last executing test programs: 5.722139764s ago: executing program 2 (id=355): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000380), &(0x7f0000000340)='%pi6 \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000001300000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x279, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f00000004c0)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_pressure(r2, &(0x7f00000000c0)='io.pressure\x00', 0x2, 0x0) r3 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0x1, 0xffffffffffffffff, 0x1) syz_clone(0x4400, 0x0, 0xf4ff, 0x0, 0x0, 0x0) write$cgroup_pid(r3, &(0x7f0000000100), 0x12) 5.596578757s ago: executing program 0 (id=357): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000091114f000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) 5.519566889s ago: executing program 0 (id=359): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) r4 = socket$kcm(0x2, 0x3, 0x2) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f0000000100)=r3, 0x4) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000ac0)="4c000000140097f87059ae08060c040002ff0f020000000000001a350182fa73a69d35a21429b17cd02941601d60ffc0cca84708f7abca1b4e7d06a60300000072f750375ed08a5604000000", 0x4c}], 0x1}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r6, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d00), 0x0, 0x0, 0x0, 0x4000000}, 0x8040) close(r7) perf_event_open$cgroup(&(0x7f00000003c0)={0x0, 0x80, 0x1, 0x80, 0x7f, 0x81, 0x0, 0x9, 0x1000, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000062, 0x2, @perf_bp={&(0x7f00000001c0), 0x4}, 0x44, 0x0, 0x6, 0x8, 0x4, 0x7f, 0x98bb, 0x0, 0xf3, 0x0, 0x3}, 0xffffffffffffffff, 0x10, r2, 0xe) r8 = socket$kcm(0x2, 0x1000000000000002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r8, 0x88, 0x67, 0x0, 0x0) r9 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r9, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xa, 0x205, 0xff, 0x7, 0x0, 0x1, 0xd6}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r9, r1}) perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1180, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x5, 0xc2ba, 0x1, 0x4000000, 0x4, 0x4}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(r0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) 4.613023592s ago: executing program 2 (id=365): socketpair(0x29, 0x2, 0x0, &(0x7f0000000380)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = getpid() perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x90100, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1000, 0x2, @perf_config_ext={0x0, 0x7}, 0x1306, 0x2, 0xfffffffd, 0x2, 0x6, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x5, 0xffffffffffffffff, 0x4}, 0x38) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000001180)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xa}, 0x114244, 0x0, 0xafe8, 0x4, 0x7fff, 0x7fffffff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="06000000040000001810000089"], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000380)={r3, &(0x7f0000000100), 0x0}, 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x3ff, 0xff}, 0x100c, 0x0, 0xffffffff, 0x0, 0x10, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="2703022b590214000000002f1eafbcf706e1050000008848000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada33cc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000280)="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", 0x1a1}, {&(0x7f0000000180)="6fe4dd9eeba3271dc700b581440284", 0xfe69}], 0x4}, 0x0) 2.065400717s ago: executing program 0 (id=368): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4400, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x2, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x404c, 0x1ff, 0x4, 0x4, 0x4, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4000000) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffbfffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x28, 0x0, &(0x7f00000002c0)="b4bf11a369d8625dd5ee1d8288a8599486dd47046c2ee101408b3257de22781e530b0de0953f0116a725b46025a6951587880f72ce91dd30ca9844d597c24d848770c30f32ced51d54fa6b09083888cefb39f900000000000000fd35d9367af322ea7eeba816e0070000000f0284", 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x7}, 0x40) 1.971196219s ago: executing program 3 (id=369): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0xa, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x1e) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000580)=0x2, &(0x7f00000006c0)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r1, &(0x7f0000000040)}, 0x20) 1.908594211s ago: executing program 2 (id=370): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4020, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x9, 0x8}, 0x959, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x3) 1.908397121s ago: executing program 1 (id=371): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x114905, 0x30f6, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x89fe, &(0x7f0000000680)={'ip6gre0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}) 1.834998802s ago: executing program 0 (id=372): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb}, [@printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3f}}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="54ae1f8219560625baa794a469ce", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 1.786373354s ago: executing program 3 (id=373): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x3f01) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r1) 1.620566488s ago: executing program 0 (id=374): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0x11efa, 0x4, 0x98, 0x2, 0x2, 0xfffff271, 0xfffd, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) 1.602148419s ago: executing program 1 (id=375): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0xe96, 0xc1a0}, 0x114905, 0x4, 0x0, 0x1, 0x7, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x4000}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f3, &(0x7f0000000080)) 1.510182981s ago: executing program 2 (id=376): r0 = socket$kcm(0x1e, 0x4, 0x0) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r2 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) setsockopt$sock_attach_bpf(r2, 0x1, 0x21, &(0x7f0000000300), 0x4) write$cgroup_subtree(r2, &(0x7f0000000500)=ANY=[], 0xfdef) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400}, 0x4008054) 1.416471733s ago: executing program 3 (id=377): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xbcdba8607ca8e729}, 0x106901, 0x4, 0x0, 0x4, 0x3, 0xffffffff, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x5, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) 1.366433055s ago: executing program 1 (id=378): r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1}}}], 0x20}, 0x4008804) sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f0000002140)=@l2tp={0x2, 0x0, @remote, 0xfffffffe}, 0x80, 0x0}, 0x8400) 1.312476996s ago: executing program 2 (id=379): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x6, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000faffffff0000000000004000850000002c0000001800000004000000000000000700000095"], &(0x7f0000000200)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x8450, 0xac5a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xc, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="180200000900030000000000fdffffff850000002900000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x28, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x232}, 0x94) recvmsg$unix(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x60}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35}, 0x94) socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 1.228474258s ago: executing program 0 (id=380): bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x1}, 0x0, 0x4e7c, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x16}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000006"], 0x66) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r0, r1}, 0xc) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0xffffffff, r1}, 0x38) 1.228342009s ago: executing program 1 (id=381): r0 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x10, 0x0, 0x1300) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000240)=@in6={0xa, 0x4e21, 0xfffffff9, @empty, 0x200001}, 0x80, 0x0}, 0xc008810) 1.15647774s ago: executing program 3 (id=382): bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'macsec0\x00', 0x1}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8924, &(0x7f0000000080)) 1.074101462s ago: executing program 1 (id=383): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400, 0x8}, 0x4202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd63"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48) 908.568946ms ago: executing program 3 (id=384): r0 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={r0}) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe, 0x800000000066e}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000008e00001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) socket$kcm(0xa, 0x1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000380)="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", 0x118}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e3, &(0x7f0000000180)={r0, r3}) 122.327576ms ago: executing program 2 (id=385): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x4612, 0xffffffffffffffff}, 0x114105, 0x6, 0x9, 0x1, 0x0, 0x40000, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0xa) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000000), &(0x7f00000002c0)='%pI4 \x00'}, 0x20) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) 60.309838ms ago: executing program 3 (id=386): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x12, &(0x7f0000000900)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0, 0x0, 0x0, 0x0, 0xfd}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0xc}, 0x94) 0s ago: executing program 1 (id=387): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1100000004"], 0x50) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x3, 0x13, &(0x7f0000000a00)=@framed={{0x18, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x600}, [@printk={@li, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x70}}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}]}, &(0x7f0000000080)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e09f547ed3f02dc1fd3d6487775b", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000580)="d8000000200081044e81f782db44b90402000000e8fe55a11800150006001c0000000e120900030020000401a80016000a0011400600000003080000004dcf5c0468c1d67f6f94007134cf6ee08088568ab35d6e7016bb234841ef52b49816277ce06bf600000069438e6fb599e0ced72a6ba86cf917cbec4c2ee5a7adf4090000001fb791643a5ee4ce1b10d414f00004d9db22fe7c9f8775730d16a4683f1aea4edab57a5025ccca9e00360db70100000040fad95667e006d8df969b3ef35ce34d4a13821f4fbb9ad809d561cdce81ed0bffece0b42a9e", 0xd8}], 0x1}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.224' (ED25519) to the list of known hosts. [ 78.490243][ T5764] cgroup: Unknown subsys name 'net' [ 78.628356][ T5764] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 80.285939][ T5764] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 82.341285][ T5782] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 82.350672][ T5782] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 82.358818][ T5782] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 82.366237][ T5786] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 82.368372][ T5782] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 82.382406][ T5786] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 82.389777][ T5782] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 82.397803][ T5787] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 82.406154][ T5790] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 82.406539][ T5787] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 82.422139][ T5787] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 82.432169][ T5787] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 82.440100][ T5787] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 82.448495][ T5787] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 82.456721][ T5790] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 82.458127][ T5787] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 82.471408][ T5787] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 82.480799][ T5787] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 82.515005][ T5786] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 82.523656][ T5786] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 82.536485][ T5786] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 82.550066][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 82.564110][ T5792] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 82.571693][ T5792] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 82.983990][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 83.100891][ T5778] chnl_net:caif_netlink_parms(): no params data found [ 83.182916][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.190844][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.198775][ T5777] bridge_slave_0: entered allmulticast mode [ 83.206649][ T5777] bridge_slave_0: entered promiscuous mode [ 83.225889][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.233143][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.240679][ T5777] bridge_slave_1: entered allmulticast mode [ 83.247860][ T5777] bridge_slave_1: entered promiscuous mode [ 83.339757][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 83.357302][ T5781] chnl_net:caif_netlink_parms(): no params data found [ 83.378140][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.425233][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.457600][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.466988][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.474405][ T5778] bridge_slave_0: entered allmulticast mode [ 83.484988][ T5778] bridge_slave_0: entered promiscuous mode [ 83.518458][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.526827][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.534917][ T5778] bridge_slave_1: entered allmulticast mode [ 83.542502][ T5778] bridge_slave_1: entered promiscuous mode [ 83.610087][ T5777] team0: Port device team_slave_0 added [ 83.624411][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.647849][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.660656][ T5777] team0: Port device team_slave_1 added [ 83.753121][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.763409][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.771047][ T5776] bridge_slave_0: entered allmulticast mode [ 83.778327][ T5776] bridge_slave_0: entered promiscuous mode [ 83.787840][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.795112][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.802712][ T5776] bridge_slave_1: entered allmulticast mode [ 83.810260][ T5776] bridge_slave_1: entered promiscuous mode [ 83.823189][ T5778] team0: Port device team_slave_0 added [ 83.831053][ T5781] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.838236][ T5781] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.848231][ T5781] bridge_slave_0: entered allmulticast mode [ 83.856176][ T5781] bridge_slave_0: entered promiscuous mode [ 83.865378][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.873593][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.899851][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.926755][ T5778] team0: Port device team_slave_1 added [ 83.933077][ T5781] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.940729][ T5781] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.947977][ T5781] bridge_slave_1: entered allmulticast mode [ 83.955455][ T5781] bridge_slave_1: entered promiscuous mode [ 83.963336][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.970499][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.996881][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.065643][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.087886][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.094949][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.127272][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.143791][ T5781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.155467][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.168636][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.175805][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.201926][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.237115][ T5781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.280759][ T5776] team0: Port device team_slave_0 added [ 84.308422][ T5776] team0: Port device team_slave_1 added [ 84.321542][ T5777] hsr_slave_0: entered promiscuous mode [ 84.328443][ T5777] hsr_slave_1: entered promiscuous mode [ 84.370726][ T5778] hsr_slave_0: entered promiscuous mode [ 84.377340][ T5778] hsr_slave_1: entered promiscuous mode [ 84.386442][ T5778] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.394506][ T5778] Cannot create hsr debugfs directory [ 84.404792][ T5781] team0: Port device team_slave_0 added [ 84.427616][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.434745][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.461738][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.475142][ T5781] team0: Port device team_slave_1 added [ 84.511319][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.518419][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.544826][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.580142][ T5788] Bluetooth: hci2: command tx timeout [ 84.580205][ T5786] Bluetooth: hci1: command tx timeout [ 84.592196][ T5792] Bluetooth: hci0: command tx timeout [ 84.648948][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.656040][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.682395][ T5786] Bluetooth: hci3: command tx timeout [ 84.688576][ T5781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.740192][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.747224][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.775024][ T5781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.797312][ T5776] hsr_slave_0: entered promiscuous mode [ 84.804677][ T5776] hsr_slave_1: entered promiscuous mode [ 84.811426][ T5776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.819028][ T5776] Cannot create hsr debugfs directory [ 84.988624][ T5781] hsr_slave_0: entered promiscuous mode [ 84.996694][ T5781] hsr_slave_1: entered promiscuous mode [ 85.003434][ T5781] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.011601][ T5781] Cannot create hsr debugfs directory [ 85.204047][ T5777] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 85.240708][ T5777] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 85.267889][ T5777] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 85.287825][ T5777] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 85.403850][ T5778] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 85.416005][ T5778] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 85.433655][ T5778] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 85.449259][ T5778] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 85.535906][ T5781] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 85.559622][ T5781] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 85.570253][ T5781] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 85.581730][ T5781] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 85.705406][ T5776] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 85.722759][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.736025][ T5776] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 85.747668][ T5776] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 85.761201][ T5776] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 85.847739][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.883349][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.890814][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.914242][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.958919][ T141] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.966092][ T141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.988994][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.014302][ T5781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.024490][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.031730][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.072573][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.079811][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.139318][ T5781] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.169962][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.177097][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.214873][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.222081][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.247851][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.318101][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.366376][ T3484] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.373671][ T3484] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.460954][ T141] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.468167][ T141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.659901][ T5786] Bluetooth: hci2: command tx timeout [ 86.671647][ T5786] Bluetooth: hci1: command tx timeout [ 86.677124][ T5786] Bluetooth: hci0: command tx timeout [ 86.749779][ T5786] Bluetooth: hci3: command tx timeout [ 86.847935][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.886819][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.009264][ T5777] veth0_vlan: entered promiscuous mode [ 87.059896][ T5778] veth0_vlan: entered promiscuous mode [ 87.075656][ T5781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.095615][ T5777] veth1_vlan: entered promiscuous mode [ 87.118950][ T5778] veth1_vlan: entered promiscuous mode [ 87.137382][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.250977][ T5777] veth0_macvtap: entered promiscuous mode [ 87.282142][ T5777] veth1_macvtap: entered promiscuous mode [ 87.336237][ T5781] veth0_vlan: entered promiscuous mode [ 87.382208][ T5778] veth0_macvtap: entered promiscuous mode [ 87.414780][ T5776] veth0_vlan: entered promiscuous mode [ 87.427192][ T5781] veth1_vlan: entered promiscuous mode [ 87.442891][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.456521][ T5778] veth1_macvtap: entered promiscuous mode [ 87.487927][ T5776] veth1_vlan: entered promiscuous mode [ 87.524002][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.566439][ T5777] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.589344][ T5777] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.598209][ T5777] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.607655][ T5777] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.678340][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.691370][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.707027][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.719846][ T5781] veth0_macvtap: entered promiscuous mode [ 87.764275][ T5781] veth1_macvtap: entered promiscuous mode [ 87.777455][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.790055][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.802797][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.846746][ T5778] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.859729][ T5778] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.868495][ T5778] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.879310][ T5778] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.931591][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.947970][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.958627][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.970274][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.983037][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.027697][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.039053][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.049740][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.060551][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.072429][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.105863][ T5776] veth0_macvtap: entered promiscuous mode [ 88.114221][ T3484] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.129666][ T3484] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.167054][ T5776] veth1_macvtap: entered promiscuous mode [ 88.205991][ T5781] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.217561][ T5781] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.233182][ T5781] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.243164][ T5781] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.269020][ T3484] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.286513][ T3484] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.296748][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.310477][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.321805][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.332481][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.346877][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.358369][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.370973][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.408804][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.422767][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.432837][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.443816][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.454509][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.465445][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.477233][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.512921][ T3448] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.529820][ T3448] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.541529][ T5776] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.555780][ T5776] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.565612][ T5776] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.575401][ T5776] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.713419][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.722706][ T3448] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.735141][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.743474][ T3448] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.751016][ T5786] Bluetooth: hci0: command tx timeout [ 88.751067][ T5786] Bluetooth: hci1: command tx timeout [ 88.751099][ T5786] Bluetooth: hci2: command tx timeout [ 88.839949][ T5792] Bluetooth: hci3: command tx timeout [ 88.901782][ T141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.939308][ T3448] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.947208][ T3448] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.957777][ T141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.989804][ T141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.997707][ T141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.145253][ C0] hrtimer: interrupt took 74139 ns [ 89.514190][ T5844] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 90.035035][ T5850] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3'. [ 90.120777][ T5850] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 90.205864][ T5855] netlink: 'syz.0.5': attribute type 10 has an invalid length. [ 90.821536][ T5792] Bluetooth: hci2: command tx timeout [ 90.824129][ T5786] Bluetooth: hci1: command tx timeout [ 90.828694][ T5788] Bluetooth: hci0: command tx timeout [ 90.901360][ T5792] Bluetooth: hci3: command tx timeout [ 90.990197][ T5850] syz.2.3 (5850) used greatest stack depth: 19816 bytes left [ 91.958975][ T5855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.005535][ T5855] team0: Port device bond0 added [ 92.106071][ T27] cfg80211: failed to load regulatory.db [ 92.475596][ T5875] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.9'. [ 92.643474][ T5870] netlink: 'syz.0.7': attribute type 25 has an invalid length. [ 94.086410][ T5890] netlink: 'syz.1.14': attribute type 39 has an invalid length. [ 95.475968][ T5896] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.14'. [ 96.991038][ T5896] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.14'. [ 97.001621][ T5903] netlink: 'syz.3.17': attribute type 25 has an invalid length. [ 98.200293][ T5910] netlink: 'syz.3.19': attribute type 10 has an invalid length. [ 98.361262][ T5914] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.20'. [ 98.624921][ T5910] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.635969][ T5910] team0: Port device bond0 added [ 98.660809][ T5915] warning: `syz.3.19' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 100.322109][ T5939] netlink: 'syz.0.29': attribute type 39 has an invalid length. [ 100.601470][ T5943] netlink: 'syz.3.31': attribute type 25 has an invalid length. [ 100.658478][ T5938] netlink: 'syz.2.28': attribute type 25 has an invalid length. [ 101.686734][ T5957] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.34'. [ 104.687247][ T5939] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.29'. [ 104.687382][ T5939] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.29'. [ 104.687908][ T5947] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.29'. [ 104.698886][ T5939] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.29'. [ 106.448951][ T5977] netlink: 'syz.1.41': attribute type 25 has an invalid length. [ 106.506160][ T5983] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.43'. [ 106.616483][ T5981] netlink: 'syz.2.42': attribute type 25 has an invalid length. [ 107.206458][ T5992] netlink: 'syz.2.47': attribute type 39 has an invalid length. [ 108.179912][ T5996] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.47'. [ 110.006344][ T5996] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.47'. [ 113.008209][ T6021] FAULT_INJECTION: forcing a failure. [ 113.008209][ T6021] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 113.039437][ T6021] CPU: 1 PID: 6021 Comm: syz.2.55 Not tainted syzkaller #0 [ 113.046725][ T6021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 113.056885][ T6021] Call Trace: [ 113.060205][ T6021] [ 113.063187][ T6021] dump_stack_lvl+0x18c/0x250 [ 113.067927][ T6021] ? show_regs_print_info+0x20/0x20 [ 113.073179][ T6021] ? load_image+0x420/0x420 [ 113.077761][ T6021] ? __might_fault+0xaa/0x120 [ 113.082500][ T6021] ? __lock_acquire+0x7d80/0x7d80 [ 113.087672][ T6021] ? udp_sendmsg+0x5f6/0x23d0 [ 113.092428][ T6021] ? __virt_addr_valid+0x10c/0x380 [ 113.097613][ T6021] should_fail_ex+0x394/0x4c0 [ 113.102354][ T6021] _copy_from_user+0x2f/0xe0 [ 113.107018][ T6021] csum_and_copy_from_iter+0x1f3/0x1480 [ 113.112631][ T6021] ? iov_iter_get_pages_alloc2+0xc0/0xc0 [ 113.118341][ T6021] ? __kmem_cache_alloc_node+0x194/0x250 [ 113.124036][ T6021] ? __alloc_skb+0x138/0x2c0 [ 113.128658][ T6021] ? rcu_is_watching+0x15/0xb0 [ 113.133591][ T6021] ip_generic_getfrag+0x163/0x2f0 [ 113.138656][ T6021] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 113.143537][ T6021] ? __build_skb_around+0x245/0x3c0 [ 113.148770][ T6021] ? __alloc_skb+0x1b2/0x2c0 [ 113.153383][ T6021] ? skb_put+0x112/0x210 [ 113.157663][ T6021] __ip_append_data+0x2f3b/0x3bf0 [ 113.162714][ T6021] ? trace_call_bpf+0xc3/0x6c0 [ 113.167526][ T6021] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 113.172419][ T6021] ? ip_setup_cork+0x840/0x840 [ 113.177401][ T6021] ? __local_bh_enable_ip+0x13a/0x1c0 [ 113.182810][ T6021] ? lockdep_hardirqs_on+0x98/0x150 [ 113.188049][ T6021] ip_append_data+0x10d/0x180 [ 113.192757][ T6021] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 113.197638][ T6021] udp_sendmsg+0x5f6/0x23d0 [ 113.202276][ T6021] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 113.207159][ T6021] ? udp_cmsg_send+0x350/0x350 [ 113.211971][ T6021] ? __lock_acquire+0x7d80/0x7d80 [ 113.217040][ T6021] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 113.223500][ T6021] ? aa_sock_msg_perm+0x94/0x150 [ 113.228471][ T6021] ? sock_rps_record_flow+0x19/0x3f0 [ 113.233791][ T6021] ? inet_sendmsg+0x7e/0x2a0 [ 113.238418][ T6021] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 113.243743][ T6021] sock_write_iter+0x2dc/0x420 [ 113.248542][ T6021] ? sock_read_iter+0x3f0/0x3f0 [ 113.253524][ T6021] ? common_file_perm+0x198/0x1f0 [ 113.258593][ T6021] vfs_write+0x474/0x9a0 [ 113.262882][ T6021] ? file_end_write+0x250/0x250 [ 113.267774][ T6021] ? __fget_files+0x3fc/0x460 [ 113.272495][ T6021] ? __fdget_pos+0x1d8/0x330 [ 113.277113][ T6021] ? ksys_write+0x74/0x260 [ 113.281565][ T6021] ksys_write+0x151/0x260 [ 113.285933][ T6021] ? __ia32_sys_read+0x90/0x90 [ 113.290757][ T6021] ? lockdep_hardirqs_on+0x98/0x150 [ 113.295993][ T6021] do_syscall_64+0x55/0xb0 [ 113.300452][ T6021] ? clear_bhb_loop+0x40/0x90 [ 113.305159][ T6021] ? clear_bhb_loop+0x40/0x90 [ 113.309867][ T6021] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 113.315792][ T6021] RIP: 0033:0x7f2d8019e019 [ 113.320236][ T6021] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 113.340045][ T6021] RSP: 002b:00007f2d81023028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 113.348492][ T6021] RAX: ffffffffffffffda RBX: 00007f2d80426180 RCX: 00007f2d8019e019 [ 113.356490][ T6021] RDX: 000000000000fe33 RSI: 00002000000001c0 RDI: 0000000000000006 [ 113.364484][ T6021] RBP: 00007f2d81023090 R08: 0000000000000000 R09: 0000000000000000 [ 113.372478][ T6021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 113.380471][ T6021] R13: 00007f2d80426218 R14: 00007f2d80426180 R15: 00007ffed272b528 [ 113.388486][ T6021] [ 115.455289][ T6024] netlink: 'syz.2.56': attribute type 29 has an invalid length. [ 115.465377][ T6024] netlink: 'syz.2.56': attribute type 29 has an invalid length. [ 115.477396][ T6024] netlink: 'syz.2.56': attribute type 29 has an invalid length. [ 115.486429][ T6024] netlink: 'syz.2.56': attribute type 29 has an invalid length. [ 117.352993][ T6044] netlink: 128 bytes leftover after parsing attributes in process `syz.3.63'. [ 117.585347][ T6044] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 119.011114][ T6044] syz.3.63 (6044) used greatest stack depth: 19432 bytes left [ 122.510149][ T6082] netlink: 'syz.2.75': attribute type 10 has an invalid length. [ 122.649803][ T6082] netlink: 40 bytes leftover after parsing attributes in process `syz.2.75'. [ 122.658740][ T6082] team0: entered promiscuous mode [ 122.665217][ T6082] team_slave_0: entered promiscuous mode [ 122.672064][ T6082] team_slave_1: entered promiscuous mode [ 122.678326][ T6082] team0: entered allmulticast mode [ 122.690423][ T6082] team_slave_0: entered allmulticast mode [ 122.710342][ T6082] team_slave_1: entered allmulticast mode [ 122.717294][ T6082] bridge0: port 3(team0) entered blocking state [ 122.759713][ T6082] bridge0: port 3(team0) entered disabled state [ 122.782819][ T6082] bridge0: port 3(team0) entered blocking state [ 122.789637][ T6082] bridge0: port 3(team0) entered forwarding state [ 123.360287][ T6094] netlink: 128 bytes leftover after parsing attributes in process `syz.0.77'. [ 123.430360][ T6094] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 127.534990][ T6134] delete_channel: no stack [ 130.779890][ T6150] netlink: 'syz.2.95': attribute type 6 has an invalid length. [ 130.824708][ T6150] netlink: 164 bytes leftover after parsing attributes in process `syz.2.95'. [ 133.100213][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.107063][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.210390][ T6157] netlink: 'syz.1.98': attribute type 21 has an invalid length. [ 133.218163][ T6157] netlink: 'syz.1.98': attribute type 4 has an invalid length. [ 133.267491][ T6157] netlink: 'syz.1.98': attribute type 23 has an invalid length. [ 133.309801][ T6157] netlink: 20 bytes leftover after parsing attributes in process `syz.1.98'. [ 133.361579][ T6158] netlink: 64535 bytes leftover after parsing attributes in process `syz.3.97'. [ 136.735436][ T6190] syzkaller0: entered promiscuous mode [ 136.819912][ T6190] syzkaller0: entered allmulticast mode [ 142.335528][ T6213] syz.0.112 uses obsolete (PF_INET,SOCK_PACKET) [ 144.243703][ T6206] netdevsim netdevsim2 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP) [ 145.543763][ T6243] netlink: 12 bytes leftover after parsing attributes in process `syz.0.124'. [ 145.553886][ T6243] netlink: 152 bytes leftover after parsing attributes in process `syz.0.124'. [ 145.604899][ T6243] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.124'. [ 146.124049][ T6256] syzkaller0: entered promiscuous mode [ 146.131043][ T6256] syzkaller0: entered allmulticast mode [ 147.068398][ T6274] FAULT_INJECTION: forcing a failure. [ 147.068398][ T6274] name failslab, interval 1, probability 0, space 0, times 1 [ 147.120741][ T6274] CPU: 0 PID: 6274 Comm: syz.1.135 Not tainted syzkaller #0 [ 147.128143][ T6274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 147.138261][ T6274] Call Trace: [ 147.141598][ T6274] [ 147.144579][ T6274] dump_stack_lvl+0x18c/0x250 [ 147.149504][ T6274] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 147.155732][ T6274] ? show_regs_print_info+0x20/0x20 [ 147.160986][ T6274] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 147.167575][ T6274] should_fail_ex+0x394/0x4c0 [ 147.172329][ T6274] should_failslab+0x9/0x20 [ 147.176900][ T6274] slab_pre_alloc_hook+0x59/0x300 [ 147.181993][ T6274] ? security_sk_alloc+0x4b/0x130 [ 147.187067][ T6274] ? security_sk_alloc+0x4b/0x130 [ 147.192160][ T6274] __kmem_cache_alloc_node+0x53/0x250 [ 147.197603][ T6274] ? security_sk_alloc+0x4b/0x130 [ 147.202713][ T6274] __kmalloc+0xa7/0x240 [ 147.206924][ T6274] ? sk_prot_alloc+0xe7/0x210 [ 147.211670][ T6274] security_sk_alloc+0x4b/0x130 [ 147.216578][ T6274] sk_prot_alloc+0x101/0x210 [ 147.221218][ T6274] ? sk_alloc+0x24/0x350 [ 147.225554][ T6274] sk_alloc+0x3a/0x350 [ 147.229697][ T6274] mISDN_sock_create+0x329/0x640 [ 147.234706][ T6274] __sock_create+0x49e/0x940 [ 147.239357][ T6274] __sys_socketpair+0x1c1/0x550 [ 147.244271][ T6274] __x64_sys_socketpair+0x9b/0xb0 [ 147.249437][ T6274] do_syscall_64+0x55/0xb0 [ 147.253911][ T6274] ? clear_bhb_loop+0x40/0x90 [ 147.258638][ T6274] ? clear_bhb_loop+0x40/0x90 [ 147.263552][ T6274] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 147.269512][ T6274] RIP: 0033:0x7fa0a599e019 [ 147.273988][ T6274] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 147.293646][ T6274] RSP: 002b:00007fa0a6895028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 147.302117][ T6274] RAX: ffffffffffffffda RBX: 00007fa0a5c25fa0 RCX: 00007fa0a599e019 [ 147.310136][ T6274] RDX: 0000000000000003 RSI: 0000000000000002 RDI: 0000000000000022 [ 147.318267][ T6274] RBP: 00007fa0a6895090 R08: 0000000000000000 R09: 0000000000000000 [ 147.326290][ T6274] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 147.334305][ T6274] R13: 00007fa0a5c26038 R14: 00007fa0a5c25fa0 R15: 00007ffc46556fa8 [ 147.342347][ T6274] [ 149.899482][ T6284] netlink: 'syz.3.141': attribute type 10 has an invalid length. [ 149.907617][ T6284] netlink: 'syz.3.141': attribute type 10 has an invalid length. [ 149.916569][ T6284] netlink: 209216 bytes leftover after parsing attributes in process `syz.3.141'. [ 149.927842][ T6284] openvswitch: netlink: Message has 4 unknown bytes. [ 151.516505][ T6310] Zero length message leads to an empty skb [ 151.707859][ T6316] netlink: 'syz.0.151': attribute type 25 has an invalid length. [ 151.736329][ T6316] netlink: 'syz.0.151': attribute type 9 has an invalid length. [ 151.768107][ T6316] netlink: 40 bytes leftover after parsing attributes in process `syz.0.151'. [ 151.790579][ T6319] netlink: 'syz.0.151': attribute type 12 has an invalid length. [ 151.798622][ T6319] netlink: 132 bytes leftover after parsing attributes in process `syz.0.151'. [ 153.921815][ T6326] netlink: 'syz.2.153': attribute type 21 has an invalid length. [ 153.929766][ T6326] netlink: 16166 bytes leftover after parsing attributes in process `syz.2.153'. [ 154.054735][ T6330] syzkaller0: entered promiscuous mode [ 154.060724][ T6330] syzkaller0: entered allmulticast mode [ 169.948021][ T6412] syzkaller0: entered promiscuous mode [ 169.999280][ T6412] syzkaller0: entered allmulticast mode [ 174.571237][ T6438] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 174.863220][ T6458] netlink: 'syz.2.191': attribute type 6 has an invalid length. [ 174.887727][ T6458] netlink: 164 bytes leftover after parsing attributes in process `syz.2.191'. [ 175.494963][ T6461] Driver unsupported XDP return value 0 on prog (id 187) dev N/A, expect packet loss! [ 175.600874][ T6461] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.191'. [ 175.660432][ T6461] netlink: 'syz.2.191': attribute type 2 has an invalid length. [ 178.325616][ T6475] netlink: 16358 bytes leftover after parsing attributes in process `syz.3.198'. [ 178.910042][ T6484] FAULT_INJECTION: forcing a failure. [ 178.910042][ T6484] name failslab, interval 1, probability 0, space 0, times 0 [ 178.955489][ T6484] CPU: 0 PID: 6484 Comm: syz.3.200 Not tainted syzkaller #0 [ 178.962888][ T6484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 178.973016][ T6484] Call Trace: [ 178.976362][ T6484] [ 178.979367][ T6484] dump_stack_lvl+0x18c/0x250 [ 178.984123][ T6484] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 178.990391][ T6484] ? show_regs_print_info+0x20/0x20 [ 178.995676][ T6484] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 179.001960][ T6484] should_fail_ex+0x394/0x4c0 [ 179.006747][ T6484] should_failslab+0x9/0x20 [ 179.011343][ T6484] slab_pre_alloc_hook+0x59/0x300 [ 179.016489][ T6484] kmem_cache_alloc+0x5a/0x2c0 [ 179.021340][ T6484] ? sk_prot_alloc+0x57/0x210 [ 179.026120][ T6484] sk_prot_alloc+0x57/0x210 [ 179.030706][ T6484] ? sk_alloc+0x24/0x350 [ 179.035053][ T6484] sk_alloc+0x3a/0x350 [ 179.039254][ T6484] tipc_sk_create+0x178/0x2920 [ 179.044101][ T6484] ? trace_event_raw_event_lock+0x240/0x240 [ 179.050141][ T6484] ? rcu_read_unlock+0x8c/0xa0 [ 179.054988][ T6484] ? __lock_acquire+0x7d80/0x7d80 [ 179.060096][ T6484] ? msg_importance+0x140/0x140 [ 179.065070][ T6484] __sock_create+0x49e/0x940 [ 179.069767][ T6484] __sys_socketpair+0x1c1/0x550 [ 179.074732][ T6484] __x64_sys_socketpair+0x9b/0xb0 [ 179.079847][ T6484] do_syscall_64+0x55/0xb0 [ 179.084335][ T6484] ? clear_bhb_loop+0x40/0x90 [ 179.089082][ T6484] ? clear_bhb_loop+0x40/0x90 [ 179.093842][ T6484] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 179.099814][ T6484] RIP: 0033:0x7f218539e019 [ 179.104305][ T6484] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 179.123991][ T6484] RSP: 002b:00007f218625e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 179.132503][ T6484] RAX: ffffffffffffffda RBX: 00007f2185625fa0 RCX: 00007f218539e019 [ 179.140560][ T6484] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 000000000000001e [ 179.148610][ T6484] RBP: 00007f218625e090 R08: 0000000000000000 R09: 0000000000000000 [ 179.156703][ T6484] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001 [ 179.164749][ T6484] R13: 00007f2185626038 R14: 00007f2185625fa0 R15: 00007fff7c1a5f68 [ 179.172850][ T6484] [ 181.785884][ T6492] netlink: 156 bytes leftover after parsing attributes in process `syz.3.204'. [ 187.860626][ T6532] netlink: 'syz.3.217': attribute type 5 has an invalid length. [ 189.121137][ T6557] bridge0: port 3(team0) entered disabled state [ 190.917882][ T6557] bridge_slave_1: left allmulticast mode [ 190.923864][ T6557] bridge_slave_1: left promiscuous mode [ 190.930636][ T6557] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.946226][ T6557] bridge_slave_0: left allmulticast mode [ 190.962698][ T6557] bridge_slave_0: left promiscuous mode [ 190.968541][ T6557] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.180446][ T6555] netlink: 'syz.1.224': attribute type 10 has an invalid length. [ 191.192619][ T6555] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.218956][ T6555] bridge_slave_1: left allmulticast mode [ 191.225479][ T6555] bridge_slave_1: left promiscuous mode [ 191.231455][ T6555] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.279986][ T6555] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 191.306804][ T6558] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 191.314386][ T6558] IPv6: NLM_F_CREATE should be set when creating new route [ 191.321865][ T6558] IPv6: NLM_F_CREATE should be set when creating new route [ 191.329193][ T6558] IPv6: NLM_F_CREATE should be set when creating new route [ 193.128182][ T6578] netlink: 'syz.1.229': attribute type 5 has an invalid length. [ 193.586360][ T6587] netlink: 'syz.3.233': attribute type 10 has an invalid length. [ 193.683454][ T6587] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.711446][ T6587] bridge_slave_1: left allmulticast mode [ 193.718091][ T6587] bridge_slave_1: left promiscuous mode [ 193.725482][ T6587] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.762940][ T6587] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 193.812092][ T6598] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 193.819453][ T6598] IPv6: NLM_F_CREATE should be set when creating new route [ 193.826833][ T6598] IPv6: NLM_F_CREATE should be set when creating new route [ 193.834211][ T6598] IPv6: NLM_F_CREATE should be set when creating new route [ 193.929502][ T6602] netlink: 'syz.1.246': attribute type 1 has an invalid length. [ 193.937302][ T6602] netlink: 161700 bytes leftover after parsing attributes in process `syz.1.246'. [ 194.113799][ T6604] netlink: 'syz.2.238': attribute type 10 has an invalid length. [ 194.388592][ T6619] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.239'. [ 194.408513][ T6619] netlink: 'syz.3.239': attribute type 2 has an invalid length. [ 194.485901][ T6604] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 194.506324][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.512910][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.523538][ T6607] netlink: 'syz.3.239': attribute type 6 has an invalid length. [ 194.554906][ T6607] netlink: 164 bytes leftover after parsing attributes in process `syz.3.239'. [ 194.796394][ T6612] netlink: 'syz.1.249': attribute type 10 has an invalid length. [ 194.850314][ T6617] netlink: 'syz.0.240': attribute type 5 has an invalid length. [ 194.858299][ T6614] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 194.865746][ T6614] IPv6: NLM_F_CREATE should be set when creating new route [ 194.873088][ T6614] IPv6: NLM_F_CREATE should be set when creating new route [ 194.880407][ T6614] IPv6: NLM_F_CREATE should be set when creating new route [ 194.896363][ T6618] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 195.403326][ T6635] netlink: 7555 bytes leftover after parsing attributes in process `syz.2.245'. [ 198.789435][ T6651] netlink: 'syz.0.251': attribute type 10 has an invalid length. [ 198.830506][ T6651] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.845144][ T6651] bridge_slave_1: left allmulticast mode [ 198.853259][ T6651] bridge_slave_1: left promiscuous mode [ 198.863792][ T6651] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.911598][ T6651] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 198.922392][ T6653] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 198.929730][ T6653] IPv6: NLM_F_CREATE should be set when creating new route [ 198.937072][ T6653] IPv6: NLM_F_CREATE should be set when creating new route [ 198.944399][ T6653] IPv6: NLM_F_CREATE should be set when creating new route [ 199.190921][ T6658] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 199.300871][ T6660] netlink: 'syz.0.252': attribute type 10 has an invalid length. [ 199.485457][ T6662] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 199.604075][ T6668] netlink: 830 bytes leftover after parsing attributes in process `syz.2.256'. [ 200.640135][ T5792] Bluetooth: hci1: unexpected event 0x35 length: 15 > 6 [ 200.931619][ T6710] ref_ctr_offset mismatch. inode: 0x180 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x20 [ 202.160538][ T6739] syzkaller0: entered promiscuous mode [ 202.166087][ T6739] syzkaller0: entered allmulticast mode [ 202.421192][ T5792] Bluetooth: hci1: ISO packet for unknown connection handle 255 [ 202.761203][ T6755] netlink: 'syz.3.295': attribute type 21 has an invalid length. [ 202.972920][ T6757] netlink: 60 bytes leftover after parsing attributes in process `syz.0.297'. [ 203.003527][ T6757] netlink: 60 bytes leftover after parsing attributes in process `syz.0.297'. [ 203.043690][ T6757] netlink: 60 bytes leftover after parsing attributes in process `syz.0.297'. [ 203.084729][ T6757] netlink: 60 bytes leftover after parsing attributes in process `syz.0.297'. [ 203.580530][ T5792] Bluetooth: hci2: SCO packet for unknown connection handle 255 [ 206.054789][ T6790] netlink: 'syz.2.308': attribute type 10 has an invalid length. [ 206.167312][ T6814] netdevsim netdevsim1: loading /lib/firmware// failed with error -22 [ 206.205552][ T6814] netdevsim netdevsim1: Direct firmware load for / failed with error -22 [ 206.234114][ T6814] netdevsim netdevsim1: Falling back to sysfs fallback for: / [ 206.832918][ T5787] Bluetooth: hci2: command 0x0406 tx timeout [ 206.839014][ T5787] Bluetooth: hci1: command 0x0406 tx timeout [ 206.845646][ T5782] Bluetooth: hci0: command 0x0406 tx timeout [ 206.852002][ T5783] Bluetooth: hci3: command 0x0406 tx timeout [ 207.045912][ T6839] netlink: 60 bytes leftover after parsing attributes in process `syz.3.329'. [ 207.056198][ T6839] netlink: 60 bytes leftover after parsing attributes in process `syz.3.329'. [ 207.066928][ T6839] netlink: 60 bytes leftover after parsing attributes in process `syz.3.329'. [ 207.078588][ T6839] netlink: 60 bytes leftover after parsing attributes in process `syz.3.329'. [ 207.254289][ T6843] netlink: 60 bytes leftover after parsing attributes in process `syz.1.332'. [ 207.276875][ T6845] netlink: 60 bytes leftover after parsing attributes in process `syz.2.330'. [ 207.286192][ T6843] netlink: 60 bytes leftover after parsing attributes in process `syz.1.332'. [ 207.321905][ T6843] netlink: 60 bytes leftover after parsing attributes in process `syz.1.332'. [ 207.345079][ T6845] netlink: 60 bytes leftover after parsing attributes in process `syz.2.330'. [ 207.362721][ T6843] netlink: 60 bytes leftover after parsing attributes in process `syz.1.332'. [ 217.513277][ T6970] [ 217.515710][ T6970] ====================================================== [ 217.522795][ T6970] WARNING: possible circular locking dependency detected [ 217.530326][ T6970] syzkaller #0 Not tainted [ 217.534801][ T6970] ------------------------------------------------------ [ 217.541883][ T6970] syz.2.385/6970 is trying to acquire lock: [ 217.547839][ T6970] ffff8880b8f37de8 (stock_lock){..-.}-{2:2}, at: obj_cgroup_charge+0xed/0x630 [ 217.556867][ T6970] [ 217.556867][ T6970] but task is already holding lock: [ 217.564286][ T6970] ffff88807f430238 (&trie->lock){-.-.}-{2:2}, at: trie_update_elem+0xc4/0xd60 [ 217.573298][ T6970] [ 217.573298][ T6970] which lock already depends on the new lock. [ 217.573298][ T6970] [ 217.583758][ T6970] [ 217.583758][ T6970] the existing dependency chain (in reverse order) is: [ 217.592839][ T6970] [ 217.592839][ T6970] -> #1 (&trie->lock){-.-.}-{2:2}: [ 217.600204][ T6970] _raw_spin_lock_irqsave+0xb4/0x100 [ 217.606090][ T6970] trie_delete_elem+0x94/0x630 [ 217.611439][ T6970] 0xffffffffa00009e9 [ 217.616008][ T6970] trace_call_bpf+0x333/0x6c0 [ 217.621259][ T6970] perf_trace_run_bpf_submit+0x7a/0x1c0 [ 217.627380][ T6970] perf_trace_lock_acquire+0x342/0x400 [ 217.633406][ T6970] lock_acquire+0x3ef/0x420 [ 217.638478][ T6970] percpu_ref_put+0x35/0x180 [ 217.643639][ T6970] __refill_stock+0x12a/0x3d0 [ 217.648885][ T6970] refill_stock+0x19e/0x450 [ 217.653952][ T6970] try_charge_memcg+0x1281/0x17c0 [ 217.659545][ T6970] __memcg_kmem_charge_page+0x224/0x380 [ 217.665654][ T6970] memcg_charge_kernel_stack+0x94/0x4d0 [ 217.671790][ T6970] dup_task_struct+0x3eb/0x800 [ 217.677127][ T6970] copy_process+0x5a6/0x3da0 [ 217.682289][ T6970] kernel_clone+0x24b/0x8a0 [ 217.687382][ T6970] __x64_sys_clone+0x1b7/0x230 [ 217.692719][ T6970] do_syscall_64+0x55/0xb0 [ 217.697701][ T6970] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 217.704168][ T6970] [ 217.704168][ T6970] -> #0 (stock_lock){..-.}-{2:2}: [ 217.711539][ T6970] __lock_acquire+0x37ef/0x7d80 [ 217.716951][ T6970] lock_acquire+0x19e/0x420 [ 217.722023][ T6970] obj_cgroup_charge+0x10a/0x630 [ 217.727527][ T6970] slab_pre_alloc_hook+0x2e2/0x300 [ 217.733291][ T6970] __kmem_cache_alloc_node+0x53/0x250 [ 217.739225][ T6970] __kmalloc_node+0xa6/0x240 [ 217.744375][ T6970] bpf_map_kmalloc_node+0xbc/0x1b0 [ 217.750146][ T6970] trie_update_elem+0x172/0xd60 [ 217.755560][ T6970] bpf_map_update_value+0x64b/0x710 [ 217.761335][ T6970] map_update_elem+0x586/0x710 [ 217.766667][ T6970] __sys_bpf+0x6b5/0x890 [ 217.771475][ T6970] __x64_sys_bpf+0x7c/0x90 [ 217.776459][ T6970] do_syscall_64+0x55/0xb0 [ 217.781441][ T6970] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 217.787891][ T6970] [ 217.787891][ T6970] other info that might help us debug this: [ 217.787891][ T6970] [ 217.798161][ T6970] Possible unsafe locking scenario: [ 217.798161][ T6970] [ 217.805645][ T6970] CPU0 CPU1 [ 217.811042][ T6970] ---- ---- [ 217.816530][ T6970] lock(&trie->lock); [ 217.820675][ T6970] lock(stock_lock); [ 217.827246][ T6970] lock(&trie->lock); [ 217.833882][ T6970] lock(stock_lock); [ 217.837912][ T6970] [ 217.837912][ T6970] *** DEADLOCK *** [ 217.837912][ T6970] [ 217.846089][ T6970] 2 locks held by syz.2.385/6970: [ 217.851233][ T6970] #0: ffffffff8d131da0 (rcu_read_lock){....}-{1:2}, at: bpf_map_update_value+0x408/0x710 [ 217.861233][ T6970] #1: ffff88807f430238 (&trie->lock){-.-.}-{2:2}, at: trie_update_elem+0xc4/0xd60 [ 217.870621][ T6970] [ 217.870621][ T6970] stack backtrace: [ 217.876544][ T6970] CPU: 1 PID: 6970 Comm: syz.2.385 Not tainted syzkaller #0 [ 217.883870][ T6970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 217.893983][ T6970] Call Trace: [ 217.897296][ T6970] [ 217.900293][ T6970] dump_stack_lvl+0x18c/0x250 [ 217.905027][ T6970] ? load_image+0x420/0x420 [ 217.909583][ T6970] ? show_regs_print_info+0x20/0x20 [ 217.914843][ T6970] ? print_circular_bug+0x12b/0x1a0 [ 217.920101][ T6970] check_noncircular+0x2fc/0x400 [ 217.925100][ T6970] ? print_deadlock_bug+0x5d0/0x5d0 [ 217.930341][ T6970] ? lockdep_lock+0xf5/0x230 [ 217.935000][ T6970] ? _find_first_zero_bit+0xd6/0x100 [ 217.940346][ T6970] __lock_acquire+0x37ef/0x7d80 [ 217.945290][ T6970] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 217.951063][ T6970] ? verify_lock_unused+0x140/0x140 [ 217.956311][ T6970] ? perf_trace_lock_acquire+0x342/0x400 [ 217.961996][ T6970] ? trace_event_raw_event_lock_acquire+0x290/0x290 [ 217.968631][ T6970] ? verify_lock_unused+0x140/0x140 [ 217.973872][ T6970] ? perf_trace_lock_acquire+0x342/0x400 [ 217.979559][ T6970] lock_acquire+0x19e/0x420 [ 217.984126][ T6970] ? obj_cgroup_charge+0xed/0x630 [ 217.989198][ T6970] ? trace_event_raw_event_lock_acquire+0x290/0x290 [ 217.995841][ T6970] ? read_lock_is_recursive+0x20/0x20 [ 218.001301][ T6970] obj_cgroup_charge+0x10a/0x630 [ 218.006283][ T6970] ? obj_cgroup_charge+0xed/0x630 [ 218.011346][ T6970] ? get_obj_cgroup_from_current+0xd4/0x280 [ 218.017292][ T6970] ? __lock_acquire+0x7d80/0x7d80 [ 218.022360][ T6970] ? obj_cgroup_charge+0xed/0x630 [ 218.027434][ T6970] ? mod_objcg_mlstate+0x320/0x320 [ 218.032581][ T6970] ? percpu_ref_tryget+0x15/0x180 [ 218.037645][ T6970] ? percpu_ref_tryget+0x15/0x180 [ 218.042723][ T6970] ? get_obj_cgroup_from_current+0xd4/0x280 [ 218.048666][ T6970] slab_pre_alloc_hook+0x2e2/0x300 [ 218.053822][ T6970] ? __rwlock_init+0x150/0x150 [ 218.058633][ T6970] ? bpf_map_kmalloc_node+0xbc/0x1b0 [ 218.063969][ T6970] ? bpf_map_kmalloc_node+0xbc/0x1b0 [ 218.069308][ T6970] __kmem_cache_alloc_node+0x53/0x250 [ 218.074743][ T6970] ? bpf_map_kmalloc_node+0xbc/0x1b0 [ 218.080081][ T6970] __kmalloc_node+0xa6/0x240 [ 218.084717][ T6970] ? _raw_spin_lock+0x40/0x40 [ 218.089454][ T6970] bpf_map_kmalloc_node+0xbc/0x1b0 [ 218.094624][ T6970] trie_update_elem+0x172/0xd60 [ 218.099533][ T6970] ? __lock_acquire+0x7d80/0x7d80 [ 218.104643][ T6970] bpf_map_update_value+0x64b/0x710 [ 218.109900][ T6970] map_update_elem+0x586/0x710 [ 218.114729][ T6970] __sys_bpf+0x6b5/0x890 [ 218.119019][ T6970] ? bpf_link_show_fdinfo+0x390/0x390 [ 218.124469][ T6970] ? lock_chain_count+0x20/0x20 [ 218.129404][ T6970] __x64_sys_bpf+0x7c/0x90 [ 218.133870][ T6970] do_syscall_64+0x55/0xb0 [ 218.138334][ T6970] ? clear_bhb_loop+0x40/0x90 [ 218.143053][ T6970] ? clear_bhb_loop+0x40/0x90 [ 218.147778][ T6970] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 218.153715][ T6970] RIP: 0033:0x7f2d8019e019 [ 218.158174][ T6970] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 218.177823][ T6970] RSP: 002b:00007f2d81065028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 218.186280][ T6970] RAX: ffffffffffffffda RBX: 00007f2d80425fa0 RCX: 00007f2d8019e019 [ 218.194292][ T6970] RDX: 0000000000000020 RSI: 0000200000000300 RDI: 0000000000000002 [ 218.202309][ T6970] RBP: 00007f2d8023500c R08: 0000000000000000 R09: 0000000000000000 [ 218.210322][ T6970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 218.218327][ T6970] R13: 00007f2d80426038 R14: 00007f2d80425fa0 R15: 00007ffed272b528 [ 218.226390][ T6970] [ 218.270742][ T6974] __nla_validate_parse: 7 callbacks suppressed [ 218.270759][ T6974] netlink: 156 bytes leftover after parsing attributes in process `syz.1.387'.