last executing test programs: 2m42.968558642s ago: executing program 2 (id=4157): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000007c0)=ANY=[@ANYRES8=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) socket$kcm(0xa, 0x2, 0x0) r0 = socket$kcm(0xa, 0x1, 0x106) recvmsg(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000240)=""/69, 0x45}], 0x1}, 0x20) openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000000c0)='devices.deny\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="140000002200356bd25a806f8c6394f96b24", 0x12}], 0x1}, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0x6}, 0x8160, 0xc8, 0xffffffff, 0x0, 0x0, 0x341}, 0x0, 0x7, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) close(r2) recvmsg$unix(r2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) recvmsg$unix(r4, 0x0, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0x12, 0x0, 0x0) close(0x3) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03000000000060007538e486dd630ace2212102f00"], 0xcfa4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="00eaff"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11}, 0x94) sendmsg$sock(r4, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYRES16=r5], 0x48) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, 0xffffffffffffffff, 0x0, 0x6, r6}, 0x38) 2m42.543183097s ago: executing program 2 (id=4159): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000300), 0x0) socket$kcm(0x11, 0x2, 0x300) bpf$ITER_CREATE(0x21, &(0x7f0000000440), 0x8) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000006c0)={r1}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x14, 0x9, 0x3, 0x7fff, 0x400, 0xffffffffffffffff, 0x100000, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x3}, 0x50) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xffb2}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ab92b}, {0x85, 0x0, 0x0, 0x8}, {0x4}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x2000}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x9}, {0x85, 0x0, 0x0, 0x5}}, {0x95, 0x0, 0x0, 0xf000000}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m42.137857519s ago: executing program 2 (id=4162): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={'veth0_to_team\x00', @random="0200ff7fffff"}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1100000004000000fe00", @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ffffffff0200"/28], 0x50) r0 = socket$kcm(0x11, 0x2, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0x10, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000100000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000006a00000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0xe, 0x0, &(0x7f0000000740)="00800000000000000045a9000000", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xf}, 0x50) setsockopt$sock_attach_bpf(r0, 0x107, 0x17, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8913, 0x0) socket$kcm(0xa, 0x1, 0x0) r3 = syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) syz_open_procfs$namespace(r3, 0x0) r4 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, r3, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000aecd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad94ed406f21caf5adcf920569c00cc1199684fa75814709fea019af247c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c1faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6fab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b79db2e3d5986c82b5aa94e539b204d58f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c7160ec83070000020000004015cf10453f6c0b973b4861ea30df81a484ebad04859d928365a7ea3fab8b4b380a00d72b0000000000001cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2cc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78ac02ca3cdf6a662db1c9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad943e392955f4f979ea13201bafedcd2063d11dd665647223c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd89346cfbb5567e54d3504723177d356c4604b7a492ecec37e83efceefd7ca25b3659edc8be05cc85451c6a14507434eb54b6f43caea5c4bf5f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffca9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730af36bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a294351c5356c1d06c92cf8ce3c7c56cd31121624d74517fd3666277f670e812b28e2f30d035cee5d0e77a3c7220000000000000005a474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f034b8d3ebce68663ef5af469abe75b314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041e12282ce24463aaf28345bd168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f09000000000000004fc4bda3453602004535a976eacd3adaa4d2ee6fe0d072ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d401adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb40f7f02f750d6c977a191852c9ae031db044b2353199546609f9f69a6cfefdf879d447df53f3b9b70d10355b00300000000000000553d18a6cc50feeb7bfad9b7be3283b6450d26ce7712d2f1d7004548b19162cef04d18d4f58fab987baab97a9bfbd8f185b5631820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe527340935aa3c0b4f3f45b418a18217747ae442e31560e5b741445ea2a1acee2a81425ff000000d2a0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51423b9f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f88735fce5115dc83ed73d8ee4a91322608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf5000000000000fa08ad0631c4b839688b22c4da2a6bc4cf45854d221a2d5f96bc64647f15daa2ba79cd0f4254ed55217912ef84bd2927df82fc061aef2920c49b2a90886da75561173fa186cb7ee86dd4285c4721eb428c953296bb2f5d825da54dbef07c1b349b4901e093d13e6b9a0000009b5b22e887bc061d40bcaf0aa18623fd9b7179ccc692ba74b531b65c4decf9d080a8ac7e82d4cde1267aa64b2a94fd87a009e6742c2ddc3a9d7eccbb1831b1fa218277c2814a91cab7cb59c697166d6f1bb1a360470000000000000000000000000000000000000000000000000000f9f9b4ce7e871f507084c8c88e0652cecbe579b03ed84ea94597dd1059620a050f69ea03b99b4e19d35f4a3b54e96ae2172effecec80f6baa4bf69a6ebf5392882df78b0983e662dc0cb64b77f3f006b6b25443197ae93f0be6de5a703d003f00720943c0e4b33af00000000000000000021a688b204007fcc4b59f719afb0b3b7e0aee306ca70fe42bf4984a68f40e1fc043a03a17e4744359b87dc27c82d51cbeb64e52a28daeb6a78d6fe06181ecc840000000000000000c87bd5b7cb8c5ae18218963f6d71cfa8b8afb7a4ade932aa3c4701a1c3284cf6b08a4c265dbf4c96cf1ccbcf8f43fd0abf415e581956070f52673a4fa63fb36788bbbcdc0cb1519e8e8fdd9c1463230ce4ccfa63d7069135d9804765a62bd12c2cf388b09c3a0bbd296a4ce6e523145bb6"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200), 0x5}, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = getpid() perf_event_open(&(0x7f0000000240)={0x3, 0x80, 0xa, 0x2, 0x98, 0x3, 0x0, 0xcfc1, 0x80, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x100000000, 0x2}, 0x0, 0x3, 0x21, 0x8, 0xf, 0xe, 0x100, 0x0, 0x4cd}, r6, 0xa, 0xffffffffffffffff, 0xb) r7 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r7, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @remote}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x4048800) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) recvmsg$unix(r8, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r10 = socket$kcm(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(r10, 0x1, 0x41, &(0x7f0000000040)=r9, 0x4) write$cgroup_netprio_ifpriomap(r9, &(0x7f00000001c0)={'veth1', 0x32, 0x31}, 0x8) sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB='8-N:2/2N'], 0x6a) r11 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r11, &(0x7f0000000800)=ANY=[@ANYBLOB="364000001a00913aa4"], 0x82d7) 2m38.897321397s ago: executing program 2 (id=4169): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0xc2ba, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x89fa, &(0x7f0000000900)={'sit0\x00', @random="0000230c1100"}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 2m28.983191736s ago: executing program 2 (id=4196): socket$kcm(0xa, 0x5, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="08000000040000000400000007"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0813", 0x0, 0xe8a2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m28.195471247s ago: executing program 2 (id=4202): socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f7, &(0x7f0000000080)) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1c, 0x6, &(0x7f0000000cc0)=ANY=[@ANYRES8=r0], &(0x7f00000001c0)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x6}, 0x94) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x100000, 0x10000}, 0x28) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r4 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x1a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000280)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000500)=ANY=[@ANYRES32=r2, @ANYRESOCT=r5, @ANYRESHEX=r4, @ANYRES64=r3, @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r4], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=r7, 0x8) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0x58, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r10 = socket$kcm(0x29, 0x2, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123751c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef42d430f6296b72a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed40000000022278d00031e5388ee5c867ddd58211d6ece3ccb0cd2b6d3cffd962867a3a2f624f992daa94a6a556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff020000000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd09000000b91ab219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d8f20a67745409e011f1264d43f153b3d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a00000000740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec51d6fe048ba6866adebab53168770a71ad901ace383e41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafcc5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7000026a4e739c60f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf3f704ec73754910fe050038ec9e47de89298b7bf4d769ccc18eedd9068ca1457870eb30d219e23ccc8e06dddeb61799257ab5000013c86ba99523d61a00000000c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f8b2ad1e1f4933545fc3c741374211663f6b63b1dd044dd0a2768e825972fc4300001467c89fa0f82e8440105051e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b15bc20f49e298727340e87cdefb40e56e9cfad9931b8c552b2c7c503f3d0e7ab0e958adb8629aeec90e6d1857da822e40009995ae166deb9856291a43a6f7eb2e32cefbf463789eaf79b8d4c22be89f44b032dad13007b82e6044f643fc8cd07ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c5e13d52c83ac3fa7c3ae6c08384865b66d2204c2e4f3ae200f279b512b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935ae662082b56cf666e63a759e0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e7133dca1c7669522e8dff8bc570a93fbdb688c3aef810000007a6ea6b11163392a19d87995b51cb6febd5f34a34998d2010fd5facf68c4f84e2f66e27c81a149d7b331983d3b74444953fc1216dfec10b724be3733c26f12538376e177ffef6fd2020000000000000008e4919a463d5332a2546032a3c06b94f168e8fc4bda0c294723fe306f26c477af4b926644672985fab7cc67bc5b5f5d38cdd8df95147ebe1cd88b0a4c6cde9951be10ba7dfddfefb238fac2303cc8982f1e55b005afcfea5eb037248fefad6bb02c162ce92ab17744c8ec3d2e80cf3205d36699fd381bc81231fb5e12e45f3059f361d08d6a6d019ebf105eaf43083c29512bcedd79ca9bf24e063d0c273ed70a2b70be521ea27dc8cf3c9bdf83b93405db07e82e2db484f8673e0e97dd7e8a872148613c3a04f3d67f4375ba5c7f1b00ffffff7f000000000801f71d79d812ced782646b5f79c8fc08bb5c11020108d702edd2ea9c96cf0d2d48aa5fc0a7bf1b51afd85350ad00b78c598fa8701b000884de790b54e5ab2e8ff0c7ae23e0b6eeac95c4c2eef2e5eb1d019d52099fbd404e8ece970f67856ba7e960bd8b1e4105ce7e31f7c9c3e3fa61aaa967b90087e91d703e98535b107b8f4653be4c46a3a1adb07d226952b8573b417018316fa96e2b8e7370baa16d4122c863709b08d4639a19a46ac90ac48a13ee9bcaa875fc700000000000003b40dc5c745fe2491e8425e600000000000000000000000000000000000000000000000000000000000000250318a44ad31baac0520a913301e630ae540f3289aebde8633f6f450c0738e16df6c7f1e0832a2a16fe6e39959735758248032cdf7320c6dc87b01e3f9a7811b200000000ae189de4b9b25f7c7a9c070000002af1c06315270de4a6605e4b4b58bef76fac54f11b84bd7bcd6b6a485edfb7684c770a39b38b08e18a51a4d4e66ca21c06a4b4198e1bc2ef990c9ba911efed626e5ee341a17bf8132b09000000d31df213c802d74797056fd3bca8b2d6cb134437cba0193ba4360bdcc98aad2560aa48291c4eb9d4e08ad7a9c5f04be1ab597124d84dfc7bd8cca8f68154a0ed356e773a797ca6d66748857b4abbf8830abeea2a46342e6a7378173cb29d5cdcd698a0203f78116b710008000000000000007c2d86b94472807c10eb9a8e2fb8bd79fe3a8316deff3ee641c9a080a2173642e673a672279bae4e7e28055da9497d7edb53be6e80482bd4d9a74b8dd4221fff0f0000705d7257ff7f76c78ba0b44ec0bdfa0d32d7042059b13a079639f14f9032b856d892ad6af5124c9c3130485e9682ff1f3c54e475d5bb496aef4bb537d7e191dfdeba109fdcf7864763f87a6d711cf52e520a6ce30e134c55e0caac037209d2f14fcddd00000000000000000000000000000000e609893bdce015e8ccfb36399844db61f6171b0b0e845e48728450c6ba4f7098f8e000676b59ab9f851f3ab77847ce05c89411277ec69c409b7ec50a3337a78675f38a568612c235ab5f2cd6d035d5f5f6a693c381adbbf7b37e37292783b2c7efe7d3a067906552f76d419e0300000000000000000000008f3a20b49fe7636806867283e35cff8d00e7b251bab3cf6377a24f8e8d4bda7503674bc94bf7f4d2fa6f25944bf0a186436d9f6831995976328a1fdc78492c65c1434855dc35c3cf7cf9610c5387794443c99b304799114132362849c3fa85d6379729ff9094933db0cfbe8887c50b87e1469fdf454cef4cbc5f7bf384000000000000a4e8c1a25f47c440144a9776be6cb40aafdb9d3cc8f6a6050974e1c4000000000000008b753f4e1bef9556efcc087a99dbf231167013a4b2eaf6338a0b100c98a331dffc09"], &(0x7f0000000140)='GPL\x00'}, 0x48) r12 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r12, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x20000891) ioctl$sock_kcm_SIOCKCMATTACH(r10, 0x89e0, &(0x7f0000000040)={r12, r11}) sendmsg$kcm(r10, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x10, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000010000000000000001000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000000100000850000008600000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000030000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r13 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000800)={0x0, 0x4b7f, 0x38}, 0xc) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a00000004000000080000000b00000002000000", @ANYRES32, @ANYBLOB="0000000000000000000600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000002340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000002380), 0x80000000, r14}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r14, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000002300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x1}, {}, {}, [@jmp={0x5, 0x1, 0x1, 0xa, 0xa, 0xfffffffffffffff5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x7, 0x1000, &(0x7f0000001cc0)=""/4096, 0x41100, 0xd}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x17, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfff}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000340)='syzkaller\x00', 0x2, 0x1000, &(0x7f0000000d00)=""/4096, 0x41100, 0x2, '\x00', r8, 0x0, r2, 0x8, &(0x7f00000007c0)={0x6, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=[r9, r13, r14, 0xffffffffffffffff], 0x0, 0x10, 0xffff}, 0x94) r15 = bpf$ITER_CREATE(0x21, &(0x7f00000002c0), 0x8) ioctl$TUNSETQUEUE(r15, 0x400454d9, &(0x7f0000000300)={'ip6tnl0\x00', 0x400}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0x6}, 0x8100, 0x2, 0xffffffff, 0x0, 0x0, 0x341}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2m12.457386767s ago: executing program 32 (id=4202): socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f7, &(0x7f0000000080)) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1c, 0x6, &(0x7f0000000cc0)=ANY=[@ANYRES8=r0], &(0x7f00000001c0)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x6}, 0x94) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x100000, 0x10000}, 0x28) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r4 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x1a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000280)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000500)=ANY=[@ANYRES32=r2, @ANYRESOCT=r5, @ANYRESHEX=r4, @ANYRES64=r3, @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r4], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=r7, 0x8) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0x58, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r10 = socket$kcm(0x29, 0x2, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r12 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r12, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x20000891) ioctl$sock_kcm_SIOCKCMATTACH(r10, 0x89e0, &(0x7f0000000040)={r12, r11}) sendmsg$kcm(r10, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x10, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000010000000000000001000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000000100000850000008600000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000030000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r13 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000800)={0x0, 0x4b7f, 0x38}, 0xc) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a00000004000000080000000b00000002000000", @ANYRES32, @ANYBLOB="0000000000000000000600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000002340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000002380), 0x80000000, r14}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r14, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000002300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x1}, {}, {}, [@jmp={0x5, 0x1, 0x1, 0xa, 0xa, 0xfffffffffffffff5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x7, 0x1000, &(0x7f0000001cc0)=""/4096, 0x41100, 0xd}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x17, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfff}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000340)='syzkaller\x00', 0x2, 0x1000, &(0x7f0000000d00)=""/4096, 0x41100, 0x2, '\x00', r8, 0x0, r2, 0x8, &(0x7f00000007c0)={0x6, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=[r9, r13, r14, 0xffffffffffffffff], 0x0, 0x10, 0xffff}, 0x94) r15 = bpf$ITER_CREATE(0x21, &(0x7f00000002c0), 0x8) ioctl$TUNSETQUEUE(r15, 0x400454d9, &(0x7f0000000300)={'ip6tnl0\x00', 0x400}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0x6}, 0x8100, 0x2, 0xffffffff, 0x0, 0x0, 0x341}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 8.559025907s ago: executing program 5 (id=4868): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000008000008500000083000000bf090000000000005509010000000000950000000000000018110000d207b2aeb7c0bb899eed549e2c25a837ca681c08c8523146fc1b0a39bfad500a16b57b95a66b63c56cef34a8b1a2fbcb52ca12cadbc337125d2bc86327", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000000000085000000860000008500000023000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x7, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xe80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x5, 0x84) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2) setsockopt$sock_attach_bpf(r1, 0x84, 0x76, &(0x7f0000000000)=r2, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000140)=0x5) r3 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs$namespace(r3, &(0x7f0000000400)='ns/user\x00') perf_event_open(0x0, 0x0, 0x10000000000009, r2, 0x3) socket$kcm(0x2, 0x922000000001, 0x106) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{}, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) write$cgroup_subtree(r7, &(0x7f0000000440)=ANY=[], 0xffbf) ioctl$TUNGETDEVNETNS(r7, 0x54e3, 0x0) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x60, &(0x7f0000000000)=[{&(0x7f0000000140)="d80000001c0081044e81f782db44b9040a1d08020a000000401296a1180002600000010000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r8 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1000001e0a000b02d25a806f8c6394f9101a04000a7401", 0x17}], 0x1}, 0x0) write$cgroup_subtree(r8, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000430033d407277bac878b4ab50a", @ANYRES32, @ANYRES8=r8], 0xfe33) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r9 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r9, &(0x7f0000000240)={0x0, 0xf0ffffff, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00123d0001400a0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 5.829785208s ago: executing program 1 (id=4872): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'nicvf0\x00', 0x400}) ioctl$TUNSETTXFILTER(r1, 0x401054d5, &(0x7f00000002c0)=ANY=[]) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000200)={'batadv_slave_0\x00', 0x200}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000100000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000700)=ANY=[@ANYRESDEC=r0, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="5c00000014006b", 0x7}, {&(0x7f00000017c0)="00000000ffffffff1f01a0c9a1171aa56a7f9138a6c073e99f8f2ffed6bd642c1238663e9e5189a46cb56c776afa8ec3d4d4d9c0648fc18bad3a6b5656235d60cb5af5c5a69e10ed9fd4ea", 0x4b}, {&(0x7f0000001840)="9a9245a259250adbc6e2", 0xa}], 0x3, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, 0x80, 0x0, 0x0, 0x0, 0x18, 0x68000000}, 0x0) r5 = socket$kcm(0xa, 0x5, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000004680)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x4, 0x1076, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) setsockopt$sock_attach_bpf(r5, 0x29, 0x3b, &(0x7f0000000100)=r6, 0x120) sendmsg$kcm(r5, &(0x7f0000002dc0)={&(0x7f0000001580)=@l2tp6={0xa, 0x0, 0x0, @remote, 0x3, 0x5c4}, 0x80, &(0x7f00000029c0)=[{&(0x7f0000001480)="89", 0x1}], 0x1}, 0xc9) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r7) r8 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r3, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x8, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xef, &(0x7f00000001c0)=[{}], 0x8, 0x10, &(0x7f0000000200), &(0x7f0000000280), 0x8, 0x9b, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000680)={@ifindex=r9, 0x1e, 0x0, 0x6, &(0x7f00000004c0)=[0x0], 0x1, 0x0, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001300)=ANY=[@ANYRES32=r8, @ANYRES32=r3, @ANYBLOB="1b0000000800000000000000", @ANYRES32=r7, @ANYBLOB="adc0614b25be7ad2287ed26f2abb81db2b636004ffa4d37c9ba3101dbff41cfd2500"/47, @ANYRES64=r10], 0x20) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 5.727117361s ago: executing program 5 (id=4874): bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000140)=@bpf_tracing={0x1a, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x8000f475, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) syz_clone(0xc920000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x20000}, 0x0, 0x0, 0x0, 0x6, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xc618, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_clone(0x21000000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x6, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) perf_event_open(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f91424fc60040011000a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x80000004001fe) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0xffffffff, 0x0, 0xb}, {0x10000002, 0x5, 0x4, 0x2}]}, 0x94) close(0x3) r4 = socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg$unix(r5, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r4, 0x84, 0x64, &(0x7f0000000000)=r7, 0x10) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000140)=[{&(0x7f00000005c0)="df", 0x1}], 0x1}, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000300)="af450ca2baac606c45c2b080c4a3532ac003b8b803d6ca4457778156bb6eba390da525b4cc8d4b9d390c8fbb7d273d96bc510153132aba08ac3094ae728dabd9404a38916512727411a52be7ebd24946fb99e5c7d39a9948b4062f", 0x5b}, {&(0x7f00000017c0)="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", 0x1000}, {&(0x7f0000000740)="c9d15fd9097460e907b8bd3cb6126b97ac333b4e892aa169c962e6684e8815bc8ed6ffc24213734ba3c16e2ec2148de498ddcb250a59b26b6e87205b55d5ea2659c1eb7fc4acf409fc61d5326e4e17c8ade8bc3bf0ef2babd6cbd61fa0ae61bd746b23a545c700f6d8628d15abdb4dd99d5a5ac0b3cbdd6e61c2832e1e6cd4e1602a090e5d5d01643842fdccca618e207edd5b32fd6a7b1fb14aca8bbf0a98d7e396d13ed95a971d6c7ddc741c0992f372c353", 0xb3}, {&(0x7f0000000440)="c4489201000080000000005a1539b92521c4346538df53bbbee81b39e5529ea2ae188bdf0e97", 0x26}], 0x4, 0x0, 0x0, 0x1f00c00e}, 0x48000) recvmsg$kcm(r3, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000008c0)=""/261, 0x105}, {0x0}], 0x2}, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="1800000015006b05c84e21000af32c6e021875f8020000004000018000", 0x1d}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r8 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r8, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r8, &(0x7f0000001780)={&(0x7f00000003c0)=@caif, 0x80, 0x0}, 0x0) 5.66212891s ago: executing program 3 (id=4875): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2800000002000000, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x500, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x8, 0x5, 0x5, 0x4, 0x0, 0x0, 0xc2dfc, 0x9, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7, 0x1, @perf_config_ext={0x6, 0x10}, 0x2, 0x40000000000008, 0x6, 0x7, 0x81, 0x24, 0x3, 0x0, 0xfffffffd, 0x0, 0x400000000002}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000080)) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e7", 0x0, 0x0, 0x0}, 0x38) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa35f086dd"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce"], 0xcfa4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6349363006"], 0xfdef) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2b7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x28, 0x5, 0x0) setsockopt$sock_attach_bpf(r3, 0x28, 0x8, 0x0, 0x44) ioctl$TUNSETCARRIER(r2, 0x400454e2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r4) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SIOCSIFHWADDR(r4, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) socketpair(0x1, 0x3, 0xdb57, &(0x7f00000022c0)) sendmsg$tipc(r4, &(0x7f0000002280)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x2, {0x2, 0x4, 0x3}}, 0x10, &(0x7f0000002200)=[{&(0x7f0000000080)="c77c952d09c4ab1fd83ad25bcdbc3694448efa7e8945b6b5f8c52cb42c0d857bedb6cdf14bcea6f8e7f25c817cd89ee16f9a690be7e0485ee5d539c918944ee6c8ce67f129b2da03ef8c69a4555d551d76b658285a55bd1f6e77eabe3acf00b193464f3c765c491c7c01160d", 0x6c}, {&(0x7f0000000140)="18b81608c8bfc83b3e176431e7076b673927b147f7c3942353a6eb4b88904e7780bb605795be09b273b0d91f", 0x2c}, {&(0x7f0000000180)="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", 0x1000}, {&(0x7f0000001180)="e6818655274f48dd1217e27ec784e831f58b8acbeff7b07b271514bdf961944fe4be7aa4bd067a5c2a1fd98778ce0d18b2f1e3d5453611fe6f86bee5816093889193127f7f6e53ea64c810e2deb0b2c74ff43ff58449434b83ad62d9ca12203cf588e6bddffb5089c33fe609a475a272349705fc42592e87", 0x78}, {&(0x7f0000001200)="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", 0x1000}], 0x5, 0x0, 0x0, 0xa1}, 0x40080) 4.913224077s ago: executing program 1 (id=4877): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x73) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) socket$kcm(0x11, 0x200000000000002, 0x300) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x6, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffb, 0x81}, 0x100c, 0x0, 0x0, 0x6, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}, 0x189e0, 0xfffffffffffffffc, 0x80000002, 0x2, 0x3cd, 0x7, 0x7, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0xb) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000200), 0x6e, &(0x7f0000000080)=[{&(0x7f0000000340)=""/69, 0x45}, {&(0x7f00000003c0)=""/127, 0x7f}, {&(0x7f0000000540)=""/197, 0xc5}, {&(0x7f0000000640)=""/90, 0x5a}], 0x4, &(0x7f0000000280)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}], 0x20}, 0x40022122) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = socket$kcm(0x1e, 0x4, 0x0) sendmsg$kcm(r4, &(0x7f00000001c0)={&(0x7f00000000c0)=@tipc=@name={0x1e, 0x2, 0x3, {{0x41}, 0x5}}, 0x80, 0x0, 0x0, &(0x7f0000000940)=ANY=[@ANYRES64, @ANYRESDEC, @ANYRESOCT=r3, @ANYRESHEX=r3, @ANYRES16=r2, @ANYRES16, @ANYRES64=r2], 0x1458}, 0x48800) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x0) 4.561151342s ago: executing program 5 (id=4879): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x8000000000000000}, 0x8210, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000d00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0xb) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={0x0, r0}, 0x18) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) ioctl$SIOCSIFHWADDR(r1, 0x8b04, &(0x7f0000000080)={'wlan1\x00', @broadcast}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x43, 0x0, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB], 0x10b8}, 0x20044010) (async) close(r2) (async) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="5c00000014006b04000000d86e6c1d0002887ea6ea65670000000000000090f9c3dc90f8f41f8ecff32c6e020075e300250045586c8da718ad4b4460bc24eab55600000000000000bf9367b4fa51f60a64c9f4d4938037e786a6d0bd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={0x1, 0x58, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$inet(r2, &(0x7f0000000440)={&(0x7f0000000000)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000040)="b91de2c68285645e89ac2ac3ef01004c0619e3eb3db045a7d8f96f377911796f264d043c0e6323182201ec", 0x2b}, {&(0x7f0000000180)="f4fd9ba138349231aa73955a3640366076b291d3e78a72f668a5e997e4b99c48739d9569920c75b2f09e2ab0413024b3181e498f7022a109821efa0c4420875ee9216694bcbb5bb1f59b044d2ef13d2a1967d443c4c61cc1c63cbe03181d760f2734cb50ec9053850c2b40f32c5bff6cf7f223bf9143c141cacba32fe2cd567e150b22300eadfbf3252aaa9e7cbfdbdfc5f1e873a58bc24f5e30cc5973103d6030970c0c990fac23417de98be6032d0486c1fb69c96a254b628dc30b111bde377ac06c472b6e48f97b6230936577d3cfe7bd78e6bdab5caaf2238320340c81745717e64d2549", 0xe6}, {&(0x7f0000000080)="313839865c5cc2b460d8c8868516a2cff49f373a8f1818b375198aeeff3345fa4eaa7523652e0dc41608a55e77cf566fcc4d97f5d02abb529ca7e8c4e9d7dfd36f9a8106faabf3810f047cf933d9f8b7b142df6f790274d744e3451a0dd35f38efb2a12fda991775abefe241153b318afe838d259c5a16af7a9fb0fab30a60a5eeecf2261ae79b9d01a181c17044d174ab4cfb39c7700a219c51ca2b4302679ebd2ad33082406bcf55d73c258191879658dafbd67fa1799e9834a1", 0xbb}, {&(0x7f0000000280)="c7c48c85047f7403a963d435a30a4268af071fca995ab593bb00b2f4daa8f7fda0fe00ac3860e030135ccbd641918a3cd1df6ac7bf0eb0a7463606e5597406d5a33e283e188ac76e59faf9ae3a35a0f36f8bfeb02d20cc157a903f797b17a5aac18881325b1488a18304b74863987f4f08bf71c73886736998432413e8eee4dfbf6f8f63a271dc787de70bba8aae476e3c3e5c1cc445f5fcab3f8729e86837e31fa090aa", 0xa4}], 0x4, &(0x7f0000000580)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x28}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_retopts={{0x18, 0x0, 0x7, {[@end, @noop, @end, @end, @end]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x80000001}}, @ip_retopts={{0x20, 0x0, 0x7, {[@noop, @generic={0x7, 0xe, "873b6caa72058f85d1acc263"}, @end]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @broadcast, @multicast2}}}, @ip_retopts={{0x48, 0x0, 0x7, {[@lsrr={0x83, 0x2b, 0xbd, [@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @broadcast, @multicast2, @rand_addr=0x64010102, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @private=0xa010101]}, @timestamp_prespec={0x44, 0x4, 0x6b}, @ssrr={0x89, 0x7, 0xb2, [@multicast2]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}], 0x118}, 0x8000) 4.431157309s ago: executing program 4 (id=4880): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xaa}, 0x94) socketpair(0x1d, 0x803, 0x1, &(0x7f0000000040)) 3.702722852s ago: executing program 1 (id=4881): openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1, 0x4, 0xdc, 0xa}, 0x50) r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000680)={&(0x7f00000004c0)=@l2tp6={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000400)='P', 0x1}], 0x1, &(0x7f0000000b00)=[{0x10, 0x10d}, {0x10, 0x84, 0x7}], 0x20}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70480"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r2}, 0x10) socket$kcm(0x11, 0x3, 0x0) 3.702305962s ago: executing program 3 (id=4882): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, 0x0, 0x0) r1 = socket$kcm(0x10, 0x400000002, 0x0) socket$kcm(0x2, 0x200000000000006, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x400000000000}, 0x0, 0x11, 0x0, 0x0, 0x20f60, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socket$kcm(0xa, 0x2, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffd, 0x81}, 0x100c, 0x7, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sched_cls}, 0x48) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x5452, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{}, &(0x7f0000000480), &(0x7f0000000180)='%+9llu \x00', 0x2}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x3000080, 0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000940)="1c5717854a9932652c2cab82b82e630fa80c87b515bf867880f2d68f455e3802a2f78c3a5be94653f5dfacb84447560256788a2187d6967f52a9d4d62b045064") r3 = syz_clone(0x1000000, &(0x7f0000000780), 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, r3, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x8, r2, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, 0x0) r4 = socket$kcm(0x25, 0x5, 0x0) sendmsg$kcm(r4, &(0x7f0000000680)={&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x80, 0x0}, 0x0) write$cgroup_subtree(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000c00)=[{0x0}, {&(0x7f0000004700)=""/4130, 0x1022}, {&(0x7f0000000dc0)=""/4126, 0x101e}, {&(0x7f00000002c0)=""/204, 0xcc}, {&(0x7f0000000740)=""/183, 0xb7}, {&(0x7f0000000cc0)=""/241, 0xf1}], 0x6}, 0x40002120) 3.701317712s ago: executing program 5 (id=4884): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffa}, 0x8, 0xc8, 0x9, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1200000000}, 0x0, 0x4, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8912, &(0x7f00000002c0)={'bridge_slave_0\x00', @random="bc1a091f2845"}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) socket$kcm(0x11, 0x3, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f90235fc6004971100", 0x18}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r1, &(0x7f0000000040)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0xd0, &(0x7f0000000080), 0x1}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4, 0x86e46, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x9}, 0x40c0, 0x8, 0x8000001, 0x5, 0x0, 0xffff0000, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x24, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xd, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbf"], 0x0, 0x6, 0xfffffffffffffcc7, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x20, &(0x7f0000000580)=ANY=[@ANYBLOB="f36ce9d64518000000181100000000000000000040000000008f39c35848ca003efd2b750dab5d45c024becbdbac6d33ae9e15c952a893b0bda2de4cdd0613c79030bd9049ab4754516abc3f3e31c40831daaae674979a1bc5249f2d2dde5a960f6a1b4796031abfbd949b3169e5472f6b9f13a756733b93fe3d6835bc73e7563d72b30bf8b10ffa91842cb6b76c9b55cf0556a20422d227636995843cfb57f8b2c9da958d45b22355138d0e27e772d91d1b3146a61c21d13f1d95477558b87f8fe94d", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000820000001856000004000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000d4260100ffffffff852000000500000018000000fbffffff00000000000200000b94fcff00000e00184b0000fcffffff0000000000000000851000000300000085100000fbffffff9500000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000, 0x45, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000300)={0x4, 0x10, 0x6, 0xfffffffa}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000004900)={0xffffffffffffffff, 0x58, &(0x7f0000004880)}, 0x10) 3.700671203s ago: executing program 1 (id=4885): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) r2 = socket$kcm(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=[@rights={{0x10}}, @rights={{0x10}}], 0x20}, 0x0) setsockopt$sock_attach_bpf(r3, 0x6, 0xd, &(0x7f0000000000), 0x4) sendmsg$inet(r2, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x20000014) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) 3.700306913s ago: executing program 4 (id=4886): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x10b44b, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xd, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0xa, 0x5, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000), 0x8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)=ANY=[], 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[], 0x50) close(r3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNGETVNETLE(r4, 0x8010743f, &(0x7f0000000180)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x0, 0x37, 0x0, 0x0, 0x1}, 0x28) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89a0, &(0x7f0000000080)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89a2, &(0x7f0000000080)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8914, &(0x7f0000000080)) setsockopt$sock_attach_bpf(r2, 0x0, 0x18, 0x0, 0x0) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r8, 0xc004743e, 0x110c230000) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x8910, &(0x7f0000000080)) ioctl$TUNSETOFFLOAD(r8, 0x40047440, 0xf0ff1f00000000) r10 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x400600, 0x0) ioctl$TUNSETOFFLOAD(r10, 0x400454d0, 0x4) 3.700080953s ago: executing program 0 (id=4887): r0 = socket$kcm(0x21, 0x2, 0x2) socketpair(0x25, 0x2, 0x4, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = perf_event_open$cgroup(&(0x7f0000000300)={0x3, 0x80, 0x7, 0xe, 0x9, 0x0, 0x0, 0x0, 0x2000, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xe, 0x4, @perf_config_ext={0x2, 0x5}, 0x8000, 0xd8ec, 0x260, 0x6, 0x401, 0x8, 0x5b, 0x0, 0x1, 0x0, 0xffff}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x0, 0x1000000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xfffffffffffffffd, r1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x1f, 0x13, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000012c0)=@base={0x12, 0x3b6, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x800000}, 0x50) r4 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000100)='rdma.max\x00', 0x2, 0x0) write$cgroup_int(r4, &(0x7f00000002c0)=0x5, 0x12) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x2c, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x11b, 0x2, &(0x7f0000000900), 0x4) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000035000b40d25a", 0xa}], 0x1}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r3}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r2}, 0x20) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r3, &(0x7f0000000040)}, 0x20) r7 = socket$kcm(0x2b, 0x1, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'vlan0\x00', 0x400}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000240)={[{0x2b, 'cpu'}, {0x2d, 'blkio'}, {0x2d, 'net'}, {0x2b, 'io'}, {0x2b, 'freezer'}, {0x6, 'cpuacct'}, {0x2d, 'rdma'}, {0x2b, 'pids'}]}, 0x33) sendmsg$inet(r7, &(0x7f00000009c0)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20040818) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e21, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x20044010) close(r0) 3.612395224s ago: executing program 0 (id=4888): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a7401", 0x17}], 0x1}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d487277b9b108b4ab502", @ANYRES32, @ANYRES8=r0], 0xfe33) sendmsg(r0, &(0x7f0000000700)={&(0x7f00000000c0)=@nfc={0x27, 0x0, 0x1, 0x6}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000140)="6dc95d56fca675d1adbeebcf91a223d9942c91553274f476a334f1acf757fb4fb38cd63c6b38cb6dd129bb01bb33a1e76d1507c218e44af9c1f2d57cbc68aa44a2fd1feff4e9188cd323edab11ae40d735afe91619de5a7395c202eda64550afb515102b", 0x64}, {&(0x7f00000001c0)="ad9550ac8b0f62dabfc2cf2787ade25d475ae58c890322686ca359fc503f8a8a2c051dab3f08d49671509b64da06fa33cda4c23632ba13075c207d16b30b9319f06e3ff0a79725e5682a82493c97ae2f4bf8fd56fea355706da02596e0d233f0a2d1b6c9db6c745acc51128ed56f96d9c6baae004c0482111cbf2d2a5d37b89d8282cf3b3c7f1e4345530afc414ee6768c432a70a716e88630f0a8e0f98dd760d29af87c34c0e09f8859dd2ef8f7b94a9ef40e8b89623334a1db326cc921554ccaaffa7674710c0a0c4d1c75523316fd671c06fbc4eb15866e94d4da24cdcc62d92f9a84c94305e4e19283fa941b47a6", 0xf0}, {&(0x7f00000002c0)="feceaf4111f20f1c2c1c575ae0ae0ca4486d6f0d1a982d95ec3792ef9924150c28f3918fe60e717eb97ee066c09a4f27d1bf5c4bd229e48757bcd98e501d59e20f0a8c537731060b7732d284e017e577ed366a694f99ed5f652c199285119e0b212f57071e6f8d", 0x67}, {&(0x7f0000000340)="9abd21942a537f03aa8501a18511ded3694bdd36acb2a680557addb5f0eb7ffa4122659a0a2687dfd6e48eb259219961bc6a8aa6799971e908bda2ee690627f22febf329c6472e98eb3fdc7d736d2f086a45d88ef7ad137c5b4bfa3f8efb30469b0fae1307b6f04713d26ec1608df0327e135dddeaa7b8d8dd31d5937d6fb39f50f3c99e06ec3d734f8967b3437c8569ef8389e78befce78b4ce6951aaefd9f73b9118531f3a368f71d21ba61fa1715e904bd184e3fd5140c46b5dcd2504d257705e5d6b4ed10ee327337754247841d263", 0xd1}, {&(0x7f0000000440)="8d24a38d28078f752603764ba5f11a2441468e20b9cc2aade1ef2190112cf776d9e764947cba1805aefe8b9a01093f1b614a96319231c7e13eb517c8b4f8047b7ab6dd822513f1a4fa81611d5df477e35358f2af55ebec2e5155c686f475ef095c405941f2dd41af306fd4a5f4d65af8e56940080fed25cc70b243bfa05f36ec271c", 0x82}, {&(0x7f0000000500)}], 0x6, &(0x7f00000005c0)=[{0xd0, 0x3a, 0x0, "887ff0b6184b521cd09fdd75d569c20803f4ca24ef2eee8aeb28ea1b95e0ac25e337f72176289d7ab10285c6800cc87793535bd6b9585c23751240505524e008238e595356c22fd9e7d0b085300c61aac499c3a574f6d88b6a93b4dd16817f5a71c24dcf78abea9b56056d6dc57a714995f9f8aea10c28fe9c0e9ec5058e1c11ede7920ce822f8219892924c516a8c3f153d62cabf39ca0e0c78ebf1db031b2255d4a29753459a9a361d899b2e55278a3e27c17940385ff833f82f749253a24b"}, {0x50, 0x10f, 0x3, "abae11d1c663627f02cd1df239c987980ad58cd5804a77c3ab41762e0e959cee387ae7f903079997102d5cb35c8c84de7dc1f4603fa71fef57ee"}], 0x120}, 0x4001005) socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a7401", 0x17}], 0x1}, 0x0) (async) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d487277b9b108b4ab502", @ANYRES32, @ANYRES8=r0], 0xfe33) (async) sendmsg(r0, &(0x7f0000000700)={&(0x7f00000000c0)=@nfc={0x27, 0x0, 0x1, 0x6}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000140)="6dc95d56fca675d1adbeebcf91a223d9942c91553274f476a334f1acf757fb4fb38cd63c6b38cb6dd129bb01bb33a1e76d1507c218e44af9c1f2d57cbc68aa44a2fd1feff4e9188cd323edab11ae40d735afe91619de5a7395c202eda64550afb515102b", 0x64}, {&(0x7f00000001c0)="ad9550ac8b0f62dabfc2cf2787ade25d475ae58c890322686ca359fc503f8a8a2c051dab3f08d49671509b64da06fa33cda4c23632ba13075c207d16b30b9319f06e3ff0a79725e5682a82493c97ae2f4bf8fd56fea355706da02596e0d233f0a2d1b6c9db6c745acc51128ed56f96d9c6baae004c0482111cbf2d2a5d37b89d8282cf3b3c7f1e4345530afc414ee6768c432a70a716e88630f0a8e0f98dd760d29af87c34c0e09f8859dd2ef8f7b94a9ef40e8b89623334a1db326cc921554ccaaffa7674710c0a0c4d1c75523316fd671c06fbc4eb15866e94d4da24cdcc62d92f9a84c94305e4e19283fa941b47a6", 0xf0}, {&(0x7f00000002c0)="feceaf4111f20f1c2c1c575ae0ae0ca4486d6f0d1a982d95ec3792ef9924150c28f3918fe60e717eb97ee066c09a4f27d1bf5c4bd229e48757bcd98e501d59e20f0a8c537731060b7732d284e017e577ed366a694f99ed5f652c199285119e0b212f57071e6f8d", 0x67}, {&(0x7f0000000340)="9abd21942a537f03aa8501a18511ded3694bdd36acb2a680557addb5f0eb7ffa4122659a0a2687dfd6e48eb259219961bc6a8aa6799971e908bda2ee690627f22febf329c6472e98eb3fdc7d736d2f086a45d88ef7ad137c5b4bfa3f8efb30469b0fae1307b6f04713d26ec1608df0327e135dddeaa7b8d8dd31d5937d6fb39f50f3c99e06ec3d734f8967b3437c8569ef8389e78befce78b4ce6951aaefd9f73b9118531f3a368f71d21ba61fa1715e904bd184e3fd5140c46b5dcd2504d257705e5d6b4ed10ee327337754247841d263", 0xd1}, {&(0x7f0000000440)="8d24a38d28078f752603764ba5f11a2441468e20b9cc2aade1ef2190112cf776d9e764947cba1805aefe8b9a01093f1b614a96319231c7e13eb517c8b4f8047b7ab6dd822513f1a4fa81611d5df477e35358f2af55ebec2e5155c686f475ef095c405941f2dd41af306fd4a5f4d65af8e56940080fed25cc70b243bfa05f36ec271c", 0x82}, {&(0x7f0000000500)}], 0x6, &(0x7f00000005c0)=[{0xd0, 0x3a, 0x0, "887ff0b6184b521cd09fdd75d569c20803f4ca24ef2eee8aeb28ea1b95e0ac25e337f72176289d7ab10285c6800cc87793535bd6b9585c23751240505524e008238e595356c22fd9e7d0b085300c61aac499c3a574f6d88b6a93b4dd16817f5a71c24dcf78abea9b56056d6dc57a714995f9f8aea10c28fe9c0e9ec5058e1c11ede7920ce822f8219892924c516a8c3f153d62cabf39ca0e0c78ebf1db031b2255d4a29753459a9a361d899b2e55278a3e27c17940385ff833f82f749253a24b"}, {0x50, 0x10f, 0x3, "abae11d1c663627f02cd1df239c987980ad58cd5804a77c3ab41762e0e959cee387ae7f903079997102d5cb35c8c84de7dc1f4603fa71fef57ee"}], 0x120}, 0x4001005) (async) 1.189863567s ago: executing program 5 (id=4889): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x11, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0xe, 0x0, &(0x7f00000003c0)="e0b9547e9f17dbe9abc89b6e0704", 0x0, 0x2002f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = getpid() sendmsg$inet(0xffffffffffffffff, 0x0, 0x3000c085) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) perf_event_open(0x0, r2, 0x8, 0xffffffffffffffff, 0x3) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x13, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61128c030000000061138c8800000000bf30000000000000150000000009240b2d03010000000000950000a7000000006916700000000000bf67000000000000b5070000fcff0304670600001f000000370300000ef90060bf050000000000007e650000000000006507f9ff01000000470700004c0000005f75000000000000bf54000000000000070400000400f9fead4301000000000095000000000000000500000000000000950000000000000032ed3c5be9529914953170d2d7ffffff8ecf264e9981db7d04df3244c7bd7e7e7f2f1754558f2278af6d71c19a5e12814cb1d8a5d4601d15871637b65f8903dc8700a0b9bdb7dd399700d6c4f6f3be4b369289aa6812b8e007e733a9a4f16d0a3e1282ee45a010fb94fc9de56c9d8a814261bd81762bab839dfa66810b5b40d893ea8fe0185473d51b546c087431d770000000767c955cfa1f6ab689fde4de5f832c8b664e73b99b6c2e0ab330e1c7feada70600000000000000b7010001000000009af619e3cca4d19e0dee5eb106774a8f3e6916df85aaf34c4756ad3a6d9fee0000000000000000c8fb735fd552bdc206004aeb0743eb3dc819b6cf5c8a0700000000000000a13d0045fb3cdaffa673a6bb55d8c85f21dce44aba5387e35350481aedac065b5031e56723888fb126a163f16fb2ad9bc1172bec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67a993716dbf580469f11294b4800a045ea11b3566bf3a649878e582f2af97787f696649a462e7ee4bcf89cbf2f0800000000000000b2c4acb07a10d6732f54beb40000040000000000000000000000000200f674629709e7e78f4ddc211bc304f0bd9d42ca019dd5d022cf74686e9fbe2562671cd47840a7afaab43176e65ec1118d46e4e827f3477523dcfa17690884f8d2001e03a651bb96589a7eab010e861bbd0000000000000000c5904c647802cf86f1b4c3005f33d83f84e98a72fbbecd106425563d80bd0d0d703f37ca153f601ae899a53f6715a0080034b0c94cce69945205480a55c22fe394ac000000000000000000040000000000437d57defb79ea6a58b83eeed729a2f95e6a1fc3857fb51b324be00000000000000090867f7a3b9bc43717188cb8426286fc55fc57cc3c6de4aa67babf350709e282a4f2bf59f46e20465eae865dbfd533b1cb2d540d0490cd5248715c74b6bd0248a9a0b413bbdfb5351defc6e34a961f3593920411e112c9df23a29c072d3460eb37beb5bbc04600c64acad9a04ffe62875177b51d2f0c6d7194c26789d2bec2d0846831455b8fcd03beaeca2c1335d8a49a92f9d2bef5f485c4fff4cf710b7d00000000000000009d47d564a838bdf8901a719431a9b0ef918ec0ec79037cb61df16379e3bf2a8100000007e8512e21080315e62559e8dd67dae85177d899d9e078f80585837f0e943b8820b19c75d243a78d8c2093c59cbc4c55f1578cff737502ea2d8d0b9dc946dcb38692dcc8db84834cc7726429cb20603b5338184f9856eeaec437fc3446b6c5ffe5db28aa802e37d3c4f259d616307d8aa46ca094049c0ddc1caaed5485b4ff030000182620bcba2316f9e6df0c8647f6ff0000000000000000386096e4a4ff86042f0b42027ff933d2dfe2d5baffacc9dc2411302a185ea454af5839be28b7d040c1fe1ce0fd63fa7f32b8ab6cd6a8b8bf1b693e4ffeca635d84c376b03a58677dd9f8c2a6fa126c7dad3f9e939c92d63ab1cf2fbea26a60b951914aba5c0696cc64e66b9b0f2c4444f8c391c0d9b647a3be4885a055ce3879a91fb62ca97e6526286c14c80b6dc981c5ae6ebf0778ea01a3a44e01ab79bcddbb83266a1ce1a1dea83ebb89d07b4d05aa09ad2904040e7784e96cd66b04204d47b1c66d5a84e7c3de1d1062fd8a23d1b402003c177e76dbca599691164ade323ad4a17abe99975cba748bc2379eed5a83dc94947eb18976db6ca6d35bfb65a3d8b5129d5263b66dbae6c2baa9bbec017646569fa99537aa453f3e6b2acebeddb6c32a87455f351efcd8385100f33d6b0c3195e229bd30260941825ba884d7db07e1212033409e62d7154cc68a7ee910e393470cdb781817f85373a647fd1b626035b666f224a66c0e47e15c6b836b324318507501a0f4b2cc9153167fd839a483615cbc2ad1a7d1528f01bf91b950a9bcd7d06491e1a355e476365f653d2d94ba898ab8d64d70bdb364ef3adb5ba1e4d9d5002da76ccec5d5184e912aaf5a945ae062e670fafb8cf0afee51c851546bb38c5ef303000000000000002ecdc2b82059750f019a418e3e8d20b6bf768a7db1f8472713452553149a4634418de7eda7b2e682271c6e62f5dfaabba46560dfa410e1f334a5f60791b275368469ddc42f7712bff1689f2ffbf5268cc0572e23afd4c402b154ae94c1f65d7d4a79272945287c79b4b70183d2cde66c7225106a064a1800d777372b2b43326821d5c1c78fda699c7484f3e5fc8bbce6fb3039569646b0de22c431d90c12d48e314d8a5ef4db14a110da070000002c4f7bd7f36f814ed92197fe3eb0843c2681c609231825b8a27ba301142cec8a6fd85965f83ff4dd40296e5fb5678d93d0daee45c43bdb9bde9c1d1c988b909fdf78cfda5da3dc28792b10fb8f3f22ece745c074f86f471489337a9a8d9ad7f310aa50c983b490f561bc420289b6aa0fc3f43f8a4548aa9c723ce466287760f919afbb94b0410ff06071de3aa1c199f407347af666713096a422fbc70671ac08f9256ab0079c101a724136352af2895899effda7bcd127ba98521eb4b04b2a821935ee3b216190e21fb059f9519c4804283d2ce09977842ff7309ad2c4d8f0420dfc8cdb1b37ad52985a88ca4cdc1e37715362a59f7c9c7df793d69f974399859e622ec3a1bab735a1aa489fe50619fe399eddaf92f67755cb54824685444a58731ee166ae65412709b853a5df7ce44220fc188c00291843d66e69da3744f39f5f6113fbe390b22cdbefb90ca2a51b1ff21f384e7bf076825aadaf02da77eeefb8875d630b7575e661b90eb6cd98674c92f179b2675b1f6c86712846ddae87bb3a3887b56292356270e85888c25a1c8ae958906ef6b71e1b800107da1c5608fe05d2f4265a5300000000000000007c737c911c049ae7dc9d77edecaf9685c53ac264e9f02ffcf0318af80c99ea2020b1e1f47cfdd6097c49b5f4bb92bb9133df719f35d4bf730784f1caa8e4e16f4eeb535c059a700d57e4d6c83c4a35a6ef44f135657d3d41856235253326d937125b6f23af7eb95bac231b84c6935a3a6d24d18f7e379db2fd5e76d5ad0d5b4a6c155e8759eb0e7b39ef433861158bd496ecafb3d1c50294e43d5895df1a2de536f5d85e0a000049277bc09533ceead6812fdfb5ef59b15069ea0df6a3eee0484c848fe4e6e7461ffc3917e4e07d250d9459ebea5fd4e26fc04eb38e70597fcb693cb2f7506f5f50b9f73a25bb83b6c71240e5d725ff567d9745a3ba5462524648a93360fb2b9feb1401e30996e1e7d14bb8db59880cde130af0a6a0e6152a6e3a8a684cabf379d4aa33c896bca694ce0180000000000000041caca10fe3ce74f1b8156d8155a4e11d2f35674dff1aa5e749deffffffffb946192820d223f4f0a1a7a2be83872662477884d65af42bcac801d0c667fba32e16ead8f076eed944d5998bca285c25349c6f26485902316c156eee9dcaa64f8a889abb1a890b23c7de6b2b0a6128545efc3ee8e60ea8eafa617ec3f0bfb1e23c4f75bc2a649a886bf4d5378c58259fddea066f1d70df9633af91752bf41a0d4d0929c34472a6f7110de1420800000000000000ca07ba65ce67dd46909ed693d71a5de47fe26a4eb2f4d514029b11f3f0c3ccb2403db497a55d23c25003ba864cdaf6e732f74e11d1a58e89f60267e60d79f467b181d636c9300420b30760bf861195eeb74275e9c4ed71f0e9fda02bdbf8aaa3e23a6d22dd423541b6acdd386a686bc8b128f724567d4c4908391b979a1c7102f5be7ed9db7a36ecfc3b9e0ab0eedde34700000000bec5fbefb008005888ce01eb816f2873e4c59facc7be45b2ab04b1456da413e3f7cf345d6fed0bff0800f8c3018bd0ea78ed54c8b684c797390bf5cad492bff0d97e553e42aba229446354cb4f5825915eccc911e7deee66873c20ffd06e63c27b8a12d757210a43870a0ef4ba3bad01c492d792c1535aeff946f3415912b5abbff35d1cd17c842175357a4bc758b4a943e06a7569fa1e1e4e017e43e8e47914d1000000000000000000000000000cd6b36d72dbc0d8000000c95d5ccace09e52960dbdf13b62f586b47ade41458b77834a573687780117829310ece7950fabcb63c63e18b207cbe936ee9a9a37879d42c66c2a72dfef46013ada19eb8d7e9f35267d0b72d591d0c2f92e2e667eed068310056ec5682b4c2bd946e657f2d9bce51da84f1e3b7d073265f352481b81703e0ecb59f70daf545215151b2b01b2bba1545de5d785ce281000000000000000000000000000000af9637ac06897446708dda1bd7b91be06c3f66def98618eb55bd5652d2ae6036402d69db587e87d04b6e4b1c86328adfcc7a22d77e8db6b1024f6bf7aec85a7f4241fb6b326acae3d9a4f4a0e8b723c43aae4f909f40d7167d1afde58812163d292666cf967e16c25889683658fdc86c820246d4009b3c4e8db0fe57735fb577b9f8e9d5fd9843615ec7c7affa29c04a7e8ea439d4938710039a55da15142ed876e581b4760b3483367fd96f0531ea7f3c6bb4193a76ea6b805b45a74365c15f41b8b542f21a83cae1aff4a858d551b95a2ba77fc8a1109f11e7b18d6f825587bb986e13ff37f111329feb2a09ebc54f1ee1ccd056ff9ec0ff0ce1c1ec5bfab4119a452eef335c0fe2b6bfcd635ef5979352de3801bdba7c145cdfb3ab07b45f13b8f45772c9f9c8285bbe14605879e4ddd78bfb6aa3444b7b3ef1713c58d3d348ea764370002f393e10ec3cf3ef1ab0aa1cab9596fe467c7288893172cd97691a0f1d68ca0449f05902fb7f46f7d0e0d36a68abb3f075358cdb701eac9c3f7f19ab13a83314309861dfaa256ccb4400ffc2568b900be14d9e06b138daf2b41c38abba3b1b2de2f3a660af382b7bc0c1318c5cbdec02646f3e28d8eef763aac4a7fd39c15950764734b8d641e4d642e44c4e6b83d1c3dda34d7cda18c652a5d8d9b406d4df8554e2a5611023766c53e9b478d374112165480e887c923ff0a33551d8f270481230ef34d9168806d43278c977b77148371bd02ee1bcfd278a579be8cc6dc58f6e1f8ee7118ae792c30d4f76546a630f7859fd315513722a1b871d311dc28f40d15b7c631b81e58a6bf8891875fe21e8ebcf2925c2fb2b32dc8a0b1b5c7f806ba81a31b1eec700225a14ff8dc83b484ab80849558a0ffc1ab62b2a4545dbfee4d93ed5de4ffe4469ed88df341dc69ab8b1da80bc47cd127c9e1378020cf5d362819e42350f293dd305b4801932d9e07fc647628a8a84958319874295b3cab523b2f43704845d5785c6b3025fadd8442ab42ebfc3bc45efcf24396f1c2ce50ba96430f8feaa1f8bcd8635a4ce00209a8ebabfdf6f1b5129c0e2a40ba4d1b5e3d6249ee8fa5d2d77351b6fba38756dea4e35c8573eda42eac89b4c50b85346b5ede0ff4dca6a70b38177eb5cb8b8437bb533f6ea1de29e1f1fda88e3afe92482af05ed713dd00aa6a5f8381b5d421909462ac33dee4095afcc67a926e50d2cbe1507195b73f624349b132e7b6b339f9a41fad97f3b70e5808eb177c9e7cb154554644e960f29c5d56fd83d8530a6afc8924dcf01e4ef07e7d16bcef404af5ee3b7767dfbd45f0eee2b583d0159b45cca60a930f37d995b02701d2991761cab642165ed3e52961b7c612991c11028bd1d45ea3106018692facfa14996d3d26d5642566c2f592f67975ce3840131275ce29ed116b6f6eeae34aeae334250e7ae4e25e98cc63b4104fdc79ac676a3c11fd6e9a67dc134802d41c4b01a47e3ad5b6ecd6f4a05bf55c1756535374b7bc9e010966a1415a1e50b2fcb20f3d972d9d7a9f0baf841be4f514eb35c9edaac4b3ca7bfab8a53945d035019cf3321c9144961780413dbb21b89c01fe020bcbaa7fe6b4697b196cf7ac3aa014c48259f5b22b45b2ae023d6052644fa51fc0671d6c4e012607a2df05b6f444903ab3251bdd8d2c98adf9f77de7edbc9631b0e7283a5ce1130d99ae5697ce3ea41e3ba5394883c9899384208cba558d69afdc574cbf05a45ed56d07a41f75c55603561f0e8d54670a53e4b8162729bc34ab66babf31d2e86af5a72553ec045466678427ca42eb49b58c5e58980b73451029b88118d730cce2a48b5d6b9caa2c8fb7178ff90196bd1091568a70d1b7ac47585f6180767a2534401aaf0cda644a4c978b972e0bf7b156aa5d80aa1c3d70c0bcd25ab61122349dd78bc28c3e169adea7ac95e09b6a160204ac772f810193cecf495a9836e082b60626316c02dba83abb792422079947b0d887b87f4cd6bd7c82b00000000000000008207fc649dab3ec0be72d68e61c19c1943664bf9088981b19ebbd3f212a471c6b01d28c1f5a0e5d9e0b762f7cebc056ae8fdeb4448ecb291b08684de1ff1c209448223e3979469b18ea13d5d88532f5a45ae4a86d21bde29b472d65e77d5412dae907ffaca95182316d15dbf12b7d77dcf2154376ab3900ba7d8f026e8a566372cdae696cdec4baa7efcbfc3d250638ee391aa3ab3cdd0a3fc42b674e1943bd0a3e1d103fe00b8788dc5b8ba1602bbfd7ca2bf58c60790eddb10cfca9938e2cafce2"], &(0x7f0000001580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r3}, @generic={0x66}, @initr0, @exit, @alu={0x7, 0x0, 0xc, 0x3}]}, &(0x7f0000000000)='GPL\x00'}, 0x90) close(0x4) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x1b, 0x3, &(0x7f00000001c0)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x10) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r5, 0xe0, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1b, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', r6, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001540)='./cgroup.net/syz0\x00', 0x200002, 0x0) mkdirat$cgroup(r8, &(0x7f00000015c0)='syz1\x00', 0x1ff) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x410, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.136667883s ago: executing program 0 (id=4890): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)=@generic={0x9, "7504bcbbe90d2c239e246e9571b39a2c9caeccfb9de1e902b0070f3b739ec456c1928b742f9dd8fba758a0db6b9b4627e2dbd46d09b2a89906feb4a982a69f855017933ab06e3a87701be4bb1a3fdf2fc0cc2f31de244565be81441f9be934fde7d0820a52abf32475b0b2819439a74618c7c8191afa422825bcff20b9cf"}, 0x80, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYRES64, @ANYRESDEC, @ANYRESOCT, @ANYRESHEX, @ANYRES16, @ANYRES64, @ANYRES64], 0x1458}, 0x48800) r0 = gettid() r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000006c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r2 = perf_event_open$cgroup(&(0x7f0000000700)={0x3, 0x80, 0x1, 0x5, 0x3a, 0x9d, 0x0, 0xfffffffffffffffe, 0x8a100, 0xe, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_config_ext={0x0, 0x2}, 0x4000, 0x8000000000000000, 0x6, 0x1, 0x6, 0x9, 0x8, 0x0, 0x8000, 0x0, 0x1}, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0x9) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000780)={0x0, 0x80000000, 0x18}, 0xc) r4 = socket$kcm(0x2, 0x6, 0x84) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x890b, &(0x7f0000000100)) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000840)=@generic={&(0x7f0000000800)='./file0\x00'}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000880), &(0x7f00000008c0)}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f00000000c0)=r8, 0x4) r9 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r9, 0x29, 0x21, &(0x7f0000000100), 0x120) sendmsg$kcm(r9, &(0x7f0000002dc0)={&(0x7f0000001640)=@in6={0xa, 0x4e23, 0x0, @mcast2}, 0x80, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r10) r11 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000940), 0x2, 0x0) r12 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000b00)={&(0x7f0000000980)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x4, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x0, 0x1}, {0x10, 0x1}, {0x5, 0x1}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x5, 0x8000}}]}, {0x0, [0x0, 0x61]}}, &(0x7f0000000a00)=""/197, 0x58, 0xc5, 0x1, 0x2}, 0x28) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=@base={0x0, 0xff800000, 0xf, 0x5, 0x26000, 0xffffffffffffffff, 0xbce, '\x00', 0x0, 0xffffffffffffffff, 0x1}, 0x50) r14 = openat$tun(0xffffffffffffff9c, &(0x7f0000000bc0), 0x500, 0x0) r15 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000c00), 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r17 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r17, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x2c}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000000)='Gb', 0x5dc}], 0x1}, 0x480c0) r18 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000c80)='./cgroup/syz0\x00', 0x200002, 0x0) r19 = gettid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000000)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000080)=[{&(0x7f0000000180)="515788d29c75b7673c244530e7073fe1670e7e1b4fd76f7c797a52b8ceae826e094b9f3adad9601938441a921e9722c32bb0ce157f4303f6cbb13eaaa1ff353b36019f6a61688a402231ddf613ace9a2a1481f65a4ad54e628855d205f7fe84d0e71284bc026e6d1e8a07b4f62b5", 0x6e}, {&(0x7f0000000240)="f4b5ebe74be87a57ed76d2be4abc094344e4056971e9b1e451ceead5a86fda7edec6cf46bf79d22e720ef6f262dcd3372376279f8d8b862508de37a9fd6c5ed461b1d4829f96d6de7646670b886e38268f43054065cd89dff4c64b2a049af5aed3bf2c275f71d7a1759397758920e5faaf05286c19d6c64aa280d8175f3933afc0fb4c587a6cf21c593ea386c4363bba24ea8ae7ddd74df14b630813843c9665d211242d1053bd0490ed852ec1c3f78fb41cde4689cbf77f9c468787a29cb8881ffba80766962a2bed951e17259b3fee4e27c1d97e267d2a6c7b6022981229937461150018bb473785b528f8", 0xec}, {&(0x7f0000000340)="b0a27c702158550be476320a78790df015138beec0de4818245f3acccf4cb862204ceca8110e6d437780edb15bd7b24decf4dff01f85c17607736956cc2a432882b60e9d0bfd4c359a20ad16e022004ca0bce9ded87810cbe6affc65c9320dec3855ca357376ef2c6486dca8b2ca3de54ff46954b31f7e2154ebbf5121dc16cf333ce1ca2b3469e8645a08a41cddf5de0797174f70dcf1446db58a82ebb036666f29f1d958", 0xa5}, {&(0x7f0000000480)="6b076619e7a864989e56096556950492834fdd8405863af29c5b8f253fdb03ca02a51a05a7aefa8f3ff064eb11aeed163bad954935e9391c80a02176467e3fa51823552fb91a8cb456fa7f962a228d3860f622cd2f290763801c47fd8ab77ff76b7db59c2f3803e0b32ebdcc4890d5ce86362f00b8fae7163bb44e66c720f8815d3ff25864f210e412ef626bec140439f4b52b8eb19012e84f8c5f4159aac6e3a7e46a7c03b6cde470a11bb24a5fe374baf7400c95c8700ebdc908aa04bf49f96c61fe5f1bce26f9e1ee41b1815bf14619da599af36e", 0xd6}], 0x4, &(0x7f0000000cc0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r0, 0x0, 0xee01}}}, @rights={{0x2c, 0x1, 0x1, [r1, r2, r3, r4, r5, r6, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [r8, r9, r10, r11, r12, r13, r14, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [r15, r16, r17, r18]}}, @cred={{0x1c, 0x1, 0x2, {r19, 0xee01, 0xee01}}}], 0x160, 0x400c0c1}, 0x20000000) r20 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffffffff}, {0x85, 0x0, 0x0, 0x2d}}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r20}, 0xc) 1.135943504s ago: executing program 1 (id=4891): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0xa, [@int={0x9, 0x0, 0x0, 0x1, 0x0, 0x10, 0x0, 0x52, 0x2}]}, {0x0, [0x61, 0x0, 0x30, 0x30, 0x61, 0x61, 0x61, 0x61]}}, 0x0, 0x32}, 0x28) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)="ffe132481f702f0b8f7f1552d44419f723c6f7832a6d30eb621419406e7b711bc8c2d0cd169ce4a789aa0f", 0x2b}, {&(0x7f0000000040)="e5f093311dfa4a9037c8c7a1f0f410e71216cc33ce05162bed63cae95659fc6d6480fb76dcd6d07125122345b83dae72a8e78fdefee6b9b39d4bd32d9a70b29e0e4c4ab77669184f5384e9bdc84da333ea13392124e31e05e7b77e4f046136d0ea32e2659b07e9e2f3958db0", 0x6c}, {&(0x7f00000000c0)}, {&(0x7f0000000300)="7aa13468863e15b2fed7f7e40bca44efdd2c3a3fea6df0c1caddb2dfad9a52e73fe516faddc2017f77a0b3b2f2736916f3a32cf89b265a05dabb6f48fb342576679de4470cf279d001417804f64e2a0900000000004f0000000000ffffffff89f77c75bae5638f555a9ca8fe620455edff40afbdf3af433af4fb21a900"/134, 0x86}, {&(0x7f0000000580)="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", 0x1f8}], 0x5}, 0x4000000) 1.071005062s ago: executing program 3 (id=4892): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x73) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) socket$kcm(0x11, 0x200000000000002, 0x300) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x6, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffb, 0x81}, 0x100c, 0x0, 0x0, 0x6, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}, 0x189e0, 0xfffffffffffffffc, 0x80000002, 0x2, 0x3cd, 0x7, 0x7, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0xb) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000200), 0x6e, &(0x7f0000000080)=[{&(0x7f0000000340)=""/69, 0x45}, {&(0x7f00000003c0)=""/127, 0x7f}, {&(0x7f0000000540)=""/197, 0xc5}, {&(0x7f0000000640)=""/90, 0x5a}], 0x4, &(0x7f0000000280)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}], 0x20}, 0x40022122) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = socket$kcm(0x1e, 0x4, 0x0) sendmsg$kcm(r4, &(0x7f00000001c0)={&(0x7f00000000c0)=@tipc=@name={0x1e, 0x2, 0x3, {{0x41}, 0x5}}, 0x80, 0x0, 0x0, &(0x7f0000000940)=ANY=[@ANYRES64, @ANYRESDEC, @ANYRESOCT=r3, @ANYRESHEX=r3, @ANYRES16=r2, @ANYRES16, @ANYRES64=r2], 0x1458}, 0x48800) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x0) 1.056136604s ago: executing program 4 (id=4893): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x7c3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async, rerun: 64) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782700000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x11, 0x6, 0x9, &(0x7f0000000240)={0xffffffffffffffff}) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000300)=@pptp={0x18, 0x2, {0x1, @local}}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000500)="ca191a2be752a3ce1e18f1c92bee82a339768bf02b849efe71ff8e1f31999e057ea3544be3b6894546f961e97a2bec2fbd1a86872f03fa9fb958500f6ce84978bd78b78954c41157458af2e5dc69f7fb25b5346f603f15b821f754e2dd7410afa58ab26b15299483e626f13f0ba1214723556682cd5b442dcd7f50f395cbcf3a3d8085165a3eaf24120677ee73", 0x8d}, {&(0x7f00000006c0)="96d48545ebecd7d420970714b41f08db2047f873775ee10a7d6718935cf065c6dfe27fd5a179be086ee4e37183d2639562f41a3cc7368a2f58f234c501cc71bc9134c13d7de77ce8f9010a595ea33fd9ed5483e4f216bda72494df2a08c0f49935bdf88e617f1e9e9cc84038e268983bd93d69a4256a649b6fa39426c6a35d1023300da768f9dd06eabec799afa3c7142df89da4d2a5877c2a74c2b7eef52384f9b8c2bcc5bc6260e93692b34e29f6d590f27f1bf7640000ae1c777a23ff5df376b3d578c67d14e0aec632ad33b7314ae0f414116121595952a65d9a3a55727406a9b5", 0xe3}], 0x2}, 0x44011) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) close(0xffffffffffffffff) (async, rerun: 64) bpf$MAP_CREATE(0x0, 0x0, 0x48) (rerun: 64) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2f00020b, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf4ec9f7b986", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) (async) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000c"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000080021850000006d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) ioctl$TUNSETSTEERINGEBPF(r4, 0x800454e0, &(0x7f0000000040)=r6) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="020000000400000006000000aa0b000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, &(0x7f00000005c0)=""/244, &(0x7f0000000880), &(0x7f0000000200), 0xa7c, r7}, 0x38) 865.643968ms ago: executing program 1 (id=4894): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5c00000012006b9c9e3fe3d86e6c1d0000147ea60864160af36504b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c2151fef08d8cdbf9367b4fad1f60a64c9f408000300060100030400000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000000c0)=@bpf_lsm={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000079100000000000006300e0ff0000000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r1 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0], 0xfe33) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x10, 0x3, 0x10) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) r4 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003840)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="fbe6bd8dfcdda5a210b8cfefbd66f459c7261b927d25d3cf74d2f7c97735eba47f606a290d18492592230700000000000000081fdbd921ed4db0e67c9d5ab1452445a1e0da5ac68b13f4afe2712eeaad350d07", 0x53}], 0x1}, 0x0) close(r6) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0x12, &(0x7f00000008c0)=r7, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r3, 0x5, 0x14, 0x0, &(0x7f00000000c0)="259a53f271a76d2608004c6588a80a38667d2f15", 0x0, 0xd0e, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) recvmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000dc0)=""/4126, 0x101e}, {&(0x7f0000000740)=""/183, 0xb7}, {&(0x7f0000000cc0)=""/241, 0xf1}], 0x3}, 0x40002120) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000340)=0x1) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000200000000000000000000000f49bbb553995856c0873b1502bc7071136892149d76ea45d286a9d9f1f3f49e5cec7685902f2014c6f556a0180652a972760ead0c8dd57951100b98ae5f96b15207609", @ANYRESDEC=0x0, @ANYRES32=0x0, @ANYRES8], 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b904021d080303000000e8fe03a1180015000600142603600e1208000f0000810401a80016040400014003", 0x39}], 0x1, 0x0, 0x0, 0x7400}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0xff00) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="f7ffffff", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r8, &(0x7f0000000540), &(0x7f0000000000)=""/7, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r8, 0x0, 0x0, 0x2}, 0x20) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890b, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000040000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 672.569483ms ago: executing program 3 (id=4895): r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0xc000000, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=@framed={{}, [@printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffff8}, {0x85, 0x0, 0x0, 0x2d}}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r2}, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2e0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d087"], 0xfe33) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, 0x0}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x7, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = socket$kcm(0x23, 0x5, 0x0) sendmsg$kcm(r5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002ac0)=ANY=[@ANYBLOB="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"/3593], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8004, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) socket$kcm(0xa, 0x922000000003, 0x11) socket$kcm(0x10, 0x2, 0x4) 662.190275ms ago: executing program 4 (id=4896): openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1, 0x4, 0xdc, 0xa}, 0x50) r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000680)={&(0x7f00000004c0)=@l2tp6={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000400)='P', 0x1}], 0x1, &(0x7f0000000b00)=[{0x10, 0x10d}, {0x10, 0x84, 0x7}], 0x20}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r2}, 0x10) socket$kcm(0x11, 0x3, 0x0) 332.723487ms ago: executing program 0 (id=4897): socket$kcm(0xa, 0x5, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xaa}, 0x94) socketpair(0x1d, 0x803, 0x1, &(0x7f0000000040)) 332.246137ms ago: executing program 4 (id=4898): socket$kcm(0xa, 0x5, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="08000000040000000400000007"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x8, 0x0, &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0813", 0x0, 0xe8a2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 331.266087ms ago: executing program 5 (id=4899): perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x9) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="1e031c00008c71ef2885634a8270e7113a"], 0xffdd) 330.810868ms ago: executing program 3 (id=4900): r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x10}, @multicast1}}}], 0x20}, 0x0) (async, rerun: 32) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (rerun: 32) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r1, r1}, 0x4) (async, rerun: 64) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) (rerun: 64) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x14, &(0x7f0000000000)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000340)="c1fc0a0869fd0e76753a00000400", 0x0, 0x400006, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) recvmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40000020) 172.331288ms ago: executing program 4 (id=4901): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) r2 = socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x14, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000fcffffff0000000080000000180100000000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000006000000b703000007000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r5}, 0x18) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x13}]}}, 0x0, 0x26}, 0x20) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030038000b12d25a80648c2594f90424fc605865000002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r6 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r6, 0x6, 0xd, &(0x7f0000000040), 0x3) sendmsg$inet(r6, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x20000014) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) 165.967768ms ago: executing program 0 (id=4902): bpf$ENABLE_STATS(0x20, &(0x7f0000000000), 0x4) mkdir(&(0x7f0000000040)='./file0\x00', 0x10) bpf$ENABLE_STATS(0x20, &(0x7f0000000080), 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000400)={&(0x7f0000000100)=@abs, 0x6e, &(0x7f0000000300)=[{&(0x7f0000000180)=""/247, 0xf7}, {&(0x7f0000000280)=""/16, 0x10}, {&(0x7f00000002c0)=""/52, 0x34}], 0x3, &(0x7f0000000340)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98}, 0x140) write$cgroup_pressure(r12, &(0x7f0000000440)={'full', 0x20, 0x3, 0x20, 0xedc}, 0x2f) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) r13 = gettid() perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0xe6, 0x8, 0x3, 0xc, 0x0, 0x100, 0x40000, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={&(0x7f00000004c0), 0xc}, 0x420, 0x5, 0x4, 0x3, 0x7fffffffffffffff, 0x0, 0xf, 0x0, 0x2}, r13, 0xe, r9, 0x3) bpf$ITER_CREATE(0x21, &(0x7f0000000580)={r4}, 0x8) unlink(&(0x7f00000005c0)='./file0\x00') sendmsg$kcm(r1, &(0x7f0000000e80)={&(0x7f0000000600)=@nfc_llcp={0x27, 0x0, 0x0, 0x6, 0x3, 0x1, "72e238f776ae9beeb0d18d32ba579dcf0ddfaf9e648298915200a38291e17d344df0066acd026e4ae75accc88b1a6713e9a3c5c1f3c52fcd886ecc3b08d159", 0x3d}, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000680)="e968cea7d3827aaa0c83971fea78b2147f2f808a9e266c34282b16d7b1cf6017abcccee6e8c539ee9a18aefcb1be23bf61c1fcd74d4d7a0e055ab6c1f0cde0e17dc77b83d3b04c979234e528c5069ff03b506612b04b8da7043a", 0x5a}, {&(0x7f0000000700)="9ec247bec72b740a67caaa1304d9296aa266ea409859bda16684d0daa5c62af906102fae4c", 0x25}, {&(0x7f0000000740)="2670c45c2944d3470b29d12452b6120fc488f361b3155ec3f5bc90956d6c9818a32e54bbba3965f4ff9ad232d19c9cf33f0514afe757a5a29be018fdd0f3ca531a580ef281a44b0d3137b6feb15d91379979d3cf9f64af9169641a7de28e5e0d3da0d4ebd95629930399cb26d6f6f3f62102dfb578f7318b6a6985ea5394290c67b50fd7785065fd91", 0x89}, {&(0x7f0000000800)="0d2960b6bed3f780af64a964807ba93829cc0554be59e7235a640d0fb33a4902bf3ba0cc2009ecbd7f2d6ed7eece9c4d845f546087697bb3e3bf8d29a5069f39d6b2f201c9039aea1f9df33e6c8dca976ced7fb4cd174cb24b4d2e6818db67ce7271b36190837ff2e33de90a3848d20ef1b08154c197b63e4812611e787cc15f0d6a8e7f10d1d113acafb34c7b129f44d67526912d547a7b28e3e87244bc8fe2f88ab42d2080c34736ee0c04ea59bcdd7afcff976c5534134f7bb8781d6d576b38bbc917583655bb1481e1aa7222b89c7bf70b97914ce5fa76493324c9c1ead40f", 0xe1}, {&(0x7f0000000900)="1ca14ef589b0bf086a964134e3191e1efcd31e57ca486024ad64ca24b8c6776104dd64abc62922f22f4b959bb01b090f552255901101644de6125d266d77bc0cbe8b5c556e42bedad73f55b015a8df658e14ce1b8a079c3b12f6a0f5d713ce3a11d29cfb98e816b5ee00ef07077e85757b740f1d823f886bf1810cfa17f78ca520013f77c822fefdc82f87339c595a799a", 0x91}, {&(0x7f00000009c0)="a1e0efa72ef7aa940bc9fdcecfd09d11f409022efe59fa89db903e3ecca76406f9d574baec6b4eefabe925711fd459b599490987348c7b570d6c951bf7cb94c8216058ae6bd5995437379d661c3d30dad97975bf884d1ba4139b44f0881c927f00e7c9edd444470a528d07d02084ad9910d50c29e059575840a79715bf715d092eefa5bea33dc813d0800c5e23118305ae6feafb04c662", 0x97}, {&(0x7f0000000a80)="1991b913cfe5501137542ae64a47f84152a38828f2f4f4c193cdb1018f40b5cc84faac937736ac98d6c274a3662ba7099f00686dca4612bc9306a597e1f389012036ef21a9154bfee5a7f2ece1fd306734434873f5bf812ca309e79ab936c61d4b4aff07259adcd632b2381131466f3d257a82863b9dc50fb7dd76cb442ef35f2985", 0x82}, {&(0x7f0000000b40)="81d08233a8359e92d13bcd920842679284a4ec13e147b702badc2a9df3886b87a402c8b121639b5aeec8c1cd259e76bd77060a6b90f73de48b05b88b5ffed37c79ec3b98ed3c4aac280fa21a54c15a303f2eb434440073891d7f791e34249b00d67df94751e66f3c4fe3f5d4b79683b894f83af490185f1a420fd01779b45725d28167", 0x83}, {&(0x7f0000000c00)="5c329a56e19a72c70fcfe46732bcaa76e283c53e04d9e3ef6e23693e28e55d8f9cd69ebe265da19cfb8801e76ca14158b5d74944c6289cd487c5948f73e0416b6fbc99b90162241353cd703e6ef015f2888792183a778a669d0307c1e6798a1b44c127ad832a0ad6", 0x68}], 0x9, &(0x7f0000000d40)=[{0xa0, 0x109, 0x2, "51a2c6a5624ac9d416c11c42c1993b57d4451c69e63722a924a59a4fc1430d7d528414c32c58046254b11ab268d0bdf4c8e350c700c67a51ebcff747223b68a4bc0d5f57f5b29988a1d2ef5403875a2f9be47082ef6a974737d388b94de0e7fc26602914a36e20af4e623406a5ea3d097e50991f86817bdd61c749bc7810cc822a4cdaf450e95f65b1b4527aad3733"}, {0x98, 0x109, 0x6, "0146359ad1238f5a8ecfcb301f91eebdedd65246d4f9689c07333e4b51c5b6e6f41745553c1d12f904b7f08d2b447e20c8a8c951244bad588c7404796ee508cd0bd41bd3921c37e3381d8275c21bfb3dcf7fd46add00b25992f8c854b32a8caa8476f4327dd69e4e92092cb35d24ad57b96a518e4f0c225998b5833868ef61b5094a1d"}], 0x138}, 0x4000000) r14 = openat$tun(0xffffffffffffff9c, &(0x7f0000000ec0), 0x208000, 0x0) ioctl$TUNSETIFINDEX(r14, 0x400454da, &(0x7f0000000f00)) ioctl$TUNGETFEATURES(r8, 0x800454cf, &(0x7f0000000f40)) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001080)={@fallback=r12, 0x16, 0x0, 0x1, &(0x7f0000000f80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, &(0x7f0000000fc0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001000)=[0x0, 0x0], &(0x7f0000001040)=[0x0, 0x0], 0x0}, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000013c0)={r2, 0xe0, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001100)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, &(0x7f0000001140)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001180)=[0x0, 0x0, 0x0], 0x0, 0xb9, &(0x7f00000011c0)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000001200), &(0x7f0000001240), 0x8, 0xe8, 0x8, 0x8, &(0x7f0000001280)}}, 0x10) r18 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000016c0)={0x6, 0x25, &(0x7f0000001400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xa51, 0x0, 0x0, 0x0, 0x401}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x397c}, @tail_call={{0x18, 0x2, 0x1, 0x0, r10}}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r7}}, @alu={0x4, 0x0, 0x2, 0xb, 0x2db2ceadb07942a4, 0xffffffffffffffe0, 0x8}, @alu={0x0, 0x1, 0xb, 0xa, 0x2, 0xfffffffffffffffe, 0xfffffffffffffffc}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001540)='GPL\x00', 0x10, 0x38, &(0x7f0000001580)=""/56, 0x40f00, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000015c0)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000001600)={0x4, 0x6, 0x5, 0x9}, 0x10, 0x0, 0x0, 0x6, 0x0, &(0x7f0000001640)=[{0x4, 0x4, 0xc, 0xc}, {0x3, 0x1, 0x1, 0xb}, {0x0, 0x3, 0x10, 0x8}, {0x4, 0x2, 0x7}, {0x3, 0x3, 0xc, 0x2}, {0x0, 0x5, 0x6, 0x3}], 0x10, 0x10001}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000010c0)={@ifindex=r16, r5, 0xb, 0x0, 0x0, @void, @value=r18, @void, @void, r15}, 0x20) r19 = openat$tun(0xffffffffffffff9c, &(0x7f0000001780), 0x2040c1, 0x0) ioctl$TUNSETTXFILTER(r19, 0x400454d1, &(0x7f00000017c0)) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000001800)='full') bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001840)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xa, '\x00', r16, r9, 0x0, 0x4, 0x3}, 0x50) sendmsg(r6, &(0x7f0000001f40)={&(0x7f00000018c0)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha512\x00'}, 0x80, &(0x7f0000001b00)=[{&(0x7f0000001940)="7a64e3ffd6e5a9f7d677a70b85abac58159a376463b39319b1e98c487dedcb29cf9f3f8ae12fbce0cc3113f6e392e61bb51bf40c5be86819d8085369edeb1b57944e785a92458fd587d158a3c7cf523b1edbfb3787b8aaa85b5f9286a9a5ac11b1a1d3d02524e4b50b3a7ba74c1b2d68aca62d38df236f8cbd09cca921dc39c8c3b7b69832be", 0x86}, {&(0x7f0000001a00)="c1909a9ef4bbe896888c9cf0dae3aae1454d768b3f930bce2839a1a6e86fd5369c45e995da01782c74cf6e8eb2720858ac0cbd88fa8b4f4054a57bf43bab087de821c3f0e9414d5dc15cc79dc9b8342e48cdfb66c3e52a4753dfa7dee6aab5254622b33d267c1473c9c559c7e1c1ff852263bb70c827e4f0bd753cc16fe6078c7afa6f780b88635a1ed3156e03cdb380a2324f39e738e8e4f7848b8daeac6300e1803e8f6f3038796f998721da993e5005c2d18844ceb80758fb01b1d71303a8626eb13325d7d6357dfcd84eb26afe3d33b36bdd7654ca20206d06e58832", 0xde}], 0x2, &(0x7f0000001b40)=[{0x80, 0x10c, 0x8, "a7d80ef7170158619eea3e7e1d313c3df9cad03ea6c831fab1ee839a4a860802cdf2103317e5f345aa245ea08aa80f63430c655cd4e54ffb25a6e2ac684043b75a46776407953e5ab27c9888677106d93413734b17a39c25b87a658848433e1a9b698a93d9c7b16aa9"}, {0x50, 0x0, 0x2, "068138749f6abee8732cd261d998a6fcde62d291226a02bcbaf4fdf7701c1e48f62ad73ae3de0a626ca74c661756b1ee3ef1d5459de5cfeb3502aa7c1dd0"}, {0x98, 0xff, 0x3, "30ff6791b58528642646858d945153fe9d7da2a1e139d18f848dd117d94abda7a7ef92a7f48919a64741206520ab523b197cd3bef7aa4075e43f39168ace6a645785d1b979a1e32d30e1cfd06fb904483fe1054f684a730922edfb933e7c5305328b7919a456d1d324a893b44d52453dfbf4ddcc98d755c369d7deb54580c9ff59d71161b90b9f"}, {0xa0, 0x1, 0xfff, "65276d6680f30b53b16bc35e23c5c146947566f21d3ff43980d5ed7c321b207a013a3f7a2a1b2d77bb6c523f909676f55f4a2c29fa8b7c0d7807ab38e62215d3bbd0aece4242c7f8ac929a96768c2983af697975ca55b4b3d2c5321f5e07e89b87121fd49a1001e1be86ea429147fca0733551fe1a167b0daf9062543266d8dd4e3c6aab6e87d983ac09a8c51dc3"}, {0xd0, 0x119, 0xfffffffd, "3b7b1de4b1028dfc1593a1b6ba2bee8306710e2eead78bab2ae3a83478204e72b261e8e3127f66dca1c5ae6e703f01a73373e1c602e0e9a69a79cbf3753f62f784ab01343c512da8fe3341d5dbb88b2387c239d4438f3696148977d5b455090fa1ea6d5fbd9993fdb038bedb860fbfa50c2e6dd628f70cff7c5d98f463b44f5602dd41f7fe838d403631c307263431c471167ca2297dcf2c50ae420020bd6690b0e01a3f8659a3569285ce71cc089dae8de44f62588a151726334ad80552"}, {0x70, 0x0, 0x0, "e47decc0e2f950d88a4098a7a64a27b6237baa6774d7b34c688ef41c96cc6322bbe990059b4fefad1a4e4bc85f3939b7e6e26789d1596ba6160b657f11c1eeb5a08129b51dca7ae1784920a722694bc8593feb548476fb5710be6e3b"}, {0xa8, 0x6, 0x8, "dfb02d2dfae3605074c7058e41c70c34fc049054a6d1f18367e31aba351e079d0b4f8a1f9e2c9b94dc31da464e4675623bfb64de5ea13e0d923b39760bf9c8b0eb3f247374f96f3f19363b772be1198dacf6c8c3ee4b0f722690417f099e4a9487a231a25c3568bb11a3d95f135ada56bc738677016c0b596ec15424f0b98521b5663d2f900ab72ba03f6442c38b684dfcc81675f7"}], 0x3f0}, 0x24048804) bpf$OBJ_GET_MAP(0x7, &(0x7f0000001fc0)=@o_path={&(0x7f0000001f80)='./file0/file0\x00', 0x0, 0x4008, r7}, 0x18) bpf$ENABLE_STATS(0x20, &(0x7f0000002000), 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002280)={r7, 0x0, 0x25, 0x4f, &(0x7f0000002040)="a950c905fd40ad82f1a89570582f154c7f69d09c401497a82890bdf15de82ddafb56663582", &(0x7f0000002080)=""/79, 0x6, 0x0, 0xa6, 0x9b, &(0x7f0000002100)="770a2698456f12825f60bb3e9fb031b0fdc8a18fe005ad567169c83607cac4d9ad285e05374a0dc59abb104d96692ef0daeffd308e2a7f6a4f6dcf29e41ee6645ab42d41d13ab1d6d55ddc81be7f12dc3cd94f8accad9dfc37d01212530f36dcf9d592c0d4e999b54e5e6aa40c3e4bd8935530b50f48960e393b404ee9a55869ae678e3a76be76df19fe6974c5333d157a8166ef5cbb6e23a3641889d5d47f74d9300da251d9", &(0x7f00000021c0)="73f0dfa71fe5f9085e33db4fabea371cef56f19e1c8e464ce9c5b5a9f9b14f8839ca19e4cf05e16bb28d4db164a5e53784cf37bd0a218ce86f81561c640c73cc60eed7f155d61bd62e79baa92680ac3f4f72b77414d992944ed30ab29d113670e5839b35e7c9e9ac135916465fbe5e4bbf9af5f585939839ce210c36f61112d5832bb6eca74cee8ecbf3d8e7af942e6dbc255c15f0a919445f66f9", 0xc, 0x0, 0x7}, 0x50) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000002300)=r17, 0x4) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000002340)={r11}) recvmsg$unix(r20, &(0x7f0000002700)={&(0x7f0000002380)=@abs, 0x6e, &(0x7f00000025c0)=[{&(0x7f0000002400)=""/92, 0x5c}, {&(0x7f0000002480)=""/214, 0xd6}, {&(0x7f0000002580)=""/23, 0x17}], 0x3, &(0x7f0000002600)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x100}, 0x0) 2.88851ms ago: executing program 3 (id=4903): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, 0x0, 0x0) r1 = socket$kcm(0x10, 0x400000002, 0x0) socket$kcm(0x2, 0x200000000000006, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x400000000000}, 0x0, 0x11, 0x0, 0x0, 0x20f60, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socket$kcm(0xa, 0x2, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffd, 0x81}, 0x100c, 0x7, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sched_cls}, 0x48) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x5452, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{}, &(0x7f0000000480), &(0x7f0000000180)='%+9llu \x00', 0x2}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x3000080, 0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000940)="1c5717854a9932652c2cab82b82e630fa80c87b515bf867880f2d68f455e3802a2f78c3a5be94653f5dfacb84447560256788a2187d6967f52a9d4d62b045064") r3 = syz_clone(0x1000000, &(0x7f0000000780), 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, r3, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x8, r2, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, 0x0) r4 = socket$kcm(0x25, 0x5, 0x0) sendmsg$kcm(r4, &(0x7f0000000680)={&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x80, 0x0}, 0x0) write$cgroup_subtree(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000c00)=[{0x0}, {&(0x7f0000004700)=""/4130, 0x1022}, {&(0x7f0000000dc0)=""/4126, 0x101e}, {&(0x7f00000002c0)=""/204, 0xcc}, {&(0x7f0000000740)=""/183, 0xb7}, {&(0x7f0000000cc0)=""/241, 0xf1}], 0x6}, 0x40002120) 0s ago: executing program 0 (id=4904): getpid() r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x7, 0x4, 0x100, 0x4, 0x20}, 0x50) socket$kcm(0x1e, 0x1, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0x1}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x6, 0x0, 0xffda, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, 0x0, &(0x7f0000001540)=""/155}, 0x20) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x200000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}], 0xa0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8946, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x58, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x2, '\x00', r6, 0xffffffffffffffff, 0x2}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf0, 0xf0, 0x8, [@union={0x3, 0xa, 0x0, 0x5, 0x0, 0x0, [{0x2, 0x4, 0x1}, {0x0, 0x5, 0x9}, {0x8, 0x2, 0x8}, {0xf, 0x0, 0x3}, {0x9, 0x4, 0x7}, {0x3, 0x2, 0x3}, {0xa, 0x1, 0x7fffffff}, {0x4, 0x4, 0x1}, {0x0, 0x2, 0xfffffffe}, {0x1, 0x2}]}, @float={0x5, 0x0, 0x0, 0x10, 0x4}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0xc, 0x1}, {0x3}, {0xb, 0x2}, {0x2, 0x5}, {0x6, 0x2}]}, @enum={0x8, 0x1, 0x0, 0x6, 0x4, [{0x2, 0x16}]}, @union={0x2, 0x1, 0x0, 0x5, 0x1, 0x6, [{0x1, 0x2, 0x61}]}]}, {0x0, [0x2e, 0x30, 0x2e, 0x5f, 0x2e, 0x30]}}, &(0x7f0000000380)=""/191, 0x110, 0xbf, 0x0, 0x9, 0x10000}, 0xfffffffffffffea9) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='mm_lru_activate\x00', r7}, 0x10) r9 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r8}, 0x8) close(r9) kernel console output (not intermixed with test programs): .583708][T11251] ? __lock_acquire+0x7d10/0x7d10 [ 521.588807][T11251] __se_sys_sendmsg+0x1bb/0x2a0 [ 521.593696][T11251] ? ct_nmi_exit+0x145/0x1c0 [ 521.598421][T11251] ? __x64_sys_sendmsg+0x80/0x80 [ 521.603465][T11251] ? lockdep_hardirqs_on+0x94/0x140 [ 521.608708][T11251] do_syscall_64+0x4c/0xa0 [ 521.613167][T11251] ? clear_bhb_loop+0x60/0xb0 [ 521.617885][T11251] ? clear_bhb_loop+0x60/0xb0 [ 521.622610][T11251] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 521.628544][T11251] RIP: 0033:0x7f8a7fd9acb9 [ 521.633170][T11251] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 521.652814][T11251] RSP: 002b:00007f8a80d06028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 521.661285][T11251] RAX: ffffffffffffffda RBX: 00007f8a80015fa0 RCX: 00007f8a7fd9acb9 [ 521.669292][T11251] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000003 [ 521.677297][T11251] RBP: 00007f8a80d06090 R08: 0000000000000000 R09: 0000000000000000 [ 521.685306][T11251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 521.693313][T11251] R13: 00007f8a80016038 R14: 00007f8a80015fa0 R15: 00007ffcea729738 [ 521.701427][T11251] [ 522.190540][T11264] netlink: 'syz.3.2177': attribute type 1 has an invalid length. [ 522.252342][T11264] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2177'. [ 522.297569][T11268] sctp: [Deprecated]: syz.0.2175 (pid 11268) Use of struct sctp_assoc_value in delayed_ack socket option. [ 522.297569][T11268] Use struct sctp_sack_info instead [ 522.385016][ T4281] Bluetooth: hci1: unexpected subevent 0x19 length: 150 > 28 [ 522.392543][ T4281] Bluetooth: hci1: Unable to find connection with handle 0x6c6c [ 523.136731][T11284] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.2183'. [ 524.081513][ T4281] Bluetooth: hci3: unexpected subevent 0x19 length: 150 > 28 [ 524.088993][ T4281] Bluetooth: hci3: Unable to find connection with handle 0x6c6c [ 524.728930][T11321] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.2199'. [ 525.880713][ T4281] Bluetooth: hci0: unexpected subevent 0x19 length: 150 > 28 [ 525.888640][ T4281] Bluetooth: hci0: Unable to find connection with handle 0x6c6c [ 526.373544][T11350] netlink: 'syz.2.2211': attribute type 21 has an invalid length. [ 526.405694][T11350] netlink: 176 bytes leftover after parsing attributes in process `syz.2.2211'. [ 526.826063][T11372] FAULT_INJECTION: forcing a failure. [ 526.826063][T11372] name failslab, interval 1, probability 0, space 0, times 0 [ 526.839431][T11372] CPU: 1 PID: 11372 Comm: syz.4.2218 Not tainted syzkaller #0 [ 526.846936][T11372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 526.857039][T11372] Call Trace: [ 526.860354][T11372] [ 526.863321][T11372] dump_stack_lvl+0x188/0x24e [ 526.868051][T11372] ? verify_lock_unused+0x140/0x140 [ 526.873298][T11372] ? show_regs_print_info+0x12/0x12 [ 526.878546][T11372] ? load_image+0x400/0x400 [ 526.883246][T11372] should_fail_ex+0x399/0x4d0 [ 526.887982][T11372] should_failslab+0x5/0x20 [ 526.892533][T11372] slab_pre_alloc_hook+0x59/0x310 [ 526.897605][T11372] kmem_cache_alloc+0x56/0x2f0 [ 526.902409][T11372] ? __nf_conntrack_alloc+0x99/0x380 [ 526.907736][T11372] __nf_conntrack_alloc+0x99/0x380 [ 526.912895][T11372] init_conntrack+0x25b/0x11a0 [ 526.917702][T11372] ? early_drop+0x870/0x870 [ 526.922255][T11372] ? nf_conntrack_find_get+0x670/0x670 [ 526.927765][T11372] ? __siphash_unaligned+0x25b/0x3a0 [ 526.933196][T11372] nf_conntrack_in+0xd3e/0x17b0 [ 526.938107][T11372] ? nf_ct_pernet+0x270/0x270 [ 526.942846][T11372] ? ipt_do_table+0x2bd/0x15a0 [ 526.947659][T11372] ? read_lock_is_recursive+0x10/0x10 [ 526.953077][T11372] ? ipv4_conntrack_defrag+0x284/0x5b0 [ 526.958578][T11372] ? ipv4_conntrack_local+0x11f/0x200 [ 526.964006][T11372] ? ipv4_conntrack_in+0x20/0x20 [ 526.968984][T11372] nf_hook_slow+0xb9/0x200 [ 526.973445][T11372] ? nf_hook+0x390/0x390 [ 526.977732][T11372] nf_hook+0x224/0x390 [ 526.981851][T11372] ? nf_hook+0x9e/0x390 [ 526.986051][T11372] ? __ip_local_out+0x5d0/0x5d0 [ 526.990948][T11372] ? nf_hook+0x390/0x390 [ 526.995329][T11372] ? ip_fast_csum+0x1ea/0x2b0 [ 527.000044][T11372] __ip_local_out+0x49c/0x5d0 [ 527.004771][T11372] ? nf_hook+0x390/0x390 [ 527.009240][T11372] ip_send_skb+0x48/0x1c0 [ 527.013629][T11372] udp_send_skb+0xa88/0x1580 [ 527.018282][T11372] udp_sendmsg+0x1b33/0x23b0 [ 527.022927][T11372] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 527.027829][T11372] ? udp_cmsg_send+0x350/0x350 [ 527.032641][T11372] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 527.038670][T11372] ? lock_chain_count+0x20/0x20 [ 527.043574][T11372] ? __local_bh_enable_ip+0x136/0x1c0 [ 527.048990][T11372] ? _local_bh_enable+0xa0/0xa0 [ 527.053903][T11372] ? inet_sendmsg+0x147/0x2f0 [ 527.058627][T11372] ? inet_sendmsg+0x147/0x2f0 [ 527.063344][T11372] ? inet_send_prepare+0x260/0x260 [ 527.068485][T11372] ____sys_sendmsg+0x5be/0x970 [ 527.073301][T11372] ? __sys_sendmsg_sock+0x30/0x30 [ 527.078364][T11372] ? __import_iovec+0x315/0x500 [ 527.083269][T11372] ? import_iovec+0x6f/0xa0 [ 527.087794][T11372] ___sys_sendmsg+0x2a2/0x360 [ 527.092494][T11372] ? __sys_sendmsg+0x290/0x290 [ 527.097297][T11372] ? __lock_acquire+0x7d10/0x7d10 [ 527.102364][T11372] __se_sys_sendmsg+0x1bb/0x2a0 [ 527.107230][T11372] ? __x64_sys_sendmsg+0x80/0x80 [ 527.112285][T11372] ? lockdep_hardirqs_on+0x94/0x140 [ 527.117512][T11372] do_syscall_64+0x4c/0xa0 [ 527.121947][T11372] ? clear_bhb_loop+0x60/0xb0 [ 527.126652][T11372] ? clear_bhb_loop+0x60/0xb0 [ 527.131349][T11372] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 527.137257][T11372] RIP: 0033:0x7f66e459acb9 [ 527.141684][T11372] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 527.162081][T11372] RSP: 002b:00007f66e27f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 527.170513][T11372] RAX: ffffffffffffffda RBX: 00007f66e4815fa0 RCX: 00007f66e459acb9 [ 527.178506][T11372] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000003 [ 527.186485][T11372] RBP: 00007f66e27f6090 R08: 0000000000000000 R09: 0000000000000000 [ 527.194463][T11372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 527.202442][T11372] R13: 00007f66e4816038 R14: 00007f66e4815fa0 R15: 00007ffe31a94168 [ 527.210440][T11372] [ 527.329289][ T4281] Bluetooth: hci4: unexpected subevent 0x1a length: 150 > 6 [ 528.845389][ T4281] Bluetooth: hci2: unexpected subevent 0x1a length: 150 > 6 [ 529.853136][T11451] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2247'. [ 529.880763][T11454] FAULT_INJECTION: forcing a failure. [ 529.880763][T11454] name failslab, interval 1, probability 0, space 0, times 0 [ 529.971765][T11454] CPU: 0 PID: 11454 Comm: syz.2.2248 Not tainted syzkaller #0 [ 529.979307][T11454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 529.989504][T11454] Call Trace: [ 529.992807][T11454] [ 529.995757][T11454] dump_stack_lvl+0x188/0x24e [ 530.000474][T11454] ? show_regs_print_info+0x12/0x12 [ 530.005711][T11454] ? load_image+0x400/0x400 [ 530.010259][T11454] should_fail_ex+0x399/0x4d0 [ 530.015056][T11454] should_failslab+0x5/0x20 [ 530.019620][T11454] slab_pre_alloc_hook+0x59/0x310 [ 530.024695][T11454] ? nf_ct_ext_add+0x1a7/0x3e0 [ 530.029505][T11454] __kmem_cache_alloc_node+0x4f/0x260 [ 530.034912][T11454] ? nf_ct_ext_add+0x1a7/0x3e0 [ 530.039701][T11454] __kmalloc_node_track_caller+0x9e/0x230 [ 530.045548][T11454] krealloc+0x6a/0x100 [ 530.049718][T11454] nf_ct_ext_add+0x1a7/0x3e0 [ 530.054342][T11454] init_conntrack+0x8af/0x11a0 [ 530.059173][T11454] ? early_drop+0x870/0x870 [ 530.063722][T11454] ? nf_conntrack_find_get+0x670/0x670 [ 530.069214][T11454] ? __siphash_unaligned+0x25b/0x3a0 [ 530.074543][T11454] nf_conntrack_in+0xd3e/0x17b0 [ 530.079448][T11454] ? nf_ct_pernet+0x270/0x270 [ 530.084273][T11454] ? ipt_do_table+0x2bd/0x15a0 [ 530.089083][T11454] ? read_lock_is_recursive+0x10/0x10 [ 530.094484][T11454] ? ipv4_conntrack_defrag+0x284/0x5b0 [ 530.099951][T11454] ? ipv4_conntrack_local+0x11f/0x200 [ 530.105348][T11454] ? ipv4_conntrack_in+0x20/0x20 [ 530.110298][T11454] nf_hook_slow+0xb9/0x200 [ 530.114728][T11454] ? nf_hook+0x390/0x390 [ 530.118991][T11454] nf_hook+0x224/0x390 [ 530.123083][T11454] ? nf_hook+0x9e/0x390 [ 530.127253][T11454] ? __ip_local_out+0x5d0/0x5d0 [ 530.132123][T11454] ? nf_hook+0x390/0x390 [ 530.136385][T11454] ? ip_fast_csum+0x1ea/0x2b0 [ 530.141070][T11454] __ip_local_out+0x49c/0x5d0 [ 530.145759][T11454] ? nf_hook+0x390/0x390 [ 530.150024][T11454] ip_send_skb+0x48/0x1c0 [ 530.154399][T11454] udp_send_skb+0xa88/0x1580 [ 530.159014][T11454] udp_sendmsg+0x1b33/0x23b0 [ 530.163623][T11454] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 530.168511][T11454] ? udp_cmsg_send+0x350/0x350 [ 530.173307][T11454] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 530.179314][T11454] ? lock_chain_count+0x20/0x20 [ 530.184198][T11454] ? __local_bh_enable_ip+0x136/0x1c0 [ 530.189598][T11454] ? _local_bh_enable+0xa0/0xa0 [ 530.194471][T11454] ? inet_sendmsg+0x147/0x2f0 [ 530.199203][T11454] ? inet_sendmsg+0x147/0x2f0 [ 530.204002][T11454] ? inet_send_prepare+0x260/0x260 [ 530.209118][T11454] ____sys_sendmsg+0x5be/0x970 [ 530.213984][T11454] ? __sys_sendmsg_sock+0x30/0x30 [ 530.219102][T11454] ? __import_iovec+0x315/0x500 [ 530.224011][T11454] ? import_iovec+0x6f/0xa0 [ 530.228541][T11454] ___sys_sendmsg+0x2a2/0x360 [ 530.233241][T11454] ? __sys_sendmsg+0x290/0x290 [ 530.238034][T11454] ? __lock_acquire+0x7d10/0x7d10 [ 530.243098][T11454] __se_sys_sendmsg+0x1bb/0x2a0 [ 530.248060][T11454] ? __x64_sys_sendmsg+0x80/0x80 [ 530.253022][T11454] ? lockdep_hardirqs_on+0x94/0x140 [ 530.258235][T11454] do_syscall_64+0x4c/0xa0 [ 530.262665][T11454] ? clear_bhb_loop+0x60/0xb0 [ 530.267358][T11454] ? clear_bhb_loop+0x60/0xb0 [ 530.272049][T11454] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 530.277957][T11454] RIP: 0033:0x7faa75f9acb9 [ 530.282393][T11454] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 530.302009][T11454] RSP: 002b:00007faa76e41028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 530.310436][T11454] RAX: ffffffffffffffda RBX: 00007faa76215fa0 RCX: 00007faa75f9acb9 [ 530.318416][T11454] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000003 [ 530.326399][T11454] RBP: 00007faa76e41090 R08: 0000000000000000 R09: 0000000000000000 [ 530.334379][T11454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 530.342358][T11454] R13: 00007faa76216038 R14: 00007faa76215fa0 R15: 00007fff63a5b1f8 [ 530.350357][T11454] [ 530.728090][ T4281] Bluetooth: hci3: unexpected subevent 0x1a length: 150 > 6 [ 532.877519][T11525] FAULT_INJECTION: forcing a failure. [ 532.877519][T11525] name failslab, interval 1, probability 0, space 0, times 0 [ 532.885328][ T4281] Bluetooth: hci1: unexpected subevent 0x1a length: 150 > 6 [ 532.931748][T11525] CPU: 0 PID: 11525 Comm: syz.2.2270 Not tainted syzkaller #0 [ 532.939278][T11525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 532.949461][T11525] Call Trace: [ 532.952773][T11525] [ 532.955732][T11525] dump_stack_lvl+0x188/0x24e [ 532.960471][T11525] ? show_regs_print_info+0x12/0x12 [ 532.965726][T11525] ? load_image+0x400/0x400 [ 532.970275][T11525] ? nf_nat_ipv4_local_fn+0x3e5/0x530 [ 532.975701][T11525] should_fail_ex+0x399/0x4d0 [ 532.980432][T11525] should_failslab+0x5/0x20 [ 532.985499][T11525] slab_pre_alloc_hook+0x59/0x310 [ 532.990563][T11525] ? nf_hook+0x9e/0x390 [ 532.994768][T11525] kmem_cache_alloc+0x56/0x2f0 [ 532.999570][T11525] ? skb_clone+0x1e7/0x370 [ 533.004035][T11525] skb_clone+0x1e7/0x370 [ 533.008315][T11525] ? ip_mc_output+0x223/0x5e0 [ 533.013040][T11525] ip_mc_output+0x230/0x5e0 [ 533.017594][T11525] ip_send_skb+0x129/0x1c0 [ 533.022056][T11525] udp_send_skb+0xa88/0x1580 [ 533.026701][T11525] udp_sendmsg+0x1b33/0x23b0 [ 533.031340][T11525] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 533.036234][T11525] ? udp_cmsg_send+0x350/0x350 [ 533.041046][T11525] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 533.047068][T11525] ? lock_chain_count+0x20/0x20 [ 533.051989][T11525] ? __local_bh_enable_ip+0x136/0x1c0 [ 533.057414][T11525] ? _local_bh_enable+0xa0/0xa0 [ 533.062404][T11525] ? inet_sendmsg+0x147/0x2f0 [ 533.067124][T11525] ? inet_sendmsg+0x147/0x2f0 [ 533.071840][T11525] ? inet_send_prepare+0x260/0x260 [ 533.077026][T11525] ____sys_sendmsg+0x5be/0x970 [ 533.081840][T11525] ? __sys_sendmsg_sock+0x30/0x30 [ 533.086898][T11525] ? __import_iovec+0x315/0x500 [ 533.091797][T11525] ? import_iovec+0x6f/0xa0 [ 533.096342][T11525] ___sys_sendmsg+0x2a2/0x360 [ 533.101058][T11525] ? __sys_sendmsg+0x290/0x290 [ 533.105875][T11525] ? __lock_acquire+0x7d10/0x7d10 [ 533.110970][T11525] __se_sys_sendmsg+0x1bb/0x2a0 [ 533.115853][T11525] ? __x64_sys_sendmsg+0x80/0x80 [ 533.120839][T11525] ? lockdep_hardirqs_on+0x94/0x140 [ 533.126073][T11525] do_syscall_64+0x4c/0xa0 [ 533.130535][T11525] ? clear_bhb_loop+0x60/0xb0 [ 533.135260][T11525] ? clear_bhb_loop+0x60/0xb0 [ 533.140012][T11525] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 533.145947][T11525] RIP: 0033:0x7faa75f9acb9 [ 533.150404][T11525] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 533.170053][T11525] RSP: 002b:00007faa76e41028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 533.178516][T11525] RAX: ffffffffffffffda RBX: 00007faa76215fa0 RCX: 00007faa75f9acb9 [ 533.186533][T11525] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000003 [ 533.194548][T11525] RBP: 00007faa76e41090 R08: 0000000000000000 R09: 0000000000000000 [ 533.202554][T11525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 533.210556][T11525] R13: 00007faa76216038 R14: 00007faa76215fa0 R15: 00007fff63a5b1f8 [ 533.218583][T11525] [ 534.365648][ T4281] Bluetooth: hci3: unexpected subevent 0x1a length: 150 > 6 [ 534.773877][T11577] delete_channel: no stack [ 534.778541][T11577] delete_channel: no stack [ 534.779859][T11578] delete_channel: no stack [ 534.807926][T11578] delete_channel: no stack [ 535.948513][T11601] FAULT_INJECTION: forcing a failure. [ 535.948513][T11601] name failslab, interval 1, probability 0, space 0, times 0 [ 536.038794][T11601] CPU: 0 PID: 11601 Comm: syz.0.2297 Not tainted syzkaller #0 [ 536.046341][T11601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 536.056428][T11601] Call Trace: [ 536.059721][T11601] [ 536.062663][T11601] dump_stack_lvl+0x188/0x24e [ 536.067369][T11601] ? show_regs_print_info+0x12/0x12 [ 536.072586][T11601] ? load_image+0x400/0x400 [ 536.077111][T11601] ? nf_hook+0x9e/0x390 [ 536.081288][T11601] should_fail_ex+0x399/0x4d0 [ 536.085987][T11601] should_failslab+0x5/0x20 [ 536.090597][T11601] slab_pre_alloc_hook+0x59/0x310 [ 536.095639][T11601] kmem_cache_alloc+0x56/0x2f0 [ 536.100494][T11601] ? dst_alloc+0x101/0x160 [ 536.104939][T11601] dst_alloc+0x101/0x160 [ 536.109264][T11601] rt_dst_clone+0x54/0x6b0 [ 536.113784][T11601] ip_mc_finish_output+0xe8/0x250 [ 536.118873][T11601] ip_mc_output+0x2a1/0x5e0 [ 536.123404][T11601] ip_send_skb+0x129/0x1c0 [ 536.127952][T11601] udp_send_skb+0xa88/0x1580 [ 536.132572][T11601] udp_sendmsg+0x1b33/0x23b0 [ 536.137186][T11601] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 536.142055][T11601] ? udp_cmsg_send+0x350/0x350 [ 536.146835][T11601] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 536.152835][T11601] ? lock_chain_count+0x20/0x20 [ 536.157709][T11601] ? __local_bh_enable_ip+0x136/0x1c0 [ 536.163095][T11601] ? _local_bh_enable+0xa0/0xa0 [ 536.167974][T11601] ? inet_sendmsg+0x147/0x2f0 [ 536.172663][T11601] ? inet_sendmsg+0x147/0x2f0 [ 536.177348][T11601] ? inet_send_prepare+0x260/0x260 [ 536.182464][T11601] ____sys_sendmsg+0x5be/0x970 [ 536.187272][T11601] ? __sys_sendmsg_sock+0x30/0x30 [ 536.192332][T11601] ? __import_iovec+0x315/0x500 [ 536.197210][T11601] ? import_iovec+0x6f/0xa0 [ 536.201727][T11601] ___sys_sendmsg+0x2a2/0x360 [ 536.206419][T11601] ? __sys_sendmsg+0x290/0x290 [ 536.211211][T11601] ? __lock_acquire+0x7d10/0x7d10 [ 536.216268][T11601] __se_sys_sendmsg+0x1bb/0x2a0 [ 536.221132][T11601] ? __x64_sys_sendmsg+0x80/0x80 [ 536.226091][T11601] ? lockdep_hardirqs_on+0x94/0x140 [ 536.231305][T11601] do_syscall_64+0x4c/0xa0 [ 536.235735][T11601] ? clear_bhb_loop+0x60/0xb0 [ 536.240428][T11601] ? clear_bhb_loop+0x60/0xb0 [ 536.245119][T11601] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 536.251027][T11601] RIP: 0033:0x7faa3e59acb9 [ 536.255454][T11601] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 536.275067][T11601] RSP: 002b:00007faa3f3f4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 536.283671][T11601] RAX: ffffffffffffffda RBX: 00007faa3e815fa0 RCX: 00007faa3e59acb9 [ 536.291651][T11601] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000003 [ 536.299631][T11601] RBP: 00007faa3f3f4090 R08: 0000000000000000 R09: 0000000000000000 [ 536.307610][T11601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 536.315588][T11601] R13: 00007faa3e816038 R14: 00007faa3e815fa0 R15: 00007ffe5d9049a8 [ 536.323584][T11601] [ 536.711966][T11615] netlink: 'syz.3.2301': attribute type 15 has an invalid length. [ 536.757447][ T4281] Bluetooth: hci4: unexpected subevent 0x1a length: 150 > 6 [ 536.801323][T11615] netlink: 'syz.3.2301': attribute type 5 has an invalid length. [ 536.809812][T11615] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2301'. [ 538.534410][ T4281] Bluetooth: hci4: unexpected subevent 0x1a length: 150 > 6 [ 539.236272][T11664] FAULT_INJECTION: forcing a failure. [ 539.236272][T11664] name failslab, interval 1, probability 0, space 0, times 0 [ 539.287030][T11664] CPU: 1 PID: 11664 Comm: syz.2.2321 Not tainted syzkaller #0 [ 539.294565][T11664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 539.304650][T11664] Call Trace: [ 539.307979][T11664] [ 539.310947][T11664] dump_stack_lvl+0x188/0x24e [ 539.315671][T11664] ? stack_trace_snprint+0xf0/0xf0 [ 539.320833][T11664] ? show_regs_print_info+0x12/0x12 [ 539.326076][T11664] ? load_image+0x400/0x400 [ 539.330606][T11664] ? get_random_u8+0x4a7/0x960 [ 539.335401][T11664] ? kasan_set_track+0x60/0x70 [ 539.340274][T11664] ? kasan_set_track+0x4b/0x70 [ 539.345075][T11664] ? __kasan_slab_alloc+0x6b/0x80 [ 539.350134][T11664] ? slab_post_alloc_hook+0x4b/0x480 [ 539.355447][T11664] ? kmem_cache_alloc+0x123/0x2f0 [ 539.360497][T11664] ? dst_alloc+0x101/0x160 [ 539.364941][T11664] should_fail_ex+0x399/0x4d0 [ 539.369644][T11664] should_failslab+0x5/0x20 [ 539.374169][T11664] slab_pre_alloc_hook+0x59/0x310 [ 539.379207][T11664] ? ref_tracker_alloc+0x14e/0x4b0 [ 539.384338][T11664] __kmem_cache_alloc_node+0x4f/0x260 [ 539.389728][T11664] ? ref_tracker_alloc+0x14e/0x4b0 [ 539.394854][T11664] kmalloc_trace+0x26/0xe0 [ 539.399302][T11664] ref_tracker_alloc+0x14e/0x4b0 [ 539.404259][T11664] ? ref_tracker_dir_print+0x150/0x150 [ 539.409746][T11664] ? __kasan_slab_alloc+0x6b/0x80 [ 539.414790][T11664] ? slab_post_alloc_hook+0x67/0x480 [ 539.420095][T11664] dst_init+0xda/0x410 [ 539.424191][T11664] dst_alloc+0x12a/0x160 [ 539.428450][T11664] rt_dst_clone+0x54/0x6b0 [ 539.432885][T11664] ip_mc_finish_output+0xe8/0x250 [ 539.437939][T11664] ip_mc_output+0x2a1/0x5e0 [ 539.442464][T11664] ip_send_skb+0x129/0x1c0 [ 539.446898][T11664] udp_send_skb+0xa88/0x1580 [ 539.451523][T11664] udp_sendmsg+0x1b33/0x23b0 [ 539.456134][T11664] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 539.461019][T11664] ? udp_cmsg_send+0x350/0x350 [ 539.465800][T11664] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 539.471806][T11664] ? lock_chain_count+0x20/0x20 [ 539.476700][T11664] ? __local_bh_enable_ip+0x136/0x1c0 [ 539.482108][T11664] ? _local_bh_enable+0xa0/0xa0 [ 539.486996][T11664] ? inet_sendmsg+0x147/0x2f0 [ 539.491697][T11664] ? inet_sendmsg+0x147/0x2f0 [ 539.496395][T11664] ? inet_send_prepare+0x260/0x260 [ 539.501517][T11664] ____sys_sendmsg+0x5be/0x970 [ 539.506390][T11664] ? __sys_sendmsg_sock+0x30/0x30 [ 539.511424][T11664] ? __import_iovec+0x315/0x500 [ 539.516320][T11664] ? import_iovec+0x6f/0xa0 [ 539.520838][T11664] ___sys_sendmsg+0x2a2/0x360 [ 539.525534][T11664] ? __sys_sendmsg+0x290/0x290 [ 539.530332][T11664] ? __lock_acquire+0x7d10/0x7d10 [ 539.535401][T11664] __se_sys_sendmsg+0x1bb/0x2a0 [ 539.540266][T11664] ? __x64_sys_sendmsg+0x80/0x80 [ 539.545230][T11664] ? lockdep_hardirqs_on+0x94/0x140 [ 539.550441][T11664] do_syscall_64+0x4c/0xa0 [ 539.554876][T11664] ? clear_bhb_loop+0x60/0xb0 [ 539.559593][T11664] ? clear_bhb_loop+0x60/0xb0 [ 539.564320][T11664] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 539.570259][T11664] RIP: 0033:0x7faa75f9acb9 [ 539.574696][T11664] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 539.594337][T11664] RSP: 002b:00007faa76e41028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 539.602812][T11664] RAX: ffffffffffffffda RBX: 00007faa76215fa0 RCX: 00007faa75f9acb9 [ 539.610876][T11664] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000003 [ 539.618863][T11664] RBP: 00007faa76e41090 R08: 0000000000000000 R09: 0000000000000000 [ 539.626848][T11664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 539.634835][T11664] R13: 00007faa76216038 R14: 00007faa76215fa0 R15: 00007fff63a5b1f8 [ 539.642847][T11664] [ 539.790028][T11671] netlink: 'syz.2.2324': attribute type 21 has an invalid length. [ 540.495408][ T4281] Bluetooth: hci3: unexpected subevent 0x1a length: 150 > 6 [ 541.150490][T11695] netlink: 'syz.0.2333': attribute type 3 has an invalid length. [ 541.191133][T11695] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2333'. [ 541.486045][T11715] netlink: 'syz.4.2341': attribute type 4 has an invalid length. [ 541.528067][T11715] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2341'. [ 541.769147][T11728] FAULT_INJECTION: forcing a failure. [ 541.769147][T11728] name failslab, interval 1, probability 0, space 0, times 0 [ 541.782132][T11728] CPU: 1 PID: 11728 Comm: syz.3.2346 Not tainted syzkaller #0 [ 541.789635][T11728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 541.799746][T11728] Call Trace: [ 541.803053][T11728] [ 541.806001][T11728] dump_stack_lvl+0x188/0x24e [ 541.810713][T11728] ? show_regs_print_info+0x12/0x12 [ 541.815940][T11728] ? load_image+0x400/0x400 [ 541.820465][T11728] ? mark_lock+0x94/0x320 [ 541.824815][T11728] ? skb_network_protocol+0x525/0x780 [ 541.830211][T11728] should_fail_ex+0x399/0x4d0 [ 541.834920][T11728] should_failslab+0x5/0x20 [ 541.839440][T11728] slab_pre_alloc_hook+0x59/0x310 [ 541.844571][T11728] kmem_cache_alloc+0x56/0x2f0 [ 541.849526][T11728] ? skb_clone+0x1e7/0x370 [ 541.853962][T11728] skb_clone+0x1e7/0x370 [ 541.858221][T11728] ? dev_queue_xmit_nit+0x44d/0xbb0 [ 541.863438][T11728] dev_queue_xmit_nit+0x249/0xbb0 [ 541.868483][T11728] ? dev_queue_xmit_nit+0x29/0xbb0 [ 541.873619][T11728] dev_hard_start_xmit+0x154/0x870 [ 541.878755][T11728] __dev_queue_xmit+0x1a7f/0x37f0 [ 541.883792][T11728] ? lock_chain_count+0x20/0x20 [ 541.888662][T11728] ? __dev_queue_xmit+0x26b/0x37f0 [ 541.893790][T11728] ? netdev_core_pick_tx+0x340/0x340 [ 541.899115][T11728] ? neigh_connected_output+0x3ac/0x450 [ 541.904784][T11728] ? ip_finish_output2+0x3ff/0x11b0 [ 541.910092][T11728] ip_finish_output2+0xd05/0x11b0 [ 541.915135][T11728] ? ip_finish_output2+0x3ff/0x11b0 [ 541.920349][T11728] ? ip_mc_finish_output+0x250/0x250 [ 541.925647][T11728] ? trace_netif_rx_exit+0x9b/0x230 [ 541.930864][T11728] ? ip_fragment+0x210/0x210 [ 541.935472][T11728] ? dev_loopback_xmit+0x2ec/0x430 [ 541.940595][T11728] ? ip_skb_dst_mtu+0x587/0x9c0 [ 541.945466][T11728] ? ip_finish_output+0x3eb/0x4c0 [ 541.950512][T11728] ip_send_skb+0x129/0x1c0 [ 541.954947][T11728] udp_send_skb+0xa88/0x1580 [ 541.959564][T11728] udp_sendmsg+0x1b33/0x23b0 [ 541.964177][T11728] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 541.969043][T11728] ? udp_cmsg_send+0x350/0x350 [ 541.973825][T11728] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 541.979832][T11728] ? lock_chain_count+0x20/0x20 [ 541.984707][T11728] ? __local_bh_enable_ip+0x136/0x1c0 [ 541.990104][T11728] ? _local_bh_enable+0xa0/0xa0 [ 541.994975][T11728] ? inet_sendmsg+0x147/0x2f0 [ 541.999663][T11728] ? inet_sendmsg+0x147/0x2f0 [ 542.004356][T11728] ? inet_send_prepare+0x260/0x260 [ 542.009477][T11728] ____sys_sendmsg+0x5be/0x970 [ 542.014260][T11728] ? __sys_sendmsg_sock+0x30/0x30 [ 542.019293][T11728] ? __import_iovec+0x315/0x500 [ 542.024163][T11728] ? import_iovec+0x6f/0xa0 [ 542.028680][T11728] ___sys_sendmsg+0x2a2/0x360 [ 542.033373][T11728] ? __sys_sendmsg+0x290/0x290 [ 542.038166][T11728] ? __lock_acquire+0x7d10/0x7d10 [ 542.043235][T11728] __se_sys_sendmsg+0x1bb/0x2a0 [ 542.048303][T11728] ? __x64_sys_sendmsg+0x80/0x80 [ 542.053304][T11728] ? lockdep_hardirqs_on+0x94/0x140 [ 542.058534][T11728] do_syscall_64+0x4c/0xa0 [ 542.062978][T11728] ? clear_bhb_loop+0x60/0xb0 [ 542.067681][T11728] ? clear_bhb_loop+0x60/0xb0 [ 542.072378][T11728] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 542.078283][T11728] RIP: 0033:0x7fd2e6b9acb9 [ 542.082707][T11728] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 542.102327][T11728] RSP: 002b:00007fd2e7b36028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 542.110753][T11728] RAX: ffffffffffffffda RBX: 00007fd2e6e15fa0 RCX: 00007fd2e6b9acb9 [ 542.118736][T11728] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000003 [ 542.126728][T11728] RBP: 00007fd2e7b36090 R08: 0000000000000000 R09: 0000000000000000 [ 542.134710][T11728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 542.142707][T11728] R13: 00007fd2e6e16038 R14: 00007fd2e6e15fa0 R15: 00007ffcfa1f6b18 [ 542.150700][T11728] [ 542.247636][T11715] .`: renamed from bond0 [ 542.259219][T11727] netlink: 'syz.2.2344': attribute type 21 has an invalid length. [ 542.268475][T11727] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2344'. [ 542.290064][ T4281] Bluetooth: hci4: unexpected subevent 0x1a length: 150 > 6 [ 542.395475][T11734] netlink: 'syz.3.2347': attribute type 29 has an invalid length. [ 542.410213][T11734] netlink: 'syz.3.2347': attribute type 29 has an invalid length. [ 542.424585][T11734] netlink: 'syz.3.2347': attribute type 29 has an invalid length. [ 542.597430][T11741] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2350'. [ 543.524576][ T4281] Bluetooth: hci0: unexpected subevent 0x1a length: 150 > 6 [ 543.808606][ T4392] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 544.179080][T11778] netlink: 'syz.3.2363': attribute type 22 has an invalid length. [ 544.281177][T11778] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2363'. [ 544.293763][T11782] FAULT_INJECTION: forcing a failure. [ 544.293763][T11782] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 544.369948][T11782] CPU: 1 PID: 11782 Comm: syz.1.2365 Not tainted syzkaller #0 [ 544.377491][T11782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 544.387585][T11782] Call Trace: [ 544.390900][T11782] [ 544.393861][T11782] dump_stack_lvl+0x188/0x24e [ 544.398601][T11782] ? show_regs_print_info+0x12/0x12 [ 544.403854][T11782] ? load_image+0x400/0x400 [ 544.408405][T11782] ? __lock_acquire+0x7d10/0x7d10 [ 544.413487][T11782] ? snprintf+0xe5/0x140 [ 544.417782][T11782] should_fail_ex+0x399/0x4d0 [ 544.422524][T11782] _copy_to_user+0x2c/0x130 [ 544.427075][T11782] simple_read_from_buffer+0xe3/0x150 [ 544.432498][T11782] proc_fail_nth_read+0x1a6/0x220 [ 544.437571][T11782] ? proc_fault_inject_write+0x310/0x310 [ 544.443268][T11782] ? fsnotify_perm+0x248/0x550 [ 544.448075][T11782] ? proc_fault_inject_write+0x310/0x310 [ 544.453760][T11782] vfs_read+0x2de/0xa00 [ 544.457965][T11782] ? kernel_read+0x1e0/0x1e0 [ 544.462605][T11782] ? __fget_files+0x28/0x4b0 [ 544.467241][T11782] ? __fget_files+0x28/0x4b0 [ 544.471874][T11782] ? __fget_files+0x43d/0x4b0 [ 544.476594][T11782] ? __fdget_pos+0x2ae/0x360 [ 544.481198][T11782] ? ksys_read+0x71/0x250 [ 544.485575][T11782] ksys_read+0x14c/0x250 [ 544.489839][T11782] ? vfs_write+0xa30/0xa30 [ 544.494274][T11782] ? lockdep_hardirqs_on+0x94/0x140 [ 544.499487][T11782] do_syscall_64+0x4c/0xa0 [ 544.503920][T11782] ? clear_bhb_loop+0x60/0xb0 [ 544.508613][T11782] ? clear_bhb_loop+0x60/0xb0 [ 544.513305][T11782] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 544.519217][T11782] RIP: 0033:0x7f8a7fd5b58e [ 544.523644][T11782] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 544.543438][T11782] RSP: 002b:00007f8a80d05fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 544.551865][T11782] RAX: ffffffffffffffda RBX: 00007f8a80d066c0 RCX: 00007f8a7fd5b58e [ 544.559846][T11782] RDX: 000000000000000f RSI: 00007f8a80d060a0 RDI: 0000000000000004 [ 544.567844][T11782] RBP: 00007f8a80d06090 R08: 0000000000000000 R09: 0000000000000000 [ 544.575824][T11782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 544.583804][T11782] R13: 00007f8a80016038 R14: 00007f8a80015fa0 R15: 00007ffcea729738 [ 544.591804][T11782] [ 544.602382][T11779] can: request_module (can-proto-0) failed. [ 545.219656][ T4281] Bluetooth: hci1: unexpected subevent 0x1a length: 150 > 6 [ 546.076980][T11830] netlink: 126632 bytes leftover after parsing attributes in process `syz.4.2378'. [ 549.061888][T11856] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2386'. [ 549.273206][ T4281] Bluetooth: hci1: unexpected subevent 0x1a length: 150 > 6 [ 556.975741][T11968] IPv6: pim6reg1: Disabled Multicast RS [ 558.546523][T11988] netlink: 'syz.0.2426': attribute type 1 has an invalid length. [ 558.625874][T11991] netlink: 'syz.0.2426': attribute type 1 has an invalid length. [ 561.327231][T12034] netlink: 'syz.0.2441': attribute type 9 has an invalid length. [ 561.337115][T12034] netlink: 61951 bytes leftover after parsing attributes in process `syz.0.2441'. [ 562.144291][T12056] netlink: 'syz.2.2449': attribute type 3 has an invalid length. [ 562.202032][T12056] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2449'. [ 562.898628][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.905041][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 572.560220][T12238] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2514'. [ 572.605003][T12238] net_ratelimit: 390 callbacks suppressed [ 572.605023][T12238] openvswitch: netlink: Message has 6 unknown bytes. [ 574.941576][ T41] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 576.469783][ T7224] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 576.540184][T12364] netlink: 'syz.4.2537': attribute type 10 has an invalid length. [ 576.577724][T12364] bridge0: port 2(bridge_slave_1) entered disabled state [ 576.588225][T12364] bridge0: port 1(bridge_slave_0) entered disabled state [ 576.796626][T12364] bridge0: port 2(bridge_slave_1) entered blocking state [ 576.805459][T12364] bridge0: port 2(bridge_slave_1) entered forwarding state [ 576.817966][T12364] bridge0: port 1(bridge_slave_0) entered blocking state [ 576.826863][T12364] bridge0: port 1(bridge_slave_0) entered forwarding state [ 576.942950][T12364] team0: Port device bridge0 added [ 576.983998][ T7224] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 578.506899][T12418] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2555'. [ 580.024685][T12451] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 580.153523][T12451] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 581.032201][T12479] netlink: 'syz.3.2575': attribute type 2 has an invalid length. [ 581.674491][T12479] device 0 entered promiscuous mode [ 581.699279][T12481] netlink: 'syz.2.2577': attribute type 2 has an invalid length. [ 582.954783][T12529] netlink: 'syz.4.2592': attribute type 29 has an invalid length. [ 583.488891][T12540] netlink: 143932 bytes leftover after parsing attributes in process `syz.2.2598'. [ 583.506150][T12540] netlink: zone id is out of range [ 583.535889][T12540] netlink: zone id is out of range [ 583.589241][T12540] netlink: zone id is out of range [ 583.596993][T12540] netlink: zone id is out of range [ 583.608161][T12540] netlink: zone id is out of range [ 583.615015][T12540] netlink: zone id is out of range [ 583.620289][T12540] netlink: zone id is out of range [ 583.643667][T12543] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2598'. [ 583.746940][T12540] netlink: zone id is out of range [ 583.818226][T12540] netlink: zone id is out of range [ 584.929757][T12584] netlink: 'syz.2.2613': attribute type 46 has an invalid length. [ 584.981236][T12584] netlink: 'syz.2.2613': attribute type 46 has an invalid length. [ 586.482907][T12632] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2625'. [ 586.939283][T12645] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.2631'. [ 587.296221][T12652] netlink: 'syz.2.2637': attribute type 9 has an invalid length. [ 587.311090][T12652] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.2637'. [ 588.502334][T12695] netlink: 'syz.0.2651': attribute type 21 has an invalid length. [ 588.581121][T12695] netlink: 'syz.0.2651': attribute type 1 has an invalid length. [ 596.263337][ T4281] Bluetooth: hci0: unexpected event 0x09 length: 15 > 3 [ 596.468058][T12891] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2717'. [ 596.523007][T12891] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2717'. [ 596.551385][T12893] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2717'. [ 605.200299][T12965] syz.4.2741[12965] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 605.200461][T12965] syz.4.2741[12965] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 607.597499][ T9] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 610.386389][T13072] netlink: 830 bytes leftover after parsing attributes in process `syz.4.2779'. [ 611.610003][T13095] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 611.621082][T13095] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 611.629287][T13095] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 611.648897][T13095] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 611.661673][T13095] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 611.669127][T13095] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 611.688186][ T7224] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.088687][ T7224] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.446651][ T7224] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.484471][T13107] bridge0: port 2(bridge_slave_1) entered disabled state [ 612.491757][T13107] bridge0: port 1(bridge_slave_0) entered disabled state [ 612.585326][ T7224] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.084007][T13094] chnl_net:caif_netlink_parms(): no params data found [ 613.646752][T13145] netlink: 'syz.4.2802': attribute type 49 has an invalid length. [ 613.695616][ T4281] Bluetooth: hci0: command 0x0409 tx timeout [ 613.953559][T13094] bridge0: port 1(bridge_slave_0) entered blocking state [ 614.011214][T13094] bridge0: port 1(bridge_slave_0) entered disabled state [ 614.019518][T13094] device bridge_slave_0 entered promiscuous mode [ 614.243775][T13094] bridge0: port 2(bridge_slave_1) entered blocking state [ 614.268574][T13094] bridge0: port 2(bridge_slave_1) entered disabled state [ 614.319388][T13094] device bridge_slave_1 entered promiscuous mode [ 614.551017][T13165] netlink: 'syz.2.2808': attribute type 2 has an invalid length. [ 614.559352][T13165] netlink: 'syz.2.2808': attribute type 1 has an invalid length. [ 614.668942][T13165] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2808'. [ 614.889087][T13094] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 614.948489][T13094] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 615.276059][T13094] team0: Port device team_slave_0 added [ 615.293669][T13094] team0: Port device team_slave_1 added [ 615.461684][T13094] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 615.475916][T13094] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 615.567569][T13094] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 615.681832][T13094] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 615.699874][T13094] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 615.771135][ T4281] Bluetooth: hci0: command 0x041b tx timeout [ 615.828366][T13094] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 616.328568][T13210] netlink: 'syz.2.2820': attribute type 29 has an invalid length. [ 616.381204][T13210] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2820'. [ 616.405904][T13094] device hsr_slave_0 entered promiscuous mode [ 616.426910][T13094] device hsr_slave_1 entered promiscuous mode [ 616.454914][T13094] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 616.479471][T13094] Cannot create hsr debugfs directory [ 616.515878][T13210] netlink: 'syz.2.2820': attribute type 29 has an invalid length. [ 616.533502][T13210] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2820'. [ 616.547776][T13214] netlink: 'syz.2.2820': attribute type 10 has an invalid length. [ 616.618038][T13214] bond0: (slave gretap0): Enslaving as an active interface with an up link [ 617.041444][ T7224] bond0: (slave wlan1): Releasing backup interface [ 617.090368][T13225] netlink: 'syz.2.2823': attribute type 27 has an invalid length. [ 617.136025][T13225] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2823'. [ 617.703302][ T7224] device hsr_slave_0 left promiscuous mode [ 617.739321][ T7224] device hsr_slave_1 left promiscuous mode [ 617.751756][ T7224] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 617.764076][ T7224] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 617.779780][ T7224] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 617.787798][ T7224] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 617.851068][ T4281] Bluetooth: hci0: command 0x040f tx timeout [ 617.882036][ T7224] device veth0_macvtap left promiscuous mode [ 617.918388][ T7224] device veth1_vlan left promiscuous mode [ 617.982874][ T7224] device veth0_vlan left promiscuous mode [ 618.375674][T13253] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.2832'. [ 619.938248][ T4281] Bluetooth: hci0: command 0x0419 tx timeout [ 620.084496][ T7224] team0 (unregistering): Port device team_slave_1 removed [ 620.254066][ T7224] team0 (unregistering): Port device team_slave_0 removed [ 620.308942][ T7224] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 620.422050][ T7224] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 620.998524][ T7224] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 621.068475][ T4268] Bluetooth: hci2: unexpected subevent 0x19 length: 150 > 28 [ 621.081066][ T4268] Bluetooth: hci2: Unable to find connection with handle 0x6c6c [ 621.124305][ T7224] bond0 (unregistering): Released all slaves [ 621.391147][T13304] netlink: 'syz.2.2847': attribute type 3 has an invalid length. [ 621.432042][T13304] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2847'. [ 623.151980][T13094] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 623.187433][T13094] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 623.254830][T13094] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 623.341643][T13094] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 623.616289][T13341] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.2860'. [ 623.996433][T13094] 8021q: adding VLAN 0 to HW filter on device bond0 [ 624.116849][T13094] 8021q: adding VLAN 0 to HW filter on device team0 [ 624.174402][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 624.197630][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 624.322990][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 624.334222][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.340615][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.391780][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 624.452812][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 624.460215][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 624.551229][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 624.589332][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 624.646971][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 624.654272][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 624.708014][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 624.745063][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 624.765440][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 624.816481][T13373] netlink: 'syz.4.2865': attribute type 10 has an invalid length. [ 625.336219][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 625.393422][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 625.480616][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 625.496182][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 625.522147][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 625.574288][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 625.584662][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 625.606252][T13094] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 625.628361][T13094] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 625.654198][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 625.668230][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 625.712526][T13385] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2871'. [ 627.031968][ T7224] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 627.040198][ T7224] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 627.106797][T13094] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 627.174745][ T7224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 627.191841][ T7224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 627.304663][T13094] device veth0_vlan entered promiscuous mode [ 627.357051][ T7224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 627.371899][ T7224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 627.425624][T13094] device veth1_vlan entered promiscuous mode [ 627.452005][ T7224] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 627.480011][ T7224] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 627.490389][ T7224] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 627.626768][T13422] netlink: 'syz.0.2882': attribute type 10 has an invalid length. [ 627.668248][T13094] device veth0_macvtap entered promiscuous mode [ 627.816527][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 627.852419][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 627.882209][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 627.902699][T13094] device veth1_macvtap entered promiscuous mode [ 628.018664][T13094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 628.094626][T13094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 628.169031][T13094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 628.245124][T13094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 628.351586][T13094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 628.480943][T13094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 628.534759][T13094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 628.552620][T13094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 628.566970][T13094] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 628.606350][ T7224] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 628.637631][ T7224] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 628.671987][ T7224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 628.733470][T13094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 628.780251][T13094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 628.818439][T13094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 628.860120][T13094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 628.884672][T13094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 628.914732][T13094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 628.935738][T13094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 628.956239][T13094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 628.983529][T13094] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 629.001198][ T7224] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 629.010607][ T7224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 629.033545][T13455] netlink: 'syz.3.2891': attribute type 21 has an invalid length. [ 629.066512][T13455] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2891'. [ 629.095066][T13455] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2891'. [ 629.169867][T13094] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.225835][T13094] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.256401][T13094] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.299212][T13094] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.641214][ T7224] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 629.649527][ T7224] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 629.841888][T12352] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 629.903353][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 629.923659][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 630.005078][T12358] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 630.835262][T13493] netlink: 'syz.0.2902': attribute type 2 has an invalid length. [ 630.929626][T13493] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2902'. [ 632.432557][ T4281] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 632.444166][ T4281] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 632.454190][ T4281] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 632.475793][ T4281] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 632.485568][ T4281] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 632.494668][ T4281] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 632.689841][T12346] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.836018][ T7224] wlan1: Trigger new scan to find an IBSS to join [ 633.047733][T12346] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.265360][T12346] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.502237][T12346] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.594875][T13556] netlink: 'syz.1.2918': attribute type 2 has an invalid length. [ 633.603783][T13556] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2918'. [ 633.922252][T13529] chnl_net:caif_netlink_parms(): no params data found [ 634.386193][T13529] bridge0: port 1(bridge_slave_0) entered blocking state [ 634.409581][T13529] bridge0: port 1(bridge_slave_0) entered disabled state [ 634.418425][T13529] device bridge_slave_0 entered promiscuous mode [ 634.429908][T13529] bridge0: port 2(bridge_slave_1) entered blocking state [ 634.451248][T13529] bridge0: port 2(bridge_slave_1) entered disabled state [ 634.470012][T13529] device bridge_slave_1 entered promiscuous mode [ 634.584843][ T4281] Bluetooth: hci1: command 0x0409 tx timeout [ 634.791505][T13529] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 635.007734][T13529] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 635.179312][T13529] team0: Port device team_slave_0 added [ 635.235393][T13529] team0: Port device team_slave_1 added [ 635.255916][T13588] netlink: 'syz.1.2929': attribute type 11 has an invalid length. [ 635.293100][T13588] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2929'. [ 635.401067][T13529] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 635.408166][T13529] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 635.467486][T13529] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 635.534835][T13529] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 635.557678][T13529] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 635.702069][T13529] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 635.977408][T13529] device hsr_slave_0 entered promiscuous mode [ 636.024875][T13529] device hsr_slave_1 entered promiscuous mode [ 636.053715][T13529] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 636.123132][T13529] Cannot create hsr debugfs directory [ 636.651152][ T4281] Bluetooth: hci1: command 0x041b tx timeout [ 636.793228][T12346] device hsr_slave_0 left promiscuous mode [ 636.804821][T12346] device hsr_slave_1 left promiscuous mode [ 636.839406][T12346] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 636.915962][T12346] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 636.953426][T12346] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 636.961074][T12346] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 636.969361][T12346] device bridge_slave_1 left promiscuous mode [ 636.980223][T12346] bridge0: port 2(bridge_slave_1) entered disabled state [ 637.002700][T12346] device bridge_slave_0 left promiscuous mode [ 637.009204][T12346] bridge0: port 1(bridge_slave_0) entered disabled state [ 637.041239][T12346] device veth1_vlan left promiscuous mode [ 637.047518][T12346] device veth0_vlan left promiscuous mode [ 637.319478][T12346] team0 (unregistering): Port device geneve1 removed [ 637.855908][ T9] wlan1: Trigger new scan to find an IBSS to join [ 637.956485][T12346] team0 (unregistering): Port device team_slave_1 removed [ 638.073644][T12346] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 638.142472][T12346] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 638.565215][T12346] .` (unregistering): (slave team0): Releasing backup interface [ 638.577751][T12346] team0 (unregistering): Port device bridge0 removed [ 638.618572][T12346] .` (unregistering): Released all slaves [ 638.721199][T13613] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2937'. [ 638.732951][ T4281] Bluetooth: hci1: command 0x040f tx timeout [ 638.740547][T13613] device bond_slave_0 entered promiscuous mode [ 638.747200][T13613] device bond_slave_1 entered promiscuous mode [ 638.754115][ T9] wlan1: Creating new IBSS network, BSSID 6a:e5:2e:98:a4:19 [ 640.811402][ T4281] Bluetooth: hci1: command 0x0419 tx timeout [ 640.891268][T12360] wlan1: Trigger new scan to find an IBSS to join [ 641.958281][T13645] delete_channel: no stack [ 642.068519][T13650] netlink: 'syz.0.2948': attribute type 39 has an invalid length. [ 642.554105][T13664] netlink: 'syz.1.2954': attribute type 2 has an invalid length. [ 642.575806][T13664] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2954'. [ 642.803289][T13668] netlink: 'syz.3.2955': attribute type 1 has an invalid length. [ 643.025772][T13529] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 643.075677][T13529] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 643.110496][T13529] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 643.174177][T13529] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 643.721302][T13529] 8021q: adding VLAN 0 to HW filter on device bond0 [ 643.760031][T12354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 643.795950][T12354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 643.831656][T13529] 8021q: adding VLAN 0 to HW filter on device team0 [ 643.859541][T13637] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 643.889742][T13637] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 643.908680][T13637] bridge0: port 1(bridge_slave_0) entered blocking state [ 643.915909][T13637] bridge0: port 1(bridge_slave_0) entered forwarding state [ 643.950602][T13637] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 643.979355][T13637] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 644.003916][T13637] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 644.041046][T13637] bridge0: port 2(bridge_slave_1) entered blocking state [ 644.048264][T13637] bridge0: port 2(bridge_slave_1) entered forwarding state [ 644.079370][T13637] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 645.851451][ T1173] wlan1: Trigger new scan to find an IBSS to join [ 646.938089][T12356] wlan1: Creating new IBSS network, BSSID 46:7e:7b:41:cb:c8 [ 646.959529][T13637] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 646.996537][T13637] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 647.024616][T13637] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 647.071627][T13637] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 647.089720][T13637] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 647.120140][T13637] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 647.148188][T13637] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 647.167630][T13637] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 647.197962][T13637] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 647.217936][T13637] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 647.252363][T13529] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 649.079087][T12359] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 649.101155][T12359] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 649.117441][T13529] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 650.168084][T13770] netlink: 'syz.0.2983': attribute type 3 has an invalid length. [ 650.179873][T13770] netlink: 13435 bytes leftover after parsing attributes in process `syz.0.2983'. [ 650.813653][T13764] netlink: 'syz.3.2982': attribute type 10 has an invalid length. [ 650.835582][T13764] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2982'. [ 650.864483][T13764] device batadv0 entered promiscuous mode [ 650.881738][T13764] net_ratelimit: 3661 callbacks suppressed [ 650.881758][T13764] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 651.722645][T12346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 651.748317][T12346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 651.795295][T12356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 651.813578][T12356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 651.829278][T13529] device veth0_vlan entered promiscuous mode [ 651.844242][T12356] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 651.873749][T12356] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 651.896440][T13529] device veth1_vlan entered promiscuous mode [ 651.958725][T12359] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 651.968409][T12359] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 651.984632][T12359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 652.172424][T12359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 652.214382][T13529] device veth0_macvtap entered promiscuous mode [ 652.241753][T13529] device veth1_macvtap entered promiscuous mode [ 652.422017][T13529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 652.460218][T13529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 652.538261][T13529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 652.628220][T13529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 652.670998][T13529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 652.705109][T13529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 652.718217][T13529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 652.733604][T13529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 652.756191][T13529] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 652.776208][T13808] netlink: 'syz.0.2993': attribute type 12 has an invalid length. [ 652.841128][T13808] netlink: 120 bytes leftover after parsing attributes in process `syz.0.2993'. [ 652.850446][T12354] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 652.876403][T12354] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 652.909470][T12354] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 652.939337][T12354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 652.985530][T13529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 653.015711][T13529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 653.039638][T13529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 653.057597][T13529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 653.068732][T13529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 653.085799][T13529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 653.097818][T13529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 653.115068][T13529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 653.129805][T13529] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 653.165763][T12354] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 653.189868][T12354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 653.243353][T13529] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 653.260315][T13529] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 653.281508][T13529] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 653.290526][T13529] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 653.480154][T12356] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 653.504040][T12356] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 653.558530][T12346] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 653.589689][T12356] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 653.628093][T12356] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 653.665262][T13637] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 655.383132][ T4281] Bluetooth: hci4: unexpected subevent 0x1a length: 150 > 6 [ 656.804510][ T4268] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 656.814745][ T4268] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 656.824188][ T4268] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 656.877819][ T4268] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 656.888087][ T4268] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 656.897333][ T4268] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 656.961460][T13637] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 657.330434][T13637] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 657.562523][T13890] netlink: 'syz.4.3017': attribute type 17 has an invalid length. [ 657.598428][T13890] netlink: 'syz.4.3017': attribute type 16 has an invalid length. [ 657.677291][T13890] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3017'. [ 657.997157][T13637] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.039360][T13896] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3019'. [ 658.072838][T13896] device bond_slave_0 entered promiscuous mode [ 658.079272][T13896] device bond_slave_1 entered promiscuous mode [ 658.085850][T13896] device netdevsim0 entered promiscuous mode [ 658.167814][T13637] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.663805][T13880] chnl_net:caif_netlink_parms(): no params data found [ 658.954348][T13915] netlink: 'syz.3.3023': attribute type 2 has an invalid length. [ 658.970992][ T4281] Bluetooth: hci3: command 0x0409 tx timeout [ 658.990634][T13915] netlink: 17267 bytes leftover after parsing attributes in process `syz.3.3023'. [ 659.437356][T13880] bridge0: port 1(bridge_slave_0) entered blocking state [ 659.501290][T13880] bridge0: port 1(bridge_slave_0) entered disabled state [ 659.599118][T13880] device bridge_slave_0 entered promiscuous mode [ 659.728907][T13880] bridge0: port 2(bridge_slave_1) entered blocking state [ 659.736998][T13880] bridge0: port 2(bridge_slave_1) entered disabled state [ 659.752466][T13880] device bridge_slave_1 entered promiscuous mode [ 659.902777][T13637] bond0: (slave gretap0): Releasing backup interface [ 659.932518][T13880] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 659.962083][T13940] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3031'. [ 659.994785][T13940] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3031'. [ 660.037153][T13880] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 660.067202][T13943] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3031'. [ 660.156011][T13940] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3031'. [ 660.222602][T13880] team0: Port device team_slave_0 added [ 660.261900][T13880] team0: Port device team_slave_1 added [ 660.489281][T13880] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 660.516056][T13880] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 660.620594][T13880] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 660.934997][T13880] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 660.971093][T13880] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 661.017828][T13880] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 661.059519][ T4281] Bluetooth: hci3: command 0x041b tx timeout [ 661.321789][T13637] device veth0_to_bridge left promiscuous mode [ 661.328352][T13637] Ÿë: port 1(veth0_to_bridge) entered disabled state [ 661.389678][T13637] device hsr_slave_0 left promiscuous mode [ 661.411629][T13637] device hsr_slave_1 left promiscuous mode [ 661.428724][T13637] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 661.450190][T13637] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 661.473001][T13637] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 661.480654][T13637] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 661.540105][T13637] device veth1_vlan left promiscuous mode [ 662.812209][T13637] team0 (unregistering): Port device team_slave_1 removed [ 662.915470][T13637] team0 (unregistering): Port device team_slave_0 removed [ 663.008757][T13637] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 663.107072][T13637] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 663.130940][ T4281] Bluetooth: hci3: command 0x040f tx timeout [ 663.638078][T13637] bond0 (unregistering): Released all slaves [ 663.717300][T13968] device sit0 entered promiscuous mode [ 663.864717][T13880] device hsr_slave_0 entered promiscuous mode [ 663.902173][T13880] device hsr_slave_1 entered promiscuous mode [ 663.924607][T13880] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 663.942790][T13880] Cannot create hsr debugfs directory [ 664.427764][ T4281] Bluetooth: hci1: unexpected subevent 0x19 length: 150 > 28 [ 664.435919][ T4281] Bluetooth: hci1: Unable to find connection with handle 0x6c6c [ 664.554217][T13993] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.3047'. [ 665.210916][ T4281] Bluetooth: hci3: command 0x0419 tx timeout [ 665.265949][T13880] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 665.287028][T13880] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 665.328522][T13880] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 665.372156][T13880] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 665.914846][T13880] 8021q: adding VLAN 0 to HW filter on device bond0 [ 666.072541][T12359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 666.102503][T12359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 666.163369][T13880] 8021q: adding VLAN 0 to HW filter on device team0 [ 666.211784][T12359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 666.241674][T12359] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 666.317544][T12359] bridge0: port 1(bridge_slave_0) entered blocking state [ 666.324772][T12359] bridge0: port 1(bridge_slave_0) entered forwarding state [ 666.402341][T12359] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 666.461459][T12359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 666.600096][T12359] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 666.661571][T12359] bridge0: port 2(bridge_slave_1) entered blocking state [ 666.668799][T12359] bridge0: port 2(bridge_slave_1) entered forwarding state [ 666.817272][T12354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 666.857258][T14028] netlink: 'syz.0.3057': attribute type 10 has an invalid length. [ 666.889142][T14028] netlink: 55 bytes leftover after parsing attributes in process `syz.0.3057'. [ 667.180096][T14036] netlink: 184 bytes leftover after parsing attributes in process `syz.4.3058'. [ 667.247316][T14039] netlink: 763 bytes leftover after parsing attributes in process `syz.4.3058'. [ 667.268371][T12359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 667.297874][T12359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 667.335087][T12359] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 667.362321][T12359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 667.385186][T12359] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 667.402835][T12359] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 667.426689][T12359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 667.447580][T12359] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 667.524696][T12354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 667.545291][T12354] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 667.597230][T13880] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 668.207499][T14064] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.3067'. [ 668.248209][T14064] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 668.442743][T12354] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 668.450789][T12354] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 668.473455][T13880] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 668.574618][T12360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 668.591872][T12360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 668.603027][T14075] FAULT_INJECTION: forcing a failure. [ 668.603027][T14075] name failslab, interval 1, probability 0, space 0, times 0 [ 668.659608][T14075] CPU: 0 PID: 14075 Comm: syz.1.3070 Not tainted syzkaller #0 [ 668.667168][T14075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 668.677269][T14075] Call Trace: [ 668.680583][T14075] [ 668.683536][T14075] dump_stack_lvl+0x188/0x24e [ 668.688248][T14075] ? stack_trace_snprint+0xf0/0xf0 [ 668.693379][T14075] ? show_regs_print_info+0x12/0x12 [ 668.698600][T14075] ? load_image+0x400/0x400 [ 668.703207][T14075] ? kasan_set_track+0x60/0x70 [ 668.708179][T14075] ? kasan_set_track+0x4b/0x70 [ 668.712979][T14075] ? __kasan_slab_alloc+0x6b/0x80 [ 668.718025][T14075] ? slab_post_alloc_hook+0x4b/0x480 [ 668.723344][T14075] ? kmem_cache_alloc+0x123/0x2f0 [ 668.728421][T14075] ? dst_alloc+0x101/0x160 [ 668.732873][T14075] should_fail_ex+0x399/0x4d0 [ 668.737583][T14075] should_failslab+0x5/0x20 [ 668.742126][T14075] slab_pre_alloc_hook+0x59/0x310 [ 668.747253][T14075] ? ref_tracker_alloc+0x14e/0x4b0 [ 668.752477][T14075] __kmem_cache_alloc_node+0x4f/0x260 [ 668.758043][T14075] ? ref_tracker_alloc+0x14e/0x4b0 [ 668.763173][T14075] kmalloc_trace+0x26/0xe0 [ 668.767608][T14075] ref_tracker_alloc+0x14e/0x4b0 [ 668.772564][T14075] ? ref_tracker_dir_print+0x150/0x150 [ 668.778043][T14075] ? __lock_acquire+0x7d10/0x7d10 [ 668.783213][T14075] ? __kasan_slab_alloc+0x6b/0x80 [ 668.788254][T14075] ? slab_post_alloc_hook+0x67/0x480 [ 668.793552][T14075] ? slab_pre_alloc_hook+0x59/0x310 [ 668.798795][T14075] dst_init+0xda/0x410 [ 668.802898][T14075] dst_alloc+0x12a/0x160 [ 668.807184][T14075] rt_dst_clone+0x54/0x6b0 [ 668.811623][T14075] ip_mc_finish_output+0xe8/0x250 [ 668.816675][T14075] ip_mc_output+0x2a1/0x5e0 [ 668.821214][T14075] ip_send_skb+0x129/0x1c0 [ 668.825650][T14075] udp_send_skb+0xa88/0x1580 [ 668.830526][T14075] udp_sendmsg+0x1b33/0x23b0 [ 668.835135][T14075] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 668.840006][T14075] ? udp_cmsg_send+0x350/0x350 [ 668.844789][T14075] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 668.850961][T14075] ? lock_chain_count+0x20/0x20 [ 668.855890][T14075] ? __local_bh_enable_ip+0x136/0x1c0 [ 668.861299][T14075] ? _local_bh_enable+0xa0/0xa0 [ 668.866189][T14075] ? inet_sendmsg+0x147/0x2f0 [ 668.870903][T14075] ? inet_sendmsg+0x147/0x2f0 [ 668.875600][T14075] ? inet_send_prepare+0x260/0x260 [ 668.880726][T14075] ____sys_sendmsg+0x5be/0x970 [ 668.885509][T14075] ? __sys_sendmsg_sock+0x30/0x30 [ 668.890542][T14075] ? __import_iovec+0x315/0x500 [ 668.895405][T14075] ? import_iovec+0x6f/0xa0 [ 668.899923][T14075] ___sys_sendmsg+0x2a2/0x360 [ 668.904613][T14075] ? __sys_sendmsg+0x290/0x290 [ 668.909416][T14075] ? __lock_acquire+0x7d10/0x7d10 [ 668.914571][T14075] __se_sys_sendmsg+0x1bb/0x2a0 [ 668.919522][T14075] ? __x64_sys_sendmsg+0x80/0x80 [ 668.924479][T14075] ? lockdep_hardirqs_on+0x94/0x140 [ 668.929689][T14075] do_syscall_64+0x4c/0xa0 [ 668.934126][T14075] ? clear_bhb_loop+0x60/0xb0 [ 668.938837][T14075] ? clear_bhb_loop+0x60/0xb0 [ 668.943535][T14075] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 668.949530][T14075] RIP: 0033:0x7ffb0779acb9 [ 668.954044][T14075] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 668.973716][T14075] RSP: 002b:00007ffb08669028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 668.982684][T14075] RAX: ffffffffffffffda RBX: 00007ffb07a15fa0 RCX: 00007ffb0779acb9 [ 668.990668][T14075] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000003 [ 668.998826][T14075] RBP: 00007ffb08669090 R08: 0000000000000000 R09: 0000000000000000 [ 669.006988][T14075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 669.014968][T14075] R13: 00007ffb07a16038 R14: 00007ffb07a15fa0 R15: 00007ffc338c3488 [ 669.023194][T14075] [ 669.054302][T13880] device veth0_vlan entered promiscuous mode [ 669.058106][T13634] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 669.065384][T12359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 669.099558][T12359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 669.125867][T13880] device veth1_vlan entered promiscuous mode [ 669.145045][T12359] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 669.155172][T12359] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 669.177993][T12359] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 669.237523][T12356] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 669.250428][T12356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 669.290104][T12356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 669.325509][T13880] device veth0_macvtap entered promiscuous mode [ 669.361530][T12360] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 669.406524][T13880] device veth1_macvtap entered promiscuous mode [ 669.489125][T13880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 669.572234][T13880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 669.613539][T13880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 669.655973][T13880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 669.697503][T13880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 669.778504][T13880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 669.826017][T13880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 669.878787][T13880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 669.899958][T13880] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 669.913685][T13880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 669.924869][T13880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 669.935626][T13880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 669.946495][T13880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 669.976997][T13880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 670.008613][T13880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.019282][T13880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 670.040240][T13880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.053601][T13880] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 670.068173][T12359] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 670.102081][T12359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 670.143272][T12359] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 670.183407][T12359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 670.224689][T13880] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.254249][T13880] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.292323][T13880] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.324052][T13880] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.625016][T13634] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 670.664651][T13634] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 670.702581][T12349] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 670.775314][T12359] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 670.825207][T12359] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 670.930596][T12359] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 671.106115][T14107] netlink: 'syz.1.3079': attribute type 21 has an invalid length. [ 671.148068][T14107] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3079'. [ 671.196518][T14107] netlink: 'syz.1.3079': attribute type 4 has an invalid length. [ 671.546819][T14117] sctp: [Deprecated]: syz.2.3083 (pid 14117) Use of int in max_burst socket option deprecated. [ 671.546819][T14117] Use struct sctp_assoc_value instead [ 671.742002][T14122] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3085'. [ 672.182831][T14133] FAULT_INJECTION: forcing a failure. [ 672.182831][T14133] name failslab, interval 1, probability 0, space 0, times 0 [ 672.195679][T14133] CPU: 1 PID: 14133 Comm: syz.4.3089 Not tainted syzkaller #0 [ 672.203186][T14133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 672.213296][T14133] Call Trace: [ 672.216604][T14133] [ 672.219570][T14133] dump_stack_lvl+0x188/0x24e [ 672.224312][T14133] ? __skb_flow_dissect+0x3fe/0x6b00 [ 672.229641][T14133] ? show_regs_print_info+0x12/0x12 [ 672.234899][T14133] ? load_image+0x400/0x400 [ 672.239477][T14133] should_fail_ex+0x399/0x4d0 [ 672.244215][T14133] should_failslab+0x5/0x20 [ 672.248763][T14133] slab_pre_alloc_hook+0x59/0x310 [ 672.253849][T14133] kmem_cache_alloc_node+0x5a/0x320 [ 672.259181][T14133] ? __alloc_skb+0xfc/0x7e0 [ 672.263735][T14133] __alloc_skb+0xfc/0x7e0 [ 672.268125][T14133] skb_segment+0xe7b/0x3fb0 [ 672.272710][T14133] ? sk_setup_caps+0xaa0/0xaa0 [ 672.277518][T14133] __udp_gso_segment+0xdb6/0x3ad0 [ 672.282663][T14133] inet_gso_segment+0x5cc/0x1400 [ 672.287650][T14133] ? inet_sk_state_store+0x90/0x90 [ 672.292791][T14133] skb_mac_gso_segment+0x2ff/0x620 [ 672.297947][T14133] ? skb_mac_gso_segment+0x181/0x620 [ 672.303276][T14133] ? skb_eth_gso_segment+0x250/0x250 [ 672.308583][T14133] ? lookup+0x82e/0x940 [ 672.312751][T14133] ? lookup+0x187/0x940 [ 672.316920][T14133] ? skb_crc32c_csum_help+0x520/0x520 [ 672.322316][T14133] __skb_gso_segment+0x316/0x4b0 [ 672.327268][T14133] ? ipv4_mtu+0x2c8/0x3e0 [ 672.331621][T14133] wg_xmit+0x42c/0xec0 [ 672.335718][T14133] ? wg_stop+0x5d0/0x5d0 [ 672.339992][T14133] dev_hard_start_xmit+0x262/0x870 [ 672.345142][T14133] __dev_queue_xmit+0x1a7f/0x37f0 [ 672.350195][T14133] ? __dev_queue_xmit+0x26b/0x37f0 [ 672.355364][T14133] ? netdev_core_pick_tx+0x340/0x340 [ 672.360677][T14133] ? neigh_connected_output+0x3ac/0x450 [ 672.366260][T14133] ? ip_finish_output2+0x3ff/0x11b0 [ 672.371478][T14133] ip_finish_output2+0xd05/0x11b0 [ 672.376528][T14133] ? ip_finish_output2+0x3ff/0x11b0 [ 672.381742][T14133] ? ip_mc_finish_output+0x250/0x250 [ 672.387043][T14133] ? skb_gso_transport_seglen+0x306/0x4d0 [ 672.392792][T14133] ? ip_fragment+0x210/0x210 [ 672.397400][T14133] ? skb_gso_validate_network_len+0x128/0x290 [ 672.403486][T14133] ? ip_finish_output+0x1c1/0x4c0 [ 672.408527][T14133] ip_send_skb+0x129/0x1c0 [ 672.412963][T14133] udp_send_skb+0xa88/0x1580 [ 672.417594][T14133] udp_sendmsg+0x1b33/0x23b0 [ 672.422204][T14133] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 672.427165][T14133] ? udp_cmsg_send+0x350/0x350 [ 672.431944][T14133] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 672.437940][T14133] ? lock_chain_count+0x20/0x20 [ 672.442820][T14133] ? __local_bh_enable_ip+0x136/0x1c0 [ 672.448210][T14133] ? _local_bh_enable+0xa0/0xa0 [ 672.453081][T14133] ? inet_sendmsg+0x147/0x2f0 [ 672.457775][T14133] ? inet_sendmsg+0x147/0x2f0 [ 672.462467][T14133] ? inet_send_prepare+0x260/0x260 [ 672.467587][T14133] ____sys_sendmsg+0x5be/0x970 [ 672.472371][T14133] ? __sys_sendmsg_sock+0x30/0x30 [ 672.477415][T14133] ? __import_iovec+0x315/0x500 [ 672.482279][T14133] ? import_iovec+0x6f/0xa0 [ 672.486792][T14133] ___sys_sendmsg+0x2a2/0x360 [ 672.491482][T14133] ? __sys_sendmsg+0x290/0x290 [ 672.496272][T14133] ? __lock_acquire+0x7d10/0x7d10 [ 672.501331][T14133] __se_sys_sendmsg+0x1bb/0x2a0 [ 672.506193][T14133] ? __x64_sys_sendmsg+0x80/0x80 [ 672.511184][T14133] ? lockdep_hardirqs_on+0x94/0x140 [ 672.516396][T14133] do_syscall_64+0x4c/0xa0 [ 672.520835][T14133] ? clear_bhb_loop+0x60/0xb0 [ 672.525531][T14133] ? clear_bhb_loop+0x60/0xb0 [ 672.530221][T14133] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 672.536129][T14133] RIP: 0033:0x7f0abf59acb9 [ 672.540557][T14133] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 672.560177][T14133] RSP: 002b:00007f0ac0373028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 672.568604][T14133] RAX: ffffffffffffffda RBX: 00007f0abf815fa0 RCX: 00007f0abf59acb9 [ 672.576676][T14133] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000003 [ 672.584660][T14133] RBP: 00007f0ac0373090 R08: 0000000000000000 R09: 0000000000000000 [ 672.592727][T14133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 672.600705][T14133] R13: 00007f0abf816038 R14: 00007f0abf815fa0 R15: 00007ffd00b21718 [ 672.608702][T14133] [ 672.779425][ T4268] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 672.821521][ T4268] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 672.830312][ T4268] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 672.847956][ T4268] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 672.857166][ T4268] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 672.864803][ T4268] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 673.061590][T14148] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3094'. [ 673.096302][T14144] netlink: 694 bytes leftover after parsing attributes in process `syz.2.3092'. [ 673.209151][T14156] netlink: 'syz.0.3096': attribute type 3 has an invalid length. [ 673.237048][T14156] netlink: 'syz.0.3096': attribute type 1 has an invalid length. [ 673.239529][T12356] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 673.246202][T14156] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.3096'. [ 673.306964][T14156] netlink: 'syz.0.3096': attribute type 49 has an invalid length. [ 673.377723][T12356] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 673.509272][T12356] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 673.734631][T12356] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 673.974578][T12356] device 0 left promiscuous mode [ 674.025122][T14140] chnl_net:caif_netlink_parms(): no params data found [ 674.523682][T14140] bridge0: port 1(bridge_slave_0) entered blocking state [ 674.531038][T14140] bridge0: port 1(bridge_slave_0) entered disabled state [ 674.539641][T14140] device bridge_slave_0 entered promiscuous mode [ 674.560235][T14140] bridge0: port 2(bridge_slave_1) entered blocking state [ 674.600457][T14140] bridge0: port 2(bridge_slave_1) entered disabled state [ 674.639748][T14140] device bridge_slave_1 entered promiscuous mode [ 674.892546][ T4281] Bluetooth: hci5: command 0x0409 tx timeout [ 675.223814][T14140] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 675.390093][T14140] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 675.548758][T14140] team0: Port device team_slave_0 added [ 675.589206][T14140] team0: Port device team_slave_1 added [ 675.615591][T14201] ref_ctr_offset mismatch. inode: 0x3f offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 675.856333][T14208] syz.4.3112[14208] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 675.856505][T14208] syz.4.3112[14208] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 675.903712][T14140] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 675.928082][T14140] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 675.966858][T14140] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 675.989197][T14140] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 675.997425][T14140] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 676.025140][T14140] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 676.189002][T14140] device hsr_slave_0 entered promiscuous mode [ 676.209938][T14140] device hsr_slave_1 entered promiscuous mode [ 676.229278][T14140] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 676.239305][T14140] Cannot create hsr debugfs directory [ 676.987674][ T4281] Bluetooth: hci5: command 0x041b tx timeout [ 677.025151][T12349] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 677.074636][T14231] netlink: 'syz.4.3118': attribute type 21 has an invalid length. [ 677.091264][T14231] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3118'. [ 677.122218][T14231] netlink: 'syz.4.3118': attribute type 4 has an invalid length. [ 677.212292][T12356] device hsr_slave_0 left promiscuous mode [ 677.231684][T12356] device hsr_slave_1 left promiscuous mode [ 677.269329][T12356] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 677.337696][T12356] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 677.348509][T12356] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 677.390959][T12356] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 677.474004][T14242] FAULT_INJECTION: forcing a failure. [ 677.474004][T14242] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 677.521134][T14242] CPU: 1 PID: 14242 Comm: syz.4.3121 Not tainted syzkaller #0 [ 677.528680][T14242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 677.538780][T14242] Call Trace: [ 677.542095][T14242] [ 677.545052][T14242] dump_stack_lvl+0x188/0x24e [ 677.549773][T14242] ? show_regs_print_info+0x12/0x12 [ 677.555027][T14242] ? load_image+0x400/0x400 [ 677.559588][T14242] ? __lock_acquire+0x7d10/0x7d10 [ 677.564661][T14242] ? snprintf+0xe5/0x140 [ 677.569043][T14242] should_fail_ex+0x399/0x4d0 [ 677.573773][T14242] _copy_to_user+0x2c/0x130 [ 677.578315][T14242] simple_read_from_buffer+0xe3/0x150 [ 677.583829][T14242] proc_fail_nth_read+0x1a6/0x220 [ 677.588902][T14242] ? proc_fault_inject_write+0x310/0x310 [ 677.594595][T14242] ? fsnotify_perm+0x248/0x550 [ 677.599481][T14242] ? proc_fault_inject_write+0x310/0x310 [ 677.605150][T14242] vfs_read+0x2de/0xa00 [ 677.609350][T14242] ? kernel_read+0x1e0/0x1e0 [ 677.613996][T14242] ? __fget_files+0x28/0x4b0 [ 677.618638][T14242] ? __fget_files+0x28/0x4b0 [ 677.623273][T14242] ? __fget_files+0x43d/0x4b0 [ 677.628005][T14242] ? __fdget_pos+0x2ae/0x360 [ 677.632635][T14242] ? ksys_read+0x71/0x250 [ 677.637006][T14242] ksys_read+0x14c/0x250 [ 677.641291][T14242] ? vfs_write+0xa30/0xa30 [ 677.645754][T14242] ? lockdep_hardirqs_on+0x94/0x140 [ 677.650988][T14242] do_syscall_64+0x4c/0xa0 [ 677.655439][T14242] ? clear_bhb_loop+0x60/0xb0 [ 677.660151][T14242] ? clear_bhb_loop+0x60/0xb0 [ 677.664867][T14242] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 677.670792][T14242] RIP: 0033:0x7f0abf55b58e [ 677.675239][T14242] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 677.694969][T14242] RSP: 002b:00007f0ac0372fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 677.703496][T14242] RAX: ffffffffffffffda RBX: 00007f0ac03736c0 RCX: 00007f0abf55b58e [ 677.711481][T14242] RDX: 000000000000000f RSI: 00007f0ac03730a0 RDI: 0000000000000005 [ 677.719574][T14242] RBP: 00007f0ac0373090 R08: 0000000000000000 R09: 0000000000000000 [ 677.727570][T14242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 677.735559][T14242] R13: 00007f0abf816038 R14: 00007f0abf815fa0 R15: 00007ffd00b21718 [ 677.743645][T14242] [ 678.272787][T13637] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 679.038435][T12356] team0 (unregistering): Port device team_slave_1 removed [ 679.051151][ T4281] Bluetooth: hci5: command 0x040f tx timeout [ 679.147589][T12356] team0 (unregistering): Port device team_slave_0 removed [ 679.252278][T12356] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 679.314311][T12356] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 679.734764][T14275] FAULT_INJECTION: forcing a failure. [ 679.734764][T14275] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 679.753759][T14275] CPU: 0 PID: 14275 Comm: syz.4.3133 Not tainted syzkaller #0 [ 679.761286][T14275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 679.771450][T14275] Call Trace: [ 679.774916][T14275] [ 679.777849][T14275] dump_stack_lvl+0x188/0x24e [ 679.782540][T14275] ? show_regs_print_info+0x12/0x12 [ 679.787748][T14275] ? load_image+0x400/0x400 [ 679.792263][T14275] should_fail_ex+0x399/0x4d0 [ 679.796954][T14275] _copy_from_user+0x2c/0x170 [ 679.801650][T14275] __sys_bpf+0x2ea/0x780 [ 679.805931][T14275] ? bpf_link_show_fdinfo+0x380/0x380 [ 679.811354][T14275] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 679.817581][T14275] __x64_sys_bpf+0x78/0x90 [ 679.822043][T14275] do_syscall_64+0x4c/0xa0 [ 679.826459][T14275] ? clear_bhb_loop+0x60/0xb0 [ 679.831162][T14275] ? clear_bhb_loop+0x60/0xb0 [ 679.835847][T14275] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 679.841738][T14275] RIP: 0033:0x7f0abf59acb9 [ 679.846165][T14275] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 679.865971][T14275] RSP: 002b:00007f0ac0373028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 679.874408][T14275] RAX: ffffffffffffffda RBX: 00007f0abf815fa0 RCX: 00007f0abf59acb9 [ 679.882505][T14275] RDX: 0000000000000094 RSI: 0000200000000840 RDI: 0000000000000005 [ 679.890495][T14275] RBP: 00007f0ac0373090 R08: 0000000000000000 R09: 0000000000000000 [ 679.898477][T14275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 679.906458][T14275] R13: 00007f0abf816038 R14: 00007f0abf815fa0 R15: 00007ffd00b21718 [ 679.914801][T14275] [ 680.015201][T12356] bond0 (unregistering): Released all slaves [ 680.580503][T14292] netlink: 'syz.4.3138': attribute type 8 has an invalid length. [ 680.598046][T14140] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 680.599135][T14292] netlink: 'syz.4.3138': attribute type 1 has an invalid length. [ 680.636703][T14292] netlink: 104088 bytes leftover after parsing attributes in process `syz.4.3138'. [ 680.691506][T14140] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 680.742941][T14140] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 680.782354][T14140] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 681.131601][ T4281] Bluetooth: hci5: command 0x0419 tx timeout [ 681.192004][T14140] 8021q: adding VLAN 0 to HW filter on device bond0 [ 681.328044][T14140] 8021q: adding VLAN 0 to HW filter on device team0 [ 681.583460][T14140] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 681.640038][T14140] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 681.692393][T12359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 681.724302][T12359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 681.772199][T12359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 681.840373][T12359] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 681.866530][T12359] bridge0: port 1(bridge_slave_0) entered blocking state [ 681.873733][T12359] bridge0: port 1(bridge_slave_0) entered forwarding state [ 681.943655][T12359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 681.983045][T12359] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 682.051604][T12359] bridge0: port 2(bridge_slave_1) entered blocking state [ 682.058766][T12359] bridge0: port 2(bridge_slave_1) entered forwarding state [ 682.098387][T12359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 682.123803][T12359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 682.162160][T12359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 682.201190][T12359] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 682.222468][T12359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 682.300627][T12359] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 682.342173][T12359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 682.384024][T12359] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 682.429517][T12359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 682.438918][T12359] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 682.476125][T12359] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 682.511701][T12359] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 682.533274][T12359] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 683.213596][T14361] bridge0: port 2(bridge_slave_1) entered disabled state [ 683.221280][T14361] bridge0: port 1(bridge_slave_0) entered disabled state [ 683.290411][T14367] device bridge_slave_1 left promiscuous mode [ 683.324871][T14367] bridge0: port 2(bridge_slave_1) entered disabled state [ 683.411306][T14367] device bridge_slave_0 left promiscuous mode [ 683.435800][T14367] bridge0: port 1(bridge_slave_0) entered disabled state [ 683.608017][T13637] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 683.626782][T13637] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 683.692327][T14140] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 683.767533][T13637] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 683.801733][T13637] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 683.890729][T14374] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3164'. [ 683.914338][T13637] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 683.927885][T14374] netlink: 'syz.1.3164': attribute type 29 has an invalid length. [ 683.937390][T13637] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 683.949119][T14140] device veth0_vlan entered promiscuous mode [ 683.958418][T13637] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 683.975034][T13637] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 683.991859][T14374] netlink: 'syz.1.3164': attribute type 29 has an invalid length. [ 684.016968][T14140] device veth1_vlan entered promiscuous mode [ 684.128830][T14387] netlink: 126632 bytes leftover after parsing attributes in process `syz.2.3167'. [ 684.130498][T12359] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 684.166692][T12359] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 684.200336][T12359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 684.218273][T12359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 684.239193][T14140] device veth0_macvtap entered promiscuous mode [ 684.248494][T14387] netlink: 8192 bytes leftover after parsing attributes in process `syz.2.3167'. [ 684.262795][T14389] bridge0: port 2(bridge_slave_1) entered disabled state [ 684.270417][T14389] bridge0: port 1(bridge_slave_0) entered disabled state [ 684.289046][T14387] device bridge_slave_1 left promiscuous mode [ 684.296363][T14387] bridge0: port 2(bridge_slave_1) entered disabled state [ 684.307930][T14387] device bridge_slave_0 left promiscuous mode [ 684.321295][T14387] bridge0: port 1(bridge_slave_0) entered disabled state [ 684.406373][T14140] device veth1_macvtap entered promiscuous mode [ 684.519111][T14140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 684.549910][T14140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 684.583190][T14140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 684.611182][T14140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 684.621632][T14140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 684.632612][T14140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 684.644256][T14140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 684.656179][T14140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 684.677132][T14140] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 684.689039][T13637] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 684.702353][T13637] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 684.720589][T13637] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 684.740001][T13637] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 684.773627][T14140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 684.795864][T14140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 684.813202][T14140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 684.827494][T14140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 684.840303][T14140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 684.857278][T14140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 684.869079][T14140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 684.888013][T14140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 684.908594][T14140] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 684.917364][T13637] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 684.928789][T13637] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 684.961318][T14140] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 684.980233][T14140] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 684.990525][T14140] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 685.002343][T14140] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 685.176213][T14406] netlink: 'syz.4.3174': attribute type 21 has an invalid length. [ 685.204394][T13637] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 685.219375][T13637] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 685.269690][T13637] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 685.309760][T13637] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 685.380102][T13637] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 685.454828][T13637] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 685.786488][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.795784][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.520307][T14439] netlink: 'syz.1.3184': attribute type 10 has an invalid length. [ 687.414634][T12349] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 687.445934][ T4268] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 687.459004][ T4268] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 687.470139][ T4268] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 687.478460][ T4268] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 687.487712][ T4268] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 687.495994][ T4268] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 687.551659][T12349] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 687.754123][T12349] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 687.972577][T12349] bond0: (slave netdevsim0): Releasing backup interface [ 688.000934][T12349] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.268785][T14452] chnl_net:caif_netlink_parms(): no params data found [ 688.697358][T14452] bridge0: port 1(bridge_slave_0) entered blocking state [ 688.705225][T14452] bridge0: port 1(bridge_slave_0) entered disabled state [ 688.715695][T14452] device bridge_slave_0 entered promiscuous mode [ 688.724808][T14452] bridge0: port 2(bridge_slave_1) entered blocking state [ 688.732632][T14452] bridge0: port 2(bridge_slave_1) entered disabled state [ 688.740908][T14452] device bridge_slave_1 entered promiscuous mode [ 689.006236][T14452] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 689.034018][T14452] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 689.184290][T14500] netlink: 'syz.2.3202': attribute type 10 has an invalid length. [ 689.256644][T14501] netlink: 'syz.2.3202': attribute type 10 has an invalid length. [ 689.278015][T14452] team0: Port device team_slave_0 added [ 689.513951][T14452] team0: Port device team_slave_1 added [ 689.530971][ T4268] Bluetooth: hci2: command 0x0409 tx timeout [ 689.538863][T14505] bridge0: port 2(bridge_slave_1) entered disabled state [ 689.546463][T14505] bridge0: port 1(bridge_slave_0) entered disabled state [ 689.891943][T14452] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 689.936584][T14452] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 690.039768][T14452] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 690.066492][T14517] netlink: 'syz.4.3207': attribute type 19 has an invalid length. [ 690.172831][T14520] netlink: 'syz.4.3207': attribute type 10 has an invalid length. [ 690.209348][T14520] 8021q: adding VLAN 0 to HW filter on device team0 [ 690.283495][T14520] bond0: (slave team0): Enslaving as an active interface with an up link [ 690.324329][T14452] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 690.342156][T14452] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 690.406738][T14452] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 690.618192][T14452] device hsr_slave_0 entered promiscuous mode [ 690.637552][T14452] device hsr_slave_1 entered promiscuous mode [ 690.665071][T14527] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3210'. [ 691.249246][T12349] team0: Port device wlan1 removed [ 691.611233][ T4268] Bluetooth: hci2: command 0x041b tx timeout [ 692.129197][T12349] device hsr_slave_0 left promiscuous mode [ 692.188430][T12349] device hsr_slave_1 left promiscuous mode [ 692.211937][T12349] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 692.228937][T12349] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 692.245276][T12349] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 692.280486][T12349] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 692.314158][T12349] batman_adv: batadv0: Interface deactivated: hsr_slave_1 [ 692.326696][T12349] batman_adv: batadv0: Removing interface: hsr_slave_1 [ 692.354339][T12349] device veth1_vlan left promiscuous mode [ 693.466838][T12349] team0 (unregistering): Port device team_slave_1 removed [ 693.516236][T12349] team0 (unregistering): Port device team_slave_0 removed [ 693.568635][T12349] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 693.619450][T12349] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 693.701151][ T4268] Bluetooth: hci2: command 0x040f tx timeout [ 693.982674][T12349] bond0 (unregistering): Released all slaves [ 694.036278][T14566] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3222'. [ 694.051395][T14566] device hsr_slave_0 left promiscuous mode [ 694.104600][T14566] device hsr_slave_1 left promiscuous mode [ 694.716675][T14452] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 694.761880][T14584] netlink: 'syz.3.3229': attribute type 25 has an invalid length. [ 694.771716][T14584] netlink: 2418 bytes leftover after parsing attributes in process `syz.3.3229'. [ 694.784348][T14452] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 694.821937][T14452] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 694.860626][T14452] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 695.233315][T14452] 8021q: adding VLAN 0 to HW filter on device bond0 [ 695.313384][T12354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 695.334574][T12354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 695.352085][T14593] netlink: 'syz.4.3230': attribute type 28 has an invalid length. [ 695.385947][T14452] 8021q: adding VLAN 0 to HW filter on device team0 [ 695.424345][T12354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 695.442721][T14593] netlink: 'syz.4.3230': attribute type 4 has an invalid length. [ 695.445416][T12354] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 695.458783][T14593] netlink: 136 bytes leftover after parsing attributes in process `syz.4.3230'. [ 695.476783][T12354] bridge0: port 1(bridge_slave_0) entered blocking state [ 695.484118][T12354] bridge0: port 1(bridge_slave_0) entered forwarding state [ 695.494634][T12354] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 695.529115][T12360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 695.549384][T12360] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 695.611151][T12360] bridge0: port 2(bridge_slave_1) entered blocking state [ 695.618376][T12360] bridge0: port 2(bridge_slave_1) entered forwarding state [ 695.651551][T12360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 695.698906][T12360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 695.730573][T12354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 695.752527][T12354] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 695.767525][T12354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 695.781400][ T4268] Bluetooth: hci2: command 0x0419 tx timeout [ 695.794210][T12354] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 695.814313][T12354] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 695.837335][T12360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 695.852570][T12360] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 695.915519][T14452] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 695.989991][T14452] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 696.017040][T12360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 696.033254][T12360] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 696.882144][T12354] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 696.915663][T12354] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 696.946499][T14452] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 697.288160][T12349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 697.317129][T12349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 697.422401][T12354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 697.436980][T12354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 697.469348][T14452] device veth0_vlan entered promiscuous mode [ 697.567673][T12354] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 697.611654][T12354] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 697.640306][T14452] device veth1_vlan entered promiscuous mode [ 697.820412][T14452] device veth0_macvtap entered promiscuous mode [ 697.916550][T12349] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 697.942821][T12349] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 697.985504][T12349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 698.045496][T12349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 698.074453][T12349] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 698.099013][T14706] IPv6: Can't replace route, no match found [ 698.114549][T14706] mac80211_hwsim hwsim28 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 698.150324][T14452] device veth1_macvtap entered promiscuous mode [ 698.241437][T14452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 698.269257][T14452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 698.292313][T14452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 698.309747][T14452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 698.334940][T14452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 698.354612][T14452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 698.372147][T14452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 698.400478][T14452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 698.413661][T14452] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 698.434389][T12354] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 698.453034][T12354] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 698.467061][T12354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 698.492730][T14706] netlink: 'syz.1.3264': attribute type 10 has an invalid length. [ 698.592831][T14706] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 698.612852][T14452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 698.623637][T14452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 698.634051][T14452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 698.645130][T14452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 698.655404][T14452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 698.666351][T14452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 698.676282][T14452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 698.687499][T14452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 698.709653][T14452] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 698.738345][T14716] netlink: 'syz.3.3267': attribute type 46 has an invalid length. [ 698.763202][T14716] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3267'. [ 698.792964][T13637] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 698.824847][T13637] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 698.861836][T14452] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.891838][T14452] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.900611][T14452] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.982042][T14452] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 699.614699][T13634] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 699.637357][T13634] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 699.679214][T13637] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 699.715511][T13634] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 699.737371][T13634] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 699.793801][T13634] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 699.894395][T14743] netlink: 166 bytes leftover after parsing attributes in process `syz.3.3271'. [ 700.042203][ T4268] Bluetooth: hci1: unexpected subevent 0x19 length: 150 > 28 [ 700.051027][ T4268] Bluetooth: hci1: Unable to find connection with handle 0x6c6c [ 700.733110][T14770] netlink: 'syz.1.3283': attribute type 10 has an invalid length. [ 700.820485][T13634] wlan1: Trigger new scan to find an IBSS to join [ 701.849567][ T4268] Bluetooth: hci2: unexpected subevent 0x1a length: 150 > 6 [ 701.907139][T14792] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3291'. [ 701.993668][T14792] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3291'. [ 702.044071][T14795] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3291'. [ 702.084412][T14797] IPv6: Can't replace route, no match found [ 702.100296][T14798] mac80211_hwsim hwsim30 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 702.210892][T14792] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3291'. [ 702.402895][T14798] netlink: 'syz.4.3292': attribute type 10 has an invalid length. [ 702.457976][T14798] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 703.023289][T14818] IPv6: NLM_F_REPLACE set, but no existing node found! [ 703.119553][T14823] bond_slave_1: mtu less than device minimum [ 704.184997][T14838] wlan1: Trigger new scan to find an IBSS to join [ 704.521443][T14855] netlink: 166 bytes leftover after parsing attributes in process `syz.2.3307'. [ 705.406087][T14865] sctp: [Deprecated]: syz.1.3312 (pid 14865) Use of int in max_burst socket option deprecated. [ 705.406087][T14865] Use struct sctp_assoc_value instead [ 706.924274][T14837] wlan1: Trigger new scan to find an IBSS to join [ 707.111160][T14839] wlan1: Creating new IBSS network, BSSID 52:28:2c:e0:7b:49 [ 707.399402][T14919] netlink: 'syz.3.3330': attribute type 28 has an invalid length. [ 707.421387][T14919] netlink: 'syz.3.3330': attribute type 4 has an invalid length. [ 707.468866][T14919] netlink: 136 bytes leftover after parsing attributes in process `syz.3.3330'. [ 707.739123][T14919] netlink: 14601 bytes leftover after parsing attributes in process `syz.3.3330'. [ 709.214845][T14972] netlink: 'syz.0.3344': attribute type 10 has an invalid length. [ 709.274941][T14972] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 709.332105][T14972] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 709.434138][T14984] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3347'. [ 709.623554][T14985] netlink: 'syz.1.3349': attribute type 10 has an invalid length. [ 710.120181][T14994] netlink: 'syz.2.3351': attribute type 4 has an invalid length. [ 710.191065][T14994] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3351'. [ 711.341055][T15030] device syzkaller0 entered promiscuous mode [ 711.978875][T15047] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3365'. [ 713.605712][T15081] netlink: 114008 bytes leftover after parsing attributes in process `syz.2.3374'. [ 715.370179][T15081] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 717.840099][T15127] netlink: 'syz.3.3388': attribute type 2 has an invalid length. [ 717.872757][T15129] netlink: 'syz.4.3389': attribute type 10 has an invalid length. [ 718.229854][T15127] device 0 entered promiscuous mode [ 718.466235][T15143] device syzkaller0 entered promiscuous mode [ 721.633049][T15187] netlink: 'syz.1.3403': attribute type 2 has an invalid length. [ 722.474426][T15165] netlink: 'syz.2.3397': attribute type 21 has an invalid length. [ 722.482925][T15165] IPv6: NLM_F_CREATE should be specified when creating new route [ 722.507079][T15187] device 0 entered promiscuous mode [ 723.153651][T15207] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.3409'. [ 725.423705][T15276] netlink: 184 bytes leftover after parsing attributes in process `syz.3.3430'. [ 726.104529][T15291] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 726.613176][T15311] netlink: 'syz.2.3439': attribute type 21 has an invalid length. [ 726.634787][T15311] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3439'. [ 726.670961][T15311] netlink: 'syz.2.3439': attribute type 4 has an invalid length. [ 726.697715][T15311] netlink: 'syz.2.3439': attribute type 5 has an invalid length. [ 726.722050][T15311] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3439'. [ 726.992900][T15317] netlink: 'syz.2.3442': attribute type 39 has an invalid length. [ 727.026556][T15317] device veth0_macvtap left promiscuous mode [ 728.801710][T15362] device syzkaller0 entered promiscuous mode [ 732.033358][T15381] netlink: 'syz.4.3459': attribute type 4 has an invalid length. [ 732.041332][T15381] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3459'. [ 732.873493][T15422] netlink: 'syz.3.3469': attribute type 10 has an invalid length. [ 732.950029][T15422] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.3469'. [ 733.297981][T15431] netlink: 'syz.4.3467': attribute type 11 has an invalid length. [ 733.552220][T15431] netlink: 128124 bytes leftover after parsing attributes in process `syz.4.3467'. [ 733.940995][ T4268] Bluetooth: hci0: command 0x0406 tx timeout [ 735.905451][T15502] syz.0.3490[15502] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 735.905598][T15502] syz.0.3490[15502] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 736.750522][T15528] syz.0.3496[15528] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 736.772878][T15528] syz.0.3496[15528] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 737.253356][T15543] device syzkaller0 entered promiscuous mode [ 737.381026][T15542] netlink: 'syz.1.3503': attribute type 10 has an invalid length. [ 737.474963][T15542] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 741.507044][T15573] netlink: 'syz.4.3512': attribute type 21 has an invalid length. [ 741.520934][T15573] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3512'. [ 741.561136][T15573] netlink: 'syz.4.3512': attribute type 5 has an invalid length. [ 741.568949][T15573] netlink: 'syz.4.3512': attribute type 6 has an invalid length. [ 741.612855][T15573] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3512'. [ 742.120040][T15580] mac80211_hwsim hwsim33 »»»»»»: renamed from wlan0 [ 742.207847][T15591] netlink: 14546 bytes leftover after parsing attributes in process `syz.1.3518'. [ 742.224661][T15591] netlink: 'syz.1.3518': attribute type 27 has an invalid length. [ 742.256994][T15591] netlink: 'syz.1.3518': attribute type 10 has an invalid length. [ 742.317303][T15591] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3518'. [ 742.777720][T15594] netlink: 'syz.4.3520': attribute type 1 has an invalid length. [ 742.851979][T15602] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3521'. [ 743.331770][T15617] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3527'. [ 743.386502][T15617] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3527'. [ 743.419401][T15615] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3527'. [ 744.265080][T15640] netlink: 14601 bytes leftover after parsing attributes in process `syz.0.3535'. [ 745.058430][T15668] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3542'. [ 747.175361][T15710] sctp: [Deprecated]: syz.0.3557 (pid 15710) Use of int in max_burst socket option deprecated. [ 747.175361][T15710] Use struct sctp_assoc_value instead [ 747.215751][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.222323][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.363333][ T4281] Bluetooth: hci3: ACL packet too small [ 747.395510][T15720] netlink: 'syz.3.3561': attribute type 2 has an invalid length. [ 747.476877][T15720] device .*! entered promiscuous mode [ 747.504319][T15718] netlink: 'syz.2.3558': attribute type 21 has an invalid length. [ 747.531656][T15718] netlink: 'syz.2.3558': attribute type 1 has an invalid length. [ 747.541839][T15722] netlink: 15999 bytes leftover after parsing attributes in process `syz.3.3561'. [ 748.222012][T15740] device syzkaller0 entered promiscuous mode [ 748.267209][T15733] netlink: 'syz.0.3564': attribute type 3 has an invalid length. [ 748.301315][T15733] netlink: 114680 bytes leftover after parsing attributes in process `syz.0.3564'. [ 752.402015][T15772] netlink: 'syz.4.3577': attribute type 21 has an invalid length. [ 752.409912][T15772] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3577'. [ 752.456184][T15772] netlink: 'syz.4.3577': attribute type 5 has an invalid length. [ 752.476329][T15772] netlink: 'syz.4.3577': attribute type 6 has an invalid length. [ 752.501272][T15772] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3577'. [ 752.533659][T15773] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 752.568666][T15773] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 752.638106][T15778] mac80211_hwsim hwsim35 »»»»»»: renamed from wlan0 [ 753.824780][T15819] netlink: 14601 bytes leftover after parsing attributes in process `syz.1.3588'. [ 754.687900][T15825] netlink: 'syz.3.3591': attribute type 3 has an invalid length. [ 754.710200][T15825] netlink: 114680 bytes leftover after parsing attributes in process `syz.3.3591'. [ 754.752304][T15833] netlink: 'syz.4.3594': attribute type 10 has an invalid length. [ 754.843264][T15833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 754.924225][T15833] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 755.597609][T15867] netlink: 'syz.0.3605': attribute type 10 has an invalid length. [ 755.892481][T15877] netlink: 14601 bytes leftover after parsing attributes in process `syz.3.3608'. [ 756.091826][T15879] netlink: 'syz.0.3621': attribute type 3 has an invalid length. [ 756.143222][T15884] netlink: 14601 bytes leftover after parsing attributes in process `syz.0.3621'. [ 756.224970][T15879] netlink: 199824 bytes leftover after parsing attributes in process `syz.0.3621'. [ 756.275556][T15881] netlink: 'syz.4.3611': attribute type 3 has an invalid length. [ 756.320930][T15881] netlink: 114680 bytes leftover after parsing attributes in process `syz.4.3611'. [ 756.666315][T15900] FAULT_INJECTION: forcing a failure. [ 756.666315][T15900] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 756.743054][T15900] CPU: 1 PID: 15900 Comm: syz.4.3615 Not tainted syzkaller #0 [ 756.750694][T15900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 756.760792][T15900] Call Trace: [ 756.764107][T15900] [ 756.767093][T15900] dump_stack_lvl+0x188/0x24e [ 756.771890][T15900] ? show_regs_print_info+0x12/0x12 [ 756.777137][T15900] ? load_image+0x400/0x400 [ 756.781682][T15900] ? __lock_acquire+0x7d10/0x7d10 [ 756.786756][T15900] should_fail_ex+0x399/0x4d0 [ 756.791487][T15900] _copy_from_user+0x2c/0x170 [ 756.796207][T15900] ___sys_sendmsg+0x1c3/0x360 [ 756.800932][T15900] ? __sys_sendmsg+0x290/0x290 [ 756.805781][T15900] ? __lock_acquire+0x7d10/0x7d10 [ 756.810951][T15900] __se_sys_sendmsg+0x1bb/0x2a0 [ 756.815835][T15900] ? __x64_sys_sendmsg+0x80/0x80 [ 756.820853][T15900] ? lockdep_hardirqs_on+0x94/0x140 [ 756.826092][T15900] do_syscall_64+0x4c/0xa0 [ 756.830539][T15900] ? clear_bhb_loop+0x60/0xb0 [ 756.835264][T15900] ? clear_bhb_loop+0x60/0xb0 [ 756.840006][T15900] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 756.846137][T15900] RIP: 0033:0x7f0abf59acb9 [ 756.850591][T15900] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 756.871039][T15900] RSP: 002b:00007f0ac0373028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 756.879614][T15900] RAX: ffffffffffffffda RBX: 00007f0abf815fa0 RCX: 00007f0abf59acb9 [ 756.887820][T15900] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 756.895834][T15900] RBP: 00007f0ac0373090 R08: 0000000000000000 R09: 0000000000000000 [ 756.904011][T15900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 756.912005][T15900] R13: 00007f0abf816038 R14: 00007f0abf815fa0 R15: 00007ffd00b21718 [ 756.920043][T15900] [ 758.140326][T15925] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3626'. [ 758.189302][T15925] openvswitch: netlink: Flow key attr not present in new flow. [ 758.617134][T15939] netlink: 14601 bytes leftover after parsing attributes in process `syz.4.3628'. [ 759.185980][T15935] netlink: 'syz.2.3627': attribute type 3 has an invalid length. [ 759.216979][T15935] netlink: 114680 bytes leftover after parsing attributes in process `syz.2.3627'. [ 759.533462][ T4281] Bluetooth: hci1: command 0x0406 tx timeout [ 759.624009][T15952] FAULT_INJECTION: forcing a failure. [ 759.624009][T15952] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 759.795454][T15952] CPU: 0 PID: 15952 Comm: syz.3.3631 Not tainted syzkaller #0 [ 759.803043][T15952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 759.813423][T15952] Call Trace: [ 759.816746][T15952] [ 759.819724][T15952] dump_stack_lvl+0x188/0x24e [ 759.824485][T15952] ? show_regs_print_info+0x12/0x12 [ 759.829768][T15952] ? load_image+0x400/0x400 [ 759.834437][T15952] ? __lock_acquire+0x7d10/0x7d10 [ 759.839630][T15952] ? __bpf_trace_bpf_trace_printk+0x20/0x20 [ 759.845802][T15952] should_fail_ex+0x399/0x4d0 [ 759.850601][T15952] _copy_from_user+0x2c/0x170 [ 759.855377][T15952] kstrtouint_from_user+0xda/0x170 [ 759.860574][T15952] ? kstrtol_from_user+0x190/0x190 [ 759.865813][T15952] proc_fail_nth_write+0x8b/0x200 [ 759.870913][T15952] ? proc_fail_nth_read+0x220/0x220 [ 759.876173][T15952] ? common_file_perm+0x171/0x1c0 [ 759.881446][T15952] ? proc_fail_nth_read+0x220/0x220 [ 759.886753][T15952] vfs_write+0x2e6/0xa30 [ 759.891098][T15952] ? file_end_write+0x250/0x250 [ 759.896106][T15952] ? __fget_files+0x28/0x4b0 [ 759.900756][T15952] ? __fget_files+0x28/0x4b0 [ 759.905464][T15952] ? __fget_files+0x43d/0x4b0 [ 759.910236][T15952] ? __fdget_pos+0x2ae/0x360 [ 759.914888][T15952] ? ksys_write+0x71/0x250 [ 759.919424][T15952] ksys_write+0x14c/0x250 [ 759.923914][T15952] ? __ia32_sys_read+0x80/0x80 [ 759.928781][T15952] ? lockdep_hardirqs_on+0x94/0x140 [ 759.934140][T15952] do_syscall_64+0x4c/0xa0 [ 759.938700][T15952] ? clear_bhb_loop+0x60/0xb0 [ 759.943433][T15952] ? clear_bhb_loop+0x60/0xb0 [ 759.948266][T15952] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 759.954235][T15952] RIP: 0033:0x7efc5615b58e [ 759.958866][T15952] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 759.978633][T15952] RSP: 002b:00007efc5704bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 759.987320][T15952] RAX: ffffffffffffffda RBX: 00007efc5704c6c0 RCX: 00007efc5615b58e [ 759.995341][T15952] RDX: 0000000000000001 RSI: 00007efc5704c0a0 RDI: 0000000000000009 [ 760.003449][T15952] RBP: 00007efc5704c090 R08: 0000000000000000 R09: 0000000000000000 [ 760.011654][T15952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 760.019861][T15952] R13: 00007efc56416128 R14: 00007efc56416090 R15: 00007ffc8dc07e18 [ 760.028038][T15952] [ 761.416299][T15965] netlink: 10 bytes leftover after parsing attributes in process `syz.0.3636'. [ 761.517180][T15966] netlink: 10 bytes leftover after parsing attributes in process `syz.0.3636'. [ 762.831640][T15983] netlink: 'syz.1.3643': attribute type 2 has an invalid length. [ 762.861053][T15983] netlink: 'syz.1.3643': attribute type 8 has an invalid length. [ 762.868951][T15983] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3643'. [ 763.895524][T16000] device syzkaller0 entered promiscuous mode [ 765.513572][T16027] sock: sock_timestamping_bind_phc: sock not bind to device [ 766.230231][T16035] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.3659'. [ 766.271980][T16035] netlink: zone id is out of range [ 766.277176][T16035] netlink: zone id is out of range [ 766.313878][T16035] netlink: zone id is out of range [ 766.319331][T16035] netlink: zone id is out of range [ 766.345963][T16035] netlink: zone id is out of range [ 766.377304][T16035] netlink: zone id is out of range [ 766.397462][T16035] netlink: zone id is out of range [ 766.408019][T16035] netlink: zone id is out of range [ 766.428772][T16035] netlink: zone id is out of range [ 766.449690][T16035] netlink: zone id is out of range [ 768.678034][T16014] netlink: 'syz.0.3652': attribute type 21 has an invalid length. [ 768.685960][T16014] IPv6: NLM_F_CREATE should be specified when creating new route [ 768.694226][T16014] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 768.701511][T16014] IPv6: NLM_F_CREATE should be set when creating new route [ 768.708829][T16014] IPv6: NLM_F_CREATE should be set when creating new route [ 768.716157][T16014] IPv6: NLM_F_CREATE should be set when creating new route [ 768.750862][T16033] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.3659'. [ 769.258552][T16053] netlink: 'syz.3.3666': attribute type 10 has an invalid length. [ 769.472744][T16056] netlink: 'syz.1.3664': attribute type 3 has an invalid length. [ 769.554667][T16056] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3664'. [ 769.694549][T16066] netlink: 'syz.1.3664': attribute type 2 has an invalid length. [ 770.017027][T16053] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 770.047227][T16066] device 1 entered promiscuous mode [ 770.131624][T16075] can: request_module (can-proto-0) failed. [ 770.235492][T16082] device syzkaller0 entered promiscuous mode [ 773.761124][T16109] device netdevsim0 entered promiscuous mode [ 773.999861][T16114] netlink: 'syz.3.3682': attribute type 10 has an invalid length. [ 775.137903][T16154] device netdevsim0 entered promiscuous mode [ 775.313473][ T4268] Bluetooth: hci1: ISO packet for unknown connection handle 49 [ 775.868703][T16171] netlink: 'syz.4.3701': attribute type 7 has an invalid length. [ 776.766366][T16190] netlink: 'syz.2.3703': attribute type 3 has an invalid length. [ 776.778860][T16190] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3703'. [ 777.326588][T16202] netlink: 'syz.4.3710': attribute type 8 has an invalid length. [ 777.335444][T16202] netlink: 399 bytes leftover after parsing attributes in process `syz.4.3710'. [ 777.384192][T16202] netlink: 'syz.4.3710': attribute type 39 has an invalid length. [ 777.707836][T16211] sctp: [Deprecated]: syz.1.3712 (pid 16211) Use of struct sctp_assoc_value in delayed_ack socket option. [ 777.707836][T16211] Use struct sctp_sack_info instead [ 777.757642][T16213] netlink: 22 bytes leftover after parsing attributes in process `syz.1.3712'. [ 779.484573][T16226] device bridge_slave_1 left promiscuous mode [ 779.546355][T16226] bridge0: port 2(bridge_slave_1) entered disabled state [ 780.011336][ T4281] Bluetooth: hci3: command 0x0406 tx timeout [ 780.733148][T16226] device bridge_slave_0 left promiscuous mode [ 780.739544][T16226] bridge0: port 1(bridge_slave_0) entered disabled state [ 783.188683][T16297] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3737'. [ 783.897845][T16306] device bond_slave_1 entered promiscuous mode [ 785.266671][T16352] netlink: 'syz.2.3754': attribute type 10 has an invalid length. [ 785.598074][T16352] team0: Port device wlan1 added [ 786.017158][T16378] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3762'. [ 787.666377][T16401] netlink: 188 bytes leftover after parsing attributes in process `syz.2.3771'. [ 787.899566][T16401] netlink: 'syz.2.3771': attribute type 2 has an invalid length. [ 788.607884][T16401] device .d entered promiscuous mode [ 788.619519][T16413] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3774'. [ 790.738763][T16453] bridge0: port 2(bridge_slave_1) entered disabled state [ 790.746650][T16453] bridge0: port 1(bridge_slave_0) entered disabled state [ 790.846515][T16444] device bridge_slave_1 left promiscuous mode [ 790.890312][T16444] bridge0: port 2(bridge_slave_1) entered disabled state [ 791.562485][T16469] netlink: 'syz.1.3789': attribute type 3 has an invalid length. [ 791.580718][T16444] device bridge_slave_0 left promiscuous mode [ 791.587436][T16444] bridge0: port 1(bridge_slave_0) entered disabled state [ 791.601390][T16469] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3789'. [ 792.372115][T16485] device pim6reg1 entered promiscuous mode [ 792.869162][T16499] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.3799'. [ 794.817582][T16520] netlink: 'syz.3.3805': attribute type 3 has an invalid length. [ 794.829045][T16520] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3805'. [ 795.546545][ T4268] Bluetooth: hci5: command 0x0406 tx timeout [ 796.456605][T16567] device syzkaller0 entered promiscuous mode [ 800.143441][T16610] netlink: 188 bytes leftover after parsing attributes in process `syz.0.3834'. [ 801.155863][T16604] device syzkaller0 entered promiscuous mode [ 803.378117][T16620] netlink: 'syz.4.3837': attribute type 2 has an invalid length. [ 803.386201][T16620] netlink: 'syz.4.3837': attribute type 8 has an invalid length. [ 803.394196][T16620] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3837'. [ 804.129916][T16650] device syzkaller0 entered promiscuous mode [ 804.385809][T16661] net_ratelimit: 16 callbacks suppressed [ 804.385828][T16661] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 804.826503][T16670] sock: sock_timestamping_bind_phc: sock not bind to device [ 806.894214][T16683] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.3854'. [ 807.337747][T16699] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.3857'. [ 807.417521][T16699] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 807.583561][T16696] device syzkaller0 entered promiscuous mode [ 808.521881][T16720] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 808.670974][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.677377][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.665748][T16711] netlink: 'syz.2.3861': attribute type 39 has an invalid length. [ 810.731008][ T4281] Bluetooth: hci2: command 0x0406 tx timeout [ 812.484087][T16774] device syzkaller0 entered promiscuous mode [ 812.517873][T16776] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 814.260509][ T4281] Bluetooth: hci0: unexpected event 0x05 length: 15 > 4 [ 815.940816][T16781] device sit0 entered promiscuous mode [ 816.639460][T16827] netlink: 'syz.2.3901': attribute type 10 has an invalid length. [ 818.227778][T16865] device syzkaller0 entered promiscuous mode [ 818.796784][T16890] delete_channel: no stack [ 818.838035][T16893] netlink: 'syz.0.3918': attribute type 3 has an invalid length. [ 818.865159][T16893] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3918'. [ 822.253015][T16937] netlink: 'syz.2.3933': attribute type 3 has an invalid length. [ 822.347825][T16937] netlink: 'syz.2.3933': attribute type 1 has an invalid length. [ 822.395815][T16937] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.3933'. [ 824.828373][T16947] device virt_wifi0 entered promiscuous mode [ 825.886295][T17003] device syzkaller0 entered promiscuous mode [ 827.248781][T17038] syz.4.3958[17038] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 827.248890][T17038] syz.4.3958[17038] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 829.067789][T17042] netlink: 830 bytes leftover after parsing attributes in process `syz.4.3959'. [ 829.270778][T17049] netlink: 'syz.2.3962': attribute type 2 has an invalid length. [ 830.046976][T17049] device 0 entered promiscuous mode [ 830.581089][T17078] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3971'. [ 830.969066][T17087] device syzkaller0 entered promiscuous mode [ 846.628813][T17324] syz.1.4039[17324] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 846.628935][T17324] syz.1.4039[17324] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 847.041629][T17335] netlink: 763 bytes leftover after parsing attributes in process `syz.2.4044'. [ 847.776343][T17345] netlink: 'syz.1.4048': attribute type 10 has an invalid length. [ 847.791552][T17345] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.4048'. [ 850.736459][T17408] IPv6: Can't replace route, no match found [ 850.826744][T17408] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4066'. [ 852.252001][T17433] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.4072'. [ 852.341099][T17433] IPv6: NLM_F_CREATE should be specified when creating new route [ 852.415129][T17433] netlink: 'syz.2.4072': attribute type 10 has an invalid length. [ 852.449720][T17433] netlink: 2 bytes leftover after parsing attributes in process `syz.2.4072'. [ 852.499422][T17433] device bond0 entered promiscuous mode [ 852.540249][T17433] device bond_slave_0 entered promiscuous mode [ 852.595193][T17433] device bond_slave_1 entered promiscuous mode [ 856.195640][T17529] device syzkaller0 entered promiscuous mode [ 859.466274][T17556] netlink: 'syz.4.4108': attribute type 3 has an invalid length. [ 859.494546][T17556] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4108'. [ 863.085870][T17579] netlink: 'syz.3.4112': attribute type 17 has an invalid length. [ 863.098790][T17579] netlink: 'syz.3.4112': attribute type 16 has an invalid length. [ 863.110311][T17579] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4112'. [ 863.928422][T17613] netlink: 'syz.3.4122': attribute type 21 has an invalid length. [ 863.982561][T17613] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4122'. [ 864.064697][T17613] netlink: 'syz.3.4122': attribute type 1 has an invalid length. [ 866.676931][T17652] netlink: 'syz.1.4134': attribute type 10 has an invalid length. [ 866.731677][T17652] device syz_tun entered promiscuous mode [ 866.830384][T17652] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 868.108975][T17717] netlink: 'syz.2.4153': attribute type 2 has an invalid length. [ 868.134726][T17717] netlink: 'syz.2.4153': attribute type 8 has an invalid length. [ 868.191096][T17717] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4153'. [ 868.984548][T17737] device syzkaller0 entered promiscuous mode [ 869.962432][T17764] syz.0.4165[17764] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 869.962562][T17764] syz.0.4165[17764] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 870.094089][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.131548][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 872.306000][T17756] netlink: 'syz.3.4164': attribute type 13 has an invalid length. [ 872.319016][T17756] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4164'. [ 872.338652][T17756] device bond0 entered promiscuous mode [ 872.344835][T17756] device bond_slave_0 entered promiscuous mode [ 872.358406][T17756] device bond_slave_1 entered promiscuous mode [ 873.906194][T17798] device syzkaller0 entered promiscuous mode [ 882.238513][T17824] tap0: tun_chr_ioctl cmd 1074025675 [ 882.244004][T17824] tap0: persist disabled [ 882.289393][T17859] netlink: 'syz.0.4193': attribute type 10 has an invalid length. [ 882.324846][T17859] team0: Port device netdevsim0 added [ 882.364647][T17860] netlink: 'syz.0.4193': attribute type 10 has an invalid length. [ 882.415540][T17860] team0: Port device netdevsim0 removed [ 882.460373][T17860] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 882.500469][T17865] syz.1.4195[17865] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 882.500588][T17865] syz.1.4195[17865] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 882.884564][T17882] device syzkaller0 entered promiscuous mode [ 887.446480][T17912] netlink: 14568 bytes leftover after parsing attributes in process `syz.0.4206'. [ 887.717939][T17920] netlink: 'syz.4.4208': attribute type 21 has an invalid length. [ 887.819236][T17927] syz.3.4210[17927] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 887.819349][T17927] syz.3.4210[17927] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 889.345329][T17959] device syzkaller0 entered promiscuous mode [ 893.357605][T17989] netlink: 134056 bytes leftover after parsing attributes in process `syz.1.4226'. [ 893.852228][T17998] netlink: 'syz.1.4230': attribute type 10 has an invalid length. [ 893.894604][T17998] bond0: (slave wlan1): Releasing backup interface [ 894.326659][T17998] team0: Port device wlan1 added [ 895.042750][T18012] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.4234'. [ 895.167099][T18018] sctp: [Deprecated]: syz.0.4235 (pid 18018) Use of struct sctp_assoc_value in delayed_ack socket option. [ 895.167099][T18018] Use struct sctp_sack_info instead [ 895.242643][T18019] device syzkaller0 entered promiscuous mode [ 895.284694][T18012] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 896.900257][T14835] wlan1: Trigger new scan to find an IBSS to join [ 899.429242][ T4268] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 899.461126][ T4268] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 899.482278][ T4268] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 899.500193][ T4268] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 899.508662][ T4268] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 899.517927][T13095] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 899.945335][T18025] device syzkaller0 entered promiscuous mode [ 900.061996][T18038] team0: Port device team_slave_0 removed [ 900.068257][T18038] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 900.823656][T14840] wlan1: Trigger new scan to find an IBSS to join [ 901.535793][ T4281] Bluetooth: hci4: command 0x0409 tx timeout [ 902.821006][T14840] wlan1: Creating new IBSS network, BSSID f6:1e:84:61:d4:9d [ 903.597211][T14837] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 903.611863][ T4281] Bluetooth: hci4: command 0x041b tx timeout [ 904.268866][T18042] chnl_net:caif_netlink_parms(): no params data found [ 904.698537][T18084] device syzkaller0 entered promiscuous mode [ 904.758587][T18042] bridge0: port 1(bridge_slave_0) entered blocking state [ 904.812481][T18042] bridge0: port 1(bridge_slave_0) entered disabled state [ 904.868054][T18042] device bridge_slave_0 entered promiscuous mode [ 905.690965][ T4281] Bluetooth: hci4: command 0x040f tx timeout [ 907.209384][T18042] bridge0: port 2(bridge_slave_1) entered blocking state [ 907.216931][T18042] bridge0: port 2(bridge_slave_1) entered disabled state [ 907.227932][T18042] device bridge_slave_1 entered promiscuous mode [ 907.319925][T18042] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 907.371734][T18110] syz.0.4260[18110] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 907.371858][T18110] syz.0.4260[18110] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 907.388000][T14838] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 907.436074][T18042] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 907.525104][T14838] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 907.615527][T18042] team0: Port device team_slave_0 added [ 907.676810][T14838] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 907.716197][T18042] team0: Port device team_slave_1 added [ 907.771208][T13095] Bluetooth: hci4: command 0x0419 tx timeout [ 908.423012][T18135] FAULT_INJECTION: forcing a failure. [ 908.423012][T18135] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 908.430353][T18132] delete_channel: no stack [ 908.438860][T18135] CPU: 0 PID: 18135 Comm: syz.0.4268 Not tainted syzkaller #0 [ 908.450101][T18135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 908.460212][T18135] Call Trace: [ 908.463505][T18135] [ 908.466490][T18135] dump_stack_lvl+0x188/0x24e [ 908.471194][T18135] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 908.477377][T18135] ? show_regs_print_info+0x12/0x12 [ 908.482594][T18135] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 908.488782][T18135] should_fail_ex+0x399/0x4d0 [ 908.493483][T18135] _copy_to_user+0x2c/0x130 [ 908.498079][T18135] simple_read_from_buffer+0xe3/0x150 [ 908.503505][T18135] proc_fail_nth_read+0x1a6/0x220 [ 908.508559][T18135] ? proc_fault_inject_write+0x310/0x310 [ 908.514303][T18135] ? fsnotify_perm+0x248/0x550 [ 908.519082][T18135] ? proc_fault_inject_write+0x310/0x310 [ 908.524736][T18135] vfs_read+0x2de/0xa00 [ 908.528915][T18135] ? kernel_read+0x1e0/0x1e0 [ 908.533522][T18135] ? __fget_files+0x28/0x4b0 [ 908.538130][T18135] ? __fget_files+0x28/0x4b0 [ 908.542736][T18135] ? __fget_files+0x43d/0x4b0 [ 908.547446][T18135] ? __fdget_pos+0x2ae/0x360 [ 908.552052][T18135] ? ksys_read+0x71/0x250 [ 908.556572][T18135] ksys_read+0x14c/0x250 [ 908.560836][T18135] ? vfs_write+0xa30/0xa30 [ 908.565282][T18135] ? lockdep_hardirqs_on+0x94/0x140 [ 908.570501][T18135] do_syscall_64+0x4c/0xa0 [ 908.574954][T18135] ? clear_bhb_loop+0x60/0xb0 [ 908.579650][T18135] ? clear_bhb_loop+0x60/0xb0 [ 908.584346][T18135] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 908.590256][T18135] RIP: 0033:0x7f1a0b75b58e [ 908.594683][T18135] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 908.614389][T18135] RSP: 002b:00007f1a0c623fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 908.622901][T18135] RAX: ffffffffffffffda RBX: 00007f1a0c6246c0 RCX: 00007f1a0b75b58e [ 908.630889][T18135] RDX: 000000000000000f RSI: 00007f1a0c6240a0 RDI: 000000000000000a [ 908.638875][T18135] RBP: 00007f1a0c624090 R08: 0000000000000000 R09: 0000000000000000 [ 908.646877][T18135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 908.654863][T18135] R13: 00007f1a0ba16038 R14: 00007f1a0ba15fa0 R15: 00007ffdd1ea0df8 [ 908.662878][T18135] [ 908.698445][T18132] delete_channel: no stack [ 910.434070][T18042] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 910.441250][T18042] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 910.481722][T18042] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 910.496795][T18139] netlink: 'syz.3.4269': attribute type 2 has an invalid length. [ 910.511041][T18139] netlink: 'syz.3.4269': attribute type 8 has an invalid length. [ 910.518939][T18139] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4269'. [ 910.589665][T14838] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 910.623926][T18042] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 910.641104][T18042] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 910.700226][T18042] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 910.828589][T18151] netlink: 'syz.3.4272': attribute type 21 has an invalid length. [ 910.838739][T18151] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4272'. [ 910.887151][T18148] device syzkaller0 entered promiscuous mode [ 910.947653][T18042] device hsr_slave_0 entered promiscuous mode [ 910.956823][T18042] device hsr_slave_1 entered promiscuous mode [ 910.971071][T18042] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 910.978789][T18042] Cannot create hsr debugfs directory [ 911.419408][T13095] Bluetooth: hci5: ISO packet for unknown connection handle 29 [ 916.211524][T14838] device .d left promiscuous mode [ 916.324926][T14838] device 0 left promiscuous mode [ 916.494584][T18042] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 916.538822][T18042] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 916.772568][T18192] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.4284'. [ 916.903713][T18042] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 916.924041][T18183] netlink: 'syz.0.4282': attribute type 2 has an invalid length. [ 916.966764][T18183] netlink: 'syz.0.4282': attribute type 8 has an invalid length. [ 916.995620][T18183] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4282'. [ 917.046675][T18042] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 917.086636][T18192] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 917.110932][T18192] CPU: 1 PID: 18192 Comm: syz.1.4284 Not tainted syzkaller #0 [ 917.118575][T18192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 917.128686][T18192] Call Trace: [ 917.132077][T18192] [ 917.135052][T18192] dump_stack_lvl+0x188/0x24e [ 917.139790][T18192] ? show_regs_print_info+0x12/0x12 [ 917.145048][T18192] ? load_image+0x400/0x400 [ 917.149613][T18192] sysfs_warn_dup+0x8a/0xa0 [ 917.154175][T18192] sysfs_do_create_link_sd+0xc0/0x110 [ 917.159601][T18192] device_add+0x7ed/0xfb0 [ 917.164085][T18192] wiphy_register+0x1d9f/0x2ac0 [ 917.168966][T18192] ? cfg80211_event_work+0x40/0x40 [ 917.174102][T18192] ? minstrel_ht_alloc+0x894/0xa20 [ 917.179275][T18192] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 917.185394][T18192] ieee80211_register_hw+0x2d00/0x39f0 [ 917.190910][T18192] ? ieee80211_register_hw+0xf01/0x39f0 [ 917.196494][T18192] ? ieee80211_register_hw+0xf01/0x39f0 [ 917.202094][T18192] ? ieee80211_tasklet_handler+0x20/0x20 [ 917.206977][T18198] syz.0.4287[18198] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 917.207766][T18192] ? memset+0x1e/0x40 [ 917.207794][T18192] ? __hrtimer_init+0x186/0x270 [ 917.219566][T18198] syz.0.4287[18198] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 917.223260][T18192] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 917.223316][T18192] hwsim_new_radio_nl+0xafa/0xce0 [ 917.223355][T18192] genl_family_rcv_msg_doit+0x22a/0x330 [ 917.223381][T18192] ? end_current_label_crit_section+0x170/0x170 [ 917.223421][T18192] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 917.223457][T18192] ? bpf_lsm_capable+0x5/0x10 [ 917.223481][T18192] ? security_capable+0x85/0xb0 [ 917.223511][T18192] genl_rcv_msg+0x604/0x790 [ 917.223545][T18192] ? genl_bind+0x360/0x360 [ 917.223565][T18192] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 917.223603][T18192] netlink_rcv_skb+0x1fb/0x450 [ 917.223624][T18192] ? genl_bind+0x360/0x360 [ 917.223649][T18192] ? netlink_ack+0x1170/0x1170 [ 917.223685][T18192] ? down_read+0x1a8/0x2d0 [ 917.223705][T18192] genl_rcv+0x24/0x40 [ 917.223725][T18192] netlink_unicast+0x74d/0x8d0 [ 917.223759][T18192] netlink_sendmsg+0x8ad/0xbd0 [ 917.223790][T18192] ? netlink_getsockopt+0x550/0x550 [ 917.223816][T18192] ? aa_sock_msg_perm+0x94/0x150 [ 917.223837][T18192] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 917.340717][T18192] ? security_socket_sendmsg+0x7c/0xa0 [ 917.346210][T18192] ? netlink_getsockopt+0x550/0x550 [ 917.351419][T18192] ____sys_sendmsg+0x5be/0x970 [ 917.356207][T18192] ? __sys_sendmsg_sock+0x30/0x30 [ 917.361241][T18192] ? __import_iovec+0x315/0x500 [ 917.366988][T18192] ? import_iovec+0x6f/0xa0 [ 917.371508][T18192] ___sys_sendmsg+0x2a2/0x360 [ 917.376196][T18192] ? try_to_wake_up+0x6ae/0x1080 [ 917.381154][T18192] ? __sys_sendmsg+0x290/0x290 [ 917.385985][T18192] __se_sys_sendmsg+0x1bb/0x2a0 [ 917.390848][T18192] ? __x64_sys_sendmsg+0x80/0x80 [ 917.395813][T18192] ? lockdep_hardirqs_on+0x94/0x140 [ 917.401027][T18192] do_syscall_64+0x4c/0xa0 [ 917.405456][T18192] ? clear_bhb_loop+0x60/0xb0 [ 917.410146][T18192] ? clear_bhb_loop+0x60/0xb0 [ 917.414844][T18192] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 917.420751][T18192] RIP: 0033:0x7ffb0779acb9 [ 917.425181][T18192] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 917.444800][T18192] RSP: 002b:00007ffb08648028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 917.453248][T18192] RAX: ffffffffffffffda RBX: 00007ffb07a16090 RCX: 00007ffb0779acb9 [ 917.461250][T18192] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 917.469232][T18192] RBP: 00007ffb07808bf7 R08: 0000000000000000 R09: 0000000000000000 [ 917.477209][T18192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 917.485187][T18192] R13: 00007ffb07a16128 R14: 00007ffb07a16090 R15: 00007ffc338c3488 [ 917.493195][T18192] [ 917.954619][T18220] device syzkaller0 entered promiscuous mode [ 919.026997][T18237] syz.3.4299[18237] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 919.027114][T18237] syz.3.4299[18237] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 919.779713][T18250] netlink: 154788 bytes leftover after parsing attributes in process `syz.1.4303'. [ 919.834633][T18250] openvswitch: netlink: Message has 48126 unknown bytes. [ 921.194612][T18238] netlink: 'syz.4.4298': attribute type 2 has an invalid length. [ 921.205548][T18238] netlink: 'syz.4.4298': attribute type 8 has an invalid length. [ 921.219237][T18238] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4298'. [ 921.437281][T18042] 8021q: adding VLAN 0 to HW filter on device bond0 [ 921.483384][ T7224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 921.499665][ T7224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 921.580648][T18042] 8021q: adding VLAN 0 to HW filter on device team0 [ 921.604777][ T5153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 921.623492][ T5153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 921.647846][ T5153] bridge0: port 1(bridge_slave_0) entered blocking state [ 921.655035][ T5153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 921.674877][ T5153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 921.683635][T18276] syz.3.4311[18276] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 921.683755][T18276] syz.3.4311[18276] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 921.730138][T14837] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 921.761728][T14837] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 921.770530][T14837] bridge0: port 2(bridge_slave_1) entered blocking state [ 921.777732][T14837] bridge0: port 2(bridge_slave_1) entered forwarding state [ 921.799014][T14837] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 921.808276][T14837] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 921.825424][T14837] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 921.842780][T14837] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 921.979710][T14838] team0: Port device wlan1 removed [ 922.019768][T14837] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 922.032356][T14837] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 922.051346][T14837] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 922.067865][T14837] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 922.080342][T14837] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 922.135936][T14837] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 922.145102][T14837] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 922.250635][T18042] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 922.330834][T14838] device hsr_slave_0 left promiscuous mode [ 922.343649][T14838] device hsr_slave_1 left promiscuous mode [ 922.356006][T14838] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 922.371230][T14838] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 922.410221][T14838] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 922.432042][T14838] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 922.482425][T14838] device veth1_macvtap left promiscuous mode [ 922.488724][T14838] device veth1_vlan left promiscuous mode [ 922.573630][T18304] netlink: 'syz.4.4318': attribute type 46 has an invalid length. [ 923.138196][T18318] syz.1.4322[18318] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 923.138312][T18318] syz.1.4322[18318] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 923.420453][T14838] team0 (unregistering): Port device team_slave_1 removed [ 923.478917][T14838] team0 (unregistering): Port device team_slave_0 removed [ 923.523482][T14838] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 923.532448][T14838] device bond_slave_1 left promiscuous mode [ 923.573332][T14838] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 923.582702][T14838] device bond_slave_0 left promiscuous mode [ 923.909737][T14838] bond0 (unregistering): Released all slaves [ 923.957644][T18304] netlink: 'syz.4.4318': attribute type 46 has an invalid length. [ 924.373663][T18329] netlink: 176 bytes leftover after parsing attributes in process `syz.3.4324'. [ 924.397495][T14837] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 924.405194][T14837] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 924.432094][T18042] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 924.657227][T18335] netlink: 'syz.4.4325': attribute type 21 has an invalid length. [ 924.787790][T18335] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.4325'. [ 924.846763][T18338] netlink: 'syz.1.4327': attribute type 15 has an invalid length. [ 924.863014][T18338] netlink: 'syz.1.4327': attribute type 7 has an invalid length. [ 925.569363][T18347] netlink: 14568 bytes leftover after parsing attributes in process `syz.0.4330'. [ 925.691821][ T5153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 925.711539][ T5153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 925.753444][ T5153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 925.773487][ T5153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 925.814795][T18042] device veth0_vlan entered promiscuous mode [ 925.863680][ T5153] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 925.889402][ T5153] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 925.928373][T18042] device veth1_vlan entered promiscuous mode [ 926.045852][T14839] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 926.059499][T14839] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 926.090208][T14839] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 926.108912][T14839] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 926.136267][T18042] device veth0_macvtap entered promiscuous mode [ 926.158989][T18042] device veth1_macvtap entered promiscuous mode [ 926.219629][T18042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 926.242881][T18042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 926.264323][T18042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 926.284161][T18042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 926.294974][T18042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 926.306533][T18042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 926.318242][T18042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 926.456947][T18042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 926.485742][T18042] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 926.739187][T14837] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 926.750184][T14837] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 926.761559][T14837] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 926.775596][T14837] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 926.792409][T18042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 926.803648][T18042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 926.824713][T18042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 926.847966][T18042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 926.868091][T18042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 926.897937][T18042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 926.907998][T18042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 926.918687][T18042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 926.930226][T18042] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 926.958849][T14839] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 926.968966][T14839] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 926.984098][T18042] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 926.994821][T18042] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 927.010910][T18042] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 927.019769][T18042] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 927.162391][T12360] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 927.181854][T12360] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 927.193540][T14837] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 927.323130][T12349] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 927.351073][T12349] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 927.371257][T14837] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 928.203145][T18428] netlink: 830 bytes leftover after parsing attributes in process `syz.1.4351'. [ 928.248550][T18425] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4352'. [ 928.311761][T18425] tc_dump_action: action bad kind [ 928.424636][T18430] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4352'. [ 929.035541][T18441] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4356'. [ 929.619398][T18456] syz.4.4360[18456] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 929.619516][T18456] syz.4.4360[18456] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 931.679392][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.699817][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.031609][T18508] netlink: 'syz.0.4375': attribute type 13 has an invalid length. [ 932.061345][T18508] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4375'. [ 932.070471][T18508] device bond0 entered promiscuous mode [ 932.128102][T18508] device bond_slave_0 entered promiscuous mode [ 932.139403][T18508] device bond_slave_1 entered promiscuous mode [ 932.146234][T18508] device batadv0 entered promiscuous mode [ 932.153551][T18508] device netdevsim0 entered promiscuous mode [ 932.283961][T18522] FAULT_INJECTION: forcing a failure. [ 932.283961][T18522] name failslab, interval 1, probability 0, space 0, times 0 [ 932.333524][T18522] CPU: 1 PID: 18522 Comm: syz.1.4377 Not tainted syzkaller #0 [ 932.341069][T18522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 932.351166][T18522] Call Trace: [ 932.354479][T18522] [ 932.357447][T18522] dump_stack_lvl+0x188/0x24e [ 932.362177][T18522] ? show_regs_print_info+0x12/0x12 [ 932.367430][T18522] ? load_image+0x400/0x400 [ 932.371974][T18522] ? __might_sleep+0xd0/0xd0 [ 932.376596][T18522] ? __lock_acquire+0x7d10/0x7d10 [ 932.381638][T18522] should_fail_ex+0x399/0x4d0 [ 932.386338][T18522] should_failslab+0x5/0x20 [ 932.390857][T18522] slab_pre_alloc_hook+0x59/0x310 [ 932.395892][T18522] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 932.401630][T18522] __kmem_cache_alloc_node+0x4f/0x260 [ 932.407017][T18522] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 932.412751][T18522] __kmalloc+0xa0/0x240 [ 932.416927][T18522] tomoyo_realpath_from_path+0xdf/0x5d0 [ 932.422498][T18522] ? tomoyo_path_number_perm+0x205/0x650 [ 932.428141][T18522] tomoyo_path_number_perm+0x22f/0x650 [ 932.433612][T18522] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 932.439077][T18522] ? ksys_write+0x1c0/0x250 [ 932.443594][T18522] ? common_file_perm+0x171/0x1c0 [ 932.448656][T18522] ? __fget_files+0x28/0x4b0 [ 932.453257][T18522] ? __fget_files+0x28/0x4b0 [ 932.457869][T18522] security_file_ioctl+0x6c/0xa0 [ 932.462823][T18522] __se_sys_ioctl+0x48/0x170 [ 932.467432][T18522] do_syscall_64+0x4c/0xa0 [ 932.471867][T18522] ? clear_bhb_loop+0x60/0xb0 [ 932.476552][T18522] ? clear_bhb_loop+0x60/0xb0 [ 932.481245][T18522] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 932.487237][T18522] RIP: 0033:0x7ffb0779acb9 [ 932.491666][T18522] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 932.511291][T18522] RSP: 002b:00007ffb08627028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 932.519729][T18522] RAX: ffffffffffffffda RBX: 00007ffb07a16180 RCX: 00007ffb0779acb9 [ 932.527714][T18522] RDX: 00002000000000c0 RSI: 0000000000008914 RDI: 0000000000000004 [ 932.535691][T18522] RBP: 00007ffb08627090 R08: 0000000000000000 R09: 0000000000000000 [ 932.543690][T18522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 932.551697][T18522] R13: 00007ffb07a16218 R14: 00007ffb07a16180 R15: 00007ffc338c3488 [ 932.559704][T18522] [ 932.573174][T18522] ERROR: Out of memory at tomoyo_realpath_from_path. [ 932.767128][T18522] device syzkaller0 entered promiscuous mode [ 932.863689][T18523] device syzkaller0 entered promiscuous mode [ 939.210497][T18576] netlink: 'syz.4.4396': attribute type 21 has an invalid length. [ 939.250886][T18576] netlink: 176 bytes leftover after parsing attributes in process `syz.4.4396'. [ 939.562508][T18583] device syzkaller0 entered promiscuous mode [ 941.575090][T18621] netlink: 'syz.1.4408': attribute type 1 has an invalid length. [ 941.596882][T18621] netlink: 'syz.1.4408': attribute type 3 has an invalid length. [ 941.608583][T18621] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4408'. [ 943.919112][T18655] syz.5.4418[18655] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 943.919230][T18655] syz.5.4418[18655] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 943.997688][T18662] netlink: 22 bytes leftover after parsing attributes in process `syz.4.4421'. [ 945.533600][T18685] device veth1_macvtap left promiscuous mode [ 946.743215][T18722] syz.3.4441[18722] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 946.743329][T18722] syz.3.4441[18722] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 947.383465][T18744] netlink: 'syz.3.4450': attribute type 27 has an invalid length. [ 947.403284][T18745] netlink: 'syz.0.4451': attribute type 21 has an invalid length. [ 947.446617][T18745] netlink: 'syz.0.4451': attribute type 1 has an invalid length. [ 947.477614][T18750] syz.0.4451[18750] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 947.477727][T18750] syz.0.4451[18750] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 947.519376][T18745] netlink: 100 bytes leftover after parsing attributes in process `syz.0.4451'. [ 947.542553][T18744] netlink: 164 bytes leftover after parsing attributes in process `syz.3.4450'. [ 947.793091][T18739] netlink: 10 bytes leftover after parsing attributes in process `syz.1.4449'. [ 947.896102][T18758] syz.3.4456[18758] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 947.896290][T18758] syz.3.4456[18758] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 948.087808][T18753] netlink: 'syz.4.4454': attribute type 10 has an invalid length. [ 948.443303][T18767] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4459'. [ 949.385652][T18789] ref_ctr_offset mismatch. inode: 0x5ce offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x7602 [ 949.489046][T18798] syz.1.4467[18798] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 949.489215][T18798] syz.1.4467[18798] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 950.057319][T18810] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.4469'. [ 950.472765][T18825] netlink: 'syz.1.4478': attribute type 23 has an invalid length. [ 950.496175][T18826] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.4476'. [ 950.713098][T18825] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4478'. [ 950.850815][T18825] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4478'. [ 950.942049][T18830] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4478'. [ 950.951893][T18841] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4478'. [ 953.815394][T18884] syz.0.4495[18884] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 953.815512][T18884] syz.0.4495[18884] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 954.145436][T18895] sctp: [Deprecated]: syz.1.4497 (pid 18895) Use of int in maxseg socket option. [ 954.145436][T18895] Use struct sctp_assoc_value instead [ 954.298968][T18895] netlink: 'syz.1.4497': attribute type 15 has an invalid length. [ 955.029654][T18926] netlink: 'syz.3.4506': attribute type 39 has an invalid length. [ 955.109735][T18934] syz.5.4509[18934] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 955.109868][T18934] syz.5.4509[18934] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 955.359190][T18938] __nla_validate_parse: 3 callbacks suppressed [ 955.359212][T18938] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.4511'. [ 955.383335][T18941] netlink: 15743 bytes leftover after parsing attributes in process `syz.1.4513'. [ 955.886726][T18961] device syzkaller0 entered promiscuous mode [ 955.920649][T18966] FAULT_INJECTION: forcing a failure. [ 955.920649][T18966] name failslab, interval 1, probability 0, space 0, times 0 [ 955.993547][T18966] CPU: 1 PID: 18966 Comm: syz.1.4519 Not tainted syzkaller #0 [ 956.001104][T18966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 956.011217][T18966] Call Trace: [ 956.014613][T18966] [ 956.017577][T18966] dump_stack_lvl+0x188/0x24e [ 956.022323][T18966] ? show_regs_print_info+0x12/0x12 [ 956.027646][T18966] ? load_image+0x400/0x400 [ 956.032190][T18966] ? __might_sleep+0xd0/0xd0 [ 956.036817][T18966] ? __lock_acquire+0x7d10/0x7d10 [ 956.041877][T18966] should_fail_ex+0x399/0x4d0 [ 956.046600][T18966] should_failslab+0x5/0x20 [ 956.051144][T18966] slab_pre_alloc_hook+0x59/0x310 [ 956.056207][T18966] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 956.061969][T18966] __kmem_cache_alloc_node+0x4f/0x260 [ 956.067378][T18966] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 956.073137][T18966] __kmalloc+0xa0/0x240 [ 956.077329][T18966] tomoyo_realpath_from_path+0xdf/0x5d0 [ 956.083006][T18966] ? tomoyo_path_number_perm+0x205/0x650 [ 956.088681][T18966] tomoyo_path_number_perm+0x22f/0x650 [ 956.094188][T18966] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 956.099688][T18966] ? ksys_write+0x1c0/0x250 [ 956.104411][T18966] ? common_file_perm+0x171/0x1c0 [ 956.109520][T18966] ? __fget_files+0x28/0x4b0 [ 956.114170][T18966] ? __fget_files+0x28/0x4b0 [ 956.118910][T18966] security_file_ioctl+0x6c/0xa0 [ 956.123902][T18966] __se_sys_ioctl+0x48/0x170 [ 956.128538][T18966] do_syscall_64+0x4c/0xa0 [ 956.133087][T18966] ? clear_bhb_loop+0x60/0xb0 [ 956.137889][T18966] ? clear_bhb_loop+0x60/0xb0 [ 956.142605][T18966] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 956.148534][T18966] RIP: 0033:0x7ffb0779acb9 [ 956.152982][T18966] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 956.172634][T18966] RSP: 002b:00007ffb08648028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 956.181206][T18966] RAX: ffffffffffffffda RBX: 00007ffb07a16090 RCX: 00007ffb0779acb9 [ 956.189301][T18966] RDX: 00002000000000c0 RSI: 0000000000008914 RDI: 0000000000000004 [ 956.197304][T18966] RBP: 00007ffb08648090 R08: 0000000000000000 R09: 0000000000000000 [ 956.205312][T18966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 956.213309][T18966] R13: 00007ffb07a16128 R14: 00007ffb07a16090 R15: 00007ffc338c3488 [ 956.221301][T18966] [ 956.258139][T18966] ERROR: Out of memory at tomoyo_realpath_from_path. [ 958.529062][T18966] device syzkaller0 entered promiscuous mode [ 958.694345][T18986] syz.4.4524[18986] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 958.694460][T18986] syz.4.4524[18986] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 959.000996][T18997] netlink: 'syz.3.4528': attribute type 3 has an invalid length. [ 959.036756][T18997] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.4528'. [ 959.092489][T18999] netlink: 144 bytes leftover after parsing attributes in process `syz.3.4528'. [ 961.984594][T19027] netlink: 830 bytes leftover after parsing attributes in process `syz.4.4537'. [ 962.216147][T19030] syz.1.4539[19030] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 962.216262][T19030] syz.1.4539[19030] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 962.292062][T19035] netlink: 'syz.3.4540': attribute type 10 has an invalid length. [ 962.461360][T19035] device dummy0 entered promiscuous mode [ 962.489589][T19035] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 962.594577][T19045] netlink: 'syz.1.4542': attribute type 3 has an invalid length. [ 962.653874][T19045] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.4542'. [ 962.702034][T19038] device syzkaller0 entered promiscuous mode [ 962.743735][T19041] netlink: 10 bytes leftover after parsing attributes in process `syz.4.4541'. [ 963.780084][T19056] delete_channel: no stack [ 963.785338][T19056] delete_channel: no stack [ 966.164047][T19085] syz.5.4553[19085] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 966.164161][T19085] syz.5.4553[19085] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 966.302521][T19089] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.4552'. [ 966.929406][T19082] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.4552'. [ 967.004532][T19101] netlink: 'syz.5.4558': attribute type 3 has an invalid length. [ 967.091804][T19099] netlink: 144 bytes leftover after parsing attributes in process `syz.5.4558'. [ 967.110942][T19101] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.4558'. [ 967.142388][T19104] device syzkaller0 entered promiscuous mode [ 970.016472][T19126] device syzkaller0 entered promiscuous mode [ 970.026809][T19135] syz.1.4568[19135] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 970.026921][T19135] syz.1.4568[19135] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 970.450759][T19140] netlink: 'syz.3.4569': attribute type 3 has an invalid length. [ 970.484110][T19140] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.4569'. [ 975.252069][T19143] netlink: 14601 bytes leftover after parsing attributes in process `syz.3.4569'. [ 975.445982][T19177] syz.5.4582[19177] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 975.446099][T19177] syz.5.4582[19177] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 975.715565][T19188] netlink: 180900 bytes leftover after parsing attributes in process `syz.4.4586'. [ 975.807876][T19188] openvswitch: netlink: Flow actions attr not present in new flow. [ 976.215185][T19207] netlink: 'syz.4.4593': attribute type 10 has an invalid length. [ 976.236828][T19207] netlink: 56823 bytes leftover after parsing attributes in process `syz.4.4593'. [ 976.681783][T19217] device syzkaller0 entered promiscuous mode [ 976.916649][T19228] syz.1.4598[19228] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 976.916784][T19228] syz.1.4598[19228] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 979.795040][T19258] netlink: 'syz.3.4605': attribute type 6 has an invalid length. [ 979.803922][T19258] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.4605'. [ 980.139935][T19273] syz.0.4610[19273] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 980.140052][T19273] syz.0.4610[19273] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 980.858894][T19271] netlink: 10 bytes leftover after parsing attributes in process `syz.5.4611'. [ 982.274838][T19329] delete_channel: no stack [ 982.287498][T19329] delete_channel: no stack [ 982.295439][T19333] syz.0.4629[19333] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 982.295561][T19333] syz.0.4629[19333] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 983.087713][T19356] netlink: 'syz.4.4637': attribute type 10 has an invalid length. [ 983.186005][T19356] bond0: (slave gretap0): Enslaving as an active interface with an up link [ 983.347079][T19363] netlink: 'syz.1.4641': attribute type 11 has an invalid length. [ 983.447391][T19363] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4641'. [ 983.491219][T19367] netlink: 'syz.1.4641': attribute type 11 has an invalid length. [ 983.505971][T19367] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4641'. [ 983.593292][T19362] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 983.628785][T19372] syz.3.4644[19372] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 983.628905][T19372] syz.3.4644[19372] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 983.728257][T19369] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.4643'. [ 983.826106][T19376] netlink: 'syz.0.4645': attribute type 10 has an invalid length. [ 985.670942][T19404] netlink: 'syz.0.4652': attribute type 10 has an invalid length. [ 985.785037][T19404] 8021q: adding VLAN 0 to HW filter on device team0 [ 985.802974][T19404] device team0 entered promiscuous mode [ 985.808618][T19404] device team_slave_0 entered promiscuous mode [ 985.871087][T19404] device team_slave_1 entered promiscuous mode [ 985.901668][T19404] bond0: (slave team0): Enslaving as an active interface with an up link [ 986.049513][T19418] netlink: 'syz.5.4657': attribute type 10 has an invalid length. [ 986.071002][T19418] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 986.118517][T19418] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 986.204163][T19418] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 986.238109][T19422] syz.0.4658[19422] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 986.238222][T19422] syz.0.4658[19422] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 987.338308][T19452] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4664'. [ 987.784892][T19463] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4668'. [ 987.965531][T19463] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4668'. [ 987.991551][T19465] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4668'. [ 988.034230][T19468] IPv6: NLM_F_REPLACE set, but no existing node found! [ 988.967895][T19485] syz.5.4673[19485] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 988.968020][T19485] syz.5.4673[19485] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 989.053352][T19491] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4676'. [ 989.075938][T19491] netlink: 'syz.1.4676': attribute type 49 has an invalid length. [ 989.890347][T19506] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.4681'. [ 990.126565][T19504] device syzkaller0 entered promiscuous mode [ 990.156242][T19513] netlink: 'syz.4.4684': attribute type 10 has an invalid length. [ 990.201093][T19513] netlink: 2 bytes leftover after parsing attributes in process `syz.4.4684'. [ 990.241164][T19513] device team0 entered promiscuous mode [ 990.246916][T19513] device team_slave_0 entered promiscuous mode [ 990.268421][T19513] device team_slave_1 entered promiscuous mode [ 990.360444][T19513] 8021q: adding VLAN 0 to HW filter on device team0 [ 990.412760][T19513] bond0: (slave team0): Releasing backup interface [ 991.769241][T19545] syz.5.4690[19545] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 991.769355][T19545] syz.5.4690[19545] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 992.992607][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.011594][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 994.753644][T19570] syz.1.4701[19570] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 994.753764][T19570] syz.1.4701[19570] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 994.857419][T19574] netlink: 'syz.4.4702': attribute type 17 has an invalid length. [ 994.930154][T19579] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4705'. [ 994.960935][T19574] netlink: 160 bytes leftover after parsing attributes in process `syz.4.4702'. [ 995.312410][T19589] netlink: 4595 bytes leftover after parsing attributes in process `syz.5.4709'. [ 995.383962][T19593] device syzkaller0 entered promiscuous mode [ 996.704332][T19617] netlink: 194236 bytes leftover after parsing attributes in process `syz.1.4718'. [ 996.725165][T19617] netlink: zone id is out of range [ 996.730399][T19617] netlink: zone id is out of range [ 996.744654][T19617] netlink: get zone limit has 8 unknown bytes [ 996.890417][T19619] syz.1.4719[19619] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 996.890537][T19619] syz.1.4719[19619] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 997.487567][T19622] delete_channel: no stack [ 998.990338][T19601] netlink: 'syz.5.4713': attribute type 15 has an invalid length. [ 998.998493][T19601] netlink: 'syz.5.4713': attribute type 5 has an invalid length. [ 999.006377][T19601] netlink: 144 bytes leftover after parsing attributes in process `syz.5.4713'. [ 999.131710][T19627] netlink: 11562 bytes leftover after parsing attributes in process `syz.5.4723'. [ 999.151407][T19628] netlink: 11562 bytes leftover after parsing attributes in process `syz.5.4723'. [ 999.598040][T19649] syz.4.4731[19649] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 999.598183][T19649] syz.4.4731[19649] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 999.683007][T19654] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4733'. [ 1000.969570][T19670] netlink: 194236 bytes leftover after parsing attributes in process `syz.1.4739'. [ 1001.143941][T19670] netlink: zone id is out of range [ 1001.149606][T19670] netlink: zone id is out of range [ 1001.284082][T19670] netlink: zone id is out of range [ 1001.351189][T19677] delete_channel: no stack [ 1001.356317][T19677] delete_channel: no stack [ 1001.411612][T19670] netlink: zone id is out of range [ 1001.417763][T19670] netlink: zone id is out of range [ 1001.525907][T19670] netlink: zone id is out of range [ 1001.603175][T19670] netlink: zone id is out of range [ 1002.690282][T19706] syz.3.4750[19706] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1002.690421][T19706] syz.3.4750[19706] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1003.531424][T19724] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.4757'. [ 1003.687229][T19729] device veth1_to_team entered promiscuous mode [ 1004.103048][T13095] Bluetooth: hci4: unexpected event 0x35 length: 82 > 6 [ 1004.549352][T19750] netlink: 'syz.3.4763': attribute type 10 has an invalid length. [ 1004.611277][T19750] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.4763'. [ 1004.788210][T19759] syz.4.4767[19759] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1004.788331][T19759] syz.4.4767[19759] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1004.805378][T19761] device vcan0 entered promiscuous mode [ 1004.823900][T19761] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1004.965502][T19768] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.4770'. [ 1005.489918][T19767] device syzkaller0 entered promiscuous mode [ 1008.342353][T19792] netlink: 830 bytes leftover after parsing attributes in process `syz.0.4779'. [ 1008.508234][T19806] syz.1.4783[19806] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1008.508347][T19806] syz.1.4783[19806] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1008.531696][T19812] netlink: 1 bytes leftover after parsing attributes in process `syz.5.4784'. [ 1010.770265][T19867] syz.4.4800[19867] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1010.773025][T19867] syz.4.4800[19867] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1010.868343][T19872] syzkaller0: tun_chr_ioctl cmd 1074812117 [ 1011.381696][T19876] delete_channel: no stack [ 1011.711847][T19902] €Â0: renamed from pim6reg1 [ 1012.225056][T19912] syz.1.4815[19912] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1012.225248][T19912] syz.1.4815[19912] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1015.055198][T19923] device syzkaller0 entered promiscuous mode [ 1015.728010][T19936] netlink: 'syz.0.4821': attribute type 4 has an invalid length. [ 1015.755235][T19936] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.4821'. [ 1015.833220][T19936] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.4821'. [ 1016.855342][T19955] netlink: 'syz.1.4828': attribute type 8 has an invalid length. [ 1016.871020][T19955] netlink: 'syz.1.4828': attribute type 1 has an invalid length. [ 1016.879031][T19955] netlink: 104088 bytes leftover after parsing attributes in process `syz.1.4828'. [ 1018.225621][T19936] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 1018.238530][T19940] netlink: 'syz.4.4822': attribute type 21 has an invalid length. [ 1018.258016][T19940] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4822'. [ 1018.278921][T19940] netlink: 'syz.4.4822': attribute type 5 has an invalid length. [ 1018.286870][T19940] netlink: 'syz.4.4822': attribute type 6 has an invalid length. [ 1018.300832][T19940] netlink: 3 bytes leftover after parsing attributes in process `syz.4.4822'. [ 1018.886056][T19972] netlink: 'syz.5.4834': attribute type 10 has an invalid length. [ 1018.992514][T19972] bridge0: port 2(bridge_slave_1) entered disabled state [ 1019.000093][T19972] bridge0: port 1(bridge_slave_0) entered disabled state [ 1019.210986][T19972] bridge0: port 2(bridge_slave_1) entered blocking state [ 1019.218423][T19972] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1019.227047][T19972] bridge0: port 1(bridge_slave_0) entered blocking state [ 1019.234280][T19972] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1019.250883][T19972] team0: Port device bridge0 added [ 1019.354786][T19985] netlink: 'syz.0.4837': attribute type 27 has an invalid length. [ 1019.399831][T19985] netlink: 164 bytes leftover after parsing attributes in process `syz.0.4837'. [ 1020.039678][T20003] device wg2 entered promiscuous mode [ 1020.107285][T20006] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4843'. [ 1020.572878][T13095] Bluetooth: hci1: unexpected event 0x0f length: 15 > 4 [ 1020.778393][T20031] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4853'. [ 1020.781281][T20033] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4853'. [ 1020.880931][T20044] netlink: 146340 bytes leftover after parsing attributes in process `syz.5.4856'. [ 1020.900828][T20044] net_ratelimit: 20 callbacks suppressed [ 1020.900847][T20044] openvswitch: netlink: Key type 386 is out of range max 32 [ 1021.249196][T20054] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.4858'. [ 1022.125646][T20066] device syzkaller0 entered promiscuous mode [ 1025.410765][T20074] netlink: 'syz.3.4863': attribute type 1 has an invalid length. [ 1025.425143][T20088] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4868'. [ 1025.440812][T20089] netlink: 13951 bytes leftover after parsing attributes in process `syz.5.4868'. [ 1025.590868][T20096] netlink: 164 bytes leftover after parsing attributes in process `syz.0.4870'. [ 1025.654607][T20096] netlink: 164 bytes leftover after parsing attributes in process `syz.0.4870'. [ 1025.685163][T20096] netlink: 'syz.0.4870': attribute type 21 has an invalid length. [ 1025.771053][ T4281] Bluetooth: hci4: command 0x0406 tx timeout [ 1025.778753][T20104] netlink: 'syz.4.4873': attribute type 21 has an invalid length. [ 1025.838800][T20104] netlink: 'syz.4.4873': attribute type 10 has an invalid length. [ 1025.885247][T20106] netlink: 'syz.5.4874': attribute type 3 has an invalid length. [ 1025.913155][T20104] device netdevsim0 left promiscuous mode [ 1026.300849][T20106] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.4874'. [ 1026.674479][T20104] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1027.436479][T20146] device syzkaller0 entered promiscuous mode [ 1030.148118][T20167] netlink: 16255 bytes leftover after parsing attributes in process `syz.0.4888'. [ 1030.875326][T20197] syz.4.4896[20197] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1030.875448][T20197] syz.4.4896[20197] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1031.254834][T20208] device syzkaller0 entered promiscuous mode [ 1031.355540][T20213] netlink: 202920 bytes leftover after parsing attributes in process `syz.4.4901'. [ 1034.355995][T20213] device syzkaller0 entered promiscuous mode [ 1034.422443][T13094] bond0: (slave syz_tun): Releasing backup interface [ 1034.775283][T14834] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1034.980934][T14834] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1037.088759][T14834] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1037.156498][T14834] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1037.212718][T14834] device 0 left promiscuous mode [ 1037.251594][T14834] device 1 left promiscuous mode [ 1038.137741][T14834] team0: Port device wlan1 removed [ 1038.284202][T14834] device hsr_slave_0 left promiscuous mode [ 1038.290438][T14834] device hsr_slave_1 left promiscuous mode [ 1038.297526][T14834] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1038.305118][T14834] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1038.314744][T14834] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1038.323047][T14834] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1038.330622][T14834] device bridge_slave_1 left promiscuous mode [ 1038.336911][T14834] bridge0: port 2(bridge_slave_1) entered disabled state [ 1038.345975][T14834] device bridge_slave_0 left promiscuous mode [ 1038.352491][T14834] bridge0: port 1(bridge_slave_0) entered disabled state [ 1038.372009][T14834] device veth1_macvtap left promiscuous mode [ 1038.378094][T14834] device veth0_macvtap left promiscuous mode [ 1038.384209][T14834] device veth1_vlan left promiscuous mode [ 1038.391163][T14834] device veth0_vlan left promiscuous mode [ 1038.930460][T14834] team0 (unregistering): Port device team_slave_1 removed [ 1038.978519][T14834] team0 (unregistering): Port device team_slave_0 removed [ 1039.021951][T14834] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1039.069579][T14834] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1039.385054][T14834] bond0 (unregistering): Released all slaves [ 1039.900234][T14834] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1039.978296][T14834] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1040.035530][T14834] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1040.104714][T14834] bond0: (slave netdevsim0): Releasing backup interface [ 1040.113310][T14834] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1040.199678][T14834] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1040.275878][T14834] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1040.316730][T14834] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1040.395362][T14834] bond0: (slave netdevsim0): Releasing backup interface [ 1040.402746][T14834] device netdevsim0 left promiscuous mode [ 1040.410516][T14834] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1040.528869][T14834] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1040.608284][T14834] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1040.646335][T14834] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1040.694945][T14834] bond0: (slave netdevsim0): Releasing backup interface [ 1040.704575][T14834] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1040.803793][T14834] device 0 left promiscuous mode [ 1040.852060][T14834] device .*! left promiscuous mode [ 1041.628344][T14834] bond0: (slave gretap0): Releasing backup interface [ 1042.045509][T14834] bond0: (slave wlan1): Releasing backup interface