last executing test programs: 38.409935483s ago: executing program 3 (id=2977): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000012000000000000"], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{}, {&(0x7f00000017c0)="00000000ffffffff1f01a0c9a1171aa56a7f9138a6c073e99f8f2ffed6bd642c1238663e9e5189a46cb56c776afa8ec3d4d4d9c0648fc18bad3a6b5656235d60cb5af5c5a69e10ed9fd4ea", 0x4b}, {&(0x7f0000001840)="9a9245a259250adbc6e2", 0xa}], 0x3, 0x0, 0x0, 0x1f00c00e}, 0x0) socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x2, 0x4e24, @private=0xa010102}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)="b7", 0x1}], 0x1}, 0x20008050) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x12306, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602, 0x100000, 0x6, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x0, 0xfffffffd}, {0x2, 0x0, 0xfffffffc, 0x8}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000000)=r5, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r0], 0x50) 38.11830455s ago: executing program 3 (id=2981): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) recvmsg$kcm(r1, 0x0, 0x40000020) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x86}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, 0x0, 0x3, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x2, 0x30000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0, 0xa}, 0x10b44b, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.empty_time\x00', 0x26e1, 0x0) close(r5) socket$kcm(0x23, 0x2, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r5, 0x40042409, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x88ddb67, 0xdb}, 0x8114, 0x0, 0x20000094, 0x0, 0xdf65, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x25, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) sendmsg$kcm(r6, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000880)="c9171f3d4f16b3e7e4bac4ed967987e3c74f27e8", 0x14}], 0x1}, 0x4000) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000380)=r4) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x959, 0x0, 0x7, 0x2, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffa}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 33.613191169s ago: executing program 3 (id=2988): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x1f, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0x0, 0x0}, 0x8) r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r2, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000200)={r3, r1, 0x4}, 0x5) 33.357637165s ago: executing program 3 (id=2993): r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f0000001080)={&(0x7f00000005c0)={0x2, 0x4e21, @rand_addr=0x64010101}, 0xffffffffffffff31, &(0x7f0000000fc0)=[{&(0x7f00000009c0)="80", 0x1}], 0x1}, 0x0) sendmsg$inet(r0, &(0x7f0000002700)={&(0x7f0000000080)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000180)="90", 0x1}], 0x1}, 0x8040) setsockopt$sock_attach_bpf(r0, 0x84, 0xb, &(0x7f0000000000), 0xe) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}, 0x180, 0x0, 0xc2ba, 0x0, 0x4000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x21, 0x2, 0xa) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x5452, &(0x7f00000002c0)='\x02;\xe5\b\x00\x00\x9c\x00\xe4c\xbf\x00\x00\x00\x00PbS\xf2\"j\x88\xe7\xe1\x04\xd8\x92yJ\xba\xe0\xaf(\xda}\xb6p\xcb\xbd\f&\xb3]\t\x81\xd3\x0f\x18\xc9X\xba:\x1f\x94!\x8f\xd6F\xbar\xa8\xb8\xfc\x92\xc0\xfb\xdbd*f\x9c\ap\xd6\x1c,\x99\x8fWn\x16\xb9\x1el\xf4\xc8\x16\xc3\x05\x01\x9c\xa8\xd2\xe7J\xd0\xa5\xa8\xf4\xc0DL\x85ju\xe6\xdc\t\x15b\x12\xda\x83\xc5\xafQ\xed\x11\xda\x03\x05K|~B\xfe\xb6U\xae\xb1J\xc8\xe6\"t\x11N\x7f=\x9e\xbd\xd1\x8d\x90I\xbeb\xf6\x0f\xe8\xf4\xa8\\`0\x15[W\xd6\x95\f\x84\xe94]\xa5\xad\xb3\xd0\x80[\x92_\xca^8\x80\xa8\xd1\x9d\xe0Zu\x9f\xeb\xb7\xceM ;`37+P\xbc\xcafTT\xf7\x0f\xf1\xa7c<\x87\xf6\nI\x06\xdc\xb7\xf8\x12n)\x8df\xb3\xa8l\x92\xdcz]\x1c/\xa5/\x1f') perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x68, 0x0, 0xfe, 0x0, 0x0, 0x4d31, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x81, 0x2, 0xfffffffe, 0x0, 0x1, 0x7, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000fcffffff00000083ffffffff0000c8a59c46924d7fb9"], 0x0, 0x26}, 0x28) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r2}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r2, &(0x7f0000000080), &(0x7f0000000180)=""/40}, 0x20) bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@o_path={&(0x7f0000000080)='./file0\x00', 0x0, 0x10, r2}, 0x18) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@cgroup, 0x9, 0x1, 0x800, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000000240)=[0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000380), 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r3, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe3b, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$tipc(r4, &(0x7f0000003a00)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x9}}, 0x10, &(0x7f0000000b40)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001a00), 0x101d0}], 0x4}, 0x0) 33.092157641s ago: executing program 3 (id=2998): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4}, 0x38) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x26e1, 0x0) close(r0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) 32.946700465s ago: executing program 3 (id=3000): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x11aa30, 0x0, 0xffff, 0x5, 0x4000000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046a81f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a8001600a4000140200009002cea19853626feffff7fb94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8dcef52a9d7c7c0b7a196e6f66112c88a6bbace80177ccbec4c2ee5a7cef4090000001f3c29643a5ee4ce1b14d6d930dfe1d9d322d4acd9b575730d0080000000000000b5675025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee28a0", 0xd8}], 0x1}, 0x0) (fail_nth: 5) 8.28619643s ago: executing program 2 (id=3073): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251ef60a84c9f4d4930f0000004509c5bb0000000000001da2b2ae3ae74cc4e8c3c811", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x48040) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f00000040c0)=""/4052, 0xfd4}, {&(0x7f00000001c0)=""/125, 0x7d}, {&(0x7f0000000100)=""/37, 0x25}, {&(0x7f00000008c0)=""/38, 0x26}, {&(0x7f0000000dc0)=""/152, 0x98}], 0x5}, 0x22) r1 = socket$kcm(0x29, 0x5, 0x0) recvmsg$kcm(r1, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2042) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./cgroup\x00', 0x0, 0x8}, 0x18) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[], &(0x7f0000000200)=""/138, 0x46, 0x8a, 0x1}, 0x28) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="12000000010000000400000008"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xf, 0x4, 0x8, 0x1}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x16, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) unlink(&(0x7f0000000200)='./cgroup\x00') recvmsg$kcm(r0, &(0x7f0000001300)={0x0, 0x0, 0x0}, 0x40002020) r4 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)=@in6={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x16}, 0xfffffffb}, 0x80, 0x0, 0x0, 0x0, 0x1}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xfffffecb, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x5, 0x7ffffffc, 0x9}, {0x1000000a, 0x4, 0x1, 0x6}], 0x10, 0x4}, 0x94) close(r4) socket$kcm(0xa, 0x5, 0x0) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r4, 0x84, 0x64, &(0x7f0000000000)=r7, 0x1c) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000071120e00000000009500004400000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r9) socket$kcm(0x11, 0xa, 0x300) ioctl$TUNGETVNETLE(r9, 0x8919, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000d40)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000005fdb2971dfa2bff372df8cdbeb318ab2bec8fc36903c0ec359ca9daf3c914019395cc154010c693709800000000000000016a85adef34bf78c76e6222337923e1bea6ef682cc4375f594425d408ccc58187feb0e3d43347f989007a7c63f6dae682acb4af936461f34a8a32a50bbbb69ec85168947b86df9f2609bf93f7a1be259621818c3c75da30000bce645451b851111dd98ac4d8da9317c2c082020e0b2d6340809000000000000008e053645cc413790faf7e229c782845b5bb774f7f154263178151ea93ff2cac4b181332c9c9a1c7d85616c8100000000000000d8300d19d585000000fc005774b56a7142047326f940e95b8489e1c5650f5c61299a295f39c88456521cffdef93e29f10f4a11f0cfbfc0ff976b20fe"], &(0x7f0000000080)='GPL\x00', 0x0, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @fallback, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d) 6.908108493s ago: executing program 2 (id=3075): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x95}}}, 0x0, 0x2, 0xffc, &(0x7f0000000880)=""/4092}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f0000000040)}, 0x20) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000640)=@generic={&(0x7f0000000540)='./file0\x00', 0x0, 0x8}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r1, &(0x7f0000001380), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan1\x00', 0x800}) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 6.391765856s ago: executing program 0 (id=3081): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0xc, 0x0, 0x400, 0x4156, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x10563b, 0x0, 0xfffffffe, 0x6, 0x10000, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x2}, 0x0, 0x0, 0xfffffffd, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r1, 0x2000000, 0xfe7f, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="5c00000014006b", 0x7}, {&(0x7f00000017c0)="00000000ffffffff1f01a0c9a1171aa56a7f9138a6c073e99f8f2ffed6bd642c1238663e9e5189a46cb56c776afa8ec3d4d4d9c0648fc18bad3a6b5656235d60cb5af5c5a69e10ed9fd4ea", 0x4b}, {0x0}], 0x3, 0x0, 0x0, 0x1f00c00e}, 0x0) socket$kcm(0xa, 0x2, 0x0) r5 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r5, &(0x7f0000000180)={&(0x7f0000000080)={0x2, 0x4e24, @private=0xa010102}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)="b7", 0x1}], 0x1}, 0x20008050) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x12306, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602, 0x100000, 0x6, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x0, 0xfffffffd}, {0x2, 0x0, 0xfffffffc, 0x8}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r5, 0x84, 0x10, &(0x7f0000000000)=r8, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r0], 0x50) 6.093328352s ago: executing program 0 (id=3082): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) recvmsg$kcm(r1, &(0x7f0000000a00)={&(0x7f00000000c0)=@xdp, 0x80, 0x0, 0x0, &(0x7f0000000940)=""/169, 0xa9}, 0x40000020) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x86}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, 0x0, 0x3, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x2, 0x30000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0, 0xa}, 0x10b44b, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.empty_time\x00', 0x26e1, 0x0) close(r5) socket$kcm(0x23, 0x2, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r5, 0x40042409, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x88ddb67, 0xdb}, 0x8114, 0x0, 0x20000094, 0x0, 0xdf65, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x25, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) sendmsg$kcm(r6, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000880)="c9171f3d4f16b3e7e4bac4ed967987e3c74f27e8", 0x14}], 0x1}, 0x4000) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000380)=r4) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x959, 0x0, 0x7, 0x2, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffa}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 4.903560062s ago: executing program 2 (id=3083): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x26e1, 0x0) close(r0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) 4.794111364s ago: executing program 2 (id=3087): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1801000017"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="12000000070000000400000002"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0x13, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7786}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x1, 0xfe00}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x7b}}]}, 0x0, 0x5, 0x0, 0x0, 0x41000, 0xc}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002420702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000228500000094"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0xfffffffffffffd5f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 4.583537389s ago: executing program 2 (id=3090): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0xf6fc, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0xa0001f98, 0x0, 0x0, 0x0, 0x0, 0xa70a, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='..\x00') socket$kcm(0x2, 0x1, 0x84) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe1, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000003c0)='syz1\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000001340)=@hci={0x1f, 0x200, 0x31}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000500)="b8b2ca3a66000000000000", 0xb}, {&(0x7f0000000600)="ca75df", 0x3}], 0x2}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000078009106000000000000004a0775bf3144"], 0xfe33) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x80044944, &(0x7f0000000200)) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd2e}, 0x65) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0xa, 0x5, 0x0) 4.050468352s ago: executing program 1 (id=3093): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0xc, 0x0, 0x400, 0x4156, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x10563b, 0x0, 0xfffffffe, 0x6, 0x10000, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x2}, 0x0, 0x0, 0xfffffffd, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r1, 0x2000000, 0xfe7f, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="5c00000014006b", 0x7}, {&(0x7f00000017c0)="00000000ffffffff1f01a0c9a1171aa56a7f9138a6c073e99f8f2ffed6bd642c1238663e9e5189a46cb56c776afa8ec3d4d4d9c0648fc18bad3a6b5656235d60cb5af5c5a69e10ed9fd4ea", 0x4b}, {0x0}], 0x3, 0x0, 0x0, 0x1f00c00e}, 0x0) socket$kcm(0xa, 0x2, 0x0) r5 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r5, &(0x7f0000000180)={&(0x7f0000000080)={0x2, 0x4e24, @private=0xa010102}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)="b7", 0x1}], 0x1}, 0x20008050) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x12306, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602, 0x100000, 0x6, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x0, 0xfffffffd}, {0x2, 0x0, 0xfffffffc, 0x8}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r5, 0x84, 0x10, &(0x7f0000000000)=r8, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r0], 0x50) 3.546866665s ago: executing program 4 (id=3094): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000340)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x3000c085) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4) sendmsg$sock(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000001900)="f4", 0x1}], 0x1}, 0x8001) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f00000000c0)={'veth1_vlan\x00', @remote}) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 3.412680947s ago: executing program 1 (id=3095): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000004, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xe, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x2000009, 0x20, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext, 0x100080}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000240)) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x6, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r3 = socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001640)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000180100002020642500000000002020207b1af8ff00000000bfa100000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x1}, 0x40, 0x0, 0x0, 0x5, 0x7, 0xa, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) syz_clone(0x20102400, 0x0, 0x0, 0x0, 0x0, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={0x0, 0x0, 0x26}, 0x28) (async) r4 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r4, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@id={0x1e, 0x3, 0x1, {0x4e20}}, 0x80, 0x0}, 0x0) sendmsg$sock(r3, &(0x7f00000009c0)={&(0x7f0000000380)=@sco, 0x80, &(0x7f0000000900)=[{&(0x7f0000000400)="f69b00a0af3dbb21e542000f0bf00cc5053980c3c51e1826ef9ee161a5", 0x1d}, {&(0x7f0000000680)="7fd030675c99ab79ac2e7a1aee251f0effbd0c4f09a23f22e90b0afbdd7bb9397bfff1823cd107c88e5a564ada44494ef0d7fb3585f3efff6ca33f7c98d3d52cbe2a540cb5d07140388afc974109f855c30256afe6faa84b386cb35de73a5fa0a881b3bdd7c25457ef2aa4bb896515c74462bde7fb3965284dc120b6a817c37af2f7bfcc9bbd393fb711a9478fa52197593d19724c2397a79af8", 0x9a}, {&(0x7f00000008c0)="aba5ed527d3f3c5ba9c2c3ea16e373e6a3e43f6c553e7a8673337fffda322929cd399e66b21d81fed743897d552732592651af337d5ff342050d6b58220413", 0x3f}], 0x3}, 0x20008000) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x8847, &(0x7f0000000140)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb90402200800fd007c05e8fe55a10a0007000140020203600e4109000800ac00060311000000160012000a00fc000000035c3b61c1d67f6f94007134cf6e8c0000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) sendmsg(r4, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000b00)="93c6ebdcaba85ec173f6b65e62ed000324b85de2faec62bb877f7042aa17bc15045443f50594dbd88b199bc09cbb82b27067f982fa32f84a15b13c6a5735bcd4525819fc64747616df879b7eec2775945a4cac07eee0ec8d0ea1f221f2b5da69b3eab7d3fe561a24b1b637b6ffeaa257085d696759f12f66d110a602a78b979d7d45e2135fea13a25a99e7a228144a9ea658b247f9642eeaa5f2b11bc0ad8f15c761292a01ce4da4567c546cf922e5bd59c67cbc47be2844f28dd2fcbf90ef95808635eac869a0d89790db42c8be7c790b7b9bff69698f003d", 0xd9}], 0x1, &(0x7f0000000c40)=[{0xb0, 0x110, 0x0, "f628a18e6a959675877026bd974297a91aa5b53133dc497d4b93e51019616e153ade0388216660d62fbbfa7908ececb6996b8678303721280c192913573e439f1d4943b47f481029e8ec7c60eeef6eb2c255f27a3ebbce9b788e027a0939a4e43e0345f32cf6a3d234ae578f2920c5f2cfcc60bacce5ccddff71c9e0409b075b842b09a775c84eb1e02e7669ba281337e117bbf3bf300cc2ecf907"}], 0xb0}, 0x40) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000007c0)={0x0, &(0x7f0000000500)=""/42, 0x0, &(0x7f0000000780)="95d21d0a96710298a8357aa0fc4ed979382837c1c1bd54d6963d695df54a", 0x6}, 0x38) r6 = socket$kcm(0xa, 0x5, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000200000000000000020000040000000300000000000c000000000000"], 0xffffffffffffffff, 0x3e, 0xb2, 0x2}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) sendmsg$kcm(r6, &(0x7f00000002c0)={&(0x7f0000000140)=@in6={0xa, 0x4e22, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x401}, 0x80, &(0x7f0000002640)}, 0x844) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 3.31431941s ago: executing program 4 (id=3096): socket$kcm(0x2c, 0x3, 0x0) socket$kcm(0x2c, 0x3, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8100, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xf, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r3, 0x0, 0xe, 0x0, &(0x7f00000000c0)="b994bc444b9893b04bf30981fd1a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x50) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="5c00000014006b030231a6080c000af32c00000000f800250502000f00e5aa000017d34460bc24eab556bd05251e6182949a2756f475ce36c2d13b48df000000000000ecb8f6ec63c9f4d4938037e786a6d1bdd700e6657594f1817d", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x10, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000600142603600e1208000f0000000401a80016002000024006000a00035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc", 0xd8}], 0x1}, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x40012142) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x304) 3.233411592s ago: executing program 1 (id=3097): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x26e1, 0x0) close(r0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) ioctl$SIOCSIFHWADDR(r0, 0x8b34, 0x0) 1.65967129s ago: executing program 2 (id=3098): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x10506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000801, 0x1}, 0x7402, 0x0, 0x0, 0x9, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x55}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000fffe80000000000000101000007f0600080000000000000071273fa7b49301641184a9"], 0xfdef) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x20243400, 0x0, 0x1b, 0x0, 0x0, 0x0) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) syz_clone(0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4814) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000051e00000000000000000000850000000e000000180100002020700900000000002020207b1a000000006e02e76519cd933ffe7eef13aed2006af239e888e599a7f79ec9a4fd45ed07010000f8ffffff7250781a20905c6eb7"], 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r0}, 0xfed0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) r3 = perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r3) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89a0, &(0x7f0000000080)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02"], 0x31) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, &(0x7f0000000080)) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x2, 0x3}, 0x400, 0x0, 0x0, 0x9, 0x0, 0xf5}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89a1, &(0x7f0000000080)) 1.65865257s ago: executing program 1 (id=3107): r0 = gettid() r1 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x3, 0x1, 0x0, 0x80, 0x0, 0x401, 0x1002, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000040), 0xb}, 0xc0, 0x1c000000000, 0xd, 0x8, 0xc2b, 0x3, 0x145, 0x0, 0xffff, 0x0, 0x8001}, 0x0, 0x8, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r0, r1, 0x0, 0x17, &(0x7f0000000140)='cpuset.memory_pressure\x00'}, 0x30) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) r3 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f0000000180)=r2, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)={0x1b, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0xc8eb, '\x00', r4, r2, 0x4, 0x0, 0x4}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0xc, 0x8, 0x1, 0x4, 0xffffffffffffffff, 0x0, '\x00', r4, 0xffffffffffffffff, 0x3}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r5}, &(0x7f0000000280), &(0x7f00000002c0)}, 0x20) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0) close(r6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001000)) r7 = socket$kcm(0x10, 0x2, 0x10) openat$cgroup_ro(r7, &(0x7f00000000c0)='pids.events\x00', 0x0, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020032000b07d25a806f8c6394f90624fc602f0000000a740100051382c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x1, 0x20, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x8, 0x7, 0xb, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r8 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="2e00000038000511d25a80698c63940d0124fc602f6e35400c000200001ec00037153e370a00018025641d00d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r9 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="5c00000015006b03000000d86e6c1d0002117ea6ea6567e71b59000af32c6e020075f800250002000f00000017d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f4d4938037e786a6d0bdd70000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="018d00"}) ioctl$TUNSETQUEUE(r6, 0x400454d9, &(0x7f0000000240)={'macsec0\x00', 0x500}) 1.602005141s ago: executing program 0 (id=3099): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1801000017"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="12000000070000000400000002"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0x13, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7786}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x1, 0xfe00}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x7b}}]}, 0x0, 0x5, 0x0, 0x0, 0x41000, 0xc}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002420702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000228500000094"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0xfffffffffffffd5f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 1.406348156s ago: executing program 4 (id=3100): socket$kcm(0x2b, 0x1, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x2, 0x4e24, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="2c000000000000000000000007000000071805"], 0x30}, 0x40880) 1.273919519s ago: executing program 0 (id=3101): r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="2b6e657400000000000001000000d4c8a097ff7d55a65447f44145f4c56d5f5bb1245d11038c54921493f001d7c053dc792382ee1b39737a7a2dc13a1b343fe51076ad750901bf3e41a04cc5e74b22f52d52385bd90000000042e55eccc0d9b7841ca645da88306c5f53bcb1d2e1d849d534ae4bd45602a69d0c28644a81720bab1069158e24a3"], 0xa) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x4}}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}}, &(0x7f0000000140)=""/237, 0x5a, 0xed, 0x1}, 0x28) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3000000850000000700000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r3, r2}, 0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={r1, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000340)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0], 0x0, 0xa, &(0x7f0000000540)=[{}], 0x8, 0x10, &(0x7f0000000580), &(0x7f00000005c0), 0x8, 0x9f, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@base={0xd, 0x5, 0x3, 0xe, 0x4004, r2, 0xcbc, '\x00', r4, 0xffffffffffffffff, 0x1, 0x5, 0x3}, 0x50) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100010, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x0, 0xd, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000005000000030000000000001008000000030000000000001103000000000000000000000001000004040000000000000002000000000000000061612e003bdb4e4a8959"], 0x0, 0x51}, 0x28) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r5, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f00000001c0)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)="f4001100022b2c25a6d5b02f3af865fe8007000000007afefff51c00ff003b002b000000000000022b00000000000000", 0x30}], 0x1}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8a10ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0}, 0x28) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a0010000000028000031294", 0x2e}], 0x1}, 0x0) 1.151538792s ago: executing program 4 (id=3102): socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x21, 0x2, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000120000000000000000"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000010000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94) close(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_config_ext={0x9, 0xf8e}, 0x4481, 0x0, 0x0, 0x0, 0x2, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000400000004"], 0x48) r3 = socket$kcm(0x11, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x20, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000700000095000000000000009500a50500000000"], &(0x7f00000001c0)='syzkaller\x00', 0x20005, 0xd0, &(0x7f00000005c0)=""/208, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0xb, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r3, 0x107, 0x5, &(0x7f00000000c0)=r4, 0x55) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000002000085000000b000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc) 1.107273753s ago: executing program 1 (id=3103): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, @perf_config_ext, 0x806, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0xffffff9a) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)}, 0x40080) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='freezer.parent_freezing\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401c5820, &(0x7f0000000040)=0x100008000) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe06}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8946, &(0x7f0000000040)={'virt_wifi0\x00', @random='\x00\x00\x00\x00\x00 '}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="aee1b65e3babc7ae5897", 0xa}], 0x1}, 0x0) r5 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r5, 0x84, 0x85, &(0x7f0000000000), 0x90) openat$tun(0xffffffffffffff9c, 0x0, 0x28000, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x4000) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'bond_slave_1\x00', @multicast}) socket$kcm(0x25, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x22250, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xc89ee2ccd10f8b7b, 0x3, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="050000000a0000004200000040000000c0000000", @ANYRES32=0x1, @ANYBLOB="010000000000000044f89a27000000000000000006461262f663abf01f9bf1baf67b28562b00004d77", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r7}, 0x38) sendmsg$tipc(r0, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x40000) 660.765524ms ago: executing program 4 (id=3104): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0xc, 0x0, 0x400, 0x4156, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x10563b, 0x0, 0xfffffffe, 0x6, 0x10000, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x2}, 0x0, 0x0, 0xfffffffd, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r1, 0x2000000, 0xfe7f, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="5c00000014006b", 0x7}, {&(0x7f00000017c0)="00000000ffffffff1f01a0c9a1171aa56a7f9138a6c073e99f8f2ffed6bd642c1238663e9e5189a46cb56c776afa8ec3d4d4d9c0648fc18bad3a6b5656235d60cb5af5c5a69e10ed9fd4ea", 0x4b}, {0x0}], 0x3, 0x0, 0x0, 0x1f00c00e}, 0x0) socket$kcm(0xa, 0x2, 0x0) r5 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r5, &(0x7f0000000180)={&(0x7f0000000080)={0x2, 0x4e24, @private=0xa010102}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)="b7", 0x1}], 0x1}, 0x20008050) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x12306, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602, 0x100000, 0x6, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x0, 0xfffffffd}, {0x2, 0x0, 0xfffffffc, 0x8}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r5, 0x84, 0x10, &(0x7f0000000000)=r8, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r0], 0x50) 539.283966ms ago: executing program 1 (id=3105): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xa4, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x108158, 0x0, 0xc2ba, 0x0, 0x4000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$MAP_CREATE(0x0, 0x0, 0x27) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r3) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r4) r5 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000380)=[0x0, 0x0], &(0x7f00000003c0), 0x0, 0x81, &(0x7f0000000440)=[{}, {}], 0x10, 0x10, &(0x7f0000000580), 0x0, 0x0, 0xf, 0x8, 0x8, &(0x7f0000000740)}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYRES32], 0x50) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000180)=ANY=[@ANYRESDEC=r5], &(0x7f0000000280)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x20, '\x00', r6, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5e}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000640)={r7, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0xa) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r9 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000a80)=r8, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000340)=r9, 0x4) r10 = socket$kcm(0x23, 0x5, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r10, 0x1, 0x3e, &(0x7f00000000c0)=r11, 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r10, 0x89e0, &(0x7f0000000940)={r11, r11}) r12 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000580)="6700000011008188041f56ecdb4cb9cca7480ef432000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x20000886) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0x37}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000440)="002f88a8a18216f8bb5b98f1f571", 0xe}], 0x1}, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r13 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000404000000002e"], 0x0, 0x37}, 0x20) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x13, 0x4, 0xa, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, r13, 0x2, 0x1}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x81, 0x0, r14, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x5}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) 519.792637ms ago: executing program 0 (id=3106): r0 = socket$kcm(0x2, 0x922000000001, 0x106) recvmsg$kcm(r0, &(0x7f0000002180)={0x0, 0x0, &(0x7f00000020c0)=[{&(0x7f00000002c0)=""/91, 0x5b}, {&(0x7f00000010c0)=""/4096, 0x1000}], 0x2, &(0x7f0000002100)=""/118, 0x76}, 0x10000) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000a80)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x55}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1f, 0x4, &(0x7f0000000d00)=ANY=[@ANYBLOB="180000000000001500000000feffffff85000000580000009500000000000000b38aaf8cb8cb097f053e85955f26ca0e006900350e6afc10b8be096b8d78874fa0a7900b57dc7feb9040864bb3274ed19075cd3646b6e23b5cde39a2ca68a0ad29a64fa6795575911c23f772b990e0db936a55ac295df0d770"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) setsockopt$sock_attach_bpf(r0, 0x1, 0x15, &(0x7f0000000000), 0xff7b) r2 = socket$kcm(0x10, 0x2, 0x0) (async) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r3, 0xffffffffffffffff}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000140)={r2}) perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0xe4, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000, 0x0, 0xffc0, 0x0, 0x100000, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) r6 = openat$cgroup_subtree(r5, &(0x7f0000000240), 0x2, 0x0) (rerun: 64) write$cgroup_subtree(r6, &(0x7f0000000280)={[{0x2d, 'pids'}, {0x2d, 'cpuset'}, {0x2b, 'memory'}, {0x2b, 'memory'}, {0x2d, 'blkio'}, {0x2b, 'cpu'}]}, 0x2a) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000d80)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) (async) socket$kcm(0xa, 0x5, 0x0) (async, rerun: 64) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (rerun: 64) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r7, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async, rerun: 32) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async, rerun: 32) r8 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r8, 0x29, 0x5, 0x0, 0x16) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) (async, rerun: 32) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8922, &(0x7f0000002280)={'vlan0\x00'}) (async, rerun: 32) socket$kcm(0xa, 0x2, 0x0) (async, rerun: 32) r9 = socket$kcm(0x10, 0x2, 0x0) (rerun: 32) sendmsg$inet(r9, &(0x7f0000000080)={0x0, 0xfffffffffffffd8f, &(0x7f00000000c0)=[{&(0x7f0000000100)="5c00000015006b05c84e21000af32c6e021875f802000000050003800000d34460bc04eab556a71525346182949a36c23d3b48dfd810000000003fce86b6345b05ca97fe4d5670a568fe43", 0x7c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b70200001a000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b70600007fffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946e0ebc622003b538dfc8e012e79578e51bc5f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b803000000661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7b148ba532e6ea09c346dfebd38608b32a0080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e14861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16b089f37b3591a15c0a9be6eb18208404c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b74cd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979e29857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37ceff9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f50714600fb6241c6e955031795b2c2f56411e48455b5a8b90dfae158b94f0800000000000000af5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeedd005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe00000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed210d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f800800000f40300966fcf1e54f5a2d38708294cd6f496e5dee734f87da3770845cf442d488afdc0e170000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e80339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd52364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000a5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f3390343c12aa51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fca4d97a0ae75ccf11e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35e9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff17320adda5867947257f080091c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a927de6f4c09f4b742e037381c85d2ec7bb2a8152f0d6a99a0370e0cbd65744eb2efde0142cf90ff668b9757b9612bb4253a63bb303c0c68a07f115d104f2007237a4f771416741bfd63fdfe3ae6f8bea755d8b7202c2bbae137dc1c3cf40db74a4c1c2f56855b18f91dae2cdea1353fe062830fa1d233296ec9d8317872257e154665485e7f31cdbfbf435517faf93015b57417d84b8bc8662e097d5ba55d02d48e150695ffae3a676555b10da11751865126d19336116a1e58ab727dda6b343cc97f9479136a66f552abf8fe3"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 334.943971ms ago: executing program 0 (id=3108): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0xf6fc, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0xa0001f98, 0x0, 0x0, 0x0, 0x0, 0xa70a, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='..\x00') socket$kcm(0x2, 0x1, 0x84) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe1, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000001340)=@hci={0x1f, 0x200, 0x31}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000500)="b8b2ca3a66000000000000", 0xb}, {&(0x7f0000000600)="ca75df", 0x3}], 0x2}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000078009106000000000000004a0775bf3144"], 0xfe33) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x80044944, &(0x7f0000000200)) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="180200000000ff0100000000000000008500000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000001700000095000000000000002f81c461b3fea834ceb0e17d802cfb227e656a3698c792bd22555161b0010095448e9f7024b45ffcd2ce278009682dc8f7c867b177ed5bd50b92aedef35b6cd87b56690b4c96f63ab02174911d5e51b76d2c31b8bece7b0f841f393c401d8f51383f0f28d4c00fa2149870f1779f204103dbebff2a0e292b42f01b0bb114fa6e1889a6437285a0c9f00c4245e4d3524af00636736e812558294430bf4b365e0a9c468c9eb4977fb1311404a36503e63d66ddcf9b8e1035383b90de09d000c223ffb7f13639e3ac52b248f92d041959c1f7985eb94aad8c0adf4e8730313d1b02662c6847a9851f40a969486ebbe7bfcb5b28fc7dbe1bb80c4a2c18a53fecc51e51de59049b0400000000000000394000000000000000d27022ca2e6e8190f483d0da08eef67837ed671c2154513111dbc0ee58c70889a1c6306b98300a49147242d3f8a6e4aea9b51d0e182153e1283089c3b42cca072dce78b07806950d2b5fd0b448fdf18269cbe47fae4cedeb356536d94534260fa7d6e6b7aa30d8dd5c8261d4ef52da9f0894bb3993edafc976a143adbe9731dd41d181a9c200000000000000000722d6bea9c421a5e3cee8a113092129714154cc28d52373ba50325730d592cfd68cd128a770f41a34b4a0b9af61eab15e7d0a24a11be157dbaea473ab59af3efaf2f00426803f170d"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd2e}, 0x65) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0xa, 0x5, 0x0) 0s ago: executing program 4 (id=3109): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) recvmsg$kcm(r1, &(0x7f0000000a00)={&(0x7f00000000c0)=@xdp, 0x80, 0x0, 0x0, &(0x7f0000000940)=""/169, 0xa9}, 0x40000020) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x86}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, 0x0, 0x3, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x2, 0x30000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0, 0xa}, 0x10b44b, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.empty_time\x00', 0x26e1, 0x0) close(r5) socket$kcm(0x23, 0x2, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r5, 0x40042409, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x88ddb67, 0xdb}, 0x8114, 0x0, 0x20000094, 0x0, 0xdf65, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x25, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) sendmsg$kcm(r6, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000880)="c9171f3d4f16b3e7e4bac4ed967987e3c74f27e8", 0x14}], 0x1}, 0x4000) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000380)=r4) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x959, 0x0, 0x7, 0x2, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffa}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): ) Use of struct sctp_assoc_value in delayed_ack socket option. [ 523.859388][T10811] Use struct sctp_sack_info instead [ 524.010882][T10819] sctp: [Deprecated]: syz.4.2105 (pid 10819) Use of struct sctp_assoc_value in delayed_ack socket option. [ 524.010882][T10819] Use struct sctp_sack_info instead [ 524.247247][T10826] syzkaller0: refused to change device tx_queue_len [ 524.344698][T10829] device syzkaller0 entered promiscuous mode [ 524.438767][T10836] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 524.445371][T10836] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 524.942235][T10854] netlink: 101008 bytes leftover after parsing attributes in process `syz.4.2120'. [ 525.557694][T10876] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 525.564277][T10876] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 527.099048][T10884] : port 1(ip6gretap0) entered blocking state [ 527.117797][T10884] : port 1(ip6gretap0) entered disabled state [ 527.142490][T10884] device ip6gretap0 entered promiscuous mode [ 530.851612][T10914] device syzkaller0 entered promiscuous mode [ 531.025112][T10926] FAULT_INJECTION: forcing a failure. [ 531.025112][T10926] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 531.039176][T10926] CPU: 0 PID: 10926 Comm: syz.4.2145 Not tainted syzkaller #0 [ 531.046674][T10926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 531.056756][T10926] Call Trace: [ 531.060056][T10926] [ 531.063017][T10926] dump_stack_lvl+0x188/0x24e [ 531.067735][T10926] ? show_regs_print_info+0x12/0x12 [ 531.072970][T10926] ? load_image+0x410/0x410 [ 531.077523][T10926] ? __lock_acquire+0x7c40/0x7c40 [ 531.082578][T10926] ? snprintf+0xe5/0x140 [ 531.086852][T10926] should_fail_ex+0x390/0x4c0 [ 531.091553][T10926] _copy_to_user+0x2c/0x130 [ 531.096068][T10926] simple_read_from_buffer+0xe3/0x150 [ 531.101556][T10926] proc_fail_nth_read+0x1a6/0x220 [ 531.106631][T10926] ? proc_fault_inject_write+0x310/0x310 [ 531.112286][T10926] ? fsnotify_perm+0x248/0x550 [ 531.117058][T10926] ? proc_fault_inject_write+0x310/0x310 [ 531.122714][T10926] vfs_read+0x2db/0x960 [ 531.126897][T10926] ? kernel_read+0x1e0/0x1e0 [ 531.131524][T10926] ? __fget_files+0x28/0x460 [ 531.136111][T10926] ? __fget_files+0x3fc/0x460 [ 531.140784][T10926] ? __fdget_pos+0x2ae/0x360 [ 531.145379][T10926] ? ksys_read+0x70/0x260 [ 531.149744][T10926] ksys_read+0x14d/0x260 [ 531.153985][T10926] ? vfs_write+0x9a0/0x9a0 [ 531.158417][T10926] ? lockdep_hardirqs_on+0x94/0x140 [ 531.163644][T10926] do_syscall_64+0x4c/0xa0 [ 531.168091][T10926] ? clear_bhb_loop+0x60/0xb0 [ 531.172784][T10926] ? clear_bhb_loop+0x60/0xb0 [ 531.177481][T10926] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 531.183381][T10926] RIP: 0033:0x7fb8bb15e84e [ 531.187802][T10926] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 531.207426][T10926] RSP: 002b:00007fb8bbfa1fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 531.215841][T10926] RAX: ffffffffffffffda RBX: 00007fb8bbfa26c0 RCX: 00007fb8bb15e84e [ 531.223813][T10926] RDX: 000000000000000f RSI: 00007fb8bbfa20a0 RDI: 0000000000000005 [ 531.232260][T10926] RBP: 00007fb8bbfa2090 R08: 0000000000000000 R09: 0000000000000000 [ 531.240233][T10926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 531.248202][T10926] R13: 00007fb8bb426038 R14: 00007fb8bb425fa0 R15: 00007fffd342fb48 [ 531.256179][T10926] [ 534.887667][T10951] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2154'. [ 536.177212][T10951] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2154'. [ 536.186387][T10954] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.2154'. [ 536.369738][T10966] netlink: 'syz.3.2160': attribute type 29 has an invalid length. [ 536.389126][T10966] netlink: 'syz.3.2160': attribute type 29 has an invalid length. [ 536.408702][T10966] netlink: 'syz.3.2160': attribute type 29 has an invalid length. [ 536.422808][T10966] netlink: 'syz.3.2160': attribute type 29 has an invalid length. [ 536.439293][T10966] netlink: 'syz.3.2160': attribute type 29 has an invalid length. [ 536.895142][T10979] device syzkaller0 entered promiscuous mode [ 537.455097][T10989] device syzkaller0 entered promiscuous mode [ 540.797459][T11019] FAULT_INJECTION: forcing a failure. [ 540.797459][T11019] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 540.811283][T11019] CPU: 0 PID: 11019 Comm: syz.2.2179 Not tainted syzkaller #0 [ 540.818768][T11019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 540.828836][T11019] Call Trace: [ 540.832125][T11019] [ 540.835074][T11019] dump_stack_lvl+0x188/0x24e [ 540.839769][T11019] ? show_regs_print_info+0x12/0x12 [ 540.844983][T11019] ? load_image+0x410/0x410 [ 540.849501][T11019] ? __lock_acquire+0x7c40/0x7c40 [ 540.854541][T11019] ? zone_statistics+0x170/0x170 [ 540.859506][T11019] should_fail_ex+0x390/0x4c0 [ 540.864210][T11019] _copy_from_user+0x2c/0x170 [ 540.868905][T11019] bpf_prog_test_run_xdp+0xc26/0xf80 [ 540.874217][T11019] ? __lock_acquire+0x7c40/0x7c40 [ 540.879261][T11019] ? dev_put+0x80/0x80 [ 540.883334][T11019] ? dev_put+0x80/0x80 [ 540.887398][T11019] bpf_prog_test_run+0x31c/0x390 [ 540.892358][T11019] __sys_bpf+0x62b/0x780 [ 540.896648][T11019] ? bpf_link_show_fdinfo+0x380/0x380 [ 540.902064][T11019] ? lock_chain_count+0x20/0x20 [ 540.906915][T11019] __x64_sys_bpf+0x78/0x90 [ 540.911339][T11019] do_syscall_64+0x4c/0xa0 [ 540.915752][T11019] ? clear_bhb_loop+0x60/0xb0 [ 540.920427][T11019] ? clear_bhb_loop+0x60/0xb0 [ 540.925099][T11019] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 540.930989][T11019] RIP: 0033:0x7f36b859e019 [ 540.935422][T11019] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 540.955024][T11019] RSP: 002b:00007f36b946a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 540.963463][T11019] RAX: ffffffffffffffda RBX: 00007f36b8825fa0 RCX: 00007f36b859e019 [ 540.971427][T11019] RDX: 0000000000000050 RSI: 0000200000000c80 RDI: 000000000000000a [ 540.979412][T11019] RBP: 00007f36b946a090 R08: 0000000000000000 R09: 0000000000000000 [ 540.987376][T11019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 540.995342][T11019] R13: 00007f36b8826038 R14: 00007f36b8825fa0 R15: 00007fff70076ee8 [ 541.003317][T11019] [ 544.291615][T11036] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2183'. [ 548.501043][T11036] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2183'. [ 548.600005][T11071] sctp: [Deprecated]: syz.2.2194 (pid 11071) Use of struct sctp_assoc_value in delayed_ack socket option. [ 548.600005][T11071] Use struct sctp_sack_info instead [ 550.493000][T11096] netlink: 'syz.2.2204': attribute type 10 has an invalid length. [ 550.533502][T11096] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2204'. [ 550.575988][T11096] batman_adv: batadv0: Interface deactivated: veth0_vlan [ 551.474430][T11133] delete_channel: no stack [ 551.514454][T11096] batman_adv: batadv0: Removing interface: veth0_vlan [ 552.798942][T11146] sctp: [Deprecated]: syz.4.2215 (pid 11146) Use of struct sctp_assoc_value in delayed_ack socket option. [ 552.798942][T11146] Use struct sctp_sack_info instead [ 553.932823][T11166] delete_channel: no stack [ 554.727338][T11195] sctp: [Deprecated]: syz.1.2234 (pid 11195) Use of struct sctp_assoc_value in delayed_ack socket option. [ 554.727338][T11195] Use struct sctp_sack_info instead [ 554.925476][T11183] device syzkaller0 entered promiscuous mode [ 555.065997][T11197] netlink: 'syz.3.2235': attribute type 10 has an invalid length. [ 555.111813][T11197] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2235'. [ 556.201256][T11220] delete_channel: no stack [ 558.199556][T11218] netlink: 'syz.2.2241': attribute type 10 has an invalid length. [ 558.390792][T11249] sctp: [Deprecated]: syz.3.2249 (pid 11249) Use of struct sctp_assoc_value in delayed_ack socket option. [ 558.390792][T11249] Use struct sctp_sack_info instead [ 558.546505][T11248] netlink: 'syz.1.2251': attribute type 10 has an invalid length. [ 558.571861][T11248] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2251'. [ 558.936087][T11262] delete_channel: no stack [ 559.739165][T11279] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.2263'. [ 559.928837][T11283] device syzkaller0 entered promiscuous mode [ 560.999331][T11304] delete_channel: no stack [ 562.480748][T11318] netlink: 146340 bytes leftover after parsing attributes in process `syz.2.2275'. [ 562.507204][T11318] openvswitch: netlink: Key type 386 is out of range max 32 [ 562.944112][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.950663][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.022734][T11309] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.2272'. [ 564.051968][T11322] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.2277'. [ 564.191257][T11325] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 564.215619][T11331] delete_channel: no stack [ 564.303099][T11334] netlink: 'syz.2.2290': attribute type 7 has an invalid length. [ 565.053830][T11360] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2289'. [ 565.151108][T11355] netlink: 'syz.1.2286': attribute type 10 has an invalid length. [ 565.357798][T11364] device syzkaller0 entered promiscuous mode [ 565.372092][T11367] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.2292'. [ 565.617255][T11373] delete_channel: no stack [ 568.988508][T11388] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 568.995153][T11388] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 569.157851][T11391] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 572.787943][T11408] netlink: 'syz.3.2305': attribute type 10 has an invalid length. [ 572.954960][T11413] delete_channel: no stack [ 573.007088][T11409] netlink: 'syz.4.2307': attribute type 10 has an invalid length. [ 574.847207][T11438] netlink: 'syz.2.2316': attribute type 19 has an invalid length. [ 574.856364][T11438] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2316'. [ 575.127571][T11447] delete_channel: no stack [ 575.445508][T11454] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 575.489497][T11455] netlink: 'syz.4.2321': attribute type 10 has an invalid length. [ 576.787960][T11462] netlink: 'syz.1.2322': attribute type 10 has an invalid length. [ 577.079676][T11467] device syzkaller0 entered promiscuous mode [ 577.089362][T11477] netlink: 'syz.3.2330': attribute type 19 has an invalid length. [ 577.098644][T11477] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2330'. [ 577.116386][T11481] netlink: 'syz.2.2331': attribute type 10 has an invalid length. [ 577.125019][T11481] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2331'. [ 580.523896][T11502] netlink: 'syz.3.2339': attribute type 10 has an invalid length. [ 580.543964][T11502] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2339'. [ 580.594282][T11508] netlink: 'syz.2.2340': attribute type 10 has an invalid length. [ 580.721451][T11510] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 581.220471][T11529] netlink: 'syz.0.2344': attribute type 19 has an invalid length. [ 581.287840][T11529] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2344'. [ 581.396444][T11530] netlink: 'syz.3.2355': attribute type 10 has an invalid length. [ 581.415799][T11532] netlink: 'syz.2.2345': attribute type 10 has an invalid length. [ 581.428187][T11532] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2345'. [ 590.737627][T11578] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 590.744373][T11578] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 590.760425][T11579] netlink: 'syz.4.2359': attribute type 19 has an invalid length. [ 590.805036][T11579] netlink: 55 bytes leftover after parsing attributes in process `syz.4.2359'. [ 591.318089][T11573] device syzkaller0 entered promiscuous mode [ 591.531917][T11596] netlink: 'syz.4.2363': attribute type 10 has an invalid length. [ 591.540227][T11596] netlink: 55 bytes leftover after parsing attributes in process `syz.4.2363'. [ 597.170027][T11602] netlink: 'syz.2.2365': attribute type 10 has an invalid length. [ 597.179377][T11602] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2365'. [ 597.360295][T11628] netlink: 'syz.0.2375': attribute type 21 has an invalid length. [ 598.891565][T11664] netlink: 'syz.0.2388': attribute type 10 has an invalid length. [ 598.902256][T11664] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2388'. [ 598.913237][T11664] device ipvlan1 entered promiscuous mode [ 598.925621][T11664] bridge0: port 4(ipvlan1) entered blocking state [ 598.932995][T11664] bridge0: port 4(ipvlan1) entered disabled state [ 598.945614][T11664] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 599.284085][T11680] netlink: 'syz.0.2392': attribute type 10 has an invalid length. [ 599.302823][T11680] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2392'. [ 600.058955][T11680] batman_adv: batadv0: Interface deactivated: vlan1 [ 600.214973][T11689] netlink: 'syz.1.2394': attribute type 2 has an invalid length. [ 600.539687][T11680] batman_adv: batadv0: Removing interface: vlan1 [ 600.667922][T11689] device 0 entered promiscuous mode [ 601.743773][T11735] netlink: 'syz.1.2413': attribute type 10 has an invalid length. [ 601.754680][T11735] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2413'. [ 604.210991][T11777] netlink: 'syz.3.2430': attribute type 10 has an invalid length. [ 604.250520][T11777] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2430'. [ 604.684060][T11776] device sit0 left promiscuous mode [ 605.122151][T11794] netlink: 'syz.1.2433': attribute type 2 has an invalid length. [ 605.128333][T11787] netlink: 'syz.4.2432': attribute type 10 has an invalid length. [ 605.161903][T11787] netlink: 55 bytes leftover after parsing attributes in process `syz.4.2432'. [ 605.294399][T11794] device 1 entered promiscuous mode [ 605.657776][T11816] FAULT_INJECTION: forcing a failure. [ 605.657776][T11816] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 605.689662][T11816] CPU: 0 PID: 11816 Comm: syz.3.2445 Not tainted syzkaller #0 [ 605.697537][T11816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 605.707831][T11816] Call Trace: [ 605.711136][T11816] [ 605.714082][T11816] dump_stack_lvl+0x188/0x24e [ 605.718789][T11816] ? show_regs_print_info+0x12/0x12 [ 605.724017][T11816] ? load_image+0x410/0x410 [ 605.728549][T11816] ? __lock_acquire+0x7c40/0x7c40 [ 605.733606][T11816] should_fail_ex+0x390/0x4c0 [ 605.738340][T11816] _copy_from_user+0x2c/0x170 [ 605.743053][T11816] __sys_bpf+0x2ea/0x780 [ 605.747330][T11816] ? bpf_link_show_fdinfo+0x380/0x380 [ 605.752752][T11816] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 605.758955][T11816] __x64_sys_bpf+0x78/0x90 [ 605.763411][T11816] do_syscall_64+0x4c/0xa0 [ 605.767855][T11816] ? clear_bhb_loop+0x60/0xb0 [ 605.772564][T11816] ? clear_bhb_loop+0x60/0xb0 [ 605.777299][T11816] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 605.783233][T11816] RIP: 0033:0x7f36c2f9e019 [ 605.787680][T11816] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 605.807329][T11816] RSP: 002b:00007f36c3d95028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 605.815773][T11816] RAX: ffffffffffffffda RBX: 00007f36c3225fa0 RCX: 00007f36c2f9e019 [ 605.823775][T11816] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 605.832389][T11816] RBP: 00007f36c3d95090 R08: 0000000000000000 R09: 0000000000000000 [ 605.840569][T11816] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 605.848571][T11816] R13: 00007f36c3226038 R14: 00007f36c3225fa0 R15: 00007ffcfdd45e28 [ 605.856586][T11816] [ 606.000967][T11830] netlink: 'syz.1.2446': attribute type 10 has an invalid length. [ 606.019194][T11830] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2446'. [ 606.694429][T11841] netlink: 'syz.3.2452': attribute type 21 has an invalid length. [ 606.805855][T11839] netlink: 'syz.0.2450': attribute type 10 has an invalid length. [ 606.830556][T11839] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2450'. [ 607.534122][T11867] netlink: 'syz.1.2462': attribute type 1 has an invalid length. [ 607.551787][T11867] netlink: 83992 bytes leftover after parsing attributes in process `syz.1.2462'. [ 607.918902][T11884] netlink: 'syz.4.2469': attribute type 10 has an invalid length. [ 607.943827][T11884] netlink: 55 bytes leftover after parsing attributes in process `syz.4.2469'. [ 607.972711][T11891] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.2471'. [ 608.097555][T11889] netlink: 'syz.3.2472': attribute type 10 has an invalid length. [ 609.657604][T11931] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2488'. [ 609.730750][T11931] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2488'. [ 609.749709][T11937] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2488'. [ 609.809941][T11941] netlink: 'syz.0.2490': attribute type 3 has an invalid length. [ 609.842577][T11937] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2488'. [ 609.942430][T11941] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2490'. [ 609.969931][T11934] netlink: 'syz.2.2489': attribute type 10 has an invalid length. [ 610.719167][T11952] netlink: 'syz.4.2493': attribute type 10 has an invalid length. [ 610.734467][T11952] netlink: 55 bytes leftover after parsing attributes in process `syz.4.2493'. [ 611.133443][T11960] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.2499'. [ 611.244632][T11960] netlink: zone id is out of range [ 611.251229][T11960] netlink: zone id is out of range [ 611.319588][T11960] netlink: del zone limit has 4 unknown bytes [ 611.625337][T11979] FAULT_INJECTION: forcing a failure. [ 611.625337][T11979] name failslab, interval 1, probability 0, space 0, times 0 [ 611.641087][T11979] CPU: 0 PID: 11979 Comm: syz.2.2506 Not tainted syzkaller #0 [ 611.648623][T11979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 611.658753][T11979] Call Trace: [ 611.662031][T11979] [ 611.664954][T11979] dump_stack_lvl+0x188/0x24e [ 611.669634][T11979] ? show_regs_print_info+0x12/0x12 [ 611.674844][T11979] ? load_image+0x410/0x410 [ 611.679337][T11979] ? neightbl_dump_info+0x1988/0x1b70 [ 611.684797][T11979] should_fail_ex+0x390/0x4c0 [ 611.689491][T11979] should_failslab+0x5/0x20 [ 611.694019][T11979] slab_pre_alloc_hook+0x59/0x300 [ 611.699091][T11979] kmem_cache_alloc+0x56/0x2f0 [ 611.703960][T11979] ? skb_clone+0x1e7/0x370 [ 611.708397][T11979] skb_clone+0x1e7/0x370 [ 611.712725][T11979] __netlink_deliver_tap+0x3e4/0x7e0 [ 611.718050][T11979] ? netlink_deliver_tap+0x2e/0x1b0 [ 611.723254][T11979] netlink_deliver_tap+0x19c/0x1b0 [ 611.728483][T11979] netlink_dump+0x80f/0xcd0 [ 611.732990][T11979] ? netlink_lookup+0x200/0x200 [ 611.737860][T11979] ? netlink_recvmsg+0x5e3/0xe00 [ 611.742820][T11979] ? kmem_cache_free+0xf7/0x2a0 [ 611.747669][T11979] netlink_recvmsg+0x68f/0xe00 [ 611.752473][T11979] ? netlink_sendmsg+0xbd0/0xbd0 [ 611.757431][T11979] ? aa_af_perm+0x340/0x340 [ 611.761936][T11979] ? __might_fault+0xa6/0x120 [ 611.766656][T11979] ? bpf_lsm_socket_recvmsg+0x5/0x10 [ 611.771954][T11979] ? security_socket_recvmsg+0x85/0xb0 [ 611.777431][T11979] ? netlink_sendmsg+0xbd0/0xbd0 [ 611.782367][T11979] ____sys_recvmsg+0x2c8/0x5b0 [ 611.787159][T11979] ? __sys_recvmsg_sock+0x40/0x40 [ 611.792396][T11979] ? import_iovec+0x6f/0xa0 [ 611.796898][T11979] ___sys_recvmsg+0x210/0x590 [ 611.801575][T11979] ? __sys_recvmsg+0x2a0/0x2a0 [ 611.806360][T11979] ? common_file_perm+0x171/0x1c0 [ 611.811421][T11979] ? __fget_files+0x3fc/0x460 [ 611.812646][T11988] netlink: 'syz.3.2507': attribute type 10 has an invalid length. [ 611.816122][T11979] __x64_sys_recvmsg+0x20d/0x2e0 [ 611.816166][T11979] ? ___sys_recvmsg+0x590/0x590 [ 611.833825][T11979] ? lockdep_hardirqs_on+0x94/0x140 [ 611.839047][T11979] do_syscall_64+0x4c/0xa0 [ 611.843462][T11979] ? clear_bhb_loop+0x60/0xb0 [ 611.848147][T11979] ? clear_bhb_loop+0x60/0xb0 [ 611.852847][T11979] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 611.858796][T11979] RIP: 0033:0x7f36b859e019 [ 611.863209][T11979] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 611.882838][T11979] RSP: 002b:00007f36b946a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 611.891440][T11979] RAX: ffffffffffffffda RBX: 00007f36b8825fa0 RCX: 00007f36b859e019 [ 611.899459][T11979] RDX: 0000000000012020 RSI: 0000200000000080 RDI: 0000000000000003 [ 611.907445][T11979] RBP: 00007f36b946a090 R08: 0000000000000000 R09: 0000000000000000 [ 611.915420][T11979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 611.923397][T11979] R13: 00007f36b8826038 R14: 00007f36b8825fa0 R15: 00007fff70076ee8 [ 611.931414][T11979] [ 612.390894][T12000] device aaaaaaaaaaaaaaa entered promiscuous mode [ 612.415912][T12001] netlink: 'syz.4.2513': attribute type 10 has an invalid length. [ 612.458380][T12001] netlink: 55 bytes leftover after parsing attributes in process `syz.4.2513'. [ 613.248101][T12034] FAULT_INJECTION: forcing a failure. [ 613.248101][T12034] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 613.336656][T12034] CPU: 0 PID: 12034 Comm: syz.4.2527 Not tainted syzkaller #0 [ 613.344185][T12034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 613.354261][T12034] Call Trace: [ 613.357577][T12034] [ 613.360496][T12034] dump_stack_lvl+0x188/0x24e [ 613.365243][T12034] ? show_regs_print_info+0x12/0x12 [ 613.370559][T12034] ? load_image+0x410/0x410 [ 613.375087][T12034] ? __lock_acquire+0x7c40/0x7c40 [ 613.380156][T12034] should_fail_ex+0x390/0x4c0 [ 613.384857][T12034] _copy_from_user+0x2c/0x170 [ 613.389553][T12034] __sys_bpf+0x2ea/0x780 [ 613.393828][T12034] ? bpf_link_show_fdinfo+0x380/0x380 [ 613.399237][T12034] ? lock_chain_count+0x20/0x20 [ 613.404127][T12034] __x64_sys_bpf+0x78/0x90 [ 613.408578][T12034] do_syscall_64+0x4c/0xa0 [ 613.413026][T12034] ? clear_bhb_loop+0x60/0xb0 [ 613.417737][T12034] ? clear_bhb_loop+0x60/0xb0 [ 613.422579][T12034] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 613.428489][T12034] RIP: 0033:0x7fb8bb19e019 [ 613.432915][T12034] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 613.452551][T12034] RSP: 002b:00007fb8bbfa2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 613.460982][T12034] RAX: ffffffffffffffda RBX: 00007fb8bb425fa0 RCX: 00007fb8bb19e019 [ 613.468951][T12034] RDX: 0000000000000050 RSI: 0000200000000040 RDI: 0000000000000000 [ 613.476934][T12034] RBP: 00007fb8bbfa2090 R08: 0000000000000000 R09: 0000000000000000 [ 613.484936][T12034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 613.492922][T12034] R13: 00007fb8bb426038 R14: 00007fb8bb425fa0 R15: 00007fffd342fb48 [ 613.500921][T12034] [ 613.592697][T12042] netlink: 'syz.3.2525': attribute type 10 has an invalid length. [ 613.794212][T12050] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.2532'. [ 614.014611][T12056] netlink: 'syz.3.2533': attribute type 10 has an invalid length. [ 614.068665][T12056] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2533'. [ 614.160638][T12063] IPv6: …: Disabled Multicast RS [ 614.453779][T12071] FAULT_INJECTION: forcing a failure. [ 614.453779][T12071] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 614.612033][T12071] CPU: 1 PID: 12071 Comm: syz.2.2540 Not tainted syzkaller #0 [ 614.619561][T12071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 614.629621][T12071] Call Trace: [ 614.632921][T12071] [ 614.635861][T12071] dump_stack_lvl+0x188/0x24e [ 614.640576][T12071] ? show_regs_print_info+0x12/0x12 [ 614.645788][T12071] ? load_image+0x410/0x410 [ 614.650314][T12071] ? __lock_acquire+0x7c40/0x7c40 [ 614.655366][T12071] should_fail_ex+0x390/0x4c0 [ 614.660069][T12071] _copy_from_user+0x2c/0x170 [ 614.664765][T12071] ___sys_recvmsg+0x170/0x590 [ 614.669453][T12071] ? __sys_recvmsg+0x2a0/0x2a0 [ 614.674228][T12071] ? common_file_perm+0x171/0x1c0 [ 614.679265][T12071] ? __fget_files+0x3fc/0x460 [ 614.683955][T12071] __x64_sys_recvmsg+0x20d/0x2e0 [ 614.688983][T12071] ? ___sys_recvmsg+0x590/0x590 [ 614.693848][T12071] ? lockdep_hardirqs_on+0x94/0x140 [ 614.699044][T12071] do_syscall_64+0x4c/0xa0 [ 614.703462][T12071] ? clear_bhb_loop+0x60/0xb0 [ 614.708143][T12071] ? clear_bhb_loop+0x60/0xb0 [ 614.712818][T12071] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 614.718708][T12071] RIP: 0033:0x7f36b859e019 [ 614.723126][T12071] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 614.742836][T12071] RSP: 002b:00007f36b946a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 614.751271][T12071] RAX: ffffffffffffffda RBX: 00007f36b8825fa0 RCX: 00007f36b859e019 [ 614.759268][T12071] RDX: 0000000000002002 RSI: 0000200000000280 RDI: 0000000000000003 [ 614.767246][T12071] RBP: 00007f36b946a090 R08: 0000000000000000 R09: 0000000000000000 [ 614.775215][T12071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 614.783181][T12071] R13: 00007f36b8826038 R14: 00007f36b8825fa0 R15: 00007fff70076ee8 [ 614.791171][T12071] [ 615.538721][T12094] netlink: 'syz.2.2543': attribute type 10 has an invalid length. [ 615.573624][T12092] delete_channel: no stack [ 615.690242][T12098] delete_channel: no stack [ 615.896777][T12111] FAULT_INJECTION: forcing a failure. [ 615.896777][T12111] name failslab, interval 1, probability 0, space 0, times 0 [ 615.918070][T12111] CPU: 1 PID: 12111 Comm: syz.2.2554 Not tainted syzkaller #0 [ 615.925592][T12111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 615.935663][T12111] Call Trace: [ 615.938954][T12111] [ 615.941900][T12111] dump_stack_lvl+0x188/0x24e [ 615.946601][T12111] ? show_regs_print_info+0x12/0x12 [ 615.951818][T12111] ? load_image+0x410/0x410 [ 615.956341][T12111] ? __might_sleep+0xd0/0xd0 [ 615.960953][T12111] ? __lock_acquire+0x7c40/0x7c40 [ 615.966071][T12111] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 615.972092][T12111] should_fail_ex+0x390/0x4c0 [ 615.976804][T12111] should_failslab+0x5/0x20 [ 615.981339][T12111] slab_pre_alloc_hook+0x59/0x300 [ 615.986401][T12111] ? __get_vm_area_node+0x122/0x330 [ 615.991622][T12111] __kmem_cache_alloc_node+0x4f/0x270 [ 615.997015][T12111] ? __get_vm_area_node+0x122/0x330 [ 616.002322][T12111] kmalloc_node_trace+0x22/0xe0 [ 616.007199][T12111] __get_vm_area_node+0x122/0x330 [ 616.012250][T12111] __vmalloc_node_range+0x357/0x1380 [ 616.017554][T12111] ? bpf_prog_alloc_no_stats+0x37/0x3a0 [ 616.023136][T12111] ? aa_get_newest_label+0xf9/0x5b0 [ 616.028341][T12111] ? free_vm_area+0x50/0x50 [ 616.032878][T12111] ? end_current_label_crit_section+0x170/0x170 [ 616.039122][T12111] ? __lock_acquire+0x7c40/0x7c40 [ 616.044155][T12111] ? bpf_prog_alloc_no_stats+0x37/0x3a0 [ 616.049701][T12111] __vmalloc+0x76/0x80 [ 616.053769][T12111] ? bpf_prog_alloc_no_stats+0x37/0x3a0 [ 616.059313][T12111] bpf_prog_alloc_no_stats+0x37/0x3a0 [ 616.064685][T12111] ? bpf_prog_alloc+0x13/0x1b0 [ 616.069451][T12111] bpf_prog_alloc+0x1c/0x1b0 [ 616.074040][T12111] bpf_prog_load+0x7d4/0x1530 [ 616.078721][T12111] ? map_freeze+0x390/0x390 [ 616.083220][T12111] ? __might_fault+0xa6/0x120 [ 616.087899][T12111] ? __might_fault+0xa6/0x120 [ 616.092569][T12111] ? __might_fault+0xc2/0x120 [ 616.097259][T12111] ? __might_fault+0xa6/0x120 [ 616.101961][T12111] ? bpf_lsm_bpf+0x5/0x10 [ 616.106385][T12111] ? security_bpf+0x7a/0xa0 [ 616.110889][T12111] __sys_bpf+0x5b8/0x780 [ 616.115143][T12111] ? bpf_link_show_fdinfo+0x380/0x380 [ 616.120524][T12111] ? lock_chain_count+0x20/0x20 [ 616.125388][T12111] __x64_sys_bpf+0x78/0x90 [ 616.129808][T12111] do_syscall_64+0x4c/0xa0 [ 616.134223][T12111] ? clear_bhb_loop+0x60/0xb0 [ 616.138899][T12111] ? clear_bhb_loop+0x60/0xb0 [ 616.143576][T12111] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 616.149488][T12111] RIP: 0033:0x7f36b859e019 [ 616.153914][T12111] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 616.173523][T12111] RSP: 002b:00007f36b946a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 616.181937][T12111] RAX: ffffffffffffffda RBX: 00007f36b8825fa0 RCX: 00007f36b859e019 [ 616.189903][T12111] RDX: 0000000000000094 RSI: 0000200000000340 RDI: 0000000000000005 [ 616.197869][T12111] RBP: 00007f36b946a090 R08: 0000000000000000 R09: 0000000000000000 [ 616.205926][T12111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 616.213896][T12111] R13: 00007f36b8826038 R14: 00007f36b8825fa0 R15: 00007fff70076ee8 [ 616.221874][T12111] [ 616.264638][T12111] syz.2.2554: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 616.306500][T12111] CPU: 1 PID: 12111 Comm: syz.2.2554 Not tainted syzkaller #0 [ 616.314056][T12111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 616.324133][T12111] Call Trace: [ 616.327429][T12111] [ 616.330381][T12111] dump_stack_lvl+0x188/0x24e [ 616.335196][T12111] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 616.341743][T12111] ? show_regs_print_info+0x12/0x12 [ 616.346978][T12111] ? load_image+0x410/0x410 [ 616.351508][T12111] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 616.357949][T12111] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 616.364479][T12111] warn_alloc+0x242/0x330 [ 616.368835][T12111] ? __get_vm_area_node+0x122/0x330 [ 616.374082][T12111] ? zone_watermark_ok_safe+0x270/0x270 [ 616.379659][T12111] ? rcu_is_watching+0x11/0xa0 [ 616.384462][T12111] ? __get_vm_area_node+0x318/0x330 [ 616.389692][T12111] __vmalloc_node_range+0x37c/0x1380 [ 616.395026][T12111] ? aa_get_newest_label+0xf9/0x5b0 [ 616.400378][T12111] ? free_vm_area+0x50/0x50 [ 616.404912][T12111] ? end_current_label_crit_section+0x170/0x170 [ 616.411184][T12111] ? __lock_acquire+0x7c40/0x7c40 [ 616.416241][T12111] ? bpf_prog_alloc_no_stats+0x37/0x3a0 [ 616.421823][T12111] __vmalloc+0x76/0x80 [ 616.425913][T12111] ? bpf_prog_alloc_no_stats+0x37/0x3a0 [ 616.431486][T12111] bpf_prog_alloc_no_stats+0x37/0x3a0 [ 616.436886][T12111] ? bpf_prog_alloc+0x13/0x1b0 [ 616.441677][T12111] bpf_prog_alloc+0x1c/0x1b0 [ 616.446378][T12111] bpf_prog_load+0x7d4/0x1530 [ 616.451089][T12111] ? map_freeze+0x390/0x390 [ 616.455614][T12111] ? __might_fault+0xa6/0x120 [ 616.460319][T12111] ? __might_fault+0xa6/0x120 [ 616.465029][T12111] ? __might_fault+0xc2/0x120 [ 616.469733][T12111] ? __might_fault+0xa6/0x120 [ 616.474440][T12111] ? bpf_lsm_bpf+0x5/0x10 [ 616.478791][T12111] ? security_bpf+0x7a/0xa0 [ 616.483328][T12111] __sys_bpf+0x5b8/0x780 [ 616.487599][T12111] ? bpf_link_show_fdinfo+0x380/0x380 [ 616.493035][T12111] ? lock_chain_count+0x20/0x20 [ 616.497921][T12111] __x64_sys_bpf+0x78/0x90 [ 616.502372][T12111] do_syscall_64+0x4c/0xa0 [ 616.506808][T12111] ? clear_bhb_loop+0x60/0xb0 [ 616.511507][T12111] ? clear_bhb_loop+0x60/0xb0 [ 616.516209][T12111] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 616.522124][T12111] RIP: 0033:0x7f36b859e019 [ 616.526551][T12111] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 616.546182][T12111] RSP: 002b:00007f36b946a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 616.554708][T12111] RAX: ffffffffffffffda RBX: 00007f36b8825fa0 RCX: 00007f36b859e019 [ 616.562709][T12111] RDX: 0000000000000094 RSI: 0000200000000340 RDI: 0000000000000005 [ 616.570701][T12111] RBP: 00007f36b946a090 R08: 0000000000000000 R09: 0000000000000000 [ 616.578696][T12111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 616.586690][T12111] R13: 00007f36b8826038 R14: 00007f36b8825fa0 R15: 00007fff70076ee8 [ 616.594702][T12111] [ 616.621897][T12111] Mem-Info: [ 616.631863][T12111] active_anon:5844 inactive_anon:0 isolated_anon:0 [ 616.631863][T12111] active_file:23648 inactive_file:40160 isolated_file:0 [ 616.631863][T12111] unevictable:768 dirty:201 writeback:0 [ 616.631863][T12111] slab_reclaimable:21083 slab_unreclaimable:95436 [ 616.631863][T12111] mapped:34080 shmem:1361 pagetables:612 [ 616.631863][T12111] sec_pagetables:0 bounce:0 [ 616.631863][T12111] kernel_misc_reclaimable:0 [ 616.631863][T12111] free:1314646 free_pcp:11242 free_cma:0 [ 616.744876][T12118] netlink: 'syz.3.2555': attribute type 10 has an invalid length. [ 616.769257][T12118] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2555'. [ 617.195920][T12111] Node 0 active_anon:23492kB inactive_anon:0kB active_file:94592kB inactive_file:160436kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:119916kB dirty:804kB writeback:0kB shmem:3912kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:10156kB pagetables:2508kB sec_pagetables:0kB all_unreclaimable? no [ 617.484521][T12111] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 617.517834][T12111] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 617.553674][T12111] lowmem_reserve[]: 0 2527 2528 2528 2528 [ 617.559697][T12111] Node 0 DMA32 free:1341888kB boost:0kB min:34692kB low:43364kB high:52036kB reserved_highatomic:0KB active_anon:23592kB inactive_anon:0kB active_file:94592kB inactive_file:160436kB unevictable:1536kB writepending:804kB present:3129332kB managed:2592912kB mlocked:0kB bounce:0kB free_pcp:27060kB local_pcp:11804kB free_cma:0kB [ 617.599142][T12111] lowmem_reserve[]: 0 0 1 1 1 [ 617.619148][T12111] Node 0 Normal free:16kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:4kB free_cma:0kB [ 617.711151][T12111] lowmem_reserve[]: 0 0 0 0 0 [ 617.721839][T12111] Node 1 Normal free:3901320kB boost:0kB min:55192kB low:68988kB high:82784kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:16992kB local_pcp:9088kB free_cma:0kB [ 617.774103][T12111] lowmem_reserve[]: 0 0 0 0 0 [ 617.779041][T12111] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 617.789698][T12137] netlink: 'syz.4.2561': attribute type 10 has an invalid length. [ 617.792176][T12111] Node 0 DMA32: 2320*4kB (UM) 1980*8kB (UM) 1450*16kB (UM) 1650*32kB (UME) 799*64kB (UME) 418*128kB (UME) 318*256kB (UME) 130*512kB (UM) 51*1024kB (UM) 15*2048kB (UM) 221*4096kB (UM) = 1341888kB [ 617.847759][T12111] Node 0 Normal: 2*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 617.882572][T12111] Node 1 Normal: 252*4kB (UE) 49*8kB (UE) 27*16kB (UME) 91*32kB (UME) 42*64kB (UME) 15*128kB (UME) 7*256kB (UME) 2*512kB (UM) 2*1024kB (UE) 2*2048kB (UE) 948*4096kB (M) = 3901320kB [ 617.915650][T12111] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 617.925706][T12111] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 617.945591][T12111] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 617.966063][T12111] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 617.983338][T12111] 65172 total pagecache pages [ 617.992859][T12111] 0 pages in swap cache [ 617.997054][T12111] Free swap = 124996kB [ 618.056013][T12111] Total swap = 124996kB [ 618.060227][T12111] 2097051 pages RAM [ 618.103425][T12111] 0 pages HighMem/MovableOnly [ 618.108973][T12111] 415222 pages reserved [ 618.121681][T12111] 0 pages cma reserved [ 618.418459][T12171] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2571'. [ 618.428793][T12171] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2571'. [ 618.450970][T12171] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2571'. [ 618.480519][T12171] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2571'. [ 618.623962][T12177] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.2574'. [ 618.712431][T12179] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 620.958206][T12189] netlink: 'syz.0.2578': attribute type 10 has an invalid length. [ 621.337994][T12207] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.2585'. [ 621.432492][T12207] netlink: zone id is out of range [ 621.438563][T12207] netlink: zone id is out of range [ 621.711133][T12207] netlink: del zone limit has 4 unknown bytes [ 622.004688][T12228] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 623.377713][T12243] netlink: 'syz.4.2596': attribute type 10 has an invalid length. [ 623.556596][T12247] netlink: 'syz.2.2600': attribute type 4 has an invalid length. [ 623.582321][T12247] netlink: 'syz.2.2600': attribute type 1 has an invalid length. [ 623.595817][T12247] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.2600'. [ 623.619616][T12247] netlink: 'syz.2.2600': attribute type 2 has an invalid length. [ 623.703131][T12247] device 0 entered promiscuous mode [ 623.721769][T12254] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2600'. [ 623.740653][T12253] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.2602'. [ 623.758853][T12253] netlink: zone id is out of range [ 623.788001][T12253] netlink: zone id is out of range [ 623.843267][T12253] netlink: del zone limit has 4 unknown bytes [ 624.011213][T12254] device hsr_slave_0 left promiscuous mode [ 624.067394][T12260] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2603'. [ 624.087791][T12260] : renamed from caif0 [ 624.100376][T12260] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 624.138395][T12266] netlink: 'syz.4.2606': attribute type 10 has an invalid length. [ 624.231945][T12266] netlink: 55 bytes leftover after parsing attributes in process `syz.4.2606'. [ 624.438936][T12280] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 624.552783][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.559278][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.756114][T12296] netlink: 'syz.2.2617': attribute type 10 has an invalid length. [ 628.098741][T12327] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 628.105294][T12327] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 628.156280][T12329] netlink: 'syz.4.2631': attribute type 10 has an invalid length. [ 628.192377][T12329] netlink: 55 bytes leftover after parsing attributes in process `syz.4.2631'. [ 629.367001][T12348] netlink: 'syz.0.2638': attribute type 10 has an invalid length. [ 629.411907][T12348] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2638'. [ 630.080539][T12368] device syzkaller0 entered promiscuous mode [ 630.197426][T12377] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 630.428916][T12380] netlink: 'syz.3.2649': attribute type 4 has an invalid length. [ 630.460621][T12380] netlink: 'syz.3.2649': attribute type 1 has an invalid length. [ 630.499985][T12380] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.2649'. [ 630.557089][T12383] netlink: 'syz.3.2649': attribute type 2 has an invalid length. [ 633.809154][T12383] device 0 entered promiscuous mode [ 633.814874][T12380] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2649'. [ 633.825888][T12380] device hsr_slave_0 left promiscuous mode [ 633.834057][T12380] device hsr_slave_1 left promiscuous mode [ 633.897853][T12395] netlink: 'syz.2.2652': attribute type 10 has an invalid length. [ 633.921770][T12395] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2652'. [ 633.974519][T12416] FAULT_INJECTION: forcing a failure. [ 633.974519][T12416] name failslab, interval 1, probability 0, space 0, times 0 [ 634.070991][T12416] CPU: 0 PID: 12416 Comm: syz.1.2662 Not tainted syzkaller #0 [ 634.078579][T12416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 634.088657][T12416] Call Trace: [ 634.091949][T12416] [ 634.094892][T12416] dump_stack_lvl+0x188/0x24e [ 634.099595][T12416] ? show_regs_print_info+0x12/0x12 [ 634.104800][T12416] ? load_image+0x410/0x410 [ 634.109359][T12416] ? __might_sleep+0xd0/0xd0 [ 634.113967][T12416] ? __lock_acquire+0x7c40/0x7c40 [ 634.119035][T12416] should_fail_ex+0x390/0x4c0 [ 634.123752][T12416] should_failslab+0x5/0x20 [ 634.128269][T12416] slab_pre_alloc_hook+0x59/0x300 [ 634.133314][T12416] ? __lock_acquire+0x138a/0x7c40 [ 634.138431][T12416] ? tomoyo_realpath_from_path+0xe2/0x5c0 [ 634.144527][T12416] __kmem_cache_alloc_node+0x4f/0x270 [ 634.149921][T12416] ? tomoyo_realpath_from_path+0xe2/0x5c0 [ 634.155717][T12416] __kmalloc+0xa3/0x240 [ 634.159901][T12416] tomoyo_realpath_from_path+0xe2/0x5c0 [ 634.165470][T12416] ? tomoyo_domain+0xd2/0x120 [ 634.170187][T12416] ? tomoyo_path_number_perm+0x205/0x650 [ 634.175848][T12416] tomoyo_path_number_perm+0x22f/0x650 [ 634.181332][T12416] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 634.186813][T12416] ? ksys_write+0x1ce/0x260 [ 634.191346][T12416] ? common_file_perm+0x171/0x1c0 [ 634.196424][T12416] ? __fget_files+0x28/0x460 [ 634.201096][T12416] security_file_ioctl+0x6c/0xa0 [ 634.206063][T12416] __se_sys_ioctl+0x48/0x170 [ 634.210679][T12416] do_syscall_64+0x4c/0xa0 [ 634.215098][T12416] ? clear_bhb_loop+0x60/0xb0 [ 634.219788][T12416] ? clear_bhb_loop+0x60/0xb0 [ 634.224475][T12416] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 634.230391][T12416] RIP: 0033:0x7f8af0d9e019 [ 634.234826][T12416] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 634.254531][T12416] RSP: 002b:00007f8af1c11028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 634.262955][T12416] RAX: ffffffffffffffda RBX: 00007f8af1025fa0 RCX: 00007f8af0d9e019 [ 634.270947][T12416] RDX: 0000200000000080 RSI: 00000000000089f1 RDI: 0000000000000008 [ 634.278931][T12416] RBP: 00007f8af1c11090 R08: 0000000000000000 R09: 0000000000000000 [ 634.286925][T12416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 634.294926][T12416] R13: 00007f8af1026038 R14: 00007f8af1025fa0 R15: 00007ffe4fca7fb8 [ 634.302930][T12416] [ 634.315886][T12416] ERROR: Out of memory at tomoyo_realpath_from_path. [ 634.526524][T12436] FAULT_INJECTION: forcing a failure. [ 634.526524][T12436] name failslab, interval 1, probability 0, space 0, times 0 [ 634.569765][T12436] CPU: 0 PID: 12436 Comm: syz.4.2670 Not tainted syzkaller #0 [ 634.577297][T12436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 634.587380][T12436] Call Trace: [ 634.590673][T12436] [ 634.593611][T12436] dump_stack_lvl+0x188/0x24e [ 634.598362][T12436] ? show_regs_print_info+0x12/0x12 [ 634.603609][T12436] ? load_image+0x410/0x410 [ 634.608146][T12436] ? __might_sleep+0xd0/0xd0 [ 634.612759][T12436] ? __lock_acquire+0x7c40/0x7c40 [ 634.617807][T12436] ? verify_lock_unused+0x140/0x140 [ 634.623036][T12436] should_fail_ex+0x390/0x4c0 [ 634.627737][T12436] should_failslab+0x5/0x20 [ 634.632258][T12436] slab_pre_alloc_hook+0x59/0x300 [ 634.637302][T12436] ? __get_vm_area_node+0x122/0x330 [ 634.642528][T12436] __kmem_cache_alloc_node+0x4f/0x270 [ 634.647927][T12436] ? __get_vm_area_node+0x122/0x330 [ 634.653155][T12436] kmalloc_node_trace+0x22/0xe0 [ 634.658054][T12436] __get_vm_area_node+0x122/0x330 [ 634.663117][T12436] ? __local_bh_enable_ip+0x136/0x1c0 [ 634.668514][T12436] __vmalloc_node_range+0x357/0x1380 [ 634.673816][T12436] ? netlink_sendmsg+0x5ec/0xbd0 [ 634.678789][T12436] ? netlink_insert+0x28d/0x13b0 [ 634.683751][T12436] ? free_vm_area+0x50/0x50 [ 634.688273][T12436] ? netlink_sendmsg+0x5ec/0xbd0 [ 634.693223][T12436] vmalloc+0x75/0x80 [ 634.697210][T12436] ? netlink_sendmsg+0x5ec/0xbd0 [ 634.702149][T12436] netlink_sendmsg+0x5ec/0xbd0 [ 634.706926][T12436] ? netlink_getsockopt+0x550/0x550 [ 634.712127][T12436] ? apparmor_socket_sendmsg+0x8a/0x330 [ 634.717675][T12436] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 634.722955][T12436] ? security_socket_sendmsg+0x7c/0xa0 [ 634.728507][T12436] sock_write_iter+0x2d5/0x3e0 [ 634.733272][T12436] ? sock_read_iter+0x3a0/0x3a0 [ 634.738134][T12436] ? common_file_perm+0x171/0x1c0 [ 634.743182][T12436] vfs_write+0x482/0x9a0 [ 634.747449][T12436] ? file_end_write+0x250/0x250 [ 634.752302][T12436] ? __fget_files+0x3fc/0x460 [ 634.756981][T12436] ? __fdget_pos+0x1d4/0x360 [ 634.761567][T12436] ? ksys_write+0x70/0x260 [ 634.765984][T12436] ksys_write+0x14d/0x260 [ 634.770316][T12436] ? __ia32_sys_read+0x80/0x80 [ 634.775083][T12436] ? lockdep_hardirqs_on+0x94/0x140 [ 634.780367][T12436] do_syscall_64+0x4c/0xa0 [ 634.784804][T12436] ? clear_bhb_loop+0x60/0xb0 [ 634.789480][T12436] ? clear_bhb_loop+0x60/0xb0 [ 634.794162][T12436] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 634.800050][T12436] RIP: 0033:0x7fb8bb19e019 [ 634.804483][T12436] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 634.824087][T12436] RSP: 002b:00007fb8bbfa2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 634.832494][T12436] RAX: ffffffffffffffda RBX: 00007fb8bb425fa0 RCX: 00007fb8bb19e019 [ 634.840459][T12436] RDX: 000000000000fe33 RSI: 0000200000000040 RDI: 0000000000000003 [ 634.848425][T12436] RBP: 00007fb8bbfa2090 R08: 0000000000000000 R09: 0000000000000000 [ 634.856398][T12436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 634.864393][T12436] R13: 00007fb8bb426038 R14: 00007fb8bb425fa0 R15: 00007fffd342fb48 [ 634.872389][T12436] [ 634.966452][T12436] syz.4.2670: vmalloc error: size 65408, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz4,mems_allowed=0-1 [ 634.971130][T12440] device syzkaller0 entered promiscuous mode [ 634.994978][T12436] CPU: 0 PID: 12436 Comm: syz.4.2670 Not tainted syzkaller #0 [ 635.002581][T12436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 635.012656][T12436] Call Trace: [ 635.015947][T12436] [ 635.018887][T12436] dump_stack_lvl+0x188/0x24e [ 635.023595][T12436] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 635.030031][T12436] ? show_regs_print_info+0x12/0x12 [ 635.035253][T12436] ? load_image+0x410/0x410 [ 635.039774][T12436] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 635.046205][T12436] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 635.052741][T12436] warn_alloc+0x242/0x330 [ 635.057094][T12436] ? __get_vm_area_node+0x122/0x330 [ 635.062322][T12436] ? zone_watermark_ok_safe+0x270/0x270 [ 635.067889][T12436] ? rcu_is_watching+0x11/0xa0 [ 635.072708][T12436] ? __get_vm_area_node+0x318/0x330 [ 635.077924][T12436] ? __local_bh_enable_ip+0x136/0x1c0 [ 635.083320][T12436] __vmalloc_node_range+0x37c/0x1380 [ 635.088647][T12436] ? netlink_insert+0x28d/0x13b0 [ 635.093616][T12436] ? free_vm_area+0x50/0x50 [ 635.098137][T12436] ? netlink_sendmsg+0x5ec/0xbd0 [ 635.103089][T12436] vmalloc+0x75/0x80 [ 635.106991][T12436] ? netlink_sendmsg+0x5ec/0xbd0 [ 635.111952][T12436] netlink_sendmsg+0x5ec/0xbd0 [ 635.116745][T12436] ? netlink_getsockopt+0x550/0x550 [ 635.121972][T12436] ? apparmor_socket_sendmsg+0x8a/0x330 [ 635.127627][T12436] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 635.132938][T12436] ? security_socket_sendmsg+0x7c/0xa0 [ 635.138432][T12436] sock_write_iter+0x2d5/0x3e0 [ 635.143213][T12436] ? sock_read_iter+0x3a0/0x3a0 [ 635.148082][T12436] ? common_file_perm+0x171/0x1c0 [ 635.153131][T12436] vfs_write+0x482/0x9a0 [ 635.157412][T12436] ? file_end_write+0x250/0x250 [ 635.162296][T12436] ? __fget_files+0x3fc/0x460 [ 635.167026][T12436] ? __fdget_pos+0x1d4/0x360 [ 635.171737][T12436] ? ksys_write+0x70/0x260 [ 635.176176][T12436] ksys_write+0x14d/0x260 [ 635.180534][T12436] ? __ia32_sys_read+0x80/0x80 [ 635.185326][T12436] ? lockdep_hardirqs_on+0x94/0x140 [ 635.190562][T12436] do_syscall_64+0x4c/0xa0 [ 635.195012][T12436] ? clear_bhb_loop+0x60/0xb0 [ 635.199751][T12436] ? clear_bhb_loop+0x60/0xb0 [ 635.204632][T12436] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 635.210550][T12436] RIP: 0033:0x7fb8bb19e019 [ 635.214991][T12436] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 635.234753][T12436] RSP: 002b:00007fb8bbfa2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 635.243189][T12436] RAX: ffffffffffffffda RBX: 00007fb8bb425fa0 RCX: 00007fb8bb19e019 [ 635.251165][T12436] RDX: 000000000000fe33 RSI: 0000200000000040 RDI: 0000000000000003 [ 635.259151][T12436] RBP: 00007fb8bbfa2090 R08: 0000000000000000 R09: 0000000000000000 [ 635.267119][T12436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 635.275084][T12436] R13: 00007fb8bb426038 R14: 00007fb8bb425fa0 R15: 00007fffd342fb48 [ 635.283086][T12436] [ 635.307825][T12436] Mem-Info: [ 635.311108][T12436] active_anon:5869 inactive_anon:0 isolated_anon:0 [ 635.311108][T12436] active_file:23648 inactive_file:40168 isolated_file:0 [ 635.311108][T12436] unevictable:768 dirty:201 writeback:0 [ 635.311108][T12436] slab_reclaimable:21067 slab_unreclaimable:97025 [ 635.311108][T12436] mapped:33044 shmem:1361 pagetables:605 [ 635.311108][T12436] sec_pagetables:0 bounce:0 [ 635.311108][T12436] kernel_misc_reclaimable:0 [ 635.311108][T12436] free:1314425 free_pcp:9162 free_cma:0 [ 635.364790][T12436] Node 0 active_anon:23476kB inactive_anon:0kB active_file:94592kB inactive_file:160468kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:132376kB dirty:804kB writeback:0kB shmem:3908kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:10292kB pagetables:2420kB sec_pagetables:0kB all_unreclaimable? no [ 635.403807][T12436] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 635.442813][T12436] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 635.474294][T12436] lowmem_reserve[]: 0 2527 2528 2528 2528 [ 635.480100][T12436] Node 0 DMA32 free:1341004kB boost:0kB min:34692kB low:43364kB high:52036kB reserved_highatomic:0KB active_anon:23476kB inactive_anon:0kB active_file:94592kB inactive_file:160468kB unevictable:1536kB writepending:804kB present:3129332kB managed:2592912kB mlocked:0kB bounce:0kB free_pcp:18988kB local_pcp:9436kB free_cma:0kB [ 635.516857][T12436] lowmem_reserve[]: 0 0 1 1 1 [ 635.532138][T12436] Node 0 Normal free:16kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:4kB free_cma:0kB [ 635.613964][T12436] lowmem_reserve[]: 0 0 0 0 0 [ 635.618755][T12436] Node 1 Normal free:3901320kB boost:0kB min:55192kB low:68988kB high:82784kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:16992kB local_pcp:9088kB free_cma:0kB [ 635.649528][T12452] netlink: 'syz.1.2675': attribute type 10 has an invalid length. [ 635.655457][T12436] lowmem_reserve[]: 0 0 0 0 0 [ 635.664876][T12436] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 635.671437][T12452] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2675'. [ 635.677932][T12436] Node 0 DMA32: 2963*4kB (UM) 2268*8kB (UME) 2182*16kB (UME) 1136*32kB (UME) 752*64kB (UME) 428*128kB (UME) 319*256kB (UME) 130*512kB (UM) 51*1024kB (UM) 15*2048kB (UM) 221*4096kB (UM) = 1340556kB [ 635.714783][T12436] Node 0 Normal: 2*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 635.727720][T12436] Node 1 Normal: 252*4kB (UE) 49*8kB (UE) 27*16kB (UME) 91*32kB (UME) 42*64kB (UME) 15*128kB (UME) 7*256kB (UME) 2*512kB (UM) 2*1024kB (UE) 2*2048kB (UE) 948*4096kB (M) = 3901320kB [ 635.746203][T12436] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 635.756776][T12436] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 635.769522][T12436] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 635.779369][T12436] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 635.790462][T12436] 65177 total pagecache pages [ 635.797547][T12436] 0 pages in swap cache [ 635.804375][T12436] Free swap = 124996kB [ 635.808567][T12436] Total swap = 124996kB [ 635.813540][T12436] 2097051 pages RAM [ 635.817603][T12436] 0 pages HighMem/MovableOnly [ 635.822426][T12436] 415222 pages reserved [ 635.826874][T12436] 0 pages cma reserved [ 635.965972][T12464] netlink: 'syz.4.2677': attribute type 4 has an invalid length. [ 636.007295][T12464] netlink: 'syz.4.2677': attribute type 1 has an invalid length. [ 636.017792][T12464] netlink: 181400 bytes leftover after parsing attributes in process `syz.4.2677'. [ 636.029600][T12467] netlink: 'syz.4.2677': attribute type 2 has an invalid length. [ 637.606047][T12467] device 0 entered promiscuous mode [ 637.613321][T12464] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2677'. [ 637.623119][T12464] device hsr_slave_0 left promiscuous mode [ 637.950869][T12485] FAULT_INJECTION: forcing a failure. [ 637.950869][T12485] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 638.008399][T12485] CPU: 1 PID: 12485 Comm: syz.2.2686 Not tainted syzkaller #0 [ 638.015935][T12485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 638.026016][T12485] Call Trace: [ 638.029294][T12485] [ 638.032220][T12485] dump_stack_lvl+0x188/0x24e [ 638.036934][T12485] ? show_regs_print_info+0x12/0x12 [ 638.042139][T12485] ? load_image+0x410/0x410 [ 638.046666][T12485] ? __lock_acquire+0x7c40/0x7c40 [ 638.051726][T12485] should_fail_ex+0x390/0x4c0 [ 638.056426][T12485] _copy_from_user+0x2c/0x170 [ 638.061125][T12485] __sys_bpf+0x2ea/0x780 [ 638.065378][T12485] ? bpf_link_show_fdinfo+0x380/0x380 [ 638.070769][T12485] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 638.076936][T12485] __x64_sys_bpf+0x78/0x90 [ 638.081387][T12485] do_syscall_64+0x4c/0xa0 [ 638.085818][T12485] ? clear_bhb_loop+0x60/0xb0 [ 638.090495][T12485] ? clear_bhb_loop+0x60/0xb0 [ 638.095181][T12485] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 638.101073][T12485] RIP: 0033:0x7f36b859e019 [ 638.105506][T12485] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 638.125221][T12485] RSP: 002b:00007f36b946a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 638.133641][T12485] RAX: ffffffffffffffda RBX: 00007f36b8825fa0 RCX: 00007f36b859e019 [ 638.141637][T12485] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 638.149614][T12485] RBP: 00007f36b946a090 R08: 0000000000000000 R09: 0000000000000000 [ 638.157579][T12485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 638.165722][T12485] R13: 00007f36b8826038 R14: 00007f36b8825fa0 R15: 00007fff70076ee8 [ 638.173708][T12485] [ 639.012216][T12512] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2695'. [ 639.025815][T12507] device syzkaller0 entered promiscuous mode [ 639.058979][T12512] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2695'. [ 639.101324][T12512] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2695'. [ 639.124580][T12512] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2695'. [ 640.670298][T12512] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2695'. [ 640.681234][T12519] netlink: 'syz.2.2697': attribute type 10 has an invalid length. [ 640.689195][T12519] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2697'. [ 640.701162][T12524] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2698'. [ 640.718136][T12526] bridge0: port 3(bond0) entered disabled state [ 640.776842][T12526] device bridge_slave_1 left promiscuous mode [ 640.791861][T12526] bridge0: port 2(bridge_slave_1) entered disabled state [ 640.837153][T12526] device bridge_slave_0 left promiscuous mode [ 640.844015][T12526] bridge0: port 1(bridge_slave_0) entered disabled state [ 640.899823][T12526] team0: Port device bridge0 removed [ 641.003249][T12538] netlink: 'syz.4.2701': attribute type 10 has an invalid length. [ 641.464003][T12542] netlink: 'syz.2.2702': attribute type 10 has an invalid length. [ 641.838655][T12561] device syzkaller0 entered promiscuous mode [ 644.091149][T12589] netlink: 'syz.3.2717': attribute type 10 has an invalid length. [ 644.122002][T12589] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2717'. [ 644.249943][T12593] bridge0: port 2(team0) entered disabled state [ 644.257156][T12593] bridge0: port 3(bond0) entered disabled state [ 644.264548][T12593] bridge0: port 1(bridge_slave_0) entered disabled state [ 644.357342][T12593] netlink: 144 bytes leftover after parsing attributes in process `syz.4.2718'. [ 644.394891][T12593] bridge0: port 2(team0) entered disabled state [ 644.438954][T12593] bridge0: port 3(bond0) entered disabled state [ 644.530325][T12593] device bridge_slave_0 left promiscuous mode [ 644.548443][T12593] bridge0: port 1(bridge_slave_0) entered disabled state [ 645.020716][T12627] device syzkaller0 entered promiscuous mode [ 645.289255][T12635] netlink: 'syz.1.2734': attribute type 10 has an invalid length. [ 645.304406][T12635] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2734'. [ 647.356716][T12656] netlink: 188 bytes leftover after parsing attributes in process `syz.4.2742'. [ 647.370834][T12658] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2741'. [ 647.390475][T12656] ksmbd: Daemon and kernel module version mismatch. ksmbd: 2, kernel module: 1. User-space ksmbd should terminate. [ 647.409585][T12658] bridge0: port 3(bond0) entered disabled state [ 647.437511][T12658] device bridge_slave_1 left promiscuous mode [ 647.449774][T12658] bridge0: port 2(bridge_slave_1) entered disabled state [ 648.360745][T12658] device bridge_slave_0 left promiscuous mode [ 648.378850][T12658] bridge0: port 1(bridge_slave_0) entered disabled state [ 648.480892][T12659] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.2743'. [ 648.512334][T12680] netlink: 'syz.0.2749': attribute type 10 has an invalid length. [ 648.554242][T12682] netlink: 'syz.4.2750': attribute type 10 has an invalid length. [ 649.235115][T12695] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 649.254926][T12695] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 649.267078][T12695] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 649.279119][T12695] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 649.287489][T12695] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 649.295346][T12695] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 649.531261][T12694] chnl_net:caif_netlink_parms(): no params data found [ 649.668391][T12694] bridge0: port 1(bridge_slave_0) entered blocking state [ 649.677329][T12694] bridge0: port 1(bridge_slave_0) entered disabled state [ 649.694647][T12694] device bridge_slave_0 entered promiscuous mode [ 649.709322][T12694] bridge0: port 2(bridge_slave_1) entered blocking state [ 649.719349][T12694] bridge0: port 2(bridge_slave_1) entered disabled state [ 649.746754][T12694] device bridge_slave_1 entered promiscuous mode [ 649.789336][T12694] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 649.811046][T12694] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 649.859009][T12694] team0: Port device team_slave_0 added [ 649.877527][T12694] team0: Port device team_slave_1 added [ 649.920347][T12694] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 649.935016][T12694] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 649.968871][T12694] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 649.997152][T12694] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 650.006015][T12694] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 650.041522][T12694] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 651.331814][T12695] Bluetooth: hci5: command 0x0409 tx timeout [ 651.683689][T12694] device hsr_slave_0 entered promiscuous mode [ 651.711274][T12694] device hsr_slave_1 entered promiscuous mode [ 651.976368][T12707] FAULT_INJECTION: forcing a failure. [ 651.976368][T12707] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 652.101931][T12707] CPU: 0 PID: 12707 Comm: syz.2.2757 Not tainted syzkaller #0 [ 652.109475][T12707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 652.119556][T12707] Call Trace: [ 652.122859][T12707] [ 652.125851][T12707] dump_stack_lvl+0x188/0x24e [ 652.130590][T12707] ? show_regs_print_info+0x12/0x12 [ 652.135828][T12707] ? load_image+0x410/0x410 [ 652.140382][T12707] ? __lock_acquire+0x7c40/0x7c40 [ 652.145511][T12707] should_fail_ex+0x390/0x4c0 [ 652.150228][T12707] _copy_from_user+0x2c/0x170 [ 652.154938][T12707] __sys_bpf+0x2ea/0x780 [ 652.159213][T12707] ? bpf_link_show_fdinfo+0x380/0x380 [ 652.164636][T12707] ? lock_chain_count+0x20/0x20 [ 652.169526][T12707] __x64_sys_bpf+0x78/0x90 [ 652.174286][T12707] do_syscall_64+0x4c/0xa0 [ 652.178726][T12707] ? clear_bhb_loop+0x60/0xb0 [ 652.183427][T12707] ? clear_bhb_loop+0x60/0xb0 [ 652.188141][T12707] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 652.194070][T12707] RIP: 0033:0x7f36b859e019 [ 652.198510][T12707] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 652.218147][T12707] RSP: 002b:00007f36b946a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 652.226584][T12707] RAX: ffffffffffffffda RBX: 00007f36b8825fa0 RCX: 00007f36b859e019 [ 652.234766][T12707] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 652.242778][T12707] RBP: 00007f36b946a090 R08: 0000000000000000 R09: 0000000000000000 [ 652.250842][T12707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 652.258817][T12707] R13: 00007f36b8826038 R14: 00007f36b8825fa0 R15: 00007fff70076ee8 [ 652.266800][T12707] [ 652.745389][T12694] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.960947][T12694] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.978333][T12719] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.2762'. [ 653.073637][T12694] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 653.411740][T12695] Bluetooth: hci5: command 0x041b tx timeout [ 653.594513][T12694] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 653.993080][T12694] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 654.319813][T12757] FAULT_INJECTION: forcing a failure. [ 654.319813][T12757] name failslab, interval 1, probability 0, space 0, times 0 [ 654.372517][T12757] CPU: 1 PID: 12757 Comm: syz.3.2773 Not tainted syzkaller #0 [ 654.380084][T12757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 654.390166][T12757] Call Trace: [ 654.393459][T12757] [ 654.396405][T12757] dump_stack_lvl+0x188/0x24e [ 654.401143][T12757] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 654.407331][T12757] ? show_regs_print_info+0x12/0x12 [ 654.412559][T12757] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 654.418750][T12757] should_fail_ex+0x390/0x4c0 [ 654.423462][T12757] should_failslab+0x5/0x20 [ 654.427976][T12757] slab_pre_alloc_hook+0x59/0x300 [ 654.433064][T12757] ? tomoyo_encode+0x28a/0x550 [ 654.437848][T12757] __kmem_cache_alloc_node+0x4f/0x270 [ 654.443240][T12757] ? tomoyo_encode+0x28a/0x550 [ 654.448019][T12757] __kmalloc+0xa3/0x240 [ 654.452204][T12757] tomoyo_encode+0x28a/0x550 [ 654.456825][T12757] tomoyo_realpath_from_path+0x578/0x5c0 [ 654.462479][T12757] ? tomoyo_domain+0xd2/0x120 [ 654.467182][T12757] ? tomoyo_path_number_perm+0x205/0x650 [ 654.472832][T12757] tomoyo_path_number_perm+0x22f/0x650 [ 654.478307][T12757] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 654.483780][T12757] ? ksys_write+0x1ce/0x260 [ 654.488305][T12757] ? common_file_perm+0x171/0x1c0 [ 654.493466][T12757] ? __fget_files+0x28/0x460 [ 654.498113][T12757] security_file_ioctl+0x6c/0xa0 [ 654.503065][T12757] __se_sys_ioctl+0x48/0x170 [ 654.507673][T12757] do_syscall_64+0x4c/0xa0 [ 654.512104][T12757] ? clear_bhb_loop+0x60/0xb0 [ 654.516885][T12757] ? clear_bhb_loop+0x60/0xb0 [ 654.521583][T12757] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 654.527487][T12757] RIP: 0033:0x7f36c2f9e019 [ 654.531915][T12757] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 654.551543][T12757] RSP: 002b:00007f36c11f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 654.560055][T12757] RAX: ffffffffffffffda RBX: 00007f36c3226090 RCX: 00007f36c2f9e019 [ 654.568126][T12757] RDX: 0000000000000000 RSI: 00000000000089ed RDI: 0000000000000005 [ 654.576196][T12757] RBP: 00007f36c11f6090 R08: 0000000000000000 R09: 0000000000000000 [ 654.584181][T12757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 654.592160][T12757] R13: 00007f36c3226128 R14: 00007f36c3226090 R15: 00007ffcfdd45e28 [ 654.600156][T12757] [ 655.082059][T12757] ERROR: Out of memory at tomoyo_realpath_from_path. [ 655.169316][T12694] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 655.181255][T12694] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 655.230456][T12694] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 655.449237][T12694] 8021q: adding VLAN 0 to HW filter on device bond0 [ 655.473138][ T6178] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 655.489201][ T6178] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 655.496691][T12695] Bluetooth: hci5: command 0x040f tx timeout [ 655.513125][T12694] 8021q: adding VLAN 0 to HW filter on device team0 [ 655.535060][ T6187] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 655.545946][ T6187] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 655.555309][ T6187] bridge0: port 1(bridge_slave_0) entered blocking state [ 655.562505][ T6187] bridge0: port 1(bridge_slave_0) entered forwarding state [ 655.660934][ T6187] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 655.685555][ T6187] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 655.729806][ T6187] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 655.783697][ T6187] bridge0: port 2(bridge_slave_1) entered blocking state [ 655.790907][ T6187] bridge0: port 2(bridge_slave_1) entered forwarding state [ 655.830173][ T6187] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 655.878187][ T6178] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 655.902169][T12773] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.2778'. [ 655.927210][ T6180] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 655.959415][ T6180] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 655.980060][ T6180] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 656.022086][ T6180] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 656.039778][ T6180] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 656.087370][T12694] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 656.141218][T12694] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 656.166004][ T6180] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 656.182016][ T6180] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 656.216077][ T6180] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 656.237362][ T6180] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 656.255676][ T6180] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 656.905478][T12786] tap0: tun_chr_ioctl cmd 1074025675 [ 656.940254][T12786] tap0: persist disabled [ 656.972529][T12786] tap0: tun_chr_ioctl cmd 35108 [ 657.265148][T12794] FAULT_INJECTION: forcing a failure. [ 657.265148][T12794] name failslab, interval 1, probability 0, space 0, times 0 [ 657.303127][T12794] CPU: 0 PID: 12794 Comm: syz.2.2784 Not tainted syzkaller #0 [ 657.310656][T12794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 657.320734][T12794] Call Trace: [ 657.324031][T12794] [ 657.326986][T12794] dump_stack_lvl+0x188/0x24e [ 657.331692][T12794] ? show_regs_print_info+0x12/0x12 [ 657.336919][T12794] ? load_image+0x410/0x410 [ 657.341516][T12794] ? __might_sleep+0xd0/0xd0 [ 657.346134][T12794] ? __lock_acquire+0x7c40/0x7c40 [ 657.351188][T12794] should_fail_ex+0x390/0x4c0 [ 657.355893][T12794] should_failslab+0x5/0x20 [ 657.360422][T12794] slab_pre_alloc_hook+0x59/0x300 [ 657.365466][T12794] ? sk_prot_alloc+0xe7/0x210 [ 657.370143][T12794] __kmem_cache_alloc_node+0x4f/0x270 [ 657.375523][T12794] ? sk_prot_alloc+0xe7/0x210 [ 657.380199][T12794] __kmalloc+0xa3/0x240 [ 657.384357][T12794] sk_prot_alloc+0xe7/0x210 [ 657.388852][T12794] ? sk_alloc+0x20/0x330 [ 657.393099][T12794] sk_alloc+0x36/0x330 [ 657.397160][T12794] ? bpf_ctx_init+0x154/0x190 [ 657.401834][T12794] bpf_prog_test_run_skb+0x36d/0x18e0 [ 657.407201][T12794] ? __fget_files+0x28/0x460 [ 657.411792][T12794] ? __fget_files+0x3fc/0x460 [ 657.416479][T12794] ? cpu_online+0xa0/0xa0 [ 657.420803][T12794] bpf_prog_test_run+0x31c/0x390 [ 657.425745][T12794] __sys_bpf+0x62b/0x780 [ 657.430019][T12794] ? bpf_link_show_fdinfo+0x380/0x380 [ 657.435421][T12794] ? lock_chain_count+0x20/0x20 [ 657.440272][T12794] __x64_sys_bpf+0x78/0x90 [ 657.444688][T12794] do_syscall_64+0x4c/0xa0 [ 657.449123][T12794] ? clear_bhb_loop+0x60/0xb0 [ 657.453797][T12794] ? clear_bhb_loop+0x60/0xb0 [ 657.458468][T12794] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 657.464357][T12794] RIP: 0033:0x7f36b859e019 [ 657.468912][T12794] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 657.488512][T12794] RSP: 002b:00007f36b946a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 657.496922][T12794] RAX: ffffffffffffffda RBX: 00007f36b8825fa0 RCX: 00007f36b859e019 [ 657.504887][T12794] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 657.512944][T12794] RBP: 00007f36b946a090 R08: 0000000000000000 R09: 0000000000000000 [ 657.520907][T12794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 657.528891][T12794] R13: 00007f36b8826038 R14: 00007f36b8825fa0 R15: 00007fff70076ee8 [ 657.536876][T12794] [ 657.571763][T12695] Bluetooth: hci5: command 0x0419 tx timeout [ 657.578473][T12694] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 657.643896][ T2953] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 657.651471][ T2953] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 660.356239][ T6176] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 660.422342][ T6176] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 660.466273][ T6178] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 660.484755][ T6178] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 660.541985][ T6178] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 660.559135][ T6178] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 660.592486][T12694] device veth0_vlan entered promiscuous mode [ 660.602799][T12823] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.2792'. [ 660.625803][T12694] device veth1_vlan entered promiscuous mode [ 660.761963][ T6178] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 660.771065][ T6178] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 660.781281][ T6178] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 660.791316][ T6178] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 660.823504][T12694] device veth0_macvtap entered promiscuous mode [ 660.848435][T12694] device veth1_macvtap entered promiscuous mode [ 660.913566][T12694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 660.935530][T12694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 660.950898][T12694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 660.970100][T12694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 660.980313][T12694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 660.998022][T12694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 661.010540][T12694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 661.030503][T12694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 661.049261][T12694] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 661.057695][ T6174] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 661.073616][ T6174] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 661.087770][ T6174] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 661.098431][ T6174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 661.120599][T12694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 661.140909][T12694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 661.159347][T12694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 661.170388][T12694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 661.193865][T12694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 661.269744][T12694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 661.279858][T12694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 661.331998][T12694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 661.351495][T12694] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 661.374374][ T6174] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 661.398638][ T6174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 661.414968][T12694] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.431896][T12694] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.444480][T12694] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.459171][T12694] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.616175][ T6187] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 661.661039][ T6187] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 661.676753][ T6178] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 661.732584][ T6174] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 661.741049][T12851] FAULT_INJECTION: forcing a failure. [ 661.741049][T12851] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 661.786421][ T6174] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 661.797734][ T6174] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 661.831875][T12851] CPU: 0 PID: 12851 Comm: syz.2.2798 Not tainted syzkaller #0 [ 661.839525][T12851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 661.849604][T12851] Call Trace: [ 661.852900][T12851] [ 661.855846][T12851] dump_stack_lvl+0x188/0x24e [ 661.860558][T12851] ? show_regs_print_info+0x12/0x12 [ 661.865802][T12851] ? load_image+0x410/0x410 [ 661.870585][T12851] ? __might_fault+0xa6/0x120 [ 661.875378][T12851] should_fail_ex+0x390/0x4c0 [ 661.880079][T12851] copyin+0x1b/0x120 [ 661.883985][T12851] _copy_from_iter+0x447/0x1130 [ 661.888831][T12851] ? copyout_mc+0x110/0x110 [ 661.893332][T12851] ? __virt_addr_valid+0x188/0x540 [ 661.898493][T12851] ? __virt_addr_valid+0x188/0x540 [ 661.903632][T12851] ? __virt_addr_valid+0x467/0x540 [ 661.908778][T12851] ? __phys_addr_symbol+0x2b/0x70 [ 661.913825][T12851] ? __check_object_size+0x4f6/0xa70 [ 661.919163][T12851] netlink_sendmsg+0x755/0xbd0 [ 661.923959][T12851] ? netlink_getsockopt+0x550/0x550 [ 661.929183][T12851] ? apparmor_socket_sendmsg+0x8a/0x330 [ 661.934754][T12851] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 661.940140][T12851] ? security_socket_sendmsg+0x7c/0xa0 [ 661.945618][T12851] ? netlink_getsockopt+0x550/0x550 [ 661.950843][T12851] ____sys_sendmsg+0x5ed/0x9a0 [ 661.955640][T12851] ? __sys_sendmsg_sock+0x30/0x30 [ 661.960702][T12851] ? __import_iovec+0x306/0x510 [ 661.965769][T12851] ? import_iovec+0x6f/0xa0 [ 661.970302][T12851] ___sys_sendmsg+0x2a2/0x360 [ 661.975005][T12851] ? __sys_sendmsg+0x2a0/0x2a0 [ 661.979805][T12851] ? __lock_acquire+0x7c40/0x7c40 [ 661.984877][T12851] __se_sys_sendmsg+0x1c3/0x2b0 [ 661.989757][T12851] ? __x64_sys_sendmsg+0x80/0x80 [ 661.994825][T12851] ? lockdep_hardirqs_on+0x94/0x140 [ 662.000045][T12851] do_syscall_64+0x4c/0xa0 [ 662.004480][T12851] ? clear_bhb_loop+0x60/0xb0 [ 662.009179][T12851] ? clear_bhb_loop+0x60/0xb0 [ 662.013880][T12851] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 662.019798][T12851] RIP: 0033:0x7f36b859e019 [ 662.024226][T12851] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 662.043851][T12851] RSP: 002b:00007f36b946a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 662.052289][T12851] RAX: ffffffffffffffda RBX: 00007f36b8825fa0 RCX: 00007f36b859e019 [ 662.060293][T12851] RDX: 0000000004000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 662.068277][T12851] RBP: 00007f36b946a090 R08: 0000000000000000 R09: 0000000000000000 [ 662.076281][T12851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 662.084423][T12851] R13: 00007f36b8826038 R14: 00007f36b8825fa0 R15: 00007fff70076ee8 [ 662.092405][T12851] [ 663.479130][T12885] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.2808'. [ 663.842216][T12901] netlink: 'syz.1.2812': attribute type 10 has an invalid length. [ 663.868469][T12901] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2812'. [ 667.740703][T12952] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.2830'. [ 667.859970][T12951] netlink: 'syz.4.2831': attribute type 10 has an invalid length. [ 667.924911][T12951] netlink: 55 bytes leftover after parsing attributes in process `syz.4.2831'. [ 667.928353][T12959] FAULT_INJECTION: forcing a failure. [ 667.928353][T12959] name failslab, interval 1, probability 0, space 0, times 0 [ 667.964634][T12959] CPU: 0 PID: 12959 Comm: syz.1.2834 Not tainted syzkaller #0 [ 667.972163][T12959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 667.982248][T12959] Call Trace: [ 667.985542][T12959] [ 667.988490][T12959] dump_stack_lvl+0x188/0x24e [ 667.993195][T12959] ? show_regs_print_info+0x12/0x12 [ 667.998408][T12959] ? load_image+0x410/0x410 [ 668.002949][T12959] ? perf_trace_lock_acquire+0x101/0x3f0 [ 668.008599][T12959] ? verify_lock_unused+0x140/0x140 [ 668.013814][T12959] ? perf_trace_lock_acquire+0x101/0x3f0 [ 668.019462][T12959] should_fail_ex+0x390/0x4c0 [ 668.024162][T12959] should_failslab+0x5/0x20 [ 668.028674][T12959] slab_pre_alloc_hook+0x59/0x300 [ 668.033715][T12959] kmem_cache_alloc+0x56/0x2f0 [ 668.038487][T12959] ? skb_clone+0x1e7/0x370 [ 668.042926][T12959] skb_clone+0x1e7/0x370 [ 668.047190][T12959] __netlink_deliver_tap+0x3e4/0x7e0 [ 668.052510][T12959] ? netlink_deliver_tap+0x2e/0x1b0 [ 668.057730][T12959] netlink_deliver_tap+0x19c/0x1b0 [ 668.062868][T12959] netlink_unicast+0x777/0x920 [ 668.067854][T12959] netlink_sendmsg+0x8ad/0xbd0 [ 668.072648][T12959] ? netlink_getsockopt+0x550/0x550 [ 668.077877][T12959] ? apparmor_socket_sendmsg+0x8a/0x330 [ 668.083444][T12959] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 668.088828][T12959] ? security_socket_sendmsg+0x7c/0xa0 [ 668.094305][T12959] ? netlink_getsockopt+0x550/0x550 [ 668.099531][T12959] ____sys_sendmsg+0x5ed/0x9a0 [ 668.104330][T12959] ? __sys_sendmsg_sock+0x30/0x30 [ 668.109372][T12959] ? __import_iovec+0x306/0x510 [ 668.114250][T12959] ? import_iovec+0x6f/0xa0 [ 668.118791][T12959] ___sys_sendmsg+0x2a2/0x360 [ 668.123493][T12959] ? __sys_sendmsg+0x2a0/0x2a0 [ 668.128304][T12959] ? __lock_acquire+0x7c40/0x7c40 [ 668.133379][T12959] __se_sys_sendmsg+0x1c3/0x2b0 [ 668.138325][T12959] ? ct_nmi_exit+0x145/0x1c0 [ 668.142950][T12959] ? __x64_sys_sendmsg+0x80/0x80 [ 668.147935][T12959] ? lockdep_hardirqs_on+0x94/0x140 [ 668.153152][T12959] do_syscall_64+0x4c/0xa0 [ 668.157587][T12959] ? clear_bhb_loop+0x60/0xb0 [ 668.162288][T12959] ? clear_bhb_loop+0x60/0xb0 [ 668.166988][T12959] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 668.172901][T12959] RIP: 0033:0x7f8af0d9e019 [ 668.177378][T12959] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 668.197022][T12959] RSP: 002b:00007f8af1c11028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 668.205467][T12959] RAX: ffffffffffffffda RBX: 00007f8af1025fa0 RCX: 00007f8af0d9e019 [ 668.213465][T12959] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 000000000000000a [ 668.221454][T12959] RBP: 00007f8af1c11090 R08: 0000000000000000 R09: 0000000000000000 [ 668.229438][T12959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 668.237423][T12959] R13: 00007f8af1026038 R14: 00007f8af1025fa0 R15: 00007ffe4fca7fb8 [ 668.245444][T12959] [ 668.263307][T12959] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 668.280052][T12959] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 669.702303][T12959] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 669.709780][T12959] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 670.448215][T12985] IPv6: NLM_F_CREATE should be specified when creating new route [ 670.924749][T13003] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 670.940334][T13005] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2848'. [ 670.950160][T13003] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 670.962966][T13003] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 670.970977][T13003] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 671.063725][T13005] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2848'. [ 671.086898][T13008] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2848'. [ 671.111281][T13010] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2848'. [ 671.173209][T13007] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.2849'. [ 671.386336][T13014] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2852'. [ 671.458463][T13014] openvswitch: netlink: Message has 6 unknown bytes. [ 672.754031][T13041] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2863'. [ 672.835107][T13041] openvswitch: netlink: Message has 6 unknown bytes. [ 672.943569][T13044] netlink: 'syz.0.2862': attribute type 10 has an invalid length. [ 673.239545][T13044] team0: Port device wlan1 added [ 675.491059][T13063] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.2869'. [ 676.602175][T13081] FAULT_INJECTION: forcing a failure. [ 676.602175][T13081] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 676.674144][T13081] CPU: 0 PID: 13081 Comm: syz.4.2877 Not tainted syzkaller #0 [ 676.681685][T13081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 676.691772][T13081] Call Trace: [ 676.695109][T13081] [ 676.698100][T13081] dump_stack_lvl+0x188/0x24e [ 676.702813][T13081] ? show_regs_print_info+0x12/0x12 [ 676.708040][T13081] ? load_image+0x410/0x410 [ 676.712560][T13081] ? __might_fault+0xa6/0x120 [ 676.717260][T13081] should_fail_ex+0x390/0x4c0 [ 676.721963][T13081] copyin+0x1b/0x120 [ 676.725880][T13081] _copy_from_iter+0x447/0x1130 [ 676.730755][T13081] ? copyout_mc+0x110/0x110 [ 676.735279][T13081] ? __virt_addr_valid+0x188/0x540 [ 676.740412][T13081] ? __virt_addr_valid+0x188/0x540 [ 676.745572][T13081] ? __virt_addr_valid+0x467/0x540 [ 676.750729][T13081] ? __phys_addr_symbol+0x2b/0x70 [ 676.755781][T13081] ? __check_object_size+0x4f6/0xa70 [ 676.761088][T13081] netlink_sendmsg+0x755/0xbd0 [ 676.765893][T13081] ? netlink_getsockopt+0x550/0x550 [ 676.771218][T13081] ? apparmor_socket_sendmsg+0x8a/0x330 [ 676.776806][T13081] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 676.782117][T13081] ? security_socket_sendmsg+0x7c/0xa0 [ 676.787612][T13081] ? netlink_getsockopt+0x550/0x550 [ 676.792851][T13081] ____sys_sendmsg+0x5ed/0x9a0 [ 676.797651][T13081] ? __sys_sendmsg_sock+0x30/0x30 [ 676.802742][T13081] ? __import_iovec+0x306/0x510 [ 676.807630][T13081] ? import_iovec+0x6f/0xa0 [ 676.812169][T13081] ___sys_sendmsg+0x2a2/0x360 [ 676.816881][T13081] ? __sys_sendmsg+0x2a0/0x2a0 [ 676.821701][T13081] ? __lock_acquire+0x7c40/0x7c40 [ 676.826779][T13081] __se_sys_sendmsg+0x1c3/0x2b0 [ 676.831713][T13081] ? __x64_sys_sendmsg+0x80/0x80 [ 676.836694][T13081] ? lockdep_hardirqs_on+0x94/0x140 [ 676.841909][T13081] do_syscall_64+0x4c/0xa0 [ 676.846349][T13081] ? clear_bhb_loop+0x60/0xb0 [ 676.851073][T13081] ? clear_bhb_loop+0x60/0xb0 [ 676.855796][T13081] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 676.861720][T13081] RIP: 0033:0x7fb8bb19e019 [ 676.866184][T13081] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 676.885820][T13081] RSP: 002b:00007fb8bbfa2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 676.894277][T13081] RAX: ffffffffffffffda RBX: 00007fb8bb425fa0 RCX: 00007fb8bb19e019 [ 676.902281][T13081] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000003 [ 676.910282][T13081] RBP: 00007fb8bbfa2090 R08: 0000000000000000 R09: 0000000000000000 [ 676.918280][T13081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 676.926295][T13081] R13: 00007fb8bb426038 R14: 00007fb8bb425fa0 R15: 00007fffd342fb48 [ 676.934319][T13081] [ 677.445595][T13099] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2883'. [ 677.608195][T13102] netlink: 'syz.4.2882': attribute type 10 has an invalid length. [ 677.822747][T13108] netlink: 'syz.0.2886': attribute type 10 has an invalid length. [ 677.896732][T13110] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.2887'. [ 678.161171][ T4275] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 678.170575][ T4275] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 678.179145][ T4275] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 678.207268][ T4275] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 678.229118][ T4275] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 678.243384][ T4275] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 679.282828][T13138] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2895'. [ 679.424682][T13116] chnl_net:caif_netlink_parms(): no params data found [ 679.651140][T13116] bridge0: port 1(bridge_slave_0) entered blocking state [ 679.782442][T13116] bridge0: port 1(bridge_slave_0) entered disabled state [ 679.790695][T13116] device bridge_slave_0 entered promiscuous mode [ 679.831407][T13116] bridge0: port 2(bridge_slave_1) entered blocking state [ 679.853966][T13116] bridge0: port 2(bridge_slave_1) entered disabled state [ 679.874413][T13116] device bridge_slave_1 entered promiscuous mode [ 679.979024][ T6174] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 680.157518][T13155] netlink: 'syz.3.2900': attribute type 21 has an invalid length. [ 680.169620][T13156] netlink: 'syz.3.2900': attribute type 10 has an invalid length. [ 680.191834][T13158] netlink: 'syz.1.2898': attribute type 10 has an invalid length. [ 680.308712][ T6174] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 680.336814][T13116] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 680.373823][T13116] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 680.463596][ T6174] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 680.504780][T13169] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.2904'. [ 680.531836][T12695] Bluetooth: hci1: command 0x0409 tx timeout [ 680.605313][T13116] team0: Port device team_slave_0 added [ 680.631026][T13178] netlink: 'syz.0.2910': attribute type 29 has an invalid length. [ 681.003886][ T6174] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 681.035717][T13116] team0: Port device team_slave_1 added [ 681.066421][T13178] netlink: 'syz.0.2910': attribute type 29 has an invalid length. [ 681.114171][T13116] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 681.141689][T13116] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 681.264609][T13116] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 681.303199][T13180] netlink: 'syz.0.2910': attribute type 29 has an invalid length. [ 681.344458][T13181] netlink: 'syz.0.2910': attribute type 29 has an invalid length. [ 681.385882][T13116] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 681.398955][T13116] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 681.568503][T13116] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 682.613884][T12695] Bluetooth: hci1: command 0x041b tx timeout [ 684.107736][T13116] device hsr_slave_0 entered promiscuous mode [ 684.191103][T13116] device hsr_slave_1 entered promiscuous mode [ 684.202027][T13116] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 684.252451][T13116] Cannot create hsr debugfs directory [ 684.290157][T13201] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2915'. [ 684.607538][ T6174] device 0 left promiscuous mode [ 684.692042][T12695] Bluetooth: hci1: command 0x040f tx timeout [ 684.848929][T13217] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.2921'. [ 685.103255][T13224] netlink: 171476 bytes leftover after parsing attributes in process `syz.3.2923'. [ 685.825299][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.831906][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.282370][T13233] device syzkaller0 entered promiscuous mode [ 686.771717][T12695] Bluetooth: hci1: command 0x0419 tx timeout [ 689.476476][T13270] netlink: 'syz.4.2930': attribute type 4 has an invalid length. [ 689.495407][T13271] netlink: 'syz.4.2930': attribute type 10 has an invalid length. [ 689.516812][T13271] device team0 left promiscuous mode [ 689.529410][T13271] device team_slave_0 left promiscuous mode [ 689.535633][T13271] device team_slave_1 left promiscuous mode [ 689.545763][T13271] device wlan1 left promiscuous mode [ 689.577017][T13271] 8021q: adding VLAN 0 to HW filter on device team0 [ 689.612821][T13271] device team0 entered promiscuous mode [ 689.635295][T13271] device team_slave_0 entered promiscuous mode [ 689.693741][T13271] device team_slave_1 entered promiscuous mode [ 689.700092][T13271] device wlan1 entered promiscuous mode [ 689.724234][T13271] bond0: (slave team0): Enslaving as an active interface with an up link [ 689.916229][T13289] netlink: 180900 bytes leftover after parsing attributes in process `syz.0.2937'. [ 689.946551][T13289] openvswitch: netlink: Flow actions attr not present in new flow. [ 690.146753][T13294] netlink: 'syz.4.2939': attribute type 10 has an invalid length. [ 690.235092][T13294] device hsr_slave_0 entered promiscuous mode [ 690.259721][T13294] team0: Port device hsr_slave_0 added [ 690.364190][T13116] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 691.244893][T13116] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 691.729799][ T6174] device gretap0 left promiscuous mode [ 691.750511][ T6174] Ÿë: port 1(gretap0) entered disabled state [ 691.836698][T13116] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 691.849632][T13116] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 692.236891][T13314] device syzkaller0 entered promiscuous mode [ 692.289281][ T6180] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 693.124886][T13337] netlink: 'syz.0.2949': attribute type 10 has an invalid length. [ 693.146483][T13337] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2949'. [ 696.134564][ T6174] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 696.150734][ T6174] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 696.159926][ T6174] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 696.171981][ T6174] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 696.195963][ T6174] device veth1_macvtap left promiscuous mode [ 696.206796][ T6174] device veth0_macvtap left promiscuous mode [ 696.688178][ T6174] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 696.729600][ T6174] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 696.739323][ T6174] device bond_slave_0 left promiscuous mode [ 696.979431][ T6174] bond0 (unregistering): Released all slaves [ 697.041272][T13347] netlink: 'syz.3.2953': attribute type 10 has an invalid length. [ 697.065342][T13347] team0: Port device hsr_slave_0 added [ 697.113595][T13116] 8021q: adding VLAN 0 to HW filter on device bond0 [ 697.216573][T13116] 8021q: adding VLAN 0 to HW filter on device team0 [ 697.236791][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 697.256173][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 697.307869][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 697.362796][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 697.420301][ T4339] bridge0: port 1(bridge_slave_0) entered blocking state [ 697.427504][ T4339] bridge0: port 1(bridge_slave_0) entered forwarding state [ 697.450511][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 697.505095][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 697.591053][ T4339] bridge0: port 2(bridge_slave_1) entered blocking state [ 697.598299][ T4339] bridge0: port 2(bridge_slave_1) entered forwarding state [ 697.614491][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 697.647151][T13371] netlink: 'syz.1.2964': attribute type 10 has an invalid length. [ 697.687802][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 697.748931][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 697.770479][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 697.799253][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 697.857583][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 697.908486][ T6180] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 697.944669][ T6180] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 697.987553][ T6180] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 698.012266][ T6180] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 698.021171][ T6180] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 698.045732][ T6180] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 698.084721][T13116] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 698.332302][T13399] device syzkaller0 entered promiscuous mode [ 698.546293][T13405] netlink: 'syz.4.2967': attribute type 10 has an invalid length. [ 698.581132][T13405] netlink: 55 bytes leftover after parsing attributes in process `syz.4.2967'. [ 698.587233][T13412] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2966'. [ 698.654174][T13409] netlink: 'syz.0.2965': attribute type 10 has an invalid length. [ 698.761357][T13409] team0: Device hsr_slave_0 failed to register rx_handler [ 699.051026][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 699.101969][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 702.752645][T13116] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 702.864831][ T6187] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 702.885978][ T6187] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 702.941076][ T6187] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 702.966855][ T6187] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 702.991372][T13116] device veth0_vlan entered promiscuous mode [ 703.016578][T13462] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2978'. [ 703.052432][T13462] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 703.093861][T13462] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 703.116689][ T6187] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 703.140685][ T6187] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 703.164417][T13116] device veth1_vlan entered promiscuous mode [ 703.184915][T13458] -1: renamed from syzkaller0 [ 703.301312][T13469] device syzkaller0 entered promiscuous mode [ 703.340516][T13116] device veth0_macvtap entered promiscuous mode [ 703.356087][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 703.398679][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 703.440426][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 703.485018][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 703.515363][T13116] device veth1_macvtap entered promiscuous mode [ 703.541530][T13473] netlink: 'syz.4.2980': attribute type 10 has an invalid length. [ 703.569475][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 703.583123][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 707.541133][T13116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 707.553519][T13116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 707.563449][T13116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 707.573979][T13116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 707.585169][T13116] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 707.592846][ T6178] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 707.602242][ T6178] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 707.633908][T13116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 707.686022][T13116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 707.711730][T13116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 707.736507][T13116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 707.757638][T13116] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 707.784972][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 707.853510][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 707.874360][T13502] netlink: 'syz.4.2992': attribute type 41 has an invalid length. [ 707.899651][T13116] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 707.915337][T13116] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 707.934434][T13116] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 707.950731][T13116] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 708.126822][ T6178] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 708.148805][ T6178] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 708.185525][ T6174] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 708.334507][T13510] device syzkaller0 entered promiscuous mode [ 708.350868][T13519] FAULT_INJECTION: forcing a failure. [ 708.350868][T13519] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 708.369695][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 708.370831][T13519] CPU: 0 PID: 13519 Comm: syz.3.3000 Not tainted syzkaller #0 [ 708.385046][T13519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 708.391675][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 708.395106][T13519] Call Trace: [ 708.395117][T13519] [ 708.408630][T13519] dump_stack_lvl+0x188/0x24e [ 708.411939][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 708.413335][T13519] ? show_regs_print_info+0x12/0x12 [ 708.425751][T13519] ? load_image+0x410/0x410 [ 708.430309][T13519] ? __might_fault+0xa6/0x120 [ 708.435036][T13519] should_fail_ex+0x390/0x4c0 [ 708.439858][T13519] copyin+0x1b/0x120 [ 708.443826][T13519] _copy_from_iter+0x447/0x1130 [ 708.448704][T13519] ? copyout_mc+0x110/0x110 [ 708.453202][T13519] ? __virt_addr_valid+0x188/0x540 [ 708.458309][T13519] ? __virt_addr_valid+0x188/0x540 [ 708.463412][T13519] ? __virt_addr_valid+0x467/0x540 [ 708.468521][T13519] ? __phys_addr_symbol+0x2b/0x70 [ 708.473572][T13519] ? __check_object_size+0x4f6/0xa70 [ 708.478905][T13519] netlink_sendmsg+0x755/0xbd0 [ 708.483792][T13519] ? netlink_getsockopt+0x550/0x550 [ 708.489108][T13519] ? apparmor_socket_sendmsg+0x8a/0x330 [ 708.494716][T13519] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 708.500030][T13519] ? security_socket_sendmsg+0x7c/0xa0 [ 708.505525][T13519] ? netlink_getsockopt+0x550/0x550 [ 708.510780][T13519] ____sys_sendmsg+0x5ed/0x9a0 [ 708.515559][T13519] ? __sys_sendmsg_sock+0x30/0x30 [ 708.520591][T13519] ? __import_iovec+0x306/0x510 [ 708.525453][T13519] ? import_iovec+0x6f/0xa0 [ 708.529985][T13519] ___sys_sendmsg+0x2a2/0x360 [ 708.534721][T13519] ? __sys_sendmsg+0x2a0/0x2a0 [ 708.539560][T13519] ? __lock_acquire+0x7c40/0x7c40 [ 708.544662][T13519] __se_sys_sendmsg+0x1c3/0x2b0 [ 708.549562][T13519] ? __x64_sys_sendmsg+0x80/0x80 [ 708.554553][T13519] ? lockdep_hardirqs_on+0x94/0x140 [ 708.559773][T13519] do_syscall_64+0x4c/0xa0 [ 708.564212][T13519] ? clear_bhb_loop+0x60/0xb0 [ 708.568890][T13519] ? clear_bhb_loop+0x60/0xb0 [ 708.573585][T13519] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 708.579497][T13519] RIP: 0033:0x7f36c2f9e019 [ 708.583924][T13519] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 708.603652][T13519] RSP: 002b:00007f36c3d95028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 708.612095][T13519] RAX: ffffffffffffffda RBX: 00007f36c3225fa0 RCX: 00007f36c2f9e019 [ 708.620075][T13519] RDX: 0000000000000000 RSI: 0000200000000940 RDI: 0000000000000004 [ 708.628056][T13519] RBP: 00007f36c3d95090 R08: 0000000000000000 R09: 0000000000000000 [ 708.636038][T13519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 708.644014][T13519] R13: 00007f36c3226038 R14: 00007f36c3225fa0 R15: 00007ffcfdd45e28 [ 708.652003][T13519] [ 709.628629][T12695] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 709.648263][T12695] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 709.679331][T12695] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 709.735194][T12695] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 709.743789][T12695] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 709.751041][T12695] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 710.202429][T13552] netlink: 161700 bytes leftover after parsing attributes in process `syz.4.3010'. [ 710.236492][T13552] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 711.825152][ T4275] Bluetooth: hci0: command 0x0409 tx timeout [ 712.486739][T13540] chnl_net:caif_netlink_parms(): no params data found [ 712.537366][T13578] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 712.617825][T13540] bridge0: port 1(bridge_slave_0) entered blocking state [ 712.627958][T13540] bridge0: port 1(bridge_slave_0) entered disabled state [ 712.636484][T13540] device bridge_slave_0 entered promiscuous mode [ 712.645765][T13540] bridge0: port 2(bridge_slave_1) entered blocking state [ 712.653443][T13540] bridge0: port 2(bridge_slave_1) entered disabled state [ 712.661977][T13540] device bridge_slave_1 entered promiscuous mode [ 712.691191][T13540] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 712.704273][T13540] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 712.945127][T13591] sock: sock_set_timeout: `syz.2.3020' (pid 13591) tries to set negative timeout [ 713.496571][T13540] team0: Port device team_slave_0 added [ 713.514954][T13540] team0: Port device team_slave_1 added [ 713.522153][T13594] netlink: 'syz.2.3020': attribute type 10 has an invalid length. [ 713.891830][ T4275] Bluetooth: hci0: command 0x041b tx timeout [ 714.820583][T13594] team0: Port device netdevsim0 added [ 715.091273][T13598] netlink: 'syz.0.3021': attribute type 10 has an invalid length. [ 715.132418][T13540] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 715.141850][T13540] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 715.198536][T13540] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 715.288484][T13540] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 715.306746][T13540] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 715.436125][T13540] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 715.588343][T13540] device hsr_slave_0 entered promiscuous mode [ 715.623785][T13540] device hsr_slave_1 entered promiscuous mode [ 715.642038][T13540] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 715.666254][T13540] Cannot create hsr debugfs directory [ 715.894746][T13607] device syzkaller0 entered promiscuous mode [ 715.971688][ T4275] Bluetooth: hci0: command 0x040f tx timeout [ 717.505283][ T6174] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 717.646455][ T6174] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 718.051770][ T4275] Bluetooth: hci0: command 0x0419 tx timeout [ 718.493580][T13631] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.3029'. [ 719.027389][T13644] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 719.033924][T13644] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 722.631394][ T6174] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 722.649111][T13666] netlink: 'syz.4.3037': attribute type 10 has an invalid length. [ 722.803369][ T6174] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 722.823454][T13671] netlink: 'syz.4.3040': attribute type 29 has an invalid length. [ 722.856163][T13671] netlink: 'syz.4.3040': attribute type 29 has an invalid length. [ 722.907425][T13674] netlink: 'syz.4.3040': attribute type 29 has an invalid length. [ 723.045349][T13676] netlink: 'syz.0.3042': attribute type 2 has an invalid length. [ 723.097343][ T6174] device 0 left promiscuous mode [ 723.894781][T13706] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 723.901369][T13706] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 724.031034][T13702] netlink: 'syz.2.3050': attribute type 10 has an invalid length. [ 724.892153][T13702] team0: Port device wlan1 added [ 725.964784][T13540] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 726.071307][T13750] FAULT_INJECTION: forcing a failure. [ 726.071307][T13750] name failslab, interval 1, probability 0, space 0, times 0 [ 726.097626][T13750] CPU: 1 PID: 13750 Comm: syz.1.3057 Not tainted syzkaller #0 [ 726.105144][T13750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 726.115300][T13750] Call Trace: [ 726.118588][T13750] [ 726.121531][T13750] dump_stack_lvl+0x188/0x24e [ 726.126224][T13750] ? sctp_sendmsg+0x1686/0x2940 [ 726.131094][T13750] ? ___sys_sendmsg+0x2a2/0x360 [ 726.135973][T13750] ? show_regs_print_info+0x12/0x12 [ 726.141216][T13750] ? load_image+0x410/0x410 [ 726.145741][T13750] should_fail_ex+0x390/0x4c0 [ 726.150425][T13750] should_failslab+0x5/0x20 [ 726.154922][T13750] slab_pre_alloc_hook+0x59/0x300 [ 726.159947][T13750] ? sctp_add_bind_addr+0x89/0x350 [ 726.165058][T13750] __kmem_cache_alloc_node+0x4f/0x270 [ 726.170436][T13750] ? sctp_add_bind_addr+0x89/0x350 [ 726.175551][T13750] kmalloc_trace+0x26/0xe0 [ 726.179974][T13750] sctp_add_bind_addr+0x89/0x350 [ 726.184917][T13750] sctp_copy_local_addr_list+0x317/0x4d0 [ 726.190551][T13750] ? sctp_copy_local_addr_list+0xa0/0x4d0 [ 726.196299][T13750] ? sctp_do_8_2_transport_strike+0x900/0x900 [ 726.202377][T13750] ? sctp_v4_is_any+0x31/0x50 [ 726.207086][T13750] ? sctp_copy_one_addr+0x93/0x660 [ 726.212207][T13750] sctp_bind_addr_copy+0xaf/0x3c0 [ 726.217233][T13750] ? sctp_assoc_set_bind_addr_from_ep+0xa1/0x190 [ 726.223585][T13750] sctp_connect_new_asoc+0x2f5/0x6a0 [ 726.228901][T13750] ? __sctp_connect+0xd80/0xd80 [ 726.233787][T13750] ? __local_bh_enable_ip+0x136/0x1c0 [ 726.239179][T13750] ? _local_bh_enable+0xa0/0xa0 [ 726.244028][T13750] ? sctp_endpoint_lookup_assoc+0x77/0x260 [ 726.249840][T13750] ? sctp_endpoint_lookup_assoc+0x77/0x260 [ 726.255752][T13750] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 726.261344][T13750] ? security_sctp_bind_connect+0x85/0xb0 [ 726.267080][T13750] sctp_sendmsg+0x1686/0x2940 [ 726.271796][T13750] ? sctp_getsockopt+0x8a0/0x8a0 [ 726.276739][T13750] ? __might_fault+0xa6/0x120 [ 726.281421][T13750] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 726.287889][T13750] ? aa_sock_msg_perm+0x94/0x150 [ 726.292934][T13750] ? inet_sendmsg+0x7a/0x2a0 [ 726.297531][T13750] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 726.302825][T13750] ? inet_send_prepare+0x250/0x250 [ 726.308042][T13750] ____sys_sendmsg+0x5ed/0x9a0 [ 726.313005][T13750] ? __sys_sendmsg_sock+0x30/0x30 [ 726.318047][T13750] ? __import_iovec+0x306/0x510 [ 726.322915][T13750] ? import_iovec+0x6f/0xa0 [ 726.327448][T13750] ___sys_sendmsg+0x2a2/0x360 [ 726.332138][T13750] ? __sys_sendmsg+0x2a0/0x2a0 [ 726.336922][T13750] ? __lock_acquire+0x7c40/0x7c40 [ 726.341999][T13750] __se_sys_sendmsg+0x1c3/0x2b0 [ 726.346855][T13750] ? __x64_sys_sendmsg+0x80/0x80 [ 726.351824][T13750] ? lockdep_hardirqs_on+0x94/0x140 [ 726.357043][T13750] do_syscall_64+0x4c/0xa0 [ 726.361474][T13750] ? clear_bhb_loop+0x60/0xb0 [ 726.366156][T13750] ? clear_bhb_loop+0x60/0xb0 [ 726.370836][T13750] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 726.376728][T13750] RIP: 0033:0x7f8af0d9e019 [ 726.381141][T13750] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 726.400745][T13750] RSP: 002b:00007f8af1c11028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 726.409155][T13750] RAX: ffffffffffffffda RBX: 00007f8af1025fa0 RCX: 00007f8af0d9e019 [ 726.417212][T13750] RDX: 0000000000000010 RSI: 0000200000000440 RDI: 0000000000000003 [ 726.425181][T13750] RBP: 00007f8af1c11090 R08: 0000000000000000 R09: 0000000000000000 [ 726.433185][T13750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 726.441155][T13750] R13: 00007f8af1026038 R14: 00007f8af1025fa0 R15: 00007ffe4fca7fb8 [ 726.449142][T13750] [ 726.793231][T13756] netlink: 'syz.1.3059': attribute type 29 has an invalid length. [ 726.839863][T13540] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 726.865676][T13540] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 726.899897][T13756] netlink: 'syz.1.3059': attribute type 29 has an invalid length. [ 727.017155][T13762] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.3060'. [ 727.176830][T13540] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 727.193630][T13757] netlink: 'syz.1.3059': attribute type 29 has an invalid length. [ 727.214409][T13762] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 727.221795][T13762] IPv6: NLM_F_CREATE should be set when creating new route [ 727.229114][T13762] IPv6: NLM_F_CREATE should be set when creating new route [ 727.236939][T13762] IPv6: NLM_F_CREATE should be set when creating new route [ 727.327304][T13768] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 727.333901][T13768] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 727.437590][T13770] device syzkaller0 entered promiscuous mode [ 727.508717][T13540] 8021q: adding VLAN 0 to HW filter on device bond0 [ 727.559619][ T6187] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 727.568875][ T6187] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 727.584175][T13540] 8021q: adding VLAN 0 to HW filter on device team0 [ 728.592567][ T6174] team0: Port device wlan1 removed [ 728.608064][T13777] netlink: 'syz.1.3063': attribute type 10 has an invalid length. [ 728.939313][T13788] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 728.945866][T13788] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 732.750687][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 732.762303][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 732.770852][ T4339] bridge0: port 1(bridge_slave_0) entered blocking state [ 732.778012][ T4339] bridge0: port 1(bridge_slave_0) entered forwarding state [ 732.786622][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 732.796234][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 732.806209][ T4339] bridge0: port 2(bridge_slave_1) entered blocking state [ 732.813379][ T4339] bridge0: port 2(bridge_slave_1) entered forwarding state [ 732.821705][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 732.873851][T13804] netlink: 763 bytes leftover after parsing attributes in process `syz.4.3071'. [ 732.905804][ T2953] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 732.931515][T13540] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 732.944907][T13540] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 733.057249][T13808] netlink: 'syz.2.3073': attribute type 29 has an invalid length. [ 733.137417][ T2953] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 733.149888][ T2953] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 733.169940][ T2953] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 733.182438][T13818] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.3074'. [ 733.197773][ T2953] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 733.220575][ T2953] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 733.247730][ T2953] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 733.322110][ T2953] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 733.332828][ T2953] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 733.378634][ T2953] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 733.416339][ T2953] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 733.454237][ T2953] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 733.499169][T13808] netlink: 'syz.2.3073': attribute type 29 has an invalid length. [ 733.528492][T13812] netlink: 'syz.2.3073': attribute type 29 has an invalid length. [ 734.015876][T13821] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 734.023170][T13821] IPv6: NLM_F_CREATE should be set when creating new route [ 734.030458][T13821] IPv6: NLM_F_CREATE should be set when creating new route [ 734.037773][T13821] IPv6: NLM_F_CREATE should be set when creating new route [ 734.485676][ T6174] device veth1_macvtap left promiscuous mode [ 734.501940][ T6174] device veth0_macvtap left promiscuous mode [ 735.387814][ T6174] team0 (unregistering): Port device hsr_slave_0 removed [ 735.653695][ T6174] team0 (unregistering): Port device team_slave_1 removed [ 735.717238][ T6174] team0 (unregistering): Port device team_slave_0 removed [ 735.785815][ T6174] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 735.798315][ T6174] device bond_slave_1 left promiscuous mode [ 735.857822][ T6174] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 735.871120][ T6174] device bond_slave_0 left promiscuous mode [ 736.254823][ T6174] bond0 (unregistering): Released all slaves [ 736.302132][ T6180] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 736.309687][ T6180] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 736.479393][T13856] device syzkaller0 entered promiscuous mode [ 736.497234][T13540] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 736.777337][T13872] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 736.784036][T13872] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 739.542584][ T6176] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 739.565919][ T6176] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 739.620201][T13900] netlink: 'syz.4.3096': attribute type 21 has an invalid length. [ 739.630894][T13900] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3096'. [ 739.641537][T13900] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3096'. [ 739.660825][T13540] device veth0_vlan entered promiscuous mode [ 739.679683][ T6176] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 739.705680][ T6176] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 739.737501][T13905] netlink: 'syz.1.3107': attribute type 2 has an invalid length. [ 739.764531][T13540] device veth1_vlan entered promiscuous mode [ 739.804165][ T6176] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 739.816263][ T6176] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 739.827735][ T6176] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 739.919736][T13905] device 0 entered promiscuous mode [ 739.990464][ T2953] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 740.027181][ T2953] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 740.068835][ T2953] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 740.115340][T13540] device veth0_macvtap entered promiscuous mode [ 740.198913][T13540] device veth1_macvtap entered promiscuous mode [ 740.362559][T13540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 740.381989][T13540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 740.411767][T13540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 740.451652][T13540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 740.488301][T13540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 740.527396][T13540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 740.548533][T13540] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 740.568871][T13924] netlink: 'syz.0.3101': attribute type 10 has an invalid length. [ 740.589066][ T6176] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 740.619440][ T6176] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 740.638367][ T6176] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 740.680399][ T6176] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 740.705189][T13540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 740.741092][T13540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 740.768611][T13540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 740.792084][T13540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 740.806368][T13540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 740.817307][T13540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 740.853582][T13540] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 740.864088][T13931] netlink: 'syz.1.3105': attribute type 10 has an invalid length. [ 740.893913][T13931] netlink: 55 bytes leftover after parsing attributes in process `syz.1.3105'. [ 741.025860][T13942] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 741.032507][T13942] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 741.515415][ T2953] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 741.535375][ T2953] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 741.572489][T13540] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 741.581253][T13540] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 741.631657][T13540] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 741.640420][T13540] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 742.686969][T13907] ------------[ cut here ]------------ [ 742.692729][T13907] WARNING: CPU: 1 PID: 13907 at kernel/events/core.c:6592 perf_pending_task+0x353/0x480 [ 742.702580][T13907] Modules linked in: [ 742.706504][T13907] CPU: 1 PID: 13907 Comm: syz.2.3098 Not tainted syzkaller #0 [ 742.714076][T13907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 742.724195][T13907] RIP: 0010:perf_pending_task+0x353/0x480 [ 742.729948][T13907] Code: e8 d2 82 da ff 84 db 75 10 e8 69 80 da ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 59 80 da ff e8 ac d5 58 ff eb e9 e8 4d 80 da ff <0f> 0b 49 bd 00 00 00 00 00 fc ff df 43 80 3c 2f 00 0f 85 0a ff ff [ 742.749643][T13907] RSP: 0018:ffffc900033478e8 EFLAGS: 00010293 [ 742.755777][T13907] RAX: ffffffff81a7add3 RBX: ffff88802fb15e58 RCX: ffff88802c5a1e00 [ 742.763875][T13907] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 742.771912][T13907] RBP: ffff88802fb15c20 R08: ffff88802c5a2803 R09: 1ffff110058b4500 [ 742.779941][T13907] R10: dffffc0000000000 R11: ffffed10058b4501 R12: ffff88802c5a1e00 [ 742.788074][T13907] R13: ffff8880239ff960 R14: 0000000000000000 R15: 1ffff11005f62b84 [ 742.796124][T13907] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 742.805104][T13907] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 742.811734][T13907] CR2: 00007fb8b7f46ff8 CR3: 000000005c614000 CR4: 00000000003506e0 [ 742.819732][T13907] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 742.827741][T13907] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 742.835784][T13907] Call Trace: [ 742.839097][T13907] [ 742.842091][T13907] task_work_run+0x1d0/0x260 [ 742.846839][T13907] ? task_work_cancel+0x220/0x220 [ 742.851934][T13907] ? do_raw_spin_unlock+0x11d/0x230 [ 742.857180][T13907] do_exit+0x9d5/0x2570 [ 742.861464][T13907] ? put_task_struct+0x80/0x80 [ 742.866288][T13907] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 742.872334][T13907] ? _raw_spin_lock_irq+0x86/0xf0 [ 742.877388][T13907] ? lock_chain_count+0x20/0x20 [ 742.882305][T13907] ? _raw_spin_lock_irq+0xb7/0xf0 [ 742.887360][T13907] do_group_exit+0x229/0x2e0 [ 742.892013][T13907] ? lockdep_hardirqs_on+0x94/0x140 [ 742.897236][T13907] get_signal+0x1259/0x1340 [ 742.901821][T13907] arch_do_signal_or_restart+0xc4/0x1310 [ 742.907593][T13907] ? __lock_acquire+0x7c40/0x7c40 [ 742.912690][T13907] ? do_futex+0x310/0x320 [ 742.917150][T13907] ? get_sigframe_size+0x10/0x10 [ 742.922149][T13907] ? __ia32_sys_get_robust_list+0x100/0x100 [ 742.928066][T13907] ? blkcg_maybe_throttle_current+0x1a0/0xa80 [ 742.934297][T13907] ? exit_to_user_mode_loop+0x3b/0x110 [ 742.939851][T13907] exit_to_user_mode_loop+0x70/0x110 [ 742.945220][T13907] exit_to_user_mode_prepare+0xee/0x180 [ 742.950788][T13907] syscall_exit_to_user_mode+0x16/0x40 [ 742.956287][T13907] do_syscall_64+0x58/0xa0 [ 742.960718][T13907] ? clear_bhb_loop+0x60/0xb0 [ 742.965446][T13907] ? clear_bhb_loop+0x60/0xb0 [ 742.970136][T13907] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 742.976080][T13907] RIP: 0033:0x7f200579e019 [ 742.980515][T13907] Code: Unable to access opcode bytes at 0x7f200579dfef. [ 742.987614][T13907] RSP: 002b:00007f20039f60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 742.996068][T13907] RAX: fffffffffffffe00 RBX: 00007f2005a25fa8 RCX: 00007f200579e019 [ 743.004121][T13907] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f2005a25fa8 [ 743.012196][T13907] RBP: 00007f2005a25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 743.020165][T13907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 743.028179][T13907] R13: 00007f2005a26038 R14: 00007ffdd892f830 R15: 00007ffdd892f918 [ 743.036195][T13907] [ 743.039223][T13907] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 743.046494][T13907] CPU: 1 PID: 13907 Comm: syz.2.3098 Not tainted syzkaller #0 [ 743.053982][T13907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 743.064039][T13907] Call Trace: [ 743.067319][T13907] [ 743.070247][T13907] dump_stack_lvl+0x188/0x24e [ 743.075011][T13907] ? memcpy+0x3c/0x60 [ 743.079061][T13907] ? show_regs_print_info+0x12/0x12 [ 743.084258][T13907] ? load_image+0x410/0x410 [ 743.088763][T13907] panic+0x2d3/0x710 [ 743.092834][T13907] ? bpf_jit_dump+0xd0/0xd0 [ 743.097340][T13907] __warn+0x2f8/0x4f0 [ 743.101330][T13907] ? perf_pending_task+0x353/0x480 [ 743.106441][T13907] ? perf_pending_task+0x353/0x480 [ 743.111554][T13907] report_bug+0x2ba/0x4f0 [ 743.115915][T13907] ? perf_pending_task+0x353/0x480 [ 743.121020][T13907] handle_bug+0x3a/0x70 [ 743.125178][T13907] exc_invalid_op+0x16/0x40 [ 743.129675][T13907] asm_exc_invalid_op+0x16/0x20 [ 743.134524][T13907] RIP: 0010:perf_pending_task+0x353/0x480 [ 743.140246][T13907] Code: e8 d2 82 da ff 84 db 75 10 e8 69 80 da ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 59 80 da ff e8 ac d5 58 ff eb e9 e8 4d 80 da ff <0f> 0b 49 bd 00 00 00 00 00 fc ff df 43 80 3c 2f 00 0f 85 0a ff ff [ 743.159861][T13907] RSP: 0018:ffffc900033478e8 EFLAGS: 00010293 [ 743.166008][T13907] RAX: ffffffff81a7add3 RBX: ffff88802fb15e58 RCX: ffff88802c5a1e00 [ 743.173971][T13907] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 743.181936][T13907] RBP: ffff88802fb15c20 R08: ffff88802c5a2803 R09: 1ffff110058b4500 [ 743.189896][T13907] R10: dffffc0000000000 R11: ffffed10058b4501 R12: ffff88802c5a1e00 [ 743.197861][T13907] R13: ffff8880239ff960 R14: 0000000000000000 R15: 1ffff11005f62b84 [ 743.205834][T13907] ? perf_pending_task+0x353/0x480 [ 743.210954][T13907] ? perf_pending_task+0x353/0x480 [ 743.216063][T13907] task_work_run+0x1d0/0x260 [ 743.220653][T13907] ? task_work_cancel+0x220/0x220 [ 743.225669][T13907] ? do_raw_spin_unlock+0x11d/0x230 [ 743.230860][T13907] do_exit+0x9d5/0x2570 [ 743.235045][T13907] ? put_task_struct+0x80/0x80 [ 743.239805][T13907] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 743.245805][T13907] ? _raw_spin_lock_irq+0x86/0xf0 [ 743.250824][T13907] ? lock_chain_count+0x20/0x20 [ 743.255675][T13907] ? _raw_spin_lock_irq+0xb7/0xf0 [ 743.260693][T13907] do_group_exit+0x229/0x2e0 [ 743.265278][T13907] ? lockdep_hardirqs_on+0x94/0x140 [ 743.270524][T13907] get_signal+0x1259/0x1340 [ 743.275036][T13907] arch_do_signal_or_restart+0xc4/0x1310 [ 743.280670][T13907] ? __lock_acquire+0x7c40/0x7c40 [ 743.285694][T13907] ? do_futex+0x310/0x320 [ 743.290018][T13907] ? get_sigframe_size+0x10/0x10 [ 743.294949][T13907] ? __ia32_sys_get_robust_list+0x100/0x100 [ 743.300829][T13907] ? blkcg_maybe_throttle_current+0x1a0/0xa80 [ 743.306920][T13907] ? exit_to_user_mode_loop+0x3b/0x110 [ 743.312401][T13907] exit_to_user_mode_loop+0x70/0x110 [ 743.317689][T13907] exit_to_user_mode_prepare+0xee/0x180 [ 743.323229][T13907] syscall_exit_to_user_mode+0x16/0x40 [ 743.328676][T13907] do_syscall_64+0x58/0xa0 [ 743.333088][T13907] ? clear_bhb_loop+0x60/0xb0 [ 743.337758][T13907] ? clear_bhb_loop+0x60/0xb0 [ 743.342429][T13907] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 743.348319][T13907] RIP: 0033:0x7f200579e019 [ 743.352727][T13907] Code: Unable to access opcode bytes at 0x7f200579dfef. [ 743.359733][T13907] RSP: 002b:00007f20039f60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 743.368141][T13907] RAX: fffffffffffffe00 RBX: 00007f2005a25fa8 RCX: 00007f200579e019 [ 743.376104][T13907] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f2005a25fa8 [ 743.384064][T13907] RBP: 00007f2005a25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 743.392129][T13907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 743.400103][T13907] R13: 00007f2005a26038 R14: 00007ffdd892f830 R15: 00007ffdd892f918 [ 743.408099][T13907] [ 743.411372][T13907] Kernel Offset: disabled [ 743.415688][T13907] Rebooting in 86400 seconds..