last executing test programs: 7.974198576s ago: executing program 1 (id=9406): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x2, 0x4, 0xfffffffc, 0xa}], 0x10, 0x1863}, 0x94) socketpair$unix(0x1, 0x5, 0x0, 0x0) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(r0, 0x88, 0x64, &(0x7f00000009c0), 0x4) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x4, 0xc272}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000140)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000180), &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xf9, &(0x7f0000000200)=[{}], 0x8, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0xc, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000700)={{0x1, 0xffffffffffffffff}, &(0x7f0000000640), &(0x7f0000000680)='%pB \x00'}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x4, 0x800104, 0x6, 0x0, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x50) bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000340)="d80000001c0081044e81f782db44b904021d0802010000001c7a15a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 4.963513894s ago: executing program 1 (id=9411): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, 0x0, &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r0, 0x0, 0x62, 0x0, &(0x7f0000000140)="cb74445b7d4c0b24676c6c71ae37efcedaf40242309766deb4e793f90000000000000000dbc856cbc664650634231454ca2d8034c4ca29e0d99c3b6615e91835a600c08f989af45438a54981be310aad92ae545b1c961e5f3762a51fe4c736edec6f", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0), 0x2, 0x0, 0x10000}, 0x50) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xfe33) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='cpu<=0||!') perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0xa0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18020000000000bd0000000003000000850000002700000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0x18, 0x0, &(0x7f0000000380)="e0bcd7c6a00e0588cd5e47b8bffc8e670f78f1f5b3aac3eb", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.872779677s ago: executing program 4 (id=9413): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000007d40)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000004c0)={{r0, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000480)='%pi6 \x00'}, 0x20) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0xb) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000100)=@o_path={&(0x7f00000000c0)='./file0\x00', r2, 0x4000, r2}, 0x18) ioctl$SIOCSIFHWADDR(r2, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x5411, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000640)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x10, 0x4, &(0x7f0000000080)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f00000000c0)=@framed={{0xffffffb4, 0x2, 0x0, 0x0, 0x0, 0x61, 0x11, 0xa1}, [@call]}, &(0x7f0000000380)='GPL\x00', 0x5, 0xff92, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x36c, 0x10, &(0x7f0000000000), 0x26}, 0x48) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syz_tun\x00'}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, &(0x7f0000000080)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="0200"}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r1}, 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)=':\x00') r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x11, &(0x7f0000000340)=ANY=[@ANYBLOB="180200000000000000000000020004008500000097000000b7080000000000007b8af8ff00000000b7080000ffffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000001000000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.871423147s ago: executing program 0 (id=9414): r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x2, 0x7f, 0x5, 0x7, 0x0, 0x5, 0x12a40, 0xf, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x81e4, 0x1, @perf_bp={&(0x7f0000000000), 0xc}, 0x44, 0x4, 0x123d9f4d, 0x6, 0x6c0d, 0x7, 0x6, 0x0, 0x8aa7, 0x0, 0x9}, 0x0, 0x4, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x2) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r0) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x3) r1 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x2, 0x7, 0xe, 0x3, 0x0, 0xc4, 0x140, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xfffffff5, 0x0, @perf_config_ext={0x4390b8ad, 0x3}, 0x10000, 0x9, 0x2, 0x6, 0x5, 0x298, 0x3, 0x0, 0x80000000, 0x0, 0x6}, 0xffffffffffffffff, 0xd, r0, 0x8) ioctl$PERF_EVENT_IOC_ID(r1, 0x80082407, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x7) ioctl$PERF_EVENT_IOC_ID(r1, 0x80082407, &(0x7f0000000180)) close(r0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x24, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x3}, 0x50) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x6, [@int={0xc, 0x0, 0x0, 0x1, 0x0, 0x1d, 0x0, 0x80, 0x1}]}, {0x0, [0x30, 0x5f, 0x5f, 0x2e]}}, &(0x7f0000000280)=""/250, 0x2e, 0xfa, 0x1, 0x81, 0x10000}, 0x28) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x10000000, '\x00', 0x0, r3, 0x3, 0x3}, 0x50) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000440)=0x4) perf_event_open(&(0x7f00000004c0)={0x4, 0x80, 0x8, 0x8, 0x5, 0x3, 0x0, 0x5, 0x10000, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x100, 0x2, @perf_bp={&(0x7f0000000480), 0xd}, 0x440b, 0x1000, 0x9, 0x1, 0x2c, 0x107, 0x9b6d, 0x0, 0xffff, 0x0, 0x3ff}, 0x0, 0x4, r0, 0x0) ioctl$PERF_EVENT_IOC_ID(r1, 0x80082407, &(0x7f0000000540)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb0, 0xb0, 0x9, [@enum={0xa, 0x4, 0x0, 0x6, 0x4, [{0x0, 0x4}, {0x10, 0x7}, {0xe, 0x5}, {0xb, 0x40}]}, @typedef={0xe}, @var={0x4, 0x0, 0x0, 0xe, 0x1}, @enum={0xc}, @enum={0xb, 0x4, 0x0, 0x6, 0x4, [{0x6, 0x8}, {0x10, 0x8}, {0x0, 0x101}, {0xa, 0xfffffff7}]}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x10}, {0x0, 0x1}, {0x7, 0x2}]}, @fwd={0xa}]}, {0x0, [0x2e, 0x0, 0x61, 0x2e, 0x30, 0x5f, 0x2e]}}, &(0x7f00000006c0)=""/214, 0xd1, 0xd6}, 0x28) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000900)={r2, 0x58, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r8 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000a00)=@o_path={&(0x7f00000009c0)='./file0\x00', 0x0, 0x0, r5}, 0x18) r9 = bpf$ITER_CREATE(0x21, &(0x7f0000000a40), 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b40)=@bpf_ext={0x1c, 0x4, &(0x7f0000000800)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xd2}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}]}, &(0x7f0000000840)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41100, 0x10, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000980)={0x3, 0x1, 0x1ff}, 0x10, 0x16fac, r8, 0x6, &(0x7f0000000a80)=[r2, r2, r9, r2, r4, r4, r4, r4], &(0x7f0000000ac0)=[{0x4, 0x4, 0x6, 0xc}, {0x0, 0x1, 0xa, 0x1}, {0x5, 0x1, 0x1, 0x7}, {0x1, 0x4, 0xd, 0x1}, {0x2, 0x2, 0xe, 0x3}, {0x4, 0x2, 0x5, 0xb}], 0x10, 0x4}, 0x94) ioctl$TUNGETVNETBE(r9, 0x800454df, &(0x7f0000000c00)) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000c40)={r6, 0x8d8, 0x10}, 0xc) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001040)={r9, 0x20, &(0x7f0000001000)={&(0x7f0000000f40)=""/5, 0x5, 0x0, &(0x7f0000000f80)=""/84, 0x54}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x1c, 0x30, &(0x7f0000000c80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x200}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@map_fd={0x18, 0x4, 0x1, 0x0, r2}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_fd={0x18, 0x4, 0x1, 0x0, r9}, @cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffff9}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r10}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000e00)='syzkaller\x00', 0x4, 0x7d, &(0x7f0000000e40)=""/125, 0x41000, 0x2, '\x00', 0x0, @fallback=0x27, r9, 0x8, &(0x7f0000000ec0)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000f00)={0x3, 0x8, 0xfffffffa, 0x7}, 0x10, r11, 0xffffffffffffffff, 0x6, &(0x7f0000001080)=[r9, r9, r9, r4], &(0x7f00000010c0)=[{0x4, 0x1, 0xe, 0x3}, {0x1, 0x3, 0x6, 0x5}, {0x0, 0x5, 0x5, 0x7}, {0x5, 0x3, 0x5, 0x3}, {0x5, 0x4, 0x7, 0x9}, {0x4, 0x1, 0xb, 0x7}], 0x10, 0x200}, 0x94) r12 = gettid() r13 = perf_event_open$cgroup(&(0x7f0000001240)={0x0, 0x80, 0x0, 0x3, 0x3, 0xd, 0x0, 0xffffffffffffffff, 0x20070, 0xa, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xa, 0x1, @perf_bp={&(0x7f0000001200), 0x2}, 0x100a9, 0x0, 0x9, 0x5, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x2}, r9, 0x1, r0, 0xe) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001300)={r12, r13, 0x0, 0xa, &(0x7f00000012c0)='syzkaller\x00'}, 0x30) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r9, 0x2405, r1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001680)={0xffffffffffffffff, 0x0, 0x74, 0xc1, &(0x7f00000013c0)="b227709d154bcc1d1db7d79d29380f48b44fb29b301e1525a8e830c35cdb2394cef0c9929e85a3b5a7fc3e9082fe0b275be7168aac6e26ca3ab8a5ccb6b1f535a68a6141545441df0513d2d273a81945af5aa41c42a3f8349031618c67150e2840a478e8b9fa1a1a3f4956ea2852d65d228f5016", &(0x7f0000001440)=""/193, 0x49, 0x0, 0x28, 0xc7, &(0x7f0000001540)="226f3f8319f43a7ff55a23a81cbe311ef30f5f71b5d0e2634710fc1d48d7fad29c6a260d134fb73e", &(0x7f0000001580)="cf915c0165fed94eda059b46df3911e4a5bdd72a4815c8e5f7abec9ebb52092a351edd4a3035258e3a74e5fbadbf25fa47b2147b324545928fe6af2962192ca0bb5f15b9a708a4c5eee7ff845d2dc5f444ded08146c6d6b0bd0585617eaf20a4e27eee4422268371b848f9ccd2688741d1550d6ee715beda112f31088b82f76c1ae17d5a8300f2fddb5cd8e7e7a254fe625be360af8196a555e3ea4a57a8512eb1e149e362e4110e4d0759f670cd7fbb7120698767e94642a3fb4a5e43d67ea0f53a8bafd7f9ed", 0x5, 0x0, 0x9}, 0x50) 4.766324906s ago: executing program 1 (id=9415): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000440)=@framed={{0x18, 0x5, 0x0, 0x0, 0x63, 0x0, 0x0, 0x0, 0xfffffffe}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317"], 0xfe1b) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x7c3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x60}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r1) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x4, 0x1, 0x4, 0x3, 0x0, 0x8, 0x80000, 0x9, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_config_ext={0xfffffffffffffff8, 0x4800000000000}, 0x1, 0x10, 0xffff, 0x6, 0xfffffffffffffff9, 0x8, 0x7, 0x0, 0x1000}, 0xffffffffffffffff, 0x1, r1, 0x0) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000280)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@cgroup=r2, 0xffffffffffffffff, 0x20}, 0x20) r3 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f00000033c0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd00}, 0x48) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848160000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x80054) r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x20002, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0}, 0x0, 0x8000000000000, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000040)='!=[\\\\}#\x00') socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x118002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 4.58026978s ago: executing program 0 (id=9418): r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="10000000000000000000000000000000180000000000000084000000050000001027"], 0x28}, 0x24048800) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r2 = socket$kcm(0x2b, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x2000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x400000002, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x6, 0x18, &(0x7f0000000000), 0x4) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb0100180000000000381d7e244e6185517b03366900002400000024000000020000000000000001000084000000000000000002000000000000820000000000000006"], &(0x7f0000000080)=""/227, 0x3e, 0xe3, 0x1}, 0x28) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000180)=@in6={0xa, 0xffff, 0x0, @remote, 0x6}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x900}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000061188e000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r3) socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e488a8637286dd"], 0xb2) 4.562425766s ago: executing program 4 (id=9419): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x16, 0x0, 0xffffffffffffffff, 0xffffffffffffffc9}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000100)="06ff03076844babeb89e14f00800", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x2, 0x200000000000001, 0x106) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b15, &(0x7f0000000000)={'wlan1\x00', @remote}) 4.422498619s ago: executing program 3 (id=9420): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext, 0x6402, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0xffbc, 0x9}, 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, 0x0}, 0x20) 4.275202809s ago: executing program 4 (id=9421): sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0x9}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r4 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@ifindex, r6, 0x11, 0x0, 0x0, @void, @value=0x0}, 0x20) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r3, 0x10) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xff04}], 0x1}, 0x80d1) 4.261186107s ago: executing program 2 (id=9422): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x4, 0x1, 0x4, 0x3, 0x0, 0x8, 0x80000, 0x9, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_config_ext={0xfffffffffffffff8, 0x4800000000000}, 0x1, 0x10, 0xffff, 0x6, 0xfffffffffffffff9, 0x8, 0x7, 0x0, 0x1000}, 0xffffffffffffffff, 0x1, r0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@cgroup, 0xffffffffffffffff, 0x20}, 0x20) socket$kcm(0x10, 0x2, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x118002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)="2e00000038000511d25a80698c63940d0124fc602f6e35400a000200001ec00037153e370a00018025581d00d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x8010) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f00000002c0)='+\x00') 4.234711682s ago: executing program 0 (id=9423): socket$kcm(0x2, 0x3, 0x106) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x5, 0x0) socket$kcm(0x2, 0x3, 0x2) perf_event_open(&(0x7f0000000480)={0x3, 0x80, 0x0, 0x0, 0x5b, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc9, 0x1}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}], 0xa8}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x0, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.234379692s ago: executing program 3 (id=9424): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x2, 0x4, 0xfffffffc, 0xa}], 0x10, 0x1863}, 0x94) socketpair$unix(0x1, 0x5, 0x0, 0x0) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(r0, 0x88, 0x64, &(0x7f00000009c0), 0x4) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x4, 0xc272}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000140)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000180), &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xf9, &(0x7f0000000200)=[{}], 0x8, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0xc, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000700)={{0x1, 0xffffffffffffffff}, &(0x7f0000000640), &(0x7f0000000680)='%pB \x00'}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x4, 0x800104, 0x6, 0x0, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x50) bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000340)="d80000001c0081044e81f782db44b904021d0802010000001c7a15a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 3.948854015s ago: executing program 2 (id=9425): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, 0x0, &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r0, 0x0, 0x62, 0x0, &(0x7f0000000140)="cb74445b7d4c0b24676c6c71ae37efcedaf40242309766deb4e793f90000000000000000dbc856cbc664650634231454ca2d8034c4ca29e0d99c3b6615e91835a600c08f989af45438a54981be310aad92ae545b1c961e5f3762a51fe4c736edec6f", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0), 0x2, 0x0, 0x10000}, 0x50) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xfe33) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='cpu<=0||!') perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0xa0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18020000000000bd0000000003000000850000002700000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0x18, 0x0, &(0x7f0000000380)="e0bcd7c6a00e0588cd5e47b8bffc8e670f78f1f5b3aac3eb", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.905019517s ago: executing program 3 (id=9426): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x792, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c"], 0x0, 0xfffffffffffffe3d}, 0x28) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89a0, &(0x7f0000000080)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400"], 0x0, 0x42, 0x0, 0x1, 0xe988}, 0x28) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89a2, &(0x7f0000000080)) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r3, 0x5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r5, 0x0, 0x0}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r4, r3, 0x5}, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xdf, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x2, @perf_config_ext={0x408003, 0x1}, 0x14105, 0x32, 0xfffffbff, 0x0, 0x6, 0x0, 0xffda, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x200000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r0, 0x0, 0x98, 0xfd, &(0x7f0000000240)="667ae8daab96c777611eacdc01b8b116dceefd042e0e432e20d0f723cdd5ac59e3018f58fc76c2e17c90cb4dfdb4bb8d113f1f846fe5ce36a156bc9556a4706f72c85c5500d6860d537004ffd7c2a94beec708d4ebd2f5ce44c1d711923d691637794385c221cb4a038835c1065261a5a90ccea88c86df6bcf8ef2a5fbe1a709dc7d0f8328d9f04787c90cbf1cefde98f6b6f1d3be909ce4", &(0x7f0000000300)=""/253, 0x8, 0x0, 0xae, 0xb3, &(0x7f0000000680)="b5ad7636728db0913e7736ad5834a85fd0c086d5472753fc9bf7912c31e0a5996ec0d0a5f0e9c207a9aaaef0915c502418523546283cd620d15bf16024866a9d238e636025b1af6db3c5c0d4b827b821a1a381c21c2ba22acb3f37fad1f12ed6c5c61e9044dd4635c66bca920f5b83b9bc4fd13b2320a3e4f5558391edb0788d3a35a1cfc8333c2e06235c1e441e4617b9cf5be15fc5ff8a21bd88da6665362159c6821392f89741bdbfa08ddef4", &(0x7f0000000740)="962c1d2f47d7d6171ad8ed84326b3a2f91a86fc289cceebc4fc7ef33fc118b0549c25704172d60f5afee5fe847fc5bf8c0dcd3a9271d098e4b56102d97689e4066d5b4bee631c8dfa701feaf08ba291e3fe5ee0426c1a4887a9bbd8a2ea5e155af5f7d510a5f01f87d3cf6ae018da38cc456a12c8f0c307663742b78ec2e86e9d62d85a44ce486cabf1ce38bffb1b8709e32e51520b64f1476a1c9dfa35b8bc9d7c6e44ea9842d7674e5595e0dc9bbb4be4340", 0x7, 0x0, 0x60}, 0x50) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x60}, 0x14002) 3.794533895s ago: executing program 2 (id=9427): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000012000000000000"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000000500000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x14, 0x0, &(0x7f0000000680)="dc188619b95d02ff4284860188a86a4e0800b976", 0x0, 0x8001ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.01747454s ago: executing program 1 (id=9428): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x792, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c"], 0x0, 0xfffffffffffffe3d}, 0x28) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89a0, &(0x7f0000000080)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89a2, &(0x7f0000000080)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400"], 0x0, 0x42, 0x0, 0x1, 0xe988}, 0x28) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a2, &(0x7f0000000080)) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r3, 0x5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r5, 0x0, 0x0}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r4, r3, 0x5}, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xdf, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x2, @perf_config_ext={0x408003, 0x1}, 0x14105, 0x32, 0xfffffbff, 0x0, 0x6, 0x0, 0xffda, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x200000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r0, 0x0, 0x98, 0xfd, &(0x7f0000000240)="667ae8daab96c777611eacdc01b8b116dceefd042e0e432e20d0f723cdd5ac59e3018f58fc76c2e17c90cb4dfdb4bb8d113f1f846fe5ce36a156bc9556a4706f72c85c5500d6860d537004ffd7c2a94beec708d4ebd2f5ce44c1d711923d691637794385c221cb4a038835c1065261a5a90ccea88c86df6bcf8ef2a5fbe1a709dc7d0f8328d9f04787c90cbf1cefde98f6b6f1d3be909ce4", &(0x7f0000000300)=""/253, 0x8, 0x0, 0xae, 0xb3, &(0x7f0000000680)="b5ad7636728db0913e7736ad5834a85fd0c086d5472753fc9bf7912c31e0a5996ec0d0a5f0e9c207a9aaaef0915c502418523546283cd620d15bf16024866a9d238e636025b1af6db3c5c0d4b827b821a1a381c21c2ba22acb3f37fad1f12ed6c5c61e9044dd4635c66bca920f5b83b9bc4fd13b2320a3e4f5558391edb0788d3a35a1cfc8333c2e06235c1e441e4617b9cf5be15fc5ff8a21bd88da6665362159c6821392f89741bdbfa08ddef4", &(0x7f0000000740)="962c1d2f47d7d6171ad8ed84326b3a2f91a86fc289cceebc4fc7ef33fc118b0549c25704172d60f5afee5fe847fc5bf8c0dcd3a9271d098e4b56102d97689e4066d5b4bee631c8dfa701feaf08ba291e3fe5ee0426c1a4887a9bbd8a2ea5e155af5f7d510a5f01f87d3cf6ae018da38cc456a12c8f0c307663742b78ec2e86e9d62d85a44ce486cabf1ce38bffb1b8709e32e51520b64f1476a1c9dfa35b8bc9d7c6e44ea9842d7674e5595e0dc9bbb4be4340", 0x7, 0x0, 0x60}, 0x50) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x60}, 0x14002) 1.015506079s ago: executing program 4 (id=9429): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703100000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4014) (fail_nth: 2) 987.174864ms ago: executing program 0 (id=9430): socket$kcm(0x2, 0x3, 0x106) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$kcm(0x2, 0x3, 0x2) perf_event_open(&(0x7f0000000480)={0x3, 0x80, 0x0, 0x0, 0x5b, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc9, 0x1}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0xc0}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, 0x0, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x0, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 961.893019ms ago: executing program 2 (id=9431): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe9, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x8, 0x2}, 0x80, &(0x7f0000002540)=[{&(0x7f0000000100)='b', 0x1}], 0x1}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) r2 = socket$kcm(0x2c, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000001c0)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r3}, &(0x7f00000000c0), &(0x7f0000000100)=r2}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x4, 0x7, &(0x7f0000000a00)=ANY=[@ANYBLOB="0900a5893ed3ff110000e62dd1ef7cef87d59c3cef6d820e2ae0179f25d0ffaabb5814917b00000000ad978bc5525f82d88f2cec394453c5b3d43f97c83286a5411d9c8a189c6c3d064ba6f8ce41fe7b5f4f19dd2973885f90100149640611435d362b9d2810245fd3b665e4a6b0fcd3572984dd95b7e52bd4a29281963277aaa25eb9bb6decebf82ac7cadb13a011868f6278db0dec7f8cf625293a08e745602d140c2e5df0c7e11b", @ANYRES32, @ANYBLOB="000000000000000050ab18001000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000"], &(0x7f0000000180)='GPL\x00', 0x1, 0x4e, &(0x7f00000001c0)=""/78, 0x41100, 0x4, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000280)={0x5, 0xc, 0x1, 0x5}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x7, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000500)=[{0x4, 0x4, 0x6, 0xb}, {0x0, 0x3, 0xc, 0xb}, {0x4, 0x2, 0x5, 0x8}, {0x4, 0x4, 0x10, 0x9}, {0x5, 0x5, 0xe, 0x9}, {0x5, 0x5, 0x3, 0x1}, {0x3, 0x3, 0x3, 0xcdc6c85b7b837c53}], 0x10, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000940)={r4, 0x0, 0xb8, 0x40, &(0x7f0000000700)="f2d37b855b4fd0c83b78c8b2e9e48c10ab456d5f82e4833454d97c90f04a6be1653667bbdffd71eefacb9d08ed3a59ef5173b9b37965abb49c5636f00083c126949c0ca84c2d1f7fc6a75743e624a78ef18304f86bb76c67e32ef937b0102cf698fcdc93dbf5462cbef7c31180ed00cc2a6a76307a8e5a86622fecec5aec14faf73e89132a9cc2d6c5a7f52e43cbe16eecdfad770d2e150c37855b6b85505c1004cd7c9eeeb84c60744000cebe0b502c87b54237260b6262", &(0x7f0000000300)=""/64, 0x200, 0x0, 0x9d, 0xba, &(0x7f00000007c0)="24f10a2d73b5c2f3063750cac94415e044fbae76818e394f4d2395947732e180d701b307817db72f07c86e2bd8a7bc75d9e9fa35592f7f362111c97f45d5e7797f7b13478d64601c19a5d86f0233395d2794a34dbcdf488074c57a0bc3887ee7abc93d14e557bc5b5d1dfb25a2e367b32e164ddf705479f0887c326535e91718f53649ee3b49a4210f1bd497b0ec8bdd0c264076bf23b358635cd6c9bc", &(0x7f0000000880)="a19caad03ec823470f54019eaff2b88e536364b63a873ec2e0540252fa20c6311c7ee94e0a2c9c065676d8a1faa259caaec272919f8569ae1d91e1b2fe34457cd509093b5b471c8a1e1b58cc0cb3c2191e076e06b84ece2cdc5d481ee8609573eedea3e15771db3f882e19e5d5c08bc922d0eb54dd28e6b9fb26cb067d5d94636b8afbf14f37d9685e5de81e7b8bd8128fb22cd186c0a36c8ae064ca49befe1ed7a5033620b153aba3f3acf33c7e9ccc135d0b2a41b1400b75c6", 0x5, 0x0, 0xd333}, 0x50) r5 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000640)='syz0\x00', 0x200002, 0x0) openat$cgroup_int(r5, &(0x7f00000009c0)='cpuset.memory_spread_page\x00', 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x24, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018000000edc60000000000000104000000000000000000001800000000000000540288e80000000095000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xee, &(0x7f0000000340)=""/238}, 0x94) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r6, 0x400454cd, 0x308) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x420}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000080)) 914.54126ms ago: executing program 3 (id=9432): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x16, 0x0, 0xffffffffffffffff, 0xffffffffffffffc9}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000100)="06ff03076844babeb89e14f00800", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x2, 0x200000000000001, 0x106) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b15, &(0x7f0000000000)={'wlan1\x00', @remote}) 475.021343ms ago: executing program 0 (id=9433): sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0x9}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r4 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@ifindex, r6, 0x11, 0x0, 0x0, @void, @value=0x0}, 0x20) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r3, 0x10) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xff04}], 0x1}, 0x80d1) 474.543773ms ago: executing program 4 (id=9434): r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="10000000000000000000000000000000180000000000000084000000050000001027"], 0x28}, 0x24048800) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r2 = socket$kcm(0x2b, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x2000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x400000002, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x6, 0x18, &(0x7f0000000000), 0x4) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb0100180000000000381d7e244e6185517b0336690000240000002400000002000000000000000100008400000000000000000200000000000082000000000000000604"], &(0x7f0000000080)=""/227, 0x3e, 0xe3, 0x1}, 0x28) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000180)=@in6={0xa, 0xffff, 0x0, @remote, 0x6}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x900}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000061188e000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r3) socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e488a8637286dd"], 0xb2) 473.341663ms ago: executing program 3 (id=9435): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000007d40)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000004c0)={{r0, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000480)='%pi6 \x00'}, 0x20) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0xb) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000100)=@o_path={&(0x7f00000000c0)='./file0\x00', r2, 0x4000, r2}, 0x18) ioctl$SIOCSIFHWADDR(r2, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x5411, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000640)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x10, 0x4, &(0x7f0000000080)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f00000000c0)=@framed={{0xffffffb4, 0x2, 0x0, 0x0, 0x0, 0x61, 0x11, 0xa1}, [@call]}, &(0x7f0000000380)='GPL\x00', 0x5, 0xff92, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x36c, 0x10, &(0x7f0000000000), 0x26}, 0x48) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syz_tun\x00'}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, &(0x7f0000000080)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="0200"}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r1}, 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)=':\x00') r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x11, &(0x7f0000000340)=ANY=[@ANYBLOB="180200000000000000000000020004008500000097000000b7080000000000007b8af8ff00000000b7080000ffffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000001000000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 388.397916ms ago: executing program 2 (id=9436): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x2, 0x4, 0xfffffffc, 0xa}], 0x10, 0x1863}, 0x94) socketpair$unix(0x1, 0x5, 0x0, 0x0) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(r0, 0x88, 0x64, &(0x7f00000009c0), 0x4) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x4, 0xc272}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000140)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000180), &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xf9, &(0x7f0000000200)=[{}], 0x8, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0xc, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000700)={{0x1, 0xffffffffffffffff}, &(0x7f0000000640), &(0x7f0000000680)='%pB \x00'}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x4, 0x800104, 0x6, 0x0, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x50) bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000340)="d80000001c0081044e81f782db44b904021d0802010000001c7a15a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 243.441978ms ago: executing program 1 (id=9437): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, 0x0, &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r0, 0x0, 0x62, 0x0, &(0x7f0000000140)="cb74445b7d4c0b24676c6c71ae37efcedaf40242309766deb4e793f90000000000000000dbc856cbc664650634231454ca2d8034c4ca29e0d99c3b6615e91835a600c08f989af45438a54981be310aad92ae545b1c961e5f3762a51fe4c736edec6f", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0), 0x2, 0x0, 0x10000}, 0x50) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xfe33) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='cpu<=0||!') perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0xa0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18020000000000bd0000000003000000850000002700000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0x18, 0x0, &(0x7f0000000380)="e0bcd7c6a00e0588cd5e47b8bffc8e670f78f1f5b3aac3eb", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 229.691895ms ago: executing program 4 (id=9438): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000001f00)="de4dc043102f0e202515a02eac23", 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000340)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000200)="531347c8476178cf77c2cd92d464", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000003c0), 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002c0000002c00000009000000000000000100000d0000000007000000020000000700000000000008030000000600000000000010040000000000302e5f30615f00"], 0x0, 0x4d}, 0x28) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x18000000000002a0, 0x2a, 0x0, &(0x7f00000020c0)="b9ff03316844268cb89e14f0080047e0ffff00124000632f0100000000000000030a07080403fe800000", 0x0, 0x24, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00'}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x100080, 0x0, 0x0, 0x1}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)="2e00000011008188040f80ec59acbc0413a1810031000000000f000000028002002d1f00"/46, 0x2e}], 0x1}, 0x44004) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000640), 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x50) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4) perf_event_open(0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/249, 0x101d0}], 0x1}, 0x40000000) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x13, 0x12, &(0x7f0000000a00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @initr0={0x18, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x5}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 134.605387ms ago: executing program 0 (id=9439): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317"], 0xfe1b) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x7c3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x60}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r1) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x4, 0x1, 0x4, 0x3, 0x0, 0x8, 0x80000, 0x9, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_config_ext={0xfffffffffffffff8, 0x4800000000000}, 0x1, 0x10, 0xffff, 0x6, 0xfffffffffffffff9, 0x8, 0x7, 0x0, 0x1000}, 0xffffffffffffffff, 0x1, r1, 0x0) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000280)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@cgroup=r2, 0xffffffffffffffff, 0x20}, 0x20) r3 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f00000033c0)=ANY=[@ANYBLOB="b700000063000000bca30000000000002403000020feffff720af0fff8ffffff71a4f0ff000000001f030000000000002e100200000000002604fdffffff000014010000630000001d130000000000007a0a00fe0000001f0f14000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e19132701f3b6690ceeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b08109000000b4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e407a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac341137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994f6a7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff8899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e060026b742158e2020df9902396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000140000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb11883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727d27feeb7464dcd857ab15e355713767c536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ced301efeb6dc5f6a9037d2283c42efc54fa84323aef0900000000000000ff0f40b1a78e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fc08001011e32f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e3f753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef779970700000000000000969e2b15f36b788bce5ccdbaf75c94cb93499f963342aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120b84c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f404f1e37a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da740800000000000000c55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba43978a0872bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a274000000000000000000000000000000000000000000000009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4100260ffcd8f1d04166d291ebcef893e1b10cb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbc8249381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d34d3757b1450fdb0a9a69f432e277f3a0386eb2bd3305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa002646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07618b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e040000003c3ffad44d2a376def42e41e9fc31678257e040fa7cf32c221aaac08000000000000001a15000000000000000000173570f0c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d641ef02e4d5295d756e110522a7a945b93fb705b95b6aae27a8fb33732ce1da1c0b1af8eb9222a06e984ab1e6984c8bdc12360627137ab67b6b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481efe46a4ce86be0b1d8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f04a32e6962a7145c5f54b827ada9f5984c6cb4bed8594a39bd76d3ef8a7ab014e787596db796bd93a36c2880423291e3bccc86f66ba792ff4d87b3f80e5908779e51c5e9055fc5b23605cd000c723187ef09dcf4b07b06a9342f3f62ee7acddff292082c1f4d8eb9561f80873a09a1ae0c9af1121175e567c2b218fa36bae316a99aaad0130df83d0bda1e711290f78c143ea143967b00adcd77e6ad5e48d839ea61aadb83e4d071c54691924a3830d3e7b5c198bb0ed623153590000000000000000004b985ea1702f34f2f85b168c083e810ed567e3f1979b9ed1a4bf6a10dac825c96a0828b335de445a4880bb6474157efd1a72ca46ae4cbe3ab648c9bc4867a5a4cb87d7d6d55475b34b3cb6aa9e2337d4e04a37e35109752501009b186ddd80c47da6a2f4ef7bb909c975524fca15bab463bf5a4238dcffd6dcb508e223d0bacd1d1889c7687a4160812b1bf85e145114b0153ea254d3c7dcd03d66b0d03ad4ab9c60a757d51c4af8b03bf25b520ca1243a53a089595d02c228ad19798da0031f306bb70089ee5bb53f552fc92a5d1e5d4b2450889d7a22301f4d35920cdd4bcc9c49d9dc0d7da3b63c1a86eb572e5560948df77c6157011ed7a787b9563f93c88867e519d74a134c5e4c4f1c767d6fbb830f57c214be835b2f31712cdf8041551e9ce4ce502ac9cd7b5a39612dc409d59110add39ebb7881b60d41ce08a32dfd319770563712ab75b3bfba9ff413fcee7927fee2e47ec09b406dafd01acb69e7b8663c922dad6dd16fb9c876b454e6e02a3af0df7c3106b453700f2531c41eb82b35e715655d24bcb8384ac2f6420ad94d8df6ab920efbfce764a06f3cffe985659440f5e4d49bf20e9393d549ad7ca64b991804202af3ffe97fa996e836bbe69cbcb6159d2f40409754086b30f186d3c2ddf61e08df004cbaf329bea02143a3b10d8d4b909a13188fc276d36d5c98b195817f41659f5b667f937046407cd00164bd7f09e4000000000000001c42a362732fbaf54124c2f31b30cd8e14de823a81658ef4120a7c3516fedee37f9cbc2e93cb09670c68c297977bcee7abe7da09364f3b1c4ae046d7635605c52ef4da9e0ac1ae80d3c56ecfe79ed3e97d0c3214fdb45a5969eb5c822d7d982a6743ec5cdd483e3cfc83ec78"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd00}, 0x48) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848160000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x80054) r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x20002, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0}, 0x0, 0x8000000000000, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000040)='!=[\\\\}#\x00') socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x118002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 89.370708ms ago: executing program 3 (id=9440): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba}, 0xffffffffffffffff, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x29, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x53, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x1, @perf_config_ext={0x3d95, 0xffffffffffffffff}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x4000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) socketpair(0x3, 0x1, 0x1fc, &(0x7f0000000980)={0x0, 0x0}) close(r1) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r3) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r5 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r5, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000001140)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac141411e0000001000000002800000000000000000000000700000094040007441405"], 0x48}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="00000000000000000000000073a72beca806867b9a52fe8c752d17d5bc01b06b000000c6bf15265948c2537818fd8809bc980a3fbbdf6ff562f39574bc6901bb147e5101f0d1c348bb93d5e5ac94dd5be1f9652b5bb169743524ff393074403d7c397a63fca286b5055fde865764cb0e7e50f497cd45ccf717f42c7272115b7b", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r7, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0xffffffffffffffff, 0x0, 0x2}}, 0x10, 0x0}, 0x4040000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r9 = socket$kcm(0xa, 0x2, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a00)='blkio.throttle.io_serviced\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r9, 0x1, 0x3e, &(0x7f0000000000)=r10, 0x4) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) close(r11) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000400)=[0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0], 0x0, 0x79, &(0x7f0000000500)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0xe5, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) r13 = bpf$ITER_CREATE(0x21, &(0x7f00000007c0)={r10}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0xb, 0x7, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000004000000000000000900000018160000", @ANYRES32=r6, @ANYBLOB="00000100000000000089bce92c95000000000000000009000026000000000000"], &(0x7f00000002c0)='GPL\x00', 0x9, 0x16, &(0x7f0000000300)=""/22, 0x32a9ded292f889c9, 0x40, '\x00', 0x0, @fallback=0x9, r10, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x0, 0x0, 0xf, 0x80000001}, 0x10, r12, r13, 0x9, &(0x7f0000000800)=[r6, r6, r6, r6, r6, r6], &(0x7f0000000840)=[{0x0, 0x5, 0x2, 0xc}, {0x4, 0x4, 0xc, 0x3}, {0x1, 0x2, 0x6, 0x3}, {0x2, 0x4, 0xa, 0x1}, {0x4, 0x1, 0xf, 0x7}, {0x4, 0x5, 0x10, 0xc}, {0x4, 0x5, 0x9, 0xc}, {0x1, 0x4, 0x2, 0x4}, {0x3, 0x3, 0x3, 0xa}], 0x10, 0x45997a1e}, 0x94) sendmsg$inet(r8, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0x1}], 0x1}, 0x4000) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={r8}) r14 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r14, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400100142603600e1208000b0000000401a80016000800014009001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) 42.336578ms ago: executing program 1 (id=9441): socket$kcm(0x2, 0x3, 0x106) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x5, 0x0) socket$kcm(0x2, 0x3, 0x2) perf_event_open(&(0x7f0000000480)={0x3, 0x80, 0x0, 0x0, 0x5b, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc9, 0x1}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}], 0xa8}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x0, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 2 (id=9442): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000007d40)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000004c0)={{r0, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000480)='%pi6 \x00'}, 0x20) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0xb) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000100)=@o_path={&(0x7f00000000c0)='./file0\x00', r2, 0x4000, r2}, 0x18) ioctl$SIOCSIFHWADDR(r2, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x5411, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000640)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x10, 0x4, &(0x7f0000000080)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f00000000c0)=@framed={{0xffffffb4, 0x2, 0x0, 0x0, 0x0, 0x61, 0x11, 0xa1}, [@call]}, &(0x7f0000000380)='GPL\x00', 0x5, 0xff92, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x36c, 0x10, &(0x7f0000000000), 0x26}, 0x48) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syz_tun\x00'}) socketpair(0x1, 0x3, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, &(0x7f0000000080)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="0200"}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r1}, 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)=':\x00') r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x11, &(0x7f0000000340)=ANY=[@ANYBLOB="180200000000000000000000020004008500000097000000b7080000000000007b8af8ff00000000b7080000ffffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000001000000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): ver after parsing attributes in process `syz.1.8715'. [ 1317.094571][T28114] FAULT_INJECTION: forcing a failure. [ 1317.094571][T28114] name failslab, interval 1, probability 0, space 0, times 0 [ 1317.107575][T28114] CPU: 0 PID: 28114 Comm: syz.0.8719 Not tainted syzkaller #0 [ 1317.115064][T28114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1317.125136][T28114] Call Trace: [ 1317.128421][T28114] [ 1317.131359][T28114] dump_stack_lvl+0x188/0x24e [ 1317.136054][T28114] ? show_regs_print_info+0x12/0x12 [ 1317.141269][T28114] ? load_image+0x400/0x400 [ 1317.145782][T28114] ? __lock_acquire+0x7d10/0x7d10 [ 1317.150842][T28114] should_fail_ex+0x399/0x4d0 [ 1317.155553][T28114] should_failslab+0x5/0x20 [ 1317.160091][T28114] slab_pre_alloc_hook+0x59/0x310 [ 1317.165125][T28114] ? verify_lock_unused+0x140/0x140 [ 1317.170345][T28114] ? bpf_test_init+0x9f/0x140 [ 1317.175037][T28114] __kmem_cache_alloc_node+0x4f/0x260 [ 1317.180429][T28114] ? bpf_test_init+0x9f/0x140 [ 1317.185101][T28114] __kmalloc+0xa0/0x240 [ 1317.189291][T28114] bpf_test_init+0x9f/0x140 [ 1317.193790][T28114] bpf_prog_test_run_xdp+0x484/0xf10 [ 1317.199080][T28114] ? dev_put+0x80/0x80 [ 1317.203151][T28114] ? dev_put+0x80/0x80 [ 1317.207219][T28114] bpf_prog_test_run+0x31e/0x390 [ 1317.212164][T28114] __sys_bpf+0x62b/0x780 [ 1317.216404][T28114] ? bpf_link_show_fdinfo+0x380/0x380 [ 1317.221785][T28114] ? lock_chain_count+0x20/0x20 [ 1317.226651][T28114] __x64_sys_bpf+0x78/0x90 [ 1317.231069][T28114] do_syscall_64+0x4c/0xa0 [ 1317.235481][T28114] ? clear_bhb_loop+0x60/0xb0 [ 1317.240171][T28114] ? clear_bhb_loop+0x60/0xb0 [ 1317.244856][T28114] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1317.251099][T28114] RIP: 0033:0x7f3906d9c799 [ 1317.255512][T28114] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1317.275121][T28114] RSP: 002b:00007f3907d42028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1317.283531][T28114] RAX: ffffffffffffffda RBX: 00007f3907015fa0 RCX: 00007f3906d9c799 [ 1317.291529][T28114] RDX: 0000000000000050 RSI: 0000200000000b80 RDI: 000000000000000a [ 1317.299500][T28114] RBP: 00007f3907d42090 R08: 0000000000000000 R09: 0000000000000000 [ 1317.307465][T28114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1317.315427][T28114] R13: 00007f3907016038 R14: 00007f3907015fa0 R15: 00007fff4dad6068 [ 1317.323401][T28114] [ 1317.943122][T28121] FAULT_INJECTION: forcing a failure. [ 1317.943122][T28121] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1317.998583][T28121] CPU: 0 PID: 28121 Comm: syz.1.8722 Not tainted syzkaller #0 [ 1318.001756][T28125] netlink: 164 bytes leftover after parsing attributes in process `syz.2.8724'. [ 1318.006079][T28121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1318.006094][T28121] Call Trace: [ 1318.028464][T28121] [ 1318.031407][T28121] dump_stack_lvl+0x188/0x24e [ 1318.036114][T28121] ? show_regs_print_info+0x12/0x12 [ 1318.041342][T28121] ? load_image+0x400/0x400 [ 1318.045866][T28121] ? __lock_acquire+0x7d10/0x7d10 [ 1318.050914][T28121] should_fail_ex+0x399/0x4d0 [ 1318.055612][T28121] strncpy_from_user+0x32/0x350 [ 1318.060542][T28121] bpf_prog_load+0x1f3/0x1560 [ 1318.065256][T28121] ? map_freeze+0x390/0x390 [ 1318.069795][T28121] ? __might_fault+0xa6/0x120 [ 1318.074488][T28121] ? trace_call_bpf+0xbf/0x6b0 [ 1318.079295][T28121] ? __might_fault+0xa6/0x120 [ 1318.083999][T28121] ? __might_fault+0xc2/0x120 [ 1318.088696][T28121] ? __might_fault+0xa6/0x120 [ 1318.093386][T28121] ? bpf_lsm_bpf+0x5/0x10 [ 1318.097728][T28121] ? security_bpf+0x7a/0xa0 [ 1318.102239][T28121] __sys_bpf+0x5b8/0x780 [ 1318.106481][T28121] ? bpf_link_show_fdinfo+0x380/0x380 [ 1318.111855][T28121] ? lock_chain_count+0x20/0x20 [ 1318.116709][T28121] __x64_sys_bpf+0x78/0x90 [ 1318.121120][T28121] do_syscall_64+0x4c/0xa0 [ 1318.125539][T28121] ? clear_bhb_loop+0x60/0xb0 [ 1318.130207][T28121] ? clear_bhb_loop+0x60/0xb0 [ 1318.134874][T28121] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1318.140762][T28121] RIP: 0033:0x7f0a8879c799 [ 1318.145167][T28121] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1318.164772][T28121] RSP: 002b:00007f0a869f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1318.173181][T28121] RAX: ffffffffffffffda RBX: 00007f0a88a15fa0 RCX: 00007f0a8879c799 [ 1318.181146][T28121] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005 [ 1318.189107][T28121] RBP: 00007f0a869f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1318.197073][T28121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1318.205036][T28121] R13: 00007f0a88a16038 R14: 00007f0a88a15fa0 R15: 00007ffc1edc47f8 [ 1318.213009][T28121] [ 1318.279590][T28129] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8723'. [ 1318.411909][T28135] netlink: 'syz.1.8726': attribute type 2 has an invalid length. [ 1318.582845][ T4457] tipc: Subscription rejected, illegal request [ 1319.794482][T28163] netlink: 164 bytes leftover after parsing attributes in process `syz.3.8737'. [ 1319.981533][T28169] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8738'. [ 1320.407059][T28186] netlink: 'syz.1.8745': attribute type 2 has an invalid length. [ 1320.636523][T28192] FAULT_INJECTION: forcing a failure. [ 1320.636523][T28192] name failslab, interval 1, probability 0, space 0, times 0 [ 1320.701231][T28192] CPU: 0 PID: 28192 Comm: syz.3.8749 Not tainted syzkaller #0 [ 1320.708746][T28192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1320.718818][T28192] Call Trace: [ 1320.722109][T28192] [ 1320.725051][T28192] dump_stack_lvl+0x188/0x24e [ 1320.729757][T28192] ? show_regs_print_info+0x12/0x12 [ 1320.734976][T28192] ? load_image+0x400/0x400 [ 1320.739507][T28192] ? __might_sleep+0xd0/0xd0 [ 1320.744116][T28192] ? __lock_acquire+0x7d10/0x7d10 [ 1320.749167][T28192] should_fail_ex+0x399/0x4d0 [ 1320.753878][T28192] should_failslab+0x5/0x20 [ 1320.758415][T28192] slab_pre_alloc_hook+0x59/0x310 [ 1320.763489][T28192] ? bpf_prog_test_run_skb+0x234/0x12a0 [ 1320.769068][T28192] __kmem_cache_alloc_node+0x4f/0x260 [ 1320.774469][T28192] ? bpf_prog_test_run_skb+0x234/0x12a0 [ 1320.780014][T28192] __kmalloc+0xa0/0x240 [ 1320.784177][T28192] bpf_prog_test_run_skb+0x234/0x12a0 [ 1320.789544][T28192] ? __fget_files+0x28/0x4b0 [ 1320.794135][T28192] ? __fget_files+0x28/0x4b0 [ 1320.798723][T28192] ? __fget_files+0x43d/0x4b0 [ 1320.803406][T28192] ? cpu_online+0xa0/0xa0 [ 1320.807728][T28192] bpf_prog_test_run+0x31e/0x390 [ 1320.812662][T28192] __sys_bpf+0x62b/0x780 [ 1320.816905][T28192] ? bpf_link_show_fdinfo+0x380/0x380 [ 1320.822285][T28192] ? lock_chain_count+0x20/0x20 [ 1320.827139][T28192] __x64_sys_bpf+0x78/0x90 [ 1320.831560][T28192] do_syscall_64+0x4c/0xa0 [ 1320.835973][T28192] ? clear_bhb_loop+0x60/0xb0 [ 1320.840642][T28192] ? clear_bhb_loop+0x60/0xb0 [ 1320.845316][T28192] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1320.851202][T28192] RIP: 0033:0x7f664f79c799 [ 1320.855612][T28192] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1320.875218][T28192] RSP: 002b:00007f6650633028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1320.883630][T28192] RAX: ffffffffffffffda RBX: 00007f664fa15fa0 RCX: 00007f664f79c799 [ 1320.891606][T28192] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 1320.899574][T28192] RBP: 00007f6650633090 R08: 0000000000000000 R09: 0000000000000000 [ 1320.907540][T28192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1320.915602][T28192] R13: 00007f664fa16038 R14: 00007f664fa15fa0 R15: 00007ffd31a57618 [ 1320.923581][T28192] [ 1321.352616][T28195] netlink: 164 bytes leftover after parsing attributes in process `syz.3.8750'. [ 1323.297341][T28203] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8755'. [ 1323.594325][T28217] netlink: 164 bytes leftover after parsing attributes in process `syz.3.8761'. [ 1323.667909][T28215] netlink: 'syz.1.8760': attribute type 2 has an invalid length. [ 1323.686288][T28215] netlink: 'syz.1.8760': attribute type 8 has an invalid length. [ 1323.694345][T28215] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8760'. [ 1323.763094][T28221] netlink: 'syz.2.8763': attribute type 21 has an invalid length. [ 1323.789315][T28221] netlink: 156 bytes leftover after parsing attributes in process `syz.2.8763'. [ 1323.870096][T28219] netlink: 14 bytes leftover after parsing attributes in process `syz.4.8762'. [ 1323.921741][T28232] netlink: 'syz.3.8765': attribute type 2 has an invalid length. [ 1324.471990][T28245] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8770'. [ 1324.850408][T28254] netlink: 164 bytes leftover after parsing attributes in process `syz.4.8775'. [ 1324.930396][T28250] device wlan1 entered promiscuous mode [ 1324.964335][T28257] netlink: 'syz.3.8774': attribute type 10 has an invalid length. [ 1325.298383][T28265] netlink: 14 bytes leftover after parsing attributes in process `syz.1.8778'. [ 1325.331273][T28266] netlink: 'syz.4.8777': attribute type 21 has an invalid length. [ 1325.366668][T28266] netlink: 156 bytes leftover after parsing attributes in process `syz.4.8777'. [ 1325.823632][T28287] netlink: 'syz.2.8785': attribute type 2 has an invalid length. [ 1325.857419][T28289] netlink: 164 bytes leftover after parsing attributes in process `syz.1.8787'. [ 1327.051842][T28299] netlink: 'syz.2.8792': attribute type 10 has an invalid length. [ 1327.182502][T28305] netlink: 'syz.4.8795': attribute type 21 has an invalid length. [ 1327.317814][T28311] netlink: 'syz.2.8808': attribute type 10 has an invalid length. [ 1328.201464][T28341] FAULT_INJECTION: forcing a failure. [ 1328.201464][T28341] name failslab, interval 1, probability 0, space 0, times 0 [ 1328.214363][T28341] CPU: 1 PID: 28341 Comm: syz.1.8810 Not tainted syzkaller #0 [ 1328.221861][T28341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1328.232030][T28341] Call Trace: [ 1328.235327][T28341] [ 1328.238290][T28341] dump_stack_lvl+0x188/0x24e [ 1328.242999][T28341] ? show_regs_print_info+0x12/0x12 [ 1328.248222][T28341] ? load_image+0x400/0x400 [ 1328.252739][T28341] ? __might_sleep+0xd0/0xd0 [ 1328.257339][T28341] ? __lock_acquire+0x7d10/0x7d10 [ 1328.262386][T28341] should_fail_ex+0x399/0x4d0 [ 1328.267089][T28341] should_failslab+0x5/0x20 [ 1328.271607][T28341] slab_pre_alloc_hook+0x59/0x310 [ 1328.276645][T28341] ? tomoyo_encode+0x27e/0x540 [ 1328.281433][T28341] __kmem_cache_alloc_node+0x4f/0x260 [ 1328.286837][T28341] ? tomoyo_encode+0x27e/0x540 [ 1328.291619][T28341] __kmalloc+0xa0/0x240 [ 1328.295805][T28341] tomoyo_encode+0x27e/0x540 [ 1328.300429][T28341] tomoyo_realpath_from_path+0x58e/0x5d0 [ 1328.306091][T28341] ? tomoyo_path_number_perm+0x205/0x650 [ 1328.311739][T28341] tomoyo_path_number_perm+0x22f/0x650 [ 1328.317217][T28341] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 1328.323823][T28341] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1328.329283][T28341] ? trace_call_bpf+0xbf/0x6b0 [ 1328.334052][T28341] ? trace_call_bpf+0xbf/0x6b0 [ 1328.338813][T28341] ? trace_call_bpf+0x5d6/0x6b0 [ 1328.343690][T28341] ? __fget_files+0x28/0x4b0 [ 1328.348279][T28341] ? __fget_files+0x28/0x4b0 [ 1328.352877][T28341] security_file_ioctl+0x6c/0xa0 [ 1328.357817][T28341] __se_sys_ioctl+0x48/0x170 [ 1328.362408][T28341] do_syscall_64+0x4c/0xa0 [ 1328.366825][T28341] ? clear_bhb_loop+0x60/0xb0 [ 1328.371502][T28341] ? clear_bhb_loop+0x60/0xb0 [ 1328.376175][T28341] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1328.382063][T28341] RIP: 0033:0x7f0a8879c799 [ 1328.386477][T28341] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1328.406080][T28341] RSP: 002b:00007f0a869f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1328.414495][T28341] RAX: ffffffffffffffda RBX: 00007f0a88a15fa0 RCX: 00007f0a8879c799 [ 1328.422469][T28341] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000004 [ 1328.430440][T28341] RBP: 00007f0a869f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1328.438409][T28341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1328.446378][T28341] R13: 00007f0a88a16038 R14: 00007f0a88a15fa0 R15: 00007ffc1edc47f8 [ 1328.454356][T28341] [ 1328.476391][T28341] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1328.759010][T28349] __nla_validate_parse: 6 callbacks suppressed [ 1328.759045][T28349] netlink: 14 bytes leftover after parsing attributes in process `syz.0.8814'. [ 1328.855710][T28352] netlink: 164 bytes leftover after parsing attributes in process `syz.4.8815'. [ 1329.009443][T28357] netlink: 14 bytes leftover after parsing attributes in process `syz.3.8817'. [ 1329.075227][T28363] validate_nla: 4 callbacks suppressed [ 1329.075245][T28363] netlink: 'syz.2.8821': attribute type 10 has an invalid length. [ 1329.147228][T28361] netlink: 'syz.0.8820': attribute type 21 has an invalid length. [ 1329.177294][T28361] netlink: 156 bytes leftover after parsing attributes in process `syz.0.8820'. [ 1329.289327][T28372] netlink: 'syz.1.8822': attribute type 2 has an invalid length. [ 1329.318930][T28373] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8824'. [ 1329.536993][T28384] netlink: 164 bytes leftover after parsing attributes in process `syz.0.8829'. [ 1329.551290][T28382] netlink: 'syz.2.8828': attribute type 10 has an invalid length. [ 1330.341719][T28396] netlink: 'syz.2.8832': attribute type 10 has an invalid length. [ 1332.903865][T28399] netlink: 'syz.2.8834': attribute type 10 has an invalid length. [ 1333.025401][T28407] netlink: 'syz.0.8835': attribute type 21 has an invalid length. [ 1333.045485][T28407] netlink: 156 bytes leftover after parsing attributes in process `syz.0.8835'. [ 1333.142196][T28411] netlink: 164 bytes leftover after parsing attributes in process `syz.1.8840'. [ 1333.197947][T28413] netlink: 'syz.4.8841': attribute type 10 has an invalid length. [ 1333.324177][T28422] netlink: 'syz.3.8843': attribute type 2 has an invalid length. [ 1333.648259][T28425] netlink: 'syz.4.8846': attribute type 21 has an invalid length. [ 1333.704053][T28425] netlink: 156 bytes leftover after parsing attributes in process `syz.4.8846'. [ 1334.341080][T28437] device syzkaller0 entered promiscuous mode [ 1338.204201][T28444] netlink: 164 bytes leftover after parsing attributes in process `syz.4.8855'. [ 1338.213682][T28452] netlink: 'syz.3.8854': attribute type 21 has an invalid length. [ 1338.221825][T28452] netlink: 156 bytes leftover after parsing attributes in process `syz.3.8854'. [ 1338.254618][T28454] netlink: 'syz.0.8856': attribute type 10 has an invalid length. [ 1338.538747][T28468] netlink: 'syz.3.8860': attribute type 2 has an invalid length. [ 1339.340113][ T4280] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1339.350602][ T4280] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1339.370940][ T4280] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1339.379575][T28474] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1339.387571][T28474] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1339.395163][T28474] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1339.495766][T28481] netlink: 164 bytes leftover after parsing attributes in process `syz.0.8868'. [ 1339.921789][T28486] netlink: 'syz.0.8870': attribute type 21 has an invalid length. [ 1339.966618][T28486] netlink: 156 bytes leftover after parsing attributes in process `syz.0.8870'. [ 1340.291421][T28473] chnl_net:caif_netlink_parms(): no params data found [ 1340.331062][T28495] netlink: 'syz.0.8872': attribute type 10 has an invalid length. [ 1340.457064][T28504] netlink: 'syz.4.8874': attribute type 10 has an invalid length. [ 1340.521279][T28506] netlink: 'syz.3.8875': attribute type 2 has an invalid length. [ 1340.528222][T28504] team0: Device vxcan1 is of different type [ 1340.661472][T28473] bridge0: port 1(bridge_slave_0) entered blocking state [ 1340.676764][T28473] bridge0: port 1(bridge_slave_0) entered disabled state [ 1340.728238][T28473] device bridge_slave_0 entered promiscuous mode [ 1340.757301][T28473] bridge0: port 2(bridge_slave_1) entered blocking state [ 1340.764859][T28473] bridge0: port 2(bridge_slave_1) entered disabled state [ 1340.784118][T28473] device bridge_slave_1 entered promiscuous mode [ 1340.802502][T28511] FAULT_INJECTION: forcing a failure. [ 1340.802502][T28511] name failslab, interval 1, probability 0, space 0, times 0 [ 1340.837884][T28511] CPU: 0 PID: 28511 Comm: syz.3.8877 Not tainted syzkaller #0 [ 1340.845394][T28511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1340.855461][T28511] Call Trace: [ 1340.858742][T28511] [ 1340.861780][T28511] dump_stack_lvl+0x188/0x24e [ 1340.866496][T28511] ? show_regs_print_info+0x12/0x12 [ 1340.871729][T28511] ? load_image+0x400/0x400 [ 1340.876263][T28511] ? __might_sleep+0xd0/0xd0 [ 1340.880866][T28511] ? __lock_acquire+0x7d10/0x7d10 [ 1340.885918][T28511] should_fail_ex+0x399/0x4d0 [ 1340.890623][T28511] should_failslab+0x5/0x20 [ 1340.895167][T28511] slab_pre_alloc_hook+0x59/0x310 [ 1340.900222][T28511] ? bpf_prog_test_run_flow_dissector+0x255/0x640 [ 1340.906661][T28511] __kmem_cache_alloc_node+0x4f/0x260 [ 1340.912058][T28511] ? bpf_prog_test_run_flow_dissector+0x255/0x640 [ 1340.918492][T28511] __kmalloc+0xa0/0x240 [ 1340.922673][T28511] bpf_prog_test_run_flow_dissector+0x255/0x640 [ 1340.928942][T28511] ? xdp_convert_buff_to_md+0x200/0x200 [ 1340.934518][T28511] ? __fget_files+0x28/0x4b0 [ 1340.939129][T28511] ? __fget_files+0x28/0x4b0 [ 1340.943841][T28511] ? __fget_files+0x43d/0x4b0 [ 1340.948551][T28511] ? xdp_convert_buff_to_md+0x200/0x200 [ 1340.954116][T28511] bpf_prog_test_run+0x31e/0x390 [ 1340.959081][T28511] __sys_bpf+0x62b/0x780 [ 1340.963354][T28511] ? bpf_link_show_fdinfo+0x380/0x380 [ 1340.968764][T28511] ? lock_chain_count+0x20/0x20 [ 1340.973642][T28511] __x64_sys_bpf+0x78/0x90 [ 1340.978079][T28511] do_syscall_64+0x4c/0xa0 [ 1340.982599][T28511] ? clear_bhb_loop+0x60/0xb0 [ 1340.987308][T28511] ? clear_bhb_loop+0x60/0xb0 [ 1340.992009][T28511] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1340.997917][T28511] RIP: 0033:0x7f664f79c799 [ 1341.002332][T28511] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1341.021930][T28511] RSP: 002b:00007f6650633028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1341.030426][T28511] RAX: ffffffffffffffda RBX: 00007f664fa15fa0 RCX: 00007f664f79c799 [ 1341.038392][T28511] RDX: 0000000000000050 RSI: 0000200000000280 RDI: 000000000000000a [ 1341.046355][T28511] RBP: 00007f6650633090 R08: 0000000000000000 R09: 0000000000000000 [ 1341.054320][T28511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1341.062280][T28511] R13: 00007f664fa16038 R14: 00007f664fa15fa0 R15: 00007ffd31a57618 [ 1341.070279][T28511] [ 1341.099650][ T9] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1341.127428][T28515] netlink: 164 bytes leftover after parsing attributes in process `syz.0.8879'. [ 1341.214449][T28473] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1341.309358][ T9] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1341.326088][T28473] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1341.364230][T28527] netlink: 'syz.3.8881': attribute type 21 has an invalid length. [ 1341.377708][T28527] netlink: 156 bytes leftover after parsing attributes in process `syz.3.8881'. [ 1341.426403][T19792] Bluetooth: hci2: command 0x0409 tx timeout [ 1341.647482][T28534] netlink: 'syz.3.8886': attribute type 2 has an invalid length. [ 1342.267731][ T9] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1342.324146][T28473] team0: Port device team_slave_0 added [ 1342.341158][T28533] netlink: 'syz.4.8885': attribute type 10 has an invalid length. [ 1342.361975][T28473] team0: Port device team_slave_1 added [ 1342.446093][T28473] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1342.454195][T28473] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1342.498366][T28473] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1342.518826][T28473] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1342.527029][T28473] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1342.640237][T28473] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1342.691918][T28547] netlink: 156 bytes leftover after parsing attributes in process `syz.0.8890'. [ 1343.387335][T28473] device hsr_slave_0 entered promiscuous mode [ 1343.394209][T28473] device hsr_slave_1 entered promiscuous mode [ 1343.402581][T28550] netlink: 164 bytes leftover after parsing attributes in process `syz.1.8892'. [ 1343.415055][T28558] validate_nla: 1 callbacks suppressed [ 1343.415072][T28558] netlink: 'syz.4.8893': attribute type 10 has an invalid length. [ 1343.437739][T28558] team0: Device vxcan1 is of different type [ 1343.506386][T19792] Bluetooth: hci2: command 0x041b tx timeout [ 1343.541505][T28561] netlink: 'syz.3.8895': attribute type 21 has an invalid length. [ 1343.586752][T28561] netlink: 156 bytes leftover after parsing attributes in process `syz.3.8895'. [ 1343.630477][T28563] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8896'. [ 1343.714177][ T9] device 0 left promiscuous mode [ 1343.924328][T28574] netlink: 'syz.4.8899': attribute type 2 has an invalid length. [ 1345.249953][T28598] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8906'. [ 1345.298126][T28607] netlink: 'syz.1.8907': attribute type 21 has an invalid length. [ 1345.341745][T28607] netlink: 156 bytes leftover after parsing attributes in process `syz.1.8907'. [ 1345.360150][T28605] netlink: 164 bytes leftover after parsing attributes in process `syz.0.8908'. [ 1345.575880][T28615] netlink: 'syz.3.8909': attribute type 10 has an invalid length. [ 1345.586318][T19792] Bluetooth: hci2: command 0x040f tx timeout [ 1345.618526][T28615] team0: Device vxcan1 is of different type [ 1345.869437][T28626] netlink: 'syz.0.8914': attribute type 2 has an invalid length. [ 1345.912428][T28473] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1347.676445][T19792] Bluetooth: hci2: command 0x0419 tx timeout [ 1349.073734][T28473] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1349.085207][T28651] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8918'. [ 1349.117968][T28473] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1349.143919][T28473] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1349.247798][T28657] netlink: 164 bytes leftover after parsing attributes in process `syz.1.8920'. [ 1349.278176][T28658] netlink: 'syz.0.8921': attribute type 21 has an invalid length. [ 1349.294867][T28658] netlink: 156 bytes leftover after parsing attributes in process `syz.0.8921'. [ 1349.307695][T28660] FAULT_INJECTION: forcing a failure. [ 1349.307695][T28660] name failslab, interval 1, probability 0, space 0, times 0 [ 1349.339536][T28660] CPU: 1 PID: 28660 Comm: syz.4.8922 Not tainted syzkaller #0 [ 1349.347038][T28660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1349.357554][T28660] Call Trace: [ 1349.360863][T28660] [ 1349.363814][T28660] dump_stack_lvl+0x188/0x24e [ 1349.368604][T28660] ? show_regs_print_info+0x12/0x12 [ 1349.373833][T28660] ? load_image+0x400/0x400 [ 1349.378357][T28660] ? __lock_acquire+0x7d10/0x7d10 [ 1349.383408][T28660] should_fail_ex+0x399/0x4d0 [ 1349.388120][T28660] should_failslab+0x5/0x20 [ 1349.392646][T28660] slab_pre_alloc_hook+0x59/0x310 [ 1349.397686][T28660] ? kvmalloc_node+0x6c/0x180 [ 1349.402396][T28660] __kmem_cache_alloc_node+0x4f/0x260 [ 1349.407792][T28660] ? kvmalloc_node+0x6c/0x180 [ 1349.412495][T28660] __kmalloc_node+0xa0/0x240 [ 1349.417115][T28660] kvmalloc_node+0x6c/0x180 [ 1349.421642][T28660] map_get_next_key+0x292/0x620 [ 1349.426513][T28660] ? __might_fault+0xa6/0x120 [ 1349.431214][T28660] __sys_bpf+0x466/0x780 [ 1349.435488][T28660] ? bpf_link_show_fdinfo+0x380/0x380 [ 1349.440895][T28660] ? lock_chain_count+0x20/0x20 [ 1349.445766][T28660] __x64_sys_bpf+0x78/0x90 [ 1349.450205][T28660] do_syscall_64+0x4c/0xa0 [ 1349.454634][T28660] ? clear_bhb_loop+0x60/0xb0 [ 1349.459314][T28660] ? clear_bhb_loop+0x60/0xb0 [ 1349.463994][T28660] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1349.469900][T28660] RIP: 0033:0x7f9bc559c799 [ 1349.474311][T28660] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1349.493920][T28660] RSP: 002b:00007f9bc64d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1349.502346][T28660] RAX: ffffffffffffffda RBX: 00007f9bc5815fa0 RCX: 00007f9bc559c799 [ 1349.510377][T28660] RDX: 0000000000000020 RSI: 0000200000000440 RDI: 0000000000000004 [ 1349.518343][T28660] RBP: 00007f9bc64d6090 R08: 0000000000000000 R09: 0000000000000000 [ 1349.526309][T28660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1349.534276][T28660] R13: 00007f9bc5816038 R14: 00007f9bc5815fa0 R15: 00007fffc0c8ca98 [ 1349.542268][T28660] [ 1349.592491][T28667] netlink: 'syz.1.8925': attribute type 2 has an invalid length. [ 1349.720810][T28671] netlink: 'syz.0.8926': attribute type 10 has an invalid length. [ 1349.800001][T28473] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1351.321400][ T9] bond0: (slave wlan1): Releasing backup interface [ 1351.356961][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1351.364829][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1351.407645][T28473] 8021q: adding VLAN 0 to HW filter on device team0 [ 1351.420784][T28680] FAULT_INJECTION: forcing a failure. [ 1351.420784][T28680] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1351.466434][T28680] CPU: 0 PID: 28680 Comm: syz.0.8929 Not tainted syzkaller #0 [ 1351.473942][T28680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1351.484028][T28680] Call Trace: [ 1351.487317][T28680] [ 1351.490258][T28680] dump_stack_lvl+0x188/0x24e [ 1351.494969][T28680] ? show_regs_print_info+0x12/0x12 [ 1351.500189][T28680] ? load_image+0x400/0x400 [ 1351.504716][T28680] ? __lock_acquire+0x7d10/0x7d10 [ 1351.509751][T28680] ? lock_chain_count+0x20/0x20 [ 1351.514609][T28680] should_fail_ex+0x399/0x4d0 [ 1351.519293][T28680] strncpy_from_user+0x32/0x350 [ 1351.524142][T28680] bpf_prog_load+0x1f3/0x1560 [ 1351.528822][T28680] ? map_freeze+0x390/0x390 [ 1351.533326][T28680] ? __might_fault+0xa6/0x120 [ 1351.538009][T28680] ? __might_fault+0xa6/0x120 [ 1351.542678][T28680] ? __might_fault+0xc2/0x120 [ 1351.547343][T28680] ? __might_fault+0xa6/0x120 [ 1351.552011][T28680] ? bpf_lsm_bpf+0x5/0x10 [ 1351.556334][T28680] ? security_bpf+0x7a/0xa0 [ 1351.560840][T28680] __sys_bpf+0x5b8/0x780 [ 1351.565606][T28680] ? bpf_link_show_fdinfo+0x380/0x380 [ 1351.570983][T28680] ? lock_chain_count+0x20/0x20 [ 1351.575834][T28680] __x64_sys_bpf+0x78/0x90 [ 1351.580246][T28680] do_syscall_64+0x4c/0xa0 [ 1351.584661][T28680] ? clear_bhb_loop+0x60/0xb0 [ 1351.589334][T28680] ? clear_bhb_loop+0x60/0xb0 [ 1351.594006][T28680] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1351.599893][T28680] RIP: 0033:0x7f3906d9c799 [ 1351.604303][T28680] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1351.623906][T28680] RSP: 002b:00007f3907d42028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1351.632315][T28680] RAX: ffffffffffffffda RBX: 00007f3907015fa0 RCX: 00007f3906d9c799 [ 1351.640285][T28680] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 0000000000000005 [ 1351.648279][T28680] RBP: 00007f3907d42090 R08: 0000000000000000 R09: 0000000000000000 [ 1351.656248][T28680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1351.664229][T28680] R13: 00007f3907016038 R14: 00007f3907015fa0 R15: 00007fff4dad6068 [ 1351.672253][T28680] [ 1351.735289][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1351.753185][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1351.772304][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 1351.779501][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1351.794757][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1351.808555][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1351.817950][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 1351.825073][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1351.836022][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1351.845697][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1351.858079][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1351.870077][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1351.889735][T28684] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8931'. [ 1351.915425][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1351.925906][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1351.948372][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1351.969888][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1351.981405][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1351.993115][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1352.024288][T28473] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1352.039259][T28473] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1352.049337][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1352.059165][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1352.071055][T28692] netlink: 164 bytes leftover after parsing attributes in process `syz.4.8933'. [ 1352.370557][T28705] netlink: 'syz.4.8935': attribute type 29 has an invalid length. [ 1352.397259][T28705] netlink: 'syz.4.8935': attribute type 29 has an invalid length. [ 1352.470872][T28708] netlink: 'syz.0.8936': attribute type 2 has an invalid length. [ 1352.510389][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1352.519019][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1352.536628][T28473] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1352.564213][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1352.579055][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1352.605404][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1352.616440][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1352.631547][T28473] device veth0_vlan entered promiscuous mode [ 1352.640169][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1352.650692][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1352.664820][T28473] device veth1_vlan entered promiscuous mode [ 1352.699479][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1352.711180][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1352.720238][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1352.730850][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1352.743606][T28473] device veth0_macvtap entered promiscuous mode [ 1352.757910][T28473] device veth1_macvtap entered promiscuous mode [ 1352.784123][T28473] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1352.793487][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1352.839258][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1352.857659][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1352.895686][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1352.944117][T28473] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1352.973544][T28710] netlink: 'syz.3.8937': attribute type 10 has an invalid length. [ 1352.985430][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1353.003688][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1353.044812][ T9] device veth0_to_team left promiscuous mode [ 1353.055160][ T9] Ÿë: port 2(veth0_to_team) entered disabled state [ 1353.076350][ T9] device veth0_to_bridge left promiscuous mode [ 1353.082802][ T9] Ÿë: port 1(veth0_to_bridge) entered disabled state [ 1353.857700][ T9] device veth1_macvtap left promiscuous mode [ 1353.863906][ T9] device veth0_macvtap left promiscuous mode [ 1354.276662][ T9] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 1354.374898][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1354.413259][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1354.655918][ T9] bond0 (unregistering): Released all slaves [ 1354.692769][T28473] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1354.702181][T28473] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1354.711434][T28473] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1354.720290][T28473] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1354.731202][T28717] netlink: 'syz.3.8940': attribute type 10 has an invalid length. [ 1354.746440][T28730] netlink: 164 bytes leftover after parsing attributes in process `syz.0.8944'. [ 1354.924798][ T4457] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1354.945310][ T4457] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1354.969399][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1355.022001][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1355.034627][T28735] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8946'. [ 1355.059784][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1355.086668][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1355.165496][T28743] netlink: 'syz.0.8948': attribute type 2 has an invalid length. [ 1355.181247][T28744] netlink: 'syz.1.8949': attribute type 10 has an invalid length. [ 1358.336846][T28751] netlink: 'syz.4.8950': attribute type 10 has an invalid length. [ 1358.481248][T28751] team0: Device vxcan1 is of different type [ 1358.858454][T19792] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1358.873589][T19792] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1358.885689][T19792] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1358.894930][T19792] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1358.903891][T19792] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1358.911707][T19792] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1359.473254][T28773] netlink: 164 bytes leftover after parsing attributes in process `syz.4.8957'. [ 1359.675319][ T9] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1359.760725][T28779] mac80211_hwsim hwsim23 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1359.914981][ T9] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1360.017333][T28790] netlink: 'syz.4.8963': attribute type 10 has an invalid length. [ 1360.049280][T28784] netlink: 'syz.3.8961': attribute type 21 has an invalid length. [ 1360.066429][T28784] netlink: 156 bytes leftover after parsing attributes in process `syz.3.8961'. [ 1360.150666][ T9] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1360.946802][T28474] Bluetooth: hci3: command 0x0409 tx timeout [ 1361.454480][ T9] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1361.512033][T28765] chnl_net:caif_netlink_parms(): no params data found [ 1361.531791][T28807] netlink: 'syz.3.8967': attribute type 10 has an invalid length. [ 1361.549170][T28807] team0: Device vxcan1 is of different type [ 1361.590848][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.597389][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.734245][T28765] bridge0: port 1(bridge_slave_0) entered blocking state [ 1361.766558][T28765] bridge0: port 1(bridge_slave_0) entered disabled state [ 1361.775108][T28765] device bridge_slave_0 entered promiscuous mode [ 1361.797519][T28765] bridge0: port 2(bridge_slave_1) entered blocking state [ 1361.814866][T28765] bridge0: port 2(bridge_slave_1) entered disabled state [ 1361.827078][ T4457] wlan1: Trigger new scan to find an IBSS to join [ 1361.836439][T28765] device bridge_slave_1 entered promiscuous mode [ 1361.914474][T28819] netlink: 164 bytes leftover after parsing attributes in process `syz.2.8971'. [ 1362.102082][T28765] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1362.188183][T28834] netlink: 'syz.4.8976': attribute type 21 has an invalid length. [ 1362.200297][T28834] netlink: 156 bytes leftover after parsing attributes in process `syz.4.8976'. [ 1362.220652][T28837] netlink: 'syz.1.8977': attribute type 10 has an invalid length. [ 1362.249616][T28765] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1362.861179][T28836] mac80211_hwsim hwsim36 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1362.942890][T28765] team0: Port device team_slave_0 added [ 1363.018416][T28765] team0: Port device team_slave_1 added [ 1363.026274][T28474] Bluetooth: hci3: command 0x041b tx timeout [ 1363.131071][T28765] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1363.166309][T28765] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1363.265188][T28765] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1363.298096][T28765] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1363.305082][T28765] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1363.446423][T28765] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1363.474025][T28862] netlink: 'syz.2.8983': attribute type 10 has an invalid length. [ 1363.703103][T28862] team0: Device vxcan1 is of different type [ 1363.763971][T28868] netlink: 164 bytes leftover after parsing attributes in process `syz.3.8987'. [ 1363.894178][T28765] device hsr_slave_0 entered promiscuous mode [ 1363.903130][T28765] device hsr_slave_1 entered promiscuous mode [ 1363.965000][T28765] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1363.977654][T28765] Cannot create hsr debugfs directory [ 1364.128237][T28881] netlink: 'syz.1.8989': attribute type 10 has an invalid length. [ 1364.335020][T28892] netlink: 'syz.2.8991': attribute type 10 has an invalid length. [ 1364.409362][T28892] 8021q: adding VLAN 0 to HW filter on device team0 [ 1364.463672][T28892] bond0: (slave team0): Enslaving as an active interface with an up link [ 1364.673028][T28894] mac80211_hwsim hwsim29 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1364.866983][ T4321] wlan1: Trigger new scan to find an IBSS to join [ 1365.106337][T28474] Bluetooth: hci3: command 0x040f tx timeout [ 1365.826336][T19637] wlan1: Trigger new scan to find an IBSS to join [ 1366.084549][T28914] netlink: 164 bytes leftover after parsing attributes in process `syz.4.8999'. [ 1366.442207][T28942] mac80211_hwsim hwsim23 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1366.452165][T28935] device wlan1 entered promiscuous mode [ 1366.856066][ T9] team0: Port device wlan1 removed [ 1366.866314][T20062] wlan1: Trigger new scan to find an IBSS to join [ 1366.911894][T28951] netlink: 'syz.4.9005': attribute type 10 has an invalid length. [ 1366.932504][T28951] team0: Device vxcan1 is of different type [ 1366.958439][T28958] netlink: 'syz.1.9008': attribute type 10 has an invalid length. [ 1367.186399][T28474] Bluetooth: hci3: command 0x0419 tx timeout [ 1367.188020][T28962] netlink: 'syz.2.9010': attribute type 21 has an invalid length. [ 1367.206611][T28962] netlink: 156 bytes leftover after parsing attributes in process `syz.2.9010'. [ 1367.260397][ T9] device veth0_to_team left promiscuous mode [ 1367.268970][ T9] Ÿë: port 2(veth0_to_team) entered disabled state [ 1367.569097][ T9] device veth0_to_bridge left promiscuous mode [ 1367.585755][ T9] Ÿë: port 1(veth0_to_bridge) entered disabled state [ 1368.787347][ T4457] wlan1: Trigger new scan to find an IBSS to join [ 1368.793973][T20062] wlan1: Trigger new scan to find an IBSS to join [ 1368.868420][ T9] device veth1_macvtap left promiscuous mode [ 1368.874586][ T9] device veth0_macvtap left promiscuous mode [ 1368.912575][T28980] netlink: 134268 bytes leftover after parsing attributes in process `syz.4.9015'. [ 1369.343203][ T9] team0 (unregistering): Port device team_slave_1 removed [ 1369.382964][ T9] team0 (unregistering): Port device team_slave_0 removed [ 1369.421336][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1369.461270][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1369.683184][ T9] bond0 (unregistering): (slave team0): Releasing backup interface [ 1369.715569][ T9] bond0 (unregistering): Released all slaves [ 1369.755350][T28970] netlink: 164 bytes leftover after parsing attributes in process `syz.1.9012'. [ 1369.813053][T28765] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1369.879702][T28765] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1369.947472][T28765] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1369.984853][T28765] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1370.018895][T28995] FAULT_INJECTION: forcing a failure. [ 1370.018895][T28995] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1370.042510][T28995] CPU: 1 PID: 28995 Comm: syz.2.9018 Not tainted syzkaller #0 [ 1370.050021][T28995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1370.060109][T28995] Call Trace: [ 1370.063406][T28995] [ 1370.066393][T28995] dump_stack_lvl+0x188/0x24e [ 1370.071103][T28995] ? show_regs_print_info+0x12/0x12 [ 1370.076387][T28995] ? load_image+0x400/0x400 [ 1370.080924][T28995] ? __lock_acquire+0x7d10/0x7d10 [ 1370.085984][T28995] should_fail_ex+0x399/0x4d0 [ 1370.090698][T28995] _copy_from_user+0x2c/0x170 [ 1370.095418][T28995] __copy_msghdr+0x3b7/0x580 [ 1370.100057][T28995] ___sys_sendmsg+0x210/0x360 [ 1370.104769][T28995] ? __sys_sendmsg+0x290/0x290 [ 1370.109575][T28995] ? __lock_acquire+0x7d10/0x7d10 [ 1370.114649][T28995] __se_sys_sendmsg+0x1bb/0x2a0 [ 1370.119530][T28995] ? __x64_sys_sendmsg+0x80/0x80 [ 1370.124517][T28995] ? lockdep_hardirqs_on+0x94/0x140 [ 1370.129745][T28995] do_syscall_64+0x4c/0xa0 [ 1370.134185][T28995] ? clear_bhb_loop+0x60/0xb0 [ 1370.138886][T28995] ? clear_bhb_loop+0x60/0xb0 [ 1370.143593][T28995] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1370.149516][T28995] RIP: 0033:0x7f0ebc59c799 [ 1370.153949][T28995] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1370.173575][T28995] RSP: 002b:00007f0ebd533028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1370.182193][T28995] RAX: ffffffffffffffda RBX: 00007f0ebc815fa0 RCX: 00007f0ebc59c799 [ 1370.190188][T28995] RDX: 000000003000c085 RSI: 0000200000000080 RDI: 0000000000000004 [ 1370.198181][T28995] RBP: 00007f0ebd533090 R08: 0000000000000000 R09: 0000000000000000 [ 1370.206172][T28995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1370.214169][T28995] R13: 00007f0ebc816038 R14: 00007f0ebc815fa0 R15: 00007ffd1a7e9488 [ 1370.222179][T28995] [ 1370.235149][T28990] mac80211_hwsim hwsim23 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1370.328430][T29006] netlink: 'syz.3.9021': attribute type 10 has an invalid length. [ 1370.447641][T28765] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1370.497203][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1370.511547][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1370.582287][T28765] 8021q: adding VLAN 0 to HW filter on device team0 [ 1370.625876][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1370.645593][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1370.659662][ T4457] bridge0: port 1(bridge_slave_0) entered blocking state [ 1370.666860][ T4457] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1370.723760][T29019] netlink: 'syz.4.9023': attribute type 21 has an invalid length. [ 1370.749914][T29019] netlink: 156 bytes leftover after parsing attributes in process `syz.4.9023'. [ 1370.772093][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1370.787371][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1370.847046][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1370.870547][T20062] wlan1: Trigger new scan to find an IBSS to join [ 1370.885625][ T4457] bridge0: port 2(bridge_slave_1) entered blocking state [ 1370.892793][ T4457] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1370.939031][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1370.957131][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1370.968837][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1370.982749][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1370.993463][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1371.008097][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1371.020421][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1371.047846][T29023] netlink: 164 bytes leftover after parsing attributes in process `syz.1.9026'. [ 1371.435993][T29029] mac80211_hwsim hwsim36 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1371.523832][T28765] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1371.576392][T28765] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1371.608405][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1371.626877][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1371.644348][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1371.664018][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1371.686939][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1371.797281][T29050] mac80211_hwsim hwsim31 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1372.786780][T19637] wlan1: Trigger new scan to find an IBSS to join [ 1372.866453][T19637] wlan1: Creating new IBSS network, BSSID 92:83:98:00:f7:e5 [ 1373.152518][T19637] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1373.242109][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1373.263636][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1373.301305][T28765] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1373.346075][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1373.376040][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1373.420414][T29085] netlink: 'syz.3.9034': attribute type 10 has an invalid length. [ 1373.458853][T20062] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1373.475355][T29084] netlink: 'syz.1.9035': attribute type 2 has an invalid length. [ 1373.478488][T20062] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1373.497950][T28765] device veth0_vlan entered promiscuous mode [ 1373.525481][T20062] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1373.555525][T20062] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1373.594624][T28765] device veth1_vlan entered promiscuous mode [ 1373.700488][T29092] netlink: 164 bytes leftover after parsing attributes in process `syz.2.9039'. [ 1373.737498][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1373.748120][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1373.761554][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1373.783154][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1373.817784][T28765] device veth0_macvtap entered promiscuous mode [ 1373.826323][T20062] wlan1: Trigger new scan to find an IBSS to join [ 1373.861868][T28765] device veth1_macvtap entered promiscuous mode [ 1373.939426][T28765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1373.970536][T28765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1373.995177][T28765] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1374.034324][T20062] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1374.069068][T20062] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1374.097354][T20062] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1374.107584][T20062] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1374.121570][T28765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1374.158506][T28765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1374.184535][T28765] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1374.672326][T29104] mac80211_hwsim hwsim36 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1374.689373][T20062] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1374.702322][T20062] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1374.725343][T28765] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1374.734914][T28765] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1374.746781][T28765] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1374.755631][T28765] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1375.092672][ T4321] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1375.132359][ T4321] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1375.169042][T29119] netlink: 'syz.2.9049': attribute type 2 has an invalid length. [ 1375.180431][T19637] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1375.218642][T20062] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1375.243499][T20062] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1375.274521][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1375.302806][T29125] netlink: 164 bytes leftover after parsing attributes in process `syz.4.9051'. [ 1375.539058][T29136] netlink: 'syz.2.9053': attribute type 10 has an invalid length. [ 1375.567935][T29136] team0: Device vxcan1 is of different type [ 1375.826836][ T34] wlan1: Trigger new scan to find an IBSS to join [ 1375.834244][ T34] wlan1: Trigger new scan to find an IBSS to join [ 1376.103697][T28474] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1376.113323][T28474] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1376.124720][T28474] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1376.135155][T28474] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1376.144638][T28474] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1376.152428][T28474] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1377.826422][ T34] wlan1: Trigger new scan to find an IBSS to join [ 1378.406595][ T4457] wlan1: Creating new IBSS network, BSSID 56:60:47:85:be:cf [ 1378.449976][T29145] mac80211_hwsim hwsim38 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1378.639314][T19637] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1378.759945][T19637] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1378.761461][T29163] netlink: 'syz.4.9064': attribute type 2 has an invalid length. [ 1378.907274][T29165] netlink: 'syz.0.9062': attribute type 10 has an invalid length. [ 1378.941068][T29165] team0: Device vxcan1 is of different type [ 1378.987592][T19637] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1379.022349][T29168] netlink: 164 bytes leftover after parsing attributes in process `syz.2.9065'. [ 1379.126052][T19637] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1379.239144][T19637] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1379.254337][T29178] netlink: 14 bytes leftover after parsing attributes in process `syz.4.9069'. [ 1379.403985][T29181] netlink: 'syz.1.9070': attribute type 2 has an invalid length. [ 1379.579718][T29147] chnl_net:caif_netlink_parms(): no params data found [ 1379.636605][T29188] netlink: 'syz.2.9071': attribute type 10 has an invalid length. [ 1379.666928][T29188] team0: Device vxcan1 is of different type [ 1380.469037][T19792] Bluetooth: hci4: command 0x0409 tx timeout [ 1380.732801][T29217] netlink: 164 bytes leftover after parsing attributes in process `syz.4.9078'. [ 1380.799422][ T4321] wlan1: Trigger new scan to find an IBSS to join [ 1380.802994][ T4457] wlan1: Trigger new scan to find an IBSS to join [ 1380.866384][ T9] wlan1: Trigger new scan to find an IBSS to join [ 1380.989760][ T4321] wlan1: Creating new IBSS network, BSSID ba:4a:9a:12:41:3a [ 1381.159586][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1381.180915][T29233] netlink: 'syz.1.9083': attribute type 10 has an invalid length. [ 1381.200919][T29239] netlink: 'syz.4.9084': attribute type 2 has an invalid length. [ 1381.219851][T29147] bridge0: port 1(bridge_slave_0) entered blocking state [ 1381.235176][T29147] bridge0: port 1(bridge_slave_0) entered disabled state [ 1381.243691][T29147] device bridge_slave_0 entered promiscuous mode [ 1381.371274][T29147] bridge0: port 2(bridge_slave_1) entered blocking state [ 1381.397743][T29147] bridge0: port 2(bridge_slave_1) entered disabled state [ 1381.437684][T29147] device bridge_slave_1 entered promiscuous mode [ 1381.569831][T29248] netlink: 'syz.2.9086': attribute type 10 has an invalid length. [ 1381.661196][T29147] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1382.342981][T29252] device wlan1 entered promiscuous mode [ 1382.370568][T29147] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1382.460917][T29258] netlink: 164 bytes leftover after parsing attributes in process `syz.4.9091'. [ 1382.546443][T19792] Bluetooth: hci4: command 0x041b tx timeout [ 1382.599456][T29147] team0: Port device team_slave_0 added [ 1382.638611][T29147] team0: Port device team_slave_1 added [ 1382.738325][T29268] netlink: 'syz.1.9092': attribute type 10 has an invalid length. [ 1382.766908][T29263] netlink: 14 bytes leftover after parsing attributes in process `syz.2.9094'. [ 1382.787735][ T34] wlan1: Creating new IBSS network, BSSID e2:1d:07:8f:16:96 [ 1382.810834][T29263] device hsr_slave_0 left promiscuous mode [ 1382.835798][T29263] device hsr_slave_1 left promiscuous mode [ 1382.900289][T29278] netlink: 'syz.0.9096': attribute type 2 has an invalid length. [ 1383.112419][T29147] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1383.119606][T29147] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1383.178735][T29147] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1383.222018][T29147] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1383.247807][T29147] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1383.274135][T29147] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1383.305200][T29288] netlink: 'syz.0.9098': attribute type 2 has an invalid length. [ 1383.490111][T19637] team0: Port device wlan1 removed [ 1384.626749][T19792] Bluetooth: hci4: command 0x040f tx timeout [ 1384.875775][ T9] wlan1: Trigger new scan to find an IBSS to join [ 1385.029486][T29147] device hsr_slave_0 entered promiscuous mode [ 1385.072643][T29147] device hsr_slave_1 entered promiscuous mode [ 1385.114594][T29311] netlink: 164 bytes leftover after parsing attributes in process `syz.1.9104'. [ 1385.338275][T29324] netlink: 'syz.1.9108': attribute type 2 has an invalid length. [ 1385.415877][T19637] device veth0_to_team left promiscuous mode [ 1385.467747][T19637] Ÿë: port 2(veth0_to_team) entered disabled state [ 1385.481026][T19637] device veth0_to_bridge left promiscuous mode [ 1385.499313][T19637] Ÿë: port 1(veth0_to_bridge) entered disabled state [ 1385.633015][T19637] device veth1_macvtap left promiscuous mode [ 1385.644203][T19637] device veth0_macvtap left promiscuous mode [ 1385.651204][T19637] device veth1_vlan left promiscuous mode [ 1386.434940][T19637] device team_slave_1 left promiscuous mode [ 1386.442001][T19637] team0 (unregistering): Port device team_slave_1 removed [ 1386.480490][T19637] device team_slave_0 left promiscuous mode [ 1386.487657][T19637] team0 (unregistering): Port device team_slave_0 removed [ 1386.524529][T19637] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1386.534813][T19637] device bond_slave_1 left promiscuous mode [ 1386.571168][T19637] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1386.580030][T19637] device bond_slave_0 left promiscuous mode [ 1386.708603][T19792] Bluetooth: hci4: command 0x0419 tx timeout [ 1386.799046][T19637] bond0 (unregistering): (slave team0): Releasing backup interface [ 1386.808101][T19637] device team0 left promiscuous mode [ 1386.835014][T19637] bond0 (unregistering): Released all slaves [ 1386.866262][T20062] wlan1: Creating new IBSS network, BSSID 9e:14:cb:8d:81:37 [ 1386.876744][T29328] netlink: 'syz.2.9106': attribute type 10 has an invalid length. [ 1386.885294][T29328] team0: Device vxcan1 is of different type [ 1386.899503][T29333] netlink: 14 bytes leftover after parsing attributes in process `syz.0.9109'. [ 1386.919619][T29333] device hsr_slave_0 left promiscuous mode [ 1386.955978][T29333] device hsr_slave_1 left promiscuous mode [ 1387.000183][T29342] netlink: 'syz.1.9111': attribute type 10 has an invalid length. [ 1387.296388][T29361] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9113'. [ 1387.706930][T29383] netlink: 'syz.1.9122': attribute type 2 has an invalid length. [ 1389.094064][T29371] netlink: 164 bytes leftover after parsing attributes in process `syz.4.9119'. [ 1389.124639][T29386] mac80211_hwsim hwsim36 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1389.143002][T29389] mac80211_hwsim hwsim23 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1389.330627][T29405] netlink: 'syz.0.9125': attribute type 10 has an invalid length. [ 1389.382243][T29405] team0: Device vxcan1 is of different type [ 1389.414102][T29406] netlink: 'syz.4.9126': attribute type 2 has an invalid length. [ 1389.424432][T29406] netlink: 'syz.4.9126': attribute type 8 has an invalid length. [ 1389.431514][T29412] FAULT_INJECTION: forcing a failure. [ 1389.431514][T29412] name failslab, interval 1, probability 0, space 0, times 0 [ 1389.435306][T29406] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9126'. [ 1389.467379][T29412] CPU: 0 PID: 29412 Comm: syz.4.9126 Not tainted syzkaller #0 [ 1389.474880][T29412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1389.484950][T29412] Call Trace: [ 1389.488235][T29412] [ 1389.491165][T29412] dump_stack_lvl+0x188/0x24e [ 1389.495843][T29412] ? show_regs_print_info+0x12/0x12 [ 1389.501040][T29412] ? load_image+0x400/0x400 [ 1389.505538][T29412] ? __might_sleep+0xd0/0xd0 [ 1389.510132][T29412] ? __lock_acquire+0x7d10/0x7d10 [ 1389.515158][T29412] should_fail_ex+0x399/0x4d0 [ 1389.519833][T29412] should_failslab+0x5/0x20 [ 1389.524333][T29412] slab_pre_alloc_hook+0x59/0x310 [ 1389.529353][T29412] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 1389.535069][T29412] __kmem_cache_alloc_node+0x4f/0x260 [ 1389.540518][T29412] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 1389.546231][T29412] __kmalloc+0xa0/0x240 [ 1389.550391][T29412] tomoyo_realpath_from_path+0xdf/0x5d0 [ 1389.555943][T29412] ? tomoyo_path_number_perm+0x205/0x650 [ 1389.561573][T29412] tomoyo_path_number_perm+0x22f/0x650 [ 1389.567025][T29412] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1389.572478][T29412] ? ksys_write+0x1c0/0x250 [ 1389.577002][T29412] ? common_file_perm+0x171/0x1c0 [ 1389.582090][T29412] ? __fget_files+0x28/0x4b0 [ 1389.586694][T29412] ? __fget_files+0x28/0x4b0 [ 1389.591302][T29412] security_file_ioctl+0x6c/0xa0 [ 1389.596249][T29412] __se_sys_ioctl+0x48/0x170 [ 1389.600850][T29412] do_syscall_64+0x4c/0xa0 [ 1389.605271][T29412] ? clear_bhb_loop+0x60/0xb0 [ 1389.609940][T29412] ? clear_bhb_loop+0x60/0xb0 [ 1389.614613][T29412] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1389.620499][T29412] RIP: 0033:0x7f9bc559c799 [ 1389.624902][T29412] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1389.644524][T29412] RSP: 002b:00007f9bc64b5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1389.653033][T29412] RAX: ffffffffffffffda RBX: 00007f9bc5816090 RCX: 00007f9bc559c799 [ 1389.660999][T29412] RDX: 0000200000000080 RSI: 0000000000008922 RDI: 000000000000000a [ 1389.668959][T29412] RBP: 00007f9bc64b5090 R08: 0000000000000000 R09: 0000000000000000 [ 1389.676925][T29412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1389.684888][T29412] R13: 00007f9bc5816128 R14: 00007f9bc5816090 R15: 00007fffc0c8ca98 [ 1389.692863][T29412] [ 1389.724105][T29412] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1389.970226][T29147] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1389.995132][T29147] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1390.018516][T29147] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1390.032418][T29147] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1390.249785][T29431] netlink: 'syz.0.9133': attribute type 2 has an invalid length. [ 1390.255401][T29147] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1390.309962][T19637] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1390.333326][T19637] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1390.357689][T29147] 8021q: adding VLAN 0 to HW filter on device team0 [ 1390.376068][T19637] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1390.389774][T19637] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1390.426665][T19637] bridge0: port 1(bridge_slave_0) entered blocking state [ 1390.433840][T19637] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1390.471827][T29437] netlink: 164 bytes leftover after parsing attributes in process `syz.2.9135'. [ 1390.494380][T19637] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1390.503753][T19637] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1390.538297][T19637] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1390.573863][T19637] bridge0: port 2(bridge_slave_1) entered blocking state [ 1390.581249][T19637] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1390.623102][T19637] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1390.839875][T29443] mac80211_hwsim hwsim31 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1391.826421][ T4457] wlan1: Trigger new scan to find an IBSS to join [ 1391.833239][ T11] wlan1: Trigger new scan to find an IBSS to join [ 1392.128300][T19637] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1392.145435][T20062] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1392.158924][T20062] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1392.172127][T29467] netlink: 'syz.4.9139': attribute type 10 has an invalid length. [ 1392.202503][T20062] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1392.241756][T20062] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1392.278717][T20062] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1392.298838][T20062] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1392.330193][T20062] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1392.381231][T29147] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1392.415486][T29147] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1392.425797][T29473] mac80211_hwsim hwsim36 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1392.439412][T20062] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1392.449055][T20062] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1392.465449][T29475] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9142'. [ 1392.546725][T29483] netlink: 'syz.4.9143': attribute type 10 has an invalid length. [ 1392.664540][T29483] team0: Device vxcan1 is of different type [ 1392.758551][T29492] netlink: 'syz.0.9146': attribute type 2 has an invalid length. [ 1392.870699][T29488] netlink: 14 bytes leftover after parsing attributes in process `syz.1.9144'. [ 1392.969825][T29500] netlink: 'syz.2.9147': attribute type 2 has an invalid length. [ 1392.999809][T29500] netlink: 'syz.2.9147': attribute type 8 has an invalid length. [ 1393.024142][T29500] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9147'. [ 1393.116780][T29505] netlink: 164 bytes leftover after parsing attributes in process `syz.0.9148'. [ 1393.402337][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1393.439344][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1393.495792][T29147] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1393.604329][T29526] netlink: 'syz.4.9153': attribute type 10 has an invalid length. [ 1393.630628][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1393.655890][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1393.783119][T19637] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1393.830591][T19637] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1393.872163][T19637] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1393.904922][T19637] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1393.973072][T29147] device veth0_vlan entered promiscuous mode [ 1394.027292][T29147] device veth1_vlan entered promiscuous mode [ 1394.167727][T29147] device veth0_macvtap entered promiscuous mode [ 1394.208155][T29147] device veth1_macvtap entered promiscuous mode [ 1394.242552][T29540] netlink: 'syz.0.9158': attribute type 2 has an invalid length. [ 1394.254398][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1394.266600][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1394.326388][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1394.384456][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1394.401276][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1394.417252][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1394.437249][T29548] netlink: 164 bytes leftover after parsing attributes in process `syz.4.9161'. [ 1394.490197][T29147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1394.530628][T29147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1394.560516][T29147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1394.584372][T29147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1394.612148][T29147] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1394.629111][T29546] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9160'. [ 1394.650943][T29545] netlink: 14 bytes leftover after parsing attributes in process `syz.1.9159'. [ 1394.670878][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1394.680587][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1394.711791][T29147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1394.749465][T29147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1394.760805][T29147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1394.772128][T29147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1394.791138][T20062] wlan1: Trigger new scan to find an IBSS to join [ 1394.799678][T29147] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1394.825504][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1394.847498][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1394.866809][ T34] wlan1: Trigger new scan to find an IBSS to join [ 1394.873474][ T34] wlan1: Trigger new scan to find an IBSS to join [ 1394.930776][T29147] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1394.966138][T29147] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1394.974889][T29147] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1395.056418][T29147] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1395.086239][T29559] netlink: 'syz.4.9163': attribute type 10 has an invalid length. [ 1395.122318][T29559] team0: Device vxcan1 is of different type [ 1395.205231][T29571] mac80211_hwsim hwsim23 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1395.415754][ T4321] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1395.461440][ T4321] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1395.493566][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1395.527825][T29589] netlink: 'syz.1.9171': attribute type 2 has an invalid length. [ 1395.560377][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1395.579219][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1395.592722][T29593] netlink: 'syz.2.9170': attribute type 10 has an invalid length. [ 1395.611243][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1395.678957][T29595] netlink: 164 bytes leftover after parsing attributes in process `syz.0.9172'. [ 1396.115132][T29600] netlink: 156 bytes leftover after parsing attributes in process `syz.3.9055'. [ 1396.299718][T29605] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9176'. [ 1396.623727][T29614] team0: Device vxcan1 is of different type [ 1396.868159][T29623] FAULT_INJECTION: forcing a failure. [ 1396.868159][T29623] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1396.926329][T29623] CPU: 0 PID: 29623 Comm: syz.0.9182 Not tainted syzkaller #0 [ 1396.933837][T29623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1396.943917][T29623] Call Trace: [ 1396.947210][T29623] [ 1396.950147][T29623] dump_stack_lvl+0x188/0x24e [ 1396.954847][T29623] ? show_regs_print_info+0x12/0x12 [ 1396.960067][T29623] ? load_image+0x400/0x400 [ 1396.964593][T29623] ? __lock_acquire+0x7d10/0x7d10 [ 1396.969644][T29623] should_fail_ex+0x399/0x4d0 [ 1396.974352][T29623] _copy_from_user+0x2c/0x170 [ 1396.979045][T29623] iovec_from_user+0x143/0x360 [ 1396.983818][T29623] __import_iovec+0x6d/0x500 [ 1396.988409][T29623] import_iovec+0x6f/0xa0 [ 1396.992732][T29623] ___sys_sendmsg+0x252/0x360 [ 1396.997426][T29623] ? __sys_sendmsg+0x290/0x290 [ 1397.002220][T29623] ? __lock_acquire+0x7d10/0x7d10 [ 1397.007270][T29623] __se_sys_sendmsg+0x1bb/0x2a0 [ 1397.012129][T29623] ? __x64_sys_sendmsg+0x80/0x80 [ 1397.017075][T29623] ? lockdep_hardirqs_on+0x94/0x140 [ 1397.022268][T29623] do_syscall_64+0x4c/0xa0 [ 1397.026678][T29623] ? clear_bhb_loop+0x60/0xb0 [ 1397.031350][T29623] ? clear_bhb_loop+0x60/0xb0 [ 1397.036026][T29623] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1397.041913][T29623] RIP: 0033:0x7f89e1b9c799 [ 1397.046333][T29623] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1397.065946][T29623] RSP: 002b:00007f89e2a15028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1397.074444][T29623] RAX: ffffffffffffffda RBX: 00007f89e1e15fa0 RCX: 00007f89e1b9c799 [ 1397.082411][T29623] RDX: 0000000004000081 RSI: 00002000000005c0 RDI: 0000000000000003 [ 1397.090372][T29623] RBP: 00007f89e2a15090 R08: 0000000000000000 R09: 0000000000000000 [ 1397.098340][T29623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1397.106314][T29623] R13: 00007f89e1e16038 R14: 00007f89e1e15fa0 R15: 00007ffe2b4fd6d8 [ 1397.114298][T29623] [ 1397.218008][T29627] netlink: 164 bytes leftover after parsing attributes in process `syz.2.9184'. [ 1397.230927][T28474] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1397.241511][T28474] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1397.252858][T28474] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1397.263328][T28474] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1397.270960][T28474] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1397.278365][T28474] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1397.456060][T29625] validate_nla: 2 callbacks suppressed [ 1397.470880][T29625] netlink: 'syz.4.9183': attribute type 2 has an invalid length. [ 1397.491275][ T4457] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1397.733229][ T4457] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1397.783590][T29650] netlink: 'syz.0.9187': attribute type 21 has an invalid length. [ 1397.802638][T29650] netlink: 156 bytes leftover after parsing attributes in process `syz.0.9187'. [ 1397.827364][ T4296] wlan1: Trigger new scan to find an IBSS to join [ 1397.983640][ T4457] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1398.039572][T29652] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9189'. [ 1398.057600][T29630] chnl_net:caif_netlink_parms(): no params data found [ 1398.191357][ T4457] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1398.524033][T29630] bridge0: port 1(bridge_slave_0) entered blocking state [ 1398.531277][T29630] bridge0: port 1(bridge_slave_0) entered disabled state [ 1398.541362][T29630] device bridge_slave_0 entered promiscuous mode [ 1398.550973][T29630] bridge0: port 2(bridge_slave_1) entered blocking state [ 1398.558364][T29630] bridge0: port 2(bridge_slave_1) entered disabled state [ 1398.566910][T29630] device bridge_slave_1 entered promiscuous mode [ 1398.682034][T29630] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1398.739152][T29630] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1398.786897][ T11] wlan1: Trigger new scan to find an IBSS to join [ 1398.793516][ T9] wlan1: Trigger new scan to find an IBSS to join [ 1398.809662][T29675] netlink: 'syz.2.9195': attribute type 10 has an invalid length. [ 1398.836522][T29675] team0: Device vxcan1 is of different type [ 1398.844251][T20062] wlan1: Creating new IBSS network, BSSID 3e:af:23:b7:af:f9 [ 1398.916857][T29682] netlink: 164 bytes leftover after parsing attributes in process `syz.3.9197'. [ 1398.946327][ T4457] device 0 left promiscuous mode [ 1398.980198][T29630] team0: Port device team_slave_0 added [ 1399.064236][T29630] team0: Port device team_slave_1 added [ 1399.240922][T29697] netlink: 'syz.3.9201': attribute type 2 has an invalid length. [ 1399.286412][T29690] device syzkaller0 entered promiscuous mode [ 1399.346971][T19792] Bluetooth: hci1: command 0x0409 tx timeout [ 1399.463290][T29630] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1399.481849][T29630] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1399.533336][T29630] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1399.560757][T29630] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1399.575889][T29630] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1399.637370][T29630] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1399.660872][T29696] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9202'. [ 1399.676021][T29700] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 1399.685523][T29700] syzkaller0: Linktype set failed because interface is up [ 1399.717328][ T4312] syzkaller0: tun_net_xmit 48 [ 1400.869128][ T9] wlan1: Trigger new scan to find an IBSS to join [ 1400.936458][T20062] wlan1: Creating new IBSS network, BSSID 26:40:09:dd:87:b6 [ 1401.427570][T19792] Bluetooth: hci1: command 0x041b tx timeout [ 1401.832291][ T46] wlan1: Trigger new scan to find an IBSS to join [ 1402.458062][T29702] netlink: 'syz.2.9200': attribute type 21 has an invalid length. [ 1402.465934][T29702] netlink: 156 bytes leftover after parsing attributes in process `syz.2.9200'. [ 1402.667207][T29630] device hsr_slave_0 entered promiscuous mode [ 1403.432411][T29630] device hsr_slave_1 entered promiscuous mode [ 1403.506659][T19792] Bluetooth: hci1: command 0x040f tx timeout [ 1403.771996][T29630] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1403.786336][T29630] Cannot create hsr debugfs directory [ 1403.828616][ T9] wlan1: Creating new IBSS network, BSSID 5a:c4:61:de:da:12 [ 1404.241208][T29748] netlink: 164 bytes leftover after parsing attributes in process `syz.4.9211'. [ 1404.252725][T29755] netlink: 'syz.0.9210': attribute type 10 has an invalid length. [ 1404.277375][T29755] team0: Device vxcan1 is of different type [ 1404.578668][T29774] netlink: 'syz.0.9216': attribute type 10 has an invalid length. [ 1404.597462][T29774] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.9216'. [ 1404.628975][T29777] netlink: 'syz.0.9216': attribute type 2 has an invalid length. [ 1404.649429][T29777] netlink: 'syz.0.9216': attribute type 1 has an invalid length. [ 1404.680711][T29777] netlink: 'syz.0.9216': attribute type 2 has an invalid length. [ 1404.713972][T29777] netlink: 198452 bytes leftover after parsing attributes in process `syz.0.9216'. [ 1405.586234][T19792] Bluetooth: hci1: command 0x0419 tx timeout [ 1406.405853][ T4457] team0: Port device wlan1 removed [ 1406.433233][T29788] mac80211_hwsim hwsim38 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1406.443015][T29789] netlink: 'syz.2.9219': attribute type 21 has an invalid length. [ 1406.452613][T29789] netlink: 156 bytes leftover after parsing attributes in process `syz.2.9219'. [ 1406.877560][T29821] FAULT_INJECTION: forcing a failure. [ 1406.877560][T29821] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1406.937492][T29821] CPU: 1 PID: 29821 Comm: syz.0.9226 Not tainted syzkaller #0 [ 1406.945007][T29821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1406.955269][T29821] Call Trace: [ 1406.958573][T29821] [ 1406.961520][T29821] dump_stack_lvl+0x188/0x24e [ 1406.966226][T29821] ? show_regs_print_info+0x12/0x12 [ 1406.971438][T29821] ? load_image+0x400/0x400 [ 1406.975945][T29821] ? __lock_acquire+0x7d10/0x7d10 [ 1406.980977][T29821] should_fail_ex+0x399/0x4d0 [ 1406.985742][T29821] _copy_from_user+0x2c/0x170 [ 1406.990851][T29821] iovec_from_user+0x143/0x360 [ 1406.995618][T29821] __import_iovec+0x6d/0x500 [ 1407.000209][T29821] import_iovec+0x6f/0xa0 [ 1407.004535][T29821] ___sys_sendmsg+0x252/0x360 [ 1407.009240][T29821] ? __sys_sendmsg+0x290/0x290 [ 1407.014028][T29821] ? trace_call_bpf+0xbf/0x6b0 [ 1407.018816][T29821] __se_sys_sendmsg+0x1bb/0x2a0 [ 1407.023673][T29821] ? __x64_sys_sendmsg+0x80/0x80 [ 1407.028630][T29821] ? lockdep_hardirqs_on+0x94/0x140 [ 1407.033827][T29821] do_syscall_64+0x4c/0xa0 [ 1407.038241][T29821] ? clear_bhb_loop+0x60/0xb0 [ 1407.042947][T29821] ? clear_bhb_loop+0x60/0xb0 [ 1407.047621][T29821] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1407.053510][T29821] RIP: 0033:0x7f89e1b9c799 [ 1407.057916][T29821] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1407.077524][T29821] RSP: 002b:00007f89e2a15028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1407.085977][T29821] RAX: ffffffffffffffda RBX: 00007f89e1e15fa0 RCX: 00007f89e1b9c799 [ 1407.093975][T29821] RDX: 000000000004a046 RSI: 0000200000000040 RDI: 0000000000000003 [ 1407.101951][T29821] RBP: 00007f89e2a15090 R08: 0000000000000000 R09: 0000000000000000 [ 1407.109923][T29821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1407.117896][T29821] R13: 00007f89e1e16038 R14: 00007f89e1e15fa0 R15: 00007ffe2b4fd6d8 [ 1407.125876][T29821] [ 1407.689118][T29817] netlink: 164 bytes leftover after parsing attributes in process `syz.2.9225'. [ 1407.780795][ T4457] device veth0_to_team left promiscuous mode [ 1407.809981][ T4457] Ÿë: port 2(veth0_to_team) entered disabled state [ 1407.942510][ T4457] device veth0_to_bridge left promiscuous mode [ 1407.961879][ T4457] Ÿë: port 1(veth0_to_bridge) entered disabled state [ 1408.069308][ T4457] device veth1_macvtap left promiscuous mode [ 1408.083397][ T4457] device veth0_macvtap left promiscuous mode [ 1408.796696][ T11] wlan1: Trigger new scan to find an IBSS to join [ 1409.503362][ T4457] team0 (unregistering): Port device team_slave_1 removed [ 1409.547886][ T4457] team0 (unregistering): Port device team_slave_0 removed [ 1409.588054][ T4457] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1409.631351][ T4457] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1409.835372][ T4457] bond0 (unregistering): (slave team0): Releasing backup interface [ 1409.869060][ T4457] bond0 (unregistering): Released all slaves [ 1409.951964][T29842] netlink: 'syz.4.9232': attribute type 10 has an invalid length. [ 1409.973361][T29846] netlink: 'syz.3.9234': attribute type 21 has an invalid length. [ 1409.981455][T29846] netlink: 156 bytes leftover after parsing attributes in process `syz.3.9234'. [ 1410.405448][T29630] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1410.444996][T29862] netlink: 164 bytes leftover after parsing attributes in process `syz.4.9240'. [ 1410.551708][T29861] Ÿë: port 1(veth0_to_team) entered blocking state [ 1410.576525][T29861] Ÿë: port 1(veth0_to_team) entered disabled state [ 1410.597749][T29861] device veth0_to_team entered promiscuous mode [ 1410.626000][T29630] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1410.647034][T29630] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1410.696598][T29630] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1410.917749][T29630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1410.964648][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1410.981411][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1411.004170][T29630] 8021q: adding VLAN 0 to HW filter on device team0 [ 1411.033270][T19637] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1411.060245][T19637] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1411.092514][T19637] bridge0: port 1(bridge_slave_0) entered blocking state [ 1411.099690][T19637] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1411.128307][T19637] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1411.147051][T19637] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1411.167464][T19637] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1411.179142][T19637] bridge0: port 2(bridge_slave_1) entered blocking state [ 1411.186312][T19637] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1411.207968][T19637] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1411.224375][T19637] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1411.261872][T19637] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1411.283141][T19637] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1411.305120][T19637] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1411.332435][T19637] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1411.354915][T19637] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1411.387241][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1411.409731][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1411.438949][T29630] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1411.464507][T29630] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1411.485262][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1411.503774][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1411.968168][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1411.980597][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1412.002813][T29630] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1412.053958][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1412.079340][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1412.118284][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1412.130391][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1412.144857][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1412.170337][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1412.184453][T29630] device veth0_vlan entered promiscuous mode [ 1412.204786][T29630] device veth1_vlan entered promiscuous mode [ 1412.240791][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1412.252133][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1412.263422][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1412.274566][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1412.288539][T29630] device veth0_macvtap entered promiscuous mode [ 1412.320641][T29630] device veth1_macvtap entered promiscuous mode [ 1412.349933][T29630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1412.365670][T29630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1412.375632][T29630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1412.390946][T29630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1412.400986][T29630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1412.419740][T29630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1412.432570][T29630] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1412.444581][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1412.454779][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1412.470897][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1412.482442][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1412.496891][T29630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1412.513004][T29630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1412.532086][T29630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1412.542942][T29630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1412.558549][T29630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1412.572429][T29630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1412.603431][T29630] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1412.624052][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1412.638551][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1412.663883][T29630] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1412.719240][T29630] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1412.732804][T29630] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1412.796959][T29630] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1412.867460][ T34] wlan1: Trigger new scan to find an IBSS to join [ 1412.925507][T29909] netlink: 'syz.0.9247': attribute type 2 has an invalid length. [ 1412.990503][T29910] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9245'. [ 1413.047049][ T4457] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1413.055099][ T4457] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1413.077515][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1413.190051][T19637] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1413.202264][T19637] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1413.210084][T29913] netlink: 'syz.2.9246': attribute type 21 has an invalid length. [ 1413.238228][T29913] netlink: 156 bytes leftover after parsing attributes in process `syz.2.9246'. [ 1413.273981][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1413.326532][T29922] netlink: 'syz.0.9249': attribute type 10 has an invalid length. [ 1413.401538][T29922] 8021q: adding VLAN 0 to HW filter on device team0 [ 1413.475375][T29922] bond0: (slave team0): Enslaving as an active interface with an up link [ 1413.764258][T29929] FAULT_INJECTION: forcing a failure. [ 1413.764258][T29929] name failslab, interval 1, probability 0, space 0, times 0 [ 1413.779268][T29929] CPU: 0 PID: 29929 Comm: syz.3.9252 Not tainted syzkaller #0 [ 1413.786882][T29929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1413.796973][T29929] Call Trace: [ 1413.800283][T29929] [ 1413.803244][T29929] dump_stack_lvl+0x188/0x24e [ 1413.807978][T29929] ? show_regs_print_info+0x12/0x12 [ 1413.813233][T29929] ? load_image+0x400/0x400 [ 1413.817794][T29929] ? __might_sleep+0xd0/0xd0 [ 1413.822436][T29929] ? __lock_acquire+0x7d10/0x7d10 [ 1413.827509][T29929] should_fail_ex+0x399/0x4d0 [ 1413.830462][T29931] netlink: 164 bytes leftover after parsing attributes in process `syz.2.9253'. [ 1413.832207][T29929] should_failslab+0x5/0x20 [ 1413.832241][T29929] slab_pre_alloc_hook+0x59/0x310 [ 1413.850839][T29929] ? bpf_prog_test_run_skb+0x234/0x12a0 [ 1413.856404][T29929] __kmem_cache_alloc_node+0x4f/0x260 [ 1413.861803][T29929] ? bpf_prog_test_run_skb+0x234/0x12a0 [ 1413.867367][T29929] __kmalloc+0xa0/0x240 [ 1413.871527][T29929] bpf_prog_test_run_skb+0x234/0x12a0 [ 1413.876893][T29929] ? __fget_files+0x28/0x4b0 [ 1413.881488][T29929] ? __fget_files+0x28/0x4b0 [ 1413.886081][T29929] ? __fget_files+0x43d/0x4b0 [ 1413.890773][T29929] ? cpu_online+0xa0/0xa0 [ 1413.895105][T29929] bpf_prog_test_run+0x31e/0x390 [ 1413.900047][T29929] __sys_bpf+0x62b/0x780 [ 1413.904299][T29929] ? bpf_link_show_fdinfo+0x380/0x380 [ 1413.909683][T29929] ? lock_chain_count+0x20/0x20 [ 1413.914547][T29929] __x64_sys_bpf+0x78/0x90 [ 1413.919006][T29929] do_syscall_64+0x4c/0xa0 [ 1413.923463][T29929] ? clear_bhb_loop+0x60/0xb0 [ 1413.928172][T29929] ? clear_bhb_loop+0x60/0xb0 [ 1413.933045][T29929] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1413.938965][T29929] RIP: 0033:0x7fe419d9c799 [ 1413.943381][T29929] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1413.962991][T29929] RSP: 002b:00007fe41acf2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1413.971405][T29929] RAX: ffffffffffffffda RBX: 00007fe41a015fa0 RCX: 00007fe419d9c799 [ 1413.979371][T29929] RDX: 0000000000000050 RSI: 0000200000000040 RDI: 000000000000000a [ 1413.987336][T29929] RBP: 00007fe41acf2090 R08: 0000000000000000 R09: 0000000000000000 [ 1413.995307][T29929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1414.003274][T29929] R13: 00007fe41a016038 R14: 00007fe41a015fa0 R15: 00007ffcd0224488 [ 1414.011260][T29929] [ 1414.069207][T29927] netlink: 14 bytes leftover after parsing attributes in process `syz.1.9174'. [ 1414.096838][T29927] device hsr_slave_0 left promiscuous mode [ 1414.132059][T29927] device hsr_slave_1 left promiscuous mode [ 1414.453444][T29941] Ÿë: port 1(veth0_to_bridge) entered blocking state [ 1414.489970][T29941] Ÿë: port 1(veth0_to_bridge) entered disabled state [ 1414.514013][T29941] device veth0_to_bridge entered promiscuous mode [ 1414.694925][T28474] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1414.705709][T28474] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1414.719467][T28474] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1414.728865][T28474] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1414.737208][T28474] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1414.747334][T28474] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1414.763253][T29940] mac80211_hwsim hwsim40 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1414.866648][ T9] wlan1: Creating new IBSS network, BSSID 76:9c:de:d9:44:26 [ 1416.106523][T29951] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9259'. [ 1416.373258][ T34] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1416.396886][T29953] Ÿë: port 1(veth0_to_bridge) entered blocking state [ 1416.415704][T29953] Ÿë: port 1(veth0_to_bridge) entered disabled state [ 1416.445334][T29953] device veth0_to_bridge entered promiscuous mode [ 1416.486268][T29960] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9262'. [ 1416.497200][T29963] netlink: 'syz.3.9270': attribute type 10 has an invalid length. [ 1416.524770][T29963] team0: Device vxcan1 is of different type [ 1416.567398][ T34] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1416.680404][ T34] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1416.786582][T19792] Bluetooth: hci5: command 0x0409 tx timeout [ 1416.795067][T29968] netlink: 164 bytes leftover after parsing attributes in process `syz.1.9264'. [ 1416.887705][ T34] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1416.928573][T29948] chnl_net:caif_netlink_parms(): no params data found [ 1416.951349][T29978] netlink: 'syz.0.9263': attribute type 21 has an invalid length. [ 1416.963618][T29978] netlink: 156 bytes leftover after parsing attributes in process `syz.0.9263'. [ 1417.023917][T29980] netlink: 'syz.2.9266': attribute type 10 has an invalid length. [ 1417.806967][T29948] bridge0: port 1(bridge_slave_0) entered blocking state [ 1417.869108][T29948] bridge0: port 1(bridge_slave_0) entered disabled state [ 1417.956001][T29948] device bridge_slave_0 entered promiscuous mode [ 1418.015276][T29948] bridge0: port 2(bridge_slave_1) entered blocking state [ 1418.062178][T29948] bridge0: port 2(bridge_slave_1) entered disabled state [ 1418.101224][T29948] device bridge_slave_1 entered promiscuous mode [ 1418.134638][T29991] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9271'. [ 1418.204362][T29948] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1418.223934][T29948] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1418.320985][T29948] team0: Port device team_slave_0 added [ 1418.343973][T29948] team0: Port device team_slave_1 added [ 1418.411572][T29948] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1418.421768][T29948] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1418.464815][T29948] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1418.500952][T29948] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1418.524837][T29948] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1418.609498][T29948] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1418.797538][ T11] wlan1: Trigger new scan to find an IBSS to join [ 1418.866334][T19792] Bluetooth: hci5: command 0x041b tx timeout [ 1419.958103][T29948] device hsr_slave_0 entered promiscuous mode [ 1419.964966][T29948] device hsr_slave_1 entered promiscuous mode [ 1419.975089][T29948] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1419.991148][T29948] Cannot create hsr debugfs directory [ 1420.028003][ T34] device 0 left promiscuous mode [ 1420.466063][T30009] netlink: 14 bytes leftover after parsing attributes in process `syz.0.9274'. [ 1420.487024][T30013] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9273'. [ 1420.513699][T30016] Ÿë: port 2(veth0_to_team) entered blocking state [ 1420.531644][T30016] Ÿë: port 2(veth0_to_team) entered disabled state [ 1420.611466][T30016] device veth0_to_team entered promiscuous mode [ 1420.733632][T30026] netlink: 164 bytes leftover after parsing attributes in process `syz.1.9277'. [ 1420.946460][T19792] Bluetooth: hci5: command 0x040f tx timeout [ 1420.994454][T30029] netlink: 'syz.0.9278': attribute type 21 has an invalid length. [ 1421.006570][T30029] netlink: 156 bytes leftover after parsing attributes in process `syz.0.9278'. [ 1421.115959][T30037] netlink: 'syz.2.9279': attribute type 10 has an invalid length. [ 1421.263643][T30041] netlink: 'syz.1.9281': attribute type 10 has an invalid length. [ 1421.337251][T30041] 8021q: adding VLAN 0 to HW filter on device team0 [ 1421.373522][T30041] bond0: (slave team0): Enslaving as an active interface with an up link [ 1421.559038][T30045] mac80211_hwsim hwsim40 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1421.801035][T30051] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9283'. [ 1422.229244][T30063] mac80211_hwsim hwsim42 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1422.273324][T30060] netlink: 14 bytes leftover after parsing attributes in process `syz.0.9287'. [ 1422.284454][T30066] netlink: 'syz.2.9288': attribute type 10 has an invalid length. [ 1422.303037][T30066] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1422.343377][T30066] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1422.373676][T30066] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 1422.524569][ T34] team0: Port device wlan1 removed [ 1422.555593][T30075] netlink: 164 bytes leftover after parsing attributes in process `syz.2.9291'. [ 1422.929676][T30085] netlink: 'syz.1.9292': attribute type 21 has an invalid length. [ 1422.941317][T30085] netlink: 156 bytes leftover after parsing attributes in process `syz.1.9292'. [ 1422.990670][ T34] device veth0_to_team left promiscuous mode [ 1422.999562][ T34] Ÿë: port 2(veth0_to_team) entered disabled state [ 1423.011657][ T34] device veth0_to_bridge left promiscuous mode [ 1423.018507][ T34] Ÿë: port 1(veth0_to_bridge) entered disabled state [ 1423.026890][T19792] Bluetooth: hci5: command 0x0419 tx timeout [ 1423.029166][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.040078][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.159220][ T34] device veth1_macvtap left promiscuous mode [ 1423.165379][ T34] device veth0_macvtap left promiscuous mode [ 1423.827446][ T4457] wlan1: Trigger new scan to find an IBSS to join [ 1424.115673][ T34] team0 (unregistering): Port device team_slave_1 removed [ 1424.155972][ T34] team0 (unregistering): Port device team_slave_0 removed [ 1424.200675][ T34] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1424.240347][ T34] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1424.492338][ T34] bond0 (unregistering): (slave team0): Releasing backup interface [ 1424.525954][ T34] bond0 (unregistering): Released all slaves [ 1424.563634][T30088] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9296'. [ 1424.572929][T30096] netlink: 'syz.1.9295': attribute type 10 has an invalid length. [ 1424.625173][T30103] netlink: 'syz.0.9299': attribute type 19 has an invalid length. [ 1424.653531][T30103] netlink: 14524 bytes leftover after parsing attributes in process `syz.0.9299'. [ 1424.712444][T29948] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1424.752711][T29948] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1424.786384][ T9] wlan1: Trigger new scan to find an IBSS to join [ 1424.805963][T29948] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1424.854123][T30105] netlink: 14 bytes leftover after parsing attributes in process `syz.2.9300'. [ 1424.912685][T29948] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1424.932876][T30114] FAULT_INJECTION: forcing a failure. [ 1424.932876][T30114] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1424.991998][T30116] netlink: 164 bytes leftover after parsing attributes in process `syz.0.9303'. [ 1425.013539][T30114] CPU: 1 PID: 30114 Comm: syz.3.9302 Not tainted syzkaller #0 [ 1425.021054][T30114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1425.031132][T30114] Call Trace: [ 1425.034441][T30114] [ 1425.037390][T30114] dump_stack_lvl+0x188/0x24e [ 1425.042107][T30114] ? show_regs_print_info+0x12/0x12 [ 1425.047361][T30114] ? load_image+0x400/0x400 [ 1425.051904][T30114] ? __lock_acquire+0x7d10/0x7d10 [ 1425.056958][T30114] should_fail_ex+0x399/0x4d0 [ 1425.061657][T30114] _copy_from_user+0x2c/0x170 [ 1425.066360][T30114] iovec_from_user+0x143/0x360 [ 1425.071157][T30114] __import_iovec+0x6d/0x500 [ 1425.075746][T30114] import_iovec+0x6f/0xa0 [ 1425.080083][T30114] ___sys_sendmsg+0x252/0x360 [ 1425.084787][T30114] ? __sys_sendmsg+0x290/0x290 [ 1425.089600][T30114] ? __lock_acquire+0x7d10/0x7d10 [ 1425.094666][T30114] __se_sys_sendmsg+0x1bb/0x2a0 [ 1425.099539][T30114] ? __x64_sys_sendmsg+0x80/0x80 [ 1425.104515][T30114] ? lockdep_hardirqs_on+0x94/0x140 [ 1425.109748][T30114] do_syscall_64+0x4c/0xa0 [ 1425.114188][T30114] ? clear_bhb_loop+0x60/0xb0 [ 1425.118885][T30114] ? clear_bhb_loop+0x60/0xb0 [ 1425.123546][T30126] netlink: 'syz.1.9304': attribute type 21 has an invalid length. [ 1425.123569][T30114] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1425.137286][T30114] RIP: 0033:0x7fe419d9c799 [ 1425.141717][T30114] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1425.142828][T30126] netlink: 156 bytes leftover after parsing attributes in process `syz.1.9304'. [ 1425.161320][T30114] RSP: 002b:00007fe41acf2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1425.161350][T30114] RAX: ffffffffffffffda RBX: 00007fe41a015fa0 RCX: 00007fe419d9c799 [ 1425.161361][T30114] RDX: 0000000000000080 RSI: 0000200000000040 RDI: 0000000000000003 [ 1425.161371][T30114] RBP: 00007fe41acf2090 R08: 0000000000000000 R09: 0000000000000000 [ 1425.161381][T30114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1425.161390][T30114] R13: 00007fe41a016038 R14: 00007fe41a015fa0 R15: 00007ffcd0224488 [ 1425.161420][T30114] [ 1425.369635][T29948] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1425.436332][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1425.454121][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1425.509033][T29948] 8021q: adding VLAN 0 to HW filter on device team0 [ 1425.567149][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1425.589764][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1425.609642][ T4457] bridge0: port 1(bridge_slave_0) entered blocking state [ 1425.616825][ T4457] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1425.666547][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1425.696990][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1425.726942][ T4457] bridge0: port 2(bridge_slave_1) entered blocking state [ 1425.734080][ T4457] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1425.757023][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1425.790796][T30140] netlink: 'syz.0.9307': attribute type 19 has an invalid length. [ 1425.814640][T30140] netlink: 14524 bytes leftover after parsing attributes in process `syz.0.9307'. [ 1425.859809][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1425.868984][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1425.879319][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1425.895896][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1425.925232][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1425.942402][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1425.963312][T30142] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9309'. [ 1425.994468][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1426.006644][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1426.109769][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1426.159574][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1426.169337][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1426.183387][T29948] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1426.349002][T30158] netlink: 14 bytes leftover after parsing attributes in process `syz.0.9314'. [ 1426.540148][T30167] netlink: 164 bytes leftover after parsing attributes in process `syz.3.9316'. [ 1426.686518][T30170] netlink: 'syz.0.9317': attribute type 21 has an invalid length. [ 1426.732329][T30170] netlink: 156 bytes leftover after parsing attributes in process `syz.0.9317'. [ 1427.126732][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1427.146561][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1427.213233][T29948] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1427.276465][T30193] sock: sock_set_timeout: `syz.2.9325' (pid 30193) tries to set negative timeout [ 1427.828323][ T34] wlan1: Trigger new scan to find an IBSS to join [ 1427.966671][T30219] netlink: 'syz.0.9332': attribute type 21 has an invalid length. [ 1428.179719][T30225] device wlan1 entered promiscuous mode [ 1428.497268][T30243] FAULT_INJECTION: forcing a failure. [ 1428.497268][T30243] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1428.553006][T30243] CPU: 1 PID: 30243 Comm: syz.2.9339 Not tainted syzkaller #0 [ 1428.560519][T30243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1428.570677][T30243] Call Trace: [ 1428.573966][T30243] [ 1428.576896][T30243] dump_stack_lvl+0x188/0x24e [ 1428.581573][T30243] ? show_regs_print_info+0x12/0x12 [ 1428.586766][T30243] ? load_image+0x400/0x400 [ 1428.591270][T30243] ? __lock_acquire+0x7d10/0x7d10 [ 1428.596293][T30243] should_fail_ex+0x399/0x4d0 [ 1428.600971][T30243] _copy_from_user+0x2c/0x170 [ 1428.605643][T30243] iovec_from_user+0x143/0x360 [ 1428.610400][T30243] __import_iovec+0x6d/0x500 [ 1428.615000][T30243] import_iovec+0x6f/0xa0 [ 1428.619323][T30243] ___sys_sendmsg+0x252/0x360 [ 1428.623999][T30243] ? __sys_sendmsg+0x290/0x290 [ 1428.628780][T30243] ? __lock_acquire+0x7d10/0x7d10 [ 1428.633815][T30243] __se_sys_sendmsg+0x1bb/0x2a0 [ 1428.638667][T30243] ? __x64_sys_sendmsg+0x80/0x80 [ 1428.643611][T30243] ? lockdep_hardirqs_on+0x94/0x140 [ 1428.648807][T30243] do_syscall_64+0x4c/0xa0 [ 1428.653251][T30243] ? clear_bhb_loop+0x60/0xb0 [ 1428.657922][T30243] ? clear_bhb_loop+0x60/0xb0 [ 1428.662591][T30243] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1428.668566][T30243] RIP: 0033:0x7f0ebc59c799 [ 1428.672975][T30243] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1428.692837][T30243] RSP: 002b:00007f0ebd533028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1428.701248][T30243] RAX: ffffffffffffffda RBX: 00007f0ebc815fa0 RCX: 00007f0ebc59c799 [ 1428.709212][T30243] RDX: 000000000004a046 RSI: 0000200000000040 RDI: 0000000000000003 [ 1428.717260][T30243] RBP: 00007f0ebd533090 R08: 0000000000000000 R09: 0000000000000000 [ 1428.725222][T30243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1428.733182][T30243] R13: 00007f0ebc816038 R14: 00007f0ebc815fa0 R15: 00007ffd1a7e9488 [ 1428.741155][T30243] [ 1428.787257][T30244] device hsr_slave_0 left promiscuous mode [ 1428.795457][ T4296] wlan1: Trigger new scan to find an IBSS to join [ 1428.844607][T30244] device hsr_slave_1 left promiscuous mode [ 1428.952008][T19146] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1428.969238][T19146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1429.026346][T30250] mac80211_hwsim hwsim36 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1429.039647][T19637] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1429.062565][T19637] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1429.093652][T29948] device veth0_vlan entered promiscuous mode [ 1429.109019][T19637] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1429.130544][T19637] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1429.208446][T29948] device veth1_vlan entered promiscuous mode [ 1429.325475][T19146] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1429.335581][T19146] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1429.376935][T19146] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1429.404019][T19146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1429.435730][T29948] device veth0_macvtap entered promiscuous mode [ 1429.476606][T29948] device veth1_macvtap entered promiscuous mode [ 1429.513261][T30265] netlink: 'syz.0.9346': attribute type 21 has an invalid length. [ 1429.562933][T29948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1429.638067][T29948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1429.681760][T29948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1429.755875][T29948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1429.805322][T29948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1429.826979][ T11] wlan1: Creating new IBSS network, BSSID 3a:c1:a6:88:96:41 [ 1429.845300][T29948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1429.883272][T29948] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1429.914423][T30269] __nla_validate_parse: 9 callbacks suppressed [ 1429.914443][T30269] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9347'. [ 1430.786238][T19146] wlan1: Creating new IBSS network, BSSID 86:28:9b:5d:0e:f3 [ 1432.260464][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1432.328910][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1432.369850][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1432.400713][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1432.454127][T29948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1432.479622][T29948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1432.493096][T29948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1432.509649][T29948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1432.519935][T29948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1432.531892][T29948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1432.561095][T29948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1432.576259][T29948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1432.623364][T29948] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1432.645018][T29948] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1432.654040][T29948] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1432.662997][T29948] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1432.681791][T29948] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1432.724245][T30287] netlink: 14 bytes leftover after parsing attributes in process `syz.3.9351'. [ 1432.741570][T30291] netlink: 164 bytes leftover after parsing attributes in process `syz.2.9353'. [ 1432.763507][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1432.787361][ T4296] wlan1: Trigger new scan to find an IBSS to join [ 1432.794834][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1432.857845][T30295] netlink: 14 bytes leftover after parsing attributes in process `syz.0.9354'. [ 1432.956482][ T4296] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1432.964341][ T4296] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1433.013851][T30302] mac80211_hwsim hwsim40 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1433.043213][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1433.052178][T19146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1433.079532][T30300] netlink: 'syz.2.9357': attribute type 21 has an invalid length. [ 1433.097627][T19146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1433.116605][T30300] netlink: 156 bytes leftover after parsing attributes in process `syz.2.9357'. [ 1433.142733][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1433.343242][T30311] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9360'. [ 1434.407339][T30327] FAULT_INJECTION: forcing a failure. [ 1434.407339][T30327] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1434.466465][T30327] CPU: 1 PID: 30327 Comm: syz.0.9366 Not tainted syzkaller #0 [ 1434.473986][T30327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1434.484063][T30327] Call Trace: [ 1434.487362][T30327] [ 1434.490351][T30327] dump_stack_lvl+0x188/0x24e [ 1434.495140][T30327] ? show_regs_print_info+0x12/0x12 [ 1434.500357][T30327] ? load_image+0x400/0x400 [ 1434.504880][T30327] ? __lock_acquire+0x7d10/0x7d10 [ 1434.509940][T30327] should_fail_ex+0x399/0x4d0 [ 1434.514645][T30327] _copy_from_user+0x2c/0x170 [ 1434.519349][T30327] iovec_from_user+0x143/0x360 [ 1434.524129][T30327] __import_iovec+0x6d/0x500 [ 1434.528736][T30327] import_iovec+0x6f/0xa0 [ 1434.533081][T30327] ___sys_sendmsg+0x252/0x360 [ 1434.537780][T30327] ? __sys_sendmsg+0x290/0x290 [ 1434.542591][T30327] ? __lock_acquire+0x7d10/0x7d10 [ 1434.547653][T30327] __se_sys_sendmsg+0x1bb/0x2a0 [ 1434.552529][T30327] ? __x64_sys_sendmsg+0x80/0x80 [ 1434.557501][T30327] ? lockdep_hardirqs_on+0x94/0x140 [ 1434.562726][T30327] do_syscall_64+0x4c/0xa0 [ 1434.567160][T30327] ? clear_bhb_loop+0x60/0xb0 [ 1434.571868][T30327] ? clear_bhb_loop+0x60/0xb0 [ 1434.576577][T30327] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1434.582488][T30327] RIP: 0033:0x7f89e1b9c799 [ 1434.586920][T30327] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1434.606716][T30327] RSP: 002b:00007f89e2a15028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1434.615154][T30327] RAX: ffffffffffffffda RBX: 00007f89e1e15fa0 RCX: 00007f89e1b9c799 [ 1434.623242][T30327] RDX: 0000000004000000 RSI: 0000200000000680 RDI: 0000000000000003 [ 1434.631248][T30327] RBP: 00007f89e2a15090 R08: 0000000000000000 R09: 0000000000000000 [ 1434.639242][T30327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1434.647241][T30327] R13: 00007f89e1e16038 R14: 00007f89e1e15fa0 R15: 00007ffe2b4fd6d8 [ 1434.655254][T30327] [ 1434.708349][T30330] netlink: 14 bytes leftover after parsing attributes in process `syz.2.9365'. [ 1434.784300][T30340] mac80211_hwsim hwsim40 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1434.845003][T30338] netlink: 'syz.4.9370': attribute type 21 has an invalid length. [ 1434.861967][T30338] netlink: 156 bytes leftover after parsing attributes in process `syz.4.9370'. [ 1434.883153][T30337] Ÿë: port 1(veth0_to_bridge) entered blocking state [ 1434.905195][T30337] Ÿë: port 1(veth0_to_bridge) entered disabled state [ 1434.942525][T30337] device veth0_to_bridge entered promiscuous mode [ 1434.984015][T30341] Ÿë: port 2(veth0_to_team) entered blocking state [ 1435.016572][T30341] Ÿë: port 2(veth0_to_team) entered disabled state [ 1435.035287][T30341] device veth0_to_team entered promiscuous mode [ 1435.082827][T30343] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9373'. [ 1435.174698][T30351] netlink: 184 bytes leftover after parsing attributes in process `syz.0.9372'. [ 1436.866401][T19146] wlan1: Trigger new scan to find an IBSS to join [ 1436.873131][ T4321] wlan1: Trigger new scan to find an IBSS to join [ 1437.902781][T19146] wlan1: Creating new IBSS network, BSSID ea:c2:60:5b:85:fc [ 1438.242646][T30363] mac80211_hwsim hwsim42 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1438.427267][T30369] mac80211_hwsim hwsim40 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1438.634586][T30375] mac80211_hwsim hwsim42 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1438.736534][T30377] netlink: 'syz.3.9386': attribute type 2 has an invalid length. [ 1438.740604][T30374] netlink: 'syz.0.9384': attribute type 21 has an invalid length. [ 1438.763189][T30374] netlink: 156 bytes leftover after parsing attributes in process `syz.0.9384'. [ 1439.053024][T30387] netlink: 'syz.2.9388': attribute type 10 has an invalid length. [ 1439.144173][T30387] team0: Device vxcan1 is of different type [ 1440.866655][T19146] wlan1: Trigger new scan to find an IBSS to join [ 1440.873311][ T34] wlan1: Trigger new scan to find an IBSS to join [ 1442.041073][T30386] Ÿë: port 1(veth0_to_bridge) entered blocking state [ 1442.052268][T30386] Ÿë: port 1(veth0_to_bridge) entered disabled state [ 1442.069100][T30386] device veth0_to_bridge entered promiscuous mode [ 1442.083955][T30395] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9392'. [ 1442.325393][T30407] mac80211_hwsim hwsim38 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1442.348425][T30411] mac80211_hwsim hwsim42 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1442.573550][T30415] netlink: 'syz.4.9399': attribute type 21 has an invalid length. [ 1442.600797][T30415] netlink: 156 bytes leftover after parsing attributes in process `syz.4.9399'. [ 1442.614524][T30417] Ÿë: port 2(veth0_to_bridge) entered blocking state [ 1442.633979][T30417] Ÿë: port 2(veth0_to_bridge) entered disabled state [ 1442.660711][T30417] device veth0_to_bridge entered promiscuous mode [ 1442.705685][T30419] mac80211_hwsim hwsim38 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1443.084013][T30433] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9406'. [ 1444.790014][ T4321] wlan1: Trigger new scan to find an IBSS to join [ 1444.866342][T19637] wlan1: Trigger new scan to find an IBSS to join [ 1444.866402][ T9] wlan1: Trigger new scan to find an IBSS to join [ 1445.761377][ T11] wlan1: Creating new IBSS network, BSSID da:ae:63:5d:90:a7 [ 1445.772419][T30440] netlink: 'syz.0.9405': attribute type 10 has an invalid length. [ 1445.807609][T30440] team0: Device vxcan1 is of different type [ 1446.014992][T30454] mac80211_hwsim hwsim36 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1446.042586][T30456] mac80211_hwsim hwsim44 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1446.327466][T30466] netlink: 'syz.1.9415': attribute type 10 has an invalid length. [ 1446.438132][T30466] team0: Device vxcan1 is of different type [ 1446.652038][T30478] netlink: 'syz.2.9422': attribute type 2 has an invalid length. [ 1446.759479][T30480] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9424'. [ 1447.826361][ T4296] wlan1: Trigger new scan to find an IBSS to join [ 1447.836319][ T34] wlan1: Trigger new scan to find an IBSS to join [ 1449.735182][ T4296] wlan1: Creating new IBSS network, BSSID 1a:18:66:39:d2:bf [ 1449.742664][ T4457] wlan1: Creating new IBSS network, BSSID 9e:36:1f:ff:72:e6 [ 1449.826642][ T4296] wlan1: Trigger new scan to find an IBSS to join [ 1449.976522][T30496] device pim6reg1 entered promiscuous mode [ 1449.988249][T30502] FAULT_INJECTION: forcing a failure. [ 1449.988249][T30502] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1450.049314][T30502] CPU: 0 PID: 30502 Comm: syz.4.9429 Not tainted syzkaller #0 [ 1450.056843][T30502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1450.066917][T30502] Call Trace: [ 1450.070203][T30502] [ 1450.073139][T30502] dump_stack_lvl+0x188/0x24e [ 1450.077836][T30502] ? show_regs_print_info+0x12/0x12 [ 1450.083050][T30502] ? load_image+0x400/0x400 [ 1450.087579][T30502] ? __lock_acquire+0x7d10/0x7d10 [ 1450.092630][T30502] should_fail_ex+0x399/0x4d0 [ 1450.097334][T30502] _copy_from_user+0x2c/0x170 [ 1450.102032][T30502] iovec_from_user+0x143/0x360 [ 1450.106817][T30502] __import_iovec+0x6d/0x500 [ 1450.111422][T30502] import_iovec+0x6f/0xa0 [ 1450.115765][T30502] ___sys_sendmsg+0x252/0x360 [ 1450.120473][T30502] ? __sys_sendmsg+0x290/0x290 [ 1450.125269][T30502] ? __lock_acquire+0x7d10/0x7d10 [ 1450.130329][T30502] __se_sys_sendmsg+0x1bb/0x2a0 [ 1450.135199][T30502] ? __x64_sys_sendmsg+0x80/0x80 [ 1450.140171][T30502] ? lockdep_hardirqs_on+0x94/0x140 [ 1450.145384][T30502] do_syscall_64+0x4c/0xa0 [ 1450.149821][T30502] ? clear_bhb_loop+0x60/0xb0 [ 1450.154507][T30502] ? clear_bhb_loop+0x60/0xb0 [ 1450.159196][T30502] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1450.165118][T30502] RIP: 0033:0x7fc33b99c799 [ 1450.169549][T30502] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1450.189178][T30502] RSP: 002b:00007fc33c8dc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1450.197606][T30502] RAX: ffffffffffffffda RBX: 00007fc33bc15fa0 RCX: 00007fc33b99c799 [ 1450.205594][T30502] RDX: 0000000000004014 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1450.213839][T30502] RBP: 00007fc33c8dc090 R08: 0000000000000000 R09: 0000000000000000 [ 1450.221857][T30502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1450.229838][T30502] R13: 00007fc33bc16038 R14: 00007fc33bc15fa0 R15: 00007fff99041ec8 [ 1450.237831][T30502] [ 1450.551370][T30512] mac80211_hwsim hwsim40 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1450.622504][T30514] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9436'. [ 1450.807160][T30518] netlink: 14 bytes leftover after parsing attributes in process `syz.4.9438'. [ 1450.847198][T30518] device hsr_slave_0 left promiscuous mode [ 1450.860551][T30518] device hsr_slave_1 left promiscuous mode [ 1452.796312][ T9] wlan1: Trigger new scan to find an IBSS to join [ 1453.831751][T19637] wlan1: Trigger new scan to find an IBSS to join [ 1453.914518][ T4296] wlan1: Creating new IBSS network, BSSID 3e:b2:18:0e:95:f4 [ 1453.932399][T30525] mac80211_hwsim hwsim36 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1453.932962][ T11] ------------[ cut here ]------------ [ 1453.947674][ T11] WARNING: CPU: 1 PID: 11 at net/wireless/ibss.c:37 __cfg80211_ibss_joined+0x428/0x4b0 [ 1453.957954][ T11] Modules linked in: [ 1453.961858][ T11] CPU: 1 PID: 11 Comm: kworker/u4:1 Not tainted syzkaller #0 [ 1453.969253][ T11] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1453.979358][ T11] Workqueue: cfg80211 cfg80211_event_work [ 1453.985197][ T11] RIP: 0010:__cfg80211_ibss_joined+0x428/0x4b0 [ 1453.991423][ T11] Code: 00 00 00 48 3b 84 24 80 00 00 00 75 57 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 51 ab ee f7 0f 0b eb bb e8 48 ab ee f7 <0f> 0b eb b2 e8 3f ab ee f7 0f 0b e9 77 fd ff ff e8 33 ab ee f7 0f [ 1454.011159][ T11] RSP: 0018:ffffc90000107aa0 EFLAGS: 00010293 [ 1454.017280][ T11] RAX: ffffffff8993c9d8 RBX: dffffc0000000000 RCX: ffff88813fec3b80 [ 1454.025362][ T11] RDX: 0000000000000000 RSI: ffffffff8a8c1220 RDI: ffffffff8adf0de0 [ 1454.033475][ T11] RBP: ffffc90000107b70 R08: ffffffff90af52a7 R09: 1ffffffff215ea54 [ 1454.041510][ T11] R10: dffffc0000000000 R11: fffffbfff215ea55 R12: ffff888057ea3618 [ 1454.049636][ T11] R13: 1ffff92000020f5c R14: 000000000000001f R15: ffff88805508cc90 [ 1454.057687][ T11] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1454.066690][ T11] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1454.073301][ T11] CR2: 0000564926d4ea38 CR3: 0000000030541000 CR4: 00000000003506e0 [ 1454.081305][ T11] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000200000000300 [ 1454.089330][ T11] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1454.097373][ T11] Call Trace: [ 1454.100663][ T11] [ 1454.103586][ T11] ? mutex_lock_nested+0x10/0x10 [ 1454.108595][ T11] ? trace_rdev_return_void+0x240/0x240 [ 1454.114192][ T11] cfg80211_process_wdev_events+0x3ad/0x550 [ 1454.120212][ T11] cfg80211_process_rdev_events+0x9d/0x110 [ 1454.126097][ T11] ? process_one_work+0x7b0/0x1160 [ 1454.131217][ T11] cfg80211_event_work+0x2b/0x40 [ 1454.136192][ T11] process_one_work+0x8a2/0x1160 [ 1454.141143][ T11] ? worker_detach_from_pool+0x240/0x240 [ 1454.146914][ T11] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1454.151949][ T11] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1454.157543][ T11] ? kthread_data+0x4b/0xc0 [ 1454.162322][ T11] worker_thread+0xaa2/0x1270 [ 1454.167069][ T11] kthread+0x29d/0x330 [ 1454.171154][ T11] ? worker_clr_flags+0x1a0/0x1a0 [ 1454.176228][ T11] ? kthread_blkcg+0xd0/0xd0 [ 1454.180836][ T11] ret_from_fork+0x1f/0x30 [ 1454.185343][ T11] [ 1454.188412][ T11] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1454.195699][ T11] CPU: 1 PID: 11 Comm: kworker/u4:1 Not tainted syzkaller #0 [ 1454.203062][ T11] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1454.213109][ T11] Workqueue: cfg80211 cfg80211_event_work [ 1454.218834][ T11] Call Trace: [ 1454.222109][ T11] [ 1454.225024][ T11] dump_stack_lvl+0x188/0x24e [ 1454.229696][ T11] ? memcpy+0x3c/0x60 [ 1454.233754][ T11] ? show_regs_print_info+0x12/0x12 [ 1454.239041][ T11] ? load_image+0x400/0x400 [ 1454.243541][ T11] panic+0x2e5/0x730 [ 1454.247531][ T11] ? bpf_jit_dump+0xd0/0xd0 [ 1454.252058][ T11] ? ret_from_fork+0x1f/0x30 [ 1454.256676][ T11] __warn+0x2f8/0x4f0 [ 1454.260660][ T11] ? __cfg80211_ibss_joined+0x428/0x4b0 [ 1454.266223][ T11] ? __cfg80211_ibss_joined+0x428/0x4b0 [ 1454.271771][ T11] report_bug+0x2ba/0x4f0 [ 1454.276181][ T11] ? __cfg80211_ibss_joined+0x428/0x4b0 [ 1454.281749][ T11] handle_bug+0x3a/0x70 [ 1454.285911][ T11] exc_invalid_op+0x16/0x40 [ 1454.290409][ T11] asm_exc_invalid_op+0x16/0x20 [ 1454.295251][ T11] RIP: 0010:__cfg80211_ibss_joined+0x428/0x4b0 [ 1454.301404][ T11] Code: 00 00 00 48 3b 84 24 80 00 00 00 75 57 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 51 ab ee f7 0f 0b eb bb e8 48 ab ee f7 <0f> 0b eb b2 e8 3f ab ee f7 0f 0b e9 77 fd ff ff e8 33 ab ee f7 0f [ 1454.321094][ T11] RSP: 0018:ffffc90000107aa0 EFLAGS: 00010293 [ 1454.327152][ T11] RAX: ffffffff8993c9d8 RBX: dffffc0000000000 RCX: ffff88813fec3b80 [ 1454.335115][ T11] RDX: 0000000000000000 RSI: ffffffff8a8c1220 RDI: ffffffff8adf0de0 [ 1454.343079][ T11] RBP: ffffc90000107b70 R08: ffffffff90af52a7 R09: 1ffffffff215ea54 [ 1454.351048][ T11] R10: dffffc0000000000 R11: fffffbfff215ea55 R12: ffff888057ea3618 [ 1454.359015][ T11] R13: 1ffff92000020f5c R14: 000000000000001f R15: ffff88805508cc90 [ 1454.366986][ T11] ? __cfg80211_ibss_joined+0x428/0x4b0 [ 1454.372545][ T11] ? mutex_lock_nested+0x10/0x10 [ 1454.377485][ T11] ? trace_rdev_return_void+0x240/0x240 [ 1454.383047][ T11] cfg80211_process_wdev_events+0x3ad/0x550 [ 1454.388950][ T11] cfg80211_process_rdev_events+0x9d/0x110 [ 1454.394760][ T11] ? process_one_work+0x7b0/0x1160 [ 1454.399908][ T11] cfg80211_event_work+0x2b/0x40 [ 1454.404846][ T11] process_one_work+0x8a2/0x1160 [ 1454.409791][ T11] ? worker_detach_from_pool+0x240/0x240 [ 1454.415428][ T11] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1454.420443][ T11] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1454.425980][ T11] ? kthread_data+0x4b/0xc0 [ 1454.430485][ T11] worker_thread+0xaa2/0x1270 [ 1454.435175][ T11] kthread+0x29d/0x330 [ 1454.439267][ T11] ? worker_clr_flags+0x1a0/0x1a0 [ 1454.444287][ T11] ? kthread_blkcg+0xd0/0xd0 [ 1454.448870][ T11] ret_from_fork+0x1f/0x30 [ 1454.453291][ T11] [ 1454.456739][ T11] Kernel Offset: disabled [ 1454.461112][ T11] Rebooting in 86400 seconds..