last executing test programs: 4m50.635963989s ago: executing program 4 (id=62): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x806, 0x2, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000500)=ANY=[@ANYRESOCT, @ANYRESDEC=r0, @ANYRESDEC, @ANYRES16], &(0x7f0000000200)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r1 = socket$kcm(0xa, 0x6, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES64, @ANYRES16], 0x0, 0x4}, 0x94) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r2, &(0x7f00000009c0)={&(0x7f00000000c0)={0x2, 0x4e22, @multicast2}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000070000004404a60007036f001c000000000000000000000008000000", @ANYRESOCT], 0x38}, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="850000002200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) r4 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r4, 0x84, 0x17, &(0x7f0000000000), 0x10) syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/ipc\x00') bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x0, 0x21, 0x0, &(0x7f00000001c0)="348b0d151f8218e3c73697e4080049c416b90900000093291cfc5e8b99005e8b99", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000850000000800000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) setsockopt$sock_attach_bpf(r1, 0x10d, 0xa, &(0x7f0000000000)=r5, 0x11) setsockopt$sock_attach_bpf(r1, 0x10d, 0xa, &(0x7f0000000040)=r5, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$SIOCSIFHWADDR(r6, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008d8dff"}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r7, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x1c}, {0x6}]}) ioctl$TUNGETIFF(r7, 0x800454d2, &(0x7f00000002c0)={'bond0\x00'}) r8 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r8, 0x6, 0x10, 0x0, 0x0) 4m49.127130013s ago: executing program 4 (id=69): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='cpuacct.usage_percpu\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x1, 0x84) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/time_for_children\x00') r2 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r2, &(0x7f0000001600)={&(0x7f0000001340)={0x2, 0x5, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x36}, @remote}}}], 0x20}, 0x8000) sendmsg$kcm(r2, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x20000080) socket$kcm(0x29, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0x1}, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001f80)={0xffffffffffffffff}) sendmsg$inet(r3, 0x0, 0x4004004) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[], 0xfffffffffffffe13) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030010000b0fd25a806c8c6f94f90a24", 0x12}], 0x1, 0x0, 0x0, 0x20000000}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8914, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000280)={'wlan0\x00', @multicast}) socket$kcm(0x10, 0x3, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"/2832], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x8, &(0x7f0000000000)={0x4}, 0x8, 0x10, &(0x7f0000000000)={0x1}, 0x10}, 0x94) 4m48.567427721s ago: executing program 4 (id=71): bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000600)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1, 0x8}, 0x50) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000"], 0x0, 0x26}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x14}, 0x94) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x20100, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext={0x8, 0x1}, 0x1000, 0x2, 0xffffff7e, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0) (fail_nth: 1) recvmsg(r2, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x40002182) recvmsg(r2, 0x0, 0x63) r3 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000001540)={&(0x7f0000000040)=@qipcrtr={0x2a, 0x1, 0x4000}, 0x80, 0x0}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x1943}, 0x3a, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1d4}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r4, 0x300f000, 0xe, 0x0, &(0x7f0000000080)="0069c2704ade28eddb0000200000", 0x0, 0x48b8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r5 = socket$kcm(0x10, 0x3, 0x10) r6 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002e000b12d25a80648c2594f90124fc60100c03400a000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 4m47.479836875s ago: executing program 4 (id=78): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004000100080000000100000080000000", @ANYRES32=0x1], 0x50) r0 = socket$kcm(0x2, 0x3, 0x106) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r1) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x2, 0xa, 0x2) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="1307", 0x2}], 0x1}, 0x4051) setsockopt$sock_attach_bpf(r3, 0x1, 0x10, &(0x7f0000001280), 0x4) recvmsg$unix(r3, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x2122) sendmsg$inet(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000012c0)="f9", 0x1}], 0x1}, 0x48844) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)="fa82ab82", 0x4}], 0x1}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x891a, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x401c5820, &(0x7f0000000040)={'bridge_slave_1\x00', @local}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x14, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000001000000ff0f000007"], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b70300000000ff808500000004"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r6}, 0xc) r7 = socket$kcm(0x10, 0x2, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e0000000400000004000000020000000000", @ANYBLOB='\x00\x00\x00\x00', @ANYBLOB], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r8, &(0x7f0000000100), &(0x7f0000000000), 0x2}, 0x20) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) sendmsg$inet(r0, &(0x7f00000016c0)={&(0x7f0000000180)={0x2, 0x0, @local}, 0x10, &(0x7f0000000880)=[{&(0x7f0000000040)="83ac6f4b9a2ffa25922fee4db5d86075d7965b13", 0x14}, {&(0x7f0000000580)="1210366768003b6a3115e205ad12f6795f1aded97d2c32d1", 0x18}], 0x2}, 0x0) 4m46.872695085s ago: executing program 4 (id=87): perf_event_open$cgroup(&(0x7f00000006c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x10}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000080)={0x5, 0x80, 0x3, 0x2, 0x1, 0x5, 0x0, 0x2d9e, 0x0, 0x7, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x401, 0x0, @perf_bp={&(0x7f0000000040), 0x4}, 0x9d33eb28b77135d0, 0x0, 0x6, 0x8, 0x7ed1, 0x8, 0x3ac, 0x0, 0x1, 0x0, 0xb}) (async) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000000)={'veth0_vlan\x00', @random="010000201000"}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x1a}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r2, &(0x7f0000000200), 0x9) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000500)={0x0, 0x4000000, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) (async) close(r3) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x1, &(0x7f0000000d80)=@raw=[@call={0x85, 0x0, 0x0, 0x27}], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) write$cgroup_subtree(r5, 0x0, 0x0) (async) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1}, 0x0) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r5}, 0x94) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{}], 0x1}, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000000c0)}, 0x4000000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400", @ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32], 0x48) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r7, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x4a, &(0x7f0000000380)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0x2b, 0x8, 0x0, 0x0}}, 0x10) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x20, 0x0, 0x0, 0x1000000000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10}, 0x0, 0xca, 0x0, 0x2, 0xfffffffffffffffd, 0x10, 0x0, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r9) (async) recvmsg$unix(r8, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x8, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3ff, 0x7fff}, 0x0, 0x0, 0xc83c, 0x3, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) write$cgroup_subtree(r10, &(0x7f0000000200)=ANY=[], 0x12) 4m46.724983992s ago: executing program 4 (id=90): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x80, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7, 0xfffffffe}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x111, 0x0, 0x9, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20282, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x9000, 0x0, 0x2, 0x4, 0x1000000, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="140000002e000b0fd25a806c8c6f94", 0xf}], 0x1}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b26, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, 0x0}, 0x0) r3 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{0x0}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e20, 0x0, @remote, 0x3}, 0x80, 0x0}, 0x8000) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) r8 = socket$kcm(0xa, 0x2, 0x73) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x5411, &(0x7f0000000240)={0xffffffffffffffff}) sendmsg$sock(r6, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x22000000) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x14, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095", @ANYRESHEX=r7, @ANYRES16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) syz_clone(0x40020000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x57, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r10) syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0) 4m31.486244146s ago: executing program 32 (id=90): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x80, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7, 0xfffffffe}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x111, 0x0, 0x9, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20282, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x9000, 0x0, 0x2, 0x4, 0x1000000, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="140000002e000b0fd25a806c8c6f94", 0xf}], 0x1}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b26, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, 0x0}, 0x0) r3 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001340)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d55545a34effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f949c479757306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a867e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c27578fe3245097c280abe51427a7f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa08ad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282bffff2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae05334d5a44a020000001c0d882a564d74a7c72bf9a2152b261e58fea6d2f93589cfe261dc0410b5ccc92a5a0eab327a33431d62d2b7c75ce654d556c9e1817c1abca762ab53d40da51560351b673363652e1ecb56cfe4a746a45ab13c6014e9f361ab687d1cd1795ce9e05c817b83d76046bdb3709de5df7499a02d2f636a454b85b987580ada025d83bd7b8df28a540d5ec5537942e79f2f1ab25ea5f563bc77e4f9468bd309469880c7e34150ca886d1f13dff7e82dbe296c877d925c38c54cc8137b29028854b6bd57ca893927c331300e16aba792289e135589d93302fc37c73c303e383cdf8ef3f6d6265fe5ee01759d24027475c8901039a898582022bc95992b86dce0710887c8a625d9cbb897bdbfaf49a3f642a169827a9bae4fcfa5212461db000000000000e6ed75ca8fcda7ef3ee336189fef3b3ffb9f38fefc5ff39c4e69e3fa1f8b10ee97123e99b61eba065b1ad67530e7c4f11f9da7ae000002000000610101ad7f79cb9bbf64a0fc109f49fe8799fe266e2ccac80fefe750151f5ddfe51833ec65ece70e07ce8ab5d97db47da8f80000664dc0b86ae2b3ff9d4e220752a6b2f3ea9f793612386496dca5af7b8952aafa796ea7b156d19612297c63"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{0x0}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e20, 0x0, @remote, 0x3}, 0x80, 0x0}, 0x8000) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) r8 = socket$kcm(0xa, 0x2, 0x73) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x5411, &(0x7f0000000240)={0xffffffffffffffff}) sendmsg$sock(r6, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x22000000) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x14, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095", @ANYRESHEX=r7, @ANYRES16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) syz_clone(0x40020000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x57, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r10) syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0) 6.489413739s ago: executing program 1 (id=3250): bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0a00000084000000000b0000010000000000", @ANYRES32=0x0, @ANYBLOB="00000000fdfffffffffffffff65f5f"], 0x50) 6.205880822s ago: executing program 1 (id=3252): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000850000000800000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2, 0x922000000001, 0x106) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_lsm={0xd, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48}, 0x94) r2 = socket$kcm(0x29, 0x5, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0x3, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x100000000}) r4 = socket$kcm(0x2c, 0x3, 0x0) recvmsg$kcm(r4, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x100) setsockopt$sock_attach_bpf(r1, 0x1, 0x25, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000000c0)={r4, r0}) sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)}, 0x2) syz_clone(0x8000, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000600)="d80000001c0081044e81f782db44b9040a1d080220000000401296a1180002000000000040000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d3ad75f0a22a7b42d62e1e3622fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/227, 0xe3}], 0x1, 0x0, 0x0, 0x7400}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000b00000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000efffffffffffffff00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xd, &(0x7f0000000340)=ANY=[@ANYRESHEX=r5, @ANYRESOCT=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r7}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=ANY=[@ANYBLOB="12ee285d48000000040000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000fcffffff00"/28], 0x50) 4.683837958s ago: executing program 1 (id=3259): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d80000001c0081044e81f782db44b904021d08020e0000d88100e0a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="d80000001c0081054e81f782db44b904021d08040e000000100d10a118000c000600142603600e1208000f0000810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee0800080e408e8d8ef52a98516277ce06ebace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad8099639cace81ed0bffec193e2a9ecbee5de6ccd4d6e4ed6f3d93452a92954b43370e970189", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 4.087819737s ago: executing program 1 (id=3262): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x0, 0x0, 0xf3, 0xa, 0x0, 0x0, 0xd006e1258c4875cc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x4c31, 0xc8, 0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x2) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000000000500f37538e486dd630080fc09042c00db5bffffffffff000000060300060023000000000000000000000000ac1414aa2c200007"], 0xfdef) 3.692029257s ago: executing program 1 (id=3265): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c1"], 0xfdef) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r0, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="2c000000000000000700000007000000441c05"], 0x30}, 0x7e8166965e22236a) 3.41943762s ago: executing program 1 (id=3267): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='cpuacct.usage_all\x00', 0x275a, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x40305839, 0x0) r2 = syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000080)=r2, 0x12) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x24, 0x12546, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x6, 0x4}, 0x7602, 0x0, 0x0, 0x0, 0x0, 0xb12e, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, r2, 0xffffffffffffffff, r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x19, 0xa, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x4}, 0x11ac4b, 0x0, 0x7fffffff, 0x7, 0x9, 0x41, 0x7, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r5 = socket$kcm(0x2, 0x1000000000000002, 0x0) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r5, 0x88, 0x67, &(0x7f00000002c0)=r6, 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x62, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x751, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x1, 0x6}, 0x0, 0x10004, 0x6, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) close(r7) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$kcm(r8, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], 0x408}, 0x1) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7, 0x9e0}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x207}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$kcm(0x10, 0x400000002, 0x0) socket$kcm(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x280000, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b701000000000000850000007500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r10 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r10, 0x29, 0x7, &(0x7f0000000000)=r9, 0x4) 1.315944485s ago: executing program 3 (id=3282): r0 = socket$kcm(0x10, 0x400000002, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) r1 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000001200)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x108, 0x0, 0xfffffffe, 0x0, 0x4, 0x0, 0xa}, 0x0, 0x0, 0xffffffffffffffff, 0x1) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1800}, 0x4004840) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)="d8000000180081064e81f782db4cb904021d0800fd027c05e8fe55a10a0006000140020203600e41b0000900ac00060311000000a4000500000080000004015c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d3a6823a45f28fcb", 0xd7}], 0x1}, 0x40) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e"], 0xfe33) 1.187839351s ago: executing program 5 (id=3285): close(0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0xf, &(0x7f00000001c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000900)=r1, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e086dd200000006006000aac14140ce0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x4000}, 0x48) 1.161435552s ago: executing program 3 (id=3286): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000c40)="c10e020022003505d25a806f8c6394f90435fc60040011000a740100053582c137153e37024801", 0x27}], 0x3b, 0x0, 0x31}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20282, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0xa6b2}, 0x9000, 0x0, 0x2, 0x4, 0x1000000, 0x0, 0xffff, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffc}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000700)={r0}, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x36}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) sendmsg$kcm(r1, &(0x7f0000000c00)={&(0x7f0000000840)=@l2tp={0x2, 0x0, @multicast2, 0x5}, 0x80, 0x0}, 0xc801) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x3) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000740)="d800000019008111e0020f060d8107040a60000000020000001455a12a00090008000699e3ffffff14000500fe80817806000567b8b7b94002000009080016060000000000000000d67f6f9400f7d1d9bbe94fa27100a007a2f7457f01896034277ce06bbace8017cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a237e09000000b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad95667e006dcdf634c1f215ce3bb9ad809d50b7b4338c9f1ac76efb42a9ecbee5de6ccd44242f4d643f6fd0f26187b51980dd6", 0xd8}], 0x1, 0x0, 0x6000}, 0x80) socket$kcm(0x10, 0x400000002, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x7, 0x100000000}, 0x116, 0x800000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x2, {{0x42, 0x1}}}, 0x80, 0x0}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) r4 = socket$kcm(0x10, 0x2, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r5, 0x0, 0xe, 0x0, &(0x7f0000000200)="7747a888cb4d2a582690919fdf74", 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) close(r4) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000440)="5c00000013006bcc9e3be35c6e17aa33074b866c1d0000007ea60864160af3653c000cc0080008000000000000001cc00200bc24eab5008000001e618294ff4051f60a84c9f4d4938037aef751022297e786a6d20010000420000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4004084) socket$kcm(0x10, 0x3, 0x10) 1.0070618s ago: executing program 5 (id=3288): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x80000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0x6c8ee96f, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="d8000000180081064e80f782db44b9040a1d080000000000000055a10a0015400100142603600e1208009e00000004010400160040000540fec00000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef409fd2ee0125b91643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d28a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3060000000000000081ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b4337812398", 0xd8}], 0x1, 0x0, 0x0, 0x3f}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="190000000400000004000000020000", @ANYRES32=0x1, @ANYBLOB="00000000000000000000000000000000000000000ac0d166943e4b92f4f9b0bd47fcb3cdfdbb5d3b1c29b80078f7e4f0456c299fca7845cf8cd2eba937c9ff5dcf6bc0707a0908bd575525e1def4d3873ad067d18212ef50957bea4f832007bf4858d08487", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f00000005c0)=ANY=[@ANYBLOB], 0x8) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a1", 0x1c}], 0x1, 0x0, 0x0, 0x7400}, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8, 0x4}, 0x824, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) r5 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r3}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0xe, 0xc, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xd5851c367c9f87d2, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @value=r5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x200}, 0x50) socketpair(0xf, 0x2, 0x9, &(0x7f0000000200)) 935.474284ms ago: executing program 0 (id=3289): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x50}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x42}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000080000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="49b545226bd3b6430ca2d1985f927516618a746dab170df84b3a5553d712fe12b4afbd11d07df2eabba6594d62d4f2ac7f73e869dadc6e1504236f49574c1b29b9c5b0c834c8710aace28dc937a1ccadd12c3ed3", @ANYRESOCT=r1, @ANYRES32=r1, @ANYRESOCT=r0], &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) 931.762264ms ago: executing program 2 (id=3290): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000040000000400000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000000800000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000f00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f0000000180)=""/148, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff79}, 0x16) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0x0, 0xe, 0x0, &(0x7f0000000e40)="04d31fcd275bfc58188e699fa7c9", 0x0, 0x947, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 816.111809ms ago: executing program 3 (id=3291): socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xf000000}, 0x48) sendmsg(0xffffffffffffffff, 0x0, 0x10) 815.80699ms ago: executing program 2 (id=3292): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56}, 0x94) bpf$ITER_CREATE(0x21, &(0x7f0000001a80), 0x8) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x8000) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r0, &(0x7f00000001c0)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000440)="f4000900062b2125fe800000000f0000dc8f850f23846632189c54ebcc00007a000000ad6e911b51", 0x28}], 0x1}, 0x0) 812.42142ms ago: executing program 0 (id=3293): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="f5000000000000c62ff50d2a4afae57ca6f30061146400000000000400000000000000950000cbff98348f"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) 757.644122ms ago: executing program 5 (id=3294): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) close(r0) r1 = socket$kcm(0x2, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r2}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg(r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {0x2}, {}, {}, {0x1}, {}]}, @fwd, @volatile, @volatile, @volatile={0x0, 0x0, 0x0, 0x9, 0x6}]}}, 0x0, 0x96}, 0x28) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_bp={0x0, 0x5}, 0x880, 0x800, 0x0, 0x8, 0x0, 0x7, 0xffff, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x11, 0x65, 0x0, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000004000000000000851000000300000018000000", @ANYRES32, @ANYBLOB="000000000000000095000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x80) socket$kcm(0x10, 0x2, 0x0) 664.031677ms ago: executing program 2 (id=3295): r0 = perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0x6c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x800}, 0x0, 0x0, 0x0, 0x7, 0x6, 0x0, 0x1}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001340)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d55545a34effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f949c479757306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a867e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c27578fe3245097c280abe51427a7f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa08ad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282bffff2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae05334d5a44a020000001c0d882a564d74a7c72bf9a2152b261e58fea6d2f93589cfe261dc0410b5ccc92a5a0eab327a33431d62d2b7c75ce654d556c9e1817c1abca762ab53d40da51560351b673363652e1ecb56cfe4a746a45ab13c6014e9f361ab687d1cd1795ce9e05c817b83d76046bdb3709de5df7499a02d2f636a454b85b987580ada025d83bd7b8df28a540d5ec5537942e79f2f1ab25ea5f563bc77e4f9468bd309469880c7e34150ca886d1f13dff7e82dbe296c877d925c38c54cc8137b29028854b6bd57ca893927c331300e16aba792289e135589d93302fc37c73c303e383cdf8ef3f6d6265fe5ee01759d24027475c8901039a898582022bc95992b86dce0710887c8a625d9cbb897bdbfaf49a3f642a169827a9bae4fcfa5212461db000000000000e6ed75ca8fcda7ef3ee336189fef3b3ffb9f38fefc5ff39c4e69e3fa1f8b10ee97123e99b61eba065b1ad67530e7c4f11f9da7ae000002000000610101ad7f79cb9bbf64a0fc109f49fe8799fe266e2ccac80fefe750151f5ddfe51833ec65ece70e07ce8ab5d97db47da8f80000664dc0b86ae2b3ff9d4e220752a6b2f3ea9f793612386496dca5af7b8952aafa796ea7b156d19612297c63"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000a00)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x8, 0x0, 0x0, 0x21000000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10000000}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x1a) 663.850657ms ago: executing program 0 (id=3296): r0 = socket$kcm(0x10, 0x400000002, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) r1 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000001200)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x108, 0x0, 0xfffffffe, 0x0, 0x4, 0x0, 0xa}, 0x0, 0x0, 0xffffffffffffffff, 0x1) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1800}, 0x4004840) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)="d8000000180081064e81f782db4cb904021d0800fd027c05e8fe55a10a0006000140020203600e41b0000900ac00060311000000a4000500000080000004015c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d3a6823a45f28fcb", 0xd7}], 0x1}, 0x40) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e"], 0xfe33) 662.782727ms ago: executing program 3 (id=3297): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)=[{&(0x7f00000015c0)="1400000015000b63d25a80648c0ff65038bdf737", 0x14}], 0x1}, 0x2000c884) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80720, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x4, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5, 0x408000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x0, 0x7c, 0x0, 0xa, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000740)="2e00000010008188e6b62aa73f72cc9f0ba1f8483d0000005e145802000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000200)={r2}) sendmsg$inet(r1, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x20000010) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(&(0x7f00000002c0)='./file0\x00', 0x8) write$cgroup_pid(r4, &(0x7f0000000000), 0xfdef) recvmsg$unix(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/93, 0x5d}, {&(0x7f0000000040)=""/34, 0x22}, {&(0x7f0000000340)=""/187, 0xbb}, {&(0x7f0000000280)=""/15, 0xf}], 0x4}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000000000000000002"], 0x48) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x890b, &(0x7f0000000100)) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x890c, &(0x7f0000000100)) 596.62637ms ago: executing program 2 (id=3298): r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x800000000009, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x84, 0x1, 0x0, 0x0, 0x0, 0x0, 0x400, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x10ae80, 0x2, 0x0, 0x5, 0x0, 0xd}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000002100)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xfe, 0x80000001}, 0x0, 0xffffffffffffffff, r0, 0x0) 559.327322ms ago: executing program 0 (id=3299): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="170100000000b2000500000000000000850000000f00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000240), 0x4) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000002c0)=@generic={&(0x7f0000000280)='./file0\x00', 0x0, 0x18}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{}, &(0x7f0000000300), &(0x7f0000000340)}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0x2, 0x3, 0xfa, 0x0, 0x1, 0x10000, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x3, 0xa}, 0x50) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x4030, r0}, 0x18) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000005c0), 0x2, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000100)={r1, &(0x7f00000000c0)="faf88c0412d56137874e1041b0143893f6c6db9d372fed72439b66f623bc4a5ce1b706bbf6ed963ba7c2cce1cb84fd699f70d2ac5015", &(0x7f0000000700)=""/4096, 0x4}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb010018000000000000000c0000002c000021000000004c03315dbdd5186f95610b987ab2da40fd88054540d16cabceb71b8c9896f48960c093a7befe5353633cc658f42778e1d2838b04505fd17acf1651ff474c86a9f5feb43e370de52b1b681e3f69fe90d426be30b47b9ec9c2577098b60a4a5b74a82425d2824eff2ccc210d30ea14af83c09fbf5898c027b64dbc605726df43972e6fac66ed2c471961cef2085321310b552b5a704a72952ce95a4f950a403075f5a8098ad5aac1e6782147182eb232764fca08565a68597b09df449d6ee068bc4a2d4d"], 0x0, 0x26}, 0x28) 492.069745ms ago: executing program 5 (id=3300): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000280)=ANY=[@ANYBLOB="1808000000000000000000000100010018110000", @ANYRES32=r1, @ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000036080000010000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) r2 = socket$kcm(0x10, 0x2, 0x0) (rerun: 32) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e140604000000000e0028000f00030002800000121f", 0x2e}], 0x1}, 0x20) 414.429829ms ago: executing program 2 (id=3301): socket$kcm(0x10, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000008000000060000000200000f03000000020000000000000071ceb4c2f7b7b3a500000002000000008f54b7000000000000000f0100"], 0x0, 0x54}, 0x28) bpf$ENABLE_STATS(0x20, &(0x7f0000000500), 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000100)={0x8, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=r0, 0x4) bpf$ENABLE_STATS(0x20, &(0x7f0000000ec0), 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000800)={&(0x7f00000003c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000000700), 0x0, &(0x7f0000000780)=""/119, 0x77}, 0x12240) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a", 0x1d}], 0x1}, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f00000000c0), 0x4) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000017c0)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40092}, 0x80, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="043900002000ef029dd2b97576b11d210a"], 0x33fe0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b000000007f00000000", @ANYRESHEX, @ANYBLOB="16000000d3ec66ecc053c5da5f5f"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0a0000008400000000010000010000000000", @ANYBLOB="00000000fdfffffffffffffff62e"], 0x50) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42f, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3, 0x0, 0x0, 0xd0ff}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ab92b}, {0x85, 0x0, 0x0, 0x8}, {0x4}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x2000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0xc, 0x7}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xffef, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x9}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 409.639779ms ago: executing program 0 (id=3302): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x80000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0x6c8ee96f, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="d8000000180081064e80f782db44b9040a1d080000000000000055a10a0015400100142603600e1208009e00000004010400160040000540fec00000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef409fd2ee0125b91643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d28a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3060000000000000081ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b4337812398", 0xd8}], 0x1, 0x0, 0xb00}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f00000005c0)=ANY=[@ANYBLOB='E'], 0x8) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, 0x0, 0x0, 0x7400}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a1", 0x1c}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)}], 0x1, 0x0, 0x0, 0x7400}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000580)=ANY=[], 0xfe33) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8, 0x4}, 0x824, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) r5 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000180), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0xe, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000002090000850000004300000095"], 0x0, 0x7, 0x0, 0x0, 0x0, 0xd5851c367c9f87d2, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @value=r5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x200}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x200}) socketpair(0xf, 0x2, 0x9, &(0x7f0000000200)) 183.94704ms ago: executing program 3 (id=3303): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) sendmsg$sock(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000100)="8c475440fffaae083a59ce04ca18a96d928f581367ad78830c4d2f3e8eb0c572d3dbeba5b2a2b0a5fc4a9cde393b543a210047516caab0315461ad267897b3cc072e52e974b32c0a42af7403409def6322263b23fe113065cb25198ae381c6443c9b9e23", 0x64}, {&(0x7f0000000180)="16741b07e2c144bd90a5fcb875b2db271e19e31341390cffaceafb7bcf728640f0e0f6cff1ec9ad5d53a05d244f65217f2c6f9955f54c5cafa4f842a036860020a5dccbbac2ea00189cf8e61db8dfe6ab97ed4aec9ae2a3c14288f38c7342e86b5998f7119732e7b25fd8c0fb15f54ae83327e0d0bcb", 0x76}, {&(0x7f0000000200)="2ac5559ab215e75df5e6b1b958e1bc76863e0274386adc417a9e893363422db74b855ec2a92f1bad0df99f9106ea1a891790b7c5675a0c5c12f5b15475741719434c745a469e3619e0323d73eb", 0x4d}, {&(0x7f0000000280)="f6b1e2b245a306a3886b14137807e744", 0x10}, {&(0x7f0000001500)="81d2779a68a42eec856428a58404424b54957e05290713b812ca584796d197318444cfbecd4af40481d2d65ebe5e9509ab805ffe24cc486936bd1e7b0a9cf9f6c4e0a1f9675961fec05f9ea722e137ecfdd080ed6702568f7780c73ace68d79bbd4a34bfc677fe87351c531df6b5f84a38691fabda0ef34e1055d831fd9f3e33bd26cc7be4fb2d3091ebfe436e6135e164a8bef51ac615a647a20d585965ce757b339e096be684dce170776b4460e4177e896da7bb1eed9e49c433f1a9c81ed84e86a56a6277c1d766c42d6a1239e4b9757f", 0xd2}, {&(0x7f00000002c0)="f450169fa72c12bf58130755a706de2b6f4ae08de40d2f80d21fd3d3d583c926036aed829fbc1a8f74ce5fede094831a1b4a2b1402ad33e8c52e8dc735ba115161b6de732dac8c31cc59", 0x4a}], 0x6, &(0x7f0000001600)=[@timestamping={{0x14, 0x1, 0x25, 0x39ea}}, @mark={{0x14, 0x1, 0x24, 0x1ff}}, @txtime={{0x18, 0x1, 0x3d, 0x1ff}}, @txtime={{0x18, 0x1, 0x3d, 0xfffffffffffffff7}}], 0x60}, 0x20000000) recvmsg$kcm(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f00000028c0)=[{&(0x7f00000016c0)=""/107, 0x6b}, {&(0x7f0000001740)=""/207, 0xcf}, {&(0x7f0000001840)=""/4096, 0x1000}, {&(0x7f0000002840)=""/93, 0x5d}], 0x4, &(0x7f0000002900)=""/191, 0xbf}, 0x12040) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="ffffffffeb000000000000000d00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000008f00008500000082000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0xe, 0x0, &(0x7f0000000800)="0000000000000000606b53cc7273", 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001680)={{r3}, &(0x7f0000000440), &(0x7f00000004c0)}, 0x20) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030020000b12d25a80648c2594f90124fc60100c074002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 183.13804ms ago: executing program 5 (id=3304): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="d8000000190081154e81f782db4cb904021d0820fd02fe02e8fe50a10a000548258848000c600e41b0000b20ac00080325000000040015000a00ff150048035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x0) 182.845911ms ago: executing program 0 (id=3305): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000040000000000850000009d0000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x1d, &(0x7f0000000100), 0x4) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={0x1}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000280)=ANY=[@ANYBLOB="b7000000ff000003bfa30000000000000703000000feffff620af0fff8ffffff71a4f0ff0000000015040200000000001d4002"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'veth0_to_batadv\x00', 0x2}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'veth1_vlan\x00', 0x4021}) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) openat$tun(0xffffffffffffff9c, 0x0, 0x48440, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000008c0), 0x4) 167.206241ms ago: executing program 2 (id=3306): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x0, 0x24, 0x0, 0x53) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{r1}, &(0x7f0000000000), &(0x7f00000001c0)='%+9llu \x00'}, 0x20) (async) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50) (async) socket$kcm(0x11, 0x3, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x3da9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext, 0x10c803, 0x47c3, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xdd, 0x708}, 0x0, 0x3, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r4 = socket$kcm(0xa, 0x1, 0x0) (async) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f00000002c0)={0x0, 0x6000, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000010008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000100020400bf050005001201", 0x67}], 0x1}, 0x0) (async) setsockopt$sock_attach_bpf(r4, 0x6, 0xe, &(0x7f00000000c0), 0xd8) (async) socket$kcm(0x2b, 0x1, 0x0) r6 = syz_clone(0x4000000, &(0x7f0000001a00)="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", 0x96b, 0x0, 0x0, &(0x7f0000000900)) perf_event_open(&(0x7f0000000880)={0x4, 0x80, 0x0, 0xc, 0x4b, 0xff, 0x0, 0x0, 0x2800, 0xb, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0xad, 0x1, @perf_bp={&(0x7f00000000c0), 0x2}, 0x1000a8, 0x4, 0x5, 0x9, 0x101, 0x831, 0x1, 0x0, 0x2, 0x0, 0x3}, r6, 0x4, 0xffffffffffffffff, 0x0) (async) r7 = openat$tun(0xffffffffffffff9c, 0x0, 0x80440, 0x0) (async) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0}, 0x20) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x3fff, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10, 0x0}, 0x34000001) (async) r8 = socket$kcm(0x21, 0x2, 0xa) setsockopt$sock_attach_bpf(r8, 0x110, 0x2, &(0x7f0000000140), 0x16) (async) ioctl$TUNATTACHFILTER(r7, 0x401054d5, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f00000001c0)={0x4, 0x80, 0x6, 0x50, 0xf7, 0x81, 0x0, 0x1, 0x2800, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x80, 0x6, @perf_bp={&(0x7f0000000280), 0x8}, 0x420, 0x8, 0xf, 0x4, 0x1, 0x9, 0x3, 0x0, 0x2, 0x0, 0x8}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000840)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf09000000000000550901"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x0, &(0x7f0000000180), 0x0, 0x9, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) (async) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80720, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000900)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f88fffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) 94.562345ms ago: executing program 5 (id=3307): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) write$cgroup_devices(0xffffffffffffffff, &(0x7f00000000c0)={'c', ' *:* ', 'rwm\x00'}, 0xa) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x18, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3ff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x5b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xdfcf1cabef880466, 0x1a, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_fd={0x18, 0xb, 0x1, 0x0, 0x1}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000340)='GPL\x00', 0x272c0a8c, 0xca, &(0x7f0000000380)=""/202, 0x40f00, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x1, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r0}, &(0x7f0000000200), 0x0}, 0x20) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b00)={{r5}, &(0x7f0000000a80), &(0x7f0000000ac0)=r2}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) sendmsg$inet(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xeaff}, 0x48c0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001f00)=ANY=[@ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYBLOB], 0x48) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000780)={r7, 0x0, 0x0, 0x4}, 0x20) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 0s ago: executing program 3 (id=3308): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000000), 0x4) socket$kcm(0x10, 0x0, 0x0) socket$kcm(0x11, 0x2, 0x300) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0], 0x0, 0xfb, &(0x7f0000000540)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000580), &(0x7f0000000640), 0x8, 0x57, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$kcm(0x11, 0x200000000000002, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r1, &(0x7f0000000740)=ANY=[@ANYBLOB="1e030a204d8c71ef2685634a8270e7123c00000000000200000000000000ac1414cf14"], 0xffdd) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x8, 0x4, 0x4, 0x4, 0x0, 0x1}, 0x48) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000640)={r3}, 0x70) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', r0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r4}, 0xc) close(0xffffffffffffffff) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x13, &(0x7f0000001040)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x10, 0x2, 0x10) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000900)=ANY=[], &(0x7f0000000800)=""/244, 0x4a, 0xf4, 0x1}, 0x28) socket$kcm(0xa, 0x1, 0x0) kernel console output (not intermixed with test programs): 80 [ 245.493672][ T9971] ? __fdget_pos+0x1e2/0x370 [ 245.498377][ T9971] ? ksys_write+0x71/0x260 [ 245.502804][ T9971] ksys_write+0x152/0x260 [ 245.507138][ T9971] ? __ia32_sys_read+0x80/0x80 [ 245.511989][ T9971] ? lockdep_hardirqs_on+0x94/0x140 [ 245.517187][ T9971] do_syscall_64+0x4c/0xa0 [ 245.521703][ T9971] ? clear_bhb_loop+0x30/0x80 [ 245.526379][ T9971] ? clear_bhb_loop+0x30/0x80 [ 245.531344][ T9971] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 245.537329][ T9971] RIP: 0033:0x7f2ae1ac6799 [ 245.541920][ T9971] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 245.561700][ T9971] RSP: 002b:00007f2adfd20028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 245.570176][ T9971] RAX: ffffffffffffffda RBX: 00007f2ae1d3ffa0 RCX: 00007f2ae1ac6799 [ 245.578180][ T9971] RDX: 000000000000fdef RSI: 0000200000000300 RDI: 00000000000000c8 [ 245.586499][ T9971] RBP: 00007f2adfd20090 R08: 0000000000000000 R09: 0000000000000000 [ 245.594560][ T9971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 245.602634][ T9971] R13: 00007f2ae1d40038 R14: 00007f2ae1d3ffa0 R15: 00007ffd9185ac28 [ 245.610629][ T9971] [ 245.671294][ T9973] FAULT_INJECTION: forcing a failure. [ 245.671294][ T9973] name failslab, interval 1, probability 0, space 0, times 0 [ 245.701524][ T9973] CPU: 0 PID: 9973 Comm: syz.1.1930 Not tainted syzkaller #0 [ 245.708945][ T9973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 245.719320][ T9973] Call Trace: [ 245.722607][ T9973] [ 245.725533][ T9973] dump_stack_lvl+0x188/0x250 [ 245.730340][ T9973] ? show_regs_print_info+0x20/0x20 [ 245.735546][ T9973] ? load_image+0x400/0x400 [ 245.740143][ T9973] ? __might_sleep+0xf0/0xf0 [ 245.744730][ T9973] ? __lock_acquire+0x7d10/0x7d10 [ 245.749771][ T9973] should_fail+0x38c/0x4c0 [ 245.754224][ T9973] should_failslab+0x5/0x20 [ 245.758981][ T9973] slab_pre_alloc_hook+0x51/0xc0 [ 245.763938][ T9973] __kmalloc_node_track_caller+0x68/0x3a0 [ 245.769693][ T9973] ? alloc_skb_with_frags+0xa7/0x730 [ 245.775073][ T9973] ? kmem_cache_alloc_node+0x162/0x2d0 [ 245.780632][ T9973] ? __alloc_skb+0xf4/0x750 [ 245.785258][ T9973] ? alloc_skb_with_frags+0xa7/0x730 [ 245.790553][ T9973] __alloc_skb+0x22c/0x750 [ 245.794972][ T9973] alloc_skb_with_frags+0xa7/0x730 [ 245.800108][ T9973] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 245.806739][ T9973] sock_alloc_send_pskb+0x87f/0x9a0 [ 245.811960][ T9973] ? sock_kzfree_s+0x50/0x50 [ 245.816643][ T9973] ? do_raw_spin_lock+0x128/0x2f0 [ 245.821666][ T9973] ? __rwlock_init+0x140/0x140 [ 245.826528][ T9973] ? do_raw_spin_unlock+0x11d/0x230 [ 245.831727][ T9973] unix_dgram_sendmsg+0x5fc/0x18a0 [ 245.836867][ T9973] ? aa_sk_perm+0x7dc/0x910 [ 245.841366][ T9973] ? unix_dgram_poll+0x680/0x680 [ 245.846300][ T9973] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 245.852809][ T9973] ? aa_sock_msg_perm+0x94/0x150 [ 245.857747][ T9973] ? unix_seqpacket_sendmsg+0x108/0x1d0 [ 245.863290][ T9973] ? unix_dgram_peer_wake_me+0x430/0x430 [ 245.869095][ T9973] ____sys_sendmsg+0x5b7/0x8f0 [ 245.873871][ T9973] ? __sys_sendmsg_sock+0x30/0x30 [ 245.879047][ T9973] ? import_iovec+0x6f/0xa0 [ 245.883651][ T9973] ___sys_sendmsg+0x236/0x2e0 [ 245.888328][ T9973] ? __sys_sendmsg+0x2a0/0x2a0 [ 245.893186][ T9973] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 245.899212][ T9973] __se_sys_sendmsg+0x1af/0x290 [ 245.904269][ T9973] ? __x64_sys_sendmsg+0x80/0x80 [ 245.909424][ T9973] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 245.915538][ T9973] ? lockdep_hardirqs_on+0x94/0x140 [ 245.920768][ T9973] do_syscall_64+0x4c/0xa0 [ 245.925201][ T9973] ? clear_bhb_loop+0x30/0x80 [ 245.929876][ T9973] ? clear_bhb_loop+0x30/0x80 [ 245.934562][ T9973] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 245.940478][ T9973] RIP: 0033:0x7fe6e9463799 [ 245.944992][ T9973] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 245.964682][ T9973] RSP: 002b:00007fe6e76bd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 245.973446][ T9973] RAX: ffffffffffffffda RBX: 00007fe6e96dcfa0 RCX: 00007fe6e9463799 [ 245.981606][ T9973] RDX: 00000000000048c0 RSI: 0000200000000000 RDI: 0000000000000006 [ 245.989673][ T9973] RBP: 00007fe6e76bd090 R08: 0000000000000000 R09: 0000000000000000 [ 245.997653][ T9973] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 246.005648][ T9973] R13: 00007fe6e96dd038 R14: 00007fe6e96dcfa0 R15: 00007ffd951a7d68 [ 246.013761][ T9973] [ 246.302478][ T9984] __sock_release: fasync list not empty! [ 246.397724][ T9993] device syzkaller0 entered promiscuous mode [ 248.115069][T10051] validate_nla: 5 callbacks suppressed [ 248.115092][T10051] netlink: 'syz.1.1961': attribute type 2 has an invalid length. [ 248.286637][T10056] netlink: 'syz.0.1963': attribute type 6 has an invalid length. [ 248.333042][T10062] netlink: 'syz.3.1966': attribute type 12 has an invalid length. [ 248.459691][T10059] delete_channel: no stack [ 248.584524][T10069] __nla_validate_parse: 12 callbacks suppressed [ 248.584564][T10069] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1969'. [ 248.787464][T10081] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1973'. [ 248.978882][T10091] netlink: 763 bytes leftover after parsing attributes in process `syz.0.1976'. [ 249.027583][T10100] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1981'. [ 249.058551][T10098] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1980'. [ 249.080642][T10102] netlink: 'syz.3.1980': attribute type 12 has an invalid length. [ 249.089558][T10102] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1980'. [ 249.100069][T10093] netlink: 'syz.1.1979': attribute type 6 has an invalid length. [ 249.139628][T10104] netlink: 'syz.5.1982': attribute type 21 has an invalid length. [ 249.165200][T10104] netlink: 100 bytes leftover after parsing attributes in process `syz.5.1982'. [ 249.175473][T10105] netlink: 188 bytes leftover after parsing attributes in process `syz.5.1982'. [ 249.313454][T10108] netlink: 'syz.3.1983': attribute type 10 has an invalid length. [ 249.669496][T10132] netlink: 'syz.1.1992': attribute type 11 has an invalid length. [ 249.779912][T10140] netlink: 'syz.2.1995': attribute type 6 has an invalid length. [ 249.803402][T10144] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1996'. [ 250.057052][T10148] netlink: 'syz.5.1994': attribute type 3 has an invalid length. [ 250.065680][T10148] netlink: 131260 bytes leftover after parsing attributes in process `syz.5.1994'. [ 250.518044][T10159] device wlan0 left promiscuous mode [ 252.242016][T10226] FAULT_INJECTION: forcing a failure. [ 252.242016][T10226] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 252.316969][T10226] CPU: 0 PID: 10226 Comm: syz.0.2025 Not tainted syzkaller #0 [ 252.324775][T10226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 252.335104][T10226] Call Trace: [ 252.338426][T10226] [ 252.341396][T10226] dump_stack_lvl+0x188/0x250 [ 252.346311][T10226] ? show_regs_print_info+0x20/0x20 [ 252.352001][T10226] ? load_image+0x400/0x400 [ 252.356580][T10226] ? __lock_acquire+0x7d10/0x7d10 [ 252.361772][T10226] should_fail+0x38c/0x4c0 [ 252.366249][T10226] _copy_from_iter+0x22e/0x1170 [ 252.371417][T10226] ? __lock_acquire+0x7d10/0x7d10 [ 252.376589][T10226] ? copy_mc_pipe_to_iter+0x7d0/0x7d0 [ 252.382165][T10226] ? __virt_addr_valid+0x3c6/0x470 [ 252.387462][T10226] ? __phys_addr_symbol+0x2b/0x70 [ 252.392695][T10226] ? __check_object_size+0x30c/0x410 [ 252.398130][T10226] netlink_sendmsg+0x758/0xbe0 [ 252.402976][T10226] ? netlink_getsockopt+0x570/0x570 [ 252.408405][T10226] ? aa_sock_msg_perm+0x94/0x150 [ 252.413543][T10226] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 252.418875][T10226] ? security_socket_sendmsg+0x7c/0xa0 [ 252.424774][T10226] ? netlink_getsockopt+0x570/0x570 [ 252.430019][T10226] ____sys_sendmsg+0x5b7/0x8f0 [ 252.434953][T10226] ? __sys_sendmsg_sock+0x30/0x30 [ 252.440250][T10226] ? import_iovec+0x6f/0xa0 [ 252.444987][T10226] ___sys_sendmsg+0x236/0x2e0 [ 252.449728][T10226] ? __sys_sendmsg+0x2a0/0x2a0 [ 252.454656][T10226] __se_sys_sendmsg+0x1af/0x290 [ 252.459700][T10226] ? __x64_sys_sendmsg+0x80/0x80 [ 252.465024][T10226] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 252.471185][T10226] ? lockdep_hardirqs_on+0x94/0x140 [ 252.476495][T10226] do_syscall_64+0x4c/0xa0 [ 252.480960][T10226] ? clear_bhb_loop+0x30/0x80 [ 252.485673][T10226] ? clear_bhb_loop+0x30/0x80 [ 252.490407][T10226] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 252.496306][T10226] RIP: 0033:0x7f2ae1ac6799 [ 252.500821][T10226] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 252.520517][T10226] RSP: 002b:00007f2adfd20028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 252.528945][T10226] RAX: ffffffffffffffda RBX: 00007f2ae1d3ffa0 RCX: 00007f2ae1ac6799 [ 252.537034][T10226] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 252.545041][T10226] RBP: 00007f2adfd20090 R08: 0000000000000000 R09: 0000000000000000 [ 252.553103][T10226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 252.561074][T10226] R13: 00007f2ae1d40038 R14: 00007f2ae1d3ffa0 R15: 00007ffd9185ac28 [ 252.569631][T10226] [ 253.406116][T10271] netlink: zone id is out of range [ 253.530185][T10271] validate_nla: 1 callbacks suppressed [ 253.530236][T10271] netlink: 'syz.3.2042': attribute type 1 has an invalid length. [ 253.716282][T10271] netlink: 'syz.3.2042': attribute type 4 has an invalid length. [ 253.732351][T10271] __nla_validate_parse: 4 callbacks suppressed [ 253.732383][T10271] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.2042'. [ 253.772408][T10275] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2042'. [ 254.108762][T10283] device syzkaller0 entered promiscuous mode [ 254.494541][T10308] FAULT_INJECTION: forcing a failure. [ 254.494541][T10308] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 254.523040][T10308] CPU: 0 PID: 10308 Comm: syz.3.2056 Not tainted syzkaller #0 [ 254.523143][T10306] netlink: 'syz.2.2054': attribute type 6 has an invalid length. [ 254.530547][T10308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 254.530599][T10308] Call Trace: [ 254.530608][T10308] [ 254.530616][T10308] dump_stack_lvl+0x188/0x250 [ 254.530646][T10308] ? show_regs_print_info+0x20/0x20 [ 254.530666][T10308] ? load_image+0x400/0x400 [ 254.530686][T10308] ? __lock_acquire+0x7d10/0x7d10 [ 254.530712][T10308] should_fail+0x38c/0x4c0 [ 254.530737][T10308] _copy_to_user+0x2e/0x130 [ 254.530760][T10308] simple_read_from_buffer+0xe3/0x150 [ 254.530786][T10308] proc_fail_nth_read+0x1a6/0x220 [ 254.530808][T10308] ? proc_fault_inject_write+0x310/0x310 [ 254.530849][T10308] ? fsnotify_perm+0x254/0x560 [ 254.530870][T10308] ? proc_fault_inject_write+0x310/0x310 [ 254.530889][T10308] vfs_read+0x301/0xd60 [ 254.530915][T10308] ? kernel_read+0x1e0/0x1e0 [ 254.530941][T10308] ? __fget_files+0x40f/0x480 [ 254.530965][T10308] ? mutex_lock_nested+0x17/0x20 [ 254.628330][T10308] ? __fdget_pos+0x2bf/0x370 [ 254.632922][T10308] ? ksys_read+0x71/0x260 [ 254.637356][T10308] ksys_read+0x152/0x260 [ 254.641705][T10308] ? vfs_write+0xd60/0xd60 [ 254.646147][T10308] ? lockdep_hardirqs_on+0x94/0x140 [ 254.651365][T10308] do_syscall_64+0x4c/0xa0 [ 254.655781][T10308] ? clear_bhb_loop+0x30/0x80 [ 254.660540][T10308] ? clear_bhb_loop+0x30/0x80 [ 254.665223][T10308] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 254.671242][T10308] RIP: 0033:0x7f84c3c37fce [ 254.675766][T10308] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 254.695485][T10308] RSP: 002b:00007f84c1ed0fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 254.704110][T10308] RAX: ffffffffffffffda RBX: 00007f84c1ed16c0 RCX: 00007f84c3c37fce [ 254.712386][T10308] RDX: 000000000000000f RSI: 00007f84c1ed10a0 RDI: 0000000000000009 [ 254.720471][T10308] RBP: 00007f84c1ed1090 R08: 0000000000000000 R09: 0000000000000000 [ 254.728441][T10308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 254.736419][T10308] R13: 00007f84c3ef1038 R14: 00007f84c3ef0fa0 R15: 00007ffdd3f44108 [ 254.744404][T10308] [ 254.902911][T10320] __sock_release: fasync list not empty! [ 254.964044][T10317] netlink: 'syz.5.2060': attribute type 10 has an invalid length. [ 255.103021][T10317] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 255.202206][T10337] netlink: 188 bytes leftover after parsing attributes in process `syz.0.2068'. [ 255.519453][T10346] netlink: 'syz.2.2072': attribute type 39 has an invalid length. [ 255.677393][T10363] netlink: 192436 bytes leftover after parsing attributes in process `syz.1.2077'. [ 255.692336][T10363] openvswitch: netlink: IP tunnel attribute has 20476 unknown bytes. [ 255.725562][T10355] netlink: 'syz.0.2074': attribute type 6 has an invalid length. [ 255.837836][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.844171][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.353244][T10392] netlink: 'syz.2.2089': attribute type 6 has an invalid length. [ 256.524680][T10400] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2091'. [ 256.662261][T10412] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.2094'. [ 256.824542][T10403] netlink: 209844 bytes leftover after parsing attributes in process `syz.5.2092'. [ 257.021203][T10429] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2101'. [ 257.123759][T10431] netlink: 'syz.0.2101': attribute type 12 has an invalid length. [ 257.129280][T10419] netlink: 212940 bytes leftover after parsing attributes in process `syz.1.2096'. [ 257.155525][T10431] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2101'. [ 258.154380][T10447] netlink: 'syz.5.2107': attribute type 21 has an invalid length. [ 258.174971][T10449] netlink: 'syz.3.2108': attribute type 6 has an invalid length. [ 258.196115][T10452] FAULT_INJECTION: forcing a failure. [ 258.196115][T10452] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 258.271216][T10452] CPU: 0 PID: 10452 Comm: syz.2.2110 Not tainted syzkaller #0 [ 258.278809][T10452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 258.289145][T10452] Call Trace: [ 258.292433][T10452] [ 258.295567][T10452] dump_stack_lvl+0x188/0x250 [ 258.300253][T10452] ? show_regs_print_info+0x20/0x20 [ 258.305463][T10452] ? load_image+0x400/0x400 [ 258.309973][T10452] ? __lock_acquire+0x7d10/0x7d10 [ 258.315102][T10452] should_fail+0x38c/0x4c0 [ 258.319590][T10452] _copy_from_user+0x2e/0x170 [ 258.324364][T10452] __copy_msghdr_from_user+0xc9/0x630 [ 258.329829][T10452] ? verify_lock_unused+0x140/0x140 [ 258.335037][T10452] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 258.340425][T10452] ___sys_sendmsg+0x19a/0x2e0 [ 258.345480][T10452] ? __sys_sendmsg+0x2a0/0x2a0 [ 258.350256][T10452] ? vfs_write+0x8b2/0xd60 [ 258.354690][T10452] __se_sys_sendmsg+0x1af/0x290 [ 258.359558][T10452] ? __x64_sys_sendmsg+0x80/0x80 [ 258.364496][T10452] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 258.370583][T10452] ? lockdep_hardirqs_on+0x94/0x140 [ 258.375855][T10452] do_syscall_64+0x4c/0xa0 [ 258.380286][T10452] ? clear_bhb_loop+0x30/0x80 [ 258.385143][T10452] ? clear_bhb_loop+0x30/0x80 [ 258.389914][T10452] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 258.395812][T10452] RIP: 0033:0x7f033259b799 [ 258.400227][T10452] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 258.420008][T10452] RSP: 002b:00007f03307f5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 258.428518][T10452] RAX: ffffffffffffffda RBX: 00007f0332814fa0 RCX: 00007f033259b799 [ 258.436680][T10452] RDX: 0000000000000040 RSI: 0000200000000000 RDI: 0000000000000003 [ 258.444742][T10452] RBP: 00007f03307f5090 R08: 0000000000000000 R09: 0000000000000000 [ 258.452903][T10452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 258.460978][T10452] R13: 00007f0332815038 R14: 00007f0332814fa0 R15: 00007ffecead5608 [ 258.469052][T10452] [ 258.629108][T10461] netlink: 'syz.5.2112': attribute type 6 has an invalid length. [ 258.863650][T10473] netlink: 'syz.0.2118': attribute type 6 has an invalid length. [ 259.672097][T10499] netlink: 'syz.3.2127': attribute type 21 has an invalid length. [ 259.693838][T10499] __nla_validate_parse: 3 callbacks suppressed [ 259.693858][T10499] netlink: 16166 bytes leftover after parsing attributes in process `syz.3.2127'. [ 259.882850][T10505] netlink: 'syz.5.2129': attribute type 6 has an invalid length. [ 260.576352][T10542] can: request_module (can-proto-5) failed. [ 260.844110][T10550] netlink: 'syz.5.2144': attribute type 6 has an invalid length. [ 260.919556][T10556] netlink: 26 bytes leftover after parsing attributes in process `syz.0.2146'. [ 260.976802][T10556] netlink: 763 bytes leftover after parsing attributes in process `syz.0.2146'. [ 261.101115][T10563] netlink: 'syz.5.2149': attribute type 11 has an invalid length. [ 261.147875][T10564] netlink: 'syz.0.2150': attribute type 1 has an invalid length. [ 261.187502][T10564] netlink: 'syz.0.2150': attribute type 1 has an invalid length. [ 261.205901][T10567] netlink: 'syz.2.2152': attribute type 8 has an invalid length. [ 261.215210][T10567] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2152'. [ 261.245172][T10570] netlink: 'syz.5.2153': attribute type 29 has an invalid length. [ 261.399820][T10576] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.2154'. [ 261.412734][T10577] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2155'. [ 261.610294][T10590] netlink: 16166 bytes leftover after parsing attributes in process `syz.5.2161'. [ 261.684175][T10590] netlink: 156 bytes leftover after parsing attributes in process `syz.5.2161'. [ 261.698620][T10593] netlink: 198628 bytes leftover after parsing attributes in process `syz.0.2162'. [ 261.905697][T10605] netlink: 61211 bytes leftover after parsing attributes in process `syz.5.2167'. [ 261.940923][T10603] device sit0 entered promiscuous mode [ 263.643257][T10642] bridge0: port 3(erspan0) entered disabled state [ 263.650079][T10642] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.658209][T10642] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.840810][T10642] device bridge0 left promiscuous mode [ 264.183506][T10664] validate_nla: 9 callbacks suppressed [ 264.183522][T10664] netlink: 'syz.3.2186': attribute type 6 has an invalid length. [ 265.195145][T10700] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2197'. [ 265.357121][T10702] netlink: 188 bytes leftover after parsing attributes in process `syz.2.2199'. [ 265.381402][T10704] netlink: 14556 bytes leftover after parsing attributes in process `syz.0.2200'. [ 265.544850][T10712] netlink: 'syz.5.2203': attribute type 6 has an invalid length. [ 266.243921][T10743] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2214'. [ 266.309764][T10745] netlink: 'syz.2.2215': attribute type 15 has an invalid length. [ 266.325595][T10745] netlink: 11834 bytes leftover after parsing attributes in process `syz.2.2215'. [ 266.715083][T10757] netlink: 'syz.0.2220': attribute type 6 has an invalid length. [ 267.359501][T10787] netlink: 'syz.5.2230': attribute type 4 has an invalid length. [ 267.436262][T10787] netlink: 85056 bytes leftover after parsing attributes in process `syz.5.2230'. [ 267.497000][T10789] netlink: 'syz.1.2231': attribute type 10 has an invalid length. [ 267.541544][T10782] netlink: 'syz.0.2227': attribute type 1 has an invalid length. [ 268.144550][T10808] netlink: 'syz.2.2237': attribute type 6 has an invalid length. [ 269.170011][T10854] netlink: 'syz.3.2254': attribute type 6 has an invalid length. [ 269.505449][T10865] netlink: 'syz.5.2259': attribute type 15 has an invalid length. [ 269.530367][T10865] netlink: 11834 bytes leftover after parsing attributes in process `syz.5.2259'. [ 269.577979][T10866] netlink: 'syz.3.2258': attribute type 11 has an invalid length. [ 269.854307][T10870] netlink: 'syz.0.2260': attribute type 2 has an invalid length. [ 269.931630][T10872] netlink: 'syz.5.2261': attribute type 8 has an invalid length. [ 269.945743][T10872] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2261'. [ 270.078720][T10879] netlink: 'syz.1.2264': attribute type 16 has an invalid length. [ 270.147344][T10881] delete_channel: no stack [ 270.148737][T10882] netlink: 'syz.2.2263': attribute type 3 has an invalid length. [ 270.152209][T10881] delete_channel: no stack [ 270.186546][T10879] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2264'. [ 270.245523][T10882] netlink: 131260 bytes leftover after parsing attributes in process `syz.2.2263'. [ 270.553304][T10891] netlink: 'syz.5.2269': attribute type 6 has an invalid length. [ 270.886892][T10908] netlink: 'syz.5.2275': attribute type 4 has an invalid length. [ 270.921240][T10908] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2275'. [ 270.994452][T10908] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 271.051948][T10912] netlink: 14601 bytes leftover after parsing attributes in process `syz.1.2276'. [ 271.089862][T10916] netlink: 'syz.3.2278': attribute type 2 has an invalid length. [ 271.159744][T10916] netlink: 'syz.3.2278': attribute type 8 has an invalid length. [ 271.215575][T10916] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2278'. [ 271.929777][T10948] netlink: 198628 bytes leftover after parsing attributes in process `syz.2.2291'. [ 272.083158][T10955] netlink: 14601 bytes leftover after parsing attributes in process `syz.2.2293'. [ 272.633734][T10978] netlink: 188 bytes leftover after parsing attributes in process `syz.2.2303'. [ 272.864992][T10985] netlink: 14556 bytes leftover after parsing attributes in process `syz.3.2305'. [ 272.946842][T10988] __sock_release: fasync list not empty! [ 273.029060][T10991] netlink: 14601 bytes leftover after parsing attributes in process `syz.5.2307'. [ 273.199623][T11001] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2310'. [ 274.389850][T11052] openvswitch: netlink: Key type 4112 is out of range max 29 [ 274.493023][T11052] openvswitch: netlink: Key type 4112 is out of range max 29 [ 274.573510][T11052] openvswitch: netlink: Key type 4112 is out of range max 29 [ 274.629599][T11052] openvswitch: netlink: Key type 4112 is out of range max 29 [ 274.697290][T11052] openvswitch: netlink: Key type 4112 is out of range max 29 [ 274.712474][T11060] validate_nla: 6 callbacks suppressed [ 274.712495][T11060] netlink: 'syz.5.2332': attribute type 6 has an invalid length. [ 274.766457][T11052] openvswitch: netlink: Key type 4112 is out of range max 29 [ 274.849492][T11052] openvswitch: netlink: Key type 4112 is out of range max 29 [ 274.870011][T11063] netlink: 'syz.5.2333': attribute type 6 has an invalid length. [ 274.937530][T11052] openvswitch: netlink: Key type 4112 is out of range max 29 [ 274.992754][T11052] openvswitch: netlink: Key type 4112 is out of range max 29 [ 275.044478][T11069] netlink: 'syz.2.2335': attribute type 10 has an invalid length. [ 275.298348][T11078] netlink: 'syz.2.2339': attribute type 12 has an invalid length. [ 275.307959][T11078] __nla_validate_parse: 24 callbacks suppressed [ 275.307975][T11078] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2339'. [ 275.644849][T11088] netlink: 'syz.1.2343': attribute type 6 has an invalid length. [ 276.897431][T11106] netlink: 13951 bytes leftover after parsing attributes in process `syz.5.2351'. [ 277.468408][T11133] FAULT_INJECTION: forcing a failure. [ 277.468408][T11133] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 277.635536][T11133] CPU: 0 PID: 11133 Comm: syz.1.2360 Not tainted syzkaller #0 [ 277.643042][T11133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 277.653208][T11133] Call Trace: [ 277.656527][T11133] [ 277.659474][T11133] dump_stack_lvl+0x188/0x250 [ 277.664750][T11133] ? show_regs_print_info+0x20/0x20 [ 277.670059][T11133] ? load_image+0x400/0x400 [ 277.674755][T11133] ? __lock_acquire+0x7d10/0x7d10 [ 277.679800][T11133] ? read_lock_is_recursive+0x10/0x10 [ 277.685199][T11133] should_fail+0x38c/0x4c0 [ 277.689644][T11133] _copy_to_user+0x2e/0x130 [ 277.694163][T11133] bpf_prog_test_run_syscall+0x379/0x4f0 [ 277.699820][T11133] ? sock_gen_cookie+0x60/0x60 [ 277.704606][T11133] ? sock_gen_cookie+0x60/0x60 [ 277.709391][T11133] bpf_prog_test_run+0x31e/0x390 [ 277.714514][T11133] __sys_bpf+0x5a5/0x6f0 [ 277.718873][T11133] ? bpf_link_show_fdinfo+0x380/0x380 [ 277.724264][T11133] ? rcu_nmi_exit+0x6f/0xf0 [ 277.728791][T11133] ? vtime_user_exit+0x2c8/0x3e0 [ 277.733866][T11133] __x64_sys_bpf+0x78/0x90 [ 277.738306][T11133] do_syscall_64+0x4c/0xa0 [ 277.742828][T11133] ? clear_bhb_loop+0x30/0x80 [ 277.747524][T11133] ? clear_bhb_loop+0x30/0x80 [ 277.752298][T11133] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 277.758293][T11133] RIP: 0033:0x7fe6e9463799 [ 277.762725][T11133] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 277.782520][T11133] RSP: 002b:00007fe6e76bd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 277.791041][T11133] RAX: ffffffffffffffda RBX: 00007fe6e96dcfa0 RCX: 00007fe6e9463799 [ 277.799036][T11133] RDX: 000000000000000c RSI: 00002000000004c0 RDI: 000000000000000a [ 277.807102][T11133] RBP: 00007fe6e76bd090 R08: 0000000000000000 R09: 0000000000000000 [ 277.815078][T11133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 277.823137][T11133] R13: 00007fe6e96dd038 R14: 00007fe6e96dcfa0 R15: 00007ffd951a7d68 [ 277.831323][T11133] [ 278.175676][T11159] netlink: 'syz.5.2368': attribute type 11 has an invalid length. [ 278.368762][T11166] netlink: 13951 bytes leftover after parsing attributes in process `syz.3.2367'. [ 279.083462][T11174] netlink: 'syz.0.2371': attribute type 1 has an invalid length. [ 279.164155][T11185] netlink: 212940 bytes leftover after parsing attributes in process `syz.5.2373'. [ 279.320502][T11190] netlink: 'syz.2.2377': attribute type 16 has an invalid length. [ 279.392575][T11190] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2377'. [ 279.704435][T11202] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2382'. [ 279.788949][T11202] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2382'. [ 279.816890][T11204] netlink: 'syz.1.2383': attribute type 10 has an invalid length. [ 279.825081][T11204] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 279.833776][T11204] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 279.878971][T11210] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2382'. [ 279.920352][T11202] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2382'. [ 280.113184][T11219] netlink: 'syz.1.2386': attribute type 2 has an invalid length. [ 280.174939][T11219] netlink: 'syz.1.2386': attribute type 8 has an invalid length. [ 280.204361][T11219] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2386'. [ 280.371221][T11227] __nla_validate_parse: 1 callbacks suppressed [ 280.371259][T11227] netlink: 212940 bytes leftover after parsing attributes in process `syz.1.2391'. [ 280.496891][T11235] netlink: 198628 bytes leftover after parsing attributes in process `syz.2.2395'. [ 280.991546][T11252] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2401'. [ 281.344595][T11258] netlink: 13951 bytes leftover after parsing attributes in process `syz.1.2403'. [ 281.375025][T11265] __sock_release: fasync list not empty! [ 281.870931][T11274] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2410'. [ 281.924405][T11274] netlink: 'syz.3.2410': attribute type 8 has an invalid length. [ 281.996371][T11274] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2410'. [ 282.047361][T11284] netlink: 'syz.0.2413': attribute type 6 has an invalid length. [ 282.264234][T11290] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2415'. [ 282.467304][T11299] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.2415'. [ 282.555503][T11299] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2415'. [ 282.641762][T11304] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2421'. [ 283.159984][T11319] netlink: 'syz.0.2425': attribute type 6 has an invalid length. [ 286.054431][T11334] netlink: 'syz.1.2431': attribute type 6 has an invalid length. [ 286.123567][T11334] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2431'. [ 286.442513][T11345] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2435'. [ 286.510446][T11345] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 286.603363][T11352] netlink: 'syz.2.2439': attribute type 3 has an invalid length. [ 286.669706][T11352] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2439'. [ 286.739872][T11358] netlink: 'syz.1.2440': attribute type 10 has an invalid length. [ 286.793176][T11359] netlink: 16178 bytes leftover after parsing attributes in process `syz.5.2438'. [ 287.304754][T11380] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2450'. [ 287.544796][T11387] netlink: 'syz.3.2451': attribute type 8 has an invalid length. [ 287.551818][T11393] netlink: 198628 bytes leftover after parsing attributes in process `syz.0.2454'. [ 287.562398][T11387] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2451'. [ 287.593502][T11391] netlink: 'syz.1.2453': attribute type 16 has an invalid length. [ 287.613564][T11391] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2453'. [ 287.696365][T11396] netlink: 'syz.2.2456': attribute type 6 has an invalid length. [ 287.716151][T11397] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2455'. [ 287.852175][T11397] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 288.151844][T11418] netlink: 'syz.2.2463': attribute type 2 has an invalid length. [ 288.177749][T11418] netlink: 'syz.2.2463': attribute type 8 has an invalid length. [ 288.215484][T11418] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2463'. [ 289.376885][T11467] netlink: 'syz.2.2480': attribute type 21 has an invalid length. [ 289.822314][T11496] netlink: 'syz.5.2491': attribute type 25 has an invalid length. [ 291.231050][T11569] __nla_validate_parse: 12 callbacks suppressed [ 291.231093][T11569] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.2521'. [ 291.358867][T11567] device syzkaller0 entered promiscuous mode [ 291.398688][ T4229] syzkaller0: tun_net_xmit 48 [ 292.033206][T11579] validate_nla: 4 callbacks suppressed [ 292.033256][T11579] netlink: 'syz.5.2524': attribute type 21 has an invalid length. [ 292.050999][T11579] netlink: 100 bytes leftover after parsing attributes in process `syz.5.2524'. [ 292.098124][T11582] netlink: 188 bytes leftover after parsing attributes in process `syz.5.2524'. [ 292.330565][T11593] netlink: 'syz.1.2529': attribute type 10 has an invalid length. [ 292.339000][T11593] netlink: 212412 bytes leftover after parsing attributes in process `syz.1.2529'. [ 292.349292][T11593] net_ratelimit: 9 callbacks suppressed [ 292.349388][T11593] openvswitch: netlink: Flow key attr not present in new flow. [ 292.561530][T11608] netlink: 'syz.3.2535': attribute type 6 has an invalid length. [ 293.071078][T11642] netlink: 14556 bytes leftover after parsing attributes in process `syz.5.2547'. [ 293.132052][T11644] FAULT_INJECTION: forcing a failure. [ 293.132052][T11644] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 293.158741][T11646] netlink: 156 bytes leftover after parsing attributes in process `syz.5.2548'. [ 293.181861][T11644] CPU: 0 PID: 11644 Comm: syz.3.2549 Not tainted syzkaller #0 [ 293.189365][T11644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 293.199429][T11644] Call Trace: [ 293.202717][T11644] [ 293.205650][T11644] dump_stack_lvl+0x188/0x250 [ 293.210344][T11644] ? show_regs_print_info+0x20/0x20 [ 293.215575][T11644] ? load_image+0x400/0x400 [ 293.220125][T11644] ? __lock_acquire+0x7d10/0x7d10 [ 293.225262][T11644] should_fail+0x38c/0x4c0 [ 293.229689][T11644] _copy_from_user+0x2e/0x170 [ 293.234376][T11644] __copy_msghdr_from_user+0xc9/0x630 [ 293.239864][T11644] ? verify_lock_unused+0x140/0x140 [ 293.245079][T11644] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 293.250611][T11644] ___sys_sendmsg+0x19a/0x2e0 [ 293.255495][T11644] ? __sys_sendmsg+0x2a0/0x2a0 [ 293.260371][T11644] ? vfs_write+0x8b2/0xd60 [ 293.264835][T11644] __se_sys_sendmsg+0x1af/0x290 [ 293.269714][T11644] ? __x64_sys_sendmsg+0x80/0x80 [ 293.274748][T11644] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 293.280957][T11644] ? lockdep_hardirqs_on+0x94/0x140 [ 293.286270][T11644] do_syscall_64+0x4c/0xa0 [ 293.290696][T11644] ? clear_bhb_loop+0x30/0x80 [ 293.295464][T11644] ? clear_bhb_loop+0x30/0x80 [ 293.300247][T11644] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 293.306420][T11644] RIP: 0033:0x7f84c3c77799 [ 293.310848][T11644] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 293.330465][T11644] RSP: 002b:00007f84c1ed1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 293.338897][T11644] RAX: ffffffffffffffda RBX: 00007f84c3ef0fa0 RCX: 00007f84c3c77799 [ 293.346965][T11644] RDX: 0000000004000800 RSI: 0000200000000040 RDI: 0000000000000003 [ 293.354936][T11644] RBP: 00007f84c1ed1090 R08: 0000000000000000 R09: 0000000000000000 [ 293.362905][T11644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 293.370874][T11644] R13: 00007f84c3ef1038 R14: 00007f84c3ef0fa0 R15: 00007ffdd3f44108 [ 293.378951][T11644] [ 293.468895][T11654] netlink: 'syz.5.2552': attribute type 10 has an invalid length. [ 293.551352][T11654] team0: Port device wlan1 added [ 295.015092][T11708] netlink: 198628 bytes leftover after parsing attributes in process `syz.2.2568'. [ 295.104209][T11713] syz.1.2569[11713] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 295.104302][T11713] syz.1.2569[11713] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 295.623894][T11722] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2573'. [ 295.660225][T11724] netlink: 'syz.5.2574': attribute type 6 has an invalid length. [ 295.689694][T11726] netlink: 'syz.3.2575': attribute type 2 has an invalid length. [ 295.718201][T11726] netlink: 'syz.3.2575': attribute type 8 has an invalid length. [ 295.749346][T11726] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2575'. [ 295.789824][T11727] netlink: 'syz.2.2573': attribute type 11 has an invalid length. [ 295.888673][T11722] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 295.921667][T11722] CPU: 1 PID: 11722 Comm: syz.2.2573 Not tainted syzkaller #0 [ 295.929174][T11722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 295.939252][T11722] Call Trace: [ 295.942541][T11722] [ 295.945476][T11722] dump_stack_lvl+0x188/0x250 [ 295.950169][T11722] ? show_regs_print_info+0x20/0x20 [ 295.955384][T11722] ? load_image+0x400/0x400 [ 295.959918][T11722] sysfs_warn_dup+0x8a/0xa0 [ 295.964522][T11722] sysfs_do_create_link_sd+0xc0/0x110 [ 295.969913][T11722] device_add+0x7ed/0xfb0 [ 295.974277][T11722] wiphy_register+0x1e81/0x2c30 [ 295.979261][T11722] ? cfg80211_event_work+0x40/0x40 [ 295.984381][T11722] ? minstrel_ht_alloc+0x808/0x980 [ 295.989599][T11722] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 295.995695][T11722] ieee80211_register_hw+0x2aa1/0x3af0 [ 296.001257][T11722] ? ieee80211_tasklet_handler+0x20/0x20 [ 296.007104][T11722] ? rcu_is_watching+0x11/0xa0 [ 296.011882][T11722] ? memset+0x1e/0x40 [ 296.015883][T11722] ? hrtimer_init+0x10c/0x220 [ 296.020576][T11722] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 296.026319][T11722] hwsim_new_radio_nl+0xa6f/0xc40 [ 296.031352][T11722] genl_rcv_msg+0xcea/0xf90 [ 296.035864][T11722] ? genl_bind+0x380/0x380 [ 296.040274][T11722] ? vmacache_find+0x238/0x590 [ 296.045031][T11722] ? verify_lock_unused+0x140/0x140 [ 296.050482][T11722] ? verify_lock_unused+0x140/0x140 [ 296.055675][T11722] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 296.061647][T11722] ? lock_chain_count+0x20/0x20 [ 296.066492][T11722] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 296.073006][T11722] netlink_rcv_skb+0x1f5/0x440 [ 296.077772][T11722] ? genl_bind+0x380/0x380 [ 296.082191][T11722] ? netlink_ack+0xb50/0xb50 [ 296.086774][T11722] ? __lock_acquire+0x7d10/0x7d10 [ 296.091809][T11722] ? down_read+0x1aa/0x2e0 [ 296.096224][T11722] genl_rcv+0x24/0x40 [ 296.100281][T11722] netlink_unicast+0x774/0x920 [ 296.105126][T11722] netlink_sendmsg+0x8ba/0xbe0 [ 296.109997][T11722] ? netlink_getsockopt+0x570/0x570 [ 296.115188][T11722] ? aa_sock_msg_perm+0x94/0x150 [ 296.120305][T11722] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 296.125582][T11722] ? security_socket_sendmsg+0x7c/0xa0 [ 296.131029][T11722] ? netlink_getsockopt+0x570/0x570 [ 296.136233][T11722] ____sys_sendmsg+0x5b7/0x8f0 [ 296.141009][T11722] ? __sys_sendmsg_sock+0x30/0x30 [ 296.146065][T11722] ? import_iovec+0x6f/0xa0 [ 296.150727][T11722] ___sys_sendmsg+0x236/0x2e0 [ 296.155442][T11722] ? __sys_sendmsg+0x2a0/0x2a0 [ 296.160209][T11722] ? __fget_files+0x394/0x480 [ 296.164889][T11722] __se_sys_sendmsg+0x1af/0x290 [ 296.169733][T11722] ? __x64_sys_sendmsg+0x80/0x80 [ 296.174666][T11722] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 296.180645][T11722] ? lockdep_hardirqs_on+0x94/0x140 [ 296.185932][T11722] do_syscall_64+0x4c/0xa0 [ 296.190340][T11722] ? clear_bhb_loop+0x30/0x80 [ 296.195004][T11722] ? clear_bhb_loop+0x30/0x80 [ 296.199668][T11722] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 296.205552][T11722] RIP: 0033:0x7f033259b799 [ 296.210045][T11722] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 296.229739][T11722] RSP: 002b:00007f03307f5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 296.238766][T11722] RAX: ffffffffffffffda RBX: 00007f0332814fa0 RCX: 00007f033259b799 [ 296.246837][T11722] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 296.255078][T11722] RBP: 00007f0332631c99 R08: 0000000000000000 R09: 0000000000000000 [ 296.263308][T11722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 296.271752][T11722] R13: 00007f0332815038 R14: 00007f0332814fa0 R15: 00007ffecead5608 [ 296.279758][T11722] [ 296.287117][T11731] netlink: 14556 bytes leftover after parsing attributes in process `syz.3.2576'. [ 296.374602][T11737] netlink: 'syz.1.2578': attribute type 3 has an invalid length. [ 296.409861][T11734] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.2577'. [ 296.428193][T11737] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2578'. [ 296.475760][T11736] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.2578'. [ 296.513888][T11736] netlink: 8454 bytes leftover after parsing attributes in process `syz.1.2578'. [ 296.610306][T11743] netlink: 'syz.2.2581': attribute type 1 has an invalid length. [ 296.636436][T11743] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.2581'. [ 296.662422][T11747] netlink: 65055 bytes leftover after parsing attributes in process `syz.2.2581'. [ 297.187045][T11765] netlink: 'syz.5.2590': attribute type 21 has an invalid length. [ 297.252086][T11765] netlink: 100 bytes leftover after parsing attributes in process `syz.5.2590'. [ 297.587837][T11780] netlink: 207496 bytes leftover after parsing attributes in process `syz.1.2594'. [ 297.849835][T11792] tap0: tun_chr_ioctl cmd 1074025677 [ 297.876338][T11792] tap0: linktype set to 0 [ 297.936720][T11791] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2598'. [ 298.309065][T11808] netlink: 'syz.1.2604': attribute type 12 has an invalid length. [ 300.346301][T11818] netlink: 'syz.3.2609': attribute type 12 has an invalid length. [ 300.557351][T11830] netlink: 'syz.1.2611': attribute type 21 has an invalid length. [ 300.683759][T11834] netlink: 'syz.3.2614': attribute type 3 has an invalid length. [ 301.508193][T11837] netlink: 'syz.2.2613': attribute type 9 has an invalid length. [ 301.523164][T11826] device wlan0 left promiscuous mode [ 301.530248][T11837] __nla_validate_parse: 7 callbacks suppressed [ 301.530264][T11837] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2613'. [ 301.571069][T11836] device wlan0 entered promiscuous mode [ 301.675076][T11841] netlink: 14556 bytes leftover after parsing attributes in process `syz.3.2617'. [ 301.795679][T11842] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2616'. [ 301.851560][T11843] netlink: 'syz.0.2616': attribute type 8 has an invalid length. [ 301.965581][T11842] netlink: 3064 bytes leftover after parsing attributes in process `syz.0.2616'. [ 302.039984][T11843] netlink: 161700 bytes leftover after parsing attributes in process `syz.0.2616'. [ 302.427694][T11854] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2621'. [ 302.665039][T11863] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.2626'. [ 302.724187][T11873] FAULT_INJECTION: forcing a failure. [ 302.724187][T11873] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 302.743430][T11874] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.2626'. [ 302.753502][T11873] CPU: 1 PID: 11873 Comm: syz.3.2628 Not tainted syzkaller #0 [ 302.760992][T11873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 302.771305][T11873] Call Trace: [ 302.774614][T11873] [ 302.777643][T11873] dump_stack_lvl+0x188/0x250 [ 302.782356][T11873] ? show_regs_print_info+0x20/0x20 [ 302.787675][T11873] ? load_image+0x400/0x400 [ 302.792204][T11873] ? __lock_acquire+0x7d10/0x7d10 [ 302.797356][T11873] should_fail+0x38c/0x4c0 [ 302.801818][T11873] _copy_from_user+0x2e/0x170 [ 302.806609][T11873] iovec_from_user+0x142/0x370 [ 302.811491][T11873] __import_iovec+0x70/0x490 [ 302.816107][T11873] import_iovec+0x6f/0xa0 [ 302.820532][T11873] ___sys_sendmsg+0x1fd/0x2e0 [ 302.825235][T11873] ? __sys_sendmsg+0x2a0/0x2a0 [ 302.830025][T11873] ? vfs_write+0x8b2/0xd60 [ 302.834476][T11873] __se_sys_sendmsg+0x1af/0x290 [ 302.839344][T11873] ? __x64_sys_sendmsg+0x80/0x80 [ 302.844469][T11873] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 302.850492][T11873] ? trace_sys_enter+0x1f/0x80 [ 302.855267][T11873] do_syscall_64+0x4c/0xa0 [ 302.859696][T11873] ? clear_bhb_loop+0x30/0x80 [ 302.864496][T11873] ? clear_bhb_loop+0x30/0x80 [ 302.869198][T11873] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 302.875206][T11873] RIP: 0033:0x7f84c3c77799 [ 302.879653][T11873] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 302.899362][T11873] RSP: 002b:00007f84c1ed1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 302.907877][T11873] RAX: ffffffffffffffda RBX: 00007f84c3ef0fa0 RCX: 00007f84c3c77799 [ 302.915881][T11873] RDX: 0000000004000800 RSI: 0000200000000040 RDI: 0000000000000003 [ 302.924213][T11873] RBP: 00007f84c1ed1090 R08: 0000000000000000 R09: 0000000000000000 [ 302.932472][T11873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 302.940644][T11873] R13: 00007f84c3ef1038 R14: 00007f84c3ef0fa0 R15: 00007ffdd3f44108 [ 302.948653][T11873] [ 303.116854][T11881] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2631'. [ 303.159899][T11891] netlink: 'syz.5.2634': attribute type 10 has an invalid length. [ 303.713694][T11916] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.2642'. [ 303.775296][T11918] netlink: 'syz.1.2640': attribute type 9 has an invalid length. [ 303.814898][T11919] netlink: 'syz.5.2643': attribute type 8 has an invalid length. [ 304.123961][T11923] netlink: 'syz.5.2644': attribute type 16 has an invalid length. [ 304.141526][T11923] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 304.351000][T11934] netlink: 'syz.2.2649': attribute type 2 has an invalid length. [ 304.377806][T11934] netlink: 'syz.2.2649': attribute type 8 has an invalid length. [ 304.472204][T11939] netlink: 'syz.5.2651': attribute type 11 has an invalid length. [ 304.680606][T11951] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 304.687960][T11951] IPv6: NLM_F_CREATE should be set when creating new route [ 304.695256][T11951] IPv6: NLM_F_CREATE should be set when creating new route [ 304.702656][T11951] IPv6: NLM_F_CREATE should be set when creating new route [ 304.888916][T11958] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 305.105997][T11967] device wlan0 left promiscuous mode [ 305.143477][T11977] netlink: 'syz.3.2661': attribute type 9 has an invalid length. [ 305.188775][T11974] device wlan0 entered promiscuous mode [ 305.528970][T11986] netlink: 'syz.0.2667': attribute type 21 has an invalid length. [ 306.208412][T12017] netlink: 'syz.2.2680': attribute type 10 has an invalid length. [ 306.392535][T12022] device wlan0 entered promiscuous mode [ 306.699663][T12028] __nla_validate_parse: 11 callbacks suppressed [ 306.699681][T12028] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2684'. [ 307.037511][T12044] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2690'. [ 307.112772][T12048] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2692'. [ 307.180029][T12046] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2692'. [ 307.353146][T12057] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.2693'. [ 307.830214][T12082] netlink: 131260 bytes leftover after parsing attributes in process `syz.3.2703'. [ 308.144292][T12087] device wlan0 entered promiscuous mode [ 308.169531][T12089] validate_nla: 7 callbacks suppressed [ 308.169549][T12089] netlink: 'syz.1.2715': attribute type 6 has an invalid length. [ 308.192009][T12087] netlink: 'syz.5.2706': attribute type 9 has an invalid length. [ 308.227098][T12094] device wlan0 left promiscuous mode [ 308.241795][T12087] netlink: 209836 bytes leftover after parsing attributes in process `syz.5.2706'. [ 308.515610][T12101] netlink: 'syz.3.2709': attribute type 8 has an invalid length. [ 308.534626][T12101] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2709'. [ 308.789646][T12088] chnl_net:caif_netlink_parms(): no params data found [ 308.845965][T12120] netlink: 'syz.3.2718': attribute type 10 has an invalid length. [ 308.856148][T12116] netlink: 'syz.5.2717': attribute type 6 has an invalid length. [ 309.077766][T12132] netlink: 64535 bytes leftover after parsing attributes in process `syz.3.2722'. [ 309.147657][T12134] FAULT_INJECTION: forcing a failure. [ 309.147657][T12134] name failslab, interval 1, probability 0, space 0, times 0 [ 309.163661][T12088] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.199760][T12088] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.212252][T12134] CPU: 0 PID: 12134 Comm: syz.0.2723 Not tainted syzkaller #0 [ 309.219835][T12134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 309.225737][T12088] device bridge_slave_0 entered promiscuous mode [ 309.229896][T12134] Call Trace: [ 309.239502][T12134] [ 309.242541][T12134] dump_stack_lvl+0x188/0x250 [ 309.247244][T12134] ? show_regs_print_info+0x20/0x20 [ 309.252646][T12134] ? load_image+0x400/0x400 [ 309.254109][T12088] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.257163][T12134] ? __might_sleep+0xf0/0xf0 [ 309.257186][T12134] ? __lock_acquire+0x7d10/0x7d10 [ 309.257204][T12134] ? netlink_insert+0xe95/0x11f0 [ 309.257225][T12134] should_fail+0x38c/0x4c0 [ 309.257249][T12134] should_failslab+0x5/0x20 [ 309.257266][T12134] slab_pre_alloc_hook+0x51/0xc0 [ 309.257285][T12134] kmem_cache_alloc_node+0x47/0x2d0 [ 309.257300][T12134] ? __alloc_skb+0xf4/0x750 [ 309.257322][T12134] __alloc_skb+0xf4/0x750 [ 309.257346][T12134] netlink_sendmsg+0x654/0xbe0 [ 309.257371][T12134] ? netlink_getsockopt+0x570/0x570 [ 309.257397][T12134] ? aa_sock_msg_perm+0x94/0x150 [ 309.257416][T12134] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 309.257431][T12134] ? security_socket_sendmsg+0x7c/0xa0 [ 309.257450][T12134] ? netlink_getsockopt+0x570/0x570 [ 309.257465][T12134] ____sys_sendmsg+0x5b7/0x8f0 [ 309.275065][T12088] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.279291][T12134] ? __sys_sendmsg_sock+0x30/0x30 [ 309.279326][T12134] ? import_iovec+0x6f/0xa0 [ 309.279351][T12134] ___sys_sendmsg+0x236/0x2e0 [ 309.293036][T12088] device bridge_slave_1 entered promiscuous mode [ 309.293293][T12134] ? __sys_sendmsg+0x2a0/0x2a0 [ 309.342727][T12088] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 309.343347][T12134] ? vfs_write+0x8b2/0xd60 [ 309.353330][T12088] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 309.355462][T12134] __se_sys_sendmsg+0x1af/0x290 [ 309.355492][T12134] ? __x64_sys_sendmsg+0x80/0x80 [ 309.355510][T12134] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 309.355543][T12134] ? lockdep_hardirqs_on+0x94/0x140 [ 309.355568][T12134] do_syscall_64+0x4c/0xa0 [ 309.355583][T12134] ? clear_bhb_loop+0x30/0x80 [ 309.355600][T12134] ? clear_bhb_loop+0x30/0x80 [ 309.355618][T12134] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 309.355636][T12134] RIP: 0033:0x7f2ae1ac6799 [ 309.355654][T12134] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 309.355670][T12134] RSP: 002b:00007f2adfd20028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 309.355690][T12134] RAX: ffffffffffffffda RBX: 00007f2ae1d3ffa0 RCX: 00007f2ae1ac6799 [ 309.355703][T12134] RDX: 0000000004000800 RSI: 0000200000000040 RDI: 0000000000000003 [ 309.355715][T12134] RBP: 00007f2adfd20090 R08: 0000000000000000 R09: 0000000000000000 [ 309.495653][T12134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 309.503618][T12134] R13: 00007f2ae1d40038 R14: 00007f2ae1d3ffa0 R15: 00007ffd9185ac28 [ 309.511592][T12134] [ 309.540160][T12088] team0: Port device team_slave_0 added [ 309.578116][T12088] team0: Port device team_slave_1 added [ 309.639962][T12088] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 309.647152][T12088] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 309.674684][T12088] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 309.697404][T12088] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 309.704370][T12088] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 309.731686][T12088] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 309.828127][T12088] device hsr_slave_0 entered promiscuous mode [ 309.874921][T12088] device hsr_slave_1 entered promiscuous mode [ 310.154955][T12158] netlink: 'syz.0.2730': attribute type 6 has an invalid length. [ 310.165639][ T4227] Bluetooth: hci3: command 0x0409 tx timeout [ 310.457598][T12172] netlink: 198628 bytes leftover after parsing attributes in process `syz.3.2736'. [ 310.539135][T12173] netlink: 'syz.0.2733': attribute type 3 has an invalid length. [ 310.642762][T12088] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.829187][T12088] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.189813][T12189] netlink: 'syz.0.2742': attribute type 6 has an invalid length. [ 311.216076][T12192] netlink: 'syz.5.2751': attribute type 11 has an invalid length. [ 311.263162][T12088] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.503224][T12088] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.754873][T12208] __nla_validate_parse: 2 callbacks suppressed [ 311.754909][T12208] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2748'. [ 311.780936][T12209] delete_channel: no stack [ 311.798529][T12208] netlink: 212940 bytes leftover after parsing attributes in process `syz.1.2748'. [ 311.805119][T12088] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 311.820003][T12214] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2750'. [ 311.881889][T12088] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 311.925934][T12088] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 311.950920][T12088] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 312.014468][T12221] netlink: 'syz.1.2753': attribute type 10 has an invalid length. [ 312.028439][T12221] bridge0: port 3(team0) entered disabled state [ 312.036548][T12221] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.047602][T12221] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.101440][T12221] bridge0: port 3(team0) entered blocking state [ 312.108137][T12221] bridge0: port 3(team0) entered forwarding state [ 312.115423][T12221] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.122991][T12221] bridge0: port 2(bridge_slave_1) entered forwarding state [ 312.131383][T12221] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.139192][T12221] bridge0: port 1(bridge_slave_0) entered forwarding state [ 312.179188][T12221] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 312.236577][ T4229] Bluetooth: hci3: command 0x041b tx timeout [ 312.298186][T12228] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.2755'. [ 312.472034][T12088] 8021q: adding VLAN 0 to HW filter on device bond0 [ 312.544310][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 312.556715][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 312.609703][T12088] 8021q: adding VLAN 0 to HW filter on device team0 [ 312.695163][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 312.744322][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 312.774482][ T4250] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.781635][ T4250] bridge0: port 1(bridge_slave_0) entered forwarding state [ 312.869697][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 312.934868][T12242] bridge0: port 3(team0) entered disabled state [ 312.941336][T12242] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.948534][T12242] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.139685][ T7619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 313.163627][ T7619] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 313.236147][ T7619] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.243264][ T7619] bridge0: port 2(bridge_slave_1) entered forwarding state [ 313.296518][ T7619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 313.367063][ T7619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 313.407420][ T7619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 313.443102][ T7619] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 313.473386][ T7619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 313.508735][ T7619] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 313.555982][T12252] validate_nla: 2 callbacks suppressed [ 313.555998][T12252] netlink: 'syz.0.2763': attribute type 41 has an invalid length. [ 313.963062][T12254] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.2763'. [ 313.982941][T12255] netlink: 14 bytes leftover after parsing attributes in process `syz.5.2762'. [ 314.023818][ T7619] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 314.038972][ T7619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 314.087072][ T7619] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 314.108037][ T7619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 314.143268][ T7619] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 314.217555][T12088] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 314.330241][T12270] netlink: 'syz.5.2769': attribute type 1 has an invalid length. [ 314.338326][ T4229] Bluetooth: hci3: command 0x040f tx timeout [ 314.365987][T12270] netlink: 181400 bytes leftover after parsing attributes in process `syz.5.2769'. [ 314.385602][T12271] device sit0 left promiscuous mode [ 314.427642][T12273] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.2770'. [ 314.711493][T12266] device sit0 entered promiscuous mode [ 314.866352][T12283] netlink: 'syz.1.2772': attribute type 10 has an invalid length. [ 315.067640][ T7619] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 315.103364][ T7619] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 315.118665][T12088] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 315.129031][T12310] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.2780'. [ 315.135716][T12312] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2781'. [ 315.241680][T12314] netlink: 'syz.3.2781': attribute type 12 has an invalid length. [ 315.388552][ T1376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 315.414323][ T1376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 315.577322][ T7631] device hsr_slave_0 left promiscuous mode [ 315.588089][ T7631] device hsr_slave_1 left promiscuous mode [ 315.606854][ T7631] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 315.614207][T12339] netlink: 'syz.3.2793': attribute type 4 has an invalid length. [ 315.624610][ T7631] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 315.663680][ T7631] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 315.697334][ T7631] batman_adv: batadv0: Removing interface: virt_wifi0 [ 315.728485][ T7631] device team0 left promiscuous mode [ 315.749514][ T7631] device team_slave_0 left promiscuous mode [ 315.770251][ T7631] device team_slave_1 left promiscuous mode [ 315.802242][ T7631] bridge0: port 3(team0) entered disabled state [ 315.835976][ T7631] device bridge_slave_1 left promiscuous mode [ 315.873548][ T7631] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.894620][ T7631] device bridge_slave_0 left promiscuous mode [ 315.903446][ T7631] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.955280][ T7631] device veth1_vlan left promiscuous mode [ 315.979426][ T7631] device veth0_vlan left promiscuous mode [ 316.114314][ T7631] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 316.202802][ T7631] team0 (unregistering): Port device team_slave_1 removed [ 316.222036][ T7631] team0 (unregistering): Port device team_slave_0 removed [ 316.239574][ T7631] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 316.255636][ T7631] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 316.337808][ T7631] bond0 (unregistering): Released all slaves [ 316.384560][T12088] device veth0_vlan entered promiscuous mode [ 316.396414][ T23] Bluetooth: hci3: command 0x0419 tx timeout [ 316.427833][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 316.440566][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 316.450980][T12356] netlink: 'syz.3.2797': attribute type 8 has an invalid length. [ 316.540531][T12088] device veth1_vlan entered promiscuous mode [ 316.553830][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 316.576685][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 316.636523][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 316.682309][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 316.726968][T12088] device veth0_macvtap entered promiscuous mode [ 316.783476][T12088] device veth1_macvtap entered promiscuous mode [ 316.832471][T12371] netlink: 'syz.0.2803': attribute type 10 has an invalid length. [ 316.854552][T12088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 316.872695][T12088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.903326][T12088] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 316.920975][T12372] __nla_validate_parse: 6 callbacks suppressed [ 316.920990][T12372] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.2802'. [ 316.943233][ T7619] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 316.952185][ T7619] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 316.961180][ T7619] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 316.971570][ T7619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 316.991761][T12088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 317.013057][T12088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.029924][T12088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 317.048477][T12088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.059105][T12088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 317.070567][T12088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.080913][T12088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 317.091830][T12088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.110467][T12088] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 317.125093][ T7619] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 317.143670][ T7619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 317.157438][T12088] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.168562][T12088] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.178340][T12088] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.200954][T12088] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.277098][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.283406][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.328452][T12388] netlink: 'syz.3.2808': attribute type 1 has an invalid length. [ 317.346147][T12388] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.2808'. [ 317.387344][T12382] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2806'. [ 317.503401][T12395] netlink: 'syz.0.2810': attribute type 11 has an invalid length. [ 317.558622][ T7619] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 317.593090][ T7619] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 317.643347][ T1376] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 317.702699][ T7623] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 317.725509][ T7623] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 317.741591][ T7629] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 318.893883][T12432] netlink: 'syz.1.2821': attribute type 3 has an invalid length. [ 318.923271][T12432] netlink: 'syz.1.2821': attribute type 1 has an invalid length. [ 318.938911][T12432] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2821'. [ 319.035122][T12438] device syzkaller0 entered promiscuous mode [ 319.181618][T12447] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.2825'. [ 319.560693][T12454] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.2829'. [ 320.263741][T12491] device wg2 entered promiscuous mode [ 320.391146][T12495] netlink: 'syz.1.2841': attribute type 2 has an invalid length. [ 320.440591][T12495] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2841'. [ 320.624834][T12500] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2842'. [ 321.089482][T12514] netlink: 'syz.0.2849': attribute type 39 has an invalid length. [ 321.501590][T12525] netlink: 'syz.1.2854': attribute type 4 has an invalid length. [ 321.519924][T12525] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2854'. [ 321.678252][T12525] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 322.171187][T12554] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.2866'. [ 322.302327][T12558] netlink: 'syz.2.2867': attribute type 10 has an invalid length. [ 322.548279][T12580] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2875'. [ 322.591822][T12580] netlink: 'syz.5.2875': attribute type 12 has an invalid length. [ 322.628805][T12580] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2875'. [ 322.658432][T12583] netlink: 212940 bytes leftover after parsing attributes in process `syz.1.2877'. [ 322.700012][T12592] netlink: 'syz.3.2876': attribute type 17 has an invalid length. [ 322.766500][T12592] netlink: 'syz.3.2876': attribute type 16 has an invalid length. [ 322.930560][T12592] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2876'. [ 323.018494][T12589] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.2878'. [ 323.132120][T12600] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2883'. [ 324.097818][T12619] netlink: 'syz.1.2890': attribute type 8 has an invalid length. [ 324.121711][T12619] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2890'. [ 324.362514][T12636] netlink: 14556 bytes leftover after parsing attributes in process `syz.1.2895'. [ 324.856934][T12654] netlink: 'syz.2.2898': attribute type 3 has an invalid length. [ 324.937034][T12654] netlink: 131260 bytes leftover after parsing attributes in process `syz.2.2898'. [ 325.476380][T12679] FAULT_INJECTION: forcing a failure. [ 325.476380][T12679] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 325.547613][T12679] CPU: 0 PID: 12679 Comm: syz.5.2913 Not tainted syzkaller #0 [ 325.555192][T12679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 325.565340][T12679] Call Trace: [ 325.568624][T12679] [ 325.571751][T12679] dump_stack_lvl+0x188/0x250 [ 325.576492][T12679] ? show_regs_print_info+0x20/0x20 [ 325.581766][T12679] ? load_image+0x400/0x400 [ 325.586288][T12679] ? __lock_acquire+0x7d10/0x7d10 [ 325.591696][T12679] should_fail+0x38c/0x4c0 [ 325.596311][T12679] _copy_from_iter+0x22e/0x1170 [ 325.601181][T12679] ? __lock_acquire+0x7d10/0x7d10 [ 325.606231][T12679] ? copy_mc_pipe_to_iter+0x7d0/0x7d0 [ 325.611735][T12679] ? __virt_addr_valid+0x3c6/0x470 [ 325.616956][T12679] ? __phys_addr_symbol+0x2b/0x70 [ 325.622072][T12679] ? __check_object_size+0x30c/0x410 [ 325.624981][T12683] netlink: 'syz.1.2915': attribute type 4 has an invalid length. [ 325.627362][T12679] netlink_sendmsg+0x758/0xbe0 [ 325.627393][T12679] ? netlink_getsockopt+0x570/0x570 [ 325.627411][T12679] ? aa_sock_msg_perm+0x94/0x150 [ 325.650157][T12679] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 325.655449][T12679] ? security_socket_sendmsg+0x7c/0xa0 [ 325.660929][T12679] ? netlink_getsockopt+0x570/0x570 [ 325.666127][T12679] ____sys_sendmsg+0x5b7/0x8f0 [ 325.670994][T12679] ? __sys_sendmsg_sock+0x30/0x30 [ 325.676017][T12679] ? import_iovec+0x6f/0xa0 [ 325.680718][T12679] ___sys_sendmsg+0x236/0x2e0 [ 325.685394][T12679] ? __sys_sendmsg+0x2a0/0x2a0 [ 325.690151][T12679] ? vfs_write+0x8b2/0xd60 [ 325.694569][T12679] __se_sys_sendmsg+0x1af/0x290 [ 325.699409][T12679] ? __x64_sys_sendmsg+0x80/0x80 [ 325.704330][T12679] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 325.710311][T12679] ? lockdep_hardirqs_on+0x94/0x140 [ 325.715613][T12679] do_syscall_64+0x4c/0xa0 [ 325.720123][T12679] ? clear_bhb_loop+0x30/0x80 [ 325.724870][T12679] ? clear_bhb_loop+0x30/0x80 [ 325.729531][T12679] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 325.735411][T12679] RIP: 0033:0x7f91039c7799 [ 325.739818][T12679] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 325.759501][T12679] RSP: 002b:00007f9101c21028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 325.767908][T12679] RAX: ffffffffffffffda RBX: 00007f9103c40fa0 RCX: 00007f91039c7799 [ 325.775971][T12679] RDX: 0000000004000800 RSI: 0000200000000040 RDI: 0000000000000003 [ 325.784468][T12679] RBP: 00007f9101c21090 R08: 0000000000000000 R09: 0000000000000000 [ 325.792597][T12679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 325.800646][T12679] R13: 00007f9103c41038 R14: 00007f9103c40fa0 R15: 00007ffe85074cf8 [ 325.808704][T12679] [ 326.540110][T12686] chnl_net:caif_netlink_parms(): no params data found [ 326.850920][T12686] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.865685][T12686] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.876836][T12686] device bridge_slave_0 entered promiscuous mode [ 326.896131][T12686] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.939542][T12686] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.005917][T12686] device bridge_slave_1 entered promiscuous mode [ 327.288550][T12686] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 327.398649][T12686] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 327.586872][T12736] __nla_validate_parse: 3 callbacks suppressed [ 327.586911][T12736] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2928'. [ 327.765826][T12686] team0: Port device team_slave_0 added [ 327.846918][T12686] team0: Port device team_slave_1 added [ 327.894456][T12743] netlink: 'syz.2.2928': attribute type 11 has an invalid length. [ 327.925622][ T23] Bluetooth: hci4: command 0x0409 tx timeout [ 328.055040][T12686] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 328.084497][T12686] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 328.183493][T12686] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 328.346807][T12686] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 328.361104][T12686] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 328.455013][T12686] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 328.683259][T12755] netlink: 'syz.5.2936': attribute type 3 has an invalid length. [ 328.810433][T12755] netlink: 131260 bytes leftover after parsing attributes in process `syz.5.2936'. [ 328.867350][T12686] device hsr_slave_0 entered promiscuous mode [ 328.920472][T12686] device hsr_slave_1 entered promiscuous mode [ 328.994600][T12764] netlink: 212940 bytes leftover after parsing attributes in process `syz.1.2940'. [ 329.036937][T12686] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 329.075488][T12686] Cannot create hsr debugfs directory [ 329.559897][T12783] netlink: 'syz.2.2945': attribute type 1 has an invalid length. [ 329.749570][T12686] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.894263][T12686] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.005994][ T4231] Bluetooth: hci4: command 0x041b tx timeout [ 330.177282][T12686] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.268559][T12796] netlink: 'syz.5.2949': attribute type 16 has an invalid length. [ 330.295622][T12796] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2949'. [ 330.316155][T12805] netlink: 'syz.2.2950': attribute type 10 has an invalid length. [ 330.335789][T12805] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 330.355838][T12805] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 330.384834][T12814] netlink: 'syz.0.2954': attribute type 21 has an invalid length. [ 330.438645][T12820] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.2955'. [ 330.460980][T12814] netlink: 176 bytes leftover after parsing attributes in process `syz.0.2954'. [ 330.588079][T12686] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.030656][T12686] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 331.054413][T12686] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 331.121562][T12686] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 331.139826][T12686] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 331.231999][ T7631] device erspan0 left promiscuous mode [ 331.263049][ T7631] bridge0: port 3(erspan0) entered disabled state [ 331.587958][T12686] 8021q: adding VLAN 0 to HW filter on device bond0 [ 331.655276][T12881] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2976'. [ 331.726155][ T1376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 331.739279][ T1376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 331.763333][T12686] 8021q: adding VLAN 0 to HW filter on device team0 [ 331.778453][T12881] netlink: 'syz.1.2976': attribute type 12 has an invalid length. [ 331.852421][T12881] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2976'. [ 331.936337][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 331.956548][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 331.977001][ T4250] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.984499][ T4250] bridge0: port 1(bridge_slave_0) entered forwarding state [ 332.075593][ T4231] Bluetooth: hci4: command 0x040f tx timeout [ 332.091058][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 332.148865][T12892] netlink: 212940 bytes leftover after parsing attributes in process `syz.2.2979'. [ 332.159341][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 332.188046][ T4250] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.195368][ T4250] bridge0: port 2(bridge_slave_1) entered forwarding state [ 332.258548][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 332.331721][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 332.376591][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 332.442533][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 332.462992][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 332.480154][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 332.523851][ T7629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 332.541700][ T7629] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 332.561015][ T7629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 332.574861][ T7629] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 332.598302][ T7629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 332.614054][ T7629] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 332.633035][T12914] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.2987'. [ 332.667952][T12912] netlink: 'syz.0.2986': attribute type 10 has an invalid length. [ 332.711906][T12912] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 332.722226][T12912] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 332.731717][T12916] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2988'. [ 332.746443][T12686] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 332.754984][T12919] netlink: 'syz.1.2988': attribute type 12 has an invalid length. [ 332.763174][T12919] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2988'. [ 332.854601][T12921] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2989'. [ 333.096845][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 333.111255][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 333.148745][T12933] netlink: 'syz.1.2993': attribute type 8 has an invalid length. [ 333.159364][T12933] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2993'. [ 333.192518][T12686] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 333.336497][ T7629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 333.360488][ T7629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 333.483408][ T7631] device team0 left promiscuous mode [ 333.490110][ T7631] device team_slave_0 left promiscuous mode [ 333.514392][ T7631] device team_slave_1 left promiscuous mode [ 333.530300][ T7631] device geneve1 left promiscuous mode [ 333.542154][ T7631] @: port 1(team0) entered disabled state [ 333.554168][T12941] netlink: 182816 bytes leftover after parsing attributes in process `syz.2.2996'. [ 333.579495][ T7631] device hsr_slave_0 left promiscuous mode [ 333.591669][ T7631] device hsr_slave_1 left promiscuous mode [ 333.601993][ T7631] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 333.610451][ T7631] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 333.618921][ T7631] device bridge_slave_1 left promiscuous mode [ 333.626405][ T7631] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.640090][ T7631] device bridge_slave_0 left promiscuous mode [ 333.646736][ T7631] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.670261][ T7631] device veth1_macvtap left promiscuous mode [ 333.677311][ T7631] device veth0_macvtap left promiscuous mode [ 333.683625][ T7631] device veth1_vlan left promiscuous mode [ 333.690897][ T7631] device veth0_vlan left promiscuous mode [ 333.926928][ T7631] team0 (unregistering): Port device geneve1 removed [ 333.941974][ T7631] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 334.022350][ T7631] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 334.040778][ T7631] team0 (unregistering): Port device team_slave_1 removed [ 334.058514][ T7631] team0 (unregistering): Port device team_slave_0 removed [ 334.076215][ T7631] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 334.096795][ T7631] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 334.155639][ T4231] Bluetooth: hci4: command 0x0419 tx timeout [ 334.180219][ T7631] bond0 (unregistering): Released all slaves [ 334.244138][T12686] device veth0_vlan entered promiscuous mode [ 334.256446][ T7629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 334.266401][ T7629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 334.276070][ T7629] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 334.284299][ T7629] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 334.293239][T12950] netlink: 14556 bytes leftover after parsing attributes in process `syz.5.2999'. [ 334.360001][T12961] netlink: 188 bytes leftover after parsing attributes in process `syz.2.3003'. [ 334.384420][T12964] netlink: 'syz.5.3004': attribute type 11 has an invalid length. [ 334.410956][T12686] device veth1_vlan entered promiscuous mode [ 334.542792][T12686] device veth0_macvtap entered promiscuous mode [ 334.561236][ T1376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 334.573719][ T1376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 334.637615][T12686] device veth1_macvtap entered promiscuous mode [ 334.676115][ T1376] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 334.692144][ T1376] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 334.763387][T12976] netlink: 'syz.0.3007': attribute type 3 has an invalid length. [ 334.826689][T12686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 334.851446][T12976] netlink: 131260 bytes leftover after parsing attributes in process `syz.0.3007'. [ 334.884849][T12686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.914723][T12686] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 334.952012][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 334.979808][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 334.986072][T12990] FAULT_INJECTION: forcing a failure. [ 334.986072][T12990] name failslab, interval 1, probability 0, space 0, times 0 [ 334.993357][T12986] netlink: 'syz.2.3014': attribute type 10 has an invalid length. [ 335.013460][T12990] CPU: 1 PID: 12990 Comm: syz.1.3015 Not tainted syzkaller #0 [ 335.021155][T12990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 335.031567][T12990] Call Trace: [ 335.034840][T12990] [ 335.037774][T12990] dump_stack_lvl+0x188/0x250 [ 335.042560][T12990] ? show_regs_print_info+0x20/0x20 [ 335.047752][T12990] ? load_image+0x400/0x400 [ 335.052272][T12990] should_fail+0x38c/0x4c0 [ 335.056730][T12990] should_failslab+0x5/0x20 [ 335.061239][T12990] slab_pre_alloc_hook+0x51/0xc0 [ 335.066262][T12990] ? skb_clone+0x1bd/0x350 [ 335.070694][T12990] kmem_cache_alloc+0x3d/0x290 [ 335.075547][T12990] skb_clone+0x1bd/0x350 [ 335.079882][T12990] __netlink_deliver_tap+0x3cd/0x7c0 [ 335.085175][T12990] netlink_deliver_tap+0x16c/0x180 [ 335.090448][T12990] netlink_unicast+0x74f/0x920 [ 335.095382][T12990] netlink_sendmsg+0x8ba/0xbe0 [ 335.100748][T12990] ? netlink_getsockopt+0x570/0x570 [ 335.105930][T12990] ? aa_sock_msg_perm+0x94/0x150 [ 335.110859][T12990] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 335.116133][T12990] ? security_socket_sendmsg+0x7c/0xa0 [ 335.121601][T12990] ? netlink_getsockopt+0x570/0x570 [ 335.126873][T12990] ____sys_sendmsg+0x5b7/0x8f0 [ 335.131729][T12990] ? __sys_sendmsg_sock+0x30/0x30 [ 335.136843][T12990] ? import_iovec+0x6f/0xa0 [ 335.141337][T12990] ___sys_sendmsg+0x236/0x2e0 [ 335.146097][T12990] ? __sys_sendmsg+0x2a0/0x2a0 [ 335.150855][T12990] ? vfs_write+0x8b2/0xd60 [ 335.155283][T12990] __se_sys_sendmsg+0x1af/0x290 [ 335.160128][T12990] ? __x64_sys_sendmsg+0x80/0x80 [ 335.165050][T12990] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 335.171028][T12990] ? lockdep_hardirqs_on+0x94/0x140 [ 335.176236][T12990] do_syscall_64+0x4c/0xa0 [ 335.180640][T12990] ? clear_bhb_loop+0x30/0x80 [ 335.185324][T12990] ? clear_bhb_loop+0x30/0x80 [ 335.190258][T12990] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 335.196144][T12990] RIP: 0033:0x7fe6e9463799 [ 335.200558][T12990] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 335.220295][T12990] RSP: 002b:00007fe6e76bd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 335.228919][T12990] RAX: ffffffffffffffda RBX: 00007fe6e96dcfa0 RCX: 00007fe6e9463799 [ 335.236882][T12990] RDX: 0000000004000800 RSI: 0000200000000040 RDI: 0000000000000003 [ 335.244939][T12990] RBP: 00007fe6e76bd090 R08: 0000000000000000 R09: 0000000000000000 [ 335.252906][T12990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 335.261126][T12990] R13: 00007fe6e96dd038 R14: 00007fe6e96dcfa0 R15: 00007ffd951a7d68 [ 335.269105][T12990] [ 335.314939][T12686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.329057][T12686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.339616][T12686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.353559][T12686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.368144][T12686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.378771][T12686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.393476][T12686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.404871][T12686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.417351][T12686] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 335.434680][ T7629] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 335.446906][ T7629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 335.476964][T12990] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3015'. [ 335.491048][T12686] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.511868][T12686] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.521678][T12686] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.530604][T12686] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.776459][ T7629] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 335.804817][ T7629] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 335.902395][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 336.003989][T13016] device wlan0 entered promiscuous mode [ 336.032028][T13009] netlink: 'syz.2.3022': attribute type 9 has an invalid length. [ 336.066506][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.074951][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.102034][ T7619] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 338.126417][T13075] netlink: 'syz.5.3046': attribute type 10 has an invalid length. [ 338.207952][T13075] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 338.286761][T13075] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 338.351824][T13044] chnl_net:caif_netlink_parms(): no params data found [ 338.568827][T13091] netlink: 'syz.2.3051': attribute type 11 has an invalid length. [ 338.630348][T13093] __nla_validate_parse: 3 callbacks suppressed [ 338.630380][T13093] netlink: 212940 bytes leftover after parsing attributes in process `syz.5.3052'. [ 338.645628][T13044] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.664174][T13044] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.685246][T13044] device bridge_slave_0 entered promiscuous mode [ 338.719092][T13102] delete_channel: no stack [ 338.724388][T13044] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.732603][T13044] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.756854][T13044] device bridge_slave_1 entered promiscuous mode [ 338.795790][ T4231] Bluetooth: hci2: command 0x0409 tx timeout [ 338.847398][T13106] netlink: 'syz.3.3055': attribute type 8 has an invalid length. [ 338.880254][T13106] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3055'. [ 338.937591][T13044] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 338.988158][T13044] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 339.039179][T13044] team0: Port device team_slave_0 added [ 339.061500][T13044] team0: Port device team_slave_1 added [ 339.169496][T13044] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 339.191948][T13044] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 339.220440][T13044] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 339.247707][T13044] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 339.254986][T13044] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 339.291383][T13044] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 339.334101][ T7631] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.471037][ T7631] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.568471][T13044] device hsr_slave_0 entered promiscuous mode [ 339.589262][T13044] device hsr_slave_1 entered promiscuous mode [ 339.903485][T13044] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 339.915623][T13044] Cannot create hsr debugfs directory [ 339.924493][T13133] netlink: 'syz.3.3062': attribute type 10 has an invalid length. [ 339.976813][T13133] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 340.005086][T13133] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 340.057460][ T7631] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.358042][T13147] netlink: 'syz.3.3070': attribute type 28 has an invalid length. [ 340.371895][T13147] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3070'. [ 340.415786][ T7631] bond0: (slave netdevsim0): Releasing backup interface [ 340.876098][T13167] netlink: 'syz.5.3076': attribute type 2 has an invalid length. [ 340.885521][T13167] netlink: 164 bytes leftover after parsing attributes in process `syz.5.3076'. [ 340.916240][ T1110] Bluetooth: hci2: command 0x041b tx timeout [ 340.991496][T13170] netlink: 'syz.3.3078': attribute type 16 has an invalid length. [ 341.020934][T13170] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3078'. [ 341.118522][T13174] netlink: 'syz.2.3079': attribute type 10 has an invalid length. [ 342.969622][T12806] Bluetooth: hci2: command 0x040f tx timeout [ 344.262728][T13193] netlink: 'syz.2.3080': attribute type 10 has an invalid length. [ 344.314262][T13193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 344.329466][T13193] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 344.345644][T13201] netlink: 'syz.0.3084': attribute type 21 has an invalid length. [ 344.373974][T13201] netlink: 176 bytes leftover after parsing attributes in process `syz.0.3084'. [ 344.940650][T13044] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 344.997136][T13044] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 344.998081][T13242] netlink: 198628 bytes leftover after parsing attributes in process `syz.5.3096'. [ 345.022059][T13044] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 345.045835][ T4235] Bluetooth: hci2: command 0x0419 tx timeout [ 345.063631][T13044] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 345.192699][T13245] netlink: 'syz.0.3098': attribute type 9 has an invalid length. [ 345.218546][T13245] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.3098'. [ 345.462418][T13044] 8021q: adding VLAN 0 to HW filter on device bond0 [ 345.774932][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 345.800230][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 345.823411][T13044] 8021q: adding VLAN 0 to HW filter on device team0 [ 345.880760][ T7629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 345.909125][ T7629] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 345.933565][ T7629] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.940746][ T7629] bridge0: port 1(bridge_slave_0) entered forwarding state [ 346.040237][T13280] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3109'. [ 346.091382][T13283] netlink: 212940 bytes leftover after parsing attributes in process `syz.0.3110'. [ 346.117725][ T7629] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 346.130505][ T7629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 346.151751][ T7629] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 346.201086][ T7629] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.208377][ T7629] bridge0: port 2(bridge_slave_1) entered forwarding state [ 346.224855][ T7629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 346.234969][T13281] netlink: 'syz.2.3109': attribute type 12 has an invalid length. [ 346.257290][T13281] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3109'. [ 346.328080][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 346.396391][ T7631] device hsr_slave_0 left promiscuous mode [ 346.416101][ T7631] device hsr_slave_1 left promiscuous mode [ 346.433454][ T7631] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 346.451283][ T7631] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 346.509147][ T7631] device team0 left promiscuous mode [ 346.539090][ T7631] device team_slave_0 left promiscuous mode [ 346.569685][ T7631] device team_slave_1 left promiscuous mode [ 346.597733][ T7631] device geneve1 left promiscuous mode [ 346.610783][ T7631] bridge0: port 3(team0) entered disabled state [ 346.638255][ T7631] device bridge_slave_1 left promiscuous mode [ 346.673589][ T7631] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.710776][ T7631] device bridge_slave_0 left promiscuous mode [ 346.740390][ T7631] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.780398][T13309] sctp: [Deprecated]: syz.0.3121 (pid 13309) Use of struct sctp_assoc_value in delayed_ack socket option. [ 346.780398][T13309] Use struct sctp_sack_info instead [ 346.798795][ T7631] device veth1_vlan left promiscuous mode [ 346.807524][ T7631] device veth0_vlan left promiscuous mode [ 346.892688][T13315] FAULT_INJECTION: forcing a failure. [ 346.892688][T13315] name failslab, interval 1, probability 0, space 0, times 0 [ 346.912760][T13315] CPU: 1 PID: 13315 Comm: syz.3.3123 Not tainted syzkaller #0 [ 346.920339][T13315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 346.930399][T13315] Call Trace: [ 346.933673][T13315] [ 346.936692][T13315] dump_stack_lvl+0x188/0x250 [ 346.941359][T13315] ? show_regs_print_info+0x20/0x20 [ 346.946540][T13315] ? load_image+0x400/0x400 [ 346.951025][T13315] ? __lock_acquire+0x7d10/0x7d10 [ 346.956310][T13315] should_fail+0x38c/0x4c0 [ 346.960860][T13315] should_failslab+0x5/0x20 [ 346.965458][T13315] slab_pre_alloc_hook+0x51/0xc0 [ 346.970503][T13315] kmem_cache_alloc_trace+0x47/0x2a0 [ 346.975835][T13315] ? btf_new_fd+0x1a0/0x910 [ 346.980329][T13315] btf_new_fd+0x1a0/0x910 [ 346.984749][T13315] __sys_bpf+0x58c/0x6f0 [ 346.988978][T13315] ? bpf_link_show_fdinfo+0x380/0x380 [ 346.994331][T13315] ? rcu_nmi_exit+0x6f/0xf0 [ 346.998822][T13315] ? vtime_user_exit+0x2c8/0x3e0 [ 347.003829][T13315] __x64_sys_bpf+0x78/0x90 [ 347.008334][T13315] do_syscall_64+0x4c/0xa0 [ 347.012728][T13315] ? clear_bhb_loop+0x30/0x80 [ 347.017510][T13315] ? clear_bhb_loop+0x30/0x80 [ 347.022212][T13315] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 347.028122][T13315] RIP: 0033:0x7f025b555799 [ 347.032737][T13315] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 347.053050][T13315] RSP: 002b:00007f02597af028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 347.061541][T13315] RAX: ffffffffffffffda RBX: 00007f025b7cefa0 RCX: 00007f025b555799 [ 347.069591][T13315] RDX: 0000000000000028 RSI: 0000200000000380 RDI: 0000000000000012 [ 347.077655][T13315] RBP: 00007f02597af090 R08: 0000000000000000 R09: 0000000000000000 [ 347.085619][T13315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 347.093573][T13315] R13: 00007f025b7cf038 R14: 00007f025b7cefa0 R15: 00007fff2fc2a2b8 [ 347.101625][T13315] [ 347.222897][ T7631] team0 (unregistering): Port device geneve1 removed [ 347.315867][ T7631] team0 (unregistering): Port device team_slave_1 removed [ 347.340292][ T7631] team0 (unregistering): Port device team_slave_0 removed [ 347.357355][ T7631] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 347.377092][ T7631] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 347.464884][ T7631] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 347.474060][ T7631] bond0 (unregistering): Released all slaves [ 347.561849][T13306] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.3120'. [ 347.571847][ T1376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 347.622185][ T1376] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 347.658850][ T1376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 347.677255][ T1376] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 347.686441][ T1376] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 347.694944][T13322] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3125'. [ 347.715926][T13323] netlink: 'syz.3.3125': attribute type 12 has an invalid length. [ 347.723772][T13323] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3125'. [ 347.753628][T13327] netlink: 'syz.5.3127': attribute type 1 has an invalid length. [ 347.809656][T13332] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3126'. [ 347.845809][ T1376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 347.879015][ T1376] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 347.896348][ T1376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 347.905695][ T1376] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 347.920353][T13044] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 348.153728][T13346] netlink: 'syz.5.3132': attribute type 10 has an invalid length. [ 348.388733][T13356] netlink: 'syz.0.3136': attribute type 8 has an invalid length. [ 348.426263][ T1376] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 348.435086][ T1376] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 348.450969][T13044] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 348.649745][ T1376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 348.699616][ T1376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 348.756255][ T1376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 348.787148][ T1376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 348.809117][T13044] device veth0_vlan entered promiscuous mode [ 348.832405][T13044] device veth1_vlan entered promiscuous mode [ 348.865066][ T1376] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 348.879637][ T1376] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 348.904060][ T1376] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 349.008673][ T7638] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 349.029038][ T7638] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 349.054680][ T7638] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 349.121776][T13044] device veth0_macvtap entered promiscuous mode [ 349.161487][T13044] device veth1_macvtap entered promiscuous mode [ 349.255858][T13044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 349.303706][T13044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.349705][T13044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 349.395133][T13044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.461637][T13044] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 349.495497][ T7638] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 349.514082][ T7638] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 349.556227][ T7638] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 349.598789][ T7638] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 349.648719][T13044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 349.686074][T13044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.745348][T13044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 349.765343][T13044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.779144][T13044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 349.789822][T13044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.799742][T13044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 349.810299][T13044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.832452][T13044] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 349.844398][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 349.867903][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 349.893006][T13044] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.912318][T13044] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.933950][T13044] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.954235][T13044] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.562690][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 351.600763][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 351.631506][T13396] __nla_validate_parse: 2 callbacks suppressed [ 351.631521][T13396] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.3149'. [ 351.648069][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 351.805026][ T7619] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 351.813337][ T7619] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 352.102384][T13403] netlink: 14556 bytes leftover after parsing attributes in process `syz.5.3154'. [ 352.114527][ T7619] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 352.127291][T13406] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3155'. [ 352.220215][T13412] netlink: 188 bytes leftover after parsing attributes in process `syz.5.3157'. [ 352.332291][T13417] netlink: 'syz.0.3158': attribute type 39 has an invalid length. [ 352.482566][T13426] netlink: 176 bytes leftover after parsing attributes in process `syz.5.3160'. [ 353.209062][T13451] netlink: 'syz.5.3170': attribute type 10 has an invalid length. [ 353.274384][T13451] team0: Port device wlan1 removed [ 353.490554][T13462] netlink: 'syz.3.3169': attribute type 3 has an invalid length. [ 353.510973][T13462] netlink: 131260 bytes leftover after parsing attributes in process `syz.3.3169'. [ 353.582221][T13465] FAULT_INJECTION: forcing a failure. [ 353.582221][T13465] name failslab, interval 1, probability 0, space 0, times 0 [ 353.613490][T13465] CPU: 0 PID: 13465 Comm: syz.5.3173 Not tainted syzkaller #0 [ 353.620990][T13465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 353.631059][T13465] Call Trace: [ 353.634350][T13465] [ 353.637299][T13465] dump_stack_lvl+0x188/0x250 [ 353.642006][T13465] ? show_regs_print_info+0x20/0x20 [ 353.647304][T13465] ? load_image+0x400/0x400 [ 353.651836][T13465] ? __might_sleep+0xf0/0xf0 [ 353.656438][T13465] ? __lock_acquire+0x7d10/0x7d10 [ 353.661727][T13465] should_fail+0x38c/0x4c0 [ 353.666288][T13465] should_failslab+0x5/0x20 [ 353.670835][T13465] slab_pre_alloc_hook+0x51/0xc0 [ 353.676004][T13465] kmem_cache_alloc_node+0x47/0x2d0 [ 353.681291][T13465] ? __alloc_skb+0xf4/0x750 [ 353.685796][T13465] __alloc_skb+0xf4/0x750 [ 353.690314][T13465] netlink_dump+0x1e8/0xcf0 [ 353.694809][T13465] ? mutex_lock_io_nested+0x60/0x60 [ 353.699997][T13465] ? netlink_lookup+0x1d0/0x1d0 [ 353.704866][T13465] __netlink_dump_start+0x523/0x700 [ 353.710061][T13465] rtnetlink_rcv_msg+0xdd9/0xf30 [ 353.715074][T13465] ? neigh_get+0xd30/0xd30 [ 353.719499][T13465] ? rtnetlink_bind+0x80/0x80 [ 353.724195][T13465] ? __local_bh_enable_ip+0x136/0x1c0 [ 353.730009][T13465] ? lockdep_hardirqs_on+0x94/0x140 [ 353.735206][T13465] ? __local_bh_enable_ip+0x136/0x1c0 [ 353.740566][T13465] ? _local_bh_enable+0xa0/0xa0 [ 353.745407][T13465] ? __dev_queue_xmit+0x1cbf/0x2f80 [ 353.750692][T13465] ? dev_queue_xmit+0x20/0x20 [ 353.755353][T13465] ? memcpy+0x3c/0x60 [ 353.759326][T13465] ? neigh_get+0xd30/0xd30 [ 353.763917][T13465] ? __skb_clone+0x480/0x790 [ 353.768606][T13465] netlink_rcv_skb+0x1f5/0x440 [ 353.773365][T13465] ? rtnetlink_bind+0x80/0x80 [ 353.778120][T13465] ? netlink_ack+0xb50/0xb50 [ 353.782805][T13465] netlink_unicast+0x774/0x920 [ 353.787652][T13465] netlink_sendmsg+0x8ba/0xbe0 [ 353.792414][T13465] ? netlink_getsockopt+0x570/0x570 [ 353.797774][T13465] ? aa_sock_msg_perm+0x94/0x150 [ 353.802904][T13465] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 353.808304][T13465] ? security_socket_sendmsg+0x7c/0xa0 [ 353.814030][T13465] ? netlink_getsockopt+0x570/0x570 [ 353.819654][T13465] ____sys_sendmsg+0x5b7/0x8f0 [ 353.824420][T13465] ? __sys_sendmsg_sock+0x30/0x30 [ 353.829487][T13465] ? import_iovec+0x6f/0xa0 [ 353.834008][T13465] ___sys_sendmsg+0x236/0x2e0 [ 353.838819][T13465] ? __sys_sendmsg+0x2a0/0x2a0 [ 353.843687][T13465] ? vfs_write+0x8b2/0xd60 [ 353.848122][T13465] __se_sys_sendmsg+0x1af/0x290 [ 353.852992][T13465] ? __x64_sys_sendmsg+0x80/0x80 [ 353.857950][T13465] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 353.864131][T13465] ? lockdep_hardirqs_on+0x94/0x140 [ 353.869505][T13465] do_syscall_64+0x4c/0xa0 [ 353.873935][T13465] ? clear_bhb_loop+0x30/0x80 [ 353.878623][T13465] ? clear_bhb_loop+0x30/0x80 [ 353.883306][T13465] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 353.889221][T13465] RIP: 0033:0x7f91039c7799 [ 353.893707][T13465] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 353.913609][T13465] RSP: 002b:00007f9101c21028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 353.922210][T13465] RAX: ffffffffffffffda RBX: 00007f9103c40fa0 RCX: 00007f91039c7799 [ 353.930370][T13465] RDX: 0000000004000800 RSI: 0000200000000040 RDI: 0000000000000003 [ 353.938341][T13465] RBP: 00007f9101c21090 R08: 0000000000000000 R09: 0000000000000000 [ 353.946299][T13465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 353.954517][T13465] R13: 00007f9103c41038 R14: 00007f9103c40fa0 R15: 00007ffe85074cf8 [ 353.962765][T13465] [ 353.994304][T13446] chnl_net:caif_netlink_parms(): no params data found [ 354.255915][T13485] netlink: 198628 bytes leftover after parsing attributes in process `syz.3.3179'. [ 354.286672][T13446] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.332664][T13446] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.368741][T13446] device bridge_slave_0 entered promiscuous mode [ 354.379378][T13446] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.387498][T13446] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.398063][T13446] device bridge_slave_1 entered promiscuous mode [ 354.438342][T13487] IPv6: pim6reg1: Disabled Multicast RS [ 354.498924][T13499] netlink: 'syz.3.3184': attribute type 6 has an invalid length. [ 354.502160][T13494] netlink: 'syz.5.3183': attribute type 1 has an invalid length. [ 354.509274][T13492] netlink: 'syz.5.3183': attribute type 1 has an invalid length. [ 354.561297][T13494] netlink: 168864 bytes leftover after parsing attributes in process `syz.5.3183'. [ 354.601640][T13492] netlink: 168864 bytes leftover after parsing attributes in process `syz.5.3183'. [ 354.622696][T13446] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 354.677366][T13446] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 354.879077][T13446] team0: Port device team_slave_0 added [ 354.926882][T13446] team0: Port device team_slave_1 added [ 355.073500][T13446] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 355.126514][T13446] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 355.195915][ T21] Bluetooth: hci0: command 0x0409 tx timeout [ 355.276234][T13446] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 355.347952][T13446] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 355.416971][T13446] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 355.572796][T13446] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 355.652378][T13520] netlink: 'syz.2.3192': attribute type 9 has an invalid length. [ 355.706635][T13520] netlink: 61951 bytes leftover after parsing attributes in process `syz.2.3192'. [ 355.809172][T13530] netlink: 'syz.1.3195': attribute type 2 has an invalid length. [ 356.077129][T13446] device hsr_slave_0 entered promiscuous mode [ 356.147069][T13446] device hsr_slave_1 entered promiscuous mode [ 356.962292][T13446] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 356.987871][T13446] Cannot create hsr debugfs directory [ 357.206903][T13550] __nla_validate_parse: 1 callbacks suppressed [ 357.206922][T13550] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3201'. [ 357.275546][T12803] Bluetooth: hci0: command 0x041b tx timeout [ 357.468532][T13556] netlink: 'syz.5.3203': attribute type 2 has an invalid length. [ 357.532350][T13556] netlink: 198692 bytes leftover after parsing attributes in process `syz.5.3203'. [ 357.729020][T13446] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.869474][T13446] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.211127][T13573] netlink: 212940 bytes leftover after parsing attributes in process `syz.3.3209'. [ 358.288957][T13578] netlink: 'syz.5.3210': attribute type 29 has an invalid length. [ 359.017398][T13446] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.060058][T13575] netlink: 'syz.3.3209': attribute type 4 has an invalid length. [ 359.075701][T13576] netlink: 'syz.2.3208': attribute type 11 has an invalid length. [ 359.084158][T13578] netlink: 'syz.5.3210': attribute type 29 has an invalid length. [ 359.184440][T13446] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.365693][ T1110] Bluetooth: hci0: command 0x040f tx timeout [ 359.447451][T13587] netlink: 'syz.3.3211': attribute type 8 has an invalid length. [ 359.450437][T13586] netlink: 'syz.2.3213': attribute type 3 has an invalid length. [ 359.483309][T13587] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3211'. [ 359.539366][T13586] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3213'. [ 359.841248][T13446] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 359.927225][T13446] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 359.966943][T13446] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 360.161409][T13446] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 360.769955][T13446] 8021q: adding VLAN 0 to HW filter on device bond0 [ 360.889527][ T7631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 360.918134][ T7631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 360.966534][T13446] 8021q: adding VLAN 0 to HW filter on device team0 [ 361.033285][ T7631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 361.077296][ T7631] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 361.135269][ T7631] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.142950][ T7631] bridge0: port 1(bridge_slave_0) entered forwarding state [ 361.240297][ T7631] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 361.297912][ T7631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 361.328249][ T7631] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 361.386321][ T7631] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.393476][ T7631] bridge0: port 2(bridge_slave_1) entered forwarding state [ 361.442148][ T7631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 361.447299][T12806] Bluetooth: hci0: command 0x0419 tx timeout [ 361.500621][T13618] device macvlan1 entered promiscuous mode [ 361.616542][ T7631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 361.653291][ T7631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 361.689041][ T7631] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 361.766817][ T7631] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 361.806312][ T7631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 361.855665][ T7631] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 361.881298][ T7631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 361.917232][ T7631] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 361.970656][ T7623] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 361.998068][ T7623] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 362.043408][T13446] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 362.344037][T13638] netlink: 'syz.3.3230': attribute type 2 has an invalid length. [ 362.394276][T13638] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3230'. [ 362.783395][T13649] netlink: 'syz.3.3233': attribute type 10 has an invalid length. [ 362.832261][T13649] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 362.868771][T13649] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 363.068853][T13645] netlink: 'syz.5.3232': attribute type 16 has an invalid length. [ 363.184688][T13645] netlink: 152 bytes leftover after parsing attributes in process `syz.5.3232'. [ 363.337479][ T7623] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 363.360217][ T7623] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 363.431690][T13446] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 363.576876][ T7623] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 363.617340][ T7623] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 363.731588][ T1376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 363.762515][ T1376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 363.797010][ T1376] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 363.826845][ T1376] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 363.860353][T13446] device veth0_vlan entered promiscuous mode [ 363.949947][T13446] device veth1_vlan entered promiscuous mode [ 364.168828][ T1376] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 364.217177][ T1376] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 364.258750][ T1376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 364.296724][ T1376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 364.343730][T13446] device veth0_macvtap entered promiscuous mode [ 364.384456][T13671] netlink: 'syz.5.3241': attribute type 21 has an invalid length. [ 364.434361][T13675] netlink: 212168 bytes leftover after parsing attributes in process `syz.1.3243'. [ 364.449212][T13671] netlink: 176 bytes leftover after parsing attributes in process `syz.5.3241'. [ 364.500599][ T1376] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 364.544887][T13446] device veth1_macvtap entered promiscuous mode [ 364.627038][T13675] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4 [ 364.690471][T13675] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4 [ 364.706337][T13446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 364.725764][T13675] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 364.734703][T13446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 364.786614][T13446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 364.830408][T13446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 364.892014][T13446] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 364.950773][ T1376] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 364.971544][ T1376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 365.068522][T13446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 365.115479][T13446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.115548][T13446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 365.154259][T13686] netlink: 198628 bytes leftover after parsing attributes in process `syz.1.3248'. [ 365.205370][T13446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.265428][T13446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 365.320075][T13446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.375397][T13446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 365.409829][T13446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.465398][T13446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 365.514397][T13446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.575817][T13446] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 365.599249][ T1376] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 365.626459][ T1376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 365.682112][T13446] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.713029][T13446] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.753827][T13446] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.794780][T13446] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.143213][T13701] netlink: 'syz.1.3252': attribute type 29 has an invalid length. [ 366.276858][ T1376] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 366.284860][ T1376] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 366.359676][ T7619] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 366.479829][T13705] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3252'. [ 366.483420][ T7619] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 366.525694][ T7619] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 366.567063][T13701] netlink: 'syz.1.3252': attribute type 29 has an invalid length. [ 366.687841][ T7623] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 366.707445][T13704] netlink: 'syz.1.3252': attribute type 29 has an invalid length. [ 367.220165][T13716] netlink: 212940 bytes leftover after parsing attributes in process `syz.5.3257'. [ 367.397391][T13729] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3259'. [ 367.458477][T13729] netlink: 'syz.1.3259': attribute type 12 has an invalid length. [ 367.490078][T13729] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3259'. [ 368.211442][T13742] netlink: 'syz.3.3261': attribute type 1 has an invalid length. [ 368.256092][T13742] netlink: 112865 bytes leftover after parsing attributes in process `syz.3.3261'. [ 369.079930][T13760] FAULT_INJECTION: forcing a failure. [ 369.079930][T13760] name failslab, interval 1, probability 0, space 0, times 0 [ 369.149849][T13760] CPU: 0 PID: 13760 Comm: syz.3.3272 Not tainted syzkaller #0 [ 369.157442][T13760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 369.168032][T13760] Call Trace: [ 369.171320][T13760] [ 369.174256][T13760] dump_stack_lvl+0x188/0x250 [ 369.178984][T13760] ? show_regs_print_info+0x20/0x20 [ 369.184192][T13760] ? load_image+0x400/0x400 [ 369.188708][T13760] ? __lock_acquire+0x7d10/0x7d10 [ 369.193748][T13760] should_fail+0x38c/0x4c0 [ 369.198186][T13760] should_failslab+0x5/0x20 [ 369.202699][T13760] slab_pre_alloc_hook+0x51/0xc0 [ 369.207750][T13760] __kmalloc_node+0x6e/0x3b0 [ 369.212640][T13760] ? kvmalloc_node+0x84/0x130 [ 369.217343][T13760] kvmalloc_node+0x84/0x130 [ 369.221875][T13760] btf_new_fd+0x1e2/0x910 [ 369.226239][T13760] __sys_bpf+0x58c/0x6f0 [ 369.230485][T13760] ? perf_trace_preemptirq_template+0x2aa/0x360 [ 369.236821][T13760] ? bpf_link_show_fdinfo+0x380/0x380 [ 369.242232][T13760] ? rcu_nmi_exit+0x6f/0xf0 [ 369.246924][T13760] ? vtime_user_exit+0x2c8/0x3e0 [ 369.251973][T13760] __x64_sys_bpf+0x78/0x90 [ 369.256410][T13760] do_syscall_64+0x4c/0xa0 [ 369.260952][T13760] ? clear_bhb_loop+0x30/0x80 [ 369.265650][T13760] ? clear_bhb_loop+0x30/0x80 [ 369.270436][T13760] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 369.276527][T13760] RIP: 0033:0x7f025b555799 [ 369.280959][T13760] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 369.302865][T13760] RSP: 002b:00007f02597af028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 369.311301][T13760] RAX: ffffffffffffffda RBX: 00007f025b7cefa0 RCX: 00007f025b555799 [ 369.319487][T13760] RDX: 0000000000000028 RSI: 0000200000000380 RDI: 0000000000000012 [ 369.327476][T13760] RBP: 00007f02597af090 R08: 0000000000000000 R09: 0000000000000000 [ 369.335561][T13760] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 369.343536][T13760] R13: 00007f025b7cf038 R14: 00007f025b7cefa0 R15: 00007fff2fc2a2b8 [ 369.351607][T13760] [ 369.548112][T13766] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.3273'. [ 369.691498][T13769] netlink: 'syz.0.3274': attribute type 10 has an invalid length. [ 369.849590][T13769] team0: Device hsr_slave_0 failed to register rx_handler [ 370.035472][T13773] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3276'. [ 370.136627][T13774] netlink: 'syz.5.3276': attribute type 12 has an invalid length. [ 370.144470][T13774] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3276'. [ 370.417574][T13788] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3279'. [ 370.573888][T13792] netlink: 'syz.0.3283': attribute type 10 has an invalid length. [ 370.897929][T13799] netlink: 'syz.3.3286': attribute type 8 has an invalid length. [ 370.926201][T13799] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3286'. [ 370.953340][T13804] netlink: 'syz.5.3288': attribute type 21 has an invalid length. [ 370.979603][T13804] netlink: 100 bytes leftover after parsing attributes in process `syz.5.3288'. [ 371.326498][T13829] netlink: 'syz.3.3297': attribute type 10 has an invalid length. [ 371.426517][T13829] team0: Device veth1_macvtap failed to register rx_handler [ 371.523022][T13835] netlink: 'syz.5.3300': attribute type 40 has an invalid length. [ 371.559840][T13835] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.602895][T13839] netlink: 14556 bytes leftover after parsing attributes in process `syz.2.3301'. [ 371.833978][T13749] ------------[ cut here ]------------ [ 371.839698][T13749] WARNING: CPU: 0 PID: 13749 at kernel/events/core.c:6688 perf_pending_task+0x358/0x470 [ 371.849616][T13749] Modules linked in: [ 371.853530][T13749] CPU: 0 PID: 13749 Comm: syz.1.3267 Not tainted syzkaller #0 [ 371.861224][T13749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 371.871333][T13749] RIP: 0010:perf_pending_task+0x358/0x470 [ 371.877203][T13749] Code: ff 84 db 75 14 e8 c8 4c de ff 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 b4 4c de ff e8 d7 a8 65 ff eb e5 e8 a8 4c de ff <0f> 0b e9 f3 fe ff ff e8 9c 4c de ff 48 c7 c7 a0 43 3a 8c 4c 89 f6 [ 371.897048][T13749] RSP: 0018:ffffc90002ecf9f8 EFLAGS: 00010293 [ 371.903227][T13749] RAX: ffffffff819ad468 RBX: ffff888060dbc000 RCX: ffff88801db59dc0 [ 371.911256][T13749] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 371.919537][T13749] RBP: 0000000000000001 R08: ffffffff8d89e36f R09: 1ffffffff1b13c6d [ 371.927594][T13749] R10: dffffc0000000000 R11: fffffbfff1b13c6e R12: ffff88801db59dc0 [ 371.935725][T13749] R13: ffff88805f48c958 R14: ffff888060dbbdd0 R15: 1ffff1100c1b77ba [ 371.943706][T13749] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 371.952882][T13749] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 371.959509][T13749] CR2: 00007f3ecee365d8 CR3: 000000000c08e000 CR4: 00000000003506f0 [ 371.967740][T13749] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000200000000300 [ 371.975851][T13749] DR3: 0000200000000300 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 371.984026][T13749] Call Trace: [ 371.987412][T13749] [ 371.990358][T13749] task_work_run+0x125/0x1a0 [ 371.994971][T13749] do_exit+0x626/0x20c0 [ 371.999198][T13749] ? rcu_nmi_exit+0x6f/0xf0 [ 372.003807][T13749] ? put_task_struct+0x80/0x80 [ 372.008736][T13749] ? lock_chain_count+0x20/0x20 [ 372.013821][T13749] do_group_exit+0x12e/0x300 [ 372.018670][T13749] ? lockdep_hardirqs_on+0x94/0x140 [ 372.024067][T13749] get_signal+0x6ca/0x12c0 [ 372.028575][T13749] arch_do_signal_or_restart+0xe7/0x12c0 [ 372.034231][T13749] ? force_sig_info_to_task+0x320/0x3d0 [ 372.039980][T13749] ? get_sigframe_size+0x10/0x10 [ 372.044932][T13749] ? rcu_nmi_exit+0x6f/0xf0 [ 372.049522][T13749] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 372.055562][T13749] ? exit_to_user_mode_loop+0x3b/0x130 [ 372.061042][T13749] exit_to_user_mode_loop+0x9e/0x130 [ 372.066531][T13749] exit_to_user_mode_prepare+0xee/0x180 [ 372.072185][T13749] irqentry_exit_to_user_mode+0x5/0x30 [ 372.077724][T13749] exc_page_fault+0x88/0x100 [ 372.082335][T13749] asm_exc_page_fault+0x22/0x30 [ 372.087340][T13749] RIP: 0033:0x7f9198dd67a1 [ 372.091782][T13749] Code: Unable to access opcode bytes at RIP 0x7f9198dd6777. [ 372.099214][T13749] RSP: 002b:fffffffffffffc70 EFLAGS: 00010217 [ 372.105427][T13749] RAX: 0000000000000000 RBX: 00007f919904ffa0 RCX: 00007f9198dd6799 [ 372.113431][T13749] RDX: 0000000000000000 RSI: fffffffffffffc70 RDI: 0000000001022000 [ 372.121476][T13749] RBP: 00007f9198e6cc99 R08: 0000000000000000 R09: 0000000000000000 [ 372.129628][T13749] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 372.137748][T13749] R13: 00007f9199050038 R14: 00007f919904ffa0 R15: 00007ffffebbac48 [ 372.145796][T13749] [ 372.148845][T13749] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 372.156209][T13749] CPU: 0 PID: 13749 Comm: syz.1.3267 Not tainted syzkaller #0 [ 372.163677][T13749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 372.174012][T13749] Call Trace: [ 372.177423][T13749] [ 372.180348][T13749] dump_stack_lvl+0x188/0x250 [ 372.185048][T13749] ? show_regs_print_info+0x20/0x20 [ 372.190241][T13749] ? load_image+0x400/0x400 [ 372.194746][T13749] panic+0x2e5/0x810 [ 372.198678][T13749] ? bpf_jit_dump+0xd0/0xd0 [ 372.203283][T13749] ? perf_pending_task+0x358/0x470 [ 372.208592][T13749] __warn+0x248/0x2b0 [ 372.212596][T13749] ? perf_pending_task+0x358/0x470 [ 372.217885][T13749] report_bug+0x1b7/0x2e0 [ 372.222678][T13749] handle_bug+0x3a/0x70 [ 372.226852][T13749] exc_invalid_op+0x16/0x40 [ 372.231347][T13749] asm_exc_invalid_op+0x16/0x20 [ 372.236202][T13749] RIP: 0010:perf_pending_task+0x358/0x470 [ 372.241932][T13749] Code: ff 84 db 75 14 e8 c8 4c de ff 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 b4 4c de ff e8 d7 a8 65 ff eb e5 e8 a8 4c de ff <0f> 0b e9 f3 fe ff ff e8 9c 4c de ff 48 c7 c7 a0 43 3a 8c 4c 89 f6 [ 372.261863][T13749] RSP: 0018:ffffc90002ecf9f8 EFLAGS: 00010293 [ 372.267955][T13749] RAX: ffffffff819ad468 RBX: ffff888060dbc000 RCX: ffff88801db59dc0 [ 372.276196][T13749] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 372.284176][T13749] RBP: 0000000000000001 R08: ffffffff8d89e36f R09: 1ffffffff1b13c6d [ 372.292143][T13749] R10: dffffc0000000000 R11: fffffbfff1b13c6e R12: ffff88801db59dc0 [ 372.300126][T13749] R13: ffff88805f48c958 R14: ffff888060dbbdd0 R15: 1ffff1100c1b77ba [ 372.308297][T13749] ? perf_pending_task+0x358/0x470 [ 372.313504][T13749] ? perf_pending_task+0x358/0x470 [ 372.318892][T13749] task_work_run+0x125/0x1a0 [ 372.323483][T13749] do_exit+0x626/0x20c0 [ 372.327635][T13749] ? rcu_nmi_exit+0x6f/0xf0 [ 372.332230][T13749] ? put_task_struct+0x80/0x80 [ 372.337016][T13749] ? lock_chain_count+0x20/0x20 [ 372.341950][T13749] do_group_exit+0x12e/0x300 [ 372.346631][T13749] ? lockdep_hardirqs_on+0x94/0x140 [ 372.351935][T13749] get_signal+0x6ca/0x12c0 [ 372.356555][T13749] arch_do_signal_or_restart+0xe7/0x12c0 [ 372.362214][T13749] ? force_sig_info_to_task+0x320/0x3d0 [ 372.368011][T13749] ? get_sigframe_size+0x10/0x10 [ 372.373035][T13749] ? rcu_nmi_exit+0x6f/0xf0 [ 372.377847][T13749] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 372.383976][T13749] ? exit_to_user_mode_loop+0x3b/0x130 [ 372.389665][T13749] exit_to_user_mode_loop+0x9e/0x130 [ 372.395129][T13749] exit_to_user_mode_prepare+0xee/0x180 [ 372.400766][T13749] irqentry_exit_to_user_mode+0x5/0x30 [ 372.406320][T13749] exc_page_fault+0x88/0x100 [ 372.410919][T13749] asm_exc_page_fault+0x22/0x30 [ 372.416595][T13749] RIP: 0033:0x7f9198dd67a1 [ 372.421104][T13749] Code: Unable to access opcode bytes at RIP 0x7f9198dd6777. [ 372.428481][T13749] RSP: 002b:fffffffffffffc70 EFLAGS: 00010217 [ 372.434569][T13749] RAX: 0000000000000000 RBX: 00007f919904ffa0 RCX: 00007f9198dd6799 [ 372.442631][T13749] RDX: 0000000000000000 RSI: fffffffffffffc70 RDI: 0000000001022000 [ 372.450783][T13749] RBP: 00007f9198e6cc99 R08: 0000000000000000 R09: 0000000000000000 [ 372.458795][T13749] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 372.466863][T13749] R13: 00007f9199050038 R14: 00007f919904ffa0 R15: 00007ffffebbac48 [ 372.475071][T13749] [ 372.478510][T13749] Kernel Offset: disabled [ 372.482862][T13749] Rebooting in 86400 seconds..