T6884] netlink: 'syz.1.11462': attribute type 1 has an invalid length. [ 1862.974505][ T6884] netlink: 116376 bytes leftover after parsing attributes in process `syz.1.11462'. [ 1863.071873][ T6886] device syzkaller0 entered promiscuous mode [ 1871.036885][ T7004] netlink: 212908 bytes leftover after parsing attributes in process `syz.3.11510'. [ 1871.061825][ T7004] netlink: zone id is out of range [ 1872.544912][ T7057] netlink: 212908 bytes leftover after parsing attributes in process `syz.1.11530'. [ 1872.560375][ T7057] netlink: zone id is out of range [ 1873.520049][ T7080] netlink: 'syz.3.11538': attribute type 11 has an invalid length. [ 1873.585631][ T7080] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.11538'. [ 1874.355460][ T7078] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1874.365830][ T7096] netlink: 212908 bytes leftover after parsing attributes in process `syz.0.11546'. [ 1874.390105][ T7096] netlink: zone id is out of range [ 1877.506069][ T7125] netlink: 132 bytes leftover after parsing attributes in process `syz.4.11557'. [ 1878.783609][ T7170] netlink: 132 bytes leftover after parsing attributes in process `syz.0.11572'. [ 1880.471143][ T7197] netlink: 132 bytes leftover after parsing attributes in process `syz.1.11584'. [ 1880.847439][ T7204] netlink: 64 bytes leftover after parsing attributes in process `syz.0.11585'. [ 1882.065777][ T7241] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.11599'. [ 1882.105432][ T7241] netlink: 43 bytes leftover after parsing attributes in process `syz.4.11599'. [ 1882.128029][ T7241] netlink: 'syz.4.11599': attribute type 10 has an invalid length. [ 1882.149689][ T7241] team0: Device hsr_slave_0 failed to register rx_handler [ 1882.274194][ T7247] netlink: 132 bytes leftover after parsing attributes in process `syz.2.11601'. [ 1883.932708][ T7286] netlink: 'syz.1.11616': attribute type 3 has an invalid length. [ 1883.941719][ T7286] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.11616'. [ 1883.988915][ T7290] netlink: 132 bytes leftover after parsing attributes in process `syz.0.11617'. [ 1885.229908][ T7322] netlink: 132 bytes leftover after parsing attributes in process `syz.1.11632'. [ 1886.441740][T30939] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1886.458628][T30939] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1886.478773][T30939] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1886.487704][T30939] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1886.499673][T30939] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1886.509352][T30939] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1888.593719][ T4283] Bluetooth: hci3: command 0x0409 tx timeout [ 1889.426779][ T943] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1889.627914][ T943] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1889.730070][ T943] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1889.851707][ T943] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1890.271567][ T7357] chnl_net:caif_netlink_parms(): no params data found [ 1890.654831][ T7357] bridge0: port 1(bridge_slave_0) entered blocking state [ 1890.664242][ T4283] Bluetooth: hci3: command 0x041b tx timeout [ 1890.733365][ T7357] bridge0: port 1(bridge_slave_0) entered disabled state [ 1890.803779][ T7357] device bridge_slave_0 entered promiscuous mode [ 1891.115356][ T7357] bridge0: port 2(bridge_slave_1) entered blocking state [ 1891.124147][ T7357] bridge0: port 2(bridge_slave_1) entered disabled state [ 1891.132634][ T7357] device bridge_slave_1 entered promiscuous mode [ 1892.086981][ T7449] FAULT_INJECTION: forcing a failure. [ 1892.086981][ T7449] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1892.137241][ T7449] CPU: 1 PID: 7449 Comm: syz.2.11667 Not tainted syzkaller #0 [ 1892.144790][ T7449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1892.155222][ T7449] Call Trace: [ 1892.158730][ T7449] [ 1892.161703][ T7449] dump_stack_lvl+0x188/0x24e [ 1892.166419][ T7449] ? show_regs_print_info+0x12/0x12 [ 1892.171630][ T7449] ? load_image+0x410/0x410 [ 1892.176346][ T7449] ? __lock_acquire+0x7c40/0x7c40 [ 1892.181414][ T7449] ? snprintf+0xe5/0x140 [ 1892.185775][ T7449] should_fail_ex+0x390/0x4c0 [ 1892.190665][ T7449] _copy_to_user+0x2c/0x130 [ 1892.195376][ T7449] simple_read_from_buffer+0xe3/0x150 [ 1892.201070][ T7449] proc_fail_nth_read+0x1a6/0x220 [ 1892.206400][ T7449] ? proc_fault_inject_write+0x310/0x310 [ 1892.212131][ T7449] ? fsnotify_perm+0x248/0x550 [ 1892.216935][ T7449] ? proc_fault_inject_write+0x310/0x310 [ 1892.222581][ T7449] vfs_read+0x2db/0x960 [ 1892.226765][ T7449] ? kernel_read+0x1e0/0x1e0 [ 1892.231374][ T7449] ? __fget_files+0x28/0x460 [ 1892.236018][ T7449] ? __fget_files+0x3fc/0x460 [ 1892.240866][ T7449] ? __fdget_pos+0x2ae/0x360 [ 1892.245583][ T7449] ? ksys_read+0x70/0x260 [ 1892.250227][ T7449] ksys_read+0x14d/0x260 [ 1892.254600][ T7449] ? vfs_write+0x9a0/0x9a0 [ 1892.259085][ T7449] ? lockdep_hardirqs_on+0x94/0x140 [ 1892.264331][ T7449] do_syscall_64+0x4c/0xa0 [ 1892.268886][ T7449] ? clear_bhb_loop+0x60/0xb0 [ 1892.273604][ T7449] ? clear_bhb_loop+0x60/0xb0 [ 1892.278705][ T7449] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1892.284715][ T7449] RIP: 0033:0x7fcb2115e6ce [ 1892.289220][ T7449] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1892.309411][ T7449] RSP: 002b:00007fcb2202cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1892.317869][ T7449] RAX: ffffffffffffffda RBX: 00007fcb2202d6c0 RCX: 00007fcb2115e6ce [ 1892.326026][ T7449] RDX: 000000000000000f RSI: 00007fcb2202d0a0 RDI: 0000000000000008 [ 1892.334041][ T7449] RBP: 00007fcb2202d090 R08: 0000000000000000 R09: 0000000000000000 [ 1892.342394][ T7449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1892.350483][ T7449] R13: 00007fcb21426218 R14: 00007fcb21426180 R15: 00007ffc18d15dd8 [ 1892.358798][ T7449] [ 1892.743347][ T4283] Bluetooth: hci3: command 0x040f tx timeout [ 1894.105332][ T7357] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1894.260538][ T7357] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1894.365671][ T7357] team0: Port device team_slave_0 added [ 1894.379073][ T7357] team0: Port device team_slave_1 added [ 1894.835742][ T4283] Bluetooth: hci3: command 0x0419 tx timeout [ 1894.962212][ T7357] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1895.015945][ T7357] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1895.159912][ T7357] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1895.245255][ T7357] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1895.265281][ T7357] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1895.412091][ T7357] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1895.641896][ T7482] netlink: 164 bytes leftover after parsing attributes in process `syz.4.11676'. [ 1895.678829][ T7357] device hsr_slave_0 entered promiscuous mode [ 1895.696793][ T7357] device hsr_slave_1 entered promiscuous mode [ 1895.737068][ T7357] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1895.759475][ T7357] Cannot create hsr debugfs directory [ 1896.573607][ T7506] netlink: 132 bytes leftover after parsing attributes in process `syz.2.11683'. [ 1897.096708][ T943] device hsr_slave_0 left promiscuous mode [ 1897.127639][ T943] device hsr_slave_1 left promiscuous mode [ 1897.151501][ T943] device bridge_slave_0 left promiscuous mode [ 1897.178800][ T943] bridge0: port 1(bridge_slave_0) entered disabled state [ 1897.239523][ T943] device veth0_macvtap left promiscuous mode [ 1897.246690][ T943] device veth1_vlan left promiscuous mode [ 1897.253890][ T943] device veth0_vlan left promiscuous mode [ 1898.990677][ T943] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1899.040529][ T943] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1899.353999][ T943] bond0 (unregistering): Released all slaves [ 1899.475383][ T7524] netlink: 132 bytes leftover after parsing attributes in process `syz.1.11688'. [ 1899.485284][ T7531] netlink: 'syz.1.11688': attribute type 12 has an invalid length. [ 1899.494724][ T7531] netlink: 132 bytes leftover after parsing attributes in process `syz.1.11688'. [ 1899.514330][ T7547] netlink: 132 bytes leftover after parsing attributes in process `syz.3.11696'. [ 1899.540890][ T7560] netlink: 'syz.2.11702': attribute type 17 has an invalid length. [ 1899.549812][ T7564] netlink: 40 bytes leftover after parsing attributes in process `syz.4.11703'. [ 1900.229583][ T7357] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1900.320898][ T7357] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1900.398708][ T7357] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1900.457295][ T7357] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1901.115666][ T7603] netlink: 132 bytes leftover after parsing attributes in process `syz.1.11716'. [ 1901.152758][ T7357] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1901.204890][ T937] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1901.228300][ T937] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1901.246110][ T7357] 8021q: adding VLAN 0 to HW filter on device team0 [ 1901.293667][ T937] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1901.319956][ T937] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1901.346390][ T937] bridge0: port 1(bridge_slave_0) entered blocking state [ 1901.353882][ T937] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1901.411263][ T7617] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.11721'. [ 1901.426263][ T937] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1901.473912][ T937] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1901.516681][ T937] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1901.553677][ T937] bridge0: port 2(bridge_slave_1) entered blocking state [ 1901.560909][ T937] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1901.609776][ T943] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1901.635043][ T954] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1901.674760][ T954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1901.721380][ T954] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1901.742139][ T954] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1901.764160][ T954] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1901.826795][ T954] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1901.846234][ T954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1901.870648][ T954] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1901.897460][ T954] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1901.922362][ T954] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1901.954118][ T7357] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1902.564783][ T954] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1902.578726][ T954] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1902.598677][ T7357] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1902.642468][ T954] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1902.655676][ T954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1902.692339][ T953] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1902.707095][ T953] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1902.724642][ T7357] device veth0_vlan entered promiscuous mode [ 1902.732155][ T953] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1902.744601][ T953] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1902.760477][ T7357] device veth1_vlan entered promiscuous mode [ 1902.809764][ T953] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1902.819147][ T953] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1902.828429][ T953] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1902.843406][ T953] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1902.855021][ T7357] device veth0_macvtap entered promiscuous mode [ 1902.874512][ T7357] device veth1_macvtap entered promiscuous mode [ 1902.900167][ T7357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1902.916566][ T7357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1902.930076][ T7357] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1902.949394][ T953] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1902.961670][ T953] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1902.972693][ T953] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1902.987574][ T953] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1903.001441][ T7357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1903.017060][ T7357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1903.029733][ T7357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1903.046042][ T7357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1903.060621][ T7357] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1903.080559][ T943] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1903.090873][ T943] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1903.110248][ T7357] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1903.122811][ T7357] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1903.137634][ T7357] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1903.147655][ T7357] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1904.156026][ T943] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1904.173301][ T943] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1904.231434][ T943] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1904.275856][ T960] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1904.303408][ T960] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1904.393373][ T954] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1904.613482][ T7669] netlink: 132 bytes leftover after parsing attributes in process `syz.4.11729'. [ 1906.518775][ T7721] netlink: 132 bytes leftover after parsing attributes in process `syz.2.11745'. [ 1908.315174][ T7769] netlink: 132 bytes leftover after parsing attributes in process `syz.0.11761'. [ 1909.878585][ T7805] netlink: 'syz.2.11773': attribute type 21 has an invalid length. [ 1909.912895][ T7805] netlink: 156 bytes leftover after parsing attributes in process `syz.2.11773'. [ 1909.934092][ T7805] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11773'. [ 1910.342561][ T7821] netlink: 'syz.4.11780': attribute type 16 has an invalid length. [ 1910.406590][ T7821] netlink: 168 bytes leftover after parsing attributes in process `syz.4.11780'. [ 1910.772205][ T7832] FAULT_INJECTION: forcing a failure. [ 1910.772205][ T7832] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1910.833205][ T7832] CPU: 1 PID: 7832 Comm: syz.1.11784 Not tainted syzkaller #0 [ 1910.840751][ T7832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1910.851213][ T7832] Call Trace: [ 1910.854523][ T7832] [ 1910.857661][ T7832] dump_stack_lvl+0x188/0x24e [ 1910.862652][ T7832] ? show_regs_print_info+0x12/0x12 [ 1910.867916][ T7832] ? load_image+0x410/0x410 [ 1910.872507][ T7832] ? __lock_acquire+0x7c40/0x7c40 [ 1910.877681][ T7832] should_fail_ex+0x390/0x4c0 [ 1910.882410][ T7832] _copy_from_user+0x2c/0x170 [ 1910.887129][ T7832] sctp_setsockopt+0x19a/0xf90 [ 1910.892025][ T7832] ? sock_common_recvmsg+0x190/0x190 [ 1910.897358][ T7832] __sys_setsockopt+0x2bf/0x3d0 [ 1910.902253][ T7832] __x64_sys_setsockopt+0xb1/0xc0 [ 1910.907322][ T7832] do_syscall_64+0x4c/0xa0 [ 1910.911871][ T7832] ? clear_bhb_loop+0x60/0xb0 [ 1910.916599][ T7832] ? clear_bhb_loop+0x60/0xb0 [ 1910.921333][ T7832] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1910.927723][ T7832] RIP: 0033:0x7fe40a99de99 [ 1910.932364][ T7832] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1910.952015][ T7832] RSP: 002b:00007fe40b845028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1910.960573][ T7832] RAX: ffffffffffffffda RBX: 00007fe40ac25fa0 RCX: 00007fe40a99de99 [ 1910.968674][ T7832] RDX: 0000000000000011 RSI: 0000000000000084 RDI: 0000000000000003 [ 1910.976866][ T7832] RBP: 00007fe40b845090 R08: 0000000000000008 R09: 0000000000000000 [ 1910.985202][ T7832] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1910.993584][ T7832] R13: 00007fe40ac26038 R14: 00007fe40ac25fa0 R15: 00007ffed8c7c588 [ 1911.002159][ T7832] [ 1912.084955][ T7860] netlink: 132 bytes leftover after parsing attributes in process `syz.2.11794'. [ 1913.661369][ T7890] netlink: 132 bytes leftover after parsing attributes in process `syz.4.11811'. [ 1914.308960][T30939] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1914.320961][T30939] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1914.334117][T30939] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1914.346128][T30939] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1914.362892][T30939] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1914.371924][T30939] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1914.737217][ T7918] netlink: 132 bytes leftover after parsing attributes in process `syz.0.11819'. [ 1914.830028][ T7906] chnl_net:caif_netlink_parms(): no params data found [ 1914.943341][ T7906] bridge0: port 1(bridge_slave_0) entered blocking state [ 1914.951102][ T7906] bridge0: port 1(bridge_slave_0) entered disabled state [ 1914.960773][ T7906] device bridge_slave_0 entered promiscuous mode [ 1914.971213][ T7906] bridge0: port 2(bridge_slave_1) entered blocking state [ 1914.978785][ T7906] bridge0: port 2(bridge_slave_1) entered disabled state [ 1914.989059][ T7906] device bridge_slave_1 entered promiscuous mode [ 1915.016917][ T7906] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1915.028939][ T7906] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1915.060899][ T7906] team0: Port device team_slave_0 added [ 1915.077322][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1915.083873][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 1915.098296][ T7906] team0: Port device team_slave_1 added [ 1915.125787][ T7906] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1915.133488][ T7906] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1915.168887][ T7906] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1915.189991][ T7927] netlink: 40 bytes leftover after parsing attributes in process `syz.3.11823'. [ 1915.204515][ T7929] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.11824'. [ 1915.222380][ T7906] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1915.237397][ T7906] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1915.308417][ T7906] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1915.339812][ T7929] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.11824'. [ 1915.526280][ T7906] device hsr_slave_0 entered promiscuous mode [ 1915.603193][ T7906] device hsr_slave_1 entered promiscuous mode [ 1915.633135][ T7906] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1915.641727][ T7906] Cannot create hsr debugfs directory [ 1916.326741][ T7906] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1916.423919][ T4283] Bluetooth: hci1: command 0x0409 tx timeout [ 1916.463520][ T7950] netlink: 132 bytes leftover after parsing attributes in process `syz.4.11833'. [ 1916.668564][ T7906] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1917.645551][ T7906] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1917.877857][ T7906] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1918.515025][ T4283] Bluetooth: hci1: command 0x041b tx timeout [ 1918.896070][ T7906] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1918.959826][ T7906] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1919.029658][ T7906] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1919.094714][ T7906] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1919.115266][ T7982] netlink: 132 bytes leftover after parsing attributes in process `syz.4.11844'. [ 1919.346185][ T7906] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1919.405472][ T943] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1919.420927][ T943] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1919.460046][ T7906] 8021q: adding VLAN 0 to HW filter on device team0 [ 1919.507308][ T943] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1919.527816][ T943] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1919.548939][ T943] bridge0: port 1(bridge_slave_0) entered blocking state [ 1919.556157][ T943] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1919.605721][ T943] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1919.626001][ T943] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1919.658328][ T943] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1919.682129][ T943] bridge0: port 2(bridge_slave_1) entered blocking state [ 1919.689443][ T943] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1919.747048][ T943] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1919.769270][ T943] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1919.808323][ T943] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1919.824009][ T943] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1919.834282][ T943] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1919.850571][ T943] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1919.933171][ T943] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1919.956991][ T943] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1919.979372][ T943] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1920.000165][ T7906] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1920.051078][ T7906] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1920.069439][ T943] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1920.086245][ T943] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1920.584093][ T4283] Bluetooth: hci1: command 0x040f tx timeout [ 1921.061132][ T940] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1921.083471][ T940] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1921.117767][ T7906] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1921.184920][ T954] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1921.200961][ T954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1921.254405][ T954] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1921.294348][ T954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1921.337263][ T954] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1921.370018][ T954] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1921.529023][ T7906] device veth0_vlan entered promiscuous mode [ 1921.571820][ T8028] netlink: 'syz.4.11859': attribute type 10 has an invalid length. [ 1921.648572][ T8028] 8021q: adding VLAN 0 to HW filter on device team0 [ 1921.701272][ T8028] bond0: (slave team0): Enslaving as an active interface with an up link [ 1921.729009][ T8031] netlink: 132 bytes leftover after parsing attributes in process `syz.2.11858'. [ 1921.805224][ T7906] device veth1_vlan entered promiscuous mode [ 1921.890203][ T954] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1921.934893][ T954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1922.010382][ T7906] device veth0_macvtap entered promiscuous mode [ 1922.043945][ T7906] device veth1_macvtap entered promiscuous mode [ 1922.090678][ T7906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1922.121543][ T7906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1922.148724][ T7906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1922.170642][ T7906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1922.196607][ T7906] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1922.213713][ T7906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1922.229393][ T7906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1922.249566][ T7906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1922.261106][ T7906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1922.279680][ T7906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1922.291254][ T7906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1922.319888][ T7906] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1922.339792][ T954] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1922.358734][ T954] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1922.390167][ T954] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1922.400814][ T954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1922.420813][ T954] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1922.437086][ T954] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1922.457302][ T7906] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1922.469082][ T7906] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1922.482381][ T7906] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1922.497820][ T7906] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1922.666396][ T4283] Bluetooth: hci1: command 0x0419 tx timeout [ 1922.784172][ T937] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1922.799951][ T937] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1922.845367][ T937] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1922.885508][ T960] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1922.895138][ T960] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1922.921850][ T943] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1925.133259][ T8092] netlink: 'syz.3.11882': attribute type 10 has an invalid length. [ 1925.141494][ T8092] netlink: 40 bytes leftover after parsing attributes in process `syz.3.11882'. [ 1925.162239][ T8092] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1925.231190][ T8092] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1927.299490][ T8139] netlink: 'syz.4.11895': attribute type 39 has an invalid length. [ 1930.247509][ T8175] netlink: 132 bytes leftover after parsing attributes in process `syz.0.11908'. [ 1931.631063][ T8214] netlink: 132 bytes leftover after parsing attributes in process `syz.4.11923'. [ 1934.859123][ T8269] netlink: 'syz.0.11942': attribute type 2 has an invalid length. [ 1934.894950][ T8269] netlink: 'syz.0.11942': attribute type 1 has an invalid length. [ 1934.951116][ T8269] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.11942'. [ 1936.911316][ T8306] netlink: 'syz.0.11959': attribute type 29 has an invalid length. [ 1936.951136][ T8306] netlink: 'syz.0.11959': attribute type 29 has an invalid length. [ 1937.046424][ T8306] netlink: 'syz.0.11959': attribute type 12 has an invalid length. [ 1937.187482][ T8306] netlink: 132 bytes leftover after parsing attributes in process `syz.0.11959'. [ 1937.987541][ T8323] netlink: 14 bytes leftover after parsing attributes in process `syz.2.11963'. [ 1938.003426][ T8323] openvswitch: netlink: Message has 6 unknown bytes. [ 1938.487442][ T8331] netlink: 132 bytes leftover after parsing attributes in process `syz.0.11965'. [ 1939.721578][ T8365] netlink: 132 bytes leftover after parsing attributes in process `syz.1.11980'. [ 1940.126706][ T8381] netlink: 128 bytes leftover after parsing attributes in process `syz.2.11985'. [ 1940.154762][ T8381] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1940.200693][ T8381] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1940.217852][ T8382] netlink: 'syz.4.11984': attribute type 10 has an invalid length. [ 1940.273614][ T8382] netlink: 40 bytes leftover after parsing attributes in process `syz.4.11984'. [ 1940.562264][ T8382] bridge0: port 2(veth0_vlan) entered blocking state [ 1940.612850][ T8382] bridge0: port 2(veth0_vlan) entered disabled state [ 1941.770845][ T8396] netlink: 60 bytes leftover after parsing attributes in process `syz.1.11990'. [ 1942.019688][ T8382] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 1942.047803][ T8396] netlink: 60 bytes leftover after parsing attributes in process `syz.1.11990'. [ 1942.085601][ T8401] IPv6: NLM_F_CREATE should be specified when creating new route [ 1942.143531][ T8401] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1942.150909][ T8401] IPv6: NLM_F_CREATE should be set when creating new route [ 1942.158357][ T8401] IPv6: NLM_F_CREATE should be set when creating new route [ 1942.165663][ T8401] IPv6: NLM_F_CREATE should be set when creating new route [ 1942.257926][ T8403] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1942.269827][ T8397] netlink: 60 bytes leftover after parsing attributes in process `syz.1.11990'. [ 1942.281032][ T8411] netlink: 40227 bytes leftover after parsing attributes in process `syz.4.11994'. [ 1942.300117][ T8404] netlink: 60 bytes leftover after parsing attributes in process `syz.1.11990'. [ 1942.793775][ T8415] netlink: 132 bytes leftover after parsing attributes in process `syz.1.11996'. [ 1945.721849][ T8463] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.12011'. [ 1945.779100][ T8466] netlink: 10 bytes leftover after parsing attributes in process `syz.4.12015'. [ 1951.430488][ T8582] netlink: 188 bytes leftover after parsing attributes in process `syz.4.12051'. [ 1953.825679][ T8644] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.12075'. [ 1953.849034][ T8644] bridge_slave_1: default FDB implementation only supports local addresses [ 1958.294584][ T8734] netlink: 132 bytes leftover after parsing attributes in process `syz.1.12108'. [ 1959.131485][ T8762] sctp: [Deprecated]: syz.3.12119 (pid 8762) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1959.131485][ T8762] Use struct sctp_sack_info instead [ 1960.500520][ T8775] netlink: 132 bytes leftover after parsing attributes in process `syz.0.12122'. [ 1961.127407][ T8798] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1961.366758][ T8802] delete_channel: no stack [ 1962.292218][ T8823] netlink: 132 bytes leftover after parsing attributes in process `syz.0.12138'. [ 1963.081158][ T8825] netlink: 'syz.1.12139': attribute type 9 has an invalid length. [ 1963.117744][ T8825] netlink: 61967 bytes leftover after parsing attributes in process `syz.1.12139'. [ 1963.836918][ T8845] netlink: 'syz.0.12144': attribute type 3 has an invalid length. [ 1963.887914][ T8845] netlink: 132 bytes leftover after parsing attributes in process `syz.0.12144'. [ 1964.272636][ T8863] sctp: [Deprecated]: syz.4.12151 (pid 8863) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1964.272636][ T8863] Use struct sctp_sack_info instead [ 1965.496637][ T8870] netlink: 132 bytes leftover after parsing attributes in process `syz.2.12154'. [ 1967.225277][ T8904] sctp: [Deprecated]: syz.1.12165 (pid 8904) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1967.225277][ T8904] Use struct sctp_sack_info instead [ 1976.068088][ T8957] netlink: 'syz.4.12179': attribute type 46 has an invalid length. [ 1976.172238][ T8957] netlink: 55 bytes leftover after parsing attributes in process `syz.4.12179'. [ 1976.565172][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1976.573574][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 1992.887906][ T9167] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1992.895632][ T9167] IPv6: NLM_F_CREATE should be set when creating new route [ 1992.903219][ T9167] IPv6: NLM_F_CREATE should be set when creating new route [ 1992.910734][ T9167] IPv6: NLM_F_CREATE should be set when creating new route [ 1993.018273][ T9170] netlink: 'syz.4.12246': attribute type 2 has an invalid length. [ 1993.125171][ T9170] netlink: 60 bytes leftover after parsing attributes in process `syz.4.12246'. [ 1993.601357][ T9182] netlink: 'syz.4.12252': attribute type 3 has an invalid length. [ 1993.624185][ T9182] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.12252'. [ 1995.447523][ T9250] netlink: 'syz.2.12281': attribute type 29 has an invalid length. [ 1995.462060][ T9250] netlink: 'syz.2.12281': attribute type 29 has an invalid length. [ 1995.471748][ T9250] netlink: 'syz.2.12281': attribute type 29 has an invalid length. [ 1997.568227][ T9309] can: request_module (can-proto-0) failed. [ 1999.267152][ T9361] netlink: 'syz.4.12319': attribute type 29 has an invalid length. [ 1999.320059][ T9358] netlink: 16098 bytes leftover after parsing attributes in process `syz.4.12319'. [ 1999.340686][ T9356] can: request_module (can-proto-0) failed. [ 1999.484013][ T9361] netlink: 'syz.4.12319': attribute type 29 has an invalid length. [ 2000.268458][ T9385] netlink: 132 bytes leftover after parsing attributes in process `syz.4.12330'. [ 2000.441769][ T9390] netlink: 188 bytes leftover after parsing attributes in process `syz.0.12332'. [ 2000.467990][ T9390] netlink: 'syz.0.12332': attribute type 2 has an invalid length. [ 2000.493193][ T9390] netlink: 60 bytes leftover after parsing attributes in process `syz.0.12332'. [ 2001.359092][ T9421] can: request_module (can-proto-0) failed. [ 2001.370247][ T9426] netlink: 'syz.0.12343': attribute type 29 has an invalid length. [ 2001.380425][ T9425] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.12343'. [ 2001.419657][ T9426] netlink: 'syz.0.12343': attribute type 29 has an invalid length. [ 2004.507795][T30939] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2004.526089][T30939] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2004.535077][T30939] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2004.554035][T30939] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2004.568397][T30939] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 2004.578568][T30939] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2004.936680][ T9502] chnl_net:caif_netlink_parms(): no params data found [ 2005.129060][ T9502] bridge0: port 1(bridge_slave_0) entered blocking state [ 2005.138353][ T9502] bridge0: port 1(bridge_slave_0) entered disabled state [ 2005.158109][ T9502] device bridge_slave_0 entered promiscuous mode [ 2005.188693][ T9502] bridge0: port 2(bridge_slave_1) entered blocking state [ 2005.211117][ T9502] bridge0: port 2(bridge_slave_1) entered disabled state [ 2005.246911][ T9502] device bridge_slave_1 entered promiscuous mode [ 2005.370515][ T9502] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2005.450237][ T9502] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2005.581109][ T9502] team0: Port device team_slave_0 added [ 2005.604836][ T9502] team0: Port device team_slave_1 added [ 2005.661219][ T9502] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2005.698217][ T9502] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2005.797506][ T9502] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2005.863255][ T9502] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2005.901125][ T9502] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2005.934734][ T9502] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2006.040909][ T9502] device hsr_slave_0 entered promiscuous mode [ 2006.056872][ T9502] device hsr_slave_1 entered promiscuous mode [ 2006.077368][ T9502] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2006.093795][ T9502] Cannot create hsr debugfs directory [ 2006.516500][ T9502] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2006.670500][ T4283] Bluetooth: hci0: command 0x0409 tx timeout [ 2006.881362][ T9502] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2007.034936][ T9502] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2007.039686][ T9575] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.12398'. [ 2007.110210][ T9575] netlink: 43 bytes leftover after parsing attributes in process `syz.1.12398'. [ 2007.248607][ T9502] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2007.276929][ T9575] netlink: 'syz.1.12398': attribute type 10 has an invalid length. [ 2007.311056][ T9575] team0: Device hsr_slave_0 failed to register rx_handler [ 2007.635605][ T9502] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2007.701646][ T9502] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2008.521671][ T9502] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2008.567290][ T9502] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2008.745319][ T4283] Bluetooth: hci0: command 0x041b tx timeout [ 2008.877757][ T9502] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2008.936612][ T960] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2008.954234][ T960] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2008.991716][ T9502] 8021q: adding VLAN 0 to HW filter on device team0 [ 2009.016773][ T960] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2009.028270][ T960] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2009.046079][ T960] bridge0: port 1(bridge_slave_0) entered blocking state [ 2009.053353][ T960] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2009.073580][ T960] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2009.089680][ T960] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2009.104838][ T960] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2009.116603][ T960] bridge0: port 2(bridge_slave_1) entered blocking state [ 2009.123867][ T960] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2009.133884][ T960] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2009.162497][ T960] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2009.185407][ T960] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2009.212209][ T960] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2009.245946][ T960] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2009.258080][ T960] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2009.272356][ T960] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2009.301960][ T960] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2009.313916][ T4283] Bluetooth: hci3: command 0x0406 tx timeout [ 2009.314286][ T960] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2009.329786][ T960] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2009.341036][ T960] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2009.354433][ T9502] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2009.923767][ T960] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2009.931451][ T960] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2009.990036][ T9502] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2010.133791][ T940] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2010.157910][ T940] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2010.335175][ T943] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2010.358529][ T943] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2010.416178][ T9502] device veth0_vlan entered promiscuous mode [ 2010.453956][ T943] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2010.489622][ T943] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2010.675118][ T9502] device veth1_vlan entered promiscuous mode [ 2010.823171][T30939] Bluetooth: hci0: command 0x040f tx timeout [ 2010.879973][ T9502] device veth0_macvtap entered promiscuous mode [ 2010.894775][ T937] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2010.954017][ T937] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2010.995952][ T937] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2011.011628][ T937] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2011.049731][ T937] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2011.062572][ T9502] device veth1_macvtap entered promiscuous mode [ 2011.147645][ T9502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2011.203310][ T9502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2011.243201][ T9502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2011.247967][ T9659] can: request_module (can-proto-0) failed. [ 2011.275626][ T9659] netlink: 'syz.3.12427': attribute type 29 has an invalid length. [ 2011.285877][ T9502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2011.296072][ T9502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2011.308606][ T9502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2011.331435][ T9502] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2011.361255][ T9502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2011.372740][ T9502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2011.384098][ T9502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2011.395229][ T9502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2011.406216][ T9502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2011.417700][ T9502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2011.427633][ T9502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2011.438700][ T9502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2011.451207][ T9502] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2011.459039][ T9663] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.12427'. [ 2011.474932][ T9659] netlink: 'syz.3.12427': attribute type 29 has an invalid length. [ 2011.486548][ T937] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2011.498328][ T937] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2011.514724][ T9670] netlink: 'syz.4.12432': attribute type 11 has an invalid length. [ 2011.516703][ T937] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2011.543500][ T9670] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.12432'. [ 2011.558870][ T937] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2011.592748][ T9502] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2011.617178][ T9502] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2011.638587][ T9502] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2011.658016][ T9502] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2012.302680][ T9668] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2012.903186][T30939] Bluetooth: hci0: command 0x0419 tx timeout [ 2014.791338][ T957] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2014.829580][ T957] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2014.888153][ T954] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2014.961263][ T960] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2015.007014][ T960] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2015.064294][ T960] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2019.016421][ T9779] netlink: 'syz.2.12469': attribute type 29 has an invalid length. [ 2019.027082][ T9779] netlink: 'syz.2.12469': attribute type 29 has an invalid length. [ 2019.040957][ T9779] netlink: 'syz.2.12469': attribute type 29 has an invalid length. [ 2019.051123][ T9779] netlink: 'syz.2.12469': attribute type 29 has an invalid length. [ 2019.062224][ T9779] netlink: 'syz.2.12469': attribute type 29 has an invalid length. [ 2019.345607][ T9786] netlink: 'syz.2.12470': attribute type 10 has an invalid length. [ 2020.286596][ T9786] team0: Device wg1 is of different type [ 2020.575860][ T9808] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.12480'. [ 2020.649009][ T9808] netlink: 43 bytes leftover after parsing attributes in process `syz.4.12480'. [ 2020.699587][ T9808] netlink: 'syz.4.12480': attribute type 10 has an invalid length. [ 2020.720787][ T9808] team0: Device hsr_slave_0 failed to register rx_handler [ 2023.785574][ T9831] netlink: 'syz.2.12487': attribute type 3 has an invalid length. [ 2023.827725][ T9831] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.12487'. [ 2026.300277][ T9880] netlink: 'syz.2.12505': attribute type 39 has an invalid length. [ 2026.496049][ T9880] device hsr_slave_1 left promiscuous mode [ 2027.845477][ T9920] netlink: 132 bytes leftover after parsing attributes in process `syz.4.12520'. [ 2028.031572][ T960] device wlan1 left promiscuous mode [ 2028.071177][ T960] team0: Port device wlan1 removed [ 2028.644634][ T960] device hsr_slave_0 left promiscuous mode [ 2028.655996][ T960] device hsr_slave_1 left promiscuous mode [ 2028.693585][ T960] bridge0: port 2(team0) entered disabled state [ 2028.704842][ T960] bridge0: port 3(dummy0) entered disabled state [ 2028.722167][ T960] device bridge_slave_0 left promiscuous mode [ 2028.752246][ T960] bridge0: port 1(bridge_slave_0) entered disabled state [ 2028.839461][ T960] device veth1_vlan left promiscuous mode [ 2028.863300][ T960] device veth0_vlan left promiscuous mode [ 2029.233398][ T9966] FAULT_INJECTION: forcing a failure. [ 2029.233398][ T9966] name failslab, interval 1, probability 0, space 0, times 0 [ 2029.270682][ T9966] CPU: 0 PID: 9966 Comm: syz.3.12534 Not tainted syzkaller #0 [ 2029.278408][ T9966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 2029.288620][ T9966] Call Trace: [ 2029.292292][ T9966] [ 2029.295350][ T9966] dump_stack_lvl+0x188/0x24e [ 2029.300439][ T9966] ? show_regs_print_info+0x12/0x12 [ 2029.305880][ T9966] ? load_image+0x410/0x410 [ 2029.310525][ T9966] ? __lock_acquire+0x7c40/0x7c40 [ 2029.315693][ T9966] ? trace_call_bpf+0xbf/0x6b0 [ 2029.321067][ T9966] ? trace_call_bpf+0x5d6/0x6b0 [ 2029.326227][ T9966] should_fail_ex+0x390/0x4c0 [ 2029.331403][ T9966] should_failslab+0x5/0x20 [ 2029.335954][ T9966] slab_pre_alloc_hook+0x59/0x300 [ 2029.341577][ T9966] ? verify_lock_unused+0x140/0x140 [ 2029.347258][ T9966] ? bpf_test_init+0x9f/0x140 [ 2029.352574][ T9966] __kmem_cache_alloc_node+0x4f/0x270 [ 2029.358084][ T9966] ? bpf_test_init+0x9f/0x140 [ 2029.362893][ T9966] __kmalloc+0xa3/0x240 [ 2029.367187][ T9966] bpf_test_init+0x9f/0x140 [ 2029.371975][ T9966] bpf_prog_test_run_xdp+0x488/0xf80 [ 2029.377296][ T9966] ? __lock_acquire+0x7c40/0x7c40 [ 2029.382425][ T9966] ? dev_put+0x80/0x80 [ 2029.386664][ T9966] ? dev_put+0x80/0x80 [ 2029.390788][ T9966] bpf_prog_test_run+0x31c/0x390 [ 2029.395878][ T9966] __sys_bpf+0x62b/0x780 [ 2029.400268][ T9966] ? bpf_link_show_fdinfo+0x380/0x380 [ 2029.405810][ T9966] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2029.412129][ T9966] __x64_sys_bpf+0x78/0x90 [ 2029.416787][ T9966] do_syscall_64+0x4c/0xa0 [ 2029.421444][ T9966] ? clear_bhb_loop+0x60/0xb0 [ 2029.426173][ T9966] ? clear_bhb_loop+0x60/0xb0 [ 2029.430992][ T9966] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2029.436945][ T9966] RIP: 0033:0x7f5f1f59de99 [ 2029.441501][ T9966] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2029.461415][ T9966] RSP: 002b:00007f5f203d2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2029.469891][ T9966] RAX: ffffffffffffffda RBX: 00007f5f1f825fa0 RCX: 00007f5f1f59de99 [ 2029.477911][ T9966] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 2029.486205][ T9966] RBP: 00007f5f203d2090 R08: 0000000000000000 R09: 0000000000000000 [ 2029.494211][ T9966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2029.502530][ T9966] R13: 00007f5f1f826038 R14: 00007f5f1f825fa0 R15: 00007fff865af498 [ 2029.510909][ T9966] [ 2030.910086][ T960] device team_slave_1 left promiscuous mode [ 2030.919261][ T960] team0 (unregistering): Port device team_slave_1 removed [ 2030.972281][ T960] device team_slave_0 left promiscuous mode [ 2030.980753][ T960] team0 (unregistering): Port device team_slave_0 removed [ 2031.041564][ T960] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2031.106447][ T960] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2031.167011][ T960] device bridge_slave_1 left promiscuous mode [ 2031.175049][ T960] team0 (unregistering): Port device bridge_slave_1 removed [ 2031.494107][ T960] bond0 (unregistering): Released all slaves [ 2031.605905][ T9993] netlink: 'syz.4.12542': attribute type 10 has an invalid length. [ 2031.655172][ T9993] team0: Port device bridge_slave_1 removed [ 2031.665453][ T9993] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 2031.844598][T10004] netlink: 132 bytes leftover after parsing attributes in process `syz.2.12547'. [ 2031.920433][T10004] FAULT_INJECTION: forcing a failure. [ 2031.920433][T10004] name failslab, interval 1, probability 0, space 0, times 0 [ 2031.934082][T10004] CPU: 0 PID: 10004 Comm: syz.2.12547 Not tainted syzkaller #0 [ 2031.941744][T10004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 2031.951932][T10004] Call Trace: [ 2031.955249][T10004] [ 2031.958482][T10004] dump_stack_lvl+0x188/0x24e [ 2031.963403][T10004] ? show_regs_print_info+0x12/0x12 [ 2031.968692][T10004] ? load_image+0x410/0x410 [ 2031.973336][T10004] ? skb_network_protocol+0x525/0x790 [ 2031.979244][T10004] should_fail_ex+0x390/0x4c0 [ 2031.984179][T10004] should_failslab+0x5/0x20 [ 2031.989123][T10004] slab_pre_alloc_hook+0x59/0x300 [ 2031.994220][T10004] ? netif_skb_features+0xafa/0x1630 [ 2031.999725][T10004] kmem_cache_alloc+0x56/0x2f0 [ 2032.004608][T10004] ? skb_clone+0x1e7/0x370 [ 2032.009056][T10004] skb_clone+0x1e7/0x370 [ 2032.013404][T10004] ? dev_queue_xmit_nit+0x200/0xba0 [ 2032.018651][T10004] dev_queue_xmit_nit+0x23b/0xba0 [ 2032.023723][T10004] ? dev_queue_xmit_nit+0x29/0xba0 [ 2032.028891][T10004] ? validate_xmit_skb+0x7ca/0xe80 [ 2032.034049][T10004] dev_hard_start_xmit+0x158/0x8b0 [ 2032.039199][T10004] ? validate_xmit_skb_list+0x120/0x120 [ 2032.044790][T10004] __dev_queue_xmit+0x1b4b/0x3810 [ 2032.049847][T10004] ? __dev_queue_xmit+0x281/0x3810 [ 2032.055000][T10004] ? netdev_core_pick_tx+0x360/0x360 [ 2032.060328][T10004] ? ref_tracker_alloc+0x333/0x490 [ 2032.065584][T10004] ? __copy_skb_header+0x3ba/0x4f0 [ 2032.070846][T10004] ? memcpy+0x3c/0x60 [ 2032.074879][T10004] ? __copy_skb_header+0x3ba/0x4f0 [ 2032.080136][T10004] ? __skb_clone+0x446/0x6c0 [ 2032.084882][T10004] ? skb_clone+0x21b/0x370 [ 2032.089388][T10004] __netlink_deliver_tap+0x55c/0x7e0 [ 2032.094843][T10004] ? netlink_deliver_tap+0x2e/0x1b0 [ 2032.100205][T10004] netlink_deliver_tap+0x19c/0x1b0 [ 2032.105445][T10004] netlink_unicast+0x777/0x920 [ 2032.110321][T10004] netlink_sendmsg+0x8ad/0xbd0 [ 2032.115193][T10004] ? netlink_getsockopt+0x550/0x550 [ 2032.120507][T10004] ? apparmor_socket_sendmsg+0x8a/0x330 [ 2032.126110][T10004] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2032.131680][T10004] ? security_socket_sendmsg+0x7c/0xa0 [ 2032.137193][T10004] ? netlink_getsockopt+0x550/0x550 [ 2032.142516][T10004] ____sys_sendmsg+0x5ed/0x9a0 [ 2032.147317][T10004] ? __sys_sendmsg_sock+0x30/0x30 [ 2032.152369][T10004] ? __import_iovec+0x306/0x510 [ 2032.157257][T10004] ? import_iovec+0x6f/0xa0 [ 2032.161825][T10004] ___sys_sendmsg+0x2a2/0x360 [ 2032.166561][T10004] ? __sys_sendmsg+0x2a0/0x2a0 [ 2032.171440][T10004] ? __lock_acquire+0x7c40/0x7c40 [ 2032.176519][T10004] __se_sys_sendmsg+0x1c3/0x2b0 [ 2032.181412][T10004] ? __x64_sys_sendmsg+0x80/0x80 [ 2032.186500][T10004] ? lockdep_hardirqs_on+0x94/0x140 [ 2032.191734][T10004] do_syscall_64+0x4c/0xa0 [ 2032.196176][T10004] ? clear_bhb_loop+0x60/0xb0 [ 2032.200982][T10004] ? clear_bhb_loop+0x60/0xb0 [ 2032.205790][T10004] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2032.211713][T10004] RIP: 0033:0x7fa88c79de99 [ 2032.216239][T10004] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2032.236081][T10004] RSP: 002b:00007fa88d64d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2032.244842][T10004] RAX: ffffffffffffffda RBX: 00007fa88ca25fa0 RCX: 00007fa88c79de99 [ 2032.252941][T10004] RDX: 0000000000000000 RSI: 0000200000000940 RDI: 0000000000000004 [ 2032.260935][T10004] RBP: 00007fa88d64d090 R08: 0000000000000000 R09: 0000000000000000 [ 2032.269173][T10004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2032.277410][T10004] R13: 00007fa88ca26038 R14: 00007fa88ca25fa0 R15: 00007ffd51fbe508 [ 2032.285620][T10004] [ 2032.373131][T10004] netlink: 'syz.2.12547': attribute type 12 has an invalid length. [ 2032.387277][T10004] netlink: 132 bytes leftover after parsing attributes in process `syz.2.12547'. [ 2032.885950][T10021] netlink: 'syz.0.12553': attribute type 29 has an invalid length. [ 2032.903797][T10021] netlink: 'syz.0.12553': attribute type 29 has an invalid length. [ 2032.933799][T10021] netlink: 'syz.0.12553': attribute type 29 has an invalid length. [ 2033.161343][T10025] netlink: 'syz.0.12553': attribute type 29 has an invalid length. [ 2033.245880][T10031] netlink: 'syz.0.12553': attribute type 29 has an invalid length. [ 2033.280720][T10021] can: request_module (can-proto-0) failed. [ 2033.283196][T10025] netlink: 'syz.0.12553': attribute type 29 has an invalid length. [ 2033.367864][T10033] netlink: 164 bytes leftover after parsing attributes in process `syz.3.12557'. [ 2037.964198][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 2037.970613][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 2040.026989][ T4283] Bluetooth: hci1: command 0x0406 tx timeout [ 2040.244050][T10205] netlink: 'syz.2.12614': attribute type 21 has an invalid length. [ 2041.112798][T10218] netlink: 132 bytes leftover after parsing attributes in process `syz.1.12620'. [ 2041.680015][T10237] FAULT_INJECTION: forcing a failure. [ 2041.680015][T10237] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2041.693548][T10237] CPU: 1 PID: 10237 Comm: syz.0.12626 Not tainted syzkaller #0 [ 2041.701137][T10237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 2041.711327][T10237] Call Trace: [ 2041.714640][T10237] [ 2041.717604][T10237] dump_stack_lvl+0x188/0x24e [ 2041.722320][T10237] ? show_regs_print_info+0x12/0x12 [ 2041.727645][T10237] ? load_image+0x410/0x410 [ 2041.732278][T10237] ? __lock_acquire+0x7c40/0x7c40 [ 2041.737675][T10237] ? snprintf+0xe5/0x140 [ 2041.741934][T10237] should_fail_ex+0x390/0x4c0 [ 2041.746620][T10237] _copy_to_user+0x2c/0x130 [ 2041.751127][T10237] simple_read_from_buffer+0xe3/0x150 [ 2041.756616][T10237] proc_fail_nth_read+0x1a6/0x220 [ 2041.761668][T10237] ? proc_fault_inject_write+0x310/0x310 [ 2041.767318][T10237] ? fsnotify_perm+0x248/0x550 [ 2041.772196][T10237] ? proc_fault_inject_write+0x310/0x310 [ 2041.777914][T10237] vfs_read+0x2db/0x960 [ 2041.782171][T10237] ? kernel_read+0x1e0/0x1e0 [ 2041.787033][T10237] ? __fget_files+0x28/0x460 [ 2041.791807][T10237] ? __fget_files+0x3fc/0x460 [ 2041.796515][T10237] ? __fdget_pos+0x2ae/0x360 [ 2041.801126][T10237] ? ksys_read+0x70/0x260 [ 2041.805485][T10237] ksys_read+0x14d/0x260 [ 2041.809774][T10237] ? vfs_write+0x9a0/0x9a0 [ 2041.814220][T10237] ? lockdep_hardirqs_on+0x94/0x140 [ 2041.819433][T10237] do_syscall_64+0x4c/0xa0 [ 2041.823944][T10237] ? clear_bhb_loop+0x60/0xb0 [ 2041.828632][T10237] ? clear_bhb_loop+0x60/0xb0 [ 2041.833317][T10237] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2041.839298][T10237] RIP: 0033:0x7f525835e6ce [ 2041.843884][T10237] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2041.863946][T10237] RSP: 002b:00007f525931bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2041.872501][T10237] RAX: ffffffffffffffda RBX: 00007f525931c6c0 RCX: 00007f525835e6ce [ 2041.880606][T10237] RDX: 000000000000000f RSI: 00007f525931c0a0 RDI: 0000000000000005 [ 2041.888629][T10237] RBP: 00007f525931c090 R08: 0000000000000000 R09: 0000000000000000 [ 2041.896719][T10237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2041.904720][T10237] R13: 00007f5258626038 R14: 00007f5258625fa0 R15: 00007ffe615c2518 [ 2041.912909][T10237] [ 2043.241734][T10263] netlink: 'syz.2.12634': attribute type 10 has an invalid length. [ 2043.274861][T10263] netlink: 40 bytes leftover after parsing attributes in process `syz.2.12634'. [ 2043.348535][T10263] bridge0: port 3(veth0_vlan) entered blocking state [ 2043.380509][T10263] bridge0: port 3(veth0_vlan) entered disabled state [ 2043.518651][T10263] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 2044.015268][T30939] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2044.025865][T30939] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2044.076618][T30939] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2044.086599][T30939] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2044.097018][T30939] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 2044.106052][T30939] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2044.115311][T10281] netlink: 'syz.0.12641': attribute type 2 has an invalid length. [ 2044.140750][T10281] netlink: 17267 bytes leftover after parsing attributes in process `syz.0.12641'. [ 2044.377930][T10293] netlink: 40 bytes leftover after parsing attributes in process `syz.1.12643'. [ 2044.701028][ T957] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2044.969841][ T957] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2045.137847][ T957] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2045.506143][ T957] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2046.000188][T10285] chnl_net:caif_netlink_parms(): no params data found [ 2046.184210][ T4283] Bluetooth: hci2: command 0x0409 tx timeout [ 2046.229702][T10332] netlink: 'syz.1.12655': attribute type 21 has an invalid length. [ 2046.429704][T10285] bridge0: port 1(bridge_slave_0) entered blocking state [ 2046.437224][T10285] bridge0: port 1(bridge_slave_0) entered disabled state [ 2046.447743][T10285] device bridge_slave_0 entered promiscuous mode [ 2046.461003][T10285] bridge0: port 2(bridge_slave_1) entered blocking state [ 2046.471084][T10285] bridge0: port 2(bridge_slave_1) entered disabled state [ 2046.481631][T10285] device bridge_slave_1 entered promiscuous mode [ 2047.067566][T10285] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2047.381039][T10285] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2074.425141][T21762] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 1-.... } 2688 jiffies s: 224353 root: 0x2/. [ 2074.461585][T21762] rcu: blocking rcu_node structures (internal RCU debug): [ 2074.493173][T21762] Sending NMI from CPU 0 to CPUs 1: [ 2074.498465][ C1] NMI backtrace for cpu 1 [ 2074.498477][ C1] CPU: 1 PID: 9502 Comm: syz-executor Not tainted syzkaller #0 [ 2074.498492][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 2074.498502][ C1] RIP: 0010:kasan_check_range+0xc/0x290 [ 2074.498533][ C1] Code: c0 c3 0f 0b b8 ea ff ff ff c3 0f 0b b8 ea ff ff ff c3 00 00 cc cc 00 00 cc cc 00 00 cc cc b0 01 48 85 f6 0f 84 ac 01 00 00 55 <41> 57 41 56 41 54 53 49 89 f8 49 01 f0 0f 82 0e 02 00 00 49 89 f8 [ 2074.498545][ C1] RSP: 0018:ffffc900001e0010 EFLAGS: 00000002 [ 2074.498560][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: ffffffff8163f3f4 [ 2074.498570][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff8e2121a8 [ 2074.498580][ C1] RBP: ffffc900001e0128 R08: 0000000000000000 R09: 0000000000000000 [ 2074.498590][ C1] R10: dffffc0000000000 R11: ffffed10171e7780 R12: 0000000000000001 [ 2074.498601][ C1] R13: 1ffff9200003c010 R14: 0000000000000000 R15: dffffc0000000000 [ 2074.498611][ C1] FS: 000055555ca7b500(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 2074.498625][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2074.498635][ C1] CR2: 00007fa88d5556b8 CR3: 00000000309dc000 CR4: 00000000003506e0 [ 2074.498648][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2074.498657][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 2074.498666][ C1] Call Trace: [ 2074.498672][ C1] [ 2074.498680][ C1] lock_acquire+0xd4/0x4a0 [ 2074.498709][ C1] ? read_lock_is_recursive+0x10/0x10 [ 2074.498729][ C1] ? verify_lock_unused+0x140/0x140 [ 2074.498747][ C1] ? llist_add_batch+0x12b/0x180 [ 2074.498770][ C1] ? perf_trace_lock+0xf8/0x390 [ 2074.498787][ C1] ? __virt_addr_valid+0x188/0x540 [ 2074.498808][ C1] __virt_addr_valid+0x1a5/0x540 [ 2074.498827][ C1] ? __virt_addr_valid+0x188/0x540 [ 2074.498847][ C1] kasan_addr_to_slab+0x9/0xc0 [ 2074.498866][ C1] __kasan_record_aux_stack+0xf/0xc0 [ 2074.498881][ C1] irq_work_queue_on+0x10f/0x260 [ 2074.498905][ C1] rcu_read_unlock_special+0x3c9/0x510 [ 2074.498927][ C1] ? __rcu_read_unlock+0xd0/0xd0 [ 2074.498944][ C1] ? __cant_sleep+0x220/0x220 [ 2074.498964][ C1] __rcu_read_unlock+0x78/0xd0 [ 2074.498978][ C1] ? trace_call_bpf+0xbf/0x6b0 [ 2074.498998][ C1] trace_call_bpf+0x5bb/0x6b0 [ 2074.499017][ C1] ? trace_call_bpf+0xbf/0x6b0 [ 2074.499041][ C1] ? __bpf_trace_bpf_trace_printk+0x20/0x20 [ 2074.499063][ C1] ? kvm_sched_clock_read+0x14/0x40 [ 2074.499076][ C1] ? sched_clock_cpu+0x6e/0x260 [ 2074.499170][ C1] perf_trace_run_bpf_submit+0x79/0x1c0 [ 2074.499197][ C1] perf_trace_preemptirq_template+0x268/0x320 [ 2074.499219][ C1] ? asm_sysvec_irq_work+0x16/0x20 [ 2074.499240][ C1] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 2074.499267][ C1] ? __irq_exit_rcu+0x147/0x230 [ 2074.499282][ C1] ? irq_exit_rcu+0x20/0x20 [ 2074.499299][ C1] ? asm_sysvec_irq_work+0x16/0x20 [ 2074.499317][ C1] trace_irq_enable_rcuidle+0xd3/0x140 [ 2074.499339][ C1] trace_hardirqs_on+0x24/0x40 [ 2074.499356][ C1] asm_sysvec_irq_work+0x16/0x20 [ 2074.499374][ C1] RIP: 0010:rcu_read_unlock_special+0x7f/0x510 [ 2074.499390][ C1] Code: eb 03 48 b8 f1 f1 f1 f1 f8 f2 f2 f2 4a 89 04 2b 42 c7 44 2b 08 f8 f3 f3 f3 65 44 8b 35 52 82 95 7e 41 f7 c6 00 00 f0 00 74 40 <48> c7 44 24 40 0e 36 e0 45 4a c7 04 2b 00 00 00 00 42 c7 44 2b 08 [ 2074.499404][ C1] RSP: 0018:ffffc900001e0640 EFLAGS: 00000206 [ 2074.499416][ C1] RAX: 3a1bfb2c5688ce00 RBX: 1ffff9200003c0d0 RCX: 3a1bfb2c5688ce00 [ 2074.499428][ C1] RDX: dffffc0000000000 RSI: ffffffff8a8c17a0 RDI: ffffffff8adf42e0 [ 2074.499439][ C1] RBP: ffffc900001e0728 R08: ffffffff90b102ff R09: 1ffffffff216205f [ 2074.499450][ C1] R10: dffffc0000000000 R11: fffffbfff2162060 R12: 0000000000000246 [ 2074.499460][ C1] R13: dffffc0000000000 R14: ffff8880b8f3bb00 R15: 0000000000000002 [ 2074.499484][ C1] ? __lock_acquire+0x7c00/0x7c40 [ 2074.499506][ C1] ? __rcu_read_unlock+0xd0/0xd0 [ 2074.499528][ C1] __rcu_read_unlock+0x78/0xd0 [ 2074.499543][ C1] ? __ip_queue_xmit+0x59/0x1c10 [ 2074.499572][ C1] __ip_queue_xmit+0x117b/0x1c10 [ 2074.499588][ C1] ? tcp_push_one+0xf0/0xf0 [ 2074.499614][ C1] ? __ip_queue_xmit+0x59/0x1c10 [ 2074.499636][ C1] __tcp_transmit_skb+0x1cc4/0x31e0 [ 2074.499674][ C1] ? __tcp_send_ack+0x5a0/0x5a0 [ 2074.499701][ C1] ? get_random_u16+0x990/0x990 [ 2074.499749][ C1] ? seqcount_lockdep_reader_access+0x127/0x1d0 [ 2074.499773][ C1] __tcp_retransmit_skb+0x976/0x1360 [ 2074.499800][ C1] tcp_retransmit_skb+0x2e/0x350 [ 2074.499823][ C1] tcp_retransmit_timer+0x154a/0x27c0 [ 2074.499845][ C1] tcp_write_timer+0x126/0x280 [ 2074.499862][ C1] call_timer_fn+0x1ac/0x670 [ 2074.499877][ C1] ? tcp_init_xmit_timers+0xb0/0xb0 [ 2074.499890][ C1] ? call_timer_fn+0xcf/0x670 [ 2074.499905][ C1] ? __run_timers+0x810/0x810 [ 2074.499923][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 2074.499939][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 2074.499955][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 2074.499971][ C1] ? tcp_init_xmit_timers+0xb0/0xb0 [ 2074.499987][ C1] __run_timers+0x56c/0x810 [ 2074.500012][ C1] ? detach_timer+0x350/0x350 [ 2074.500031][ C1] ? lock_chain_count+0x20/0x20 [ 2074.500054][ C1] run_timer_softirq+0x63/0xf0 [ 2074.500070][ C1] handle_softirqs+0x291/0x910 [ 2074.500088][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 2074.500104][ C1] ? do_softirq+0x210/0x210 [ 2074.500117][ C1] ? hrtimer_interrupt+0x775/0x980 [ 2074.500140][ C1] __irq_exit_rcu+0x13b/0x230 [ 2074.500154][ C1] ? irq_exit_rcu+0x20/0x20 [ 2074.500176][ C1] irq_exit_rcu+0x5/0x20 [ 2074.500188][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 2074.500204][ C1] [ 2074.500208][ C1] [ 2074.500214][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2074.500232][ C1] RIP: 0010:mod_objcg_state+0x5b7/0x8b0 [ 2074.500258][ C1] Code: 00 00 00 0f 85 6f 01 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 46 49 56 08 41 f7 c6 00 02 00 00 74 a5 fb 4d 85 ff <75> a4 eb aa e8 f0 23 38 02 85 c0 0f 84 9b fb ff ff 48 c7 c0 68 56 [ 2074.500270][ C1] RSP: 0018:ffffc900032e7640 EFLAGS: 00000246 [ 2074.500282][ C1] RAX: 3a1bfb2c5688ce00 RBX: 1ffff9200065ced4 RCX: 3a1bfb2c5688ce00 [ 2074.500294][ C1] RDX: dffffc0000000000 RSI: ffffffff8a8c17a0 RDI: ffffffff8adf42e0 [ 2074.500305][ C1] RBP: ffffc900032e7750 R08: ffffffff90b102e7 R09: 1ffffffff216205c [ 2074.500316][ C1] R10: dffffc0000000000 R11: fffffbfff216205d R12: 0000000000000000 [ 2074.500326][ C1] R13: dffffc0000000000 R14: 0000000000000a06 R15: 0000000000000000 [ 2074.500351][ C1] ? mod_objcg_state+0xfd/0x8b0 [ 2074.500369][ C1] ? __memcg_kmem_uncharge_page+0x290/0x290 [ 2074.500397][ C1] slab_post_alloc_hook+0x32e/0x490 [ 2074.500419][ C1] kmem_cache_alloc+0x18b/0x2f0 [ 2074.500434][ C1] ? anon_vma_fork+0x1eb/0x520 [ 2074.500453][ C1] anon_vma_fork+0x1eb/0x520 [ 2074.500473][ C1] copy_mm+0xc1d/0x1680 [ 2074.500498][ C1] ? copy_signal+0x640/0x640 [ 2074.500513][ C1] ? lockdep_init_map_type+0x98/0x8d0 [ 2074.500544][ C1] ? __init_rwsem+0x11e/0x160 [ 2074.500562][ C1] ? copy_signal+0x51f/0x640 [ 2074.500580][ C1] copy_process+0x19a6/0x40c0 [ 2074.500602][ C1] ? __lock_acquire+0x7c40/0x7c40 [ 2074.500623][ C1] ? copy_process+0x974/0x40c0 [ 2074.500647][ C1] ? idle_dummy+0x10/0x10 [ 2074.500664][ C1] ? __lock_acquire+0x7c40/0x7c40 [ 2074.500688][ C1] kernel_clone+0x24b/0x900 [ 2074.500703][ C1] ? trace_call_bpf+0x5d6/0x6b0 [ 2074.500722][ C1] ? trace_call_bpf+0xbf/0x6b0 [ 2074.500741][ C1] ? create_io_thread+0x170/0x170 [ 2074.500763][ C1] ? __lock_acquire+0x7c40/0x7c40 [ 2074.500781][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 2074.500805][ C1] __x64_sys_clone+0x1a7/0x220 [ 2074.500823][ C1] ? __ia32_sys_vfork+0x140/0x140 [ 2074.500847][ C1] ? lock_chain_count+0x20/0x20 [ 2074.500870][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 2074.500887][ C1] do_syscall_64+0x4c/0xa0 [ 2074.500905][ C1] ? clear_bhb_loop+0x60/0xb0 [ 2074.500923][ C1] ? clear_bhb_loop+0x60/0xb0 [ 2074.500942][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2074.500960][ C1] RIP: 0033:0x7fa88c7c6912 [ 2074.500974][ C1] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 2074.500985][ C1] RSP: 002b:00007ffd51fbe720 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2074.501000][ C1] RAX: ffffffffffffffda RBX: 00007ffd51fbe720 RCX: 00007fa88c7c6912 [ 2074.501011][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 2074.501020][ C1] RBP: 00007ffd51fbe8ac R08: 0000000000000000 R09: 0000000000000001 [ 2074.501029][ C1] R10: 000055555ca7b7d0 R11: 0000000000000246 R12: 0000000000000001 [ 2074.501038][ C1] R13: 00000000000927c0 R14: 00000000001f3d0f R15: 00007ffd51fbe900 [ 2074.501059][ C1]