last executing test programs: 15m49.642709521s ago: executing program 4 (id=6823): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x240003, 0x0) r0 = perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x0, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x6f}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa33"], 0xfdef) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000001440)='GPL\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r2 = socket$kcm(0x23, 0x5, 0x0) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x10004000) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0xc0) perf_event_open(&(0x7f0000000080)={0x2, 0x74, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x54787ef2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_config_ext={0x0, 0x1}, 0x104, 0xfffffffffffffffe, 0xc2ba}, 0x0, 0xffffffffffffffff, r0, 0xb) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r3) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r5) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\v\x00'/20, @ANYRES32, @ANYBLOB="00001000"/20, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r3) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000016c0)=ANY=[@ANYBLOB="0a000000040000000400f2a8a7063cfa3d48e277", @ANYRES32=0x1, @ANYBLOB="ffffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000800000ecffffff20000000020000000032007a63dfa299056a008d792b252863c5e5ba44da5b70e24ad3867af91a837785f2479dce7ab6e95aa850c32f2235025061f3b36fddaef9c2703cf6567a6277fffb0046854bbbbdf55c"], 0x50) close(0x3) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080), 0xc) sendmsg$inet(r7, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000340)="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", 0x1000}, {&(0x7f0000001340)="33d4f87687ba1ae37ef751e61294e65d8b4abc85d1e7528a396229ecef391ad26791089f77bdae86e26886d41887b3d17fc8b116b0f30d4fd62a1afa7eb0246361cc15e18bea46a927a223ab41883b929cd3de1dfdaa4ba8cc43e85b73971d7d4fe1f19d1bd119cc1b", 0x69}, {&(0x7f00000013c0)="91709d4b3e05616f99f385bfd715b5904e599ea654a00b917fe57d49c6432e1a47f0f7b152c7248ebbcf0a2dfa12527478eb7569d67a80469933c0791fc67976a90df8a08f833f1b4da03446730ee0f8fbcfbe3c8c832e1f1ddbfc1ae5df0fd2ab4be47a0096b88cc78b36e88437c212cb5c233d8f718aefacdc6df077e457be", 0x80}, {&(0x7f0000001440)="4a8ffed1e403c2fbcfbec1ca2f01853ab461d4ace06ba5096bbe702f00491e260165f28537d610016ac0a31bfed1a149da01a0467be6652ec71f342afd7a83cc7894c8260901ef52afe8b68a7ec5066e9da16e2e95e993790d105dbe3c06187e05e7fa1e23", 0x65}, {&(0x7f00000014c0)="07d6566791f3d7e4cbb9031c01b411a5a859", 0x12}, {&(0x7f0000001500)="f5d6106c5b458ef714b5b6d36275d2846872d91be1b6aea004684492f702b0132401df685005f76ecbd82ebe1e4181713ed043cebbe86c5541d05fe18008524e9dc78b7a7e452e026caddde6c4f7f382aa519075547971eb1e3f7c67470d", 0x5e}], 0x6, &(0x7f0000001600)=[@ip_retopts={{0x6c, 0x0, 0x7, {[@rr={0x7, 0x13, 0xea, [@private=0xa010100, @empty, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @end, @timestamp_prespec={0x44, 0x14, 0x23, 0x3, 0xc, [{@multicast1}, {@private=0xa010101, 0x2}]}, @rr={0x7, 0x17, 0xf7, [@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @multicast1, @local, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_prespec={0x44, 0x1c, 0xda, 0x3, 0x8, [{@rand_addr=0x64010102, 0x9}, {@broadcast, 0x8}, {@multicast2, 0x400}]}]}}}], 0x70}, 0x50000) setsockopt$sock_attach_bpf(r8, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) 15m46.422185061s ago: executing program 4 (id=6830): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x208, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0x8}, 0x428, 0x0, 0xc2ba, 0x4, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0xff, 0x7, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_config_ext={0xaf03, 0x5}, 0x800, 0xca, 0x17, 0x8, 0x9, 0x400000, 0x5, 0x0, 0x12, 0x0, 0x8}, 0xffffffffffffffff, 0x6, r2, 0x1) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000120000000000000000"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r4, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) write$cgroup_subtree(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="02"], 0x9a) 15m46.352130432s ago: executing program 2 (id=6832): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) socket$kcm(0x2, 0x3, 0x84) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200, 0x7, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x3, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}], 0x68}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x34, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0xfffffffffffffd07, 0x0, 0x0, 0x0, 0x1b}, 0x0) r4 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r4, 0x84, 0x9, &(0x7f0000000380), 0x98) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, &(0x7f0000000080)) r5 = perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x0, 0x40, 0x0, 0x9, 0x0, 0x2, 0x58221, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfffdfffa, 0x2, @perf_config_ext={0x4, 0x2}, 0x106a4f, 0x1, 0x6, 0x1, 0x2, 0xffc, 0x4, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xd, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x8000000000000b5, 0x0, 0x4}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[@ANYRESDEC=r3, @ANYRES8=r0], 0xfe33) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r7) ioctl$TUNGETVNETLE(r7, 0x800454dd, &(0x7f0000000300)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r8, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0, 0x808e}, 0x40000100) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @perf_config_ext={0xffffffffffffff00, 0x3}, 0x0, 0x7, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x5452, 0x0) write$cgroup_devices(r7, &(0x7f00000003c0)=ANY=[@ANYRES32=r5], 0xfffffeff) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x165dd788800000) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$TUNATTACHFILTER(r9, 0x401054d5, &(0x7f0000000340)={0x0, 0x0}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x20, &(0x7f0000000240)={&(0x7f0000000000)=""/199, 0xc7, 0x0, 0x0}}, 0x10) 15m46.247538175s ago: executing program 3 (id=6834): bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) (async) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff}, 0x80, 0x0}, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x5452, &(0x7f0000000180)={'syzkaller0\x00'}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYRES32=r1], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r4 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="39000000140081ae0000067f0500015601618575e28590377a1b2cc32b38d37400002783b5cb6b7e6f57fdd586337d5989bab408832e3bee23", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) (async) sendmsg$kcm(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="39000000140081ae0000067f0500015601618575e28590377a1b2cc32b38d37400002783b5cb6b7e6f57fdd586337d5989bab408832e3bee23", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) r5 = getpid() socket$kcm(0x10, 0x2, 0x0) (async) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)}, 0x14) perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x0, 0x7fffffff, 0x2, 0x3cd, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, r5, 0x0, 0xffffffffffffffff, 0x2) (async) perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x0, 0x7fffffff, 0x2, 0x3cd, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, r5, 0x0, 0xffffffffffffffff, 0x2) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x4) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x4) syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000740)={&(0x7f0000000040)=@qipcrtr={0x2a, 0x1, 0x3fff}, 0x80, 0x0}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x4, 0x1, 0x0, 0x0, 0x0, 0x2, 0x4190, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xef15}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r7, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r7, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x3}, 0x400, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r3, 0x8) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x3}, 0x400, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r3, 0x8) 15m46.204614267s ago: executing program 4 (id=6836): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0xd040, 0x10000}, 0x14403, 0xfffc, 0x0, 0x5, 0x582, 0x20005, 0x8, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f00000003c0)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000180000003d030100000000009500f0f3000000006926000000000000bf67000000000000560602000f020f026706000020000000620a00ff0ee60000bf250000000000002d35f3ff000000006507000002080000070700004c0000003e75000000000000bf54000000000000070400000400f9ffcd35010000000000ce040000000000001c000000000000009500000000000000db13d5d8b741f2cdaabc8383c8f56bb5df3083d20f8c2bf304000000815dcf0066d7ded3c5c49a08a503ea6d54f7f3125a8200578ac0836d6454745e70a27444003c5b20451b624db6f5320e9befc1e00b8b32917c4d30d16b7edb732bc3ac330b16c442aff70d27659bc58e296b16750c5577c848754b4894b07f15bab1c640a5c0c4fd62f9db829b301ef67fd2b2726f3af0c54af2412313b17c4c8081c4ed0572261960e227d34cfbfda047bc2351c9d8363a8cb18b7330604da78b0aba47545f9a25a80dd7d28a5ae41824f611dd2de6dd581c52698f9542a444a8a3969946faded527a0bfe5504eb355cb0000000000000073be27152effbed9ed6a4e8f9c55a2ff11245f2c20856d491b80d749cf8917dbe01cc6c7b747923621bb16efb2025d19a1a27b0348135e32e442da8f26e05283ece8ad92c77f8141c7a2037380f28c9c638ee0151f4620b9b64185db0321a4e809a5438cdef28f7adac1735a50006fbae20d0930b55f0081db6fa0d14024cefa1611ef384de38787324bfb9f79a1e164c8fe80a2d9e4199960"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1010000}, 0x27) 15m45.196226712s ago: executing program 2 (id=6839): perf_event_open(&(0x7f0000000900)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2420, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0xa, 0x3, 0x87) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x7, &(0x7f00000011c0)=ANY=[@ANYBLOB="18000000000000000000000000000000851000000200000005000000000000009500007b0000000085000000ad00000095"], &(0x7f0000000000)='GPL\x00', 0x3, 0x92, &(0x7f0000000100)=""/146, 0x0, 0x1c}, 0x94) socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={0xffffffffffffffff, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84, &(0x7f00000000c0)=[{}], 0x8, 0x0, 0x0, 0x0, 0x0, 0x71, 0x8, 0x0, 0x0}}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x86dd, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 15m45.046646885s ago: executing program 1 (id=6841): perf_event_open(&(0x7f0000000900)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2420, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x86dd, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 15m41.874787323s ago: executing program 2 (id=6842): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0xb, 0x0, 0x0, 0x0, 0x0, 0x801ac, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, @perf_bp={0x0, 0x6}, 0x1000, 0x14, 0x0, 0x8, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000001640)="0c007f00e0ffffff007fb6adc76cec", 0x0, 0x127, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}, 0x60000000}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) r2 = socket$kcm(0x25, 0x1, 0x0) sendmsg$kcm(r2, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x4041) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r3) syz_open_procfs$namespace(0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r3, 0xc0189436, &(0x7f0000000000)={'bridge_slave_1\x00'}) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002680)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000003c000000210000000200000008000000040000840700000004000000000000008200000007000000010000000600000048000000050000002b0f0000000400000000000007"], 0x0, 0x56}, 0x20) r4 = socket$kcm(0x10, 0x400000002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f0000000000)=@framed={{0x3e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x82}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="600000001e007f109e", 0x2a}, {&(0x7f0000000140)="78cafb73fc02010700000000ef02258f2e440ab8f9e6aaeb1ae2f6e8bcb5ee52dc06b6c9ad11cb5dbc249798093c5102a1bca0b6050000004f6e6b788b3219c233e60ddc36024a99a63e7238fe9f9b06f96137c8af12b6", 0x98}], 0x2}, 0x4000000) 15m41.857746644s ago: executing program 4 (id=6843): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x20}) socket$kcm(0x21, 0x2, 0x2) (async) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r2) ioctl$SIOCSIFHWADDR(r2, 0x8b18, &(0x7f0000000000)={'bond_slave_0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}) (async) openat$cgroup_freezer_state(r2, &(0x7f0000000240), 0x2, 0x0) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) r4 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r4, &(0x7f0000001200)={&(0x7f0000000000)=@tipc=@name={0x1e, 0x2, 0x0, {{}, 0x4}}, 0x80, 0x0}, 0x0) sendmsg$kcm(r4, 0x0, 0x0) (async) close(r4) (async) r5 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r6 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f00000008c0), 0x43) (async) r7 = socket$kcm(0x1e, 0x2, 0x0) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f00000008c0), 0x43) (async) r8 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r8, 0x10f, 0x87, 0x0, 0x0) (async) r9 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r9, 0x10f, 0x87, &(0x7f00000008c0), 0x43) (async) write$cgroup_subtree(r9, &(0x7f0000000080)=ANY=[], 0xfdef) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080), 0x4) r10 = openat$tun(0xffffffffffffff9c, 0x0, 0x40040, 0x0) close(r10) 15m41.837240824s ago: executing program 1 (id=6844): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f00000009c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000014000000b702000014000000b7030000000000008500000005000000bca900000000000055090200000300006e00000000000000b7090000ffffffb0739af0ff00000000ce09020000000000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 15m41.713690558s ago: executing program 1 (id=6846): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x208, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0x8}, 0x428, 0x0, 0xc2ba, 0x4, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0xff, 0x7, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_config_ext={0xaf03, 0x5}, 0x800, 0xca, 0x17, 0x8, 0x9, 0x400000, 0x5, 0x0, 0x12, 0x0, 0x8}, 0xffffffffffffffff, 0x6, r2, 0x1) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000120000000000000000"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r4, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) write$cgroup_subtree(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="02"], 0x9a) 15m41.644289409s ago: executing program 4 (id=6847): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000008000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000001a00000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 15m41.545643562s ago: executing program 2 (id=6848): bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000800)=ANY=[@ANYBLOB="bf16000000000000b7070000010000004070000000000000400000004000e1ff95000000000000002ba76bb33123751c4e3409e62751ee00ba19ce670d25010000020000040000009fc404000000c788b277beee1cbf9b0a4def23d410f6accd3641110bec4e90a6341965dac03d046837d907b09ec39e9ef8f6e396ad200e011ea665c45a3449abe802f5ab3e89cf40b8580218ce740068720000074e3e8eea3fd8cf49827ca315f5b87e1ca6433a8acd715f5888b2007f0000000000000000010089937090c34410000000000000090000000000414027efc842b6d6f800005335001db43a5c000000000000000024000000000000000000e75a89faff01210cce39bf405f1e846c1242000000000000cad326ad7add65873d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d617da7fb5e2a431ab9142f3a06d55740a43088696daaed74b9c5c29647d2f950a959cf9938d6df8600a62e96b7cb8e52cbdce57a79d6fce424c22001f6c3784a1975fa657d05003a32a4fd67ce446ac5430207db79240acaf091231b986e77d05d988d6edc71df48dca02113a38300c2bd2b5543ffc16695572361629d1022f722ec23812b70d72cd0010000007881bfa35b9fd6864e90ddb31f75f6324989cdc7044f563a1f74d4efe895fdbc463f747c08f40105869035000000000003000000000000000000000000000000000000080000003ddf4aa4b1c8b8a0ae6feb6737c275dc2740f742b5425f1d5819610608bbab35471cdb0500000000000000d4123f955267fe4a75c114f874e086287547d4099aeec9f15b8ee25a2a5ccf4a9b603c88e12ff25184d4e3c2f7f623559435b2c505fb7113400000f0bc440550ee91302f5a00000000000000000000000000000000e67ccc00148ac4c43021cce9f24f4b2f9492c32e7a92a557ac2b44b8f7a49789906d922b3e4916f390ab7edcd3f5b9fe14446dd446a52131c464f2c08efb46d934615c8631b7c42efd0294bea179b0433f5c899119ec0c0acef5383b5a2720caeb68f1e9c05b05d89467ded84da092dea262e51811e2d7fa515722516bd5ef6c8c4966e5937562a5648a696abaa042a7097ddefe0671f977fb145890f5bf41ba92b8c4c8b14f0d4a880ef4518bb328790700000021e041254f06bd7f000000000000000000000000000000282ffe000000000000000431e8e3204a7d95938c5334a0dd177f1a7389ee570d95e543a27546d3770740f354df6dfdb3d1179b4b9fccd0cd5b7578802c66f5dbf22ad0bd03cbe0fecd096bcf419d35988948d1cd4c51c406040000000090a3bc3cbc08255975f3cee08dab765d8a4ef870aaae3f81ed6364837171ce5564f3cf6feba1b6745409000000000000003459263499fae97e7dcb30e4cff009e0f4f78c155c4ab19b878fcb4cc14b8d2823643a17120418f42b42ed879cb23e6d4e0d11db988d0bc46de02702d29243b72215d5563bdae8c2ccda4498687cd50f3a9058f61d52d70aabccb18d41d75788faf60ce9be97c13e4252d9d112d9ac47368829f8a29eca17de807c840293dd387eee13fdecf3d5a334350f045a22b9adb0539d44d58a00fb9e83ebf4fea36b87e2afdf63f7abf5caf2b01317a5f65f22c8bcf36b390dece1e98541ae932ec3486f74c1eea673c1647568acb17efcef24a9c3504dfa7c7eefe3dcb8d570a730a0837839f54527ce334b8173e7bf73bcd8d80ef294fde6549a0f1a23b78b41f79ea543d2b38b80d3d28c6c93901b763fc8b88794aa74facc345e28f0ad79de4df5afd52e7dfc387e4d2ca4d5caca74754987dbbd4d64e233b4a1d81a9aeb981734ca5416cacf516ca8384d85310f24d393fd48c668465546117377547d11a61bd2bd9e35fa0da5118554a1d93147b103a51baf94aeb1b6292038300423344e6add2226ba5f6724a08567ef515898f0f7dfd3fc198092af3265c5df377a66bbde4fa4a049692e06ee5022c58290bdc37eeb16f4e099e33679044ba21898f76c982c8203663f1adb7bbb42ed8d9b0bb8bd9255e342959b822fa8b3d08b29f2201dfe3a3c5c8bf8bc82f249e7eb9f8571823d730fdc78c6b3122a3fd9209dcae70c10c7b17e83dd759a52fe5c362358dbb780a52f540000000000000000000011230e1d6f9fd3315ada8ecee55fc0ec6ec0ec950c0ad006a06a162035d5729795c4a58b59f9a252723480b08ae9bd52c176380a42b972a3400b5d28b273e60000007cac9d35a991c27e23ce5217fec9ce89ea2dea8ddb383e53cdd077e7c2d73404b7450664f70225897307d8a140ba97bfc2232dccdb1dd0496c219315c02f2ef46f30add1aa13e52d67116328c3a5ee3356eadea07abe8506767771d68e760f8c623fb64865a942acc4912dcd1fa5d729cb45c15577bbb8b08a705efeaf09dd6aadeb8d61501e4fd9c9b1ac845a2138cbde58a04589888c0e528a5134e1dfa8b3f6d8a76517df589cae1019a3bc280e99fb661271"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000240)=r2, 0x4) sendmsg$unix(r1, &(0x7f00000003c0)={&(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000340)=[{&(0x7f0000000280)="ff8ad06885380d70460b2e3ad297ee29d0b010acc7cda3bc387789db03076ab0eeb67034bb17", 0x26}], 0x1, 0x0, 0x0, 0x4000080}, 0x880) 15m41.542344982s ago: executing program 1 (id=6849): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1000000000000008, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x1c}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0xc}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xc, 0x9, 0x0, 0x0, 0xfffffffb}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0x5}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8, 0x9, 0x20}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000f0400000000005f"], 0x0, 0x28}, 0x20) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r2, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x0, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0xbb11, 0x4, 0x1, 0x0, r3, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r4, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000340)}, 0x20) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xacd6a4e1330ebc5f, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r1, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, &(0x7f00000001c0)=[0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xe6, &(0x7f0000000540)=[{}, {}], 0x10, 0x10, &(0x7f0000000580), &(0x7f00000005c0), 0x8, 0xc0, 0x8, 0x8, &(0x7f0000000600)}}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000980)={@map=r3, 0xb, 0x1, 0x7, &(0x7f0000000880)=[0x0, 0x0], 0x2, 0x0, &(0x7f00000008c0)=[0x0, 0x0, 0x0], &(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000940)=[0x0], 0x0}, 0x40) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000a00)='./cgroup.net/syz0\x00', 0x200002, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8924, &(0x7f0000000300)={'erspan0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}}) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000009c0)={@cgroup=r8, r5, 0xf, 0x2004, 0x0, @value=r9, @void, @void, @void, r7}, 0x20) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r6, 0x400454c9, 0x1) ioctl$TUNDETACHFILTER(r6, 0x401054d6, 0x0) 15m41.464167194s ago: executing program 4 (id=6850): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) socket$kcm(0x2, 0x3, 0x84) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x22803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x80, 0x0, 0x0, 0x0, 0x200, 0x7, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000300)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r0, &(0x7f00000003c0)={'b', ' *:* ', 'rm\x00'}, 0x9) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}], 0x68}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, &(0x7f0000000080)) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x0, 0x40, 0x0, 0x9, 0x0, 0x2, 0x58221, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfffdfffa, 0x2, @perf_config_ext={0x4, 0x2}, 0x106a4f, 0x1, 0x6, 0x1, 0x2, 0xffc, 0x4, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xd, 0xffffffffffffffff, 0x9) r3 = perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x8000000000000b5, 0x0, 0x4}, 0x0, 0x1, 0xffffffffffffffff, 0x0) syz_clone(0x48400, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="1700000054009155090893b31b71a54a07"], 0xfe33) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) socketpair(0x3, 0x1, 0x4, &(0x7f0000000100)) close(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r6, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0, 0x808e}, 0x40000100) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x110, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffff00, 0x3}, 0x0, 0x7, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, r5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x5452, 0x0) write$cgroup_devices(r5, &(0x7f00000005c0)=ANY=[], 0xfffffeff) ioctl$PERF_EVENT_IOC_RESET(r3, 0x2403, 0x165dd788800000) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$TUNATTACHFILTER(r7, 0x401054d5, &(0x7f0000000340)={0x0, 0x0}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x20, &(0x7f0000000240)={&(0x7f0000000000)=""/199, 0xc7, 0x0, 0x0}}, 0x10) 15m41.442420734s ago: executing program 2 (id=6852): perf_event_open(&(0x7f0000000900)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2420, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0xa, 0x3, 0x87) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x7, &(0x7f00000011c0)=ANY=[@ANYBLOB="18000000000000000000000000000000851000000200000005000000000000009500007b0000000085000000ad00000095"], &(0x7f0000000000)='GPL\x00', 0x3, 0x92, &(0x7f0000000100)=""/146, 0x0, 0x1c}, 0x94) socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x86dd, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 15m40.828290889s ago: executing program 2 (id=6853): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'veth1\x00', 0x1000}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'veth1\x00', 0x1000}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000000c0)=0x1) sendmsg$unix(0xffffffffffffffff, 0x0, 0x84) socket$kcm(0x10, 0x2, 0x10) (async) r1 = socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="b40000000000000069105c000000000004000000000000009500000000000000", @ANYRES16=r0, @ANYRES8=r0, @ANYRESOCT=r0, @ANYBLOB="50f02014d59c086e38f8ae67344ad4622ded4f597a9f32292957457a080b6fe4211226fbd045c0c3690f10b4402f70b744d170773490a3ea2beb81ebd6f0dea502c50261cd45a5a66e07351afc8cab93a115355c3333cd7a1963f7b8c6cc71776bd3348a895f682d6fa65918446418d080fbaf826de98f24e29f7fac0d202fec613ddc2d107b2fb8c44b5e25c3b0f3683ea727ba5a50e5ee0bbb05acced189505adac66bf0957ebcb9eb2ace4319eb5286f4076716e2ca3213f9b0765f845d3cee6bbc932671ab21aa7bbd02fcd82f2a8983b25726e0", @ANYRES32=r0, @ANYRESHEX=r0, @ANYBLOB="3bec4c761b4b20e14f"], &(0x7f0000000080)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) close(0x3) (async) close(0x3) socket$kcm(0x10, 0x2, 0x10) (async) socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000200000000000000000850000002a0000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xf, 0x9, &(0x7f0000000340)=ANY=[@ANYRESDEC=r1, @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000078850000001b", @ANYRES32=r3, @ANYRESDEC=r2, @ANYRES8=r4], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xf, 0x9, &(0x7f0000000340)=ANY=[@ANYRESDEC=r1, @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000078850000001b", @ANYRES32=r3, @ANYRESDEC=r2, @ANYRES8=r4], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x94) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async) r5 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r6}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r6}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x1, 0x6, 0xf, 0x8, 0x41}, 0x50) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x1, 0x6, 0xf, 0x8, 0x41}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x34, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4, 0x2}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x2e}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000030000000000000008000010180000000400000000000000ffffffff85000000130000001801000020786c2500000000002020207b1af8ff00000000bfa10000000000eb74eddc06800007010000f8ffffffb702000008000000b7030000a8000000850000000600000085e0779eee0000009500"], &(0x7f0000000200)='syzkaller\x00', 0x3, 0xab, &(0x7f0000000780)=""/171, 0x41100, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000840)={0x0, 0x8}, 0x8, 0x10, &(0x7f0000000880)={0x5, 0x7, 0x8f5, 0x2}, 0x10, 0x0, 0x0, 0x5, &(0x7f00000008c0)=[r4, r4, r4, r4, r7, r5, r4, r4], &(0x7f0000000940)=[{0x5, 0x5, 0x10, 0x1}, {0x5, 0x4, 0xb}, {0xfffffffd, 0x1, 0xe, 0x1}, {0x0, 0x5, 0xf, 0x4}, {0x2, 0x3, 0xa, 0xb}], 0x10, 0x7}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000030000000000000008000010180000000400000000000000ffffffff85000000130000001801000020786c2500000000002020207b1af8ff00000000bfa10000000000eb74eddc06800007010000f8ffffffb702000008000000b7030000a8000000850000000600000085e0779eee0000009500"], &(0x7f0000000200)='syzkaller\x00', 0x3, 0xab, &(0x7f0000000780)=""/171, 0x41100, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000840)={0x0, 0x8}, 0x8, 0x10, &(0x7f0000000880)={0x5, 0x7, 0x8f5, 0x2}, 0x10, 0x0, 0x0, 0x5, &(0x7f00000008c0)=[r4, r4, r4, r4, r7, r5, r4, r4], &(0x7f0000000940)=[{0x5, 0x5, 0x10, 0x1}, {0x5, 0x4, 0xb}, {0xfffffffd, 0x1, 0xe, 0x1}, {0x0, 0x5, 0xf, 0x4}, {0x2, 0x3, 0xa, 0xb}], 0x10, 0x7}, 0x94) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) ioctl$TUNSETQUEUE(r8, 0x400454d9, &(0x7f0000000200)={'macsec0\x00', 0x400}) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_subtree(r8, &(0x7f0000000380)=ANY=[], 0xfdef) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000002280)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff}) sendmsg$inet(r11, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000013c0)="d080", 0xfdef}], 0x1, 0x0, 0x0, 0x800300}, 0x20000801) (async) sendmsg$inet(r11, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000013c0)="d080", 0xfdef}], 0x1, 0x0, 0x0, 0x800300}, 0x20000801) 15m40.608211065s ago: executing program 3 (id=6854): perf_event_open(&(0x7f0000000900)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2420, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x86dd, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 15m37.522101491s ago: executing program 1 (id=6856): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0xd040, 0x10000}, 0x14403, 0xfffc, 0x0, 0x5, 0x582, 0x20005, 0x8, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1010000}, 0x27) 15m37.464253993s ago: executing program 3 (id=6857): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f00000009c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000016000000b702000014000000b7030000000000008500000005000000bca900000000000055090200000300006e00000000000000b7090000ffffffb0739af0ff00000000ce09020000000000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 15m37.208429039s ago: executing program 3 (id=6861): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001c00)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801900020646c2100000000f91f20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1, r0}, 0x41) 15m37.063744013s ago: executing program 3 (id=6864): r0 = socket$kcm(0x10, 0x3, 0x10) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r1, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380), 0xff7a}], 0x1, &(0x7f0000007880)=[@ip_tos_u8={{0x88, 0x34000}}, @ip_pktinfo={{0x1c, 0xfd000f00, 0x8, {0x0, @remote, @multicast1}}}, @ip_pktinfo={{0x1c, 0x28f0700, 0x8, {0x0, @empty=0xa0050000}}}, @ip_retopts={{0x24, 0x0, 0x7, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x10, 0x88, 0x0, 0x0, [0x0, 0x0, 0x0]}]}}}, @ip_tos_u8={{0x11}}], 0x98}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)="1400000015000b06d25a80648c2594f90924fc60", 0x14}], 0x1}, 0x8114) 15m36.827579589s ago: executing program 3 (id=6865): bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000080), 0x0}, 0x20) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20f42, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'xfrm0\x00', 0x2}) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYRES16], 0xffd3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xd, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0xb6}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) 15m33.95474836s ago: executing program 1 (id=6866): socket$kcm(0xa, 0x5, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x5) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r1, 0x6, 0xd, &(0x7f0000000000), 0x18) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x2}, 0x0, 0x0, 0xfffffffd, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x21, 0x2, 0x2) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0x0, r2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x8c}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000b80)=ANY=[@ANYBLOB="9feb010018000000060000000c0000004ce484bf84730c0000000200000000000000000000faaccb3fee8543cbe35b91216c0905cfdec9f485f4605064d9bdc702dd28efb26f90e5689689b3ca46c71f3d5d29c79d70a261f47e2d84d9b55ec83f75c96dce1e605163e8"], 0x0, 0x26}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000029000b05d25a806f8c6394f90424fc60", 0x14}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRESDEC, @ANYBLOB="43da2e"], 0x48) 15m26.442569786s ago: executing program 32 (id=6850): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) socket$kcm(0x2, 0x3, 0x84) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x22803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x80, 0x0, 0x0, 0x0, 0x200, 0x7, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000300)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r0, &(0x7f00000003c0)={'b', ' *:* ', 'rm\x00'}, 0x9) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}], 0x68}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, &(0x7f0000000080)) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x0, 0x40, 0x0, 0x9, 0x0, 0x2, 0x58221, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfffdfffa, 0x2, @perf_config_ext={0x4, 0x2}, 0x106a4f, 0x1, 0x6, 0x1, 0x2, 0xffc, 0x4, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xd, 0xffffffffffffffff, 0x9) r3 = perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x8000000000000b5, 0x0, 0x4}, 0x0, 0x1, 0xffffffffffffffff, 0x0) syz_clone(0x48400, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="1700000054009155090893b31b71a54a07"], 0xfe33) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) socketpair(0x3, 0x1, 0x4, &(0x7f0000000100)) close(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r6, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0, 0x808e}, 0x40000100) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x110, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffff00, 0x3}, 0x0, 0x7, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, r5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x5452, 0x0) write$cgroup_devices(r5, &(0x7f00000005c0)=ANY=[], 0xfffffeff) ioctl$PERF_EVENT_IOC_RESET(r3, 0x2403, 0x165dd788800000) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$TUNATTACHFILTER(r7, 0x401054d5, &(0x7f0000000340)={0x0, 0x0}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x20, &(0x7f0000000240)={&(0x7f0000000000)=""/199, 0xc7, 0x0, 0x0}}, 0x10) 15m25.338963104s ago: executing program 33 (id=6853): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'veth1\x00', 0x1000}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'veth1\x00', 0x1000}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000000c0)=0x1) sendmsg$unix(0xffffffffffffffff, 0x0, 0x84) socket$kcm(0x10, 0x2, 0x10) (async) r1 = socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="b40000000000000069105c000000000004000000000000009500000000000000", @ANYRES16=r0, @ANYRES8=r0, @ANYRESOCT=r0, @ANYBLOB="50f02014d59c086e38f8ae67344ad4622ded4f597a9f32292957457a080b6fe4211226fbd045c0c3690f10b4402f70b744d170773490a3ea2beb81ebd6f0dea502c50261cd45a5a66e07351afc8cab93a115355c3333cd7a1963f7b8c6cc71776bd3348a895f682d6fa65918446418d080fbaf826de98f24e29f7fac0d202fec613ddc2d107b2fb8c44b5e25c3b0f3683ea727ba5a50e5ee0bbb05acced189505adac66bf0957ebcb9eb2ace4319eb5286f4076716e2ca3213f9b0765f845d3cee6bbc932671ab21aa7bbd02fcd82f2a8983b25726e0", @ANYRES32=r0, @ANYRESHEX=r0, @ANYBLOB="3bec4c761b4b20e14f"], &(0x7f0000000080)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) close(0x3) (async) close(0x3) socket$kcm(0x10, 0x2, 0x10) (async) socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000200000000000000000850000002a0000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xf, 0x9, &(0x7f0000000340)=ANY=[@ANYRESDEC=r1, @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000078850000001b", @ANYRES32=r3, @ANYRESDEC=r2, @ANYRES8=r4], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xf, 0x9, &(0x7f0000000340)=ANY=[@ANYRESDEC=r1, @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000078850000001b", @ANYRES32=r3, @ANYRESDEC=r2, @ANYRES8=r4], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x94) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async) r5 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r6}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r6}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x1, 0x6, 0xf, 0x8, 0x41}, 0x50) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x1, 0x6, 0xf, 0x8, 0x41}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x34, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4, 0x2}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x2e}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000030000000000000008000010180000000400000000000000ffffffff85000000130000001801000020786c2500000000002020207b1af8ff00000000bfa10000000000eb74eddc06800007010000f8ffffffb702000008000000b7030000a8000000850000000600000085e0779eee0000009500"], &(0x7f0000000200)='syzkaller\x00', 0x3, 0xab, &(0x7f0000000780)=""/171, 0x41100, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000840)={0x0, 0x8}, 0x8, 0x10, &(0x7f0000000880)={0x5, 0x7, 0x8f5, 0x2}, 0x10, 0x0, 0x0, 0x5, &(0x7f00000008c0)=[r4, r4, r4, r4, r7, r5, r4, r4], &(0x7f0000000940)=[{0x5, 0x5, 0x10, 0x1}, {0x5, 0x4, 0xb}, {0xfffffffd, 0x1, 0xe, 0x1}, {0x0, 0x5, 0xf, 0x4}, {0x2, 0x3, 0xa, 0xb}], 0x10, 0x7}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000030000000000000008000010180000000400000000000000ffffffff85000000130000001801000020786c2500000000002020207b1af8ff00000000bfa10000000000eb74eddc06800007010000f8ffffffb702000008000000b7030000a8000000850000000600000085e0779eee0000009500"], &(0x7f0000000200)='syzkaller\x00', 0x3, 0xab, &(0x7f0000000780)=""/171, 0x41100, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000840)={0x0, 0x8}, 0x8, 0x10, &(0x7f0000000880)={0x5, 0x7, 0x8f5, 0x2}, 0x10, 0x0, 0x0, 0x5, &(0x7f00000008c0)=[r4, r4, r4, r4, r7, r5, r4, r4], &(0x7f0000000940)=[{0x5, 0x5, 0x10, 0x1}, {0x5, 0x4, 0xb}, {0xfffffffd, 0x1, 0xe, 0x1}, {0x0, 0x5, 0xf, 0x4}, {0x2, 0x3, 0xa, 0xb}], 0x10, 0x7}, 0x94) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) ioctl$TUNSETQUEUE(r8, 0x400454d9, &(0x7f0000000200)={'macsec0\x00', 0x400}) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_subtree(r8, &(0x7f0000000380)=ANY=[], 0xfdef) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000002280)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff}) sendmsg$inet(r11, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000013c0)="d080", 0xfdef}], 0x1, 0x0, 0x0, 0x800300}, 0x20000801) (async) sendmsg$inet(r11, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000013c0)="d080", 0xfdef}], 0x1, 0x0, 0x0, 0x800300}, 0x20000801) 15m21.644888075s ago: executing program 34 (id=6865): bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000080), 0x0}, 0x20) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20f42, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'xfrm0\x00', 0x2}) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYRES16], 0xffd3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xd, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0xb6}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) 15m18.818280255s ago: executing program 35 (id=6866): socket$kcm(0xa, 0x5, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x5) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r1, 0x6, 0xd, &(0x7f0000000000), 0x18) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x2}, 0x0, 0x0, 0xfffffffd, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x21, 0x2, 0x2) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0x0, r2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x8c}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000b80)=ANY=[@ANYBLOB="9feb010018000000060000000c0000004ce484bf84730c0000000200000000000000000000faaccb3fee8543cbe35b91216c0905cfdec9f485f4605064d9bdc702dd28efb26f90e5689689b3ca46c71f3d5d29c79d70a261f47e2d84d9b55ec83f75c96dce1e605163e8"], 0x0, 0x26}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000029000b05d25a806f8c6394f90424fc60", 0x14}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRESDEC, @ANYBLOB="43da2e"], 0x48) 3.112283554s ago: executing program 7 (id=10469): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="09000000040000000c0000000b"], 0x50) close(0x3) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080), 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.047373955s ago: executing program 7 (id=10470): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000a80)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd63"], 0x36) 2.670929744s ago: executing program 5 (id=10475): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22ffe6) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x74, 0x10, 0x8, 0xffffffff}]}) ioctl$TUNGETVNETLE(r0, 0x40107446, &(0x7f0000000180)) 2.566788787s ago: executing program 6 (id=10478): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000080)="5c00000011006bec9e3be35c6e17aa31076b876c0d000000ba090000160af3653c001ac004000202080003000b0007002c000000eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000000ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4a046) 2.460279439s ago: executing program 8 (id=10480): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x9}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff274, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="6000000022007f029e607dd75fcb520003a124b244de91f7f414adcf41bfafdd1b1e93c6292aefa3ca89563a63fb94b2584ca2faa20f2c308b0fe298acec10e3019e1e26e6efd0166e6c1b01132e5423294ac2f4d53c3870c3068461957e5357", 0x60}], 0x1, 0x0, 0x0, 0x6}, 0x0) 2.43319439s ago: executing program 0 (id=10481): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0, 0x7}, 0x10410, 0x0, 0x40, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001b000)) ioctl$SIOCSIFHWADDR(r0, 0x8b14, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b15, &(0x7f0000000000)={'wlan1\x00', @remote}) 877.571809ms ago: executing program 0 (id=10482): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0xa0}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x6, &(0x7f0000000340)=r2, 0x38) 877.426119ms ago: executing program 6 (id=10483): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_config_ext={0x4, 0x1946}, 0x0, 0x10000, 0x4, 0x9, 0x2, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000042000004000000000000004018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b70300002bb91a008500000008000000bc09000000000000450901003f2000009500000000000000b7020000000000007b9af8ff00000000b6090000000000107baaf0ff00000000bf2700000000000007080000fffdffffbfa400000000000007040000f0ffffffc40700000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608efff76000000bf9800000000000056090000020000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 828.291089ms ago: executing program 8 (id=10484): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x4, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x9, &(0x7f0000000300)=ANY=[@ANYBLOB="18120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300001800009f6703000020000000bfa400000000000007040000f8ffffffb705000008000000850000001900000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) 828.116609ms ago: executing program 7 (id=10485): socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f7, 0x1, @perf_config_ext={0x17, 0x100}, 0x0, 0xad, 0x8, 0x1, 0x1, 0x2020007, 0xec49, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetlb.1GB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4) sendmsg$kcm(r0, &(0x7f0000002480)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000e00)="e6", 0x1}], 0x1}, 0x10) 783.34464ms ago: executing program 5 (id=10486): perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x10001, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x20, 0x400000, 0xb9, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000012000000000000000000"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0}, 0x50) r1 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0x8, &(0x7f0000000000), 0x8) 743.883061ms ago: executing program 0 (id=10487): r0 = perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x2537d940, 0x66c}, 0x104101, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x5, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0xa, 0x5, 0x0) r3 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000000e8ffffffffffff05000000", @ANYRES32=0x1], 0x48) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x8916, &(0x7f0000000000)={r3}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x8916, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8936, &(0x7f0000000000)={r3}) 688.299463ms ago: executing program 8 (id=10488): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22ffe6) ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180)) 669.461754ms ago: executing program 5 (id=10489): socket$kcm(0x2, 0x3, 0x84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x79, 0x0, 0x0) 646.336234ms ago: executing program 7 (id=10490): perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x10001, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x20, 0x400000, 0xb9, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0xd, 0x6}, 0x90, 0xa4, 0x2, 0x1, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0xd, 0x6}, 0x90, 0xa4, 0x2, 0x1, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x94e4, 0x4, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfffffffa, 0x1, @perf_bp={0x0, 0x6}, 0x19183, 0x1, 0x5, 0xb, 0xa, 0x904813a5, 0x4, 0x0, 0x0, 0x0, 0xffffffffffff0000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_clone(0x21140200, 0x0, 0x0, 0x0, 0x0, 0x0) 516.333357ms ago: executing program 8 (id=10491): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xd, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="720ac4ff000000007110c3000000000095"], &(0x7f0000000480)='GPL\x00', 0x6}, 0x94) sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)="2e00000010008188e6b62aa7377206001ba1f848160000005e140602000300000e000a001300000002900000121f", 0x2e}], 0x1}, 0x4004084) 516.188527ms ago: executing program 6 (id=10492): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x69, 0x4080, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, @perf_config_ext={0x800000d, 0x6}, 0x10cd23, 0x4, 0x0, 0x7, 0x77fe, 0x4, 0x3}, 0x0, 0x1, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000500)={r2, 0x0, 0x0}, 0x10) 516.044057ms ago: executing program 5 (id=10493): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x81ef7}, 0x116da, 0x4, 0x98, 0x1, 0x2, 0xfffff271, 0x7ff7, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2420, 0x0, 0x0, 0x3, 0x3, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x80002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0xf, 0x2, 0xff, 0x0, 0x0, 0x2, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x5, 0xdf1d, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYRES8=r1, @ANYBLOB="3eca", @ANYRES8=r4], 0x9a) 438.186449ms ago: executing program 7 (id=10494): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0, 0x7}, 0x10410, 0x0, 0x40, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001b000)) ioctl$SIOCSIFHWADDR(r0, 0x8b14, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b15, &(0x7f0000000000)={'wlan1\x00', @remote}) 437.645489ms ago: executing program 0 (id=10504): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004091) sendmsg$sock(r0, &(0x7f0000002740)={&(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x0, 0x2, 0x0, {0xa, 0x4e23, 0x9595, @private2, 0x8}}}, 0x80, &(0x7f00000026c0)=[{0x0}, {&(0x7f0000002780)="93c7c81b59", 0x5}], 0x2}, 0x10) 383.761591ms ago: executing program 8 (id=10495): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair(0x8, 0x1, 0xffffffff, &(0x7f0000000740)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x122}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x800000000009, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) 288.323013ms ago: executing program 0 (id=10496): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x40047459, 0x0) 288.189013ms ago: executing program 6 (id=10497): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0xa0}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x6, &(0x7f0000000340)=r2, 0x38) 268.709013ms ago: executing program 5 (id=10498): perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x90024, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xe}, 0x1a386, 0x2, 0x3ff, 0x0, 0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) 211.833405ms ago: executing program 6 (id=10499): ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffecd}, 0x94) r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="004000003a0091460cd934e3ea81e88802"], 0xfe33) 198.512515ms ago: executing program 7 (id=10500): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfcdfc612c00000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1d, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe327, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x2000, 0x9, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) syz_clone(0x126400, 0x0, 0x0, 0x0, 0x0, 0x0) 132.322737ms ago: executing program 8 (id=10501): r0 = syz_clone(0x20102400, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(0x0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e50200000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x7400}, 0x4009044) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1d, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x37}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan1\x00', 0x800}) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) 102.914428ms ago: executing program 5 (id=10502): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xa}, 0x114244, 0x0, 0xafe8, 0x4, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r0) socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$kcm(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x2400c094) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x3406c096) bpf$PROG_LOAD(0x5, 0x0, 0x0) 80.549338ms ago: executing program 6 (id=10503): r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdir(0x0, 0x18b) r2 = socket$kcm(0x28, 0x1, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3c, &(0x7f0000000000), 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYRESOCT, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES8=r0], 0x48) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x891a, &(0x7f0000000000)={'ipvlan0\x00', @random="0200ff7fffff"}) 0s ago: executing program 0 (id=10505): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x40}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0xb, 0x9, 0x0, 0x1, 0xf0ff}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x9, 0xfe04}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0x41}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000380)='syzkaller\x00', 0xe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): z.5.9289'. [ 1898.854714][ T4082] netlink: 4595 bytes leftover after parsing attributes in process `syz.5.9289'. [ 1903.103428][ T4127] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1903.116629][ T4127] syzkaller1: linktype set to 825 [ 1903.250609][ T4131] FAULT_INJECTION: forcing a failure. [ 1903.250609][ T4131] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1903.313436][ T4131] CPU: 1 PID: 4131 Comm: syz.6.9305 Not tainted syzkaller #0 [ 1903.320875][ T4131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1903.330959][ T4131] Call Trace: [ 1903.334259][ T4131] [ 1903.337244][ T4131] dump_stack_lvl+0x188/0x24e [ 1903.341968][ T4131] ? show_regs_print_info+0x12/0x12 [ 1903.347207][ T4131] ? load_image+0x410/0x410 [ 1903.351763][ T4131] ? __lock_acquire+0x7c40/0x7c40 [ 1903.356827][ T4131] ? ktime_get+0x7b/0x270 [ 1903.361201][ T4131] should_fail_ex+0x390/0x4c0 [ 1903.365919][ T4131] _copy_from_user+0x2c/0x170 [ 1903.370629][ T4131] __sys_bpf+0x2ea/0x780 [ 1903.374915][ T4131] ? bpf_link_show_fdinfo+0x380/0x380 [ 1903.380337][ T4131] ? lock_chain_count+0x20/0x20 [ 1903.385221][ T4131] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1903.391254][ T4131] __x64_sys_bpf+0x78/0x90 [ 1903.395701][ T4131] do_syscall_64+0x4c/0xa0 [ 1903.400144][ T4131] ? clear_bhb_loop+0x60/0xb0 [ 1903.404860][ T4131] ? clear_bhb_loop+0x60/0xb0 [ 1903.409572][ T4131] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1903.415535][ T4131] RIP: 0033:0x7f545c99e0d9 [ 1903.419974][ T4131] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1903.439641][ T4131] RSP: 002b:00007f545d95b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1903.448085][ T4131] RAX: ffffffffffffffda RBX: 00007f545cc25fa0 RCX: 00007f545c99e0d9 [ 1903.456105][ T4131] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 1903.464105][ T4131] RBP: 00007f545d95b090 R08: 0000000000000000 R09: 0000000000000000 [ 1903.472102][ T4131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1903.480097][ T4131] R13: 00007f545cc26038 R14: 00007f545cc25fa0 R15: 00007ffe1a262dc8 [ 1903.488105][ T4131] [ 1903.553777][ T4139] netlink: 'syz.0.9308': attribute type 10 has an invalid length. [ 1906.445926][ T4139] bridge0: port 2(bridge_slave_1) entered disabled state [ 1906.454566][ T4139] bridge0: port 1(bridge_slave_0) entered disabled state [ 1906.542230][ T4139] bridge0: port 2(bridge_slave_1) entered blocking state [ 1906.549899][ T4139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1906.558703][ T4139] bridge0: port 1(bridge_slave_0) entered blocking state [ 1906.566236][ T4139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1906.640294][ T4139] team0: Port device bridge0 added [ 1907.540314][ T4180] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1907.554458][ T4180] syzkaller1: linktype set to 825 [ 1910.315409][ T4195] syz.7.9325[4195] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1910.315591][ T4195] syz.7.9325[4195] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1914.290882][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.297673][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1914.812372][ T4240] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1914.851883][ T4240] syzkaller1: linktype set to 825 [ 1915.582880][ T4245] IPv6: Can't replace route, no match found [ 1915.867132][ T4262] FAULT_INJECTION: forcing a failure. [ 1915.867132][ T4262] name failslab, interval 1, probability 0, space 0, times 0 [ 1915.923219][ T4262] CPU: 1 PID: 4262 Comm: syz.6.9349 Not tainted syzkaller #0 [ 1915.930646][ T4262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1915.940726][ T4262] Call Trace: [ 1915.944026][ T4262] [ 1915.946981][ T4262] dump_stack_lvl+0x188/0x24e [ 1915.951696][ T4262] ? show_regs_print_info+0x12/0x12 [ 1915.956931][ T4262] ? load_image+0x410/0x410 [ 1915.961542][ T4262] ? __lock_acquire+0x7c40/0x7c40 [ 1915.966606][ T4262] ? trace_event_raw_event_lock+0x230/0x230 [ 1915.972537][ T4262] should_fail_ex+0x390/0x4c0 [ 1915.977270][ T4262] should_failslab+0x5/0x20 [ 1915.981811][ T4262] slab_pre_alloc_hook+0x59/0x300 [ 1915.986872][ T4262] ? bpf_prog_test_run_skb+0x23e/0x18e0 [ 1915.992446][ T4262] __kmem_cache_alloc_node+0x4f/0x270 [ 1915.997858][ T4262] ? bpf_prog_test_run_skb+0x23e/0x18e0 [ 1916.003422][ T4262] __kmalloc+0xa3/0x240 [ 1916.007604][ T4262] bpf_prog_test_run_skb+0x23e/0x18e0 [ 1916.012997][ T4262] ? __fget_files+0x28/0x460 [ 1916.017622][ T4262] ? __fget_files+0x3fc/0x460 [ 1916.022329][ T4262] ? cpu_online+0xa0/0xa0 [ 1916.026675][ T4262] bpf_prog_test_run+0x31c/0x390 [ 1916.031635][ T4262] __sys_bpf+0x62b/0x780 [ 1916.035898][ T4262] ? bpf_link_show_fdinfo+0x380/0x380 [ 1916.041324][ T4262] ? lock_chain_count+0x20/0x20 [ 1916.046186][ T4262] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1916.052215][ T4262] __x64_sys_bpf+0x78/0x90 [ 1916.056649][ T4262] do_syscall_64+0x4c/0xa0 [ 1916.061081][ T4262] ? clear_bhb_loop+0x60/0xb0 [ 1916.065801][ T4262] ? clear_bhb_loop+0x60/0xb0 [ 1916.070491][ T4262] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1916.076406][ T4262] RIP: 0033:0x7f545c99e0d9 [ 1916.080829][ T4262] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1916.100463][ T4262] RSP: 002b:00007f545d95b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1916.108900][ T4262] RAX: ffffffffffffffda RBX: 00007f545cc25fa0 RCX: 00007f545c99e0d9 [ 1916.116882][ T4262] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 1916.124860][ T4262] RBP: 00007f545d95b090 R08: 0000000000000000 R09: 0000000000000000 [ 1916.132838][ T4262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1916.140815][ T4262] R13: 00007f545cc26038 R14: 00007f545cc25fa0 R15: 00007ffe1a262dc8 [ 1916.148809][ T4262] [ 1916.383116][ T4270] netlink: 202920 bytes leftover after parsing attributes in process `syz.8.9346'. [ 1920.410332][ T4290] IPv6: Can't replace route, no match found [ 1920.466403][ T4310] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1920.483347][ T4310] syzkaller1: linktype set to 825 [ 1924.116297][ T4350] IPv6: Can't replace route, no match found [ 1924.401657][ T4358] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1924.442664][ T4358] syzkaller1: linktype set to 825 [ 1928.471663][ T4391] IPv6: Can't replace route, no match found [ 1932.131443][ T4418] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1932.145262][ T4418] syzkaller1: linktype set to 825 [ 1932.316560][ T4424] FAULT_INJECTION: forcing a failure. [ 1932.316560][ T4424] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1932.359594][ T4424] CPU: 1 PID: 4424 Comm: syz.6.9395 Not tainted syzkaller #0 [ 1932.367017][ T4424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1932.377115][ T4424] Call Trace: [ 1932.380417][ T4424] [ 1932.383372][ T4424] dump_stack_lvl+0x188/0x24e [ 1932.388088][ T4424] ? show_regs_print_info+0x12/0x12 [ 1932.393342][ T4424] ? load_image+0x410/0x410 [ 1932.397879][ T4424] ? __lock_acquire+0x7c40/0x7c40 [ 1932.402943][ T4424] should_fail_ex+0x390/0x4c0 [ 1932.407655][ T4424] _copy_from_user+0x2c/0x170 [ 1932.412370][ T4424] bpf_prog_test_run_skb+0x263/0x18e0 [ 1932.417777][ T4424] ? __fget_files+0x28/0x460 [ 1932.422402][ T4424] ? __fget_files+0x3fc/0x460 [ 1932.427127][ T4424] ? cpu_online+0xa0/0xa0 [ 1932.431492][ T4424] bpf_prog_test_run+0x31c/0x390 [ 1932.436480][ T4424] __sys_bpf+0x62b/0x780 [ 1932.440768][ T4424] ? bpf_link_show_fdinfo+0x380/0x380 [ 1932.446188][ T4424] ? lock_chain_count+0x20/0x20 [ 1932.451075][ T4424] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1932.457108][ T4424] __x64_sys_bpf+0x78/0x90 [ 1932.461560][ T4424] do_syscall_64+0x4c/0xa0 [ 1932.466002][ T4424] ? clear_bhb_loop+0x60/0xb0 [ 1932.470700][ T4424] ? clear_bhb_loop+0x60/0xb0 [ 1932.475398][ T4424] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1932.481323][ T4424] RIP: 0033:0x7f545c99e0d9 [ 1932.485786][ T4424] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1932.505400][ T4424] RSP: 002b:00007f545d95b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1932.513828][ T4424] RAX: ffffffffffffffda RBX: 00007f545cc25fa0 RCX: 00007f545c99e0d9 [ 1932.521816][ T4424] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 1932.529799][ T4424] RBP: 00007f545d95b090 R08: 0000000000000000 R09: 0000000000000000 [ 1932.537799][ T4424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1932.545780][ T4424] R13: 00007f545cc26038 R14: 00007f545cc25fa0 R15: 00007ffe1a262dc8 [ 1932.553777][ T4424] [ 1935.326220][ T4429] IPv6: Can't replace route, no match found [ 1935.838823][ T4462] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1935.854343][ T4462] syzkaller1: linktype set to 825 [ 1938.015066][ T4480] IPv6: Can't replace route, no match found [ 1938.022407][ T4479] netlink: 60 bytes leftover after parsing attributes in process `syz.5.9413'. [ 1938.068049][ T4479] netlink: 60 bytes leftover after parsing attributes in process `syz.5.9413'. [ 1938.119460][ T4483] netlink: 60 bytes leftover after parsing attributes in process `syz.5.9413'. [ 1939.760463][ T4510] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1939.785198][ T4510] syzkaller1: linktype set to 825 [ 1939.834122][ T4513] IPv6: Can't replace route, no match found [ 1942.356092][ T4533] FAULT_INJECTION: forcing a failure. [ 1942.356092][ T4533] name failslab, interval 1, probability 0, space 0, times 0 [ 1942.380442][ T4533] CPU: 0 PID: 4533 Comm: syz.6.9436 Not tainted syzkaller #0 [ 1942.387860][ T4533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1942.397943][ T4533] Call Trace: [ 1942.401258][ T4533] [ 1942.404213][ T4533] dump_stack_lvl+0x188/0x24e [ 1942.408926][ T4533] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1942.415117][ T4533] ? show_regs_print_info+0x12/0x12 [ 1942.420352][ T4533] ? load_image+0x410/0x410 [ 1942.424900][ T4533] should_fail_ex+0x390/0x4c0 [ 1942.429631][ T4533] should_failslab+0x5/0x20 [ 1942.434209][ T4533] slab_pre_alloc_hook+0x59/0x300 [ 1942.439262][ T4533] ? sk_prot_alloc+0xe7/0x210 [ 1942.443961][ T4533] __kmem_cache_alloc_node+0x4f/0x270 [ 1942.449347][ T4533] ? sk_prot_alloc+0xe7/0x210 [ 1942.454039][ T4533] __kmalloc+0xa3/0x240 [ 1942.458225][ T4533] sk_prot_alloc+0xe7/0x210 [ 1942.462735][ T4533] ? sk_alloc+0x20/0x330 [ 1942.466991][ T4533] sk_alloc+0x36/0x330 [ 1942.471081][ T4533] ? bpf_ctx_init+0x154/0x190 [ 1942.475771][ T4533] bpf_prog_test_run_skb+0x36d/0x18e0 [ 1942.481159][ T4533] ? __fget_files+0x28/0x460 [ 1942.485763][ T4533] ? __fget_files+0x3fc/0x460 [ 1942.490480][ T4533] ? cpu_online+0xa0/0xa0 [ 1942.494820][ T4533] bpf_prog_test_run+0x31c/0x390 [ 1942.499777][ T4533] __sys_bpf+0x62b/0x780 [ 1942.504058][ T4533] ? bpf_link_show_fdinfo+0x380/0x380 [ 1942.509481][ T4533] ? lock_chain_count+0x20/0x20 [ 1942.514355][ T4533] __x64_sys_bpf+0x78/0x90 [ 1942.518796][ T4533] do_syscall_64+0x4c/0xa0 [ 1942.523262][ T4533] ? clear_bhb_loop+0x60/0xb0 [ 1942.527968][ T4533] ? clear_bhb_loop+0x60/0xb0 [ 1942.532662][ T4533] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1942.538569][ T4533] RIP: 0033:0x7f545c99e0d9 [ 1942.542999][ T4533] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1942.562632][ T4533] RSP: 002b:00007f545d95b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1942.571100][ T4533] RAX: ffffffffffffffda RBX: 00007f545cc25fa0 RCX: 00007f545c99e0d9 [ 1942.579091][ T4533] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 1942.587104][ T4533] RBP: 00007f545d95b090 R08: 0000000000000000 R09: 0000000000000000 [ 1942.595086][ T4533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1942.603079][ T4533] R13: 00007f545cc26038 R14: 00007f545cc25fa0 R15: 00007ffe1a262dc8 [ 1942.611086][ T4533] [ 1945.422141][ T4553] IPv6: Can't replace route, no match found [ 1948.246676][ T4575] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1948.252858][ T4575] syzkaller1: linktype set to 825 [ 1948.608111][ T4594] IPv6: Can't replace route, no match found [ 1952.249027][ T4625] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1952.286581][ T4625] syzkaller1: linktype set to 825 [ 1952.848017][ T4636] IPv6: Can't replace route, no match found [ 1953.230959][ T4652] FAULT_INJECTION: forcing a failure. [ 1953.230959][ T4652] name failslab, interval 1, probability 0, space 0, times 0 [ 1953.320458][ T4652] CPU: 1 PID: 4652 Comm: syz.7.9474 Not tainted syzkaller #0 [ 1953.327886][ T4652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1953.337973][ T4652] Call Trace: [ 1953.341273][ T4652] [ 1953.344226][ T4652] dump_stack_lvl+0x188/0x24e [ 1953.348958][ T4652] ? show_regs_print_info+0x12/0x12 [ 1953.354236][ T4652] ? load_image+0x410/0x410 [ 1953.358772][ T4652] ? __might_sleep+0xd0/0xd0 [ 1953.363400][ T4652] ? __lock_acquire+0x7c40/0x7c40 [ 1953.368504][ T4652] should_fail_ex+0x390/0x4c0 [ 1953.373234][ T4652] should_failslab+0x5/0x20 [ 1953.377773][ T4652] slab_pre_alloc_hook+0x59/0x300 [ 1953.382826][ T4652] ? apparmor_sk_alloc_security+0x74/0x100 [ 1953.388670][ T4652] __kmem_cache_alloc_node+0x4f/0x270 [ 1953.394076][ T4652] ? apparmor_sk_alloc_security+0x74/0x100 [ 1953.399920][ T4652] kmalloc_trace+0x26/0xe0 [ 1953.404380][ T4652] apparmor_sk_alloc_security+0x74/0x100 [ 1953.410082][ T4652] security_sk_alloc+0x6a/0xa0 [ 1953.414890][ T4652] sk_prot_alloc+0x101/0x210 [ 1953.419516][ T4652] ? sk_alloc+0x20/0x330 [ 1953.423795][ T4652] sk_alloc+0x36/0x330 [ 1953.427900][ T4652] ? bpf_ctx_init+0x154/0x190 [ 1953.432630][ T4652] bpf_prog_test_run_skb+0x36d/0x18e0 [ 1953.438058][ T4652] ? lockdep_hardirqs_on+0x94/0x140 [ 1953.443289][ T4652] ? cpu_online+0xa0/0xa0 [ 1953.447656][ T4652] ? cpu_online+0xa0/0xa0 [ 1953.452021][ T4652] bpf_prog_test_run+0x31c/0x390 [ 1953.457099][ T4652] __sys_bpf+0x62b/0x780 [ 1953.461382][ T4652] ? bpf_link_show_fdinfo+0x380/0x380 [ 1953.466803][ T4652] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1953.473015][ T4652] __x64_sys_bpf+0x78/0x90 [ 1953.477469][ T4652] do_syscall_64+0x4c/0xa0 [ 1953.481961][ T4652] ? clear_bhb_loop+0x60/0xb0 [ 1953.486672][ T4652] ? clear_bhb_loop+0x60/0xb0 [ 1953.491399][ T4652] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1953.497338][ T4652] RIP: 0033:0x7f83b2d9e0d9 [ 1953.501784][ T4652] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1953.521415][ T4652] RSP: 002b:00007f83b3bad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1953.529857][ T4652] RAX: ffffffffffffffda RBX: 00007f83b3025fa0 RCX: 00007f83b2d9e0d9 [ 1953.537862][ T4652] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 1953.545863][ T4652] RBP: 00007f83b3bad090 R08: 0000000000000000 R09: 0000000000000000 [ 1953.553859][ T4652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1953.561863][ T4652] R13: 00007f83b3026038 R14: 00007f83b3025fa0 R15: 00007ffd57bc1b18 [ 1953.569882][ T4652] [ 1957.373583][ T4674] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1957.394604][ T4674] syzkaller1: linktype set to 825 [ 1957.439062][ T4678] IPv6: Can't replace route, no match found [ 1959.308702][ T4714] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1959.314769][ T4714] syzkaller1: linktype set to 825 [ 1961.857770][ T4727] IPv6: Can't replace route, no match found [ 1964.938348][ T4742] netlink: 'syz.6.9502': attribute type 1 has an invalid length. [ 1964.956541][ T4742] netlink: 'syz.6.9502': attribute type 3 has an invalid length. [ 1964.973525][ T4742] netlink: 132 bytes leftover after parsing attributes in process `syz.6.9502'. [ 1965.023090][ T4742] netlink: 63503 bytes leftover after parsing attributes in process `syz.6.9502'. [ 1965.220948][ T4757] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1965.253391][ T4757] syzkaller1: linktype set to 825 [ 1965.673990][ T4770] IPv6: Can't replace route, no match found [ 1965.860157][ T4764] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1965.870250][ T4764] syzkaller1: linktype set to 825 [ 1967.555195][T23912] Bluetooth: hci0: command 0x0406 tx timeout [ 1968.435508][ T4800] netlink: 36 bytes leftover after parsing attributes in process `syz.8.9517'. [ 1968.470204][ T4808] IPv6: Can't replace route, no match found [ 1968.486573][ T4807] netlink: 'syz.7.9523': attribute type 1 has an invalid length. [ 1968.494519][ T4807] netlink: 'syz.7.9523': attribute type 3 has an invalid length. [ 1968.558813][ T4807] netlink: 132 bytes leftover after parsing attributes in process `syz.7.9523'. [ 1968.562735][ T4811] netlink: 63503 bytes leftover after parsing attributes in process `syz.7.9523'. [ 1968.732149][ T4819] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1968.748145][ T4819] syzkaller1: linktype set to 825 [ 1972.250519][ T4829] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1972.266980][ T4829] syzkaller1: linktype set to 825 [ 1972.954020][ T4857] IPv6: Can't replace route, no match found [ 1973.273775][ T4880] netlink: 122896 bytes leftover after parsing attributes in process `syz.6.9546'. [ 1975.727775][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1975.734153][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1978.112082][ T4880] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 1978.131324][ T4898] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1978.139132][ T4898] syzkaller1: linktype set to 825 [ 1978.279950][ T4905] IPv6: Can't replace route, no match found [ 1978.722695][ T4929] netlink: 'syz.0.9558': attribute type 1 has an invalid length. [ 1978.747672][ T4929] netlink: 83992 bytes leftover after parsing attributes in process `syz.0.9558'. [ 1981.348682][ T4926] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1981.355478][ T4926] syzkaller1: linktype set to 825 [ 1981.753610][ T4954] netlink: 144 bytes leftover after parsing attributes in process `syz.7.9566'. [ 1984.588033][ T4968] IPv6: Can't replace route, no match found [ 1984.798140][ T4973] netlink: 'syz.0.9568': attribute type 21 has an invalid length. [ 1984.828101][ T4973] IPv6: NLM_F_CREATE should be specified when creating new route [ 1985.233636][ T4980] netlink: 'syz.6.9572': attribute type 2 has an invalid length. [ 1985.247722][ T4980] netlink: 'syz.6.9572': attribute type 8 has an invalid length. [ 1985.269277][ T4980] netlink: 132 bytes leftover after parsing attributes in process `syz.6.9572'. [ 1985.821131][ T4995] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1985.837646][ T4995] syzkaller1: linktype set to 825 [ 1986.009755][ T5001] netlink: 164 bytes leftover after parsing attributes in process `syz.0.9576'. [ 1986.045396][ T5001] netlink: 164 bytes leftover after parsing attributes in process `syz.0.9576'. [ 1987.669421][ T5027] netlink: 'syz.7.9587': attribute type 3 has an invalid length. [ 1987.750941][ T5027] netlink: 199836 bytes leftover after parsing attributes in process `syz.7.9587'. [ 1990.155754][ T5048] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1990.208993][ T5048] syzkaller1: linktype set to 825 [ 1990.896760][ T5071] netlink: 'syz.0.9601': attribute type 10 has an invalid length. [ 1993.795246][ T5071] bridge0: port 2(bridge_slave_1) entered disabled state [ 1993.812423][ T5071] device bridge_slave_1 left promiscuous mode [ 1993.835686][ T5071] bridge0: port 2(bridge_slave_1) entered disabled state [ 1993.874468][ T5071] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 1997.659276][ T5102] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1997.689481][ T5102] syzkaller1: linktype set to 825 [ 2004.749645][ T5196] netlink: 9286 bytes leftover after parsing attributes in process `syz.6.9636'. [ 2010.979419][ T5218] delete_channel: no stack [ 2011.242670][ T5228] netlink: 'syz.7.9646': attribute type 39 has an invalid length. [ 2011.682978][ T5233] netlink: 'syz.0.9647': attribute type 2 has an invalid length. [ 2011.691705][ T5233] netlink: 'syz.0.9647': attribute type 1 has an invalid length. [ 2012.575288][ T5253] netlink: 'syz.7.9653': attribute type 29 has an invalid length. [ 2020.121268][ T5253] netlink: 'syz.7.9653': attribute type 29 has an invalid length. [ 2023.915738][T23912] Bluetooth: hci7: ISO packet for unknown connection handle 1 [ 2028.596137][ T5400] netlink: 9286 bytes leftover after parsing attributes in process `syz.7.9700'. [ 2028.906558][ T5407] netlink: 'syz.6.9702': attribute type 2 has an invalid length. [ 2028.925257][ T5407] netlink: 'syz.6.9702': attribute type 1 has an invalid length. [ 2033.018682][ T5440] netlink: 'syz.0.9711': attribute type 10 has an invalid length. [ 2033.075047][T23912] Bluetooth: hci6: unexpected subevent 0x01 length: 150 > 18 [ 2033.117562][ T5440] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 2033.309093][ T5456] netlink: 'syz.8.9716': attribute type 29 has an invalid length. [ 2033.337979][ T5456] netlink: 'syz.8.9716': attribute type 27 has an invalid length. [ 2033.360346][ T5456] netlink: 164 bytes leftover after parsing attributes in process `syz.8.9716'. [ 2033.674249][ T5468] netlink: 'syz.5.9718': attribute type 11 has an invalid length. [ 2033.709616][ T5468] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.9718'. [ 2033.729698][ T5470] netlink: 'syz.5.9718': attribute type 11 has an invalid length. [ 2033.739259][ T5470] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.9718'. [ 2033.768119][ T5467] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2034.742157][ T5481] netlink: 'syz.8.9721': attribute type 2 has an invalid length. [ 2034.799795][ T5481] netlink: 'syz.8.9721': attribute type 1 has an invalid length. [ 2037.157509][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 2037.163891][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 2038.089440][ T5515] netlink: 'syz.0.9730': attribute type 11 has an invalid length. [ 2038.122756][ T5515] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.9730'. [ 2038.172038][ T5515] netlink: 'syz.0.9730': attribute type 11 has an invalid length. [ 2038.192966][ T5515] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.9730'. [ 2038.260110][ T5513] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2038.754269][ T5543] device syzkaller0 entered promiscuous mode [ 2040.419881][ T5572] netlink: 'syz.8.9748': attribute type 11 has an invalid length. [ 2040.436448][ T5572] netlink: 199836 bytes leftover after parsing attributes in process `syz.8.9748'. [ 2040.477554][ T5572] netlink: 'syz.8.9748': attribute type 11 has an invalid length. [ 2040.549417][ T5572] netlink: 199836 bytes leftover after parsing attributes in process `syz.8.9748'. [ 2040.572372][ T5571] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2046.294994][ T5606] netlink: 14546 bytes leftover after parsing attributes in process `syz.6.9758'. [ 2054.344321][ T5642] netlink: 'syz.0.9763': attribute type 21 has an invalid length. [ 2054.639275][ T5686] netlink: 'syz.0.9773': attribute type 10 has an invalid length. [ 2054.825942][ T5686] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 2054.916164][ T5695] netlink: 16399 bytes leftover after parsing attributes in process `syz.7.9778'. [ 2055.413884][ T3294] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2055.446388][T27181] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2055.473628][T27181] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2055.508829][T27181] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2055.528658][T27181] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 2055.536032][T27181] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2055.822764][ T5710] chnl_net:caif_netlink_parms(): no params data found [ 2055.987659][ T5710] bridge0: port 1(bridge_slave_0) entered blocking state [ 2056.011472][ T5710] bridge0: port 1(bridge_slave_0) entered disabled state [ 2056.032656][ T5710] device bridge_slave_0 entered promiscuous mode [ 2056.069476][ T5710] bridge0: port 2(bridge_slave_1) entered blocking state [ 2056.086915][ T5710] bridge0: port 2(bridge_slave_1) entered disabled state [ 2056.105254][ T5710] device bridge_slave_1 entered promiscuous mode [ 2056.184697][ T5710] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2056.221225][ T5710] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2056.301231][ T5710] team0: Port device team_slave_0 added [ 2056.321193][ T5710] team0: Port device team_slave_1 added [ 2056.392306][ T5710] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2056.409736][ T5710] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2056.483496][ T5710] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2056.717420][ T5710] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2056.764981][ T5710] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2056.848733][ T5710] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2056.900428][T27176] bond0: (slave syz_tun): Releasing backup interface [ 2057.011481][ T5728] device syzkaller0 entered promiscuous mode [ 2057.100893][T30313] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2057.126901][ T5710] device hsr_slave_0 entered promiscuous mode [ 2057.140212][ T5710] device hsr_slave_1 entered promiscuous mode [ 2057.162511][ T5710] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2057.175010][ T5710] Cannot create hsr debugfs directory [ 2057.229744][T30313] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2057.370083][T30313] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2057.508323][T30313] team0: Port device netdevsim0 removed [ 2057.520764][T30313] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2057.638157][T23912] Bluetooth: hci3: command 0x0409 tx timeout [ 2059.715151][T23912] Bluetooth: hci3: command 0x041b tx timeout [ 2061.795466][T23912] Bluetooth: hci3: command 0x040f tx timeout [ 2063.877639][T23912] Bluetooth: hci3: command 0x0419 tx timeout [ 2065.385589][ T5764] netlink: 48 bytes leftover after parsing attributes in process `syz.8.9796'. [ 2065.548994][T30313] device 0 left promiscuous mode [ 2065.708779][T30313] tipc: Left network mode [ 2065.763537][ T5789] netlink: 'syz.8.9802': attribute type 28 has an invalid length. [ 2065.778025][ T5789] netlink: 'syz.8.9802': attribute type 3 has an invalid length. [ 2065.798395][ T5789] netlink: 132 bytes leftover after parsing attributes in process `syz.8.9802'. [ 2065.898861][T23912] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 2066.382398][ T5801] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 2066.424504][ T5801] syzkaller1: linktype set to 825 [ 2066.851737][ T5829] netlink: 'syz.8.9811': attribute type 10 has an invalid length. [ 2066.873641][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 2066.976492][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 2066.986609][ T5829] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2067.093606][ T5829] team0: Port device bridge0 added [ 2069.814479][T30313] device gretap0 left promiscuous mode [ 2069.824628][T30313] Ÿë: port 1(gretap0) entered disabled state [ 2069.857251][ T5832] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 2069.863289][ T5832] syzkaller1: linktype set to 825 [ 2070.084729][ T5710] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 2070.150818][ T5710] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 2070.186431][ T5710] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 2070.229844][ T5710] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 2070.254745][ T5853] netlink: 'syz.8.9818': attribute type 10 has an invalid length. [ 2070.282021][ T5853] netlink: 168 bytes leftover after parsing attributes in process `syz.8.9818'. [ 2070.323136][ T5859] netlink: 152 bytes leftover after parsing attributes in process `syz.8.9818'. [ 2070.375791][ T5853] netlink: 53775 bytes leftover after parsing attributes in process `syz.8.9818'. [ 2070.626201][ T5710] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2070.706049][ T5710] 8021q: adding VLAN 0 to HW filter on device team0 [ 2070.738147][T30329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2070.755389][T30329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2070.816219][T30329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2070.830305][T30329] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2070.851999][T30329] bridge0: port 1(bridge_slave_0) entered blocking state [ 2070.859238][T30329] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2070.880810][T30329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2070.895678][T30329] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2070.911499][T30329] bridge0: port 2(bridge_slave_1) entered blocking state [ 2070.918692][T30329] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2070.956949][T30329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2071.015795][T30329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2071.066647][T30329] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2071.165595][T30321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2071.202258][T30321] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2071.241916][T30321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2071.276704][T30321] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2071.317007][T30321] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2074.320080][ T5894] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 2074.345182][ T5894] syzkaller1: linktype set to 825 [ 2074.374575][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2074.404203][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2074.427258][ T5710] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2074.456608][ T5710] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2074.657689][T30321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2074.715566][T30321] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2075.443913][ T5925] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 2075.476209][ T5925] syzkaller1: linktype set to 825 [ 2075.706444][T30313] device veth0_to_team left promiscuous mode [ 2075.737051][T30313] Ÿë: port 2(veth0_to_team) entered disabled state [ 2075.793413][T30313] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2075.835309][T30313] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2076.381060][T30313] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2076.400683][T30313] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2076.411142][T30313] batman_adv: batadv0: Interface deactivated: veth0_vlan [ 2076.418592][T30313] batman_adv: batadv0: Removing interface: veth0_vlan [ 2076.426358][T30313] bridge0: port 2(bond0) entered disabled state [ 2076.453601][T30313] device bridge_slave_0 left promiscuous mode [ 2076.485618][T30313] bridge0: port 1(bridge_slave_0) entered disabled state [ 2076.536519][T30313] device veth1_vlan left promiscuous mode [ 2076.546013][T30313] device veth0_vlan left promiscuous mode [ 2077.992541][T30313] team0 (unregistering): Port device team_slave_1 removed [ 2078.035939][T30313] team0 (unregistering): Port device team_slave_0 removed [ 2078.094346][T30313] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2078.104058][T30313] device bond_slave_1 left promiscuous mode [ 2078.149030][T30313] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2078.160241][T30313] device bond_slave_0 left promiscuous mode [ 2078.199593][T30313] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 2078.210528][T30313] device bridge_slave_1 left promiscuous mode [ 2078.730513][T30313] bond0 (unregistering): Released all slaves [ 2078.827781][ T6025] netlink: 60 bytes leftover after parsing attributes in process `syz.7.9862'. [ 2078.882869][ T5999] device syzkaller0 entered promiscuous mode [ 2078.925587][ T6025] netlink: 60 bytes leftover after parsing attributes in process `syz.7.9862'. [ 2078.937380][T30315] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2078.944846][T30315] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2078.993610][ T6026] netlink: 60 bytes leftover after parsing attributes in process `syz.7.9862'. [ 2079.046093][ T5710] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2080.603997][T30321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2080.623757][T30321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2080.658670][T30321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2080.675817][T30321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2080.692265][ T5710] device veth0_vlan entered promiscuous mode [ 2080.704423][T30321] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2080.726359][T30321] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2080.738145][ T6064] device syzkaller0 entered promiscuous mode [ 2080.761500][ T5710] device veth1_vlan entered promiscuous mode [ 2080.844251][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2080.865710][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2080.895514][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2080.912612][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2081.799269][ T5710] device veth0_macvtap entered promiscuous mode [ 2081.835372][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2081.869707][ T5710] device veth1_macvtap entered promiscuous mode [ 2081.928809][ T5710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2081.939709][ T5710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2081.950518][ T5710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2081.961668][ T5710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2081.983502][ T5710] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2082.005818][T30315] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2082.024735][T30315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2082.038434][ T5710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2082.059850][ T5710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2082.076118][ T5710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2082.090294][ T5710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2082.116263][ T5710] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2082.149454][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2082.174434][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2082.190060][ T6104] FAULT_INJECTION: forcing a failure. [ 2082.190060][ T6104] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2082.215785][ T6104] CPU: 1 PID: 6104 Comm: syz.7.9888 Not tainted syzkaller #0 [ 2082.221166][ T5710] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2082.223175][ T6104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2082.241927][ T6104] Call Trace: [ 2082.244897][ T5710] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2082.253880][ T6104] [ 2082.253891][ T6104] dump_stack_lvl+0x188/0x24e [ 2082.261540][ T6104] ? show_regs_print_info+0x12/0x12 [ 2082.266770][ T6104] ? load_image+0x410/0x410 [ 2082.268759][ T5710] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2082.271292][ T6104] ? __lock_acquire+0x7c40/0x7c40 [ 2082.285022][ T6104] should_fail_ex+0x390/0x4c0 [ 2082.289738][ T6104] _copy_from_user+0x2c/0x170 [ 2082.294447][ T6104] __sys_bpf+0x2ea/0x780 [ 2082.294704][ T5710] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2082.298709][ T6104] ? bpf_link_show_fdinfo+0x380/0x380 [ 2082.298751][ T6104] ? lock_chain_count+0x20/0x20 [ 2082.298786][ T6104] __x64_sys_bpf+0x78/0x90 [ 2082.298812][ T6104] do_syscall_64+0x4c/0xa0 [ 2082.298836][ T6104] ? clear_bhb_loop+0x60/0xb0 [ 2082.298861][ T6104] ? clear_bhb_loop+0x60/0xb0 [ 2082.298887][ T6104] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2082.341930][ T6104] RIP: 0033:0x7f83b2d9e0d9 [ 2082.346380][ T6104] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2082.366016][ T6104] RSP: 002b:00007f83b3bad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2082.374450][ T6104] RAX: ffffffffffffffda RBX: 00007f83b3025fa0 RCX: 00007f83b2d9e0d9 [ 2082.382431][ T6104] RDX: 000000000000000c RSI: 00002000000004c0 RDI: 000000000000000a [ 2082.390426][ T6104] RBP: 00007f83b3bad090 R08: 0000000000000000 R09: 0000000000000000 [ 2082.398413][ T6104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2082.406394][ T6104] R13: 00007f83b3026038 R14: 00007f83b3025fa0 R15: 00007ffd57bc1b18 [ 2082.414432][ T6104] [ 2082.577584][T30329] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2082.591344][T30329] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2082.644141][T30329] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2082.682266][ T6113] netlink: 'syz.6.9891': attribute type 4 has an invalid length. [ 2082.732088][ T4327] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2082.785167][ T4327] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2082.830072][T30321] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2083.310816][ T6129] netlink: 'syz.6.9893': attribute type 2 has an invalid length. [ 2083.758625][ T6129] device 0 entered promiscuous mode [ 2084.272688][T27181] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2084.288517][T27181] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2084.296337][T27181] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2084.304051][T27181] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2084.335466][T27181] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 2084.343177][T27181] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2084.812463][ T6146] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 2084.842805][ T6146] syzkaller1: linktype set to 825 [ 2085.061869][ T6156] netlink: 'syz.0.9899': attribute type 29 has an invalid length. [ 2085.095477][ T6156] netlink: 'syz.0.9899': attribute type 29 has an invalid length. [ 2085.137338][ T6156] netlink: 'syz.0.9899': attribute type 29 has an invalid length. [ 2085.431044][ T6145] chnl_net:caif_netlink_parms(): no params data found [ 2085.752791][T30313] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2085.818179][ T6145] bridge0: port 1(bridge_slave_0) entered blocking state [ 2085.829172][ T6145] bridge0: port 1(bridge_slave_0) entered disabled state [ 2085.838621][ T6145] device bridge_slave_0 entered promiscuous mode [ 2085.862114][ T6174] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 2085.873755][ T6174] syzkaller1: linktype set to 825 [ 2085.937501][T30313] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2085.991076][ T6191] FAULT_INJECTION: forcing a failure. [ 2085.991076][ T6191] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2086.004444][ T6145] bridge0: port 2(bridge_slave_1) entered blocking state [ 2086.016158][ T6145] bridge0: port 2(bridge_slave_1) entered disabled state [ 2086.024330][ T6191] CPU: 1 PID: 6191 Comm: syz.0.9906 Not tainted syzkaller #0 [ 2086.031752][ T6191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2086.041835][ T6191] Call Trace: [ 2086.045132][ T6191] [ 2086.048087][ T6191] dump_stack_lvl+0x188/0x24e [ 2086.052810][ T6191] ? show_regs_print_info+0x12/0x12 [ 2086.058038][ T6191] ? load_image+0x410/0x410 [ 2086.062573][ T6191] ? __lock_acquire+0x7c40/0x7c40 [ 2086.067626][ T6191] ? __bpf_prog_test_run_raw_tp+0x2a6/0x430 [ 2086.073558][ T6191] should_fail_ex+0x390/0x4c0 [ 2086.078293][ T6191] _copy_to_user+0x2c/0x130 [ 2086.082827][ T6191] bpf_prog_test_run_raw_tp+0x4de/0x680 [ 2086.088410][ T6191] ? trace_bpf_test_finish+0x220/0x220 [ 2086.093931][ T6191] ? trace_bpf_test_finish+0x220/0x220 [ 2086.099424][ T6191] bpf_prog_test_run+0x31c/0x390 [ 2086.104398][ T6191] __sys_bpf+0x62b/0x780 [ 2086.106186][ T6145] device bridge_slave_1 entered promiscuous mode [ 2086.108659][ T6191] ? bpf_link_show_fdinfo+0x380/0x380 [ 2086.120423][ T6191] ? lock_chain_count+0x20/0x20 [ 2086.125335][ T6191] __x64_sys_bpf+0x78/0x90 [ 2086.129813][ T6191] do_syscall_64+0x4c/0xa0 [ 2086.134261][ T6191] ? clear_bhb_loop+0x60/0xb0 [ 2086.138980][ T6191] ? clear_bhb_loop+0x60/0xb0 [ 2086.143694][ T6191] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2086.149619][ T6191] RIP: 0033:0x7f898a59e0d9 [ 2086.154053][ T6191] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2086.173683][ T6191] RSP: 002b:00007f898b4f1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2086.182124][ T6191] RAX: ffffffffffffffda RBX: 00007f898a825fa0 RCX: 00007f898a59e0d9 [ 2086.190120][ T6191] RDX: 000000000000000c RSI: 00002000000004c0 RDI: 000000000000000a [ 2086.198115][ T6191] RBP: 00007f898b4f1090 R08: 0000000000000000 R09: 0000000000000000 [ 2086.206111][ T6191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2086.214104][ T6191] R13: 00007f898a826038 R14: 00007f898a825fa0 R15: 00007ffc5b8782d8 [ 2086.222111][ T6191] [ 2086.243306][ T6145] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2086.299840][T30313] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2086.438699][T23912] Bluetooth: hci2: command 0x0409 tx timeout [ 2087.232799][ T6145] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2087.278209][ T6205] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 2087.284822][ T6205] syzkaller1: linktype set to 825 [ 2087.314369][T30313] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2087.338385][ T6145] team0: Port device team_slave_0 added [ 2087.371841][ T6145] team0: Port device team_slave_1 added [ 2087.436861][ T6145] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2087.443839][ T6145] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2087.478678][ T6145] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2087.503041][ T6145] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2087.511232][ T6145] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2087.545257][ T6145] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2087.722397][ T6145] device hsr_slave_0 entered promiscuous mode [ 2087.759339][ T6218] netlink: 'syz.0.9914': attribute type 2 has an invalid length. [ 2087.773285][ T6145] device hsr_slave_1 entered promiscuous mode [ 2087.811775][ T6145] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2087.828106][ T6145] Cannot create hsr debugfs directory [ 2088.052665][ T6218] device 0 entered promiscuous mode [ 2088.289900][ T6225] device syzkaller0 entered promiscuous mode [ 2088.515155][T27181] Bluetooth: hci2: command 0x041b tx timeout [ 2090.381741][ T6254] FAULT_INJECTION: forcing a failure. [ 2090.381741][ T6254] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2090.459842][ T6254] CPU: 1 PID: 6254 Comm: syz.0.9919 Not tainted syzkaller #0 [ 2090.467267][ T6254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2090.477345][ T6254] Call Trace: [ 2090.480642][ T6254] [ 2090.483593][ T6254] dump_stack_lvl+0x188/0x24e [ 2090.488315][ T6254] ? show_regs_print_info+0x12/0x12 [ 2090.493549][ T6254] ? load_image+0x410/0x410 [ 2090.498085][ T6254] ? __lock_acquire+0x7c40/0x7c40 [ 2090.503147][ T6254] ? snprintf+0xe5/0x140 [ 2090.507420][ T6254] should_fail_ex+0x390/0x4c0 [ 2090.512137][ T6254] _copy_to_user+0x2c/0x130 [ 2090.516668][ T6254] simple_read_from_buffer+0xe3/0x150 [ 2090.522073][ T6254] proc_fail_nth_read+0x1a6/0x220 [ 2090.527129][ T6254] ? proc_fault_inject_write+0x310/0x310 [ 2090.532799][ T6254] ? fsnotify_perm+0x248/0x550 [ 2090.537607][ T6254] ? proc_fault_inject_write+0x310/0x310 [ 2090.543281][ T6254] vfs_read+0x2db/0x960 [ 2090.547478][ T6254] ? kernel_read+0x1e0/0x1e0 [ 2090.552115][ T6254] ? __fget_files+0x28/0x460 [ 2090.556745][ T6254] ? __fget_files+0x3fc/0x460 [ 2090.561465][ T6254] ? __fdget_pos+0x2ae/0x360 [ 2090.566118][ T6254] ? ksys_read+0x70/0x260 [ 2090.570484][ T6254] ksys_read+0x14d/0x260 [ 2090.574769][ T6254] ? vfs_write+0x9a0/0x9a0 [ 2090.579228][ T6254] ? lockdep_hardirqs_on+0x94/0x140 [ 2090.584455][ T6254] do_syscall_64+0x4c/0xa0 [ 2090.588895][ T6254] ? clear_bhb_loop+0x60/0xb0 [ 2090.593589][ T6254] ? clear_bhb_loop+0x60/0xb0 [ 2090.598286][ T6254] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2090.604194][ T6254] RIP: 0033:0x7f898a55e90e [ 2090.608654][ T6254] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2090.628281][ T6254] RSP: 002b:00007f898b4f0fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2090.636703][ T6254] RAX: ffffffffffffffda RBX: 00007f898b4f16c0 RCX: 00007f898a55e90e [ 2090.644683][ T6254] RDX: 000000000000000f RSI: 00007f898b4f10a0 RDI: 0000000000000005 [ 2090.652665][ T6254] RBP: 00007f898b4f1090 R08: 0000000000000000 R09: 0000000000000000 [ 2090.660643][ T6254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2090.668625][ T6254] R13: 00007f898a826038 R14: 00007f898a825fa0 R15: 00007ffc5b8782d8 [ 2090.676617][ T6254] [ 2090.680800][T27181] Bluetooth: hci2: command 0x040f tx timeout [ 2091.550649][ T6289] netlink: 'syz.8.9929': attribute type 11 has an invalid length. [ 2091.569976][T30313] team0: Port device wlan1 removed [ 2091.598199][ T6289] netlink: 199836 bytes leftover after parsing attributes in process `syz.8.9929'. [ 2091.614254][ T6291] netlink: 'syz.8.9929': attribute type 11 has an invalid length. [ 2091.623835][ T6291] netlink: 199836 bytes leftover after parsing attributes in process `syz.8.9929'. [ 2091.654330][ T6288] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2091.823766][T30313] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2091.850072][T30313] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2091.859707][T30313] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2091.871383][T30313] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2091.894569][T30313] device bridge_slave_0 left promiscuous mode [ 2091.907014][T30313] bridge0: port 1(bridge_slave_0) entered disabled state [ 2091.956388][T30313] device veth1_vlan left promiscuous mode [ 2091.962249][T30313] device veth0_vlan left promiscuous mode [ 2092.757056][T27181] Bluetooth: hci2: command 0x0419 tx timeout [ 2094.471788][T30313] team0 (unregistering): Port device geneve1 removed [ 2094.534385][T30313] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 2094.783535][T30313] team0 (unregistering): Port device team_slave_1 removed [ 2094.829300][T30313] team0 (unregistering): Port device team_slave_0 removed [ 2094.871645][T30313] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2094.909439][T30313] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2094.952262][T30313] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 2095.162481][T30313] bond0 (unregistering): Released all slaves [ 2095.336316][ T6145] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 2095.357725][ T6145] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 2095.431116][ T6145] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 2095.465373][ T6145] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 2095.698951][ T6145] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2095.770754][ T6336] netlink: 'syz.5.9942': attribute type 21 has an invalid length. [ 2095.785926][ T6339] FAULT_INJECTION: forcing a failure. [ 2095.785926][ T6339] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2095.799177][ T6336] netlink: 'syz.5.9942': attribute type 1 has an invalid length. [ 2095.818057][ T6339] CPU: 1 PID: 6339 Comm: syz.6.9944 Not tainted syzkaller #0 [ 2095.825557][ T6339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2095.835636][ T6339] Call Trace: [ 2095.838922][ T6339] [ 2095.841859][ T6339] dump_stack_lvl+0x188/0x24e [ 2095.846581][ T6339] ? show_regs_print_info+0x12/0x12 [ 2095.851801][ T6339] ? load_image+0x410/0x410 [ 2095.856332][ T6339] ? __lock_acquire+0x7c40/0x7c40 [ 2095.861378][ T6339] should_fail_ex+0x390/0x4c0 [ 2095.866069][ T6339] _copy_from_user+0x2c/0x170 [ 2095.870759][ T6339] __sys_bpf+0x2ea/0x780 [ 2095.875022][ T6339] ? bpf_link_show_fdinfo+0x380/0x380 [ 2095.880419][ T6339] ? lock_chain_count+0x20/0x20 [ 2095.885284][ T6339] __x64_sys_bpf+0x78/0x90 [ 2095.889723][ T6339] do_syscall_64+0x4c/0xa0 [ 2095.894153][ T6339] ? clear_bhb_loop+0x60/0xb0 [ 2095.898840][ T6339] ? clear_bhb_loop+0x60/0xb0 [ 2095.903539][ T6339] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2095.909454][ T6339] RIP: 0033:0x7f545c99e0d9 [ 2095.913884][ T6339] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2095.933498][ T6339] RSP: 002b:00007f545d95b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2095.941920][ T6339] RAX: ffffffffffffffda RBX: 00007f545cc25fa0 RCX: 00007f545c99e0d9 [ 2095.949902][ T6339] RDX: 000000000000000c RSI: 00002000000004c0 RDI: 000000000000000a [ 2095.957893][ T6339] RBP: 00007f545d95b090 R08: 0000000000000000 R09: 0000000000000000 [ 2095.965881][ T6339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2095.973857][ T6339] R13: 00007f545cc26038 R14: 00007f545cc25fa0 R15: 00007ffe1a262dc8 [ 2095.981864][ T6339] [ 2096.011464][ T6336] netlink: 144 bytes leftover after parsing attributes in process `syz.5.9942'. [ 2096.030350][ T6343] netlink: 'syz.5.9942': attribute type 2 has an invalid length. [ 2096.083739][ T6343] netlink: 'syz.5.9942': attribute type 1 has an invalid length. [ 2096.125610][ T6343] netlink: 170140 bytes leftover after parsing attributes in process `syz.5.9942'. [ 2096.156269][T27348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2096.175592][T27348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2096.195660][ T6145] 8021q: adding VLAN 0 to HW filter on device team0 [ 2096.217054][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2096.254518][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2096.270804][ T4327] bridge0: port 1(bridge_slave_0) entered blocking state [ 2096.277971][ T4327] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2096.356182][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2096.390832][T30323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2096.410197][T30323] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2096.431054][T30323] bridge0: port 2(bridge_slave_1) entered blocking state [ 2096.438232][T30323] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2096.466321][T27348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2096.526125][T27348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2096.546564][T27348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2096.561407][T27348] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2096.570489][T27348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2096.585433][T27348] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2096.601571][T27348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2096.610861][T27348] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2096.669255][ T6145] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2096.733341][ T6145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2096.778095][T27348] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2096.797585][T27348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2096.843049][T27348] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2097.845583][T13690] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2097.855380][T13690] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2097.893969][ T6145] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2098.597286][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 2098.603749][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 2098.982708][T13690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2099.002294][T13690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2099.031389][T13690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2099.051981][T13690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2099.094474][ T6145] device veth0_vlan entered promiscuous mode [ 2099.102025][T13690] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2099.115677][T13690] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2099.149451][ T6145] device veth1_vlan entered promiscuous mode [ 2099.231114][T30321] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2099.251463][T30321] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2099.274666][T30321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2099.306900][T30321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2099.335333][ T6145] device veth0_macvtap entered promiscuous mode [ 2099.388828][ T6145] device veth1_macvtap entered promiscuous mode [ 2099.539291][ T6145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2099.584985][ T6145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2099.603137][ T6145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2099.639341][ T6145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2099.678558][ T6145] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2099.709825][T30329] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2099.728974][T30329] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2099.759344][T30329] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2099.787869][T30329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2099.817975][ T6145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2099.855005][ T6145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2099.898704][ T6145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2099.920834][ T6414] netlink: 'syz.6.9959': attribute type 2 has an invalid length. [ 2099.935041][ T6414] netlink: 10 bytes leftover after parsing attributes in process `syz.6.9959'. [ 2099.944386][ T6145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2099.985664][ T6145] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2100.029973][T30329] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2100.049647][T30329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2100.083369][ T6145] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2100.127978][ T6145] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2100.165225][ T6145] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2100.174164][ T6145] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2100.498706][T30321] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2100.524356][T30321] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2100.581247][T30323] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2100.776660][T30323] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2100.793750][T30323] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2100.828426][T30321] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2101.303152][ T6455] netlink: 'syz.7.9969': attribute type 27 has an invalid length. [ 2102.033559][ T6477] netlink: 1047 bytes leftover after parsing attributes in process `syz.6.9978'. [ 2102.099032][ T6477] bridge_slave_1: default FDB implementation only supports local addresses [ 2102.852858][T23912] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2102.862277][T23912] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2102.875031][T23912] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2102.883683][ T3294] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2102.892946][ T3294] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2102.900920][ T3294] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2103.454261][ T6505] netlink: 12002 bytes leftover after parsing attributes in process `syz.6.9986'. [ 2103.916634][ T6528] device wlan1 entered promiscuous mode [ 2103.973741][ T6531] netlink: 'syz.7.9994': attribute type 27 has an invalid length. [ 2104.025137][ T6531] netlink: 164 bytes leftover after parsing attributes in process `syz.7.9994'. [ 2104.190632][ T6502] chnl_net:caif_netlink_parms(): no params data found [ 2104.412079][ T6546] netlink: 'syz.5.9996': attribute type 3 has an invalid length. [ 2104.416794][T30323] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2104.493749][ T6546] netlink: 'syz.5.9996': attribute type 1 has an invalid length. [ 2104.568804][ T6546] netlink: 60387 bytes leftover after parsing attributes in process `syz.5.9996'. [ 2104.658459][T30323] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2104.856733][T30323] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2104.901413][ T6502] bridge0: port 1(bridge_slave_0) entered blocking state [ 2104.915436][ T3294] Bluetooth: hci1: command 0x0409 tx timeout [ 2104.929458][ T6502] bridge0: port 1(bridge_slave_0) entered disabled state [ 2104.971676][ T6502] device bridge_slave_0 entered promiscuous mode [ 2105.036701][ T6562] netlink: 4595 bytes leftover after parsing attributes in process `syz.5.10002'. [ 2106.995118][ T3294] Bluetooth: hci1: command 0x041b tx timeout [ 2107.913513][T30323] team0: Port device netdevsim0 removed [ 2107.929925][T30323] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2107.960886][ T6502] bridge0: port 2(bridge_slave_1) entered blocking state [ 2107.985082][ T6502] bridge0: port 2(bridge_slave_1) entered disabled state [ 2107.994573][ T6502] device bridge_slave_1 entered promiscuous mode [ 2108.068109][ T6502] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2108.103278][ T6502] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2108.178907][ T6502] team0: Port device team_slave_0 added [ 2108.191856][ T6502] team0: Port device team_slave_1 added [ 2108.281877][ T6502] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2108.305089][ T6502] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2108.365021][ T6502] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2108.380277][ T6502] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2108.388086][ T6502] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2108.414405][ T6502] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2108.452581][T30323] device .*! left promiscuous mode [ 2108.623720][ T6595] netlink: 16054 bytes leftover after parsing attributes in process `syz.5.10014'. [ 2108.650996][ T6502] device hsr_slave_0 entered promiscuous mode [ 2108.672138][ T6502] device hsr_slave_1 entered promiscuous mode [ 2108.689406][ T6502] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2108.715118][ T6502] Cannot create hsr debugfs directory [ 2109.075164][ T3294] Bluetooth: hci1: command 0x040f tx timeout [ 2111.155258][ T3294] Bluetooth: hci1: command 0x0419 tx timeout [ 2113.226366][T30323] team0: Port device wlan1 removed [ 2113.325829][ T6502] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 2113.449799][ T6679] netlink: 16178 bytes leftover after parsing attributes in process `syz.5.10032'. [ 2116.473551][ T6502] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 2116.507635][ T6502] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 2116.553228][ T6502] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 2116.621140][T30323] device hsr_slave_0 left promiscuous mode [ 2116.650753][T30323] device hsr_slave_1 left promiscuous mode [ 2116.670854][T30323] device bridge_slave_0 left promiscuous mode [ 2116.684405][T30323] bridge0: port 1(bridge_slave_0) entered disabled state [ 2117.919507][T30323] device veth1_macvtap left promiscuous mode [ 2117.925783][T30323] device veth0_macvtap left promiscuous mode [ 2117.932364][T30323] device veth1_vlan left promiscuous mode [ 2117.938768][T30323] device veth0_vlan left promiscuous mode [ 2118.066450][ T6746] netlink: 16178 bytes leftover after parsing attributes in process `syz.6.10048'. [ 2118.473616][T30323] team0 (unregistering): Port device team_slave_1 removed [ 2118.511678][T30323] team0 (unregistering): Port device team_slave_0 removed [ 2118.549667][T30323] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2118.591906][T30323] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2118.820909][T30323] team0 (unregistering): Port device bridge0 removed [ 2118.849005][T30323] bond0 (unregistering): Released all slaves [ 2119.094202][ T6502] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2119.145525][T13690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2119.167929][T13690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2119.550384][ T6763] netlink: 14207 bytes leftover after parsing attributes in process `syz.5.10055'. [ 2122.167441][ T6502] 8021q: adding VLAN 0 to HW filter on device team0 [ 2122.235495][T30329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2122.244290][T30329] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2122.271517][ T6778] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.10059'. [ 2122.285229][T30329] bridge0: port 1(bridge_slave_0) entered blocking state [ 2122.292342][T30329] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2122.328079][T30329] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2122.345533][T30329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2122.362968][T30329] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2122.374343][T30329] bridge0: port 2(bridge_slave_1) entered blocking state [ 2122.381503][T30329] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2122.405932][T30329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2122.415550][T30329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2122.424362][T30329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2122.439239][T30329] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2122.500475][T30329] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2122.517144][T30329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2122.555011][T30329] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2122.570394][ T6783] cgroup: fork rejected by pids controller in /syz5 [ 2122.578257][T30329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2122.609766][T30329] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2122.631010][T30329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2122.652498][T30329] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2122.690801][ T6502] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2123.277608][ T6908] netlink: 'syz.7.10066': attribute type 10 has an invalid length. [ 2123.301497][ T6908] batman_adv: batadv0: Adding interface: netdevsim0 [ 2123.312310][ T6908] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2123.378047][ T6908] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 2123.430132][ T6910] netlink: 'syz.7.10066': attribute type 5 has an invalid length. [ 2123.449097][ T6910] netlink: 'syz.7.10066': attribute type 1 has an invalid length. [ 2123.475845][ T6910] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2123.523112][T13690] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2123.557501][T13690] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2123.591667][ T6502] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2123.604396][ T6917] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 2123.615613][ T6917] syzkaller1: linktype set to 825 [ 2124.042813][ T6935] netlink: 16178 bytes leftover after parsing attributes in process `syz.7.10072'. [ 2124.066741][T13690] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2124.222339][T13690] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2124.380830][T13690] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2124.459427][ T6957] IPv6: Can't replace route, no match found [ 2124.546531][T13690] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2124.812112][T30315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2124.841946][T30315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2124.887828][T27181] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2124.905601][T27181] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2124.941627][T30315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2124.957054][T27181] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2124.984094][T30315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2125.010554][T27181] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2125.091225][T27181] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 2125.104035][T27181] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2125.112596][ T6502] device veth0_vlan entered promiscuous mode [ 2125.143189][T30315] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2125.171770][T30315] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2125.280327][ T6502] device veth1_vlan entered promiscuous mode [ 2126.825042][ T6978] device lo entered promiscuous mode [ 2126.833288][T30321] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2126.845964][T30321] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2126.854097][T30321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2126.890490][T30321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2126.912237][ T6502] device veth0_macvtap entered promiscuous mode [ 2126.941585][ T6502] device veth1_macvtap entered promiscuous mode [ 2126.967843][ T6502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2126.982583][ T6502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2126.992803][ T6502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2127.003711][ T6502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2127.019785][ T6502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2127.030591][ T6502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2127.046336][ T6502] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2127.054185][T30329] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2127.066718][T30329] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2127.075537][T30329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2127.088110][ T6502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2127.108707][ T6502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2127.122177][ T6502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2127.139088][ T6502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2127.150118][ T6502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2127.164577][ T3294] Bluetooth: hci3: command 0x0409 tx timeout [ 2127.165764][ T6502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2127.201159][ T6502] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2127.220784][T30329] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2127.231253][T30329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2127.259348][ T6502] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2127.268463][ T6502] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2127.277502][ T6502] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2127.287095][ T6502] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2127.586392][ T6971] chnl_net:caif_netlink_parms(): no params data found [ 2127.862366][ T7003] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 2127.879406][ T7003] syzkaller1: linktype set to 825 [ 2127.986673][T30313] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2127.994624][T30313] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2128.093666][ T6971] bridge0: port 1(bridge_slave_0) entered blocking state [ 2128.111291][ T6971] bridge0: port 1(bridge_slave_0) entered disabled state [ 2128.148026][ T6971] device bridge_slave_0 entered promiscuous mode [ 2128.175373][T30323] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2128.235156][ T6971] bridge0: port 2(bridge_slave_1) entered blocking state [ 2128.242330][ T6971] bridge0: port 2(bridge_slave_1) entered disabled state [ 2128.270612][ T6971] device bridge_slave_1 entered promiscuous mode [ 2128.368411][ T4327] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2128.396169][ T4327] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2128.450622][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2128.477203][ T6971] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2128.584739][ T6971] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2128.687988][ T6971] team0: Port device team_slave_0 added [ 2128.766655][ T6971] team0: Port device team_slave_1 added [ 2128.964084][ T7036] IPv6: Can't replace route, no match found [ 2128.981651][ T6971] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2128.990425][ T6971] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2129.043837][ T6971] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2129.129411][ T6971] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2129.140644][ T6971] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2129.222341][ T6971] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2129.236965][ T3294] Bluetooth: hci3: command 0x041b tx timeout [ 2129.268540][ T7050] netlink: 60 bytes leftover after parsing attributes in process `syz.0.10093'. [ 2130.492519][ T7050] netlink: 60 bytes leftover after parsing attributes in process `syz.0.10093'. [ 2130.518988][ T7070] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 2130.526205][ T7070] syzkaller1: linktype set to 825 [ 2130.543246][ T7059] netlink: 60 bytes leftover after parsing attributes in process `syz.0.10093'. [ 2130.627149][ T6971] device hsr_slave_0 entered promiscuous mode [ 2130.646658][ T6971] device hsr_slave_1 entered promiscuous mode [ 2130.684072][ T6971] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2130.712886][ T6971] Cannot create hsr debugfs directory [ 2131.090882][T13690] device hsr_slave_0 left promiscuous mode [ 2131.111055][T13690] device hsr_slave_1 left promiscuous mode [ 2131.196224][T13690] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2131.209800][T13690] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2131.231015][T13690] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2131.255948][T13690] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2131.271687][T13690] device bridge_slave_1 left promiscuous mode [ 2131.287230][T13690] bridge0: port 2(bridge_slave_1) entered disabled state [ 2131.307663][T13690] device bridge_slave_0 left promiscuous mode [ 2131.315117][ T3294] Bluetooth: hci3: command 0x040f tx timeout [ 2131.322720][T13690] bridge0: port 1(bridge_slave_0) entered disabled state [ 2131.373494][T13690] device veth1_macvtap left promiscuous mode [ 2131.380098][T13690] device veth0_macvtap left promiscuous mode [ 2131.386607][T13690] device veth1_vlan left promiscuous mode [ 2131.392458][T13690] device veth0_vlan left promiscuous mode [ 2132.121470][T13690] team0 (unregistering): Port device team_slave_1 removed [ 2132.159411][T13690] team0 (unregistering): Port device team_slave_0 removed [ 2132.197777][T13690] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2132.234733][T13690] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2132.504356][T13690] bond0 (unregistering): Released all slaves [ 2132.973870][ T7132] netlink: 'syz.6.10109': attribute type 29 has an invalid length. [ 2133.396194][ T3294] Bluetooth: hci3: command 0x0419 tx timeout [ 2133.407338][ T7131] netlink: 'syz.0.10111': attribute type 10 has an invalid length. [ 2133.822661][ T7131] bond0: (slave netdevsim0): Releasing backup interface [ 2133.845861][ T7131] batman_adv: batadv0: Adding interface: netdevsim0 [ 2133.852509][ T7131] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2133.911754][ T7131] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 2133.923117][ T7132] netlink: 'syz.6.10109': attribute type 29 has an invalid length. [ 2135.843475][ T7213] bond0: (slave dummy0): Error: Slave device does not support XDP [ 2135.897911][ T6971] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 2135.917823][ T7213] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.10128'. [ 2135.939291][ T6971] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 2135.968994][ T6971] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 2136.056138][ T6971] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 2136.373685][ T6971] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2136.433150][T30315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2136.444618][T30315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2136.490838][ T6971] 8021q: adding VLAN 0 to HW filter on device team0 [ 2136.530597][T13690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2136.540612][T13690] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2136.560175][T13690] bridge0: port 1(bridge_slave_0) entered blocking state [ 2136.567348][T13690] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2136.625232][T13690] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2136.646693][T13690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2136.671840][T13690] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2136.713619][T13690] bridge0: port 2(bridge_slave_1) entered blocking state [ 2136.720781][T13690] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2136.752331][T13690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2136.786309][T13690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2136.843287][T13690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2136.867969][T13690] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2136.904406][T13690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2136.924142][T13690] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2136.960313][T13690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2137.002447][T13690] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2137.040232][T13690] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2137.072960][ T7269] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2137.080254][ T7269] IPv6: NLM_F_CREATE should be set when creating new route [ 2137.087579][ T7269] IPv6: NLM_F_CREATE should be set when creating new route [ 2137.094826][ T7269] IPv6: NLM_F_CREATE should be set when creating new route [ 2137.148358][T30329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2137.171474][T30329] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2137.191711][ T6971] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2137.460079][ T7283] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10144'. [ 2137.903114][T30315] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2137.913734][T30315] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2137.939522][ T6971] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2138.971803][T30321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2138.987718][T30321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2139.034595][T30321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2139.063668][T30321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2139.099416][ T6971] device veth0_vlan entered promiscuous mode [ 2139.109402][T30321] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2139.127591][T30321] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2139.153092][ T6971] device veth1_vlan entered promiscuous mode [ 2139.230726][T30321] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2139.239985][T30321] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2139.263163][T30321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2139.289680][T30321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2139.314875][ T6971] device veth0_macvtap entered promiscuous mode [ 2139.338604][ T6971] device veth1_macvtap entered promiscuous mode [ 2139.398261][ T6971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2139.429418][ T6971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2139.457492][ T6971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2139.482113][ T6971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2139.512700][ T6971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2139.543946][ T6971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2139.570780][ T6971] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2139.593965][T30321] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2139.611788][T30321] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2139.643437][T30321] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2139.662876][T30321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2139.686603][ T6971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2139.712274][ T6971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2139.743066][ T6971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2139.773275][ T6971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2139.804277][ T6971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2139.828444][ T6971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2139.849286][ T6971] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2139.859806][T30315] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2139.874136][T30315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2139.887020][ T6971] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2139.901916][ T6971] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2139.911406][ T6971] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2139.926481][ T6971] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2140.267344][T13690] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2140.281951][T13690] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2140.326260][T13690] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2140.403598][T30321] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2140.428783][T30321] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2140.440922][T13690] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2141.368964][ T7362] netlink: 144 bytes leftover after parsing attributes in process `syz.0.10154'. [ 2141.472443][ T7362] team0: Port device team_slave_0 removed [ 2141.492490][ T7362] net_ratelimit: 3544 callbacks suppressed [ 2141.492505][ T7362] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 2141.582727][ T7360] netlink: 132 bytes leftover after parsing attributes in process `syz.7.10155'. [ 2141.781063][ T7368] netlink: 'syz.5.10157': attribute type 11 has an invalid length. [ 2141.845530][T27181] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2141.854730][T27181] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2141.865589][T27181] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2141.883329][T27181] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2141.891160][T27181] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 2141.900287][T27181] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2142.221440][ T7392] netlink: 'syz.0.10164': attribute type 2 has an invalid length. [ 2142.229632][ T7392] netlink: 132 bytes leftover after parsing attributes in process `syz.0.10164'. [ 2142.399273][ T7370] chnl_net:caif_netlink_parms(): no params data found [ 2142.717473][ T7370] bridge0: port 1(bridge_slave_0) entered blocking state [ 2142.724700][ T7370] bridge0: port 1(bridge_slave_0) entered disabled state [ 2142.762890][ T7409] netlink: 60 bytes leftover after parsing attributes in process `syz.8.10167'. [ 2142.788670][ T7370] device bridge_slave_0 entered promiscuous mode [ 2142.836105][ T7370] bridge0: port 2(bridge_slave_1) entered blocking state [ 2142.890339][ T7370] bridge0: port 2(bridge_slave_1) entered disabled state [ 2142.929360][ T7370] device bridge_slave_1 entered promiscuous mode [ 2143.013014][ T7409] netlink: 60 bytes leftover after parsing attributes in process `syz.8.10167'. [ 2143.048508][ T7416] netlink: 60 bytes leftover after parsing attributes in process `syz.8.10167'. [ 2143.141727][ T7418] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 2143.147815][ T7418] syzkaller1: linktype set to 825 [ 2143.198485][ T7370] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2143.955597][T27181] Bluetooth: hci4: command 0x0409 tx timeout [ 2144.052543][ T7370] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2146.035111][T27181] Bluetooth: hci4: command 0x041b tx timeout [ 2147.963715][ T7436] netlink: 60 bytes leftover after parsing attributes in process `syz.0.10174'. [ 2147.981431][ T7370] team0: Port device team_slave_0 added [ 2148.037174][T30329] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2148.096746][ T7370] team0: Port device team_slave_1 added [ 2148.121610][T27181] Bluetooth: hci4: command 0x040f tx timeout [ 2148.160957][ T7370] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2148.199992][ T7370] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2148.301680][ T7370] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2148.324776][ T7452] netlink: 'syz.5.10178': attribute type 10 has an invalid length. [ 2148.412128][ T7452] team0: Port device geneve1 added [ 2148.503551][ T7459] netlink: 'syz.7.10182': attribute type 2 has an invalid length. [ 2148.524248][ T7459] netlink: 'syz.7.10182': attribute type 1 has an invalid length. [ 2148.563127][T30329] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2148.596887][ T7370] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2148.611957][ T7370] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2148.755139][ T7370] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2148.924416][T30329] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2149.039922][ T7469] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 2149.070076][ T7469] syzkaller1: linktype set to 825 [ 2149.157070][T30329] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2149.240855][ T7370] device hsr_slave_0 entered promiscuous mode [ 2149.274717][ T7370] device hsr_slave_1 entered promiscuous mode [ 2149.309886][ T7370] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2149.351548][ T7370] Cannot create hsr debugfs directory [ 2149.554097][T30329] device 0 left promiscuous mode [ 2149.658897][T30329] device 0 left promiscuous mode [ 2150.033547][ T7493] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.10190'. [ 2150.142579][ T7496] netlink: 'syz.0.10190': attribute type 10 has an invalid length. [ 2150.161614][ T7496] netlink: 40 bytes leftover after parsing attributes in process `syz.0.10190'. [ 2150.195203][T27181] Bluetooth: hci4: command 0x0419 tx timeout [ 2150.216689][ T7496] bridge0: port 2(veth0_vlan) entered blocking state [ 2150.224327][ T7496] bridge0: port 2(veth0_vlan) entered disabled state [ 2150.260313][ T7496] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 2150.486016][ T7507] FAULT_INJECTION: forcing a failure. [ 2150.486016][ T7507] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2150.539050][ T7507] CPU: 0 PID: 7507 Comm: syz.0.10195 Not tainted syzkaller #0 [ 2150.546595][ T7507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2150.556691][ T7507] Call Trace: [ 2150.560011][ T7507] [ 2150.562990][ T7507] dump_stack_lvl+0x188/0x24e [ 2150.567737][ T7507] ? show_regs_print_info+0x12/0x12 [ 2150.572988][ T7507] ? load_image+0x410/0x410 [ 2150.577565][ T7507] ? __lock_acquire+0x7c40/0x7c40 [ 2150.582690][ T7507] should_fail_ex+0x390/0x4c0 [ 2150.587418][ T7507] _copy_from_user+0x2c/0x170 [ 2150.592141][ T7507] ___sys_sendmsg+0x1c3/0x360 [ 2150.596880][ T7507] ? __sys_sendmsg+0x2a0/0x2a0 [ 2150.601715][ T7507] ? __lock_acquire+0x7c40/0x7c40 [ 2150.606804][ T7507] __se_sys_sendmsg+0x1c3/0x2b0 [ 2150.611713][ T7507] ? __x64_sys_sendmsg+0x80/0x80 [ 2150.616698][ T7507] ? lockdep_hardirqs_on+0x94/0x140 [ 2150.621933][ T7507] do_syscall_64+0x4c/0xa0 [ 2150.626412][ T7507] ? clear_bhb_loop+0x60/0xb0 [ 2150.631118][ T7507] ? clear_bhb_loop+0x60/0xb0 [ 2150.635822][ T7507] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2150.641753][ T7507] RIP: 0033:0x7f898a59e0d9 [ 2150.646196][ T7507] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2150.665824][ T7507] RSP: 002b:00007f898b4f1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2150.674260][ T7507] RAX: ffffffffffffffda RBX: 00007f898a825fa0 RCX: 00007f898a59e0d9 [ 2150.682255][ T7507] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000004 [ 2150.690259][ T7507] RBP: 00007f898b4f1090 R08: 0000000000000000 R09: 0000000000000000 [ 2150.698259][ T7507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2150.706251][ T7507] R13: 00007f898a826038 R14: 00007f898a825fa0 R15: 00007ffc5b8782d8 [ 2150.714279][ T7507] [ 2151.281876][ T7514] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 2151.295712][ T7514] syzkaller1: linktype set to 825 [ 2151.395476][ T7530] netlink: 'syz.0.10197': attribute type 3 has an invalid length. [ 2151.403366][ T7530] netlink: 132 bytes leftover after parsing attributes in process `syz.0.10197'. [ 2152.041119][ T7538] netlink: 'syz.5.10200': attribute type 2 has an invalid length. [ 2152.061948][ T7538] netlink: 'syz.5.10200': attribute type 4 has an invalid length. [ 2152.095587][ T7538] netlink: 132 bytes leftover after parsing attributes in process `syz.5.10200'. [ 2152.282088][ T7548] netlink: 4068 bytes leftover after parsing attributes in process `syz.5.10200'. [ 2152.592399][T30329] team0: Port device wlan1 removed [ 2152.634306][ T7370] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 2152.665337][ T7370] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 2152.950481][ T7370] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 2152.978570][ T7370] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 2153.136497][T30329] bridge0: port 3(bond0) entered disabled state [ 2153.171997][T30329] device bridge_slave_1 left promiscuous mode [ 2153.184687][T30329] bridge0: port 2(bridge_slave_1) entered disabled state [ 2153.222358][T30329] device bridge_slave_0 left promiscuous mode [ 2153.242449][T30329] bridge0: port 1(bridge_slave_0) entered disabled state [ 2153.269781][ T7582] FAULT_INJECTION: forcing a failure. [ 2153.269781][ T7582] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2153.324180][ T7582] CPU: 0 PID: 7582 Comm: syz.0.10209 Not tainted syzkaller #0 [ 2153.331697][ T7582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2153.341794][ T7582] Call Trace: [ 2153.345115][ T7582] [ 2153.348087][ T7582] dump_stack_lvl+0x188/0x24e [ 2153.352823][ T7582] ? show_regs_print_info+0x12/0x12 [ 2153.358082][ T7582] ? load_image+0x410/0x410 [ 2153.362655][ T7582] ? __lock_acquire+0x7c40/0x7c40 [ 2153.367740][ T7582] should_fail_ex+0x390/0x4c0 [ 2153.372479][ T7582] _copy_from_user+0x2c/0x170 [ 2153.377204][ T7582] iovec_from_user+0x143/0x360 [ 2153.382023][ T7582] __import_iovec+0x6c/0x510 [ 2153.386690][ T7582] import_iovec+0x6f/0xa0 [ 2153.391077][ T7582] ___sys_sendmsg+0x252/0x360 [ 2153.395813][ T7582] ? __sys_sendmsg+0x2a0/0x2a0 [ 2153.400669][ T7582] ? __lock_acquire+0x7c40/0x7c40 [ 2153.405788][ T7582] __se_sys_sendmsg+0x1c3/0x2b0 [ 2153.410692][ T7582] ? __x64_sys_sendmsg+0x80/0x80 [ 2153.415715][ T7582] ? lockdep_hardirqs_on+0x94/0x140 [ 2153.420962][ T7582] do_syscall_64+0x4c/0xa0 [ 2153.425423][ T7582] ? clear_bhb_loop+0x60/0xb0 [ 2153.430144][ T7582] ? clear_bhb_loop+0x60/0xb0 [ 2153.434871][ T7582] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2153.440808][ T7582] RIP: 0033:0x7f898a59e0d9 [ 2153.445259][ T7582] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2153.464905][ T7582] RSP: 002b:00007f898b4f1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2153.473361][ T7582] RAX: ffffffffffffffda RBX: 00007f898a825fa0 RCX: 00007f898a59e0d9 [ 2153.481369][ T7582] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000004 [ 2153.489381][ T7582] RBP: 00007f898b4f1090 R08: 0000000000000000 R09: 0000000000000000 [ 2153.497391][ T7582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2153.505401][ T7582] R13: 00007f898a826038 R14: 00007f898a825fa0 R15: 00007ffc5b8782d8 [ 2153.513440][ T7582] [ 2153.519931][T30329] device veth1_macvtap left promiscuous mode [ 2153.528730][T30329] device veth0_macvtap left promiscuous mode [ 2153.545819][T30329] device veth1_vlan left promiscuous mode [ 2153.558549][T30329] device veth0_vlan left promiscuous mode [ 2154.387139][T30329] team0 (unregistering): Port device team_slave_1 removed [ 2154.426046][T30329] team0 (unregistering): Port device team_slave_0 removed [ 2154.464721][T30329] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2154.473560][T30329] device bond_slave_1 left promiscuous mode [ 2154.509735][T30329] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2154.518989][T30329] device bond_slave_0 left promiscuous mode [ 2154.780420][T30329] bond0 (unregistering): Released all slaves [ 2154.874216][ T7575] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 2154.883413][ T7575] syzkaller1: linktype set to 825 [ 2155.021644][ T7370] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2155.051876][T30313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2155.098690][T30313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2155.138646][ T7370] 8021q: adding VLAN 0 to HW filter on device team0 [ 2155.180390][T30313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2155.196282][T30313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2155.228838][T30313] bridge0: port 1(bridge_slave_0) entered blocking state [ 2155.236081][T30313] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2155.299824][T30313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2155.348038][T30313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2155.417405][T30313] bridge0: port 2(bridge_slave_1) entered blocking state [ 2155.424661][T30313] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2155.500837][T30313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2155.598818][T30313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2155.643060][T30313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2155.705660][T30313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2155.783078][T30313] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2155.833170][T30313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2155.870655][T30313] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2155.933454][T30313] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2155.972694][T30313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2155.999503][T30313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2156.010455][T30313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2156.040066][T30313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2156.065472][ T7370] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2156.309537][ T7620] FAULT_INJECTION: forcing a failure. [ 2156.309537][ T7620] name failslab, interval 1, probability 0, space 0, times 0 [ 2156.347367][ T7620] CPU: 1 PID: 7620 Comm: syz.8.10221 Not tainted syzkaller #0 [ 2156.354970][ T7620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2156.365056][ T7620] Call Trace: [ 2156.368370][ T7620] [ 2156.371387][ T7620] dump_stack_lvl+0x188/0x24e [ 2156.376124][ T7620] ? show_regs_print_info+0x12/0x12 [ 2156.381378][ T7620] ? load_image+0x410/0x410 [ 2156.385948][ T7620] ? __might_sleep+0xd0/0xd0 [ 2156.390583][ T7620] ? __lock_acquire+0x7c40/0x7c40 [ 2156.395667][ T7620] should_fail_ex+0x390/0x4c0 [ 2156.400432][ T7620] should_failslab+0x5/0x20 [ 2156.404972][ T7620] slab_pre_alloc_hook+0x59/0x300 [ 2156.410054][ T7620] kmem_cache_alloc_node+0x5a/0x310 [ 2156.415306][ T7620] ? __alloc_skb+0xf9/0x7d0 [ 2156.419880][ T7620] __alloc_skb+0xf9/0x7d0 [ 2156.424266][ T7620] netlink_sendmsg+0x654/0xbd0 [ 2156.429160][ T7620] ? netlink_getsockopt+0x550/0x550 [ 2156.434423][ T7620] ? apparmor_socket_sendmsg+0x8a/0x330 [ 2156.440026][ T7620] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2156.445358][ T7620] ? security_socket_sendmsg+0x7c/0xa0 [ 2156.450859][ T7620] ? netlink_getsockopt+0x550/0x550 [ 2156.456129][ T7620] ____sys_sendmsg+0x5ed/0x9a0 [ 2156.460939][ T7620] ? __sys_sendmsg_sock+0x30/0x30 [ 2156.465993][ T7620] ? __import_iovec+0x306/0x510 [ 2156.470881][ T7620] ? import_iovec+0x6f/0xa0 [ 2156.475430][ T7620] ___sys_sendmsg+0x2a2/0x360 [ 2156.480146][ T7620] ? __sys_sendmsg+0x2a0/0x2a0 [ 2156.484978][ T7620] ? trace_call_bpf+0xbf/0x6b0 [ 2156.489891][ T7620] __se_sys_sendmsg+0x1c3/0x2b0 [ 2156.494777][ T7620] ? perf_trace_preemptirq_template+0x268/0x320 [ 2156.501059][ T7620] ? __x64_sys_sendmsg+0x80/0x80 [ 2156.506044][ T7620] ? lockdep_hardirqs_on+0x94/0x140 [ 2156.511277][ T7620] do_syscall_64+0x4c/0xa0 [ 2156.515728][ T7620] ? clear_bhb_loop+0x60/0xb0 [ 2156.520434][ T7620] ? clear_bhb_loop+0x60/0xb0 [ 2156.525142][ T7620] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2156.531079][ T7620] RIP: 0033:0x7fe2af59e0d9 [ 2156.535515][ T7620] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2156.555146][ T7620] RSP: 002b:00007fe2b048d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2156.563582][ T7620] RAX: ffffffffffffffda RBX: 00007fe2af825fa0 RCX: 00007fe2af59e0d9 [ 2156.571572][ T7620] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000004 [ 2156.579561][ T7620] RBP: 00007fe2b048d090 R08: 0000000000000000 R09: 0000000000000000 [ 2156.587552][ T7620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2156.595549][ T7620] R13: 00007fe2af826038 R14: 00007fe2af825fa0 R15: 00007ffc10d65aa8 [ 2156.603569][ T7620] [ 2156.939478][ T7626] device syzkaller0 entered promiscuous mode [ 2159.063199][ T7370] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2159.089268][T13690] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2159.195231][T13690] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2159.901576][ T7648] netlink: 1047 bytes leftover after parsing attributes in process `syz.5.10229'. [ 2159.953973][ T7648] bridge_slave_1: default FDB implementation only supports local addresses [ 2160.099126][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 2160.105590][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 2160.400384][ T7643] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 2160.415091][ T7643] syzkaller1: linktype set to 825 [ 2160.712913][T27348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2160.723450][T27348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2160.742287][ T7370] device veth0_vlan entered promiscuous mode [ 2160.764076][ T7666] device syzkaller0 entered promiscuous mode [ 2160.771912][T27348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2160.788697][T27348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2160.805243][ T7370] device veth1_vlan entered promiscuous mode [ 2160.819511][T27348] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2160.828417][T27348] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2160.846266][T27348] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2160.949592][T30318] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2160.958445][T30318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2160.967635][T30318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2160.980228][ T7370] device veth0_macvtap entered promiscuous mode [ 2161.021517][ T7675] netlink: 128 bytes leftover after parsing attributes in process `syz.8.10237'. [ 2161.048756][ T7675] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2161.077292][ T7675] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2161.129081][ T7370] device veth1_macvtap entered promiscuous mode [ 2161.190519][ T7370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2161.239706][ T7370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2161.252184][ T7370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2161.267042][ T7370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2161.277129][ T7370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2161.288992][ T7370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2161.299149][ T7370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2161.318038][ T7370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2161.330510][ T7370] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2161.348231][ T7685] netlink: 'syz.5.10240': attribute type 21 has an invalid length. [ 2161.370588][ T7685] netlink: 164 bytes leftover after parsing attributes in process `syz.5.10240'. [ 2161.403995][T30318] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2161.414057][T30318] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2161.434480][T30318] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2161.455843][T30318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2161.479875][ T7370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2161.509194][ T7370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2161.535007][ T7370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2161.555050][ T7370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2161.571400][ T7370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2161.594966][ T7370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2161.625772][ T7370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2161.645573][ T7370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2161.662705][ T7370] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2161.679436][T30318] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2161.692018][T30318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2161.740951][ T7370] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2161.766732][ T7370] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2161.798060][ T7370] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2161.827919][ T7370] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2162.077807][ T7695] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 2162.136977][ T7695] syzkaller1: linktype set to 825 [ 2162.177629][T30321] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2162.209922][T30321] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2162.269308][T30315] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2162.320076][T13690] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2162.377054][T13690] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2162.440737][T13690] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2162.539049][ T7704] netlink: 'syz.8.10244': attribute type 1 has an invalid length. [ 2162.582025][ T7704] netlink: 157116 bytes leftover after parsing attributes in process `syz.8.10244'. [ 2162.665945][ T7704] netlink: 65047 bytes leftover after parsing attributes in process `syz.8.10244'. [ 2162.822510][ T7711] device syzkaller0 entered promiscuous mode [ 2166.285866][ T7743] FAULT_INJECTION: forcing a failure. [ 2166.285866][ T7743] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2166.375108][ T7743] CPU: 0 PID: 7743 Comm: syz.6.10257 Not tainted syzkaller #0 [ 2166.382710][ T7743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2166.392797][ T7743] Call Trace: [ 2166.396093][ T7743] [ 2166.399041][ T7743] dump_stack_lvl+0x188/0x24e [ 2166.403747][ T7743] ? show_regs_print_info+0x12/0x12 [ 2166.408969][ T7743] ? load_image+0x410/0x410 [ 2166.413494][ T7743] ? __might_fault+0xa6/0x120 [ 2166.418238][ T7743] should_fail_ex+0x390/0x4c0 [ 2166.422982][ T7743] copyin+0x1b/0x120 [ 2166.426905][ T7743] _copy_from_iter+0x447/0x1130 [ 2166.431793][ T7743] ? copyout_mc+0x110/0x110 [ 2166.436327][ T7743] ? __virt_addr_valid+0x188/0x540 [ 2166.441519][ T7743] ? __virt_addr_valid+0x188/0x540 [ 2166.446652][ T7743] ? __virt_addr_valid+0x467/0x540 [ 2166.451798][ T7743] ? __phys_addr_symbol+0x2b/0x70 [ 2166.456842][ T7743] ? __check_object_size+0x4f6/0xa70 [ 2166.462152][ T7743] netlink_sendmsg+0x755/0xbd0 [ 2166.466952][ T7743] ? netlink_getsockopt+0x550/0x550 [ 2166.472187][ T7743] ? apparmor_socket_sendmsg+0x8a/0x330 [ 2166.477770][ T7743] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2166.483075][ T7743] ? security_socket_sendmsg+0x7c/0xa0 [ 2166.488578][ T7743] ? netlink_getsockopt+0x550/0x550 [ 2166.493804][ T7743] ____sys_sendmsg+0x5ed/0x9a0 [ 2166.498606][ T7743] ? __sys_sendmsg_sock+0x30/0x30 [ 2166.503679][ T7743] ? __import_iovec+0x306/0x510 [ 2166.508571][ T7743] ? import_iovec+0x6f/0xa0 [ 2166.513106][ T7743] ___sys_sendmsg+0x2a2/0x360 [ 2166.517826][ T7743] ? __sys_sendmsg+0x2a0/0x2a0 [ 2166.522657][ T7743] ? __lock_acquire+0x7c40/0x7c40 [ 2166.527734][ T7743] __se_sys_sendmsg+0x1c3/0x2b0 [ 2166.532605][ T7743] ? ct_nmi_exit+0x145/0x1c0 [ 2166.537215][ T7743] ? __x64_sys_sendmsg+0x80/0x80 [ 2166.542198][ T7743] ? lockdep_hardirqs_on+0x94/0x140 [ 2166.547424][ T7743] do_syscall_64+0x4c/0xa0 [ 2166.551898][ T7743] ? clear_bhb_loop+0x60/0xb0 [ 2166.556596][ T7743] ? clear_bhb_loop+0x60/0xb0 [ 2166.561306][ T7743] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2166.567225][ T7743] RIP: 0033:0x7fdc5119e0d9 [ 2166.571657][ T7743] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2166.591278][ T7743] RSP: 002b:00007fdc520a6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2166.599711][ T7743] RAX: ffffffffffffffda RBX: 00007fdc51425fa0 RCX: 00007fdc5119e0d9 [ 2166.607698][ T7743] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000004 [ 2166.615690][ T7743] RBP: 00007fdc520a6090 R08: 0000000000000000 R09: 0000000000000000 [ 2166.623683][ T7743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2166.631666][ T7743] R13: 00007fdc51426038 R14: 00007fdc51425fa0 R15: 00007ffc6ec00598 [ 2166.639674][ T7743] [ 2167.028284][ T7755] netlink: 144 bytes leftover after parsing attributes in process `syz.7.10258'. [ 2167.187285][ T7754] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 2167.193253][ T7754] syzkaller1: linktype set to 825 [ 2167.825234][ T7764] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.10260'. [ 2169.284759][ T7783] device syzkaller0 entered promiscuous mode [ 2170.917917][ T7825] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 2170.923912][ T7825] syzkaller1: linktype set to 825 [ 2171.073729][ T7839] FAULT_INJECTION: forcing a failure. [ 2171.073729][ T7839] name failslab, interval 1, probability 0, space 0, times 0 [ 2171.088479][ T7839] CPU: 0 PID: 7839 Comm: syz.0.10277 Not tainted syzkaller #0 [ 2171.095995][ T7839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2171.106077][ T7839] Call Trace: [ 2171.109378][ T7839] [ 2171.112326][ T7839] dump_stack_lvl+0x188/0x24e [ 2171.117030][ T7839] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 2171.122780][ T7839] ? show_regs_print_info+0x12/0x12 [ 2171.128005][ T7839] ? load_image+0x410/0x410 [ 2171.132562][ T7839] ? verify_lock_unused+0x140/0x140 [ 2171.137792][ T7839] ? perf_trace_lock_acquire+0x342/0x3f0 [ 2171.143451][ T7839] should_fail_ex+0x390/0x4c0 [ 2171.148164][ T7839] should_failslab+0x5/0x20 [ 2171.152717][ T7839] slab_pre_alloc_hook+0x59/0x300 [ 2171.157766][ T7839] kmem_cache_alloc+0x56/0x2f0 [ 2171.162576][ T7839] ? skb_clone+0x1e7/0x370 [ 2171.167026][ T7839] skb_clone+0x1e7/0x370 [ 2171.171300][ T7839] __netlink_deliver_tap+0x3e4/0x7e0 [ 2171.176640][ T7839] ? netlink_deliver_tap+0x2e/0x1b0 [ 2171.181867][ T7839] netlink_deliver_tap+0x19c/0x1b0 [ 2171.187027][ T7839] netlink_unicast+0x777/0x920 [ 2171.191849][ T7839] netlink_sendmsg+0x8ad/0xbd0 [ 2171.196649][ T7839] ? netlink_getsockopt+0x550/0x550 [ 2171.201907][ T7839] ? apparmor_socket_sendmsg+0x8a/0x330 [ 2171.207477][ T7839] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2171.212778][ T7839] ? security_socket_sendmsg+0x7c/0xa0 [ 2171.218256][ T7839] ? netlink_getsockopt+0x550/0x550 [ 2171.223485][ T7839] ____sys_sendmsg+0x5ed/0x9a0 [ 2171.228285][ T7839] ? __sys_sendmsg_sock+0x30/0x30 [ 2171.233326][ T7839] ? __import_iovec+0x306/0x510 [ 2171.238215][ T7839] ? import_iovec+0x6f/0xa0 [ 2171.242747][ T7839] ___sys_sendmsg+0x2a2/0x360 [ 2171.247466][ T7839] ? __sys_sendmsg+0x2a0/0x2a0 [ 2171.252280][ T7839] ? __lock_acquire+0x7c40/0x7c40 [ 2171.257361][ T7839] __se_sys_sendmsg+0x1c3/0x2b0 [ 2171.262234][ T7839] ? __x64_sys_sendmsg+0x80/0x80 [ 2171.267237][ T7839] ? lockdep_hardirqs_on+0x94/0x140 [ 2171.272457][ T7839] do_syscall_64+0x4c/0xa0 [ 2171.276902][ T7839] ? clear_bhb_loop+0x60/0xb0 [ 2171.281613][ T7839] ? clear_bhb_loop+0x60/0xb0 [ 2171.286310][ T7839] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2171.292231][ T7839] RIP: 0033:0x7f898a59e0d9 [ 2171.296672][ T7839] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2171.316308][ T7839] RSP: 002b:00007f898b4f1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2171.324752][ T7839] RAX: ffffffffffffffda RBX: 00007f898a825fa0 RCX: 00007f898a59e0d9 [ 2171.332750][ T7839] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000004 [ 2171.340764][ T7839] RBP: 00007f898b4f1090 R08: 0000000000000000 R09: 0000000000000000 [ 2171.348787][ T7839] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2171.356778][ T7839] R13: 00007f898a826038 R14: 00007f898a825fa0 R15: 00007ffc5b8782d8 [ 2171.364813][ T7839] [ 2171.585094][ T7846] device syzkaller0 entered promiscuous mode [ 2173.755434][ T7860] netlink: 10 bytes leftover after parsing attributes in process `syz.7.10284'. [ 2174.991511][ T7880] FAULT_INJECTION: forcing a failure. [ 2174.991511][ T7880] name failslab, interval 1, probability 0, space 0, times 0 [ 2175.013158][ T7880] CPU: 0 PID: 7880 Comm: syz.8.10291 Not tainted syzkaller #0 [ 2175.020669][ T7880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2175.030754][ T7880] Call Trace: [ 2175.034067][ T7880] [ 2175.037029][ T7880] dump_stack_lvl+0x188/0x24e [ 2175.041765][ T7880] ? show_regs_print_info+0x12/0x12 [ 2175.047021][ T7880] ? load_image+0x410/0x410 [ 2175.051570][ T7880] ? __might_sleep+0xd0/0xd0 [ 2175.056197][ T7880] ? __lock_acquire+0x7c40/0x7c40 [ 2175.061317][ T7880] ? inet_diag_dump_done+0x80/0x80 [ 2175.066564][ T7880] should_fail_ex+0x390/0x4c0 [ 2175.071346][ T7880] should_failslab+0x5/0x20 [ 2175.075889][ T7880] slab_pre_alloc_hook+0x59/0x300 [ 2175.080969][ T7880] kmem_cache_alloc_node+0x5a/0x310 [ 2175.086220][ T7880] ? __alloc_skb+0xf9/0x7d0 [ 2175.090790][ T7880] __alloc_skb+0xf9/0x7d0 [ 2175.095173][ T7880] netlink_ack+0x373/0x1160 [ 2175.099810][ T7880] ? __inet_diag_dump+0x380/0x380 [ 2175.104897][ T7880] ? __lock_acquire+0x7c40/0x7c40 [ 2175.109990][ T7880] ? trace_raw_output_contention_end+0xd0/0xd0 [ 2175.116185][ T7880] ? netlink_dump+0xcd0/0xcd0 [ 2175.120960][ T7880] ? __inet_diag_dump+0x380/0x380 [ 2175.126020][ T7880] ? sock_diag_rcv_msg+0x3e8/0x5e0 [ 2175.131173][ T7880] netlink_rcv_skb+0x26d/0x440 [ 2175.135989][ T7880] ? sock_diag_bind+0xa0/0xa0 [ 2175.140751][ T7880] ? netlink_ack+0x1160/0x1160 [ 2175.145626][ T7880] ? netlink_deliver_tap+0x2e/0x1b0 [ 2175.150881][ T7880] sock_diag_rcv+0x26/0x40 [ 2175.155334][ T7880] netlink_unicast+0x7ad/0x920 [ 2175.160170][ T7880] netlink_sendmsg+0x8ad/0xbd0 [ 2175.165050][ T7880] ? netlink_getsockopt+0x550/0x550 [ 2175.170324][ T7880] ? apparmor_socket_sendmsg+0x8a/0x330 [ 2175.173001][ T7885] netlink: 63503 bytes leftover after parsing attributes in process `syz.7.10293'. [ 2175.175908][ T7880] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2175.190547][ T7880] ? security_socket_sendmsg+0x7c/0xa0 [ 2175.196045][ T7880] ? netlink_getsockopt+0x550/0x550 [ 2175.200517][ T7882] netlink: 'syz.0.10292': attribute type 6 has an invalid length. [ 2175.201278][ T7880] ____sys_sendmsg+0x5ed/0x9a0 [ 2175.209445][ T7882] netlink: 140 bytes leftover after parsing attributes in process `syz.0.10292'. [ 2175.213846][ T7880] ? __sys_sendmsg_sock+0x30/0x30 [ 2175.228036][ T7880] ? __import_iovec+0x306/0x510 [ 2175.232955][ T7880] ? import_iovec+0x6f/0xa0 [ 2175.236093][ T7882] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.10292'. [ 2175.237508][ T7880] ___sys_sendmsg+0x2a2/0x360 [ 2175.247576][ T7882] netlink: 6320 bytes leftover after parsing attributes in process `syz.0.10292'. [ 2175.251460][ T7880] ? __sys_sendmsg+0x2a0/0x2a0 [ 2175.264646][ T7882] netlink: 'syz.0.10292': attribute type 28 has an invalid length. [ 2175.265513][ T7880] ? __lock_acquire+0x7c40/0x7c40 [ 2175.265593][ T7880] __se_sys_sendmsg+0x1c3/0x2b0 [ 2175.275781][ T7882] netlink: 'syz.0.10292': attribute type 3 has an invalid length. [ 2175.278502][ T7880] ? ct_nmi_exit+0x145/0x1c0 [ 2175.278535][ T7880] ? __x64_sys_sendmsg+0x80/0x80 [ 2175.283489][ T7882] netlink: 132 bytes leftover after parsing attributes in process `syz.0.10292'. [ 2175.291219][ T7880] ? lockdep_hardirqs_on+0x94/0x140 [ 2175.291257][ T7880] do_syscall_64+0x4c/0xa0 [ 2175.319706][ T7880] ? clear_bhb_loop+0x60/0xb0 [ 2175.324422][ T7880] ? clear_bhb_loop+0x60/0xb0 [ 2175.329143][ T7880] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2175.335094][ T7880] RIP: 0033:0x7fe2af59e0d9 [ 2175.339543][ T7880] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2175.359215][ T7880] RSP: 002b:00007fe2b048d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2175.367685][ T7880] RAX: ffffffffffffffda RBX: 00007fe2af825fa0 RCX: 00007fe2af59e0d9 [ 2175.375689][ T7880] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000004 [ 2175.383695][ T7880] RBP: 00007fe2b048d090 R08: 0000000000000000 R09: 0000000000000000 [ 2175.391753][ T7880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2175.399771][ T7880] R13: 00007fe2af826038 R14: 00007fe2af825fa0 R15: 00007ffc10d65aa8 [ 2175.407817][ T7880] [ 2175.694221][ T7897] device syzkaller0 entered promiscuous mode [ 2176.030170][ T7907] netlink: 'syz.6.10299': attribute type 39 has an invalid length. [ 2176.883286][ T7935] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 2176.950914][ T7935] syzkaller1: linktype set to 825 [ 2179.639302][ T7959] FAULT_INJECTION: forcing a failure. [ 2179.639302][ T7959] name failslab, interval 1, probability 0, space 0, times 0 [ 2179.659391][ T7959] CPU: 0 PID: 7959 Comm: syz.7.10311 Not tainted syzkaller #0 [ 2179.666995][ T7959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2179.677087][ T7959] Call Trace: [ 2179.680416][ T7959] [ 2179.683382][ T7959] dump_stack_lvl+0x188/0x24e [ 2179.688144][ T7959] ? show_regs_print_info+0x12/0x12 [ 2179.693396][ T7959] ? load_image+0x410/0x410 [ 2179.697957][ T7959] ? __might_sleep+0xd0/0xd0 [ 2179.702590][ T7959] ? __lock_acquire+0x7c40/0x7c40 [ 2179.707666][ T7959] ? inet_diag_dump_done+0x80/0x80 [ 2179.712842][ T7959] should_fail_ex+0x390/0x4c0 [ 2179.717618][ T7959] should_failslab+0x5/0x20 [ 2179.722160][ T7959] slab_pre_alloc_hook+0x59/0x300 [ 2179.727233][ T7959] kmem_cache_alloc_node+0x5a/0x310 [ 2179.732466][ T7959] ? __alloc_skb+0xf9/0x7d0 [ 2179.737028][ T7959] __alloc_skb+0xf9/0x7d0 [ 2179.741419][ T7959] netlink_ack+0x373/0x1160 [ 2179.745976][ T7959] ? __inet_diag_dump+0x380/0x380 [ 2179.751095][ T7959] ? __lock_acquire+0x7c40/0x7c40 [ 2179.756167][ T7959] ? trace_raw_output_contention_end+0xd0/0xd0 [ 2179.762364][ T7959] ? netlink_dump+0xcd0/0xcd0 [ 2179.767106][ T7959] ? __inet_diag_dump+0x380/0x380 [ 2179.772188][ T7959] ? sock_diag_rcv_msg+0x3e8/0x5e0 [ 2179.777343][ T7959] netlink_rcv_skb+0x26d/0x440 [ 2179.782153][ T7959] ? sock_diag_bind+0xa0/0xa0 [ 2179.786891][ T7959] ? netlink_ack+0x1160/0x1160 [ 2179.791719][ T7959] ? netlink_deliver_tap+0x2e/0x1b0 [ 2179.796970][ T7959] sock_diag_rcv+0x26/0x40 [ 2179.801417][ T7959] netlink_unicast+0x7ad/0x920 [ 2179.806294][ T7959] netlink_sendmsg+0x8ad/0xbd0 [ 2179.809905][ T7967] device syzkaller0 entered promiscuous mode [ 2179.811102][ T7959] ? netlink_getsockopt+0x550/0x550 [ 2179.822342][ T7959] ? apparmor_socket_sendmsg+0x8a/0x330 [ 2179.827934][ T7959] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2179.833255][ T7959] ? security_socket_sendmsg+0x7c/0xa0 [ 2179.838762][ T7959] ? netlink_getsockopt+0x550/0x550 [ 2179.844020][ T7959] ____sys_sendmsg+0x5ed/0x9a0 [ 2179.848847][ T7959] ? __sys_sendmsg_sock+0x30/0x30 [ 2179.853923][ T7959] ? __import_iovec+0x306/0x510 [ 2179.858859][ T7959] ? import_iovec+0x6f/0xa0 [ 2179.863409][ T7959] ___sys_sendmsg+0x2a2/0x360 [ 2179.868143][ T7959] ? __sys_sendmsg+0x2a0/0x2a0 [ 2179.872990][ T7959] ? __lock_acquire+0x7c40/0x7c40 [ 2179.878129][ T7959] __se_sys_sendmsg+0x1c3/0x2b0 [ 2179.883038][ T7959] ? ct_nmi_exit+0x145/0x1c0 [ 2179.887679][ T7959] ? __x64_sys_sendmsg+0x80/0x80 [ 2179.892690][ T7959] ? lockdep_hardirqs_on+0x94/0x140 [ 2179.897945][ T7959] do_syscall_64+0x4c/0xa0 [ 2179.902405][ T7959] ? clear_bhb_loop+0x60/0xb0 [ 2179.907123][ T7959] ? clear_bhb_loop+0x60/0xb0 [ 2179.911846][ T7959] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2179.917824][ T7959] RIP: 0033:0x7f95ccf9e0d9 [ 2179.922274][ T7959] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2179.941939][ T7959] RSP: 002b:00007f95cdf26028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2179.950397][ T7959] RAX: ffffffffffffffda RBX: 00007f95cd225fa0 RCX: 00007f95ccf9e0d9 [ 2179.958422][ T7959] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000004 [ 2179.966428][ T7959] RBP: 00007f95cdf26090 R08: 0000000000000000 R09: 0000000000000000 [ 2179.974430][ T7959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2179.982437][ T7959] R13: 00007f95cd226038 R14: 00007f95cd225fa0 R15: 00007ffe03157b08 [ 2179.990470][ T7959] [ 2181.184777][ T7998] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 2181.265666][ T7998] syzkaller1: linktype set to 825 [ 2182.256582][ T8024] device syzkaller0 entered promiscuous mode [ 2183.857413][ T8061] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 2183.863404][ T8061] syzkaller1: linktype set to 825 [ 2184.685161][ T8081] device syzkaller0 entered promiscuous mode [ 2185.195070][ T8096] FAULT_INJECTION: forcing a failure. [ 2185.195070][ T8096] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2185.255701][ T8096] CPU: 1 PID: 8096 Comm: syz.0.10352 Not tainted syzkaller #0 [ 2185.263207][ T8096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2185.273277][ T8096] Call Trace: [ 2185.276573][ T8096] [ 2185.279521][ T8096] dump_stack_lvl+0x188/0x24e [ 2185.284233][ T8096] ? show_regs_print_info+0x12/0x12 [ 2185.289456][ T8096] ? load_image+0x410/0x410 [ 2185.293985][ T8096] ? __lock_acquire+0x7c40/0x7c40 [ 2185.299034][ T8096] ? snprintf+0xe5/0x140 [ 2185.303294][ T8096] should_fail_ex+0x390/0x4c0 [ 2185.308006][ T8096] _copy_to_user+0x2c/0x130 [ 2185.312536][ T8096] simple_read_from_buffer+0xe3/0x150 [ 2185.317953][ T8096] proc_fail_nth_read+0x1a6/0x220 [ 2185.323003][ T8096] ? proc_fault_inject_write+0x310/0x310 [ 2185.328658][ T8096] ? fsnotify_perm+0x248/0x550 [ 2185.333449][ T8096] ? proc_fault_inject_write+0x310/0x310 [ 2185.339113][ T8096] vfs_read+0x2db/0x960 [ 2185.343312][ T8096] ? kernel_read+0x1e0/0x1e0 [ 2185.347951][ T8096] ? __fget_files+0x28/0x460 [ 2185.352590][ T8096] ? __fget_files+0x3fc/0x460 [ 2185.357299][ T8096] ? __fdget_pos+0x2ae/0x360 [ 2185.361907][ T8096] ? ksys_read+0x70/0x260 [ 2185.366263][ T8096] ksys_read+0x14d/0x260 [ 2185.370529][ T8096] ? vfs_write+0x9a0/0x9a0 [ 2185.374974][ T8096] ? lockdep_hardirqs_on+0x94/0x140 [ 2185.380194][ T8096] do_syscall_64+0x4c/0xa0 [ 2185.384644][ T8096] ? clear_bhb_loop+0x60/0xb0 [ 2185.389393][ T8096] ? clear_bhb_loop+0x60/0xb0 [ 2185.394095][ T8096] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2185.400023][ T8096] RIP: 0033:0x7f898a55e90e [ 2185.404471][ T8096] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2185.424093][ T8096] RSP: 002b:00007f898b4f0fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2185.432531][ T8096] RAX: ffffffffffffffda RBX: 00007f898b4f16c0 RCX: 00007f898a55e90e [ 2185.440520][ T8096] RDX: 000000000000000f RSI: 00007f898b4f10a0 RDI: 0000000000000007 [ 2185.448558][ T8096] RBP: 00007f898b4f1090 R08: 0000000000000000 R09: 0000000000000000 [ 2185.456553][ T8096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2185.464540][ T8096] R13: 00007f898a826038 R14: 00007f898a825fa0 R15: 00007ffc5b8782d8 [ 2185.472578][ T8096] [ 2185.724067][ T8109] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.10357'. [ 2186.491523][ T8139] netlink: 164 bytes leftover after parsing attributes in process `syz.7.10367'. [ 2187.161423][ T8172] netlink: 60 bytes leftover after parsing attributes in process `syz.5.10386'. [ 2187.753636][ T8172] netlink: 60 bytes leftover after parsing attributes in process `syz.5.10386'. [ 2187.784197][ T8176] netlink: 60 bytes leftover after parsing attributes in process `syz.5.10386'. [ 2188.014312][ T8197] device syzkaller0 entered promiscuous mode [ 2195.538578][ T8315] netlink: 'syz.0.10445': attribute type 39 has an invalid length. [ 2195.766559][ T8327] device syzkaller0 entered promiscuous mode [ 2196.533964][ T8360] netlink: 'syz.7.10465': attribute type 29 has an invalid length. [ 2196.545527][ T8360] netlink: 'syz.7.10465': attribute type 29 has an invalid length. [ 2196.554432][ T8360] netlink: 'syz.7.10465': attribute type 29 has an invalid length. [ 2199.483330][ T8416] netlink: 'syz.8.10491': attribute type 10 has an invalid length. [ 2199.910700][ T8438] ================================================================== [ 2199.918917][ T8438] BUG: KASAN: slab-out-of-bounds in __bpf_get_stackid+0x6c9/0x920 [ 2199.926828][ T8438] Write of size 48 at addr ffff888059ddcb90 by task syz.7.10500/8438 [ 2199.934917][ T8438] [ 2199.937296][ T8438] CPU: 1 PID: 8438 Comm: syz.7.10500 Not tainted syzkaller #0 [ 2199.944834][ T8438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2199.954906][ T8438] Call Trace: [ 2199.958236][ T8438] [ 2199.961187][ T8438] dump_stack_lvl+0x188/0x24e [ 2199.965902][ T8438] ? __lock_acquire+0x7c40/0x7c40 [ 2199.970959][ T8438] ? show_regs_print_info+0x12/0x12 [ 2199.976190][ T8438] ? load_image+0x410/0x410 [ 2199.980722][ T8438] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 2199.986213][ T8438] ? __virt_addr_valid+0x188/0x540 [ 2199.991353][ T8438] ? __virt_addr_valid+0x467/0x540 [ 2199.996526][ T8438] ? __bpf_get_stackid+0x6c9/0x920 [ 2200.001688][ T8438] print_report+0xa8/0x210 [ 2200.006133][ T8438] kasan_report+0x10b/0x140 [ 2200.010686][ T8438] ? __bpf_get_stackid+0x6c9/0x920 [ 2200.015834][ T8438] kasan_check_range+0x235/0x290 [ 2200.020836][ T8438] ? __bpf_get_stackid+0x6c9/0x920 [ 2200.025980][ T8438] memcpy+0x3c/0x60 [ 2200.029822][ T8438] __bpf_get_stackid+0x6c9/0x920 [ 2200.034794][ T8438] bpf_get_stackid_pe+0x33f/0x400 [ 2200.039853][ T8438] bpf_prog_282a5593b1ef8d13+0x21/0x36 [ 2200.045341][ T8438] bpf_overflow_handler+0x50b/0x790 [ 2200.050571][ T8438] ? bpf_overflow_handler+0xd9/0x790 [ 2200.055891][ T8438] ? perf_swevent_overflow+0x230/0x230 [ 2200.061386][ T8438] ? __perf_event_account_interrupt+0x187/0x280 [ 2200.067704][ T8438] __perf_event_overflow+0x457/0x630 [ 2200.073025][ T8438] ? perf_swevent_event+0x1d5/0x570 [ 2200.078261][ T8438] perf_swevent_event+0x315/0x570 [ 2200.083318][ T8438] ? perf_tp_event+0xc10/0xc10 [ 2200.088116][ T8438] ? mark_lock+0x94/0x320 [ 2200.092481][ T8438] ___perf_sw_event+0x498/0x6d0 [ 2200.097381][ T8438] ? ___perf_sw_event+0x184/0x6d0 [ 2200.102439][ T8438] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 2200.108886][ T8438] ? mark_lock+0x94/0x320 [ 2200.113299][ T8438] ? perf_event_exec+0x12b0/0x12b0 [ 2200.118446][ T8438] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 2200.124470][ T8438] ? lock_chain_count+0x20/0x20 [ 2200.129358][ T8438] __perf_sw_event+0x135/0x260 [ 2200.134172][ T8438] do_user_addr_fault+0x497/0xb20 [ 2200.139264][ T8438] ? trace_hardirqs_off_finish+0x86/0x180 [ 2200.145015][ T8438] exc_page_fault+0x60/0x100 [ 2200.149640][ T8438] ? __might_fault+0xa6/0x120 [ 2200.154344][ T8438] asm_exc_page_fault+0x22/0x30 [ 2200.159260][ T8438] RIP: 0010:__put_user_nocheck_4+0x3/0x11 [ 2200.165039][ T8438] Code: 00 00 48 39 d9 73 54 0f 01 cb 66 89 01 31 c9 0f 01 ca c3 90 90 90 90 90 48 bb fd ef ff ff ff 7f 00 00 48 39 d9 73 34 0f 01 cb <89> 01 31 c9 0f 01 ca c3 90 90 90 90 90 90 48 bb f9 ef ff ff ff 7f [ 2200.184679][ T8438] RSP: 0018:ffffc90003e7fc58 EFLAGS: 00050297 [ 2200.190783][ T8438] RAX: 0000000000000153 RBX: 00007fffffffeffd RCX: 0000000000000000 [ 2200.198800][ T8438] RDX: 0000000000000000 RSI: ffffffff8a8c2920 RDI: ffffffff8adf5de0 [ 2200.206801][ T8438] RBP: ffffc90003e7fd90 R08: ffffffff8e210aef R09: 1ffffffff1c4215d [ 2200.214803][ T8438] R10: dffffc0000000000 R11: fffffbfff1c4215e R12: dffffc0000000000 [ 2200.222798][ T8438] R13: 0000000000100000 R14: 0000000000000153 R15: ffff88802d65bc00 [ 2200.230800][ T8438] kernel_clone+0x38c/0x900 [ 2200.235419][ T8438] ? create_io_thread+0x170/0x170 [ 2200.240506][ T8438] ? do_futex+0x310/0x320 [ 2200.244928][ T8438] __x64_sys_clone+0x1a7/0x220 [ 2200.249725][ T8438] ? __ia32_sys_vfork+0x140/0x140 [ 2200.254776][ T8438] ? lock_chain_count+0x20/0x20 [ 2200.259662][ T8438] ? lockdep_hardirqs_on+0x94/0x140 [ 2200.264888][ T8438] do_syscall_64+0x4c/0xa0 [ 2200.269350][ T8438] ? clear_bhb_loop+0x60/0xb0 [ 2200.274090][ T8438] ? clear_bhb_loop+0x60/0xb0 [ 2200.278800][ T8438] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2200.284721][ T8438] RIP: 0033:0x7f95ccf9e0d9 [ 2200.289148][ T8438] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2200.308943][ T8438] RSP: 002b:00007f95cdf25fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2200.317387][ T8438] RAX: ffffffffffffffda RBX: 00007f95cd225fa0 RCX: 00007f95ccf9e0d9 [ 2200.325385][ T8438] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000126400 [ 2200.333368][ T8438] RBP: 00007f95cd035024 R08: 0000000000000000 R09: 0000000000000000 [ 2200.341357][ T8438] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2200.349357][ T8438] R13: 00007f95cd226038 R14: 00007f95cd225fa0 R15: 00007ffe03157b08 [ 2200.357329][ T8438] [ 2200.360355][ T8438] [ 2200.362685][ T8438] Allocated by task 8438: [ 2200.367060][ T8438] kasan_set_track+0x4b/0x70 [ 2200.371678][ T8438] __kasan_kmalloc+0x8e/0xa0 [ 2200.376303][ T8438] __kmalloc_node+0xb2/0x240 [ 2200.380919][ T8438] bpf_map_area_alloc+0x47/0xe0 [ 2200.385771][ T8438] prealloc_elems_and_freelist+0x86/0x1c0 [ 2200.391530][ T8438] stack_map_alloc+0x386/0x510 [ 2200.396310][ T8438] map_create+0x524/0xff0 [ 2200.400681][ T8438] __sys_bpf+0x38b/0x780 [ 2200.404966][ T8438] __x64_sys_bpf+0x78/0x90 [ 2200.409405][ T8438] do_syscall_64+0x4c/0xa0 [ 2200.413854][ T8438] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2200.419777][ T8438] [ 2200.422114][ T8438] Last potentially related work creation: [ 2200.427849][ T8438] kasan_save_stack+0x3a/0x60 [ 2200.432561][ T8438] __kasan_record_aux_stack+0xb2/0xc0 [ 2200.437955][ T8438] call_rcu+0x14f/0x950 [ 2200.442146][ T8438] nf_unregister_net_hooks+0xc7/0x130 [ 2200.447607][ T8438] cleanup_net+0x703/0xba0 [ 2200.452085][ T8438] process_one_work+0x8ab/0x1160 [ 2200.457117][ T8438] worker_thread+0xaf5/0x12a0 [ 2200.461827][ T8438] kthread+0x29d/0x330 [ 2200.465926][ T8438] ret_from_fork+0x1f/0x30 [ 2200.470394][ T8438] [ 2200.472737][ T8438] Second to last potentially related work creation: [ 2200.479389][ T8438] kasan_save_stack+0x3a/0x60 [ 2200.484132][ T8438] __kasan_record_aux_stack+0xb2/0xc0 [ 2200.489526][ T8438] call_rcu+0x14f/0x950 [ 2200.493713][ T8438] nf_unregister_net_hooks+0xc7/0x130 [ 2200.499116][ T8438] nf_defrag_ipv6_disable+0x91/0xe0 [ 2200.504449][ T8438] nf_ct_netns_put+0x371/0x510 [ 2200.509280][ T8438] nf_conncount_destroy+0x3d/0x150 [ 2200.514497][ T8438] ovs_ct_exit+0x98/0x200 [ 2200.518930][ T8438] ovs_exit_net+0xe9/0x7a0 [ 2200.523383][ T8438] cleanup_net+0x703/0xba0 [ 2200.527802][ T8438] process_one_work+0x8ab/0x1160 [ 2200.532763][ T8438] worker_thread+0xaf5/0x12a0 [ 2200.537454][ T8438] kthread+0x29d/0x330 [ 2200.541561][ T8438] ret_from_fork+0x1f/0x30 [ 2200.545993][ T8438] [ 2200.548334][ T8438] The buggy address belongs to the object at ffff888059ddcb80 [ 2200.548334][ T8438] which belongs to the cache kmalloc-cg-64 of size 64 [ 2200.562531][ T8438] The buggy address is located 16 bytes inside of [ 2200.562531][ T8438] 64-byte region [ffff888059ddcb80, ffff888059ddcbc0) [ 2200.575665][ T8438] [ 2200.578004][ T8438] The buggy address belongs to the physical page: [ 2200.584466][ T8438] page:ffffea0001677700 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888059ddc780 pfn:0x59ddc [ 2200.595925][ T8438] memcg:ffff888079821001 [ 2200.600175][ T8438] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 2200.607749][ T8438] raw: 00fff00000000200 ffffea000072d580 dead000000000008 ffff888017442780 [ 2200.616354][ T8438] raw: ffff888059ddc780 000000008020001e 00000001ffffffff ffff888079821001 [ 2200.624949][ T8438] page dumped because: kasan: bad access detected [ 2200.631387][ T8438] page_owner tracks the page as allocated [ 2200.637133][ T8438] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 4284, tgid 4284 (syz-executor), ts 71692257645, free_ts 23312911844 [ 2200.655495][ T8438] post_alloc_hook+0x173/0x1a0 [ 2200.660286][ T8438] get_page_from_freelist+0x206b/0x2180 [ 2200.665879][ T8438] __alloc_pages+0x1ec/0x4f0 [ 2200.670494][ T8438] alloc_slab_page+0x5d/0x180 [ 2200.675196][ T8438] new_slab+0x87/0x2d0 [ 2200.679284][ T8438] ___slab_alloc+0xbc5/0x1240 [ 2200.683970][ T8438] __kmem_cache_alloc_node+0x126/0x270 [ 2200.689458][ T8438] __kmalloc_node+0xa2/0x240 [ 2200.694065][ T8438] kvmalloc_node+0x6c/0x180 [ 2200.698607][ T8438] nf_hook_entries_grow+0x31a/0x760 [ 2200.703825][ T8438] __nf_register_net_hook+0x2c9/0x910 [ 2200.709235][ T8438] nf_register_net_hook+0xae/0x190 [ 2200.714356][ T8438] nf_register_net_hooks+0x40/0x1a0 [ 2200.719588][ T8438] nf_defrag_ipv4_enable+0x83/0x110 [ 2200.724846][ T8438] nf_ct_netns_do_get+0x189/0x5b0 [ 2200.729892][ T8438] nf_ct_netns_inet_get+0x1f/0x150 [ 2200.735015][ T8438] page last free stack trace: [ 2200.739697][ T8438] free_unref_page_prepare+0x8e5/0x9e0 [ 2200.745172][ T8438] free_unref_page+0x2e/0x3f0 [ 2200.749864][ T8438] free_contig_range+0x9d/0x150 [ 2200.754716][ T8438] destroy_args+0xef/0xa0e [ 2200.759221][ T8438] debug_vm_pgtable+0x33c/0x38e [ 2200.764080][ T8438] do_one_initcall+0x257/0x800 [ 2200.768866][ T8438] do_initcall_level+0x13d/0x1ed [ 2200.773865][ T8438] do_initcalls+0x4b/0x8a [ 2200.778217][ T8438] kernel_init_freeable+0x401/0x5ab [ 2200.783474][ T8438] kernel_init+0x19/0x1b0 [ 2200.787808][ T8438] ret_from_fork+0x1f/0x30 [ 2200.792236][ T8438] [ 2200.794567][ T8438] Memory state around the buggy address: [ 2200.800239][ T8438] ffff888059ddca80: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 2200.808302][ T8438] ffff888059ddcb00: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 2200.816371][ T8438] >ffff888059ddcb80: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 2200.824445][ T8438] ^ [ 2200.829822][ T8438] ffff888059ddcc00: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 2200.837900][ T8438] ffff888059ddcc80: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 2200.845972][ T8438] ================================================================== [ 2200.854043][ T8438] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 2200.861240][ T8438] CPU: 1 PID: 8438 Comm: syz.7.10500 Not tainted syzkaller #0 [ 2200.868788][ T8438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2200.878849][ T8438] Call Trace: [ 2200.882156][ T8438] [ 2200.885096][ T8438] dump_stack_lvl+0x188/0x24e [ 2200.889786][ T8438] ? memcpy+0x3c/0x60 [ 2200.893771][ T8438] ? show_regs_print_info+0x12/0x12 [ 2200.898984][ T8438] ? load_image+0x410/0x410 [ 2200.903612][ T8438] panic+0x2d3/0x710 [ 2200.907512][ T8438] ? __lock_acquire+0x7c40/0x7c40 [ 2200.912562][ T8438] ? bpf_jit_dump+0xd0/0xd0 [ 2200.917071][ T8438] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 2200.923081][ T8438] ? _raw_spin_unlock+0x40/0x40 [ 2200.927956][ T8438] check_panic_on_warn+0x80/0xa0 [ 2200.932907][ T8438] ? __bpf_get_stackid+0x6c9/0x920 [ 2200.938057][ T8438] end_report+0x66/0x110 [ 2200.942316][ T8438] kasan_report+0x118/0x140 [ 2200.946831][ T8438] ? __bpf_get_stackid+0x6c9/0x920 [ 2200.951964][ T8438] kasan_check_range+0x235/0x290 [ 2200.956934][ T8438] ? __bpf_get_stackid+0x6c9/0x920 [ 2200.962075][ T8438] memcpy+0x3c/0x60 [ 2200.965896][ T8438] __bpf_get_stackid+0x6c9/0x920 [ 2200.970850][ T8438] bpf_get_stackid_pe+0x33f/0x400 [ 2200.975996][ T8438] bpf_prog_282a5593b1ef8d13+0x21/0x36 [ 2200.981463][ T8438] bpf_overflow_handler+0x50b/0x790 [ 2200.986683][ T8438] ? bpf_overflow_handler+0xd9/0x790 [ 2200.991974][ T8438] ? perf_swevent_overflow+0x230/0x230 [ 2200.997456][ T8438] ? __perf_event_account_interrupt+0x187/0x280 [ 2201.003809][ T8438] __perf_event_overflow+0x457/0x630 [ 2201.009128][ T8438] ? perf_swevent_event+0x1d5/0x570 [ 2201.014440][ T8438] perf_swevent_event+0x315/0x570 [ 2201.019484][ T8438] ? perf_tp_event+0xc10/0xc10 [ 2201.024262][ T8438] ? mark_lock+0x94/0x320 [ 2201.028642][ T8438] ___perf_sw_event+0x498/0x6d0 [ 2201.033509][ T8438] ? ___perf_sw_event+0x184/0x6d0 [ 2201.038572][ T8438] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 2201.045003][ T8438] ? mark_lock+0x94/0x320 [ 2201.049355][ T8438] ? perf_event_exec+0x12b0/0x12b0 [ 2201.054492][ T8438] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 2201.060485][ T8438] ? lock_chain_count+0x20/0x20 [ 2201.065347][ T8438] __perf_sw_event+0x135/0x260 [ 2201.070150][ T8438] do_user_addr_fault+0x497/0xb20 [ 2201.075199][ T8438] ? trace_hardirqs_off_finish+0x86/0x180 [ 2201.080963][ T8438] exc_page_fault+0x60/0x100 [ 2201.085568][ T8438] ? __might_fault+0xa6/0x120 [ 2201.090257][ T8438] asm_exc_page_fault+0x22/0x30 [ 2201.095147][ T8438] RIP: 0010:__put_user_nocheck_4+0x3/0x11 [ 2201.100884][ T8438] Code: 00 00 48 39 d9 73 54 0f 01 cb 66 89 01 31 c9 0f 01 ca c3 90 90 90 90 90 48 bb fd ef ff ff ff 7f 00 00 48 39 d9 73 34 0f 01 cb <89> 01 31 c9 0f 01 ca c3 90 90 90 90 90 90 48 bb f9 ef ff ff ff 7f [ 2201.120507][ T8438] RSP: 0018:ffffc90003e7fc58 EFLAGS: 00050297 [ 2201.126583][ T8438] RAX: 0000000000000153 RBX: 00007fffffffeffd RCX: 0000000000000000 [ 2201.134558][ T8438] RDX: 0000000000000000 RSI: ffffffff8a8c2920 RDI: ffffffff8adf5de0 [ 2201.142571][ T8438] RBP: ffffc90003e7fd90 R08: ffffffff8e210aef R09: 1ffffffff1c4215d [ 2201.150550][ T8438] R10: dffffc0000000000 R11: fffffbfff1c4215e R12: dffffc0000000000 [ 2201.158557][ T8438] R13: 0000000000100000 R14: 0000000000000153 R15: ffff88802d65bc00 [ 2201.166554][ T8438] kernel_clone+0x38c/0x900 [ 2201.171076][ T8438] ? create_io_thread+0x170/0x170 [ 2201.176109][ T8438] ? do_futex+0x310/0x320 [ 2201.180481][ T8438] __x64_sys_clone+0x1a7/0x220 [ 2201.185268][ T8438] ? __ia32_sys_vfork+0x140/0x140 [ 2201.190317][ T8438] ? lock_chain_count+0x20/0x20 [ 2201.195195][ T8438] ? lockdep_hardirqs_on+0x94/0x140 [ 2201.200403][ T8438] do_syscall_64+0x4c/0xa0 [ 2201.204837][ T8438] ? clear_bhb_loop+0x60/0xb0 [ 2201.209540][ T8438] ? clear_bhb_loop+0x60/0xb0 [ 2201.214225][ T8438] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2201.220138][ T8438] RIP: 0033:0x7f95ccf9e0d9 [ 2201.224568][ T8438] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2201.244268][ T8438] RSP: 002b:00007f95cdf25fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2201.252687][ T8438] RAX: ffffffffffffffda RBX: 00007f95cd225fa0 RCX: 00007f95ccf9e0d9 [ 2201.260661][ T8438] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000126400 [ 2201.268639][ T8438] RBP: 00007f95cd035024 R08: 0000000000000000 R09: 0000000000000000 [ 2201.276616][ T8438] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2201.284594][ T8438] R13: 00007f95cd226038 R14: 00007f95cd225fa0 R15: 00007ffe03157b08 [ 2201.292576][ T8438] [ 2201.296171][ T8438] Kernel Offset: disabled [ 2201.300510][ T8438] Rebooting in 86400 seconds..