last executing test programs: 3.220560868s ago: executing program 1 (id=10810): r0 = perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xa5ba, 0x0, @perf_bp={0x0}, 0x100410, 0x200, 0x4000006, 0x1, 0x9, 0x9, 0xfffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socketpair(0x2c, 0x3, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='V?\x00\x00'], 0xfe33) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) perf_event_open(&(0x7f00000019c0)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x7c3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x5, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40, 0x3}, 0x60, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001a40)) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r0}, 0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1400000004000000040000000700000000000000", @ANYRES32, @ANYBLOB=' \x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={r3, &(0x7f0000000800), 0x0}, 0x20) r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xa4c33, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_bp={0x0, 0x3}, 0x58c8, 0x0, 0xfffffffc, 0x3, 0x7, 0x0, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x10004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext, 0xc006, 0xac5d, 0xffffffff, 0x0, 0xfffffffffffffffe, 0x7, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, r4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x15, 0xe, &(0x7f0000000640)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb0100180000000000000030000000300000000a0000000800000000000004040000000800000002000004f7ffffff0400000001000000000000000300000001000000000000000030615f5f5f2e2e5f00"], 0x0, 0x52, 0x0, 0x9, 0x6}, 0x18) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000001a80)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001980), 0x8}, 0x0, 0x0, 0x8, 0x0, 0x4000003, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x200000df, &(0x7f0000000780)=ANY=[@ANYBLOB="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", @ANYRESHEX=r5], &(0x7f0000000200)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) r7 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x3e, &(0x7f00000002c0)=r6, 0x161) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x14, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x3, 0x0, 0x0, 0x6, 0x0, 0x5, 0x0, 0x4, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mkdirat$cgroup(r8, &(0x7f0000001080)='syz1\x00', 0x1ff) 2.919380776s ago: executing program 1 (id=10814): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x24, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x161) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000680)=ANY=[@ANYRES64=r0], &(0x7f0000000000)='GPL\x00', 0x2, 0xee, &(0x7f0000000340)=""/238}, 0x94) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(r2, &(0x7f00000001c0), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000000000007b8af8ff0000020000f8ffffffb703000008000000b70400000000000085000000030000009500"/61], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x14, &(0x7f0000000500)=@framed={{0x18, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}]}, &(0x7f0000000380)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000000700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)=ANY=[@ANYRES32=r9, @ANYRES32=r10, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r9}, &(0x7f00000006c0), &(0x7f0000000700)=r8}, 0x20) sendmsg$inet(r7, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x5452, &(0x7f0000000a40)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdf\x85\xaac{\x8c\x8ffp`-\xcd\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\t\xed\x13q2\xdd\xaf\xcc\xeeR\xf2/\x00\x00E>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\xcb\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x86\x1b\x05\xe6\"\x1d\f\xaey\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xcc\xca\x04\x00\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x03\x00\x00\x00\x00\x00\x00\x00\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\xf3\xcf\x17\xf5\x86%\x7f\xec\xb2\xc5E\x00\xb2e\xa8\xf1<\xb2\xc82\xbf=o\x00\x00\x00\x00E\x00\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x922A\x95\x8e\xbc\xc80xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) perf_event_open(&(0x7f0000000380)={0x0, 0x4, 0x0, 0x16, 0x2, 0x0, 0x0, 0xfffffffffffffffd, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801, 0x0, @perf_bp={0x0, 0x6}, 0x100001, 0xca, 0x0, 0x6, 0x1000000000000, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1ffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$unix(r4, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) r7 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}, 0x40, 0x0, 0x9, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[@ANYRES8=r5, @ANYBLOB="13320a"], 0x9a) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x6, 0xf9, 0x81, 0x9, 0x0, 0x6, 0x10000, 0xf, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x7, 0x9}, 0x2808, 0x8, 0x9, 0x4, 0x5e, 0x6, 0x1000, 0x0, 0xfffffff8, 0x0, 0xfffffffffffffff7}, r3, 0xc, r4, 0x8) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000000000000f37538e486dd630080fc09042c00db5bffffffffff000000060300060023000000000000000000000000ac1414aa2c200007"], 0xfdef) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001a00599c6d0e000091d028ef80"], 0xfe33) 2.214391714s ago: executing program 3 (id=10822): socket$kcm(0x11, 0x6, 0x300) socket$kcm(0x11, 0x3, 0x0) r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1c00000033000b12c25aa9cb8c2194f90124fc", 0x13}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r1, &(0x7f0000000000)={&(0x7f0000001340)={0x2, 0x6, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)}, 0x8000) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000008500000020000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x8004}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x0, 0x7, 0x0, &(0x7f0000000240)="ebb9547ea8fa1f", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(r1, 0x0, 0x0) 2.210857174s ago: executing program 0 (id=10823): socket$kcm(0x10, 0x400000002, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10) sendmsg$inet(r2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f00000002c0)=r0}, 0x20) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvmsg$unix(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)=""/229, 0xec1}], 0x1}, 0x0) 1.866759532s ago: executing program 4 (id=10824): bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) 1.775153665s ago: executing program 3 (id=10825): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000c40)=[{0x0, 0x0, 0x1, 0x4}, {0x0, 0x0, 0x0, 0x1}]}, 0x94) (async, rerun: 64) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x100080, 0x0, 0x0, 0x1}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x28) (async) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000c40)="c10e020022003505d25a806f8c6394f90435fc60040011000a7401", 0x1b}], 0x1}, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001080)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r1, 0x18000000000002a0, 0x10, 0x0, &(0x7f0000000300)="76389e147583ddd0569ba56a5cfd5588", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async, rerun: 64) r2 = socket$kcm(0x10, 0x3, 0x10) (rerun: 64) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803003f000b12d25a80648c2594f90124fc60020c024002000000053582c137153e370248078000f01705d1bd", 0x33fe0}], 0x1}, 0x0) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0x1, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) mkdirat$cgroup(r4, &(0x7f00000000c0)='syz1\x00', 0x1ff) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000006700000000000000", @ANYRES32=0x1, @ANYBLOB="011bb900000000000000bd2b32ce0100"/25, @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="03000000050000000500"/28], 0x50) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000440)={0x1, &(0x7f0000000100)=[{0xff, 0x6, 0x7, 0xffff675b}]}) (async, rerun: 64) recvmsg$kcm(r4, &(0x7f0000001e40)={&(0x7f00000001c0)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000001dc0)=[{&(0x7f0000000240)=""/136, 0x88}, {&(0x7f0000000300)=""/43, 0x2b}, {&(0x7f0000000380)=""/184, 0xb8}, {&(0x7f0000000440)=""/25, 0x19}, {&(0x7f0000000500)=""/131, 0x83}, {&(0x7f0000000c80)=""/4096, 0x1000}, {&(0x7f0000001c80)=""/43, 0x2b}, {&(0x7f0000001cc0)=""/215, 0xd7}], 0x8}, 0x0) (rerun: 64) 1.714353897s ago: executing program 0 (id=10826): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400, 0x8}, 0x4202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0xc, 0x1, &(0x7f0000000080)=@raw=[@exit], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4e, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x2, 0x3, 0x84) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x1, 0x0, 0x3, 0x4, 0x0, 0xef, 0x1af1ed, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0, 0x1}, 0x109901, 0x20000001, 0x6, 0x0, 0x2, 0x4, 0x0, 0x0, 0xfffffffe}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x10, 0xa, 0x9, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f00000008c0)={&(0x7f0000000240), 0x6e, &(0x7f0000000840)=[{&(0x7f0000000500)=""/181, 0xb5}, {&(0x7f0000000680)=""/79, 0x4f}, {&(0x7f0000000700)=""/222, 0xde}, {&(0x7f0000000800)=""/15, 0xf}], 0x4, &(0x7f0000000880)}, 0x10001) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90124fc60", 0x14}], 0x1}, 0x0) sendmsg$inet(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000007000000890704ac14140f0011000000000000070000000001000000fc000000000000001400000000000000010000000200000004000000000000001c000000000000000000000008"], 0x68}, 0x0) r5 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x200, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @perf_bp={0x0, 0x5}, 0x21, 0x0, 0x0, 0x8, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x6) ioctl$PERF_EVENT_IOC_ID(r1, 0x80082407, &(0x7f0000000040)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0xc29a, 0x8}, 0x0, 0xffffffffffffffff, r1, 0x0) r6 = getpid() sendmsg$unix(r3, &(0x7f0000000c80)={&(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000b80)=[{&(0x7f00000005c0)="9b621593ddc8109219c3ffc81d30a9b674ffe868cd598f41997bb4c8312715", 0x1f}, {&(0x7f00000009c0)="a5a1a004a49b4aa7586eadfeab94bab6d250f43db5b5f14ff14a2e16b257f28fabf8c48dbeedcbbebca5bb51c4ed1b6b61b425598d6859a5020f3b56eb06f03e5fcb47995213331e3054099a2c174ae51141d36b", 0x54}, {&(0x7f0000000a40)="e0deb944069ddef20658e09c", 0xc}, {&(0x7f0000000a80)="b8bf91f518f754776d50112970f12c9d65a4885bcc987a657d", 0x19}, {&(0x7f0000000ac0)="cfc65174fae801fd07175f5c9bcea0df6c8b7ee60b91a6d66ba33bd445bb0a8b67e3eaa06f012b74e4290179ca9bd369d5bb10a7be2c637c1e9bf8fcbf0bd274e3d7d89b516c1ddea1af057a6fe8a7bfacc04edc8cd326f301b257a24a749a0f6fd74e6157c86b705e6b310f9282456a85a89a877b29948fe6743c402b6ba7d87d45bdf8a0b35b37dc2341ee930603639fafef53a2acf7", 0x97}], 0x5, &(0x7f0000000cc0)=ANY=[@ANYBLOB="14e7e5d47180527908461b14000000000100"/27, @ANYRES32, @ANYBLOB="00000000100000000000000001000000010000001c000000000000000100000002000000", @ANYRES32=r6, @ANYRES32, @ANYRES32, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32=r5, @ANYRES32=r0, @ANYRES32=r4, @ANYRES32=r0, @ANYRES32=r5, @ANYRES32=r0], 0x70, 0x880}, 0x4048c25) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/syz0\x00', 0x200002, 0x0) socket$kcm(0x1e, 0x1, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0}, 0x6000, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x1}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001100)={{0x1, 0xffffffffffffffff}, &(0x7f0000000300), 0x0}, 0x20) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001140)={0x1b, 0x0, 0x0, 0xb, 0x0, 0x1, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x3}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001240)={0x6, 0x13, &(0x7f0000000d40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xf}, {}, {}, [@generic={0x3, 0x4, 0xa, 0x4, 0xc4f}, @exit, @ldst={0x0, 0x1, 0x6, 0x2, 0x5}, @alu={0x4, 0x1, 0x0, 0x6, 0x2, 0xc, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000e00)='GPL\x00', 0x2, 0xa5, &(0x7f0000000e40)=""/165, 0x41000, 0x78, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000f00)={0x0, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000011c0)=[0xffffffffffffffff, r10, 0x1, r11, r12], &(0x7f0000001200)=[{0x1, 0x4, 0xb, 0xa}], 0x10, 0x2}, 0x94) close(r9) recvmsg$unix(r8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r13, &(0x7f0000000340)=ANY=[@ANYRES64], 0x2) sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904021d080207000000040000a118000200e000000100000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843c8802033d0803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 1.558709071s ago: executing program 1 (id=10827): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r1, 0xffffffffffffffff}, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = socket$kcm(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x0, 0x9, 0x2a, &(0x7f0000000100)=""/42, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000180)={0x2, 0xb, 0x10000, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000001c0), 0x0, 0x10, 0xfffffffe}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000300)=r6, 0x4) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000340)={r4}) close(r5) socket$kcm(0x10, 0x100000000002, 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000540), 0x7}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x2, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="12000000060000000400000002"], 0x48) r8 = socket$kcm(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000002e80)=@bloom_filter={0x1e, 0x825, 0x4, 0x97, 0x10c82, r7, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x2, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r7}, &(0x7f0000000080)=0x1000000, &(0x7f0000000180)=r8}, 0x20) recvmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xfffffffffffffed6, 0x0}, 0x4000a140) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000680)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0300000000000000000000000000000d03000000000000000000010b040000000000000000000002020000000000000061"], 0x0, 0x52}, 0x20) sendmsg$sock(r3, &(0x7f0000000640)={&(0x7f0000000380)=@vsock={0x28, 0x0, 0x2711}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000480)="707655aff8c5657f195ecb0314eba9b15487d4c2f6a4d24fdf7ec78fafb002e848b53432fa8a9bf6173323fbac41e029eec402b4e5d7a930bd6a26d3b72d1ad82cee5c273c3690c6f0a583df6e3896ffe5860fe6a28b44472216ec0fa7b230cd12f40935ab377eef1484", 0x6a}], 0x1, &(0x7f00000005c0)=[@mark={{0x14, 0x1, 0x24, 0xffff}}, @txtime={{0x18, 0x1, 0x3d, 0x74a}}, @mark={{0x14, 0x1, 0x24, 0x9}}], 0x48}, 0x45) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000e16513020f9a920e9500000000000000"], &(0x7f0000000040)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r10 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r10, 0x0, 0x25, 0x0, 0xc) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000500)={r2, &(0x7f0000000080)="ff5ceeea40457723c97d5dc916ffb5945a4291de32fca9e07af3970533cea6b1badd12d0e65b56891cf829ba1e72083eff965ff876c1c1911ea81ddacf9833c73a69bd6cb94c48e32563576b62ed60e04e066288683fafcb7d52ee33c753b8d3370c8abe2a1107f39fbb32f2e509850f56cda9528236626d739368b514c693fcfd83a8c50c04afdbae3c3cd4f8dd309e026fa065fb9b3c9b6c9047f125cd1b5732f4c30d557425a697b77801cdf265178ad84032bc25d11b2ccb717cf24197f7a94c4336fec6c662b015a784", &(0x7f0000000400)=""/242, 0x4}, 0x20) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019000800004460bc06000000a701251e6182949a3651fbffffffd4d4938037e7c7a0a03400ac09c51c268811000096859fc57a00000000000000002571cd53b9851b30", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8000) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000940)=""/4117, 0x1015}, {&(0x7f0000001a40)=""/4083, 0xff3}, {&(0x7f0000001980)=""/192, 0xc0}, {&(0x7f0000000400)=""/47, 0x2f}, {&(0x7f0000000080)=""/16, 0x10}, {&(0x7f0000000700)=""/215, 0xd7}], 0x6}, 0x20) recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0xffc3, 0x0}, 0x80) 1.400963085s ago: executing program 4 (id=10828): socket$kcm(0x2, 0x1000000000000005, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x15, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x882, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x9}, 0x0, 0xa, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x23, 0x5, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d0800fe007c05e8fe55a115000300fc00142603600e12080005007a010401a80016002000044004000008035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000001880)={&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000001740)=[{0x0}, {0x0}, {0x0}], 0x3, &(0x7f00000017c0)=""/163, 0xa3}, 0x40000000) write$cgroup_pressure(r0, 0x0, 0x0) 1.054330804s ago: executing program 2 (id=10829): bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000), 0xc) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x1}, 0x100c, 0x7, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) 977.332285ms ago: executing program 3 (id=10830): socket$kcm(0xa, 0x3, 0x73) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000120000"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xe, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ab92b}, {0x85, 0x0, 0x0, 0x8}, {0x4}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x2000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xffef, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x9}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 812.574869ms ago: executing program 0 (id=10831): r0 = socket$kcm(0x10, 0x400000002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000380), 0x12) recvmsg$kcm(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x40002000) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029ea69801d76ab0a272a2a788bab6c95f79725074", 0x1c}], 0x1, 0x0, 0xc3}, 0x0) 801.25343ms ago: executing program 4 (id=10832): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5931, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value=0xc0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 654.993934ms ago: executing program 3 (id=10833): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0300000000000000000000001800000d03000000000000000fffff0b040000000000000000000002020000000000000061"], 0x0, 0x52}, 0x20) 630.396344ms ago: executing program 1 (id=10834): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r0, @ANYBLOB="0100000002"], 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002f00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 575.700846ms ago: executing program 2 (id=10835): socket$kcm(0x10, 0x7, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000880) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYBLOB, @ANYRES32=0x0], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open$cgroup(0x0, r2, 0x5, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r2, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xb, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000d0ffffff000000000000001718110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b706000014000000b7030000000d00008500000005000000bca900000000000035090100000000009500000000000000b7020000000000007b6af8ff00000000b50902000f0000007baaf0ffb0ffffffbf8700000000000007080000fffdffffbf2400000000000007060000f0ffffff740200000800000018200000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7010000080000004608f0ff76000000bf9800000000000079080000000000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 502.816897ms ago: executing program 4 (id=10836): socket$kcm(0x10, 0x400000002, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10) sendmsg$inet(r2, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f00000002c0)=r0}, 0x20) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvmsg$unix(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)=""/229, 0xec1}], 0x1}, 0x0) 465.362428ms ago: executing program 3 (id=10837): perf_event_open(&(0x7f0000000480)={0x1, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x41, 0x0, 0x11}, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x4, 0x9}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) (async) socketpair(0x1d, 0x6, 0x80, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r3, 0x0, 0x2003) (async) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r4, 0x10) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0x34000}], 0x1, 0x0, 0x0, 0x2000000}, 0x80d1) (async) close(r0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x5, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x4}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffff}, 0x10}, 0x94) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_int(r8, &(0x7f0000000080)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x281}], 0x1}, 0x0) (async) write$cgroup_subtree(r9, &(0x7f0000000300)=ANY=[], 0x8) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000380)=r5, 0x4) (async) sendmsg$sock(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000280)="67f1", 0xfdef}], 0x1}, 0x40840) 412.46146ms ago: executing program 1 (id=10838): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x202000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000200007a8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xc, 0x4ee, 0xad0, 0xf, 0x20000, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x2}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xc, 0xe, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0xf4}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @map_fd={0x18, 0x8, 0x1, 0x0, 0x1}, @btf_id={0x18, 0x5b2a69b5bacaa114, 0x3, 0x0, 0x3}, @map_idx={0x18, 0x8, 0x5, 0x0, 0xf}, @ldst={0x0, 0x2, 0x4, 0x3, 0x7, 0x40, 0x10}]}, &(0x7f0000000340)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x6d, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x4, 0x2}, 0x8, 0x10, &(0x7f00000003c0)={0x3, 0xa, 0x9, 0x2}, 0x10, 0x0, 0xffffffffffffffff, 0x3, &(0x7f0000000400)=[0x1], &(0x7f0000000540)=[{0x0, 0x1, 0xb, 0x5}, {0x3, 0x1, 0xd, 0xc}, {0x0, 0x5, 0x9, 0x6}]}, 0x94) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000640)=r3) socket$kcm(0xa, 0x3, 0x73) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1e}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async, rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x2000002, 0xe, 0x0, &(0x7f0000000080)="df03d3000000ff14ff0000000000", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r4, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async, rerun: 64) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="180200000000000000000000000000008500000028000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) (rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x40008, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 306.974123ms ago: executing program 4 (id=10839): socket$kcm(0x11, 0x6, 0x300) socket$kcm(0x11, 0x3, 0x0) r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1c00000033000b12c25aa9cb8c2194f90124fc", 0x13}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r1, &(0x7f0000000000)={&(0x7f0000001340)={0x2, 0x6, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)}, 0x8000) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000008500000020000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xff00}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x0, 0x7, 0x0, &(0x7f0000000240)="ebb9547ea8fa1f", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(r1, 0x0, 0x0) 192.460205ms ago: executing program 2 (id=10840): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x32752275d7d1e3ca, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000696c6c2500000000002020207b1af8ff00000000bf"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x63, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000380)='GPL\x00', 0x20a, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20}, 0x94) (async) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3d) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00'}) socketpair(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) (async) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000000)=0x57) r5 = syz_clone(0x1000, &(0x7f0000000440)="e38b5ddadc682165781c1409885f14289aa522d1e5676d1c8070822dbb7b72a61e96", 0x22, &(0x7f00000005c0), &(0x7f0000000600), &(0x7f0000000640)="539cbb4630050ae9431831b4e1b4df657189224fd7ba44346c20dcd4107e28b2415c746985f11c6bef6e0386e2cf9cf528bc3834a58815ec696ed4fbfec8bcb8060b754fd20f96f0a653cba3087023ced057fe0fa3988f1577e88292c3db78ad1a8ca92ba4dd4d21dfd3276d94165e249a24305b571448e5928c458c6d355686332834c3466a544ba07dfe0ddd40b33250b7dbd75c35578362e6bfad40890fb2074bbd") perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0xfe, 0x9, 0x3, 0x9, 0x0, 0x9, 0x5100, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x1, @perf_config_ext={0x5}, 0x8, 0x1000, 0x10000, 0x1, 0x2, 0x1, 0x7, 0x0, 0x1, 0x0, 0x8}, r5, 0x2, r3, 0x8) socketpair(0x18, 0x80009, 0x0, &(0x7f00000000c0)) (async) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0x3, 0x0, r4, 0x8001, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x4}, 0x50) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000840)={{r4, 0xffffffffffffffff}, &(0x7f00000007c0), &(0x7f0000000800)}, 0x20) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001a00)={r4, 0x58, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) r9 = openat$cgroup_ro(r0, &(0x7f0000001a40)='blkio.bfq.sectors\x00', 0x0, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001e00)={r1, 0xe0, &(0x7f0000001d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000001b00)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x3, &(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001bc0)=[0x0, 0x0, 0x0], 0x0, 0xb7, &(0x7f0000001c00)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000001c40), &(0x7f0000001c80), 0x8, 0x35, 0x8, 0x8, &(0x7f0000001cc0)}}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001ec0)=@bpf_lsm={0x1d, 0x17, &(0x7f0000000880)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_val={0x18, 0x2, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x7}, @tail_call={{0x18, 0x2, 0x1, 0x0, r7}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000940)='syzkaller\x00', 0xf, 0x1000, &(0x7f0000000980)=""/4096, 0x40f00, 0x0, '\x00', r8, 0x1b, r9, 0x8, &(0x7f0000001a80)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000001ac0)={0x1, 0xe, 0x7fff, 0x7ff}, 0x10, r10, 0x0, 0x1, &(0x7f0000001e40)=[r4, r4, r4, r4], &(0x7f0000001e80)=[{0x2, 0x4, 0xc, 0x1}], 0x10, 0x400}, 0x94) (async) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008001000b704000000000400850000003300000095", @ANYRES64=r0, @ANYRES8=0x0], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r11, 0x5, 0xe, 0x0, &(0x7f0000000040)="6121eed4cd50bb2b01e841acde1a", 0x0, 0x29d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x50) 175.892456ms ago: executing program 3 (id=10841): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000880)='notify_on_release\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) write$cgroup_int(r0, 0x0, 0x0) r1 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r1, &(0x7f0000000440)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x1000000, @remote}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x900}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 106.776947ms ago: executing program 1 (id=10842): perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x10024, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x4}, 0x0, 0xffeffffffffffffe, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xeb, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) write$cgroup_type(r1, &(0x7f0000000180), 0x13bb711e) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x8, [@enum, @typedef={0x6, 0x0, 0x0, 0x8, 0x3}]}, {0x0, [0x0, 0x61, 0x5f, 0x0, 0x0, 0x61]}}, 0x0, 0x38}, 0x28) socketpair$unix(0x1, 0x1, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0xfdef) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf9cc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000fefffe7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000c9be17044171e1d3d7b1efd036d7af273bce36015779c4cef58fa35d17c668a4b63e069efb29797573b8538e31ec24925095a163b9d4e76be2661f2a395e41f7e31a8021e00b00104e0801d4de36e5fdc6c42a7b3ff13f2360a6e231fd223bc33091dd61258a1fda45991fbdce6793c8a4785ee8b60092659b941bbd694dff0f0000000000003a45404b04bf97c4fea679c032b363956cd8bac9626b5db1b07a0bd7cc85e961506a35a04617dc0200379e731d3a8d8feac94a4ee293001f6ce7d5b40bf2a7f9be8173a9639a79fae885d05afe042c0e7821d406c967379e7521292d24d6c8034f2fc7c855a8945e9bce678ee9a015abc9daac8876623db56346916674ceb55f60b493f2f4d736acb2f206fc538450a676d71c01175b8454eb92567e8f8a707b590d7219288e23ee0800000000000010a49fc8f4ff0300000000000000000000cb947d6017ad27714772ad790af252e648ef8c313c604324f5b306000000000000cf327a00000000000000080a70162bba30ad7804fa4140f1a754ffff000000ab744d306619dfb3a37d897662bee00189f43da46a908a235c84cbad335fd1d2f2ef93a6a70c8b8ece0e243eab05a34ab0a7e7e497065e5e282e284f8d5e8852a265d528075214af000000000070d42182d8f3a347d48289a8b29b911ac473c5fa02bb0e24e5b7b238e27263a23c0b865f75331d888c72df1da4b290582f00024227f03204add786a87b23ceb17c25810e769fe2d6a7bd8e504843b66b1a8c7b364bd2194ba9c8f60ac0c9b18d8c1b9e1a736825c91b4dff0000c1c5dcffa295c2930000000000235d84b0193a5ea7c77cdb7de9ce1a59ab4158097b4dd13ebfaf4425c6855530b56a3320d85c8fe85f667998b1a7e589f486c107761108e4e230419fd27b6ad9c10b25c6b6ed84badbb970dcf133279dd355e41de944564bdab99c5c712a9fbc8e9691c775bb94f746505e1e748cf1710d52468b4b1625ce21612ed5e807dfb5f19f3267e5366b2c0b2a0be49ae476263c9407ac6c596bf3cf66204984f5aebf93d1caa220ea6969cea852fe9a7d1eee13f1f48722a69ad9fb850bd093a302b9250245900ad5c8e5f20ddf77ee3d5a168964fad1aa7347d36c502d02b1d96d753ef6fc354fc126070060c65c147651fca62c0a06939f40c90ebc3042e753fe91b5770b24f25c558736dd7e1e9fb214cbb04c5c6ee4c970b320ba6fb6ef4615f4092de54c519f4622e1224153463ea80248a45a95a189958f586d606dcaa9aac656cf95a2d35225cfb0e6f47486d5cbb04a590116d4de92e203e107d68728a189b0d537d2442beab2f8ce7b2dd357200dcd139e47267012fc2a2b6bad79be429d1ddaccbe0139f16ca1b9bc1103000000ed1ece54cfdbe04670bee9b42fe3dc42033997e2e700b6edb2b49b5f2f6001ee0a9e5d1bee199ce9124a5cb479040000000000000049ead5b02d5ea1dcf6cdcf332fe94b3c1932d8d391754774a32c9b7e6ca4023bce2c7281d27a2cb62383ab3a3bb535650fbfb96c89936855eb7a485698f0d20c3eedd6123ef8f218d52ea2c346f80acb8b9a71856d2f2d1a7c6f45ee127b6a1d1ac1e243ed02e49e8aafe835919564af915965a050c37ceff855bd2dec3452c7c38f5dbf1ff1ff00020000000000006a1a029ea6540b40b2f797813af2c7d4ed235c2dc5f1dbbfcc52b2f55fd3f9f100c4891d0cb4c10ed01489bf235c45822594d7a6edc9d1270a7819fc0c597fdfb4d7842da1b411346297a40bbf221bbf63ad3822575dcc01a3c34b5aa4e3750400000000000000fc0fd9c746cf0ed4b0343d00a154e6a869346256ffbd666a34414ab0f40bec45b1c24f02ac9bc20e69201968537dd4dc61323c8b6d3643183631664eeca616696fb30fe89c8bdb15037c801fca4a9c220fec5d14582a00b62548ddf2599e5ffc5330cefb8903d276eae21b0b4b20100ead8256636c7e754185e815dd21445cc965a0526da38021a3e540949494ef3041cfa5067f556a0af5c19d27ff4f61fa7762d7963c96853709e773f14c47eef784cb145ae9d6d37fc7b5d83e05ac773fcc429eae6826a9d207d4c39df8eed9cc2ae3f68df1c6495a82d02939b448bf8038521057714e6e6405000000be9e0b0025d16b7eff573f78364ed70a62a7b1e55311dc0193d47f9ecc8c7ad268dc6e2e75f8cc83315411bd6c6b88e1850ee757ac2f9e4d6ac510003717d5847a19e750db92d33d6bdc434d0b52b2eb4b1790459e35122f46b205120a54bf657da9fd55d43a89e333481de468f5984a69509e9eac7a5b39c004396e8cb3ab037fd62fa43f259f13ebc4b590e9ea07ea37689049c799cd444d45dabe3e3cf086768daa6816c37793d17a284d2828f5eab2d3d0bedd5334b7bb4c983fa9cd4bd86f0ad227901e83ef4871695380d25bea2929fa66382af6ddb89917ab100046151bd08fce74247955247daa1ea75139b9ce3771526503c7db3a4b3ff39301986c1fd9b5c42d39e768946c9a7ee8dd081bfb6ea5fa132ebdbe72d02ce9f2000000006f63ae8311afc4943c963d39e42c54a3f52d121bfb425fe268892f654febdaee43e95b5ae6749275e1ad8b8b279e1ae296e03a8d9386d8e199dc1f00000008000000000000000026c43493c622f041b47d329b248e8ccd92e9b17007ba2578eefcb59f50343722e6cba3be72fd037eb5fa243a395b5c83376a14414b32c2e8a33de8000000003927da2bec76f4e15c8bf3715c5bfe7b3617d0fcf9b5861554b5b76b8ae69c644a48931306a16cff8a38ea95553867e2c5fb1e99b1802e616345871b4611627874cfbe30fa5793c873ae6f75427f3eeda690147b9615b096d967c2d7f5ddf725f0544f8750a5ed04d6ca0f223506fec5d5e65b467c59459f6113cf41c174a63a17fc79d0b777a0c903c0d2e7f79b6f9ce68a3b72315407040f6a09cadc25e87b7c6b4a3079c7989b4cf04b2581b555fa9a2d74392939b4dbaa9e620e22ab975ac3a5a329157762c1f29075fbdd39451a56b97c90e4fde6782a7c78e7fbe8400054dcafcd51e9eef2d2ea10a3f2636ac2239cef5d8505060de55f472aa89cb8e0188f2ee96cb1ae8dee3c03d0a942c6289cbc4499cea402bd0550520f4aae98c436f18a667ae4efeb5e6a4b1b3f53536145a87578ead8ec76b17acd9d9629449714ed1302714c3519fdd8529b5a86ce2fabb7f285fe73730000000000000000000000000000000073b6f8e9255567374cb2cc80be58fca5b1dc50d85342e56beda632edb7f0a4abcabae102fadfbffecc6b1549315dda8e09d18a7fe5e1574e4fad426b6ca211da39a16dffdd661a20b20c390e00004b002cd83b754c3d32819c823027b3cf8f8da6e63d099712be370bb2aa06debff931ea0a2e7aa0390000000000000045b6720d74c470d49e1e97d1668bb75ad994089d723c2eeaad3f857937fa3df615121a1841ed452dd395788e1a82efda18b41c06c948ef44af8500fbe1ee0828a3b047afb80435935b0f99b381dcf101e9a1593bdaab3bc88c70bf56995a4790a339e1b62516356644ed7df6db419d0976a5169e68e8bd4712552c5ec03f2818c17c4a5bf1e5ecd9bb40074a63c66b61f4779226a99dc5ff9c442e93991570797493569e6f9ccd6d73bcbce41022e2731fc61b6bf0188c74a21471332a546ffe8e9dd738aa2ca782ff5a547a1ad7c348c59ff99d1496404eafcd0333df8f2801d39ad0c82735af24b819efc2fd67c6a53835f0af6a51d1b9123f4b9af7fa2ee2ebf4bc2973cf04380b41aa7577e35bcd28446bfcea19aa85440fe0fdce12e53da7b8842b7527a34d1bcb16fcdc84f2c46a78c01c2ff463cdd0d65267b0822e899e893514a02acd8c21583d181224175d08ff75223da84d53656eb7ab46ad442d70c67a6010029329924b8b39e6dc4b2077a4b9645d8e0a445ae2c7be53d66007d491ab0f6851a2cc1cffeed15f586a035c1a2888c56f43"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r3, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000000)="b9ff03030018698cb89e40f086dd6000000e00002f00630677", 0x0, 0xfa, 0x2000000, 0x3f, 0xc0, &(0x7f0000000440), &(0x7f0000000080), 0x4}, 0x50) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x24040810) write$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000200)=ANY=[], 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x11, 0x4, 0x4, 0x9}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 106.336788ms ago: executing program 4 (id=10843): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x57, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f0000000280)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) socket$kcm(0xa, 0x3, 0x73) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r4, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x4000001) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000002c0)=r6, 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r7, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r7, &(0x7f0000000000)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x572, @remote}, 0x80, &(0x7f0000001340)=[{&(0x7f0000000040)="f4001100022b3325a6d5b02f3af865fe8007000000007afefff50000090000000000000000", 0x25}, {&(0x7f0000000080)="e3da9b", 0x3}, {0x0, 0xbb}], 0x3}, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000040)={0x7, 0x80, 0x10, 0xf, 0x67, 0x5, 0x0, 0x3, 0x402, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000000), 0x6}, 0x4400, 0x8000000000000001, 0x2, 0x3, 0x0, 0x3ff, 0x6, 0x0, 0x2, 0x0, 0xa}) 0s ago: executing program 2 (id=10844): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400, 0x8}, 0x4202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0xc, 0x1, &(0x7f0000000080)=@raw=[@exit], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4e, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x2, 0x3, 0x84) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x1, 0x0, 0x3, 0x4, 0x0, 0xef, 0x1af1ed, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0, 0x1}, 0x109901, 0x20000001, 0x6, 0x0, 0x2, 0x4, 0x0, 0x0, 0xfffffffe}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x10, 0xa, 0x9, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f00000008c0)={&(0x7f0000000240), 0x6e, &(0x7f0000000840)=[{&(0x7f0000000500)=""/181, 0xb5}, {&(0x7f0000000680)=""/79, 0x4f}, {&(0x7f0000000700)=""/222, 0xde}, {&(0x7f0000000800)=""/15, 0xf}], 0x4, &(0x7f0000000880)}, 0x10001) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90124fc60", 0x14}], 0x1}, 0x0) sendmsg$inet(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000007000000890704ac14140f00110000000000000a0000000001000000fc000000000000001400000000000000010000000200000004000000000000001c000000000000000000000008"], 0x68}, 0x0) r5 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x200, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @perf_bp={0x0, 0x5}, 0x21, 0x0, 0x0, 0x8, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x6) ioctl$PERF_EVENT_IOC_ID(r1, 0x80082407, &(0x7f0000000040)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0xc29a, 0x8}, 0x0, 0xffffffffffffffff, r1, 0x0) r6 = getpid() sendmsg$unix(r3, &(0x7f0000000c80)={&(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000b80)=[{&(0x7f00000005c0)="9b621593ddc8109219c3ffc81d30a9b674ffe868cd598f41997bb4c8312715", 0x1f}, {&(0x7f00000009c0)="a5a1a004a49b4aa7586eadfeab94bab6d250f43db5b5f14ff14a2e16b257f28fabf8c48dbeedcbbebca5bb51c4ed1b6b61b425598d6859a5020f3b56eb06f03e5fcb47995213331e3054099a2c174ae51141d36b", 0x54}, {&(0x7f0000000a40)="e0deb944069ddef20658e09c", 0xc}, {&(0x7f0000000a80)="b8bf91f518f754776d50112970f12c9d65a4885bcc987a657d", 0x19}, {&(0x7f0000000ac0)="cfc65174fae801fd07175f5c9bcea0df6c8b7ee60b91a6d66ba33bd445bb0a8b67e3eaa06f012b74e4290179ca9bd369d5bb10a7be2c637c1e9bf8fcbf0bd274e3d7d89b516c1ddea1af057a6fe8a7bfacc04edc8cd326f301b257a24a749a0f6fd74e6157c86b705e6b310f9282456a85a89a877b29948fe6743c402b6ba7d87d45bdf8a0b35b37dc2341ee930603639fafef53a2acf7", 0x97}], 0x5, &(0x7f0000000cc0)=ANY=[@ANYBLOB="14e7e5d47180527908461b14000000000100"/27, @ANYRES32, @ANYBLOB="00000000100000000000000001000000010000001c000000000000000100000002000000", @ANYRES32=r6, @ANYRES32, @ANYRES32, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32=r5, @ANYRES32=r0, @ANYRES32=r4, @ANYRES32=r0, @ANYRES32=r5, @ANYRES32=r0], 0x70, 0x880}, 0x4048c25) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/syz0\x00', 0x200002, 0x0) socket$kcm(0x1e, 0x1, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0}, 0x6000, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x1}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001100)={{0x1, 0xffffffffffffffff}, &(0x7f0000000300), 0x0}, 0x20) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001140)={0x1b, 0x0, 0x0, 0xb, 0x0, 0x1, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x3}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001240)={0x6, 0x13, &(0x7f0000000d40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xf}, {}, {}, [@generic={0x3, 0x4, 0xa, 0x4, 0xc4f}, @exit, @ldst={0x0, 0x1, 0x6, 0x2, 0x5}, @alu={0x4, 0x1, 0x0, 0x6, 0x2, 0xc, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000e00)='GPL\x00', 0x2, 0xa5, &(0x7f0000000e40)=""/165, 0x41000, 0x78, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000f00)={0x0, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000011c0)=[0xffffffffffffffff, r10, 0x1, r11, r12], &(0x7f0000001200)=[{0x1, 0x4, 0xb, 0xa}], 0x10, 0x2}, 0x94) close(r9) recvmsg$unix(r8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r13, &(0x7f0000000340)=ANY=[@ANYRES64], 0x2) sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904021d080207000000040000a118000200e000000100000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843c8802033d0803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) kernel console output (not intermixed with test programs): . [ 1441.250009][T30196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1441.267661][T30196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1441.390445][T30196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1441.925240][T30196] device hsr_slave_0 entered promiscuous mode [ 1441.944781][T30196] device hsr_slave_1 entered promiscuous mode [ 1441.968272][T30196] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1442.009924][T30196] Cannot create hsr debugfs directory [ 1442.295685][ T4283] Bluetooth: hci3: command 0x040f tx timeout [ 1442.400207][T30345] netlink: 'syz.2.8924': attribute type 1 has an invalid length. [ 1442.412396][T30345] netlink: 'syz.2.8924': attribute type 3 has an invalid length. [ 1442.441598][T30345] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8924'. [ 1443.250664][T30362] netlink: 'syz.2.8930': attribute type 2 has an invalid length. [ 1443.259317][T30362] netlink: 'syz.2.8930': attribute type 8 has an invalid length. [ 1443.268246][T30362] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8930'. [ 1443.360293][T25411] device veth0_to_team left promiscuous mode [ 1443.376590][T25411] Ÿë: port 2(veth0_to_team) entered disabled state [ 1443.468188][T25411] device hsr_slave_0 left promiscuous mode [ 1443.528716][T25411] device hsr_slave_1 left promiscuous mode [ 1443.586246][T25411] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1443.593754][T25411] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1443.671472][T25411] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1443.693304][T25411] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1443.737894][T25411] bridge0: port 3(dummy0) entered disabled state [ 1443.771591][T25411] device bridge_slave_1 left promiscuous mode [ 1443.798590][T25411] bridge0: port 2(bridge_slave_1) entered disabled state [ 1443.838312][T25411] device bridge_slave_0 left promiscuous mode [ 1443.847913][T25411] bridge0: port 1(bridge_slave_0) entered disabled state [ 1444.013143][T25411] device veth1_macvtap left promiscuous mode [ 1444.042879][T25411] device veth0_macvtap left promiscuous mode [ 1444.365757][ T4281] Bluetooth: hci3: command 0x0419 tx timeout [ 1444.426046][T25411] team0 (unregistering): Port device geneve1 removed [ 1444.772217][T25411] team0 (unregistering): Port device team_slave_1 removed [ 1444.820932][T25411] team0 (unregistering): Port device team_slave_0 removed [ 1444.866716][T25411] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1444.911326][T25411] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1445.219965][T25411] bond0 (unregistering): Released all slaves [ 1445.357536][T30383] __nla_validate_parse: 1 callbacks suppressed [ 1445.357556][T30383] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8936'. [ 1445.565878][ T4283] Bluetooth: hci0: command 0x0406 tx timeout [ 1447.409235][T30424] netlink: 'syz.1.8948': attribute type 40 has an invalid length. [ 1447.441475][T30419] netlink: 'syz.4.8946': attribute type 10 has an invalid length. [ 1447.486270][T30419] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8946'. [ 1447.579778][T30427] netlink: 'syz.1.8948': attribute type 40 has an invalid length. [ 1447.623361][T30196] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1447.692819][T30196] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1447.758684][T30196] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1447.812873][T30196] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1448.131030][T30196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1448.186075][T30445] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.8950'. [ 1448.295003][T30196] 8021q: adding VLAN 0 to HW filter on device team0 [ 1448.366166][ T1810] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1448.388708][ T1810] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1448.429161][ T1810] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1448.461464][T30452] netlink: 'syz.4.8954': attribute type 3 has an invalid length. [ 1448.483518][ T1810] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1448.503151][T30452] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8954'. [ 1448.524069][ T1810] bridge0: port 1(bridge_slave_0) entered blocking state [ 1448.531308][ T1810] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1448.598752][ T1810] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1448.678224][ T1810] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1448.730344][ T1810] bridge0: port 2(bridge_slave_1) entered blocking state [ 1448.737583][ T1810] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1448.796539][ T1810] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1448.851876][ T1810] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1448.925337][ T1810] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1448.977648][T25436] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1449.006288][T25436] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1449.060731][T25436] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1449.074835][T25436] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1449.112337][T25436] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1449.167379][T30196] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1449.178025][T30196] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1449.206003][T25411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1449.223370][T25411] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1449.291623][T25411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1449.376687][T25411] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1449.434247][T25411] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1450.422508][T30492] netlink: 'syz.1.8964': attribute type 2 has an invalid length. [ 1450.456561][T30492] netlink: 'syz.1.8964': attribute type 8 has an invalid length. [ 1450.475954][T30492] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8964'. [ 1450.616427][T25436] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1450.624054][T25436] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1450.669099][T30196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1450.798044][T25436] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1450.841240][T25436] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1450.904491][T25416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1450.961706][T25416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1450.972428][T25416] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1451.020156][T25416] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1451.078996][T30196] device veth0_vlan entered promiscuous mode [ 1451.129008][T30196] device veth1_vlan entered promiscuous mode [ 1451.230303][T30517] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8969'. [ 1451.401469][T30517] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8969'. [ 1451.422633][T30518] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8969'. [ 1451.455870][T30519] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8969'. [ 1451.564541][T25397] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1451.577168][T25397] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1451.607866][T25397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1451.649783][T25397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1451.701305][T30196] device veth0_macvtap entered promiscuous mode [ 1451.731698][T25397] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1451.764742][T30196] device veth1_macvtap entered promiscuous mode [ 1451.832344][T30196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1451.850619][T30196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1451.862111][T30196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1451.891077][T30196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1451.921839][T30196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1451.952318][T30196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1452.001156][T30196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1452.050372][T25416] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1452.087836][T25416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1452.130538][T30196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1452.201244][T30196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1452.231679][T30196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1452.273006][T30196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1452.305575][T30196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1452.334719][T30196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1452.350278][T30196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1452.372270][T30196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1452.422072][T30196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1452.496482][T25416] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1452.515758][T25416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1452.564069][T30196] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1452.593175][T30196] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1452.642759][T30196] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1452.695558][T30196] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1453.410639][T10672] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1453.442170][T10672] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1453.489132][T25436] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1453.511923][T25411] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1453.534413][T25411] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1453.577447][T10672] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1453.838574][T30576] netlink: 'syz.0.8986': attribute type 2 has an invalid length. [ 1453.857464][T30576] netlink: 'syz.0.8986': attribute type 8 has an invalid length. [ 1453.893721][T30576] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8986'. [ 1457.283078][T30664] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9011'. [ 1457.330406][T30664] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9011'. [ 1457.381618][T30669] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9011'. [ 1457.402033][T30664] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9011'. [ 1457.819479][T30684] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.9017'. [ 1458.762755][T30718] netlink: 126612 bytes leftover after parsing attributes in process `syz.1.9027'. [ 1458.795843][T30718] netlink: 17 bytes leftover after parsing attributes in process `syz.1.9027'. [ 1460.237676][T30752] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9034'. [ 1460.317095][T30752] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9034'. [ 1460.387092][T30755] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9034'. [ 1461.356518][T30777] netlink: 'syz.4.9045': attribute type 2 has an invalid length. [ 1461.364604][T30777] netlink: 'syz.4.9045': attribute type 8 has an invalid length. [ 1462.556265][T30819] __nla_validate_parse: 2 callbacks suppressed [ 1462.556285][T30819] netlink: 60 bytes leftover after parsing attributes in process `syz.4.9059'. [ 1462.612840][T30819] netlink: 60 bytes leftover after parsing attributes in process `syz.4.9059'. [ 1462.670954][T30814] netlink: 60 bytes leftover after parsing attributes in process `syz.4.9059'. [ 1462.699921][T30814] netlink: 60 bytes leftover after parsing attributes in process `syz.4.9059'. [ 1465.660256][T30908] netlink: 'syz.0.9093': attribute type 4 has an invalid length. [ 1465.705240][T30908] netlink: 152 bytes leftover after parsing attributes in process `syz.0.9093'. [ 1465.729296][T30911] device pim6reg1 entered promiscuous mode [ 1465.822581][T30913] netlink: 212908 bytes leftover after parsing attributes in process `syz.4.9096'. [ 1465.852420][T30913] netlink: zone id is out of range [ 1465.919173][T30910] netlink: 'syz.0.9093': attribute type 4 has an invalid length. [ 1465.958531][T30910] netlink: 152 bytes leftover after parsing attributes in process `syz.0.9093'. [ 1471.758910][T30987] device syzkaller0 entered promiscuous mode [ 1471.964930][T31026] netlink: 212908 bytes leftover after parsing attributes in process `syz.2.9132'. [ 1472.034730][T31026] netlink: zone id is out of range [ 1473.108674][T31050] netlink: 60 bytes leftover after parsing attributes in process `syz.1.9140'. [ 1475.210233][T31050] netlink: 60 bytes leftover after parsing attributes in process `syz.1.9140'. [ 1475.227691][T31061] netlink: 'syz.0.9144': attribute type 10 has an invalid length. [ 1475.241515][T31061] netlink: 'syz.0.9144': attribute type 19 has an invalid length. [ 1475.295703][T31061] netlink: 14536 bytes leftover after parsing attributes in process `syz.0.9144'. [ 1475.570870][T31077] netlink: 'syz.0.9148': attribute type 10 has an invalid length. [ 1477.019559][T31111] netlink: 212908 bytes leftover after parsing attributes in process `syz.1.9159'. [ 1477.053540][T31111] netlink: zone id is out of range [ 1478.520056][T31156] netlink: 212908 bytes leftover after parsing attributes in process `syz.3.9176'. [ 1478.533197][T31156] netlink: zone id is out of range [ 1478.939467][T31162] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9178'. [ 1478.974265][T31162] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9178'. [ 1479.047041][T31168] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9178'. [ 1479.081891][T31162] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9178'. [ 1479.624830][T31183] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9185'. [ 1479.677843][T31183] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9185'. [ 1479.880432][T31187] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9185'. [ 1479.907692][T31194] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.9187'. [ 1480.682169][T31214] netlink: 'syz.1.9197': attribute type 2 has an invalid length. [ 1480.697181][T31214] netlink: 'syz.1.9197': attribute type 8 has an invalid length. [ 1482.987231][T31280] netlink: 'syz.0.9225': attribute type 2 has an invalid length. [ 1483.014216][T31280] netlink: 'syz.0.9225': attribute type 8 has an invalid length. [ 1483.115595][T31280] __nla_validate_parse: 3 callbacks suppressed [ 1483.115640][T31280] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9225'. [ 1483.159759][T31284] netlink: 152 bytes leftover after parsing attributes in process `syz.1.9227'. [ 1483.176327][T31284] tc_dump_action: action bad kind [ 1484.449483][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.455905][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1485.884540][T31360] netlink: 152 bytes leftover after parsing attributes in process `syz.3.9255'. [ 1486.089132][T31367] netlink: 'syz.1.9258': attribute type 2 has an invalid length. [ 1486.114264][T31367] netlink: 'syz.1.9258': attribute type 8 has an invalid length. [ 1486.133908][T31367] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9258'. [ 1487.027157][T31395] netlink: 60 bytes leftover after parsing attributes in process `syz.1.9269'. [ 1487.074550][T31395] netlink: 60 bytes leftover after parsing attributes in process `syz.1.9269'. [ 1487.121359][T31396] netlink: 60 bytes leftover after parsing attributes in process `syz.1.9269'. [ 1487.154194][T31398] netlink: 152 bytes leftover after parsing attributes in process `syz.2.9270'. [ 1487.166392][T31399] netlink: 60 bytes leftover after parsing attributes in process `syz.1.9269'. [ 1488.260516][T31423] netlink: 'syz.0.9281': attribute type 2 has an invalid length. [ 1488.293563][T31423] netlink: 'syz.0.9281': attribute type 8 has an invalid length. [ 1488.322352][T31423] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9281'. [ 1489.792575][T31472] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9300'. [ 1489.836079][T31472] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9300'. [ 1489.910817][T31469] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9300'. [ 1490.119049][T31473] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9300'. [ 1491.080347][ T4283] Bluetooth: hci5: ISO packet for unknown connection handle 11 [ 1492.659538][T31529] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9324'. [ 1492.706987][T31529] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9324'. [ 1492.740314][T31530] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9324'. [ 1492.789078][T31529] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9324'. [ 1493.082695][T31534] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1493.191008][T31534] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1493.201709][T31534] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1493.560877][T31556] TCP: TCP_TX_DELAY enabled [ 1494.807896][T31582] netlink: 'syz.0.9345': attribute type 20 has an invalid length. [ 1495.107236][T31588] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9347'. [ 1495.132016][T31588] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9347'. [ 1495.163669][T31594] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9347'. [ 1495.237073][T31588] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9347'. [ 1495.630489][T31609] device batadv0 entered promiscuous mode [ 1497.296281][ T4281] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1497.305402][ T4281] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1497.313418][ T4281] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1497.322991][ T4281] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1497.331346][ T4281] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1497.342913][ T4281] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1498.117341][T31653] chnl_net:caif_netlink_parms(): no params data found [ 1498.603960][T31653] bridge0: port 1(bridge_slave_0) entered blocking state [ 1498.705615][T31653] bridge0: port 1(bridge_slave_0) entered disabled state [ 1498.763682][T31653] device bridge_slave_0 entered promiscuous mode [ 1498.826611][T31653] bridge0: port 2(bridge_slave_1) entered blocking state [ 1498.834894][T31653] bridge0: port 2(bridge_slave_1) entered disabled state [ 1498.884166][T31653] device bridge_slave_1 entered promiscuous mode [ 1499.010474][T31653] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1499.072891][T31653] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1499.216594][T31653] team0: Port device team_slave_0 added [ 1499.242040][T31653] team0: Port device team_slave_1 added [ 1499.303566][T31693] netlink: 49920 bytes leftover after parsing attributes in process `syz.1.9382'. [ 1499.325202][T31653] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1499.344627][T31653] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1499.382906][T31653] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1499.405797][ T4281] Bluetooth: hci4: command 0x0409 tx timeout [ 1499.425368][T31653] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1499.449528][T31653] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1499.491902][T31653] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1500.843757][T31653] device hsr_slave_0 entered promiscuous mode [ 1500.896980][T31653] device hsr_slave_1 entered promiscuous mode [ 1501.485756][ T4281] Bluetooth: hci4: command 0x041b tx timeout [ 1501.558246][T25411] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1501.823787][T25411] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1502.007047][T25411] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1502.144123][T25411] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1502.572930][T25411] device 0 left promiscuous mode [ 1503.565958][ T4281] Bluetooth: hci4: command 0x040f tx timeout [ 1503.888912][T31653] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1503.924989][T31653] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1504.066019][T31653] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1504.086051][T31653] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1504.786795][T31804] sctp: [Deprecated]: syz.2.9414 (pid 31804) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1504.786795][T31804] Use struct sctp_sack_info instead [ 1505.448790][T31653] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1505.607935][T25411] device wlan1 left promiscuous mode [ 1505.629580][T25411] team0: Port device wlan1 removed [ 1505.645740][ T4281] Bluetooth: hci4: command 0x0419 tx timeout [ 1505.687063][T31816] netlink: 'syz.1.9420': attribute type 2 has an invalid length. [ 1505.721866][T31816] netlink: 'syz.1.9420': attribute type 8 has an invalid length. [ 1505.764116][T31816] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9420'. [ 1505.794364][T25436] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1505.811863][T25436] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1505.834285][T31653] 8021q: adding VLAN 0 to HW filter on device team0 [ 1505.857617][T31822] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9432'. [ 1505.889705][T31822] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9432'. [ 1506.071744][T31827] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9432'. [ 1506.113091][T10672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1506.146163][T10672] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1506.192085][T10672] bridge0: port 1(bridge_slave_0) entered blocking state [ 1506.199332][T10672] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1506.236420][T10672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1506.276533][T10672] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1506.316051][T10672] bridge0: port 2(bridge_slave_1) entered blocking state [ 1506.323248][T10672] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1506.384973][T31822] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9432'. [ 1506.474531][T25411] device hsr_slave_0 left promiscuous mode [ 1506.504079][T25411] device hsr_slave_1 left promiscuous mode [ 1506.562184][T25411] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1506.581854][T25411] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1506.618603][T25411] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1506.636038][T25411] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1506.654579][T25411] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 1506.683654][T25411] batman_adv: batadv0: Removing interface: virt_wifi0 [ 1506.691696][T25411] bridge0: port 4(dummy0) entered disabled state [ 1506.747304][T25411] bridge0: port 3(team0) entered disabled state [ 1506.766845][T25411] device bridge_slave_1 left promiscuous mode [ 1506.773102][T25411] bridge0: port 2(bridge_slave_1) entered disabled state [ 1506.805182][T25411] device bridge_slave_0 left promiscuous mode [ 1506.813418][T25411] bridge0: port 1(bridge_slave_0) entered disabled state [ 1506.853988][T25411] device veth1_macvtap left promiscuous mode [ 1506.863749][T25411] device veth0_macvtap left promiscuous mode [ 1506.874398][T25411] device veth1_vlan left promiscuous mode [ 1506.891301][T25411] device veth0_vlan left promiscuous mode [ 1507.251232][T25411] device geneve1 left promiscuous mode [ 1507.259054][T25411] team0 (unregistering): Port device geneve1 removed [ 1507.958361][T25411] device team_slave_1 left promiscuous mode [ 1507.965410][T25411] team0 (unregistering): Port device team_slave_1 removed [ 1508.007855][T25411] device team_slave_0 left promiscuous mode [ 1508.014907][T25411] team0 (unregistering): Port device team_slave_0 removed [ 1508.062335][T25411] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1508.134616][T25411] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1508.443872][T25411] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1508.453795][T25411] bond0 (unregistering): Released all slaves [ 1508.548789][T10672] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1508.558031][T10672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1508.611239][T31835] device syzkaller0 entered promiscuous mode [ 1510.520548][T31878] tun0: tun_chr_ioctl cmd 1074025675 [ 1510.527480][T31878] tun0: persist enabled [ 1510.531836][T31879] tun0: tun_chr_ioctl cmd 1074025675 [ 1510.537998][T31879] tun0: persist enabled [ 1510.566281][T10672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1510.578134][T10672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1510.588468][T10672] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1510.598753][T10672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1510.617026][T10672] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1510.662366][T10672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1510.672182][T10672] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1510.680840][T10672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1510.690873][T10672] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1510.699784][T10672] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1510.716846][T31885] netlink: 'syz.3.9441': attribute type 2 has an invalid length. [ 1510.724693][T31885] netlink: 'syz.3.9441': attribute type 8 has an invalid length. [ 1510.732854][T31885] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9441'. [ 1510.777117][T31653] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1510.991099][T31897] netlink: 'syz.3.9445': attribute type 4 has an invalid length. [ 1511.020111][T31897] netlink: 168 bytes leftover after parsing attributes in process `syz.3.9445'. [ 1511.706231][T25422] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1511.713772][T25422] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1511.762344][T31653] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1511.928716][T31931] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9454'. [ 1511.938165][T31931] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9454'. [ 1511.949532][T31927] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9454'. [ 1512.032898][T31931] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9454'. [ 1512.520878][T31946] tun0: tun_chr_ioctl cmd 1074025675 [ 1512.545733][T31946] tun0: persist enabled [ 1512.582506][T31939] tun0: tun_chr_ioctl cmd 1074025675 [ 1512.614123][T31939] tun0: persist enabled [ 1513.888136][T25436] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1513.936946][T25436] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1513.997041][T25436] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1514.022083][T25436] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1514.055702][T31653] device veth0_vlan entered promiscuous mode [ 1514.063101][T25436] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1514.077486][T25436] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1514.121132][T31653] device veth1_vlan entered promiscuous mode [ 1514.152056][T32004] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9465'. [ 1514.240867][T31653] device veth0_macvtap entered promiscuous mode [ 1514.262374][T25436] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1514.293006][T25436] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1514.317446][T25436] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1514.356056][T25436] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1514.381718][T25436] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1514.435378][T31653] device veth1_macvtap entered promiscuous mode [ 1514.455369][T29222] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1514.531172][T31653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1514.541834][T31653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1514.553325][T31653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1514.571068][T31653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1514.592843][T31653] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1514.601982][T10685] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1514.611599][T10685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1514.622122][T31653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1514.635342][T31653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1514.648668][T31653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1514.659720][T31653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1514.670648][T31653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1514.684044][T31653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1514.694571][T31653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1514.707406][T31653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1514.795758][T31653] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1514.853587][T32017] netlink: 184 bytes leftover after parsing attributes in process `syz.2.9471'. [ 1514.896646][T10685] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1514.936975][T10685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1514.962039][T31653] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1514.979992][T31653] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1514.993732][T31653] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1515.017517][T31653] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1515.263492][T25436] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1515.282094][T25436] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1515.297122][T10672] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1515.338375][T10672] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1515.347383][T10672] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1515.374619][T10672] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1515.786810][T32027] tun0: tun_chr_ioctl cmd 1074025675 [ 1515.805814][T32027] tun0: persist enabled [ 1515.825030][T32036] netlink: 'syz.0.9476': attribute type 3 has an invalid length. [ 1516.093166][T32045] netlink: 'syz.2.9478': attribute type 2 has an invalid length. [ 1516.112981][T32045] netlink: 'syz.2.9478': attribute type 8 has an invalid length. [ 1516.150978][T32045] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9478'. [ 1516.898694][T32072] netlink: 'syz.1.9493': attribute type 2 has an invalid length. [ 1516.967540][T32072] netlink: 'syz.1.9493': attribute type 8 has an invalid length. [ 1516.975349][T32072] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9493'. [ 1517.044082][T32074] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9494'. [ 1517.055922][T32082] netlink: 'syz.4.9496': attribute type 11 has an invalid length. [ 1517.063801][T32082] netlink: 140 bytes leftover after parsing attributes in process `syz.4.9496'. [ 1517.077156][T32074] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9494'. [ 1517.149475][T32084] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9494'. [ 1517.167072][T32074] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9494'. [ 1517.466362][T32088] netlink: 'syz.4.9499': attribute type 2 has an invalid length. [ 1517.490292][T32088] netlink: 'syz.4.9499': attribute type 8 has an invalid length. [ 1517.511062][T32088] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9499'. [ 1517.963207][T32107] netlink: 'syz.3.9517': attribute type 21 has an invalid length. [ 1517.974807][T32107] netlink: 100 bytes leftover after parsing attributes in process `syz.3.9517'. [ 1518.555264][T32128] netlink: 60 bytes leftover after parsing attributes in process `syz.1.9516'. [ 1520.675738][T32187] netlink: 'syz.0.9531': attribute type 10 has an invalid length. [ 1521.743682][T32213] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 1522.034571][T32217] netlink: 'syz.2.9553': attribute type 2 has an invalid length. [ 1522.073333][T32217] netlink: 'syz.2.9553': attribute type 8 has an invalid length. [ 1522.095731][T32217] __nla_validate_parse: 8 callbacks suppressed [ 1522.095770][T32217] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9553'. [ 1527.585856][T32328] device syzkaller0 entered promiscuous mode [ 1527.626119][T32328] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 65487 [ 1528.723344][T32361] netlink: 'syz.1.9612': attribute type 2 has an invalid length. [ 1528.757529][T32361] netlink: 'syz.1.9612': attribute type 8 has an invalid length. [ 1528.788179][T32361] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9612'. [ 1529.918217][T32399] netlink: 'syz.0.9630': attribute type 3 has an invalid length. [ 1529.990349][T32399] netlink: 163968 bytes leftover after parsing attributes in process `syz.0.9630'. [ 1530.145904][T32400] netlink: 'syz.0.9630': attribute type 11 has an invalid length. [ 1531.203856][T32439] netlink: 'syz.2.9644': attribute type 21 has an invalid length. [ 1531.262758][T32439] netlink: 156 bytes leftover after parsing attributes in process `syz.2.9644'. [ 1531.285569][T32439] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9644'. [ 1531.788043][T32454] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9649'. [ 1531.801073][T32454] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9649'. [ 1531.856511][T32461] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9649'. [ 1531.870410][T32454] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9649'. [ 1533.155967][T32496] netlink: 60 bytes leftover after parsing attributes in process `syz.1.9668'. [ 1533.187073][T32496] netlink: 60 bytes leftover after parsing attributes in process `syz.1.9668'. [ 1533.829675][T32514] netlink: 'syz.2.9673': attribute type 3 has an invalid length. [ 1533.829796][T32513] netlink: 'syz.2.9673': attribute type 3 has an invalid length. [ 1533.928620][T32513] __nla_validate_parse: 2 callbacks suppressed [ 1533.928640][T32513] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.9673'. [ 1533.975739][T32514] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.9673'. [ 1534.071562][T32518] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.9676'. [ 1534.131814][T32517] netlink: 'syz.4.9675': attribute type 2 has an invalid length. [ 1534.147293][T32517] netlink: 'syz.4.9675': attribute type 8 has an invalid length. [ 1534.156211][T32517] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9675'. [ 1535.030338][T32551] device pim6reg1 entered promiscuous mode [ 1535.388661][T32554] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9690'. [ 1535.449510][T32554] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9690'. [ 1535.474273][T32559] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9690'. [ 1535.588413][T32554] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9690'. [ 1535.961313][T32578] netlink: 'syz.3.9700': attribute type 10 has an invalid length. [ 1536.021176][T32581] netlink: 'syz.3.9700': attribute type 9 has an invalid length. [ 1536.045804][T32581] netlink: 668 bytes leftover after parsing attributes in process `syz.3.9700'. [ 1536.631808][T32603] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1536.654648][T32603] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1536.663987][T32603] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1536.671849][T32603] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1536.707511][T32603] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 1536.751569][T32603] batman_adv: batadv0: Removing interface: virt_wifi0 [ 1537.100401][T32610] netlink: 'syz.1.9725': attribute type 1 has an invalid length. [ 1537.194815][T32610] netlink: 16255 bytes leftover after parsing attributes in process `syz.1.9725'. [ 1537.779315][T32631] FAULT_INJECTION: forcing a failure. [ 1537.779315][T32631] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1537.798155][T32631] CPU: 0 PID: 32631 Comm: syz.0.9721 Not tainted syzkaller #0 [ 1537.805706][T32631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1537.815845][T32631] Call Trace: [ 1537.819187][T32631] [ 1537.822174][T32631] dump_stack_lvl+0x188/0x24e [ 1537.826920][T32631] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1537.833152][T32631] ? show_regs_print_info+0x12/0x12 [ 1537.838415][T32631] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1537.844717][T32631] ? dump_stack+0x5/0x12 [ 1537.849048][T32631] should_fail_ex+0x390/0x4c0 [ 1537.853842][T32631] _copy_to_user+0x2c/0x130 [ 1537.858456][T32631] simple_read_from_buffer+0xe3/0x150 [ 1537.863929][T32631] proc_fail_nth_read+0x1a6/0x220 [ 1537.869036][T32631] ? proc_fault_inject_write+0x310/0x310 [ 1537.874734][T32631] ? fsnotify_perm+0x248/0x550 [ 1537.879548][T32631] ? proc_fault_inject_write+0x310/0x310 [ 1537.885232][T32631] vfs_read+0x2db/0x960 [ 1537.889454][T32631] ? kernel_read+0x1e0/0x1e0 [ 1537.894108][T32631] ? __fget_files+0x28/0x460 [ 1537.898757][T32631] ? __fget_files+0x3fc/0x460 [ 1537.903540][T32631] ? __fdget_pos+0x2ae/0x360 [ 1537.908178][T32631] ? ksys_read+0x70/0x260 [ 1537.912566][T32631] ksys_read+0x14d/0x260 [ 1537.916877][T32631] ? vfs_write+0x9a0/0x9a0 [ 1537.921353][T32631] ? lockdep_hardirqs_on+0x94/0x140 [ 1537.926604][T32631] do_syscall_64+0x4c/0xa0 [ 1537.931065][T32631] ? clear_bhb_loop+0x60/0xb0 [ 1537.935792][T32631] ? clear_bhb_loop+0x60/0xb0 [ 1537.940526][T32631] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1537.946485][T32631] RIP: 0033:0x7fe221f5e84e [ 1537.950947][T32631] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1537.970591][T32631] RSP: 002b:00007fe222d91fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1537.979056][T32631] RAX: ffffffffffffffda RBX: 00007fe222d926c0 RCX: 00007fe221f5e84e [ 1537.987070][T32631] RDX: 000000000000000f RSI: 00007fe222d920a0 RDI: 0000000000000003 [ 1537.995080][T32631] RBP: 00007fe222d92090 R08: 0000000000000000 R09: 0000000000000000 [ 1538.003096][T32631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1538.011122][T32631] R13: 00007fe222226038 R14: 00007fe222225fa0 R15: 00007ffc7b11c8a8 [ 1538.019170][T32631] [ 1539.201973][T32673] FAULT_INJECTION: forcing a failure. [ 1539.201973][T32673] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1539.227157][T32673] CPU: 0 PID: 32673 Comm: syz.2.9739 Not tainted syzkaller #0 [ 1539.234721][T32673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1539.244849][T32673] Call Trace: [ 1539.248201][T32673] [ 1539.251194][T32673] dump_stack_lvl+0x188/0x24e [ 1539.255973][T32673] ? show_regs_print_info+0x12/0x12 [ 1539.261256][T32673] ? load_image+0x410/0x410 [ 1539.265839][T32673] ? __lock_acquire+0x7c40/0x7c40 [ 1539.270976][T32673] should_fail_ex+0x390/0x4c0 [ 1539.275757][T32673] _copy_from_user+0x2c/0x170 [ 1539.280518][T32673] ___sys_sendmsg+0x1c3/0x360 [ 1539.285314][T32673] ? __sys_sendmsg+0x2a0/0x2a0 [ 1539.290240][T32673] ? trace_call_bpf+0xbf/0x6b0 [ 1539.295185][T32673] __se_sys_sendmsg+0x1c3/0x2b0 [ 1539.300118][T32673] ? perf_trace_preemptirq_template+0x268/0x320 [ 1539.306528][T32673] ? __x64_sys_sendmsg+0x80/0x80 [ 1539.311622][T32673] ? lockdep_hardirqs_on+0x94/0x140 [ 1539.316913][T32673] do_syscall_64+0x4c/0xa0 [ 1539.321400][T32673] ? clear_bhb_loop+0x60/0xb0 [ 1539.326149][T32673] ? clear_bhb_loop+0x60/0xb0 [ 1539.330901][T32673] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1539.336865][T32673] RIP: 0033:0x7f3a2199e019 [ 1539.341349][T32673] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1539.361096][T32673] RSP: 002b:00007f3a227bd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1539.369554][T32673] RAX: ffffffffffffffda RBX: 00007f3a21c25fa0 RCX: 00007f3a2199e019 [ 1539.377561][T32673] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 1539.385591][T32673] RBP: 00007f3a227bd090 R08: 0000000000000000 R09: 0000000000000000 [ 1539.393613][T32673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1539.401628][T32673] R13: 00007f3a21c26038 R14: 00007f3a21c25fa0 R15: 00007ffc88f99e68 [ 1539.409685][T32673] [ 1542.321479][T32685] netlink: 'syz.3.9744': attribute type 2 has an invalid length. [ 1542.482254][T32685] device 0 entered promiscuous mode [ 1542.518708][T32692] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9742'. [ 1542.567138][T32692] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9742'. [ 1542.610384][T32687] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9742'. [ 1542.671224][T32697] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9742'. [ 1543.151397][T32712] syz.3.9754[32712] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1543.336864][T32720] netlink: 'syz.1.9759': attribute type 2 has an invalid length. [ 1543.380805][T32720] netlink: 'syz.1.9759': attribute type 8 has an invalid length. [ 1543.389998][T32720] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9759'. [ 1543.919975][T32737] FAULT_INJECTION: forcing a failure. [ 1543.919975][T32737] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1543.952678][T32737] CPU: 1 PID: 32737 Comm: syz.1.9765 Not tainted syzkaller #0 [ 1543.960229][T32737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1543.970352][T32737] Call Trace: [ 1543.973686][T32737] [ 1543.976670][T32737] dump_stack_lvl+0x188/0x24e [ 1543.981474][T32737] ? show_regs_print_info+0x12/0x12 [ 1543.986747][T32737] ? load_image+0x410/0x410 [ 1543.991358][T32737] ? __lock_acquire+0x7c40/0x7c40 [ 1543.996478][T32737] should_fail_ex+0x390/0x4c0 [ 1544.001369][T32737] _copy_from_user+0x2c/0x170 [ 1544.006126][T32737] iovec_from_user+0x143/0x360 [ 1544.010985][T32737] __import_iovec+0x6c/0x510 [ 1544.015674][T32737] import_iovec+0x6f/0xa0 [ 1544.020098][T32737] ___sys_sendmsg+0x252/0x360 [ 1544.024898][T32737] ? __sys_sendmsg+0x2a0/0x2a0 [ 1544.029838][T32737] ? __lock_acquire+0x7c40/0x7c40 [ 1544.035016][T32737] __se_sys_sendmsg+0x1c3/0x2b0 [ 1544.039955][T32737] ? __x64_sys_sendmsg+0x80/0x80 [ 1544.045014][T32737] ? lockdep_hardirqs_on+0x94/0x140 [ 1544.050285][T32737] do_syscall_64+0x4c/0xa0 [ 1544.054792][T32737] ? clear_bhb_loop+0x60/0xb0 [ 1544.059545][T32737] ? clear_bhb_loop+0x60/0xb0 [ 1544.064310][T32737] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1544.070290][T32737] RIP: 0033:0x7f285359e019 [ 1544.074769][T32737] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1544.094476][T32737] RSP: 002b:00007f285438c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1544.102970][T32737] RAX: ffffffffffffffda RBX: 00007f2853825fa0 RCX: 00007f285359e019 [ 1544.110998][T32737] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 1544.119040][T32737] RBP: 00007f285438c090 R08: 0000000000000000 R09: 0000000000000000 [ 1544.127068][T32737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1544.135104][T32737] R13: 00007f2853826038 R14: 00007f2853825fa0 R15: 00007ffdde079548 [ 1544.143193][T32737] [ 1545.867308][ T304] netlink: 'syz.4.9781': attribute type 2 has an invalid length. [ 1545.891199][ T304] netlink: 'syz.4.9781': attribute type 8 has an invalid length. [ 1545.933760][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.940173][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1545.949386][ T304] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9781'. [ 1546.151719][ T313] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.9787'. [ 1546.678411][ T327] FAULT_INJECTION: forcing a failure. [ 1546.678411][ T327] name failslab, interval 1, probability 0, space 0, times 0 [ 1546.742194][ T327] CPU: 1 PID: 327 Comm: syz.4.9789 Not tainted syzkaller #0 [ 1546.749597][ T327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1546.759720][ T327] Call Trace: [ 1546.763071][ T327] [ 1546.766162][ T327] dump_stack_lvl+0x188/0x24e [ 1546.770949][ T327] ? show_regs_print_info+0x12/0x12 [ 1546.776239][ T327] ? load_image+0x410/0x410 [ 1546.780833][ T327] ? __might_sleep+0xd0/0xd0 [ 1546.785504][ T327] ? __lock_acquire+0x7c40/0x7c40 [ 1546.790630][ T327] should_fail_ex+0x390/0x4c0 [ 1546.795492][ T327] should_failslab+0x5/0x20 [ 1546.800078][ T327] slab_pre_alloc_hook+0x59/0x300 [ 1546.805199][ T327] kmem_cache_alloc_node+0x5a/0x310 [ 1546.810471][ T327] ? __alloc_skb+0xf9/0x7d0 [ 1546.815092][ T327] __alloc_skb+0xf9/0x7d0 [ 1546.819515][ T327] netlink_sendmsg+0x654/0xbd0 [ 1546.824385][ T327] ? netlink_getsockopt+0x550/0x550 [ 1546.829677][ T327] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1546.835311][ T327] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1546.840674][ T327] ? security_socket_sendmsg+0x7c/0xa0 [ 1546.846291][ T327] ? netlink_getsockopt+0x550/0x550 [ 1546.851586][ T327] ____sys_sendmsg+0x5ed/0x9a0 [ 1546.856453][ T327] ? __sys_sendmsg_sock+0x30/0x30 [ 1546.861548][ T327] ? __import_iovec+0x306/0x510 [ 1546.866518][ T327] ? import_iovec+0x6f/0xa0 [ 1546.871131][ T327] ___sys_sendmsg+0x2a2/0x360 [ 1546.875889][ T327] ? preempt_schedule_notrace_thunk+0x16/0x18 [ 1546.882134][ T327] ? __sys_sendmsg+0x2a0/0x2a0 [ 1546.887060][ T327] ? trace_call_bpf+0xbf/0x6b0 [ 1546.891990][ T327] __se_sys_sendmsg+0x1c3/0x2b0 [ 1546.896961][ T327] ? ct_nmi_exit+0x145/0x1c0 [ 1546.901654][ T327] ? __x64_sys_sendmsg+0x80/0x80 [ 1546.906726][ T327] ? lockdep_hardirqs_on+0x94/0x140 [ 1546.912026][ T327] do_syscall_64+0x4c/0xa0 [ 1546.916528][ T327] ? clear_bhb_loop+0x60/0xb0 [ 1546.921271][ T327] ? clear_bhb_loop+0x60/0xb0 [ 1546.926025][ T327] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1546.932008][ T327] RIP: 0033:0x7f9d6159e019 [ 1546.936505][ T327] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1546.956197][ T327] RSP: 002b:00007f9d624b3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1546.964708][ T327] RAX: ffffffffffffffda RBX: 00007f9d61826090 RCX: 00007f9d6159e019 [ 1546.972750][ T327] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 1546.980821][ T327] RBP: 00007f9d624b3090 R08: 0000000000000000 R09: 0000000000000000 [ 1546.988855][ T327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1546.996891][ T327] R13: 00007f9d61826128 R14: 00007f9d61826090 R15: 00007ffdd13932f8 [ 1547.004992][ T327] [ 1549.660597][ T341] netlink: 'syz.3.9796': attribute type 10 has an invalid length. [ 1549.702927][ T341] netlink: 55 bytes leftover after parsing attributes in process `syz.3.9796'. [ 1550.652593][ T357] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9802'. [ 1550.915517][ T358] netlink: 'syz.1.9799': attribute type 21 has an invalid length. [ 1550.956109][ T358] netlink: 156 bytes leftover after parsing attributes in process `syz.1.9799'. [ 1550.978242][ T357] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9802'. [ 1551.022822][ T361] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9802'. [ 1551.037001][ T363] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9802'. [ 1554.649283][ T391] netlink: 'syz.4.9815': attribute type 2 has an invalid length. [ 1554.668069][ T391] netlink: 'syz.4.9815': attribute type 8 has an invalid length. [ 1554.689243][ T391] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9815'. [ 1555.032066][ T413] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.9828'. [ 1558.205788][ T4283] Bluetooth: hci3: command 0x0406 tx timeout [ 1559.802467][ T474] netlink: 'syz.1.9842': attribute type 21 has an invalid length. [ 1559.831719][ T474] netlink: 128 bytes leftover after parsing attributes in process `syz.1.9842'. [ 1559.856940][ T474] netlink: 'syz.1.9842': attribute type 4 has an invalid length. [ 1559.884182][ T474] netlink: 'syz.1.9842': attribute type 5 has an invalid length. [ 1559.930339][ T474] netlink: 3 bytes leftover after parsing attributes in process `syz.1.9842'. [ 1559.955307][ T470] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9840'. [ 1560.424640][ T470] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9840'. [ 1560.465149][ T481] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9840'. [ 1560.474629][ T482] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9840'. [ 1562.501154][ T547] netlink: 'syz.1.9868': attribute type 10 has an invalid length. [ 1562.524927][ T547] netlink: 'syz.1.9868': attribute type 11 has an invalid length. [ 1562.572987][ T547] netlink: 5145 bytes leftover after parsing attributes in process `syz.1.9868'. [ 1563.048774][ T554] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9872'. [ 1563.133453][ T554] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9872'. [ 1563.213075][ T558] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9872'. [ 1563.243281][ T560] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9872'. [ 1563.728159][ T578] netlink: 'syz.3.9880': attribute type 28 has an invalid length. [ 1563.746437][ T578] netlink: 'syz.3.9880': attribute type 4 has an invalid length. [ 1563.768046][ T578] netlink: 136 bytes leftover after parsing attributes in process `syz.3.9880'. [ 1563.834990][ T575] netlink: 'syz.3.9880': attribute type 10 has an invalid length. [ 1563.845871][ T575] netlink: 55 bytes leftover after parsing attributes in process `syz.3.9880'. [ 1564.494506][ T595] netlink: 'syz.3.9887': attribute type 2 has an invalid length. [ 1564.532732][ T595] netlink: 'syz.3.9887': attribute type 8 has an invalid length. [ 1566.350005][ T635] netlink: 'syz.1.9903': attribute type 10 has an invalid length. [ 1566.379191][ T635] __nla_validate_parse: 1 callbacks suppressed [ 1566.379210][ T635] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9903'. [ 1566.460427][ T635] team0: Port device virt_wifi0 removed [ 1566.570142][ T635] batman_adv: batadv0: Adding interface: virt_wifi0 [ 1566.578588][ T635] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1566.604883][ T635] batman_adv: batadv0: Not using interface virt_wifi0 (retrying later): interface not active [ 1567.409257][ T655] netlink: 'syz.4.9910': attribute type 2 has an invalid length. [ 1567.438042][ T655] netlink: 'syz.4.9910': attribute type 8 has an invalid length. [ 1567.481973][ T655] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9910'. [ 1568.523438][ T680] netlink: 60 bytes leftover after parsing attributes in process `syz.1.9920'. [ 1568.575665][ T680] netlink: 60 bytes leftover after parsing attributes in process `syz.1.9920'. [ 1568.632750][ T679] netlink: 60 bytes leftover after parsing attributes in process `syz.1.9920'. [ 1568.685736][ T683] netlink: 60 bytes leftover after parsing attributes in process `syz.1.9920'. [ 1572.364760][ T726] netlink: 202920 bytes leftover after parsing attributes in process `syz.1.9939'. [ 1572.480992][ T732] netlink: 'syz.3.9938': attribute type 3 has an invalid length. [ 1572.531256][ T732] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9938'. [ 1572.864758][ T737] netlink: 26 bytes leftover after parsing attributes in process `syz.4.9943'. [ 1573.220763][ T741] netlink: 'syz.0.9944': attribute type 2 has an invalid length. [ 1573.246112][ T741] netlink: 'syz.0.9944': attribute type 8 has an invalid length. [ 1573.265812][ T741] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9944'. [ 1573.779953][ T749] netlink: 60 bytes leftover after parsing attributes in process `syz.1.9947'. [ 1573.836215][ T749] netlink: 60 bytes leftover after parsing attributes in process `syz.1.9947'. [ 1573.871899][ T749] netlink: 60 bytes leftover after parsing attributes in process `syz.1.9947'. [ 1573.911726][ T749] netlink: 60 bytes leftover after parsing attributes in process `syz.1.9947'. [ 1574.180420][ T755] netlink: 'syz.3.9950': attribute type 2 has an invalid length. [ 1574.518774][ T762] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9953'. [ 1574.548728][ T762] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9953'. [ 1574.666526][ T767] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 1574.808683][ T767] device hsr_slave_0 left promiscuous mode [ 1576.357109][ T788] netlink: 'syz.1.9961': attribute type 3 has an invalid length. [ 1577.291476][ T795] netlink: 'syz.4.9965': attribute type 2 has an invalid length. [ 1577.317249][ T795] netlink: 'syz.4.9965': attribute type 8 has an invalid length. [ 1579.015314][ T823] __nla_validate_parse: 6 callbacks suppressed [ 1579.015337][ T823] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9974'. [ 1579.068216][ T823] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9974'. [ 1579.109368][ T824] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9974'. [ 1579.152599][ T828] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9974'. [ 1580.464019][ T845] netlink: 'syz.1.9982': attribute type 2 has an invalid length. [ 1580.502561][ T845] netlink: 'syz.1.9982': attribute type 8 has an invalid length. [ 1580.554105][ T845] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9982'. [ 1580.672086][ T848] netlink: 'syz.1.9982': attribute type 2 has an invalid length. [ 1580.723094][ T848] netlink: 'syz.1.9982': attribute type 8 has an invalid length. [ 1580.756031][ T848] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9982'. [ 1580.818830][ T853] netlink: 1010 bytes leftover after parsing attributes in process `syz.2.9984'. [ 1580.844648][ T856] netlink: 14 bytes leftover after parsing attributes in process `syz.2.9984'. [ 1580.885745][ T856] device hsr_slave_0 left promiscuous mode [ 1580.926739][ T856] device hsr_slave_1 left promiscuous mode [ 1581.451579][ T861] netlink: 'syz.4.9987': attribute type 10 has an invalid length. [ 1581.480036][ T861] netlink: 128 bytes leftover after parsing attributes in process `syz.4.9987'. [ 1581.527462][ T864] netlink: 'syz.4.9987': attribute type 27 has an invalid length. [ 1581.606291][ T864] netlink: 'syz.4.9987': attribute type 25 has an invalid length. [ 1582.514707][ T878] netlink: 'syz.1.9991': attribute type 2 has an invalid length. [ 1582.545692][ T878] netlink: 'syz.1.9991': attribute type 8 has an invalid length. [ 1582.606214][ T878] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9991'. [ 1582.620514][ T882] netlink: 'syz.2.9993': attribute type 3 has an invalid length. [ 1584.895572][ T922] __nla_validate_parse: 1 callbacks suppressed [ 1584.895595][ T922] netlink: 1010 bytes leftover after parsing attributes in process `syz.3.10001'. [ 1585.048674][ T922] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 1585.121243][ T931] netlink: 14 bytes leftover after parsing attributes in process `syz.3.10001'. [ 1585.156651][ T931] device hsr_slave_0 left promiscuous mode [ 1585.180118][ T931] device hsr_slave_1 left promiscuous mode [ 1587.374766][ T961] netlink: 60 bytes leftover after parsing attributes in process `syz.1.10017'. [ 1587.398001][ T961] netlink: 60 bytes leftover after parsing attributes in process `syz.1.10017'. [ 1587.425863][ T966] netlink: 60 bytes leftover after parsing attributes in process `syz.1.10017'. [ 1587.458077][ T961] netlink: 60 bytes leftover after parsing attributes in process `syz.1.10017'. [ 1588.269814][ T962] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.10016'. [ 1588.322532][ T962] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 1588.353201][ T962] CPU: 0 PID: 962 Comm: syz.2.10016 Not tainted syzkaller #0 [ 1588.360693][ T962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1588.370823][ T962] Call Trace: [ 1588.374184][ T962] [ 1588.377181][ T962] dump_stack_lvl+0x188/0x24e [ 1588.382073][ T962] ? show_regs_print_info+0x12/0x12 [ 1588.387361][ T962] ? load_image+0x410/0x410 [ 1588.392165][ T962] sysfs_warn_dup+0x8a/0xa0 [ 1588.396743][ T962] sysfs_do_create_link_sd+0xc0/0x110 [ 1588.402206][ T962] device_add+0x83b/0x1050 [ 1588.406728][ T962] wiphy_register+0x1d8b/0x2aa0 [ 1588.411696][ T962] ? cfg80211_event_work+0x40/0x40 [ 1588.416874][ T962] ? minstrel_ht_alloc+0x894/0xa20 [ 1588.422054][ T962] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1588.428177][ T962] ieee80211_register_hw+0x2d48/0x39f0 [ 1588.433898][ T962] ? ieee80211_register_hw+0xee1/0x39f0 [ 1588.439527][ T962] ? ieee80211_register_hw+0xee1/0x39f0 [ 1588.445143][ T962] ? ieee80211_tasklet_handler+0x20/0x20 [ 1588.450829][ T962] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1588.456791][ T962] ? __debug_object_init+0xed/0x440 [ 1588.462063][ T962] ? memset+0x1e/0x40 [ 1588.466094][ T962] ? __hrtimer_init+0x189/0x270 [ 1588.471016][ T962] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 1588.476821][ T962] ? memcpy+0x3c/0x60 [ 1588.480871][ T962] hwsim_new_radio_nl+0xab7/0xc90 [ 1588.485984][ T962] genl_family_rcv_msg_doit+0x22f/0x350 [ 1588.491582][ T962] ? end_current_label_crit_section+0x170/0x170 [ 1588.497892][ T962] ? trace_call_bpf+0xbf/0x6b0 [ 1588.502804][ T962] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1588.508795][ T962] ? bpf_lsm_capable+0x5/0x10 [ 1588.513543][ T962] ? security_capable+0x85/0xb0 [ 1588.518481][ T962] genl_rcv_msg+0x601/0x790 [ 1588.523062][ T962] ? genl_bind+0x360/0x360 [ 1588.527531][ T962] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 1588.533996][ T962] netlink_rcv_skb+0x1ef/0x440 [ 1588.538821][ T962] ? genl_bind+0x360/0x360 [ 1588.543305][ T962] ? netlink_ack+0x1160/0x1160 [ 1588.548172][ T962] ? down_read+0x1a8/0x2d0 [ 1588.552743][ T962] genl_rcv+0x24/0x40 [ 1588.556763][ T962] netlink_unicast+0x7ad/0x920 [ 1588.561605][ T962] netlink_sendmsg+0x8ad/0xbd0 [ 1588.566457][ T962] ? netlink_getsockopt+0x550/0x550 [ 1588.571725][ T962] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1588.577594][ T962] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1588.582922][ T962] ? security_socket_sendmsg+0x7c/0xa0 [ 1588.588435][ T962] ? netlink_getsockopt+0x550/0x550 [ 1588.593694][ T962] ____sys_sendmsg+0x5ed/0x9a0 [ 1588.598546][ T962] ? __sys_sendmsg_sock+0x30/0x30 [ 1588.603614][ T962] ? __import_iovec+0x306/0x510 [ 1588.608537][ T962] ? import_iovec+0x6f/0xa0 [ 1588.613133][ T962] ___sys_sendmsg+0x2a2/0x360 [ 1588.617896][ T962] ? __sys_sendmsg+0x2a0/0x2a0 [ 1588.622847][ T962] __se_sys_sendmsg+0x1c3/0x2b0 [ 1588.627764][ T962] ? __x64_sys_sendmsg+0x80/0x80 [ 1588.632795][ T962] ? lockdep_hardirqs_on+0x94/0x140 [ 1588.638048][ T962] do_syscall_64+0x4c/0xa0 [ 1588.642542][ T962] ? clear_bhb_loop+0x60/0xb0 [ 1588.647285][ T962] ? clear_bhb_loop+0x60/0xb0 [ 1588.652013][ T962] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1588.657952][ T962] RIP: 0033:0x7f3a2199e019 [ 1588.662404][ T962] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1588.682051][ T962] RSP: 002b:00007f3a227bd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1588.690516][ T962] RAX: ffffffffffffffda RBX: 00007f3a21c25fa0 RCX: 00007f3a2199e019 [ 1588.698533][ T962] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 1588.706548][ T962] RBP: 00007f3a21a3500c R08: 0000000000000000 R09: 0000000000000000 [ 1588.714572][ T962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1588.722587][ T962] R13: 00007f3a21c26038 R14: 00007f3a21c25fa0 R15: 00007ffc88f99e68 [ 1588.730643][ T962] [ 1589.553185][ T997] FAULT_INJECTION: forcing a failure. [ 1589.553185][ T997] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1589.595765][ T997] CPU: 0 PID: 997 Comm: syz.0.10025 Not tainted syzkaller #0 [ 1589.603273][ T997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1589.613383][ T997] Call Trace: [ 1589.616716][ T997] [ 1589.619705][ T997] dump_stack_lvl+0x188/0x24e [ 1589.624471][ T997] ? show_regs_print_info+0x12/0x12 [ 1589.629749][ T997] ? load_image+0x410/0x410 [ 1589.634333][ T997] ? __lock_acquire+0x7c40/0x7c40 [ 1589.639462][ T997] should_fail_ex+0x390/0x4c0 [ 1589.644245][ T997] _copy_from_user+0x2c/0x170 [ 1589.649000][ T997] ___sys_sendmsg+0x1c3/0x360 [ 1589.653769][ T997] ? __sys_sendmsg+0x2a0/0x2a0 [ 1589.658686][ T997] ? __lock_acquire+0x7c40/0x7c40 [ 1589.663866][ T997] __se_sys_sendmsg+0x1c3/0x2b0 [ 1589.668805][ T997] ? __x64_sys_sendmsg+0x80/0x80 [ 1589.673857][ T997] ? lockdep_hardirqs_on+0x94/0x140 [ 1589.679131][ T997] do_syscall_64+0x4c/0xa0 [ 1589.683625][ T997] ? clear_bhb_loop+0x60/0xb0 [ 1589.688374][ T997] ? clear_bhb_loop+0x60/0xb0 [ 1589.693140][ T997] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1589.699108][ T997] RIP: 0033:0x7fe221f9e019 [ 1589.703571][ T997] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1589.723244][ T997] RSP: 002b:00007fe2201f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1589.731719][ T997] RAX: ffffffffffffffda RBX: 00007fe222226090 RCX: 00007fe221f9e019 [ 1589.739747][ T997] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 1589.747778][ T997] RBP: 00007fe2201f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1589.755829][ T997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1589.763859][ T997] R13: 00007fe222226128 R14: 00007fe222226090 R15: 00007ffc7b11c8a8 [ 1589.771946][ T997] [ 1590.140683][T10685] tipc: Subscription rejected, illegal request [ 1590.376710][ T1006] netlink: 1010 bytes leftover after parsing attributes in process `syz.4.10027'. [ 1590.407759][ T1006] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 1590.454470][ T1010] netlink: 14 bytes leftover after parsing attributes in process `syz.4.10027'. [ 1590.524193][ T1010] device hsr_slave_0 left promiscuous mode [ 1591.098296][ T1010] device hsr_slave_1 left promiscuous mode [ 1591.896606][ T1024] netlink: 192156 bytes leftover after parsing attributes in process `syz.0.10033'. [ 1591.968797][ T1024] netlink: zone id is out of range [ 1591.995731][ T1024] netlink: zone id is out of range [ 1592.195240][ T1037] device syzkaller0 entered promiscuous mode [ 1595.474725][ T1061] netlink: 14560 bytes leftover after parsing attributes in process `syz.1.10043'. [ 1595.496169][ T1068] pimreg: tun_chr_ioctl cmd 2147767511 [ 1595.501764][ T1069] pimreg: tun_chr_ioctl cmd 2147767511 [ 1595.739706][T25436] tipc: Subscription rejected, illegal request [ 1596.946269][ T1098] netlink: 'syz.1.10053': attribute type 2 has an invalid length. [ 1596.963514][ T1098] netlink: 'syz.1.10053': attribute type 8 has an invalid length. [ 1596.992728][ T1098] netlink: 132 bytes leftover after parsing attributes in process `syz.1.10053'. [ 1598.314963][T25413] tipc: Subscription rejected, illegal request [ 1599.148583][ T1144] netlink: 10 bytes leftover after parsing attributes in process `syz.1.10071'. [ 1599.483514][ T1154] netlink: 188 bytes leftover after parsing attributes in process `syz.2.10074'. [ 1599.737071][ T1162] netlink: 60 bytes leftover after parsing attributes in process `syz.1.10075'. [ 1599.802787][ T1162] netlink: 60 bytes leftover after parsing attributes in process `syz.1.10075'. [ 1599.830321][ T1164] netlink: 60 bytes leftover after parsing attributes in process `syz.1.10075'. [ 1599.845059][ T1156] netlink: 60 bytes leftover after parsing attributes in process `syz.1.10075'. [ 1600.491502][ T1184] netlink: 'syz.1.10084': attribute type 2 has an invalid length. [ 1600.526673][ T1184] netlink: 'syz.1.10084': attribute type 8 has an invalid length. [ 1600.534567][ T1184] netlink: 132 bytes leftover after parsing attributes in process `syz.1.10084'. [ 1600.795700][ T1193] netlink: 'syz.2.10089': attribute type 2 has an invalid length. [ 1600.830316][ T1193] netlink: 'syz.2.10089': attribute type 8 has an invalid length. [ 1600.866422][ T1193] netlink: 197344 bytes leftover after parsing attributes in process `syz.2.10089'. [ 1603.317126][ T1198] netlink: 830 bytes leftover after parsing attributes in process `syz.2.10091'. [ 1603.706734][ T1211] pimreg: tun_chr_ioctl cmd 2147767511 [ 1603.724823][ T1211] pimreg: tun_chr_ioctl cmd 2147767511 [ 1604.160441][ T1219] netlink: 'syz.4.10098': attribute type 2 has an invalid length. [ 1604.182751][ T1219] netlink: 'syz.4.10098': attribute type 1 has an invalid length. [ 1604.244543][ T1219] netlink: 152 bytes leftover after parsing attributes in process `syz.4.10098'. [ 1605.314848][ T1236] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10103'. [ 1605.342429][ T1236] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10103'. [ 1605.374411][ T1239] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10103'. [ 1605.422520][ T1236] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10103'. [ 1605.615731][ T1244] netlink: 26 bytes leftover after parsing attributes in process `syz.0.10107'. [ 1605.834067][ T1256] pimreg: tun_chr_ioctl cmd 2147767511 [ 1605.848398][ T1256] pimreg: tun_chr_ioctl cmd 2147767511 [ 1605.948229][ T1259] netlink: 'syz.1.10111': attribute type 39 has an invalid length. [ 1607.255931][ T1292] device bridge_slave_1 left promiscuous mode [ 1607.262285][ T1292] bridge0: port 2(bridge_slave_1) entered disabled state [ 1607.297443][ T1292] device bridge_slave_0 left promiscuous mode [ 1607.303978][ T1292] bridge0: port 1(bridge_slave_0) entered disabled state [ 1607.314937][ T1301] FAULT_INJECTION: forcing a failure. [ 1607.314937][ T1301] name failslab, interval 1, probability 0, space 0, times 0 [ 1607.333607][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.340682][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.364380][ T1301] CPU: 1 PID: 1301 Comm: syz.2.10127 Not tainted syzkaller #0 [ 1607.371930][ T1301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1607.382034][ T1301] Call Trace: [ 1607.385363][ T1301] [ 1607.388367][ T1301] dump_stack_lvl+0x188/0x24e [ 1607.393113][ T1301] ? show_regs_print_info+0x12/0x12 [ 1607.398370][ T1301] ? load_image+0x410/0x410 [ 1607.402929][ T1301] ? verify_lock_unused+0x140/0x140 [ 1607.408171][ T1301] ? perf_trace_lock+0x301/0x390 [ 1607.413155][ T1301] should_fail_ex+0x390/0x4c0 [ 1607.417887][ T1301] should_failslab+0x5/0x20 [ 1607.422418][ T1301] slab_pre_alloc_hook+0x59/0x300 [ 1607.427515][ T1301] kmem_cache_alloc+0x56/0x2f0 [ 1607.432323][ T1301] ? skb_clone+0x1e7/0x370 [ 1607.436793][ T1301] skb_clone+0x1e7/0x370 [ 1607.441099][ T1301] __netlink_deliver_tap+0x3e4/0x7e0 [ 1607.446462][ T1301] ? netlink_deliver_tap+0x2e/0x1b0 [ 1607.451701][ T1301] netlink_deliver_tap+0x19c/0x1b0 [ 1607.456873][ T1301] netlink_unicast+0x777/0x920 [ 1607.461722][ T1301] netlink_sendmsg+0x8ad/0xbd0 [ 1607.466611][ T1301] ? netlink_getsockopt+0x550/0x550 [ 1607.471952][ T1301] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1607.477561][ T1301] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1607.482886][ T1301] ? security_socket_sendmsg+0x7c/0xa0 [ 1607.488385][ T1301] ? netlink_getsockopt+0x550/0x550 [ 1607.493632][ T1301] ____sys_sendmsg+0x5ed/0x9a0 [ 1607.498456][ T1301] ? __sys_sendmsg_sock+0x30/0x30 [ 1607.503537][ T1301] ? __import_iovec+0x306/0x510 [ 1607.508475][ T1301] ? import_iovec+0x6f/0xa0 [ 1607.513026][ T1301] ___sys_sendmsg+0x2a2/0x360 [ 1607.517754][ T1301] ? __sys_sendmsg+0x2a0/0x2a0 [ 1607.522586][ T1301] ? __lock_acquire+0x7c40/0x7c40 [ 1607.527688][ T1301] __se_sys_sendmsg+0x1c3/0x2b0 [ 1607.532609][ T1301] ? __x64_sys_sendmsg+0x80/0x80 [ 1607.537621][ T1301] ? lockdep_hardirqs_on+0x94/0x140 [ 1607.542854][ T1301] do_syscall_64+0x4c/0xa0 [ 1607.547325][ T1301] ? clear_bhb_loop+0x60/0xb0 [ 1607.552034][ T1301] ? clear_bhb_loop+0x60/0xb0 [ 1607.556741][ T1301] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1607.562660][ T1301] RIP: 0033:0x7f3a2199e019 [ 1607.567293][ T1301] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1607.587018][ T1301] RSP: 002b:00007f3a227bd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1607.595470][ T1301] RAX: ffffffffffffffda RBX: 00007f3a21c25fa0 RCX: 00007f3a2199e019 [ 1607.603562][ T1301] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 1607.611563][ T1301] RBP: 00007f3a227bd090 R08: 0000000000000000 R09: 0000000000000000 [ 1607.619564][ T1301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1607.627566][ T1301] R13: 00007f3a21c26038 R14: 00007f3a21c25fa0 R15: 00007ffc88f99e68 [ 1607.635598][ T1301] [ 1609.311518][ T1356] FAULT_INJECTION: forcing a failure. [ 1609.311518][ T1356] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1609.355886][ T1356] CPU: 0 PID: 1356 Comm: syz.2.10145 Not tainted syzkaller #0 [ 1609.363424][ T1356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1609.373516][ T1356] Call Trace: [ 1609.376822][ T1356] [ 1609.379772][ T1356] dump_stack_lvl+0x188/0x24e [ 1609.384486][ T1356] ? show_regs_print_info+0x12/0x12 [ 1609.389722][ T1356] ? load_image+0x410/0x410 [ 1609.394258][ T1356] ? __lock_acquire+0x7c40/0x7c40 [ 1609.399325][ T1356] should_fail_ex+0x390/0x4c0 [ 1609.404052][ T1356] _copy_from_user+0x2c/0x170 [ 1609.408774][ T1356] __sys_bpf+0x2ea/0x780 [ 1609.413053][ T1356] ? bpf_link_show_fdinfo+0x380/0x380 [ 1609.418508][ T1356] __x64_sys_bpf+0x78/0x90 [ 1609.422964][ T1356] do_syscall_64+0x4c/0xa0 [ 1609.427413][ T1356] ? clear_bhb_loop+0x60/0xb0 [ 1609.432139][ T1356] ? clear_bhb_loop+0x60/0xb0 [ 1609.436854][ T1356] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1609.442780][ T1356] RIP: 0033:0x7f3a2199e019 [ 1609.447223][ T1356] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1609.466862][ T1356] RSP: 002b:00007f3a2279c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1609.475392][ T1356] RAX: ffffffffffffffda RBX: 00007f3a21c26090 RCX: 00007f3a2199e019 [ 1609.483389][ T1356] RDX: 0000000000000018 RSI: 00002000000002c0 RDI: 0000000000000012 [ 1609.491390][ T1356] RBP: 00007f3a2279c090 R08: 0000000000000000 R09: 0000000000000000 [ 1609.499385][ T1356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1609.507376][ T1356] R13: 00007f3a21c26128 R14: 00007f3a21c26090 R15: 00007ffc88f99e68 [ 1609.515398][ T1356] [ 1609.730187][ T1367] netlink: 'syz.3.10149': attribute type 6 has an invalid length. [ 1609.745497][ T1367] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.10149'. [ 1610.241453][ T1381] netlink: 'syz.2.10155': attribute type 10 has an invalid length. [ 1610.261695][ T1381] netlink: 152 bytes leftover after parsing attributes in process `syz.2.10155'. [ 1611.684495][ T1409] FAULT_INJECTION: forcing a failure. [ 1611.684495][ T1409] name failslab, interval 1, probability 0, space 0, times 0 [ 1611.763462][ T1409] CPU: 1 PID: 1409 Comm: syz.1.10164 Not tainted syzkaller #0 [ 1611.771101][ T1409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1611.781293][ T1409] Call Trace: [ 1611.784618][ T1409] [ 1611.787598][ T1409] dump_stack_lvl+0x188/0x24e [ 1611.792441][ T1409] ? show_regs_print_info+0x12/0x12 [ 1611.797720][ T1409] ? load_image+0x410/0x410 [ 1611.802285][ T1409] ? __might_sleep+0xd0/0xd0 [ 1611.806926][ T1409] ? __lock_acquire+0x7c40/0x7c40 [ 1611.812025][ T1409] should_fail_ex+0x390/0x4c0 [ 1611.816793][ T1409] should_failslab+0x5/0x20 [ 1611.821342][ T1409] slab_pre_alloc_hook+0x59/0x300 [ 1611.826431][ T1409] ? fib_create_info+0xa78/0x2370 [ 1611.831557][ T1409] __kmem_cache_alloc_node+0x4f/0x270 [ 1611.837004][ T1409] ? fib_create_info+0xa78/0x2370 [ 1611.842088][ T1409] __kmalloc+0xa3/0x240 [ 1611.846331][ T1409] fib_create_info+0xa78/0x2370 [ 1611.851273][ T1409] fib_table_insert+0xc2/0x1af0 [ 1611.856185][ T1409] ? rtm_to_fib_config+0xfe5/0x1370 [ 1611.861462][ T1409] ? fib_new_table+0x106/0x2d0 [ 1611.866301][ T1409] inet_rtm_newroute+0x147/0x230 [ 1611.871311][ T1409] ? rcu_read_unlock+0xa0/0xa0 [ 1611.876170][ T1409] ? rcu_read_unlock+0xa0/0xa0 [ 1611.880990][ T1409] rtnetlink_rcv_msg+0x863/0xfb0 [ 1611.885997][ T1409] ? rtnetlink_rcv_msg+0x220/0xfb0 [ 1611.891198][ T1409] ? rtnetlink_bind+0x80/0x80 [ 1611.896006][ T1409] ? __dev_queue_xmit+0x1d84/0x3810 [ 1611.901287][ T1409] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 1611.907082][ T1409] ? perf_trace_lock+0x301/0x390 [ 1611.912100][ T1409] ? trace_event_raw_event_lock+0x230/0x230 [ 1611.918089][ T1409] ? __copy_skb_header+0x3ba/0x4f0 [ 1611.923276][ T1409] ? __skb_clone+0x446/0x6c0 [ 1611.927941][ T1409] netlink_rcv_skb+0x1ef/0x440 [ 1611.932765][ T1409] ? rtnetlink_bind+0x80/0x80 [ 1611.937511][ T1409] ? netlink_ack+0x1160/0x1160 [ 1611.942451][ T1409] ? netlink_deliver_tap+0x2e/0x1b0 [ 1611.947724][ T1409] netlink_unicast+0x7ad/0x920 [ 1611.952605][ T1409] netlink_sendmsg+0x8ad/0xbd0 [ 1611.957453][ T1409] ? netlink_getsockopt+0x550/0x550 [ 1611.962819][ T1409] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1611.968445][ T1409] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1611.973790][ T1409] ? security_socket_sendmsg+0x7c/0xa0 [ 1611.979305][ T1409] ? netlink_getsockopt+0x550/0x550 [ 1611.984568][ T1409] ____sys_sendmsg+0x5ed/0x9a0 [ 1611.989417][ T1409] ? __sys_sendmsg_sock+0x30/0x30 [ 1611.994492][ T1409] ? __import_iovec+0x306/0x510 [ 1611.999428][ T1409] ? import_iovec+0x6f/0xa0 [ 1612.004001][ T1409] ___sys_sendmsg+0x2a2/0x360 [ 1612.008836][ T1409] ? __sys_sendmsg+0x2a0/0x2a0 [ 1612.013708][ T1409] ? __lock_acquire+0x7c40/0x7c40 [ 1612.018838][ T1409] __se_sys_sendmsg+0x1c3/0x2b0 [ 1612.023893][ T1409] ? __x64_sys_sendmsg+0x80/0x80 [ 1612.028934][ T1409] ? lockdep_hardirqs_on+0x94/0x140 [ 1612.034206][ T1409] do_syscall_64+0x4c/0xa0 [ 1612.038679][ T1409] ? clear_bhb_loop+0x60/0xb0 [ 1612.043417][ T1409] ? clear_bhb_loop+0x60/0xb0 [ 1612.048167][ T1409] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1612.054117][ T1409] RIP: 0033:0x7f285359e019 [ 1612.058590][ T1409] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1612.078247][ T1409] RSP: 002b:00007f285438c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1612.086721][ T1409] RAX: ffffffffffffffda RBX: 00007f2853825fa0 RCX: 00007f285359e019 [ 1612.094745][ T1409] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 1612.102781][ T1409] RBP: 00007f285438c090 R08: 0000000000000000 R09: 0000000000000000 [ 1612.110803][ T1409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1612.118825][ T1409] R13: 00007f2853826038 R14: 00007f2853825fa0 R15: 00007ffdde079548 [ 1612.126887][ T1409] [ 1612.535679][ T1411] netlink: 'syz.4.10165': attribute type 21 has an invalid length. [ 1612.565911][ T1411] netlink: 'syz.4.10165': attribute type 20 has an invalid length. [ 1614.012564][ T1448] netlink: 60 bytes leftover after parsing attributes in process `syz.1.10179'. [ 1614.033078][ T1448] netlink: 60 bytes leftover after parsing attributes in process `syz.1.10179'. [ 1614.050772][ T1448] netlink: 60 bytes leftover after parsing attributes in process `syz.1.10179'. [ 1614.111424][ T1453] netlink: 60 bytes leftover after parsing attributes in process `syz.1.10179'. [ 1614.943323][ T1485] device bridge_slave_1 left promiscuous mode [ 1614.989657][ T1485] bridge0: port 2(bridge_slave_1) entered disabled state [ 1615.121649][ T1485] device bridge_slave_0 left promiscuous mode [ 1615.153402][ T1485] bridge0: port 1(bridge_slave_0) entered disabled state [ 1615.261885][ T1490] netlink: 'syz.1.10195': attribute type 29 has an invalid length. [ 1615.416537][ T1490] netlink: 'syz.1.10195': attribute type 29 has an invalid length. [ 1615.445873][ T1494] netlink: 'syz.1.10195': attribute type 29 has an invalid length. [ 1616.742857][ T1521] netlink: 196 bytes leftover after parsing attributes in process `syz.4.10206'. [ 1616.763084][ T1521] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 1618.464097][ T1501] device syzkaller0 entered promiscuous mode [ 1619.662388][ T4281] Bluetooth: hci4: command 0x0406 tx timeout [ 1620.955332][ T1520] netlink: 830 bytes leftover after parsing attributes in process `syz.4.10206'. [ 1620.964904][ T1530] netlink: 'syz.2.10210': attribute type 39 has an invalid length. [ 1621.313610][ T1548] netlink: 144 bytes leftover after parsing attributes in process `syz.1.10216'. [ 1622.370404][ T1576] netlink: 'syz.0.10226': attribute type 2 has an invalid length. [ 1622.400170][ T1576] netlink: 'syz.0.10226': attribute type 8 has an invalid length. [ 1622.431775][ T1576] netlink: 132 bytes leftover after parsing attributes in process `syz.0.10226'. [ 1623.459427][ T1608] netlink: 'syz.1.10238': attribute type 20 has an invalid length. [ 1623.715314][ T1615] netlink: 60 bytes leftover after parsing attributes in process `syz.0.10239'. [ 1623.745652][ T1615] netlink: 60 bytes leftover after parsing attributes in process `syz.0.10239'. [ 1623.791473][ T1612] netlink: 60 bytes leftover after parsing attributes in process `syz.0.10239'. [ 1623.883078][ T1615] netlink: 60 bytes leftover after parsing attributes in process `syz.0.10239'. [ 1625.022320][ T1647] netlink: 'syz.1.10252': attribute type 2 has an invalid length. [ 1625.045787][ T1647] netlink: 'syz.1.10252': attribute type 8 has an invalid length. [ 1625.053964][ T1647] netlink: 132 bytes leftover after parsing attributes in process `syz.1.10252'. [ 1625.313260][ T1654] netlink: 'syz.0.10255': attribute type 21 has an invalid length. [ 1625.371625][ T1654] netlink: 100 bytes leftover after parsing attributes in process `syz.0.10255'. [ 1625.401551][ T1653] netlink: 'syz.0.10255': attribute type 21 has an invalid length. [ 1625.420952][ T1653] netlink: 100 bytes leftover after parsing attributes in process `syz.0.10255'. [ 1626.914008][ T1681] netlink: 60 bytes leftover after parsing attributes in process `syz.4.10266'. [ 1626.928519][ T1681] netlink: 60 bytes leftover after parsing attributes in process `syz.4.10266'. [ 1626.953092][ T1681] netlink: 60 bytes leftover after parsing attributes in process `syz.4.10266'. [ 1626.991808][ T1681] netlink: 60 bytes leftover after parsing attributes in process `syz.4.10266'. [ 1629.269586][ T1735] netlink: 60 bytes leftover after parsing attributes in process `syz.4.10286'. [ 1629.310738][ T1735] netlink: 60 bytes leftover after parsing attributes in process `syz.4.10286'. [ 1629.379175][ T1732] netlink: 60 bytes leftover after parsing attributes in process `syz.4.10286'. [ 1629.439547][ T1731] netlink: 'syz.3.10285': attribute type 10 has an invalid length. [ 1629.593042][ T1731] team0: Device vxcan1 is of different type [ 1629.675910][ T1735] netlink: 60 bytes leftover after parsing attributes in process `syz.4.10286'. [ 1630.509466][ T1761] can: request_module (can-proto-0) failed. [ 1630.953451][ T1780] netlink: 40227 bytes leftover after parsing attributes in process `syz.2.10299'. [ 1631.178602][ T1786] netlink: 'syz.3.10303': attribute type 3 has an invalid length. [ 1631.235544][ T1786] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.10303'. [ 1631.285181][ T1787] netlink: 'syz.3.10303': attribute type 3 has an invalid length. [ 1632.038615][ T1815] __nla_validate_parse: 1 callbacks suppressed [ 1632.038634][ T1815] netlink: 60 bytes leftover after parsing attributes in process `syz.3.10312'. [ 1632.088200][ T1815] netlink: 60 bytes leftover after parsing attributes in process `syz.3.10312'. [ 1632.375472][ T1814] netlink: 60 bytes leftover after parsing attributes in process `syz.3.10312'. [ 1632.416301][ T1815] netlink: 60 bytes leftover after parsing attributes in process `syz.3.10312'. [ 1634.008207][ T1871] FAULT_INJECTION: forcing a failure. [ 1634.008207][ T1871] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1634.041749][ T1871] CPU: 1 PID: 1871 Comm: syz.4.10334 Not tainted syzkaller #0 [ 1634.049310][ T1871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1634.059410][ T1871] Call Trace: [ 1634.062828][ T1871] [ 1634.065796][ T1871] dump_stack_lvl+0x188/0x24e [ 1634.070510][ T1871] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1634.076789][ T1871] ? show_regs_print_info+0x12/0x12 [ 1634.082015][ T1871] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1634.088211][ T1871] should_fail_ex+0x390/0x4c0 [ 1634.092968][ T1871] _copy_from_user+0x2c/0x170 [ 1634.097694][ T1871] ___sys_recvmsg+0x170/0x590 [ 1634.102417][ T1871] ? perf_trace_preemptirq_template+0x268/0x320 [ 1634.108700][ T1871] ? irqentry_enter+0x33/0x50 [ 1634.113398][ T1871] ? __sys_recvmsg+0x2a0/0x2a0 [ 1634.118218][ T1871] ? lock_chain_count+0x20/0x20 [ 1634.123128][ T1871] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1634.129349][ T1871] __x64_sys_recvmsg+0x20d/0x2e0 [ 1634.134334][ T1871] ? ___sys_recvmsg+0x590/0x590 [ 1634.139240][ T1871] do_syscall_64+0x4c/0xa0 [ 1634.143682][ T1871] ? clear_bhb_loop+0x60/0xb0 [ 1634.148388][ T1871] ? clear_bhb_loop+0x60/0xb0 [ 1634.153107][ T1871] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1634.159131][ T1871] RIP: 0033:0x7f9d6159e019 [ 1634.163572][ T1871] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1634.183207][ T1871] RSP: 002b:00007f9d624d4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1634.191644][ T1871] RAX: ffffffffffffffda RBX: 00007f9d61825fa0 RCX: 00007f9d6159e019 [ 1634.199730][ T1871] RDX: 0000000040000000 RSI: 0000200000001880 RDI: 0000000000000007 [ 1634.207722][ T1871] RBP: 00007f9d624d4090 R08: 0000000000000000 R09: 0000000000000000 [ 1634.215715][ T1871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1634.223706][ T1871] R13: 00007f9d61826038 R14: 00007f9d61825fa0 R15: 00007ffdd13932f8 [ 1634.231797][ T1871] [ 1634.614791][ T1885] netlink: 'syz.4.10340': attribute type 2 has an invalid length. [ 1634.624023][ T1885] netlink: 'syz.4.10340': attribute type 8 has an invalid length. [ 1634.638478][ T1885] netlink: 132 bytes leftover after parsing attributes in process `syz.4.10340'. [ 1634.900438][ T1895] device veth1_macvtap left promiscuous mode [ 1635.203957][ T1901] netlink: 60 bytes leftover after parsing attributes in process `syz.4.10345'. [ 1635.225841][ T1901] netlink: 60 bytes leftover after parsing attributes in process `syz.4.10345'. [ 1635.309079][ T1898] netlink: 60 bytes leftover after parsing attributes in process `syz.4.10345'. [ 1635.353986][ T1898] netlink: 60 bytes leftover after parsing attributes in process `syz.4.10345'. [ 1635.896649][ T1923] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.10355'. [ 1636.638474][ T1939] netlink: 'syz.1.10363': attribute type 3 has an invalid length. [ 1636.659206][ T1940] FAULT_INJECTION: forcing a failure. [ 1636.659206][ T1940] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1636.705602][ T1940] CPU: 0 PID: 1940 Comm: syz.4.10362 Not tainted syzkaller #0 [ 1636.713235][ T1940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1636.723418][ T1940] Call Trace: [ 1636.726729][ T1940] [ 1636.728306][ T1939] netlink: 'syz.1.10363': attribute type 3 has an invalid length. [ 1636.729707][ T1940] dump_stack_lvl+0x188/0x24e [ 1636.742241][ T1940] ? show_regs_print_info+0x12/0x12 [ 1636.747499][ T1940] ? load_image+0x410/0x410 [ 1636.752057][ T1940] ? __lock_acquire+0x7c40/0x7c40 [ 1636.757139][ T1940] should_fail_ex+0x390/0x4c0 [ 1636.761873][ T1940] _copy_from_user+0x2c/0x170 [ 1636.766595][ T1940] iovec_from_user+0x143/0x360 [ 1636.771423][ T1940] __import_iovec+0x6c/0x510 [ 1636.776066][ T1940] ? __might_fault+0xa6/0x120 [ 1636.780784][ T1940] import_iovec+0x6f/0xa0 [ 1636.785171][ T1940] ___sys_recvmsg+0x4b2/0x590 [ 1636.789920][ T1940] ? __sys_recvmsg+0x2a0/0x2a0 [ 1636.794757][ T1940] ? __fget_files+0x3fc/0x460 [ 1636.799497][ T1940] __x64_sys_recvmsg+0x20d/0x2e0 [ 1636.804494][ T1940] ? ___sys_recvmsg+0x590/0x590 [ 1636.809420][ T1940] ? syscall_enter_from_user_mode+0x2a/0x80 [ 1636.815365][ T1940] do_syscall_64+0x4c/0xa0 [ 1636.819820][ T1940] ? clear_bhb_loop+0x60/0xb0 [ 1636.824537][ T1940] ? clear_bhb_loop+0x60/0xb0 [ 1636.829264][ T1940] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1636.835207][ T1940] RIP: 0033:0x7f9d6159e019 [ 1636.839674][ T1940] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1636.859332][ T1940] RSP: 002b:00007f9d624d4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1636.867823][ T1940] RAX: ffffffffffffffda RBX: 00007f9d61825fa0 RCX: 00007f9d6159e019 [ 1636.875850][ T1940] RDX: 0000000040000000 RSI: 0000200000001880 RDI: 0000000000000007 [ 1636.883860][ T1940] RBP: 00007f9d624d4090 R08: 0000000000000000 R09: 0000000000000000 [ 1636.891868][ T1940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1636.899875][ T1940] R13: 00007f9d61826038 R14: 00007f9d61825fa0 R15: 00007ffdd13932f8 [ 1636.907899][ T1940] [ 1637.099558][ T1946] netlink: 'syz.0.10364': attribute type 2 has an invalid length. [ 1637.136862][ T1946] netlink: 'syz.0.10364': attribute type 8 has an invalid length. [ 1637.144930][ T1946] __nla_validate_parse: 3 callbacks suppressed [ 1637.144964][ T1946] netlink: 132 bytes leftover after parsing attributes in process `syz.0.10364'. [ 1637.291015][T29222] tipc: Subscription rejected, illegal request [ 1637.307439][ T1956] netlink: 'syz.1.10367': attribute type 1 has an invalid length. [ 1637.315330][ T1956] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10367'. [ 1637.340954][ T1957] netlink: 'syz.2.10369': attribute type 2 has an invalid length. [ 1637.377813][ T1957] netlink: 'syz.2.10369': attribute type 8 has an invalid length. [ 1637.425893][ T1957] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10369'. [ 1637.680924][ T1965] netlink: 60 bytes leftover after parsing attributes in process `syz.3.10371'. [ 1637.692037][ T1965] netlink: 60 bytes leftover after parsing attributes in process `syz.3.10371'. [ 1637.729138][ T1965] netlink: 60 bytes leftover after parsing attributes in process `syz.3.10371'. [ 1637.770796][ T1968] netlink: 60 bytes leftover after parsing attributes in process `syz.3.10371'. [ 1638.789971][ T2013] netlink: 'syz.0.10390': attribute type 21 has an invalid length. [ 1639.597419][ T2019] FAULT_INJECTION: forcing a failure. [ 1639.597419][ T2019] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1639.650911][ T2022] netlink: 'syz.4.10393': attribute type 2 has an invalid length. [ 1639.661742][ T2019] CPU: 0 PID: 2019 Comm: syz.3.10392 Not tainted syzkaller #0 [ 1639.669261][ T2019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1639.672487][ T2022] netlink: 'syz.4.10393': attribute type 8 has an invalid length. [ 1639.679332][ T2019] Call Trace: [ 1639.679343][ T2019] [ 1639.679352][ T2019] dump_stack_lvl+0x188/0x24e [ 1639.679386][ T2019] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1639.679420][ T2019] ? show_regs_print_info+0x12/0x12 [ 1639.679451][ T2019] ? load_image+0x410/0x410 [ 1639.679487][ T2019] should_fail_ex+0x390/0x4c0 [ 1639.695816][ T2022] netlink: 132 bytes leftover after parsing attributes in process `syz.4.10393'. [ 1639.698339][ T2019] _copy_to_user+0x2c/0x130 [ 1639.698372][ T2019] simple_read_from_buffer+0xe3/0x150 [ 1639.698402][ T2019] proc_fail_nth_read+0x1a6/0x220 [ 1639.698443][ T2019] ? proc_fault_inject_write+0x310/0x310 [ 1639.698473][ T2019] ? fsnotify_perm+0x248/0x550 [ 1639.753689][ T2019] ? proc_fault_inject_write+0x310/0x310 [ 1639.759357][ T2019] vfs_read+0x2db/0x960 [ 1639.763556][ T2019] ? kernel_read+0x1e0/0x1e0 [ 1639.768202][ T2019] ? __fget_files+0x28/0x460 [ 1639.772911][ T2019] ? __fget_files+0x3fc/0x460 [ 1639.777635][ T2019] ? __fdget_pos+0x2ae/0x360 [ 1639.782257][ T2019] ? ksys_read+0x70/0x260 [ 1639.786639][ T2019] ksys_read+0x14d/0x260 [ 1639.790916][ T2019] ? vfs_write+0x9a0/0x9a0 [ 1639.795367][ T2019] ? lockdep_hardirqs_on+0x94/0x140 [ 1639.800597][ T2019] do_syscall_64+0x4c/0xa0 [ 1639.805046][ T2019] ? clear_bhb_loop+0x60/0xb0 [ 1639.809758][ T2019] ? clear_bhb_loop+0x60/0xb0 [ 1639.814467][ T2019] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1639.820391][ T2019] RIP: 0033:0x7f49ebb5e84e [ 1639.824833][ T2019] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1639.844465][ T2019] RSP: 002b:00007f49ec98ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1639.852902][ T2019] RAX: ffffffffffffffda RBX: 00007f49ec9906c0 RCX: 00007f49ebb5e84e [ 1639.860897][ T2019] RDX: 000000000000000f RSI: 00007f49ec9900a0 RDI: 0000000000000008 [ 1639.868887][ T2019] RBP: 00007f49ec990090 R08: 0000000000000000 R09: 0000000000000000 [ 1639.876902][ T2019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1639.884892][ T2019] R13: 00007f49ebe26038 R14: 00007f49ebe25fa0 R15: 00007ffff1661a98 [ 1639.892915][ T2019] [ 1640.414495][ T2040] netlink: 60 bytes leftover after parsing attributes in process `syz.0.10401'. [ 1640.444591][ T2040] netlink: 60 bytes leftover after parsing attributes in process `syz.0.10401'. [ 1641.531178][ T2078] device syzkaller0 entered promiscuous mode [ 1645.004582][ T2125] netlink: 'syz.2.10427': attribute type 16 has an invalid length. [ 1645.034101][ T2125] netlink: 'syz.2.10427': attribute type 3 has an invalid length. [ 1645.042516][ T2125] __nla_validate_parse: 2 callbacks suppressed [ 1645.042533][ T2125] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10427'. [ 1646.544737][ T2104] netlink: 148 bytes leftover after parsing attributes in process `syz.4.10415'. [ 1646.554882][ T2101] netlink: 'syz.4.10415': attribute type 21 has an invalid length. [ 1646.595788][ T2124] netlink: 'syz.2.10427': attribute type 21 has an invalid length. [ 1647.463003][ T2153] netlink: 'syz.0.10437': attribute type 2 has an invalid length. [ 1647.483564][ T2153] netlink: 'syz.0.10437': attribute type 8 has an invalid length. [ 1647.493152][ T2150] sctp: [Deprecated]: syz.1.10436 (pid 2150) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1647.493152][ T2150] Use struct sctp_sack_info instead [ 1647.512473][ T2153] netlink: 132 bytes leftover after parsing attributes in process `syz.0.10437'. [ 1647.540066][ T2155] netlink: 60 bytes leftover after parsing attributes in process `syz.4.10438'. [ 1647.592667][ T2159] device syzkaller0 entered promiscuous mode [ 1647.602297][ T2155] netlink: 60 bytes leftover after parsing attributes in process `syz.4.10438'. [ 1647.668521][ T2160] netlink: 60 bytes leftover after parsing attributes in process `syz.4.10438'. [ 1647.703502][ T2158] netlink: 60 bytes leftover after parsing attributes in process `syz.4.10438'. [ 1647.983558][ T2169] netlink: 'syz.4.10444': attribute type 3 has an invalid length. [ 1648.033528][ T2169] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.10444'. [ 1648.159846][ T2173] netlink: 132 bytes leftover after parsing attributes in process `syz.0.10445'. [ 1652.109723][ T2217] netlink: 'syz.1.10461': attribute type 2 has an invalid length. [ 1652.133629][ T2217] netlink: 'syz.1.10461': attribute type 8 has an invalid length. [ 1652.152766][ T2217] netlink: 132 bytes leftover after parsing attributes in process `syz.1.10461'. [ 1652.330839][ T2220] FAULT_INJECTION: forcing a failure. [ 1652.330839][ T2220] name failslab, interval 1, probability 0, space 0, times 0 [ 1652.381615][ T2220] CPU: 0 PID: 2220 Comm: syz.0.10463 Not tainted syzkaller #0 [ 1652.389166][ T2220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1652.399251][ T2220] Call Trace: [ 1652.402570][ T2220] [ 1652.405546][ T2220] dump_stack_lvl+0x188/0x24e [ 1652.410280][ T2220] ? show_regs_print_info+0x12/0x12 [ 1652.415544][ T2220] ? load_image+0x410/0x410 [ 1652.420103][ T2220] ? __might_sleep+0xd0/0xd0 [ 1652.424729][ T2220] ? __lock_acquire+0x7c40/0x7c40 [ 1652.429814][ T2220] should_fail_ex+0x390/0x4c0 [ 1652.434561][ T2220] should_failslab+0x5/0x20 [ 1652.439101][ T2220] slab_pre_alloc_hook+0x59/0x300 [ 1652.444175][ T2220] ? tomoyo_encode+0x28a/0x550 [ 1652.448981][ T2220] __kmem_cache_alloc_node+0x4f/0x270 [ 1652.454398][ T2220] ? tomoyo_encode+0x28a/0x550 [ 1652.459205][ T2220] __kmalloc+0xa3/0x240 [ 1652.463421][ T2220] tomoyo_encode+0x28a/0x550 [ 1652.468071][ T2220] tomoyo_realpath_from_path+0x578/0x5c0 [ 1652.473760][ T2220] ? tomoyo_domain+0xd2/0x120 [ 1652.478492][ T2220] ? tomoyo_path_number_perm+0x205/0x650 [ 1652.484201][ T2220] tomoyo_path_number_perm+0x22f/0x650 [ 1652.489722][ T2220] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1652.495227][ T2220] ? ktime_get+0x7b/0x270 [ 1652.499636][ T2220] ? __fget_files+0x28/0x460 [ 1652.504292][ T2220] security_file_ioctl+0x6c/0xa0 [ 1652.509283][ T2220] __se_sys_ioctl+0x48/0x170 [ 1652.513937][ T2220] do_syscall_64+0x4c/0xa0 [ 1652.518428][ T2220] ? clear_bhb_loop+0x60/0xb0 [ 1652.523166][ T2220] ? clear_bhb_loop+0x60/0xb0 [ 1652.527896][ T2220] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1652.533851][ T2220] RIP: 0033:0x7fe221f9e019 [ 1652.538311][ T2220] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1652.557971][ T2220] RSP: 002b:00007fe222d92028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1652.566436][ T2220] RAX: ffffffffffffffda RBX: 00007fe222225fa0 RCX: 00007fe221f9e019 [ 1652.574451][ T2220] RDX: 0000200000000000 RSI: 0000000000008924 RDI: 0000000000000007 [ 1652.582457][ T2220] RBP: 00007fe222d92090 R08: 0000000000000000 R09: 0000000000000000 [ 1652.590463][ T2220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1652.598475][ T2220] R13: 00007fe222226038 R14: 00007fe222225fa0 R15: 00007ffc7b11c8a8 [ 1652.606507][ T2220] [ 1652.656566][ T2220] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1652.736309][ T2234] netlink: 'syz.2.10467': attribute type 39 has an invalid length. [ 1653.237409][ T2257] netlink: 'syz.1.10473': attribute type 10 has an invalid length. [ 1653.283224][ T2257] netlink: 13070 bytes leftover after parsing attributes in process `syz.1.10473'. [ 1653.563038][ T2259] device syzkaller0 entered promiscuous mode [ 1655.968562][ T2272] device syzkaller0 entered promiscuous mode [ 1656.359862][ T2293] netlink: 'syz.3.10485': attribute type 29 has an invalid length. [ 1659.913309][ T2293] netlink: 'syz.3.10485': attribute type 29 has an invalid length. [ 1660.215329][ T2309] netlink: 60 bytes leftover after parsing attributes in process `syz.1.10488'. [ 1660.288248][ T2309] netlink: 60 bytes leftover after parsing attributes in process `syz.1.10488'. [ 1660.364632][ T2319] netlink: 60 bytes leftover after parsing attributes in process `syz.1.10488'. [ 1660.383822][ T2309] netlink: 60 bytes leftover after parsing attributes in process `syz.1.10488'. [ 1660.620634][ T2323] netlink: 10 bytes leftover after parsing attributes in process `syz.2.10494'. [ 1661.119148][ T2340] delete_channel: no stack [ 1661.630219][ T2351] device syzkaller0 entered promiscuous mode [ 1661.650283][ T2355] FAULT_INJECTION: forcing a failure. [ 1661.650283][ T2355] name failslab, interval 1, probability 0, space 0, times 0 [ 1661.680196][ T2355] CPU: 1 PID: 2355 Comm: syz.3.10505 Not tainted syzkaller #0 [ 1661.687754][ T2355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1661.697847][ T2355] Call Trace: [ 1661.701169][ T2355] [ 1661.704142][ T2355] dump_stack_lvl+0x188/0x24e [ 1661.708887][ T2355] ? show_regs_print_info+0x12/0x12 [ 1661.714167][ T2355] ? load_image+0x410/0x410 [ 1661.718741][ T2355] ? __might_sleep+0xd0/0xd0 [ 1661.723392][ T2355] ? __lock_acquire+0x7c40/0x7c40 [ 1661.728490][ T2355] should_fail_ex+0x390/0x4c0 [ 1661.733230][ T2355] should_failslab+0x5/0x20 [ 1661.737786][ T2355] slab_pre_alloc_hook+0x59/0x300 [ 1661.742868][ T2355] kmem_cache_alloc_node+0x5a/0x310 [ 1661.748130][ T2355] ? __alloc_skb+0xf9/0x7d0 [ 1661.752685][ T2355] __alloc_skb+0xf9/0x7d0 [ 1661.757063][ T2355] rtmsg_ifinfo_build_skb+0x80/0x190 [ 1661.762432][ T2355] rtnetlink_event+0xd1/0x1a0 [ 1661.767181][ T2355] raw_notifier_call_chain+0xcb/0x160 [ 1661.772690][ T2355] dev_set_mac_address+0x2ed/0x400 [ 1661.777865][ T2355] ? dev_pre_changeaddr_notify+0x120/0x120 [ 1661.783756][ T2355] ? rwsem_write_trylock+0x135/0x1c0 [ 1661.789117][ T2355] ? clear_nonspinnable+0x60/0x60 [ 1661.794219][ T2355] ? full_name_hash+0x8e/0xe0 [ 1661.798953][ T2355] dev_set_mac_address_user+0x2d/0x50 [ 1661.804382][ T2355] dev_ifsioc+0x74e/0xd50 [ 1661.808758][ T2355] ? dev_ioctl+0xe80/0xe80 [ 1661.813265][ T2355] ? dev_load+0x1d/0x1e0 [ 1661.817555][ T2355] ? dev_load+0x1d/0x1e0 [ 1661.821870][ T2355] dev_ioctl+0x55e/0xe80 [ 1661.826200][ T2355] sock_do_ioctl+0x245/0x320 [ 1661.830859][ T2355] ? sock_show_fdinfo+0xb0/0xb0 [ 1661.835767][ T2355] sock_ioctl+0x48a/0x700 [ 1661.840145][ T2355] ? sock_poll+0x420/0x420 [ 1661.844612][ T2355] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1661.849601][ T2355] ? security_file_ioctl+0x7c/0xa0 [ 1661.854761][ T2355] ? sock_poll+0x420/0x420 [ 1661.859223][ T2355] __se_sys_ioctl+0xfa/0x170 [ 1661.863881][ T2355] do_syscall_64+0x4c/0xa0 [ 1661.868351][ T2355] ? clear_bhb_loop+0x60/0xb0 [ 1661.873080][ T2355] ? clear_bhb_loop+0x60/0xb0 [ 1661.877812][ T2355] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1661.883758][ T2355] RIP: 0033:0x7f49ebb9e019 [ 1661.888267][ T2355] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1661.907912][ T2355] RSP: 002b:00007f49ec990028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1661.916377][ T2355] RAX: ffffffffffffffda RBX: 00007f49ebe25fa0 RCX: 00007f49ebb9e019 [ 1661.924384][ T2355] RDX: 0000200000000000 RSI: 0000000000008924 RDI: 0000000000000007 [ 1661.932400][ T2355] RBP: 00007f49ec990090 R08: 0000000000000000 R09: 0000000000000000 [ 1661.940413][ T2355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1661.948428][ T2355] R13: 00007f49ebe26038 R14: 00007f49ebe25fa0 R15: 00007ffff1661a98 [ 1661.956479][ T2355] [ 1661.982415][ T2349] netlink: 'syz.2.10503': attribute type 2 has an invalid length. [ 1662.035963][ T2349] netlink: 'syz.2.10503': attribute type 8 has an invalid length. [ 1662.064647][ T2349] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10503'. [ 1662.257420][ T2367] netlink: 56863 bytes leftover after parsing attributes in process `syz.1.10507'. [ 1662.990591][ T4281] Bluetooth: hci4: ISO packet for unknown connection handle 62 [ 1664.683285][ T2383] device bridge_slave_1 left promiscuous mode [ 1664.692300][ T2383] bridge0: port 2(bridge_slave_1) entered disabled state [ 1664.703487][ T2383] device bridge_slave_0 left promiscuous mode [ 1664.709860][ T2383] bridge0: port 1(bridge_slave_0) entered disabled state [ 1664.760486][ T2383] team0: Port device bridge0 removed [ 1664.808945][ T2385] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10514'. [ 1664.821120][ T2399] netlink: 172 bytes leftover after parsing attributes in process `syz.4.10517'. [ 1664.878371][ T2411] netlink: 132 bytes leftover after parsing attributes in process `syz.0.10521'. [ 1665.533094][ T2439] netlink: 'syz.1.10528': attribute type 4 has an invalid length. [ 1665.555463][ T2439] netlink: 152 bytes leftover after parsing attributes in process `syz.1.10528'. [ 1665.688713][ T2437] netlink: 14568 bytes leftover after parsing attributes in process `syz.0.10529'. [ 1665.742292][ T2439] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.10528'. [ 1665.762142][ T2439] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 1667.022233][ T2491] netlink: 'syz.2.10541': attribute type 27 has an invalid length. [ 1667.058592][ T2491] netlink: 164 bytes leftover after parsing attributes in process `syz.2.10541'. [ 1667.642650][ T2517] netlink: 'syz.1.10547': attribute type 2 has an invalid length. [ 1667.668329][ T4281] Bluetooth: hci4: unexpected subevent 0x0c length: 241 > 5 [ 1667.673587][ T2517] netlink: 'syz.1.10547': attribute type 8 has an invalid length. [ 1667.746249][ T2517] netlink: 132 bytes leftover after parsing attributes in process `syz.1.10547'. [ 1668.221247][ T2551] netlink: 'syz.2.10557': attribute type 39 has an invalid length. [ 1668.408230][ T2552] netlink: 'syz.2.10557': attribute type 39 has an invalid length. [ 1668.768535][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.774946][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.101097][ T2580] netlink: 60 bytes leftover after parsing attributes in process `syz.3.10565'. [ 1669.132421][ T2580] netlink: 60 bytes leftover after parsing attributes in process `syz.3.10565'. [ 1669.203609][ T2583] netlink: 60 bytes leftover after parsing attributes in process `syz.3.10565'. [ 1669.250000][ T2580] netlink: 60 bytes leftover after parsing attributes in process `syz.3.10565'. [ 1669.301293][ T2592] netlink: 14 bytes leftover after parsing attributes in process `syz.2.10567'. [ 1670.354352][ T2634] netlink: 'syz.1.10583': attribute type 2 has an invalid length. [ 1670.379069][ T2634] netlink: 'syz.1.10583': attribute type 8 has an invalid length. [ 1670.805344][ T2662] __nla_validate_parse: 1 callbacks suppressed [ 1670.823635][ T2662] netlink: 196 bytes leftover after parsing attributes in process `syz.4.10591'. [ 1670.936300][ T2662] netlink: 'syz.4.10591': attribute type 2 has an invalid length. [ 1670.944446][ T2662] netlink: 'syz.4.10591': attribute type 8 has an invalid length. [ 1671.027314][ T2662] netlink: 132 bytes leftover after parsing attributes in process `syz.4.10591'. [ 1671.103179][ T2671] netlink: 'syz.4.10591': attribute type 2 has an invalid length. [ 1671.136287][ T2671] netlink: 'syz.4.10591': attribute type 8 has an invalid length. [ 1671.149004][ T2671] netlink: 132 bytes leftover after parsing attributes in process `syz.4.10591'. [ 1671.431971][ T2679] netlink: 60 bytes leftover after parsing attributes in process `syz.0.10597'. [ 1671.454694][ T2679] netlink: 60 bytes leftover after parsing attributes in process `syz.0.10597'. [ 1671.518295][ T2689] netlink: 60 bytes leftover after parsing attributes in process `syz.0.10597'. [ 1671.564404][ T2679] netlink: 60 bytes leftover after parsing attributes in process `syz.0.10597'. [ 1671.987609][ T2711] netlink: 'syz.1.10605': attribute type 9 has an invalid length. [ 1672.010868][ T2711] netlink: 61951 bytes leftover after parsing attributes in process `syz.1.10605'. [ 1672.413336][ T2719] netlink: 14568 bytes leftover after parsing attributes in process `syz.3.10606'. [ 1672.803780][ T2731] netlink: 132 bytes leftover after parsing attributes in process `syz.4.10609'. [ 1672.947304][ T2740] netlink: 'syz.1.10611': attribute type 21 has an invalid length. [ 1673.210351][ T2751] netlink: 'syz.0.10615': attribute type 27 has an invalid length. [ 1675.715248][ T2825] netlink: 'syz.3.10637': attribute type 10 has an invalid length. [ 1675.744439][ T2825] device dummy0 entered promiscuous mode [ 1675.766425][ T2825] bridge0: port 3(dummy0) entered blocking state [ 1675.793450][ T2825] bridge0: port 3(dummy0) entered disabled state [ 1675.833101][ T2825] bridge0: port 3(dummy0) entered blocking state [ 1675.839922][ T2825] bridge0: port 3(dummy0) entered forwarding state [ 1676.671633][ T2855] __nla_validate_parse: 8 callbacks suppressed [ 1676.671652][ T2855] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.10644'. [ 1677.188468][ T2865] netlink: 60 bytes leftover after parsing attributes in process `syz.1.10648'. [ 1677.219934][ T2867] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.10645'. [ 1677.220271][ T2858] netlink: 'syz.0.10645': attribute type 4 has an invalid length. [ 1677.257323][ T2858] netlink: 152 bytes leftover after parsing attributes in process `syz.0.10645'. [ 1677.287167][ T2867] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 1677.348475][ T2865] netlink: 60 bytes leftover after parsing attributes in process `syz.1.10648'. [ 1677.394792][ T2870] netlink: 60 bytes leftover after parsing attributes in process `syz.1.10648'. [ 1677.423112][ T2862] netlink: 60 bytes leftover after parsing attributes in process `syz.1.10648'. [ 1677.848868][ T2881] netlink: 10 bytes leftover after parsing attributes in process `syz.3.10652'. [ 1678.220128][ T2898] netlink: 17861 bytes leftover after parsing attributes in process `syz.3.10659'. [ 1679.505424][ T4283] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1679.525121][ T4288] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1679.543337][ T4288] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1679.584170][ T4288] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1679.609451][ T4288] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1679.628605][ T4283] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1679.888207][ T2915] chnl_net:caif_netlink_parms(): no params data found [ 1680.079174][ T2915] bridge0: port 1(bridge_slave_0) entered blocking state [ 1680.155979][ T2915] bridge0: port 1(bridge_slave_0) entered disabled state [ 1680.199158][ T2915] device bridge_slave_0 entered promiscuous mode [ 1680.208470][ T2915] bridge0: port 2(bridge_slave_1) entered blocking state [ 1680.235563][ T2915] bridge0: port 2(bridge_slave_1) entered disabled state [ 1680.244077][ T2915] device bridge_slave_1 entered promiscuous mode [ 1680.360242][ T2915] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1680.455680][ T2915] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1680.481328][ T2940] netlink: 60 bytes leftover after parsing attributes in process `syz.3.10668'. [ 1680.490606][ T2937] netlink: 'syz.0.10670': attribute type 10 has an invalid length. [ 1680.568163][ T2915] team0: Port device team_slave_0 added [ 1680.584824][ T2915] team0: Port device team_slave_1 added [ 1680.614913][ T2915] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1680.629029][ T2915] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1680.661317][ T2915] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1680.774928][T25402] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1680.792447][ T2915] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1680.800946][ T2915] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1680.828402][ T2915] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1680.874866][T25402] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1680.960550][ T2951] netlink: 'syz.3.10674': attribute type 29 has an invalid length. [ 1680.982260][ T2951] netlink: 'syz.3.10674': attribute type 29 has an invalid length. [ 1681.037933][T25402] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1681.081314][ T2915] device hsr_slave_0 entered promiscuous mode [ 1681.105172][ T2915] device hsr_slave_1 entered promiscuous mode [ 1681.135466][ T2951] netlink: 'syz.3.10674': attribute type 29 has an invalid length. [ 1681.163069][T25402] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1681.732721][ T2971] netlink: 'syz.4.10680': attribute type 10 has an invalid length. [ 1681.742030][ T4281] Bluetooth: hci5: command 0x0409 tx timeout [ 1681.828842][ T2971] team0: Port device geneve1 added [ 1682.121100][ T2983] netlink: 'syz.0.10682': attribute type 2 has an invalid length. [ 1682.144360][ T2983] netlink: 'syz.0.10682': attribute type 8 has an invalid length. [ 1682.155566][ T2983] __nla_validate_parse: 5 callbacks suppressed [ 1682.155583][ T2983] netlink: 132 bytes leftover after parsing attributes in process `syz.0.10682'. [ 1682.635316][ T3004] netlink: 'syz.4.10691': attribute type 21 has an invalid length. [ 1682.671600][ T3004] netlink: 132 bytes leftover after parsing attributes in process `syz.4.10691'. [ 1682.713044][ T3006] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10689'. [ 1682.826140][T25402] device gretap0 left promiscuous mode [ 1682.868610][T25402] Ÿë: port 1(gretap0) entered disabled state [ 1682.946154][ T3006] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10689'. [ 1683.084406][ T2915] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1683.112253][ T3011] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10689'. [ 1683.208360][ T2915] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1683.241493][ T3015] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10689'. [ 1683.331912][ T2915] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1683.364290][ T3025] tipc: Started in network mode [ 1683.383714][ T3025] tipc: Node identity 9215a268, cluster identity 4711 [ 1683.421476][ T3025] tipc: Node number set to 2450891368 [ 1683.462728][ T2915] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1683.792659][ T2915] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1683.805786][ T4281] Bluetooth: hci5: command 0x041b tx timeout [ 1683.904986][ T2849] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1683.920007][ T2849] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1684.192416][ T2915] 8021q: adding VLAN 0 to HW filter on device team0 [ 1684.213638][ T3042] netlink: 128244 bytes leftover after parsing attributes in process `syz.3.10700'. [ 1684.221072][ T2847] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1684.260363][ T3042] netlink: zone id is out of range [ 1684.274551][ T3042] netlink: zone id is out of range [ 1684.279054][ T2847] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1684.316034][ T2847] bridge0: port 1(bridge_slave_0) entered blocking state [ 1684.323183][ T2847] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1684.337186][ T3042] netlink: zone id is out of range [ 1684.382141][ T3042] netlink: zone id is out of range [ 1684.387206][ T2847] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1684.413170][ T3042] netlink: zone id is out of range [ 1684.440799][ T3042] netlink: zone id is out of range [ 1684.453095][ T3042] netlink: zone id is out of range [ 1684.464740][ T3042] netlink: zone id is out of range [ 1684.495063][ T3042] netlink: zone id is out of range [ 1684.511780][ T2849] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1684.530755][ T3042] netlink: zone id is out of range [ 1684.538227][ T2849] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1684.549258][ T2849] bridge0: port 2(bridge_slave_1) entered blocking state [ 1684.556453][ T2849] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1684.596361][ T2849] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1684.755825][ T3062] sctp: [Deprecated]: syz.4.10705 (pid 3062) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1684.755825][ T3062] Use struct sctp_sack_info instead [ 1685.637633][T25427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1685.753928][T25427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1685.788556][T25427] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1685.889771][T25402] device veth0_to_team left promiscuous mode [ 1685.896429][ T4281] Bluetooth: hci5: command 0x040f tx timeout [ 1685.903074][T25402] Ÿë: port 2(veth0_to_team) entered disabled state [ 1686.053020][T25402] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1686.122452][T25402] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1686.269822][T25402] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1686.312062][T25402] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1686.361255][T25402] batman_adv: batadv0: Removing interface: virt_wifi0 [ 1686.834321][T25402] device veth1_macvtap left promiscuous mode [ 1686.849726][T25402] device veth0_macvtap left promiscuous mode [ 1686.905797][T25402] device veth1_vlan left promiscuous mode [ 1686.911851][T25402] device veth0_vlan left promiscuous mode [ 1686.994220][ T3081] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.10709'. [ 1687.305025][ T3090] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10710'. [ 1687.651537][T25402] team0 (unregistering): Port device geneve1 removed [ 1687.976044][ T4281] Bluetooth: hci5: command 0x0419 tx timeout [ 1688.223689][T25402] team0 (unregistering): Port device team_slave_1 removed [ 1688.264166][T25402] team0 (unregistering): Port device team_slave_0 removed [ 1688.306562][T25402] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1688.347823][T25402] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1688.583900][T25402] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 1688.631813][T25402] bond0 (unregistering): Released all slaves [ 1688.673615][ T2915] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1688.689623][ T2915] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1688.710354][T25427] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1688.725918][T25427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1688.734618][T25427] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1688.743777][T25427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1688.753136][T25427] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1688.762576][T25427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1688.771623][T25427] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1688.790362][ T3090] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10710'. [ 1688.813988][T25427] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1689.092701][ T3119] netlink: 'syz.4.10720': attribute type 9 has an invalid length. [ 1689.151769][ T3119] netlink: 61951 bytes leftover after parsing attributes in process `syz.4.10720'. [ 1689.236839][ T3113] netlink: 'syz.3.10719': attribute type 2 has an invalid length. [ 1689.252124][ T3113] netlink: 'syz.3.10719': attribute type 8 has an invalid length. [ 1689.261205][ T3113] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10719'. [ 1689.442406][ T3127] netlink: 'syz.2.10723': attribute type 17 has an invalid length. [ 1689.465684][ T3127] netlink: 'syz.2.10723': attribute type 16 has an invalid length. [ 1689.494107][ T3127] netlink: 152 bytes leftover after parsing attributes in process `syz.2.10723'. [ 1689.693821][ T2846] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1689.710106][ T2846] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1689.748837][ T2915] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1689.803634][T25402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1689.815587][ T3136] can: request_module (can-proto-0) failed. [ 1689.825807][T25402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1689.879526][T25427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1689.896294][T25427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1689.908428][ T2915] device veth0_vlan entered promiscuous mode [ 1689.932630][T25427] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1689.966554][T25427] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1689.993113][ T2915] device veth1_vlan entered promiscuous mode [ 1690.093569][T25434] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1690.123946][T25434] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1690.153884][T25434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1690.199400][T25434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1690.241314][ T2915] device veth0_macvtap entered promiscuous mode [ 1690.263904][ T2915] device veth1_macvtap entered promiscuous mode [ 1690.349652][ T2915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1690.382002][ T2915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1690.392028][ T2915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1690.403539][ T2915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1690.417888][ T2915] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1690.426138][ T2846] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1690.436050][ T2846] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1690.444355][ T2846] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1690.470112][ T2846] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1690.503745][ T2915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1690.533809][ T2915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1690.556235][ T2915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1690.584071][ T2915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1690.595867][ T2915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1690.607765][ T2915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1690.621718][ T2915] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1690.645628][T25427] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1690.656841][T25427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1690.675086][ T2915] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1690.689586][ T2915] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1690.707417][ T2915] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1690.725470][ T2915] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1690.873025][T25427] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1690.906103][T25427] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1690.960913][ T2849] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1690.993951][ T2849] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1691.044021][ T2849] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1691.052261][ T2846] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1691.072824][ T3180] netlink: 'syz.3.10738': attribute type 17 has an invalid length. [ 1691.117548][ T3180] netlink: 'syz.3.10738': attribute type 16 has an invalid length. [ 1691.131921][ T3180] netlink: 152 bytes leftover after parsing attributes in process `syz.3.10738'. [ 1691.705510][ T3197] netlink: 'syz.0.10743': attribute type 10 has an invalid length. [ 1691.773190][ T3199] netlink: 10 bytes leftover after parsing attributes in process `syz.3.10746'. [ 1691.813583][ T3200] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10745'. [ 1691.835588][ T3200] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10745'. [ 1691.849153][ T3195] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10745'. [ 1692.040555][ T3203] netlink: 'syz.1.10747': attribute type 2 has an invalid length. [ 1692.060042][ T3203] netlink: 'syz.1.10747': attribute type 8 has an invalid length. [ 1692.180653][ T3211] syz.2.10752[3211] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1692.445296][ T3205] team0: Port device macvlan0 added [ 1692.951325][ T3224] __nla_validate_parse: 2 callbacks suppressed [ 1692.951344][ T3224] netlink: 152 bytes leftover after parsing attributes in process `syz.1.10757'. [ 1693.022604][ T3233] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1693.036062][ T3233] syzkaller1: linktype set to 825 [ 1693.423587][ T3249] netlink: 60 bytes leftover after parsing attributes in process `syz.4.10767'. [ 1693.447937][ T3249] netlink: 60 bytes leftover after parsing attributes in process `syz.4.10767'. [ 1693.475323][ T3249] netlink: 60 bytes leftover after parsing attributes in process `syz.4.10767'. [ 1693.543751][ T3254] netlink: 60 bytes leftover after parsing attributes in process `syz.4.10767'. [ 1693.576978][ T3252] netlink: 132 bytes leftover after parsing attributes in process `syz.1.10768'. [ 1694.861306][ T3275] netlink: 132 bytes leftover after parsing attributes in process `syz.4.10776'. [ 1697.545953][ T3346] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.10804'. [ 1697.557374][ T3347] validate_nla: 5 callbacks suppressed [ 1697.557391][ T3347] netlink: 'syz.4.10805': attribute type 21 has an invalid length. [ 1698.844330][ T3399] netlink: 'syz.2.10820': attribute type 21 has an invalid length. [ 1698.940328][ T3399] netlink: 16166 bytes leftover after parsing attributes in process `syz.2.10820'. [ 1699.684203][ T3411] netlink: 'syz.0.10826': attribute type 2 has an invalid length. [ 1699.719659][ T3411] netlink: 'syz.0.10826': attribute type 8 has an invalid length. [ 1699.751417][ T3411] netlink: 132 bytes leftover after parsing attributes in process `syz.0.10826'. [ 1699.865963][ T3417] netlink: 60 bytes leftover after parsing attributes in process `syz.1.10827'. [ 1699.868321][ T3416] netlink: 'syz.4.10828': attribute type 3 has an invalid length. [ 1699.928472][ T3416] netlink: 'syz.4.10828': attribute type 4 has an invalid length. [ 1699.946031][ T3416] netlink: 132 bytes leftover after parsing attributes in process `syz.4.10828'. [ 1699.975782][ T3417] netlink: 60 bytes leftover after parsing attributes in process `syz.1.10827'. [ 1700.021792][ T3419] netlink: 60 bytes leftover after parsing attributes in process `syz.1.10827'. [ 1700.069260][ T3413] netlink: 60 bytes leftover after parsing attributes in process `syz.1.10827'. [ 1700.965318][ C1] [ 1700.965330][ C1] ================================ [ 1700.965336][ C1] WARNING: inconsistent lock state [ 1700.965357][ C1] syzkaller #0 Not tainted [ 1700.965368][ C1] -------------------------------- [ 1700.965373][ C1] inconsistent {INITIAL USE} -> {IN-NMI} usage. [ 1700.965381][ C1] syz.4.10843/3458 [HC1[1]:SC0[0]:HE0:SE1] takes: [ 1700.965402][ C1] ffff88807786ca38 (&trie->lock){..-.}-{2:2}, at: trie_delete_elem+0x8e/0x620 [ 1700.965460][ C1] {INITIAL USE} state was registered at: [ 1700.965468][ C1] lock_acquire+0x1bb/0x4a0 [ 1700.965495][ C1] _raw_spin_lock_irqsave+0xb0/0x100 [ 1700.965517][ C1] trie_update_elem+0xbe/0xd40 [ 1700.965542][ C1] bpf_map_update_value+0x59d/0x670 [ 1700.965564][ C1] map_update_elem+0x4fa/0x6a0 [ 1700.965589][ C1] __sys_bpf+0x4ec/0x780 [ 1700.965612][ C1] __x64_sys_bpf+0x78/0x90 [ 1700.965635][ C1] do_syscall_64+0x4c/0xa0 [ 1700.965661][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1700.965694][ C1] irq event stamp: 1718 [ 1700.965702][ C1] hardirqs last enabled at (1717): [] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1700.965734][ C1] hardirqs last disabled at (1718): [] exc_debug+0x6e/0x130 [ 1700.965766][ C1] softirqs last enabled at (1624): [] bpf_prog_load+0x111d/0x1530 [ 1700.965799][ C1] softirqs last disabled at (1620): [] bpf_ksym_add+0x28/0x330 [ 1700.965834][ C1] [ 1700.965834][ C1] other info that might help us debug this: [ 1700.965841][ C1] Possible unsafe locking scenario: [ 1700.965841][ C1] [ 1700.965846][ C1] CPU0 [ 1700.965849][ C1] ---- [ 1700.965853][ C1] lock(&trie->lock); [ 1700.965866][ C1] [ 1700.965871][ C1] lock(&trie->lock); [ 1700.965883][ C1] [ 1700.965883][ C1] *** DEADLOCK *** [ 1700.965883][ C1] [ 1700.965887][ C1] no locks held by syz.4.10843/3458. [ 1700.965895][ C1] [ 1700.965895][ C1] stack backtrace: [ 1700.965902][ C1] CPU: 1 PID: 3458 Comm: syz.4.10843 Not tainted syzkaller #0 [ 1700.965921][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1700.965933][ C1] Call Trace: [ 1700.965940][ C1] <#DB> [ 1700.965947][ C1] dump_stack_lvl+0x188/0x24e [ 1700.965987][ C1] ? show_regs_print_info+0x12/0x12 [ 1700.966017][ C1] ? print_usage_bug+0x42a/0x690 [ 1700.966045][ C1] ? verify_lock_unused+0x15/0x140 [ 1700.966074][ C1] lock_acquire+0x2df/0x4a0 [ 1700.966111][ C1] ? perf_output_begin_forward+0xa7/0xa70 [ 1700.966140][ C1] ? trie_delete_elem+0x8e/0x620 [ 1700.966167][ C1] ? read_lock_is_recursive+0x10/0x10 [ 1700.966193][ C1] ? look_up_lock_class+0x75/0x140 [ 1700.966211][ C1] ? look_up_lock_class+0x75/0x140 [ 1700.966230][ C1] ? verify_lock_unused+0x15/0x140 [ 1700.966258][ C1] _raw_spin_lock_irqsave+0xb0/0x100 [ 1700.966280][ C1] ? trie_delete_elem+0x8e/0x620 [ 1700.966305][ C1] ? _raw_spin_lock+0x40/0x40 [ 1700.966326][ C1] ? bpf_overflow_handler+0xd9/0x790 [ 1700.966350][ C1] trie_delete_elem+0x8e/0x620 [ 1700.966380][ C1] bpf_prog_2c29ac5cdc6b1842+0x3a/0x3e [ 1700.966400][ C1] bpf_overflow_handler+0x50b/0x790 [ 1700.966422][ C1] ? perf_get_page_size+0x430/0x430 [ 1700.966450][ C1] ? bpf_overflow_handler+0xd9/0x790 [ 1700.966469][ C1] ? perf_swevent_overflow+0x230/0x230 [ 1700.966514][ C1] ? __perf_event_account_interrupt+0x187/0x280 [ 1700.966550][ C1] __perf_event_overflow+0x457/0x630 [ 1700.966583][ C1] perf_swevent_event+0x315/0x570 [ 1700.966614][ C1] ? perf_tp_event+0xc10/0xc10 [ 1700.966649][ C1] perf_bp_event+0x311/0x3f0 [ 1700.966681][ C1] ? perf_event_free_bpf_prog+0x120/0x120 [ 1700.966726][ C1] ? atomic_notifier_call_chain+0x2c/0x2b0 [ 1700.966749][ C1] ? read_lock_is_recursive+0x10/0x10 [ 1700.966781][ C1] hw_breakpoint_exceptions_notify+0x14d/0x470 [ 1700.966813][ C1] atomic_notifier_call_chain+0x17a/0x2b0 [ 1700.966835][ C1] ? atomic_notifier_call_chain+0x2c/0x2b0 [ 1700.966860][ C1] notify_die+0x141/0x1a0 [ 1700.966883][ C1] ? srcu_init_notifier_head+0x90/0x90 [ 1700.966912][ C1] notify_debug+0x20/0x30 [ 1700.967015][ C1] exc_debug+0xd9/0x130 [ 1700.967049][ C1] asm_exc_debug+0x1a/0x40 [ 1700.967076][ C1] RIP: 0010:copy_user_enhanced_fast_string+0xa/0x40 [ 1700.967109][ C1] Code: ff c9 75 f2 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 8d 0c ca 89 ca eb 20 0f 01 cb 83 fa 40 72 38 89 d1 a4 31 c0 0f 01 ca c3 89 ca eb 0a 90 90 90 90 90 90 90 90 90 90 [ 1700.967127][ C1] RSP: 0018:ffffc9000c2cfd48 EFLAGS: 00050202 [ 1700.967145][ C1] RAX: ffffffff8415c301 RBX: 0000000000000050 RCX: 000000000000000f [ 1700.967160][ C1] RDX: 0000000000000050 RSI: 0000200000000301 RDI: ffffc9000c2cfe01 [ 1700.967175][ C1] RBP: 0000000000000000 R08: ffffc9000c2cfe0f R09: 1ffff92001859fc1 [ 1700.967190][ C1] R10: dffffc0000000000 R11: fffff52001859fc2 R12: 00007fffffffefb0 [ 1700.967207][ C1] R13: 0000000000000050 R14: ffffc9000c2cfdc0 R15: 00002000000002c0 [ 1700.967226][ C1] ? _copy_from_user+0x21/0x170 [ 1700.967258][ C1] [ 1700.967265][ C1] [ 1700.967270][ C1] _copy_from_user+0xf4/0x170 [ 1700.967292][ C1] __sys_bpf+0x2ea/0x780 [ 1700.967321][ C1] ? bpf_link_show_fdinfo+0x380/0x380 [ 1700.967354][ C1] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1700.967386][ C1] __x64_sys_bpf+0x78/0x90 [ 1700.967412][ C1] do_syscall_64+0x4c/0xa0 [ 1700.967438][ C1] ? clear_bhb_loop+0x60/0xb0 [ 1700.967463][ C1] ? clear_bhb_loop+0x60/0xb0 [ 1700.967491][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1700.967516][ C1] RIP: 0033:0x7f9d6159e019 [ 1700.967532][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1700.967550][ C1] RSP: 002b:00007f9d624d4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1700.967570][ C1] RAX: ffffffffffffffda RBX: 00007f9d61825fa0 RCX: 00007f9d6159e019 [ 1700.967585][ C1] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000001c [ 1700.967599][ C1] RBP: 00007f9d6163500c R08: 0000000000000000 R09: 0000000000000000 [ 1700.967612][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1700.967624][ C1] R13: 00007f9d61826038 R14: 00007f9d61825fa0 R15: 00007ffdd13932f8 [ 1700.967647][ C1] [ 1701.633370][ T3465] netlink: 'syz.2.10844': attribute type 2 has an invalid length. [ 1701.641857][ T3465] netlink: 'syz.2.10844': attribute type 8 has an invalid length. [ 1701.650942][ T3465] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10844'.