last executing test programs: 12.951163894s ago: executing program 3 (id=2425): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3}, 0x110161, 0x4, 0x0, 0x1, 0x40000000, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="1e031c00d3ff"], 0xffdd) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x6e, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x6e, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r3}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r3, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r4, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) close(0x3) (async) close(0x3) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001000000800000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES8=r0, @ANYBLOB='\x00'/17], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000009c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f00000001c0)='GPL\x00', 0x4, 0x1005, &(0x7f00000014c0)=""/4101, 0x0, 0x2}, 0x94) perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x2, 0x3, 0x9, 0x1, 0x0, 0x6, 0x40c30, 0xa, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x87, 0x2, @perf_config_ext={0xfffffffffffffff8}, 0x24200, 0x5, 0x7, 0x8, 0x80000000, 0x2, 0xffce, 0x0, 0x8, 0x0, 0xa7}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x6, 0x1, 0x0, 0x0, 0x0, 0xf, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x4200, 0x35, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000c80)="39000000140081ae0000dc676f97da021f2357f9ffffffffffffff0521018701546fabca05e28a06b8580e88370200c54c1960b89c67157f40", 0x39}], 0x1}, 0x4000080) socket$kcm(0x10, 0x2, 0x0) (async) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d", @ANYRES8=r2, @ANYRES64=r3, @ANYRESHEX=r4, @ANYRES16=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x1f63, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000d0df00850000001b"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r9}, 0xc) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r10, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x40740}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x3f01) (async) recvmsg(r10, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x40740}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x3f01) sendmsg$tipc(r11, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) close(r11) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="b7000000000000004e000000000000001fa0000000000000950000000000000089214b035521e5f4cbf07f5a7b8eec523920500003007a8f10a4b461a44767857f9bd116c61046c120a37c6093d39d080877ba2db420478d69ac605a299054dd8333d804351b4d12a001a6326be25fb6c7b3f71fe633c89305d40dd939dd8d6eb9"], &(0x7f0000003ff6)='GPL\x00', 0x7, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) 12.316120035s ago: executing program 3 (id=2430): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000640), 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x50) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@generic={&(0x7f0000000040)='./file0\x00', 0x0, 0x8}, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_config_ext, 0x800, 0x0, 0x20, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2ff}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) 11.962735077s ago: executing program 3 (id=2432): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x805, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="18bec893d100000000000000000000000000000071123100000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x50) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000400), 0x12}, 0x104101, 0x4, 0x0, 0x5, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={0x0, 0x0, 0x2a}, 0x28) bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000001000)=ANY=[], 0x48) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c"], 0x0, 0xfffffffffffffe3d}, 0x28) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89a0, &(0x7f0000000080)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89a2, &(0x7f0000000080)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000002400000024"], 0x0, 0x42, 0x0, 0x1, 0xe988}, 0x28) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x58, &(0x7f0000000300)}, 0x10) socketpair(0x1e, 0x1, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x85, 0x0, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89a2, &(0x7f0000000080)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000100)=0x8, 0x12) socket$kcm(0x10, 0x2, 0x10) socket$kcm(0x10, 0x2, 0x10) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x2, 0x3, 0x2) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 11.616562829s ago: executing program 3 (id=2434): r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)="d80000001a0081044e81f782db4cb904021d0800fe007c05e81156a10a0015000200142603600e12080010007a010401a8001600200002400400077c035c0400a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7eef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e101ce81ed0bffece0b42a9ecbee5de6ccd40dd6e4ed", 0xb8}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x6, &(0x7f0000000040), 0x4) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x6}, 0x5000, 0x0, 0x0, 0x0, 0x0, 0xa}, 0xffffffffffffffff, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x23, &(0x7f0000000040), 0xcf) sendmsg$kcm(r2, &(0x7f0000001240)={&(0x7f0000000940)=@generic={0xa, "8ab77fa26849ff263ef30c98b353011a5990650042e2dacdc165ececece6be1862e2adacd2737d00ad6f9fa9f3d7145e15dd9fb1a7adc211220963ad5def53b911ba5b9da13641f982757012a7496de0b3a36f5849f260c603dbc317f54b901ee80ea6132ca6e88c776553e1833052ca376304313c5637786a36a4b83857"}, 0x80, 0x0}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffebe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018edff00000000000c0000000c00000002000000030000000000008c000000000000"], 0x0, 0x26, 0x0, 0x4}, 0x28) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89a2, &(0x7f0000000080)) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x45, 0x0, 0xb, 0x200004}, {0x0, 0x3, 0x9}]}) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x3, @remote, 0x5, 0x4}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000080)='n', 0x1}], 0x1}, 0x2600c055) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[], 0x31) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffdf3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 9.808209698s ago: executing program 3 (id=2437): socketpair(0x22, 0x3, 0x0, &(0x7f0000003a00)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={0x1, 0x58, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000004c0)=0xffffffffffffffff, 0x4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f0, &(0x7f0000000080)) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000500)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x401, '\x00', r2, r3, 0x0, 0x2, 0x2}, 0x50) r5 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x400, 0xfffffffffffffffc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000cc0)={&(0x7f0000000980)="0faeae96d3648a4c8bec4b505783a62512f226dbc05a6febd484dfa6c366c9f7b1c8685d6a57c21d877c36d097a9840c189937d5fed588d9687414be4660f8332d3256a2695f28eaa33878bc3b0891cf1956357c5273ae9c0bb7eafb28d7f38a4bebf33807d08a4e56949dd98a0aac932375039ba6ac158ba656dbf584978ca8c2407c585a7f8109d1aec1bdea5ca3b7d9b304f8b8d188ee53c277aa67c15c37695ef179c8e0cc76fd972c8fb65175eb89582f8a1f6c2a15bdea61fab6deb9eb47e2fc5f8453afedc91e7243c3df0962fe10ee8de54693217cd4fe4842268fa4d9fd9ffb2b4fc8", &(0x7f0000000a80)=""/129, &(0x7f0000000b40)="762920f86c8b293cf68473011b1ec80fc90dbdb68099783f47796aa3d41f04751bd18eca1e1bc437cd9a3bb348988086dbfb1ae9ec05a1719a7bc32345bc32bd4027c34e51df846e2d8a269a4b56cc98e059618b2aef37975cd9552d08ba4266cad2cb1bf7935eb81fd9c1e1f6853c02f942952e143dcc488f7b47e7df8fe418b9b93237ecb393e05f0c062481b334d2ca2cd27f29f69691f40dbaf17ab4d44a738f99218bf0c162a34cfda9110ed3e8a5ecd0636529eca5", &(0x7f0000000c00)="e08d2373729ace61d3bf1eeebfb5a5d43faef2600c8b1d1a671416e83d19bfaeaee8584ed45be1817fb10de9996185732698091f03b777ef5c0b42e40c6a083101bd837a1ac0a2af6c3ef5ddd232775ff9ea3c9a1fc295396bd19241f79ebdb97ecbcb7cf77ca5a162bb226b6556052c829fb17e19a50ffbc9a72613cb5c513c304c15b00c0ebb00807150d5f9aba9837b146efc9026b9afe8cb16efc8315359e41cc120836372a30251d41e53c74accad14741237", 0x8d, r6, 0x4}, 0x38) r7 = socket$kcm(0x10, 0x2, 0x10) close(r7) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r6, 0x4008240b, &(0x7f00000001c0)={0x4, 0x80, 0xf9, 0x3, 0x0, 0x0, 0x0, 0x62af, 0x62f02, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x800, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x110, 0xfffffffffffffff0, 0x4b2, 0x5, 0x1000, 0x5, 0x88cc, 0x0, 0x0, 0x0, 0x8000000000000001}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x7, 0xc, &(0x7f0000000100)=ANY=[@ANYRESOCT=r1, @ANYBLOB, @ANYRESHEX=r0, @ANYRES8=r5, @ANYRES64=0x0, @ANYRES16=r5, @ANYRES8=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a18, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000780)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc008001900030002000600200000800000005883c64d251e638294ff0051f60a84c9f4d4938037e7000000000000000000d1c566a000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x98010) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r8) bpf$ITER_CREATE(0x21, &(0x7f0000000280)={r6}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="190000000400000012000000ffff010000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/13, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200"/28], 0x48) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f0000000040)='GPL\x00') bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000028000000bca30000000000002403000007feffff720af0ff0000020071a4f0ff000000001f030000000000002e0a0200000000002604fdffffff000e61142000000000001d430000000000007a0a00fe0000001f6114180000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f30002af51efd601b6bf01c8e8b1fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081504507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566de74e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48b936e6f9e0fcda88fe4413537528fd79153baae244e7bf573eac34b781337ad5901a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b602396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb1188883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae2f5e7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d648532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54dd84323afc4c10eff462c8843187f1dd48ef0900000000000000ff0f4000000000f00700003c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c1011e32f808890205f0e6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927e2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28e6ce4d9791c73c2d37999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963442aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2869291b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e637d4219ef7ec61261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addbc4b3093c91b8068c5adfcb0d7fd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf699b3746979f99f6a1527f004f37e84fb478199dc1020f4beb98b8074bf7df8b5e783637daf121f175a81cffff4ac55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a4a274000000000000000000000000000000000000000000000009dd14b38f2f5426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4120260ffcd030000006d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10b0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07e18b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e8c0a0d213c3ffad44d2a376def42e41e9fcf32c221aaac6cfdeb33c27500001a0000000000000000000017350000c11ae694b0c69c2c03f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d10522a7a945b93fb705b95b6aae27a8fab1e6984c8bdc12360627137ab6737b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481ffe46a4ce86be0b1f8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0b74903580ac98708007c80d6c7d0de4614195e40d797c0348dd70f36a220e8b3710fb5358c27e90793bcb9ee6319342c4b239ca8cbc6fc83d32e6eb62ad92e43991f2447be9c2a1ae1119eafb901a43d57e885116d19aa152bfb89f8d0b2516f80120a1cddff771657f3d0288ec3899f1e3ba0151c4037148fb479de703fc52b6573349c28d1b107d859b4961324c17756dde99de1924a1d2b7095d34a55060f47f4407d89acf9f285b20c2e6b3d0491d0d3591b0d94713332b6b79c8297117b0d14eff64e0aca8a4b4aa773d8fba1217e9519952419bb9dd998d0ec870ff00b6d556018602738fbc6cec89d6dd13cf55b96f6fe9a137d2d6a56ad78e52c23ed080000000000002bc261a781fd14126c146a0aac4221839a4b9bbf61e4bba695a41e2109eba8e40c370267cc51ffadbd15cafc97a4d3edfdcb9b5729307c6bdaf7b69325fb05fa8a9869de0600ee477d71bf3e36d1d9019edfa27aae24b632f251df210c86a18fae731ecb8b0d48357378caf2b6789509b1bacfd4fa812dc341875cfa5e798bbf59770000000000000000c8a594ea3c3347962d9113b1fecdfad5a8da641053f02e49456f5d21674521e67a5b18ea451eccf69dd6af928d2d68da9304a296c22fdcea26498d26229110b1aade386b113045033a6188d56e675564d8cb8d5b40114b0f5bf15dd64c9ece60b8588ee8777d0ea8f4713b258427c7d90f9e93348e17723ba9ab8ae790f74cc41ae5795835f3cec40dff485d2802c08611454d9ea784a205bcc07ec26f906f3cf45bb37014ab6f22af6213618e242b283ea9d3f0677ee598072ec06f7170009d92bb7ed9d12c378dfd3e74ec056ee83eef666423d934fc5908c9ff98715218a5964f1e00000000426ac9588e27aefe307f49662990ee823568bbc2f89596ced7c6c52d76b8096f1848410843b93fd404f535be474f456778b5ef85abb8fc2336abd5ea64a6efea8a5aca0015499b88ae780a7bae4df603bd3c72808cf300440b1b638a6640f7de8d0d82f359ca2f779cd48cd8d3603f4f69e47f386988c9b7b5d6dd3d48a1fdca780049d7c87bea42161a4c0d7cf0125b43dc9d8845f3c05a08acda647e7143d0e0aee2949a45e2848890522c2288072467d2afe269f589fb7e034b92d3ca245b16b71998711bfe206c9690b6d0eebb06a29349229eb45ff15c63aa2c82c56d7420738cd1b04eb16e87cb524315d7361ea3635d3799bb7fcc56aa5e1dbe031a7a12554dee6754b72f43a6fddf427f32ec3df274a88097725679769beebf1aa6eb09d5154e4900000000000d0f7160a05911d969879953d3d4702b2676c07bb0fd14020a66718378825d5ed789711b77d40dc31e0b8fc651b45559da463f0000000000000000000000000052d42124e9c26aba885015e69d42ecd710342ac597ebea576ae15fdf611356f622e831741ab15549e0d7a2bd0324e2b3b48a10551607492c19eaf58485feb4cab19c303b30ba2ddea0d792d77724c9fa4ed58b93668fc20484f141ee2b6a0029e88fdc853189b4dafd36ff23b11967090e508f45e3f10857038a52ef275cf9e3e4b5d30b12d138dfa70930c603b5e3f4b7be67be3dba3cbd8d4d143195af0697d779445d67dcfbd922d12a8b49f93eac7a72faacf80346b3b6"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) 9.219051647s ago: executing program 3 (id=2442): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x448}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x80040, 0x0) getpid() sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000b40)}], 0x1}, 0x60044084) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) sendmsg$kcm(r0, &(0x7f0000002080)={&(0x7f0000000080)=@hci={0x1f, 0x0, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], 0x1f8}, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ced4fbd44e24eb0d34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3a06d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796efea77aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2acb72e7ead0509d380578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece72f2090000f44a3210223fdae7ed04935c3c90941576aebc8619d73415cda2130f5011e4845505000001000000004f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c040035cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bf463261135e24d154114df1381b02a0dcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f884cc4806f40300966fcf1e54f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e1700000000000000000000000000000000000000000000000000000520500002952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9a33c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a62415f78000000005f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c81c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b40824095135861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac00000b0000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e5dd921a5eadd4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293d5c833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e602c28ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f257aac5af18d8c6b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e29b10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe8e4cd14dc5c1eb98b63198f6f830745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b51c34a5384f2cf51180c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af243b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380ecf1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb79f558982d57c556ca1427b5960b79990565ca2a20996fcba472213744d3a156979651596afde2b0089f023fcfccd072bd6ea8445fc787390d71ec61d5b7b0f05f6931914bf49aa0d66eff294271a93e32f54f281068514a4cd2d0700a43df59e9924e4affdbd22405e675e9d7cdc10546571131831d4dc8c8363077a908d9ae4f27ff095f5b07667f93a3573d3fabfca58ee0a6b6a691102bb3c7be4dc5b816853275e7ae8c13ec341bad15353fad794b46c4fd73e1b4cc78de2156cb158870d5b8446dae9ba5f7f244e6cf8f6791671057347208a313ebbcb72b04706005670f2b0055e440d72c7c3316982c6ebe8675458cf6bb393b007f5cedb7bc411834600000000000000000000000000a20071b07d568a8150ed646b4978d0226d9651647a5999ae7c7c85322a215fcdb1adbad63499518fe0d10145d430422c78367dfa941f74b63f3884565ac89c673da2c2b1172be5f2cd1f3f453ebddd432bd24c73fa773b739e20fcec16a821230654a383ac1868495f67d942c772ca75e09073dbe9307ff5cac7c2c411149a4d989a8a019e068da218d4bc34e4102fd2f97397331e4cd70b4915582b635f07ca87f00dc929f902540f565c20add8675b79e005cf0277d954697317b907b77fa5d6b7feaebaf676a2a37de8aa70748fee4bc198ffd3e2de11eb0eff896fd94de0805ba6b1054a7b3e300d4581e9af62a1ecaee96d2819b3d192e5b9561eb622da25450f586be14017a1cf74f89a1dd18af004decfe266134c3d036ae7996931fe6008a73ed34c35f0da4ffee1fe63bc1af6ef1b4731d50b8ceb582a1e9c6e8d97f8290cc105754f592d16ccdb1df8636d7ca5e372cea97dd0f005cc7092b126dd46758917fb0d94b8483d403bd451429cc1660f0b5a529d8134dc2702f6d8e2f943d98fbe50a3ba653f13f98a00fcbf311f9758ade8e4eb87b4b9fb2d387f5d8c4bdcab2fff9ed8c9de961fd831a070381c8020352fea7c334b2959ddd956701a7ea415e224a81c9fa1ebbabe74f7743e09b6c8b72650b51d5c2000ef3679c039b3604374fc1af7ab354204afbd24f0e701bc08a98452ce2668617e85e0d876f5a8b6d9b777f1c384d8a9883e4262defb6b9aab8d5b76bc91ca50f87966797da2499ca0ac76707c0408a7b6d8708fe7714988babdc11f"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) setsockopt$sock_attach_bpf(r1, 0x88, 0x67, &(0x7f00000002c0)=r2, 0x4) r3 = socket$kcm(0x11, 0x200000000000003, 0x300) sendmsg$inet(r1, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e1f, @multicast2=0xe0000001}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000040)="00446916ab", 0x5}], 0x1, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xe}, @multicast2}}}], 0x20}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet(r3, &(0x7f0000001d00)={&(0x7f00000003c0)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000b40)=[{&(0x7f00000009c0)="efd0f00e9f641131f2adddf44ffcf8006169eeb59b99", 0x16}, {&(0x7f0000000a00)="c2778d3a9152d30547dcd97edbd2020a6bca07258c797e42c5dc2d82479f8a3cdb16c98ad6edfcbbf715a640a588db0dac738455d4aab5e45b188cf9e22fba90506bef09a6e77bb4b2476b127807b8b68de0329e8228ff4286454db7730e116c5a9ae8305606a4f1b438cf5b9c377257c10ddfe9e9279dd8dd95640267f0600f5bcdb7e5f6e6728a18a9cd757a9d6c525eb0e96bd1b3f9e38180ccbf1a04d558a44369bbd92261721fd57d5ff69c27eafaac3259779751e36698f1e2", 0xbc}, {&(0x7f0000000b00)="94975d94", 0x4}], 0x3, 0x0, 0xc8}, 0x4040000) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x6, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffe5e}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000) syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$kcm(0x11, 0x200000000000002, 0x300) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8916, &(0x7f0000000580)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12t\x02\x006\xe3\xd7\\b\x00\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x01\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(\x04\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x02\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x04.\x9aL\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50xffffffffffffffff, 0x0, 0x1, 0x7ff, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000200), 0x0}, 0x40) r4 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x15, 0xf, &(0x7f00000007c0)=@ringbuf={{0x18, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x1a}}, {}, [], {{}, {0x5}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r5) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)={@fallback=r4, r0, 0x9, 0x2010, 0x0, @value=r5, @void, @void, @void, r3}, 0x20) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f00000002c0)={r2, r4}, 0xc) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xd18c9b60, &(0x7f0000000080)=[{&(0x7f0000000100)="e03f03002a000b05d25a806c8c6f94f90524fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) 6.811941756s ago: executing program 0 (id=2454): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x448}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x80040, 0x0) getpid() sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000b40)}], 0x1}, 0x60044084) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) sendmsg$kcm(r0, &(0x7f0000002080)={&(0x7f0000000080)=@hci={0x1f, 0x0, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="b00000000000000000000000070000000743f9181ff34ad57bde32222cac109c69cdcd22aecdbbfa927a727661063266f6faa662edf05551d42aa0543796b2c81e0720dd17d0c71e1a4b8e7501e749dc9d0239e7c0a14957b5083e47c3f2067f9e77699d9a59783e0363179965ef92e37c3efd106e787d8a8a3d90c5c162d90176f35c49c43c1d1496401dfeb0f7347ac2dce43deaac1413e023b9707c776e4f6a796b00c50b7745943ced3bb400000030000000000000000000000004000000b71cc98015701df1a10000da101e38a395be39f28b1e5cccae9708d600000000c800000000000000070100000700000067fe31de3edd141f0c76bebc733acab75b1eb805a0c13fe84d113c956f151d923a8a9c1517b70706a382f656b2489f8e3eaee06565415a85807004243428cc6375ea1b2516ecabc6b7d5cfff94ea23aa2538c448e9534f1b8aaa248cf0320bbdd14e529faa11aaf30e7e165c1bbf74a2efb15fb837faa215e73736eb1d00b84cdaa4fe9c8fe9baa9af3ec4b9b7b3c36f75748df69d5becfbf2d48e41bbb0c0b7a852a8023223573a37bc7324aa6945e141f3da000000000030000000000000000000000006000000f2d4827b9a79c3f76b0c386c93af9725254d0941cc583960584657b878b6000010000000000000003a00000002000000100000000000000029000000720e0000"], 0x1f8}, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) setsockopt$sock_attach_bpf(r1, 0x88, 0x67, &(0x7f00000002c0)=r2, 0x4) r3 = socket$kcm(0x11, 0x200000000000003, 0x300) sendmsg$inet(r1, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e1f, @multicast2=0xe0000001}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000040)="00446916ab", 0x5}], 0x1, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xe}, @multicast2}}}], 0x20}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet(r3, &(0x7f0000001d00)={&(0x7f00000003c0)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000b40)=[{&(0x7f00000009c0)="efd0f00e9f641131f2adddf44ffcf8006169eeb59b99", 0x16}, {&(0x7f0000000a00)="c2778d3a9152d30547dcd97edbd2020a6bca07258c797e42c5dc2d82479f8a3cdb16c98ad6edfcbbf715a640a588db0dac738455d4aab5e45b188cf9e22fba90506bef09a6e77bb4b2476b127807b8b68de0329e8228ff4286454db7730e116c5a9ae8305606a4f1b438cf5b9c377257c10ddfe9e9279dd8dd95640267f0600f5bcdb7e5f6e6728a18a9cd757a9d6c525eb0e96bd1b3f9e38180ccbf1a04d558a44369bbd92261721fd57d5ff69c27eafaac3259779751e36698f1e2", 0xbc}, {&(0x7f0000000b00)="94975d94", 0x4}], 0x3, &(0x7f0000001c00)=ANY=[], 0xc8}, 0x4040000) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x6, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffe5e}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000) syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$kcm(0x11, 0x200000000000002, 0x300) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8916, &(0x7f0000000580)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12t\x02\x006\xe3\xd7\\b\x00\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x01\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(\x04\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x02\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x04.\x9aL\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x89a2, &(0x7f0000000040)={'bridge0\x00', @random="1000"}) perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0xa, 0x7, 0x0, 0xa, 0x0, 0x5, 0x44, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2000001, 0x2, @perf_bp={0x0, 0xa}, 0x80, 0xa7, 0x10000002, 0x0, 0xa5, 0x5f, 0x7000, 0x0, 0xfffffffd, 0x0, 0x10001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000004c0)={0x5, 0xfffffeed, 0xa, 0x0, 0x2, 0x2, 0x0, 0x5, 0x44, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x0, 0xa7, 0x2, 0x5, 0xa5, 0x9b9b, 0x7000, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0xa, 0x2, 0x3a) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r6, 0x4004743d, 0x110e22fff6) sendmsg$kcm(r5, &(0x7f0000000440)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000080)="a0020000d1", 0x5}, {&(0x7f00000000c0)="d3a2845c", 0x4}], 0x2, 0x0, 0x0, 0x900}, 0x0) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000640)=""/4096) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0xff, 0x5, 0x8, 0xa, 0x0, 0x4, 0x400, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10008, 0x4, @perf_bp={&(0x7f0000000300), 0x1}, 0x10e005, 0x4854, 0x5, 0x4, 0x5, 0xb5, 0x3, 0x0, 0xc8, 0x0, 0xffffffffffffffff}, 0x0, 0x7, 0xffffffffffffffff, 0x9) perf_event_open$cgroup(&(0x7f0000000380)={0x5, 0x80, 0x7d, 0x6, 0x4, 0xc7, 0x0, 0x0, 0x20404, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x5, 0x4, @perf_bp={0x0, 0x8}, 0x1, 0x10, 0x8, 0x1, 0x9, 0x793, 0x48, 0x0, 0x0, 0x0, 0x801}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x7) syz_clone(0x8000500, &(0x7f0000000100)="ff0cbb66c5931823f53ba5139e", 0xd, &(0x7f0000000240), &(0x7f00000002c0), &(0x7f0000001980)="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") r7 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r7, 0x6, 0x15, &(0x7f0000000500), 0x4) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000001640)="b9a7019436dafc0c0037b5eb1f36401b4c33c485236d6d6907000000a9bae893a9780ffd16898ee8b1d9226eceed3dafc953f6ec0d1c4d708523f21dd9bcd0215df2c998eda74edab25f53536a0931b58d9657223e02226c1599a0614486451f4e45b69142325fec27f2fec3f59da3417fb4ac66ddb0d9427b02d60e7290b2f83c89f3ae6d1157005bca9828dc3254fce5c8a2da03653cdc4026d36c629aff88ca2504c06a98b2ebd621c3ec6e84468820f5f1faa9cedc5c1189ce60436852e52d2a7fff226b2e0db1ebd1e9efaa2b6586f34da8aac72e608531e758106373", 0x5, r0}, 0x38) openat$tun(0xffffffffffffff9c, 0x0, 0x101600, 0x0) 4.830721081s ago: executing program 1 (id=2462): r0 = socket$kcm(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r3 = syz_clone(0x20008200, &(0x7f0000000180)="f64808", 0x3, &(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000680)="06296e4928d6de88e49afb3cbe389e4d4d3e5a78f3414051815f1808239edff8055e3461413bf9c67f1772341e16951d870a7c59896adb92851cc76563eb2108bf3af2ebb2c35c437b6dc8f0fc74e2db1932a318cd453308ac") r4 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6107, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x4c, 0x1, 0x80000001, 0x0, 0x4, 0x4}, r3, 0xfff0000000000002, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000cc0)={r6, 0xe0, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0xc5, 0x0, 0x0, 0x10, &(0x7f0000000b00), &(0x7f0000000b40), 0x8, 0xd4, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='syzkaller\x00', 0x3, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x10, '\x00', r7}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0)={0x9, 0x0}, 0x8) r9 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r10 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=ANY=[@ANYBLOB="12000000020000000800000002"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)=ANY=[@ANYRES32=r10, @ANYRES32=r9, @ANYBLOB='\a'], 0x10) close(r10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x15, 0x0, &(0x7f0000000180), &(0x7f00000001c0)='syzkaller\x00', 0x8, 0x26, &(0x7f0000000200)=""/38, 0x41100, 0x2, '\x00', r7, @fallback=0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x5, 0xc, 0x80000000, 0x3}, 0x10, r8, r2, 0x2, &(0x7f0000000300)=[r10], &(0x7f0000000340)=[{0x3, 0x5, 0x2, 0xd}, {0x4, 0x5, 0xa, 0x6}], 0x10, 0x3}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f90324fc60100005000a000200053582c137153e37000c0680050002000300", 0x33fe0}], 0x1}, 0x0) 4.684290086s ago: executing program 2 (id=2463): openat$tun(0xffffffffffffff9c, 0x0, 0x101600, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0x40, 0x10000, 0x9e4, 0x5, 0x6de, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x3, 0x200, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x4044}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x1a089, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x32, 0x5}, 0x2019, 0x0, 0x0, 0x6, 0x1000, 0x2, 0x7, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xe, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x8, 0x60000000, 0xfffffffffffffeff, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) socketpair(0x1, 0x2, 0x0, &(0x7f0000000200)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000711240000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc8}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) socketpair(0x1, 0x1, 0x0, &(0x7f0000000c80)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0x16, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="1802000003000000000000000000000085000000a0000000850000005000000095"], &(0x7f0000001800)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014fa0000b7030000000000008500000083000000bf09"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000fffe80000000000000101000007f0600080000000000000071273fa7b49301641184a907"], 0xfdef) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000280)={&(0x7f0000000040)="58db1d", 0x0, 0x0, 0x0, 0x40}, 0x38) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x49}, 0x94) 4.516597542s ago: executing program 1 (id=2464): r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)="d80000001a0081044e81f782db4cb904021d0800fe007c05e81156a10a0015000200142603600e12080010007a010401a8001600200002400400077c035c0400a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7eef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e101ce81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703", 0xc5}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x6, &(0x7f0000000040), 0x4) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x6}, 0x5000, 0x0, 0x0, 0x0, 0x0, 0xa}, 0xffffffffffffffff, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x23, &(0x7f0000000040), 0xcf) sendmsg$kcm(r2, &(0x7f0000001240)={&(0x7f0000000940)=@generic={0xa, "8ab77fa26849ff263ef30c98b353011a5990650042e2dacdc165ececece6be1862e2adacd2737d00ad6f9fa9f3d7145e15dd9fb1a7adc211220963ad5def53b911ba5b9da13641f982757012a7496de0b3a36f5849f260c603dbc317f54b901ee80ea6132ca6e88c776553e1833052ca376304313c5637786a36a4b83857"}, 0x80, 0x0}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffebe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018edff00000000000c0000000c00000002000000030000000000008c000000000000"], 0x0, 0x26, 0x0, 0x4}, 0x28) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89a2, &(0x7f0000000080)) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x45, 0x0, 0xb, 0x200004}, {0x0, 0x3, 0x9}]}) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x3, @remote, 0x5, 0x4}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000080)='n', 0x1}], 0x1}, 0x2600c055) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[], 0x31) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffdf3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.275588232s ago: executing program 2 (id=2465): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x69, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x1, 0x40, 0x5, 0x41}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x14, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xe2d}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1b400}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r2}, 0xc) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000d00)=""/242, 0xf2}, {&(0x7f0000000240)=""/205, 0xcd}, {&(0x7f00000006c0)=""/188, 0xbc}, {&(0x7f0000002100)=""/4077, 0xfed}, {&(0x7f00000007c0)=""/211, 0xd3}, {&(0x7f0000000b00)=""/231, 0xe7}, {&(0x7f0000000480)=""/176, 0xb0}, {&(0x7f0000000c00)=""/208, 0xd0}], 0x8}, 0x40012100) recvmsg(r0, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x10002) 2.991965702s ago: executing program 1 (id=2466): socket$kcm(0x21, 0x2, 0xa) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={&(0x7f00000001c0), 0x2}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000071003300000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f00000002c0), 0x161) bpf$MAP_CREATE(0x0, 0x0, 0x0) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000000c0), 0x8) r2 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r2, 0x107, 0x12, &(0x7f00000000c0), 0x8) 2.708920701s ago: executing program 2 (id=2467): r0 = socket$kcm(0x21, 0x2, 0xa) socket$kcm(0x2, 0x6, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={&(0x7f00000001c0), 0x2}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x29, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000071003300000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f00000002c0), 0x161) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = socket$kcm(0x11, 0x2, 0x0) close(r4) r5 = socket$kcm(0x11, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000200)={r2}) r6 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r6, 0x107, 0x12, &(0x7f00000000c0)=r5, 0x8) r7 = socket$kcm(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) setsockopt$sock_attach_bpf(r7, 0x107, 0x12, &(0x7f00000000c0)=r4, 0x8) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000040)={0x0, 0x80, 0x36, 0xa, 0x6, 0x9, 0x0, 0x10000, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x6c, 0x4, @perf_bp={&(0x7f0000000000), 0x32cc22a73d5e78fb}, 0x8822, 0x80, 0x4, 0x4, 0x10000, 0x2, 0x9, 0x0, 0x7}) 1.967003366s ago: executing program 1 (id=2468): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000cbc55e9a8398c69d4474bf05ea0ecab19b5a61f517e25165d76b3e1856d9c15209ae810f3796855233b97d43a1b946742ee670eb449bb06deb505e97629b0bd8a73cd6011dd911c88b979706e7480bb40a88cb43eecd4fda645b7222911c5395b4c5da9b00bb1ab44e2b6ace7d359b53ae5a1939a4cd44bb0c2250dd4f21be5e38a461cfd47ca9e1169c05c2d009d7d739c88801787b8f6019ec69c1"], 0x48) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9c, 0x1, 0x0, 0x0, 0x0, 0x5, 0x42020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd831, 0x0, @perf_config_ext={0x10000, 0x3}, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0xe, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x18, &(0x7f0000000100), 0x120) 1.715440414s ago: executing program 0 (id=2469): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000003c0), 0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x16, 0x11, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x35, 0x0, 0xa) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=0xffffffffffffffff, 0x0, 0x1, 0x7ff, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000200), 0x0}, 0x40) r4 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x15, 0xf, &(0x7f00000007c0)=@ringbuf={{0x18, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x1a}}, {}, [], {{}, {0x5}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r5) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)={@fallback=r4, r0, 0x9, 0x2010, 0x0, @value=r5, @void, @void, @void, r3}, 0x20) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f00000002c0)={r2, r4}, 0xc) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xd18c9b60, &(0x7f0000000080)=[{&(0x7f0000000100)="e03f03002a000b05d25a806c8c6f94f90524fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) 1.670160576s ago: executing program 2 (id=2470): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff000000009408000000001700638af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="00000000002acbff6203000008000000850000006900000095"], &(0x7f0000005d80)='syzkaller\x00', 0xc}, 0x94) r1 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, 0xe4, 0x0, &(0x7f00000000c0)="4d350a56a7bc74f8e9be2c1fc6b8590afd6f1dd0cf4762f72aae129a3603c71d9b813433f9f431b688bee7c2873eb6cfec9997ad55119427828d6e744a09d409d9cf8c47c68fa0a7cba7f23a392b73633d62a606b49ecf4884ef4edcda5a7ad6b0d27e0a8504ebfabc73b3fea0c0354869f46f7ca04f882d2d4d9fb6e27d22ac390383cb8cd746864f83e39380357181fa2857a7cef1b7b95c6407af9566802212f6bd9b8c22ce36ccaf140b4d4eef21095c89726a089f8b7af623d08adfa444056fa899dfed6d990cf9318c1fd5b2ec22835c5e8325a415627a0d61727e644f3a6b68a2", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x55}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1200000024000000080000000b"], 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)="31de76fb398bc62d058b8a96924594f5476a0824be53f7a5949f80614c42391e4b80412938c955d34d37eb96ba7849c3eb823bb36724bd6f6d0219cfe5c884afcd2bdea5acf9c877c03dcdbbb3e47417b6707c27d4c5c1db1924071f6b6f23c7d199c799c9b0c41101e625fcdb7bbfd12a3eeeef4540a5698f058aaf6a141e5d333929b92a7f64e925bf0ef424c3ef29fcd5fd4721c547fde6abe4d47048b64511693624b0d786711abe4a66e250fcbfe95ac9037e58f331b26b6ed0d08e5c73ba4c49", 0xc3}], 0x1, &(0x7f0000000580)=[@ip_tos_int={{0x14}}, @ip_ttl={{0x14}}, @ip_retopts={{0x0, 0x0, 0x7, {[@timestamp={0x44, 0x0, 0xd3, 0x0, 0x4, [0x620, 0x81, 0x79a, 0x81, 0x6, 0x8001, 0x73]}, @lsrr={0x83, 0x0, 0xf3, [@multicast2, @private=0xa010102]}, @rr={0x7, 0x0, 0xee, [@multicast2, @multicast1, @multicast2]}, @end, @ssrr={0x89, 0x0, 0xaf, [@rand_addr=0x64010100, @multicast2, @loopback, @multicast1, @dev={0xac, 0x14, 0x14, 0x31}, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, @private=0xa010102]}, @timestamp_prespec={0x44, 0x0, 0x88, 0x3, 0x1, [{@dev={0xac, 0x14, 0x14, 0x38}, 0x3d12369c}, {@remote, 0xfff}]}, @end, @cipso={0x86, 0x0, 0xffffffffffffffff, [{0x1, 0x0, "84e95dd8170050472e2246379d6499"}, {0x1, 0x0, "86d93f5f715697bd43"}, {0x2, 0x0, "3c2a06fa32eb"}]}]}}}, @ip_ttl={{0xfffffffffffffd61, 0x0, 0x2, 0x80000001}}, @ip_tos_u8={{0x11, 0x2}}, @ip_retopts={{0x50, 0x0, 0x7, {[@timestamp_addr={0x44, 0x1c, 0x7e, 0x1, 0x9, [{@empty, 0x9}, {@local, 0x4}, {@multicast1, 0x7}]}, @generic={0x0, 0x12, "96099ba5b85e2fab92f9c3efb43a5dea"}, @generic={0x0, 0xf, "206a77bdd1a004129054e7704a"}]}}}], 0xc8}, 0x14) r5 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x200, 0x5}, 0x108986, 0x4, 0x0, 0x1, 0x0, 0x4, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYRES8=r5], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) r8 = socket$kcm(0xa, 0x922000000003, 0x11) r9 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x0) close(r8) r10 = socket$kcm(0x10, 0x2, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000001c0)=@generic={&(0x7f00000000c0)='./file0\x00', 0x1}, 0x18) r11 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x90) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000200)='*\x00') perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r11, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x20, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000011008b88040f80ec59acbc0413a1f8480f0000005e2900421803001825000a001400000002800000121f", 0x2e}], 0x1}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r12}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000880)={r12, &(0x7f0000000800), 0x0}, 0x20) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848120000005e0c0000000000000e000a001400000002800000121f", 0x2e}], 0x1}, 0x0) 1.412359374s ago: executing program 0 (id=2471): socket$kcm(0x2b, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xfffffffffffffff7, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10000000000}, 0x0, 0x0, 0x33e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000001380)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffeffffffff}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x1) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) socketpair(0x1, 0x2, 0x0, &(0x7f0000000200)) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x6, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xb8}, 0x140) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) socketpair(0x1, 0x1, 0x0, &(0x7f0000000c80)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000400)}], 0x1}, 0x0) r4 = getpid() perf_event_open(0x0, r4, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x5, 0x1, 0x1, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0), 0x5}, 0x0, 0x5, 0x0, 0x0, 0x8, 0x0, 0x800}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) socket$kcm(0xa, 0x5, 0x0) 1.342150506s ago: executing program 1 (id=2472): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000010000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32=r1, @ANYBLOB="94029641513009ef0c14beef72392ffe01a016330f85d7e8c74fb19a", @ANYRES32, @ANYRES64], 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000540)={0x1, 0x58, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1a, 0xf, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x54, '\x00', 0x0, @tracing=0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r0, 0x1, 0x0, &(0x7f0000000800)=[{0x2, 0x5, 0x3, 0x5}], 0x10, 0x90f}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32=r3, @ANYRES32, @ANYBLOB="0100000000000000", @ANYRES32=r0, @ANYBLOB, @ANYRES32=r4, @ANYBLOB="998479c029fd885e5c6c7f383aee242299c06aa5fd3829a69125609825"], 0x20) close(r2) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffff}, 0x94) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2420, 0x0, 0x0, 0x3, 0x3, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) recvmsg$unix(r1, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYRES8=r2, @ANYRES8=r5], 0x9a) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x4, 0x9}, 0x10, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x10, 0x9, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x4004}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000017c0)={r8, &(0x7f00000006c0), 0x0}, 0x20) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000280)={'wg2\x00'}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) ioctl$TUNSETOFFLOAD(r7, 0x40047438, 0x110e22fff6) close(r7) 1.011509427s ago: executing program 0 (id=2473): r0 = getpid() r1 = socket$kcm(0x2b, 0x1, 0x0) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x8a, 0x3, 0x0, 0x3, 0x0, 0x10000000000, 0x8880, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={0x0, 0x6}, 0x1c108, 0x3, 0x3, 0x6, 0x7, 0x4, 0x2, 0x0, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r4, 0x0, 0x48b, 0x0, 0x18) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x4b, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') sendmsg$inet(r1, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x2f8}, 0x20000081) setsockopt$sock_attach_bpf(r1, 0x6, 0x19, &(0x7f0000000200)=r1, 0x21) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000032c0)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000030000000000000003000000180100002020752400000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000600000085000000060000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000004000000850000007500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x50) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x40010102) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r5, &(0x7f0000005740)={&(0x7f0000000440)=@isdn={0x22, 0x6, 0x9, 0x5, 0x8}, 0x80, &(0x7f0000000b00)=[{&(0x7f00000005c0)="9d3bc943b5ebb6a4c52de3da5511c1535c3eafcacf7e8165b9a58f7cdb6da7b954f2f29cb8d72264c2f96f322cf44aecba1a2afb52e50a951705717a848a755d5a618d2505d18a776f4f9ee6a87b5c79f1ca9f6627973b80ea97607cac8fda723e50956372ffad22c6c32e00e0e56783f4e9242406f21af11b6ff3ef0ea9e53eb13abc9158346080bf7486ec1ae576f38d03dc764472958fbcdc6914276d2abfbf91b38044a0e1432d50b544aad239ef4f4f1b9d47fd8d9b1f9d50cc7fd923214c1c7586ebd40f983201adb7a64e3083696dab30e51d", 0xd6}, {&(0x7f0000000780)="04d5e3054299cd5848722f729bd5deb775dc418bdd7e9e1c05c5eaba58256561cbe900d345c41b5adfb8", 0x2a}, {&(0x7f0000000800)="226571aaa5802dfa1857c62efeb8560678bbe6f9560d6f3863e9e0503c567c0e0c083d", 0x23}, {&(0x7f0000000880)="2cd49fbc76357b857e0724b4a58b959b43f737299bac1ca8cbd4a6ab7c3bc47efd6525c392c385f724b8c4d29a1df32d64660e8fcf147a667e0e30e2b3a57df3dd5035df3f", 0x45}, {&(0x7f0000000900)="10b092bc5e1a283bfabf12156393bd387b0bbc8c47c6fdce7e186eb3eb18aee390cd1b3a8a81ebb7790e9cc9224e3efc2b27932352283b441f49950d4bcda87142a74535df53c2d08befb7ff9f0d48f1be6e1eb8b7fd4e657012832246be2897332dcb01fe6450d53c7eafbc81cc42dea937f57e7dff02baf11c6a5da72857e84804823ac00edd4f80662af0979bd77e2d3eda8e128a91c2050a4e240d8cac72db1730f05de25e3d3daca018c447953b35e1a2c12433cbf5fb54a5a43e47594326ffd41aad5b45", 0xc7}, {&(0x7f0000000a00)="c070d1701c7917aecba6f10ee74f278c630ffce59e42b0c6e7af1e889f3e256b3bc2fe5c073be3da5c8aff7df8493f25ba6bce7ede4ae4ff73ea8743215960850989d23126199f331455b5ce4d553045abcd2f8e8e0f1d85a0d392b8408159f375c915783db4b51b448b8928679432d6878e94c1b4659366a77ebbb2a5e7d4fabbd45de0301b71efc90cf90e54a3b5f272abe8c4324fe3d95f3a28aaec5c0e5551355d034f81cc94ad8a7684506abbb3713cc05e4287513ec7b25be61329271bdb29ef5aa8", 0xc5}], 0x6, &(0x7f0000003380)=[{0x48, 0x111, 0x310, "1e7bbad9fa2c6357109b282c9a4082139747eab063f10a9a048c6d2f09866f787a583cd8cdc6f916d1389421feecb077cbdefbdd8b8f8a9c"}, {0x28, 0x101, 0x7ff, "2c71db0fba95eba8beeeb48e1465d22b595ac409"}, {0x58, 0x11, 0x6, "5b964283558a6881a30e9abc0bd55b59f008b141f5894e2d004180bf4db7a421c3e8bae04b69904c686e46794c365ae3c3311c0f56363de77eb7088c9b70626c7a"}, {0x1010, 0x1, 0x6a, "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"}, {0x58, 0x101, 0x5, "ffbd438ce06b7d2077a7067522eb32b53db9804b9bd246dcc4802e34f4d5b12e694897967a4111cda5e2217207df2081fee7fcb2e4ee310c7487d0eb1284c7a113"}, {0x1010, 0x118, 0xd, "baa707c7b39564ebb37c6248bea50864121641fa7df2def5204f57159bfff76dc71668ebd80183693bd5eb5f2031caaeb44505a09a4997b12aa431f59d4caf747e7fd0f31efc7b5ce5b9a579eb212ffe481cb0312d0ca2d2f64821f1d80ead46acc100730f25605857603f901245326dd8089b40b6804a3b5c1040ec43775f2fb4970f21cd0bbd12f6183c20c3d189efaf4ab2f0618e240302b1d1252df7749fa17e7f9d021777da0be04a4167d8dd5e75756f9177224c7ac373d51734c375814aa747e048e66bfa6c1d7959baf488f2ff682653a3efca811ade018dba251828ea5aaf185624822f690c0e6e9902dcba74641046721421d3712dcd50134b08fd4eb8d16b06d8cf2701a48a3ecf6ab92e26cb913436b11d5f4c5b70bf137cfb83ff818efe394c0c80bd1258a6ebc4426a4adcaa3a5c3f0e3c1b9851be4346526a7da9728c6e19e756f80efefa04b744fec22f20889eee4d95cbc7c07f118694eb7dda59f22797e6360a0cb54962e2fb65fe85a4d1bc084545313f68f468888e3afffae0b5319e230c42e2c4403f678385e0655ca1688e4a5af447c4c899014fe9779222781e206714916d7bf9e19b5e519aafde2834999c1b92908a352d3c91cb3a0d0e769be4e43a3651fd40062a0e75ac4e2210f1cfaaba2c6df588060f0e58027c48a7f42cabc2e270574a9000c3429c78129c08036057c63c77d29d2c2871947d415ed5bc2d4fa7a6d49225cc4f49d58fb88eaf92b83ba4221b3145458da460dc094bb4824cf0a5291ff0ed4771d0342eebd695d0c74e928ab73ac85dcc218acbda91360e23fd6e280cd98e2e58d7311fbd2a4b7b3dd083e6ffb2916248ffa5c9f7d41e03da01112d0f7f2519eba702bfd4d7e5058d0786612251485a50c27b66707dd23f72801b1d9f88253336427f059b7bffc84f4eb173d7628ceedc0105b1587b9de3ea2f1499c0b0eac8ff970527c35084c0f25d5db25f53088fe20a129b23ee4e94f1f37cd2209d7b60a969d4d54dc4f7e620404a773e41b76659c30cbb6ff01bafe1a0d2698db8598ffebda3b56ca936182fae73b3958441059f65c11b1514b380de6c37107edfaa7b8a9de7030fb9802236f1c37dbd09559b4e9af01d6f00751a8c25581d7cd625ce388c0d8730ac3a7f0366cfa7b6d91505705c2be44641fa18ff305aa0f8513ca41740869a124da658e2942a3b792024962ca690028bc3021aa23f740d24cf1c4a916fca37fd2d853c63275c81ec23fb209cea2891bd0e23f2864a19de080d158bc59b9e26a1cdbce17c8e186ddbe2cf789db3ecf2910995e61e485caf6ddc1ad0ec9e312539f769ea79b5f7d419d1367eb47d725f1aeae86af7fc6a13fcc13603f4e090b76cdff793d92333e4c68925099ba963b48b7e631af362220fb77ea83aeb3a28695dd87e6609d5e8973126b9a8797550c62d8aca9d2dc11beead7720a0563a15a04349ae4f9b71fcc246ac1b3c47c5abf57aab9e645c6c43c0bdc3336310fbe8122d61cf1fd5b9924da682e533263a08552e24d9e541e5d727f147dad9480cd43e804f455b6fc56dd273957d6416acbec8f8e70ad3a7893affcd9fec74df013648913a56ba554762903f6a15aaeef14cd482b2afd12c08507b72d96a6df1d018136753deea4018d4d119d06ae1ad506679b7d7dbdfdeeab625466a112750cfd2a91cdd85d2b7a12e5c61ff3e62cf926828fa58fb44eb8ae207533eeb2226b73d473600f075717d5e8c64451c86c5704701343f1f6913f441d36decbc5b4c1aaefe2f8a47b269a4d6fa71436c853cf0ec81e4fabc69961d6fa9471befb9407f9d1316b24bbcfb8b747a42b50602ab69d5388e91de9f4318431d5fc20cc5a51b9af8ba7192bea5a7e38102752a8d271db758034910b1c0a82220060012e3f1c9f075ff653d0993b5996cab334c793e0a28e95334cf23c7a7d6ebb11e100702fdb0cd81790a40c56b06f808223a3b0fd01ea6490655e3dfae64de6664384e36fc797c81bc32b238fcb0075587dfdbc91db55f54626bdd1b9bb9cd225674822233ea79c75d2fbd74092630456b003dcee0d25d6d1ef827122baf532c7e49cfd29aca66557f945e6c480ccf2a4f5f870c4e48fa555af277c08b5c669979d1e2226496e8cef1209bf82c621db63c655a0f380d4008c57165fbc65343d68c1459246d1526794ee5351e8df2887b7e9aa336b3deb8feff1d42b9669e713c78b8fbe33b2041188524b7c377fc09a784cca76e08cf26771e8c8521c8b79a00aab015c74f86143081b01987a83f5447c0a98b59418f1e00ca036acbafa346e4ccd3a2b353aa6b3301846b94c4691c97cd5a57ccadf32a791fde67ad082cc4bb3b864b36f8e34c0719262a9d72fc0b604c985e893f52a7a05aa273980f23a14e2f6128e89e5b36ae9abddba2886d2c629fba8a2fe0fbe361d131d747af08f4cf32e0e03e05286398c3d94e6e74bceebd422838c11e6e4c190551c167bcc47ea895bc51582561b04e33453390955c7536045b7e3288dd4ec0aad0ff86af51a887c764b529e2e22a1d8d9728072922b54215efe4ec8c96107e7492d1bf019445c766a0c05a73fa14b9ef748fc017f202b659ff7e6b2b3d558037ef38ac044b6af564e018c21c06ffb1bed0f529f7c229de6d30ec05b3d16a0eecea4637f6518670367aea0af755a6d04b86fff53f29e5fceacf7e0c888b39fd11a0c883d7e2c9dfa492ff7367a6ad9c0bde840e908a2e39e5c8ae69ed51e69618cae6d2bf92030c73308a2879b5520ddd643628327ccfd59aa99f331088ae6a7ebe858279741f4a73a7bd88dfae7d5d6b11f6434da71116096defb05dab726aeda6b9fcd3522353f5905f343a9aef094bb88abd17c41a068870866e0e85b613b91060ce49627ecbab877db11d02a4abf0684509acdf961388043395fc404f4915b5aa54b67d4f338ce5c17eb6f3ec8f12d3ff19ccd0bf9526eead0fa26e4f6fab66351a1c7e8c7c873b21e201140b46a1d3e7640e2101a65abeef51d05c0fc42224ccbb7d3b99b5f2c6545a1bd94ab9f42109d3297fcc040ad9b19de8af54a5ed8d406594b0665eb5e5b2ba2dcaa4be22c9644080e1894eab4c0007428e1ecc2891004cc52b8ad9e9fb90fdef0281684632528f1114dac4b5fe89ccb797b51c10482fe6cc78609ba83d5df3dd7cbbafefe9534aec950ceca5cb746b7b0a289c3bd2bfff6f12634c9d55a4e893a9b38b9017432cf9dfb36feb54199e86e23b4aacbe519ae1b9124a67b15924c9443351d194b3e93c76c41e8636b65ead006376ddc7aff412a0aec8f3684338be60d8122264241e10a53a925bc5a6e0ed030cf1e1d33abcde4b7954517747d27153bc82b4dff6ca7692b491d8056daac050d4b617a05996b6b7a9c80b0fe8d133fa7a9c5c4b2cf6de327eaea4d6b3e1f12b58bf4cc5e10b686f4633a4cb342597fd68441a7c4d57579667bf5d3351def7824adcae5b76688bebd7ee2ec30e1d0e423fdd9c1ebaf80fee0af709d60044cf5a116e528c6949e19884103ea00980225d6801a30f3e6f0fb2754b6a2749e67f167acd50b76d2b2cb674b07ea43edc1229a6337bc0e14f899e4b49154cbe9239793fcb5677ea03bffdeb26a0767c9353d9f018aee3e78317b08eacf307e469ac78afb20f56172c5d5bc138c644be950d2a5ece87d40bfd9b23b7b736e318a0e330cbc5b9dc61f77134f83023bbfae17add0c57aa6c905280f85102c5d8e555572866769314ad402cf55e601856b78aac65fbc41e5daa06764ccb31cd3ea5e41182439051069fe3732e650b9465556ad4ddbb6a924bdfaddb28046c2151dad693e76c14aa4f966ad5e413effa7f1653f203c9ebaf95bf858a8c9132ac1e15df7a1d06620269da3833a9a3fcbe5d311c1d191305905c6093c8ae9c8eeaef3df2307603568ee374d21f76102a311de276b023d59c97b4f7ee0cb60420fc7eac816a30f5cfc47b0da67b14773544a549ad94bbe285fda807fb1799c1a1242943332b09f50161dec9b3fc774c37ea51fac1e668289e9b62a104c2694866043aaf3a9f35c799a146d37a0fff6f550ddbcbac4996bb5cdcfd085ad724a4e4853d5980c4b627b816fb07720b9342b9b31efcaf998b79370b47fdeab6f114e597ceb4658b10dbd98ccd51bca62415bf9910766345ea9566f47525b088aec0c1d03b45426de1cf9d3dcc07bdf8557c56e469244b29506920f3a11a0dfd8a75ebf5682ad6a3c6b9e18c092c753d33549d4295ef49d9f4ba63ae2e5fb86ab25848d3723e234775d860cb7267c9020fe1415a1e14d5ef99ba1dd2dc3acc6987356e5d82fbd9f9fbff83f80d1d83d9e4a432e40b9cbbc3aa0e92ee7f731d95860b810c45e91908a629341266f2e9939baaff412eaa6591930a98119f4dd96571c3b65f33377ad860367856098eceba371ac60a4316c2634669425982965d195a4884a1cb6d0426896111d3c600c757c24a445b01d0ad59b4cfd69cfe7e1e229a3f36c09788a927493d898e23745b46772ada295564c28fe9de62ad97caede05ddc4ca3b2b15a9310af4e43556d96e581dfe37cca1cc01f7a38790ace1f88b54a57412ecabe7c738fc7fd35a1e247035beb8d41acf3d63b9f8bd73e370fa2c2086522dbe77a01cc1d840c694e11d2e6d0bdecad28dc130003e06aabaa2043f1067b039334f5a8bc5cad656d694710b07c7630ed73d5edddc3e7af19b793a70f6b165150f9ea16d8ca0c10fbc8b7a7c63983cadf3e6107321cabba9172f9bb97302a94ef7f20dbdc95e9997b86726d4f769bf4d441aae89daefdcd2d4ef89b84bf571645b6c481f258152ebd6729127190908c2aeb7802bf080e5fbadbc2186119636f6e9e35fbb74fb530b465b17a966ed12a87bb596e1250e8d9ec2f2737c48ede2e14d98f04f7568380a98012d9ec4fb3e9276e5ffaf14f6c8c4b4bb044ba89656420d64be17747334f7411412a1bf7030a602b795808edc7d244338c98391740825cf6117fe6167818a590f4b6c6d8c8fe32514bbfeb618479828ffe9a81a7928e28f36b4af4d0a01e37b36718996d5d606cb8801ef9267da1078777449b26686b99184a79b497a474b8452dd0db640858e64042c40a932eba3e5a8122591f81563c1e61a97d0b7c762cf93bfcca797185b20354107497b2bc76b652dbf485e4f977d01ba3e49d32f5da4ad1d17f29f23c21e171882b01ea03ad3184be997d129cd2130481a8e93d21c5adc456b40b19a59e1903c78fc1e7c6d0013e17ec5a25305dbf3532cf48c83ee37afde26ede55e8712b9bf34a6099dd0240dd2b3435d454b495738684536140524c13080705cec065f184a595461ecf4df33063c45b2ec4a1e8d5a1a2467655f5b98ed21063f169d8c1b8a168c57926b06f7ed414a3256bb1e3acdfd09ab0c7cff025e31b608a0f5845b48bc42d49aaed573b1d63f0af8b2a2b34f3aec024b243eace7a9f86b3a9188cee8518406ee3abc8e8f0d94086e34060420ee28f9f9808502d68f2170b2f7f183162ac5d7628214c3d2d03467d05b9a7ac116c22fd1f25bdc603586bb5d26d4dbef867cb4c4bad6ef2e13d957b43350cf74a533811e6cc65d84af81c47f1da331a369d54a3cf93bf685b86df9f0824bef4df5c795b634c426e8d8e884efa7107a8d3e0cd15f58ddb1582a1c6f59a9f36ac8e4b608e56442c534fbcc4c2fe402d98338e93b21c1b156474216b753c5f9bec3cf44b76d234ff6ec6d29685b580fb57e7f18a2062841df05361ef92064367c6aff8"}, {0xa0, 0x113, 0x3, "4dda11de9d2e3c27fc137f34e06d81c4abe5a3262cd2f87cbebc2e81561567fb0fb7a4843de1769368e5cf830891e009109f2a0bd59c91581374a07eafc9a13fb9358b202d706609212707ebae0f85a53323ea6325324d7baddb8965d69b60a6eabd39c6a537eac404a79d026229c0d64feab7c6728f0c400591db3ecd4545ee618378d002de81f250404d88"}, {0x58, 0x108, 0x2, "1acbcfc8cfbb32d5f864520c79ce68760e35d1199f1e62127381c5ca8cab8c7012c3f0405fad94ab9402177c11bfd78f36643c88c8ebecccce61941244ae411dccb4"}, {0x68, 0x103, 0x9, "62627cfedc1146d373175b20f8c7e275b52d2630bac903dc82005e32b6d70431de5b111091ca486484ee7ea0f91c40e34d9762f08f7d794826873ce63b42299c6a49bc72f0c7cab2ec9146b2432b9df88c45268357"}, {0xf8, 0x0, 0x9, "d157cb749b15b70883f3749352ef0df19de26af0c8202ed8114ceb070e9a94fd79d87527537cf8680517a6c8c74aecd015f22d75665b9d07ef7617a2e8dd69efdbd93ddfb3fef0eccd79cc170ecc292ec2c587b3927d1afba16db57b4975a9f19c409e89f5b842ed1c06fcbf7952fd1df9b88a3b8a742e5b8fe0a276cec845ef1288851358bd5e705e3240ea2a27d73823745c120fa01c30a16113e30814bf3cc82c7b4c96c09b4737313bf2f71e4234d14942bef5593f5e894201a5e36ff238ea1d890df445b056dff204a2252751773bdd6ca6719ee80e74b7d4aa4362f75c6d"}], 0x2398}, 0x20004044) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0xc, 0xe, &(0x7f0000001240)=ANY=[@ANYRESHEX=r3], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0x26, 0x0, &(0x7f0000000500)="b9ff03076804268cb89e14f088a847e0ffff2000600000010000ac141416e000000129a13011", 0x0, 0x2800, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r6}, 0xc) r8 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r8, 0x2401, 0x0) r9 = syz_clone(0x96000400, &(0x7f0000000000)="2393b12ef3ca4efb68a6d6787dca3006fdffbb3e9c34bd110d10659a624b60f03b58f5ad47bb73de8ce49ab81636c13f77bc6cb99d10b82ab235aa0db55513fb81fbfa9e09e816400598a3aa6b0f1aaac3db42768433b99b19c7d4777f3a52a4f82db8add8ad3fd1fc962e96c5e1", 0x6e, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000200)="15eca8cf9874d7c230f94c1c5c40b0bcb0af25ab510a9554f09800019378a3ced195738ca5d9d4ec02e41f7478d6e8e3427705274f58c340fec27d68335148609f70424c2af5be6ed885ea680c046f4947e62678b6f6a1487f83d85a753ae15baf2c9766edf55d064e9fc3cd8b7cfa5dad4a04514d8625580cf69fc8e979be488f3ae41c98cb37d0fd150e857b9cdbc961d2c0de56fa686d3dad2258e66e51adbf91a6056f5fdcd85a") r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r10, &(0x7f0000000180), 0x40010) socket$kcm(0x29, 0x7, 0x0) ioctl$PERF_EVENT_IOC_RESET(r8, 0x2403, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={r9, r10, 0x0, 0x2, &(0x7f00000002c0)=')\x00'}, 0x30) 609.36227ms ago: executing program 0 (id=2474): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0, 0xffffffffffffffff}, &(0x7f0000000600), &(0x7f00000001c0)}, 0xffffffffffffffbe) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r1, 0x0, &(0x7f00000002c0)=""/218}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000200)=""/166}, 0x20) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x0, 0x3ada}, 0x44, 0x8, 0x0, 0x0, 0x0, 0xffff0000, 0x0, 0x0, 0xe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000200), 0x0}, 0x20) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) r4 = socket$kcm(0x2, 0x1000000000000005, 0x0) sendmsg$inet(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000040)=[{&(0x7f00000004c0)='.', 0x1}], 0x1}, 0x0) sendmsg$inet(r4, &(0x7f0000007940)={&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="200000000000000084000000020000009484"], 0x20}, 0x0) socket$kcm(0x10, 0x400000002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000fdffffff0800000088000000911161000000000095001d0000000000"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3efd7ab4c41335d9, @perf_config_ext={0x7, 0x4}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114141, 0x4, 0x8, 0x1, 0x0, 0x80000, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYRESHEX=r3], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r7, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a, 0x0, 0x8, 0x53, 0x0}}, 0x7) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r7, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0500"/20, @ANYRES32=r8, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000001000000000000"], 0x50) r9 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000480)=ANY=[@ANYRES32, @ANYRES32, @ANYRES8=r2], 0x20) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef435000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800"], 0x48) sendmsg$kcm(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000200)="2000000020008107090f9becdb4cb96b0200000000fbff010000000000000000", 0x20}], 0x1, 0x0, 0x0, 0x81000000}, 0x4) 164.723645ms ago: executing program 2 (id=2475): syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0b00000005000000000404000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000130000000000000000000000000000000000485f5b191be62b06fb0a8a31b210792616af4d707a323ca2150ba8f4b933a231bd2591c9f50295bc3bff0da21893c9e0efd6c9413e74b896201e0327878a023fdf6fb39b922e21c506d600982a9df41a85bf501296d653dbfa3ced9e16435eed11229ce5c69cccd04bff472477fc0e41c0802c175e69b93708f250aa8fa1b501aaeb8ab76a82829158119dc2d38564fb3438f65e658bc995809fdb49312f1ad3667d09b2efc99bbeedf122f84a5ccc9dedf6b9658c6a70a6ddc90ae0131c33f97e0445d1c88dbdb9b6a9a742f942960e0cfa36f52fdde69069ab13bd431ec77be0cdfa93a961016676c9e3b266971adfe7f44c9eb02880a6bfd158a86665f4af0e61ba311bf5c14fad4e74e178f8525cb1580000e71f632986f8758f0319b18ce85bbf5426c16fe67cc9c90ae9836b5f9ff12c67"], 0x50) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)=@generic={&(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x28}, 0x18) r1 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x0, 0x0, 0x8, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080100000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x3f00}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0x7, 0x9, 0x0, 0x0, 0x5c}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0x7}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x6, 0x1, 0x6, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef437000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e9", 0x61}], 0x1}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00p\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x10, 0x0, 0x0, 0x6, 0x80, &(0x7f00000002c0)=""/128}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x29, 0x48, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$sock(r4, &(0x7f0000001500)={&(0x7f0000000000)=@ethernet={0x1, @remote}, 0x80, 0x0}, 0x1) r5 = socket$kcm(0xa, 0x922000000003, 0x11) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x100000000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x0}, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000080)}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e"], 0xfe33) r6 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_ro(r6, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40800000000000073119b00000000008510000002000000b7000000000000009500c200000000009500001200000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@fallback=r0, 0x16, 0x0, 0x91f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000000200)=[0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) 0s ago: executing program 1 (id=2476): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x805, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="18bec893d100000000000000000000000000000071123100000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB], 0x50) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000400), 0x12}, 0x104101, 0x4, 0x0, 0x5, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={0x0, 0x0, 0x2a}, 0x28) bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000001000)=ANY=[], 0x48) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c"], 0x0, 0xfffffffffffffe3d}, 0x28) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89a0, &(0x7f0000000080)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89a2, &(0x7f0000000080)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000002400000024"], 0x0, 0x42, 0x0, 0x1, 0xe988}, 0x28) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x58, &(0x7f0000000300)}, 0x10) socketpair(0x1e, 0x1, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x85, 0x0, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89a2, &(0x7f0000000080)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000100)=0x8, 0x12) socket$kcm(0x10, 0x2, 0x10) socket$kcm(0x10, 0x2, 0x10) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x2, 0x3, 0x2) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): perm+0x271/0x5e0 [ 265.300152][ T8498] ? proc_fault_inject_write+0x360/0x360 [ 265.305826][ T8498] vfs_read+0x28b/0x970 [ 265.310034][ T8498] ? kernel_read+0x1e0/0x1e0 [ 265.314674][ T8498] ? __fget_files+0x28/0x4b0 [ 265.319305][ T8498] ? __fget_files+0x28/0x4b0 [ 265.323935][ T8498] ? __fget_files+0x43d/0x4b0 [ 265.328741][ T8498] ? __fdget_pos+0x2a3/0x330 [ 265.333374][ T8498] ? ksys_read+0x75/0x260 [ 265.337742][ T8498] ksys_read+0x150/0x260 [ 265.342032][ T8498] ? vfs_write+0x990/0x990 [ 265.346485][ T8498] ? lockdep_hardirqs_on+0x98/0x150 [ 265.351725][ T8498] do_syscall_64+0x55/0xb0 [ 265.356171][ T8498] ? clear_bhb_loop+0x40/0x90 [ 265.360873][ T8498] ? clear_bhb_loop+0x40/0x90 [ 265.365607][ T8498] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 265.371569][ T8498] RIP: 0033:0x7f297675d68e [ 265.376026][ T8498] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 265.395711][ T8498] RSP: 002b:00007f2977727fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 265.404155][ T8498] RAX: ffffffffffffffda RBX: 00007f29777286c0 RCX: 00007f297675d68e [ 265.412159][ T8498] RDX: 000000000000000f RSI: 00007f29777280a0 RDI: 0000000000000004 [ 265.420160][ T8498] RBP: 00007f2977728090 R08: 0000000000000000 R09: 0000000000000000 [ 265.428160][ T8498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 265.436172][ T8498] R13: 00007f2976a16128 R14: 00007f2976a16090 R15: 00007fffebfb9598 [ 265.444208][ T8498] [ 266.096552][ T5785] Bluetooth: hci3: ISO packet for unknown connection handle 10 [ 266.687545][ T8525] Ÿë: port 1(gretap0) entered blocking state [ 266.736849][ T8525] Ÿë: port 1(gretap0) entered disabled state [ 266.779884][ T8525] gretap0: entered allmulticast mode [ 266.807019][ T8525] gretap0: entered promiscuous mode [ 266.926212][ T8533] Ÿë: port 2(veth0_to_team) entered blocking state [ 266.951990][ T8533] Ÿë: port 2(veth0_to_team) entered disabled state [ 266.979401][ T8533] veth0_to_team: entered allmulticast mode [ 266.986831][ T8533] veth0_to_team: entered promiscuous mode [ 267.350075][ T5785] Bluetooth: hci3: ISO packet for unknown connection handle 9 [ 267.385350][ T8542] Ÿë: port 2(gretap0) entered blocking state [ 267.392792][ T8542] Ÿë: port 2(gretap0) entered disabled state [ 267.399976][ T8542] gretap0: entered allmulticast mode [ 267.412246][ T8542] gretap0: entered promiscuous mode [ 269.009654][ T5785] Bluetooth: hci3: ISO packet for unknown connection handle 9 [ 269.741726][ T8605] netlink: 60 bytes leftover after parsing attributes in process `syz.3.912'. [ 270.155094][ T5785] Bluetooth: hci0: ISO packet for unknown connection handle 9 [ 272.430845][ T5785] Bluetooth: hci0: ISO packet for unknown connection handle 9 [ 272.488186][ T8659] sctp: [Deprecated]: syz.3.928 (pid 8659) Use of struct sctp_assoc_value in delayed_ack socket option. [ 272.488186][ T8659] Use struct sctp_sack_info instead [ 274.039365][ T8685] netlink: 'syz.0.937': attribute type 21 has an invalid length. [ 274.047337][ T8685] netlink: 14548 bytes leftover after parsing attributes in process `syz.0.937'. [ 274.093947][ T8683] FAULT_INJECTION: forcing a failure. [ 274.093947][ T8683] name failslab, interval 1, probability 0, space 0, times 0 [ 274.107143][ T8683] CPU: 0 PID: 8683 Comm: syz.3.936 Not tainted syzkaller #0 [ 274.114490][ T8683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 274.124645][ T8683] Call Trace: [ 274.128009][ T8683] [ 274.130998][ T8683] dump_stack_lvl+0x18c/0x250 [ 274.135737][ T8683] ? show_regs_print_info+0x20/0x20 [ 274.141000][ T8683] ? load_image+0x420/0x420 [ 274.145576][ T8683] ? verify_lock_unused+0x140/0x140 [ 274.151183][ T8683] ? queue_work_on+0x110/0x1f0 [ 274.156003][ T8683] should_fail_ex+0x39d/0x4d0 [ 274.160754][ T8683] should_failslab+0x9/0x20 [ 274.165318][ T8683] slab_pre_alloc_hook+0x59/0x310 [ 274.170426][ T8683] ? sctp_addr_wq_mgmt+0x2db/0x6d0 [ 274.175606][ T8683] ? sctp_addr_wq_mgmt+0x2db/0x6d0 [ 274.180793][ T8683] __kmem_cache_alloc_node+0x53/0x250 [ 274.186239][ T8683] ? do_raw_spin_lock+0x11f/0x2c0 [ 274.191355][ T8683] ? sctp_addr_wq_mgmt+0x2db/0x6d0 [ 274.196548][ T8683] __kmalloc_node_track_caller+0xa2/0x230 [ 274.202345][ T8683] kmemdup+0x2b/0x70 [ 274.206521][ T8683] sctp_addr_wq_mgmt+0x2db/0x6d0 [ 274.211529][ T8683] ? masq_inet_event+0x1a7/0x250 [ 274.216526][ T8683] ? sctp_inetaddr_event+0xc8/0x5e0 [ 274.221812][ T8683] sctp_inetaddr_event+0x43e/0x5e0 [ 274.227026][ T8683] notifier_call_chain+0x197/0x380 [ 274.232230][ T8683] blocking_notifier_call_chain+0x6a/0x90 [ 274.238028][ T8683] __inet_del_ifa+0x879/0x1020 [ 274.242886][ T8683] devinet_ioctl+0xb40/0x1c40 [ 274.247751][ T8683] ? inet_ifa_byprefix+0x2a0/0x2a0 [ 274.252949][ T8683] ? _copy_from_user+0xa5/0xe0 [ 274.257787][ T8683] ? get_user_ifreq+0x12b/0x180 [ 274.262799][ T8683] inet_ioctl+0x42b/0x560 [ 274.267225][ T8683] ? tomoyo_path_number_perm+0x217/0x620 [ 274.272932][ T8683] ? inet_shutdown+0x370/0x370 [ 274.277770][ T8683] ? slab_free_freelist_hook+0x130/0x1a0 [ 274.283569][ T8683] ? tomoyo_path_number_perm+0x500/0x620 [ 274.289312][ T8683] ? __kmem_cache_free+0xba/0x1e0 [ 274.294452][ T8683] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 274.299992][ T8683] sock_do_ioctl+0xfc/0x310 [ 274.304580][ T8683] ? sock_show_fdinfo+0xb0/0xb0 [ 274.309528][ T8683] sock_ioctl+0x5ba/0x7e0 [ 274.313934][ T8683] ? sock_poll+0x3e0/0x3e0 [ 274.318433][ T8683] ? bpf_lsm_file_ioctl+0x9/0x10 [ 274.323434][ T8683] ? security_file_ioctl+0x80/0xa0 [ 274.328617][ T8683] ? sock_poll+0x3e0/0x3e0 [ 274.333098][ T8683] __se_sys_ioctl+0xfd/0x170 [ 274.337762][ T8683] do_syscall_64+0x55/0xb0 [ 274.342242][ T8683] ? clear_bhb_loop+0x40/0x90 [ 274.346980][ T8683] ? clear_bhb_loop+0x40/0x90 [ 274.351715][ T8683] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 274.357684][ T8683] RIP: 0033:0x7f60df39ce59 [ 274.362157][ T8683] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 274.381827][ T8683] RSP: 002b:00007f60e02cf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 274.390314][ T8683] RAX: ffffffffffffffda RBX: 00007f60df615fa0 RCX: 00007f60df39ce59 [ 274.398364][ T8683] RDX: 0000200000000040 RSI: 0000000000008916 RDI: 0000000000000003 [ 274.406392][ T8683] RBP: 00007f60e02cf090 R08: 0000000000000000 R09: 0000000000000000 [ 274.414423][ T8683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 274.422454][ T8683] R13: 00007f60df616038 R14: 00007f60df615fa0 R15: 00007ffd302911d8 [ 274.430518][ T8683] [ 275.939630][ T8716] sctp: [Deprecated]: syz.1.945 (pid 8716) Use of struct sctp_assoc_value in delayed_ack socket option. [ 275.939630][ T8716] Use struct sctp_sack_info instead [ 277.198759][ T8742] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.950'. [ 277.282839][ T8742] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.950'. [ 277.353569][ T8726] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.950'. [ 277.976503][ T8748] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.950'. [ 277.987027][ T8755] netlink: 'syz.1.950': attribute type 10 has an invalid length. [ 277.996379][ T8755] netlink: 40 bytes leftover after parsing attributes in process `syz.1.950'. [ 278.009014][ T8755] batman_adv: batadv0: Adding interface: veth1_virt_wifi [ 278.021889][ T8755] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 278.050873][ T8755] batman_adv: batadv0: Interface activated: veth1_virt_wifi [ 278.060198][ T8742] netlink: 132 bytes leftover after parsing attributes in process `syz.1.950'. [ 279.541512][ T8785] netlink: 668 bytes leftover after parsing attributes in process `syz.0.966'. [ 279.564140][ T8785] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 279.595499][ T8785] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 283.333845][ T8844] netlink: 'syz.0.988': attribute type 10 has an invalid length. [ 283.342136][ T8844] netlink: 2 bytes leftover after parsing attributes in process `syz.0.988'. [ 283.368311][ T8844] bond0: entered promiscuous mode [ 283.373598][ T8844] bond_slave_0: entered promiscuous mode [ 283.393655][ T8844] bond_slave_1: entered promiscuous mode [ 283.407663][ T8844] bridge0: port 3(bond0) entered blocking state [ 283.432969][ T8844] bridge0: port 3(bond0) entered disabled state [ 283.442412][ T8848] netlink: 'syz.1.987': attribute type 3 has an invalid length. [ 283.449007][ T8844] bond0: entered allmulticast mode [ 283.450775][ T8848] netlink: 132 bytes leftover after parsing attributes in process `syz.1.987'. [ 283.455262][ T8844] bond_slave_0: entered allmulticast mode [ 283.455295][ T8844] bond_slave_1: entered allmulticast mode [ 283.482958][ T8844] bridge0: port 3(bond0) entered blocking state [ 283.489566][ T8844] bridge0: port 3(bond0) entered forwarding state [ 283.746084][ T8854] FAULT_INJECTION: forcing a failure. [ 283.746084][ T8854] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 283.761995][ T8854] CPU: 0 PID: 8854 Comm: syz.2.990 Not tainted syzkaller #0 [ 283.769713][ T8854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 283.779820][ T8854] Call Trace: [ 283.783133][ T8854] [ 283.786095][ T8854] dump_stack_lvl+0x18c/0x250 [ 283.790819][ T8854] ? show_regs_print_info+0x20/0x20 [ 283.796049][ T8854] ? load_image+0x420/0x420 [ 283.800582][ T8854] ? __might_fault+0xaa/0x120 [ 283.805292][ T8854] ? __lock_acquire+0x7d40/0x7d40 [ 283.810359][ T8854] should_fail_ex+0x39d/0x4d0 [ 283.815077][ T8854] _copy_from_iter+0x1d9/0x12e0 [ 283.819966][ T8854] ? __might_fault+0xaa/0x120 [ 283.824674][ T8854] ? _copy_from_iter+0x24e/0x12e0 [ 283.829735][ T8854] ? __virt_addr_valid+0x18c/0x540 [ 283.834879][ T8854] ? __lock_acquire+0x7d40/0x7d40 [ 283.839931][ T8854] ? copyout_mc+0x70/0x70 [ 283.844306][ T8854] ? copyout_mc+0x70/0x70 [ 283.848680][ T8854] ? __virt_addr_valid+0x18c/0x540 [ 283.853825][ T8854] ? page_copy_sane+0x16a/0x270 [ 283.858720][ T8854] copy_page_from_iter+0x7b/0x100 [ 283.863783][ T8854] skb_copy_datagram_from_iter+0x2e4/0x6e0 [ 283.869637][ T8854] tun_get_user+0x15db/0x3ca0 [ 283.874357][ T8854] ? aa_file_perm+0x11b/0xee0 [ 283.879079][ T8854] ? rcu_read_unlock+0xa0/0xa0 [ 283.883893][ T8854] ? tun_get+0x1c/0x2e0 [ 283.888088][ T8854] ? __lock_acquire+0x7d40/0x7d40 [ 283.893152][ T8854] ? tun_get+0x1c/0x2e0 [ 283.897345][ T8854] tun_chr_write_iter+0x119/0x200 [ 283.902408][ T8854] vfs_write+0x46c/0x990 [ 283.906686][ T8854] ? file_end_write+0x250/0x250 [ 283.911578][ T8854] ? __fget_files+0x43d/0x4b0 [ 283.916294][ T8854] ? __fdget_pos+0x1d8/0x330 [ 283.920914][ T8854] ? ksys_write+0x75/0x260 [ 283.925372][ T8854] ksys_write+0x150/0x260 [ 283.929742][ T8854] ? __ia32_sys_read+0x90/0x90 [ 283.934981][ T8854] ? lockdep_hardirqs_on+0x98/0x150 [ 283.940216][ T8854] do_syscall_64+0x55/0xb0 [ 283.944661][ T8854] ? clear_bhb_loop+0x40/0x90 [ 283.949398][ T8854] ? clear_bhb_loop+0x40/0x90 [ 283.954111][ T8854] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 283.960042][ T8854] RIP: 0033:0x7f297679ce59 [ 283.964524][ T8854] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 283.984160][ T8854] RSP: 002b:00007f2977749028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 283.992610][ T8854] RAX: ffffffffffffffda RBX: 00007f2976a15fa0 RCX: 00007f297679ce59 [ 284.000611][ T8854] RDX: 000000000000ffc0 RSI: 0000200000000000 RDI: 00000000000000c8 [ 284.008612][ T8854] RBP: 00007f2977749090 R08: 0000000000000000 R09: 0000000000000000 [ 284.016619][ T8854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 284.024622][ T8854] R13: 00007f2976a16038 R14: 00007f2976a15fa0 R15: 00007fffebfb9598 [ 284.032635][ T8854] [ 284.887962][ T5785] Bluetooth: hci0: ISO packet for unknown connection handle 10 [ 284.911072][ T8872] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.994'. [ 284.933082][ T8872] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 284.942295][ T8872] openvswitch: netlink: Key 0 has unexpected len 12 expected 0 [ 284.988751][ T8873] netlink: 668 bytes leftover after parsing attributes in process `syz.2.995'. [ 285.018152][ T8873] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 285.027467][ T8873] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 286.654753][ T8904] netlink: 'syz.1.1002': attribute type 30 has an invalid length. [ 286.696236][ T8895] netlink: 'syz.2.999': attribute type 3 has an invalid length. [ 286.714713][ T8895] netlink: 132 bytes leftover after parsing attributes in process `syz.2.999'. [ 287.324296][ T8917] Ÿë: port 3(ip6gretap0) entered blocking state [ 287.338826][ T8917] Ÿë: port 3(ip6gretap0) entered disabled state [ 287.349515][ T8917] ip6gretap0: entered allmulticast mode [ 287.363829][ T8917] ip6gretap0: entered promiscuous mode [ 287.884047][ T8928] netlink: 668 bytes leftover after parsing attributes in process `syz.3.1009'. [ 287.899772][ T8928] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 287.918605][ T8928] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 289.038809][ T8949] netlink: 'syz.3.1017': attribute type 11 has an invalid length. [ 289.123487][ T8949] netlink: 184116 bytes leftover after parsing attributes in process `syz.3.1017'. [ 289.437646][ T8961] netlink: 'syz.3.1019': attribute type 9 has an invalid length. [ 289.471036][ T8961] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1019'. [ 289.517137][ T8962] Ÿë: port 3(ip6gretap0) entered blocking state [ 289.554401][ T8962] Ÿë: port 3(ip6gretap0) entered disabled state [ 289.567712][ T8962] ip6gretap0: entered allmulticast mode [ 289.591514][ T8962] ip6gretap0: entered promiscuous mode [ 289.726152][ T8964] netlink: 'syz.3.1019': attribute type 9 has an invalid length. [ 289.797934][ T8964] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1019'. [ 290.183913][ T8972] netlink: 'syz.2.1022': attribute type 19 has an invalid length. [ 290.614012][ T8985] netlink: 668 bytes leftover after parsing attributes in process `syz.1.1026'. [ 290.624700][ T8985] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 290.642655][ T8985] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 290.799556][ T8994] Ÿë: port 3(ip6gretap0) entered blocking state [ 290.842889][ T8994] Ÿë: port 3(ip6gretap0) entered disabled state [ 290.869584][ T8994] ip6gretap0: entered allmulticast mode [ 290.965604][ T8994] ip6gretap0: entered promiscuous mode [ 291.031832][ T8995] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 291.039769][ T8995] IPv6: NLM_F_CREATE should be set when creating new route [ 291.047159][ T8995] IPv6: NLM_F_CREATE should be set when creating new route [ 291.054563][ T8995] IPv6: NLM_F_CREATE should be set when creating new route [ 291.121860][ T8991] netlink: 15231 bytes leftover after parsing attributes in process `syz.0.1029'. [ 291.245288][ T8991] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 291.253293][ T8991] syzkaller1: linktype set to 769 [ 292.737279][ T9031] Ÿë: port 3(ip6gretap0) entered blocking state [ 292.758277][ T9031] Ÿë: port 3(ip6gretap0) entered disabled state [ 292.784416][ T9031] ip6gretap0: entered allmulticast mode [ 292.850115][ T9031] ip6gretap0: entered promiscuous mode [ 293.154944][ T9039] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 293.162316][ T9039] IPv6: NLM_F_CREATE should be set when creating new route [ 293.169688][ T9039] IPv6: NLM_F_CREATE should be set when creating new route [ 293.177001][ T9039] IPv6: NLM_F_CREATE should be set when creating new route [ 293.220026][ T9039] netlink: 14975 bytes leftover after parsing attributes in process `syz.3.1046'. [ 293.424659][ T9044] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 293.445954][ T9044] syzkaller1: linktype set to 769 [ 293.478708][ T9047] netlink: 'syz.2.1048': attribute type 10 has an invalid length. [ 293.521517][ T9047] veth1_macvtap: left promiscuous mode [ 294.276981][ T9068] FAULT_INJECTION: forcing a failure. [ 294.276981][ T9068] name failslab, interval 1, probability 0, space 0, times 0 [ 294.304668][ T9068] CPU: 1 PID: 9068 Comm: syz.1.1056 Not tainted syzkaller #0 [ 294.312141][ T9068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 294.322249][ T9068] Call Trace: [ 294.325573][ T9068] [ 294.328542][ T9068] dump_stack_lvl+0x18c/0x250 [ 294.333267][ T9068] ? sctp_sendmsg+0x15d2/0x2910 [ 294.338170][ T9068] ? ___sys_sendmsg+0x2a6/0x360 [ 294.343079][ T9068] ? show_regs_print_info+0x20/0x20 [ 294.348425][ T9068] ? load_image+0x420/0x420 [ 294.352981][ T9068] ? mark_lock+0x94/0x320 [ 294.357368][ T9068] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 294.363797][ T9068] should_fail_ex+0x39d/0x4d0 [ 294.368560][ T9068] should_failslab+0x9/0x20 [ 294.373129][ T9068] slab_pre_alloc_hook+0x59/0x310 [ 294.378215][ T9068] ? sctp_add_bind_addr+0x8c/0x360 [ 294.383472][ T9068] __kmem_cache_alloc_node+0x53/0x250 [ 294.388917][ T9068] ? sctp_add_bind_addr+0x8c/0x360 [ 294.394092][ T9068] kmalloc_trace+0x2a/0xe0 [ 294.398573][ T9068] sctp_add_bind_addr+0x8c/0x360 [ 294.403577][ T9068] sctp_copy_local_addr_list+0x315/0x4f0 [ 294.409300][ T9068] ? sctp_copy_local_addr_list+0xa5/0x4f0 [ 294.415102][ T9068] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 294.421257][ T9068] ? sctp_v4_is_any+0x35/0x60 [ 294.426008][ T9068] ? sctp_copy_one_addr+0x8c/0x350 [ 294.431199][ T9068] sctp_bind_addr_copy+0xb3/0x3c0 [ 294.436304][ T9068] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 294.442721][ T9068] sctp_connect_new_asoc+0x2f9/0x6a0 [ 294.448090][ T9068] ? __sctp_connect+0xd80/0xd80 [ 294.453013][ T9068] ? __local_bh_enable_ip+0x13a/0x1c0 [ 294.458464][ T9068] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 294.464095][ T9068] ? security_sctp_bind_connect+0x89/0xb0 [ 294.469902][ T9068] sctp_sendmsg+0x15d2/0x2910 [ 294.474690][ T9068] ? sctp_getsockopt+0xb60/0xb60 [ 294.479709][ T9068] ? aa_sk_perm+0x83c/0x970 [ 294.484292][ T9068] ? aa_af_perm+0x330/0x330 [ 294.488854][ T9068] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 294.495350][ T9068] ? sock_rps_record_flow+0x19/0x3f0 [ 294.500733][ T9068] ? inet_sendmsg+0xe9/0x2f0 [ 294.505406][ T9068] ? inet_send_prepare+0x260/0x260 [ 294.510593][ T9068] ____sys_sendmsg+0x5ba/0x960 [ 294.515429][ T9068] ? __lock_acquire+0x7d40/0x7d40 [ 294.520546][ T9068] ? __asan_memset+0x22/0x40 [ 294.525206][ T9068] ? __sys_sendmsg_sock+0x30/0x30 [ 294.530302][ T9068] ? __import_iovec+0x5f2/0x850 [ 294.535235][ T9068] ? import_iovec+0x73/0xa0 [ 294.539812][ T9068] ___sys_sendmsg+0x2a6/0x360 [ 294.544624][ T9068] ? __sys_sendmsg+0x2a0/0x2a0 [ 294.549597][ T9068] ? preempt_schedule_irq+0xea/0x150 [ 294.555075][ T9068] __se_sys_sendmsg+0x1c2/0x2b0 [ 294.560005][ T9068] ? __x64_sys_sendmsg+0x80/0x80 [ 294.565107][ T9068] ? syscall_enter_from_user_mode+0x2e/0x80 [ 294.571074][ T9068] do_syscall_64+0x55/0xb0 [ 294.575561][ T9068] ? clear_bhb_loop+0x40/0x90 [ 294.580365][ T9068] ? clear_bhb_loop+0x40/0x90 [ 294.585113][ T9068] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 294.591077][ T9068] RIP: 0033:0x7f01d879ce59 [ 294.595539][ T9068] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 294.615286][ T9068] RSP: 002b:00007f01d96aa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 294.623758][ T9068] RAX: ffffffffffffffda RBX: 00007f01d8a15fa0 RCX: 00007f01d879ce59 [ 294.631782][ T9068] RDX: 0000000024004800 RSI: 00002000000010c0 RDI: 0000000000000005 [ 294.639808][ T9068] RBP: 00007f01d96aa090 R08: 0000000000000000 R09: 0000000000000000 [ 294.647835][ T9068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 294.655857][ T9068] R13: 00007f01d8a16038 R14: 00007f01d8a15fa0 R15: 00007ffd129145e8 [ 294.663908][ T9068] [ 295.219354][ T5785] Bluetooth: hci1: unexpected event 0x05 length: 15 > 4 [ 295.315618][ T9088] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 295.330059][ T9088] IPv6: NLM_F_CREATE should be set when creating new route [ 295.337410][ T9088] IPv6: NLM_F_CREATE should be set when creating new route [ 295.344760][ T9088] IPv6: NLM_F_CREATE should be set when creating new route [ 295.433492][ T9087] netlink: 14975 bytes leftover after parsing attributes in process `syz.2.1063'. [ 295.682468][ T9090] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 295.691112][ T9090] syzkaller1: linktype set to 769 [ 296.736284][ T9099] netlink: 'syz.0.1065': attribute type 9 has an invalid length. [ 296.756027][ T9099] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1065'. [ 297.115947][ T9108] netlink: 'syz.0.1065': attribute type 9 has an invalid length. [ 297.129734][ T9108] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1065'. [ 298.163094][ T5785] Bluetooth: hci0: unexpected event 0x05 length: 15 > 4 [ 299.418329][ T5785] Bluetooth: hci0: ISO packet for unknown connection handle 10 [ 299.633406][ T9152] netlink: 'syz.0.1080': attribute type 10 has an invalid length. [ 299.656497][ T9152] veth1_macvtap: left promiscuous mode [ 300.026226][ T9145] delete_channel: no stack [ 300.165846][ T9163] netlink: 'syz.2.1083': attribute type 9 has an invalid length. [ 300.215041][ T9163] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1083'. [ 300.515096][ T9169] netlink: 'syz.2.1083': attribute type 9 has an invalid length. [ 300.546164][ T9169] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1083'. [ 302.061723][ T9210] netlink: 'syz.1.1100': attribute type 9 has an invalid length. [ 302.145558][ T9210] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1100'. [ 302.186820][ T9200] delete_channel: no stack [ 302.334036][ T9211] netlink: 'syz.1.1100': attribute type 9 has an invalid length. [ 302.369497][ T9211] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1100'. [ 303.639756][ T9242] delete_channel: no stack [ 304.377588][ T9272] hsr0: left allmulticast mode [ 304.388119][ T9272] hsr_slave_0: left allmulticast mode [ 304.398347][ T9272] hsr_slave_1: left allmulticast mode [ 304.415898][ T9272] bridge0: port 3(hsr0) entered disabled state [ 304.611507][ T9272] bridge_slave_1: left allmulticast mode [ 304.637040][ T9272] bridge_slave_1: left promiscuous mode [ 304.749598][ T9272] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.797384][ T9272] bridge_slave_0: left allmulticast mode [ 304.838857][ T9272] bridge_slave_0: left promiscuous mode [ 304.871569][ T9272] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.531160][ T9274] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1121'. [ 305.554768][ T9287] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1123'. [ 305.565212][ T9287] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1123'. [ 305.592841][ T9287] bond0: (slave bond_slave_0): Releasing backup interface [ 305.654462][ T9287] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 306.176128][ T9310] netlink: 'syz.0.1131': attribute type 9 has an invalid length. [ 306.211373][ T9310] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1131'. [ 306.239693][ T9298] delete_channel: no stack [ 306.484078][ T9312] netlink: 'syz.0.1131': attribute type 9 has an invalid length. [ 306.544385][ T9312] netlink: 200024 bytes leftover after parsing attributes in process `syz.0.1131'. [ 308.901896][ T5785] Bluetooth: hci1: ISO packet for unknown connection handle 11 [ 311.726082][ T9410] netlink: 'syz.0.1169': attribute type 29 has an invalid length. [ 311.768181][ T9410] netlink: 'syz.0.1169': attribute type 29 has an invalid length. [ 311.842753][ T9410] netlink: 'syz.0.1169': attribute type 29 has an invalid length. [ 311.973969][ T9415] netlink: 'syz.0.1169': attribute type 29 has an invalid length. [ 313.444010][ T5785] Bluetooth: hci0: unexpected event 0x05 length: 15 > 4 [ 316.010893][ T9457] netlink: 'syz.0.1174': attribute type 29 has an invalid length. [ 316.026325][ T9457] netlink: 'syz.0.1174': attribute type 29 has an invalid length. [ 316.046378][ T9457] netlink: 'syz.0.1174': attribute type 29 has an invalid length. [ 316.057212][ T9457] netlink: 'syz.0.1174': attribute type 29 has an invalid length. [ 316.078457][ T9457] netlink: 'syz.0.1174': attribute type 29 has an invalid length. [ 317.372087][ T9476] netlink: 'syz.1.1181': attribute type 9 has an invalid length. [ 317.396196][ T5785] Bluetooth: hci0: unexpected event 0x05 length: 15 > 4 [ 317.410327][ T9476] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1181'. [ 317.446553][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.454205][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.542829][ T9478] netlink: 'syz.3.1182': attribute type 10 has an invalid length. [ 318.997617][ T9503] netlink: 'syz.0.1189': attribute type 9 has an invalid length. [ 319.367863][ T9503] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1189'. [ 320.120244][ T5785] Bluetooth: hci3: unexpected event 0x05 length: 15 > 4 [ 320.143661][ T5785] Bluetooth: hci2: ISO packet for unknown connection handle 10 [ 321.282023][ T9534] netlink: 'syz.0.1203': attribute type 9 has an invalid length. [ 321.320533][ T9534] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1203'. [ 322.262465][ T9553] netlink: 'syz.0.1210': attribute type 9 has an invalid length. [ 322.288190][ T9553] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1210'. [ 322.377438][ T9561] FAULT_INJECTION: forcing a failure. [ 322.377438][ T9561] name failslab, interval 1, probability 0, space 0, times 0 [ 322.433258][ T9561] CPU: 1 PID: 9561 Comm: syz.1.1212 Not tainted syzkaller #0 [ 322.440749][ T9561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 322.450891][ T9561] Call Trace: [ 322.454231][ T9561] [ 322.457220][ T9561] dump_stack_lvl+0x18c/0x250 [ 322.461982][ T9561] ? show_regs_print_info+0x20/0x20 [ 322.467259][ T9561] ? load_image+0x420/0x420 [ 322.471845][ T9561] ? verify_lock_unused+0x140/0x140 [ 322.477134][ T9561] ? perf_trace_lock+0xfc/0x3b0 [ 322.482072][ T9561] should_fail_ex+0x39d/0x4d0 [ 322.486829][ T9561] should_failslab+0x9/0x20 [ 322.491464][ T9561] slab_pre_alloc_hook+0x59/0x310 [ 322.496587][ T9561] kmem_cache_alloc+0x5a/0x2d0 [ 322.501438][ T9561] ? skb_clone+0x1eb/0x370 [ 322.505938][ T9561] skb_clone+0x1eb/0x370 [ 322.510274][ T9561] __netlink_deliver_tap+0x41c/0x830 [ 322.515646][ T9561] ? netlink_deliver_tap+0x2e/0x1b0 [ 322.520922][ T9561] netlink_deliver_tap+0x19c/0x1b0 [ 322.526140][ T9561] netlink_sendskb+0x68/0x130 [ 322.530908][ T9561] netlink_ack+0xce1/0x1180 [ 322.535516][ T9561] ? netlink_dump+0xe50/0xe50 [ 322.540255][ T9561] ? perf_trace_lock+0xfc/0x3b0 [ 322.545189][ T9561] netlink_rcv_skb+0x2c5/0x4d0 [ 322.550016][ T9561] ? rtnetlink_bind+0x80/0x80 [ 322.554772][ T9561] ? netlink_ack+0x1180/0x1180 [ 322.559628][ T9561] ? __lock_acquire+0x7d40/0x7d40 [ 322.564745][ T9561] ? netlink_deliver_tap+0x2e/0x1b0 [ 322.570022][ T9561] netlink_unicast+0x751/0x8d0 [ 322.574882][ T9561] netlink_sendmsg+0x8d0/0xbf0 [ 322.579824][ T9561] ? netlink_getsockopt+0x590/0x590 [ 322.585112][ T9561] ? aa_sock_msg_perm+0x94/0x150 [ 322.590131][ T9561] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 322.595510][ T9561] ? security_socket_sendmsg+0x80/0xa0 [ 322.601048][ T9561] ? netlink_getsockopt+0x590/0x590 [ 322.606312][ T9561] ____sys_sendmsg+0x5ba/0x960 [ 322.611157][ T9561] ? __asan_memset+0x22/0x40 [ 322.615902][ T9561] ? __sys_sendmsg_sock+0x30/0x30 [ 322.620990][ T9561] ? __import_iovec+0x3fa/0x850 [ 322.625911][ T9561] ? import_iovec+0x73/0xa0 [ 322.630508][ T9561] ___sys_sendmsg+0x2a6/0x360 [ 322.635261][ T9561] ? __sys_sendmsg+0x2a0/0x2a0 [ 322.640123][ T9561] ? __lock_acquire+0x7d40/0x7d40 [ 322.645267][ T9561] __se_sys_sendmsg+0x1c2/0x2b0 [ 322.650184][ T9561] ? __x64_sys_sendmsg+0x80/0x80 [ 322.655204][ T9561] ? lockdep_hardirqs_on+0x98/0x150 [ 322.660478][ T9561] do_syscall_64+0x55/0xb0 [ 322.664952][ T9561] ? clear_bhb_loop+0x40/0x90 [ 322.669681][ T9561] ? clear_bhb_loop+0x40/0x90 [ 322.674435][ T9561] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 322.680402][ T9561] RIP: 0033:0x7f01d879ce59 [ 322.684879][ T9561] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 322.704543][ T9561] RSP: 002b:00007f01d96aa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 322.713040][ T9561] RAX: ffffffffffffffda RBX: 00007f01d8a15fa0 RCX: 00007f01d879ce59 [ 322.721069][ T9561] RDX: 0000000004000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 322.729094][ T9561] RBP: 00007f01d96aa090 R08: 0000000000000000 R09: 0000000000000000 [ 322.737132][ T9561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 322.745200][ T9561] R13: 00007f01d8a16038 R14: 00007f01d8a15fa0 R15: 00007ffd129145e8 [ 322.753260][ T9561] [ 322.844613][ T5785] Bluetooth: hci3: ISO packet for unknown connection handle 10 [ 322.909865][ T5785] Bluetooth: hci1: unexpected event 0x05 length: 15 > 4 [ 325.658958][ T5785] Bluetooth: hci3: unexpected event 0x05 length: 15 > 4 [ 326.336212][ T9631] netlink: 'syz.0.1238': attribute type 29 has an invalid length. [ 326.994151][ T9631] netlink: 'syz.0.1238': attribute type 29 has an invalid length. [ 327.022304][ T9634] netlink: 'syz.0.1238': attribute type 29 has an invalid length. [ 327.033098][ T9636] netlink: 'syz.0.1238': attribute type 29 has an invalid length. [ 328.060285][ T5785] Bluetooth: hci1: ISO packet for unknown connection handle 10 [ 329.055175][ T5785] Bluetooth: hci0: unexpected event 0x05 length: 15 > 4 [ 330.362619][ T9716] netlink: 'syz.0.1266': attribute type 29 has an invalid length. [ 330.378211][ T9716] netlink: 'syz.0.1266': attribute type 29 has an invalid length. [ 330.402744][ T9716] netlink: 'syz.0.1266': attribute type 29 has an invalid length. [ 330.434178][ T9716] netlink: 'syz.0.1266': attribute type 29 has an invalid length. [ 330.446744][ T9716] netlink: 'syz.0.1266': attribute type 29 has an invalid length. [ 331.372930][ T9742] netlink: 'syz.3.1271': attribute type 41 has an invalid length. [ 331.430827][ T5785] Bluetooth: hci1: unexpected event 0x05 length: 15 > 4 [ 331.950131][ T9757] netlink: 'syz.2.1277': attribute type 29 has an invalid length. [ 331.971748][ T9757] netlink: 'syz.2.1277': attribute type 29 has an invalid length. [ 331.984595][ T9757] netlink: 'syz.2.1277': attribute type 29 has an invalid length. [ 332.001856][ T9757] netlink: 'syz.2.1277': attribute type 29 has an invalid length. [ 332.010936][ T9757] netlink: 'syz.2.1277': attribute type 29 has an invalid length. [ 333.919169][ T9787] netlink: 'syz.2.1286': attribute type 29 has an invalid length. [ 333.964583][ T9787] netlink: 'syz.2.1286': attribute type 29 has an invalid length. [ 333.978883][ T9787] netlink: 'syz.2.1286': attribute type 29 has an invalid length. [ 333.988783][ T9787] netlink: 'syz.2.1286': attribute type 29 has an invalid length. [ 334.098669][ T5785] Bluetooth: hci2: unexpected event 0x09 length: 151 > 3 [ 335.705763][ T5785] Bluetooth: hci3: unexpected event 0x09 length: 151 > 3 [ 336.546750][ T9844] validate_nla: 6 callbacks suppressed [ 336.546769][ T9844] netlink: 'syz.0.1308': attribute type 29 has an invalid length. [ 336.638709][ T9844] netlink: 'syz.0.1308': attribute type 29 has an invalid length. [ 336.660842][ T9846] netlink: 'syz.0.1308': attribute type 29 has an invalid length. [ 336.706059][ T9844] netlink: 'syz.0.1308': attribute type 29 has an invalid length. [ 336.724888][ T9844] netlink: 'syz.0.1308': attribute type 29 has an invalid length. [ 336.894183][ T5785] Bluetooth: hci3: unexpected event 0x09 length: 151 > 3 [ 338.221013][ T9887] netlink: 'syz.3.1323': attribute type 29 has an invalid length. [ 338.241811][ T9887] netlink: 'syz.3.1323': attribute type 29 has an invalid length. [ 338.257594][ T9887] netlink: 'syz.3.1323': attribute type 29 has an invalid length. [ 338.276872][ T9887] netlink: 'syz.3.1323': attribute type 29 has an invalid length. [ 338.337637][ T9887] netlink: 'syz.3.1323': attribute type 29 has an invalid length. [ 338.519932][ T5785] Bluetooth: hci0: unexpected event 0x09 length: 151 > 3 [ 338.724324][ T9900] FAULT_INJECTION: forcing a failure. [ 338.724324][ T9900] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 338.750672][ T9900] CPU: 1 PID: 9900 Comm: syz.0.1328 Not tainted syzkaller #0 [ 338.758133][ T9900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 338.768242][ T9900] Call Trace: [ 338.771558][ T9900] [ 338.774526][ T9900] dump_stack_lvl+0x18c/0x250 [ 338.779267][ T9900] ? show_regs_print_info+0x20/0x20 [ 338.784527][ T9900] ? load_image+0x420/0x420 [ 338.789091][ T9900] ? __might_fault+0xaa/0x120 [ 338.793837][ T9900] ? __lock_acquire+0x7d40/0x7d40 [ 338.798929][ T9900] should_fail_ex+0x39d/0x4d0 [ 338.803783][ T9900] _copy_from_iter+0x1d9/0x12e0 [ 338.808702][ T9900] ? __might_fault+0xaa/0x120 [ 338.813437][ T9900] ? _copy_from_iter+0x24e/0x12e0 [ 338.818530][ T9900] ? __virt_addr_valid+0x18c/0x540 [ 338.823798][ T9900] ? __lock_acquire+0x7d40/0x7d40 [ 338.828887][ T9900] ? copyout_mc+0x70/0x70 [ 338.833281][ T9900] ? copyout_mc+0x70/0x70 [ 338.837667][ T9900] ? __virt_addr_valid+0x18c/0x540 [ 338.842852][ T9900] ? page_copy_sane+0x16a/0x270 [ 338.847780][ T9900] copy_page_from_iter+0x7b/0x100 [ 338.852861][ T9900] skb_copy_datagram_from_iter+0x2e4/0x6e0 [ 338.858739][ T9900] tun_get_user+0x15db/0x3ca0 [ 338.863487][ T9900] ? aa_file_perm+0x11b/0xee0 [ 338.868235][ T9900] ? rcu_read_unlock+0xa0/0xa0 [ 338.873073][ T9900] ? tun_get+0x1c/0x2e0 [ 338.877292][ T9900] ? __lock_acquire+0x7d40/0x7d40 [ 338.882412][ T9900] ? tun_get+0x1c/0x2e0 [ 338.886630][ T9900] tun_chr_write_iter+0x119/0x200 [ 338.891718][ T9900] vfs_write+0x46c/0x990 [ 338.896035][ T9900] ? file_end_write+0x250/0x250 [ 338.900958][ T9900] ? __fget_files+0x43d/0x4b0 [ 338.905869][ T9900] ? __fdget_pos+0x1d8/0x330 [ 338.910529][ T9900] ? ksys_write+0x75/0x260 [ 338.915022][ T9900] ksys_write+0x150/0x260 [ 338.919420][ T9900] ? __ia32_sys_read+0x90/0x90 [ 338.924247][ T9900] ? lockdep_hardirqs_on+0x98/0x150 [ 338.929521][ T9900] do_syscall_64+0x55/0xb0 [ 338.933997][ T9900] ? clear_bhb_loop+0x40/0x90 [ 338.938717][ T9900] ? clear_bhb_loop+0x40/0x90 [ 338.943438][ T9900] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 338.949385][ T9900] RIP: 0033:0x7f24c699ce59 [ 338.953853][ T9900] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 338.973520][ T9900] RSP: 002b:00007f24c78cb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 338.981999][ T9900] RAX: ffffffffffffffda RBX: 00007f24c6c15fa0 RCX: 00007f24c699ce59 [ 338.990033][ T9900] RDX: 000000000000ffc0 RSI: 0000200000000000 RDI: 00000000000000c8 [ 338.998060][ T9900] RBP: 00007f24c78cb090 R08: 0000000000000000 R09: 0000000000000000 [ 339.006092][ T9900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 339.014131][ T9900] R13: 00007f24c6c16038 R14: 00007f24c6c15fa0 R15: 00007fff7b115f38 [ 339.022179][ T9900] [ 343.489617][ T5785] Bluetooth: hci1: unexpected event 0x05 length: 15 > 4 [ 345.230188][ T5785] Bluetooth: hci1: unexpected event 0x09 length: 151 > 3 [ 346.009711][ T5785] Bluetooth: hci1: unexpected event 0x05 length: 15 > 4 [ 347.366110][T10040] netlink: 'syz.1.1377': attribute type 29 has an invalid length. [ 347.384325][T10040] netlink: 'syz.1.1377': attribute type 29 has an invalid length. [ 347.394215][T10040] netlink: 'syz.1.1377': attribute type 29 has an invalid length. [ 347.404281][T10040] netlink: 'syz.1.1377': attribute type 29 has an invalid length. [ 347.413216][T10040] netlink: 'syz.1.1377': attribute type 29 has an invalid length. [ 347.432255][ T5785] Bluetooth: hci2: unexpected event 0x09 length: 151 > 3 [ 348.324263][ T5785] Bluetooth: hci3: unexpected event 0x05 length: 15 > 4 [ 349.821905][T10081] netlink: 'syz.0.1389': attribute type 29 has an invalid length. [ 349.910420][T10081] netlink: 'syz.0.1389': attribute type 29 has an invalid length. [ 349.959928][T10082] netlink: 'syz.0.1389': attribute type 29 has an invalid length. [ 350.094337][T10081] netlink: 'syz.0.1389': attribute type 29 has an invalid length. [ 350.552996][T10094] netlink: 'syz.2.1401': attribute type 29 has an invalid length. [ 351.644097][ T5785] Bluetooth: hci0: unexpected event 0x05 length: 15 > 4 [ 353.492006][T10135] validate_nla: 4 callbacks suppressed [ 353.492026][T10135] netlink: 'syz.0.1405': attribute type 29 has an invalid length. [ 353.616702][T10135] netlink: 'syz.0.1405': attribute type 29 has an invalid length. [ 353.658896][T10137] netlink: 'syz.0.1405': attribute type 29 has an invalid length. [ 353.789377][T10138] netlink: 'syz.0.1405': attribute type 29 has an invalid length. [ 354.991817][ T5785] Bluetooth: hci1: unexpected event 0x05 length: 15 > 4 [ 355.156086][T10168] netlink: 'syz.2.1416': attribute type 29 has an invalid length. [ 355.190546][T10168] netlink: 'syz.2.1416': attribute type 29 has an invalid length. [ 355.228513][T10168] netlink: 'syz.2.1416': attribute type 29 has an invalid length. [ 355.248214][T10168] netlink: 'syz.2.1416': attribute type 29 has an invalid length. [ 355.262887][T10168] netlink: 'syz.2.1416': attribute type 29 has an invalid length. [ 357.600493][ T5785] Bluetooth: hci1: unexpected event 0x05 length: 15 > 4 [ 358.965879][T10232] netlink: 'syz.1.1436': attribute type 29 has an invalid length. [ 359.106983][T10232] netlink: 'syz.1.1436': attribute type 29 has an invalid length. [ 359.142169][T10233] netlink: 'syz.1.1436': attribute type 29 has an invalid length. [ 359.158338][T10234] netlink: 'syz.1.1436': attribute type 29 has an invalid length. [ 359.993064][T10260] netlink: 'syz.2.1445': attribute type 29 has an invalid length. [ 360.004996][T10260] netlink: 'syz.2.1445': attribute type 29 has an invalid length. [ 360.015027][T10260] netlink: 'syz.2.1445': attribute type 29 has an invalid length. [ 360.023884][T10260] netlink: 'syz.2.1445': attribute type 29 has an invalid length. [ 360.159074][T10262] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1446'. [ 361.567465][T10297] netlink: 'syz.2.1455': attribute type 29 has an invalid length. [ 361.646324][T10297] netlink: 'syz.2.1455': attribute type 29 has an invalid length. [ 362.773259][T10316] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.1459'. [ 364.384183][T10352] validate_nla: 12 callbacks suppressed [ 364.384205][T10352] netlink: 'syz.2.1470': attribute type 29 has an invalid length. [ 364.655741][T10352] netlink: 'syz.2.1470': attribute type 29 has an invalid length. [ 364.669820][T10355] netlink: 'syz.2.1470': attribute type 29 has an invalid length. [ 364.685752][T10356] netlink: 'syz.2.1470': attribute type 29 has an invalid length. [ 365.511749][T10377] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1477'. [ 375.360909][ T5785] Bluetooth: hci0: unexpected event 0x05 length: 15 > 4 [ 378.881930][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.899780][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.281779][T10563] netlink: 'syz.3.1535': attribute type 1 has an invalid length. [ 380.425118][ T5785] Bluetooth: hci1: unexpected event 0x05 length: 15 > 4 [ 384.041385][T10613] netlink: 'syz.1.1548': attribute type 1 has an invalid length. [ 384.323161][ T5785] Bluetooth: hci3: ISO packet for unknown connection handle 10 [ 386.873879][ T5785] Bluetooth: hci1: ISO packet for unknown connection handle 10 [ 387.070537][ T5790] Bluetooth: hci0: ISO packet for unknown connection handle 10 [ 388.125334][ T5790] Bluetooth: hci1: ISO packet for unknown connection handle 10 [ 388.161089][T10682] netlink: 'syz.0.1572': attribute type 1 has an invalid length. [ 388.211541][T10682] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.1572'. [ 388.696381][T10702] netlink: 'syz.1.1576': attribute type 10 has an invalid length. [ 388.812162][T10702] team0: Port device wlan1 added [ 390.917200][T10751] netlink: 'syz.1.1596': attribute type 3 has an invalid length. [ 390.931958][T10751] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.1596'. [ 392.914097][T10798] netlink: 'syz.1.1615': attribute type 29 has an invalid length. [ 392.926324][T10798] netlink: 'syz.1.1615': attribute type 29 has an invalid length. [ 392.968051][T10798] netlink: 'syz.1.1615': attribute type 29 has an invalid length. [ 392.988645][T10798] netlink: 'syz.1.1615': attribute type 29 has an invalid length. [ 393.114762][T10798] netlink: 'syz.1.1615': attribute type 29 has an invalid length. [ 393.141978][T10798] netlink: 'syz.1.1615': attribute type 29 has an invalid length. [ 395.248551][ T5790] Bluetooth: hci1: ISO packet for unknown connection handle 10 [ 395.743775][ T5790] Bluetooth: hci1: unexpected event 0x05 length: 15 > 4 [ 395.828471][T10840] netlink: 'syz.2.1628': attribute type 3 has an invalid length. [ 395.858256][T10840] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.1628'. [ 395.901916][ T5790] Bluetooth: hci2: unexpected event 0x05 length: 15 > 4 [ 396.122753][T10845] syzkaller0: entered promiscuous mode [ 396.139900][T10845] syzkaller0: entered allmulticast mode [ 398.010921][ T5790] Bluetooth: hci2: unexpected event 0x05 length: 15 > 4 [ 399.542537][ T5790] Bluetooth: hci0: unexpected event 0x05 length: 15 > 4 [ 400.809895][ T5790] Bluetooth: hci3: unexpected event 0x05 length: 15 > 4 [ 402.191645][ T5790] Bluetooth: hci3: unexpected event 0x05 length: 15 > 4 [ 402.257208][ T5790] Bluetooth: hci1: unexpected event 0x05 length: 15 > 4 [ 402.901727][T10970] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1671'. [ 402.930327][T10970] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1671'. [ 402.943767][T10967] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1671'. [ 402.984910][T10972] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1671'. [ 403.186071][ T5790] Bluetooth: hci1: unexpected event 0x05 length: 15 > 4 [ 403.265610][T10984] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.1679'. [ 404.178884][T11002] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1686'. [ 404.262016][T11002] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1686'. [ 404.315233][T11001] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1686'. [ 404.327273][T11006] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1686'. [ 404.511340][ T5790] Bluetooth: hci0: unexpected event 0x05 length: 15 > 4 [ 405.651850][ T5790] Bluetooth: hci1: unexpected event 0x05 length: 15 > 4 [ 406.804888][ T5790] Bluetooth: hci1: unexpected event 0x05 length: 15 > 4 [ 407.883618][ T5790] Bluetooth: hci0: unexpected event 0x05 length: 15 > 4 [ 408.812530][ T5790] Bluetooth: hci1: unexpected event 0x05 length: 15 > 4 [ 410.757391][ T5790] Bluetooth: hci0: unexpected event 0x05 length: 15 > 4 [ 410.893653][ T5790] Bluetooth: hci2: ISO packet for unknown connection handle 10 [ 411.365934][T11188] FAULT_INJECTION: forcing a failure. [ 411.365934][T11188] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 411.392999][T11188] CPU: 0 PID: 11188 Comm: syz.0.1759 Not tainted syzkaller #0 [ 411.400633][T11188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 411.410742][T11188] Call Trace: [ 411.414152][T11188] [ 411.417122][T11188] dump_stack_lvl+0x18c/0x250 [ 411.421884][T11188] ? show_regs_print_info+0x20/0x20 [ 411.427115][T11188] ? load_image+0x420/0x420 [ 411.431651][T11188] ? __might_fault+0xaa/0x120 [ 411.436368][T11188] ? __lock_acquire+0x7d40/0x7d40 [ 411.441439][T11188] ? __might_fault+0xaa/0x120 [ 411.446161][T11188] should_fail_ex+0x39d/0x4d0 [ 411.450928][T11188] _copy_from_iter+0x1d9/0x12e0 [ 411.455826][T11188] ? __might_fault+0xaa/0x120 [ 411.460530][T11188] ? _copy_from_iter+0x24e/0x12e0 [ 411.465588][T11188] ? __virt_addr_valid+0x18c/0x540 [ 411.470736][T11188] ? __lock_acquire+0x7d40/0x7d40 [ 411.475789][T11188] ? copyout_mc+0x70/0x70 [ 411.480156][T11188] ? copyout_mc+0x70/0x70 [ 411.484520][T11188] ? __virt_addr_valid+0x18c/0x540 [ 411.489665][T11188] ? page_copy_sane+0x16a/0x270 [ 411.494572][T11188] copy_page_from_iter+0x7b/0x100 [ 411.499666][T11188] skb_copy_datagram_from_iter+0x2e4/0x6e0 [ 411.505534][T11188] tun_get_user+0x15db/0x3ca0 [ 411.510266][T11188] ? aa_file_perm+0x11b/0xee0 [ 411.514995][T11188] ? rcu_read_unlock+0xa0/0xa0 [ 411.519803][T11188] ? tun_get+0x1c/0x2e0 [ 411.523999][T11188] ? __lock_acquire+0x7d40/0x7d40 [ 411.529060][T11188] ? tun_get+0x1c/0x2e0 [ 411.533262][T11188] tun_chr_write_iter+0x119/0x200 [ 411.538346][T11188] vfs_write+0x46c/0x990 [ 411.542644][T11188] ? file_end_write+0x250/0x250 [ 411.547547][T11188] ? __fget_files+0x43d/0x4b0 [ 411.552275][T11188] ? __fdget_pos+0x1d8/0x330 [ 411.556908][T11188] ? ksys_write+0x75/0x260 [ 411.561361][T11188] ksys_write+0x150/0x260 [ 411.565733][T11188] ? __ia32_sys_read+0x90/0x90 [ 411.570539][T11188] ? lockdep_hardirqs_on+0x98/0x150 [ 411.575778][T11188] do_syscall_64+0x55/0xb0 [ 411.580258][T11188] ? clear_bhb_loop+0x40/0x90 [ 411.584961][T11188] ? clear_bhb_loop+0x40/0x90 [ 411.589665][T11188] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 411.595680][T11188] RIP: 0033:0x7f24c699ce59 [ 411.600142][T11188] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 411.619794][T11188] RSP: 002b:00007f24c78cb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 411.628242][T11188] RAX: ffffffffffffffda RBX: 00007f24c6c15fa0 RCX: 00007f24c699ce59 [ 411.636238][T11188] RDX: 000000000000ffc0 RSI: 0000200000000000 RDI: 00000000000000c8 [ 411.644246][T11188] RBP: 00007f24c78cb090 R08: 0000000000000000 R09: 0000000000000000 [ 411.652245][T11188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 411.660253][T11188] R13: 00007f24c6c16038 R14: 00007f24c6c15fa0 R15: 00007fff7b115f38 [ 411.668356][T11188] [ 411.727157][T11192] netlink: 207508 bytes leftover after parsing attributes in process `syz.2.1761'. [ 412.401547][ T5785] Bluetooth: hci0: unexpected event 0x05 length: 15 > 4 [ 412.516936][T11217] netlink: 207508 bytes leftover after parsing attributes in process `syz.3.1769'. [ 412.537289][ T5790] Bluetooth: hci3: ISO packet for unknown connection handle 10 [ 413.489492][ T5790] Bluetooth: hci0: ISO packet for unknown connection handle 10 [ 415.472767][ T5790] Bluetooth: hci3: ISO packet for unknown connection handle 10 [ 416.921492][ T5790] Bluetooth: hci2: ISO packet for unknown connection handle 10 [ 417.418933][T11314] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1808'. [ 418.123682][ T5790] Bluetooth: hci0: ISO packet for unknown connection handle 10 [ 419.283759][ T5790] Bluetooth: hci0: ISO packet for unknown connection handle 10 [ 419.997368][T11384] FAULT_INJECTION: forcing a failure. [ 419.997368][T11384] name failslab, interval 1, probability 0, space 0, times 0 [ 420.019161][T11384] CPU: 0 PID: 11384 Comm: syz.2.1830 Not tainted syzkaller #0 [ 420.026711][T11384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 420.036807][T11384] Call Trace: [ 420.040120][T11384] [ 420.043078][T11384] dump_stack_lvl+0x18c/0x250 [ 420.047794][T11384] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 420.053999][T11384] ? show_regs_print_info+0x20/0x20 [ 420.059228][T11384] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 420.065429][T11384] should_fail_ex+0x39d/0x4d0 [ 420.070148][T11384] should_failslab+0x9/0x20 [ 420.074686][T11384] slab_pre_alloc_hook+0x59/0x310 [ 420.079756][T11384] ? __get_vm_area_node+0x125/0x370 [ 420.084989][T11384] __kmem_cache_alloc_node+0x53/0x250 [ 420.090408][T11384] ? __get_vm_area_node+0x125/0x370 [ 420.095670][T11384] kmalloc_node_trace+0x26/0xe0 [ 420.100570][T11384] __get_vm_area_node+0x125/0x370 [ 420.105634][T11384] __vmalloc_node_range+0x36e/0x1330 [ 420.110957][T11384] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 420.116537][T11384] ? mark_lock+0x94/0x320 [ 420.120904][T11384] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 420.126658][T11384] ? perf_trace_preemptirq_template+0x269/0x330 [ 420.132953][T11384] ? free_vm_area+0x50/0x50 [ 420.137492][T11384] ? end_current_label_crit_section+0x170/0x170 [ 420.143776][T11384] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 420.149363][T11384] __vmalloc+0x7a/0x90 [ 420.153462][T11384] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 420.159139][T11384] bpf_prog_alloc_no_stats+0x47/0x440 [ 420.164542][T11384] ? bpf_prog_alloc+0x2b/0x1a0 [ 420.169339][T11384] bpf_prog_alloc+0x3d/0x1a0 [ 420.173958][T11384] bpf_prog_load+0x6eb/0x1670 [ 420.178671][T11384] ? map_freeze+0x420/0x420 [ 420.183209][T11384] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 420.189403][T11384] ? lockdep_hardirqs_on+0x98/0x150 [ 420.194703][T11384] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 420.200914][T11384] ? bpf_lsm_bpf+0x4/0x10 [ 420.205278][T11384] ? bpf_lsm_bpf+0x9/0x10 [ 420.209640][T11384] ? security_bpf+0x7e/0xa0 [ 420.214179][T11384] __sys_bpf+0x5ba/0x890 [ 420.218455][T11384] ? bpf_link_show_fdinfo+0x390/0x390 [ 420.223906][T11384] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 420.230111][T11384] __x64_sys_bpf+0x7c/0x90 [ 420.234558][T11384] do_syscall_64+0x55/0xb0 [ 420.239017][T11384] ? clear_bhb_loop+0x40/0x90 [ 420.243733][T11384] ? clear_bhb_loop+0x40/0x90 [ 420.248451][T11384] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 420.254414][T11384] RIP: 0033:0x7f297679ce59 [ 420.258864][T11384] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 420.278498][T11384] RSP: 002b:00007f2977749028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 420.286947][T11384] RAX: ffffffffffffffda RBX: 00007f2976a15fa0 RCX: 00007f297679ce59 [ 420.294949][T11384] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005 [ 420.302956][T11384] RBP: 00007f2977749090 R08: 0000000000000000 R09: 0000000000000000 [ 420.310967][T11384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 420.319234][T11384] R13: 00007f2976a16038 R14: 00007f2976a15fa0 R15: 00007fffebfb9598 [ 420.327253][T11384] [ 420.519358][T11384] syz.2.1830: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 420.537230][T11384] CPU: 0 PID: 11384 Comm: syz.2.1830 Not tainted syzkaller #0 [ 420.544767][T11384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 420.554886][T11384] Call Trace: [ 420.558211][T11384] [ 420.561201][T11384] dump_stack_lvl+0x18c/0x250 [ 420.565938][T11384] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 420.572166][T11384] ? show_regs_print_info+0x20/0x20 [ 420.577436][T11384] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 420.583678][T11384] warn_alloc+0x246/0x340 [ 420.588081][T11384] ? __get_vm_area_node+0x125/0x370 [ 420.593387][T11384] ? zone_watermark_ok_safe+0x230/0x230 [ 420.598993][T11384] ? rcu_is_watching+0x15/0xb0 [ 420.603810][T11384] ? __get_vm_area_node+0x356/0x370 [ 420.609062][T11384] __vmalloc_node_range+0x393/0x1330 [ 420.614386][T11384] ? mark_lock+0x94/0x320 [ 420.618758][T11384] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 420.624512][T11384] ? perf_trace_preemptirq_template+0x269/0x330 [ 420.630803][T11384] ? free_vm_area+0x50/0x50 [ 420.635343][T11384] ? end_current_label_crit_section+0x170/0x170 [ 420.641623][T11384] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 420.647204][T11384] __vmalloc+0x7a/0x90 [ 420.651312][T11384] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 420.656885][T11384] bpf_prog_alloc_no_stats+0x47/0x440 [ 420.662287][T11384] ? bpf_prog_alloc+0x2b/0x1a0 [ 420.667083][T11384] bpf_prog_alloc+0x3d/0x1a0 [ 420.671710][T11384] bpf_prog_load+0x6eb/0x1670 [ 420.676427][T11384] ? map_freeze+0x420/0x420 [ 420.680966][T11384] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 420.687169][T11384] ? lockdep_hardirqs_on+0x98/0x150 [ 420.692405][T11384] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 420.698604][T11384] ? bpf_lsm_bpf+0x4/0x10 [ 420.702972][T11384] ? bpf_lsm_bpf+0x9/0x10 [ 420.707341][T11384] ? security_bpf+0x7e/0xa0 [ 420.711877][T11384] __sys_bpf+0x5ba/0x890 [ 420.716156][T11384] ? bpf_link_show_fdinfo+0x390/0x390 [ 420.721569][T11384] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 420.727776][T11384] __x64_sys_bpf+0x7c/0x90 [ 420.732227][T11384] do_syscall_64+0x55/0xb0 [ 420.736678][T11384] ? clear_bhb_loop+0x40/0x90 [ 420.741405][T11384] ? clear_bhb_loop+0x40/0x90 [ 420.746110][T11384] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 420.752050][T11384] RIP: 0033:0x7f297679ce59 [ 420.756498][T11384] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 420.776180][T11384] RSP: 002b:00007f2977749028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 420.784626][T11384] RAX: ffffffffffffffda RBX: 00007f2976a15fa0 RCX: 00007f297679ce59 [ 420.792630][T11384] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005 [ 420.800633][T11384] RBP: 00007f2977749090 R08: 0000000000000000 R09: 0000000000000000 [ 420.808632][T11384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 420.816632][T11384] R13: 00007f2976a16038 R14: 00007f2976a15fa0 R15: 00007fffebfb9598 [ 420.824661][T11384] [ 420.849123][T11384] Mem-Info: [ 420.852359][T11384] active_anon:5503 inactive_anon:0 isolated_anon:0 [ 420.852359][T11384] active_file:18261 inactive_file:40082 isolated_file:0 [ 420.852359][T11384] unevictable:768 dirty:50 writeback:0 [ 420.852359][T11384] slab_reclaimable:10217 slab_unreclaimable:93379 [ 420.852359][T11384] mapped:24304 shmem:1361 pagetables:624 [ 420.852359][T11384] sec_pagetables:0 bounce:0 [ 420.852359][T11384] kernel_misc_reclaimable:0 [ 420.852359][T11384] free:1351241 free_pcp:6888 free_cma:0 [ 420.951894][T11384] Node 0 active_anon:21912kB inactive_anon:0kB active_file:73044kB inactive_file:160124kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:97316kB dirty:200kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10552kB pagetables:2396kB sec_pagetables:0kB all_unreclaimable? no [ 421.041514][T11384] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 421.079038][T11384] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 421.107173][T11384] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 421.143712][T11384] Node 0 DMA32 free:1498572kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:21872kB inactive_anon:0kB active_file:73044kB inactive_file:159304kB unevictable:1536kB writepending:200kB present:3129332kB managed:2586928kB mlocked:0kB bounce:0kB free_pcp:4168kB local_pcp:1012kB free_cma:0kB [ 421.279525][T11384] lowmem_reserve[]: 0 0 0 0 0 [ 421.284360][T11384] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:820kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 421.312611][T11384] lowmem_reserve[]: 0 0 0 0 0 [ 421.317445][T11384] Node 1 Normal free:3890080kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:24484kB local_pcp:11456kB free_cma:0kB [ 421.353458][T11384] lowmem_reserve[]: 0 0 0 0 0 [ 421.398409][T11384] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 421.452209][T11384] Node 0 DMA32: 3005*4kB (UME) 2121*8kB (UME) 1733*16kB (UME) 1080*32kB (UME) 399*64kB (UME) 209*128kB (UME) 181*256kB (UME) 120*512kB (UM) 88*1024kB (UME) 5*2048kB (UM) 280*4096kB (UM) = 1498572kB [ 421.500557][T11384] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 421.530243][T11384] Node 1 Normal: 236*4kB (U) 52*8kB (UME) 41*16kB (UME) 52*32kB (UME) 19*64kB (UE) 5*128kB (UME) 0*256kB 3*512kB (UME) 0*1024kB 0*2048kB 948*4096kB (M) = 3890080kB [ 421.551394][T11384] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 421.562707][T11384] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 421.575655][T11384] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 421.609402][T11384] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 421.619221][T11384] 59704 total pagecache pages [ 421.623965][T11384] 0 pages in swap cache [ 421.629296][T11384] Free swap = 124996kB [ 421.633740][T11384] Total swap = 124996kB [ 421.638375][T11384] 2097051 pages RAM [ 421.642251][T11384] 0 pages HighMem/MovableOnly [ 421.646969][T11384] 416933 pages reserved [ 421.651587][T11384] 0 pages cma reserved [ 422.240267][T11423] netlink: 'syz.3.1840': attribute type 10 has an invalid length. [ 422.354118][T11423] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 422.378152][T11423] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 422.387371][T11423] team0: Port device wlan1 added [ 422.722874][T11437] netlink: 'syz.3.1842': attribute type 10 has an invalid length. [ 422.732190][T11437] syz_tun: entered promiscuous mode [ 422.947711][ T5790] Bluetooth: hci3: ISO packet for unknown connection handle 10 [ 424.163883][T11468] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1853'. [ 428.342871][T11557] FAULT_INJECTION: forcing a failure. [ 428.342871][T11557] name failslab, interval 1, probability 0, space 0, times 0 [ 428.392691][T11557] CPU: 0 PID: 11557 Comm: syz.0.1878 Not tainted syzkaller #0 [ 428.400254][T11557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 428.410366][T11557] Call Trace: [ 428.413687][T11557] [ 428.416649][T11557] dump_stack_lvl+0x18c/0x250 [ 428.421378][T11557] ? show_regs_print_info+0x20/0x20 [ 428.426660][T11557] ? load_image+0x420/0x420 [ 428.431238][T11557] ? __might_sleep+0xe0/0xe0 [ 428.435905][T11557] ? __lock_acquire+0x7d40/0x7d40 [ 428.441020][T11557] should_fail_ex+0x39d/0x4d0 [ 428.445780][T11557] should_failslab+0x9/0x20 [ 428.450356][T11557] slab_pre_alloc_hook+0x59/0x310 [ 428.455463][T11557] ? kvmalloc_node+0x70/0x180 [ 428.460211][T11557] ? kvmalloc_node+0x70/0x180 [ 428.465000][T11557] __kmem_cache_alloc_node+0x53/0x250 [ 428.470449][T11557] ? kvmalloc_node+0x70/0x180 [ 428.475180][T11557] __kmalloc_node+0xa4/0x230 [ 428.479839][T11557] kvmalloc_node+0x70/0x180 [ 428.484417][T11557] bpf_test_run_xdp_live+0x1e9/0x1b20 [ 428.489867][T11557] ? 0xffffffffa0004740 [ 428.494059][T11557] ? 0xffffffffa0004740 [ 428.498236][T11557] ? bpf_dispatcher_change_prog+0xcbf/0xf10 [ 428.504276][T11557] ? 0xffffffffa0004740 [ 428.508528][T11557] ? xdp_convert_md_to_buff+0x330/0x330 [ 428.514183][T11557] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 428.520491][T11557] ? _copy_from_user+0xa5/0xe0 [ 428.525314][T11557] ? bpf_test_init+0x119/0x140 [ 428.530139][T11557] ? xdp_convert_md_to_buff+0x5b/0x330 [ 428.535671][T11557] bpf_prog_test_run_xdp+0x7ca/0x10e0 [ 428.541212][T11557] ? dev_put+0x80/0x80 [ 428.545353][T11557] ? dev_put+0x80/0x80 [ 428.549582][T11557] bpf_prog_test_run+0x321/0x390 [ 428.554577][T11557] __sys_bpf+0x49d/0x890 [ 428.559058][T11557] ? bpf_link_show_fdinfo+0x390/0x390 [ 428.564519][T11557] ? lock_chain_count+0x20/0x20 [ 428.569476][T11557] __x64_sys_bpf+0x7c/0x90 [ 428.573962][T11557] do_syscall_64+0x55/0xb0 [ 428.578439][T11557] ? clear_bhb_loop+0x40/0x90 [ 428.583162][T11557] ? clear_bhb_loop+0x40/0x90 [ 428.587890][T11557] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 428.593851][T11557] RIP: 0033:0x7f24c699ce59 [ 428.598322][T11557] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 428.617989][T11557] RSP: 002b:00007f24c78cb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 428.626471][T11557] RAX: ffffffffffffffda RBX: 00007f24c6c15fa0 RCX: 00007f24c699ce59 [ 428.634525][T11557] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 428.642819][T11557] RBP: 00007f24c78cb090 R08: 0000000000000000 R09: 0000000000000000 [ 428.650836][T11557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 428.658851][T11557] R13: 00007f24c6c16038 R14: 00007f24c6c15fa0 R15: 00007fff7b115f38 [ 428.666891][T11557] [ 430.223816][T11602] C: renamed from team_slave_0 (while UP) [ 430.523695][T11602] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1892'. [ 434.791192][T11668] C: renamed from team_slave_0 (while UP) [ 434.881365][T11668] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1918'. [ 436.005071][T11693] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.1926'. [ 437.457934][T11735] IPv6: NLM_F_CREATE should be specified when creating new route [ 437.491917][T11735] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1938'. [ 437.677286][T11737] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1939'. [ 438.035782][ T5790] Bluetooth: hci3: ISO packet for unknown connection handle 10 [ 438.515371][T11755] netlink: 'syz.3.1947': attribute type 29 has an invalid length. [ 438.562172][T11755] netlink: 'syz.3.1947': attribute type 29 has an invalid length. [ 438.574962][T11757] netlink: 'syz.3.1947': attribute type 29 has an invalid length. [ 438.616624][T11755] netlink: 'syz.3.1947': attribute type 29 has an invalid length. [ 438.679294][T11755] netlink: 'syz.3.1947': attribute type 29 has an invalid length. [ 438.706143][T11755] netlink: 'syz.3.1947': attribute type 21 has an invalid length. [ 438.729026][T11755] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1947'. [ 439.265928][ T5790] Bluetooth: hci0: ISO packet for unknown connection handle 10 [ 439.785912][ T5790] Bluetooth: hci0: ISO packet for unknown connection handle 10 [ 439.888992][T11783] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1956'. [ 440.331551][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.338292][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.393365][T11798] netlink: 'syz.2.1963': attribute type 29 has an invalid length. [ 440.520608][T11798] netlink: 'syz.2.1963': attribute type 29 has an invalid length. [ 440.622445][T11800] netlink: 'syz.2.1963': attribute type 29 has an invalid length. [ 440.680674][T11806] netlink: 'syz.2.1963': attribute type 29 has an invalid length. [ 440.760015][T11810] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.1966'. [ 440.812965][T11798] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1963'. [ 441.038453][ T5790] Bluetooth: hci2: ISO packet for unknown connection handle 10 [ 441.383544][T11824] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1972'. [ 441.442999][T11824] openvswitch: netlink: Tunnel attr 11913 out of range max 16 [ 441.801047][T11832] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1975'. [ 442.637229][T11846] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1979'. [ 442.783079][ T5790] Bluetooth: hci2: ISO packet for unknown connection handle 10 [ 444.163650][ T5790] Bluetooth: hci3: ISO packet for unknown connection handle 10 [ 448.323839][T11913] netlink: 202920 bytes leftover after parsing attributes in process `syz.1.2000'. [ 448.419312][ T5790] Bluetooth: hci0: ISO packet for unknown connection handle 10 [ 448.678157][T11926] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2005'. [ 448.886113][T11931] FAULT_INJECTION: forcing a failure. [ 448.886113][T11931] name failslab, interval 1, probability 0, space 0, times 0 [ 448.926193][T11931] CPU: 1 PID: 11931 Comm: syz.0.2007 Not tainted syzkaller #0 [ 448.933765][T11931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 448.943889][T11931] Call Trace: [ 448.947231][T11931] [ 448.950216][T11931] dump_stack_lvl+0x18c/0x250 [ 448.954972][T11931] ? show_regs_print_info+0x20/0x20 [ 448.960257][T11931] ? load_image+0x420/0x420 [ 448.964829][T11931] ? __might_sleep+0xe0/0xe0 [ 448.969522][T11931] ? __lock_acquire+0x7d40/0x7d40 [ 448.974635][T11931] should_fail_ex+0x39d/0x4d0 [ 448.979412][T11931] should_failslab+0x9/0x20 [ 448.983988][T11931] slab_pre_alloc_hook+0x59/0x310 [ 448.989091][T11931] ? sctp_association_new+0x89/0x25c0 [ 448.994550][T11931] __kmem_cache_alloc_node+0x53/0x250 [ 449.000004][T11931] ? sctp_association_new+0x89/0x25c0 [ 449.005452][T11931] kmalloc_trace+0x2a/0xe0 [ 449.009947][T11931] sctp_association_new+0x89/0x25c0 [ 449.015223][T11931] ? bpf_lsm_capable+0x9/0x10 [ 449.019973][T11931] ? security_capable+0x89/0xb0 [ 449.024941][T11931] sctp_connect_new_asoc+0x2de/0x6a0 [ 449.030304][T11931] ? __sctp_connect+0xd80/0xd80 [ 449.035205][T11931] ? __local_bh_enable_ip+0x13a/0x1c0 [ 449.040619][T11931] ? _local_bh_enable+0xa0/0xa0 [ 449.045512][T11931] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 449.051363][T11931] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 449.057214][T11931] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 449.062803][T11931] ? security_sctp_bind_connect+0x89/0xb0 [ 449.068578][T11931] sctp_sendmsg+0x15d2/0x2910 [ 449.073321][T11931] ? sctp_getsockopt+0xb60/0xb60 [ 449.078304][T11931] ? aa_sk_perm+0x83c/0x970 [ 449.082863][T11931] ? aa_af_perm+0x330/0x330 [ 449.087413][T11931] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 449.093878][T11931] ? sock_rps_record_flow+0x19/0x3f0 [ 449.099214][T11931] ? inet_sendmsg+0x7c/0x2f0 [ 449.103847][T11931] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 449.109196][T11931] ? security_socket_sendmsg+0x80/0xa0 [ 449.114718][T11931] ? inet_send_prepare+0x260/0x260 [ 449.119900][T11931] ____sys_sendmsg+0x5ba/0x960 [ 449.124720][T11931] ? __lock_acquire+0x7d40/0x7d40 [ 449.129802][T11931] ? __asan_memset+0x22/0x40 [ 449.134440][T11931] ? __sys_sendmsg_sock+0x30/0x30 [ 449.139518][T11931] ? __import_iovec+0x5f2/0x850 [ 449.144423][T11931] ? import_iovec+0x73/0xa0 [ 449.148994][T11931] ___sys_sendmsg+0x2a6/0x360 [ 449.153781][T11931] ? __sys_sendmsg+0x2a0/0x2a0 [ 449.158638][T11931] ? seqcount_lockdep_reader_access+0x17b/0x1d0 [ 449.164980][T11931] __se_sys_sendmsg+0x1c2/0x2b0 [ 449.169885][T11931] ? __x64_sys_sendmsg+0x80/0x80 [ 449.174891][T11931] ? lockdep_hardirqs_on+0x98/0x150 [ 449.180147][T11931] do_syscall_64+0x55/0xb0 [ 449.184607][T11931] ? clear_bhb_loop+0x40/0x90 [ 449.189328][T11931] ? clear_bhb_loop+0x40/0x90 [ 449.194045][T11931] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 449.199992][T11931] RIP: 0033:0x7f24c699ce59 [ 449.204453][T11931] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 449.224122][T11931] RSP: 002b:00007f24c78cb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 449.232623][T11931] RAX: ffffffffffffffda RBX: 00007f24c6c15fa0 RCX: 00007f24c699ce59 [ 449.240733][T11931] RDX: 00000000000080d1 RSI: 00002000000000c0 RDI: 000000000000000a [ 449.248828][T11931] RBP: 00007f24c78cb090 R08: 0000000000000000 R09: 0000000000000000 [ 449.256868][T11931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 449.264912][T11931] R13: 00007f24c6c16038 R14: 00007f24c6c15fa0 R15: 00007fff7b115f38 [ 449.272962][T11931] [ 449.701646][T11946] syzkaller0: entered promiscuous mode [ 449.767846][T11946] syzkaller0: entered allmulticast mode [ 450.062153][T11957] validate_nla: 8 callbacks suppressed [ 450.062171][T11957] netlink: 'syz.1.2015': attribute type 29 has an invalid length. [ 450.076585][T11957] netlink: 'syz.1.2015': attribute type 29 has an invalid length. [ 450.098906][T11957] netlink: 'syz.1.2015': attribute type 29 has an invalid length. [ 450.109225][T11957] netlink: 'syz.1.2015': attribute type 29 has an invalid length. [ 450.121124][ T5790] Bluetooth: hci0: ISO packet for unknown connection handle 10 [ 451.285377][T11978] FAULT_INJECTION: forcing a failure. [ 451.285377][T11978] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 451.351367][T11978] CPU: 0 PID: 11978 Comm: syz.0.2023 Not tainted syzkaller #0 [ 451.358925][T11978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 451.369031][T11978] Call Trace: [ 451.372361][T11978] [ 451.375332][T11978] dump_stack_lvl+0x18c/0x250 [ 451.380075][T11978] ? show_regs_print_info+0x20/0x20 [ 451.385326][T11978] ? load_image+0x420/0x420 [ 451.389887][T11978] ? __lock_acquire+0x7d40/0x7d40 [ 451.394975][T11978] should_fail_ex+0x39d/0x4d0 [ 451.399721][T11978] _copy_from_user+0x2f/0xe0 [ 451.404374][T11978] __copy_msghdr+0x3bb/0x580 [ 451.409214][T11978] ___sys_sendmsg+0x214/0x360 [ 451.413961][T11978] ? get_pid_task+0x20/0x1e0 [ 451.418657][T11978] ? __sys_sendmsg+0x2a0/0x2a0 [ 451.423500][T11978] ? __lock_acquire+0x7d40/0x7d40 [ 451.428598][T11978] __se_sys_sendmsg+0x1c2/0x2b0 [ 451.433509][T11978] ? __x64_sys_sendmsg+0x80/0x80 [ 451.438538][T11978] ? lockdep_hardirqs_on+0x98/0x150 [ 451.443807][T11978] do_syscall_64+0x55/0xb0 [ 451.448278][T11978] ? clear_bhb_loop+0x40/0x90 [ 451.453006][T11978] ? clear_bhb_loop+0x40/0x90 [ 451.457730][T11978] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 451.463684][T11978] RIP: 0033:0x7f24c699ce59 [ 451.468150][T11978] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 451.487858][T11978] RSP: 002b:00007f24c78cb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 451.496339][T11978] RAX: ffffffffffffffda RBX: 00007f24c6c15fa0 RCX: 00007f24c699ce59 [ 451.504455][T11978] RDX: 0000000002040800 RSI: 00002000000002c0 RDI: 0000000000000003 [ 451.512482][T11978] RBP: 00007f24c78cb090 R08: 0000000000000000 R09: 0000000000000000 [ 451.520507][T11978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 451.528534][T11978] R13: 00007f24c6c16038 R14: 00007f24c6c15fa0 R15: 00007fff7b115f38 [ 451.536590][T11978] [ 451.571687][T11983] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2025'. [ 451.791711][ T5790] Bluetooth: hci3: ISO packet for unknown connection handle 10 [ 452.571645][ T5790] Bluetooth: hci0: ISO packet for unknown connection handle 11 [ 453.170254][T12016] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2036'. [ 455.277879][ T5785] Bluetooth: hci1: Opcode 0x206a failed: -110 [ 455.284633][ T5785] Bluetooth: hci1: command 0x206a tx timeout [ 456.608637][T12027] netlink: 148168 bytes leftover after parsing attributes in process `syz.1.2041'. [ 456.913978][ T5790] Bluetooth: hci2: ISO packet for unknown connection handle 10 [ 457.362528][T12040] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2047'. [ 458.191850][T12065] FAULT_INJECTION: forcing a failure. [ 458.191850][T12065] name failslab, interval 1, probability 0, space 0, times 0 [ 458.239223][T12065] CPU: 0 PID: 12065 Comm: syz.1.2056 Not tainted syzkaller #0 [ 458.246799][T12065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 458.256995][T12065] Call Trace: [ 458.260375][T12065] [ 458.263357][T12065] dump_stack_lvl+0x18c/0x250 [ 458.268094][T12065] ? show_regs_print_info+0x20/0x20 [ 458.273346][T12065] ? load_image+0x420/0x420 [ 458.277889][T12065] ? lockdep_hardirqs_on+0x98/0x150 [ 458.283145][T12065] ? __might_sleep+0xe0/0xe0 [ 458.287795][T12065] should_fail_ex+0x39d/0x4d0 [ 458.292596][T12065] should_failslab+0x9/0x20 [ 458.297184][T12065] slab_pre_alloc_hook+0x59/0x310 [ 458.302269][T12065] ? sctp_association_new+0x89/0x25c0 [ 458.307705][T12065] __kmem_cache_alloc_node+0x53/0x250 [ 458.313147][T12065] ? sctp_association_new+0x89/0x25c0 [ 458.318585][T12065] kmalloc_trace+0x2a/0xe0 [ 458.323060][T12065] sctp_association_new+0x89/0x25c0 [ 458.328309][T12065] ? bpf_lsm_capable+0x9/0x10 [ 458.333025][T12065] ? security_capable+0x89/0xb0 [ 458.337919][T12065] sctp_connect_new_asoc+0x2de/0x6a0 [ 458.343246][T12065] ? __sctp_connect+0xd80/0xd80 [ 458.348128][T12065] ? _local_bh_enable+0xa0/0xa0 [ 458.353008][T12065] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 458.358847][T12065] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 458.364690][T12065] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 458.370271][T12065] ? security_sctp_bind_connect+0x89/0xb0 [ 458.376027][T12065] sctp_sendmsg+0x15d2/0x2910 [ 458.380748][T12065] ? sctp_getsockopt+0xb60/0xb60 [ 458.385721][T12065] ? aa_sk_perm+0x83c/0x970 [ 458.390265][T12065] ? aa_af_perm+0x330/0x330 [ 458.394794][T12065] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 458.401245][T12065] ? irqentry_enter+0x37/0x50 [ 458.405954][T12065] ? sock_rps_record_flow+0x19/0x3f0 [ 458.411275][T12065] ? inet_sendmsg+0x7c/0x2f0 [ 458.415899][T12065] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 458.421216][T12065] ? security_socket_sendmsg+0x80/0xa0 [ 458.426705][T12065] ? inet_send_prepare+0x260/0x260 [ 458.431851][T12065] ____sys_sendmsg+0x5ba/0x960 [ 458.436648][T12065] ? lockdep_hardirqs_on+0x98/0x150 [ 458.442359][T12065] ? __sys_sendmsg_sock+0x30/0x30 [ 458.447456][T12065] ? ___sys_sendmsg+0x28b/0x360 [ 458.452368][T12065] ___sys_sendmsg+0x2a6/0x360 [ 458.457092][T12065] ? __sys_sendmsg+0x2a0/0x2a0 [ 458.461936][T12065] __se_sys_sendmsg+0x1c2/0x2b0 [ 458.466820][T12065] ? __x64_sys_sendmsg+0x80/0x80 [ 458.471803][T12065] ? syscall_enter_from_user_mode+0x2e/0x80 [ 458.477826][T12065] do_syscall_64+0x55/0xb0 [ 458.482281][T12065] ? clear_bhb_loop+0x40/0x90 [ 458.486997][T12065] ? clear_bhb_loop+0x40/0x90 [ 458.491705][T12065] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 458.497686][T12065] RIP: 0033:0x7f01d879ce59 [ 458.502144][T12065] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 458.521798][T12065] RSP: 002b:00007f01d9689028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 458.530306][T12065] RAX: ffffffffffffffda RBX: 00007f01d8a16090 RCX: 00007f01d879ce59 [ 458.538326][T12065] RDX: 00000000000080d1 RSI: 00002000000000c0 RDI: 000000000000000b [ 458.546424][T12065] RBP: 00007f01d9689090 R08: 0000000000000000 R09: 0000000000000000 [ 458.554435][T12065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 458.562440][T12065] R13: 00007f01d8a16128 R14: 00007f01d8a16090 R15: 00007ffd129145e8 [ 458.570461][T12065] [ 459.404956][T12094] netlink: 'syz.2.2066': attribute type 2 has an invalid length. [ 459.413362][T12094] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2066'. [ 460.446536][T12121] wg2: left promiscuous mode [ 460.496854][T12121] wg2: left allmulticast mode [ 462.748831][ T5790] Bluetooth: hci2: ISO packet for unknown connection handle 10 [ 463.338663][T12195] C: renamed from team_slave_0 (while UP) [ 463.354725][T12195] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2107'. [ 464.084510][T12213] netlink: 'syz.0.2113': attribute type 3 has an invalid length. [ 464.096192][T12213] netlink: 16062 bytes leftover after parsing attributes in process `syz.0.2113'. [ 464.149945][T12213] bond0: left allmulticast mode [ 464.160880][T12213] bond_slave_0: left allmulticast mode [ 464.166507][T12213] bond_slave_1: left allmulticast mode [ 464.217294][T12213] bridge0: port 3(bond0) entered disabled state [ 464.291256][T12213] bridge_slave_1: left allmulticast mode [ 464.328757][T12213] bridge_slave_1: left promiscuous mode [ 464.334816][T12213] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.373297][T12213] bridge_slave_0: left allmulticast mode [ 464.387931][T12213] bridge_slave_0: left promiscuous mode [ 464.398844][T12213] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.660987][T12215] netlink: 'syz.1.2114': attribute type 27 has an invalid length. [ 464.689786][T12215] netlink: 'syz.1.2114': attribute type 25 has an invalid length. [ 466.483370][ T5790] Bluetooth: hci3: ISO packet for unknown connection handle 10 [ 466.654960][T12258] wg2: entered promiscuous mode [ 466.668825][T12258] wg2: entered allmulticast mode [ 467.462015][T12284] netlink: 'syz.0.2136': attribute type 2 has an invalid length. [ 467.490166][T12284] netlink: 'syz.0.2136': attribute type 8 has an invalid length. [ 467.511196][T12284] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2136'. [ 467.877917][T12295] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2139'. [ 467.889925][T12295] €Â0: entered promiscuous mode [ 468.825002][T12330] FAULT_INJECTION: forcing a failure. [ 468.825002][T12330] name failslab, interval 1, probability 0, space 0, times 0 [ 468.841602][T12330] CPU: 1 PID: 12330 Comm: syz.0.2152 Not tainted syzkaller #0 [ 468.849227][T12330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 468.859377][T12330] Call Trace: [ 468.862725][T12330] [ 468.865734][T12330] dump_stack_lvl+0x18c/0x250 [ 468.870702][T12330] ? show_regs_print_info+0x20/0x20 [ 468.875990][T12330] ? load_image+0x420/0x420 [ 468.880638][T12330] ? __might_sleep+0xe0/0xe0 [ 468.885428][T12330] ? __lock_acquire+0x7d40/0x7d40 [ 468.890627][T12330] should_fail_ex+0x39d/0x4d0 [ 468.895462][T12330] should_failslab+0x9/0x20 [ 468.900082][T12330] slab_pre_alloc_hook+0x59/0x310 [ 468.905331][T12330] ? __lock_acquire+0x7d40/0x7d40 [ 468.910581][T12330] kmem_cache_alloc_node+0x60/0x320 [ 468.915930][T12330] ? __alloc_skb+0x103/0x2c0 [ 468.920748][T12330] __alloc_skb+0x103/0x2c0 [ 468.925270][T12330] netlink_sendmsg+0x66a/0xbf0 [ 468.930284][T12330] ? netlink_getsockopt+0x590/0x590 [ 468.935589][T12330] ? aa_sock_msg_perm+0x94/0x150 [ 468.940671][T12330] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 468.946109][T12330] ? security_socket_sendmsg+0x80/0xa0 [ 468.951671][T12330] ? netlink_getsockopt+0x590/0x590 [ 468.956963][T12330] ____sys_sendmsg+0x5ba/0x960 [ 468.961835][T12330] ? __asan_memset+0x22/0x40 [ 468.966520][T12330] ? __sys_sendmsg_sock+0x30/0x30 [ 468.971634][T12330] ? __import_iovec+0x3fa/0x850 [ 468.976632][T12330] ? import_iovec+0x73/0xa0 [ 468.981236][T12330] ___sys_sendmsg+0x2a6/0x360 [ 468.985997][T12330] ? get_pid_task+0x20/0x1e0 [ 468.990694][T12330] ? __sys_sendmsg+0x2a0/0x2a0 [ 468.995612][T12330] ? __lock_acquire+0x7d40/0x7d40 [ 469.000804][T12330] __se_sys_sendmsg+0x1c2/0x2b0 [ 469.005779][T12330] ? __x64_sys_sendmsg+0x80/0x80 [ 469.010858][T12330] ? lockdep_hardirqs_on+0x98/0x150 [ 469.016158][T12330] do_syscall_64+0x55/0xb0 [ 469.020648][T12330] ? clear_bhb_loop+0x40/0x90 [ 469.025493][T12330] ? clear_bhb_loop+0x40/0x90 [ 469.030250][T12330] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 469.036341][T12330] RIP: 0033:0x7f24c699ce59 [ 469.040837][T12330] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 469.060528][T12330] RSP: 002b:00007f24c78cb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 469.069041][T12330] RAX: ffffffffffffffda RBX: 00007f24c6c15fa0 RCX: 00007f24c699ce59 [ 469.077105][T12330] RDX: 0000000000000000 RSI: 0000200000000940 RDI: 0000000000000003 [ 469.085154][T12330] RBP: 00007f24c78cb090 R08: 0000000000000000 R09: 0000000000000000 [ 469.093199][T12330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 469.101339][T12330] R13: 00007f24c6c16038 R14: 00007f24c6c15fa0 R15: 00007fff7b115f38 [ 469.109450][T12330] [ 469.582069][T12338] netlink: 196 bytes leftover after parsing attributes in process `syz.3.2154'. [ 469.796603][T12341] netlink: 'syz.0.2155': attribute type 10 has an invalid length. [ 469.814486][T12341] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2155'. [ 470.181811][T12352] netlink: 196 bytes leftover after parsing attributes in process `syz.3.2158'. [ 471.139118][T12367] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.2162'. [ 471.158324][T12367] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.2162'. [ 471.188187][T12363] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.2162'. [ 471.222743][T12363] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.2162'. [ 471.244213][T12363] FAULT_INJECTION: forcing a failure. [ 471.244213][T12363] name failslab, interval 1, probability 0, space 0, times 0 [ 471.259681][T12363] CPU: 1 PID: 12363 Comm: syz.0.2162 Not tainted syzkaller #0 [ 471.267513][T12363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 471.277700][T12363] Call Trace: [ 471.281013][T12363] [ 471.283970][T12363] dump_stack_lvl+0x18c/0x250 [ 471.288716][T12363] ? show_regs_print_info+0x20/0x20 [ 471.293974][T12363] ? load_image+0x420/0x420 [ 471.298513][T12363] ? __might_sleep+0xe0/0xe0 [ 471.303139][T12363] ? __lock_acquire+0x7d40/0x7d40 [ 471.308206][T12363] should_fail_ex+0x39d/0x4d0 [ 471.312932][T12363] should_failslab+0x9/0x20 [ 471.317475][T12363] slab_pre_alloc_hook+0x59/0x310 [ 471.322534][T12363] ? __lock_acquire+0x7d40/0x7d40 [ 471.327591][T12363] kmem_cache_alloc_node+0x60/0x320 [ 471.332831][T12363] ? __alloc_skb+0x103/0x2c0 [ 471.337472][T12363] __alloc_skb+0x103/0x2c0 [ 471.341928][T12363] netlink_sendmsg+0x66a/0xbf0 [ 471.346730][T12363] ? netlink_getsockopt+0x590/0x590 [ 471.351969][T12363] ? aa_sock_msg_perm+0x94/0x150 [ 471.356940][T12363] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 471.362275][T12363] ? security_socket_sendmsg+0x80/0xa0 [ 471.367789][T12363] ? netlink_getsockopt+0x590/0x590 [ 471.373120][T12363] ____sys_sendmsg+0x5ba/0x960 [ 471.377925][T12363] ? __asan_memset+0x22/0x40 [ 471.382548][T12363] ? __sys_sendmsg_sock+0x30/0x30 [ 471.387601][T12363] ? __import_iovec+0x5f2/0x850 [ 471.392488][T12363] ? import_iovec+0x73/0xa0 [ 471.397027][T12363] ___sys_sendmsg+0x2a6/0x360 [ 471.401738][T12363] ? get_pid_task+0x20/0x1e0 [ 471.406366][T12363] ? __sys_sendmsg+0x2a0/0x2a0 [ 471.411179][T12363] ? __lock_acquire+0x7d40/0x7d40 [ 471.416288][T12363] __se_sys_sendmsg+0x1c2/0x2b0 [ 471.421178][T12363] ? __x64_sys_sendmsg+0x80/0x80 [ 471.426159][T12363] ? lockdep_hardirqs_on+0x98/0x150 [ 471.431394][T12363] do_syscall_64+0x55/0xb0 [ 471.435842][T12363] ? clear_bhb_loop+0x40/0x90 [ 471.440571][T12363] ? clear_bhb_loop+0x40/0x90 [ 471.445274][T12363] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 471.451204][T12363] RIP: 0033:0x7f24c699ce59 [ 471.455644][T12363] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 471.475285][T12363] RSP: 002b:00007f24c78cb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 471.483741][T12363] RAX: ffffffffffffffda RBX: 00007f24c6c15fa0 RCX: 00007f24c699ce59 [ 471.491739][T12363] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000008 [ 471.499737][T12363] RBP: 00007f24c78cb090 R08: 0000000000000000 R09: 0000000000000000 [ 471.507735][T12363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 471.515737][T12363] R13: 00007f24c6c16038 R14: 00007f24c6c15fa0 R15: 00007fff7b115f38 [ 471.523750][T12363] [ 471.669560][ T5790] Bluetooth: hci2: ISO packet for unknown connection handle 10 [ 471.722845][T12381] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.2167'. [ 471.740136][T12381] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.2167'. [ 471.753245][T12377] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.2167'. [ 472.209885][T12394] netlink: 'syz.3.2170': attribute type 2 has an invalid length. [ 472.227075][T12394] netlink: 'syz.3.2170': attribute type 8 has an invalid length. [ 474.938834][T12427] __nla_validate_parse: 2 callbacks suppressed [ 474.938854][T12427] netlink: 184 bytes leftover after parsing attributes in process `syz.3.2182'. [ 476.324639][T12447] netlink: 'syz.1.2188': attribute type 2 has an invalid length. [ 476.356682][T12447] netlink: 'syz.1.2188': attribute type 8 has an invalid length. [ 476.365366][T12447] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2188'. [ 476.564228][T12455] netlink: 'syz.3.2193': attribute type 10 has an invalid length. [ 476.590630][T12455] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2193'. [ 479.194070][T12498] netlink: 'syz.2.2203': attribute type 2 has an invalid length. [ 479.222907][T12498] netlink: 'syz.2.2203': attribute type 8 has an invalid length. [ 479.237135][T12498] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2203'. [ 479.470424][T12506] netlink: 206132 bytes leftover after parsing attributes in process `syz.1.2206'. [ 479.482923][T12506] openvswitch: netlink: IP tunnel dst address not specified [ 480.284343][T12531] netlink: 'syz.1.2213': attribute type 10 has an invalid length. [ 480.296797][T12531] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2213'. [ 482.413013][T12574] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2230'. [ 486.658140][T12658] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 487.674419][ T5790] Bluetooth: hci2: ISO packet for unknown connection handle 10 [ 488.016224][T12689] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2267'. [ 488.032597][ T5790] Bluetooth: hci2: ISO packet for unknown connection handle 10 [ 488.607549][T12701] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 489.693618][ T5790] Bluetooth: hci0: ISO packet for unknown connection handle 10 [ 490.043253][T12724] delete_channel: no stack [ 490.048109][T12724] delete_channel: no stack [ 490.270912][T12732] netlink: 64083 bytes leftover after parsing attributes in process `syz.3.2280'. [ 492.665353][T12769] netlink: 'syz.3.2295': attribute type 10 has an invalid length. [ 492.774747][T12769] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 493.317499][T12775] netlink: 176 bytes leftover after parsing attributes in process `syz.3.2296'. [ 494.098638][T12799] netlink: 'syz.0.2304': attribute type 21 has an invalid length. [ 494.116483][T12799] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2304'. [ 494.134437][T12799] netlink: 'syz.0.2304': attribute type 5 has an invalid length. [ 494.155835][T12799] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2304'. [ 494.576549][T12810] netlink: 'syz.1.2307': attribute type 4 has an invalid length. [ 494.654206][T12810] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2307'. [ 494.784469][T12810] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 495.640225][T12798] delete_channel: no stack [ 497.202903][ T5790] Bluetooth: hci0: ISO packet for unknown connection handle 10 [ 498.336694][T12881] netlink: 'syz.1.2328': attribute type 21 has an invalid length. [ 498.357913][T12881] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2328'. [ 498.367154][T12881] netlink: 'syz.1.2328': attribute type 5 has an invalid length. [ 498.395130][T12881] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2328'. [ 498.613250][ T5790] Bluetooth: hci0: ISO packet for unknown connection handle 11 [ 499.421654][T12909] batman_adv: batadv0: adding TT local entry ba:00:00:e1:ff:ff to non-existent VLAN 815 [ 499.432434][T12909] batman_adv: batadv0: adding TT local entry ba:00:00:e1:ff:ff to non-existent VLAN 815 [ 499.451644][T12909] batman_adv: batadv0: adding TT local entry ba:00:00:e1:ff:ff to non-existent VLAN 815 [ 499.461795][T12909] batman_adv: batadv0: adding TT local entry ba:00:00:e1:ff:ff to non-existent VLAN 815 [ 499.471850][T12909] batman_adv: batadv0: adding TT local entry ba:00:00:e1:ff:ff to non-existent VLAN 815 [ 499.481944][T12909] batman_adv: batadv0: adding TT local entry ba:00:00:e1:ff:ff to non-existent VLAN 815 [ 499.492053][T12909] batman_adv: batadv0: adding TT local entry ba:00:00:e1:ff:ff to non-existent VLAN 815 [ 499.603228][T12880] delete_channel: no stack [ 500.216043][ T5790] Bluetooth: hci2: ISO packet for unknown connection handle 10 [ 500.376408][T12927] netlink: 'syz.0.2344': attribute type 9 has an invalid length. [ 500.385089][T12927] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.2344'. [ 501.265241][ T5785] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 501.276334][ T5785] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 501.286125][ T5785] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 501.304346][ T5785] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 501.312954][ T5785] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 501.322313][ T5785] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 501.763826][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.775602][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.743984][T12943] chnl_net:caif_netlink_parms(): no params data found [ 502.792745][T12970] FAULT_INJECTION: forcing a failure. [ 502.792745][T12970] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 502.844081][T12970] CPU: 0 PID: 12970 Comm: syz.3.2357 Not tainted syzkaller #0 [ 502.851635][T12970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 502.861753][T12970] Call Trace: [ 502.865084][T12970] [ 502.868062][T12970] dump_stack_lvl+0x18c/0x250 [ 502.872793][T12970] ? show_regs_print_info+0x20/0x20 [ 502.878094][T12970] ? load_image+0x420/0x420 [ 502.882647][T12970] ? __might_fault+0xaa/0x120 [ 502.887379][T12970] ? __lock_acquire+0x7d40/0x7d40 [ 502.892456][T12970] should_fail_ex+0x39d/0x4d0 [ 502.897200][T12970] _copy_from_user+0x2f/0xe0 [ 502.901853][T12970] __sys_bpf+0x23e/0x890 [ 502.906147][T12970] ? bpf_link_show_fdinfo+0x390/0x390 [ 502.911585][T12970] ? lock_chain_count+0x20/0x20 [ 502.916503][T12970] __x64_sys_bpf+0x7c/0x90 [ 502.920973][T12970] do_syscall_64+0x55/0xb0 [ 502.925438][T12970] ? clear_bhb_loop+0x40/0x90 [ 502.930164][T12970] ? clear_bhb_loop+0x40/0x90 [ 502.934891][T12970] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 502.940845][T12970] RIP: 0033:0x7f60df39ce59 [ 502.945308][T12970] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 502.964980][T12970] RSP: 002b:00007f60e02cf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 502.973446][T12970] RAX: ffffffffffffffda RBX: 00007f60df615fa0 RCX: 00007f60df39ce59 [ 502.981489][T12970] RDX: 0000000000000020 RSI: 00002000000007c0 RDI: 0000000000000001 [ 502.989540][T12970] RBP: 00007f60e02cf090 R08: 0000000000000000 R09: 0000000000000000 [ 502.997561][T12970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 503.005586][T12970] R13: 00007f60df616038 R14: 00007f60df615fa0 R15: 00007ffd302911d8 [ 503.013653][T12970] [ 503.381909][ T5785] Bluetooth: hci4: command tx timeout [ 503.394560][T12943] bridge0: port 1(bridge_slave_0) entered blocking state [ 503.402011][T12943] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.409431][T12943] bridge_slave_0: entered allmulticast mode [ 503.417114][T12943] bridge_slave_0: entered promiscuous mode [ 503.488182][T12943] bridge0: port 2(bridge_slave_1) entered blocking state [ 503.495832][T12943] bridge0: port 2(bridge_slave_1) entered disabled state [ 503.568874][T12943] bridge_slave_1: entered allmulticast mode [ 503.576494][T12943] bridge_slave_1: entered promiscuous mode [ 503.715137][T12943] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 503.828306][T12943] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 503.913380][T12943] team0: Port device team_slave_0 added [ 503.939551][T12943] team0: Port device team_slave_1 added [ 504.029784][T12943] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 504.036817][T12943] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 504.086333][T12943] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 504.106351][T12985] netlink: 'syz.3.2361': attribute type 10 has an invalid length. [ 504.115500][T12985] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2361'. [ 504.146508][T12985] bridge0: port 3(team0) entered disabled state [ 504.180554][T12985] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 504.198045][T12943] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 504.205070][T12943] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 504.232346][T12943] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 504.337754][T12943] hsr_slave_0: entered promiscuous mode [ 504.344765][T12943] hsr_slave_1: entered promiscuous mode [ 504.353146][T12943] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 504.361193][T12943] Cannot create hsr debugfs directory [ 504.446084][T12987] netlink: 'syz.0.2362': attribute type 3 has an invalid length. [ 504.472287][T12987] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2362'. [ 504.668735][T12943] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.770416][T12943] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.036332][T12943] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.144314][T12943] bond0: (slave netdevsim0): Releasing backup interface [ 505.176402][T12943] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.443762][ T5785] Bluetooth: hci4: command tx timeout [ 505.693941][T12943] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 505.789357][T12943] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 505.816551][T13010] netlink: 'syz.2.2370': attribute type 29 has an invalid length. [ 505.831497][T12943] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 505.844601][T13010] netlink: 'syz.2.2370': attribute type 3 has an invalid length. [ 505.888604][T13010] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2370'. [ 505.977080][T12943] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 505.993549][T13009] delete_channel: no stack [ 506.258033][T12943] 8021q: adding VLAN 0 to HW filter on device bond0 [ 506.305270][T12943] 8021q: adding VLAN 0 to HW filter on device team0 [ 506.351223][ T3459] bridge0: port 1(bridge_slave_0) entered blocking state [ 506.358539][ T3459] bridge0: port 1(bridge_slave_0) entered forwarding state [ 506.436198][ T3459] bridge0: port 2(bridge_slave_1) entered blocking state [ 506.443497][ T3459] bridge0: port 2(bridge_slave_1) entered forwarding state [ 507.044149][T12943] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 507.245805][T12943] veth0_vlan: entered promiscuous mode [ 507.432899][T12943] veth1_vlan: entered promiscuous mode [ 507.518647][ T5785] Bluetooth: hci4: command tx timeout [ 507.557074][T12943] veth0_macvtap: entered promiscuous mode [ 507.577451][T12943] veth1_macvtap: entered promiscuous mode [ 507.735222][T12943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 507.787809][T12943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 507.798396][T12943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 507.809215][T12943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 507.819408][T12943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 507.847991][T12943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 507.865581][T12943] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 507.891284][T12943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 507.915356][T12943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 507.925907][T12943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 507.937026][T12943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 507.959439][T12943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: €Â0 [ 507.969903][T12943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 507.983852][T12943] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 508.331827][T12943] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.345257][T12943] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.356797][T12943] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.372316][T12943] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.457390][T13045] netlink: 'syz.0.2379': attribute type 29 has an invalid length. [ 508.483475][T13045] netlink: 'syz.0.2379': attribute type 3 has an invalid length. [ 508.518932][T13045] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2379'. [ 508.668373][T13044] delete_channel: no stack [ 508.754246][ T2957] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 508.762275][ T2957] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 508.811229][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 508.825825][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 509.264373][ T5785] Bluetooth: hci2: ISO packet for unknown connection handle 10 [ 509.617793][ T5785] Bluetooth: hci4: command tx timeout [ 510.072054][ T5790] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 510.082984][ T5790] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 510.091552][ T5790] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 510.101527][ T5790] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 510.128021][ T5790] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 510.136757][ T5790] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 510.166118][ T3459] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.323461][ T3459] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.424259][ T3459] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.612931][ T3459] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.915306][ T5785] Bluetooth: hci2: ISO packet for unknown connection handle 10 [ 511.101984][T13074] chnl_net:caif_netlink_parms(): no params data found [ 511.557126][ T3459] ip6gretap0 (unregistering): left allmulticast mode [ 511.576430][ T3459] ip6gretap0 (unregistering): left promiscuous mode [ 511.597499][ T3459] Ÿë: port 3(ip6gretap0) entered disabled state [ 512.158607][ T5785] Bluetooth: hci0: command tx timeout [ 512.214175][T13125] netlink: 'syz.1.2399': attribute type 29 has an invalid length. [ 512.228028][T13125] netlink: 'syz.1.2399': attribute type 3 has an invalid length. [ 512.237516][T13125] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2399'. [ 512.418073][T13124] delete_channel: no stack [ 512.577272][T13074] bridge0: port 1(bridge_slave_0) entered blocking state [ 512.613949][T13074] bridge0: port 1(bridge_slave_0) entered disabled state [ 512.621931][T13074] bridge_slave_0: entered allmulticast mode [ 512.629838][T13074] bridge_slave_0: entered promiscuous mode [ 512.647406][T13074] bridge0: port 2(bridge_slave_1) entered blocking state [ 512.665288][T13074] bridge0: port 2(bridge_slave_1) entered disabled state [ 512.678354][T13074] bridge_slave_1: entered allmulticast mode [ 512.695053][T13074] bridge_slave_1: entered promiscuous mode [ 512.907935][ T5785] Bluetooth: hci2: ISO packet for unknown connection handle 10 [ 512.948907][T13074] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 512.962554][T13074] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 513.034007][T13074] team0: Port device team_slave_0 added [ 513.099579][T13074] team0: Port device team_slave_1 added [ 513.177197][ T3459] gretap0 (unregistering): left allmulticast mode [ 513.188446][ T3459] gretap0 (unregistering): left promiscuous mode [ 513.194925][ T3459] Ÿë: port 2(gretap0) entered disabled state [ 513.252323][T13074] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 513.277842][T13074] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 513.320723][T13074] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 513.438784][T13074] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 513.473920][T13074] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 513.557822][T13074] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 514.025729][T13074] hsr_slave_0: entered promiscuous mode [ 514.044422][T13074] hsr_slave_1: entered promiscuous mode [ 514.063988][T13074] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 514.087344][T13074] Cannot create hsr debugfs directory [ 514.238280][ T5785] Bluetooth: hci0: command tx timeout [ 514.821253][ T3459] veth0_to_team: left allmulticast mode [ 514.862124][ T3459] veth0_to_team: left promiscuous mode [ 514.893946][ T3459] Ÿë: port 1(veth0_to_team) entered disabled state [ 514.950704][ T3459] hsr_slave_0: left promiscuous mode [ 514.959766][ T3459] hsr_slave_1: left promiscuous mode [ 514.976733][ T3459] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 514.996177][ T3459] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 515.005507][ T3459] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 515.020511][ T3459] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 515.947264][ T3459] team0 (unregistering): Port device team_slave_1 removed [ 516.020288][ T3459] team0 (unregistering): Port device C removed [ 516.103257][ T3459] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 516.114641][ T3459] bond_slave_1 (unregistering): left promiscuous mode [ 516.174912][ T3459] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 516.185063][ T3459] bond_slave_0 (unregistering): left promiscuous mode [ 516.328064][ T5785] Bluetooth: hci0: command tx timeout [ 516.667266][ T3459] team0 (unregistering): Port device dummy0 removed [ 516.773203][ T3459] bond0 (unregistering): Released all slaves [ 517.244318][T13204] netlink: 'syz.2.2416': attribute type 10 has an invalid length. [ 517.256040][T13204] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2416'. [ 517.284659][T13204] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 517.432819][T13212] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.2417'. [ 518.375825][T13074] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 518.407714][ T5785] Bluetooth: hci0: command tx timeout [ 518.452491][T13074] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 518.522988][T13074] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 518.558538][T13234] syz.1.2421: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 518.576429][T13234] CPU: 0 PID: 13234 Comm: syz.1.2421 Not tainted syzkaller #0 [ 518.584010][T13234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 518.594133][T13234] Call Trace: [ 518.597472][T13234] [ 518.600525][T13234] dump_stack_lvl+0x18c/0x250 [ 518.605271][T13234] ? show_regs_print_info+0x20/0x20 [ 518.610519][T13234] ? load_image+0x420/0x420 [ 518.615088][T13234] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 518.621574][T13234] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 518.628124][T13234] warn_alloc+0x246/0x340 [ 518.632516][T13234] ? stack_trace_save+0xaa/0x100 [ 518.637494][T13234] ? zone_watermark_ok_safe+0x230/0x230 [ 518.643092][T13234] ? kasan_set_track+0x5f/0x70 [ 518.647914][T13234] ? kasan_set_track+0x4e/0x70 [ 518.652801][T13234] ? __kasan_kmalloc+0x8f/0xa0 [ 518.657595][T13234] ? xsk_init_queue+0xad/0x100 [ 518.662533][T13234] ? xsk_setsockopt+0x4e5/0x760 [ 518.667418][T13234] ? do_sock_setsockopt+0x175/0x1a0 [ 518.672651][T13234] ? __x64_sys_setsockopt+0x182/0x200 [ 518.678090][T13234] __vmalloc_node_range+0x126/0x1330 [ 518.683447][T13234] ? free_vm_area+0x50/0x50 [ 518.688002][T13234] vmalloc_user+0x74/0x80 [ 518.692397][T13234] ? xskq_create+0xbf/0x170 [ 518.696935][T13234] xskq_create+0xbf/0x170 [ 518.701325][T13234] xsk_init_queue+0xad/0x100 [ 518.706002][T13234] xsk_setsockopt+0x4e5/0x760 [ 518.710728][T13234] ? xsk_poll+0x680/0x680 [ 518.715094][T13234] ? __fget_files+0x28/0x4b0 [ 518.719786][T13234] ? __fget_files+0x28/0x4b0 [ 518.724428][T13234] ? aa_sock_opt_perm+0x74/0x100 [ 518.729412][T13234] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 518.735029][T13234] ? security_socket_setsockopt+0x7e/0xa0 [ 518.740782][T13234] ? xsk_poll+0x680/0x680 [ 518.745329][T13234] do_sock_setsockopt+0x175/0x1a0 [ 518.750416][T13234] ? __fdget+0x180/0x210 [ 518.754959][T13234] __x64_sys_setsockopt+0x182/0x200 [ 518.760203][T13234] do_syscall_64+0x55/0xb0 [ 518.764683][T13234] ? clear_bhb_loop+0x40/0x90 [ 518.769398][T13234] ? clear_bhb_loop+0x40/0x90 [ 518.774114][T13234] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 518.780072][T13234] RIP: 0033:0x7f96cc79ce59 [ 518.784525][T13234] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 518.804184][T13234] RSP: 002b:00007f96cd6b3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 518.812671][T13234] RAX: ffffffffffffffda RBX: 00007f96cca15fa0 RCX: 00007f96cc79ce59 [ 518.820711][T13234] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000005 [ 518.828740][T13234] RBP: 00007f96cc832d6f R08: 0000000000000004 R09: 0000000000000000 [ 518.836748][T13234] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 518.844753][T13234] R13: 00007f96cca16038 R14: 00007f96cca15fa0 R15: 00007ffee6731e68 [ 518.852890][T13234] [ 518.874113][T13234] Mem-Info: [ 518.877332][T13234] active_anon:5466 inactive_anon:0 isolated_anon:0 [ 518.877332][T13234] active_file:18414 inactive_file:40124 isolated_file:0 [ 518.877332][T13234] unevictable:768 dirty:90 writeback:0 [ 518.877332][T13234] slab_reclaimable:10667 slab_unreclaimable:94079 [ 518.877332][T13234] mapped:24405 shmem:1362 pagetables:589 [ 518.877332][T13234] sec_pagetables:0 bounce:0 [ 518.877332][T13234] kernel_misc_reclaimable:0 [ 518.877332][T13234] free:1343594 free_pcp:11532 free_cma:0 [ 518.942802][T13234] Node 0 active_anon:21864kB inactive_anon:0kB active_file:73656kB inactive_file:160292kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:97620kB dirty:360kB writeback:0kB shmem:3912kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10388kB pagetables:2356kB sec_pagetables:0kB all_unreclaimable? no [ 518.978427][T13234] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 519.011989][T13074] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 519.025142][T13234] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 519.054381][T13234] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 519.061536][T13234] Node 0 DMA32 free:1468936kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:21924kB inactive_anon:0kB active_file:73656kB inactive_file:159472kB unevictable:1536kB writepending:356kB present:3129332kB managed:2586928kB mlocked:0kB bounce:0kB free_pcp:21204kB local_pcp:19472kB free_cma:0kB [ 519.132849][T13234] lowmem_reserve[]: 0 0 0 0 0 [ 519.137895][T13234] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:820kB unevictable:0kB writepending:4kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB [ 519.188651][T13234] lowmem_reserve[]: 0 0 0 0 0 [ 519.195031][T13234] Node 1 Normal free:3890080kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:24516kB local_pcp:13060kB free_cma:0kB [ 519.244486][T13234] lowmem_reserve[]: 0 0 0 0 0 [ 519.250379][T13234] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 519.274693][T13234] Node 0 DMA32: 304*4kB (UME) 787*8kB (UME) 719*16kB (UME) 2098*32kB (UM) 798*64kB (UME) 282*128kB (UME) 53*256kB (UM) 90*512kB (UM) 81*1024kB (UM) 3*2048kB (UM) 280*4096kB (ME) = 1468936kB [ 519.335146][T13234] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 519.428949][T13234] Node 1 Normal: 236*4kB (U) 52*8kB (UME) 41*16kB (UME) 52*32kB (UME) 19*64kB (UE) 5*128kB (UME) 0*256kB 3*512kB (UME) 0*1024kB 0*2048kB 948*4096kB (M) = 3890080kB [ 519.487778][T13234] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 519.497435][T13234] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 519.517018][T13234] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 519.533187][T13234] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 519.548186][T13234] 59899 total pagecache pages [ 519.553045][T13234] 0 pages in swap cache [ 519.557274][T13234] Free swap = 124996kB [ 519.575338][T13234] Total swap = 124996kB [ 519.580094][T13234] 2097051 pages RAM [ 519.583948][T13234] 0 pages HighMem/MovableOnly [ 519.592296][T13234] 416933 pages reserved [ 519.596540][T13234] 0 pages cma reserved [ 519.631127][T13074] 8021q: adding VLAN 0 to HW filter on device bond0 [ 519.677548][T13074] 8021q: adding VLAN 0 to HW filter on device team0 [ 519.713807][ T1096] bridge0: port 1(bridge_slave_0) entered blocking state [ 519.721265][ T1096] bridge0: port 1(bridge_slave_0) entered forwarding state [ 519.774516][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 519.781827][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 520.591279][T13074] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 520.787169][T13074] veth0_vlan: entered promiscuous mode [ 520.847126][T13074] veth1_vlan: entered promiscuous mode [ 521.431957][T13074] veth0_macvtap: entered promiscuous mode [ 521.484254][T13074] veth1_macvtap: entered promiscuous mode [ 521.700989][T13074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 521.767803][T13074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 521.798527][T13074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 521.810024][T13074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 521.821637][T13074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 521.833639][T13074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 521.858772][T13074] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 521.892099][T13297] FAULT_INJECTION: forcing a failure. [ 521.892099][T13297] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 521.911527][T13297] CPU: 1 PID: 13297 Comm: syz.1.2435 Not tainted syzkaller #0 [ 521.919086][T13297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 521.929196][T13297] Call Trace: [ 521.932517][T13297] [ 521.935496][T13297] dump_stack_lvl+0x18c/0x250 [ 521.940261][T13297] ? show_regs_print_info+0x20/0x20 [ 521.945516][T13297] ? load_image+0x420/0x420 [ 521.950082][T13297] ? __might_fault+0xaa/0x120 [ 521.954810][T13297] ? __lock_acquire+0x7d40/0x7d40 [ 521.959896][T13297] should_fail_ex+0x39d/0x4d0 [ 521.964647][T13297] _copy_from_iter+0x1d9/0x12e0 [ 521.969576][T13297] ? slab_post_alloc_hook+0x8a/0x4b0 [ 521.974929][T13297] ? __virt_addr_valid+0x18c/0x540 [ 521.980148][T13297] ? __lock_acquire+0x7d40/0x7d40 [ 521.985229][T13297] ? rcu_is_watching+0x15/0xb0 [ 521.990059][T13297] ? copyout_mc+0x70/0x70 [ 521.994450][T13297] ? __virt_addr_valid+0x18c/0x540 [ 521.999631][T13297] ? __virt_addr_valid+0x18c/0x540 [ 522.004807][T13297] ? __virt_addr_valid+0x469/0x540 [ 522.010013][T13297] ? __check_object_size+0x506/0xa20 [ 522.015356][T13297] netlink_sendmsg+0x76b/0xbf0 [ 522.020185][T13297] ? netlink_getsockopt+0x590/0x590 [ 522.025440][T13297] ? aa_sock_msg_perm+0x94/0x150 [ 522.030438][T13297] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 522.035784][T13297] ? security_socket_sendmsg+0x80/0xa0 [ 522.041332][T13297] ? netlink_getsockopt+0x590/0x590 [ 522.046600][T13297] ____sys_sendmsg+0x5ba/0x960 [ 522.051439][T13297] ? __asan_memset+0x22/0x40 [ 522.056089][T13297] ? __sys_sendmsg_sock+0x30/0x30 [ 522.061169][T13297] ? __import_iovec+0x5f2/0x850 [ 522.066081][T13297] ? import_iovec+0x73/0xa0 [ 522.070638][T13297] ___sys_sendmsg+0x2a6/0x360 [ 522.075370][T13297] ? get_pid_task+0x20/0x1e0 [ 522.080028][T13297] ? __sys_sendmsg+0x2a0/0x2a0 [ 522.084870][T13297] ? __lock_acquire+0x7d40/0x7d40 [ 522.089983][T13297] __se_sys_sendmsg+0x1c2/0x2b0 [ 522.094898][T13297] ? __x64_sys_sendmsg+0x80/0x80 [ 522.099909][T13297] ? lockdep_hardirqs_on+0x98/0x150 [ 522.105174][T13297] do_syscall_64+0x55/0xb0 [ 522.109641][T13297] ? clear_bhb_loop+0x40/0x90 [ 522.114365][T13297] ? clear_bhb_loop+0x40/0x90 [ 522.119100][T13297] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 522.125054][T13297] RIP: 0033:0x7f96cc79ce59 [ 522.129521][T13297] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 522.149203][T13297] RSP: 002b:00007f96cd6b3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 522.157674][T13297] RAX: ffffffffffffffda RBX: 00007f96cca15fa0 RCX: 00007f96cc79ce59 [ 522.165699][T13297] RDX: 0000000000098010 RSI: 0000200000000240 RDI: 0000000000000006 [ 522.173765][T13297] RBP: 00007f96cd6b3090 R08: 0000000000000000 R09: 0000000000000000 [ 522.181793][T13297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 522.189819][T13297] R13: 00007f96cca16038 R14: 00007f96cca15fa0 R15: 00007ffee6731e68 [ 522.197860][T13297] [ 522.230585][T13074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 522.250737][T13074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.263030][T13074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: €Â0 [ 522.275475][T13074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.290277][T13074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 522.302374][T13074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.334150][T13074] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 522.385670][T13074] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.396983][T13074] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.438582][T13074] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.447391][T13074] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.563629][T13301] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2436'. [ 522.655497][T13301] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2436'. [ 522.817842][T13307] netlink: 'syz.3.2437': attribute type 25 has an invalid length. [ 522.826172][T13307] netlink: 'syz.3.2437': attribute type 32 has an invalid length. [ 523.077493][T13316] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2439'. [ 523.253387][T13316] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 523.305997][T13316] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 523.385879][T13316] bond0 (unregistering): Released all slaves [ 523.464839][T13319] netlink: 'syz.1.2439': attribute type 10 has an invalid length. [ 523.628067][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 523.657951][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 523.836271][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 523.849694][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 524.959695][T13372] netlink: 'syz.2.2450': attribute type 27 has an invalid length. [ 524.977069][T13372] netlink: 2418 bytes leftover after parsing attributes in process `syz.2.2450'. [ 525.118467][T13374] Ÿë: port 1(gretap0) entered blocking state [ 525.125439][T13374] Ÿë: port 1(gretap0) entered disabled state [ 525.168959][T13374] gretap0: entered allmulticast mode [ 525.211075][T13374] gretap0: entered promiscuous mode [ 525.306070][T13376] Ÿë: port 2(veth0_to_team) entered blocking state [ 525.334008][T13376] Ÿë: port 2(veth0_to_team) entered disabled state [ 525.376172][T13376] veth0_to_team: entered allmulticast mode [ 525.402587][T13376] veth0_to_team: entered promiscuous mode [ 525.633641][T13388] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 525.644445][T13388] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 525.653270][T13388] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 525.667421][T13388] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 525.680250][T13388] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 525.687807][T13388] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 527.186226][ T59] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.336562][ T59] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.486786][ T59] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.539055][T13385] chnl_net:caif_netlink_parms(): no params data found [ 527.640615][ T59] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.640978][T13427] netlink: 201660 bytes leftover after parsing attributes in process `syz.1.2462'. [ 527.758143][T13388] Bluetooth: hci1: command tx timeout [ 528.398616][T13385] bridge0: port 1(bridge_slave_0) entered blocking state [ 528.430007][T13385] bridge0: port 1(bridge_slave_0) entered disabled state [ 528.444391][T13385] bridge_slave_0: entered allmulticast mode [ 528.453962][T13385] bridge_slave_0: entered promiscuous mode [ 528.471364][T13438] Ÿë: port 3(ip6gretap0) entered blocking state [ 528.515544][T13438] Ÿë: port 3(ip6gretap0) entered disabled state [ 528.525926][T13438] ip6gretap0: entered allmulticast mode [ 528.539694][T13438] ip6gretap0: entered promiscuous mode [ 528.618528][T13385] bridge0: port 2(bridge_slave_1) entered blocking state [ 528.634030][T13385] bridge0: port 2(bridge_slave_1) entered disabled state [ 528.654678][T13385] bridge_slave_1: entered allmulticast mode [ 528.673254][T13385] bridge_slave_1: entered promiscuous mode [ 528.916598][ T59] ip6gretap0 (unregistering): left allmulticast mode [ 528.924001][ T59] ip6gretap0 (unregistering): left promiscuous mode [ 528.938062][ T59] Ÿë: port 3(ip6gretap0) entered disabled state [ 529.042297][T13385] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 529.160342][T13440] netlink: 'syz.2.2465': attribute type 29 has an invalid length. [ 529.199798][T13385] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 529.273198][T13440] netlink: 'syz.2.2465': attribute type 29 has an invalid length. [ 529.391970][T13441] netlink: 'syz.2.2465': attribute type 29 has an invalid length. [ 529.427438][T13440] netlink: 'syz.2.2465': attribute type 29 has an invalid length. [ 529.469142][T13385] team0: Port device team_slave_0 added [ 529.492819][T13385] team0: Port device team_slave_1 added [ 529.837806][T13388] Bluetooth: hci1: command tx timeout [ 530.428650][T13385] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 530.435779][T13385] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 530.517769][T13385] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 530.641778][T13385] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 530.680324][T13385] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 530.758257][T13385] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 530.840304][ T59] gretap0 (unregistering): left allmulticast mode [ 530.883042][ T59] gretap0 (unregistering): left promiscuous mode [ 530.889689][ T59] Ÿë: port 1(gretap0) entered disabled state [ 531.208845][T13469] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2470'. [ 531.417771][T13388] Bluetooth: hci4: ISO packet for unknown connection handle 10 [ 531.557023][T13469] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 531.640975][T13469] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 531.653956][T13475] __sock_release: fasync list not empty! [ 531.738092][T13469] bond0 (unregistering): (slave netdevsim0): Releasing backup interface [ 531.790101][T13469] bond0 (unregistering): Released all slaves [ 531.917838][T13388] Bluetooth: hci1: command tx timeout [ 531.961675][T13385] hsr_slave_0: entered promiscuous mode [ 531.983536][T13385] hsr_slave_1: entered promiscuous mode [ 532.004756][T13385] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 532.028916][T13385] Cannot create hsr debugfs directory [ 532.056007][T13470] netlink: 'syz.2.2470': attribute type 10 has an invalid length. [ 532.186775][T13471] wg2: entered promiscuous mode [ 532.192126][T13471] wg2: entered allmulticast mode [ 532.241665][T13482] netlink: 'syz.0.2474': attribute type 10 has an invalid length. [ 532.265239][T13482] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2474'. [ 533.266542][ T59] [ 533.268964][ T59] ====================================================== [ 533.276016][ T59] WARNING: possible circular locking dependency detected [ 533.283072][ T59] syzkaller #0 Not tainted [ 533.287504][ T59] ------------------------------------------------------ [ 533.294567][ T59] kworker/u4:4/59 is trying to acquire lock: [ 533.300565][ T59] ffff888078798d80 (team->team_lock_key#3){+.+.}-{3:3}, at: team_del_slave+0x32/0x1c0 [ 533.310234][ T59] [ 533.310234][ T59] but task is already holding lock: [ 533.317667][ T59] ffff88805cdf0768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x29a/0x690 [ 533.328216][ T59] [ 533.328216][ T59] which lock already depends on the new lock. [ 533.328216][ T59] [ 533.338643][ T59] [ 533.338643][ T59] the existing dependency chain (in reverse order) is: [ 533.347682][ T59] [ 533.347682][ T59] -> #1 (&rdev->wiphy.mtx){+.+.}-{3:3}: [ 533.355455][ T59] __mutex_lock+0x136/0xcc0 [ 533.360600][ T59] ieee80211_open+0x144/0x200 [ 533.365838][ T59] __dev_open+0x2cb/0x430 [ 533.370807][ T59] dev_open+0xab/0x190 [ 533.375424][ T59] team_add_slave+0x75f/0x29a0 [ 533.380736][ T59] do_setlink+0xdfe/0x4130 [ 533.385757][ T59] rtnl_newlink+0x17da/0x20a0 [ 533.390986][ T59] rtnetlink_rcv_msg+0x869/0xfa0 [ 533.396570][ T59] netlink_rcv_skb+0x241/0x4d0 [ 533.401923][ T59] netlink_unicast+0x751/0x8d0 [ 533.407235][ T59] netlink_sendmsg+0x8d0/0xbf0 [ 533.412546][ T59] ____sys_sendmsg+0x5ba/0x960 [ 533.417880][ T59] ___sys_sendmsg+0x2a6/0x360 [ 533.423142][ T59] __se_sys_sendmsg+0x1c2/0x2b0 [ 533.428569][ T59] do_syscall_64+0x55/0xb0 [ 533.433564][ T59] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 533.440030][ T59] [ 533.440030][ T59] -> #0 (team->team_lock_key#3){+.+.}-{3:3}: [ 533.448236][ T59] __lock_acquire+0x2df1/0x7d40 [ 533.453641][ T59] lock_acquire+0x19e/0x420 [ 533.458700][ T59] __mutex_lock+0x136/0xcc0 [ 533.463760][ T59] team_del_slave+0x32/0x1c0 [ 533.468904][ T59] team_device_event+0x28d/0xa20 [ 533.474396][ T59] notifier_call_chain+0x197/0x380 [ 533.480078][ T59] unregister_netdevice_many_notify+0x100d/0x1900 [ 533.487045][ T59] unregister_netdevice_queue+0x32c/0x370 [ 533.493340][ T59] _cfg80211_unregister_wdev+0x16b/0x580 [ 533.499629][ T59] ieee80211_remove_interfaces+0x49e/0x690 [ 533.506001][ T59] ieee80211_unregister_hw+0x5d/0x2a0 [ 533.511998][ T59] mac80211_hwsim_del_radio+0x289/0x480 [ 533.518149][ T59] hwsim_exit_net+0x58d/0x650 [ 533.523404][ T59] cleanup_net+0x70a/0xbb0 [ 533.528376][ T59] process_scheduled_works+0xa5d/0x15d0 [ 533.534473][ T59] worker_thread+0xa55/0xfc0 [ 533.539609][ T59] kthread+0x2fa/0x390 [ 533.544229][ T59] ret_from_fork+0x48/0x80 [ 533.549198][ T59] ret_from_fork_asm+0x11/0x20 [ 533.554541][ T59] [ 533.554541][ T59] other info that might help us debug this: [ 533.554541][ T59] [ 533.564787][ T59] Possible unsafe locking scenario: [ 533.564787][ T59] [ 533.572284][ T59] CPU0 CPU1 [ 533.577673][ T59] ---- ---- [ 533.583337][ T59] lock(&rdev->wiphy.mtx); [ 533.587876][ T59] lock(team->team_lock_key#3); [ 533.595373][ T59] lock(&rdev->wiphy.mtx); [ 533.602420][ T59] lock(team->team_lock_key#3); [ 533.607392][ T59] [ 533.607392][ T59] *** DEADLOCK *** [ 533.607392][ T59] [ 533.615566][ T59] 5 locks held by kworker/u4:4/59: [ 533.620713][ T59] #0: ffff88801a254938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 533.631655][ T59] #1: ffffc900015a7d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 533.642237][ T59] #2: ffffffff8e3b9990 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x14c/0xbb0 [ 533.651687][ T59] #3: ffffffff8e3c6988 (rtnl_mutex){+.+.}-{3:3}, at: ieee80211_unregister_hw+0x55/0x2a0 [ 533.661566][ T59] #4: ffff88805cdf0768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x29a/0x690 [ 533.672403][ T59] [ 533.672403][ T59] stack backtrace: [ 533.678318][ T59] CPU: 0 PID: 59 Comm: kworker/u4:4 Not tainted syzkaller #0 [ 533.685733][ T59] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 533.695825][ T59] Workqueue: netns cleanup_net [ 533.700655][ T59] Call Trace: [ 533.703979][ T59] [ 533.706967][ T59] dump_stack_lvl+0x18c/0x250 [ 533.711692][ T59] ? load_image+0x420/0x420 [ 533.716245][ T59] ? show_regs_print_info+0x20/0x20 [ 533.721501][ T59] ? print_circular_bug+0x12b/0x1a0 [ 533.726739][ T59] check_noncircular+0x2fc/0x400 [ 533.731736][ T59] ? print_deadlock_bug+0x5d0/0x5d0 [ 533.736965][ T59] ? lockdep_lock+0xf5/0x230 [ 533.741686][ T59] ? __lock_acquire+0x1273/0x7d40 [ 533.746759][ T59] ? _find_first_zero_bit+0xd3/0x100 [ 533.752074][ T59] __lock_acquire+0x2df1/0x7d40 [ 533.756967][ T59] ? verify_lock_unused+0x140/0x140 [ 533.762203][ T59] ? verify_lock_unused+0x140/0x140 [ 533.767441][ T59] lock_acquire+0x19e/0x420 [ 533.771977][ T59] ? team_del_slave+0x32/0x1c0 [ 533.776776][ T59] ? __might_sleep+0xe0/0xe0 [ 533.781391][ T59] ? read_lock_is_recursive+0x20/0x20 [ 533.786797][ T59] __mutex_lock+0x136/0xcc0 [ 533.791330][ T59] ? team_del_slave+0x32/0x1c0 [ 533.796116][ T59] ? __lock_acquire+0x7d40/0x7d40 [ 533.801167][ T59] ? rcu_is_watching+0x15/0xb0 [ 533.805961][ T59] ? trace_contention_end+0x39/0xe0 [ 533.811180][ T59] ? __mutex_lock+0x315/0xcc0 [ 533.815880][ T59] ? team_del_slave+0x32/0x1c0 [ 533.820671][ T59] ? mutex_lock_nested+0x20/0x20 [ 533.825810][ T59] ? bond_netdev_event+0xeb/0xf20 [ 533.830878][ T59] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 533.836551][ T59] team_del_slave+0x32/0x1c0 [ 533.841172][ T59] team_device_event+0x28d/0xa20 [ 533.846137][ T59] notifier_call_chain+0x197/0x380 [ 533.851279][ T59] unregister_netdevice_many_notify+0x100d/0x1900 [ 533.857722][ T59] ? lock_chain_count+0x20/0x20 [ 533.862613][ T59] ? unregister_netdevice_many+0x20/0x20 [ 533.868270][ T59] ? kernfs_remove_by_name_ns+0x117/0x150 [ 533.874056][ T59] ? __lock_acquire+0x7d40/0x7d40 [ 533.879119][ T59] unregister_netdevice_queue+0x32c/0x370 [ 533.884870][ T59] ? list_netdevice+0x730/0x730 [ 533.889744][ T59] ? kernfs_remove_by_name_ns+0x117/0x150 [ 533.895507][ T59] _cfg80211_unregister_wdev+0x16b/0x580 [ 533.901176][ T59] ieee80211_remove_interfaces+0x49e/0x690 [ 533.907045][ T59] ? ieee80211_do_stop+0x1e20/0x1e20 [ 533.912384][ T59] ? rcu_is_watching+0x15/0xb0 [ 533.917182][ T59] ieee80211_unregister_hw+0x5d/0x2a0 [ 533.922586][ T59] mac80211_hwsim_del_radio+0x289/0x480 [ 533.928164][ T59] ? rhashtable_remove_fast+0xc00/0xc00 [ 533.933738][ T59] hwsim_exit_net+0x58d/0x650 [ 533.938450][ T59] ? hwsim_init_net+0x90/0x90 [ 533.943159][ T59] ? __ip_vs_dev_cleanup_batch+0x238/0x250 [ 533.949101][ T59] cleanup_net+0x70a/0xbb0 [ 533.953541][ T59] ? ops_free_list+0x3b0/0x3b0 [ 533.958348][ T59] ? _raw_spin_unlock_irq+0x23/0x50 [ 533.963639][ T59] ? process_scheduled_works+0x96f/0x15d0 [ 533.969496][ T59] ? process_scheduled_works+0x96f/0x15d0 [ 533.975250][ T59] process_scheduled_works+0xa5d/0x15d0 [ 533.980864][ T59] ? worker_attach_to_pool+0x380/0x380 [ 533.986369][ T59] ? assign_work+0x3d2/0x5d0 [ 533.990996][ T59] worker_thread+0xa55/0xfc0 [ 533.995629][ T59] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 534.001583][ T59] ? _raw_spin_unlock+0x40/0x40 [ 534.006463][ T59] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 534.012408][ T59] kthread+0x2fa/0x390 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 534.016504][ T59] ? pr_cont_work+0x560/0x560 [ 534.021224][ T59] ? kthread_blkcg+0xd0/0xd0 [ 534.025865][ T59] ret_from_fork+0x48/0x80 [ 534.030326][ T59] ? kthread_blkcg+0xd0/0xd0 [ 534.034949][ T59] ret_from_fork_asm+0x11/0x20 [ 534.039750][ T59] [ 534.078542][T13388] Bluetooth: hci1: command tx timeout [ 534.108024][ T59] mac80211_hwsim hwsim9 wlan1 (unregistering): left promiscuous mode [ 534.117090][ T59] mac80211_hwsim hwsim9 wlan1 (unregistering): left allmulticast mode [ 534.162809][ T59] team0: Port device wlan1 removed [ 534.202703][T13483] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2474'. [ 534.757357][ T59] veth0_to_team: left allmulticast mode [ 534.779411][ T59] veth0_to_team: left promiscuous mode [ 534.785151][ T59] Ÿë: port 2(veth0_to_team) entered disabled state [ 534.850191][ T59] hsr_slave_0: left promiscuous mode [ 534.869988][ T59] hsr_slave_1: left promiscuous mode [ 534.899823][ T59] bridge_slave_1: left allmulticast mode [ 534.905570][ T59] bridge_slave_1: left promiscuous mode [ 534.918779][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 534.944561][ T59] bridge_slave_0: left allmulticast mode [ 534.956152][ T59] bridge_slave_0: left promiscuous mode [ 534.975909][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 534.994180][ T59] veth1_macvtap: left promiscuous mode [ 535.265249][ T59] geneve1 (unregistering): left promiscuous mode [ 535.271816][ T59] geneve1 (unregistering): left allmulticast mode [ 535.279313][ T59] team0 (unregistering): Port device geneve1 removed [ 535.398497][ T59] team_slave_1 (unregistering): left promiscuous mode [ 535.405319][ T59] team_slave_1 (unregistering): left allmulticast mode [ 535.413759][ T59] team0 (unregistering): Port device team_slave_1 removed [ 535.427084][ T59] team_slave_0 (unregistering): left promiscuous mode [ 535.436798][ T59] team_slave_0 (unregistering): left allmulticast mode [ 535.446932][ T59] team0 (unregistering): Port device team_slave_0 removed [ 535.479372][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 535.640211][ T59] bond0 (unregistering): Released all slaves [ 536.211991][ T59] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.275301][ T59] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.363739][ T59] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.477025][ T59] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.686003][ T59] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.805077][ T59] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.885684][ T59] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.955450][ T59] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.283654][ T59] ip6gretap0 (unregistering): left allmulticast mode [ 537.297717][ T59] ip6gretap0 (unregistering): left promiscuous mode [ 537.304458][ T59] Ÿë: port 3(ip6gretap0) entered disabled state [ 537.740025][ T59] gretap0 (unregistering): left allmulticast mode [ 537.746538][ T59] gretap0 (unregistering): left promiscuous mode [ 537.753044][ T59] Ÿë: port 1(gretap0) entered disabled state [ 538.195499][ T59] hsr_slave_0: left promiscuous mode [ 538.202390][ T59] hsr_slave_1: left promiscuous mode [ 538.213550][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 538.222034][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 538.232558][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 538.241125][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 538.253306][ T59] bridge_slave_1: left allmulticast mode [ 538.259085][ T59] bridge_slave_1: left promiscuous mode [ 538.264949][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 538.274364][ T59] bridge_slave_0: left allmulticast mode [ 538.280282][ T59] bridge_slave_0: left promiscuous mode [ 538.286201][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 538.296961][ T59] veth0_to_team: left allmulticast mode [ 538.302818][ T59] veth0_to_team: left promiscuous mode [ 538.309710][ T59] Ÿë: port 2(veth0_to_team) entered disabled state [ 538.322798][ T59] hsr_slave_0: left promiscuous mode [ 538.331147][ T59] hsr_slave_1: left promiscuous mode [ 538.337288][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 538.344842][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 538.353436][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 538.361033][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 538.371322][ T59] bridge_slave_1: left allmulticast mode [ 538.377045][ T59] bridge_slave_1: left promiscuous mode [ 538.383237][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 538.392801][ T59] bridge_slave_0: left allmulticast mode [ 538.398880][ T59] bridge_slave_0: left promiscuous mode [ 538.404682][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 538.415609][ T59] hsr_slave_0: left promiscuous mode [ 538.421847][ T59] hsr_slave_1: left promiscuous mode [ 538.430273][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 538.438333][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 538.446221][ T59] bridge_slave_1: left allmulticast mode [ 538.452367][ T59] bridge_slave_1: left promiscuous mode [ 538.458434][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 538.467308][ T59] bridge_slave_0: left allmulticast mode [ 538.473455][ T59] bridge_slave_0: left promiscuous mode [ 538.479487][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 538.495828][ T59] veth1_macvtap: left promiscuous mode [ 538.501611][ T59] veth0_macvtap: left promiscuous mode [ 538.508994][ T59] veth1_macvtap: left promiscuous mode [ 538.514581][ T59] veth0_macvtap: left promiscuous mode [ 538.521883][ T59] veth1_vlan: left promiscuous mode [ 538.527213][ T59] veth0_vlan: left promiscuous mode [ 538.804050][ T59] team0 (unregistering): Port device team_slave_1 removed [ 538.840010][ T59] team0 (unregistering): Port device team_slave_0 removed [ 538.867828][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 538.901885][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 538.979464][ T59] bond0 (unregistering): Released all slaves [ 539.267541][ T59] team0 (unregistering): Port device team_slave_1 removed [ 539.301918][ T59] team0 (unregistering): Port device team_slave_0 removed [ 539.604114][ T59] team0 (unregistering): Port device team_slave_1 removed [ 539.640365][ T59] team0 (unregistering): Port device team_slave_0 removed [ 539.653785][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 539.684950][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 539.753909][ T59] bond0 (unregistering): Released all slaves [ 540.606580][ T59] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.666551][ T59] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.717730][ T59] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.784140][ T59] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.958485][ T59] ip6gretap0 (unregistering): left allmulticast mode [ 540.965268][ T59] ip6gretap0 (unregistering): left promiscuous mode [ 540.974942][ T59] Ÿë: port 3(ip6gretap0) entered disabled state [ 541.324709][ T59] gretap0 (unregistering): left allmulticast mode [ 541.331390][ T59] gretap0 (unregistering): left promiscuous mode [ 541.338395][ T59] Ÿë: port 1(gretap0) entered disabled state [ 541.578967][ T59] veth0_to_team: left allmulticast mode [ 541.584632][ T59] veth0_to_team: left promiscuous mode [ 541.592179][ T59] Ÿë: port 2(veth0_to_team) entered disabled state [ 541.605272][ T59] hsr_slave_0: left promiscuous mode [ 541.612581][ T59] hsr_slave_1: left promiscuous mode [ 541.623075][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 541.632909][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 541.641108][ T59] batman_adv: batadv0: Interface deactivated: €Â0 [ 541.648765][ T59] batman_adv: batadv0: Removing interface: €Â0 [ 541.658428][ T59] veth0_macvtap: left promiscuous mode [ 541.664117][ T59] veth1_vlan: left promiscuous mode [ 541.670772][ T59] veth0_vlan: left promiscuous mode [ 541.894311][ T59] team0 (unregistering): Port device geneve1 removed [ 542.054673][ T59] team0 (unregistering): Port device team_slave_1 removed [ 542.068524][ T59] team0 (unregistering): Port device C removed