last executing test programs: 2.495689724s ago: executing program 3 (id=2249): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x200002, 0x0) (async) recvmsg$unix(r0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x80}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0xe, 0xe, &(0x7f0000000080)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x8, 0xffc, &(0x7f00000030c0)=""/4092, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) 2.329323281s ago: executing program 0 (id=2252): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000040)) r1 = getpid() r2 = perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4, 0xd, 0xd, 0x5, 0x0, 0x2, 0x4006, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x80000001, 0x4, @perf_config_ext={0x4, 0x2}, 0x10008, 0x3bef, 0x48000000, 0x8, 0x4, 0x8, 0x1, 0x0, 0xcb2, 0x0, 0x9}, r0, 0xa, 0xffffffffffffffff, 0x4) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0xffffffff) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x5, &(0x7f0000000100)=@raw=[@call={0x85, 0x0, 0x0, 0xab}, @call={0x85, 0x0, 0x0, 0xb5}, @jmp={0x5, 0x1, 0xb, 0x0, 0xa, 0x100, 0xffffffffffffffff}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x1}], &(0x7f0000000140)='syzkaller\x00', 0x10, 0xcb, &(0x7f0000000180)=""/203, 0x40f00, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x8, 0x4}, 0x8, 0x10, &(0x7f00000002c0)={0x5, 0x2, 0x0, 0x7}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000300)=[r0, r0, r0, r0, r0, r0, r0], &(0x7f0000000340)=[{0x2, 0x2, 0x1, 0x19}], 0x10, 0x200}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440), 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001500)={r4, 0x20, &(0x7f00000014c0)={&(0x7f0000000480)=""/4096, 0x1000, 0x0, &(0x7f0000001480)=""/20, 0x14}}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001740)={r0, 0x58, &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000017c0)={0x0, 0x97cc, 0x8}, 0xc) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001800)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x8, '\x00', 0x0, r0, 0x3, 0x1, 0x4}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001900)={0x6, 0x8, &(0x7f0000001540)=@raw=[@jmp={0x5, 0x0, 0x7, 0x3, 0x1, 0x2, 0xffffffffffffffff}, @call={0x85, 0x0, 0x0, 0x7a}, @jmp={0x5, 0x1, 0xc, 0x2, 0x7, 0x3, 0xfffffffffffffff0}, @ldst={0x2, 0x1, 0x2, 0x4, 0x1, 0xfffffffffffffff0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x4}, @map_idx={0x18, 0xd, 0x5, 0x0, 0xf}], &(0x7f0000001580)='syzkaller\x00', 0xfffffff7, 0xc5, &(0x7f00000015c0)=""/197, 0x41000, 0x1a, '\x00', r5, 0x25, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001780)={0x4, 0xb, 0x1}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000001880)=[r0, r6, r7], &(0x7f00000018c0)=[{0x2, 0x5, 0x0, 0x9}, {0x4, 0x3, 0xc, 0x3}], 0x10, 0x6e}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000019c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_subtree(r0, &(0x7f0000001a00)={[{0x2b, 'rlimit'}, {0x2d, 'devices'}, {0x2d, 'devices'}]}, 0x1a) sendmsg$kcm(r0, &(0x7f0000002c40)={&(0x7f0000001a40)=@isdn={0x22, 0x1, 0x40, 0x88, 0x1}, 0x80, &(0x7f0000002c00)=[{&(0x7f0000001ac0)="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", 0xff}, {&(0x7f0000001bc0)="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", 0x1000}, {&(0x7f0000002bc0)="2e186855c29e4a4f21d7d91c94ddf8f1909035fb87e1bd", 0x17}], 0x3, 0xfffffffffffffffd}, 0x4040000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002f40)={r0, 0xe0, &(0x7f0000002e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000002c80)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, &(0x7f0000002cc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002d00)=[0x0], 0x0, 0x95, &(0x7f0000002d40)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000002d80), &(0x7f0000002dc0), 0x8, 0x80, 0x8, 0x8, &(0x7f0000002e00)}}, 0x10) r11 = socket$kcm(0x29, 0x1, 0x0) recvmsg$unix(r0, &(0x7f0000003640)={0x0, 0x0, &(0x7f0000003580)=[{&(0x7f0000002f80)=""/152, 0x98}, {&(0x7f0000003040)=""/185, 0xb9}, {&(0x7f0000003100)=""/182, 0xb6}, {&(0x7f00000031c0)=""/217, 0xd9}, {&(0x7f00000032c0)=""/96, 0x60}, {&(0x7f0000003340)=""/84, 0x54}, {&(0x7f00000033c0)=""/241, 0xf1}, {&(0x7f00000034c0)=""/137, 0x89}], 0x8, &(0x7f0000003600)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x40}, 0x40010140) r16 = perf_event_open(&(0x7f00000036c0)={0x5, 0x80, 0x6, 0x7, 0x9, 0x5, 0x0, 0xd2, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x5d8, 0x4, @perf_bp={&(0x7f0000003680)}, 0x10404, 0xb738, 0xc, 0x0, 0x5, 0x7705, 0x5, 0x0, 0x3, 0x0, 0xfff}, 0x0, 0x2, r2, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000003740)={r0}, 0x4) r17 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000037c0)={&(0x7f0000003780)='hrtimer_expire_entry\x00', r3, 0x0, 0x5}, 0x18) ioctl$PERF_EVENT_IOC_QUERY_BPF(r17, 0xc008240a, &(0x7f0000003800)={0x5, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000003840)) bpf$ITER_CREATE(0x21, &(0x7f0000003880)={r0}, 0x8) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000004980)={r6, &(0x7f00000038c0)="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", &(0x7f00000048c0)=""/185}, 0x20) r18 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000004a80)={r10}, 0x4) sendmsg$unix(r8, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004a40)=[{&(0x7f00000049c0)="75f2ac5086db256f0f4d4cc4f9be6d0399f7e413e34fc5feb1c56c12e0daa474e12771862a8b0559fa88f62d710d3f9fae4bb31232ec9d048d2b5f7fdf70c4c8c18b7a586a41c7bf26016091ab3869124d0f08d8a608a731f699021474503574e9fa2c0ae3cf00017e60e9728cfbce4a38bd73f2d9b8bf6968", 0x79}], 0x1, &(0x7f0000004ac0)=[@cred={{0x1c, 0x1, 0x2, {r15, 0xffffffffffffffff, r14}}}, @cred={{0x1c, 0x1, 0x2, {r1, r13, r14}}}, @rights={{0x28, 0x1, 0x1, [r2, r16, 0xffffffffffffffff, r9, r11, r17]}}, @cred={{0x1c, 0x1, 0x2, {r15, 0xffffffffffffffff, 0xee00}}}, @rights={{0x20, 0x1, 0x1, [r3, r4, r7, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [r18, r8, r3]}}, @cred={{0x1c, 0x1, 0x2, {r12, r13, 0xee01}}}], 0xe8, 0x48084}, 0x4001) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000004c00)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r19, 0x1, 0x32, &(0x7f0000004c40)=r0, 0x4) 2.270920494s ago: executing program 2 (id=2253): socket$kcm(0x2, 0x200000000000001, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x80, 0x8003fff8000}, 0x401, 0x36, 0x43a1bd76, 0x7, 0x3ef, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0xe, 0x3, &(0x7f0000000300)=@framed={{0x61, 0x0, 0xa, 0xfe00, 0x0, 0x69, 0x10, 0x9a}}, &(0x7f0000000000)='syzkaller\x00'}, 0x90) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000003940)=[{&(0x7f00000039c0)=""/4069, 0xfe5}, {&(0x7f0000000400)=""/89, 0x59}, {&(0x7f0000000040)=""/56, 0x38}, {&(0x7f0000000880)=""/250, 0xfa}], 0x4}, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @tracing, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x0, 0x8520}, 0x92f5e}, 0x6d) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x10, 0x3, 0x10) socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x1, 0x7, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0x7, 0x0, &(0x7f00000004c0)="630b008646dc3f", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$kcm(0x28, 0x5, 0x0) close(r4) perf_event_open(0x0, 0x0, 0xffffffffffffffdf, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='{[\\]+\x00') socketpair(0x3f, 0x1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000005000000030000000000001008000000030000000000001103000000000000000000000001000004040000000000000002000000000000000061612e0048dd7f2f0f74d2f58d66d7232e6880a8d3f4e68ab99e6054a2ef770dbc48fa6c7a7d1046bce15e54365075a3ece79a5664ac27b6da24dc00fc29cdb6559926c1edc4c225cd7b61487eeccd6008d746c2769e167ade1a277312c44f609741c660880de19a4745bf08627d3649b9cee64dd31312e0e5099c365238f45de7805567011faf56"], 0x0, 0x51}, 0x28) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000002040)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) 2.221022686s ago: executing program 0 (id=2254): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x87408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x3, 0x7}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4fb5b6f85a83c771}, 0x0, 0xc8, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000640)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce8102032908000000000000000000002900ac14140a000000000000000000000000ac1414aa"], 0xfdef) 2.209584456s ago: executing program 1 (id=2255): r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000000100)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @multicast1}}}], 0x20}, 0x4008804) perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x6}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x310c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x11, 0xa, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001980)) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x48, &(0x7f0000000100), 0x120) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f00000019c0)=ANY=[@ANYBLOB="18020000010000000000000000895f641f1cbcab173fee3b000000857782000000970000009500000000000000"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000202078250000000000202020791af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, 0x0}, 0x0) 2.143684999s ago: executing program 0 (id=2256): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xc, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={0x1, 0x58, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x63, 0x63, 0x6, [@type_tag={0x7, 0x0, 0x0, 0x12, 0x4}, @datasec={0x9, 0x6, 0x0, 0xf, 0x3, [{0x1, 0x0, 0xaad}, {0x5, 0xc, 0xee51}, {0x5, 0x4b6d427d, 0xd}, {0x5, 0x5, 0x400}, {0x1, 0x0, 0x8}, {0x4, 0xd8d, 0x8}], "52fe85"}]}, {0x0, [0x0, 0x61, 0x2e, 0x2e]}}, &(0x7f00000003c0)=""/22, 0x82, 0x16, 0x0, 0x10001, 0x10000}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r0, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x1e, &(0x7f0000000580)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000005c0), &(0x7f0000000600), 0x8, 0xf5, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x4, 0x1, 0x80}, 0x1b) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000f80)={0x0, 0xfffffffffffffffd, &(0x7f0000000e00), &(0x7f0000000e80), 0x4, r4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000001940)={0xf, 0x4, &(0x7f0000000140)=@raw=[@cb_func={0x18, 0x1, 0x4, 0x0, 0x6}, @jmp={0x5, 0x0, 0xa, 0x2, 0x5, 0x2}, @jmp={0x5, 0x1, 0xc, 0x0, 0x7, 0x30, 0x8}], &(0x7f0000000200)='GPL\x00', 0x10001, 0x1000, &(0x7f00000008c0)=""/4096, 0x40f00, 0x0, '\x00', r1, @cgroup_device, r2, 0x8, &(0x7f0000000440)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000480)={0x2, 0x5, 0x57bf, 0xda}, 0x10, r3, r0, 0x2, &(0x7f00000018c0)=[r4], &(0x7f0000001900)=[{0x3, 0x4, 0x4, 0x3}, {0x0, 0x2, 0xb, 0x9}], 0x10, 0x6}, 0x94) r5 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="2cd8", 0x2}], 0x1}, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x1000000, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000001c0)='{<', 0x2}], 0x1, 0x0, 0x0, 0x900}, 0x60) 2.084878291s ago: executing program 1 (id=2257): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000003c0)={r1, 0x0, &(0x7f0000000340)=""/34}, 0x20) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)='jo', 0x2}], 0x2}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f0000000200)='syzkaller\x00'}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, 0x0, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000e6ffffffffff17120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000950000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="5a6bb33a9266d64d379ff1c87e7a", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x50) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x2, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x13, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000080000000d00000500000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000070000b7020000000000007b9a00fe0000000066090000ffffffffdbaaf0ff50000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffd50000000800000018220000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000005c9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.939609858s ago: executing program 0 (id=2258): socket$kcm(0x10, 0x2, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001100)={0x6, 0x3, &(0x7f00000010c0)=ANY=[@ANYBLOB="18000000020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7d}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000300)}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b400000000000000791028000000000069003600000000009500740000000000", @ANYRESDEC], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/164, 0x0, 0x25, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff8f}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2f00020b, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf4ec9f7b986", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.590231313s ago: executing program 3 (id=2259): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000d200000095c72720a17d6b3eb935eb5ef824000b00000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2808, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext, 0x0, 0x0, 0xdc9, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x9) socketpair(0x1, 0x1, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x7c, &(0x7f00000000c0)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000700110000000a600e41b0000900ac00060411000000160005000a0003000248035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, 0x0) 1.459853078s ago: executing program 3 (id=2260): bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x9, 0x400, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x40af1d, 0x1, @perf_config_ext={0xff, 0x7}, 0x100410, 0x200, 0x2, 0x1, 0x9, 0x9, 0xfffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) socketpair(0x1, 0x3, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x20) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0xc00}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x36}}, @ip_tos_u8={{0x11, 0x29, 0x3b}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x0) close(0xffffffffffffffff) socket$kcm(0x10, 0x2, 0x10) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10e, 0x2, 0x0, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x0, 0x4, 0x0, 0x28) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0xf00, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x7000000}, 0x0) 1.250543277s ago: executing program 3 (id=2261): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000f10000000000000000000218010000202070250000000000202020db1209ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300002000000085000000ca00000095"], &(0x7f0000000400)='GPL\x00', 0x1}, 0x94) 1.194220329s ago: executing program 3 (id=2262): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x101800, 0x0) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000100)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x5, 0x7, 0x5}, {0x2, 0x3, 0x8}], 0x10, 0x2}, 0x94) r1 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x64, &(0x7f0000000000)=r4, 0x11) perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x2, 0x0, 0xf, 0x0, 0x0, 0x400, 0x1e37cf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x401, 0x200, 0x0, 0x7, 0x0, 0x100}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x0, 0x3ff78000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000100081046881f782db44b904021d080b01000000e8fe55a118001500060014000600001208003c0043000000a80016000a00014006000d3f036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0xc3ff}, 0x0) perf_event_open(&(0x7f0000001240)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@fwd={0x6}]}, {0x0, [0x2e, 0x2e, 0x0, 0x5f, 0x61, 0x5f, 0x5f]}}, 0x0, 0x2d, 0x0, 0x1, 0x4}, 0x28) socket$kcm(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r10, 0x400454d9, &(0x7f0000000280)={'veth1_to_bridge\x00', 0x400}) ioctl$TUNSETQUEUE(r10, 0x400454d9, &(0x7f0000000280)={'wlan0\x00', 0x400}) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41ff, 0x2122, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x80000, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(r8, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) socket$kcm(0xa, 0x2, 0x88) 990.856578ms ago: executing program 0 (id=2263): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r0}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0600000004000000060000000006000000000000", @ANYRES32, @ANYBLOB="00005785f1830000000000000000000080010000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/17], 0x48) 990.554078ms ago: executing program 1 (id=2264): r0 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000007000000890704ac14140f0011000000000000000000000001000000fc0000000097ff001400000000000000010000000200000004000000000000001c000000000000000000000008"], 0x68}, 0x0) 986.799788ms ago: executing program 2 (id=2265): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x50) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3efd7ab4c41335d9, @perf_config_ext={0x7, 0xffffffffffffff5a}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) (async) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xa, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc6e2}, [@alu={0x4, 0x1, 0x2, 0x760cda05bcf95fa0}]}, &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r5 = socket$kcm(0x2, 0x3, 0x84) sendmsg$kcm(r5, 0x0, 0x0) (async) sendmsg$kcm(r5, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x2000) openat$cgroup_ro(r4, &(0x7f00000002c0)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1}, 0x0) socket$kcm(0x2, 0x1, 0x84) (async) r6 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r6, 0x84, 0x75, &(0x7f0000000000), 0x8) (async) setsockopt$sock_attach_bpf(r6, 0x84, 0x75, &(0x7f0000000000), 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r3, 0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x15, 0x11, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r7}, 0xc) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r7}, 0xc) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0x8, r0}, 0x38) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x5, [@decl_tag={0x2, 0x0, 0x0, 0x11, 0x3, 0xffffffffffffffff}, @float={0x4, 0x0, 0x0, 0x10, 0xc}, @var={0x1, 0x0, 0x0, 0xe, 0x2, 0x1}]}, {0x0, [0x61, 0x8709dcd68c71dd66, 0x2e]}}, 0x0, 0x49, 0x0, 0x1}, 0x28) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x5, [@decl_tag={0x2, 0x0, 0x0, 0x11, 0x3, 0xffffffffffffffff}, @float={0x4, 0x0, 0x0, 0x10, 0xc}, @var={0x1, 0x0, 0x0, 0xe, 0x2, 0x1}]}, {0x0, [0x61, 0x8709dcd68c71dd66, 0x2e]}}, 0x0, 0x49, 0x0, 0x1}, 0x28) bpf$MAP_LOOKUP_BATCH(0x1b, 0x0, 0x0) (async) bpf$MAP_LOOKUP_BATCH(0x1b, 0x0, 0x0) 764.885218ms ago: executing program 2 (id=2266): r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000000100)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @multicast1}}}], 0x20}, 0x4008804) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x310c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x11, 0xa, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001980)) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x48, &(0x7f0000000100), 0x120) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f00000019c0)=ANY=[@ANYBLOB="18020000010000000000000000895f641f1cbcab173fee3b000000857782000000970000009500000000000000"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000202078250000000000202020791af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, 0x0}, 0x0) 761.587498ms ago: executing program 1 (id=2267): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="08000000040000000400000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="18f8ffffffffffffff0000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 675.824392ms ago: executing program 2 (id=2268): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000002e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r0, 0x4) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000280)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000580)="02042700ea0e0000000000001eafbcf706e105000000000000001104ee1606d4b8bf4a828bda305775c43824cee8440000", 0x31}, {&(0x7f0000000100)="126873159fca3fa38fb198e9a6b363ceb3e6d803ab766b7a38e451d14e0b3457474fe6a51671e4124fcea96a873b10996816e100ed8a93b0a9053db57d60973369f58551c3091cb88d3b", 0x4a}, {&(0x7f0000000080)="088d85d1f4f8220aee8de7932b326f8a3164ae439862807a1589836c736d2341f7", 0x21}, {&(0x7f0000000240)="df3b46a1330000000011000000000000000000f1", 0x14}, {&(0x7f00000005c0)="b72abab9439ca41f5cf14d6435575ba774ee5f5c23ff2f5176f5773d08a15668ec280cfe4ea416cf769dbf978a8191bbe006e0da50029176c0f24e3ff4d3e895a2afbf52cef2fe1ca31edd842b126ec4be67e6e3624b9ddf806fc146c645ec1d37fe7e3b025c156d5d520104b53f7fb2af436201cfd5dca170edea5a190e4786bfaac544b60f514d7ef420526c467f14790dcfa5ab915d7dbcdf2765bbcad014c991f8b829c79f53586de79f0b987ad796f9de4a6e53136a07a39ab1f5a2ce30aded70a9b72d1beff7e8b6405fd6331e5635ee71e809be2d58f412dcd7b2e856d692dbfed19045ff13244acce351b6e450395568063569c71ea80a04f83fbe6ad1d0862fb97f816576c4844da65d751ee1fdc522ae1158670de297cdb2117bc0adc1486e016a6bcc922a162fce6a9ecc8c42b0c44c566004eda037864e5f339bbb0998cdaf2b8e49ae003659bc033668f7c8e550197ed95c420461254ba1883dbd9403672d579cee85c37f103ee9a350a768286017158784baeb063c8c684b91b022b0db2238b679092a1f6909f0cd9228500e088f5cc7bac4c0dc56e80fedac93554aec79715ce02e8bf3fcbd70382f619bfe3dcf06890d8542022ee58bdfb075d319c9fc8474cadc8de5c3dd3f682d3f68324d0af7a727064053ad84c94643eef190783c616467628f84620044c084b80e3e57bfcdf293c9c36b4474a52398b35e49e2ad4a4ac090bffc5cd27d3c69b4ae5f841d5b0766ccd36d25eb58d8f01621a05744b79ede39019ab9d7a1946353d8f3b7f833ce1a102a8c97a9e3f32138ffafd305448f2518ccdb7eef594a890eaeaff3f876f742fec22669a97085ed93b18228ecbe9e354e8f69967ca749fd2b1cf026665ca912e3fc0188b294519078b46676052de4fe22798290bd1e232c9791fc01ddb4ae776b5769143df2867042e8a3ddfa8e786bd8a244076956d4ab137939ad381650dd4fefd2b942a98d6f2edfd7019ae473e7608647b86d643e8ff3d7d4e89ed826e4b8c6e8fed224c528d805ade85c5b45261b2692c0f403dec050bd973b0999df214689f4402dd1598a16b0c7671e5e204a00b06376ddee7cb99292a8b835c0b451642b71f2ffa1aeea56255817b2384bfe4f8213ccfc1f762f250592896102e5f6d34cdd726bc0f86af52fd7c4483d32e23e5af770e960c7445b8e67b6086f0cadcd22d0d4bdadc31b5a94dd687379dc6e078210ccc71f8e67eb58d330394425ab17e55d1ca8f868f6bf738af291d2293c3dfa2ccff25061ded22878b3cc6532d19e5a00d1f0f1b9de35305fac2c6cfd5d77a2b02618735b7d392738bd5cd3eabb7039c790a9f193913f16e06605d405d6a0cf0011a2e5f935d8563fef1722692dd266c3d320b9f5eeb2a4b2f72155522f0ed72ff1efa0b6ee78e70d3d45241609e7f87d7bcfe1af71159baa11ad667a0ead3986b2b06500ba2615ee966ea86ca68d02de4802bd9ef18dac5ba53ca98b90df49ef4e3268ceee538973620e5a60513ea330989642626420b67dceebc569478657aedeb62c45b079348796923ad1fba5a99e6b150cf97ba2a570150053309c6dca7fa352fa1678c9b919fbc47ae0a84175a7fc25a00fa5888cb017e8d8225fadb29e34bd3c5bbccfb22a83255fec3967c991d5b3e6719ade82fb7ef85c8a4b9e7ad8ef2a3a7bc78de424572224affb1f9e0c5a969e61ee2ebb4f247bfa09384bdad04438f2efbfae303d47c3afe7e8d3a157b2a6f37572ea3ecc441dfb208ba755f781f144e58d80aea590abcfccbe8678ec6de47511f9d61cc408cbbe90eeab2cffe6d1a48dc3eb4e48e228fd43cafd7ff2c85c3ed52e99fe16887be28fcd2cd4ba4cac414c92c96294fa7d628e4356c748c173f790a7f30071d0bd53817c78d163249c7402b222b8f28668cae7afd17b97dbaf10b75b61409ca6f5b285d1ab09207c5a91c68b0d4b5da6d6b5a495c8debd7f4400e56d9e22d1cc330f782f2b5441a31b9ccf35aa1a151219cdcff5ab8b240af5b5a751eca67773c057412a935e3a7a367b2bcd28463904ee040a586d6f4f969cee56d55b6b4d97d1fe93b67e2f6bd47925054c4702ec8969a1a6211ea8f6783ca0e8ae333922ce19eceb24e2ff714a0208d2489a62f299aa50cdbfe5a826e872ab231bbddf5bd2fca92d4460379e05e13ff34a200fd921dcb67a002873bda8d86536cddaccb54eb72dd4e399fe9195ad5574ad85d9ed2eaae4106234f0a8db05a230ff377b59b54fd0919d1b86b938622ae6098f003db7f4d45d6874f54c33064ce6184dccc99fece2d994e9572d4840b0cbdd704fd70b4f625912d48a512339f883533768f09a4f614583dfb72defe713ee38f61184df279461b7d35becd8e67d01f0ec27e901d88215554d5a69db373a662085733d09ad9153e7d432c94f872ff7cd72995b3a581ea17722ed13a191b366208f75661112b1a7d42c252c907488ca8dd8f819d4618b0053d4bcddb3b5975cb8615ebc472e052552ee74d5253174a2b0cb96e1eaf6349b6c39be975123ee72b0ffe1367df7aba54de26c9135a3422d21067034551be5efc5daf8b8f59bc725e4fd171378fd9f16a785f1b0378823c85eec521e0b2aca70b7b72b719a20eb2fb0addc0b05851c8e181607f49dad7323bc255309097584c2099574db1ed7940fd16796aef19d30acd714dc1f898716df64db87d852eddf2f86e78fd7fd64868b4cb6cc626efcdea49c4a2779a0e777bbe23968e14233a810d9883680894de93023a8deae51ccbf32e6d1e53618ebee95c761221a33bc3263fff0f5ae23e14dba0418cf3f31effcb36956e06c57a17620044260419a208ae1d2296ec9472d44be74a8ed0a33a23181acdef8c7d2695ce9485ed8d17d9f6f30b9b128ee0ba15c42cbf6059bcfef008c09db8855343f79c3ce1c4d79077c8a62237d4e400a5aa88e7424f2f99df6c2070d6ed071f4968376581e20e52d64e9c4f8a6f73bb33f5b6b62c1deecc85bf789565fde14e4454306ed8f09af08afb360ee4fb40dd5dca0be43ccff75e5c0ef85ea7c521cb4840d61e99e1ce4661e721446d5a571cddffbc3643ec9b58237fd416376906bdca09485c2c80f82b23e8e7bbf22035fdbcacd804ae3771fd616901184ced46987d533017eef717e9b34a5531c3efe2d77c9b6cb0617382d69951545378a4118e71c64a1f16d096a8f933580922083d0536b90ae1715c63f682e8241b42e1646b0c52e34aa9c91efe2b6b787ce0747d4ff0dd07d6ebc9ce27e0ef35705eb7b78763a9829b464523ff3ed9078aff6ee29e6e7a59a5243825e8bb9235f8e49a9dfb5932536666c3dc75b29e515dbca4c84268cf23cd7b6da6814328a3cb26d7b1d6c28e20b36f9a2c9e2fcf663c314f72f37d2b8f405cfc686a6b35400435be0eab01709c2c4b3005491cbb0b560e33547b77ba9f25f01b194e20534199a3786ddfaf0a75aafb65cd4df4da7b5f98fe72a8bc7d045339fd41508cecca791c717a10d4fed8aa69eec80955bd899a6f8aaf3411be40568149e631ccbe17c68f85e87b58da81ba78def8b1a48c49b2dc7613f7d6ea8b158bed077666d37d1caba9a23b7cb2772e780f70872113e5bcaebaf9f9499f651dc894be3bba1e99d58b33d60c0eda397df91d7cf9fb072f247fa9a9f59c4f59c4284a3832ff0a1f9ce8f6346cb5c08a9dcb2851c7f169af688fc13f00cf9519ade547671698caaa3f4d4921fee83753b9ab0875707836343eddb5b87bec86aae023c9571b8e389ff3f4c692b6fb19686105249ce033116777d919ceb4559a67ee6b6ad9d4b53d2be24315429de3bf201107fe7dff9cbc92dbf9173391d555b0a1b8ea3252fd7d7fd15d8a3cc70cecdbdd43c4edcc4bb2fbbf646d5ec7dad0d3156a513d14184e0c316f8155e774f7dcea485f904828edf28510d692b66b1500c5a704371c2188a2812bd323de012f36a79674082b5f5e9f7f4ce1a75ed854b71555e9fcd1f0322c22a9e543674c79a74404e08e61860f505dc56e1b52977b9a9af18be4064b5f6aa7c891382bbbe65e70a4cee33176570341a525fb6b25c0b20bfa3f2ee4a01584f259f43c3b63a2dfc376f435827211379ab3ca8912cbe01e4f837920666fbda682f6954d1c156f21e12547b885f485c38f62e765013144be8ca92b1d4872790a5c02671517f6a8f0ceb247e08c64268ad8970b57bb6d077c9b8ebe7fb1183087c9a3baee06100609204be588621253b9b120c08db9f28c2d38c9bc3f59018bb7216d73186048770d1e556faa49df23a40a64b40cdda2041dccf5619db09b7a7795fd7eb631c0e0bffc3b64422bf6acd84b7fae8bd05b057260a4d7c4851829c7bbf0b6f27c5db0ff10f42df3528f79dc9bbd591965259cd0389deb124b1fadc5dfd3ade9742d29261379ea3d98929512371dec991f0636fbda5dac355a04e363beeb4751781d9cef3a0b6ac6500895d223ad43ed75cac8b0a868253fffa10bf6c2de99c687fd056e075cf0632b6d8ed2263ca08ad95b6f335a3b6d8ab7801422ac8597441ac1bbe289b50af31eb221d19a2d3177d4ad1056d616295e89471e65d811b8fa4fe2c0c12793f43ef7e75c7f657f6c26ca9cbae63ce99301069ab257ae77c38778d35afd326d569c626a68f3904b2c376dfaa05568892f346f86fb05e71fb751e09cd22525cb63512a7d2e4670bd31109b87818278e66dc73fa9667e35c5bc6588cd36d2b62592a4103803d93c194f8edd5d20c6597231321b909bbb3c1d13408e5cf27728883e333b391222e6b6665454892dfedd17a1066f1145163e1a31ba9a3e3cee925e55d794b89462a0a092a639ccd4a24514083cb68224c87c18f0bb39ff721cc598e686b5fef169bc30f9ec6df397905f8340f6ae7ad826aac774cc46bfb9dfe8192e9ef10e8355d7c2810269eb73c7ecb8d3ffa33437142b8e596cdb778cd3cdda5bbbd09a8ea919929adbc63ff1004490c45a9ea59def65fabc884c39beac1b74a218f59c5e31ba85dcc4b8bd81d7a66d8aaf0edb64b505f760442e16fb7f07a069aba88601c3ace27762cef8196da3d44b14796b04e7fa3bab37209190a1de6e6ecfd99353279ef643766814fa7fac7254eba59bff3546bf21afc7445a4f1bc92c7b013f34962ff029e0f2926acf6c8a25fecea5b0b810656c981535492a2a4159dcfd0bf98085dc9612159fa0ad837a22eaffce80405367931ef3eacbf5a663175acc306eb075c52265d0c6dfaab", 0xe8f}, {&(0x7f0000000300)="d608000000fbff0000fa6bd53d5fbf8f968178124964b4b012f8044275a058a5", 0x20}], 0x6}, 0x40000) 616.953244ms ago: executing program 3 (id=2269): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594b41fde1b60", 0x14}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x57}, 0x104901, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0xe, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) close(0x3) r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r5 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$unix(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[], 0x18}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1536, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x1, @perf_bp={&(0x7f0000000100), 0x2}, 0x0, 0x10000, 0x0, 0x9, 0x8, 0x20105, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, r4, 0x0) r6 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r6, 0x84, 0xb, &(0x7f0000000000), 0xe) sendmsg$inet(r6, 0x0, 0x8054) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000080)='\xd2^\x00') ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000008000151e388ec53b0fdfeffc00000009b14387cbb595c05acbe7c95c4d68f79d4019d28c3523c252335dc1ca899ce8b2d5da9ce0bc74d353290a322368240d0ed016b380cee6b40e942c1e4e418530645b3012d1d4991690056f391a99d87c4e87aa066456538a4d198feaedd74855c281e1c5a4130d852c219d837b88953084ee0ebc6e772cb2a417b8390b3d95832ac777b67e3b2bc3e111d1d10c86d4ae8fe0a0b000000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x3f, r7}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001880), 0x0, 0x1, r7}, 0x38) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) 616.587204ms ago: executing program 1 (id=2270): bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000040), 0x10) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='ext4_es_find_extent_range_exit\x00'}, 0x18) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000240)=ANY=[@ANYBLOB="080000000c0007000000000000000000000000000000000000000000003ec400000000"]) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) socket$kcm(0x2c, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000040)=""/58) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x400000002, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x8, &(0x7f0000001f80)=ANY=[@ANYBLOB="7a0af8ff7525732cbfa100000000000007010000f8ffffffb702000005000000bf130000000000008500000006000000b700000000000000950000f700000000b2595285fa97ead0169191d54f8196217fc563e2fc91f6da4dad4fdc2eb1b5956fc4a33ca263e2b5d47b2b00000000b1a297cfddd73f30f2382f6c2d3ffdd45be583823c0f092248a57d48621f3c1c65ee19ee875daf45006a4c4ea5e15b2f9618d547244a22000010000800db583620ce7243d1aebdb638d91dbef6619358399aa9c2acd068c03efefd8bc77edf2d34b12cd48a1b20fb7dd843267e0331759f4ec6b5b0af58e604f494eff289026d5045ef08000000000000007718a09f4886afc26abba34635d0e8b598a51bc742135a6e1d33fe226c944bc70bb30d435aa8b5202db761014b1b999a12df6bee431a6681000000263b6233e1c0fe30e3841bef895c5a637b0bf2eac3cb07b74a72291a1a2b523dd81b6651b1ee29e999bb004823ebcd8c65743f31f84b263ab9b3426692d01ad194f302d7a658e90000000001000000b6b2f25ddb8c640ab321a402058c92cdfbea882b0b18914781ceb10814cf4ee23ddb79fff5eb156e0a000000000000f2bd164a178d86d6935eb8b75bc4eb680d10e8b6a54c6c8674caf63ff76622939a20d4aadf85db40179c2cf83ee07e30a279d8fdf3bc282deb43a03409f8e6972f3f720d045923702cede0f3e91411f3f1b16f065624f280a7dcce8db910f93c49b9e0aa390d0da6972ed719d7e0efb2bb713d1890e317c8de105c3933fd5d5bf38f6b9fc39fc829dcfe4af8ac5fbb7314a7a433e0182767d1376eda2b9c66200349e62d4d0ab1a1dc51907c980000cfb215af2c1a3c22243cce23b00000a857d61b0d66c3f6da8aed31027c33204ea0fa0620111920d3f24980e9995a510bd87b06440a0a26130098b901c53a02cfbfd8bcbdec9f34542c3c9652adefde555ecd28ebc88082bab431ee3e1adb5b0ad14c79dd4411ecc96c512f3b72a9b3a0c3e07ec6b427bdc0bf3963e9f802a5feab82a989db62d8d1339f842b3f593d6c24fe015ec63c658ba7c4fae17514f802709ab4fa5caa932d4b65a5ecfc422899513ddde6ec04974f9981a8c155c26e0da70e524832ab04dec9ce66a62ceffbb15b1857c93666fe043a266a451f9a1e1f054211b9ae566b58f4f356c7a4054ce13f6fcc58912a175bd9cc3c494894ad39b36e34e608f4ac00cf22c27bb8c12bcf4beeb579fc9fa1c9"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0xd}, 0x48) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x4004743d, 0x110e22fff6) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x500, 0x4000000}, 0x28) 555.189427ms ago: executing program 0 (id=2271): bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000040), 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) socket$kcm(0x2c, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000040)=""/58) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x400000002, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x8, &(0x7f0000001f80)=ANY=[@ANYBLOB="7a0af8ff7525732cbfa100000000000007010000f8ffffffb702000005000000bf130000000000008500000006000000b700000000000000950000f700000000b2595285fa97ead0169191d54f8196217fc563e2fc91f6da4dad4fdc2eb1b5956fc4a33ca263e2b5d47b2b00000000b1a297cfddd73f30f2382f6c2d3ffdd45be583823c0f092248a57d48621f3c1c65ee19ee875daf45006a4c4ea5e15b2f9618d547244a22000010000800db583620ce7243d1aebdb638d91dbef6619358399aa9c2acd068c03efefd8bc77edf2d34b12cd48a1b20fb7dd843267e0331759f4ec6b5b0af58e604f494eff289026d5045ef08000000000000007718a09f4886afc26abba34635d0e8b598a51bc742135a6e1d33fe226c944bc70bb30d435aa8b5202db761014b1b999a12df6bee431a6681000000263b6233e1c0fe30e3841bef895c5a637b0bf2eac3cb07b74a72291a1a2b523dd81b6651b1ee29e999bb004823ebcd8c65743f31f84b263ab9b3426692d01ad194f302d7a658e90000000001000000b6b2f25ddb8c640ab321a402058c92cdfbea882b0b18914781ceb10814cf4ee23ddb79fff5eb156e0a000000000000f2bd164a178d86d6935eb8b75bc4eb680d10e8b6a54c6c8674caf63ff76622939a20d4aadf85db40179c2cf83ee07e30a279d8fdf3bc282deb43a03409f8e6972f3f720d045923702cede0f3e91411f3f1b16f065624f280a7dcce8db910f93c49b9e0aa390d0da6972ed719d7e0efb2bb713d1890e317c8de105c3933fd5d5bf38f6b9fc39fc829dcfe4af8ac5fbb7314a7a433e0182767d1376eda2b9c66200349e62d4d0ab1a1dc51907c980000cfb215af2c1a3c22243cce23b00000a857d61b0d66c3f6da8aed31027c33204ea0fa0620111920d3f24980e9995a510bd87b06440a0a26130098b901c53a02cfbfd8bcbdec9f34542c3c9652adefde555ecd28ebc88082bab431ee3e1adb5b0ad14c79dd4411ecc96c512f3b72a9b3a0c3e07ec6b427bdc0bf3963e9f802a5feab82a989db62d8d1339f842b3f593d6c24fe015ec63c658ba7c4fae17514f802709ab4fa5caa932d4b65a5ecfc422899513ddde6ec04974f9981a8c155c26e0da70e524832ab04dec9ce66a62ceffbb15b1857c93666fe043a266a451f9a1e1f054211b9ae566b58f4f356c7a4054ce13f6fcc58912a175bd9cc3c494894ad39b36e34e608f4ac00cf22c27bb8c12bcf4beeb579fc9fa1c9"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0xd}, 0x48) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x4004743d, 0x110e22fff6) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x500, 0x4000000}, 0x28) 517.896518ms ago: executing program 2 (id=2272): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x18, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3}, [@ldst={0x2, 0x0, 0x2, 0xa, 0x8, 0xfffffffffffffff4, 0xfffffffffffffffc}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @tail_call, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @map_fd={0x18, 0xb, 0x1, 0x0, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0xde5}]}, &(0x7f0000000400)='syzkaller\x00', 0x2, 0x78, &(0x7f0000000440)=""/120, 0x41100, 0x80, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0xb, 0x8000, 0x1}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="180000000000000000000000000000009500160000000000e2bac15d3b6641a215f099e26603a050337b2ccc70a9f928ba3c529bb6e7365e7e246317380f5884d79663e7fcaa89795d7b10e88378c33265a7af06040e3d0bbc6a5864dfa023c6ac1da574242785bbb4ece12b11da524968"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r1}, 0x10) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000780)={@map, 0x15, 0x1, 0x5, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) (async, rerun: 64) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (rerun: 64) openat$cgroup_procs(r6, &(0x7f0000000100)='tasks\x00', 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0xe, 0x0, &(0x7f0000000680)="548852ac5b4eba7aeaccd2c62b2b", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8}, 0x50) (async) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000800)={0x7, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000840)=ANY=[@ANYRES32=r6, @ANYRES32=r0, @ANYBLOB="110000002820000000000000", @ANYRES32=r8, @ANYBLOB="67d2932d50e24a3097e5de5f7aa6c29c5e", @ANYRES64=r5], 0x20) (async) r9 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r9, &(0x7f0000000200)={&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=[@ip_retopts={{0x84, 0x0, 0x7, {[@lsrr={0x83, 0x27, 0x7d, [@broadcast, @remote, @dev={0xac, 0x14, 0x14, 0x2b}, @broadcast, @dev={0xac, 0x14, 0x14, 0x43}, @multicast2, @dev={0xac, 0x14, 0x14, 0x12}, @broadcast, @private=0xa010101]}, @lsrr={0x83, 0x13, 0x35, [@rand_addr=0x64010102, @local, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @cipso={0x86, 0x37, 0x1, [{0x1, 0xb, "e9fa314f30a87a31b6"}, {0x1, 0x4, "5487"}, {0x0, 0x11, "a71a8421b9a788a527b7d575c96bc8"}, {0x0, 0x11, "60f7d0ca162e3098083ca2a5ca32ed"}]}]}}}], 0x88}, 0xe900) r10 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f90324fc60100005000a000200053582c137153e37000c0680050002000300", 0x33fe0}], 0x1}, 0x0) (async) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x6, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x0, @perf_bp={0x0, 0x3}, 0x8080, 0x9, 0x7fff, 0x7, 0xffffffff, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) r12 = socket$kcm(0xa, 0x3, 0x106) (async, rerun: 32) socketpair(0x2a, 0x1, 0x4f, &(0x7f0000000280)) setsockopt$sock_attach_bpf(r12, 0x29, 0x1a, 0x0, 0x4) close(r11) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 322.23µs ago: executing program 2 (id=2273): bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000040), 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) socket$kcm(0x2c, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000040)=""/58) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x400000002, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x8, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0xd}, 0x48) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x4004743d, 0x110e22fff6) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x500, 0x4000000}, 0x28) (fail_nth: 1) 0s ago: executing program 1 (id=2274): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x8, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000002540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): 87.043771][ T5797] hsr_slave_0: entered promiscuous mode [ 87.050263][ T5797] hsr_slave_1: entered promiscuous mode [ 87.069453][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.076630][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.102869][ T5792] Bluetooth: hci1: command tx timeout [ 87.103104][ T5792] Bluetooth: hci3: command tx timeout [ 87.108494][ T51] Bluetooth: hci2: command tx timeout [ 87.114280][ T5799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.157537][ T5789] hsr_slave_0: entered promiscuous mode [ 87.164609][ T5789] hsr_slave_1: entered promiscuous mode [ 87.170824][ T5789] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.179029][ T5789] Cannot create hsr debugfs directory [ 87.277928][ T5799] hsr_slave_0: entered promiscuous mode [ 87.284683][ T5799] hsr_slave_1: entered promiscuous mode [ 87.290895][ T5799] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.299235][ T5799] Cannot create hsr debugfs directory [ 87.360205][ T5794] hsr_slave_0: entered promiscuous mode [ 87.367235][ T5794] hsr_slave_1: entered promiscuous mode [ 87.374199][ T5794] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.382925][ T5794] Cannot create hsr debugfs directory [ 87.743369][ T5797] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 87.757309][ T5797] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 87.769632][ T5797] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 87.782627][ T5797] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 87.852452][ T5789] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 87.866031][ T5789] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 87.885089][ T5789] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 87.895655][ T5789] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 88.009384][ T5794] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.052151][ T5794] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.067794][ T5794] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.079166][ T5794] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.140199][ T5799] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 88.159347][ T5797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.168045][ T5799] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 88.178599][ T5799] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 88.190537][ T5799] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 88.232626][ T5797] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.274440][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.282055][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.320999][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.328142][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.373008][ T5789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.435627][ T5789] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.487295][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.494567][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.507388][ T5794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.538385][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.545573][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.588908][ T5794] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.666664][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.673890][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.726932][ T1000] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.734162][ T1000] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.758053][ T5799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.828684][ T5799] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.850692][ T1134] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.857889][ T1134] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.889107][ T1134] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.896323][ T1134] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.994959][ T5797] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.091702][ T51] Bluetooth: hci0: command tx timeout [ 89.139749][ T5797] veth0_vlan: entered promiscuous mode [ 89.172964][ T51] Bluetooth: hci3: command tx timeout [ 89.178456][ T51] Bluetooth: hci2: command tx timeout [ 89.185421][ T5795] Bluetooth: hci1: command tx timeout [ 89.197581][ T5797] veth1_vlan: entered promiscuous mode [ 89.245264][ T5789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.330467][ T5797] veth0_macvtap: entered promiscuous mode [ 89.357434][ T5797] veth1_macvtap: entered promiscuous mode [ 89.438084][ T5794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.479387][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.510103][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.524941][ T5789] veth0_vlan: entered promiscuous mode [ 89.546217][ T5797] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.555528][ T5797] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.565147][ T5797] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.575534][ T5797] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.599383][ T5789] veth1_vlan: entered promiscuous mode [ 89.630743][ T5799] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.695096][ T5794] veth0_vlan: entered promiscuous mode [ 89.717734][ T5789] veth0_macvtap: entered promiscuous mode [ 89.742831][ T5794] veth1_vlan: entered promiscuous mode [ 89.778319][ T5789] veth1_macvtap: entered promiscuous mode [ 89.818822][ T1000] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.829921][ T1000] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.872097][ T1000] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.873804][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.891612][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.902443][ T1000] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.905139][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.945539][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.956140][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.969308][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.003324][ T5799] veth0_vlan: entered promiscuous mode [ 90.019646][ T5794] veth0_macvtap: entered promiscuous mode [ 90.034554][ T5789] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.048758][ T5789] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.063980][ T5789] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.076341][ T5789] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.115754][ T5799] veth1_vlan: entered promiscuous mode [ 90.153274][ T5794] veth1_macvtap: entered promiscuous mode [ 90.247997][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.261809][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.274293][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.291008][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.304291][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.333073][ T5799] veth0_macvtap: entered promiscuous mode [ 90.351449][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.369927][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.381263][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.392610][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.405473][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.425907][ T5799] veth1_macvtap: entered promiscuous mode [ 90.447716][ T5794] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.466302][ T5794] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.475768][ T5794] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.486240][ T5794] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.530993][ C0] hrtimer: interrupt took 46211 ns [ 90.561294][ T5883] syz.1.5 uses obsolete (PF_INET,SOCK_PACKET) [ 90.598945][ T5799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.619187][ T5799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.635736][ T5799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.648180][ T5799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.663291][ T5799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.676319][ T5799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.695479][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.711214][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.719109][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.746829][ T5799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.758383][ T5799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.770033][ T5799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.781527][ T5799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.791433][ T5799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.802395][ T5799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.814536][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.845516][ T5799] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.854825][ T5799] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.865323][ T5799] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.875008][ T5799] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.932411][ T1000] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.953868][ T1000] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.075535][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.126912][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.173956][ T51] Bluetooth: hci0: command tx timeout [ 91.251514][ T51] Bluetooth: hci3: command tx timeout [ 91.252917][ T5795] Bluetooth: hci2: command tx timeout [ 91.256969][ T51] Bluetooth: hci1: command tx timeout [ 91.273136][ T1134] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.275758][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.301093][ T1134] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.312947][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.514358][ T5893] syzkaller0: entered promiscuous mode [ 91.519900][ T5893] syzkaller0: entered allmulticast mode [ 91.823318][ T1000] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.851252][ T1000] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.057457][ T1190] cfg80211: failed to load regulatory.db [ 92.131514][ T5899] delete_channel: no stack [ 93.253894][ T51] Bluetooth: hci0: command tx timeout [ 93.332168][ T51] Bluetooth: hci1: command tx timeout [ 93.341250][ T51] Bluetooth: hci2: command tx timeout [ 93.342241][ T5792] Bluetooth: hci3: command tx timeout [ 93.931988][ T5912] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.12'. [ 94.582116][ T5924] netlink: 'syz.1.16': attribute type 10 has an invalid length. [ 94.603082][ T5924] veth0_vlan: entered allmulticast mode [ 94.632517][ T5921] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.15'. [ 94.697782][ T5924] veth0_vlan: left promiscuous mode [ 94.713968][ T5924] veth0_vlan: entered promiscuous mode [ 94.727535][ T5924] team0: Device veth0_vlan failed to register rx_handler [ 94.817754][ T5921] netlink: 'syz.2.15': attribute type 10 has an invalid length. [ 94.919251][ T5924] syz.1.16 (5924) used greatest stack depth: 19696 bytes left [ 95.004946][ T5921] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.053089][ T5921] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 95.088832][ T5925] bond0: entered promiscuous mode [ 95.096696][ T5925] bond_slave_0: entered promiscuous mode [ 95.103542][ T5925] bond_slave_1: entered promiscuous mode [ 95.108372][ T5932] Zero length message leads to an empty skb [ 95.109545][ T5925] batadv0: entered promiscuous mode [ 95.177860][ T5931] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.17'. [ 95.200794][ T5931] netlink: 60 bytes leftover after parsing attributes in process `syz.1.17'. [ 95.217450][ T5931] netlink: 60 bytes leftover after parsing attributes in process `syz.1.17'. [ 95.227243][ T5921] syz.2.15 (5921) used greatest stack depth: 19336 bytes left [ 95.229339][ T5932] netlink: 60 bytes leftover after parsing attributes in process `syz.1.17'. [ 96.390268][ T5962] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.29'. [ 96.559914][ T5959] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.27'. [ 96.625316][ T5962] netlink: 60 bytes leftover after parsing attributes in process `syz.0.29'. [ 96.666123][ T5959] netlink: 'syz.1.27': attribute type 10 has an invalid length. [ 96.797800][ T5959] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.880397][ T5959] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 96.890796][ T5962] netlink: 60 bytes leftover after parsing attributes in process `syz.0.29'. [ 96.945425][ T5963] bond0: entered promiscuous mode [ 96.950604][ T5963] bond_slave_0: entered promiscuous mode [ 96.957109][ T5963] bond_slave_1: entered promiscuous mode [ 96.977366][ T5963] batadv0: entered promiscuous mode [ 97.191991][ T5959] syz.1.27 (5959) used greatest stack depth: 19144 bytes left [ 99.232313][ T6021] netlink: 'syz.3.45': attribute type 10 has an invalid length. [ 99.294952][ T6021] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.335442][ T6021] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 99.431661][ T6024] bond0: entered promiscuous mode [ 99.437231][ T6024] bond_slave_0: entered promiscuous mode [ 99.454259][ T6024] bond_slave_1: entered promiscuous mode [ 99.463934][ T6024] batadv0: entered promiscuous mode [ 100.916698][ T6070] __nla_validate_parse: 9 callbacks suppressed [ 100.916715][ T6070] netlink: 164 bytes leftover after parsing attributes in process `syz.2.62'. [ 101.588258][ T6094] netlink: 'syz.2.70': attribute type 39 has an invalid length. [ 105.327840][ T6118] netlink: 'syz.0.78': attribute type 2 has an invalid length. [ 105.361101][ T6118] netlink: 'syz.0.78': attribute type 8 has an invalid length. [ 105.368730][ T6118] netlink: 132 bytes leftover after parsing attributes in process `syz.0.78'. [ 105.422929][ T6122] cgroup: fork rejected by pids controller in /syz3 [ 105.844620][ T6127] netlink: 132 bytes leftover after parsing attributes in process `syz.1.82'. [ 106.113146][ T6144] netlink: 'syz.0.88': attribute type 19 has an invalid length. [ 106.121279][ T6144] netlink: 40 bytes leftover after parsing attributes in process `syz.0.88'. [ 106.664147][ T5159] udevd[5159]: worker [5791] terminated by signal 33 (Unknown signal 33) [ 106.691625][ T5159] udevd[5159]: worker [5791] failed while handling '/devices/virtual/block/loop0' [ 106.901315][ T5159] udevd[5159]: worker [5807] terminated by signal 33 (Unknown signal 33) [ 106.919873][ T5159] udevd[5159]: worker [5807] failed while handling '/devices/virtual/block/loop2' [ 107.037873][ T6161] netlink: 'syz.2.95': attribute type 1 has an invalid length. [ 107.071694][ T6161] netlink: 146340 bytes leftover after parsing attributes in process `syz.2.95'. [ 107.527796][ T6170] netlink: 'syz.1.98': attribute type 39 has an invalid length. [ 107.740810][ T6173] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.99'. [ 107.769891][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 107.779650][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 107.788305][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 107.807206][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 107.827521][ T51] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 107.845334][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 107.963019][ T6173] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.99'. [ 108.171223][ T6173] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 108.622507][ T6172] chnl_net:caif_netlink_parms(): no params data found [ 109.142934][ T6172] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.153043][ T6172] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.160304][ T6172] bridge_slave_0: entered allmulticast mode [ 109.168942][ T6172] bridge_slave_0: entered promiscuous mode [ 109.185977][ T6172] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.199266][ T6172] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.209372][ T6172] bridge_slave_1: entered allmulticast mode [ 109.222853][ T6172] bridge_slave_1: entered promiscuous mode [ 109.495193][ T6172] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.562774][ T6172] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.754300][ T6172] team0: Port device team_slave_0 added [ 109.768023][ T6172] team0: Port device team_slave_1 added [ 109.876292][ T6172] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.894998][ T51] Bluetooth: hci3: command tx timeout [ 109.906144][ T6172] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.932431][ T6172] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.947551][ T6172] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.955374][ T6172] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.990914][ T6172] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.128489][ T6224] netlink: 'syz.0.117': attribute type 10 has an invalid length. [ 110.322642][ T6224] team0: Device veth1_macvtap failed to register rx_handler [ 110.450154][ T6172] hsr_slave_0: entered promiscuous mode [ 110.467939][ T6172] hsr_slave_1: entered promiscuous mode [ 110.476335][ T6172] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 110.485856][ T6172] Cannot create hsr debugfs directory [ 110.509796][ T6229] netlink: 'syz.2.120': attribute type 39 has an invalid length. [ 110.905869][ T6172] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.293126][ T6172] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.439847][ T6172] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.538426][ T6172] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.681471][ T6172] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 111.693246][ T6172] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 111.708101][ T6172] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 111.720510][ T6172] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 111.826990][ T6172] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.850555][ T6172] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.865402][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.872627][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.896627][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.903823][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.982281][ T51] Bluetooth: hci3: command tx timeout [ 112.132420][ T6172] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.185214][ T6172] veth0_vlan: entered promiscuous mode [ 112.200614][ T6172] veth1_vlan: entered promiscuous mode [ 112.252439][ T6172] veth0_macvtap: entered promiscuous mode [ 112.263562][ T6172] veth1_macvtap: entered promiscuous mode [ 112.288530][ T6172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.303242][ T6172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.340483][ T6172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.359555][ T6172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.370768][ T6172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.382202][ T6172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.393883][ T6172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.406462][ T6172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.440806][ T6172] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.456215][ T6269] netlink: 'syz.0.130': attribute type 39 has an invalid length. [ 112.552834][ T6267] netlink: 'syz.1.131': attribute type 10 has an invalid length. [ 112.621790][ T6267] team0: Device veth1_macvtap failed to register rx_handler [ 112.658245][ T6172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.670617][ T6172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.686311][ T6172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.710271][ T6172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.729276][ T6172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.741213][ T6172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.751657][ T6172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.763113][ T6172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.783321][ T6172] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.860444][ T6172] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.874186][ T6172] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.884789][ T6172] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.893972][ T6172] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.081800][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.121040][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.182309][ T5159] udevd[5159]: worker [5806] terminated by signal 32 (Unknown signal 32) [ 113.192325][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.210280][ T5159] udevd[5159]: worker [5806] failed while handling '/devices/virtual/block/loop0' [ 113.219818][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.522288][ T6293] netlink: 2 bytes leftover after parsing attributes in process `syz.2.140'. [ 113.549109][ T6293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.565243][ T6293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.584060][ T6293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.598832][ T6293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.610225][ T6293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.626032][ T6293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.640132][ T6293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.660003][ T6293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.699859][ T6293] batadv_slave_1: entered promiscuous mode [ 113.824863][ T6299] syzkaller0: entered promiscuous mode [ 113.838244][ T6299] syzkaller0: entered allmulticast mode [ 113.993164][ T6301] netlink: 'syz.2.144': attribute type 10 has an invalid length. [ 114.039262][ T6306] syz.0.152[6306] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 114.041362][ T6306] syz.0.152[6306] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 114.120235][ T51] Bluetooth: hci3: command tx timeout [ 114.579094][ T6301] team0: Device veth1_macvtap failed to register rx_handler [ 115.595013][ T6341] netlink: 'syz.1.160': attribute type 11 has an invalid length. [ 116.198374][ T6356] netlink: 'syz.1.165': attribute type 39 has an invalid length. [ 116.211279][ T51] Bluetooth: hci3: command tx timeout [ 116.381907][ T6359] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.167'. [ 116.578133][ T6367] warning: `syz.0.170' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 119.444903][ T6449] netlink: 'syz.2.202': attribute type 39 has an invalid length. [ 120.564536][ T6485] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.217'. [ 120.590194][ T6485] openvswitch: netlink: Flow key attribute not present in set flow. [ 121.244971][ T6507] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.225'. [ 121.293686][ T6510] syz.3.225: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 121.365369][ T6510] CPU: 0 PID: 6510 Comm: syz.3.225 Not tainted syzkaller #0 [ 121.372733][ T6510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 121.382843][ T6510] Call Trace: [ 121.386163][ T6510] [ 121.389143][ T6510] dump_stack_lvl+0x16c/0x230 [ 121.393881][ T6510] ? show_regs_print_info+0x20/0x20 [ 121.399116][ T6510] ? load_image+0x3b0/0x3b0 [ 121.403650][ T6510] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 121.410085][ T6510] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 121.416614][ T6510] warn_alloc+0x210/0x300 [ 121.420973][ T6510] ? stack_trace_save+0x9c/0xe0 [ 121.425859][ T6510] ? zone_watermark_ok_safe+0x230/0x230 [ 121.431440][ T6510] ? kasan_set_track+0x5f/0x70 [ 121.436219][ T6510] ? kasan_set_track+0x4e/0x70 [ 121.440998][ T6510] ? __kasan_kmalloc+0x8f/0xa0 [ 121.445777][ T6510] ? xsk_init_queue+0xb0/0x110 [ 121.450561][ T6510] ? xsk_setsockopt+0x4db/0x6f0 [ 121.455424][ T6510] ? do_sock_setsockopt+0x175/0x1a0 [ 121.460648][ T6510] ? __x64_sys_setsockopt+0x184/0x200 [ 121.466045][ T6510] __vmalloc_node_range+0x126/0x1320 [ 121.471378][ T6510] ? free_vm_area+0x50/0x50 [ 121.475910][ T6510] vmalloc_user+0x74/0x80 [ 121.480262][ T6510] ? xskq_create+0xbf/0x170 [ 121.484779][ T6510] xskq_create+0xbf/0x170 [ 121.489128][ T6510] xsk_init_queue+0xb0/0x110 [ 121.493745][ T6510] xsk_setsockopt+0x4db/0x6f0 [ 121.498468][ T6510] ? xsk_poll+0x670/0x670 [ 121.502819][ T6510] ? __fget_files+0x28/0x4d0 [ 121.507434][ T6510] ? aa_sock_opt_perm+0x74/0x100 [ 121.512390][ T6510] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 121.517954][ T6510] ? security_socket_setsockopt+0x7e/0xa0 [ 121.523701][ T6510] ? xsk_poll+0x670/0x670 [ 121.528066][ T6510] do_sock_setsockopt+0x175/0x1a0 [ 121.533119][ T6510] ? __fdget+0x180/0x210 [ 121.537385][ T6510] __x64_sys_setsockopt+0x184/0x200 [ 121.542611][ T6510] do_syscall_64+0x55/0xb0 [ 121.547043][ T6510] ? clear_bhb_loop+0x40/0x90 [ 121.551732][ T6510] ? clear_bhb_loop+0x40/0x90 [ 121.556425][ T6510] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 121.562353][ T6510] RIP: 0033:0x7f560858f749 [ 121.566814][ T6510] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 121.586445][ T6510] RSP: 002b:00007f56094a1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 121.594909][ T6510] RAX: ffffffffffffffda RBX: 00007f56087e6180 RCX: 00007f560858f749 [ 121.602912][ T6510] RDX: 0000000000000002 RSI: 000000000000011b RDI: 000000000000000e [ 121.611004][ T6510] RBP: 00007f5608613f91 R08: 0000000000000004 R09: 0000000000000000 [ 121.619010][ T6510] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 121.627003][ T6510] R13: 00007f56087e6218 R14: 00007f56087e6180 R15: 00007ffec8acbf98 [ 121.635014][ T6510] [ 121.737504][ T6510] Mem-Info: [ 121.740715][ T6510] active_anon:5299 inactive_anon:0 isolated_anon:0 [ 121.740715][ T6510] active_file:1103 inactive_file:39892 isolated_file:0 [ 121.740715][ T6510] unevictable:768 dirty:45 writeback:0 [ 121.740715][ T6510] slab_reclaimable:10247 slab_unreclaimable:93905 [ 121.740715][ T6510] mapped:24040 shmem:1359 pagetables:518 [ 121.740715][ T6510] sec_pagetables:0 bounce:0 [ 121.740715][ T6510] kernel_misc_reclaimable:0 [ 121.740715][ T6510] free:1364554 free_pcp:12281 free_cma:0 [ 121.788329][ T6518] netlink: 6 bytes leftover after parsing attributes in process `syz.1.230'. [ 121.811174][ T6518] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 121.827836][ T6510] Node 0 active_anon:21196kB inactive_anon:0kB active_file:4412kB inactive_file:159368kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:96160kB dirty:180kB writeback:0kB shmem:3900kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11696kB pagetables:2072kB sec_pagetables:0kB all_unreclaimable? no [ 121.827958][ T6510] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 121.828025][ T6510] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 121.828097][ T6510] lowmem_reserve[]: 0 2525 2526 2526 2526 [ 121.828186][ T6510] Node 0 DMA32 free:1547368kB boost:0kB min:34676kB low:43344kB high:52012kB reserved_highatomic:0KB active_anon:21148kB inactive_anon:0kB active_file:4412kB inactive_file:158052kB unevictable:1536kB writepending:176kB present:3129332kB managed:2589596kB mlocked:0kB bounce:0kB free_pcp:26756kB local_pcp:19164kB free_cma:0kB [ 121.828258][ T6510] lowmem_reserve[]: 0 0 1 1 1 [ 121.828342][ T6510] Node 0 Normal free:8kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1316kB unevictable:0kB writepending:4kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB [ 121.997404][ T6510] lowmem_reserve[]: 0 0 0 0 0 [ 122.002600][ T6510] Node 1 Normal free:3895480kB boost:0kB min:55208kB low:69008kB high:82808kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:21872kB local_pcp:16976kB free_cma:0kB [ 122.039460][ T6510] lowmem_reserve[]: 0 0 0 0 0 [ 122.045571][ T6510] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 122.067360][ T6510] Node 0 DMA32: 0*4kB 1*8kB (U) 2*16kB (ME) 2*32kB (UM) 2*64kB (UM) 41*128kB (UME) 13*256kB (UE) 3*512kB (UME) 7*1024kB (UME) 5*2048kB (UME) 371*4096kB (M) = 1547368kB [ 122.098466][ T6510] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 122.114201][ T6510] Node 1 Normal: 120*4kB (UE) 27*8kB (UE) 20*16kB (UE) 50*32kB (UE) 16*64kB (UME) 5*128kB (UM) 2*256kB (UM) 1*512kB (U) 1*1024kB (U) 1*2048kB (E) 949*4096kB (M) = 3895480kB [ 122.168852][ T6510] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 122.181143][ T6510] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 122.190534][ T6510] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 122.220083][ T6510] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 122.229712][ T6510] 42354 total pagecache pages [ 122.235403][ T6510] 0 pages in swap cache [ 122.239617][ T6510] Free swap = 124996kB [ 122.243891][ T6510] Total swap = 124996kB [ 122.248303][ T6510] 2097051 pages RAM [ 122.252170][ T6510] 0 pages HighMem/MovableOnly [ 122.256861][ T6510] 416138 pages reserved [ 122.261141][ T6510] 0 pages cma reserved [ 123.117588][ T6544] netlink: 'syz.3.239': attribute type 9 has an invalid length. [ 123.150652][ T6544] netlink: 164820 bytes leftover after parsing attributes in process `syz.3.239'. [ 123.641825][ T6568] Driver unsupported XDP return value 0 on prog (id 125) dev N/A, expect packet loss! [ 124.830407][ T6600] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.261'. [ 126.185759][ T6629] netlink: 'syz.3.272': attribute type 3 has an invalid length. [ 126.221215][ T6629] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.272'. [ 126.317512][ T6635] netlink: 'syz.2.275': attribute type 10 has an invalid length. [ 126.344534][ T6635] netlink: 152 bytes leftover after parsing attributes in process `syz.2.275'. [ 126.359751][ T6635] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 126.511221][ T6642] netlink: 132 bytes leftover after parsing attributes in process `syz.1.279'. [ 127.095962][ T6668] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 127.155262][ T6667] delete_channel: no stack [ 127.344560][ T6673] netlink: 2 bytes leftover after parsing attributes in process `syz.0.293'. [ 127.359319][ T6673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.372247][ T6673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.383666][ T6673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.396348][ T6673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.413288][ T6673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.425242][ T6673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.451603][ T6673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.481437][ T6673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.510430][ T6673] batadv_slave_1: entered promiscuous mode [ 128.021491][ T6688] netlink: 'syz.0.299': attribute type 7 has an invalid length. [ 128.078728][ T6688] netlink: 'syz.0.299': attribute type 1 has an invalid length. [ 128.087984][ T6688] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.299'. [ 129.143129][ T6729] netlink: 763 bytes leftover after parsing attributes in process `syz.0.314'. [ 129.896744][ T6760] netlink: 'syz.1.327': attribute type 3 has an invalid length. [ 129.941115][ T6760] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.327'. [ 130.708827][ T6775] netlink: 60 bytes leftover after parsing attributes in process `syz.2.334'. [ 130.741614][ T6775] netlink: 60 bytes leftover after parsing attributes in process `syz.2.334'. [ 130.761719][ T6777] netlink: 60 bytes leftover after parsing attributes in process `syz.2.334'. [ 132.023164][ T6820] netlink: 'syz.1.353': attribute type 41 has an invalid length. [ 132.050920][ T6820] netlink: 'syz.1.353': attribute type 41 has an invalid length. [ 133.016668][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.031218][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.194727][ T6857] netlink: 'syz.1.366': attribute type 10 has an invalid length. [ 134.216008][ T6857] batman_adv: batadv0: Adding interface: wlan0 [ 134.231435][ T6857] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.330863][ T6857] batman_adv: batadv0: Interface activated: wlan0 [ 134.407342][ T6858] netlink: 'syz.1.366': attribute type 29 has an invalid length. [ 134.412550][ T6865] netlink: 'syz.1.366': attribute type 29 has an invalid length. [ 134.444617][ T6858] netlink: 'syz.1.366': attribute type 29 has an invalid length. [ 135.118176][ T6888] netlink: 'syz.2.378': attribute type 10 has an invalid length. [ 135.292426][ T6888] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 135.312537][ T6888] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 135.873359][ T51] Bluetooth: hci1: unexpected event 0x16 length: 15 > 6 [ 135.880548][ T6896] delete_channel: no stack [ 137.505379][ T6921] netlink: 'syz.1.389': attribute type 39 has an invalid length. [ 137.828206][ T6933] netlink: 'syz.1.393': attribute type 11 has an invalid length. [ 138.349057][ T6945] __nla_validate_parse: 2 callbacks suppressed [ 138.349075][ T6945] netlink: 8 bytes leftover after parsing attributes in process `syz.3.397'. [ 138.379641][ T6945] netlink: 4 bytes leftover after parsing attributes in process `syz.3.397'. [ 138.389991][ T6945] netlink: 2 bytes leftover after parsing attributes in process `syz.3.397'. [ 138.401052][ T6945] netlink: 4 bytes leftover after parsing attributes in process `syz.3.397'. [ 138.409886][ T6945] netlink: 2 bytes leftover after parsing attributes in process `syz.3.397'. [ 138.484855][ T6949] netlink: 'syz.0.400': attribute type 10 has an invalid length. [ 138.499110][ T6949] bond0: (slave wlan1): Opening slave failed [ 139.741697][ T51] Bluetooth: hci0: unexpected event 0x16 length: 15 > 6 [ 139.745797][ T6979] delete_channel: no stack [ 143.406546][ T7040] bridge_slave_1: left allmulticast mode [ 143.439836][ T7040] bridge_slave_1: left promiscuous mode [ 143.502275][ T7040] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.172643][ T7040] bridge_slave_0: left promiscuous mode [ 144.212115][ T7040] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.036218][ T7073] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x31 [ 145.369637][ T7082] mac80211_hwsim hwsim5 O3ãc¤±: renamed from wlan1 (while UP) [ 147.429674][ T7152] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.470'. [ 154.038650][ T7272] bridge_slave_1: left allmulticast mode [ 154.066121][ T7272] bridge_slave_1: left promiscuous mode [ 154.089124][ T7272] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.234874][ T7272] bridge_slave_0: left allmulticast mode [ 154.262534][ T7272] bridge_slave_0: left promiscuous mode [ 154.270462][ T7272] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.234898][ T7412] netlink: 'syz.1.545': attribute type 6 has an invalid length. [ 158.243264][ T7412] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.545'. [ 165.783579][ T7649] netlink: 'syz.0.618': attribute type 10 has an invalid length. [ 165.830228][ T7649] team0: Device veth1_macvtap failed to register rx_handler [ 167.092607][ T7682] netlink: 'syz.2.625': attribute type 10 has an invalid length. [ 167.100513][ T7682] netlink: 40 bytes leftover after parsing attributes in process `syz.2.625'. [ 167.147200][ T7682] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 167.172132][ T7682] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 169.596013][ T7749] netlink: 'syz.1.653': attribute type 21 has an invalid length. [ 169.617614][ T7749] netlink: 156 bytes leftover after parsing attributes in process `syz.1.653'. [ 169.636352][ T7749] netlink: 4 bytes leftover after parsing attributes in process `syz.1.653'. [ 170.267574][ T7764] netlink: 'syz.1.659': attribute type 10 has an invalid length. [ 170.763028][ T7764] team0: Port device geneve1 added [ 171.564535][ T7764] syz.1.659 (7764) used greatest stack depth: 19048 bytes left [ 172.233597][ T7807] netlink: 40451 bytes leftover after parsing attributes in process `syz.1.676'. [ 176.029637][ T7845] netlink: 40451 bytes leftover after parsing attributes in process `syz.2.690'. [ 176.304386][ T7851] netlink: 163260 bytes leftover after parsing attributes in process `syz.0.691'. [ 180.584241][ T7883] netlink: 40451 bytes leftover after parsing attributes in process `syz.3.703'. [ 180.594608][ T7921] netlink: 830 bytes leftover after parsing attributes in process `syz.2.719'. [ 180.878281][ T7929] netlink: 'syz.3.720': attribute type 10 has an invalid length. [ 181.468292][ T7929] team0: Port device geneve1 added [ 181.511051][ T7932] netlink: 'syz.2.723': attribute type 39 has an invalid length. [ 181.743470][ T7929] syz.3.720 (7929) used greatest stack depth: 18800 bytes left [ 181.799768][ T7948] FAULT_INJECTION: forcing a failure. [ 181.799768][ T7948] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 181.886708][ T7948] CPU: 1 PID: 7948 Comm: syz.1.727 Not tainted syzkaller #0 [ 181.894085][ T7948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 181.904192][ T7948] Call Trace: [ 181.907514][ T7948] [ 181.910484][ T7948] dump_stack_lvl+0x16c/0x230 [ 181.915218][ T7948] ? show_regs_print_info+0x20/0x20 [ 181.920478][ T7948] ? load_image+0x3b0/0x3b0 [ 181.925029][ T7948] ? __might_fault+0xaa/0x120 [ 181.929751][ T7948] ? __lock_acquire+0x7c80/0x7c80 [ 181.934827][ T7948] should_fail_ex+0x39d/0x4d0 [ 181.939564][ T7948] _copy_from_user+0x2f/0xe0 [ 181.944209][ T7948] ___sys_sendmsg+0x159/0x290 [ 181.948947][ T7948] ? __sys_sendmsg+0x270/0x270 [ 181.953778][ T7948] ? __lock_acquire+0x7c80/0x7c80 [ 181.958843][ T7948] __se_sys_sendmsg+0x1a5/0x270 [ 181.963729][ T7948] ? __x64_sys_sendmsg+0x80/0x80 [ 181.968811][ T7948] ? lockdep_hardirqs_on+0x98/0x150 [ 181.974034][ T7948] do_syscall_64+0x55/0xb0 [ 181.978472][ T7948] ? clear_bhb_loop+0x40/0x90 [ 181.983167][ T7948] ? clear_bhb_loop+0x40/0x90 [ 181.987866][ T7948] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 181.993784][ T7948] RIP: 0033:0x7fcb7ed8f749 [ 181.998217][ T7948] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 182.017844][ T7948] RSP: 002b:00007fcb7fc24038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 182.026291][ T7948] RAX: ffffffffffffffda RBX: 00007fcb7efe5fa0 RCX: 00007fcb7ed8f749 [ 182.034286][ T7948] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000003 [ 182.042276][ T7948] RBP: 00007fcb7fc24090 R08: 0000000000000000 R09: 0000000000000000 [ 182.050267][ T7948] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 182.058250][ T7948] R13: 00007fcb7efe6038 R14: 00007fcb7efe5fa0 R15: 00007ffed0d43928 [ 182.066258][ T7948] [ 182.293656][ T7953] netlink: 40451 bytes leftover after parsing attributes in process `syz.0.730'. [ 184.009642][ T8005] netlink: 60 bytes leftover after parsing attributes in process `syz.0.750'. [ 184.998352][ T8030] netlink: 132 bytes leftover after parsing attributes in process `syz.0.759'. [ 185.131574][ T8030] netlink: 'syz.0.759': attribute type 6 has an invalid length. [ 185.566021][ T8049] netlink: 40451 bytes leftover after parsing attributes in process `syz.1.764'. [ 186.770907][ T8070] netlink: 132 bytes leftover after parsing attributes in process `syz.2.772'. [ 186.911387][ T8070] netlink: 'syz.2.772': attribute type 6 has an invalid length. [ 188.389726][ T8102] netlink: 'syz.2.782': attribute type 1 has an invalid length. [ 188.407845][ T8102] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.782'. [ 188.430654][ T8102] netlink: 9 bytes leftover after parsing attributes in process `syz.2.782'. [ 192.245530][ T8099] netlink: 40451 bytes leftover after parsing attributes in process `syz.3.780'. [ 192.287730][ T8135] netlink: 'syz.1.793': attribute type 21 has an invalid length. [ 192.331380][ T8135] netlink: 'syz.1.793': attribute type 1 has an invalid length. [ 192.797037][ T8148] netlink: 'syz.1.797': attribute type 2 has an invalid length. [ 192.821186][ T8147] tap0: tun_chr_ioctl cmd 1074025677 [ 192.826745][ T8147] tap0: linktype set to 805 [ 192.847711][ T8148] netlink: 'syz.1.797': attribute type 1 has an invalid length. [ 192.877460][ T8148] netlink: 152 bytes leftover after parsing attributes in process `syz.1.797'. [ 193.082767][ T8155] FAULT_INJECTION: forcing a failure. [ 193.082767][ T8155] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 193.121199][ T8155] CPU: 1 PID: 8155 Comm: syz.1.800 Not tainted syzkaller #0 [ 193.128659][ T8155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 193.138773][ T8155] Call Trace: [ 193.142082][ T8155] [ 193.145029][ T8155] dump_stack_lvl+0x16c/0x230 [ 193.149735][ T8155] ? show_regs_print_info+0x20/0x20 [ 193.154960][ T8155] ? load_image+0x3b0/0x3b0 [ 193.159489][ T8155] ? __might_fault+0xaa/0x120 [ 193.164187][ T8155] ? __lock_acquire+0x7c80/0x7c80 [ 193.169340][ T8155] should_fail_ex+0x39d/0x4d0 [ 193.174072][ T8155] _copy_from_user+0x2f/0xe0 [ 193.178689][ T8155] ____sys_sendmsg+0x30d/0x950 [ 193.183497][ T8155] ? __sys_sendmsg_sock+0x30/0x30 [ 193.188543][ T8155] ? __import_iovec+0x5f2/0x860 [ 193.193422][ T8155] ? import_iovec+0x73/0xa0 [ 193.197950][ T8155] ___sys_sendmsg+0x220/0x290 [ 193.202657][ T8155] ? __sys_sendmsg+0x270/0x270 [ 193.207484][ T8155] ? __lock_acquire+0x7c80/0x7c80 [ 193.212549][ T8155] __se_sys_sendmsg+0x1a5/0x270 [ 193.217425][ T8155] ? __x64_sys_sendmsg+0x80/0x80 [ 193.222399][ T8155] ? lockdep_hardirqs_on+0x98/0x150 [ 193.227615][ T8155] do_syscall_64+0x55/0xb0 [ 193.232056][ T8155] ? clear_bhb_loop+0x40/0x90 [ 193.236749][ T8155] ? clear_bhb_loop+0x40/0x90 [ 193.241447][ T8155] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 193.247353][ T8155] RIP: 0033:0x7fcb7ed8f749 [ 193.251783][ T8155] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 193.271401][ T8155] RSP: 002b:00007fcb7fc24038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 193.279830][ T8155] RAX: ffffffffffffffda RBX: 00007fcb7efe5fa0 RCX: 00007fcb7ed8f749 [ 193.287818][ T8155] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000003 [ 193.295807][ T8155] RBP: 00007fcb7fc24090 R08: 0000000000000000 R09: 0000000000000000 [ 193.303795][ T8155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 193.311792][ T8155] R13: 00007fcb7efe6038 R14: 00007fcb7efe5fa0 R15: 00007ffed0d43928 [ 193.319793][ T8155] [ 193.414544][ T8161] netlink: 'syz.2.801': attribute type 2 has an invalid length. [ 193.577869][ T8160] netlink: 'syz.0.802': attribute type 21 has an invalid length. [ 193.617392][ T8160] netlink: 'syz.0.802': attribute type 6 has an invalid length. [ 193.651490][ T8160] netlink: 132 bytes leftover after parsing attributes in process `syz.0.802'. [ 193.677515][ T8163] netlink: 'syz.0.802': attribute type 21 has an invalid length. [ 193.712754][ T8163] netlink: 'syz.0.802': attribute type 6 has an invalid length. [ 193.735094][ T8163] netlink: 132 bytes leftover after parsing attributes in process `syz.0.802'. [ 193.972632][ T8170] netlink: 40451 bytes leftover after parsing attributes in process `syz.0.804'. [ 194.457764][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.464515][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 197.145473][ T8244] FAULT_INJECTION: forcing a failure. [ 197.145473][ T8244] name failslab, interval 1, probability 0, space 0, times 1 [ 197.169896][ T8244] CPU: 0 PID: 8244 Comm: syz.0.834 Not tainted syzkaller #0 [ 197.177259][ T8244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 197.187355][ T8244] Call Trace: [ 197.190669][ T8244] [ 197.193654][ T8244] dump_stack_lvl+0x16c/0x230 [ 197.198385][ T8244] ? show_regs_print_info+0x20/0x20 [ 197.203636][ T8244] ? load_image+0x3b0/0x3b0 [ 197.208184][ T8244] ? __lock_acquire+0x1260/0x7c80 [ 197.213260][ T8244] should_fail_ex+0x39d/0x4d0 [ 197.217983][ T8244] should_failslab+0x9/0x20 [ 197.222529][ T8244] slab_pre_alloc_hook+0x59/0x310 [ 197.227597][ T8244] kmem_cache_alloc+0x5a/0x2e0 [ 197.232381][ T8244] ? dst_alloc+0x105/0x170 [ 197.236815][ T8244] dst_alloc+0x105/0x170 [ 197.241078][ T8244] ip_route_output_key_hash_rcu+0x14f0/0x2360 [ 197.247167][ T8244] ? ip_route_output_key_hash+0x12f/0x340 [ 197.252898][ T8244] ip_route_output_key_hash+0x20b/0x340 [ 197.258490][ T8244] ? ip_route_input_rcu+0x3010/0x3010 [ 197.263879][ T8244] ? __lock_acquire+0x7c80/0x7c80 [ 197.268917][ T8244] ip_route_output_flow+0x2a/0x150 [ 197.274040][ T8244] ? security_sk_classify_flow+0x7b/0x90 [ 197.279693][ T8244] udp_sendmsg+0x15cf/0x2380 [ 197.284301][ T8244] ? release_sock+0x2f/0x1c0 [ 197.288912][ T8244] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 197.293789][ T8244] ? udp_cmsg_send+0x350/0x350 [ 197.298575][ T8244] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 197.304571][ T8244] ? lock_chain_count+0x20/0x20 [ 197.309434][ T8244] ? inet_sendmsg+0x14b/0x2f0 [ 197.314126][ T8244] ? __local_bh_enable_ip+0x12e/0x1c0 [ 197.319507][ T8244] ? _local_bh_enable+0xa0/0xa0 [ 197.324369][ T8244] ? do_raw_spin_unlock+0x121/0x230 [ 197.329587][ T8244] ? inet_sendmsg+0x14b/0x2f0 [ 197.334298][ T8244] ? inet_sendmsg+0x14b/0x2f0 [ 197.338990][ T8244] ? inet_send_prepare+0x260/0x260 [ 197.344113][ T8244] ____sys_sendmsg+0x5bf/0x950 [ 197.348909][ T8244] ? __sys_sendmsg_sock+0x30/0x30 [ 197.353949][ T8244] ? __import_iovec+0x5f2/0x860 [ 197.358824][ T8244] ? import_iovec+0x73/0xa0 [ 197.363354][ T8244] ___sys_sendmsg+0x220/0x290 [ 197.368048][ T8244] ? __sys_sendmsg+0x270/0x270 [ 197.372850][ T8244] ? __lock_acquire+0x7c80/0x7c80 [ 197.377917][ T8244] __se_sys_sendmsg+0x1a5/0x270 [ 197.382802][ T8244] ? __x64_sys_sendmsg+0x80/0x80 [ 197.387772][ T8244] ? lockdep_hardirqs_on+0x98/0x150 [ 197.392988][ T8244] do_syscall_64+0x55/0xb0 [ 197.397427][ T8244] ? clear_bhb_loop+0x40/0x90 [ 197.402114][ T8244] ? clear_bhb_loop+0x40/0x90 [ 197.406803][ T8244] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 197.412711][ T8244] RIP: 0033:0x7fd10238f749 [ 197.417135][ T8244] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 197.436760][ T8244] RSP: 002b:00007fd103203038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 197.445188][ T8244] RAX: ffffffffffffffda RBX: 00007fd1025e5fa0 RCX: 00007fd10238f749 [ 197.453164][ T8244] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000003 [ 197.461143][ T8244] RBP: 00007fd103203090 R08: 0000000000000000 R09: 0000000000000000 [ 197.469125][ T8244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 197.477103][ T8244] R13: 00007fd1025e6038 R14: 00007fd1025e5fa0 R15: 00007ffe21b8f9c8 [ 197.485103][ T8244] [ 198.292893][ T8273] IPv6: Can't replace route, no match found [ 198.348950][ T8262] netlink: 4 bytes leftover after parsing attributes in process `syz.0.840'. [ 198.961304][ T8286] netlink: 'syz.3.846': attribute type 29 has an invalid length. [ 198.996736][ T8286] netlink: 'syz.3.846': attribute type 29 has an invalid length. [ 199.565329][ T8306] netlink: 'syz.0.855': attribute type 10 has an invalid length. [ 199.606213][ T8306] netlink: 156 bytes leftover after parsing attributes in process `syz.0.855'. [ 200.837252][ T8342] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 201.098558][ T8348] netlink: 'syz.0.873': attribute type 13 has an invalid length. [ 201.114466][ T8348] netlink: 'syz.0.873': attribute type 58 has an invalid length. [ 201.133042][ T8348] netlink: 152 bytes leftover after parsing attributes in process `syz.0.873'. [ 201.353046][ T8361] syzkaller0: entered allmulticast mode [ 201.975453][ T8378] netlink: 'syz.2.888': attribute type 10 has an invalid length. [ 202.165410][ T8378] dummy0: entered promiscuous mode [ 202.222758][ T8378] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 202.293168][ T8392] netlink: 'syz.1.892': attribute type 10 has an invalid length. [ 202.328322][ T8392] bond0: left promiscuous mode [ 202.355576][ T8392] bond_slave_0: left promiscuous mode [ 202.390018][ T8392] bond_slave_1: left promiscuous mode [ 202.415096][ T51] Bluetooth: hci2: unexpected event 0x2c length: 151 > 17 [ 202.415146][ T51] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 202.443629][ T8392] batadv0: left promiscuous mode [ 202.503026][ T8392] 8021q: adding VLAN 0 to HW filter on device bond0 [ 202.547637][ T8392] team0: Port device bond0 added [ 205.477760][ T8474] netlink: 'syz.0.925': attribute type 21 has an invalid length. [ 207.099525][ T8527] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.950'. [ 208.166040][ T8558] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.963'. [ 210.279524][ T8629] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.989'. [ 210.979608][ T8646] tun0: tun_chr_ioctl cmd 1074025677 [ 211.009281][ T8646] tun0: linktype set to 776 [ 211.894692][ T5104] Bluetooth: hci0: command 0x0406 tx timeout [ 211.900854][ T5805] Bluetooth: hci2: command 0x0406 tx timeout [ 211.907217][ T5805] Bluetooth: hci1: command 0x0406 tx timeout [ 212.674660][ T8269] hsr_slave_0: left promiscuous mode [ 212.684322][ T8269] hsr_slave_1: left promiscuous mode [ 212.692235][ T8269] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 212.699750][ T8269] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 212.730284][ T8269] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 212.746107][ T8710] netlink: 208064 bytes leftover after parsing attributes in process `syz.3.1023'. [ 212.751955][ T8269] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 212.782665][ T8710] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 212.793862][ T8269] bridge_slave_1: left allmulticast mode [ 212.799907][ T8269] bridge_slave_1: left promiscuous mode [ 212.802785][ T8710] openvswitch: netlink: Message has 4 unknown bytes. [ 212.825123][ T8269] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.855677][ T8269] bridge_slave_0: left allmulticast mode [ 212.871181][ T8269] bridge_slave_0: left promiscuous mode [ 212.883506][ T8269] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.974935][ T8269] veth1_macvtap: left promiscuous mode [ 212.981313][ T8269] veth0_macvtap: left promiscuous mode [ 212.987675][ T8269] veth1_vlan: left promiscuous mode [ 213.001476][ T8269] veth0_vlan: left promiscuous mode [ 214.673723][ T8269] team0 (unregistering): Port device team_slave_1 removed [ 214.813328][ T8269] team0 (unregistering): Port device team_slave_0 removed [ 214.924376][ T8269] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 214.956243][ T8269] bond_slave_1 (unregistering): left promiscuous mode [ 215.079591][ T8269] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 215.100872][ T8269] bond_slave_0 (unregistering): left promiscuous mode [ 215.548981][ T8269] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 215.558120][ T8269] batadv0 (unregistering): left promiscuous mode [ 215.838769][ T8269] bond0 (unregistering): Released all slaves [ 215.960877][ T8762] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1044'. [ 216.001457][ T8762] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1044'. [ 216.023350][ T8762] netlink: 33 bytes leftover after parsing attributes in process `syz.1.1044'. [ 216.051066][ T8762] bridge_slave_0: entered allmulticast mode [ 216.057465][ T8762] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1044'. [ 216.066440][ T8762] netlink: 33 bytes leftover after parsing attributes in process `syz.1.1044'. [ 216.381143][ T8775] netlink: 1057 bytes leftover after parsing attributes in process `syz.0.1050'. [ 216.605887][ T8782] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1053'. [ 217.570045][ T8812] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1065'. [ 217.746066][ T8814] netlink: 171476 bytes leftover after parsing attributes in process `syz.3.1066'. [ 217.796666][ T8814] openvswitch: netlink: Key 32 has unexpected len 3064 expected 2 [ 218.130449][ T8827] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1071'. [ 218.160226][ T8827] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1071'. [ 218.192070][ T8824] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1071'. [ 221.943445][ T8866] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1086'. [ 222.052575][ T8867] netlink: 'syz.3.1086': attribute type 3 has an invalid length. [ 222.060376][ T8867] netlink: 'syz.3.1086': attribute type 1 has an invalid length. [ 222.083209][ T8867] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.1086'. [ 222.347237][ T8880] FAULT_INJECTION: forcing a failure. [ 222.347237][ T8880] name failslab, interval 1, probability 0, space 0, times 0 [ 222.360296][ T8880] CPU: 0 PID: 8880 Comm: syz.0.1092 Not tainted syzkaller #0 [ 222.367711][ T8880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 222.377801][ T8880] Call Trace: [ 222.381104][ T8880] [ 222.384051][ T8880] dump_stack_lvl+0x16c/0x230 [ 222.388758][ T8880] ? show_regs_print_info+0x20/0x20 [ 222.393977][ T8880] ? load_image+0x3b0/0x3b0 [ 222.398503][ T8880] ? skb_network_protocol+0x509/0x760 [ 222.403909][ T8880] should_fail_ex+0x39d/0x4d0 [ 222.408610][ T8880] should_failslab+0x9/0x20 [ 222.413136][ T8880] slab_pre_alloc_hook+0x59/0x310 [ 222.418188][ T8880] kmem_cache_alloc+0x5a/0x2e0 [ 222.422987][ T8880] ? skb_clone+0x1eb/0x370 [ 222.427421][ T8880] skb_clone+0x1eb/0x370 [ 222.431678][ T8880] ? dev_queue_xmit_nit+0x235/0xbb0 [ 222.436893][ T8880] dev_queue_xmit_nit+0x24d/0xbb0 [ 222.441935][ T8880] ? dev_queue_xmit_nit+0x2d/0xbb0 [ 222.447065][ T8880] ? validate_xmit_skb+0x953/0xf50 [ 222.452197][ T8880] dev_hard_start_xmit+0x148/0x740 [ 222.457337][ T8880] __dev_queue_xmit+0x1a64/0x35a0 [ 222.462387][ T8880] ? neigh_connected_output+0x1ed/0x450 [ 222.467950][ T8880] ? __dev_queue_xmit+0x245/0x35a0 [ 222.473086][ T8880] ? read_seqbegin+0x1b5/0x260 [ 222.477864][ T8880] ? neigh_event_send+0x110/0x110 [ 222.482903][ T8880] ? netdev_core_pick_tx+0x340/0x340 [ 222.488216][ T8880] ? neigh_connected_output+0x3b0/0x450 [ 222.493798][ T8880] ? ip_finish_output2+0x45c/0x11d0 [ 222.499019][ T8880] ip_finish_output2+0xd21/0x11d0 [ 222.504072][ T8880] ? ip_finish_output2+0x45c/0x11d0 [ 222.509380][ T8880] ? skb_gso_transport_seglen+0x332/0x510 [ 222.515125][ T8880] ? ip_mc_finish_output+0x250/0x250 [ 222.520437][ T8880] ? ip_fragment+0x210/0x210 [ 222.525054][ T8880] ? skb_gso_validate_network_len+0x12c/0x290 [ 222.531148][ T8880] ? ip_finish_output+0x1c5/0x4c0 [ 222.536199][ T8880] ip_send_skb+0x12f/0x1d0 [ 222.540637][ T8880] udp_send_skb+0xa37/0x13a0 [ 222.545263][ T8880] udp_sendmsg+0x1ae0/0x2380 [ 222.549871][ T8880] ? release_sock+0x2f/0x1c0 [ 222.554508][ T8880] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 222.559385][ T8880] ? udp_cmsg_send+0x350/0x350 [ 222.564172][ T8880] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 222.570199][ T8880] ? lock_chain_count+0x20/0x20 [ 222.575090][ T8880] ? inet_sendmsg+0x14b/0x2f0 [ 222.579798][ T8880] ? __local_bh_enable_ip+0x12e/0x1c0 [ 222.585201][ T8880] ? _local_bh_enable+0xa0/0xa0 [ 222.590099][ T8880] ? inet_sendmsg+0x14b/0x2f0 [ 222.594822][ T8880] ? inet_sendmsg+0x14b/0x2f0 [ 222.599517][ T8880] ? inet_send_prepare+0x260/0x260 [ 222.604646][ T8880] ____sys_sendmsg+0x5bf/0x950 [ 222.609450][ T8880] ? __sys_sendmsg_sock+0x30/0x30 [ 222.614505][ T8880] ? __import_iovec+0x5f2/0x860 [ 222.619387][ T8880] ? import_iovec+0x73/0xa0 [ 222.623926][ T8880] ___sys_sendmsg+0x220/0x290 [ 222.628653][ T8880] ? __sys_sendmsg+0x270/0x270 [ 222.633477][ T8880] ? __lock_acquire+0x7c80/0x7c80 [ 222.638545][ T8880] __se_sys_sendmsg+0x1a5/0x270 [ 222.643427][ T8880] ? __x64_sys_sendmsg+0x80/0x80 [ 222.648404][ T8880] ? lockdep_hardirqs_on+0x98/0x150 [ 222.653625][ T8880] do_syscall_64+0x55/0xb0 [ 222.658070][ T8880] ? clear_bhb_loop+0x40/0x90 [ 222.662765][ T8880] ? clear_bhb_loop+0x40/0x90 [ 222.667466][ T8880] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 222.673382][ T8880] RIP: 0033:0x7fd10238f749 [ 222.677813][ T8880] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 222.697456][ T8880] RSP: 002b:00007fd103203038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 222.705890][ T8880] RAX: ffffffffffffffda RBX: 00007fd1025e5fa0 RCX: 00007fd10238f749 [ 222.713884][ T8880] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000003 [ 222.721954][ T8880] RBP: 00007fd103203090 R08: 0000000000000000 R09: 0000000000000000 [ 222.729939][ T8880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 222.737925][ T8880] R13: 00007fd1025e6038 R14: 00007fd1025e5fa0 R15: 00007ffe21b8f9c8 [ 222.745929][ T8880] [ 222.854154][ T8882] netlink: 'syz.1.1090': attribute type 33 has an invalid length. [ 222.863410][ T8882] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1090'. [ 222.888305][ T8882] `: renamed from team0 (while UP) [ 223.317399][ T8892] netlink: 'syz.3.1095': attribute type 21 has an invalid length. [ 223.352092][ T8892] netlink: 'syz.3.1095': attribute type 4 has an invalid length. [ 223.427502][ T8892] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.1095'. [ 223.458374][ T8900] netlink: 'syz.2.1099': attribute type 12 has an invalid length. [ 223.489815][ T8900] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1099'. [ 223.834188][ T8908] syzkaller0: entered promiscuous mode [ 223.842723][ T8908] syzkaller0: entered allmulticast mode [ 227.101729][ T8934] FAULT_INJECTION: forcing a failure. [ 227.101729][ T8934] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 227.115051][ T8934] CPU: 0 PID: 8934 Comm: syz.3.1111 Not tainted syzkaller #0 [ 227.122477][ T8934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 227.132563][ T8934] Call Trace: [ 227.135852][ T8934] [ 227.138808][ T8934] dump_stack_lvl+0x16c/0x230 [ 227.143507][ T8934] ? show_regs_print_info+0x20/0x20 [ 227.148819][ T8934] ? load_image+0x3b0/0x3b0 [ 227.153347][ T8934] ? __might_fault+0xaa/0x120 [ 227.158035][ T8934] ? __lock_acquire+0x7c80/0x7c80 [ 227.163069][ T8934] ? perf_trace_lock+0xf7/0x380 [ 227.167939][ T8934] should_fail_ex+0x39d/0x4d0 [ 227.172658][ T8934] _copy_from_user+0x2f/0xe0 [ 227.177279][ T8934] ___sys_sendmsg+0x159/0x290 [ 227.181977][ T8934] ? __sys_sendmsg+0x270/0x270 [ 227.186778][ T8934] ? __lock_acquire+0x7c80/0x7c80 [ 227.191869][ T8934] __se_sys_sendmsg+0x1a5/0x270 [ 227.196765][ T8934] ? __x64_sys_sendmsg+0x80/0x80 [ 227.201737][ T8934] ? lockdep_hardirqs_on+0x98/0x150 [ 227.206952][ T8934] do_syscall_64+0x55/0xb0 [ 227.211383][ T8934] ? clear_bhb_loop+0x40/0x90 [ 227.216072][ T8934] ? clear_bhb_loop+0x40/0x90 [ 227.220760][ T8934] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 227.226685][ T8934] RIP: 0033:0x7f560858f749 [ 227.231127][ T8934] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 227.250751][ T8934] RSP: 002b:00007f56094e3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 227.259191][ T8934] RAX: ffffffffffffffda RBX: 00007f56087e5fa0 RCX: 00007f560858f749 [ 227.267185][ T8934] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000003 [ 227.275173][ T8934] RBP: 00007f56094e3090 R08: 0000000000000000 R09: 0000000000000000 [ 227.283158][ T8934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 227.291147][ T8934] R13: 00007f56087e6038 R14: 00007f56087e5fa0 R15: 00007ffec8acbf98 [ 227.299158][ T8934] [ 229.930806][ T9012] FAULT_INJECTION: forcing a failure. [ 229.930806][ T9012] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 229.983335][ T9012] CPU: 0 PID: 9012 Comm: syz.3.1144 Not tainted syzkaller #0 [ 229.990783][ T9012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 230.000877][ T9012] Call Trace: [ 230.004185][ T9012] [ 230.007139][ T9012] dump_stack_lvl+0x16c/0x230 [ 230.011847][ T9012] ? show_regs_print_info+0x20/0x20 [ 230.017087][ T9012] ? load_image+0x3b0/0x3b0 [ 230.021615][ T9012] ? __lock_acquire+0x7c80/0x7c80 [ 230.026655][ T9012] ? snprintf+0xdb/0x120 [ 230.030921][ T9012] should_fail_ex+0x39d/0x4d0 [ 230.035627][ T9012] _copy_to_user+0x2f/0xa0 [ 230.040093][ T9012] simple_read_from_buffer+0xe7/0x150 [ 230.045496][ T9012] proc_fail_nth_read+0x1e3/0x250 [ 230.050540][ T9012] ? proc_fault_inject_write+0x340/0x340 [ 230.056233][ T9012] ? fsnotify_perm+0x271/0x5e0 [ 230.061027][ T9012] ? proc_fault_inject_write+0x340/0x340 [ 230.066682][ T9012] vfs_read+0x27e/0x920 [ 230.070866][ T9012] ? kernel_read+0x1e0/0x1e0 [ 230.075478][ T9012] ? __fget_files+0x28/0x4d0 [ 230.080089][ T9012] ? __fget_files+0x44a/0x4d0 [ 230.084792][ T9012] ? __fdget_pos+0x2a3/0x330 [ 230.089416][ T9012] ? ksys_read+0x75/0x250 [ 230.093763][ T9012] ksys_read+0x147/0x250 [ 230.098024][ T9012] ? vfs_write+0x940/0x940 [ 230.102469][ T9012] ? lockdep_hardirqs_on+0x98/0x150 [ 230.107686][ T9012] do_syscall_64+0x55/0xb0 [ 230.112124][ T9012] ? clear_bhb_loop+0x40/0x90 [ 230.116819][ T9012] ? clear_bhb_loop+0x40/0x90 [ 230.121513][ T9012] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 230.127417][ T9012] RIP: 0033:0x7f560858e15c [ 230.131847][ T9012] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 230.151466][ T9012] RSP: 002b:00007f56094e3030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 230.159905][ T9012] RAX: ffffffffffffffda RBX: 00007f56087e5fa0 RCX: 00007f560858e15c [ 230.167889][ T9012] RDX: 000000000000000f RSI: 00007f56094e30a0 RDI: 0000000000000006 [ 230.175872][ T9012] RBP: 00007f56094e3090 R08: 0000000000000000 R09: 0000000000000000 [ 230.183857][ T9012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 230.191840][ T9012] R13: 00007f56087e6038 R14: 00007f56087e5fa0 R15: 00007ffec8acbf98 [ 230.199841][ T9012] [ 230.792168][ T9025] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1149'. [ 230.911530][ T9025] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1149'. [ 232.531086][ T5792] Bluetooth: hci3: command 0x0406 tx timeout [ 232.753924][ T9071] netlink: 'syz.1.1167': attribute type 1 has an invalid length. [ 232.778657][ T9071] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.1167'. [ 232.800828][ T9071] netlink: 'syz.1.1167': attribute type 1 has an invalid length. [ 236.255004][ T9129] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1191'. [ 236.275827][ T9129] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 236.380090][ T9137] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1184'. [ 237.225817][ T9158] syzkaller0: entered promiscuous mode [ 237.249069][ T9158] syzkaller0: entered allmulticast mode [ 237.269090][ T9164] lo: entered allmulticast mode [ 239.328445][ T9168] lo: entered promiscuous mode [ 239.333923][ T9168] lo: left allmulticast mode [ 239.525966][ T9190] netlink: 'syz.1.1205': attribute type 10 has an invalid length. [ 239.549710][ T9190] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1205'. [ 239.588660][ T9190] netlink: 'syz.1.1205': attribute type 10 has an invalid length. [ 239.615278][ T9190] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1205'. [ 239.657322][ T9196] netlink: 'syz.1.1205': attribute type 12 has an invalid length. [ 239.670773][ T9198] FAULT_INJECTION: forcing a failure. [ 239.670773][ T9198] name failslab, interval 1, probability 0, space 0, times 0 [ 239.687020][ T9196] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1205'. [ 239.696215][ T9198] CPU: 1 PID: 9198 Comm: syz.0.1207 Not tainted syzkaller #0 [ 239.703625][ T9198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 239.713695][ T9198] Call Trace: [ 239.716988][ T9198] [ 239.719933][ T9198] dump_stack_lvl+0x16c/0x230 [ 239.724638][ T9198] ? show_regs_print_info+0x20/0x20 [ 239.729856][ T9198] ? load_image+0x3b0/0x3b0 [ 239.734378][ T9198] ? __lock_acquire+0x7c80/0x7c80 [ 239.739415][ T9198] ? nf_nat_ipv4_local_fn+0x3e9/0x530 [ 239.744814][ T9198] should_fail_ex+0x39d/0x4d0 [ 239.749518][ T9198] should_failslab+0x9/0x20 [ 239.754042][ T9198] slab_pre_alloc_hook+0x59/0x310 [ 239.759095][ T9198] ? nf_hook+0x9e/0x370 [ 239.763272][ T9198] kmem_cache_alloc+0x5a/0x2e0 [ 239.768076][ T9198] ? skb_clone+0x1eb/0x370 [ 239.772510][ T9198] skb_clone+0x1eb/0x370 [ 239.776762][ T9198] ? ip_mc_output+0x1de/0x580 [ 239.781463][ T9198] ip_mc_output+0x1eb/0x580 [ 239.785990][ T9198] ip_send_skb+0x12f/0x1d0 [ 239.790432][ T9198] raw_sendmsg+0x1488/0x1950 [ 239.795052][ T9198] ? compat_raw_ioctl+0x70/0x70 [ 239.799969][ T9198] ? aa_sk_perm+0x7fc/0x930 [ 239.804498][ T9198] ? tomoyo_socket_sendmsg_permission+0x216/0x2f0 [ 239.810965][ T9198] ? sock_rps_record_flow+0x19/0x400 [ 239.816287][ T9198] ? inet_send_prepare+0x260/0x260 [ 239.821452][ T9198] ? inet_sendmsg+0x7c/0x2f0 [ 239.826065][ T9198] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 239.831373][ T9198] ? security_socket_sendmsg+0x80/0xa0 [ 239.836853][ T9198] ? inet_send_prepare+0x260/0x260 [ 239.841987][ T9198] ____sys_sendmsg+0x5bf/0x950 [ 239.846786][ T9198] ? __asan_memset+0x22/0x40 [ 239.851399][ T9198] ? __sys_sendmsg_sock+0x30/0x30 [ 239.856445][ T9198] ? __import_iovec+0x3fa/0x860 [ 239.861324][ T9198] ? import_iovec+0x73/0xa0 [ 239.865853][ T9198] ___sys_sendmsg+0x220/0x290 [ 239.870549][ T9198] ? __sys_sendmsg+0x270/0x270 [ 239.875356][ T9198] ? __lock_acquire+0x7c80/0x7c80 [ 239.880417][ T9198] __se_sys_sendmsg+0x1a5/0x270 [ 239.885470][ T9198] ? __x64_sys_sendmsg+0x80/0x80 [ 239.890468][ T9198] ? lockdep_hardirqs_on+0x98/0x150 [ 239.895695][ T9198] do_syscall_64+0x55/0xb0 [ 239.900147][ T9198] ? clear_bhb_loop+0x40/0x90 [ 239.904841][ T9198] ? clear_bhb_loop+0x40/0x90 [ 239.909547][ T9198] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 239.915454][ T9198] RIP: 0033:0x7fd10238f749 [ 239.919894][ T9198] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 239.939510][ T9198] RSP: 002b:00007fd103203038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 239.947945][ T9198] RAX: ffffffffffffffda RBX: 00007fd1025e5fa0 RCX: 00007fd10238f749 [ 239.955941][ T9198] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000003 [ 239.963923][ T9198] RBP: 00007fd103203090 R08: 0000000000000000 R09: 0000000000000000 [ 239.971902][ T9198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 239.979881][ T9198] R13: 00007fd1025e6038 R14: 00007fd1025e5fa0 R15: 00007ffe21b8f9c8 [ 239.987882][ T9198] [ 240.223821][ T9210] netlink: 1030 bytes leftover after parsing attributes in process `syz.1.1211'. [ 240.253349][ T9210] bond_slave_0: entered promiscuous mode [ 240.259399][ T9210] bond_slave_1: entered promiscuous mode [ 240.265201][ T9210] batadv0: entered promiscuous mode [ 240.344191][ T9210] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1211'. [ 241.797254][ T9234] netlink: 'syz.3.1220': attribute type 11 has an invalid length. [ 241.805533][ T9234] netlink: 184116 bytes leftover after parsing attributes in process `syz.3.1220'. [ 241.919848][ T9230] syzkaller0: entered promiscuous mode [ 241.925527][ T9230] syzkaller0: entered allmulticast mode [ 241.945613][ T9240] netlink: 'syz.3.1220': attribute type 10 has an invalid length. [ 241.971665][ T9240] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1220'. [ 241.981289][ T9240] team0: entered promiscuous mode [ 241.989271][ T9240] team_slave_0: entered promiscuous mode [ 241.996089][ T9240] team_slave_1: entered promiscuous mode [ 242.002439][ T9240] geneve1: entered promiscuous mode [ 242.008386][ T9240] team0: entered allmulticast mode [ 242.015219][ T9240] team_slave_0: entered allmulticast mode [ 242.021671][ T9240] team_slave_1: entered allmulticast mode [ 242.028168][ T9240] geneve1: entered allmulticast mode [ 242.035856][ T9240] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 244.475336][ T9244] IPv6: NLM_F_CREATE should be specified when creating new route [ 244.491266][ T9244] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1223'. [ 245.132452][ T9283] delete_channel: no stack [ 245.221557][ T9298] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1240'. [ 246.336574][ T9337] netlink: 'syz.1.1252': attribute type 3 has an invalid length. [ 246.365853][ T9337] netlink: 201372 bytes leftover after parsing attributes in process `syz.1.1252'. [ 252.624477][ T9460] netlink: 'syz.1.1295': attribute type 3 has an invalid length. [ 252.632533][ T9460] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.1295'. [ 252.655691][ T9460] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1295'. [ 252.671335][ T9460] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1295'. [ 252.699477][ T9460] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1295'. [ 252.711637][ T9458] netlink: 'syz.3.1297': attribute type 4 has an invalid length. [ 252.719739][ T9458] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1297'. [ 252.812828][ T9458] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 252.845462][ T9460] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1295'. [ 255.898744][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.905228][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.047646][ T9539] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.1323'. [ 258.311414][ T9545] netlink: 'syz.1.1326': attribute type 10 has an invalid length. [ 258.332960][ T9551] netlink: 'syz.0.1327': attribute type 10 has an invalid length. [ 258.917607][ T9573] netlink: 'syz.0.1334': attribute type 10 has an invalid length. [ 258.928701][ T9573] veth0_vlan: entered allmulticast mode [ 259.006953][ T9573] veth0_vlan: left promiscuous mode [ 259.036204][ T9573] veth0_vlan: entered promiscuous mode [ 259.067625][ T9573] team0: Device veth0_vlan failed to register rx_handler [ 260.268907][ T9605] lo: entered allmulticast mode [ 260.333028][ T9605] lo: entered promiscuous mode [ 260.337890][ T9605] lo: left allmulticast mode [ 260.728044][ T9625] netlink: 'syz.2.1354': attribute type 21 has an invalid length. [ 260.739298][ T9625] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1354'. [ 260.758520][ T9625] netlink: 'syz.2.1354': attribute type 5 has an invalid length. [ 260.769456][ T9625] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1354'. [ 261.877915][ T9644] netlink: 'syz.3.1361': attribute type 29 has an invalid length. [ 261.888561][ T9644] netlink: 'syz.3.1361': attribute type 29 has an invalid length. [ 262.181879][ T9652] netlink: 'syz.3.1365': attribute type 3 has an invalid length. [ 262.201881][ T9652] netlink: 13435 bytes leftover after parsing attributes in process `syz.3.1365'. [ 262.448179][ T9658] netlink: 'syz.3.1368': attribute type 39 has an invalid length. [ 262.484920][ T9660] netlink: 3076 bytes leftover after parsing attributes in process `syz.1.1369'. [ 262.494987][ T9660] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1369'. [ 263.344260][ T9682] netlink: 'syz.0.1377': attribute type 21 has an invalid length. [ 263.356549][ T9682] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1377'. [ 264.585059][ T9706] netlink: 'syz.0.1386': attribute type 10 has an invalid length. [ 265.073519][ T9721] netlink: 'syz.0.1393': attribute type 3 has an invalid length. [ 265.082508][ T9721] netlink: 13435 bytes leftover after parsing attributes in process `syz.0.1393'. [ 265.154225][ T9725] netlink: 3752 bytes leftover after parsing attributes in process `syz.1.1394'. [ 265.212657][ T9727] netlink: 'syz.3.1392': attribute type 10 has an invalid length. [ 265.962783][ T9747] netlink: 149044 bytes leftover after parsing attributes in process `syz.1.1402'. [ 267.493623][ T9802] netlink: 'syz.0.1422': attribute type 39 has an invalid length. [ 268.430174][ T9832] netlink: 'syz.1.1432': attribute type 3 has an invalid length. [ 268.445472][ T9832] netlink: 13435 bytes leftover after parsing attributes in process `syz.1.1432'. [ 268.487151][ T9833] netlink: 'syz.3.1433': attribute type 10 has an invalid length. [ 270.820347][ T9891] netlink: 'syz.0.1455': attribute type 39 has an invalid length. [ 271.191730][ T9903] netlink: 'syz.1.1461': attribute type 9 has an invalid length. [ 271.212157][ T9903] netlink: 399 bytes leftover after parsing attributes in process `syz.1.1461'. [ 272.767583][ T9933] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1472'. [ 273.880534][ T9972] netlink: 'syz.0.1489': attribute type 39 has an invalid length. [ 273.978958][ T9977] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1491'. [ 274.072749][ T9981] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1492'. [ 274.139514][ T9981] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1492'. [ 274.167368][ T9981] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 274.201108][ T9981] CPU: 1 PID: 9981 Comm: syz.0.1492 Not tainted syzkaller #0 [ 274.208574][ T9981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 274.218689][ T9981] Call Trace: [ 274.222016][ T9981] [ 274.224996][ T9981] dump_stack_lvl+0x16c/0x230 [ 274.229742][ T9981] ? show_regs_print_info+0x20/0x20 [ 274.235009][ T9981] ? load_image+0x3b0/0x3b0 [ 274.239599][ T9981] sysfs_warn_dup+0x8e/0xa0 [ 274.244166][ T9981] sysfs_do_create_link_sd+0xc0/0x110 [ 274.249606][ T9981] device_add_class_symlinks+0x1cf/0x240 [ 274.255311][ T9981] device_add+0x507/0xc20 [ 274.259708][ T9981] wiphy_register+0x1e74/0x2c00 [ 274.264666][ T9981] ? cfg80211_event_work+0x40/0x40 [ 274.269832][ T9981] ? minstrel_ht_alloc+0x88a/0x990 [ 274.275022][ T9981] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 274.281160][ T9981] ieee80211_register_hw+0x2de8/0x3b10 [ 274.286715][ T9981] ? ieee80211_register_hw+0xea1/0x3b10 [ 274.292342][ T9981] ? ieee80211_tasklet_handler+0x20/0x20 [ 274.298026][ T9981] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 274.303985][ T9981] ? __debug_object_init+0xe8/0x430 [ 274.309252][ T9981] ? __asan_memset+0x22/0x40 [ 274.313906][ T9981] ? __hrtimer_init+0x186/0x270 [ 274.318819][ T9981] mac80211_hwsim_new_radio+0x2a00/0x4cf0 [ 274.324637][ T9981] ? mac80211_hwsim_free+0x220/0x220 [ 274.329965][ T9981] ? rcu_is_watching+0x15/0xb0 [ 274.334789][ T9981] ? kstrndup+0xbd/0x140 [ 274.339109][ T9981] hwsim_new_radio_nl+0xd78/0x19d0 [ 274.344297][ T9981] ? __nla_validate+0x50/0x50 [ 274.349066][ T9981] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 274.355479][ T9981] ? __nla_parse+0x40/0x50 [ 274.359966][ T9981] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 274.366375][ T9981] genl_family_rcv_msg_doit+0x209/0x2f0 [ 274.372001][ T9981] ? genl_family_rcv_msg_dumpit+0x2c0/0x2c0 [ 274.377976][ T9981] ? bpf_lsm_capable+0x9/0x10 [ 274.382706][ T9981] ? security_capable+0x89/0xb0 [ 274.387640][ T9981] genl_rcv_msg+0x60b/0x790 [ 274.392223][ T9981] ? genl_bind+0x360/0x360 [ 274.396696][ T9981] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 274.403077][ T9981] ? perf_trace_lock+0x2ed/0x380 [ 274.408102][ T9981] netlink_rcv_skb+0x216/0x480 [ 274.412931][ T9981] ? genl_bind+0x360/0x360 [ 274.417415][ T9981] ? netlink_ack+0x1110/0x1110 [ 274.422263][ T9981] ? __lock_acquire+0x7c80/0x7c80 [ 274.427364][ T9981] ? down_read+0x1ac/0x2e0 [ 274.431839][ T9981] genl_rcv+0x28/0x40 [ 274.435875][ T9981] netlink_unicast+0x751/0x8d0 [ 274.440726][ T9981] netlink_sendmsg+0x8c1/0xbe0 [ 274.445575][ T9981] ? netlink_getsockopt+0x580/0x580 [ 274.450828][ T9981] ? aa_sock_msg_perm+0x94/0x150 [ 274.455823][ T9981] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 274.461166][ T9981] ? security_socket_sendmsg+0x80/0xa0 [ 274.466687][ T9981] ? netlink_getsockopt+0x580/0x580 [ 274.471941][ T9981] ____sys_sendmsg+0x5bf/0x950 [ 274.476780][ T9981] ? __asan_memset+0x22/0x40 [ 274.481426][ T9981] ? __sys_sendmsg_sock+0x30/0x30 [ 274.486591][ T9981] ? __import_iovec+0x5f2/0x860 [ 274.491526][ T9981] ? import_iovec+0x73/0xa0 [ 274.496194][ T9981] ___sys_sendmsg+0x220/0x290 [ 274.500945][ T9981] ? __sys_sendmsg+0x270/0x270 [ 274.505987][ T9981] __se_sys_sendmsg+0x1a5/0x270 [ 274.510913][ T9981] ? __x64_sys_sendmsg+0x80/0x80 [ 274.515957][ T9981] ? lockdep_hardirqs_on+0x98/0x150 [ 274.521215][ T9981] do_syscall_64+0x55/0xb0 [ 274.525692][ T9981] ? clear_bhb_loop+0x40/0x90 [ 274.530417][ T9981] ? clear_bhb_loop+0x40/0x90 [ 274.535145][ T9981] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 274.541088][ T9981] RIP: 0033:0x7fd10238f749 [ 274.545551][ T9981] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 274.565224][ T9981] RSP: 002b:00007fd103203038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 274.573707][ T9981] RAX: ffffffffffffffda RBX: 00007fd1025e5fa0 RCX: 00007fd10238f749 [ 274.581736][ T9981] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 274.589759][ T9981] RBP: 00007fd102413f91 R08: 0000000000000000 R09: 0000000000000000 [ 274.597780][ T9981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 274.605799][ T9981] R13: 00007fd1025e6038 R14: 00007fd1025e5fa0 R15: 00007ffe21b8f9c8 [ 274.613865][ T9981] [ 274.680694][ T9983] netlink: 'syz.0.1492': attribute type 10 has an invalid length. [ 274.724580][ T9983] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 275.635955][T10009] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1503'. [ 276.006333][T10022] pim6reg0: tun_chr_ioctl cmd 1074025672 [ 276.022730][T10022] pim6reg0: ignored: set checksum disabled [ 276.555287][T10043] netlink: 'syz.2.1515': attribute type 39 has an invalid length. [ 277.689355][T10073] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 277.710689][T10073] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 278.715967][T10095] netlink: 'syz.0.1531': attribute type 1 has an invalid length. [ 278.969099][T10105] netlink: 'syz.2.1534': attribute type 10 has an invalid length. [ 278.979022][T10108] netlink: 'syz.0.1537': attribute type 153 has an invalid length. [ 279.009672][T10108] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.1537'. [ 279.045046][T10105] bond0: (slave O3ãc¤±): Releasing backup interface [ 279.053473][T10105] mac80211_hwsim hwsim5 O3ãc¤±: left promiscuous mode [ 279.110768][T10105] team0: Port device O3ãc¤± added [ 279.171625][T10104] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 279.235720][T10108] netlink: 'syz.0.1537': attribute type 2 has an invalid length. [ 279.257497][T10108] netlink: 184 bytes leftover after parsing attributes in process `syz.0.1537'. [ 279.349782][T10114] sctp: [Deprecated]: syz.0.1537 (pid 10114) Use of struct sctp_assoc_value in delayed_ack socket option. [ 279.349782][T10114] Use struct sctp_sack_info instead [ 282.656447][T10147] netlink: 'syz.3.1550': attribute type 29 has an invalid length. [ 282.683179][T10147] netlink: 'syz.3.1550': attribute type 29 has an invalid length. [ 283.836234][T10200] netlink: 'syz.1.1573': attribute type 39 has an invalid length. [ 286.471107][T10272] netlink: 'syz.0.1600': attribute type 39 has an invalid length. [ 287.583354][T10284] FAULT_INJECTION: forcing a failure. [ 287.583354][T10284] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 287.683553][T10284] CPU: 0 PID: 10284 Comm: syz.3.1604 Not tainted syzkaller #0 [ 287.691090][T10284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 287.701181][T10284] Call Trace: [ 287.704486][T10284] [ 287.707449][T10284] dump_stack_lvl+0x16c/0x230 [ 287.712179][T10284] ? show_regs_print_info+0x20/0x20 [ 287.717418][T10284] ? load_image+0x3b0/0x3b0 [ 287.721956][T10284] ? __might_fault+0xaa/0x120 [ 287.726666][T10284] ? __lock_acquire+0x7c80/0x7c80 [ 287.731730][T10284] should_fail_ex+0x39d/0x4d0 [ 287.736451][T10284] _copy_from_user+0x2f/0xe0 [ 287.741092][T10284] __sys_bpf+0x1e9/0x800 [ 287.745384][T10284] ? bpf_link_show_fdinfo+0x350/0x350 [ 287.750841][T10284] ? lock_chain_count+0x20/0x20 [ 287.755743][T10284] __x64_sys_bpf+0x7c/0x90 [ 287.760198][T10284] do_syscall_64+0x55/0xb0 [ 287.764650][T10284] ? clear_bhb_loop+0x40/0x90 [ 287.769359][T10284] ? clear_bhb_loop+0x40/0x90 [ 287.774093][T10284] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 287.780020][T10284] RIP: 0033:0x7f560858f749 [ 287.784464][T10284] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 287.804109][T10284] RSP: 002b:00007f56094e3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 287.812653][T10284] RAX: ffffffffffffffda RBX: 00007f56087e5fa0 RCX: 00007f560858f749 [ 287.820655][T10284] RDX: 0000000000000090 RSI: 00002000000000c0 RDI: 0000000000000005 [ 287.828659][T10284] RBP: 00007f56094e3090 R08: 0000000000000000 R09: 0000000000000000 [ 287.836665][T10284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 287.844668][T10284] R13: 00007f56087e6038 R14: 00007f56087e5fa0 R15: 00007ffec8acbf98 [ 287.852691][T10284] [ 288.211828][T10288] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1605'. [ 289.081019][T10293] syz.3.1607 (10293) used obsolete PPPIOCDETACH ioctl [ 289.913371][T10312] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1614'. [ 289.965615][T10312] openvswitch: netlink: Flow key attribute not present in set flow. [ 291.082424][T10335] netlink: 'syz.3.1621': attribute type 153 has an invalid length. [ 291.111167][T10335] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.1621'. [ 291.631363][T10340] netlink: 'syz.3.1623': attribute type 39 has an invalid length. [ 292.015241][T10354] FAULT_INJECTION: forcing a failure. [ 292.015241][T10354] name failslab, interval 1, probability 0, space 0, times 0 [ 292.029802][T10350] pim6reg1: entered promiscuous mode [ 292.035155][T10354] CPU: 1 PID: 10354 Comm: syz.1.1629 Not tainted syzkaller #0 [ 292.035186][T10354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 292.035200][T10354] Call Trace: [ 292.035210][T10354] [ 292.035220][T10354] dump_stack_lvl+0x16c/0x230 [ 292.035274][T10354] ? show_regs_print_info+0x20/0x20 [ 292.035304][T10354] ? load_image+0x3b0/0x3b0 [ 292.035333][T10354] ? __might_sleep+0xe0/0xe0 [ 292.035359][T10354] ? __lock_acquire+0x7c80/0x7c80 [ 292.035381][T10354] ? mark_lock+0x94/0x320 [ 292.035408][T10354] should_fail_ex+0x39d/0x4d0 [ 292.035443][T10354] should_failslab+0x9/0x20 [ 292.035471][T10354] slab_pre_alloc_hook+0x59/0x310 [ 292.035505][T10354] ? __get_vm_area_node+0x125/0x370 [ 292.035535][T10354] __kmem_cache_alloc_node+0x53/0x260 [ 292.035569][T10354] ? __get_vm_area_node+0x125/0x370 [ 292.055466][T10350] pim6reg1: entered allmulticast mode [ 292.056396][T10354] kmalloc_node_trace+0x26/0xe0 [ 292.128427][T10354] __get_vm_area_node+0x125/0x370 [ 292.133487][T10354] __vmalloc_node_range+0x36e/0x1320 [ 292.138794][T10354] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 292.144361][T10354] ? mark_lock+0x94/0x320 [ 292.148711][T10354] ? __lock_acquire+0x1334/0x7c80 [ 292.153774][T10354] ? verify_lock_unused+0x140/0x140 [ 292.158991][T10354] ? free_vm_area+0x50/0x50 [ 292.163511][T10354] ? end_current_label_crit_section+0x170/0x170 [ 292.169781][T10354] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 292.175340][T10354] __vmalloc+0x7a/0x90 [ 292.179430][T10354] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 292.184990][T10354] bpf_prog_alloc_no_stats+0x47/0x440 [ 292.190376][T10354] ? bpf_prog_alloc+0x2b/0x1b0 [ 292.195155][T10354] bpf_prog_alloc+0x3d/0x1b0 [ 292.199763][T10354] bpf_prog_load+0x6b8/0x16d0 [ 292.204466][T10354] ? map_freeze+0x420/0x420 [ 292.208986][T10354] ? __might_fault+0xaa/0x120 [ 292.213675][T10354] ? __lock_acquire+0x7c80/0x7c80 [ 292.218722][T10354] ? file_end_write+0x159/0x250 [ 292.223593][T10354] ? __might_fault+0xaa/0x120 [ 292.228282][T10354] ? __might_fault+0xc6/0x120 [ 292.232969][T10354] ? __might_fault+0xaa/0x120 [ 292.237660][T10354] ? bpf_lsm_bpf+0x9/0x10 [ 292.242004][T10354] ? security_bpf+0x7e/0xa0 [ 292.246526][T10354] __sys_bpf+0x55a/0x800 [ 292.250782][T10354] ? bpf_link_show_fdinfo+0x350/0x350 [ 292.256183][T10354] ? lock_chain_count+0x20/0x20 [ 292.261053][T10354] __x64_sys_bpf+0x7c/0x90 [ 292.265480][T10354] do_syscall_64+0x55/0xb0 [ 292.269914][T10354] ? clear_bhb_loop+0x40/0x90 [ 292.274608][T10354] ? clear_bhb_loop+0x40/0x90 [ 292.279301][T10354] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 292.285219][T10354] RIP: 0033:0x7fcb7ed8f749 [ 292.289653][T10354] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 292.309285][T10354] RSP: 002b:00007fcb7fc24038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 292.317717][T10354] RAX: ffffffffffffffda RBX: 00007fcb7efe5fa0 RCX: 00007fcb7ed8f749 [ 292.325795][T10354] RDX: 0000000000000090 RSI: 00002000000000c0 RDI: 0000000000000005 [ 292.333784][T10354] RBP: 00007fcb7fc24090 R08: 0000000000000000 R09: 0000000000000000 [ 292.341767][T10354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 292.349750][T10354] R13: 00007fcb7efe6038 R14: 00007fcb7efe5fa0 R15: 00007ffed0d43928 [ 292.357744][T10354] [ 292.371709][T10354] warn_alloc: 1 callbacks suppressed [ 292.374067][T10354] syz.1.1629: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 292.400533][T10354] CPU: 0 PID: 10354 Comm: syz.1.1629 Not tainted syzkaller #0 [ 292.408044][T10354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 292.418141][T10354] Call Trace: [ 292.421461][T10354] [ 292.424423][T10354] dump_stack_lvl+0x16c/0x230 [ 292.429126][T10354] ? show_regs_print_info+0x20/0x20 [ 292.434354][T10354] ? load_image+0x3b0/0x3b0 [ 292.438890][T10354] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 292.445321][T10354] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 292.451937][T10354] warn_alloc+0x210/0x300 [ 292.456305][T10354] ? __get_vm_area_node+0x125/0x370 [ 292.461544][T10354] ? zone_watermark_ok_safe+0x230/0x230 [ 292.467125][T10354] ? rcu_is_watching+0x15/0xb0 [ 292.471913][T10354] ? __get_vm_area_node+0x356/0x370 [ 292.477154][T10354] __vmalloc_node_range+0x393/0x1320 [ 292.482486][T10354] ? mark_lock+0x94/0x320 [ 292.486841][T10354] ? __lock_acquire+0x1334/0x7c80 [ 292.491882][T10354] ? verify_lock_unused+0x140/0x140 [ 292.497107][T10354] ? free_vm_area+0x50/0x50 [ 292.501627][T10354] ? end_current_label_crit_section+0x170/0x170 [ 292.507891][T10354] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 292.513709][T10354] __vmalloc+0x7a/0x90 [ 292.517803][T10354] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 292.523398][T10354] bpf_prog_alloc_no_stats+0x47/0x440 [ 292.528784][T10354] ? bpf_prog_alloc+0x2b/0x1b0 [ 292.533567][T10354] bpf_prog_alloc+0x3d/0x1b0 [ 292.538179][T10354] bpf_prog_load+0x6b8/0x16d0 [ 292.542968][T10354] ? map_freeze+0x420/0x420 [ 292.547487][T10354] ? __might_fault+0xaa/0x120 [ 292.552173][T10354] ? __lock_acquire+0x7c80/0x7c80 [ 292.557223][T10354] ? file_end_write+0x159/0x250 [ 292.562106][T10354] ? __might_fault+0xaa/0x120 [ 292.566810][T10354] ? __might_fault+0xc6/0x120 [ 292.571516][T10354] ? __might_fault+0xaa/0x120 [ 292.576239][T10354] ? bpf_lsm_bpf+0x9/0x10 [ 292.580587][T10354] ? security_bpf+0x7e/0xa0 [ 292.585105][T10354] __sys_bpf+0x55a/0x800 [ 292.589365][T10354] ? bpf_link_show_fdinfo+0x350/0x350 [ 292.594783][T10354] ? lock_chain_count+0x20/0x20 [ 292.599654][T10354] __x64_sys_bpf+0x7c/0x90 [ 292.604085][T10354] do_syscall_64+0x55/0xb0 [ 292.608515][T10354] ? clear_bhb_loop+0x40/0x90 [ 292.613206][T10354] ? clear_bhb_loop+0x40/0x90 [ 292.617907][T10354] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 292.623811][T10354] RIP: 0033:0x7fcb7ed8f749 [ 292.628240][T10354] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 292.647861][T10354] RSP: 002b:00007fcb7fc24038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 292.656289][T10354] RAX: ffffffffffffffda RBX: 00007fcb7efe5fa0 RCX: 00007fcb7ed8f749 [ 292.664278][T10354] RDX: 0000000000000090 RSI: 00002000000000c0 RDI: 0000000000000005 [ 292.672260][T10354] RBP: 00007fcb7fc24090 R08: 0000000000000000 R09: 0000000000000000 [ 292.680242][T10354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 292.688224][T10354] R13: 00007fcb7efe6038 R14: 00007fcb7efe5fa0 R15: 00007ffed0d43928 [ 292.696227][T10354] [ 292.718799][T10354] Mem-Info: [ 292.726473][T10354] active_anon:5152 inactive_anon:0 isolated_anon:0 [ 292.726473][T10354] active_file:13802 inactive_file:40000 isolated_file:0 [ 292.726473][T10354] unevictable:768 dirty:188 writeback:0 [ 292.726473][T10354] slab_reclaimable:10709 slab_unreclaimable:92589 [ 292.726473][T10354] mapped:24060 shmem:1359 pagetables:509 [ 292.726473][T10354] sec_pagetables:0 bounce:0 [ 292.726473][T10354] kernel_misc_reclaimable:0 [ 292.726473][T10354] free:1352673 free_pcp:12163 free_cma:0 [ 292.777494][T10354] Node 0 active_anon:20608kB inactive_anon:0kB active_file:55208kB inactive_file:159800kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:96240kB dirty:752kB writeback:0kB shmem:3900kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12080kB pagetables:2036kB sec_pagetables:0kB all_unreclaimable? no [ 292.841654][T10354] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 292.873380][T10354] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 292.902387][T10354] lowmem_reserve[]: 0 2525 2526 2526 2526 [ 292.908231][T10354] Node 0 DMA32 free:1499844kB boost:0kB min:34676kB low:43344kB high:52012kB reserved_highatomic:0KB active_anon:20560kB inactive_anon:0kB active_file:55208kB inactive_file:158484kB unevictable:1536kB writepending:752kB present:3129332kB managed:2589596kB mlocked:0kB bounce:0kB free_pcp:26564kB local_pcp:7684kB free_cma:0kB [ 292.946033][T10354] lowmem_reserve[]: 0 0 1 1 1 [ 292.951012][T10354] Node 0 Normal free:8kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1316kB unevictable:0kB writepending:0kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB [ 292.984357][T10354] lowmem_reserve[]: 0 0 0 0 0 [ 292.989261][T10354] Node 1 Normal free:3895480kB boost:0kB min:55208kB low:69008kB high:82808kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:22224kB local_pcp:5152kB free_cma:0kB [ 293.037857][T10354] lowmem_reserve[]: 0 0 0 0 0 [ 293.055217][T10354] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 293.084590][T10354] Node 0 DMA32: 593*4kB (M) 610*8kB (UME) 679*16kB (UME) 904*32kB (UME) 502*64kB (UM) 313*128kB (UM) 233*256kB (UM) 112*512kB (UM) 66*1024kB (UM) 34*2048kB (UME) 275*4096kB (UM) = 1499844kB [ 293.118551][T10354] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 293.144847][T10354] Node 1 Normal: 120*4kB (UE) 27*8kB (UE) 20*16kB (UE) 50*32kB (UE) 16*64kB (UME) 5*128kB (UM) 2*256kB (UM) 1*512kB (U) 1*1024kB (U) 1*2048kB (E) 949*4096kB (M) = 3895480kB [ 293.188863][T10354] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 293.213611][T10354] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 293.239795][T10354] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 293.276632][T10354] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 293.309991][T10354] 55161 total pagecache pages [ 293.318466][T10354] 0 pages in swap cache [ 293.325790][T10354] Free swap = 124728kB [ 293.329989][T10354] Total swap = 124996kB [ 293.339235][T10354] 2097051 pages RAM [ 293.348053][T10354] 0 pages HighMem/MovableOnly [ 293.356072][T10354] 416138 pages reserved [ 293.360270][T10354] 0 pages cma reserved [ 293.762920][T10377] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 293.979396][T10394] syzkaller0: entered promiscuous mode [ 293.985205][T10394] syzkaller0: entered allmulticast mode [ 294.723130][T10418] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 294.751249][T10420] netlink: 'syz.0.1657': attribute type 39 has an invalid length. [ 294.919250][T10430] netlink: 'syz.0.1661': attribute type 1 has an invalid length. [ 294.930433][T10430] netlink: 14719 bytes leftover after parsing attributes in process `syz.0.1661'. [ 295.232727][T10444] netlink: 'syz.1.1666': attribute type 153 has an invalid length. [ 295.249511][T10444] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.1666'. [ 295.983413][T10460] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 296.906940][T10477] netlink: 'syz.3.1679': attribute type 153 has an invalid length. [ 296.921782][T10477] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.1679'. [ 297.416971][T10490] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 297.460508][T10499] netlink: 'syz.0.1689': attribute type 10 has an invalid length. [ 297.476398][T10499] bond0: (slave wlan1): Opening slave failed [ 297.568569][T10506] netlink: 'syz.1.1691': attribute type 39 has an invalid length. [ 301.480411][T10624] netlink: 'syz.2.1737': attribute type 29 has an invalid length. [ 301.512479][T10624] netlink: 'syz.2.1737': attribute type 29 has an invalid length. [ 301.592014][T10624] netlink: 'syz.2.1737': attribute type 29 has an invalid length. [ 302.467577][T10651] netlink: 'syz.1.1748': attribute type 9 has an invalid length. [ 302.488308][T10651] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1748'. [ 302.547192][T10653] netlink: 'syz.3.1749': attribute type 39 has an invalid length. [ 302.700453][T10650] delete_channel: no stack [ 302.990650][T10669] netlink: 'syz.2.1755': attribute type 153 has an invalid length. [ 303.000802][T10669] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.1755'. [ 303.296194][T10673] netlink: 'syz.0.1757': attribute type 41 has an invalid length. [ 303.304336][T10673] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1757'. [ 303.321268][T10673] netlink: 'syz.0.1757': attribute type 4 has an invalid length. [ 303.329168][T10673] netlink: 'syz.0.1757': attribute type 16 has an invalid length. [ 303.338512][T10673] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1757'. [ 303.876624][T10697] netlink: 'syz.1.1766': attribute type 153 has an invalid length. [ 303.894686][T10697] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.1766'. [ 305.719202][T10710] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 306.983083][T10735] netlink: 'syz.0.1779': attribute type 39 has an invalid length. [ 307.122355][T10733] netlink: 'syz.3.1777': attribute type 153 has an invalid length. [ 307.142515][T10733] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.1777'. [ 307.984182][T10776] FAULT_INJECTION: forcing a failure. [ 307.984182][T10776] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 308.019169][T10776] CPU: 1 PID: 10776 Comm: syz.3.1792 Not tainted syzkaller #0 [ 308.026711][T10776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 308.036975][T10776] Call Trace: [ 308.040272][T10776] [ 308.043228][T10776] dump_stack_lvl+0x16c/0x230 [ 308.047970][T10776] ? show_regs_print_info+0x20/0x20 [ 308.053205][T10776] ? load_image+0x3b0/0x3b0 [ 308.057746][T10776] ? __lock_acquire+0x7c80/0x7c80 [ 308.062806][T10776] ? snprintf+0xdb/0x120 [ 308.067075][T10776] should_fail_ex+0x39d/0x4d0 [ 308.071781][T10776] _copy_to_user+0x2f/0xa0 [ 308.076215][T10776] simple_read_from_buffer+0xe7/0x150 [ 308.081612][T10776] proc_fail_nth_read+0x1e3/0x250 [ 308.086664][T10776] ? proc_fault_inject_write+0x340/0x340 [ 308.092333][T10776] ? fsnotify_perm+0x271/0x5e0 [ 308.097122][T10776] ? proc_fault_inject_write+0x340/0x340 [ 308.102780][T10776] vfs_read+0x27e/0x920 [ 308.106975][T10776] ? kernel_read+0x1e0/0x1e0 [ 308.111611][T10776] ? __fget_files+0x28/0x4d0 [ 308.116220][T10776] ? __fget_files+0x44a/0x4d0 [ 308.120931][T10776] ? __fdget_pos+0x2a3/0x330 [ 308.125551][T10776] ? ksys_read+0x75/0x250 [ 308.129901][T10776] ksys_read+0x147/0x250 [ 308.134169][T10776] ? vfs_write+0x940/0x940 [ 308.138607][T10776] ? lockdep_hardirqs_on+0x98/0x150 [ 308.143828][T10776] do_syscall_64+0x55/0xb0 [ 308.148262][T10776] ? clear_bhb_loop+0x40/0x90 [ 308.152953][T10776] ? clear_bhb_loop+0x40/0x90 [ 308.157646][T10776] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 308.163570][T10776] RIP: 0033:0x7f560858e15c [ 308.167999][T10776] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 308.187623][T10776] RSP: 002b:00007f56094a1030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 308.196059][T10776] RAX: ffffffffffffffda RBX: 00007f56087e6180 RCX: 00007f560858e15c [ 308.204052][T10776] RDX: 000000000000000f RSI: 00007f56094a10a0 RDI: 000000000000000f [ 308.212049][T10776] RBP: 00007f56094a1090 R08: 0000000000000000 R09: 0000000000000000 [ 308.220048][T10776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 308.228036][T10776] R13: 00007f56087e6218 R14: 00007f56087e6180 R15: 00007ffec8acbf98 [ 308.236041][T10776] [ 308.665073][T10789] netlink: 'syz.3.1796': attribute type 10 has an invalid length. [ 308.673426][T10789] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1796'. [ 308.769468][T10789] geneve0: entered promiscuous mode [ 308.787774][T10789] geneve0: entered allmulticast mode [ 308.800057][T10789] team0: Port device geneve0 added [ 308.864524][T10797] netlink: 207508 bytes leftover after parsing attributes in process `syz.2.1798'. [ 309.326518][T10816] netlink: 1030 bytes leftover after parsing attributes in process `syz.3.1804'. [ 309.344538][T10816] bond_slave_0: entered promiscuous mode [ 309.350637][T10816] bond_slave_1: entered promiscuous mode [ 310.387227][T10849] mac80211_hwsim hwsim12 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 310.697710][T10858] netlink: 'syz.0.1818': attribute type 21 has an invalid length. [ 311.284250][T10868] netlink: 'syz.3.1822': attribute type 39 has an invalid length. [ 311.517031][T10873] netlink: 'syz.0.1823': attribute type 4 has an invalid length. [ 311.550524][T10873] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1823'. [ 311.598239][T10873] : renamed from bond0 (while UP) [ 312.091137][T10890] pim6reg1: entered promiscuous mode [ 312.098840][T10890] pim6reg1: entered allmulticast mode [ 312.383179][T10899] netlink: 'syz.3.1834': attribute type 10 has an invalid length. [ 312.421185][T10899] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.1834'. [ 313.012057][ T7343] wlan1: Trigger new scan to find an IBSS to join [ 315.802425][T10983] netlink: 'syz.0.1864': attribute type 39 has an invalid length. [ 315.823864][T10982] netlink: 'syz.1.1865': attribute type 33 has an invalid length. [ 315.847298][T10982] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1865'. [ 316.051740][ T7338] wlan1: Trigger new scan to find an IBSS to join [ 317.340592][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.347157][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.752378][ T8270] wlan1: Creating new IBSS network, BSSID 9a:6e:30:b2:5a:8e [ 321.516040][T11070] netlink: 'syz.1.1900': attribute type 39 has an invalid length. [ 325.385758][T11150] netlink: 'syz.1.1930': attribute type 39 has an invalid length. [ 327.282123][T11210] netlink: 'syz.2.1949': attribute type 10 has an invalid length. [ 327.290027][T11210] bond0: left promiscuous mode [ 327.311564][T11210] bond_slave_0: left promiscuous mode [ 327.317240][T11210] bond_slave_1: left promiscuous mode [ 327.351403][T11210] batadv0: left promiscuous mode [ 327.356719][T11210] dummy0: left promiscuous mode [ 327.380409][T11210] 8021q: adding VLAN 0 to HW filter on device bond0 [ 327.404847][T11210] team0: Port device bond0 added [ 327.689585][T11229] FAULT_INJECTION: forcing a failure. [ 327.689585][T11229] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 327.751342][T11229] CPU: 1 PID: 11229 Comm: syz.1.1958 Not tainted syzkaller #0 [ 327.758864][T11229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 327.768936][T11229] Call Trace: [ 327.772240][T11229] [ 327.775205][T11229] dump_stack_lvl+0x16c/0x230 [ 327.779932][T11229] ? show_regs_print_info+0x20/0x20 [ 327.785191][T11229] ? load_image+0x3b0/0x3b0 [ 327.789746][T11229] ? __might_fault+0xaa/0x120 [ 327.794465][T11229] ? __lock_acquire+0x7c80/0x7c80 [ 327.799550][T11229] should_fail_ex+0x39d/0x4d0 [ 327.804292][T11229] _copy_from_user+0x2f/0xe0 [ 327.808950][T11229] ___sys_sendmsg+0x159/0x290 [ 327.813678][T11229] ? __sys_sendmsg+0x270/0x270 [ 327.818490][T11229] ? __lock_acquire+0x7c80/0x7c80 [ 327.823570][T11229] __se_sys_sendmsg+0x1a5/0x270 [ 327.828456][T11229] ? __x64_sys_sendmsg+0x80/0x80 [ 327.833484][T11229] ? lockdep_hardirqs_on+0x98/0x150 [ 327.838716][T11229] do_syscall_64+0x55/0xb0 [ 327.843163][T11229] ? clear_bhb_loop+0x40/0x90 [ 327.847884][T11229] ? clear_bhb_loop+0x40/0x90 [ 327.852589][T11229] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 327.858507][T11229] RIP: 0033:0x7fcb7ed8f749 [ 327.862944][T11229] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 327.882578][T11229] RSP: 002b:00007fcb7fc03038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 327.891020][T11229] RAX: ffffffffffffffda RBX: 00007fcb7efe6090 RCX: 00007fcb7ed8f749 [ 327.899013][T11229] RDX: 00000000000052cc RSI: 0000200000000040 RDI: 0000000000000004 [ 327.906998][T11229] RBP: 00007fcb7fc03090 R08: 0000000000000000 R09: 0000000000000000 [ 327.914980][T11229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 327.922966][T11229] R13: 00007fcb7efe6128 R14: 00007fcb7efe6090 R15: 00007ffed0d43928 [ 327.930969][T11229] [ 328.241258][T11235] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.1963'. [ 329.618496][T11278] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1981'. [ 330.413379][T11292] IPv6: Can't replace route, no match found [ 330.422593][T11293] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 330.658316][T11301] netlink: 'syz.1.1991': attribute type 39 has an invalid length. [ 338.956570][T11364] netlink: 'syz.3.2016': attribute type 10 has an invalid length. [ 339.093781][T11377] netlink: set zone limit has 8 unknown bytes [ 339.874840][T11403] FAULT_INJECTION: forcing a failure. [ 339.874840][T11403] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 339.906013][T11403] CPU: 0 PID: 11403 Comm: syz.1.2028 Not tainted syzkaller #0 [ 339.913634][T11403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 339.923820][T11403] Call Trace: [ 339.927134][T11403] [ 339.930096][T11403] dump_stack_lvl+0x16c/0x230 [ 339.934832][T11403] ? show_regs_print_info+0x20/0x20 [ 339.940089][T11403] ? load_image+0x3b0/0x3b0 [ 339.944638][T11403] ? __lock_acquire+0x7c80/0x7c80 [ 339.949702][T11403] ? snprintf+0xdb/0x120 [ 339.953989][T11403] should_fail_ex+0x39d/0x4d0 [ 339.958721][T11403] _copy_to_user+0x2f/0xa0 [ 339.963179][T11403] simple_read_from_buffer+0xe7/0x150 [ 339.968616][T11403] proc_fail_nth_read+0x1e3/0x250 [ 339.973689][T11403] ? proc_fault_inject_write+0x340/0x340 [ 339.979364][T11403] ? fsnotify_perm+0x271/0x5e0 [ 339.984172][T11403] ? proc_fault_inject_write+0x340/0x340 [ 339.989948][T11403] vfs_read+0x27e/0x920 [ 339.994155][T11403] ? kernel_read+0x1e0/0x1e0 [ 339.998793][T11403] ? __fget_files+0x28/0x4d0 [ 340.003417][T11403] ? __fget_files+0x44a/0x4d0 [ 340.008111][T11403] ? __fdget_pos+0x2a3/0x330 [ 340.012723][T11403] ? ksys_read+0x75/0x250 [ 340.017095][T11403] ksys_read+0x147/0x250 [ 340.021380][T11403] ? vfs_write+0x940/0x940 [ 340.025851][T11403] ? lockdep_hardirqs_on+0x98/0x150 [ 340.031103][T11403] do_syscall_64+0x55/0xb0 [ 340.035560][T11403] ? clear_bhb_loop+0x40/0x90 [ 340.040356][T11403] ? clear_bhb_loop+0x40/0x90 [ 340.045068][T11403] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 340.051169][T11403] RIP: 0033:0x7fcb7ed8e15c [ 340.055698][T11403] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 340.075332][T11403] RSP: 002b:00007fcb7fc24030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 340.083796][T11403] RAX: ffffffffffffffda RBX: 00007fcb7efe5fa0 RCX: 00007fcb7ed8e15c [ 340.091791][T11403] RDX: 000000000000000f RSI: 00007fcb7fc240a0 RDI: 0000000000000005 [ 340.099792][T11403] RBP: 00007fcb7fc24090 R08: 0000000000000000 R09: 0000000000000000 [ 340.107788][T11403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 340.115807][T11403] R13: 00007fcb7efe6038 R14: 00007fcb7efe5fa0 R15: 00007ffed0d43928 [ 340.123843][T11403] [ 340.240219][T11405] netlink: 'syz.0.2029': attribute type 19 has an invalid length. [ 340.264369][T11405] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2029'. [ 340.816776][T11432] netlink: 'syz.3.2039': attribute type 39 has an invalid length. [ 340.939268][T11434] netlink: 'syz.1.2040': attribute type 10 has an invalid length. [ 344.612199][T11542] netlink: 'syz.2.2078': attribute type 39 has an invalid length. [ 344.640479][T11546] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2080'. [ 345.308503][T11570] delete_channel: no stack [ 345.349633][T11574] netlink: 'syz.0.2094': attribute type 7 has an invalid length. [ 345.708532][T11579] netlink: 'syz.0.2094': attribute type 153 has an invalid length. [ 345.720405][T11579] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.2094'. [ 346.335957][T11585] netlink: 'syz.1.2098': attribute type 10 has an invalid length. [ 346.359384][T11585] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2098'. [ 346.376968][T11590] netlink: 'syz.0.2101': attribute type 1 has an invalid length. [ 346.392492][T11590] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.2101'. [ 346.405006][T11590] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2101'. [ 346.450621][T11590] netlink: 'syz.0.2101': attribute type 12 has an invalid length. [ 347.819779][ T1134] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 348.152601][T11614] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2108'. [ 349.949248][T11638] netlink: 'syz.1.2117': attribute type 39 has an invalid length. [ 351.339940][T11678] delete_channel: no stack [ 352.712316][T11728] tap0: tun_chr_ioctl cmd 1074025675 [ 352.721235][T11728] tap0: persist enabled [ 352.738066][T11728] tap0: tun_chr_ioctl cmd 1074025675 [ 352.747444][T11728] tap0: persist enabled [ 352.925208][T11739] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2153'. [ 353.244127][T11753] netlink: 202920 bytes leftover after parsing attributes in process `syz.0.2157'. [ 353.713890][T11766] netlink: 'syz.3.2162': attribute type 39 has an invalid length. [ 353.926478][T11772] netlink: 'syz.2.2164': attribute type 10 has an invalid length. [ 353.950282][T11772] team0: Device ip6_vti0 is of different type [ 355.071359][T11796] netlink: 'syz.2.2175': attribute type 1 has an invalid length. [ 355.080453][T11796] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.2175'. [ 355.114636][T11796] netlink: 751 bytes leftover after parsing attributes in process `syz.2.2175'. [ 355.316333][T11805] netlink: 'syz.1.2179': attribute type 10 has an invalid length. [ 355.380600][T11805] `: Device veth1_macvtap failed to register rx_handler [ 356.622737][ T5792] Bluetooth: hci1: Unknown advertising packet type: 0x70 [ 356.622835][ T5792] Bluetooth: hci1: Malformed LE Event: 0x0d [ 357.059557][T11842] netlink: 'syz.0.2195': attribute type 22 has an invalid length. [ 357.742239][T11866] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.2203'. [ 359.224761][T11893] netlink: 'syz.2.2212': attribute type 39 has an invalid length. [ 359.463462][T11899] €Â0: renamed from batadv_slave_1 (while UP) [ 360.066945][T11923] netlink: 'syz.0.2226': attribute type 10 has an invalid length. [ 360.085204][T11923] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2226'. [ 360.349850][T11923] team0: Port device geneve0 added [ 362.500425][T12000] netlink: 'syz.2.2253': attribute type 10 has an invalid length. [ 362.899164][T12006] netlink: 'syz.3.2259': attribute type 7 has an invalid length. [ 363.063436][T12008] netlink: 'syz.3.2260': attribute type 39 has an invalid length. [ 364.145708][T12040] FAULT_INJECTION: forcing a failure. [ 364.145708][T12040] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 364.244812][T12040] CPU: 1 PID: 12040 Comm: syz.2.2273 Not tainted syzkaller #0 [ 364.252441][T12040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 364.262615][T12040] Call Trace: [ 364.265919][T12040] [ 364.268881][T12040] dump_stack_lvl+0x16c/0x230 [ 364.273610][T12040] ? show_regs_print_info+0x20/0x20 [ 364.278850][T12040] ? load_image+0x3b0/0x3b0 [ 364.283393][T12040] ? __might_fault+0xaa/0x120 [ 364.288110][T12040] ? __lock_acquire+0x7c80/0x7c80 [ 364.293170][T12040] should_fail_ex+0x39d/0x4d0 [ 364.297917][T12040] _copy_from_user+0x2f/0xe0 [ 364.302544][T12040] __sys_bpf+0x1e9/0x800 [ 364.306819][T12040] ? bpf_link_show_fdinfo+0x350/0x350 [ 364.312237][T12040] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 364.318448][T12040] __x64_sys_bpf+0x7c/0x90 [ 364.322899][T12040] do_syscall_64+0x55/0xb0 [ 364.327347][T12040] ? clear_bhb_loop+0x40/0x90 [ 364.332049][T12040] ? clear_bhb_loop+0x40/0x90 [ 364.336760][T12040] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 364.342683][T12040] RIP: 0033:0x7fd666b8f749 [ 364.347133][T12040] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 364.366767][T12040] RSP: 002b:00007fd667949038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 364.375228][T12040] RAX: ffffffffffffffda RBX: 00007fd666de5fa0 RCX: 00007fd666b8f749 [ 364.383257][T12040] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 000000000000000a [ 364.391267][T12040] RBP: 00007fd667949090 R08: 0000000000000000 R09: 0000000000000000 [ 364.399274][T12040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 364.407280][T12040] R13: 00007fd666de6038 R14: 00007fd666de5fa0 R15: 00007fff8fe66c68 [ 364.415303][T12040] [ 364.531466][T12045] netlink: 142556 bytes leftover after parsing attributes in process `syz.2.2275'. [ 364.541596][T12045] netlink: 'syz.2.2275': attribute type 1 has an invalid length. [ 364.549784][T12045] netlink: 'syz.2.2275': attribute type 2 has an invalid length. [ 364.558368][T12045] netlink: 'syz.2.2275': attribute type 3 has an invalid length. [ 364.566565][T12045] netlink: 'syz.2.2275': attribute type 4 has an invalid length. [ 381.165156][ T5795] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 381.191314][ T5795] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 381.199522][ T5795] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 381.215188][ T5795] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 381.224064][ T5795] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 381.231590][ T5795] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 381.576465][ T5792] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 381.591153][ T5792] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 381.599055][ T5792] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 381.608495][ T5792] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 381.617014][ T5792] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 381.624804][ T5792] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 381.711773][ T5795] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 381.721721][ T5795] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 381.729447][ T5795] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 381.759727][ T5795] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 381.767799][ T5795] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 381.775621][ T5795] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 381.893818][ T5792] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 381.903771][ T5792] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 381.912394][ T5792] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 381.923953][ T5792] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 381.931932][ T5792] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 381.939317][ T5792] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 382.479513][T12063] chnl_net:caif_netlink_parms(): no params data found [ 383.331213][ T5795] Bluetooth: hci4: command tx timeout [ 383.731259][ T5795] Bluetooth: hci5: command tx timeout [ 383.903685][ T5795] Bluetooth: hci6: command tx timeout [ 383.981228][ T5795] Bluetooth: hci7: command tx timeout [ 385.411173][ T5795] Bluetooth: hci4: command tx timeout [ 385.816240][ T5795] Bluetooth: hci5: command tx timeout [ 385.970988][ T5795] Bluetooth: hci6: command tx timeout [ 386.057192][ T5795] Bluetooth: hci7: command tx timeout [ 387.491020][ T5795] Bluetooth: hci4: command tx timeout [ 387.891108][ T5795] Bluetooth: hci5: command tx timeout [ 388.051171][ T5795] Bluetooth: hci6: command tx timeout [ 388.131154][ T5795] Bluetooth: hci7: command tx timeout [ 389.589844][ T5795] Bluetooth: hci4: command tx timeout [ 389.971144][ T5795] Bluetooth: hci5: command tx timeout [ 390.131305][ T5795] Bluetooth: hci6: command tx timeout [ 390.211135][ T5795] Bluetooth: hci7: command tx timeout [ 394.131355][ T6396] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 441.877447][ T5792] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 441.887776][ T5792] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 441.896140][ T5792] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 441.905161][ T5792] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 441.913172][ T5792] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 441.920592][ T5792] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 442.021565][ T5795] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 442.030776][ T5795] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 442.039244][ T5795] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 442.047476][ T5795] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 442.055879][ T5795] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 442.063571][ T5795] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 442.205333][ T5795] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 442.234882][ T5795] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 442.243990][ T5795] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 442.252609][ T5795] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 442.260558][ T5795] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 442.268093][ T5795] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 442.331875][ T5792] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 442.344640][ T5792] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 442.353577][ T5792] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 442.367877][ T5792] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 442.375893][ T5792] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 442.383994][ T5792] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 443.971200][ T5792] Bluetooth: hci8: command tx timeout [ 444.131103][ T5792] Bluetooth: hci9: command tx timeout [ 444.307077][ T5792] Bluetooth: hci10: command tx timeout [ 444.451236][ T5792] Bluetooth: hci11: command tx timeout [ 446.051201][ T5792] Bluetooth: hci8: command tx timeout [ 446.210973][ T5792] Bluetooth: hci9: command tx timeout [ 446.376815][ T5792] Bluetooth: hci10: command tx timeout [ 446.531098][ T5792] Bluetooth: hci11: command tx timeout [ 448.141198][ T5792] Bluetooth: hci8: command tx timeout [ 448.291066][ T5792] Bluetooth: hci9: command tx timeout [ 448.455847][ T5792] Bluetooth: hci10: command tx timeout [ 448.611210][ T5792] Bluetooth: hci11: command tx timeout [ 450.210951][ T5792] Bluetooth: hci8: command tx timeout [ 450.371085][ T5792] Bluetooth: hci9: command tx timeout [ 450.531072][ T5792] Bluetooth: hci10: command tx timeout [ 450.691237][ T5792] Bluetooth: hci11: command tx timeout [ 469.580817][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 469.587600][ C0] rcu: 0-....: (1 GPs behind) idle=40fc/1/0x4000000000000000 softirq=35603/35604 fqs=4756 [ 469.598516][ C0] rcu: hardirqs softirqs csw/system [ 469.604979][ C0] rcu: number: 1334787 0 0 [ 469.611405][ C0] rcu: cputime: 16895 35574 39 ==> 52470(ms) [ 469.619220][ C0] rcu: (t=10500 jiffies g=45625 q=2326 ncpus=2) [ 469.625574][ C0] CPU: 0 PID: 12031 Comm: syz.3.2269 Not tainted syzkaller #0 [ 469.633062][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 469.643218][ C0] RIP: 0010:seqcount_lockdep_reader_access+0x17f/0x1c0 [ 469.650090][ C0] Code: 00 4d 85 e4 75 16 e8 50 90 0f 00 eb 15 e8 49 90 0f 00 e8 74 2d f9 08 4d 85 e4 74 ea e8 3a 90 0f 00 fb 48 c7 04 24 0e 36 e0 45 <4b> c7 04 3e 00 00 00 00 66 43 c7 44 3e 09 00 00 43 c6 44 3e 0b 00 [ 469.669712][ C0] RSP: 0018:ffffc90000007220 EFLAGS: 00000246 [ 469.675828][ C0] RAX: ffffffff81761046 RBX: 0000000000000000 RCX: ffff88806b469e00 [ 469.683818][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 469.691805][ C0] RBP: ffffc900000072d8 R08: ffffffff90da95ff R09: 1ffffffff21b52bf [ 469.699793][ C0] R10: dffffc0000000000 R11: fffffbfff21b52c0 R12: 0000000000000200 [ 469.707788][ C0] R13: 000001fb63109b96 R14: 1ffff92000000e44 R15: dffffc0000000000 [ 469.715775][ C0] FS: 00007f56094e36c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 469.724720][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 469.731319][ C0] CR2: 0000000000000000 CR3: 0000000060fb4000 CR4: 00000000003506f0 [ 469.739307][ C0] DR0: 0000000000000000 DR1: 0000200000000300 DR2: 0000000000000000 [ 469.747307][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff2 DR7: 0000000000000600 [ 469.755334][ C0] Call Trace: [ 469.758639][ C0] [ 469.761510][ C0] ? ktime_get_real_ts64+0x420/0x420 [ 469.766829][ C0] ? skb_network_protocol+0x509/0x760 [ 469.772241][ C0] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 469.778267][ C0] ktime_get_with_offset+0x94/0x330 [ 469.783503][ C0] netif_rx_internal+0x34a/0x4e0 [ 469.788470][ C0] ? dev_forward_skb+0x50/0x50 [ 469.793254][ C0] ? rcu_is_watching+0x15/0xb0 [ 469.798041][ C0] __netif_rx+0x78/0xc0 [ 469.802218][ C0] veth_xmit+0x550/0x9f0 [ 469.806488][ C0] ? veth_xmit+0x60/0x9f0 [ 469.810855][ C0] dev_hard_start_xmit+0x246/0x740 [ 469.816064][ C0] __dev_queue_xmit+0x1a64/0x35a0 [ 469.821124][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 469.827310][ C0] ? __dev_queue_xmit+0x245/0x35a0 [ 469.832453][ C0] ? read_seqbegin+0x1b5/0x260 [ 469.837246][ C0] ? neigh_event_send+0x110/0x110 [ 469.842294][ C0] ? netdev_core_pick_tx+0x340/0x340 [ 469.847597][ C0] ? __asan_memcpy+0x40/0x70 [ 469.852206][ C0] ? eth_header+0x11b/0x200 [ 469.856734][ C0] ? llc_sysctl_exit+0x70/0x70 [ 469.861516][ C0] ? neigh_resolve_output+0x618/0x730 [ 469.867095][ C0] ip6_finish_output2+0xe2e/0x1650 [ 469.872233][ C0] ? ip6_finish_output2+0x661/0x1650 [ 469.877540][ C0] ? ip6_mtu+0x7d/0x3f0 [ 469.881714][ C0] ? nf_hook+0x370/0x370 [ 469.885972][ C0] ? ip6_finish_output+0x57b/0x820 [ 469.891111][ C0] ndisc_send_skb+0xbed/0x14b0 [ 469.895902][ C0] ? ndisc_send_skb+0x1f2/0x14b0 [ 469.900868][ C0] ? ndisc_mc_map+0x680/0x680 [ 469.905573][ C0] ? skb_dst+0xd0/0xd0 [ 469.909680][ C0] addrconf_rs_timer+0x2bc/0x600 [ 469.914731][ C0] ? addrconf_disable_policy_idev+0x480/0x480 [ 469.920836][ C0] call_timer_fn+0x16e/0x530 [ 469.925450][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 469.931621][ C0] ? addrconf_disable_policy_idev+0x480/0x480 [ 469.937728][ C0] ? call_timer_fn+0xbf/0x530 [ 469.942432][ C0] ? __run_timers+0x7d0/0x7d0 [ 469.947151][ C0] ? addrconf_disable_policy_idev+0x480/0x480 [ 469.953262][ C0] __run_timers+0x52d/0x7d0 [ 469.957811][ C0] ? detach_timer+0x2b0/0x2b0 [ 469.962553][ C0] run_timer_softirq+0x67/0xf0 [ 469.967380][ C0] handle_softirqs+0x280/0x820 [ 469.972213][ C0] ? __irq_exit_rcu+0xc7/0x190 [ 469.977004][ C0] ? do_softirq+0x180/0x180 [ 469.981533][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 469.986767][ C0] __irq_exit_rcu+0xc7/0x190 [ 469.991374][ C0] ? irq_exit_rcu+0x20/0x20 [ 469.995902][ C0] irq_exit_rcu+0x9/0x20 [ 470.000156][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 470.005804][ C0] [ 470.008746][ C0] [ 470.011687][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 470.017685][ C0] RIP: 0010:__schedule+0x13f/0x44d0 [ 470.022903][ C0] Code: 18 48 8d 58 20 48 89 d8 48 c1 e8 03 42 80 3c 30 00 74 08 48 89 df e8 60 d1 65 f7 48 8b 1b 48 89 d8 48 c1 e8 03 42 80 3c 30 00 <74> 08 48 89 df e8 47 d1 65 f7 48 81 3b 9d 6e ac 57 0f 85 fc 15 00 [ 470.042539][ C0] RSP: 0018:ffffc900033d77e0 EFLAGS: 00000246 [ 470.048650][ C0] RAX: 1ffff9200067a000 RBX: ffffc900033d0000 RCX: 0000000000000000 [ 470.056647][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc900033d7960 [ 470.064635][ C0] RBP: ffffc900033d79d0 R08: ffffc900033d795f R09: 0000000000000000 [ 470.072620][ C0] R10: ffffc900033d7950 R11: fffff5200067af2c R12: 0000000000000001 [ 470.080609][ C0] R13: ffff8880b8e00000 R14: dffffc0000000000 R15: 1ffff9200067af18 [ 470.088619][ C0] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 470.094365][ C0] ? mark_lock+0x94/0x320 [ 470.098711][ C0] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 470.104737][ C0] ? lock_chain_count+0x20/0x20 [ 470.109616][ C0] ? asan.module_dtor+0x20/0x20 [ 470.114492][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 470.120670][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 470.125896][ C0] ? preempt_schedule+0xab/0xc0 [ 470.130771][ C0] preempt_schedule_common+0x82/0xc0 [ 470.136094][ C0] preempt_schedule+0xab/0xc0 [ 470.140816][ C0] ? schedule_preempt_disabled+0x20/0x20 [ 470.146480][ C0] ? event_function+0x300/0x300 [ 470.151349][ C0] ? smp_call_function_single+0x580/0x580 [ 470.157091][ C0] preempt_schedule_thunk+0x1a/0x30 [ 470.162309][ C0] ? smp_call_function_single+0x464/0x580 [ 470.168049][ C0] smp_call_function_single+0x469/0x580 [ 470.173614][ C0] ? event_function+0x300/0x300 [ 470.178485][ C0] ? flush_smp_call_function_queue+0x240/0x240 [ 470.184663][ C0] ? event_function+0x300/0x300 [ 470.189544][ C0] perf_install_in_context+0x591/0x8e0 [ 470.195071][ C0] ? exclusive_event_installable+0x2c0/0x2c0 [ 470.201099][ C0] ? add_event_to_ctx+0x1180/0x1180 [ 470.206326][ C0] ? anon_inode_getfile+0x109/0x1a0 [ 470.211543][ C0] ? perf_event__header_size+0x165/0x220 [ 470.217200][ C0] __se_sys_perf_event_open+0x17fa/0x1c20 [ 470.222943][ C0] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 470.228602][ C0] ? lock_chain_count+0x20/0x20 [ 470.233481][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 470.238693][ C0] ? __x64_sys_perf_event_open+0x20/0xc0 [ 470.244347][ C0] do_syscall_64+0x55/0xb0 [ 470.248781][ C0] ? clear_bhb_loop+0x40/0x90 [ 470.253473][ C0] ? clear_bhb_loop+0x40/0x90 [ 470.258170][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 470.264078][ C0] RIP: 0033:0x7f560858f749 [ 470.268511][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 470.288132][ C0] RSP: 002b:00007f56094e3038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 470.296571][ C0] RAX: ffffffffffffffda RBX: 00007f56087e5fa0 RCX: 00007f560858f749 [ 470.304560][ C0] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000140 [ 470.312546][ C0] RBP: 00007f5608613f91 R08: 0000000000000000 R09: 0000000000000000 [ 470.320793][ C0] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 470.328870][ C0] R13: 00007f56087e6038 R14: 00007f56087e5fa0 R15: 00007ffec8acbf98 [ 470.336871][ C0]