last executing test programs: 4.420522517s ago: executing program 1 (id=2727): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000000000875a65059ff57b00000000"], 0xcfa4) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 3.752182743s ago: executing program 3 (id=2732): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb35, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x5da5a3b5) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x400, 0x0, 0x8, 0x0, 0xffffffff}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="b7020000f53f6314bfa300000000000024020000fffeff7f7a03f0fff0ffffff79a4f0ff00000000b7060000ffffffff2e64050000000000750afaff07cd02020404000000247d60b7030000030a00006a0a00fe0000000c8500000054000000b70000000000002995000000000000001da5ad3548ebb63d18c5071c7e821c9b767ac8308fbcd5c5e4a5ad1065b572c2c9ff215ac60c2ceaea4c0ec908abb6e7325ec1956bd8660bf3664148a2c96752fe2bb328dff1a15750ab9a780001000000000000d4bf20c2bd152d814f01f2cd519e078d4ffab418e4682b2aec5e4a35629e8ef040c50287c37a7f4182f32333b08c6e497687e10a4daea5cac0ceafdbb126eb02a1f5104d16ddb64963d84d91814cd5817e0b8f6f5e6ee7a39e180b5a18ed786b782ab1321ea5e82ae5ba2c42a5e23ea6253d5df768d0cb9f35e4f41a6211e52bb3598e9b5d4f22d8c19f958e8b34de35949a7a48ce18799ee53da177a81ea65e652c1d71b7ee86a75b0100000042127a8f84538a9a311c757f7169f006f3f5c95177fbd0b14b36259e2905ef911785c88a16aae46084d676d8ef8aa6ecc2d32e3f4ee367c5a769c0a606636c9f4a4413c098f4fcc96623b7c373b0ef04d55b846b094bf97e2ef5987b6e09a6a7cab79bffda141f65e7d9ebe3be70c436432b70a80cce69df30d3d67d84ccf3f9db9b690111de2ddc4b153c989ef100bbf76063d3f6ffffb73d70e9c3d7b90aecf48e7565efff2dbbb512218c98442406333c890923a797e00b75481739952fe87fde27ce81893f54ec0ea8e792414f639bc9ce1fea3f6ac0d7025759d4b45576c205c70631e8ad585951950e521f4e210b6494e3c52d927195737945cc03d5668483151710de246420a1b6c55b73876a6ed7fd0d9338923789a1edcd8043fe83919088383268324a25df14010c8ed6b8d43400eaa00ff9bc46e1cfecbdc0e451ac53b409d04544d3a7edd4d447d2fb431e226ae182b8dcc86fe09b404e0b7c723d3b19c3dc382fa91fb0fb8f9f3f13296bb1758b24aad0922091d49e2bc408a5a37deee7a60b903d2d9fe9d451cafcc8dc389671c2d08b6e264150a6b9445b00cee4585af04fa69e0380be0d66649dcf3bf8a906b029faca75ce34c41aec7aa86e596119109ea8b3f7c65c902499227c087301643baab1c95bb22cedd913b22dcaa197ccc34586dc50bd9f4628e3e77a0de32e356521df06f995cb57f97052fc4158250ccecfb67ea8faf509593fadc7eafb613327b052397af1ede94d87590ce90a0a7579766f0e5eb09d38ac46e99e7ec4fcd3cb0b1a8c531724d5ef6b334803cedaa9cedf16dc3af6e0b67f62a83a256474c97c925d9d447175b535c87dbdeb0dcca5303eed6689ea91e1665c691df736368dde47e6672e93a314c5f60e7b68c2242bd0f0d8c66449d8687dcf2d0f76668b2b9bf8b32b99b7daf34b2d825d192ade90a1162acfe9749d516d014cef5f99126324ea02baea5808c430985749901b09e4902a6f5addc0103756b894418e4591c624a9b206abbfb888d413d923b0d7c9d997d6d8e64787c4d397f57a15b6e0b4212b6cb55b9c207bbe08f483b1bea05f41b9a1d3af087047c568ae6ebfc0bb5ec10b6290dc757a4903a88fb2c035b2349b6d2f0c051b8b7718384eebd5fc19928cea713ff09e179c308fbe9bd64374d96ef2447a2a4af5ca0c39e7ca2e801e57560a55e9cfa095cf3f74398219ad1030a79517a88de7596429a20793e12616aa32b3e720c6521fbe93963e9536d16f3db211fca7dd99c0a0125ff8ef534b93dcb34e1da2c008a9f2a29e30823bf0ec3639cadaf9be9608358e1e5ab17eea477b1754f78f45468c9568471667f82f5e250b979b9f2bd0d1b6bc03d11811ac6eec9a3ecd9e3c3299ee5eb3c6cac8fbd06514b7ee743ece79c04566d02a08fd5fcabbab3d129c0cced3ce11dafa380700000000000000c114d0b423e64c6157fac5e4e2168f33541daeff9983d0e488a78bef538f870b84798272b2101e0abf1cd64500b79e01e11d727389653bd80a39d5bbe2e23d2f5ff10047423429981bd9b4ce680e174c266391e3e7689452654e5cd5ada6e025327a1942b5a068f15fa58eaa267d4e0881783dddbdd777f8be0824ffdf6d06c621880dbbe9534f15e8c2e364d3ec67deb6ab9f2a0f03212972dbd38500000008173553a67be48633103809eee0be51d67d7ce230b389607b4c3b18da1c48f3180f2e0d79e54565fdd9a099b5b5ba2761905b88b7cbfc39c35dd153609da3da263438f12769602c2195245ff83e249119d4f6cabfbdef84ada19ef4a67ed66d7043036515d0be5a231f99e71aba5d5ae04676eff3e85f0844c41bbcfde7a931d1ec55c01f703bfd1b97756bfe55a91f6b379f34a018906339771157c66dbd7471d1beec7f029ef552cf5e92a1a0db21b59355763967ce26a577bc514b6d22a09c385c5ba6caf524e1688fc0f29f8bb35ae7bc8eb5ba51aebdf7d972c3267cedbe77ed70d9c539bc455a6f88b39196c8a224b0acf4d796fea59a07baa34cc270fb096ef330fbebdf872d7d0bc4f9a963355c554abc5cdb91464faabcd09cd9a53f5d1b2ea7e96f428f7cd6735c19c61dc9942d30bf29ef85ed01c2fcd6060aa40eeff971477b4fde48507b7bad95a496540adff7e4a72fd1f94d7c703ab1525c946c54e0da3d7ebfcc8cea2e84c3b310aaea5a1627df898c00a9aaf2d88a36afa4c5b1816384310600001c33125ad7f7970beeb256aec06e39fc6c66544e1d1dc5fea4b68a82e3568ca30aea9a1d097f06f11dc362f4bae5ef57c67686a15855cd351bf26f40fb1348cfce79897682228e6d9643530c81bab27bf7b1c4a76a5be180bb830cf06827c3f38a9c9c580c732c30aaceda78b0297de35a922b1375b129655beb31899e26052cc216f832fdb0a0015f93c9cff77f59cda1ec5f3e358848756cebb074266a47e39ae26e80e8c65aaf73c24925458520a9ca98760d1005c9f81846459ae6d5baa4f02807939ddc29c3520f7c58ed9bc5a569c7a1bc33cf4f330a18276ffb4550b9166c3939e8041094bec034aa0ec6638b74fe34f0f1ec6903a1135808d5d8d26c9203c3f87e66c407b7c5c0888d4558dd657cc0213efad68e76fdd7b23e68064fd4b271ed79c50abacdd2871b0c1f8c971df59a5a1901ddf804bed43e391f882d2a45c51cdbba86b2a1b7c0c4923642a731ea4dcbad2b6ebbebe787a8e28e781d75beee924b3b1e390750f316648133922c021f98fd2d5d71a7a3679397ef6cf432837b7e264831ec01c4c3146ba0caac3b13d55945ec00e978a1c1712cd51187936200606c9cd6877b2f72125295c54721f8e15df2ae282a8becb99a726fd92acc92141e1f574b4b0b3c992a61af3372d0d9217776b1a42cd2cee816a70bf1ddd69b590d53e28ba356e74b38e23e50d898e95cdc7cc809e462c884b53f672aab1411ecfd4c91e7a9782fc6763f0efd4bcbaf1fc3a00000000000000000000000000000000500000000000000000000000048e510340087caf22439d5304bd704a6a78a512269a9b1cbd13bea78c807bbc73853ae187cbb768673e9d1bf74a3b0a6c234accd8506adf314f4c5e08174540b69d3c0da660052b43b86baf49e7ac64d9c21598b1e01dc1e1b5a53626b090496dbf7af441e397016c3c094d5c91ffe0a7ceacfd225ed9a6c905f79ad7052747dd6cceef4c310e0e935311118bc6bf0e5ca6c7cca7d5c03be570308da8a40578b4db14961fbccf6e2f2d56e9509c434126515b56d032e20c12e830d1bc64826fc9b318da5911e466878dbb81edeff69363fb75af5cd80536f14d2eaa7764db23acdbd394bbbbccfd8b129258bb0a93cee1d44f8665172c06933d20f184b78b435462c52a85149451ffd564c56a7cbf11a1127c77242915e43b2bc"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000001000), 0x2, 0x0) 3.344084105s ago: executing program 3 (id=2735): r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='cpu&\t\t') perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000940)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x14, &(0x7f0000000700)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000980)={r2}, 0xc) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r3 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = socket$kcm(0x29, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x122}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)}, 0x10201) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r12, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r11, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040004000000", @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="0100"], 0x48) 3.049196747s ago: executing program 0 (id=2736): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, 0x0, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={0xffffffffffffffff, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000380)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xae, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74, 0x8, 0x8, &(0x7f00000007c0)}}, 0x10) socket$kcm(0xa, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="9500000000"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0xc}, 0x94) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x2000d084) r2 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x2, 0x6, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000a00)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf200000000000000700000008b000003d0301000000000095000000000000006926000000000000bf6700000000000026060800010400004507000003000000240600000ee60000bf050000000000000f630000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070400000400f9ff2d350100000000009500000000000000050000000000000095000000000000001f1bd182bd43cb58074e0a16289328452c0880fe4b3af9c97925711095cc7d3ebcd8418ffdc4a1da470a14e4391c3fb6915cbff2a4911fe82664d775cdb9dfc83fa32db39b636c1866b526185f4ab35172a74e9afe751664f575306ebb2c2890a4fa79303101a652776cc2fb4f01e79cd10215d917a116350d60f27fdc244bdab56ee3ad8f5fdf82027a1215bc54045d6b9f30bdebcf053aa120397695ffd0f6e5fe24ce4b9143a3d841"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r3, 0x1, 0x2, &(0x7f00000002c0), 0x4) sendmsg$inet(r3, &(0x7f0000000400)={0x0, 0xffffffffffffff79, 0x0}, 0x24000001) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000080)=[{}], 0x1, 0x0, 0x0, 0x6000}, 0x6000800) r4 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000e00)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x33fe0) 2.919632749s ago: executing program 2 (id=2737): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb35, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x5da5a3b5) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) r1 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x400, 0x0, 0x8, 0x0, 0xffffffff}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000001000), 0x2, 0x0) 2.860282959s ago: executing program 1 (id=2738): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x80, 0x7, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x4, @perf_config_ext={0x40, 0xf}, 0x190c, 0x9, 0x6, 0x6, 0xfffffffffdf7bbfe, 0x0, 0xffff, 0x0, 0xfffffffc, 0x0, 0x3}, 0x0, 0x4000000000e, 0xffffffffffffffff, 0xa) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) r0 = syz_clone(0x400c800, &(0x7f00000000c0)="bdcad5", 0x3, &(0x7f0000000100), &(0x7f0000000140), 0x0) syz_open_procfs$namespace(r0, &(0x7f00000003c0)='ns/ipc\x00') perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x7, 0xff, 0x7, 0x1, 0x0, 0x9, 0x20200, 0xe, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x10000, 0x2, @perf_config_ext={0x1, 0x81}, 0x148, 0x5080, 0x1, 0x2, 0x7fffffffffffffff, 0xffffffad, 0xf, 0x0, 0x1, 0x0, 0x9}, r0, 0x4, 0xffffffffffffffff, 0xf87ec7df48272f45) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)) 2.723678483s ago: executing program 1 (id=2739): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb35, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x5da5a3b5) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) r1 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x400, 0x0, 0x8, 0x0, 0xffffffff}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000001000), 0x2, 0x0) 2.710891316s ago: executing program 3 (id=2740): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9b, 0x1, 0x0, 0x0, 0x0, 0x5, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffe, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$kcm(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x26, 0xc, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x382a, 0xffffffffffff0001}, 0x8000, 0x3, 0x43a1bd76, 0x7, 0x9, 0x658, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x606b9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b80, 0x2, @perf_bp={0x0, 0x2}, 0x8204, 0xcdd, 0x43a1bd76, 0x0, 0x9, 0xd00, 0x4, 0x0, 0x0, 0x0, 0x2008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000580)="d800000019008111e0020f060d8107040a60090000020000000455a1bc00090008000699e3ffffff140005000800000006000567b8b7b94002000009080016060000000000000074d67fffff6b26462f25a4d1c2e446b72af3e2943ff7d1d9bbe94fa27100a007a2f7457f01896034277ce06bbace8017cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a237ee4b11602b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad95667e006dcdf634c1f215ce3bb9ad809d50b694138c9f1ac76efb42a9ecbeec6e6ccd4", 0xd8}], 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYBLOB="0200000001"], 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00'}) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3d) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4102, 0x1006}], 0x1}, 0x2002) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)="d800000019008111e00212ba0d8105040a603f00ff0f040b067c55a1bc000900080006990300000015000500fe8081780d001500030001400200000901ac040000d67f6f94007100a007a290457f0189b3", 0x51}], 0x1}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB], 0xfe33) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020032000b05d25a806f8c6394f90824fc602f0000000a740100053582c137153e370248018000f0176a0ebd", 0x2e}], 0x1}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180), 0x10) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000240)={0x2, 0x4001, @initdev={0xac, 0x1e, 0x4, 0x0}}, 0x10, 0x0}, 0x4040090) sendmsg$inet(r0, &(0x7f0000000b00)={0x0, 0xf22fff7f, &(0x7f0000000180)=[{&(0x7f0000000080)="31de76fb398bc62d058b8a96924594f5476a0824be53f7a5949f80614c42391e4b80412938c955d34d37eb96ba7849c3eb823bb36724bd6f6d0219cfe5c884afcd2bdea5acf9c877c03dcdbbb3e47417b6707c27d4c5c1db1924071f6b6f23c7d199c799c9b0c41101e625fcdb7bbfd12a3eeeef4540a5698f058aaf6a141e5d333929b92a7f64e925bf0ef424c3ef29fcd5fd4721c547fde6abe4d47048b64511693624b0d786711abe4a66e250fcbfe95ac9037e58f331b26b6ed0d08e5c73ba4c49", 0xc00e}], 0x9, &(0x7f00000001c0)=ANY=[@ANYBLOB="000026d4f47f000000000000010000000000000000000000140000000000000000000000020000000000000000000000140000000000000000000000020000000000000000110000000000000000000000010000000000000000000000110000000000000002000000010000000000000000000000000000000000000000000000070000008300000000960000206a77bdd1a004129054e7704a000000"], 0xf}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703100000001f0300000000ff00040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40000) 2.619904061s ago: executing program 0 (id=2741): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000bffffff00000000000000008500000041000000850000000800000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x2c, 0x3, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x100e64, 0xc74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0xd040, 0x10000}, 0x14403, 0xfffc, 0x0, 0x5, 0x582, 0x20005, 0x8, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0)=ANY=[@ANYBLOB="14"], 0x18, 0x4000000}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0xff, 0x0, 0xffffffffffffffff, 0x9010, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={0x0, 0xf50a43945a8ef38c}, 0xce6b9b20411c70f4, 0x800000000000ca, 0x0, 0x9, 0xffffffbffffffffc, 0x0, 0x0, 0x0, 0xf, 0x0, 0x3}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x104101, 0x4, 0x0, 0x1, 0x9, 0x10000000, 0x1}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x3) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20488, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x111d09, 0x4, 0x10000, 0x1, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1) recvmsg$unix(r2, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[@ANYRES8=r3, @ANYBLOB="3eca", @ANYRES32=r4], 0x9a) setsockopt$sock_attach_bpf(r1, 0x1, 0x10, &(0x7f0000001280), 0x4) setsockopt$sock_attach_bpf(r1, 0x1, 0x22, &(0x7f0000000080), 0x4) recvmsg(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/32, 0x20}, 0x40010000) socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0xffffffffffffffff}, 0x8, 0x0, 0x0, 0x0, 0x6, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x400200000000003e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xeb, 0x9, 0x1, 0x0, 0x0, 0x0, 0x8404, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffd}, 0x0, 0xfffffffffffffffc, 0xffffffff, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x7, 0xc, &(0x7f00000003c0)=ANY=[@ANYRES16=r6, @ANYBLOB="0000000000000000b708000000000000a50a000000000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000080)='./cgroup/cgroup.procs\x00') perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x10}, 0x3b35, 0x0, 0xfffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000002280)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1100"/12, @ANYRES32=0x0], 0x20) 1.927800773s ago: executing program 2 (id=2742): socket$kcm(0x2, 0x3, 0x2) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1ff, 0x200}, 0x800, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000010000000000000060018200000", @ANYBLOB='\x00\x00\x00\x00'], 0x0, 0x4, 0xdf, &(0x7f0000001400)=""/223}, 0x94) r1 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) perf_event_open$cgroup(&(0x7f0000000140)={0x0, 0x80, 0x3, 0x1, 0x7, 0x1, 0x0, 0xffffffffffffffc0, 0x20101, 0xb, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000000), 0x8}, 0x200010, 0x7fff, 0x3, 0x6, 0x3, 0x5, 0xecb3, 0x0, 0xf5f8, 0x0, 0x9}, r1, 0xe, r0, 0x6) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, 0x0, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x90ff}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x90ffffff, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b87033c0000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00", 0x59}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 1.728130588s ago: executing program 3 (id=2743): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0xa, 0x1, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x6}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000"], 0x0, 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000001c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f00000000c0)=ANY=[@ANYBLOB="180800002d000000000000008700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000008b5090000fcffffff7baaf0ff00000000bf9700000000000007080000fffdffffbfa400000000000007040000f0ffffff740200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000007d0000000000000056080000000000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.709971461s ago: executing program 1 (id=2744): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}}) recvmsg(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/60, 0x3c}], 0x1}, 0x40fd) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x6}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000"], 0x0, 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000001c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f00000000c0)=ANY=[@ANYBLOB="180800002d000000000000008700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000000000b7020000000000037b9af8ff00000000b5090000fcffffff7baaf0ff00000000bf9700000000000007080000fffdffffbfa400000000000007040000f0ffffff740200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000007d0000000000000056080000000000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.674210597s ago: executing program 2 (id=2745): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000220000000400000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000200), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r1, &(0x7f0000000040)}, 0x20) r2 = socket$kcm(0x15, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, 0xfffffffffffffffd) r3 = syz_clone(0x10100, &(0x7f0000000240)="bb65dbceb774e9352512e3eba759055c0d0860e02d724f2e32240f4276d1a4230eea7f5eb0a5ec8efc63a9e246becc", 0x2f, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)="c71988cb4d805919eccb55ad2cb22ca3e9ae33e50d7f6f50a90688b7b383") syz_open_procfs$namespace(r3, &(0x7f0000000200)='ns/net\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000140)=ANY=[@ANYBLOB="18080000d0ff00000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="000000000000000066080000000000001800000000000000000000000e000000950000000000000036ba020000001800180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b53b29000000000085000000060000119500000000000000e7a626e2a96214094c4edebb6d4caf8d4c7ed8e5abae701ccfec9050f57579c22d29095ed05be7"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x28}, 0x94) 1.493847069s ago: executing program 3 (id=2746): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000000000875a65059ff57b00000000"], 0xcfa4) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.485172551s ago: executing program 1 (id=2747): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x4, 0x2, 0x0, 0x80, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa"], 0xcfa4) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f00000002c0), 0x161) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) socket$kcm(0x11, 0xa, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.475306402s ago: executing program 2 (id=2748): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb35, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x5da5a3b5) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x400, 0x0, 0x8, 0x0, 0xffffffff}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000001000), 0x2, 0x0) 1.417823152s ago: executing program 0 (id=2749): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0xa, 0x1, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="18080000000000000000000000000000180000000000000000"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x6}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000001c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f00000000c0)=ANY=[@ANYBLOB="180800002d000000000000008700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000000000b7020000000700007b9af8ff00000000b5090000fcffffff7baaf0ff00000000bf9700000000000007080000fffdffffbfa400000000000007040000f0ffffff740200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000007d0000000000000056080000000000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.281756156s ago: executing program 2 (id=2750): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb35, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x5da5a3b5) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x400, 0x0, 0x8, 0x0, 0xffffffff}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000001000), 0x2, 0x0) 1.153522198s ago: executing program 0 (id=2751): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000ec0)="d80000001d0081044e81f782db44b904021d080560000000040000a1180002000000000000000e1208000f0100810401a8001600260001400300000803600cfab94dcf5c0461c16f94007134cf6ee08000a0e408e8d8ef075c11503c6baace801bcb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd6bc09000000000000002483916ddf50b8b351f55551715b52facb", 0x9b}, {&(0x7f00000006c0)="54f6d4d87eb3f1c0c5", 0x9}, {&(0x7f0000000080)="027a64c0072ebbb1512b328dda11b4efd4ba07fc642b6eb91dacc63c30ada51eb3958755533ccce04d3e635cbe848495e723490d", 0x34}], 0x3, 0x0, 0x0, 0x7400}, 0xd0) (async, rerun: 32) r1 = socket$kcm(0x10, 0x3, 0x10) (async, rerun: 32) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) r3 = socket$kcm(0x2, 0x200000000000003, 0x106) setsockopt$sock_attach_bpf(r3, 0x0, 0x5, 0x0, 0x0) (async) close(r2) recvmsg$kcm(r1, &(0x7f0000000680)={&(0x7f00000001c0)=@nl, 0x80, &(0x7f0000000600)=[{&(0x7f0000000240)=""/223, 0xdf}, {&(0x7f0000000340)=""/191, 0xbf}, {&(0x7f0000000800)=""/46, 0x2e}, {&(0x7f0000000440)=""/9, 0x9}, {&(0x7f0000000480)=""/175, 0xaf}, {&(0x7f0000000540)=""/169, 0xa9}], 0x6}, 0x40) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNGETVNETLE(r2, 0x40107446, 0x0) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) (async, rerun: 64) r4 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000400)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r4, &(0x7f0000000840), 0x2, 0x0) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0xfffffffe, 0x5, 0xb}, {0x2000000, 0x5, 0xffffffff, 0x2}, {0x2000, 0x2, 0x1100a}], 0x10, 0xfffffffd}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f90324fc60100005000a000200053582c137153e37000c0680050002000300", 0x33fe0}], 0x1}, 0x0) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYRESOCT=r7], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000000)={{r8, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%ps \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0x18, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff8500000071000000b7080000000000007b8af8ff00000000b7080000540000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000780)={{r8}, &(0x7f0000000700), &(0x7f0000000740)='%-010d \x00'}, 0x20) 150.122404ms ago: executing program 3 (id=2752): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb35, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x5da5a3b5) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) r1 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x400, 0x0, 0x8, 0x0, 0xffffffff}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000001000), 0x2, 0x0) 146.502765ms ago: executing program 1 (id=2760): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000000000875a65059ff57b00000000"], 0xcfa4) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 145.741925ms ago: executing program 2 (id=2753): socket$kcm(0x10, 0x2, 0x0) r0 = perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000000ff000000000000000000008500000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000852000007100000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) 94.016703ms ago: executing program 0 (id=2754): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000071003300000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x74000000, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 0s ago: executing program 0 (id=2755): r0 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000580)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f000000040000000800000008"], 0x48) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x81021, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = getpid() perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x3, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x4000, 0x0, 0x40000, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$kcm(0x1e, 0x4, 0x0) r5 = socket$kcm(0x10, 0x3, 0x10) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x6, 0x8, 0x8, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000680), 0xce, r7}, 0x38) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r8) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x1a}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b63d25a80648c2594f91624fc60100c214002000003050582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000f00000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): ][ T6542] ? __lock_acquire+0x7d80/0x7d80 [ 102.953163][ T6542] should_fail_ex+0x394/0x4c0 [ 102.957844][ T6546] netlink: 40 bytes leftover after parsing attributes in process `syz.3.254'. [ 102.966802][ T6542] should_failslab+0x9/0x20 [ 102.971333][ T6542] slab_pre_alloc_hook+0x59/0x300 [ 102.976385][ T6542] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 102.982574][ T6542] kmem_cache_alloc_node+0x5e/0x310 [ 102.987801][ T6542] ? __alloc_skb+0x103/0x2c0 [ 102.992398][ T6542] __alloc_skb+0x103/0x2c0 [ 102.996814][ T6542] netlink_ack+0x377/0x1160 [ 103.001318][ T6542] ? __dev_queue_xmit+0x272/0x37e0 [ 103.006439][ T6542] ? netlink_dump+0xec0/0xec0 [ 103.011141][ T6542] ? perf_trace_lock+0xfc/0x3b0 [ 103.015995][ T6542] netlink_rcv_skb+0x2b3/0x4c0 [ 103.020766][ T6542] ? rtnetlink_bind+0x80/0x80 [ 103.025446][ T6542] ? netlink_ack+0x1160/0x1160 [ 103.030229][ T6542] ? __lock_acquire+0x7d80/0x7d80 [ 103.035266][ T6542] ? netlink_deliver_tap+0x2e/0x1b0 [ 103.040467][ T6542] netlink_unicast+0x7b1/0x930 [ 103.045262][ T6542] netlink_sendmsg+0x8d0/0xbf0 [ 103.050040][ T6542] ? netlink_getsockopt+0x590/0x590 [ 103.055237][ T6542] ? apparmor_socket_sendmsg+0x8e/0x330 [ 103.060785][ T6542] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 103.066070][ T6542] ? security_socket_sendmsg+0x80/0xa0 [ 103.071557][ T6542] ? netlink_getsockopt+0x590/0x590 [ 103.076765][ T6542] ____sys_sendmsg+0x61b/0x980 [ 103.081557][ T6542] ? __asan_memset+0x22/0x40 [ 103.086149][ T6542] ? __sys_sendmsg_sock+0x30/0x30 [ 103.091172][ T6542] ? __import_iovec+0x5f2/0x850 [ 103.096030][ T6542] ? import_iovec+0x73/0xa0 [ 103.100536][ T6542] ___sys_sendmsg+0x2a6/0x360 [ 103.105221][ T6542] ? __sys_sendmsg+0x2b0/0x2b0 [ 103.109988][ T6542] ? irqentry_enter+0x37/0x50 [ 103.114692][ T6542] __se_sys_sendmsg+0x1d0/0x2c0 [ 103.119544][ T6542] ? perf_trace_preemptirq_template+0x269/0x330 [ 103.125794][ T6542] ? __x64_sys_sendmsg+0x80/0x80 [ 103.130761][ T6542] ? lockdep_hardirqs_on+0x98/0x150 [ 103.135961][ T6542] do_syscall_64+0x55/0xb0 [ 103.140381][ T6542] ? clear_bhb_loop+0x40/0x90 [ 103.145056][ T6542] ? clear_bhb_loop+0x40/0x90 [ 103.149734][ T6542] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 103.155636][ T6542] RIP: 0033:0x7fcfb259e159 [ 103.160052][ T6542] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.179655][ T6542] RSP: 002b:00007fcfb34cb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 103.188069][ T6542] RAX: ffffffffffffffda RBX: 00007fcfb2825fa0 RCX: 00007fcfb259e159 [ 103.196039][ T6542] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 000000000000000a [ 103.204011][ T6542] RBP: 00007fcfb34cb090 R08: 0000000000000000 R09: 0000000000000000 [ 103.211999][ T6542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 103.219964][ T6542] R13: 00007fcfb2826038 R14: 00007fcfb2825fa0 R15: 00007ffd4fd3ca98 [ 103.227987][ T6542] [ 103.494307][ T6558] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 103.502014][ T6558] IPv6: NLM_F_CREATE should be set when creating new route [ 103.509888][ T6558] IPv6: NLM_F_CREATE should be set when creating new route [ 103.517640][ T6558] IPv6: NLM_F_CREATE should be set when creating new route [ 103.570702][ T6558] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.260'. [ 103.922070][ T6563] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.260'. [ 104.046170][ T6569] delete_channel: no stack [ 104.239623][ T6576] syzkaller0: entered promiscuous mode [ 104.277551][ T6576] syzkaller0: entered allmulticast mode [ 104.720200][ T6590] netlink: 149864 bytes leftover after parsing attributes in process `syz.3.273'. [ 105.685359][ T6597] validate_nla: 5 callbacks suppressed [ 105.685375][ T6597] netlink: 'syz.0.275': attribute type 39 has an invalid length. [ 105.737372][ T6599] delete_channel: no stack [ 105.835821][ T6605] netlink: 'syz.2.277': attribute type 12 has an invalid length. [ 105.844984][ T6605] netlink: 132 bytes leftover after parsing attributes in process `syz.2.277'. [ 105.918205][ T6606] netlink: 'syz.1.279': attribute type 10 has an invalid length. [ 105.926385][ T6606] netlink: 40 bytes leftover after parsing attributes in process `syz.1.279'. [ 106.270041][ T6617] netlink: 'syz.1.284': attribute type 10 has an invalid length. [ 106.307551][ T6617] netlink: 40 bytes leftover after parsing attributes in process `syz.1.284'. [ 106.548749][ T6629] netlink: 'syz.0.288': attribute type 39 has an invalid length. [ 106.695419][ T6632] netlink: 'syz.3.290': attribute type 9 has an invalid length. [ 106.708687][ T6632] netlink: 149864 bytes leftover after parsing attributes in process `syz.3.290'. [ 106.834380][ T6637] netlink: 'syz.0.293': attribute type 10 has an invalid length. [ 106.857219][ T6637] netlink: 40 bytes leftover after parsing attributes in process `syz.0.293'. [ 107.008000][ T6646] netlink: 'syz.2.296': attribute type 10 has an invalid length. [ 107.716647][ T6660] netlink: 'syz.0.300': attribute type 10 has an invalid length. [ 107.724521][ T6660] netlink: 40 bytes leftover after parsing attributes in process `syz.0.300'. [ 107.738138][ T6665] netlink: 'syz.1.302': attribute type 39 has an invalid length. [ 107.824905][ T6646] syz.2.296 (6646) used greatest stack depth: 19864 bytes left [ 108.202395][ T6678] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.309'. [ 108.273781][ T6678] netlink: 164 bytes leftover after parsing attributes in process `syz.1.309'. [ 109.728182][ T6690] syz.3.313 (6690) used greatest stack depth: 19688 bytes left [ 109.754654][ T6712] netlink: 40 bytes leftover after parsing attributes in process `syz.2.318'. [ 110.385611][ T6743] netlink: 40 bytes leftover after parsing attributes in process `syz.1.330'. [ 111.130718][ T6756] validate_nla: 7 callbacks suppressed [ 111.130767][ T6756] netlink: 'syz.2.336': attribute type 10 has an invalid length. [ 111.152510][ T6756] netlink: 40 bytes leftover after parsing attributes in process `syz.2.336'. [ 111.392963][ T6765] netlink: 'syz.1.340': attribute type 39 has an invalid length. [ 111.456408][ T6767] netlink: 'syz.0.341': attribute type 9 has an invalid length. [ 111.478818][ T6767] netlink: 149864 bytes leftover after parsing attributes in process `syz.0.341'. [ 112.528859][ T6797] netlink: 'syz.3.351': attribute type 39 has an invalid length. [ 112.919769][ T6803] netlink: 'syz.0.354': attribute type 10 has an invalid length. [ 112.933665][ T6803] netlink: 40 bytes leftover after parsing attributes in process `syz.0.354'. [ 113.436607][ T6822] netlink: 'syz.3.361': attribute type 39 has an invalid length. [ 113.566410][ T6830] netlink: 'syz.1.365': attribute type 10 has an invalid length. [ 113.590806][ T6830] bridge0: port 3(team0) entered disabled state [ 113.598561][ T6830] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.607464][ T6830] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.030270][ T6844] netlink: 'syz.0.370': attribute type 16 has an invalid length. [ 114.049308][ T6844] netlink: 152 bytes leftover after parsing attributes in process `syz.0.370'. [ 114.568062][ T6852] netlink: 'syz.3.374': attribute type 33 has an invalid length. [ 114.579659][ T6852] netlink: 152 bytes leftover after parsing attributes in process `syz.3.374'. [ 114.757035][ T6859] netlink: 'syz.2.376': attribute type 10 has an invalid length. [ 114.770571][ T6859] netlink: 40 bytes leftover after parsing attributes in process `syz.2.376'. [ 115.169505][ T6878] netlink: 149864 bytes leftover after parsing attributes in process `syz.2.384'. [ 115.651897][ T6895] netlink: 40 bytes leftover after parsing attributes in process `syz.2.392'. [ 115.939202][ T6909] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 115.952196][ T6909] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 115.973967][ T6909] raw_sendmsg: syz.2.396 forgot to set AF_INET. Fix it! [ 116.103477][ T6911] netlink: 149864 bytes leftover after parsing attributes in process `syz.3.398'. [ 116.260684][ T6914] validate_nla: 5 callbacks suppressed [ 116.260756][ T6914] netlink: 'syz.2.399': attribute type 10 has an invalid length. [ 116.295698][ T6914] netlink: 40 bytes leftover after parsing attributes in process `syz.2.399'. [ 116.419684][ T6921] netlink: 'syz.3.402': attribute type 39 has an invalid length. [ 116.664319][ T6928] netlink: 14 bytes leftover after parsing attributes in process `syz.0.405'. [ 116.697931][ T6928] ipvlan0: entered promiscuous mode [ 116.887680][ T6939] netlink: 'syz.2.407': attribute type 10 has an invalid length. [ 116.927700][ T6939] netlink: 40 bytes leftover after parsing attributes in process `syz.2.407'. [ 117.486381][ T6954] netlink: 'syz.0.412': attribute type 9 has an invalid length. [ 117.510965][ T6954] netlink: 149864 bytes leftover after parsing attributes in process `syz.0.412'. [ 120.069051][ T6964] delete_channel: no stack [ 120.121462][ T6968] netlink: 'syz.2.416': attribute type 10 has an invalid length. [ 120.130563][ T6968] netlink: 40 bytes leftover after parsing attributes in process `syz.2.416'. [ 120.444486][ T6981] netlink: 'syz.3.423': attribute type 10 has an invalid length. [ 120.467491][ T6981] netlink: 40 bytes leftover after parsing attributes in process `syz.3.423'. [ 120.575158][ T6988] netlink: 'syz.2.426': attribute type 9 has an invalid length. [ 120.583324][ T6988] netlink: 149864 bytes leftover after parsing attributes in process `syz.2.426'. [ 120.864480][ T6991] netlink: 180 bytes leftover after parsing attributes in process `syz.3.427'. [ 121.061562][ T7006] netlink: 'syz.2.432': attribute type 10 has an invalid length. [ 121.069617][ T7006] netlink: 40 bytes leftover after parsing attributes in process `syz.2.432'. [ 121.178973][ T7008] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 121.259477][ T7008] netlink: 'syz.2.433': attribute type 1 has an invalid length. [ 121.274924][ T7008] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.433'. [ 121.627584][ T7022] netlink: 212912 bytes leftover after parsing attributes in process `syz.3.439'. [ 121.638405][ T7022] openvswitch: netlink: IP tunnel dst address not specified [ 122.615544][ T7047] netlink: 'syz.1.449': attribute type 10 has an invalid length. [ 122.632612][ T7047] netlink: 40 bytes leftover after parsing attributes in process `syz.1.449'. [ 122.750187][ T5782] Bluetooth: hci0: unexpected event 0x04 length: 15 > 10 [ 122.875273][ T7054] netlink: 'syz.1.452': attribute type 13 has an invalid length. [ 122.930058][ T7054] netlink: 24859 bytes leftover after parsing attributes in process `syz.1.452'. [ 123.336538][ T7068] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.682049][ T7076] netlink: 212912 bytes leftover after parsing attributes in process `syz.0.459'. [ 123.696093][ T7076] openvswitch: netlink: IP tunnel dst address not specified [ 124.501502][ T7103] netlink: 'syz.0.472': attribute type 10 has an invalid length. [ 124.527473][ T7103] netlink: 40 bytes leftover after parsing attributes in process `syz.0.472'. [ 124.817493][ T5782] Bluetooth: hci0: command tx timeout [ 125.097944][ T5782] Bluetooth: hci2: unexpected subevent 0x03 length: 150 > 9 [ 125.247258][ T7121] netlink: 'syz.3.481': attribute type 10 has an invalid length. [ 125.255653][ T7121] netlink: 40 bytes leftover after parsing attributes in process `syz.3.481'. [ 125.312780][ T7126] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.483'. [ 126.467773][ T7163] netlink: 'syz.1.498': attribute type 3 has an invalid length. [ 126.486234][ T7163] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.498'. [ 126.572996][ T7166] netlink: 'syz.1.498': attribute type 10 has an invalid length. [ 126.599329][ T7166] netlink: 40 bytes leftover after parsing attributes in process `syz.1.498'. [ 126.624521][ T7171] netlink: 'syz.0.500': attribute type 39 has an invalid length. [ 127.092609][ T7181] netlink: 'syz.1.503': attribute type 9 has an invalid length. [ 127.132411][ T7181] netlink: 149864 bytes leftover after parsing attributes in process `syz.1.503'. [ 127.638520][ T7199] netlink: 60 bytes leftover after parsing attributes in process `syz.0.508'. [ 127.661848][ T7199] netlink: 60 bytes leftover after parsing attributes in process `syz.0.508'. [ 127.682086][ T7200] netlink: 'syz.1.510': attribute type 39 has an invalid length. [ 127.702070][ T7195] netlink: 60 bytes leftover after parsing attributes in process `syz.0.508'. [ 128.771224][ T7230] netlink: 'syz.0.520': attribute type 39 has an invalid length. [ 128.951139][ T7238] delete_channel: no stack [ 129.017159][ T7241] netlink: 'syz.0.525': attribute type 10 has an invalid length. [ 129.036927][ T7241] netlink: 40 bytes leftover after parsing attributes in process `syz.0.525'. [ 129.272322][ T7249] netlink: 'syz.2.529': attribute type 9 has an invalid length. [ 129.297629][ T7249] netlink: 149864 bytes leftover after parsing attributes in process `syz.2.529'. [ 129.391698][ T7258] netlink: 'syz.1.533': attribute type 39 has an invalid length. [ 129.612692][ T7266] delete_channel: no stack [ 130.001262][ T7288] netlink: 'syz.2.544': attribute type 12 has an invalid length. [ 130.011056][ T7288] netlink: 14585 bytes leftover after parsing attributes in process `syz.2.544'. [ 130.093308][ T7290] netlink: 'syz.2.544': attribute type 9 has an invalid length. [ 130.154540][ T7290] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.544'. [ 130.305017][ T7293] netlink: 'syz.1.545': attribute type 39 has an invalid length. [ 130.322562][ T7295] netlink: 'syz.3.546': attribute type 10 has an invalid length. [ 130.331899][ T7295] netlink: 40 bytes leftover after parsing attributes in process `syz.3.546'. [ 130.547709][ T7306] delete_channel: no stack [ 130.562020][ T7303] netlink: 'syz.2.548': attribute type 9 has an invalid length. [ 130.574903][ T7303] netlink: 149864 bytes leftover after parsing attributes in process `syz.2.548'. [ 131.775571][ T7342] delete_channel: no stack [ 132.029332][ T7350] netlink: 40 bytes leftover after parsing attributes in process `syz.0.563'. [ 132.335757][ T7368] delete_channel: no stack [ 132.380326][ T7373] D: renamed from bond0 (while UP) [ 132.998649][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.005010][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.036578][ T7396] delete_channel: no stack [ 133.139349][ T7401] validate_nla: 2 callbacks suppressed [ 133.139384][ T7401] netlink: 'syz.3.583': attribute type 10 has an invalid length. [ 133.158017][ T7401] __nla_validate_parse: 1 callbacks suppressed [ 133.158048][ T7401] netlink: 40 bytes leftover after parsing attributes in process `syz.3.583'. [ 133.267090][ T7406] netlink: 'syz.2.585': attribute type 39 has an invalid length. [ 133.289580][ T7403] : port 1(gretap0) entered blocking state [ 133.296055][ T7403] : port 1(gretap0) entered disabled state [ 133.303748][ T7403] gretap0: entered allmulticast mode [ 133.320144][ T7403] gretap0: entered promiscuous mode [ 133.348913][ T7403] netlink: 212940 bytes leftover after parsing attributes in process `syz.1.584'. [ 133.585845][ T7423] delete_channel: no stack [ 133.695812][ T7431] netlink: 152 bytes leftover after parsing attributes in process `syz.1.591'. [ 133.738680][ T7431] D: renamed from bond0 (while UP) [ 133.751240][ T7430] netlink: 'syz.3.594': attribute type 9 has an invalid length. [ 133.762756][ T7430] netlink: 149864 bytes leftover after parsing attributes in process `syz.3.594'. [ 133.860183][ T7435] netlink: 'syz.3.596': attribute type 39 has an invalid length. [ 134.471354][ T7450] netlink: 'syz.2.601': attribute type 29 has an invalid length. [ 134.480213][ T7450] netlink: 'syz.2.601': attribute type 29 has an invalid length. [ 134.531714][ T7451] delete_channel: no stack [ 134.535187][ T7450] netlink: 'syz.2.601': attribute type 29 has an invalid length. [ 134.547171][ T7450] netlink: 'syz.2.601': attribute type 29 has an invalid length. [ 134.751147][ T7458] netlink: 'syz.0.605': attribute type 39 has an invalid length. [ 134.929790][ T7460] netlink: 'syz.2.606': attribute type 10 has an invalid length. [ 134.953189][ T7460] netlink: 40 bytes leftover after parsing attributes in process `syz.2.606'. [ 135.172535][ T7480] netlink: 152 bytes leftover after parsing attributes in process `syz.3.609'. [ 135.182864][ T7473] delete_channel: no stack [ 135.191839][ T7481] netlink: 149864 bytes leftover after parsing attributes in process `syz.2.611'. [ 135.211768][ T7480] D: renamed from bond0 (while UP) [ 135.567225][ T7497] netlink: 149864 bytes leftover after parsing attributes in process `syz.1.618'. [ 135.804400][ T7511] delete_channel: no stack [ 136.444637][ T7529] netlink: 149864 bytes leftover after parsing attributes in process `syz.1.630'. [ 136.531291][ T7532] ÿ: renamed from bond_slave_0 (while UP) [ 136.793445][ T7540] delete_channel: no stack [ 137.262603][ T7569] delete_channel: no stack [ 137.685940][ T7593] C: renamed from team_slave_0 (while UP) [ 137.688550][ T7590] delete_channel: no stack [ 137.698345][ T7593] netlink: 152 bytes leftover after parsing attributes in process `syz.2.655'. [ 137.714279][ T7593] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 138.196494][ T7610] netlink: 128 bytes leftover after parsing attributes in process `syz.2.664'. [ 138.236914][ T7610] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 138.266577][ T7613] delete_channel: no stack [ 138.387655][ T7621] validate_nla: 14 callbacks suppressed [ 138.387702][ T7621] netlink: 'syz.0.668': attribute type 10 has an invalid length. [ 138.412425][ T7621] netlink: 40 bytes leftover after parsing attributes in process `syz.0.668'. [ 138.741987][ T7641] netlink: 'syz.2.674': attribute type 3 has an invalid length. [ 138.775741][ T7641] netlink: 'syz.2.674': attribute type 1 has an invalid length. [ 138.832377][ T7641] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.674'. [ 139.575095][ T7664] delete_channel: no stack [ 139.694329][ T7674] netlink: 'syz.2.681': attribute type 2 has an invalid length. [ 139.707567][ T7674] netlink: 'syz.2.681': attribute type 8 has an invalid length. [ 139.715256][ T7674] netlink: 132 bytes leftover after parsing attributes in process `syz.2.681'. [ 139.935586][ T7680] netlink: 'syz.0.683': attribute type 10 has an invalid length. [ 139.946346][ T7680] hsr0: entered promiscuous mode [ 139.966244][ T7680] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 140.040168][ T7680] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 140.043917][ T7685] netlink: 'syz.3.685': attribute type 9 has an invalid length. [ 140.080031][ T7685] netlink: 149864 bytes leftover after parsing attributes in process `syz.3.685'. [ 140.090386][ T7680] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 140.090413][ T7680] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 140.115049][ T7687] netlink: 'syz.2.684': attribute type 39 has an invalid length. [ 140.338553][ T7696] delete_channel: no stack [ 140.729881][ T7714] netlink: 'syz.0.693': attribute type 10 has an invalid length. [ 140.738951][ T7714] netlink: 40 bytes leftover after parsing attributes in process `syz.0.693'. [ 140.869782][ T7718] netlink: 'syz.0.695': attribute type 39 has an invalid length. [ 140.935078][ T7722] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.697'. [ 140.945958][ T7723] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.697'. [ 140.991042][ T7726] delete_channel: no stack [ 141.180457][ T7737] netlink: 132 bytes leftover after parsing attributes in process `syz.1.703'. [ 141.378539][ T7731] syzkaller0: entered promiscuous mode [ 141.384391][ T7731] syzkaller0: entered allmulticast mode [ 142.727073][ T7754] delete_channel: no stack [ 143.338812][ T7774] netlink: 149864 bytes leftover after parsing attributes in process `syz.1.715'. [ 143.654430][ T7784] validate_nla: 4 callbacks suppressed [ 143.654472][ T7784] netlink: 'syz.2.719': attribute type 39 has an invalid length. [ 143.686705][ T7787] netlink: 'syz.0.721': attribute type 39 has an invalid length. [ 143.816781][ T7792] delete_channel: no stack [ 143.849780][ T7796] netlink: 'syz.0.724': attribute type 10 has an invalid length. [ 143.858296][ T7796] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.724'. [ 144.466722][ T7808] netlink: 'syz.2.729': attribute type 10 has an invalid length. [ 144.493756][ T7808] macvlan0: entered promiscuous mode [ 144.558907][ T7808] D: (slave macvlan0): Enslaving as an active interface with an up link [ 144.577774][ T7812] netlink: 'syz.3.731': attribute type 39 has an invalid length. [ 144.710830][ T7817] delete_channel: no stack [ 144.711879][ T7821] netlink: 'syz.0.733': attribute type 10 has an invalid length. [ 144.771435][ T7821] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.832268][ T7821] bridge_slave_1: left allmulticast mode [ 144.843099][ T7821] bridge_slave_1: left promiscuous mode [ 144.851653][ T7821] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.872227][ T7821] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 145.078614][ T7830] netlink: 'syz.3.738': attribute type 9 has an invalid length. [ 145.097473][ T7830] netlink: 149864 bytes leftover after parsing attributes in process `syz.3.738'. [ 145.357078][ T7848] netlink: 'syz.0.744': attribute type 39 has an invalid length. [ 145.428789][ T7851] delete_channel: no stack [ 145.687604][ T7863] netlink: 'syz.2.752': attribute type 13 has an invalid length. [ 145.707848][ T7863] netlink: 172 bytes leftover after parsing attributes in process `syz.2.752'. [ 145.748178][ T7863] erspan0: refused to change device tx_queue_len [ 145.877891][ T7866] netlink: 'syz.1.753': attribute type 10 has an invalid length. [ 145.878070][ T7870] netlink: 132 bytes leftover after parsing attributes in process `syz.3.755'. [ 145.893115][ T7866] netlink: 40 bytes leftover after parsing attributes in process `syz.1.753'. [ 146.161926][ T7878] netlink: 149864 bytes leftover after parsing attributes in process `syz.3.758'. [ 146.198549][ T7881] delete_channel: no stack [ 146.388324][ T7898] netlink: 13435 bytes leftover after parsing attributes in process `syz.0.764'. [ 146.671855][ T7913] bridge0: entered promiscuous mode [ 146.677130][ T7913] bridge0: entered allmulticast mode [ 146.916181][ T7927] delete_channel: no stack [ 147.138435][ T7932] netlink: 149864 bytes leftover after parsing attributes in process `syz.3.774'. [ 147.903974][ T7958] delete_channel: no stack [ 147.916915][ T7957] netlink: 40 bytes leftover after parsing attributes in process `syz.3.783'. [ 148.530974][ T7984] delete_channel: no stack [ 148.768782][ T7994] validate_nla: 9 callbacks suppressed [ 148.768816][ T7994] netlink: 'syz.0.797': attribute type 10 has an invalid length. [ 148.817434][ T7994] __nla_validate_parse: 1 callbacks suppressed [ 148.819111][ T7994] netlink: 40 bytes leftover after parsing attributes in process `syz.0.797'. [ 149.192229][ T8006] netlink: 'syz.1.802': attribute type 9 has an invalid length. [ 149.209994][ T8006] netlink: 149864 bytes leftover after parsing attributes in process `syz.1.802'. [ 149.435436][ T8017] delete_channel: no stack [ 149.662068][ T8027] netlink: 'syz.2.809': attribute type 10 has an invalid length. [ 149.681670][ T8027] netlink: 40 bytes leftover after parsing attributes in process `syz.2.809'. [ 149.775157][ T8029] netlink: 'syz.1.810': attribute type 39 has an invalid length. [ 150.041584][ T8036] FAULT_INJECTION: forcing a failure. [ 150.041584][ T8036] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 150.097184][ T8036] CPU: 1 PID: 8036 Comm: syz.1.812 Not tainted syzkaller #0 [ 150.104537][ T8036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 150.114623][ T8036] Call Trace: [ 150.117924][ T8036] [ 150.120896][ T8036] dump_stack_lvl+0x18c/0x250 [ 150.125662][ T8036] ? show_regs_print_info+0x20/0x20 [ 150.130910][ T8036] ? load_image+0x420/0x420 [ 150.135453][ T8036] ? __might_fault+0xaa/0x120 [ 150.140160][ T8036] ? __lock_acquire+0x7d80/0x7d80 [ 150.145219][ T8036] should_fail_ex+0x394/0x4c0 [ 150.149938][ T8036] _copy_from_user+0x2f/0xe0 [ 150.154563][ T8036] ___sys_sendmsg+0x1c7/0x360 [ 150.159278][ T8036] ? __sys_sendmsg+0x2b0/0x2b0 [ 150.164099][ T8036] ? __lock_acquire+0x7d80/0x7d80 [ 150.169178][ T8036] __se_sys_sendmsg+0x1d0/0x2c0 [ 150.174054][ T8036] ? __x64_sys_sendmsg+0x80/0x80 [ 150.179037][ T8036] ? lockdep_hardirqs_on+0x98/0x150 [ 150.184270][ T8036] do_syscall_64+0x55/0xb0 [ 150.188717][ T8036] ? clear_bhb_loop+0x40/0x90 [ 150.193419][ T8036] ? clear_bhb_loop+0x40/0x90 [ 150.198130][ T8036] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 150.204049][ T8036] RIP: 0033:0x7f31d699e159 [ 150.208502][ T8036] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 150.228172][ T8036] RSP: 002b:00007f31d785c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 150.236636][ T8036] RAX: ffffffffffffffda RBX: 00007f31d6c26090 RCX: 00007f31d699e159 [ 150.244635][ T8036] RDX: 0000000000088010 RSI: 0000200000000340 RDI: 0000000000000015 [ 150.252638][ T8036] RBP: 00007f31d785c090 R08: 0000000000000000 R09: 0000000000000000 [ 150.260654][ T8036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 150.268656][ T8036] R13: 00007f31d6c26128 R14: 00007f31d6c26090 R15: 00007fffa0e7b128 [ 150.276675][ T8036] [ 150.583998][ T8042] delete_channel: no stack [ 150.719855][ T8045] netlink: 'syz.3.817': attribute type 9 has an invalid length. [ 150.747484][ T8045] netlink: 149864 bytes leftover after parsing attributes in process `syz.3.817'. [ 150.922673][ T8053] netlink: 'syz.1.820': attribute type 39 has an invalid length. [ 151.224240][ T8064] netlink: 'syz.0.826': attribute type 10 has an invalid length. [ 151.256533][ T8064] netlink: 40 bytes leftover after parsing attributes in process `syz.0.826'. [ 151.547539][ T8073] delete_channel: no stack [ 152.021367][ T8084] netlink: 64991 bytes leftover after parsing attributes in process `syz.0.832'. [ 152.386285][ T8090] netlink: 'syz.1.834': attribute type 39 has an invalid length. [ 152.396978][ T8086] netlink: 'syz.2.833': attribute type 9 has an invalid length. [ 152.411447][ T8086] netlink: 149864 bytes leftover after parsing attributes in process `syz.2.833'. [ 152.598365][ T8097] bridge0: port 4(ip6gretap0) entered blocking state [ 152.605204][ T8097] bridge0: port 4(ip6gretap0) entered disabled state [ 152.624498][ T8097] ip6gretap0: entered allmulticast mode [ 152.632131][ T8097] ip6gretap0: entered promiscuous mode [ 152.881876][ T8107] delete_channel: no stack [ 154.345418][ T8115] netlink: 'syz.2.845': attribute type 39 has an invalid length. [ 154.896318][ T8140] delete_channel: no stack [ 154.991744][ T8143] netlink: 'syz.1.857': attribute type 39 has an invalid length. [ 156.427614][ T8176] delete_channel: no stack [ 156.465503][ T8180] netlink: 64991 bytes leftover after parsing attributes in process `syz.1.867'. [ 156.692280][ T8182] netlink: 'syz.3.870': attribute type 39 has an invalid length. [ 156.952067][ T8198] netlink: 176 bytes leftover after parsing attributes in process `syz.3.875'. [ 157.027906][ T8194] netlink: 'syz.1.874': attribute type 10 has an invalid length. [ 157.048121][ T8194] netlink: 40 bytes leftover after parsing attributes in process `syz.1.874'. [ 157.168557][ T8208] netlink: 'syz.0.878': attribute type 9 has an invalid length. [ 157.176495][ T8208] netlink: 149864 bytes leftover after parsing attributes in process `syz.0.878'. [ 157.426651][ T8213] sit0: entered allmulticast mode [ 157.533346][ T8217] sit0: entered promiscuous mode [ 157.606724][ T8226] netlink: 'syz.2.884': attribute type 39 has an invalid length. [ 157.964138][ T8241] netlink: 106804 bytes leftover after parsing attributes in process `syz.3.888'. [ 158.025231][ T8241] netlink: 16255 bytes leftover after parsing attributes in process `syz.3.888'. [ 158.356401][ T8254] netlink: 'syz.0.893': attribute type 10 has an invalid length. [ 158.364484][ T8254] netlink: 40 bytes leftover after parsing attributes in process `syz.0.893'. [ 158.479911][ T8258] netlink: 'syz.3.895': attribute type 39 has an invalid length. [ 158.500946][ T8259] delete_channel: no stack [ 159.113151][ T8285] netlink: 'syz.0.907': attribute type 39 has an invalid length. [ 159.171807][ T8286] delete_channel: no stack [ 161.498102][ T8325] netlink: 'syz.3.920': attribute type 39 has an invalid length. [ 161.694614][ T8330] delete_channel: no stack [ 162.103531][ T8342] netlink: 132 bytes leftover after parsing attributes in process `syz.2.926'. [ 162.415511][ T8354] netlink: 'syz.0.930': attribute type 39 has an invalid length. [ 164.334181][ T8369] delete_channel: no stack [ 164.503374][ T8378] netlink: 'syz.3.939': attribute type 39 has an invalid length. [ 164.648683][ T8381] netlink: 'syz.2.942': attribute type 10 has an invalid length. [ 164.656726][ T8381] netlink: 40 bytes leftover after parsing attributes in process `syz.2.942'. [ 164.703214][ T8377] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.940'. [ 164.800888][ T8385] team0: left allmulticast mode [ 164.817789][ T8385] team_slave_0: left allmulticast mode [ 164.823314][ T8385] team_slave_1: left allmulticast mode [ 164.829051][ T8385] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 164.836262][ T8385] team0: left promiscuous mode [ 164.841207][ T8385] team_slave_0: left promiscuous mode [ 164.847515][ T8385] team_slave_1: left promiscuous mode [ 164.855626][ T8385] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 164.863368][ T8385] bridge0: port 3(team0) entered disabled state [ 167.488545][ T8385] bridge_slave_1: left allmulticast mode [ 167.533244][ T8385] bridge_slave_1: left promiscuous mode [ 167.545144][ T8385] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.574875][ T8385] bridge_slave_0: left allmulticast mode [ 167.582253][ T8385] bridge_slave_0: left promiscuous mode [ 167.593073][ T8385] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.651505][ T8385] D: (slave bridge0): Releasing backup interface [ 168.045951][ T8414] netlink: 'syz.3.951': attribute type 39 has an invalid length. [ 168.126424][ T8410] delete_channel: no stack [ 168.352791][ T8427] netlink: 60 bytes leftover after parsing attributes in process `syz.1.954'. [ 168.474469][ T8427] netlink: 60 bytes leftover after parsing attributes in process `syz.1.954'. [ 168.511271][ T8421] netlink: 60 bytes leftover after parsing attributes in process `syz.1.954'. [ 168.579434][ T8422] netlink: 60 bytes leftover after parsing attributes in process `syz.1.954'. [ 168.726982][ T8438] ªªªªªª: renamed from vlan0 (while UP) [ 168.955928][ T8445] netlink: 'syz.2.963': attribute type 39 has an invalid length. [ 170.998540][ T8470] delete_channel: no stack [ 171.100260][ T8481] netlink: 'syz.3.974': attribute type 39 has an invalid length. [ 171.522902][ T8493] netlink: 'syz.1.977': attribute type 10 has an invalid length. [ 171.552928][ T8493] netlink: 40 bytes leftover after parsing attributes in process `syz.1.977'. [ 171.738054][ T8505] netlink: 60 bytes leftover after parsing attributes in process `syz.2.978'. [ 171.797563][ T8505] netlink: 60 bytes leftover after parsing attributes in process `syz.2.978'. [ 171.815978][ T8495] netlink: 60 bytes leftover after parsing attributes in process `syz.2.978'. [ 171.865633][ T8499] netlink: 60 bytes leftover after parsing attributes in process `syz.2.978'. [ 173.622963][ T8544] netlink: 'syz.1.992': attribute type 39 has an invalid length. [ 174.444042][ T8562] netlink: 212912 bytes leftover after parsing attributes in process `syz.1.1000'. [ 175.289485][ T8576] netlink: 'syz.3.1003': attribute type 10 has an invalid length. [ 175.336912][ T8576] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1003'. [ 175.355810][ T8576] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 175.426647][ T8580] netlink: 'syz.1.1005': attribute type 39 has an invalid length. [ 176.216478][ T8608] netlink: 'syz.1.1019': attribute type 10 has an invalid length. [ 176.236636][ T8608] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1019'. [ 176.438404][ T8622] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1020'. [ 176.500985][ T8622] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1020'. [ 176.539956][ T8622] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1020'. [ 179.165487][ T8695] netlink: 'syz.2.1050': attribute type 10 has an invalid length. [ 179.180977][ T8695] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1050'. [ 180.107966][ C0] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 180.874750][ T8737] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1066'. [ 180.921870][ T8737] netlink: 'syz.2.1066': attribute type 10 has an invalid length. [ 180.936062][ T8737] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1066'. [ 181.653613][ T8739] netlink: 'syz.2.1067': attribute type 10 has an invalid length. [ 182.294784][ T8790] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1079'. [ 182.352515][ T8790] netlink: 'syz.0.1079': attribute type 10 has an invalid length. [ 182.361306][ T8790] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1079'. [ 183.515632][ T8845] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 183.860227][ T8861] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1097'. [ 183.910407][ T8861] netlink: 'syz.1.1097': attribute type 10 has an invalid length. [ 183.937161][ T8861] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1097'. [ 184.113247][ T8867] netlink: 'syz.2.1099': attribute type 39 has an invalid length. [ 184.794872][ T8881] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1106'. [ 185.167423][ T8893] netlink: 'syz.0.1110': attribute type 39 has an invalid length. [ 185.982116][ T8918] netlink: 'syz.3.1119': attribute type 39 has an invalid length. [ 186.273347][ T8923] netlink: 'syz.3.1122': attribute type 10 has an invalid length. [ 186.286081][ T8923] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1122'. [ 186.301545][ T8923] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 186.810265][ T8938] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 186.817708][ T8938] IPv6: NLM_F_CREATE should be set when creating new route [ 186.825339][ T8938] IPv6: NLM_F_CREATE should be set when creating new route [ 186.832860][ T8938] IPv6: NLM_F_CREATE should be set when creating new route [ 186.872015][ T8942] netlink: 'syz.1.1130': attribute type 39 has an invalid length. [ 188.578511][ T8981] netlink: 'syz.1.1140': attribute type 39 has an invalid length. [ 188.744407][ T8987] netlink: 'syz.3.1145': attribute type 10 has an invalid length. [ 188.787460][ T8987] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1145'. [ 188.814168][ T8987] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 189.066835][ T8992] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 190.612636][ T9017] netlink: 'syz.3.1154': attribute type 39 has an invalid length. [ 191.040506][ T9028] syzkaller0: entered promiscuous mode [ 191.055705][ T9028] syzkaller0: entered allmulticast mode [ 191.519953][ T9045] netlink: 'syz.1.1166': attribute type 39 has an invalid length. [ 191.626691][ T9048] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1167'. [ 191.681677][ T9048] netlink: 'syz.3.1167': attribute type 10 has an invalid length. [ 191.709559][ T9048] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1167'. [ 191.745601][ T9048] dummy0: entered promiscuous mode [ 191.757904][ T9048] dummy0: entered allmulticast mode [ 191.775445][ T9048] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 191.800866][ T5783] Bluetooth: hci3: command 0x0406 tx timeout [ 191.806987][ T5786] Bluetooth: hci0: command 0x0406 tx timeout [ 191.807004][ T5087] Bluetooth: hci1: command 0x0406 tx timeout [ 191.813062][ T5782] Bluetooth: hci2: command 0x0406 tx timeout [ 191.861693][ T9054] netlink: 16358 bytes leftover after parsing attributes in process `syz.2.1170'. [ 192.200277][ T9069] delete_channel: no stack [ 192.244826][ T9074] netlink: 'syz.3.1178': attribute type 39 has an invalid length. [ 192.366919][ T9078] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1179'. [ 192.452145][ T9078] openvswitch: netlink: Tunnel attr 13064 out of range max 16 [ 192.458492][ T9083] netlink: 142516 bytes leftover after parsing attributes in process `syz.1.1180'. [ 192.577894][ T9087] netlink: 184 bytes leftover after parsing attributes in process `syz.0.1183'. [ 193.357730][ T9102] delete_channel: no stack [ 193.429466][ T9105] netlink: 'syz.3.1191': attribute type 39 has an invalid length. [ 193.523883][ T9111] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1195'. [ 194.441092][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.452094][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.017744][ T9133] delete_channel: no stack [ 195.193138][ T9136] netlink: 'syz.3.1204': attribute type 39 has an invalid length. [ 195.619767][ T9155] delete_channel: no stack [ 195.689671][ T9160] netlink: 'syz.0.1216': attribute type 39 has an invalid length. [ 195.728585][ T9158] netlink: 'syz.3.1215': attribute type 10 has an invalid length. [ 195.736632][ T9158] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1215'. [ 195.754409][ T9158] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 195.837886][ T9162] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.1217'. [ 196.208076][ T9178] delete_channel: no stack [ 196.265995][ T9183] netlink: 'syz.1.1227': attribute type 39 has an invalid length. [ 196.392867][ T9187] netlink: 'syz.3.1229': attribute type 10 has an invalid length. [ 196.406011][ T9187] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1229'. [ 196.422290][ T9187] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 196.444365][ T9191] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 196.467895][ T9191] netlink: 'syz.2.1231': attribute type 9 has an invalid length. [ 196.652580][ T9193] netlink: 'syz.2.1231': attribute type 9 has an invalid length. [ 196.677168][ T9193] __nla_validate_parse: 1 callbacks suppressed [ 196.677186][ T9193] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1231'. [ 196.863848][ T9198] netlink: 'syz.3.1233': attribute type 9 has an invalid length. [ 196.876762][ T9198] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1233'. [ 197.113501][ T9204] syzkaller0: entered promiscuous mode [ 197.121686][ T9204] syzkaller0: entered allmulticast mode [ 197.144419][ T9205] delete_channel: no stack [ 197.223599][ T9208] netlink: 'syz.0.1238': attribute type 39 has an invalid length. [ 197.475510][ T51] Bluetooth: hci1: unexpected event 0x01 length: 151 > 1 [ 197.538127][ T9221] netlink: 'syz.1.1244': attribute type 2 has an invalid length. [ 197.813620][ T9237] delete_channel: no stack [ 198.091953][ T9250] IPv6: NLM_F_CREATE should be specified when creating new route [ 198.128524][ T9250] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1252'. [ 198.406863][ T9259] netlink: 'syz.1.1259': attribute type 10 has an invalid length. [ 198.424252][ T9259] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1259'. [ 198.699571][ T9269] delete_channel: no stack [ 199.333290][ T9298] delete_channel: no stack [ 199.343884][ T9297] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1276'. [ 199.880004][ T9325] delete_channel: no stack [ 200.018559][ T9331] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1290'. [ 200.055516][ T9331] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 200.455979][ T9343] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1295'. [ 200.484074][ T9343] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1295'. [ 200.749230][ T9351] delete_channel: no stack [ 201.208109][ T9373] validate_nla: 10 callbacks suppressed [ 201.208141][ T9373] netlink: 'syz.0.1307': attribute type 39 has an invalid length. [ 201.250607][ T9375] netlink: 'syz.1.1309': attribute type 10 has an invalid length. [ 201.273688][ T9375] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1309'. [ 201.426910][ T9380] delete_channel: no stack [ 202.043138][ T9399] netlink: 'syz.3.1321': attribute type 39 has an invalid length. [ 202.275697][ T9411] delete_channel: no stack [ 202.493320][ T9420] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.1328'. [ 202.839375][ T9434] netlink: 'syz.1.1333': attribute type 39 has an invalid length. [ 203.009918][ T9438] netlink: 'syz.3.1335': attribute type 10 has an invalid length. [ 203.019938][ T9438] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1335'. [ 203.054612][ T9438] syz.3.1335[9438] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 203.055733][ T9438] syz.3.1335[9438] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 203.216679][ T9444] delete_channel: no stack [ 203.291097][ T9453] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1342'. [ 203.672838][ T9458] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1340'. [ 203.693776][ T9467] netlink: 'syz.3.1345': attribute type 39 has an invalid length. [ 203.822775][ T9470] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 203.852237][ T9470] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1346'. [ 204.095472][ T9482] delete_channel: no stack [ 204.404925][ T9496] netlink: 'syz.1.1356': attribute type 39 has an invalid length. [ 204.458624][ T9494] netlink: 'syz.2.1357': attribute type 10 has an invalid length. [ 204.466787][ T9494] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1357'. [ 206.387400][ T9526] delete_channel: no stack [ 207.927195][ T9561] netlink: 'syz.3.1367': attribute type 39 has an invalid length. [ 208.152357][ T9576] netlink: 'syz.0.1371': attribute type 10 has an invalid length. [ 208.174336][ T9576] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1371'. [ 208.414783][ T9584] netlink: 56863 bytes leftover after parsing attributes in process `syz.3.1374'. [ 208.563133][ T9587] delete_channel: no stack [ 209.166910][ T9590] netlink: 'syz.0.1377': attribute type 39 has an invalid length. [ 209.371910][ T9603] FAULT_INJECTION: forcing a failure. [ 209.371910][ T9603] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 209.392594][ T9603] CPU: 1 PID: 9603 Comm: syz.1.1382 Not tainted syzkaller #0 [ 209.400082][ T9603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 209.410214][ T9603] Call Trace: [ 209.413522][ T9603] [ 209.416482][ T9603] dump_stack_lvl+0x18c/0x250 [ 209.421205][ T9603] ? show_regs_print_info+0x20/0x20 [ 209.426442][ T9603] ? load_image+0x420/0x420 [ 209.430985][ T9603] ? __lock_acquire+0x7d80/0x7d80 [ 209.436047][ T9603] ? snprintf+0xe9/0x140 [ 209.440337][ T9603] should_fail_ex+0x394/0x4c0 [ 209.445059][ T9603] _copy_to_user+0x2f/0xa0 [ 209.449513][ T9603] simple_read_from_buffer+0xe7/0x150 [ 209.454932][ T9603] proc_fail_nth_read+0x1e8/0x260 [ 209.460001][ T9603] ? proc_fault_inject_write+0x360/0x360 [ 209.465682][ T9603] ? fsnotify_perm+0x271/0x5e0 [ 209.470501][ T9603] ? proc_fault_inject_write+0x360/0x360 [ 209.476173][ T9603] vfs_read+0x298/0x990 [ 209.480380][ T9603] ? kernel_read+0x1e0/0x1e0 [ 209.485004][ T9603] ? __fget_files+0x28/0x460 [ 209.489634][ T9603] ? __fget_files+0x3fc/0x460 [ 209.494361][ T9603] ? __fdget_pos+0x2a3/0x330 [ 209.498982][ T9603] ? ksys_read+0x74/0x260 [ 209.503387][ T9603] ksys_read+0x151/0x260 [ 209.507670][ T9603] ? vfs_write+0x9a0/0x9a0 [ 209.512128][ T9603] ? lockdep_hardirqs_on+0x98/0x150 [ 209.517368][ T9603] do_syscall_64+0x55/0xb0 [ 209.521820][ T9603] ? clear_bhb_loop+0x40/0x90 [ 209.526544][ T9603] ? clear_bhb_loop+0x40/0x90 [ 209.531261][ T9603] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 209.537184][ T9603] RIP: 0033:0x7f31d695e98e [ 209.541628][ T9603] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 209.561272][ T9603] RSP: 002b:00007f31d787cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 209.569729][ T9603] RAX: ffffffffffffffda RBX: 00007f31d787d6c0 RCX: 00007f31d695e98e [ 209.577740][ T9603] RDX: 000000000000000f RSI: 00007f31d787d0a0 RDI: 0000000000000006 [ 209.585741][ T9603] RBP: 00007f31d787d090 R08: 0000000000000000 R09: 0000000000000000 [ 209.593739][ T9603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 209.601740][ T9603] R13: 00007f31d6c26038 R14: 00007f31d6c25fa0 R15: 00007fffa0e7b128 [ 209.609781][ T9603] [ 209.865648][ T9608] netlink: 'syz.1.1383': attribute type 10 has an invalid length. [ 209.909913][ T9608] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1383'. [ 209.949254][ T9611] netlink: 'syz.0.1385': attribute type 21 has an invalid length. [ 210.163335][ T9619] netlink: 'syz.1.1389': attribute type 39 has an invalid length. [ 210.209594][ T9621] syz.0.1390 (9621) used obsolete PPPIOCDETACH ioctl [ 210.481984][ T9632] netlink: 'syz.3.1395': attribute type 10 has an invalid length. [ 210.535596][ T9632] D: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 210.719461][ T9640] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1398'. [ 210.746690][ T9640] D: (slave bond_slave_0): Releasing backup interface [ 210.779120][ T9640] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 210.815589][ T9647] netlink: 'syz.3.1401': attribute type 39 has an invalid length. [ 210.832482][ T9642] netlink: 'syz.0.1399': attribute type 10 has an invalid length. [ 210.843853][ T9642] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1399'. [ 211.586411][ T9667] netlink: 763 bytes leftover after parsing attributes in process `syz.2.1409'. [ 211.636030][ T9667] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1409'. [ 211.907847][ T9672] netlink: 'syz.1.1411': attribute type 39 has an invalid length. [ 212.473580][ T9699] delete_channel: no stack [ 212.647110][ T9710] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1425'. [ 212.666433][ T9710] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 213.156033][ T9735] validate_nla: 6 callbacks suppressed [ 213.156056][ T9735] netlink: 'syz.3.1433': attribute type 39 has an invalid length. [ 213.280174][ T9736] delete_channel: no stack [ 213.848284][ T9752] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1441'. [ 213.925306][ T9752] netlink: 'syz.2.1441': attribute type 2 has an invalid length. [ 213.938210][ T9752] netlink: 'syz.2.1441': attribute type 1 has an invalid length. [ 213.946244][ T9752] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.1441'. [ 213.974280][ T9757] netlink: 'syz.1.1443': attribute type 39 has an invalid length. [ 214.081489][ T9760] delete_channel: no stack [ 215.186458][ T9785] delete_channel: no stack [ 215.192178][ T9789] netlink: 'syz.3.1459': attribute type 10 has an invalid length. [ 215.216982][ T9789] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1459'. [ 215.254882][ T9789] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 215.540173][ T9802] netlink: 'syz.3.1463': attribute type 29 has an invalid length. [ 215.554091][ T9802] netlink: 'syz.3.1463': attribute type 29 has an invalid length. [ 215.579441][ T9802] netlink: 'syz.3.1463': attribute type 29 has an invalid length. [ 215.613984][ T9802] netlink: 'syz.3.1463': attribute type 29 has an invalid length. [ 215.962084][ T9770] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1449'. [ 215.982743][ T9770] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 216.124489][ T9770] syz.0.1449 (9770) used greatest stack depth: 19432 bytes left [ 216.318351][ T9810] syzkaller0: entered promiscuous mode [ 216.337231][ T9810] syzkaller0: entered allmulticast mode [ 217.379674][ T9820] delete_channel: no stack [ 218.415391][ T9824] netlink: 'syz.2.1470': attribute type 39 has an invalid length. [ 218.701538][ T9852] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1476'. [ 219.159017][ T9865] netlink: 'syz.2.1480': attribute type 39 has an invalid length. [ 219.517882][ T9870] delete_channel: no stack [ 219.818541][ T9875] netlink: 'syz.0.1483': attribute type 10 has an invalid length. [ 220.316313][ T9875] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.377848][ T9875] bond0: entered promiscuous mode [ 220.431711][ T9875] bond_slave_0: entered promiscuous mode [ 220.473831][ T9875] bond_slave_1: entered promiscuous mode [ 220.497826][ T9875] bridge_slave_1: entered promiscuous mode [ 220.549173][ T9875] bond0: entered allmulticast mode [ 220.554363][ T9875] bond_slave_0: entered allmulticast mode [ 220.641527][ T9875] bond_slave_1: entered allmulticast mode [ 220.699004][ T9875] bridge_slave_1: entered allmulticast mode [ 220.806351][ T9875] team0: Port device bond0 added [ 222.443878][ T9868] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1481'. [ 222.515353][ T9890] netlink: 135856 bytes leftover after parsing attributes in process `syz.1.1489'. [ 222.515715][ T9868] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 222.550996][ T9890] netlink: 8442 bytes leftover after parsing attributes in process `syz.1.1489'. [ 222.765284][ T9901] delete_channel: no stack [ 222.854066][ T9904] netlink: 'syz.0.1494': attribute type 10 has an invalid length. [ 222.875269][ T9904] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1494'. [ 223.154456][ T9918] netlink: 'syz.1.1496': attribute type 39 has an invalid length. [ 224.419662][ T9937] netlink: 'syz.1.1502': attribute type 10 has an invalid length. [ 224.588182][ T9937] syz_tun: entered promiscuous mode [ 224.703507][ T9937] D: (slave syz_tun): Enslaving as an active interface with an up link [ 224.766693][ T9937] netlink: 'syz.1.1502': attribute type 10 has an invalid length. [ 224.835686][ T9937] team0: Device D is already an upper device of the team interface [ 224.872204][ T9945] delete_channel: no stack [ 225.109718][ T9954] netlink: 'syz.0.1507': attribute type 39 has an invalid length. [ 225.191465][ T9929] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1501'. [ 225.223653][ T9929] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 225.563004][ T9959] netlink: 'syz.3.1509': attribute type 10 has an invalid length. [ 225.656089][ T9959] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1509'. [ 225.701656][ T9959] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 225.818884][ T9966] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1510'. [ 226.235073][ T9974] delete_channel: no stack [ 226.354250][ T9978] netlink: 'syz.0.1516': attribute type 39 has an invalid length. [ 226.915791][ T9985] sit0: entered allmulticast mode [ 227.019703][ T9991] sit0: entered promiscuous mode [ 227.025520][ T9999] netlink: 'syz.1.1524': attribute type 3 has an invalid length. [ 227.039242][ T9999] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1524'. [ 227.919467][T10006] delete_channel: no stack [ 228.279822][T10014] netlink: 'syz.3.1529': attribute type 39 has an invalid length. [ 228.645020][T10030] netlink: 'syz.0.1535': attribute type 10 has an invalid length. [ 228.666327][T10030] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1535'. [ 229.007854][T10040] delete_channel: no stack [ 229.190980][T10045] netlink: 'syz.3.1542': attribute type 39 has an invalid length. [ 229.583899][T10059] netlink: 'syz.1.1549': attribute type 10 has an invalid length. [ 229.607456][T10059] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1549'. [ 229.739373][T10062] syzkaller0: entered promiscuous mode [ 229.753780][T10062] syzkaller0: entered allmulticast mode [ 230.039302][T10068] delete_channel: no stack [ 230.415817][T10081] netlink: 'syz.3.1557': attribute type 39 has an invalid length. [ 231.397701][T10104] delete_channel: no stack [ 231.644620][T10111] netlink: 'syz.3.1568': attribute type 39 has an invalid length. [ 232.513541][T10122] netlink: 'syz.1.1571': attribute type 33 has an invalid length. [ 232.537506][T10122] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1571'. [ 232.956719][T10130] delete_channel: no stack [ 233.347036][T10139] bridge_slave_1 (unregistering): left allmulticast mode [ 233.363276][T10139] bridge_slave_1 (unregistering): left promiscuous mode [ 233.380024][T10139] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.951403][T10150] netlink: 'syz.2.1584': attribute type 39 has an invalid length. [ 234.188480][T10159] delete_channel: no stack [ 234.208476][T10162] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1587'. [ 234.252004][T10162] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1587'. [ 234.262658][T10167] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1587'. [ 235.289154][T10169] delete_channel: no stack [ 236.425768][T10188] netlink: 'syz.3.1595': attribute type 10 has an invalid length. [ 236.440285][T10188] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1595'. [ 236.466924][T10188] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 237.270681][T10225] netlink: 'syz.2.1613': attribute type 10 has an invalid length. [ 237.284201][T10225] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1613'. [ 237.801918][T10249] netlink: 'syz.3.1624': attribute type 39 has an invalid length. [ 238.132173][T10256] bond0: (slave bridge_slave_1): Releasing backup interface [ 238.201420][T10256] bridge_slave_1 (unregistering): left promiscuous mode [ 238.237437][T10256] bridge_slave_1 (unregistering): left allmulticast mode [ 238.459534][T10279] FAULT_INJECTION: forcing a failure. [ 238.459534][T10279] name failslab, interval 1, probability 0, space 0, times 0 [ 238.490700][T10269] delete_channel: no stack [ 238.492903][T10279] CPU: 0 PID: 10279 Comm: syz.1.1634 Not tainted syzkaller #0 [ 238.502644][T10279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 238.512727][T10279] Call Trace: [ 238.516025][T10279] [ 238.518973][T10279] dump_stack_lvl+0x18c/0x250 [ 238.523686][T10279] ? show_regs_print_info+0x20/0x20 [ 238.528917][T10279] ? load_image+0x420/0x420 [ 238.533467][T10279] ? __might_sleep+0xe0/0xe0 [ 238.538092][T10279] ? __lock_acquire+0x7d80/0x7d80 [ 238.543154][T10279] should_fail_ex+0x394/0x4c0 [ 238.547894][T10279] should_failslab+0x9/0x20 [ 238.552427][T10279] slab_pre_alloc_hook+0x59/0x300 [ 238.557549][T10279] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 238.563280][T10279] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 238.568993][T10279] __kmem_cache_alloc_node+0x53/0x250 [ 238.574369][T10279] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 238.580083][T10279] __kmalloc+0xa7/0x240 [ 238.584240][T10279] tomoyo_realpath_from_path+0xe6/0x5c0 [ 238.589804][T10279] ? tomoyo_domain+0xd6/0x120 [ 238.594494][T10279] tomoyo_path_number_perm+0x248/0x5e0 [ 238.599987][T10279] ? tomoyo_path_number_perm+0x217/0x5e0 [ 238.605639][T10279] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 238.611099][T10279] ? trace_call_bpf+0xc3/0x6c0 [ 238.615851][T10279] ? trace_call_bpf+0xc3/0x6c0 [ 238.620602][T10279] ? trace_call_bpf+0x5e9/0x6c0 [ 238.625457][T10279] ? __fget_files+0x28/0x460 [ 238.630050][T10279] security_file_ioctl+0x70/0xa0 [ 238.634993][T10279] __se_sys_ioctl+0x48/0x170 [ 238.639581][T10279] do_syscall_64+0x55/0xb0 [ 238.644007][T10279] ? clear_bhb_loop+0x40/0x90 [ 238.648727][T10279] ? clear_bhb_loop+0x40/0x90 [ 238.653438][T10279] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 238.659366][T10279] RIP: 0033:0x7f31d699e159 [ 238.663810][T10279] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 238.683431][T10279] RSP: 002b:00007f31d783b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 238.691839][T10279] RAX: ffffffffffffffda RBX: 00007f31d6c26180 RCX: 00007f31d699e159 [ 238.699811][T10279] RDX: 0000200000000a00 RSI: 0000000080044943 RDI: 0000000000000007 [ 238.707801][T10279] RBP: 00007f31d783b090 R08: 0000000000000000 R09: 0000000000000000 [ 238.715779][T10279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 238.723743][T10279] R13: 00007f31d6c26218 R14: 00007f31d6c26180 R15: 00007fffa0e7b128 [ 238.731722][T10279] [ 238.765946][T10279] ERROR: Out of memory at tomoyo_realpath_from_path. [ 238.782324][T10273] delete_channel: no stack [ 239.032551][T10286] delete_channel: no stack [ 239.040829][T10290] netlink: 'syz.0.1637': attribute type 39 has an invalid length. [ 239.400379][T10304] netlink: 'syz.0.1644': attribute type 2 has an invalid length. [ 239.417350][T10304] netlink: 'syz.0.1644': attribute type 1 has an invalid length. [ 239.425138][T10304] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.1644'. [ 243.144354][T10329] delete_channel: no stack [ 243.656090][T10358] netlink: 'syz.1.1663': attribute type 2 has an invalid length. [ 243.700765][T10358] netlink: 'syz.1.1663': attribute type 1 has an invalid length. [ 243.721341][T10358] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.1663'. [ 243.754223][T10357] netlink: 'syz.1.1663': attribute type 2 has an invalid length. [ 243.831083][T10357] netlink: 'syz.1.1663': attribute type 1 has an invalid length. [ 243.849084][T10357] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.1663'. [ 245.205358][T10381] netlink: 192 bytes leftover after parsing attributes in process `syz.1.1669'. [ 245.241587][T10381] netlink: 192 bytes leftover after parsing attributes in process `syz.1.1669'. [ 245.328062][T10368] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.623921][T10389] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1673'. [ 246.728419][T10426] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1687'. [ 246.829625][T10431] syzkaller0: entered promiscuous mode [ 246.835148][T10431] syzkaller0: entered allmulticast mode [ 247.020553][T10435] delete_channel: no stack [ 247.064689][T10438] syzkaller0: entered promiscuous mode [ 247.073674][T10438] syzkaller0: entered allmulticast mode [ 250.435112][T10468] netlink: 'syz.0.1702': attribute type 5 has an invalid length. [ 250.443277][T10468] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1702'. [ 250.452850][T10467] netlink: 'syz.0.1702': attribute type 5 has an invalid length. [ 250.460661][T10467] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1702'. [ 250.475029][T10480] netlink: 'syz.2.1708': attribute type 21 has an invalid length. [ 250.495399][T10480] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1708'. [ 250.512629][T10483] netlink: 'syz.1.1707': attribute type 10 has an invalid length. [ 250.535585][T10483] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1707'. [ 250.574067][T10487] netlink: 'syz.0.1709': attribute type 39 has an invalid length. [ 251.099678][T10514] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1716'. [ 251.193209][T10514] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1716'. [ 251.203043][T10509] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1716'. [ 251.212573][T10511] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1716'. [ 251.227702][T10507] delete_channel: no stack [ 251.298656][T10520] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.1717'. [ 251.330281][T10520] netlink: 16126 bytes leftover after parsing attributes in process `syz.3.1717'. [ 251.671174][T10531] netlink: 'syz.0.1720': attribute type 10 has an invalid length. [ 251.797147][T10533] netlink: 'syz.3.1722': attribute type 10 has an invalid length. [ 251.819640][T10533] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 252.122748][T10543] netlink: 'syz.3.1727': attribute type 8 has an invalid length. [ 252.715087][T10561] netlink: 'syz.1.1735': attribute type 12 has an invalid length. [ 252.910677][T10563] netlink: 'syz.1.1736': attribute type 21 has an invalid length. [ 254.410126][T10591] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 255.669292][T10623] __nla_validate_parse: 7 callbacks suppressed [ 255.669333][T10623] netlink: 14568 bytes leftover after parsing attributes in process `syz.1.1754'. [ 255.865253][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.871881][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.948024][T10631] validate_nla: 2 callbacks suppressed [ 255.948058][T10631] netlink: 'syz.0.1760': attribute type 39 has an invalid length. [ 256.180338][T10637] netlink: 'syz.2.1762': attribute type 21 has an invalid length. [ 256.239679][T10637] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1762'. [ 256.266751][T10639] netlink: 'syz.1.1763': attribute type 10 has an invalid length. [ 256.285360][T10639] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1763'. [ 256.593208][T10652] netlink: 'syz.2.1768': attribute type 3 has an invalid length. [ 256.614917][T10652] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1768'. [ 256.671680][T10658] netlink: 3076 bytes leftover after parsing attributes in process `syz.1.1771'. [ 256.698345][T10658] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1771'. [ 256.719265][T10655] delete_channel: no stack [ 257.043743][T10666] netlink: 'syz.2.1773': attribute type 39 has an invalid length. [ 257.274414][T10677] netlink: 'syz.1.1777': attribute type 10 has an invalid length. [ 257.289034][T10677] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1777'. [ 258.025121][T10701] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.1789'. [ 259.366270][T10710] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1788'. [ 259.644095][T10731] delete_channel: no stack [ 262.875301][T10772] delete_channel: no stack [ 264.401540][T10810] netlink: 'syz.1.1824': attribute type 10 has an invalid length. [ 264.424202][T10810] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1824'. [ 264.793255][T10822] netlink: 'syz.0.1830': attribute type 39 has an invalid length. [ 265.055491][T10830] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1832'. [ 265.091689][T10830] netlink: 'syz.0.1832': attribute type 153 has an invalid length. [ 265.101319][T10830] netlink: 'syz.0.1832': attribute type 3 has an invalid length. [ 265.117366][T10830] netlink: 84356 bytes leftover after parsing attributes in process `syz.0.1832'. [ 266.376470][T10848] netlink: 'syz.0.1838': attribute type 10 has an invalid length. [ 266.401164][T10848] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1838'. [ 267.455912][T10852] netlink: 'syz.2.1840': attribute type 39 has an invalid length. [ 268.525755][T10885] netlink: 15231 bytes leftover after parsing attributes in process `syz.0.1851'. [ 268.547099][T10891] netlink: 'syz.3.1852': attribute type 39 has an invalid length. [ 268.599634][T10889] netlink: 'syz.2.1850': attribute type 10 has an invalid length. [ 268.627961][T10889] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1850'. [ 268.988190][T10903] netlink: 'syz.1.1858': attribute type 1 has an invalid length. [ 269.439635][T10916] netlink: 'syz.3.1864': attribute type 39 has an invalid length. [ 269.560607][T10918] netlink: 'syz.1.1865': attribute type 10 has an invalid length. [ 269.582709][T10918] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1865'. [ 270.017669][ T8825] wlan1: Trigger new scan to find an IBSS to join [ 270.382812][T10945] netlink: 'syz.0.1875': attribute type 39 has an invalid length. [ 270.567738][T10949] netlink: 'syz.2.1877': attribute type 10 has an invalid length. [ 270.614441][T10949] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1877'. [ 270.932108][T10958] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1879'. [ 271.644428][T10976] netlink: 'syz.2.1886': attribute type 39 has an invalid length. [ 271.822714][T10985] netlink: set zone limit has 8 unknown bytes [ 272.264165][T11012] netlink: 'syz.3.1898': attribute type 39 has an invalid length. [ 272.287902][T10878] delete_channel: no stack [ 272.705833][T11028] netlink: 'syz.0.1903': attribute type 8 has an invalid length. [ 272.713895][T11028] netlink: 'syz.0.1903': attribute type 6 has an invalid length. [ 272.728243][T11028] netlink: 144448 bytes leftover after parsing attributes in process `syz.0.1903'. [ 273.908123][T11051] netlink: 'syz.2.1910': attribute type 39 has an invalid length. [ 274.988989][ T8831] wlan1: Trigger new scan to find an IBSS to join [ 276.144402][ T8825] wlan1: Creating new IBSS network, BSSID 92:30:c6:c5:36:04 [ 276.524609][T11090] netlink: 'syz.1.1923': attribute type 39 has an invalid length. [ 276.690996][T11096] netlink: 'syz.1.1926': attribute type 40 has an invalid length. [ 277.312250][T11120] netlink: 'syz.1.1934': attribute type 39 has an invalid length. [ 277.668141][T11139] delete_channel: no stack [ 278.184747][T11154] netlink: 'syz.2.1948': attribute type 39 has an invalid length. [ 278.419303][T11162] netlink: 'syz.0.1951': attribute type 10 has an invalid length. [ 278.451796][T11162] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1951'. [ 278.794500][T11183] netlink: 'syz.0.1960': attribute type 39 has an invalid length. [ 279.047489][T11193] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1964'. [ 279.156183][T11192] delete_channel: no stack [ 279.215289][T11194] netlink: 'syz.3.1962': attribute type 1 has an invalid length. [ 279.244569][T11194] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.1962'. [ 280.293037][T11218] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1971'. [ 280.346991][T11214] netlink: 'syz.1.1970': attribute type 10 has an invalid length. [ 280.385727][T11214] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1970'. [ 280.542570][T11220] netlink: 'syz.0.1972': attribute type 39 has an invalid length. [ 281.213324][T11227] netlink: 'syz.0.1975': attribute type 3 has an invalid length. [ 281.222198][T11227] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.1975'. [ 281.554397][T11237] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1978'. [ 281.628109][T11237] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1978'. [ 281.736117][T11238] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1978'. [ 281.772489][T11237] tap0: tun_chr_ioctl cmd 1074025677 [ 281.784673][T11237] tap0: linktype set to 777 [ 282.167654][T11253] netlink: 'syz.3.1982': attribute type 10 has an invalid length. [ 282.240932][T11253] team0: Port device geneve1 added [ 282.273523][T11258] netlink: 'syz.2.1983': attribute type 39 has an invalid length. [ 282.309750][T11262] netlink: 'syz.0.1985': attribute type 10 has an invalid length. [ 282.318042][T11262] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1985'. [ 285.409023][T11292] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.1993'. [ 285.600030][T11298] netlink: 'syz.1.1995': attribute type 39 has an invalid length. [ 285.846805][T11306] netlink: 'syz.3.1998': attribute type 10 has an invalid length. [ 285.875784][T11306] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1998'. [ 285.911773][T11306] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 286.357188][T11332] netlink: 'syz.0.2008': attribute type 39 has an invalid length. [ 286.752982][T11340] netlink: 'syz.0.2010': attribute type 10 has an invalid length. [ 286.808660][T11340] geneve1: entered promiscuous mode [ 286.823072][T11340] geneve1: entered allmulticast mode [ 286.838807][T11340] team0: Port device geneve1 added [ 286.903314][T11349] netlink: 'syz.1.2015': attribute type 10 has an invalid length. [ 286.915200][T11349] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2015'. [ 287.107271][T11355] netlink: 'syz.0.2019': attribute type 39 has an invalid length. [ 287.850996][T11381] netlink: 'syz.2.2030': attribute type 39 has an invalid length. [ 288.149348][T11397] netlink: 'syz.1.2035': attribute type 3 has an invalid length. [ 288.573085][T11417] netlink: 'syz.0.2044': attribute type 39 has an invalid length. [ 289.490774][T11450] netlink: 'syz.1.2056': attribute type 39 has an invalid length. [ 290.382224][T11484] hsr0: entered promiscuous mode [ 290.397730][T11484] hsr0: entered allmulticast mode [ 290.403078][T11484] hsr_slave_0: entered allmulticast mode [ 290.411114][T11484] hsr_slave_1: entered allmulticast mode [ 290.424663][T11480] netlink: 140 bytes leftover after parsing attributes in process `syz.0.2067'. [ 290.452690][T11485] netlink: 'syz.2.2068': attribute type 39 has an invalid length. [ 291.349806][T11510] netlink: 'syz.1.2077': attribute type 39 has an invalid length. [ 291.818779][T11524] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2080'. [ 292.132334][T11532] netlink: 'syz.3.2082': attribute type 2 has an invalid length. [ 292.160233][T11532] netlink: 205452 bytes leftover after parsing attributes in process `syz.3.2082'. [ 292.243158][T11530] netlink: 'syz.3.2082': attribute type 2 has an invalid length. [ 292.266192][T11530] netlink: 205452 bytes leftover after parsing attributes in process `syz.3.2082'. [ 292.333655][T11532] netlink: 182208 bytes leftover after parsing attributes in process `syz.3.2082'. [ 293.866097][T11568] netlink: 'syz.2.2087': attribute type 39 has an invalid length. [ 294.561864][T11634] netlink: 'syz.2.2099': attribute type 39 has an invalid length. [ 295.089867][T11660] netlink: 'syz.2.2109': attribute type 2 has an invalid length. [ 295.106303][T11660] netlink: 'syz.2.2109': attribute type 1 has an invalid length. [ 295.117779][T11660] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2109'. [ 295.309781][T11670] netlink: 'syz.2.2112': attribute type 39 has an invalid length. [ 299.331167][T11704] netlink: 'syz.1.2122': attribute type 39 has an invalid length. [ 300.507911][T11752] netlink: 'syz.1.2139': attribute type 39 has an invalid length. [ 301.688146][T11795] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.2152'. [ 301.705821][T11795] syzkaller0: entered promiscuous mode [ 301.715123][T11794] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2153'. [ 301.725162][T11795] syzkaller0: entered allmulticast mode [ 301.737995][T11796] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2153'. [ 301.747649][T11796] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes. [ 301.763246][T11794] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes. [ 302.215754][T11797] netlink: 'syz.3.2154': attribute type 39 has an invalid length. [ 302.529386][T11810] netlink: 'syz.2.2158': attribute type 10 has an invalid length. [ 302.551448][T11810] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2158'. [ 302.834639][T11822] netlink: 'syz.2.2164': attribute type 39 has an invalid length. [ 303.858865][T11845] ±ÿ: renamed from lo (while UP) [ 304.264735][T11861] netlink: 'syz.3.2175': attribute type 39 has an invalid length. [ 305.382043][T11876] netlink: 'syz.0.2180': attribute type 10 has an invalid length. [ 305.398045][T11876] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2180'. [ 306.182408][ T8777] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 306.408673][T11889] netlink: 'syz.1.2186': attribute type 39 has an invalid length. [ 308.760963][T11922] netlink: 'syz.3.2198': attribute type 39 has an invalid length. [ 309.796634][T11929] netlink: 'syz.0.2199': attribute type 10 has an invalid length. [ 309.806264][T11929] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2199'. [ 310.488407][T11945] netlink: 'syz.3.2205': attribute type 29 has an invalid length. [ 310.558479][T11945] netlink: 'syz.3.2205': attribute type 29 has an invalid length. [ 311.921897][T11958] netlink: 'syz.2.2208': attribute type 39 has an invalid length. [ 313.948635][ T5776] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 313.958643][T11988] netlink: 'syz.0.2219': attribute type 29 has an invalid length. [ 313.978224][ T5776] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 314.008217][ T5776] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 314.058039][T11988] netlink: 'syz.0.2219': attribute type 29 has an invalid length. [ 314.116041][ T5776] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 314.141839][ T5776] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 314.150545][ T5776] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 314.491640][T11994] netlink: 'syz.2.2220': attribute type 39 has an invalid length. [ 314.974178][ T5771] D: (slave syz_tun): Releasing backup interface [ 315.199336][ T8842] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.307358][ T8842] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.442250][ T8842] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.472545][T11990] chnl_net:caif_netlink_parms(): no params data found [ 316.110632][ T8842] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.257504][ T51] Bluetooth: hci4: command tx timeout [ 316.315135][T11990] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.323687][T11990] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.331156][T11990] bridge_slave_0: entered allmulticast mode [ 316.339338][T11990] bridge_slave_0: entered promiscuous mode [ 316.352444][T11990] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.359758][T11990] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.367075][T11990] bridge_slave_1: entered allmulticast mode [ 316.387426][T11990] bridge_slave_1: entered promiscuous mode [ 316.508400][T11990] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 316.535686][T11990] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 316.685446][T11990] team0: Port device team_slave_0 added [ 316.905206][ T8842] ip6gretap0 (unregistering): left allmulticast mode [ 316.974739][ T8842] ip6gretap0 (unregistering): left promiscuous mode [ 317.059362][ T8842] bridge0: port 4(ip6gretap0) entered disabled state [ 317.280099][T12055] netlink: 'syz.2.2232': attribute type 29 has an invalid length. [ 317.428485][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.434892][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.528661][T11990] team0: Port device team_slave_1 added [ 317.729673][T12055] netlink: 'syz.2.2232': attribute type 29 has an invalid length. [ 317.855308][T11990] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 317.872969][T11990] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 317.908174][T11990] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 318.333948][T11990] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 318.344338][ T51] Bluetooth: hci4: command tx timeout [ 318.369794][T11990] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 318.401256][T11990] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 318.618528][T11990] hsr_slave_0: entered promiscuous mode [ 318.629252][T11990] hsr_slave_1: entered promiscuous mode [ 318.635366][T11990] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 318.647364][T11990] Cannot create hsr debugfs directory [ 318.832883][ T8842] gretap0 (unregistering): left allmulticast mode [ 318.839759][ T8842] gretap0 (unregistering): left promiscuous mode [ 318.846463][ T8842] : port 1(gretap0) entered disabled state [ 319.509514][ T8842] hsr_slave_0: left promiscuous mode [ 319.541699][ T8842] hsr_slave_1: left promiscuous mode [ 319.587707][ T8842] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 319.606691][ T8842] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 319.617802][ T8842] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 319.625246][ T8842] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 319.633712][ T8842] team0: left allmulticast mode [ 319.639017][ T8842] team_slave_0: left allmulticast mode [ 319.644994][ T8842] team_slave_1: left allmulticast mode [ 319.652064][ T8842] team0: left promiscuous mode [ 319.663959][ T8842] team_slave_0: left promiscuous mode [ 319.681144][ T8842] team_slave_1: left promiscuous mode [ 319.691754][ T8842] bridge0: port 3(team0) entered disabled state [ 319.743909][ T8842] bridge_slave_0: left allmulticast mode [ 319.755166][ T8842] bridge_slave_0: left promiscuous mode [ 319.766615][ T8842] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.810910][ T8842] veth1_macvtap: left promiscuous mode [ 319.839960][ T8842] veth1_vlan: left promiscuous mode [ 319.846904][ T8842] veth0_vlan: left promiscuous mode [ 320.129543][T12114] netlink: 'syz.3.2249': attribute type 3 has an invalid length. [ 320.147487][T12114] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2249'. [ 320.417338][ T51] Bluetooth: hci4: command tx timeout [ 320.887748][ T8842] team0 (unregistering): Port device team_slave_1 removed [ 320.929910][ T8842] team0 (unregistering): Port device team_slave_0 removed [ 320.970305][ T8842] D (unregistering): (slave bond_slave_1): Releasing backup interface [ 321.219434][ T8842] D (unregistering): (slave bridge0): Releasing backup interface [ 321.237116][ T8842] D (unregistering): Released all slaves [ 321.315092][T12132] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2256'. [ 321.392753][T11990] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 321.478517][T11990] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 321.505861][T11990] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 321.585697][ T51] Bluetooth: hci1: unexpected subevent 0x06 length: 150 > 10 [ 322.318106][T11990] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 322.497507][ T51] Bluetooth: hci4: command tx timeout [ 322.822186][T11990] 8021q: adding VLAN 0 to HW filter on device bond0 [ 322.940836][T11990] 8021q: adding VLAN 0 to HW filter on device team0 [ 322.973965][ T8831] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.981162][ T8831] bridge0: port 1(bridge_slave_0) entered forwarding state [ 323.090878][ T8840] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.098180][ T8840] bridge0: port 2(bridge_slave_1) entered forwarding state [ 323.627976][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 323.913615][T11990] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 324.175636][T11990] veth0_vlan: entered promiscuous mode [ 324.186623][T12192] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2271'. [ 324.241995][T11990] veth1_vlan: entered promiscuous mode [ 324.354072][T11990] veth0_macvtap: entered promiscuous mode [ 324.376662][T11990] veth1_macvtap: entered promiscuous mode [ 324.450753][T11990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 324.473332][T11990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.491868][T11990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 324.524933][T11990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.546982][T11990] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 324.601666][T12199] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2274'. [ 324.639603][T12207] netlink: 'syz.2.2275': attribute type 10 has an invalid length. [ 324.648983][T12207] team0: Device hsr_slave_0 is up. Set it down before adding it as a team port [ 324.704933][T11990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 324.736136][T11990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.764619][T11990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 324.785536][T11990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.805713][T11990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 324.837828][T11990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.860356][T11990] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 324.885203][T11990] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.901668][T11990] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.913456][T11990] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.931248][T11990] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.200759][ T8825] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 325.243917][ T8825] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 325.389555][ T8830] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 325.422069][ T8830] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 326.889577][T12247] netlink: 'syz.1.2215': attribute type 10 has an invalid length. [ 326.921255][T12247] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2215'. [ 326.930841][T12247] bridge0: port 3(team0) entered blocking state [ 326.937606][T12247] bridge0: port 3(team0) entered disabled state [ 326.944090][T12247] team0: entered allmulticast mode [ 326.949763][T12247] team_slave_0: entered allmulticast mode [ 326.955526][T12247] team_slave_1: entered allmulticast mode [ 326.971693][T12247] team0: entered promiscuous mode [ 326.976918][T12247] team_slave_0: entered promiscuous mode [ 326.983233][T12247] team_slave_1: entered promiscuous mode [ 326.990393][T12247] bridge0: port 3(team0) entered blocking state [ 326.996807][T12247] bridge0: port 3(team0) entered forwarding state [ 327.340932][T12281] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2296'. [ 329.319471][T12305] netlink: 'syz.0.2304': attribute type 10 has an invalid length. [ 329.347365][T12305] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2304'. [ 330.701470][T12342] netlink: 'syz.2.2319': attribute type 10 has an invalid length. [ 330.717554][T12342] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2319'. [ 330.927944][T12354] netlink: 'syz.1.2322': attribute type 10 has an invalid length. [ 330.957691][T12354] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2322'. [ 331.042934][T12363] netlink: 'syz.3.2325': attribute type 2 has an invalid length. [ 331.052091][T12363] netlink: 'syz.3.2325': attribute type 8 has an invalid length. [ 331.065753][T12363] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2325'. [ 331.681781][T12378] netlink: 'syz.3.2334': attribute type 10 has an invalid length. [ 331.717399][T12378] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2334'. [ 331.739918][T12378] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 331.985580][ T5776] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 331.997883][ T5776] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 332.013496][ T5776] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 332.023120][ T5776] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 332.036114][ T5776] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 332.050705][ T5776] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 332.241817][T12396] netlink: 'syz.3.2339': attribute type 10 has an invalid length. [ 332.252385][T12396] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2339'. [ 332.266637][T12396] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 332.469879][T12388] chnl_net:caif_netlink_parms(): no params data found [ 332.594017][T12388] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.601792][T12388] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.609159][T12388] bridge_slave_0: entered allmulticast mode [ 332.616659][T12388] bridge_slave_0: entered promiscuous mode [ 332.710845][T12388] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.734596][T12388] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.750161][T12388] bridge_slave_1: entered allmulticast mode [ 332.764281][T12388] bridge_slave_1: entered promiscuous mode [ 333.111934][T12388] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 333.219350][T12388] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 333.302002][T12388] team0: Port device team_slave_0 added [ 333.311437][T12388] team0: Port device team_slave_1 added [ 333.449922][T12388] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 333.456919][T12388] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 333.483325][T12388] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 333.510383][T12388] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 333.524561][T12388] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 333.561308][T12388] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 333.656656][T12388] hsr_slave_0: entered promiscuous mode [ 333.685794][T12388] hsr_slave_1: entered promiscuous mode [ 333.711775][T12388] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 333.724937][T12388] Cannot create hsr debugfs directory [ 333.853286][T12437] netlink: 'syz.1.2354': attribute type 10 has an invalid length. [ 333.862389][T12437] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2354'. [ 334.042152][T12388] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.098302][ T51] Bluetooth: hci0: command tx timeout [ 334.364086][T12447] netlink: set zone limit has 8 unknown bytes [ 334.390742][T12388] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.494919][T12388] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.904030][T12457] netlink: 'syz.2.2363': attribute type 9 has an invalid length. [ 335.630779][T12388] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 335.657729][T12388] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 335.680784][T12388] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 335.706041][T12388] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 335.924781][T12388] 8021q: adding VLAN 0 to HW filter on device bond0 [ 335.989144][T12388] 8021q: adding VLAN 0 to HW filter on device team0 [ 336.016965][ T8830] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.024989][ T8830] bridge0: port 1(bridge_slave_0) entered forwarding state [ 336.088654][ T8830] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.095910][ T8830] bridge0: port 2(bridge_slave_1) entered forwarding state [ 336.178530][ T51] Bluetooth: hci0: command tx timeout [ 336.376841][T12388] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 336.475959][T12388] veth0_vlan: entered promiscuous mode [ 336.503907][T12388] veth1_vlan: entered promiscuous mode [ 336.560139][T12388] veth0_macvtap: entered promiscuous mode [ 336.575184][T12388] veth1_macvtap: entered promiscuous mode [ 336.649555][T12388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 336.684258][T12388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.703680][T12388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 336.715438][T12388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.725747][T12388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 336.736516][T12388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.759557][T12388] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 336.767834][T12489] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.2374'. [ 336.777093][T12489] netlink: 6320 bytes leftover after parsing attributes in process `syz.3.2374'. [ 336.856572][T12388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 336.887497][T12388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.955758][T12388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 337.063325][T12388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.120517][T12388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 337.166406][T12388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.178159][T12388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 337.225326][T12388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.237500][T12388] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 337.269712][T12489] netlink: 'syz.3.2374': attribute type 21 has an invalid length. [ 337.277861][T12489] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2374'. [ 337.293382][T12388] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.312764][T12388] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.328980][T12388] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.338945][T12388] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.725345][ T8842] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 337.751591][ T8828] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.785333][ T8828] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 338.257970][ T51] Bluetooth: hci0: command tx timeout [ 338.523227][ T8830] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 338.549733][ T8830] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.467708][T12534] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2332'. [ 340.337537][ T51] Bluetooth: hci0: command tx timeout [ 342.069813][ T8840] hsr_slave_0: left promiscuous mode [ 342.082597][ T8840] hsr_slave_1: left promiscuous mode [ 342.104915][ T8840] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 342.112697][ T8840] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 342.166972][ T8840] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 342.180087][ T8840] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 342.201048][ T8840] bridge0: port 3(team0) entered disabled state [ 342.303444][ T8840] bridge_slave_0: left allmulticast mode [ 342.311110][ T8840] bridge_slave_0: left promiscuous mode [ 342.321937][ T8840] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.681438][ T8840] veth1_vlan: left promiscuous mode [ 342.706923][ T8840] veth0_vlan: left promiscuous mode [ 343.421832][ T8840] geneve1 (unregistering): left promiscuous mode [ 343.428751][ T8840] geneve1 (unregistering): left allmulticast mode [ 343.448279][ T8840] team0 (unregistering): Port device geneve1 removed [ 343.626447][T12621] netlink: 'syz.3.2408': attribute type 63 has an invalid length. [ 344.225950][ T8840] team_slave_1 (unregistering): left promiscuous mode [ 344.242184][ T8840] team_slave_1 (unregistering): left allmulticast mode [ 344.258853][ T8840] team0 (unregistering): Port device team_slave_1 removed [ 344.324489][ T8840] team_slave_0 (unregistering): left promiscuous mode [ 344.337032][ T8840] team_slave_0 (unregistering): left allmulticast mode [ 344.381516][ T8840] team0 (unregistering): Port device team_slave_0 removed [ 344.476016][ T8840] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 344.502032][ T8840] bond_slave_1 (unregistering): left promiscuous mode [ 344.514620][ T8840] bond_slave_1 (unregistering): left allmulticast mode [ 344.589185][ T8840] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 344.607129][ T8840] bond_slave_0 (unregistering): left promiscuous mode [ 344.616253][ T8840] bond_slave_0 (unregistering): left allmulticast mode [ 344.994784][ T8840] bond0 (unregistering): left promiscuous mode [ 345.001213][ T8840] bond0 (unregistering): left allmulticast mode [ 345.031530][ T8840] team0 (unregistering): Port device bond0 removed [ 345.136590][ T8840] bond0 (unregistering): Released all slaves [ 345.285296][T12621] netlink: 'syz.3.2408': attribute type 63 has an invalid length. [ 345.649750][T12637] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.2413'. [ 346.416944][T12651] netlink: 'syz.2.2419': attribute type 39 has an invalid length. [ 346.571236][T12653] netlink: 'syz.1.2420': attribute type 10 has an invalid length. [ 346.581688][T12653] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2420'. [ 346.842268][T12662] syz.1.2424[12662] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 346.842459][T12662] syz.1.2424[12662] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 347.175050][T12672] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2429'. [ 347.416377][T12679] netlink: 'syz.3.2432': attribute type 39 has an invalid length. [ 347.504598][T12682] netlink: 'syz.0.2433': attribute type 10 has an invalid length. [ 347.520552][T12682] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2433'. [ 347.535514][T12682] bridge0: port 3(team0) entered blocking state [ 347.557804][T12682] bridge0: port 3(team0) entered disabled state [ 347.565090][T12682] team0: entered allmulticast mode [ 347.576126][T12682] team_slave_0: entered allmulticast mode [ 347.584210][T12682] team_slave_1: entered allmulticast mode [ 347.611233][T12682] team0: entered promiscuous mode [ 347.624972][T12682] team_slave_0: entered promiscuous mode [ 347.645668][T12682] team_slave_1: entered promiscuous mode [ 347.667911][T12682] bridge0: port 3(team0) entered blocking state [ 347.675158][T12682] bridge0: port 3(team0) entered forwarding state [ 349.071155][T12715] netlink: 'syz.1.2445': attribute type 39 has an invalid length. [ 349.721152][T12737] netlink: 'syz.3.2452': attribute type 10 has an invalid length. [ 349.729487][T12737] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2452'. [ 349.746519][T12737] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 350.022575][T12754] netlink: 'syz.3.2457': attribute type 10 has an invalid length. [ 350.049450][T12754] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2457'. [ 350.080564][T12754] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 350.513133][ T5776] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 350.533270][ T5776] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 350.547707][ T5776] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 350.565794][ T5776] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 350.615074][ T5776] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 350.645897][ T5776] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 350.720693][T12774] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2464'. [ 351.621540][T12765] chnl_net:caif_netlink_parms(): no params data found [ 351.672621][T12788] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 351.805491][ T8825] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.104484][ T8825] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.141491][T12803] netlink: 'syz.3.2474': attribute type 9 has an invalid length. [ 352.152583][T12803] netlink: 61967 bytes leftover after parsing attributes in process `syz.3.2474'. [ 352.203758][T12765] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.221399][T12765] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.243561][T12765] bridge_slave_0: entered allmulticast mode [ 352.266531][T12765] bridge_slave_0: entered promiscuous mode [ 352.329205][ T8825] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.352273][T12799] netlink: 'syz.0.2473': attribute type 10 has an invalid length. [ 352.367599][T12799] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2473'. [ 352.390021][T12765] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.407879][T12765] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.415298][T12765] bridge_slave_1: entered allmulticast mode [ 352.440144][T12765] bridge_slave_1: entered promiscuous mode [ 352.492322][T12765] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 352.536755][T12765] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 352.629038][T12765] team0: Port device team_slave_0 added [ 352.665718][T12765] team0: Port device team_slave_1 added [ 352.740795][T12765] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 352.755578][ T51] Bluetooth: hci1: command tx timeout [ 352.769091][T12765] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 352.796349][T12765] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 352.837699][T12765] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 352.846279][T12765] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 352.937239][T12765] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 353.325116][T12765] hsr_slave_0: entered promiscuous mode [ 353.385746][T12765] hsr_slave_1: entered promiscuous mode [ 353.440889][T12765] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 353.496716][T12765] Cannot create hsr debugfs directory [ 354.817374][ T51] Bluetooth: hci1: command tx timeout [ 356.897333][ T51] Bluetooth: hci1: command tx timeout [ 357.036759][T12869] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2492'. [ 357.147840][T12869] team0: Port device team_slave_0 removed [ 357.154355][T12869] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 358.983064][ T51] Bluetooth: hci1: command tx timeout [ 359.363643][T12887] netlink: 'syz.0.2496': attribute type 10 has an invalid length. [ 359.372007][T12887] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2496'. [ 359.644522][T12765] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 359.755553][T12765] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 360.128567][T12765] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 360.152235][T12765] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 360.378581][ T8825] hsr_slave_0: left promiscuous mode [ 360.402084][ T8825] hsr_slave_1: left promiscuous mode [ 360.412759][ T8825] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 360.428447][ T8825] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 360.451898][ T8825] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 360.478597][ T8825] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 360.517221][ T8825] team0: left allmulticast mode [ 360.522267][ T8825] C: left allmulticast mode [ 360.532767][ T8825] team_slave_1: left allmulticast mode [ 360.549713][ T8825] team0: left promiscuous mode [ 360.567290][ T8825] C: left promiscuous mode [ 360.578743][ T8825] team_slave_1: left promiscuous mode [ 360.584481][ T8825] bridge0: port 3(team0) entered disabled state [ 360.619238][ T8825] bridge_slave_1: left allmulticast mode [ 360.624940][ T8825] bridge_slave_1: left promiscuous mode [ 360.650492][ T8825] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.672385][ T8825] bridge_slave_0: left allmulticast mode [ 360.687832][ T8825] bridge_slave_0: left promiscuous mode [ 360.697850][ T8825] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.612766][ T8825] veth1_vlan: left promiscuous mode [ 361.618287][ T8825] veth0_vlan: left promiscuous mode [ 361.975310][ T8825] D (unregistering): (slave macvlan0): Releasing backup interface [ 362.400215][ T8825] team0 (unregistering): Port device team_slave_1 removed [ 362.456408][ T8825] team0 (unregistering): Port device C removed [ 362.520539][ T8825] D (unregistering): (slave bond_slave_1): Releasing backup interface [ 362.560018][ T8825] D (unregistering): (slave 17ÿ): Releasing backup interface [ 362.902948][ T8825] D (unregistering): Released all slaves [ 363.082071][T12949] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.2513'. [ 363.246918][T12765] 8021q: adding VLAN 0 to HW filter on device bond0 [ 363.325548][T12765] 8021q: adding VLAN 0 to HW filter on device team0 [ 363.365396][T12983] netlink: 14568 bytes leftover after parsing attributes in process `syz.1.2526'. [ 363.409824][ T8771] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.417033][ T8771] bridge0: port 1(bridge_slave_0) entered forwarding state [ 363.519858][ T8832] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.527045][ T8832] bridge0: port 2(bridge_slave_1) entered forwarding state [ 363.713756][T12993] netlink: 'syz.3.2529': attribute type 10 has an invalid length. [ 363.757524][T12993] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2529'. [ 363.791804][T12993] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 364.252766][T12765] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 364.401690][T12765] veth0_vlan: entered promiscuous mode [ 364.453803][T12765] veth1_vlan: entered promiscuous mode [ 364.591264][T12765] veth0_macvtap: entered promiscuous mode [ 364.632669][T12765] veth1_macvtap: entered promiscuous mode [ 364.694233][T12765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 364.720168][T12765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 364.738717][T12765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 364.766744][T12765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 364.787085][T12765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 364.805991][T12765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 364.828811][T12765] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 364.854602][T12765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 364.872628][T12765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 364.882618][T12765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 364.894266][T12765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 364.905049][T12765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 364.915954][T12765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 364.948511][T12765] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 364.969621][T12765] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.992020][T12765] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.017955][T12765] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.037573][T12765] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.272893][ T8840] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 365.306748][ T8840] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 365.335550][T13041] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 365.389704][T13041] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 365.418983][T13041] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 365.426453][T13041] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 365.568180][T13054] netlink: 'syz.3.2542': attribute type 10 has an invalid length. [ 365.595541][T13054] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2542'. [ 365.626634][T13054] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 365.699442][ T8840] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 365.723947][ T8840] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 366.266534][T13081] netlink: 'syz.0.2550': attribute type 1 has an invalid length. [ 366.283473][T13081] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.2550'. [ 366.754779][ T5776] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 366.763234][T13092] netlink: 'syz.1.2554': attribute type 10 has an invalid length. [ 366.775657][T13092] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2554'. [ 366.777597][ T5776] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 366.791846][T13095] netlink: 'syz.2.2556': attribute type 39 has an invalid length. [ 366.808805][ T5776] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 366.824649][ T5776] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 366.836058][ T5776] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 366.843593][ T5776] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 366.998363][ T8825] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.020236][T13102] netlink: 'syz.0.2557': attribute type 39 has an invalid length. [ 367.146363][ T8825] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.224759][ T8825] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.319192][ T8825] team0: Port device netdevsim0 removed [ 367.328535][ T8825] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.455153][T13097] chnl_net:caif_netlink_parms(): no params data found [ 367.802140][T13097] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.809634][T13097] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.816811][T13097] bridge_slave_0: entered allmulticast mode [ 367.827958][T13097] bridge_slave_0: entered promiscuous mode [ 367.837052][T13128] netlink: 'syz.0.2566': attribute type 6 has an invalid length. [ 367.847290][T13128] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2566'. [ 367.900269][T13097] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.917725][T13097] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.935217][T13097] bridge_slave_1: entered allmulticast mode [ 367.959755][T13097] bridge_slave_1: entered promiscuous mode [ 368.018977][T13097] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 368.034708][T13131] netlink: 'syz.1.2565': attribute type 10 has an invalid length. [ 368.047013][T13131] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2565'. [ 368.115890][T13097] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 368.125379][T13137] netlink: 'syz.2.2569': attribute type 39 has an invalid length. [ 368.188009][T13097] team0: Port device team_slave_0 added [ 368.285813][T13097] team0: Port device team_slave_1 added [ 368.494795][T13097] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 368.512469][T13097] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 368.544512][T13097] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 368.595517][T13097] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 368.621291][T13097] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 368.653784][T13097] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 368.750308][ T8830] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 368.831994][T13097] hsr_slave_0: entered promiscuous mode [ 368.853547][T13097] hsr_slave_1: entered promiscuous mode [ 368.861040][T13097] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 368.877564][T13097] Cannot create hsr debugfs directory [ 368.904917][ T5776] Bluetooth: hci2: command tx timeout [ 369.312615][T13179] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.2581'. [ 369.322366][T13179] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2581'. [ 369.734668][T13198] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2586'. [ 369.787133][T13198] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2586'. [ 369.818699][T13198] hsr_slave_0: left promiscuous mode [ 369.851933][T13198] hsr_slave_1: left promiscuous mode [ 370.507310][ T8825] hsr_slave_0: left promiscuous mode [ 370.537304][ T8825] hsr_slave_1: left promiscuous mode [ 370.556271][ T8825] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 370.571293][ T8825] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 370.591840][ T8825] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 370.608519][ T8825] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 370.663974][ T8825] veth1_vlan: left promiscuous mode [ 370.673393][ T8825] veth0_vlan: left promiscuous mode [ 370.949820][ T8825] team0 (unregistering): Port device geneve1 removed [ 370.978144][ T5776] Bluetooth: hci2: command tx timeout [ 372.354916][ T8825] team0 (unregistering): Port device team_slave_1 removed [ 372.466660][ T8825] D (unregistering): (slave bond_slave_1): Releasing backup interface [ 372.530161][ T8825] D (unregistering): (slave bond_slave_0): Releasing backup interface [ 372.572296][ T8825] D (unregistering): (slave bridge_slave_1): Releasing backup interface [ 372.803128][ T8825] D (unregistering): Released all slaves [ 372.835851][T13223] netlink: 'syz.2.2592': attribute type 1 has an invalid length. [ 372.846281][T13223] netlink: 'syz.2.2592': attribute type 4 has an invalid length. [ 372.854138][T13223] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.2592'. [ 372.865228][T13243] netlink: 'syz.0.2600': attribute type 33 has an invalid length. [ 372.879120][T13243] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2600'. [ 373.057423][ T5776] Bluetooth: hci2: command tx timeout [ 373.117455][T13097] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 373.148771][T13097] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 373.206214][T13097] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 373.226643][T13097] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 373.301570][T13264] netlink: 'syz.2.2606': attribute type 10 has an invalid length. [ 373.314922][T13264] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2606'. [ 373.326639][T13264] bridge0: port 3(team0) entered blocking state [ 373.355055][T13264] bridge0: port 3(team0) entered disabled state [ 373.371688][T13264] team0: entered allmulticast mode [ 373.377079][T13264] team_slave_0: entered allmulticast mode [ 373.383139][T13264] team_slave_1: entered allmulticast mode [ 373.404283][T13264] team0: entered promiscuous mode [ 373.410421][T13264] team_slave_0: entered promiscuous mode [ 373.417301][T13264] team_slave_1: entered promiscuous mode [ 373.426862][T13264] bridge0: port 3(team0) entered blocking state [ 373.433715][T13264] bridge0: port 3(team0) entered forwarding state [ 373.552069][T13276] netlink: 'syz.1.2610': attribute type 39 has an invalid length. [ 373.766199][T13097] 8021q: adding VLAN 0 to HW filter on device bond0 [ 373.812698][T13097] 8021q: adding VLAN 0 to HW filter on device team0 [ 373.837944][ T8831] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.845125][ T8831] bridge0: port 1(bridge_slave_0) entered forwarding state [ 373.881808][ T8832] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.889011][ T8832] bridge0: port 2(bridge_slave_1) entered forwarding state [ 373.991286][T13290] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.2613'. [ 374.017359][T13290] netlink: 22856 bytes leftover after parsing attributes in process `syz.0.2613'. [ 374.073271][T13290] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2613'. [ 374.139809][T13290] netlink: 'syz.0.2613': attribute type 5 has an invalid length. [ 374.199765][T13097] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 374.863157][T13097] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 375.110183][T13097] veth0_vlan: entered promiscuous mode [ 375.147546][ T5776] Bluetooth: hci2: command tx timeout [ 375.336977][T13097] veth1_vlan: entered promiscuous mode [ 375.745134][T13097] veth0_macvtap: entered promiscuous mode [ 375.872096][T13097] veth1_macvtap: entered promiscuous mode [ 376.016375][T13097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 376.049788][T13097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.086581][T13097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 376.140426][T13097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.189595][T13097] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 376.246344][T13330] netlink: 'syz.0.2620': attribute type 10 has an invalid length. [ 376.284845][T13330] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2620'. [ 376.312722][T13097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 376.347253][T13097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.358535][T13097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 376.374588][T13097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.386922][T13097] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 376.413058][T13097] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.452166][T13097] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.467576][T13097] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.482318][T13097] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.710106][ T8840] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.755129][ T8840] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.957010][ T8825] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.976009][ T8825] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 377.170215][T13355] netlink: 'syz.2.2628': attribute type 39 has an invalid length. [ 378.333796][T13376] netlink: 'syz.1.2631': attribute type 10 has an invalid length. [ 378.468504][T13379] syz.2.2632 (13379) used greatest stack depth: 19400 bytes left [ 378.473073][T13376] geneve1: entered promiscuous mode [ 378.516979][T13376] geneve1: entered allmulticast mode [ 378.538218][T13376] team0: Port device geneve1 added [ 378.753637][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.767387][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.982617][T13393] netlink: 'syz.3.2636': attribute type 10 has an invalid length. [ 379.014353][T13393] team0: Port device wlan1 added [ 379.207011][T13401] netlink: 'syz.3.2638': attribute type 39 has an invalid length. [ 380.221255][T13415] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2644'. [ 380.275695][T13415] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 380.935130][T13422] netlink: 'syz.2.2648': attribute type 10 has an invalid length. [ 380.986739][T13423] netlink: 'syz.2.2648': attribute type 3 has an invalid length. [ 380.989629][T13422] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2648'. [ 381.042952][T13423] netlink: 199816 bytes leftover after parsing attributes in process `syz.2.2648'. [ 381.107243][T13422] batman_adv: batadv0: Adding interface: veth1_virt_wifi [ 381.132108][T13422] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 381.217306][T13422] batman_adv: batadv0: Interface activated: veth1_virt_wifi [ 381.490785][T13440] netlink: 'syz.3.2651': attribute type 10 has an invalid length. [ 381.498934][T13440] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2651'. [ 381.511345][T13440] bridge0: port 3(team0) entered blocking state [ 381.518626][T13440] bridge0: port 3(team0) entered disabled state [ 381.525320][T13440] team0: entered allmulticast mode [ 381.531145][T13440] team_slave_0: entered allmulticast mode [ 381.537004][T13440] team_slave_1: entered allmulticast mode [ 381.543871][T13440] mac80211_hwsim hwsim28 wlan1: entered allmulticast mode [ 381.555716][T13440] team0: entered promiscuous mode [ 381.560974][T13440] team_slave_0: entered promiscuous mode [ 381.567038][T13440] team_slave_1: entered promiscuous mode [ 381.573383][T13440] mac80211_hwsim hwsim28 wlan1: entered promiscuous mode [ 381.590587][T13440] bridge0: port 3(team0) entered blocking state [ 381.597003][T13440] bridge0: port 3(team0) entered forwarding state [ 384.793562][T13452] netlink: 'syz.0.2654': attribute type 39 has an invalid length. [ 386.003712][T13481] netlink: 'syz.2.2668': attribute type 10 has an invalid length. [ 386.021151][T13481] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2668'. [ 386.209145][T13486] netlink: 'syz.1.2669': attribute type 10 has an invalid length. [ 386.220129][T13486] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2669'. [ 387.746355][T13537] netlink: 'syz.0.2682': attribute type 10 has an invalid length. [ 387.755540][T13537] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2682'. [ 388.690314][T13550] netlink: 'syz.2.2688': attribute type 10 has an invalid length. [ 388.701123][T13550] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2688'. [ 389.701765][T13576] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2699'. [ 390.225201][T13586] netlink: 'syz.2.2702': attribute type 10 has an invalid length. [ 390.236001][T13586] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2702'. [ 390.464892][T13590] netlink: 'syz.0.2704': attribute type 10 has an invalid length. [ 390.498267][T13590] 8021q: adding VLAN 0 to HW filter on device bond0 [ 390.509419][T13590] bond0: entered promiscuous mode [ 390.523130][T13590] bond_slave_0: entered promiscuous mode [ 390.531674][T13590] bond_slave_1: entered promiscuous mode [ 390.539286][T13590] bond0: entered allmulticast mode [ 390.544605][T13590] bond_slave_0: entered allmulticast mode [ 390.553353][T13590] bond_slave_1: entered allmulticast mode [ 390.564160][T13590] team0: Port device bond0 added [ 390.590386][T13595] netlink: 'syz.1.2705': attribute type 21 has an invalid length. [ 390.607646][T13595] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2705'. [ 393.928066][T13637] netlink: 'syz.1.2722': attribute type 10 has an invalid length. [ 393.946538][T13637] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2722'. [ 394.137791][T13648] netlink: 'syz.0.2725': attribute type 21 has an invalid length. [ 394.148945][T13648] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2725'. [ 394.303513][T13648] netlink: 'syz.0.2725': attribute type 10 has an invalid length. [ 394.329148][T13648] bridge0: port 3(team0) entered disabled state [ 394.335959][T13648] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.344559][T13648] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.387251][T13648] bridge0: port 3(team0) entered blocking state [ 394.393731][T13648] bridge0: port 3(team0) entered forwarding state [ 394.400537][T13648] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.407765][T13648] bridge0: port 2(bridge_slave_1) entered forwarding state [ 394.415351][T13648] bridge0: port 1(bridge_slave_0) entered blocking state [ 394.422582][T13648] bridge0: port 1(bridge_slave_0) entered forwarding state [ 394.481756][T13648] bridge0: port 3(team0) entered disabled state [ 394.488372][T13648] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.495656][T13648] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.855271][T13679] netlink: 'syz.3.2740': attribute type 10 has an invalid length. [ 396.864031][T13679] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2740'. [ 397.992878][T13706] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.2751'. [ 399.019602][ C1] [ 399.019611][ C1] ================================ [ 399.019615][ C1] WARNING: inconsistent lock state [ 399.019637][ C1] syzkaller #0 Not tainted [ 399.019645][ C1] -------------------------------- [ 399.019649][ C1] inconsistent {INITIAL USE} -> {IN-NMI} usage. [ 399.019656][ C1] syz.0.2755/13723 [HC1[1]:SC0[0]:HE0:SE1] takes: [ 399.019673][ C1] ffff88805f9c40f8 (&htab->lockdep_key){....}-{2:2}, at: htab_lock_bucket+0x17d/0x300 [ 399.019718][ C1] {INITIAL USE} state was registered at: [ 399.019724][ C1] lock_acquire+0x19e/0x420 [ 399.019742][ C1] _raw_spin_lock+0x2e/0x40 [ 399.019758][ C1] htab_lock_bucket+0x17d/0x300 [ 399.019773][ C1] htab_lru_map_update_elem+0x2be/0x990 [ 399.019789][ C1] bpf_map_update_value+0x64b/0x710 [ 399.019803][ C1] generic_map_update_batch+0x5de/0x800 [ 399.019817][ C1] bpf_map_do_batch+0x3f2/0x600 [ 399.019833][ C1] __sys_bpf+0x381/0x890 [ 399.019847][ C1] __x64_sys_bpf+0x7c/0x90 [ 399.019861][ C1] do_syscall_64+0x55/0xb0 [ 399.019878][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 399.019903][ C1] irq event stamp: 2358 [ 399.019908][ C1] hardirqs last enabled at (2357): [] seqcount_lockdep_reader_access+0x10a/0x190 [ 399.019932][ C1] hardirqs last disabled at (2358): [] exc_debug+0x73/0x140 [ 399.019961][ C1] softirqs last enabled at (2224): [] netlink_insert+0x1094/0x1390 [ 399.019982][ C1] softirqs last disabled at (2222): [] release_sock+0x2f/0x1c0 [ 399.020006][ C1] [ 399.020006][ C1] other info that might help us debug this: [ 399.020010][ C1] Possible unsafe locking scenario: [ 399.020010][ C1] [ 399.020014][ C1] CPU0 [ 399.020017][ C1] ---- [ 399.020020][ C1] lock(&htab->lockdep_key); [ 399.020030][ C1] [ 399.020033][ C1] lock(&htab->lockdep_key); [ 399.020042][ C1] [ 399.020042][ C1] *** DEADLOCK *** [ 399.020042][ C1] [ 399.020045][ C1] no locks held by syz.0.2755/13723. [ 399.020052][ C1] [ 399.020052][ C1] stack backtrace: [ 399.020058][ C1] CPU: 1 PID: 13723 Comm: syz.0.2755 Not tainted syzkaller #0 [ 399.020072][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 399.020083][ C1] Call Trace: [ 399.020088][ C1] <#DB> [ 399.020094][ C1] dump_stack_lvl+0x18c/0x250 [ 399.020116][ C1] ? show_regs_print_info+0x20/0x20 [ 399.020139][ C1] ? print_usage_bug+0x43d/0x6a0 [ 399.020157][ C1] ? verify_lock_unused+0x15/0x140 [ 399.020176][ C1] lock_acquire+0x2c2/0x420 [ 399.020192][ C1] ? look_up_lock_class+0x75/0x140 [ 399.020209][ C1] ? htab_lock_bucket+0x17d/0x300 [ 399.020227][ C1] ? read_lock_is_recursive+0x20/0x20 [ 399.020251][ C1] _raw_spin_lock+0x2e/0x40 [ 399.020267][ C1] ? htab_lock_bucket+0x17d/0x300 [ 399.020283][ C1] htab_lock_bucket+0x17d/0x300 [ 399.020301][ C1] ? htab_lru_map_delete_node+0x770/0x770 [ 399.020319][ C1] ? look_up_lock_class+0x75/0x140 [ 399.020335][ C1] ? verify_lock_unused+0x15/0x140 [ 399.020353][ C1] ? jhash+0x2e8/0x740 [ 399.020370][ C1] htab_lru_map_delete_elem+0x19f/0x640 [ 399.020391][ C1] ? htab_lru_map_update_elem+0x990/0x990 [ 399.020409][ C1] ? perf_callchain+0x220/0x220 [ 399.020429][ C1] bpf_prog_2c29ac5cdc6b1842+0x42/0x46 [ 399.020446][ C1] bpf_overflow_handler+0x43f/0x510 [ 399.020468][ C1] ? perf_prepare_header+0x1e0/0x1e0 [ 399.020486][ C1] ? bpf_overflow_handler+0xde/0x510 [ 399.020506][ C1] ? tp_perf_event_destroy+0x20/0x20 [ 399.020530][ C1] ? __perf_event_account_interrupt+0x187/0x280 [ 399.020550][ C1] __perf_event_overflow+0x461/0x660 [ 399.020571][ C1] perf_swevent_event+0x319/0x570 [ 399.020591][ C1] ? perf_tp_event+0x1550/0x1550 [ 399.020613][ C1] perf_bp_event+0x319/0x430 [ 399.020632][ C1] ? look_up_lock_class+0x75/0x140 [ 399.020649][ C1] ? perf_event_free_bpf_prog+0x120/0x120 [ 399.020666][ C1] ? rcu_is_watching+0x15/0xb0 [ 399.020686][ C1] ? lock_release+0xb5/0x8c0 [ 399.020714][ C1] ? lock_acquire+0x2c2/0x420 [ 399.020736][ C1] hw_breakpoint_exceptions_notify+0x23e/0x670 [ 399.020758][ C1] notifier_call_chain+0x18f/0x380 [ 399.020779][ C1] ? atomic_notifier_call_chain+0x26/0x180 [ 399.020799][ C1] atomic_notifier_call_chain+0xda/0x180 [ 399.020820][ C1] notify_die+0x145/0x1a0 [ 399.020840][ C1] ? srcu_init_notifier_head+0x90/0x90 [ 399.020863][ C1] ? rcu_is_watching+0x15/0xb0 [ 399.020883][ C1] notify_debug+0x2e/0x50 [ 399.020897][ C1] exc_debug+0xde/0x140 [ 399.020919][ C1] asm_exc_debug+0x1e/0x40 [ 399.020944][ C1] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 399.020968][ C1] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01 [ 399.020981][ C1] RSP: 0018:ffffc900045bf7b8 EFLAGS: 00050206 [ 399.020994][ C1] RAX: ffffffff8431f201 RBX: 0000000000033fe0 RCX: 0000000000033d00 [ 399.021006][ C1] RDX: 0000000000000001 RSI: 0000200000000320 RDI: ffffc900046692e0 [ 399.021017][ C1] RBP: ffffc900045bf8f0 R08: ffffc9000469cfdf R09: 1ffff920008d39fb [ 399.021029][ C1] R10: dffffc0000000000 R11: fffff520008d39fc R12: ffffc90004669000 [ 399.021040][ C1] R13: 0000200000000040 R14: ffffc900045bfe38 R15: 1ffff920008b7fc7 [ 399.021055][ C1] ? _copy_from_iter+0x131/0x1290 [ 399.021080][ C1] [ 399.021084][ C1] [ 399.021089][ C1] _copy_from_iter+0x242/0x1290 [ 399.021111][ C1] ? __rwlock_init+0x150/0x150 [ 399.021132][ C1] ? copyout_mc+0x70/0x70 [ 399.021151][ C1] ? do_raw_spin_unlock+0x121/0x230 [ 399.021171][ C1] ? _raw_spin_unlock+0x28/0x40 [ 399.021188][ C1] ? find_vmap_area+0xfc/0x110 [ 399.021208][ C1] ? __check_object_size+0x4fc/0xa40 [ 399.021227][ C1] netlink_sendmsg+0x76b/0xbf0 [ 399.021248][ C1] ? netlink_getsockopt+0x590/0x590 [ 399.021267][ C1] ? apparmor_socket_sendmsg+0x8e/0x330 [ 399.021286][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 399.021305][ C1] ? security_socket_sendmsg+0x80/0xa0 [ 399.021322][ C1] ? netlink_getsockopt+0x590/0x590 [ 399.021341][ C1] ____sys_sendmsg+0x61b/0x980 [ 399.021362][ C1] ? __asan_memset+0x22/0x40 [ 399.021382][ C1] ? __sys_sendmsg_sock+0x30/0x30 [ 399.021400][ C1] ? __import_iovec+0x5f2/0x850 [ 399.021424][ C1] ? import_iovec+0x73/0xa0 [ 399.021445][ C1] ___sys_sendmsg+0x2a6/0x360 [ 399.021466][ C1] ? __sys_sendmsg+0x2b0/0x2b0 [ 399.021493][ C1] ? trace_call_bpf+0xc3/0x6c0 [ 399.021518][ C1] __se_sys_sendmsg+0x1d0/0x2c0 [ 399.021537][ C1] ? perf_trace_preemptirq_template+0x269/0x330 [ 399.021559][ C1] ? __x64_sys_sendmsg+0x80/0x80 [ 399.021584][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 399.021601][ C1] do_syscall_64+0x55/0xb0 [ 399.021620][ C1] ? clear_bhb_loop+0x40/0x90 [ 399.021639][ C1] ? clear_bhb_loop+0x40/0x90 [ 399.021660][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 399.021680][ C1] RIP: 0033:0x7fcb4ab9e159 [ 399.021692][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 399.021705][ C1] RSP: 002b:00007fcb4b9d7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 399.021720][ C1] RAX: ffffffffffffffda RBX: 00007fcb4ae26090 RCX: 00007fcb4ab9e159 [ 399.021732][ C1] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 399.021742][ C1] RBP: 00007fcb4ac3506b R08: 0000000000000000 R09: 0000000000000000 [ 399.021752][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 399.021762][ C1] R13: 00007fcb4ae26128 R14: 00007fcb4ae26090 R15: 00007ffed83d7e28 [ 399.021779][ C1] [ 399.022593][T13723] netlink: 'syz.0.2755': attribute type 33 has an invalid length. [ 399.880190][T13723] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2755'.