last executing test programs: 6.65204341s ago: executing program 2 (id=2304): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x6, 0xffffffffffffffff, 0xb) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000040)={'sit0\x00', @local}) bpf$MAP_CREATE(0x0, 0x0, 0x48) close(0x3) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0xd, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r1, 0x18000000000002a0, 0xb, 0x0, &(0x7f0000000280)="9e36d448b388dd965f7a33", 0x0, 0x5, 0xe8030000, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'sit0\x00', @random="4f33e363a4b1"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) close(0xffffffffffffffff) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) recvmsg$unix(r6, 0x0, 0x0) setsockopt$sock_attach_bpf(r5, 0x84, 0x6e, &(0x7f0000000000), 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000180)={r3}) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371600000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000004c0)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe70a10a000600014002020c600e41b0000900ac000a0514000000160012000200ff150048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71ee5667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x8000) 3.901392857s ago: executing program 2 (id=2326): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000002540)=ANY=[@ANYBLOB="611534000000000061134c0000000000bfa000000000000007000000080000002d0301000000000095000000000000006916000000000000bf6700000000000035060700f0ff0f006706000002000000160300000ee60060bf050000000000000f650000000000006507f9ff01000000070700004ddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd399703cac4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44221b235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f674629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43ea0ffb567b40407d000000210000000000000000005f37d8703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5480a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba90000000000000000fffb0000000082fb0d3cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4f6e9cc54db6c7205a6b068fff496d2da7d6327f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6106f117b062df67d3a6473265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db89da3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f815f8989d78854ca4d3116dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0453bedf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a57ff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee15620789c524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2b4dc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca87ddd9d064e081383409ed2912c811ae63f03212a5331c2a4ead000000000000000000005574d074fa7e93447a88c0fbab48660aae7cdf367ef0e4538279b6113de5b94e1056f443305145c9"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb}, [@call={0x85, 0x0, 0x0, 0xbc}]}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%pK \x00'}, 0x20) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0xdd86, 0x2c}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000080)='b', 0x28}], 0x1}, 0x0) perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x342, 0x100, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r3, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x1c, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x14}, 0x80d1) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4e}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1e00000002000000070000000500000020040200", @ANYRES32=r1, @ANYBLOB='\t\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000020000000000000000000000000008000000000000000000"], 0x50) 3.80808733s ago: executing program 3 (id=2329): r0 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x23, &(0x7f0000000000), 0x8) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'pimreg0\x00', 0x1}) ioctl$TUNSETOFFLOAD(r1, 0x400454c9, 0xba98575a95aeb70d) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa6820000}, 0xfff5) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3, 0x9}, 0x0, 0x10, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa88"], 0xfdef) (async) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f00000001c0)={0x2, 0x4e24, @empty}, 0x10, 0x0}, 0x3000c085) socket$kcm(0x2, 0x200000000000001, 0x106) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x11209, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socket$kcm(0x29, 0x5, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x14, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lirc_mode2=0x10, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x6}, 0x8}, 0x94) r3 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, 0x0, 0x0) (async) r4 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43) (async) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[], 0x101d0) (async) r5 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000008c0), 0x43) (async) r6 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f00000008c0), 0x43) (async) write$cgroup_subtree(r5, &(0x7f00000001c0)=ANY=[], 0x101d0) (async) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, 0x0, 0x0) syz_clone(0x630c0700, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x12cd) (async) close(0x3) 3.731790231s ago: executing program 0 (id=2330): r0 = socket$kcm(0x2, 0x3, 0x2) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x8, 0x0, 0x4000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) socket$kcm(0x21, 0x2, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d33, 0x8015, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x500, 0x1000000, 0x0, 0x0, 0x10, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair(0x2b, 0x80000, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="0600"}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) ioctl$PERF_EVENT_IOC_RESET(r3, 0x2403, 0x5ae) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x15, 0x5, 0x0, &(0x7f0000000500)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) r5 = socket$kcm(0x23, 0x5, 0x0) sendmsg$kcm(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x10004000) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89ed, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) r8 = openat$cgroup_procs(r6, &(0x7f0000001a80)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f0000000380), 0x12) write$cgroup_int(r7, &(0x7f0000000040)=0x2d00, 0x1) sendmsg$inet(r0, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x11}, @remote}}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@generic={0x44, 0xc, "09f00008ea6e19000000"}]}}}], 0x40}, 0x20002880) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="06000000040000000800000007"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000018110000", @ANYRES32=0x0, @ANYRESOCT=r1], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r9}, 0xc) getpid() 3.30009971s ago: executing program 3 (id=2332): openat$tun(0xffffffffffffff9c, 0x0, 0x900, 0x0) r0 = socket$kcm(0x1e, 0x4, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x200000000000, 0x80420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x6, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_subtree(r1, 0x0, 0x6a) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[], 0xfdef) socket$kcm(0x10, 0x2, 0x0) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001780)={&(0x7f00000003c0)=@tipc=@nameseq={0x1e, 0x1, 0x1, {0x40, 0x4, 0x2}}, 0x80, 0x0}, 0x24008010) r4 = perf_event_open(&(0x7f00000001c0)={0x4, 0x80, 0x7, 0xfb, 0xff, 0x7, 0x0, 0x1, 0x4, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_bp={&(0x7f0000000180), 0xb}, 0x0, 0xffff, 0x0, 0x6, 0x4, 0x1, 0x25, 0x0, 0x0, 0x0, 0x61}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0xd, 0x3, 0x2, 0xd7, 0x0, 0x10001, 0x802f, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x2, @perf_config_ext={0x7, 0x168e}, 0x100, 0x8, 0x1, 0x5, 0x5, 0x7, 0x800, 0x0, 0x7, 0x0, 0x8}, 0xffffffffffffffff, 0x6, r4, 0x2) r5 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1c00000000000000100100000100000000000000000000001800000000000f001001000040000000aa80000000000000"], 0x30}, 0xfc40) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) 3.261741671s ago: executing program 1 (id=2333): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000680)={{r0, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f0000000400)='%ps \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x279, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="01000000040000000700000006"], 0x50) socket$kcm(0x10, 0x2, 0x0) r4 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800"/15], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r5, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6}, 0x94) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000640)=0xffffffffffffffff, 0x4) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=@base={0x15, 0x200, 0x325, 0x4, 0x40800, r1, 0xfa, '\x00', r6, r7, 0x1, 0x4, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x6, 0x1, &(0x7f0000000500)=@raw=[@generic={0x80, 0x5, 0xf, 0xb055, 0x10000}], &(0x7f0000000580)='GPL\x00', 0xa5d8, 0x6d, &(0x7f00000005c0)=""/109, 0x41100, 0x8, '\x00', r6, 0x25, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f00000006c0)={0x0, 0x3, 0xa13, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000780)=[r8, r0, r0, r3], 0x0, 0x10, 0x4}, 0x94) r9 = bpf$ITER_CREATE(0xb, 0x0, 0x0) close(r9) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x18, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, @fallback=0x27}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuacct.stat\x00', 0x26e1, 0x0) close(r10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000005c0)={r10, 0x58, &(0x7f0000000340)}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={r10, 0x58, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="0000000002000000000000000200000000000000c1ba9786d76edd2d486d30c2903651926bb39ff02ca4c563c4b6db83261b3c06dd9315db93a0c04527e963fd367231f108cba22282c9b29e74db410ef13569153f4c9b0acae4b044ef209c3d0f6fa581d51d342f000000000000000000003067a67d4a2e5c89b3e8fd115686145e4d6d157f011fd796765508c04863b4974e573d65b1ae4ad7711251ae2197efb422c1b6c9f3e44d0f63fd00d9c77073aeb33d1f7f18e51ec6253b0ba0289deb1094d33d1a87414ca444edb564e412ea4fa376fc8a6a2dbca94f9b84df1a6e3d5dd8229250800751c859437251ce31e61c415e5d", @ANYRES32, @ANYBLOB="0500"/20, @ANYRES32=r11, @ANYRES32=r10, @ANYBLOB="03000000050000000100"/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ac0)={0x6, 0x7, &(0x7f0000000880)=@framed={{0x18, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x80000001}, [@cb_func={0x18, 0x3, 0x4, 0x0, 0x3}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x5}]}, &(0x7f00000009c0)='GPL\x00', 0x174a, 0x0, 0x0, 0x41000, 0x73, '\x00', r11, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000a00)={0x8, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000a40)=[r4, r0, 0x1, r1, r0], &(0x7f0000000a80)=[{0x2, 0x1, 0x0, 0x4}, {0x1, 0x4, 0xc, 0xf}, {0x2, 0x3, 0xc, 0x3}, {0x3, 0x1, 0x3, 0x3}], 0x10, 0x4}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0x11, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.192166532s ago: executing program 4 (id=2334): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400000000000}, 0x0, 0x0, 0x0, 0x0, 0xf60}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x28) (async) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0xdd86, 0x2c}, 0x80, 0x0}, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) (async) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x4) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b26, &(0x7f0000000280)={'wlan1\x00', @random="26e9b28de000"}) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'sit0\x00', @local}) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'sit0\x00', @random="4f33e363a4b1"}) (async) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) (async) write$cgroup_devices(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="6120143a2a20776d00"], 0x9) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000840)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00"], 0xfdef) close(r1) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_clone(0x18000, &(0x7f0000000300)="fbe0dac3dccc001f952d6b60f2b3d19d1355fe866519c15b2f02154280dc44b947d5f7be200caf46838f8d86", 0x2c, &(0x7f0000000340), &(0x7f0000000380), &(0x7f0000000500)="042de0356869b02d2b4f50d3dc264f043e3a3654f1512d5e26d399dd6f0d9d9994bc09ebf96cf99b006c1d430dced150ef3b9260bb4f5af38b524a0415c72f218c3322956f882d2e99eca6d669fa20e8abd0ad3979d58171f22d24b05d68a643376d4894e6e8a54fb13d327054ee56d0a7f9676a22967eb6f5e2f7594300be276821cc5f351cc3f69f7254207e9ef3a4704d6bb48156f637c88b106f3142c2ac584fa84eba560a9ad5f7108200d71786b4de24d8393956483591c6a5810241a686adce692c507538796bc1e6b3efd0854f7a5383535778bb101afc287828437d0ad09d") (async) ioctl$TUNGETVNETLE(r1, 0x40107447, &(0x7f0000000180)) 3.151836063s ago: executing program 2 (id=2335): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="850020000000000018100000", @ANYRES32, @ANYBLOB="1700000000000000950000000000000045"], 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x5452, &(0x7f0000000180)={'syzkaller0\x00'}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) r0 = socket$kcm(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x44, &(0x7f0000000640), 0x4) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x0, 0x7fffffff, 0x2, 0x3cd, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, r1, 0x0, 0xffffffffffffffff, 0x2) syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0100, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x8d, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x480, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10}, 0x1000, 0xca, 0x0, 0x2, 0x0, 0x10, 0x8, 0x0, 0xfffffffe, 0x0, 0x80}, 0x0, 0x7, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4a380000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fcffffff850000002d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x11, 0x3, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) r4 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r4, 0x0, 0xc000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 3.024672766s ago: executing program 0 (id=2336): r0 = socket$kcm(0x2, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3c, &(0x7f0000000640), 0x4) (async, rerun: 32) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) (async, rerun: 32) socket$kcm(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f0000000100)}, 0x20) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x5c300, 0x0) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0xc2, 0x0, 0x0, 0x0, 0x84290, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x6}, 0x0, 0x0, 0x3, 0x0, 0x10002, 0x0, 0x4, 0x0, 0x1ff, 0x0, 0xa8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1f, 0x16, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, {}, {}, [@btf_id={0x18, 0xb, 0x3, 0x0, 0x1}, @map_val={0x18, 0x11, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x849}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x94) 3.010367686s ago: executing program 3 (id=2337): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x5, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYRES32=r1], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x4}, 0x8}, 0x94) r4 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, 0x0, 0x0) r5 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0x101d0) r6 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r7 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f00000008c0), 0x43) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[], 0x101d0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, 0x0, 0x0) syz_clone(0x630c0700, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x12cd) close(0x3) 2.876115359s ago: executing program 4 (id=2338): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r1, &(0x7f0000000000), 0xfdef) r2 = socket$kcm(0xa, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x2, &(0x7f0000000480)=ANY=[@ANYBLOB="850000008c00000006120000", @ANYRES32], &(0x7f0000000200)='syzkaller\x00'}, 0x94) setsockopt$sock_attach_bpf(r2, 0x29, 0x18, 0x0, 0x8f00) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000ac0)={0xffffffffffffffff, 0x20, &(0x7f0000000a80)={&(0x7f0000000900)=""/180, 0xb4, 0x0, &(0x7f00000009c0)=""/152, 0x98}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x40f00, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r4}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={r5, 0xe0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46, 0x0, 0x8, 0x0, 0x0}}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x5}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, r6, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x80) socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, &(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xdf, &(0x7f0000000140)=[{}], 0x8, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0xa5, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="03b846e808a83d964b0000000a000552e9dd0000", @ANYRES32=r3, @ANYBLOB="00000100"/20, @ANYRES32, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r3, 0xffffffffffffffff}, 0x4) close(r7) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000002100000000000000080000b7080000000000007b8af8ff00000000b708000035f500007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r9, 0x0, 0x10, 0x1, &(0x7f00000006c0)="051cf3b75a97acbf", &(0x7f0000000700)=""/8, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x1b) recvmsg$unix(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/79, 0xce80}], 0x300, 0x0, 0xc08e}, 0x0) 2.852814219s ago: executing program 1 (id=2339): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, 0x0, 0x5}, 0x94) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="5c00000012006b04000000d86e6c1d000a887ea6ea65670000000000000090f9c3dc90f8f41f8ecff32c6e020075e300250045586c8da718ad4b4460bc24eab55600000000000000bf9367b4fa51f60a64c9f4d4938037e786a6d0bd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x18, 0x7, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x2, @perf_bp={0x0, 0x4}, 0x21, 0x0, 0x0, 0x6, 0x1, 0x200, 0x0, 0x0, 0x0, 0x0, 0x7e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/user\x00') ioctl$TUNSETFILTEREBPF(r4, 0xb701, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000380)={0xffffffffffffffff, 0x2, 0x18}, 0xc) r5 = socket$kcm(0x1e, 0x5, 0x0) perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x800000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r5, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@id, 0x80, 0x0}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r6, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000040)}], 0x1, 0x0, 0x0, 0xc9e}, 0x0) 2.781694591s ago: executing program 0 (id=2340): socket$kcm(0xa, 0x3, 0x73) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)="7f92ada4", 0x0, 0x7ff, r0}, 0x38) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)}, 0x4000001) close(0x3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0xfffffffffffffffe, 0x5}, 0x51f5, 0x0, 0xfffffffc, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e000000040000000400000002"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000010000000000000900000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8df00000000bca2000000000000a6020000f8ffffffb7030000fffffff7b7040000000000008500000033000000850000000700000095", @ANYRESDEC], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r3, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63e3ed8e46dc3f2ddf33c9e9b986", 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500411a00000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000002c0)=r4, 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000700)="d80000001a0081044e81f782db4cb904021d08004f1e81f8d8150019001105142603600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aebfb0daa7b0cd39e4edbb57a5025ccca9e020000000000000040fad95667e006dcbd63951f215ce3bb9ad809d5e1cace81017f5b5cef443dc3ed0bffece0b42a9ecbee5de6ccd40dd6e4", 0xd8}], 0x1}, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000540), 0x4d4000, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000580)=@o_path={&(0x7f0000000280)='./file0\x00', r3, 0x4000, r5}, 0x18) 2.573931955s ago: executing program 0 (id=2341): socket$kcm(0xa, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0xf, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x104007, 0xac5d, 0x0, 0x0, 0x10001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x13, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c1300000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000048aa008085000000040000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000540)={r0}, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0700000004000000000100000400000020000000", @ANYRES32=0x1, @ANYBLOB="a0fb1bcf516a54e898fb96d2100000000000000000000000010000", @ANYRES32=0x0, @ANYBLOB], 0x50) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000203000000000000000000000b000050933cf13500e07d0009020000000000"], 0x0, 0x3e}, 0x20) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0) recvmsg(r4, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x120) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x890b, 0x0) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff58, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020027000b35d25a806f8c6394f90224fc602f1b01000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000010c0)={r3, 0xfffffffffffffd62, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0}}, 0x10) sendmsg$inet(r2, &(0x7f0000000000)={0x0, 0xffffffffffffffef, &(0x7f0000000040)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a076b876c1d0048007ea60864160af36504001a0038001d00", 0x28}, {&(0x7f00000000c0)="83d2ff5f00000080d2898a0cc6d6703b87eb28f77b09bc7e64f918fa3be4664d327d90424d5503002800"/52, 0x34}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000001280), 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r6) r7 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r7, &(0x7f00000014c0)={&(0x7f0000001540)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, 0x0}, 0x0) recvmsg(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000015c0)=""/4096, 0x1000}], 0x1}, 0x100) write$cgroup_devices(r6, &(0x7f00000005c0)=ANY=[], 0xfffffeff) write$cgroup_pid(r6, &(0x7f0000000540), 0x12) 2.573422985s ago: executing program 4 (id=2342): r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x8010}, 0x18) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x1a, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0xf}, {}, {}, [@map_idx={0x18, 0x0, 0x5, 0x0, 0x6}, @exit, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0xb}, @alu={0x4, 0x0, 0x7, 0x0, 0x7, 0x2, 0xfffffffffffffffc}, @map_idx={0x18, 0xe, 0x5, 0x0, 0x7}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='GPL\x00', 0xb2b4, 0x1e, &(0x7f00000001c0)=""/30, 0x41000, 0x30, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000240)={0x1, 0x8, 0x8000, 0x10}, 0x10, 0x0, 0x0, 0xa, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f00000002c0)=[{0x1, 0x3, 0xb, 0x4}, {0x1, 0x5, 0x9, 0xc}, {0x5, 0x4, 0xf, 0x7}, {0x0, 0x2, 0x10, 0xc}, {0x2, 0x5, 0x4, 0x7}, {0x5, 0x3, 0x10, 0x2}, {0x2, 0x4, 0x2, 0x9}, {0x0, 0x3, 0x5, 0x2}, {0x1, 0x4, 0xd, 0x9}, {0x5, 0x2, 0xe, 0x1}], 0x10, 0x3}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000540)={@cgroup, 0x7, 0x1, 0x48, &(0x7f0000000440)=[0x0], 0x1, 0x0, &(0x7f0000000480)=[0x0], &(0x7f00000004c0)=[0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000540)={@cgroup=0xffffffffffffffff, 0x7, 0x1, 0x48, &(0x7f0000000440)=[0x0], 0x1, 0x0, &(0x7f0000000480)=[0x0], &(0x7f00000004c0)=[0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0x6, 0x0, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x4}, 0x50) (async) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0x6, 0x0, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x4}, 0x50) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000580)={@map=r4, r0, 0x13, 0x2c, r1, @void, @void, @void, @value, r3}, 0x20) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000580)={@map=r4, r0, 0x13, 0x2c, r1, @void, @void, @void, @value, r3}, 0x20) r5 = syz_clone(0x10000, &(0x7f00000006c0)="426a573018fff8a9a39349f093cb004e85bf509cb580091b5556ed6abba9736498c92366843eae721b76ea7f900a4c8d4b92a17617465aa793cd2e283ce1457c13804338ac58d7e9edac54f2bbbed67ce4ddedd58824", 0x56, &(0x7f0000000740), &(0x7f0000000780), &(0x7f00000007c0)="f634b6a5a2a5895164256be737cf4295878ef4088396762ed7b92630801ec7876b89825b40e59e9f4048363be67acb5b3bca97e780d141ea778406083208a44dcab42549bee7f03c98329b18ed3d3fa57c6662b561acff5c50f34470819e8a0916cf0d7ec01ff4a971a5c1a46dd54edfc624d101c9dcce1b14095944ad3995ca9f73a33eb82a98903c56edd52fe1703760ef241b91a071b3efd5f9551929c87b62b7a3a1a3d28e5810c7e6cbc9e981d1721dd0456fe04179adbc7ccbec2f506b40ce2729fb58b4c30d194e67c0a2") perf_event_open(&(0x7f0000000900)={0x3, 0x80, 0x8, 0x5, 0x5, 0xbd, 0x0, 0x5c5, 0x10800, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x81, 0x2, @perf_bp={&(0x7f00000008c0), 0x8}, 0x481, 0x4, 0x0, 0x3, 0x9, 0xfffffff9, 0x7, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x2) (async) r6 = perf_event_open(&(0x7f0000000900)={0x3, 0x80, 0x8, 0x5, 0x5, 0xbd, 0x0, 0x5c5, 0x10800, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x81, 0x2, @perf_bp={&(0x7f00000008c0), 0x8}, 0x481, 0x4, 0x0, 0x3, 0x9, 0xfffffff9, 0x7, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0x2, 0x81, 0xe, 0x3, 0x0, 0x1e, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7, 0x4, @perf_config_ext={0xffffffffffffffff, 0x1}, 0x100, 0x667, 0x1000, 0x1, 0x80000000, 0x1, 0x7f, 0x0, 0x80000000, 0x0, 0x28}, r5, 0xc, r6, 0xa) (async) r7 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0x2, 0x81, 0xe, 0x3, 0x0, 0x1e, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7, 0x4, @perf_config_ext={0xffffffffffffffff, 0x1}, 0x100, 0x667, 0x1000, 0x1, 0x80000000, 0x1, 0x7f, 0x0, 0x80000000, 0x0, 0x28}, r5, 0xc, r6, 0xa) syz_clone(0x400, &(0x7f0000000a00)="54a922c802bc8834631e2b283adb126a3d0b06281ccf5df4effd77a04280f17bdc81142a7e853e949b3878bcde3b8f28382d3e65f342cd3c99970deec7b2226f0899962e618f66593443a4e7afa41ae92e00e9a7b13fd2a82028ac678192402f598b4647301102bb8a632497ebe6e4d6e86fef5ab382566de251c24a8823ef4512143ef0f1531d9b", 0x88, &(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40)="5adeb514d79e9f4940c4f158dd4e0fb37e1f868d6324ad7290f2a1f3d3d1aa799f423c78afb32956f14f85d364c3bb1337ece8b5e3002b8ff903b751e136a2edda54cac4f0135b1a6a0d4cddde402b05581e7b18fac3a2a05cc6dd3fc32563798242f6cc759e499bcc2d0875d1db1cd812ca4494982cff802301e0cf48bf230af49403534203fdc340b1447c778d4c5d0920d36e5637a9f32b26dc5406de6d681232b42e277240766462abb7c9c7a10cb6086c214b01d3f970129da6fe7e601a76154d7d0e4b49aeca2b7fac21d570f6c619561d64b2297acf6f2f80aa752384fc6ab426a9671a399f7d2f") (async) r8 = syz_clone(0x400, &(0x7f0000000a00)="54a922c802bc8834631e2b283adb126a3d0b06281ccf5df4effd77a04280f17bdc81142a7e853e949b3878bcde3b8f28382d3e65f342cd3c99970deec7b2226f0899962e618f66593443a4e7afa41ae92e00e9a7b13fd2a82028ac678192402f598b4647301102bb8a632497ebe6e4d6e86fef5ab382566de251c24a8823ef4512143ef0f1531d9b", 0x88, &(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40)="5adeb514d79e9f4940c4f158dd4e0fb37e1f868d6324ad7290f2a1f3d3d1aa799f423c78afb32956f14f85d364c3bb1337ece8b5e3002b8ff903b751e136a2edda54cac4f0135b1a6a0d4cddde402b05581e7b18fac3a2a05cc6dd3fc32563798242f6cc759e499bcc2d0875d1db1cd812ca4494982cff802301e0cf48bf230af49403534203fdc340b1447c778d4c5d0920d36e5637a9f32b26dc5406de6d681232b42e277240766462abb7c9c7a10cb6086c214b01d3f970129da6fe7e601a76154d7d0e4b49aeca2b7fac21d570f6c619561d64b2297acf6f2f80aa752384fc6ab426a9671a399f7d2f") r9 = perf_event_open(&(0x7f0000000980)={0x0, 0x80, 0x4, 0x5, 0x5, 0x7, 0x0, 0x4, 0x21000, 0x8, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x2, @perf_config_ext={0x7fff, 0x9}, 0x4018, 0x4, 0x9, 0x8, 0x5, 0x7ff, 0x15f, 0x0, 0x401, 0x0, 0x100000000}, r8, 0xa, r7, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000cc0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000c40), &(0x7f0000000c80)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000d80)={{0x1}, &(0x7f0000000d00), &(0x7f0000000d40)=r0}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000d80)={{0x1, 0xffffffffffffffff}, &(0x7f0000000d00), &(0x7f0000000d40)=r0}, 0x20) r12 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001ec0), 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002200)={r1, 0xe0, &(0x7f0000002100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001f40)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f0000001f80)=[0x0], &(0x7f0000001fc0)=[0x0, 0x0, 0x0], 0x0, 0xb4, &(0x7f0000002000)=[{}], 0x8, 0x10, &(0x7f0000002040), &(0x7f0000002080), 0x8, 0x88, 0x8, 0x8, &(0x7f00000020c0)}}, 0x10) r15 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x2}, 0x50) r16 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002340)=@bpf_lsm={0x1d, 0x13, &(0x7f0000000dc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r10}}, @generic={0x3, 0x3, 0xc, 0xc, 0x1000}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r11}}, @alu={0x7, 0x1, 0x4, 0xb, 0x8, 0xffffffffffffffff, 0x8}, @map_val={0x18, 0xb, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x4}]}, &(0x7f0000000e80)='syzkaller\x00', 0xe4, 0x1000, &(0x7f0000000ec0)=""/4096, 0x40f00, 0x2, '\x00', 0x0, 0x1b, r12, 0x8, &(0x7f0000001f00)={0x8, 0x1}, 0x8, 0x10, 0x0, 0x0, r14, 0x0, 0x2, &(0x7f00000022c0)=[r4, r4, r4, r15, r4], &(0x7f0000002300)=[{0x2, 0x4, 0x0, 0x8}, {0x4, 0x3, 0xa, 0x4}], 0x10, 0x100}, 0x94) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000002400)={0x5, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000002440)=r17, 0x4) openat$cgroup_procs(r2, &(0x7f0000002480)='cgroup.procs\x00', 0x2, 0x0) (async) r18 = openat$cgroup_procs(r2, &(0x7f0000002480)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r18, &(0x7f00000024c0)=r8, 0x12) write$cgroup_pid(r18, &(0x7f0000002500)=r8, 0x12) bpf$OBJ_GET_PROG(0x7, &(0x7f0000002580)=@o_path={&(0x7f0000002540)='./file0\x00', 0x0, 0x0, r1}, 0x18) perf_event_open(&(0x7f0000002600)={0x6, 0x80, 0x4, 0x3, 0x6, 0x7f, 0x0, 0x3, 0x10, 0x4, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={&(0x7f00000025c0), 0x2}, 0x2000, 0xfab00000000000, 0x2, 0x3, 0x2, 0x1, 0x5, 0x0, 0x6e, 0x0, 0xaf}, r5, 0xf, r6, 0x0) (async) r19 = perf_event_open(&(0x7f0000002600)={0x6, 0x80, 0x4, 0x3, 0x6, 0x7f, 0x0, 0x3, 0x10, 0x4, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={&(0x7f00000025c0), 0x2}, 0x2000, 0xfab00000000000, 0x2, 0x3, 0x2, 0x1, 0x5, 0x0, 0x6e, 0x0, 0xaf}, r5, 0xf, r6, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000026c0)={r8, r19, 0x0, 0x1, &(0x7f0000002680)='\x00'}, 0x30) ioctl$PERF_EVENT_IOC_RESET(r9, 0x2403, 0x7) r20 = syz_clone(0x2800200, &(0x7f00000027c0)="6dbe39544af3a3443f70281f4b5b021e8724fa8a16ea3606ce218425fd68321912c7a71d18dcc1359e38a3b94adbb5c6544b07cfc093f799a4800c21297dc71b83f353b326c9a02f7b2c53146c6384502cd16a", 0x53, &(0x7f0000002840), &(0x7f0000002880), &(0x7f00000028c0)="4754b42700f8d36991d764049c9392ca3ffb0bc6ef2fe2cb8a5fe771f62e41e433388f48126b51") perf_event_open(&(0x7f0000002740)={0x3, 0x80, 0x1, 0xdd, 0x9, 0x89, 0x0, 0x8c, 0x20, 0xc, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000002700), 0xe}, 0xa151, 0x6, 0xfffffff1, 0x7, 0x5, 0xffffffca, 0x9, 0x0, 0x101, 0x0, 0x5}, r20, 0xf, r19, 0x0) r21 = socket$kcm(0x29, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000002900)=@base={0xd, 0x0, 0x7ff, 0x9e5e, 0x1600, 0x1, 0x9, '\x00', r13, r12, 0x3, 0x0, 0x5}, 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000002900)=@base={0xd, 0x0, 0x7ff, 0x9e5e, 0x1600, 0x1, 0x9, '\x00', r13, r12, 0x3, 0x0, 0x5}, 0x50) setsockopt$sock_attach_bpf(r21, 0x1, 0x32, &(0x7f0000002980)=r16, 0x4) 2.570250045s ago: executing program 1 (id=2343): r0 = gettid() (async) r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0xfffffffffffdffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x80000000, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) (async, rerun: 64) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) (rerun: 64) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) (async, rerun: 64) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000680)={r0, r1, 0x0, 0x1, &(0x7f0000000200)='\x00'}, 0x30) (async, rerun: 64) perf_event_open(&(0x7f0000000080)={0x2, 0xd2, 0xe3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba, 0x0, 0x0, 0x3, 0xb}, 0x0, 0xffffffffffffffff, r1, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.empty_time\x00', 0x26e1, 0x0) close(r3) socket$kcm(0x23, 0x2, 0x0) (async) ioctl$SIOCSIFHWADDR(r3, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="010000000008"}) 2.32916785s ago: executing program 1 (id=2344): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xd000000000000000}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) (async) r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xd000000000000000}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21bef5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d55545a34effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f94306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a835701bea8240399c56ce8f58df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b262341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51427a7f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa08ad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282bffff2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae05334d5a44a020000001c0d882a564d74a7c72bf9a2152b261e58fea6d2f93589cfe261dc0410b5ccc92a5a0eab327a33431d62d2b7c75ce654d556c9e1817c1abca762ab53d40da51560351b673363652e1ecb56cfe4a746a45ab13c6014e9f361ab687d1cd1795ce9e05c817b83d76046bdb3709de5df7499a02d2f636a454b85b987580ada025d83bd7b8df28a540d5ec5537942e79f2f1ab25ea5f563bc77e4f9468bd309469880c7e34150ca886d1f9ac2f7e82dbe296c877d925c38c54cc8137b29028854b6bd57ca893927c331300e16aba792289e135589d93302fc37c73c303e383cdf8ef3f6d6265fe5ee01759d24027475c8901039a898582022bc95992b86dce0710887c8a625d9cbb897bdbfaf49a3f642a169827a9bae4fcfa5212461db000000000000e6ed75ca8fcda7ef3ee336189fef3b3ffb9f38fefc5ff39c4e69e3fa1f8b10ee97123e99b61eba065b1ad67530e7c4f11f9da7ae000002000000610101ad7f79cb9bbf64a0fc109f49fe8799fe266e2ccac80fefe750151f5ddfe51833ec65ece70e07ce8ab5d97db47da8f80000664dc0b86ae2b3ff9d4e220752a6b2f3ea9f793612386496dca5af7b8952aafa796ea7b156d19612297c63bb20e1e0469f7615f67a9218cbace38f5236821314f76302b98afa93044b83989339ca10e6ae30e70e17a82f03e915b8425e8e7a91614306d2ae0bc3550d856f2d7293672b5673d264fc886b0c8bdf436a0fcd21bf9da7bdca98e34cd6e59b0a7ce4ba1b466561aaa35448dff47bb1d7df23d467689a6669e4300d5acf12e4d0b35abf91569f605b2f6df0d861"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x29, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d08007b490d4f1e81f8d815000100ff80000000000000080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1701000000000000180000000000000d04000000000000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x9c, &(0x7f0000000000)=""/156}, 0x80) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1701000000000000180000000000000d04000000000000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x9c, &(0x7f0000000000)=""/156}, 0x80) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time\x00', 0x26e1, 0x0) socket$kcm(0xa, 0x2, 0x0) (async) r6 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x3e, &(0x7f0000000000)=r5, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000e80)={r3, 0xf4, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80), ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4000000000000102, &(0x7f0000001000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000c40), 0x0, 0x7b, &(0x7f0000000c80)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000cc0), &(0x7f0000000d00), 0x8, 0xbd, 0x8, 0x8, &(0x7f0000000d40)}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000e80)={r3, 0xf4, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80), ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4000000000000102, &(0x7f0000001000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000c40), 0x0, 0x7b, &(0x7f0000000c80)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000cc0), &(0x7f0000000d00), 0x8, 0xbd, 0x8, 0x8, &(0x7f0000000d40)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x3, 0xf, &(0x7f0000000a80)=ANY=[@ANYBLOB="180000000104000000000000080000006592fffff0ffffff18010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000d00000085000000060000001800000003000000000000008000000100200000030000009500000000000000"], &(0x7f0000000b00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, @fallback=0x14, r5, 0x8, &(0x7f0000000b40)={0x4, 0x5}, 0x8, 0x10, 0x0, 0x0, r7, r1, 0x5, 0x0, &(0x7f0000000ec0)=[{0x4, 0x4, 0x8, 0x8}, {0x3, 0x1, 0xd, 0x7}, {0x5, 0x2, 0x10}, {0x0, 0x5, 0x7, 0xa}, {0x1, 0x5, 0x0, 0x9}], 0x10, 0x8}, 0x94) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x4d, 0x0, 0x2}, {0x30, 0x3}]}) 1.844037251s ago: executing program 2 (id=2345): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000680)={{r0}, &(0x7f0000000280), &(0x7f0000000400)='%ps \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x279, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="01000000040000000700000006"], 0x50) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800"/15], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r2 = bpf$ITER_CREATE(0xb, 0x0, 0x0) close(r2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x18, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, @fallback=0x27}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0x11, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (fail_nth: 7) 1.800817792s ago: executing program 3 (id=2346): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@cgroup=r0, 0x1, 0x0, 0xfffffffa, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0]}, 0x40) r1 = syz_clone(0x10052000, &(0x7f0000000180)="fd02fbc3d00e79174f3248b3266333479236914c398c6fcff61a808a5f3c2383d5b02d9d08222cf734e09489a2cdb7000bcdc20c6053d54f41e9218a4059f24bfa8158a465ce7b5896d6e2d15a0099c8ab6bf259e31a79a877ddf11e1510a27415db98225e6c9670df4d", 0x6a, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)="5adfaea55efba1593d6bb10b523baac4562a707f9835c892358440480cfc8a0eb3bbacdfe31829d3b1a1745f18f146428b1b3cc61e10") r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000005c0)={0x1, 0x58, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x18, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@jmp={0x5, 0x0, 0xc, 0x7, 0x7, 0xffffffffffffffc0, 0x8}, @map_fd={0x18, 0x6, 0x1, 0x0, r2}, @generic={0x9, 0x7, 0xf, 0xd, 0x5}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000004c0)='GPL\x00', 0x2, 0x10, &(0x7f0000000500)=""/16, 0x0, 0x48, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000600)=[{0x2, 0x3, 0x4, 0x2}, {0x0, 0x2, 0xb}, {0x0, 0x5, 0xb, 0xa}, {0x0, 0x4, 0x10, 0x8}, {0x5, 0x1, 0x1}], 0x10, 0x6}, 0x94) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001a00)={&(0x7f0000001840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc0, 0xc0, 0x8, [@union={0xf, 0x4, 0x0, 0x5, 0x0, 0x1, [{0x1, 0x5, 0x8000}, {0x5, 0x4, 0x81}, {0xa, 0x0, 0x3}, {0x10, 0x3, 0x5}]}, @fwd={0x2}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0x7, 0x4}, {0x5, 0x1}, {0xc}, {0xd, 0x5}, {0x9}]}, @const={0xc, 0x0, 0x0, 0xa, 0x4}, @typedef={0x5}, @enum={0xf, 0x4, 0x0, 0x6, 0x4, [{0x1, 0x4}, {0xf, 0xcb34}, {0xf, 0x100}, {0xc}]}]}, {0x0, [0x0, 0x30, 0x0, 0x2e, 0x2e, 0x41]}}, &(0x7f0000001940)=""/173, 0xe0, 0xad, 0x0, 0xfffffffd}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001ac0)={0x6, 0x18, &(0x7f0000000740)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x191}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@map_idx_val={0x18, 0x3, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0xfffffff9}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x7}, @call={0x85, 0x0, 0x0, 0x60}, @map_idx={0x18, 0x0, 0x5, 0x0, 0xb}, @map_fd={0x18, 0x4, 0x1, 0x0, r3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000800)='syzkaller\x00', 0xff, 0x1000, &(0x7f0000000840)=""/4096, 0x41000, 0x30, '\x00', 0x0, 0x25, r5, 0x8, &(0x7f0000001a40)={0x8, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001a80)=[r2, r2, 0xffffffffffffffff], 0x0, 0x10, 0x5}, 0x94) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001d00)={r3, &(0x7f0000001b80)="e51ebff91a9325352f4e4b171b179b5bff1f79127804f96f8af2846bb17f81c26898e0127463830c8543c2e759b6b8fa236dffc353875a573dd4c21c5b728d3477560c229689fbb92ebc30031cba60751d442d2d6b9ed17d8d6e26c1ab3aa4db855630d13d30cf3ae58f6f2f785ff380ccdce23e3416c431aef30444bfbb64241905a05767b49950d748face1933c7af37d50084bab73eccf955ba1d114c02ca52a21b3106e69f4540550f92828de4d7f4c0edab9b0f586efa1618ac921eac5b79e8e1245fd00a34b5d8fde7f6a3463db93a", &(0x7f0000001c80)=""/80}, 0x20) socket$kcm(0x29, 0x5, 0x0) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000001d40), 0x2, 0x0) r6 = socket$kcm(0x29, 0x7, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000001d80), 0x20000, 0x0) ioctl$TUNGETIFF(r7, 0x800454d2, &(0x7f0000001dc0)={'sit0\x00'}) sendmsg$sock(r6, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000001e00)="ae9a5c913eb91bf44ed90fd488498db48745f7be2706807d1d13b954e49882c582a4732ad69e143bf8e007a4113c144e4a558e0d10d27bbad5f3e31aae80b8de2287aca4fdab558dda8de7125fa3d72afaeddc529c1f2b68dc967dbcc4ec29dd07a79ea192e24fcbb7f44252914a516794f37cc2ff557cb11757014d2fb574d0bc9f74a4189e8c7c2e15dc55e7121f746ada504917c25b2761a540becdf590d02d3d0db44a7a052f119f7ad62eb24858711c64b3ec5e169bf12d9ad6236a5db35b262446d3beed109b4d4ece4fa1ec7cad3fbe139b6eb42d6ecea16eefa90fc915f5f49b51af176535c5a4e9da7e", 0xee}, {&(0x7f0000001f00)="036418df8d8e1387863206a9207ad22ad533cf56e9c82aa0188d168de3a06265bbfd1a83f21ae71585f2291b5b2fab7381608ae35d36cec9342ed1f04098a23f941d7823462907c063928726d4a5ad2e5cc9f2911c57bf7dbd4d99d3a8a326dee5da33ff55e92a4ff6e8599f931b2e371d84664d564ee798e0b2371d", 0x7c}, {&(0x7f0000001f80)="0b35133d731070bef179a07df76dd0a7986631ad92393b0c2146d06141b08251b2fad38b684a4c7f8172d498ba0c2b2415c24104e2679aa32130bf74857d2d66d1b1f8c5f217735bea2eb0c7d9f905eb74a2234a53319e6cab84af27bafb5e1da006c2349e42b9042847e06d7aaa", 0x6e}], 0x3}, 0x8000) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000021c0)={&(0x7f0000002080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@typedef={0xb, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x30, 0x5f, 0x30, 0x7e]}}, &(0x7f00000020c0)=""/237, 0x2a, 0xed, 0x1, 0x258a}, 0x28) r9 = perf_event_open$cgroup(&(0x7f00000022c0)={0x0, 0x80, 0x6, 0x3, 0x5, 0x55, 0x0, 0xd0a, 0xc0b80, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x7958, 0x100000001}, 0x10004, 0x6, 0x40, 0x0, 0xf, 0xfffffffa, 0x8, 0x0, 0x4, 0x0, 0x1}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r10 = perf_event_open(&(0x7f0000002240)={0x4, 0x80, 0x42, 0x0, 0x4, 0x32, 0x0, 0xff, 0x2000, 0xf, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x80000001, 0x1, @perf_bp={&(0x7f0000002200), 0xb}, 0x10220, 0x3, 0x7, 0x0, 0xc, 0xb, 0x7f, 0x0, 0x10001, 0x0, 0x3ff}, r1, 0xf, r9, 0x8) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000002340)=@base={0x1a, 0x2, 0x8, 0x60000, 0x10, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5}, 0x50) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000002580)={r8, 0x20, &(0x7f0000002540)={&(0x7f00000023c0)=""/130, 0x82, 0x0, &(0x7f0000002480)=""/138, 0x8a}}, 0x10) write$cgroup_subtree(r11, &(0x7f00000025c0)={[{0x2b, 'memory'}, {0x6, 'freezer'}, {0x2d, 'devices'}, {0x2d, 'io'}, {0x2d, 'freezer'}, {0x0, 'cpuacct'}, {0x2d, 'hugetlb'}, {0x2b, 'hugetlb'}, {0x2b, 'perf_event'}]}, 0x4e) r12 = perf_event_open$cgroup(&(0x7f0000002640)={0x0, 0x80, 0x2, 0x95, 0x3, 0x5, 0x0, 0xffff, 0x4, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0xdda3, 0x1, @perf_config_ext={0xf, 0x101}, 0x200, 0xff, 0x5, 0x4, 0x1, 0x3, 0x1, 0x0, 0x8, 0x0, 0x100000000}, r0, 0xa, r10, 0x8) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000002700)={r1, r12, 0x0, 0x3, &(0x7f00000026c0)='#]\x00'}, 0x30) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002740)={0x1b, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x2}, 0x50) socket$kcm(0x29, 0x7, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000028c0)={@cgroup=r0, 0xd, 0x0, 0xbad, &(0x7f00000027c0)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000002800)=[0x0, 0x0, 0x0], &(0x7f0000002840)=[0x0], &(0x7f0000002880)=[0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000002900), 0x2, 0x0) close(r7) socket$kcm(0x29, 0x5, 0x0) 1.728634343s ago: executing program 4 (id=2347): openat$tun(0xffffffffffffff9c, 0x0, 0x900, 0x0) r0 = socket$kcm(0x1e, 0x4, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x200000000000, 0x80420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x6, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000140)=ANY=[], 0x6a) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[], 0xfdef) socket$kcm(0x10, 0x2, 0x0) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001780)={&(0x7f00000003c0)=@tipc=@nameseq={0x1e, 0x1, 0x1, {0x40, 0x4, 0x2}}, 0x80, 0x0}, 0x24008010) r4 = perf_event_open(&(0x7f00000001c0)={0x4, 0x80, 0x7, 0xfb, 0xff, 0x7, 0x0, 0x1, 0x4, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_bp={&(0x7f0000000180), 0xb}, 0x0, 0xffff, 0x0, 0x6, 0x4, 0x1, 0x25, 0x0, 0x0, 0x0, 0x61}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0xd, 0x3, 0x2, 0xd7, 0x0, 0x10001, 0x802f, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x2, @perf_config_ext={0x7, 0x168e}, 0x100, 0x8, 0x1, 0x5, 0x5, 0x7, 0x800, 0x0, 0x7, 0x0, 0x8}, 0xffffffffffffffff, 0x6, r4, 0x2) r5 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1c00000000000000100100000100000000000000000000001800000000000f001001000040000000aa80000000000000"], 0x30}, 0xfc40) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) 1.600202046s ago: executing program 1 (id=2348): perf_event_open(&(0x7f0000000a80)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x8, 0x0, 0x4000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) socketpair(0x22, 0x2, 0x22, &(0x7f00000006c0)) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYBLOB="02000a"], 0x9a) write$cgroup_pressure(r2, &(0x7f0000000000)={'full', 0x20, 0x5, 0x20, 0x9}, 0x2f) r3 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0x12, &(0x7f00000000c0)=r3, 0x4) 1.227643374s ago: executing program 1 (id=2349): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x9, 0x4, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, @perf_config_ext, 0x106080, 0x2, 0x4000000, 0x1}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{}, 0x0, 0x0}, 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x19, &(0x7f0000000400)=ANY=[@ANYBLOB="180000008f000000000000000b00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000086000000bf0900000000000055090100000000009500000000000000bd0a060000000000d500f4ff010003d018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000010000006500000006000000bf91000000000000b702000003000000850000002a000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0x1000, &(0x7f0000000cc0)=""/4096, 0x41100, 0x2f}, 0x21) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB], 0x0, 0x42}, 0x28) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x94) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0xc7b, 0x7fffffffffffffff}, 0x11508d, 0x89, 0x0, 0x5, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000440)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x5) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={0x0}, 0x4400, 0x2, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffd}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2000000, r3, 0x4}, 0x38) 1.064575257s ago: executing program 4 (id=2350): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000680)={{r0}, &(0x7f0000000280), &(0x7f0000000400)='%ps \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x279, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba, 0x0, 0x64317119, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r3}, &(0x7f00000007c0), &(0x7f0000000640)=r2}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00'}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="01000000040000000700000006"], 0x50) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800"/15], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r4 = bpf$ITER_CREATE(0xb, 0x0, 0x0) close(r4) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x18, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, @fallback=0x27}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0x11, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 988.182089ms ago: executing program 3 (id=2351): socket$kcm(0xa, 0x3, 0x73) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)="7f92ada4", 0x0, 0x7ff, r0}, 0x38) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)}, 0x4000001) close(0x3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0xfffffffffffffffe, 0x5}, 0x51f5, 0x0, 0xfffffffc, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e000000040000000400000002"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000010000000000000900000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8df00000000bca2000000000000a6020000f8ffffffb7030000fffffff7b7040000000000008500000033000000850000000700000095", @ANYRESDEC], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r3, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63e3ed8e46dc3f2ddf33c9e9b986", 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500411a00000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000002c0)=r4, 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000700)="d80000001a0081044e81f782db4cb904021d08004f1e81f8d8150019001105142603600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aebfb0daa7b0cd39e4edbb57a5025ccca9e020000000000000040fad95667e006dcbd63951f215ce3bb9ad809d5e1cace81017f5b5cef443dc3ed0bffece0b42a9ecbee5de6ccd40dd6e4", 0xd8}], 0x1}, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000540), 0x4d4000, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000580)=@o_path={&(0x7f0000000280)='./file0\x00', r3, 0x4000, r5}, 0x18) 879.700241ms ago: executing program 0 (id=2352): bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000001540)=""/155}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x27}, 0x94) (async, rerun: 32) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth0_vlan\x00', 0x800}) (async, rerun: 32) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002580)={r1, 0x0, 0x2a, 0x22, &(0x7f0000000280)="dc012a745b426185a59474039a018ea754da2942cdb41b00fe1d97274bfc2b2f51892da89c027fd7ba32", &(0x7f0000000300)=""/34, 0x5, 0x0, 0x15, 0x1000, &(0x7f0000000340)="ad908b9fcea6f54c697e14cc7b760694e0836c50bf", &(0x7f0000001580)="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", 0x0, 0x0, 0x101}, 0x50) (async) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000003e00), 0x4) (async, rerun: 32) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000004140)={r1, 0xe0, &(0x7f0000004040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000003e80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000003ec0)=[0x0, 0x0, 0x0], 0x0, 0x0, 0x60, &(0x7f0000003f40)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000003f80), 0x0, 0x0, 0xec, 0x8, 0x8, &(0x7f0000004000)}}, 0x10) (rerun: 32) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000005480)={0xe, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000015c5000000000000010000007f6902000400000095000000000000001c0b3b1d5b4a1e4eb44d0d504fce65bdfc9c"], &(0x7f0000000380)='GPL\x00', 0x9823, 0x0, 0x0, 0x40f00, 0x45, '\x00', 0x0, @sk_skb=0x26, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r3, 0xffffffffffffffff, 0x5, 0x0, &(0x7f0000005400)=[{0x2, 0x5, 0x3, 0xb}, {0x2, 0x3, 0x7, 0x6}, {0x1, 0x1, 0xd, 0x8}, {0x2, 0x2, 0x6, 0xa}, {0x1, 0x1, 0x9, 0x7}], 0x10, 0x55d7}, 0x94) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=r3, 0x4) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r5 = socket$kcm(0x2a, 0x7, 0x0) sendmsg$kcm(r5, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0) gettid() recvmsg(r5, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x40002182) (async, rerun: 32) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000500"/28], 0x48) (rerun: 32) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0x2e, &(0x7f0000000c40)=ANY=[@ANYBLOB="18000000001000000000000000feffff18110000", @ANYRES8, @ANYBLOB="0000000000000000b702000014000000b703"], 0x0}, 0x90) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030017000b63d25a80648c2594f92e24fc60100c02", 0x17}], 0x1}, 0x0) (async) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) write$cgroup_subtree(r7, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) r8 = socket$kcm(0x28, 0x5, 0x28) sendmsg$kcm(r8, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x10) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0d000000040000000400000003000000000000008b71a95b75927b9aadde617d7e915f7f041001a7e3cf3e847e22787b096ddbdf31ec9811cbcc5057532b3b5632cd1c330367fe60ff0e2a2569b78f15418812d8877700e7240f8c4e8af8f23e1c6df2b249ab52248cb764f60d2600674058c30bc627d6d6f6b09cedf716082f", @ANYRES32=r6, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="7a0af8ff75257075bfa100000000000007010000f9ffffffb702000005000000bf130000000000008500000006000000b7000000000000009500000000000000b2595285faa6ead0169191d54f8196217fc560e2fc91f6da4dad4fdc2eb1b257183fa3bcd48666d1ddd73f3047d248df061222193165274bc7f2382f6cda4bfdd45be583823c0f09601f3c1c65ee19ee875daf45006a4c4ea5e15b2f9618d547244a22000000000000db453620ce7243d1aebd00000000000000005839c77edf2d34b12cd48a0c20fb7dd843267e0331759f4ec6b5b0af58e604f4942eb613eff289026d5045ef76d7d864409eb2dcc718a09f4886afc26abba34635d0e8b54bc76be40d435aa8b5202db761014b1b999a12df6bee431a666100"/296], &(0x7f0000000100)='GPL\x00'}, 0x48) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x2800000002000000, 0xe, 0x54, &(0x7f0000000640)="4600408c5c385df8a23fa535648e", &(0x7f0000000380)=""/84, 0x72fe, 0x4000000, 0xb9, 0x0, &(0x7f0000000680)="c23f1b492f1404ad2f25c40537c7e4b276df7b9cb2749d9e6ac4cec84c7c7e5614289fcb9cfe0152e7e812d008085a9b679ea84b9aa4d2c7b1459c8cace1c78e1172fcc7f15022962a96a014621b3bb1ad7770b9125a206ac741cfb6483916deaa19ef2ecd2b8f19f8541224f5b21d6bf6abca4506cfbf49402961b2d382d99cd7eea44978dadb192b162685309e7a570801230354de471327e143905cd377232da33b547f33dcc965018512fa52cf8d97d593cd4c5436bd97", &(0x7f0000000000), 0x1, 0x4}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x890b, 0x0) 762.346134ms ago: executing program 0 (id=2353): bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffcbf) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x5, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x20, 0x4, 0x0, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0xa, 0x2, 0x8, 0x9, 0x0, 0x6, 0x0, 0xc, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x2000, 0xff, 0x9, 0x5, 0x4, 0x145d, 0x1, 0x0, 0x3f8, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="06000000040000001810000089"], 0x48) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={0x0, &(0x7f0000000000)=""/103, &(0x7f0000000600), &(0x7f0000001b40), 0x80, r1, 0x0, 0x7}, 0x38) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200000084000000080000000100000080000000", @ANYRES32=r1, @ANYBLOB="0600"/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="00000000030000000500"/28], 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a40)={0xffffffffffffffff, 0xe0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000400), &(0x7f0000000440)=[0x0, 0x0], 0x0, 0x5a, &(0x7f0000000600)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000100), &(0x7f0000000680), 0x8, 0x10d8, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3}, 0x94) r4 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetlb.1GB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f0000000100)=r5, 0x4) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x1, '\x00', r3, r5, 0x4, 0x5, 0x2}, 0x50) 507.126479ms ago: executing program 2 (id=2354): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x3, [@struct={0x1, 0x1, 0x0, 0x4, 0x0, 0x4, [{0xc, 0x1, 0x80}]}, @ptr={0x1}, @int={0x3, 0x0, 0x0, 0x1, 0x0, 0x4d, 0x0, 0x22, 0x6}]}, {0x0, [0x0]}}, &(0x7f0000000100)=""/177, 0x4f, 0xb1, 0x1, 0x7}, 0x28) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x7, '\x00', 0x0, r0, 0x1, 0x4, 0x1}, 0x50) r2 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0xffffffffffffff4b, &(0x7f00000002c0)=[{&(0x7f0000000000)="600000004e007f049e", 0x9}, {&(0x7f00000008c0)="78cabf2dfb73fc0a7d0a0080f2dcb9fe06892544001100b8f9e6aaeb1ae2f6e8bcb5ee52dc06249798093c5102a1bca0b646a7ce904f6e6b788b3219c233e60ddc36024a99a63e729f9b06f96137c89d03234f008c5681", 0x57}], 0x2}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000600)={r2, 0x58, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x6, 0x2, &(0x7f0000000840)=ANY=[@ANYBLOB="180000000200000000000000000000007d360598bb17863048e0b90e13891e19ca2e0fdc393ea5390e21bd890123b66ca097af3453b3f2f9f3213ac85528cd1231fcf5e3096411db1fa0ab1574f57f376246cc17f623124283cd6b37226f6bf69a4a97868e43b5"], &(0x7f0000000640)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x28, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x84}, 0x94) r4 = bpf$ITER_CREATE(0x21, &(0x7f00000002c0), 0x8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x6, '\x00', r3, r4, 0x4, 0x5, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x5, &(0x7f0000000200)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x9, 0xffffffdd, 0xa}, [@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, r0, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x4, 0x20000000}, 0x10}, 0x94) 376.793142ms ago: executing program 3 (id=2355): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x208, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000008f000000000000000100000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000054000001b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000c3090000f1000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0x1003, &(0x7f0000003e80)=""/4099, 0x41100, 0x21}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000f0cd000000000000044e690085000000a000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000004c0)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000300), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x0) 143.353327ms ago: executing program 4 (id=2356): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0xb9a1}, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x80, 0x0, 0x0, 0x9, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000001400)="2704020001f328000600002fb96d9af706e105000000890600fbff44ee1611d4b8bf4a31accbe16ae77256da82f6184b8a34f9015c749412c35e2f5fb293d18b5f2538b8d523", 0x46}], 0x1}, 0x0) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2, 0x100}, 0x50) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0xe, &(0x7f0000001180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x3, 0x1, 0x0, r1}, @call={0x85, 0x0, 0x0, 0x12}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}]}, &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000200)="9e36d448d788dd965f7a33121800", 0x0, 0xfffffffe, 0xe8030000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x17, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000900000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002b20000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000000000008500000086000000bf91000000000000b7020000020000008500000084000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r5, &(0x7f0000000200)={&(0x7f0000000080)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000140)='\t', 0x1}], 0x1}, 0x24008051) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r5, 0x84, 0x10, &(0x7f0000000240)=r7, 0x8) ioctl$TUNSETDEBUG(r7, 0x400454c9, &(0x7f0000000540)=0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x80, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000234a1178dcf70cea9b0f06de3474e4a9d30bf57693e01a8655faa1294623d8cc0d904dcf6a84b0196a7e4389be41be70fea26856c2d13171496cbf8d2070a701c9af6b5b50d9455e40f6011f84bbef05e9e0f3d004f27aa127a220a94262a174c16fdcab8798007fc81fde77c40316dfb695fc40f8acd4b984ca7aa6ec894b60d2504450f8a0bd82ded85f0ce68121ae7e4d0beb5139894f41a7305425e07d031252c0bdb1a044b96e22266b02ff1f3d297307f25afcd3e6e9a21b78acdf1bd0"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001cc0)={{r8}, &(0x7f0000001c40), &(0x7f0000001c80)=r9}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r9, 0x2000012, 0xe, 0x0, &(0x7f0000000080)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x8001, 0x0, 0xffffffffffffffb4, 0x0, 0x0, 0x0, 0x3, 0x0, 0xb}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x1}]}, {0x0, [0x61, 0x87]}}, &(0x7f0000001f40)=""/4091, 0x28, 0xffb, 0x1}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0xa4, 0xffffffffffffffff}]}, &(0x7f0000000080)='GPL\x00', 0x5, 0xce, &(0x7f0000000380)=""/206, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$ENABLE_STATS(0x20, &(0x7f0000000500), 0x4) 0s ago: executing program 2 (id=2357): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001860000000000000e9ff00000400000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000078850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x210, 0x0, 0x0, 0x0, 0x7, 0xffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8) sendmsg$kcm(r3, &(0x7f0000000f00)={&(0x7f00000001c0)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}}, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000300)="a2a33c7911ddfaf351b0d4d1474f7922706f59c0587a268f117d5f283c637962b12c8362237e31fcbce0137c27c8000bb7a6ead662fd", 0x36}, {&(0x7f0000000340)="5805af24", 0x4}, {&(0x7f0000000380)="346eddf18f48956c28c34bb3b12a3dfd5f5fcc0bd4d6f316b355d6d7dbae0f30ca76ef8725fed7d5e41495f8944a368cc399ec4db72d0b5974660f3cadc657889153e0b771a10e3bd1843270987e6c96dea3683597d7f0eebc9df9549c5bb7ac22e6", 0x62}, {&(0x7f00000004c0)="cf804d75c429804e91843a3067f4308c98c640edc1c289082ec31aa6dfc40f75a9231e20d792a4c0088a60059ee0f899fc24413bfa335987a9bcf090b78a150a6f36538f250c2d0156171a3d5b1ec58aec40b71cf7fab21df8bc092370d921", 0x5f}, {&(0x7f0000000740)="84ea8aec11d74059d13f5e7de081c5e072b202ef41a80b84dc5e6e4929fc04466b9d3063f79b0580f910f43f49c9c00971de4c85b4631fb76684d58e5d40a74376046274e86fa2a3be3080d65f32d11eb1c9178d23480285da89434f0451e2fb11a6b775fe8d5ef17db51767722c344be66b7a0e78580e958a0e7b4080230679f88de4949aa45659d45c2334832cca4a5a53f55253d1139dd2972908d3a8df8de3325fb8a7b5a244c6a8f2b8c80a21448a23c32caf80454a3ca5771c089a510cfeab7260db54db6594e2bc183816c4f8e7aaa35620877f9d19e0bba54956f1fae36ad357a42bb67d36", 0xe9}, {&(0x7f0000000840)="d8f29af8abb346f334c3e6b6e579f44187b898db1fe376bec0fb9c386debe90122cadf194b183640e35ee659c62ade7aad3737d8d8582d1a52f19706d1b1ddc80179f5b93fa9ebfb8d6ba8fdc9c23dafd2bdd52712fdc451a2ec7d154423040f0db17a0c4aa4e5a627fe6fd946626dfae83d2cc46f629de8d473c225f64ae204a77e78720c8f06", 0x87}, {&(0x7f0000000900)="07c1a2a939798bf05e3108c67ff7364159194d30f852a27e87887e519393b92841b98e433a14c3cbc137721d9ea9047d0f10fd326335ddaa9bf6403808369355c5d20f3d977addc6e2f7289eb9bcc0fab7d20dd591c5d336a5ab8064bbae0ea2ab63", 0x62}, {&(0x7f0000000980)="7489da2400c96cdd14ee9ef3167cbc49f03c2146dfb7806327f4ffe262a01c43c3e6a872e86e70ddc641c64721e64d6d24ce1f7ed8c8e0a5ffc6efbeb6de4daff977cbeefe3922aadb01ece8465f640bd614aa5c7913d38c86a2fcad8797893cf2d271af494965b619fde482c33b24e1023abffe8c4409f8766f9aa88638b4fd26c0cd9bfef7d490f67d67584019a5e04e7bad1e9f777151df91e0f79f8365930c01acc5e30f3cf3fd7bb6e300d197e882424bfacf0f544c335a55f9bf9e22bf5692", 0xc2}], 0x8, &(0x7f0000000b00)=[{0x20, 0x117, 0x8, "19994794ea730089abc2f20603e999"}, {0xd8, 0x84, 0x0, "f247428826a509a61211c963a3ad3114ce9041e0891511e9d9b09e3965f9555264fc80bf1a1b45a054247e53bfbe30e6013cc6ada6c51d981cae291216390bdd9644a90a93d40bcd08ecfd0c329c8d46871084c65e6976bf1f2b7c843b408153a15453989b65e70f3bc4d6a9dd78cb62818a01271a0a552d05a440e3e72a30b2587ae340bb1014e56d695bfc8f59eadce49a683d2f6668bbd39a1d6fbac7b9720cd2167222b620f09fe7e6162e15745464c11e6bf7208e85b285f6f8a48ca3d028e7c951"}, {0xc8, 0x10d, 0xfac2, "acc30e47bb4017730cccd4a6ee1fd86a3de3a231cc080c560ca27287ed7b71361263570902d6745959d59e728035b42bf9337c4529e6ff32b13ca3d85f6acbb3e9ecc1a030fa0443198fe29ae3736de7dd72d9dbb89070622ff0ccf8b37d931e8bc3fa2fdf11628b969cf268c2adf51239f811dba2c73412ef621a4dcd61a26853e7a10db2d2b0ff159bc5ee5c87fe591e5958243dad64cbace13fe94f24ff054b3a5a10eec2333c8e4286f26769569706be710a"}, {0x40, 0x29, 0x9, "95ba1a00837ef7bc5755d8cbd9559bb0240581b5ab54348739ac63fe15ba8ea830c2b163211b2decde9e2109c1091760"}, {0x40, 0x117, 0x9, "99c9842b2ea07db07e528d530006343fae6b43143564ebe7f0d1a411817a3fa4b715c54a1588c85ea2f1e0"}, {0xe8, 0x84, 0x82, "b24fb743a584b0f414d1cb267d03602c54af5ec78947d6ace242ee2fa153164dcc8481d544e27bf4d3536edc15f5386c2d86ff312f6e03516eef0fb649fb0f4994089add937774fbd58c2047b45ac9b0deac7a7a7962626ce1afe8102211bfa8e5f0798cabb3c5e37962b848f6022a173f3aa76f6a0e175e030411db943cb4217fc56656a0b042e6b28f4d00b6d869a51d45ad848ea363259ef771fa52ecb4743ec5add58f4c00a954610a67669c23c1a8cce01f221354b3b6309e3f970e30fc845b4cc9092a68b0b547fe818c6c98ea3fd23a"}, {0xc8, 0x103, 0x5, "dd871b61f03a63a2396d70903b3dc52ef019ff53241f370dcc55145c1372dd7ebc225bdfd1c4a700b9918189227cf6a7bd6916f11e47d7d12b3736ea0c7557ca4d2b48f5a5108c5d0e3d3bb1703d25b00977cbfa8f93c89084faee00a02714ca35cda2a9102831fe377b5a5d116197a4c46d465bf75fa4df6aebce55aa2a92c7e90ff5aa1229c0a45f62941e1e53c06f8cdc7392d1b219bca5b709fd0944532b6a7012f5b2138328fa7f7a8df4d10a8e11d0d2ac42"}], 0x3f0}, 0x8001) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x60000400, 0x0, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.69' (ED25519) to the list of known hosts. [ 64.142683][ T4258] cgroup: Unknown subsys name 'net' [ 64.251415][ T4258] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 65.503357][ T4258] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 66.696977][ T4271] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 66.705721][ T4271] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 66.713648][ T4273] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 66.723828][ T4273] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 66.731560][ T4273] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 66.740361][ T4273] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 66.777331][ T4275] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 66.786458][ T4275] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 66.794044][ T4277] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 66.802164][ T4277] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 66.809903][ T4277] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 66.818512][ T4273] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 66.836589][ T4273] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 66.844439][ T4273] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 66.846950][ T4277] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 66.859878][ T4277] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 66.867827][ T4277] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 66.875499][ T4277] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 66.883144][ T4277] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 66.892740][ T4277] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 66.896152][ T48] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 66.907645][ T4277] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 66.926124][ T4283] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 66.934309][ T4283] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 66.946718][ T4283] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 66.948298][ T48] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 66.961616][ T48] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 66.961670][ T4277] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 66.976841][ T48] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 66.990267][ T4275] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 67.316871][ T4270] chnl_net:caif_netlink_parms(): no params data found [ 67.338343][ T4281] chnl_net:caif_netlink_parms(): no params data found [ 67.433564][ T4274] chnl_net:caif_netlink_parms(): no params data found [ 67.452140][ T4279] chnl_net:caif_netlink_parms(): no params data found [ 67.468824][ T4278] chnl_net:caif_netlink_parms(): no params data found [ 67.519822][ T4281] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.527598][ T4281] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.535568][ T4281] device bridge_slave_0 entered promiscuous mode [ 67.562518][ T4270] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.569753][ T4270] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.578675][ T4270] device bridge_slave_0 entered promiscuous mode [ 67.595226][ T4281] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.602556][ T4281] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.610932][ T4281] device bridge_slave_1 entered promiscuous mode [ 67.625696][ T4270] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.633028][ T4270] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.641030][ T4270] device bridge_slave_1 entered promiscuous mode [ 67.710465][ T4270] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.725813][ T4281] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.737755][ T4281] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.754990][ T4274] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.764428][ T4274] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.772987][ T4274] device bridge_slave_0 entered promiscuous mode [ 67.789560][ T4270] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.804889][ T4279] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.812183][ T4279] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.820331][ T4279] device bridge_slave_0 entered promiscuous mode [ 67.828132][ T4274] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.835286][ T4274] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.845193][ T4274] device bridge_slave_1 entered promiscuous mode [ 67.868640][ T4281] team0: Port device team_slave_0 added [ 67.879590][ T4279] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.886796][ T4279] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.894577][ T4279] device bridge_slave_1 entered promiscuous mode [ 67.916231][ T4281] team0: Port device team_slave_1 added [ 67.924610][ T4270] team0: Port device team_slave_0 added [ 67.931277][ T4278] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.939019][ T4278] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.949672][ T4278] device bridge_slave_0 entered promiscuous mode [ 67.976989][ T4274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.987625][ T4270] team0: Port device team_slave_1 added [ 67.994720][ T4274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.005771][ T4278] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.013356][ T4278] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.022145][ T4278] device bridge_slave_1 entered promiscuous mode [ 68.048358][ T4279] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.071770][ T4279] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.089986][ T4281] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.097227][ T4281] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.123454][ T4281] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.143476][ T4281] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.150502][ T4281] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.176565][ T4281] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.209074][ T4270] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.216694][ T4270] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.242720][ T4270] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.270282][ T4279] team0: Port device team_slave_0 added [ 68.278026][ T4278] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.288696][ T4274] team0: Port device team_slave_0 added [ 68.294956][ T4270] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.304964][ T4270] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.333913][ T4270] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.351647][ T4279] team0: Port device team_slave_1 added [ 68.358583][ T4274] team0: Port device team_slave_1 added [ 68.365698][ T4278] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.420998][ T4281] device hsr_slave_0 entered promiscuous mode [ 68.428455][ T4281] device hsr_slave_1 entered promiscuous mode [ 68.460466][ T4278] team0: Port device team_slave_0 added [ 68.466960][ T4279] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.473925][ T4279] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.500048][ T4279] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.514198][ T4270] device hsr_slave_0 entered promiscuous mode [ 68.521269][ T4270] device hsr_slave_1 entered promiscuous mode [ 68.528637][ T4270] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.536710][ T4270] Cannot create hsr debugfs directory [ 68.542680][ T4274] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.550088][ T4274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.576256][ T4274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.589663][ T4278] team0: Port device team_slave_1 added [ 68.601079][ T4279] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.608274][ T4279] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.634436][ T4279] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.646576][ T4274] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.653531][ T4274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.679596][ T4274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.730893][ T4278] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.739003][ T4278] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.765331][ T4278] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.783551][ T4278] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.790654][ T4278] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.816953][ T4275] Bluetooth: hci0: command 0x0409 tx timeout [ 68.823132][ T4278] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.896079][ T4275] Bluetooth: hci1: command 0x0409 tx timeout [ 68.910133][ T4274] device hsr_slave_0 entered promiscuous mode [ 68.917048][ T4274] device hsr_slave_1 entered promiscuous mode [ 68.923554][ T4274] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.931598][ T4274] Cannot create hsr debugfs directory [ 68.940461][ T4279] device hsr_slave_0 entered promiscuous mode [ 68.947811][ T4279] device hsr_slave_1 entered promiscuous mode [ 68.954581][ T4279] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.962225][ T4279] Cannot create hsr debugfs directory [ 68.976211][ T4273] Bluetooth: hci4: command 0x0409 tx timeout [ 69.021843][ T4278] device hsr_slave_0 entered promiscuous mode [ 69.028663][ T4278] device hsr_slave_1 entered promiscuous mode [ 69.035120][ T4278] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.043002][ T4278] Cannot create hsr debugfs directory [ 69.056891][ T4275] Bluetooth: hci3: command 0x0409 tx timeout [ 69.056904][ T4273] Bluetooth: hci2: command 0x0409 tx timeout [ 69.322169][ T4281] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 69.344079][ T4281] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 69.374476][ T4281] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 69.386076][ T4281] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 69.403459][ T4274] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 69.413465][ T4274] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 69.430428][ T4274] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 69.455052][ T4274] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 69.467371][ T4279] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 69.478593][ T4279] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 69.506934][ T4279] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 69.518717][ T4279] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 69.585470][ T4270] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 69.609297][ T4270] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 69.619673][ T4270] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 69.629658][ T4270] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 69.703813][ T4281] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.755850][ T4281] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.780257][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.789579][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.800999][ T4278] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 69.818638][ T4278] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 69.828109][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.841078][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.850280][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.857552][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.870040][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.881736][ T4274] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.891123][ T4278] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 69.904534][ T4278] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 69.925279][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.934460][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.945548][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.952731][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.968262][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.979177][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.998015][ T4279] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.008872][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.019031][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.042931][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.054313][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.064237][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.073117][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.082964][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.094887][ T4270] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.109619][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.119793][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.132261][ T4274] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.152862][ T4279] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.166868][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.174951][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.184755][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.193716][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.202719][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.211980][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.233017][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.244088][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.252994][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.260226][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.269579][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.278303][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.286850][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.293918][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.307966][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.320633][ T4270] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.346696][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.354733][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.365704][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.374265][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.381352][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.392104][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.400728][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.409341][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.416476][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.424842][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.433876][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.442644][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.452133][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.460847][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.470018][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.478698][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.486929][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.525851][ T4278] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.544880][ T4274] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 70.557233][ T4274] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.569671][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.580261][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.589046][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.598070][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.605182][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.613070][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.621953][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.630901][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.638563][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.647364][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.658694][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.667693][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.676565][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.684879][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.693484][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.701905][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.734955][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.755391][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.768456][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.783501][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.793521][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.807215][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.821980][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.832245][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.843280][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.869048][ T4278] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.895221][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.904839][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.912728][ T4275] Bluetooth: hci0: command 0x041b tx timeout [ 70.928233][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.939511][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.953784][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.962824][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.971996][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.982550][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.989976][ T4275] Bluetooth: hci1: command 0x041b tx timeout [ 71.001336][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.010809][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.024435][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.033793][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.042722][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.049853][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.056283][ T4275] Bluetooth: hci4: command 0x041b tx timeout [ 71.058218][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.071651][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.080580][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.087713][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.126078][ T4281] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.133845][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.136401][ T4275] Bluetooth: hci2: command 0x041b tx timeout [ 71.142389][ T4277] Bluetooth: hci3: command 0x041b tx timeout [ 71.161970][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.186651][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.194201][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.240077][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.270052][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.291397][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.325220][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.359420][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.379397][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.386163][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.398187][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.416082][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.423617][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.450660][ T4274] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.477802][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.501418][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.529457][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.552754][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.574585][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.605480][ T4278] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 71.641175][ T4278] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.667009][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.679297][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.690019][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.700345][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.708879][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.731614][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.757020][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.818052][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.838829][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.879693][ T4270] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.911854][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.924103][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.948564][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.960756][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.982453][ T4274] device veth0_vlan entered promiscuous mode [ 72.030072][ T4274] device veth1_vlan entered promiscuous mode [ 72.041996][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.051052][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.060431][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.090578][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.101519][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.110790][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.120595][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.133099][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.154467][ T4279] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.168909][ T4281] device veth0_vlan entered promiscuous mode [ 72.192177][ T4270] device veth0_vlan entered promiscuous mode [ 72.201316][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.211190][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.225833][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.235384][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.247648][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.255870][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.277789][ T4274] device veth0_macvtap entered promiscuous mode [ 72.285770][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.293967][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.303056][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.311407][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.319417][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.333743][ T4281] device veth1_vlan entered promiscuous mode [ 72.351604][ T4274] device veth1_macvtap entered promiscuous mode [ 72.364405][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.374349][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.383291][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.392564][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.419873][ T4270] device veth1_vlan entered promiscuous mode [ 72.439403][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.451150][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.459833][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.468746][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.477628][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.491181][ T4278] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.520278][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.529459][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.538891][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.548467][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.557349][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.566007][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.574238][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.589727][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.598310][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.609971][ T4270] device veth0_macvtap entered promiscuous mode [ 72.625247][ T4270] device veth1_macvtap entered promiscuous mode [ 72.635479][ T4274] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.645401][ T4274] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.655672][ T4274] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.664638][ T4274] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.688205][ T4279] device veth0_vlan entered promiscuous mode [ 72.710352][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.718693][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.727112][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.752132][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.767684][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.778717][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.790647][ T4270] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.805807][ T4281] device veth0_macvtap entered promiscuous mode [ 72.814623][ T4279] device veth1_vlan entered promiscuous mode [ 72.824377][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.836115][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.844396][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.853734][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.863132][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.872349][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.888549][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.899854][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.913992][ T4270] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.928310][ T4281] device veth1_macvtap entered promiscuous mode [ 72.952493][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.963167][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.971704][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.979979][ T4275] Bluetooth: hci0: command 0x040f tx timeout [ 72.988002][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.008104][ T4270] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.018908][ T4270] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.029540][ T4270] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.039477][ T4270] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.057452][ T4277] Bluetooth: hci1: command 0x040f tx timeout [ 73.115460][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.129063][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.137201][ T4277] Bluetooth: hci4: command 0x040f tx timeout [ 73.159989][ T4278] device veth0_vlan entered promiscuous mode [ 73.167228][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.175219][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.187258][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.197654][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.206735][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.217358][ T4277] Bluetooth: hci2: command 0x040f tx timeout [ 73.224077][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.227052][ T4275] Bluetooth: hci3: command 0x040f tx timeout [ 73.234386][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.254327][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.265827][ T4281] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.274986][ T4279] device veth0_macvtap entered promiscuous mode [ 73.313045][ T4278] device veth1_vlan entered promiscuous mode [ 73.320366][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.329262][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.337639][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.346475][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.356722][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.371332][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.382125][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.392776][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.403878][ T4281] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.433118][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.439779][ T4279] device veth1_macvtap entered promiscuous mode [ 73.442859][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.451582][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.464358][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.473956][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.484392][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.493177][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.507830][ T4281] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.518508][ T4281] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.528261][ T4281] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.537623][ T4281] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.566706][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.577610][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.590883][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.602176][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.612464][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.629925][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.641431][ T4279] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.662896][ T4278] device veth0_macvtap entered promiscuous mode [ 73.675208][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.684228][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.693649][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.703688][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.713175][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.730048][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.741591][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.751663][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.765147][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.775118][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.790195][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.801771][ T4279] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.811193][ T4341] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.822400][ T4341] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.823855][ T4278] device veth1_macvtap entered promiscuous mode [ 73.848664][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.861116][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.871773][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.881175][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.906430][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.914347][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.926198][ T4279] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.934926][ T4279] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.946836][ T4279] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.955575][ T4279] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.979939][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.992842][ T4310] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.998096][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.006497][ T4310] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.023668][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.033727][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.044242][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.054208][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.064805][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.075414][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.086402][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.106413][ T4278] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.148571][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.159530][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.169562][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.182110][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.202504][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.212569][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.223564][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.233439][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.243928][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.253862][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.264522][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.277525][ T4278] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.311066][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.333211][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.366416][ T4278] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.375580][ T4278] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.395789][ T4278] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.405096][ T4278] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.510171][ T4310] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.547332][ T4310] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.558173][ T4326] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.570708][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.590591][ T4326] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.633071][ T4341] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.641731][ T4341] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.653697][ T4349] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4'. [ 74.681474][ T4349] device caif0 entered promiscuous mode [ 74.692018][ C1] hrtimer: interrupt took 37027 ns [ 74.693943][ T4349] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 74.716318][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.727073][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.890227][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.899069][ T4326] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.916366][ T4326] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.929037][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.959096][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.970715][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.016062][ T4310] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.053393][ T4310] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.061002][ T4275] Bluetooth: hci0: command 0x0419 tx timeout [ 75.147679][ T4277] Bluetooth: hci1: command 0x0419 tx timeout [ 75.174255][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.226157][ T4275] Bluetooth: hci4: command 0x0419 tx timeout [ 75.296707][ T4277] Bluetooth: hci3: command 0x0419 tx timeout [ 75.296719][ T4275] Bluetooth: hci2: command 0x0419 tx timeout [ 75.648223][ T4370] netlink: 128 bytes leftover after parsing attributes in process `syz.3.8'. [ 75.754641][ T4373] Zero length message leads to an empty skb [ 75.767111][ T4370] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 75.844773][ T4374] netlink: 'syz.4.9': attribute type 25 has an invalid length. [ 75.866990][ T4374] netlink: 'syz.4.9': attribute type 9 has an invalid length. [ 75.874885][ T4374] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9'. [ 75.899379][ T4376] netlink: 'syz.2.10': attribute type 25 has an invalid length. [ 75.926538][ T4376] netlink: 'syz.2.10': attribute type 9 has an invalid length. [ 75.960459][ T4376] netlink: 40 bytes leftover after parsing attributes in process `syz.2.10'. [ 76.830125][ T4408] netlink: 'syz.3.18': attribute type 25 has an invalid length. [ 76.847282][ T4408] netlink: 'syz.3.18': attribute type 9 has an invalid length. [ 76.855755][ T4408] netlink: 40 bytes leftover after parsing attributes in process `syz.3.18'. [ 76.896622][ T4400] device sit0 entered promiscuous mode [ 77.428769][ T4420] delete_channel: no stack [ 77.746769][ T4430] syz.3.26 uses obsolete (PF_INET,SOCK_PACKET) [ 78.454700][ T4446] netlink: 'syz.3.30': attribute type 3 has an invalid length. [ 78.738741][ T4446] netlink: 163968 bytes leftover after parsing attributes in process `syz.3.30'. [ 80.052551][ T4459] netlink: 'syz.3.34': attribute type 3 has an invalid length. [ 80.089472][ T4459] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.34'. [ 80.164775][ T4465] netlink: 'syz.4.36': attribute type 10 has an invalid length. [ 80.205530][ T4465] team0: Device vxcan1 is of different type [ 80.617242][ T4481] netlink: 134056 bytes leftover after parsing attributes in process `syz.1.40'. [ 80.731350][ T4485] netlink: 'syz.0.41': attribute type 2 has an invalid length. [ 80.854843][ T4485] device 0 entered promiscuous mode [ 81.571101][ T4498] netlink: 'syz.0.45': attribute type 1 has an invalid length. [ 81.590181][ T129] cfg80211: failed to load regulatory.db [ 81.640919][ T4498] netlink: 'syz.0.45': attribute type 2 has an invalid length. [ 81.674934][ T4498] netlink: 132 bytes leftover after parsing attributes in process `syz.0.45'. [ 82.419841][ T4513] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 82.427519][ T4513] IPv6: NLM_F_CREATE should be set when creating new route [ 82.434848][ T4513] IPv6: NLM_F_CREATE should be set when creating new route [ 82.442163][ T4513] IPv6: NLM_F_CREATE should be set when creating new route [ 83.192388][ T4525] netlink: 'syz.1.56': attribute type 2 has an invalid length. [ 83.459812][ T4525] device 0 entered promiscuous mode [ 83.799088][ T4535] netlink: 134056 bytes leftover after parsing attributes in process `syz.2.59'. [ 84.473058][ T4535] syz.2.59 (4535) used greatest stack depth: 16640 bytes left [ 84.693148][ T4549] netlink: 'syz.2.64': attribute type 1 has an invalid length. [ 84.705568][ T4549] netlink: 'syz.2.64': attribute type 2 has an invalid length. [ 84.765451][ T4549] netlink: 132 bytes leftover after parsing attributes in process `syz.2.64'. [ 84.833266][ T4554] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 84.840599][ T4554] IPv6: NLM_F_CREATE should be set when creating new route [ 84.847974][ T4554] IPv6: NLM_F_CREATE should be set when creating new route [ 84.855217][ T4554] IPv6: NLM_F_CREATE should be set when creating new route [ 85.396275][ T4567] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 85.403589][ T4567] IPv6: NLM_F_CREATE should be set when creating new route [ 85.410916][ T4567] IPv6: NLM_F_CREATE should be set when creating new route [ 85.418190][ T4567] IPv6: NLM_F_CREATE should be set when creating new route [ 85.740100][ T4579] netlink: 'syz.4.73': attribute type 2 has an invalid length. [ 85.850292][ T4579] device 0 entered promiscuous mode [ 86.370335][ T4590] netlink: 134056 bytes leftover after parsing attributes in process `syz.0.75'. [ 86.772128][ T4593] netlink: 'syz.1.91': attribute type 3 has an invalid length. [ 86.827753][ T4593] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.91'. [ 87.158182][ T4604] netlink: 'syz.4.84': attribute type 1 has an invalid length. [ 87.186965][ T4604] netlink: 'syz.4.84': attribute type 2 has an invalid length. [ 87.195790][ T4604] netlink: 132 bytes leftover after parsing attributes in process `syz.4.84'. [ 87.790746][ T4622] netlink: 'syz.2.88': attribute type 10 has an invalid length. [ 87.961256][ T4622] team0: Device vxcan1 is of different type [ 88.352633][ T4632] netlink: 'syz.4.94': attribute type 3 has an invalid length. [ 88.377736][ T4632] netlink: 163968 bytes leftover after parsing attributes in process `syz.4.94'. [ 91.211246][ T4657] netlink: 'syz.4.100': attribute type 25 has an invalid length. [ 91.263477][ T4657] netlink: 'syz.4.100': attribute type 9 has an invalid length. [ 91.285915][ T4657] netlink: 40 bytes leftover after parsing attributes in process `syz.4.100'. [ 91.489529][ T4666] device sit0 entered promiscuous mode [ 91.790075][ T4677] netlink: 'syz.3.107': attribute type 10 has an invalid length. [ 91.872436][ T4677] team0: Device vxcan1 is of different type [ 91.962212][ T4679] netlink: 'syz.1.108': attribute type 25 has an invalid length. [ 91.991321][ T4679] netlink: 'syz.1.108': attribute type 9 has an invalid length. [ 92.013771][ T4679] netlink: 40 bytes leftover after parsing attributes in process `syz.1.108'. [ 92.391411][ T4696] netlink: 'syz.0.123': attribute type 25 has an invalid length. [ 92.423423][ T4696] netlink: 'syz.0.123': attribute type 9 has an invalid length. [ 92.432299][ T4696] netlink: 40 bytes leftover after parsing attributes in process `syz.0.123'. [ 92.446380][ T4693] netlink: 'syz.3.124': attribute type 25 has an invalid length. [ 92.454259][ T4693] netlink: 'syz.3.124': attribute type 9 has an invalid length. [ 92.463568][ T4693] netlink: 40 bytes leftover after parsing attributes in process `syz.3.124'. [ 92.513915][ T4695] netlink: 'syz.2.112': attribute type 3 has an invalid length. [ 92.533191][ T4698] netlink: 40 bytes leftover after parsing attributes in process `syz.1.114'. [ 92.561593][ T4695] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.112'. [ 92.611864][ T4698] device caif0 entered promiscuous mode [ 92.635507][ T4698] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 92.769494][ T4707] netlink: 'syz.0.116': attribute type 25 has an invalid length. [ 92.856295][ T4707] netlink: 'syz.0.116': attribute type 9 has an invalid length. [ 92.896672][ T4707] netlink: 40 bytes leftover after parsing attributes in process `syz.0.116'. [ 94.509526][ T4719] device sit0 entered promiscuous mode [ 94.770428][ T4732] netlink: 40 bytes leftover after parsing attributes in process `syz.0.127'. [ 94.928577][ T4735] netlink: 160 bytes leftover after parsing attributes in process `syz.2.129'. [ 95.016222][ T4735] netlink: 40 bytes leftover after parsing attributes in process `syz.2.129'. [ 95.219390][ T4743] netlink: 40 bytes leftover after parsing attributes in process `syz.0.130'. [ 95.252940][ T4743] device caif0 entered promiscuous mode [ 95.272247][ T4743] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 95.652479][ T4765] FAULT_INJECTION: forcing a failure. [ 95.652479][ T4765] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 95.691565][ T4765] CPU: 0 PID: 4765 Comm: syz.0.141 Not tainted syzkaller #0 [ 95.698904][ T4765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 95.708990][ T4765] Call Trace: [ 95.712289][ T4765] [ 95.715233][ T4765] dump_stack_lvl+0x188/0x24e [ 95.719961][ T4765] ? show_regs_print_info+0x12/0x12 [ 95.725189][ T4765] ? load_image+0x410/0x410 [ 95.729714][ T4765] ? __lock_acquire+0x7c40/0x7c40 [ 95.734765][ T4765] should_fail_ex+0x390/0x4c0 [ 95.739464][ T4765] _copy_from_user+0x2c/0x170 [ 95.744162][ T4765] iovec_from_user+0x143/0x360 [ 95.748954][ T4765] __import_iovec+0x6c/0x510 [ 95.753573][ T4765] import_iovec+0x6f/0xa0 [ 95.757931][ T4765] ___sys_sendmsg+0x252/0x360 [ 95.762632][ T4765] ? __sys_sendmsg+0x2a0/0x2a0 [ 95.767432][ T4765] ? __lock_acquire+0x7c40/0x7c40 [ 95.772496][ T4765] __se_sys_sendmsg+0x1c3/0x2b0 [ 95.777363][ T4765] ? perf_trace_preemptirq_template+0x268/0x320 [ 95.783636][ T4765] ? __x64_sys_sendmsg+0x80/0x80 [ 95.788617][ T4765] ? lockdep_hardirqs_on+0x94/0x140 [ 95.793841][ T4765] do_syscall_64+0x4c/0xa0 [ 95.798282][ T4765] ? clear_bhb_loop+0x60/0xb0 [ 95.802980][ T4765] ? clear_bhb_loop+0x60/0xb0 [ 95.807681][ T4765] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 95.813608][ T4765] RIP: 0033:0x7f5272d9de59 [ 95.818044][ T4765] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.837674][ T4765] RSP: 002b:00007f5273d17028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 95.846106][ T4765] RAX: ffffffffffffffda RBX: 00007f5273025fa0 RCX: 00007f5272d9de59 [ 95.854108][ T4765] RDX: 0000000000098010 RSI: 0000200000000240 RDI: 000000000000000c [ 95.862099][ T4765] RBP: 00007f5273d17090 R08: 0000000000000000 R09: 0000000000000000 [ 95.870094][ T4765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 95.878084][ T4765] R13: 00007f5273026038 R14: 00007f5273025fa0 R15: 00007ffe63f67378 [ 95.886366][ T4765] [ 96.470193][ T4785] device hsr_slave_0 left promiscuous mode [ 96.497391][ T4785] device hsr_slave_1 left promiscuous mode [ 97.232874][ T4812] FAULT_INJECTION: forcing a failure. [ 97.232874][ T4812] name failslab, interval 1, probability 0, space 0, times 1 [ 97.292089][ T4812] CPU: 0 PID: 4812 Comm: syz.0.155 Not tainted syzkaller #0 [ 97.299444][ T4812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 97.309513][ T4812] Call Trace: [ 97.312807][ T4812] [ 97.315745][ T4812] dump_stack_lvl+0x188/0x24e [ 97.320444][ T4812] ? show_regs_print_info+0x12/0x12 [ 97.325664][ T4812] ? load_image+0x410/0x410 [ 97.330190][ T4812] ? __might_sleep+0xd0/0xd0 [ 97.334795][ T4812] ? __lock_acquire+0x7c40/0x7c40 [ 97.339851][ T4812] should_fail_ex+0x390/0x4c0 [ 97.344550][ T4812] should_failslab+0x5/0x20 [ 97.349065][ T4812] slab_pre_alloc_hook+0x59/0x300 [ 97.354122][ T4812] kmem_cache_alloc_node+0x5a/0x310 [ 97.359336][ T4812] ? __alloc_skb+0xf9/0x7d0 [ 97.363876][ T4812] __alloc_skb+0xf9/0x7d0 [ 97.368224][ T4812] netlink_sendmsg+0x654/0xbd0 [ 97.373011][ T4812] ? netlink_getsockopt+0x550/0x550 [ 97.378228][ T4812] ? apparmor_socket_sendmsg+0x8a/0x330 [ 97.383801][ T4812] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 97.389120][ T4812] ? security_socket_sendmsg+0x7c/0xa0 [ 97.394599][ T4812] ? netlink_getsockopt+0x550/0x550 [ 97.399815][ T4812] ____sys_sendmsg+0x5ed/0x9a0 [ 97.404599][ T4812] ? __sys_sendmsg_sock+0x30/0x30 [ 97.409640][ T4812] ? __import_iovec+0x306/0x510 [ 97.414515][ T4812] ? import_iovec+0x6f/0xa0 [ 97.419041][ T4812] ___sys_sendmsg+0x2a2/0x360 [ 97.423748][ T4812] ? __sys_sendmsg+0x2a0/0x2a0 [ 97.428553][ T4812] ? __lock_acquire+0x7c40/0x7c40 [ 97.433622][ T4812] __se_sys_sendmsg+0x1c3/0x2b0 [ 97.438500][ T4812] ? perf_trace_preemptirq_template+0x268/0x320 [ 97.444761][ T4812] ? __x64_sys_sendmsg+0x80/0x80 [ 97.449730][ T4812] ? lockdep_hardirqs_on+0x94/0x140 [ 97.454946][ T4812] do_syscall_64+0x4c/0xa0 [ 97.459376][ T4812] ? clear_bhb_loop+0x60/0xb0 [ 97.464068][ T4812] ? clear_bhb_loop+0x60/0xb0 [ 97.468770][ T4812] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 97.474683][ T4812] RIP: 0033:0x7f5272d9de59 [ 97.479118][ T4812] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.498736][ T4812] RSP: 002b:00007f5273d17028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 97.507142][ T4812] RAX: ffffffffffffffda RBX: 00007f5273025fa0 RCX: 00007f5272d9de59 [ 97.515139][ T4812] RDX: 0000000000098010 RSI: 0000200000000240 RDI: 000000000000000c [ 97.523109][ T4812] RBP: 00007f5273d17090 R08: 0000000000000000 R09: 0000000000000000 [ 97.531083][ T4812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 97.539076][ T4812] R13: 00007f5273026038 R14: 00007f5273025fa0 R15: 00007ffe63f67378 [ 97.547098][ T4812] [ 97.691189][ T4817] validate_nla: 10 callbacks suppressed [ 97.691207][ T4817] netlink: 'syz.4.157': attribute type 10 has an invalid length. [ 98.119902][ T4817] team0: Port device wlan1 added [ 98.136738][ T4819] netlink: 'syz.4.157': attribute type 10 has an invalid length. [ 98.427390][ T4836] netlink: 'syz.0.162': attribute type 39 has an invalid length. [ 98.678962][ T4842] netlink: 'syz.2.166': attribute type 10 has an invalid length. [ 98.856123][ T4852] netlink: 'syz.1.169': attribute type 25 has an invalid length. [ 98.864405][ T4852] netlink: 'syz.1.169': attribute type 9 has an invalid length. [ 98.878846][ T4852] __nla_validate_parse: 4 callbacks suppressed [ 98.878861][ T4852] netlink: 40 bytes leftover after parsing attributes in process `syz.1.169'. [ 99.158724][ T4865] netlink: 40 bytes leftover after parsing attributes in process `syz.1.173'. [ 99.245488][ T4865] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.173'. [ 99.273289][ T4865] netlink: zone id is out of range [ 99.320725][ T4865] netlink: zone id is out of range [ 99.342351][ T4865] netlink: zone id is out of range [ 99.364870][ T4865] netlink: zone id is out of range [ 99.404281][ T4865] netlink: zone id is out of range [ 99.422908][ T4865] netlink: zone id is out of range [ 99.441912][ T4865] netlink: zone id is out of range [ 99.469689][ T4865] netlink: zone id is out of range [ 99.509976][ T4865] netlink: zone id is out of range [ 99.515354][ T4865] netlink: zone id is out of range [ 99.850429][ T4881] netlink: 'syz.1.179': attribute type 2 has an invalid length. [ 99.871224][ T4881] device 0 entered promiscuous mode [ 100.042516][ T4889] netlink: 'syz.4.183': attribute type 25 has an invalid length. [ 100.053728][ T4889] netlink: 'syz.4.183': attribute type 9 has an invalid length. [ 100.081921][ T4889] netlink: 40 bytes leftover after parsing attributes in process `syz.4.183'. [ 100.116756][ T4890] netlink: 'syz.3.182': attribute type 39 has an invalid length. [ 100.364492][ T4895] netlink: 152 bytes leftover after parsing attributes in process `syz.1.185'. [ 100.736710][ T4905] FAULT_INJECTION: forcing a failure. [ 100.736710][ T4905] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 100.781209][ T4905] CPU: 0 PID: 4905 Comm: syz.3.188 Not tainted syzkaller #0 [ 100.788557][ T4905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 100.798632][ T4905] Call Trace: [ 100.801928][ T4905] [ 100.804871][ T4905] dump_stack_lvl+0x188/0x24e [ 100.809576][ T4905] ? show_regs_print_info+0x12/0x12 [ 100.814805][ T4905] ? load_image+0x410/0x410 [ 100.819339][ T4905] ? __lock_acquire+0x7c40/0x7c40 [ 100.824395][ T4905] ? snprintf+0xe5/0x140 [ 100.828659][ T4905] should_fail_ex+0x390/0x4c0 [ 100.833366][ T4905] _copy_to_user+0x2c/0x130 [ 100.837890][ T4905] simple_read_from_buffer+0xe3/0x150 [ 100.843294][ T4905] proc_fail_nth_read+0x1a6/0x220 [ 100.848350][ T4905] ? proc_fault_inject_write+0x310/0x310 [ 100.854020][ T4905] ? fsnotify_perm+0x248/0x550 [ 100.858812][ T4905] ? proc_fault_inject_write+0x310/0x310 [ 100.864474][ T4905] vfs_read+0x2db/0x960 [ 100.868661][ T4905] ? kernel_read+0x1e0/0x1e0 [ 100.873281][ T4905] ? __fget_files+0x28/0x460 [ 100.877895][ T4905] ? __fget_files+0x3fc/0x460 [ 100.882589][ T4905] ? __fdget_pos+0x2ae/0x360 [ 100.887203][ T4905] ? ksys_read+0x70/0x260 [ 100.891559][ T4905] ksys_read+0x14d/0x260 [ 100.895911][ T4905] ? vfs_write+0x9a0/0x9a0 [ 100.900350][ T4905] ? lockdep_hardirqs_on+0x94/0x140 [ 100.905584][ T4905] do_syscall_64+0x4c/0xa0 [ 100.910030][ T4905] ? clear_bhb_loop+0x60/0xb0 [ 100.914735][ T4905] ? clear_bhb_loop+0x60/0xb0 [ 100.919439][ T4905] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 100.925355][ T4905] RIP: 0033:0x7f34d3b5e68e [ 100.929794][ T4905] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 100.949418][ T4905] RSP: 002b:00007f34d4a1bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 100.957843][ T4905] RAX: ffffffffffffffda RBX: 00007f34d4a1c6c0 RCX: 00007f34d3b5e68e [ 100.965828][ T4905] RDX: 000000000000000f RSI: 00007f34d4a1c0a0 RDI: 0000000000000004 [ 100.973795][ T4905] RBP: 00007f34d4a1c090 R08: 0000000000000000 R09: 0000000000000000 [ 100.981760][ T4905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 100.989727][ T4905] R13: 00007f34d3e26038 R14: 00007f34d3e25fa0 R15: 00007fffa8cce848 [ 100.997709][ T4905] [ 101.473545][ T4926] Driver unsupported XDP return value 0 on prog (id 191) dev N/A, expect packet loss! [ 101.836971][ T4936] netlink: 40 bytes leftover after parsing attributes in process `syz.1.196'. [ 101.969836][ T4935] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 102.425378][ T4957] netlink: 14 bytes leftover after parsing attributes in process `syz.0.203'. [ 102.443805][ T4957] device hsr_slave_0 left promiscuous mode [ 102.470057][ T4957] device hsr_slave_1 left promiscuous mode [ 103.116098][ T4988] validate_nla: 9 callbacks suppressed [ 103.116114][ T4988] netlink: 'syz.1.210': attribute type 25 has an invalid length. [ 103.270192][ T4988] netlink: 'syz.1.210': attribute type 9 has an invalid length. [ 103.341410][ T4988] netlink: 40 bytes leftover after parsing attributes in process `syz.1.210'. [ 103.509818][ T4993] device syzkaller0 entered promiscuous mode [ 103.564068][ T5015] netlink: 'syz.3.221': attribute type 10 has an invalid length. [ 103.676083][ T5015] team0: Device hsr_slave_0 failed to register rx_handler [ 103.830476][ T5020] netlink: 'syz.1.222': attribute type 1 has an invalid length. [ 103.851438][ T5020] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.222'. [ 104.050048][ T5030] netlink: 'syz.1.225': attribute type 3 has an invalid length. [ 104.084412][ T5030] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.225'. [ 106.866515][ T5048] netlink: 14560 bytes leftover after parsing attributes in process `syz.3.230'. [ 107.145397][ T5084] netlink: 'syz.1.237': attribute type 3 has an invalid length. [ 107.181496][ T5084] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.237'. [ 107.382398][ T5090] netlink: 'syz.2.239': attribute type 3 has an invalid length. [ 107.424524][ T5090] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.239'. [ 108.013095][ T5093] device syzkaller0 entered promiscuous mode [ 113.011064][ T5124] netlink: 'syz.3.248': attribute type 21 has an invalid length. [ 113.057733][ T5139] device syzkaller0 entered promiscuous mode [ 113.074752][ T5148] netlink: 'syz.1.253': attribute type 2 has an invalid length. [ 113.095399][ T5148] netlink: 'syz.1.253': attribute type 8 has an invalid length. [ 113.104917][ T5148] netlink: 132 bytes leftover after parsing attributes in process `syz.1.253'. [ 113.422866][ T4273] Bluetooth: hci0: ISO packet for unknown connection handle 50 [ 114.871644][ T5181] netlink: 'syz.3.259': attribute type 7 has an invalid length. [ 114.881060][ T5182] netlink: 'syz.3.259': attribute type 10 has an invalid length. [ 114.889171][ T5182] netlink: 40 bytes leftover after parsing attributes in process `syz.3.259'. [ 114.909981][ T5182] batman_adv: batadv0: Adding interface: virt_wifi0 [ 114.932461][ T5182] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.028793][ T5182] batman_adv: batadv0: Interface activated: virt_wifi0 [ 115.068737][ T5186] netlink: 10 bytes leftover after parsing attributes in process `syz.4.261'. [ 115.124345][ T5190] netlink: 40 bytes leftover after parsing attributes in process `syz.4.261'. [ 115.167425][ T5184] device sit0 entered promiscuous mode [ 115.208105][ T5186] netlink: 'syz.4.261': attribute type 25 has an invalid length. [ 115.224924][ T5186] netlink: 'syz.4.261': attribute type 9 has an invalid length. [ 115.256173][ T5186] netlink: 40 bytes leftover after parsing attributes in process `syz.4.261'. [ 115.355249][ T5196] netlink: 154788 bytes leftover after parsing attributes in process `syz.3.264'. [ 115.394605][ T5196] openvswitch: netlink: Message has 48126 unknown bytes. [ 115.447447][ T5198] device syzkaller0 entered promiscuous mode [ 115.481848][ T5198] netlink: 154020 bytes leftover after parsing attributes in process `syz.1.265'. [ 115.549452][ T5198] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 116.405006][ T5229] netlink: 180900 bytes leftover after parsing attributes in process `syz.1.275'. [ 116.480521][ T5229] openvswitch: netlink: Flow actions attr not present in new flow. [ 116.596870][ T5233] device syzkaller0 entered promiscuous mode [ 116.627032][ T4384] syzkaller0: tun_net_xmit 48 [ 116.674145][ T5233] syzkaller0: tun_net_xmit 1280 [ 116.695232][ T5233] syzkaller0: create flow: hash 67856310 index 1 [ 116.829756][ T5231] syzkaller0: delete flow: hash 67856310 index 1 [ 116.934369][ T5253] netlink: 'syz.1.280': attribute type 1 has an invalid length. [ 116.991407][ T5253] netlink: 83992 bytes leftover after parsing attributes in process `syz.1.280'. [ 117.885701][ T5267] netlink: 134056 bytes leftover after parsing attributes in process `syz.1.286'. [ 118.396239][ T5281] netlink: 'syz.3.291': attribute type 29 has an invalid length. [ 119.826156][ T5250] netlink: 'syz.4.282': attribute type 25 has an invalid length. [ 119.833967][ T5250] netlink: 'syz.4.282': attribute type 9 has an invalid length. [ 119.842286][ T5250] netlink: 40 bytes leftover after parsing attributes in process `syz.4.282'. [ 119.851637][ T5281] netlink: 'syz.3.291': attribute type 29 has an invalid length. [ 119.852503][ T5267] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 119.884874][ T5283] netlink: 'syz.2.290': attribute type 10 has an invalid length. [ 119.892949][ T5267] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 119.913279][ T5267] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 120.534640][ T5321] device syzkaller0 entered promiscuous mode [ 120.835414][ T5330] netlink: 'syz.3.303': attribute type 25 has an invalid length. [ 120.843619][ T5330] netlink: 'syz.3.303': attribute type 9 has an invalid length. [ 120.852517][ T5330] netlink: 40 bytes leftover after parsing attributes in process `syz.3.303'. [ 121.287046][ T5348] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.308'. [ 121.696868][ T5364] netlink: 'syz.4.313': attribute type 25 has an invalid length. [ 121.734813][ T5364] netlink: 'syz.4.313': attribute type 9 has an invalid length. [ 121.781297][ T5364] netlink: 40 bytes leftover after parsing attributes in process `syz.4.313'. [ 121.929489][ T5371] netlink: 'syz.2.314': attribute type 25 has an invalid length. [ 121.998230][ T5371] netlink: 40 bytes leftover after parsing attributes in process `syz.2.314'. [ 122.501833][ T5386] netlink: 132 bytes leftover after parsing attributes in process `syz.2.317'. [ 126.446079][ T5412] validate_nla: 2 callbacks suppressed [ 126.446096][ T5412] netlink: 'syz.4.324': attribute type 5 has an invalid length. [ 126.491663][ T5426] netlink: 'syz.3.327': attribute type 25 has an invalid length. [ 126.512192][ T5426] netlink: 'syz.3.327': attribute type 9 has an invalid length. [ 126.536312][ T5426] netlink: 40 bytes leftover after parsing attributes in process `syz.3.327'. [ 127.084079][ T5440] netlink: 14601 bytes leftover after parsing attributes in process `syz.2.333'. [ 127.170130][ T5447] netlink: 202920 bytes leftover after parsing attributes in process `syz.3.335'. [ 127.738521][ T5457] netlink: 'syz.0.337': attribute type 25 has an invalid length. [ 127.797040][ T5457] netlink: 'syz.0.337': attribute type 9 has an invalid length. [ 127.855881][ T5457] netlink: 40 bytes leftover after parsing attributes in process `syz.0.337'. [ 127.946968][ T5463] netlink: 'syz.3.339': attribute type 13 has an invalid length. [ 127.954759][ T5463] netlink: 14581 bytes leftover after parsing attributes in process `syz.3.339'. [ 128.007129][ T5472] netlink: 14593 bytes leftover after parsing attributes in process `syz.1.341'. [ 128.216225][ T5477] netlink: 'syz.3.342': attribute type 25 has an invalid length. [ 128.235049][ T5477] netlink: 'syz.3.342': attribute type 9 has an invalid length. [ 128.277510][ T5477] netlink: 40 bytes leftover after parsing attributes in process `syz.3.342'. [ 128.430016][ T5486] netlink: 'syz.0.346': attribute type 29 has an invalid length. [ 130.826965][ T5486] netlink: 'syz.0.346': attribute type 29 has an invalid length. [ 132.126296][ T4273] Bluetooth: hci1: Malformed HCI Event [ 132.825143][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.831623][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.020463][ T5572] netlink: 830 bytes leftover after parsing attributes in process `syz.1.372'. [ 133.733717][ T5588] netlink: 15999 bytes leftover after parsing attributes in process `syz.1.376'. [ 134.474458][ T5594] netlink: 'syz.0.378': attribute type 25 has an invalid length. [ 134.536786][ T5594] netlink: 'syz.0.378': attribute type 9 has an invalid length. [ 134.586602][ T5594] netlink: 40 bytes leftover after parsing attributes in process `syz.0.378'. [ 134.654382][ T5607] netlink: 'syz.3.384': attribute type 10 has an invalid length. [ 135.566639][ T5631] netlink: 10 bytes leftover after parsing attributes in process `syz.1.390'. [ 135.658067][ T5634] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.389'. [ 136.722851][ T5668] netlink: 'syz.0.397': attribute type 2 has an invalid length. [ 136.787834][ T5668] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.397'. [ 136.811707][ T5660] device syzkaller0 entered promiscuous mode [ 136.921590][ T5672] netlink: 'syz.4.400': attribute type 25 has an invalid length. [ 136.941585][ T5672] netlink: 'syz.4.400': attribute type 9 has an invalid length. [ 136.966503][ T5672] netlink: 40 bytes leftover after parsing attributes in process `syz.4.400'. [ 137.272347][ T5681] netlink: 72 bytes leftover after parsing attributes in process `syz.3.403'. [ 140.904242][ T5730] netlink: 'syz.2.418': attribute type 2 has an invalid length. [ 140.957468][ T5730] device 0 entered promiscuous mode [ 141.375886][ T5741] netlink: 'syz.2.422': attribute type 21 has an invalid length. [ 141.441220][ T5743] netlink: 'syz.3.420': attribute type 2 has an invalid length. [ 141.532119][ T5743] netlink: 'syz.3.420': attribute type 1 has an invalid length. [ 141.577895][ T5749] netlink: 'syz.0.423': attribute type 10 has an invalid length. [ 141.636703][ T5749] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.644891][ T5749] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.700418][ T5749] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.707924][ T5749] bridge0: port 2(bridge_slave_1) entered forwarding state [ 141.716367][ T5749] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.723511][ T5749] bridge0: port 1(bridge_slave_0) entered forwarding state [ 141.802625][ T5749] team0: Port device bridge0 added [ 141.874300][ T5755] netlink: 14593 bytes leftover after parsing attributes in process `syz.1.424'. [ 142.097503][ T5773] netlink: 152 bytes leftover after parsing attributes in process `syz.3.427'. [ 142.274449][ T5770] netlink: 180900 bytes leftover after parsing attributes in process `syz.4.428'. [ 142.393994][ T5770] openvswitch: netlink: Flow actions attr not present in new flow. [ 142.415229][ T5774] netlink: 'syz.0.429': attribute type 25 has an invalid length. [ 142.443127][ T5774] netlink: 'syz.0.429': attribute type 9 has an invalid length. [ 142.466251][ T5774] netlink: 40 bytes leftover after parsing attributes in process `syz.0.429'. [ 144.071442][ T5810] netlink: 10 bytes leftover after parsing attributes in process `syz.4.436'. [ 144.199905][ T5815] netlink: 'syz.1.439': attribute type 25 has an invalid length. [ 144.220902][ T5815] netlink: 'syz.1.439': attribute type 9 has an invalid length. [ 144.266585][ T5815] netlink: 40 bytes leftover after parsing attributes in process `syz.1.439'. [ 144.524117][ T5829] netlink: 'syz.1.442': attribute type 10 has an invalid length. [ 144.623072][ T5829] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 146.716560][ T5872] netlink: 'syz.3.452': attribute type 25 has an invalid length. [ 146.724536][ T5872] netlink: 'syz.3.452': attribute type 9 has an invalid length. [ 146.743495][ T5872] netlink: 40 bytes leftover after parsing attributes in process `syz.3.452'. [ 149.150213][ T5898] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.459'. [ 149.484987][ T5899] netlink: 'syz.1.459': attribute type 10 has an invalid length. [ 149.583275][ T5899] netlink: 40 bytes leftover after parsing attributes in process `syz.1.459'. [ 149.672621][ T5899] device team0 entered promiscuous mode [ 149.736424][ T5899] device team_slave_0 entered promiscuous mode [ 149.756436][ T5899] device team_slave_1 entered promiscuous mode [ 149.816384][ T5899] bridge0: port 3(team0) entered blocking state [ 149.837362][ T5899] bridge0: port 3(team0) entered disabled state [ 150.017886][ T5899] bridge0: port 3(team0) entered blocking state [ 150.025278][ T5899] bridge0: port 3(team0) entered forwarding state [ 151.001563][ T5911] netlink: 'syz.1.462': attribute type 11 has an invalid length. [ 151.086145][ T5911] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.462'. [ 151.157452][ T5908] netlink: 14 bytes leftover after parsing attributes in process `syz.1.462'. [ 151.205794][ T5910] netlink: 'syz.1.462': attribute type 10 has an invalid length. [ 151.435542][ T5910] wlan1: mtu less than device minimum [ 151.456093][ T5910] bond0: (slave wlan1): Error -22 calling dev_set_mtu [ 151.487104][ T5907] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 151.900312][ T5925] netlink: 'syz.4.465': attribute type 3 has an invalid length. [ 152.204647][ T5925] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 152.241286][ T5925] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 152.342550][ T5925] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 152.396369][ T5925] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 153.044928][ T5938] netlink: 'syz.3.466': attribute type 25 has an invalid length. [ 153.085200][ T5938] netlink: 'syz.3.466': attribute type 9 has an invalid length. [ 153.145182][ T5938] netlink: 40 bytes leftover after parsing attributes in process `syz.3.466'. [ 153.660563][ T5947] netlink: 'syz.1.470': attribute type 1 has an invalid length. [ 153.692914][ T5947] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.470'. [ 154.073893][ T5953] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.474'. [ 154.289187][ T5956] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.472'. [ 155.110853][ T5969] netlink: 14 bytes leftover after parsing attributes in process `syz.2.476'. [ 155.386159][ T5974] netlink: 'syz.2.476': attribute type 25 has an invalid length. [ 155.394123][ T5974] netlink: 'syz.2.476': attribute type 9 has an invalid length. [ 155.426228][ T5974] netlink: 40 bytes leftover after parsing attributes in process `syz.2.476'. [ 155.753737][ T5986] netlink: 'syz.1.481': attribute type 27 has an invalid length. [ 155.788932][ T5986] netlink: 164 bytes leftover after parsing attributes in process `syz.1.481'. [ 156.310151][ T5996] netlink: 'syz.1.483': attribute type 3 has an invalid length. [ 156.382953][ T5998] netlink: 'syz.2.484': attribute type 25 has an invalid length. [ 156.406180][ T5998] netlink: 'syz.2.484': attribute type 9 has an invalid length. [ 156.435784][ T5998] netlink: 40 bytes leftover after parsing attributes in process `syz.2.484'. [ 156.453908][ T5996] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 156.521112][ T5996] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 156.643786][ T5996] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 156.682134][ T5996] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 156.760892][ T6007] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.486'. [ 158.174509][ T6030] netlink: 168 bytes leftover after parsing attributes in process `syz.0.494'. [ 158.224842][ T6032] netlink: 14 bytes leftover after parsing attributes in process `syz.1.495'. [ 158.505259][ T6039] netlink: 14 bytes leftover after parsing attributes in process `syz.4.497'. [ 158.546164][ T6039] openvswitch: netlink: Flow key attr not present in new flow. [ 158.691844][ T6034] validate_nla: 1 callbacks suppressed [ 158.691875][ T6034] netlink: 'syz.2.496': attribute type 25 has an invalid length. [ 158.716534][ T6034] netlink: 'syz.2.496': attribute type 9 has an invalid length. [ 158.734774][ T6034] netlink: 40 bytes leftover after parsing attributes in process `syz.2.496'. [ 158.763204][ T6037] netlink: 'syz.1.495': attribute type 25 has an invalid length. [ 158.786066][ T6037] netlink: 'syz.1.495': attribute type 9 has an invalid length. [ 159.489724][ T6068] __nla_validate_parse: 1 callbacks suppressed [ 159.489761][ T6068] netlink: 132 bytes leftover after parsing attributes in process `syz.1.506'. [ 160.920063][ T6117] sctp: [Deprecated]: syz.1.520 (pid 6117) Use of struct sctp_assoc_value in delayed_ack socket option. [ 160.920063][ T6117] Use struct sctp_sack_info instead [ 161.037297][ T6121] delete_channel: no stack [ 161.551703][ T6133] tap0: tun_chr_ioctl cmd 1074025692 [ 161.588385][ T6135] netlink: 'syz.4.530': attribute type 10 has an invalid length. [ 161.636333][ T6135] netlink: 40 bytes leftover after parsing attributes in process `syz.4.530'. [ 161.684057][ T6135] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 162.851775][ T6176] netlink: 132 bytes leftover after parsing attributes in process `syz.2.542'. [ 162.992637][ T6182] netlink: 'syz.4.543': attribute type 29 has an invalid length. [ 163.009259][ T6182] netlink: 'syz.4.543': attribute type 29 has an invalid length. [ 163.757516][ T6208] netlink: 'syz.0.550': attribute type 10 has an invalid length. [ 163.826038][ T6208] netlink: 168 bytes leftover after parsing attributes in process `syz.0.550'. [ 164.014190][ T6227] netlink: 'syz.4.555': attribute type 10 has an invalid length. [ 164.053992][ T6227] device hsr0 entered promiscuous mode [ 164.088495][ T6227] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 164.797572][ T6227] netlink: 11562 bytes leftover after parsing attributes in process `syz.4.555'. [ 164.840935][ T6238] netlink: 10 bytes leftover after parsing attributes in process `syz.4.555'. [ 166.438354][ T6313] netlink: 'syz.3.576': attribute type 1 has an invalid length. [ 166.443948][ T6314] netlink: 'syz.4.575': attribute type 2 has an invalid length. [ 166.468095][ T6313] netlink: 62739 bytes leftover after parsing attributes in process `syz.3.576'. [ 166.507749][ T6314] netlink: 10 bytes leftover after parsing attributes in process `syz.4.575'. [ 166.620771][ T6308] netlink: 'syz.4.575': attribute type 21 has an invalid length. [ 166.661341][ T6308] netlink: 'syz.4.575': attribute type 4 has an invalid length. [ 166.681783][ T6308] netlink: 132 bytes leftover after parsing attributes in process `syz.4.575'. [ 166.729382][ T6299] netlink: 'syz.1.572': attribute type 10 has an invalid length. [ 166.797801][ T6299] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.572'. [ 166.977174][ T6318] netlink: 'syz.1.572': attribute type 10 has an invalid length. [ 167.016458][ T6318] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.572'. [ 167.117517][ T6317] netlink: 'syz.3.576': attribute type 10 has an invalid length. [ 167.125320][ T6317] netlink: 40 bytes leftover after parsing attributes in process `syz.3.576'. [ 168.895838][ T6333] delete_channel: no stack [ 169.439781][ T6358] netlink: 10 bytes leftover after parsing attributes in process `syz.0.588'. [ 170.153616][ T6391] delete_channel: no stack [ 170.210698][ T6398] netlink: 'syz.0.598': attribute type 1 has an invalid length. [ 170.281484][ T6398] netlink: 'syz.0.598': attribute type 1 has an invalid length. [ 170.313866][ T6398] netlink: 116376 bytes leftover after parsing attributes in process `syz.0.598'. [ 170.344501][ T6399] netlink: 'syz.1.599': attribute type 2 has an invalid length. [ 170.475536][ T6399] device 1 entered promiscuous mode [ 170.962865][ T6418] netlink: 'syz.1.602': attribute type 2 has an invalid length. [ 171.064179][ T6422] netlink: 132 bytes leftover after parsing attributes in process `syz.4.603'. [ 171.091953][ T6420] netlink: 'syz.2.604': attribute type 3 has an invalid length. [ 171.126492][ T6420] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.604'. [ 172.245798][ T6467] netlink: 'syz.2.618': attribute type 25 has an invalid length. [ 172.286352][ T6467] netlink: 'syz.2.618': attribute type 9 has an invalid length. [ 172.300822][ T6467] netlink: 40 bytes leftover after parsing attributes in process `syz.2.618'. [ 172.727872][ T6491] netlink: 4 bytes leftover after parsing attributes in process `syz.0.627'. [ 173.313186][ T6511] netlink: 'syz.0.633': attribute type 10 has an invalid length. [ 173.492921][ T6521] IPv6: NLM_F_CREATE should be specified when creating new route [ 173.699582][ T6528] netlink: 'syz.2.639': attribute type 10 has an invalid length. [ 173.789541][ T6528] team0: Port device geneve1 added [ 173.803261][ T6532] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.640'. [ 173.839527][ T6536] netlink: 'syz.4.641': attribute type 10 has an invalid length. [ 173.946849][ T6536] team0: Device wg1 is of different type [ 175.221049][ T4273] Bluetooth: hci3: unexpected subevent 0x0a length: 150 > 30 [ 176.599722][ T6646] netlink: 'syz.3.671': attribute type 39 has an invalid length. [ 176.959483][ T6651] IPv6: Can't replace route, no match found [ 177.057764][ T6652] IPv6: Can't replace route, no match found [ 177.751717][ T6677] netlink: 'syz.0.681': attribute type 3 has an invalid length. [ 177.776039][ T6677] netlink: 152 bytes leftover after parsing attributes in process `syz.0.681'. [ 177.905617][ T6685] netlink: 'syz.1.684': attribute type 4 has an invalid length. [ 177.936517][ T6685] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.684'. [ 178.405804][ T6713] netlink: 'syz.1.692': attribute type 3 has an invalid length. [ 178.435531][ T6713] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.692'. [ 178.843594][ T6725] netlink: 'syz.4.693': attribute type 10 has an invalid length. [ 178.865155][ T6729] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.695'. [ 178.882572][ T6725] device hsr0 left promiscuous mode [ 178.897493][ T6729] netlink: 43 bytes leftover after parsing attributes in process `syz.1.695'. [ 178.941432][ T6725] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 179.371405][ T6747] sctp: [Deprecated]: syz.1.701 (pid 6747) Use of int in max_burst socket option deprecated. [ 179.371405][ T6747] Use struct sctp_assoc_value instead [ 179.585361][ T6757] FAULT_INJECTION: forcing a failure. [ 179.585361][ T6757] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 179.602947][ T6757] CPU: 1 PID: 6757 Comm: syz.0.703 Not tainted syzkaller #0 [ 179.610282][ T6757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 179.620352][ T6757] Call Trace: [ 179.623648][ T6757] [ 179.626600][ T6757] dump_stack_lvl+0x188/0x24e [ 179.631328][ T6757] ? show_regs_print_info+0x12/0x12 [ 179.636557][ T6757] ? load_image+0x410/0x410 [ 179.641094][ T6757] ? __lock_acquire+0x7c40/0x7c40 [ 179.646153][ T6757] should_fail_ex+0x390/0x4c0 [ 179.650859][ T6757] _copy_from_user+0x2c/0x170 [ 179.655563][ T6757] __sys_bpf+0x2ea/0x780 [ 179.659837][ T6757] ? bpf_link_show_fdinfo+0x380/0x380 [ 179.665251][ T6757] ? lock_chain_count+0x20/0x20 [ 179.670128][ T6757] __x64_sys_bpf+0x78/0x90 [ 179.674540][ T6757] do_syscall_64+0x4c/0xa0 [ 179.678952][ T6757] ? clear_bhb_loop+0x60/0xb0 [ 179.683620][ T6757] ? clear_bhb_loop+0x60/0xb0 [ 179.688302][ T6757] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 179.694195][ T6757] RIP: 0033:0x7f5272d9de59 [ 179.698611][ T6757] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 179.718212][ T6757] RSP: 002b:00007f5273d17028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 179.726619][ T6757] RAX: ffffffffffffffda RBX: 00007f5273025fa0 RCX: 00007f5272d9de59 [ 179.734583][ T6757] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 179.742551][ T6757] RBP: 00007f5273d17090 R08: 0000000000000000 R09: 0000000000000000 [ 179.750517][ T6757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 179.758482][ T6757] R13: 00007f5273026038 R14: 00007f5273025fa0 R15: 00007ffe63f67378 [ 179.766462][ T6757] [ 180.304031][ T6778] netlink: 180900 bytes leftover after parsing attributes in process `syz.2.709'. [ 180.343297][ T6778] openvswitch: netlink: Flow actions attr not present in new flow. [ 180.445778][ T6788] netlink: 'syz.1.711': attribute type 2 has an invalid length. [ 180.459774][ T6788] device 1 entered promiscuous mode [ 180.466135][ T6786] netlink: 'syz.4.712': attribute type 25 has an invalid length. [ 180.486188][ T6786] netlink: 'syz.4.712': attribute type 9 has an invalid length. [ 180.493970][ T6786] netlink: 40 bytes leftover after parsing attributes in process `syz.4.712'. [ 180.621418][ T6797] FAULT_INJECTION: forcing a failure. [ 180.621418][ T6797] name failslab, interval 1, probability 0, space 0, times 0 [ 180.634469][ T6797] CPU: 0 PID: 6797 Comm: syz.2.716 Not tainted syzkaller #0 [ 180.641792][ T6797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 180.652038][ T6797] Call Trace: [ 180.655326][ T6797] [ 180.658248][ T6797] dump_stack_lvl+0x188/0x24e [ 180.662930][ T6797] ? show_regs_print_info+0x12/0x12 [ 180.668132][ T6797] ? load_image+0x410/0x410 [ 180.672631][ T6797] ? __lock_acquire+0x7c40/0x7c40 [ 180.677666][ T6797] should_fail_ex+0x390/0x4c0 [ 180.682375][ T6797] should_failslab+0x5/0x20 [ 180.686896][ T6797] slab_pre_alloc_hook+0x59/0x300 [ 180.691938][ T6797] ? bpf_prog_test_run_skb+0x23e/0x18e0 [ 180.697499][ T6797] __kmem_cache_alloc_node+0x4f/0x270 [ 180.702887][ T6797] ? bpf_prog_test_run_skb+0x23e/0x18e0 [ 180.708436][ T6797] __kmalloc+0xa3/0x240 [ 180.712586][ T6797] bpf_prog_test_run_skb+0x23e/0x18e0 [ 180.717950][ T6797] ? __fget_files+0x28/0x460 [ 180.722539][ T6797] ? __fget_files+0x3fc/0x460 [ 180.727232][ T6797] ? cpu_online+0xa0/0xa0 [ 180.731586][ T6797] bpf_prog_test_run+0x31c/0x390 [ 180.736556][ T6797] __sys_bpf+0x62b/0x780 [ 180.740832][ T6797] ? bpf_link_show_fdinfo+0x380/0x380 [ 180.746259][ T6797] ? lock_chain_count+0x20/0x20 [ 180.751141][ T6797] __x64_sys_bpf+0x78/0x90 [ 180.755588][ T6797] do_syscall_64+0x4c/0xa0 [ 180.760018][ T6797] ? clear_bhb_loop+0x60/0xb0 [ 180.764699][ T6797] ? clear_bhb_loop+0x60/0xb0 [ 180.769373][ T6797] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 180.775271][ T6797] RIP: 0033:0x7f8298d9de59 [ 180.779693][ T6797] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 180.799330][ T6797] RSP: 002b:00007f8299b85028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 180.807770][ T6797] RAX: ffffffffffffffda RBX: 00007f8299025fa0 RCX: 00007f8298d9de59 [ 180.815765][ T6797] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 180.823763][ T6797] RBP: 00007f8299b85090 R08: 0000000000000000 R09: 0000000000000000 [ 180.831764][ T6797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 180.839759][ T6797] R13: 00007f8299026038 R14: 00007f8299025fa0 R15: 00007ffe6fa21f68 [ 180.847767][ T6797] [ 180.902017][ T6799] netlink: 188 bytes leftover after parsing attributes in process `syz.1.717'. [ 181.267774][ T6813] netlink: 168 bytes leftover after parsing attributes in process `syz.1.722'. [ 181.329619][ T6820] netlink: 'syz.4.723': attribute type 39 has an invalid length. [ 181.348775][ T6817] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 181.548740][ T6823] netlink: 'syz.3.726': attribute type 25 has an invalid length. [ 181.676071][ T6823] netlink: 'syz.3.726': attribute type 9 has an invalid length. [ 181.726374][ T6823] netlink: 40 bytes leftover after parsing attributes in process `syz.3.726'. [ 182.156397][ T6840] FAULT_INJECTION: forcing a failure. [ 182.156397][ T6840] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 182.194754][ T6840] CPU: 0 PID: 6840 Comm: syz.3.731 Not tainted syzkaller #0 [ 182.202101][ T6840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 182.212174][ T6840] Call Trace: [ 182.215477][ T6840] [ 182.218403][ T6840] dump_stack_lvl+0x188/0x24e [ 182.223083][ T6840] ? show_regs_print_info+0x12/0x12 [ 182.228277][ T6840] ? load_image+0x410/0x410 [ 182.232780][ T6840] ? __lock_acquire+0x7c40/0x7c40 [ 182.237807][ T6840] should_fail_ex+0x390/0x4c0 [ 182.242500][ T6840] _copy_from_user+0x2c/0x170 [ 182.247173][ T6840] bpf_prog_test_run_skb+0x263/0x18e0 [ 182.252579][ T6840] ? __fget_files+0x28/0x460 [ 182.257170][ T6840] ? __fget_files+0x3fc/0x460 [ 182.261850][ T6840] ? cpu_online+0xa0/0xa0 [ 182.266178][ T6840] bpf_prog_test_run+0x31c/0x390 [ 182.271116][ T6840] __sys_bpf+0x62b/0x780 [ 182.275354][ T6840] ? bpf_link_show_fdinfo+0x380/0x380 [ 182.280733][ T6840] ? lock_chain_count+0x20/0x20 [ 182.285591][ T6840] __x64_sys_bpf+0x78/0x90 [ 182.290009][ T6840] do_syscall_64+0x4c/0xa0 [ 182.294422][ T6840] ? clear_bhb_loop+0x60/0xb0 [ 182.299118][ T6840] ? clear_bhb_loop+0x60/0xb0 [ 182.303805][ T6840] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 182.309696][ T6840] RIP: 0033:0x7f34d3b9de59 [ 182.314107][ T6840] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 182.333714][ T6840] RSP: 002b:00007f34d4a1c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 182.342134][ T6840] RAX: ffffffffffffffda RBX: 00007f34d3e25fa0 RCX: 00007f34d3b9de59 [ 182.350133][ T6840] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 182.358100][ T6840] RBP: 00007f34d4a1c090 R08: 0000000000000000 R09: 0000000000000000 [ 182.367029][ T6840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 182.375001][ T6840] R13: 00007f34d3e26038 R14: 00007f34d3e25fa0 R15: 00007fffa8cce848 [ 182.382979][ T6840] [ 184.428366][ T6868] __nla_validate_parse: 1 callbacks suppressed [ 184.428380][ T6868] netlink: 48 bytes leftover after parsing attributes in process `syz.1.741'. [ 184.443769][ T6871] netlink: 'syz.2.742': attribute type 22 has an invalid length. [ 184.699015][ T6889] netlink: 'syz.1.743': attribute type 39 has an invalid length. [ 184.764909][ T6891] netlink: 'syz.3.748': attribute type 11 has an invalid length. [ 184.930015][ T6895] netlink: 'syz.4.749': attribute type 6 has an invalid length. [ 184.969993][ T6895] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.749'. [ 186.230151][ T6923] netlink: 10 bytes leftover after parsing attributes in process `syz.4.757'. [ 187.390715][ T6942] netlink: 'syz.2.762': attribute type 39 has an invalid length. [ 188.063125][ T6967] netlink: 'syz.4.772': attribute type 21 has an invalid length. [ 188.072411][ T6967] netlink: 156 bytes leftover after parsing attributes in process `syz.4.772'. [ 188.634587][ T6991] FAULT_INJECTION: forcing a failure. [ 188.634587][ T6991] name failslab, interval 1, probability 0, space 0, times 0 [ 188.648556][ T6991] CPU: 0 PID: 6991 Comm: syz.0.780 Not tainted syzkaller #0 [ 188.655889][ T6991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 188.665973][ T6991] Call Trace: [ 188.667309][ T6990] delete_channel: no stack [ 188.669253][ T6991] [ 188.673807][ T6990] delete_channel: no stack [ 188.676595][ T6991] dump_stack_lvl+0x188/0x24e [ 188.676628][ T6991] ? show_regs_print_info+0x12/0x12 [ 188.676646][ T6991] ? load_image+0x410/0x410 [ 188.676677][ T6991] should_fail_ex+0x390/0x4c0 [ 188.700165][ T6991] should_failslab+0x5/0x20 [ 188.704694][ T6991] slab_pre_alloc_hook+0x59/0x300 [ 188.709747][ T6991] ? __kernel_text_address+0x9/0x30 [ 188.712024][ T6988] delete_channel: no stack [ 188.714954][ T6991] ? unwind_get_return_address+0x49/0x80 [ 188.725012][ T6991] kmem_cache_alloc+0x56/0x2f0 [ 188.729803][ T6991] ? skb_clone+0x1e7/0x370 [ 188.734250][ T6991] skb_clone+0x1e7/0x370 [ 188.738527][ T6991] bpf_clone_redirect+0x169/0x4a0 [ 188.743591][ T6991] bpf_prog_973cd02a7a0e8181+0x56/0x5b [ 188.749084][ T6991] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 188.755088][ T6991] ? __lock_acquire+0x7c40/0x7c40 [ 188.760142][ T6991] ? lock_chain_count+0x20/0x20 [ 188.765018][ T6991] ? seqcount_lockdep_reader_access+0x127/0x1d0 [ 188.771281][ T6991] ? lockdep_hardirqs_on+0x94/0x140 [ 188.776493][ T6991] ? ktime_get+0x7b/0x270 [ 188.780834][ T6991] ? seqcount_lockdep_reader_access+0x18d/0x1d0 [ 188.787099][ T6991] ? ktime_get_real_ts64+0x440/0x440 [ 188.792407][ T6991] ? read_lock_is_recursive+0x10/0x10 [ 188.797790][ T6991] ? __cant_sleep+0x220/0x220 [ 188.802479][ T6991] ? ktime_get+0x247/0x270 [ 188.806920][ T6991] bpf_test_run+0x2b6/0x830 [ 188.811463][ T6991] ? dst_hold+0xb0/0xb0 [ 188.815631][ T6991] ? eth_get_headlen+0x200/0x200 [ 188.820583][ T6991] ? __build_skb+0x24b/0x3b0 [ 188.825190][ T6991] bpf_prog_test_run_skb+0xdaf/0x18e0 [ 188.830595][ T6991] ? cpu_online+0xa0/0xa0 [ 188.834932][ T6991] bpf_prog_test_run+0x31c/0x390 [ 188.839885][ T6991] __sys_bpf+0x62b/0x780 [ 188.844150][ T6991] ? bpf_link_show_fdinfo+0x380/0x380 [ 188.849549][ T6991] ? lock_chain_count+0x20/0x20 [ 188.854418][ T6991] __x64_sys_bpf+0x78/0x90 [ 188.858849][ T6991] do_syscall_64+0x4c/0xa0 [ 188.863284][ T6991] ? clear_bhb_loop+0x60/0xb0 [ 188.867985][ T6991] ? clear_bhb_loop+0x60/0xb0 [ 188.872718][ T6991] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 188.878631][ T6991] RIP: 0033:0x7f5272d9de59 [ 188.883055][ T6991] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 188.902673][ T6991] RSP: 002b:00007f5273d17028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 188.911097][ T6991] RAX: ffffffffffffffda RBX: 00007f5273025fa0 RCX: 00007f5272d9de59 [ 188.919081][ T6991] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 188.927059][ T6991] RBP: 00007f5273d17090 R08: 0000000000000000 R09: 0000000000000000 [ 188.935038][ T6991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 188.943012][ T6991] R13: 00007f5273026038 R14: 00007f5273025fa0 R15: 00007ffe63f67378 [ 188.951012][ T6991] [ 189.498626][ T7014] netlink: 'syz.0.785': attribute type 29 has an invalid length. [ 189.504860][ T7012] netlink: 'syz.1.786': attribute type 21 has an invalid length. [ 189.536853][ T7012] netlink: 156 bytes leftover after parsing attributes in process `syz.1.786'. [ 189.577139][ T7014] netlink: 'syz.0.785': attribute type 29 has an invalid length. [ 189.667095][ T7019] netlink: 'syz.0.785': attribute type 29 has an invalid length. [ 189.828007][ T7022] netlink: 'syz.3.789': attribute type 10 has an invalid length. [ 189.867397][ T7022] device hsr0 entered promiscuous mode [ 189.887501][ T7022] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 190.582575][ T7047] FAULT_INJECTION: forcing a failure. [ 190.582575][ T7047] name failslab, interval 1, probability 0, space 0, times 0 [ 190.635221][ T7047] CPU: 0 PID: 7047 Comm: syz.3.796 Not tainted syzkaller #0 [ 190.642576][ T7047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 190.652655][ T7047] Call Trace: [ 190.655947][ T7047] [ 190.658894][ T7047] dump_stack_lvl+0x188/0x24e [ 190.663601][ T7047] ? show_regs_print_info+0x12/0x12 [ 190.668820][ T7047] ? load_image+0x410/0x410 [ 190.673362][ T7047] should_fail_ex+0x390/0x4c0 [ 190.678066][ T7047] should_failslab+0x5/0x20 [ 190.682582][ T7047] slab_pre_alloc_hook+0x59/0x300 [ 190.687621][ T7047] ? __kernel_text_address+0x9/0x30 [ 190.692836][ T7047] ? unwind_get_return_address+0x49/0x80 [ 190.698493][ T7047] kmem_cache_alloc+0x56/0x2f0 [ 190.703278][ T7047] ? skb_clone+0x1e7/0x370 [ 190.707718][ T7047] skb_clone+0x1e7/0x370 [ 190.711990][ T7047] bpf_clone_redirect+0x169/0x4a0 [ 190.717037][ T7047] bpf_prog_973cd02a7a0e8181+0x56/0x5b [ 190.722519][ T7047] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 190.728535][ T7047] ? __lock_acquire+0x7c40/0x7c40 [ 190.733588][ T7047] ? lock_chain_count+0x20/0x20 [ 190.738463][ T7047] ? seqcount_lockdep_reader_access+0x127/0x1d0 [ 190.744735][ T7047] ? lockdep_hardirqs_on+0x94/0x140 [ 190.749930][ T7047] ? ktime_get+0x7b/0x270 [ 190.754269][ T7047] ? seqcount_lockdep_reader_access+0x18d/0x1d0 [ 190.760506][ T7047] ? ktime_get_real_ts64+0x440/0x440 [ 190.765790][ T7047] ? read_lock_is_recursive+0x10/0x10 [ 190.771164][ T7047] ? __cant_sleep+0x220/0x220 [ 190.775833][ T7047] ? ktime_get+0x247/0x270 [ 190.780249][ T7047] bpf_test_run+0x2b6/0x830 [ 190.784760][ T7047] ? dst_hold+0xb0/0xb0 [ 190.788914][ T7047] ? eth_get_headlen+0x200/0x200 [ 190.793895][ T7047] ? __build_skb+0x24b/0x3b0 [ 190.798524][ T7047] bpf_prog_test_run_skb+0xdaf/0x18e0 [ 190.803906][ T7047] ? cpu_online+0xa0/0xa0 [ 190.808232][ T7047] bpf_prog_test_run+0x31c/0x390 [ 190.813176][ T7047] __sys_bpf+0x62b/0x780 [ 190.817426][ T7047] ? bpf_link_show_fdinfo+0x380/0x380 [ 190.822807][ T7047] ? lock_chain_count+0x20/0x20 [ 190.827658][ T7047] __x64_sys_bpf+0x78/0x90 [ 190.832075][ T7047] do_syscall_64+0x4c/0xa0 [ 190.836491][ T7047] ? clear_bhb_loop+0x60/0xb0 [ 190.841168][ T7047] ? clear_bhb_loop+0x60/0xb0 [ 190.845843][ T7047] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 190.851749][ T7047] RIP: 0033:0x7f34d3b9de59 [ 190.856171][ T7047] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 190.875779][ T7047] RSP: 002b:00007f34d4a1c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 190.884192][ T7047] RAX: ffffffffffffffda RBX: 00007f34d3e25fa0 RCX: 00007f34d3b9de59 [ 190.892159][ T7047] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 190.900127][ T7047] RBP: 00007f34d4a1c090 R08: 0000000000000000 R09: 0000000000000000 [ 190.908093][ T7047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 190.916074][ T7047] R13: 00007f34d3e26038 R14: 00007f34d3e25fa0 R15: 00007fffa8cce848 [ 190.924071][ T7047] [ 191.216565][ T4275] Bluetooth: hci0: command 0x0406 tx timeout [ 191.216992][ T4277] Bluetooth: hci1: command 0x0406 tx timeout [ 191.222622][ T4275] Bluetooth: hci2: command 0x0406 tx timeout [ 191.222651][ T4275] Bluetooth: hci3: command 0x0406 tx timeout [ 191.222677][ T4275] Bluetooth: hci4: command 0x0406 tx timeout [ 191.592780][ T7070] netlink: 'syz.3.801': attribute type 21 has an invalid length. [ 191.633216][ T7070] netlink: 156 bytes leftover after parsing attributes in process `syz.3.801'. [ 192.459359][ T7098] FAULT_INJECTION: forcing a failure. [ 192.459359][ T7098] name failslab, interval 1, probability 0, space 0, times 0 [ 192.472361][ T7098] CPU: 1 PID: 7098 Comm: syz.0.812 Not tainted syzkaller #0 [ 192.479678][ T7098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 192.489753][ T7098] Call Trace: [ 192.493051][ T7098] [ 192.496000][ T7098] dump_stack_lvl+0x188/0x24e [ 192.500706][ T7098] ? show_regs_print_info+0x12/0x12 [ 192.505931][ T7098] ? load_image+0x410/0x410 [ 192.510454][ T7098] ? skb_network_protocol+0x52f/0x790 [ 192.515857][ T7098] should_fail_ex+0x390/0x4c0 [ 192.520569][ T7098] should_failslab+0x5/0x20 [ 192.525104][ T7098] slab_pre_alloc_hook+0x59/0x300 [ 192.530149][ T7098] ? netif_skb_features+0xafa/0x1630 [ 192.535450][ T7098] kmem_cache_alloc+0x56/0x2f0 [ 192.540233][ T7098] ? skb_clone+0x1e7/0x370 [ 192.544680][ T7098] skb_clone+0x1e7/0x370 [ 192.548939][ T7098] ? dev_queue_xmit_nit+0x200/0xba0 [ 192.554164][ T7098] dev_queue_xmit_nit+0x23b/0xba0 [ 192.559212][ T7098] ? dev_queue_xmit_nit+0x29/0xba0 [ 192.564346][ T7098] ? validate_xmit_skb+0x7ca/0xe80 [ 192.569480][ T7098] dev_hard_start_xmit+0x158/0x8b0 [ 192.574616][ T7098] ? validate_xmit_skb_list+0x120/0x120 [ 192.580197][ T7098] __dev_queue_xmit+0x1b4b/0x3810 [ 192.585248][ T7098] ? __dev_queue_xmit+0x281/0x3810 [ 192.590382][ T7098] ? netdev_core_pick_tx+0x360/0x360 [ 192.595698][ T7098] ? skb_release_data+0x1d3/0x7e0 [ 192.600747][ T7098] __bpf_redirect+0x8c7/0x1110 [ 192.605533][ T7098] bpf_clone_redirect+0x311/0x4a0 [ 192.610576][ T7098] bpf_prog_973cd02a7a0e8181+0x56/0x5b [ 192.616062][ T7098] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 192.622075][ T7098] ? __lock_acquire+0x7c40/0x7c40 [ 192.627119][ T7098] ? lock_chain_count+0x20/0x20 [ 192.631992][ T7098] ? seqcount_lockdep_reader_access+0x127/0x1d0 [ 192.638248][ T7098] ? lockdep_hardirqs_on+0x94/0x140 [ 192.643456][ T7098] ? ktime_get+0x7b/0x270 [ 192.647798][ T7098] ? seqcount_lockdep_reader_access+0x18d/0x1d0 [ 192.654064][ T7098] ? ktime_get_real_ts64+0x440/0x440 [ 192.659359][ T7098] ? read_lock_is_recursive+0x10/0x10 [ 192.664744][ T7098] ? __cant_sleep+0x220/0x220 [ 192.669435][ T7098] ? ktime_get+0x247/0x270 [ 192.673871][ T7098] bpf_test_run+0x2b6/0x830 [ 192.678409][ T7098] ? dst_hold+0xb0/0xb0 [ 192.682579][ T7098] ? eth_get_headlen+0x200/0x200 [ 192.687533][ T7098] ? __build_skb+0x24b/0x3b0 [ 192.692144][ T7098] bpf_prog_test_run_skb+0xdaf/0x18e0 [ 192.697551][ T7098] ? cpu_online+0xa0/0xa0 [ 192.701890][ T7098] bpf_prog_test_run+0x31c/0x390 [ 192.706848][ T7098] __sys_bpf+0x62b/0x780 [ 192.711126][ T7098] ? bpf_link_show_fdinfo+0x380/0x380 [ 192.716545][ T7098] ? lock_chain_count+0x20/0x20 [ 192.721432][ T7098] __x64_sys_bpf+0x78/0x90 [ 192.725867][ T7098] do_syscall_64+0x4c/0xa0 [ 192.730294][ T7098] ? clear_bhb_loop+0x60/0xb0 [ 192.734986][ T7098] ? clear_bhb_loop+0x60/0xb0 [ 192.739681][ T7098] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 192.745592][ T7098] RIP: 0033:0x7f5272d9de59 [ 192.750018][ T7098] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 192.769647][ T7098] RSP: 002b:00007f5273d17028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 192.778094][ T7098] RAX: ffffffffffffffda RBX: 00007f5273025fa0 RCX: 00007f5272d9de59 [ 192.786078][ T7098] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 192.794061][ T7098] RBP: 00007f5273d17090 R08: 0000000000000000 R09: 0000000000000000 [ 192.802047][ T7098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 192.810044][ T7098] R13: 00007f5273026038 R14: 00007f5273025fa0 R15: 00007ffe63f67378 [ 192.818057][ T7098] [ 194.267699][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.274044][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.190632][ T7113] netlink: 10 bytes leftover after parsing attributes in process `syz.2.816'. [ 195.448991][ T7127] netlink: 'syz.0.820': attribute type 21 has an invalid length. [ 195.478920][ T7127] netlink: 156 bytes leftover after parsing attributes in process `syz.0.820'. [ 196.366896][ T7167] netlink: 132 bytes leftover after parsing attributes in process `syz.0.832'. [ 196.456085][ T7168] netlink: 132 bytes leftover after parsing attributes in process `syz.0.832'. [ 196.466908][ T7167] netlink: 'syz.0.832': attribute type 21 has an invalid length. [ 197.129698][ T7176] device syzkaller0 entered promiscuous mode [ 200.471318][ T7190] netlink: 132 bytes leftover after parsing attributes in process `syz.1.839'. [ 200.484325][ T7207] netlink: 36 bytes leftover after parsing attributes in process `syz.2.844'. [ 200.504109][ T7207] netlink: 'syz.2.844': attribute type 1 has an invalid length. [ 200.512860][ T7207] netlink: 6 bytes leftover after parsing attributes in process `syz.2.844'. [ 200.538986][ T7208] netlink: 'syz.2.844': attribute type 21 has an invalid length. [ 200.570515][ T7211] device bridge_slave_1 left promiscuous mode [ 200.582568][ T7211] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.593398][ T7211] device bridge_slave_0 left promiscuous mode [ 200.638377][ T7211] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.937764][ T7279] netlink: 'syz.3.850': attribute type 10 has an invalid length. [ 201.065650][ T7284] FAULT_INJECTION: forcing a failure. [ 201.065650][ T7284] name failslab, interval 1, probability 0, space 0, times 0 [ 201.078653][ T7284] CPU: 1 PID: 7284 Comm: syz.2.853 Not tainted syzkaller #0 [ 201.085973][ T7284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 201.096062][ T7284] Call Trace: [ 201.099361][ T7284] [ 201.102310][ T7284] dump_stack_lvl+0x188/0x24e [ 201.107015][ T7284] ? verify_lock_unused+0x140/0x140 [ 201.112242][ T7284] ? show_regs_print_info+0x12/0x12 [ 201.117468][ T7284] ? load_image+0x410/0x410 [ 201.121990][ T7284] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 201.127918][ T7284] ? ct_nmi_exit+0x145/0x1c0 [ 201.132539][ T7284] should_fail_ex+0x390/0x4c0 [ 201.137247][ T7284] should_failslab+0x5/0x20 [ 201.141768][ T7284] slab_pre_alloc_hook+0x59/0x300 [ 201.146819][ T7284] ? dst_cow_metrics_generic+0x52/0x1b0 [ 201.152394][ T7284] __kmem_cache_alloc_node+0x4f/0x270 [ 201.157800][ T7284] ? dst_cow_metrics_generic+0x52/0x1b0 [ 201.163373][ T7284] kmalloc_trace+0x26/0xe0 [ 201.167819][ T7284] dst_cow_metrics_generic+0x52/0x1b0 [ 201.173211][ T7284] rt6_do_update_pmtu+0x118/0x560 [ 201.178243][ T7284] __ip6_rt_update_pmtu+0x30a/0xd30 [ 201.183444][ T7284] ? memset+0x1e/0x40 [ 201.187421][ T7284] ? ip6_update_pmtu+0x360/0x360 [ 201.192353][ T7284] ? xfrm_lookup_with_ifid+0x1b27/0x1fc0 [ 201.197996][ T7284] ? __xfrm_sk_clone_policy+0x8e0/0x8e0 [ 201.203541][ T7284] ? ip6_rt_update_pmtu+0x31/0xc0 [ 201.208563][ T7284] ? ip6_link_failure+0x4c0/0x4c0 [ 201.213592][ T7284] tnl_update_pmtu+0x5b1/0x1040 [ 201.218463][ T7284] ip_tunnel_xmit+0xd47/0x25d0 [ 201.223240][ T7284] ? ip4_dst_hoplimit+0x2d0/0x2d0 [ 201.228265][ T7284] ? skb_push+0x8a/0xd0 [ 201.232422][ T7284] ? gre_build_header+0x251/0x9a0 [ 201.237468][ T7284] ipgre_xmit+0x7e4/0xb60 [ 201.241794][ T7284] dev_hard_start_xmit+0x292/0x8b0 [ 201.246907][ T7284] ? validate_xmit_skb_list+0x120/0x120 [ 201.252452][ T7284] __dev_queue_xmit+0x1b4b/0x3810 [ 201.257475][ T7284] ? __dev_queue_xmit+0x281/0x3810 [ 201.262583][ T7284] ? netdev_core_pick_tx+0x360/0x360 [ 201.267872][ T7284] ? skb_release_data+0x1d3/0x7e0 [ 201.272907][ T7284] __bpf_redirect+0x8c7/0x1110 [ 201.277683][ T7284] bpf_clone_redirect+0x311/0x4a0 [ 201.282708][ T7284] bpf_prog_973cd02a7a0e8181+0x56/0x5b [ 201.288166][ T7284] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 201.294148][ T7284] ? __lock_acquire+0x7c40/0x7c40 [ 201.299173][ T7284] ? lock_chain_count+0x20/0x20 [ 201.304021][ T7284] ? seqcount_lockdep_reader_access+0x127/0x1d0 [ 201.310258][ T7284] ? lockdep_hardirqs_on+0x94/0x140 [ 201.315468][ T7284] ? ktime_get+0x7b/0x270 [ 201.319814][ T7284] ? seqcount_lockdep_reader_access+0x18d/0x1d0 [ 201.326057][ T7284] ? ktime_get_real_ts64+0x440/0x440 [ 201.331340][ T7284] ? read_lock_is_recursive+0x10/0x10 [ 201.336717][ T7284] ? __cant_sleep+0x220/0x220 [ 201.341415][ T7284] ? ktime_get+0x247/0x270 [ 201.345828][ T7284] bpf_test_run+0x2b6/0x830 [ 201.350345][ T7284] ? dst_hold+0xb0/0xb0 [ 201.354494][ T7284] ? eth_get_headlen+0x200/0x200 [ 201.359426][ T7284] ? __build_skb+0x24b/0x3b0 [ 201.364017][ T7284] bpf_prog_test_run_skb+0xdaf/0x18e0 [ 201.369396][ T7284] ? cpu_online+0xa0/0xa0 [ 201.373720][ T7284] bpf_prog_test_run+0x31c/0x390 [ 201.378663][ T7284] __sys_bpf+0x62b/0x780 [ 201.382905][ T7284] ? bpf_link_show_fdinfo+0x380/0x380 [ 201.388285][ T7284] ? lock_chain_count+0x20/0x20 [ 201.393166][ T7284] __x64_sys_bpf+0x78/0x90 [ 201.397581][ T7284] do_syscall_64+0x4c/0xa0 [ 201.401993][ T7284] ? clear_bhb_loop+0x60/0xb0 [ 201.406663][ T7284] ? clear_bhb_loop+0x60/0xb0 [ 201.411335][ T7284] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 201.417225][ T7284] RIP: 0033:0x7f8298d9de59 [ 201.421642][ T7284] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 201.441247][ T7284] RSP: 002b:00007f8299b85028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 201.449656][ T7284] RAX: ffffffffffffffda RBX: 00007f8299025fa0 RCX: 00007f8298d9de59 [ 201.457625][ T7284] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 201.465591][ T7284] RBP: 00007f8299b85090 R08: 0000000000000000 R09: 0000000000000000 [ 201.473556][ T7284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 201.481539][ T7284] R13: 00007f8299026038 R14: 00007f8299025fa0 R15: 00007ffe6fa21f68 [ 201.489528][ T7284] [ 201.744851][ T7279] team0: Device wg1 is of different type [ 201.758714][ T7291] netlink: 'syz.1.854': attribute type 29 has an invalid length. [ 202.036717][ T7291] netlink: 'syz.1.854': attribute type 29 has an invalid length. [ 202.084030][ T7292] netlink: 'syz.1.854': attribute type 29 has an invalid length. [ 202.112664][ T7294] netlink: 'syz.1.854': attribute type 29 has an invalid length. [ 202.265365][ T7303] netlink: 'syz.0.859': attribute type 2 has an invalid length. [ 202.297292][ T7301] delete_channel: no stack [ 202.306320][ T7301] delete_channel: no stack [ 202.417392][ T7299] delete_channel: no stack [ 202.910256][ T7326] device virt_wifi0 entered promiscuous mode [ 203.024276][ T7330] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 203.218751][ T7336] sock: sock_set_timeout: `syz.2.869' (pid 7336) tries to set negative timeout [ 203.369752][ T7342] netlink: 'syz.2.869': attribute type 13 has an invalid length. [ 203.403552][ T7342] netlink: 152 bytes leftover after parsing attributes in process `syz.2.869'. [ 203.466603][ T7342] syz_tun: refused to change device tx_queue_len [ 203.481038][ T7342] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 203.560588][ T7341] netlink: 'syz.0.871': attribute type 9 has an invalid length. [ 204.045230][ T7352] netlink: 36 bytes leftover after parsing attributes in process `syz.0.874'. [ 204.092978][ T7352] netlink: 6 bytes leftover after parsing attributes in process `syz.0.874'. [ 204.194793][ T7352] device bridge_slave_1 left promiscuous mode [ 204.213086][ T7352] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.253729][ T7352] device bridge_slave_0 left promiscuous mode [ 204.275246][ T7352] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.300553][ T7361] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.876'. [ 204.405432][ T7363] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.877'. [ 204.510768][ T7352] team0: Port device bridge0 removed [ 204.990994][ T7353] netlink: 156 bytes leftover after parsing attributes in process `syz.3.873'. [ 205.282012][ T7373] netlink: 88 bytes leftover after parsing attributes in process `syz.2.876'. [ 205.594558][ T7385] device virt_wifi0 entered promiscuous mode [ 206.187786][ T7400] validate_nla: 9 callbacks suppressed [ 206.187802][ T7400] netlink: 'syz.0.886': attribute type 29 has an invalid length. [ 206.342926][ T7400] netlink: 'syz.0.886': attribute type 29 has an invalid length. [ 206.388944][ T7402] netlink: 'syz.0.886': attribute type 29 has an invalid length. [ 206.462187][ T7406] netlink: 'syz.0.886': attribute type 29 has an invalid length. [ 206.842581][ T7419] netlink: 'syz.0.891': attribute type 21 has an invalid length. [ 206.857962][ T7419] netlink: 156 bytes leftover after parsing attributes in process `syz.0.891'. [ 206.870152][ T7423] netlink: 'syz.4.892': attribute type 3 has an invalid length. [ 206.896009][ T7423] netlink: 1034 bytes leftover after parsing attributes in process `syz.4.892'. [ 207.104069][ T7423] netlink: 'syz.4.892': attribute type 1 has an invalid length. [ 207.138297][ T7423] netlink: 181400 bytes leftover after parsing attributes in process `syz.4.892'. [ 207.341922][ T7429] netlink: 'syz.2.894': attribute type 2 has an invalid length. [ 207.424339][ T7429] device 1 entered promiscuous mode [ 208.287745][ T7454] device virt_wifi0 entered promiscuous mode [ 208.381915][ T7461] netlink: 'syz.1.903': attribute type 21 has an invalid length. [ 208.404492][ T7461] netlink: 128 bytes leftover after parsing attributes in process `syz.1.903'. [ 208.422186][ T7461] netlink: 'syz.1.903': attribute type 5 has an invalid length. [ 208.444834][ T7461] netlink: 35 bytes leftover after parsing attributes in process `syz.1.903'. [ 208.628333][ T7470] netlink: 156 bytes leftover after parsing attributes in process `syz.2.906'. [ 208.667039][ T7471] netlink: 'syz.0.905': attribute type 11 has an invalid length. [ 208.689372][ T7471] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.905'. [ 208.717466][ T7471] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.905'. [ 209.288005][ T7463] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 210.022215][ T7486] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.912'. [ 210.037894][ T7491] netlink: 112860 bytes leftover after parsing attributes in process `syz.4.914'. [ 211.559135][ T7520] device virt_wifi0 entered promiscuous mode [ 211.851163][ T7535] validate_nla: 10 callbacks suppressed [ 211.851180][ T7535] netlink: 'syz.3.930': attribute type 29 has an invalid length. [ 211.891659][ T7535] netlink: 'syz.3.930': attribute type 29 has an invalid length. [ 211.916786][ T7535] netlink: 'syz.3.930': attribute type 29 has an invalid length. [ 212.018131][ T7542] __nla_validate_parse: 2 callbacks suppressed [ 212.018146][ T7542] netlink: 132 bytes leftover after parsing attributes in process `syz.2.932'. [ 212.167882][ T7550] netlink: 61211 bytes leftover after parsing attributes in process `syz.3.934'. [ 213.164138][ T7588] netlink: 'syz.2.946': attribute type 19 has an invalid length. [ 213.179497][ T7588] netlink: 156 bytes leftover after parsing attributes in process `syz.2.946'. [ 213.230534][ T7588] netlink: 168 bytes leftover after parsing attributes in process `syz.2.946'. [ 213.481930][ T7595] netlink: 152 bytes leftover after parsing attributes in process `syz.4.950'. [ 214.041748][ T7612] syz.2.957[7612] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 214.041893][ T7612] syz.2.957[7612] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 214.664856][ T7631] netlink: 16211 bytes leftover after parsing attributes in process `syz.4.963'. [ 215.414894][ T7666] netlink: 'syz.2.972': attribute type 2 has an invalid length. [ 215.431725][ T7666] netlink: 'syz.2.972': attribute type 4 has an invalid length. [ 215.480765][ T7666] netlink: 'syz.2.972': attribute type 8 has an invalid length. [ 215.500362][ T7666] netlink: 'syz.2.972': attribute type 9 has an invalid length. [ 215.537720][ T7666] netlink: 'syz.2.972': attribute type 10 has an invalid length. [ 215.545643][ T7666] netlink: 4 bytes leftover after parsing attributes in process `syz.2.972'. [ 216.326376][ T7667] device bridge_slave_1 left promiscuous mode [ 216.333275][ T7667] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.423642][ T7667] device bridge_slave_0 left promiscuous mode [ 216.448395][ T7667] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.986709][ T7700] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.981'. [ 217.030923][ T7700] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 217.689438][ T7720] netlink: 10 bytes leftover after parsing attributes in process `syz.4.986'. [ 218.380642][ T7731] netlink: 'syz.3.990': attribute type 4 has an invalid length. [ 218.526112][ T7741] netlink: 'syz.2.994': attribute type 10 has an invalid length. [ 218.533915][ T7741] netlink: 2 bytes leftover after parsing attributes in process `syz.2.994'. [ 218.618464][ T7741] device bond0 entered promiscuous mode [ 218.624107][ T7741] device bond_slave_0 entered promiscuous mode [ 218.676132][ T7741] device bond_slave_1 entered promiscuous mode [ 218.705187][ T7746] netlink: 'syz.1.997': attribute type 1 has an invalid length. [ 218.776062][ T7746] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.997'. [ 219.023466][ T7756] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1001'. [ 219.883179][ T7772] device pim6reg1 entered promiscuous mode [ 220.745073][ T7790] FAULT_INJECTION: forcing a failure. [ 220.745073][ T7790] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 220.762535][ T7790] CPU: 1 PID: 7790 Comm: syz.1.1010 Not tainted syzkaller #0 [ 220.769974][ T7790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 220.780052][ T7790] Call Trace: [ 220.783347][ T7790] [ 220.786297][ T7790] dump_stack_lvl+0x188/0x24e [ 220.791002][ T7790] ? show_regs_print_info+0x12/0x12 [ 220.796226][ T7790] ? load_image+0x410/0x410 [ 220.800751][ T7790] ? __lock_acquire+0x7c40/0x7c40 [ 220.805803][ T7790] should_fail_ex+0x390/0x4c0 [ 220.810506][ T7790] _copy_from_user+0x2c/0x170 [ 220.815235][ T7790] __sys_bpf+0x2ea/0x780 [ 220.819507][ T7790] ? bpf_link_show_fdinfo+0x380/0x380 [ 220.824927][ T7790] ? lock_chain_count+0x20/0x20 [ 220.829814][ T7790] __x64_sys_bpf+0x78/0x90 [ 220.834262][ T7790] do_syscall_64+0x4c/0xa0 [ 220.838732][ T7790] ? clear_bhb_loop+0x60/0xb0 [ 220.843418][ T7790] ? clear_bhb_loop+0x60/0xb0 [ 220.848104][ T7790] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 220.854004][ T7790] RIP: 0033:0x7ff611f9de59 [ 220.858417][ T7790] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 220.878035][ T7790] RSP: 002b:00007ff612ed4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 220.886450][ T7790] RAX: ffffffffffffffda RBX: 00007ff612225fa0 RCX: 00007ff611f9de59 [ 220.894416][ T7790] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 220.902381][ T7790] RBP: 00007ff612ed4090 R08: 0000000000000000 R09: 0000000000000000 [ 220.910346][ T7790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 220.918314][ T7790] R13: 00007ff612226038 R14: 00007ff612225fa0 R15: 00007ffea170ffb8 [ 220.926299][ T7790] [ 220.971960][ T7793] netlink: 192156 bytes leftover after parsing attributes in process `syz.3.1011'. [ 221.016254][ T7793] netlink: zone id is out of range [ 221.045790][ T7793] netlink: zone id is out of range [ 221.062590][ T7793] netlink: zone id is out of range [ 221.078731][ T7793] netlink: zone id is out of range [ 221.112043][ T7793] netlink: zone id is out of range [ 221.146120][ T7793] netlink: zone id is out of range [ 221.161991][ T7793] netlink: zone id is out of range [ 221.172544][ T7793] netlink: zone id is out of range [ 221.189724][ T7793] netlink: zone id is out of range [ 221.205567][ T7793] netlink: zone id is out of range [ 221.427955][ T7805] netlink: 'syz.2.1015': attribute type 29 has an invalid length. [ 221.446190][ T7805] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1015'. [ 221.480675][ T7812] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1016'. [ 221.492913][ T7805] netlink: 'syz.2.1015': attribute type 29 has an invalid length. [ 221.526267][ T7805] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1015'. [ 221.565228][ T7812] netlink: 'syz.1.1016': attribute type 6 has an invalid length. [ 221.584343][ T7812] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1016'. [ 221.786070][ T7815] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1016'. [ 221.802593][ T7815] device batadv_slave_1 entered promiscuous mode [ 221.820857][ T7817] netlink: 'syz.4.1017': attribute type 2 has an invalid length. [ 221.836108][ T7817] netlink: 'syz.4.1017': attribute type 8 has an invalid length. [ 221.947843][ T7831] FAULT_INJECTION: forcing a failure. [ 221.947843][ T7831] name failslab, interval 1, probability 0, space 0, times 0 [ 222.034968][ T7831] CPU: 0 PID: 7831 Comm: syz.2.1022 Not tainted syzkaller #0 [ 222.042410][ T7831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 222.052487][ T7831] Call Trace: [ 222.055787][ T7831] [ 222.058777][ T7831] dump_stack_lvl+0x188/0x24e [ 222.063493][ T7831] ? show_regs_print_info+0x12/0x12 [ 222.068729][ T7831] ? load_image+0x410/0x410 [ 222.073269][ T7831] ? __lock_acquire+0x7c40/0x7c40 [ 222.078331][ T7831] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 222.084349][ T7831] should_fail_ex+0x390/0x4c0 [ 222.089077][ T7831] should_failslab+0x5/0x20 [ 222.093603][ T7831] slab_pre_alloc_hook+0x59/0x300 [ 222.098655][ T7831] ? bpf_prog_test_run_skb+0x23e/0x18e0 [ 222.104242][ T7831] __kmem_cache_alloc_node+0x4f/0x270 [ 222.109644][ T7831] ? bpf_prog_test_run_skb+0x23e/0x18e0 [ 222.115221][ T7831] __kmalloc+0xa3/0x240 [ 222.119412][ T7831] bpf_prog_test_run_skb+0x23e/0x18e0 [ 222.124821][ T7831] ? __fget_files+0x28/0x460 [ 222.129444][ T7831] ? __fget_files+0x3fc/0x460 [ 222.134168][ T7831] ? cpu_online+0xa0/0xa0 [ 222.138527][ T7831] bpf_prog_test_run+0x31c/0x390 [ 222.143502][ T7831] __sys_bpf+0x62b/0x780 [ 222.147776][ T7831] ? bpf_link_show_fdinfo+0x380/0x380 [ 222.153192][ T7831] ? lock_chain_count+0x20/0x20 [ 222.158084][ T7831] __x64_sys_bpf+0x78/0x90 [ 222.162535][ T7831] do_syscall_64+0x4c/0xa0 [ 222.166976][ T7831] ? clear_bhb_loop+0x60/0xb0 [ 222.171677][ T7831] ? clear_bhb_loop+0x60/0xb0 [ 222.176381][ T7831] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 222.182298][ T7831] RIP: 0033:0x7f8298d9de59 [ 222.186736][ T7831] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 222.206360][ T7831] RSP: 002b:00007f8299b85028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 222.214798][ T7831] RAX: ffffffffffffffda RBX: 00007f8299025fa0 RCX: 00007f8298d9de59 [ 222.222798][ T7831] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 222.230802][ T7831] RBP: 00007f8299b85090 R08: 0000000000000000 R09: 0000000000000000 [ 222.238799][ T7831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 222.246791][ T7831] R13: 00007f8299026038 R14: 00007f8299025fa0 R15: 00007ffe6fa21f68 [ 222.254803][ T7831] [ 222.511580][ T7852] netlink: 'syz.0.1030': attribute type 10 has an invalid length. [ 222.538330][ T7852] batman_adv: batadv0: Adding interface: virt_wifi0 [ 222.544991][ T7852] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.771654][ T7852] batman_adv: batadv0: Interface activated: virt_wifi0 [ 222.814455][ T7865] netlink: 'syz.4.1034': attribute type 1 has an invalid length. [ 222.829608][ T7865] __nla_validate_parse: 3 callbacks suppressed [ 222.829625][ T7865] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.1034'. [ 222.871093][ T7871] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1036'. [ 223.211449][ T7878] can: request_module (can-proto-0) failed. [ 223.556939][ T7893] validate_nla: 2 callbacks suppressed [ 223.556956][ T7893] netlink: 'syz.0.1043': attribute type 39 has an invalid length. [ 223.645137][ T7896] FAULT_INJECTION: forcing a failure. [ 223.645137][ T7896] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 223.753399][ T7896] CPU: 0 PID: 7896 Comm: syz.1.1042 Not tainted syzkaller #0 [ 223.760861][ T7896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 223.770957][ T7896] Call Trace: [ 223.774273][ T7896] [ 223.777247][ T7896] dump_stack_lvl+0x188/0x24e [ 223.781992][ T7896] ? show_regs_print_info+0x12/0x12 [ 223.787250][ T7896] ? load_image+0x410/0x410 [ 223.791824][ T7896] ? __lock_acquire+0x7c40/0x7c40 [ 223.796919][ T7896] should_fail_ex+0x390/0x4c0 [ 223.801657][ T7896] _copy_from_user+0x2c/0x170 [ 223.806382][ T7896] bpf_prog_test_run_skb+0x263/0x18e0 [ 223.811807][ T7896] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 223.818103][ T7896] ? lockdep_hardirqs_on+0x94/0x140 [ 223.823350][ T7896] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 223.829548][ T7896] ? cpu_online+0xa0/0xa0 [ 223.833940][ T7896] ? cpu_online+0xa0/0xa0 [ 223.838326][ T7896] bpf_prog_test_run+0x31c/0x390 [ 223.843331][ T7896] __sys_bpf+0x62b/0x780 [ 223.847631][ T7896] ? bpf_link_show_fdinfo+0x380/0x380 [ 223.853094][ T7896] ? lock_chain_count+0x20/0x20 [ 223.857988][ T7896] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 223.864043][ T7896] __x64_sys_bpf+0x78/0x90 [ 223.868515][ T7896] do_syscall_64+0x4c/0xa0 [ 223.872987][ T7896] ? clear_bhb_loop+0x60/0xb0 [ 223.877724][ T7896] ? clear_bhb_loop+0x60/0xb0 [ 223.882460][ T7896] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 223.888406][ T7896] RIP: 0033:0x7ff611f9de59 [ 223.892863][ T7896] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 223.912515][ T7896] RSP: 002b:00007ff612ed4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 223.920981][ T7896] RAX: ffffffffffffffda RBX: 00007ff612225fa0 RCX: 00007ff611f9de59 [ 223.928996][ T7896] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 223.937011][ T7896] RBP: 00007ff612ed4090 R08: 0000000000000000 R09: 0000000000000000 [ 223.945029][ T7896] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 223.953049][ T7896] R13: 00007ff612226038 R14: 00007ff612225fa0 R15: 00007ffea170ffb8 [ 223.961113][ T7896] [ 224.429692][ T7918] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1051'. [ 224.469899][ T7918] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1051'. [ 224.563861][ T7920] netlink: 'syz.0.1051': attribute type 10 has an invalid length. [ 224.586307][ T7920] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1051'. [ 225.647048][ T7966] FAULT_INJECTION: forcing a failure. [ 225.647048][ T7966] name failslab, interval 1, probability 0, space 0, times 0 [ 225.696390][ T7966] CPU: 0 PID: 7966 Comm: syz.2.1063 Not tainted syzkaller #0 [ 225.703839][ T7966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 225.713921][ T7966] Call Trace: [ 225.717227][ T7966] [ 225.720183][ T7966] dump_stack_lvl+0x188/0x24e [ 225.724893][ T7966] ? show_regs_print_info+0x12/0x12 [ 225.730119][ T7966] ? load_image+0x410/0x410 [ 225.734676][ T7966] ? __might_sleep+0xd0/0xd0 [ 225.739292][ T7966] ? __lock_acquire+0x7c40/0x7c40 [ 225.744362][ T7966] should_fail_ex+0x390/0x4c0 [ 225.749070][ T7966] should_failslab+0x5/0x20 [ 225.753603][ T7966] slab_pre_alloc_hook+0x59/0x300 [ 225.758662][ T7966] ? sk_prot_alloc+0xe7/0x210 [ 225.763370][ T7966] __kmem_cache_alloc_node+0x4f/0x270 [ 225.768772][ T7966] ? sk_prot_alloc+0xe7/0x210 [ 225.773478][ T7966] __kmalloc+0xa3/0x240 [ 225.777670][ T7966] sk_prot_alloc+0xe7/0x210 [ 225.782199][ T7966] ? sk_alloc+0x20/0x330 [ 225.786473][ T7966] sk_alloc+0x36/0x330 [ 225.790569][ T7966] ? bpf_ctx_init+0x154/0x190 [ 225.795273][ T7966] bpf_prog_test_run_skb+0x36d/0x18e0 [ 225.800677][ T7966] ? __fget_files+0x28/0x460 [ 225.805294][ T7966] ? __fget_files+0x3fc/0x460 [ 225.810009][ T7966] ? cpu_online+0xa0/0xa0 [ 225.814358][ T7966] bpf_prog_test_run+0x31c/0x390 [ 225.819327][ T7966] __sys_bpf+0x62b/0x780 [ 225.823604][ T7966] ? bpf_link_show_fdinfo+0x380/0x380 [ 225.829026][ T7966] ? lock_chain_count+0x20/0x20 [ 225.833918][ T7966] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 225.839937][ T7966] __x64_sys_bpf+0x78/0x90 [ 225.844384][ T7966] do_syscall_64+0x4c/0xa0 [ 225.848841][ T7966] ? clear_bhb_loop+0x60/0xb0 [ 225.849909][ T7973] netlink: 'syz.1.1064': attribute type 29 has an invalid length. [ 225.853539][ T7966] ? clear_bhb_loop+0x60/0xb0 [ 225.853578][ T7966] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 225.853601][ T7966] RIP: 0033:0x7f8298d9de59 [ 225.853624][ T7966] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 225.853641][ T7966] RSP: 002b:00007f8299b85028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 225.904576][ T7966] RAX: ffffffffffffffda RBX: 00007f8299025fa0 RCX: 00007f8298d9de59 [ 225.912583][ T7966] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 225.920597][ T7966] RBP: 00007f8299b85090 R08: 0000000000000000 R09: 0000000000000000 [ 225.928609][ T7966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 225.936627][ T7966] R13: 00007f8299026038 R14: 00007f8299025fa0 R15: 00007ffe6fa21f68 [ 225.944693][ T7966] [ 226.015001][ T7973] netlink: 'syz.1.1064': attribute type 29 has an invalid length. [ 226.106214][ T7974] netlink: 'syz.1.1064': attribute type 29 has an invalid length. [ 226.195436][ T7975] netlink: 'syz.1.1064': attribute type 29 has an invalid length. [ 226.280499][ T7972] netlink: 'syz.1.1064': attribute type 29 has an invalid length. [ 227.309043][ T7998] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1072'. [ 227.329338][ T7998] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1072'. [ 227.479397][ T7998] netlink: 184 bytes leftover after parsing attributes in process `syz.3.1072'. [ 229.808522][ T8028] FAULT_INJECTION: forcing a failure. [ 229.808522][ T8028] name failslab, interval 1, probability 0, space 0, times 0 [ 229.850266][ T8028] CPU: 1 PID: 8028 Comm: syz.3.1078 Not tainted syzkaller #0 [ 229.857712][ T8028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 229.867793][ T8028] Call Trace: [ 229.871084][ T8028] [ 229.874026][ T8028] dump_stack_lvl+0x188/0x24e [ 229.878747][ T8028] ? show_regs_print_info+0x12/0x12 [ 229.883983][ T8028] ? load_image+0x410/0x410 [ 229.888524][ T8028] ? __might_sleep+0xd0/0xd0 [ 229.893143][ T8028] ? __lock_acquire+0x7c40/0x7c40 [ 229.898218][ T8028] should_fail_ex+0x390/0x4c0 [ 229.902929][ T8028] should_failslab+0x5/0x20 [ 229.907450][ T8028] slab_pre_alloc_hook+0x59/0x300 [ 229.912480][ T8028] ? apparmor_sk_alloc_security+0x74/0x100 [ 229.918292][ T8028] __kmem_cache_alloc_node+0x4f/0x270 [ 229.923665][ T8028] ? apparmor_sk_alloc_security+0x74/0x100 [ 229.929476][ T8028] kmalloc_trace+0x26/0xe0 [ 229.933897][ T8028] apparmor_sk_alloc_security+0x74/0x100 [ 229.939532][ T8028] security_sk_alloc+0x6a/0xa0 [ 229.944303][ T8028] sk_prot_alloc+0x101/0x210 [ 229.948886][ T8028] ? sk_alloc+0x20/0x330 [ 229.953129][ T8028] sk_alloc+0x36/0x330 [ 229.957204][ T8028] ? bpf_ctx_init+0x154/0x190 [ 229.961878][ T8028] bpf_prog_test_run_skb+0x36d/0x18e0 [ 229.967248][ T8028] ? __fget_files+0x28/0x460 [ 229.971837][ T8028] ? __fget_files+0x3fc/0x460 [ 229.976544][ T8028] ? cpu_online+0xa0/0xa0 [ 229.980869][ T8028] bpf_prog_test_run+0x31c/0x390 [ 229.985805][ T8028] __sys_bpf+0x62b/0x780 [ 229.990047][ T8028] ? bpf_link_show_fdinfo+0x380/0x380 [ 229.995428][ T8028] ? lock_chain_count+0x20/0x20 [ 230.000286][ T8028] __x64_sys_bpf+0x78/0x90 [ 230.004703][ T8028] do_syscall_64+0x4c/0xa0 [ 230.009116][ T8028] ? clear_bhb_loop+0x60/0xb0 [ 230.013789][ T8028] ? clear_bhb_loop+0x60/0xb0 [ 230.018466][ T8028] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 230.024356][ T8028] RIP: 0033:0x7f34d3b9de59 [ 230.028767][ T8028] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 230.048390][ T8028] RSP: 002b:00007f34d4a1c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 230.056801][ T8028] RAX: ffffffffffffffda RBX: 00007f34d3e25fa0 RCX: 00007f34d3b9de59 [ 230.064769][ T8028] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 230.072737][ T8028] RBP: 00007f34d4a1c090 R08: 0000000000000000 R09: 0000000000000000 [ 230.080700][ T8028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 230.088699][ T8028] R13: 00007f34d3e26038 R14: 00007f34d3e25fa0 R15: 00007fffa8cce848 [ 230.096684][ T8028] [ 230.538101][ T8038] netlink: 'syz.2.1081': attribute type 27 has an invalid length. [ 230.659429][ T8043] netlink: 'syz.1.1082': attribute type 3 has an invalid length. [ 230.717254][ T8043] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1082'. [ 230.747167][ T8038] bond0: (slave bond_slave_0): Releasing backup interface [ 230.770238][ T8038] device bond_slave_0 left promiscuous mode [ 230.822903][ T8048] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.1085'. [ 231.012364][ T8048] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 231.056879][ T8056] netlink: 'syz.3.1087': attribute type 3 has an invalid length. [ 231.086223][ T8056] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1087'. [ 231.206893][ T8058] netlink: 'syz.2.1088': attribute type 3 has an invalid length. [ 231.215766][ T8058] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1088'. [ 232.065761][ T8074] FAULT_INJECTION: forcing a failure. [ 232.065761][ T8074] name failslab, interval 1, probability 0, space 0, times 0 [ 232.099491][ T8074] CPU: 1 PID: 8074 Comm: syz.4.1091 Not tainted syzkaller #0 [ 232.106930][ T8074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 232.117009][ T8074] Call Trace: [ 232.120297][ T8074] [ 232.123240][ T8074] dump_stack_lvl+0x188/0x24e [ 232.127947][ T8074] ? show_regs_print_info+0x12/0x12 [ 232.133200][ T8074] ? load_image+0x410/0x410 [ 232.137723][ T8074] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 232.143886][ T8074] should_fail_ex+0x390/0x4c0 [ 232.148565][ T8074] should_failslab+0x5/0x20 [ 232.153062][ T8074] slab_pre_alloc_hook+0x59/0x300 [ 232.158085][ T8074] kmem_cache_alloc+0x56/0x2f0 [ 232.162886][ T8074] ? __build_skb+0x27/0x3b0 [ 232.167386][ T8074] __build_skb+0x27/0x3b0 [ 232.171709][ T8074] ? build_skb+0x14/0x230 [ 232.176125][ T8074] build_skb+0x1e/0x230 [ 232.180284][ T8074] bpf_prog_test_run_skb+0x38d/0x18e0 [ 232.185654][ T8074] ? __fget_files+0x28/0x460 [ 232.190239][ T8074] ? __fget_files+0x3fc/0x460 [ 232.194918][ T8074] ? cpu_online+0xa0/0xa0 [ 232.199241][ T8074] bpf_prog_test_run+0x31c/0x390 [ 232.204178][ T8074] __sys_bpf+0x62b/0x780 [ 232.208419][ T8074] ? bpf_link_show_fdinfo+0x380/0x380 [ 232.213806][ T8074] ? lock_chain_count+0x20/0x20 [ 232.218663][ T8074] __x64_sys_bpf+0x78/0x90 [ 232.223078][ T8074] do_syscall_64+0x4c/0xa0 [ 232.227495][ T8074] ? clear_bhb_loop+0x60/0xb0 [ 232.232174][ T8074] ? clear_bhb_loop+0x60/0xb0 [ 232.236848][ T8074] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 232.242739][ T8074] RIP: 0033:0x7fc05339de59 [ 232.247148][ T8074] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 232.266757][ T8074] RSP: 002b:00007fc054336028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 232.275171][ T8074] RAX: ffffffffffffffda RBX: 00007fc053625fa0 RCX: 00007fc05339de59 [ 232.283141][ T8074] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 232.291113][ T8074] RBP: 00007fc054336090 R08: 0000000000000000 R09: 0000000000000000 [ 232.299076][ T8074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 232.307044][ T8074] R13: 00007fc053626038 R14: 00007fc053625fa0 R15: 00007ffcf00de338 [ 232.315023][ T8074] [ 232.480357][ T8077] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1093'. [ 233.593076][ T8109] device wlan1 entered promiscuous mode [ 235.181844][ T8128] FAULT_INJECTION: forcing a failure. [ 235.181844][ T8128] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 235.256070][ T8128] CPU: 0 PID: 8128 Comm: syz.0.1109 Not tainted syzkaller #0 [ 235.263521][ T8128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 235.273607][ T8128] Call Trace: [ 235.276896][ T8128] [ 235.279835][ T8128] dump_stack_lvl+0x188/0x24e [ 235.284538][ T8128] ? show_regs_print_info+0x12/0x12 [ 235.289756][ T8128] ? load_image+0x410/0x410 [ 235.294274][ T8128] ? __lock_acquire+0x7c40/0x7c40 [ 235.299323][ T8128] should_fail_ex+0x390/0x4c0 [ 235.304023][ T8128] _copy_to_user+0x2c/0x130 [ 235.308546][ T8128] bpf_test_finish+0x198/0x600 [ 235.313341][ T8128] ? convert_skb_to___skb+0x420/0x420 [ 235.318734][ T8128] ? __build_skb+0x24b/0x3b0 [ 235.323347][ T8128] bpf_prog_test_run_skb+0x1129/0x18e0 [ 235.328843][ T8128] ? cpu_online+0xa0/0xa0 [ 235.333188][ T8128] bpf_prog_test_run+0x31c/0x390 [ 235.338174][ T8128] __sys_bpf+0x62b/0x780 [ 235.342435][ T8128] ? bpf_link_show_fdinfo+0x380/0x380 [ 235.347835][ T8128] ? lock_chain_count+0x20/0x20 [ 235.352713][ T8128] __x64_sys_bpf+0x78/0x90 [ 235.357157][ T8128] do_syscall_64+0x4c/0xa0 [ 235.361590][ T8128] ? clear_bhb_loop+0x60/0xb0 [ 235.366281][ T8128] ? clear_bhb_loop+0x60/0xb0 [ 235.370978][ T8128] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 235.376887][ T8128] RIP: 0033:0x7f5272d9de59 [ 235.381302][ T8128] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 235.400908][ T8128] RSP: 002b:00007f5273d17028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 235.409317][ T8128] RAX: ffffffffffffffda RBX: 00007f5273025fa0 RCX: 00007f5272d9de59 [ 235.417288][ T8128] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 235.425256][ T8128] RBP: 00007f5273d17090 R08: 0000000000000000 R09: 0000000000000000 [ 235.433656][ T8128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 235.441647][ T8128] R13: 00007f5273026038 R14: 00007f5273025fa0 R15: 00007ffe63f67378 [ 235.449630][ T8128] [ 236.800665][ T8161] netlink: 'syz.2.1120': attribute type 21 has an invalid length. [ 236.844120][ T8161] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1120'. [ 237.533794][ T8170] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1123'. [ 238.480083][ T8195] tipc: Started in network mode [ 238.485023][ T8195] tipc: Node identity 9215a268, cluster identity 4711 [ 238.536088][ T8195] tipc: Node number set to 2450891368 [ 239.094554][ T8215] netlink: 'syz.0.1133': attribute type 21 has an invalid length. [ 239.153320][ T8215] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1133'. [ 239.563750][ T8227] netlink: 'syz.0.1138': attribute type 28 has an invalid length. [ 239.596158][ T8227] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1138'. [ 239.641672][ T8231] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.1139'. [ 239.678773][ T8232] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.1139'. [ 240.227084][ T8265] netlink: 10 bytes leftover after parsing attributes in process `syz.4.1150'. [ 240.324166][ T8268] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1149'. [ 240.372177][ T8273] netlink: 'syz.3.1151': attribute type 1 has an invalid length. [ 240.386492][ T8273] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1151'. [ 241.261752][ T8294] netlink: 'syz.4.1158': attribute type 4 has an invalid length. [ 241.285403][ T8294] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1158'. [ 241.358974][ T8297] netlink: 'syz.1.1159': attribute type 1 has an invalid length. [ 241.941900][ T8321] __nla_validate_parse: 2 callbacks suppressed [ 241.941936][ T8321] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1166'. [ 242.199270][ T8336] netlink: 134056 bytes leftover after parsing attributes in process `syz.3.1169'. [ 242.872160][ T8357] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1172'. [ 243.092532][ T8363] netlink: 'syz.2.1174': attribute type 21 has an invalid length. [ 243.107894][ T8363] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1174'. [ 243.261798][ T8375] netlink: 'syz.2.1178': attribute type 21 has an invalid length. [ 243.502929][ T8380] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1180'. [ 243.873536][ T8387] netlink: 'syz.4.1183': attribute type 10 has an invalid length. [ 244.169988][ T8387] team0 (unregistering): Port device team_slave_0 removed [ 244.253974][ T8387] team0 (unregistering): Port device team_slave_1 removed [ 244.369277][ T8387] team0 (unregistering): Port device wlan1 removed [ 244.478363][ T8389] netlink: 'syz.4.1183': attribute type 25 has an invalid length. [ 244.498061][ T8389] netlink: 'syz.4.1183': attribute type 25 has an invalid length. [ 244.542737][ T8406] netlink: 'syz.3.1188': attribute type 21 has an invalid length. [ 244.557534][ T8406] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1188'. [ 244.875294][ T8433] netlink: 'syz.2.1196': attribute type 3 has an invalid length. [ 244.893608][ T8433] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1196'. [ 245.339472][ T8453] TCP: TCP_TX_DELAY enabled [ 246.051536][ T8466] netlink: 'syz.0.1203': attribute type 3 has an invalid length. [ 246.072707][ T8466] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1203'. [ 246.483170][ T8472] netlink: 3143 bytes leftover after parsing attributes in process `syz.4.1204'. [ 247.622104][ T8475] netlink: 'syz.3.1205': attribute type 21 has an invalid length. [ 247.683970][ T8475] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1205'. [ 248.314860][ T8484] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 248.330191][ T8484] syzkaller1: linktype set to 825 [ 248.461122][ T8492] netlink: 'syz.1.1210': attribute type 29 has an invalid length. [ 248.487928][ T8492] netlink: 'syz.1.1210': attribute type 29 has an invalid length. [ 248.522203][ T8497] netlink: 'syz.1.1210': attribute type 29 has an invalid length. [ 248.573041][ T8492] netlink: 'syz.1.1210': attribute type 3 has an invalid length. [ 248.609791][ T8492] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1210'. [ 248.672477][ T8497] netlink: 'syz.1.1210': attribute type 29 has an invalid length. [ 249.302355][ T8508] netlink: 'syz.1.1215': attribute type 10 has an invalid length. [ 249.526554][ T8508] bridge0: port 3(team0) entered disabled state [ 249.574149][ T8508] bridge0: port 3(team0) entered disabled state [ 249.585225][ T8508] device team_slave_0 left promiscuous mode [ 249.667406][ T8508] team0 (unregistering): Port device team_slave_0 removed [ 249.687362][ T8508] device team_slave_1 left promiscuous mode [ 249.759362][ T8508] team0 (unregistering): Port device team_slave_1 removed [ 249.786149][ T8509] netlink: 'syz.1.1215': attribute type 25 has an invalid length. [ 249.804293][ T8509] netlink: 'syz.1.1215': attribute type 25 has an invalid length. [ 249.836413][ T8519] netlink: 'syz.2.1219': attribute type 21 has an invalid length. [ 249.861208][ T8519] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1219'. [ 249.990448][ T8527] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.1221'. [ 250.168301][ T8534] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1223'. [ 250.232097][ T8535] netlink: 'syz.3.1224': attribute type 1 has an invalid length. [ 250.240106][ T8535] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1224'. [ 251.890051][ T8565] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1232'. [ 252.160175][ T8568] team0 (unregistering): Port device team_slave_0 removed [ 252.241153][ T8568] team0 (unregistering): Port device team_slave_1 removed [ 252.334169][ T8582] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1236'. [ 252.358304][ T8582] device hsr0 entered promiscuous mode [ 252.385193][ T8582] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 252.420043][ T8582] bridge0: port 3(hsr0) entered blocking state [ 252.455693][ T8582] bridge0: port 3(hsr0) entered disabled state [ 252.494966][ T8582] bridge0: port 3(hsr0) entered blocking state [ 252.501308][ T8582] bridge0: port 3(hsr0) entered forwarding state [ 252.831849][ T8600] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1243'. [ 252.909274][ T8600] device dummy0 entered promiscuous mode [ 252.980645][ T8600] bridge0: port 4(dummy0) entered blocking state [ 253.006219][ T8600] bridge0: port 4(dummy0) entered disabled state [ 253.030300][ T8600] bridge0: port 4(dummy0) entered blocking state [ 253.037193][ T8600] bridge0: port 4(dummy0) entered forwarding state [ 253.485410][ T8623] validate_nla: 6 callbacks suppressed [ 253.485449][ T8623] netlink: 'syz.4.1247': attribute type 21 has an invalid length. [ 253.573454][ T8623] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1247'. [ 253.603925][ T8625] netlink: 'syz.3.1249': attribute type 9 has an invalid length. [ 253.658431][ T8625] netlink: 207496 bytes leftover after parsing attributes in process `syz.3.1249'. [ 254.086283][ T8637] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1251'. [ 254.647164][ T8651] FAULT_INJECTION: forcing a failure. [ 254.647164][ T8651] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 254.687995][ T8651] CPU: 0 PID: 8651 Comm: syz.3.1256 Not tainted syzkaller #0 [ 254.695440][ T8651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 254.705494][ T8651] Call Trace: [ 254.705503][ T8651] [ 254.705511][ T8651] dump_stack_lvl+0x188/0x24e [ 254.705539][ T8651] ? show_regs_print_info+0x12/0x12 [ 254.721768][ T8651] ? load_image+0x410/0x410 [ 254.726288][ T8651] ? __lock_acquire+0x7c40/0x7c40 [ 254.731325][ T8651] should_fail_ex+0x390/0x4c0 [ 254.736013][ T8651] _copy_from_user+0x2c/0x170 [ 254.740691][ T8651] ___sys_sendmsg+0x1c3/0x360 [ 254.745378][ T8651] ? __sys_sendmsg+0x2a0/0x2a0 [ 254.750168][ T8651] ? lock_chain_count+0x20/0x20 [ 254.755046][ T8651] __se_sys_sendmsg+0x1c3/0x2b0 [ 254.759903][ T8651] ? __x64_sys_sendmsg+0x80/0x80 [ 254.764858][ T8651] ? syscall_enter_from_user_mode+0x2a/0x80 [ 254.770753][ T8651] do_syscall_64+0x4c/0xa0 [ 254.775258][ T8651] ? clear_bhb_loop+0x60/0xb0 [ 254.779941][ T8651] ? clear_bhb_loop+0x60/0xb0 [ 254.784630][ T8651] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 254.790563][ T8651] RIP: 0033:0x7f34d3b9de59 [ 254.794995][ T8651] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 254.814608][ T8651] RSP: 002b:00007f34d4a1c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 254.823052][ T8651] RAX: ffffffffffffffda RBX: 00007f34d3e25fa0 RCX: 00007f34d3b9de59 [ 254.831050][ T8651] RDX: 0000000000000060 RSI: 0000200000000080 RDI: 0000000000000004 [ 254.839021][ T8651] RBP: 00007f34d4a1c090 R08: 0000000000000000 R09: 0000000000000000 [ 254.847004][ T8651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 254.854986][ T8651] R13: 00007f34d3e26038 R14: 00007f34d3e25fa0 R15: 00007fffa8cce848 [ 254.862980][ T8651] [ 255.044169][ T8656] netlink: 'syz.2.1258': attribute type 10 has an invalid length. [ 255.253231][ T8667] netlink: 'syz.1.1262': attribute type 21 has an invalid length. [ 255.272346][ T8667] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1262'. [ 255.303246][ T8673] netlink: 'syz.3.1264': attribute type 10 has an invalid length. [ 255.363835][ T8673] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 255.694526][ T8682] netlink: 'syz.3.1266': attribute type 1 has an invalid length. [ 255.708291][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.714675][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.724879][ T8682] netlink: 'syz.3.1266': attribute type 4 has an invalid length. [ 255.733269][ T8685] netlink: 'syz.3.1266': attribute type 3 has an invalid length. [ 255.753586][ T8685] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1266'. [ 255.792886][ T8682] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.1266'. [ 256.141805][ T8695] FAULT_INJECTION: forcing a failure. [ 256.141805][ T8695] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 256.166180][ T8695] CPU: 1 PID: 8695 Comm: syz.4.1270 Not tainted syzkaller #0 [ 256.173616][ T8695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 256.183689][ T8695] Call Trace: [ 256.186981][ T8695] [ 256.189921][ T8695] dump_stack_lvl+0x188/0x24e [ 256.194625][ T8695] ? show_regs_print_info+0x12/0x12 [ 256.199846][ T8695] ? load_image+0x410/0x410 [ 256.204373][ T8695] ? __lock_acquire+0x7c40/0x7c40 [ 256.209423][ T8695] should_fail_ex+0x390/0x4c0 [ 256.214131][ T8695] _copy_from_user+0x2c/0x170 [ 256.218832][ T8695] __copy_msghdr+0x384/0x560 [ 256.223448][ T8695] ___sys_sendmsg+0x210/0x360 [ 256.228145][ T8695] ? lock_chain_count+0x20/0x20 [ 256.233017][ T8695] ? __sys_sendmsg+0x2a0/0x2a0 [ 256.237911][ T8695] ? __lock_acquire+0x7c40/0x7c40 [ 256.242990][ T8695] __se_sys_sendmsg+0x1c3/0x2b0 [ 256.247907][ T8695] ? ct_nmi_exit+0x145/0x1c0 [ 256.252528][ T8695] ? __x64_sys_sendmsg+0x80/0x80 [ 256.257508][ T8695] ? lockdep_hardirqs_on+0x94/0x140 [ 256.262739][ T8695] do_syscall_64+0x4c/0xa0 [ 256.267182][ T8695] ? clear_bhb_loop+0x60/0xb0 [ 256.271885][ T8695] ? clear_bhb_loop+0x60/0xb0 [ 256.276590][ T8695] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 256.282512][ T8695] RIP: 0033:0x7fc05339de59 [ 256.286944][ T8695] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 256.306578][ T8695] RSP: 002b:00007fc054336028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 256.315028][ T8695] RAX: ffffffffffffffda RBX: 00007fc053625fa0 RCX: 00007fc05339de59 [ 256.323045][ T8695] RDX: 0000000000000060 RSI: 0000200000000080 RDI: 0000000000000004 [ 256.331040][ T8695] RBP: 00007fc054336090 R08: 0000000000000000 R09: 0000000000000000 [ 256.339034][ T8695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 256.347038][ T8695] R13: 00007fc053626038 R14: 00007fc053625fa0 R15: 00007ffcf00de338 [ 256.355048][ T8695] [ 256.719426][ T8711] netlink: 'syz.3.1275': attribute type 21 has an invalid length. [ 256.740610][ T8711] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1275'. [ 256.772968][ T8709] device sit0 left promiscuous mode [ 257.310591][ T8732] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1286'. [ 257.338288][ T8737] FAULT_INJECTION: forcing a failure. [ 257.338288][ T8737] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 257.344766][ T8732] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1286'. [ 257.391067][ T8737] CPU: 1 PID: 8737 Comm: syz.4.1285 Not tainted syzkaller #0 [ 257.398501][ T8737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 257.408588][ T8737] Call Trace: [ 257.411894][ T8737] [ 257.414847][ T8737] dump_stack_lvl+0x188/0x24e [ 257.419559][ T8737] ? show_regs_print_info+0x12/0x12 [ 257.424789][ T8737] ? load_image+0x410/0x410 [ 257.429326][ T8737] ? __lock_acquire+0x7c40/0x7c40 [ 257.434407][ T8737] ? lock_chain_count+0x20/0x20 [ 257.439294][ T8737] should_fail_ex+0x390/0x4c0 [ 257.444012][ T8737] _copy_from_user+0x2c/0x170 [ 257.448719][ T8737] iovec_from_user+0x143/0x360 [ 257.453515][ T8737] __import_iovec+0x6c/0x510 [ 257.458147][ T8737] import_iovec+0x6f/0xa0 [ 257.462508][ T8737] ___sys_sendmsg+0x252/0x360 [ 257.467214][ T8737] ? __sys_sendmsg+0x2a0/0x2a0 [ 257.472014][ T8737] ? ktime_get+0x7b/0x270 [ 257.476380][ T8737] __se_sys_sendmsg+0x1c3/0x2b0 [ 257.481229][ T8737] ? ct_nmi_exit+0x145/0x1c0 [ 257.485815][ T8737] ? __x64_sys_sendmsg+0x80/0x80 [ 257.490763][ T8737] ? lockdep_hardirqs_on+0x94/0x140 [ 257.495959][ T8737] do_syscall_64+0x4c/0xa0 [ 257.500379][ T8737] ? clear_bhb_loop+0x60/0xb0 [ 257.505054][ T8737] ? clear_bhb_loop+0x60/0xb0 [ 257.509731][ T8737] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 257.515627][ T8737] RIP: 0033:0x7fc05339de59 [ 257.520039][ T8737] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 257.539676][ T8737] RSP: 002b:00007fc054336028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 257.548089][ T8737] RAX: ffffffffffffffda RBX: 00007fc053625fa0 RCX: 00007fc05339de59 [ 257.556058][ T8737] RDX: 0000000000000060 RSI: 0000200000000080 RDI: 0000000000000004 [ 257.564057][ T8737] RBP: 00007fc054336090 R08: 0000000000000000 R09: 0000000000000000 [ 257.572027][ T8737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 257.579996][ T8737] R13: 00007fc053626038 R14: 00007fc053625fa0 R15: 00007ffcf00de338 [ 257.587976][ T8737] [ 258.183709][ T8757] netlink: 'syz.4.1291': attribute type 21 has an invalid length. [ 258.196811][ T8757] __nla_validate_parse: 1 callbacks suppressed [ 258.196843][ T8757] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1291'. [ 258.761765][ T8785] FAULT_INJECTION: forcing a failure. [ 258.761765][ T8785] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 258.825271][ T8785] CPU: 0 PID: 8785 Comm: syz.3.1301 Not tainted syzkaller #0 [ 258.832715][ T8785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 258.842794][ T8785] Call Trace: [ 258.846085][ T8785] [ 258.849023][ T8785] dump_stack_lvl+0x188/0x24e [ 258.853731][ T8785] ? show_regs_print_info+0x12/0x12 [ 258.858955][ T8785] ? load_image+0x410/0x410 [ 258.863482][ T8785] ? __might_fault+0xa6/0x120 [ 258.868175][ T8785] ? format_decode+0xb38/0x1330 [ 258.873055][ T8785] should_fail_ex+0x390/0x4c0 [ 258.877775][ T8785] copyin+0x1b/0x120 [ 258.881701][ T8785] _copy_from_iter+0x447/0x1130 [ 258.886593][ T8785] ? copyout_mc+0x110/0x110 [ 258.891137][ T8785] ? txopt_get+0x76/0x3f0 [ 258.894865][ T8774] netlink: 'syz.4.1297': attribute type 10 has an invalid length. [ 258.895476][ T8785] ? txopt_get+0x76/0x3f0 [ 258.895506][ T8785] ? txopt_get+0x340/0x3f0 [ 258.912092][ T8785] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 258.918277][ T8785] ? fl6_sock_lookup+0xc0/0xc0 [ 258.923073][ T8785] rawv6_probe_proto_opt+0x166/0x300 [ 258.928394][ T8785] rawv6_sendmsg+0xa6c/0x1710 [ 258.933106][ T8785] ? compat_rawv6_ioctl+0x60/0x60 [ 258.934699][ T8774] netlink: 65015 bytes leftover after parsing attributes in process `syz.4.1297'. [ 258.938155][ T8785] ? tomoyo_socket_sendmsg_permission+0x212/0x2f0 [ 258.938183][ T8785] ? aa_sock_msg_perm+0x94/0x150 [ 258.938207][ T8785] ? inet_sendmsg+0x7a/0x2a0 [ 258.938228][ T8785] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 258.938246][ T8785] ? inet_send_prepare+0x250/0x250 [ 258.938270][ T8785] ____sys_sendmsg+0x5ed/0x9a0 [ 258.938302][ T8785] ? __sys_sendmsg_sock+0x30/0x30 [ 258.938321][ T8785] ? __import_iovec+0x306/0x510 [ 258.988443][ T8785] ? import_iovec+0x6f/0xa0 [ 258.992963][ T8785] ___sys_sendmsg+0x2a2/0x360 [ 258.997653][ T8785] ? __sys_sendmsg+0x2a0/0x2a0 [ 259.002427][ T8785] ? ktime_get+0x7b/0x270 [ 259.006770][ T8785] __se_sys_sendmsg+0x1c3/0x2b0 [ 259.011622][ T8785] ? __x64_sys_sendmsg+0x80/0x80 [ 259.016580][ T8785] ? lockdep_hardirqs_on+0x94/0x140 [ 259.021776][ T8785] do_syscall_64+0x4c/0xa0 [ 259.026190][ T8785] ? clear_bhb_loop+0x60/0xb0 [ 259.030865][ T8785] ? clear_bhb_loop+0x60/0xb0 [ 259.035540][ T8785] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 259.041436][ T8785] RIP: 0033:0x7f34d3b9de59 [ 259.045843][ T8785] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 259.065448][ T8785] RSP: 002b:00007f34d4a1c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 259.073856][ T8785] RAX: ffffffffffffffda RBX: 00007f34d3e25fa0 RCX: 00007f34d3b9de59 [ 259.081826][ T8785] RDX: 0000000000000060 RSI: 0000200000000080 RDI: 0000000000000004 [ 259.089795][ T8785] RBP: 00007f34d4a1c090 R08: 0000000000000000 R09: 0000000000000000 [ 259.097763][ T8785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 259.105852][ T8785] R13: 00007f34d3e26038 R14: 00007f34d3e25fa0 R15: 00007fffa8cce848 [ 259.113845][ T8785] [ 259.139047][ T8774] netlink: 'syz.4.1297': attribute type 10 has an invalid length. [ 259.164157][ T8774] netlink: 65015 bytes leftover after parsing attributes in process `syz.4.1297'. [ 259.289576][ T8796] netlink: 'syz.1.1304': attribute type 11 has an invalid length. [ 259.311256][ T8796] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1304'. [ 259.384431][ T8797] netlink: 'syz.1.1304': attribute type 25 has an invalid length. [ 259.413782][ T8797] netlink: 'syz.1.1304': attribute type 29 has an invalid length. [ 260.106762][ T8795] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 260.163182][ T8812] netlink: 'syz.2.1307': attribute type 21 has an invalid length. [ 260.226880][ T8812] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1307'. [ 260.404321][ T8825] device veth1_macvtap left promiscuous mode [ 260.861749][ T8839] netlink: 'syz.3.1316': attribute type 21 has an invalid length. [ 261.518454][ T8870] netlink: 'syz.4.1324': attribute type 29 has an invalid length. [ 261.585313][ T8870] netlink: 'syz.4.1324': attribute type 29 has an invalid length. [ 261.610719][ T8871] netlink: 'syz.4.1324': attribute type 29 has an invalid length. [ 261.657010][ T8870] netlink: 'syz.4.1324': attribute type 29 has an invalid length. [ 261.689891][ T8876] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1325'. [ 261.857621][ T8882] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1329'. [ 261.896416][ T8882] net_ratelimit: 305 callbacks suppressed [ 261.896435][ T8882] openvswitch: netlink: Message has 6 unknown bytes. [ 261.984185][ T8892] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1333'. [ 262.093494][ T8892] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1333'. [ 262.136301][ T8897] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1332'. [ 262.431343][ T8909] can: request_module (can-proto-0) failed. [ 263.259343][ T8930] __nla_validate_parse: 2 callbacks suppressed [ 263.259375][ T8930] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1343'. [ 263.651111][ T8953] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1350'. [ 263.947963][ T8961] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1351'. [ 264.127107][ T8956] validate_nla: 11 callbacks suppressed [ 264.127175][ T8956] netlink: 'syz.1.1351': attribute type 13 has an invalid length. [ 264.146309][ T8956] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1351'. [ 264.200284][ T8956] syz_tun: refused to change device tx_queue_len [ 264.229724][ T8956] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 264.276087][ T8965] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1355'. [ 264.333593][ T8976] netlink: 'syz.0.1357': attribute type 1 has an invalid length. [ 264.350730][ T8960] syzkaller0: tun_chr_ioctl cmd 1074025680 [ 264.357919][ T8976] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1357'. [ 264.415430][ T8981] netlink: 'syz.0.1357': attribute type 1 has an invalid length. [ 264.465491][ T8981] netlink: 'syz.0.1357': attribute type 3 has an invalid length. [ 264.491837][ T8981] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1357'. [ 264.542439][ T8983] netlink: 'syz.1.1358': attribute type 21 has an invalid length. [ 264.574507][ T8983] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1358'. [ 264.837296][ T8994] netlink: 'syz.1.1363': attribute type 10 has an invalid length. [ 264.910179][ T8994] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.927407][ T8994] device bridge_slave_1 left promiscuous mode [ 264.942814][ T8994] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.971837][ T8994] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 266.218029][ T9055] netlink: 'syz.1.1381': attribute type 10 has an invalid length. [ 266.271434][ T9055] netlink: 55 bytes leftover after parsing attributes in process `syz.1.1381'. [ 267.692871][ T9105] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1396'. [ 267.737450][ T9105] netlink: 'syz.1.1396': attribute type 10 has an invalid length. [ 268.711778][ T9129] delete_channel: no stack [ 268.748524][ T9129] delete_channel: no stack [ 269.347074][ T9138] delete_channel: no stack [ 269.351658][ T9138] delete_channel: no stack [ 269.386233][ T9138] delete_channel: no stack [ 269.390880][ T9138] delete_channel: no stack [ 269.405687][ T9138] delete_channel: no stack [ 269.415801][ T9138] delete_channel: no stack [ 269.426284][ T9138] delete_channel: no stack [ 269.430889][ T9138] delete_channel: no stack [ 269.456338][ T9138] delete_channel: no stack [ 269.460937][ T9138] delete_channel: no stack [ 269.465631][ T9138] delete_channel: no stack [ 269.526883][ T9138] delete_channel: no stack [ 269.531509][ T9138] delete_channel: no stack [ 269.546179][ T9138] delete_channel: no stack [ 269.550877][ T9138] delete_channel: no stack [ 269.555455][ T9138] delete_channel: no stack [ 269.581795][ T9138] delete_channel: no stack [ 269.591804][ T9138] delete_channel: no stack [ 269.617033][ T9138] delete_channel: no stack [ 269.621634][ T9138] delete_channel: no stack [ 269.636197][ T9138] delete_channel: no stack [ 269.646289][ T9138] delete_channel: no stack [ 269.666952][ T9138] delete_channel: no stack [ 269.691996][ T9138] delete_channel: no stack [ 269.720732][ T9138] delete_channel: no stack [ 269.725365][ T9138] delete_channel: no stack [ 269.736457][ T9138] delete_channel: no stack [ 269.757131][ T9138] delete_channel: no stack [ 269.761812][ T9138] delete_channel: no stack [ 269.796230][ T9138] delete_channel: no stack [ 269.813074][ T9138] delete_channel: no stack [ 269.826292][ T9138] delete_channel: no stack [ 269.836338][ T9138] delete_channel: no stack [ 269.856296][ T9138] delete_channel: no stack [ 269.861023][ T9138] delete_channel: no stack [ 269.892794][ T9138] delete_channel: no stack [ 269.906345][ T9138] delete_channel: no stack [ 269.911049][ T9138] delete_channel: no stack [ 269.915630][ T9138] delete_channel: no stack [ 269.936210][ T9138] delete_channel: no stack [ 269.946193][ T9138] delete_channel: no stack [ 269.950791][ T9138] delete_channel: no stack [ 269.991561][ T9138] delete_channel: no stack [ 270.002935][ T9138] delete_channel: no stack [ 270.015346][ T9138] delete_channel: no stack [ 270.028429][ T9138] delete_channel: no stack [ 270.049645][ T9138] delete_channel: no stack [ 270.066259][ T9138] delete_channel: no stack [ 270.070934][ T9138] delete_channel: no stack [ 270.098494][ T9138] delete_channel: no stack [ 270.103148][ T9138] delete_channel: no stack [ 270.118087][ T9138] delete_channel: no stack [ 270.122776][ T9138] delete_channel: no stack [ 270.156254][ T9138] delete_channel: no stack [ 270.165403][ T9138] delete_channel: no stack [ 270.192253][ T9138] delete_channel: no stack [ 270.214764][ T9138] delete_channel: no stack [ 270.236256][ T9138] delete_channel: no stack [ 270.240881][ T9138] delete_channel: no stack [ 270.316352][ T9138] delete_channel: no stack [ 270.320991][ T9138] delete_channel: no stack [ 270.325580][ T9138] delete_channel: no stack [ 270.363873][ T9138] delete_channel: no stack [ 270.375632][ T9138] delete_channel: no stack [ 270.410442][ T9138] delete_channel: no stack [ 271.080132][ T9186] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.1420'. [ 271.127255][ T9186] bridge_slave_1: default FDB implementation only supports local addresses [ 272.079179][ T9210] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1427'. [ 272.664777][ T9226] delete_channel: no stack [ 272.862083][ T9235] netlink: 'syz.2.1435': attribute type 29 has an invalid length. [ 272.921100][ T9235] netlink: 'syz.2.1435': attribute type 29 has an invalid length. [ 273.063614][ T9242] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.1432'. [ 274.705621][ T9273] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1443'. [ 275.614960][ T9299] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1446'. [ 276.468195][ T9315] FAULT_INJECTION: forcing a failure. [ 276.468195][ T9315] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 276.642273][ T9315] CPU: 1 PID: 9315 Comm: syz.0.1453 Not tainted syzkaller #0 [ 276.649721][ T9315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 276.659801][ T9315] Call Trace: [ 276.663103][ T9315] [ 276.666053][ T9315] dump_stack_lvl+0x188/0x24e [ 276.670776][ T9315] ? show_regs_print_info+0x12/0x12 [ 276.676011][ T9315] ? load_image+0x410/0x410 [ 276.680546][ T9315] ? __lock_acquire+0x7c40/0x7c40 [ 276.685596][ T9315] ? perf_trace_lock_acquire+0x101/0x3f0 [ 276.691282][ T9315] should_fail_ex+0x390/0x4c0 [ 276.695987][ T9315] _copy_from_user+0x2c/0x170 [ 276.700681][ T9315] ___sys_sendmsg+0x1c3/0x360 [ 276.705365][ T9315] ? __sys_sendmsg+0x2a0/0x2a0 [ 276.710148][ T9315] ? __lock_acquire+0x7c40/0x7c40 [ 276.715201][ T9315] __se_sys_sendmsg+0x1c3/0x2b0 [ 276.720055][ T9315] ? __x64_sys_sendmsg+0x80/0x80 [ 276.725007][ T9315] ? lockdep_hardirqs_on+0x94/0x140 [ 276.730206][ T9315] do_syscall_64+0x4c/0xa0 [ 276.734619][ T9315] ? clear_bhb_loop+0x60/0xb0 [ 276.739298][ T9315] ? clear_bhb_loop+0x60/0xb0 [ 276.743972][ T9315] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 276.749890][ T9315] RIP: 0033:0x7f5272d9de59 [ 276.754325][ T9315] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 276.773944][ T9315] RSP: 002b:00007f5273cf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 276.782357][ T9315] RAX: ffffffffffffffda RBX: 00007f5273026090 RCX: 00007f5272d9de59 [ 276.790326][ T9315] RDX: 0000000000048800 RSI: 00002000000001c0 RDI: 0000000000000004 [ 276.798294][ T9315] RBP: 00007f5273cf6090 R08: 0000000000000000 R09: 0000000000000000 [ 276.806260][ T9315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 276.814232][ T9315] R13: 00007f5273026128 R14: 00007f5273026090 R15: 00007ffe63f67378 [ 276.822215][ T9315] [ 277.466405][ T9342] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1459'. [ 279.764991][ T9362] netlink: 'syz.0.1467': attribute type 21 has an invalid length. [ 279.775001][ T9362] netlink: 'syz.0.1467': attribute type 5 has an invalid length. [ 279.816165][ T9368] netlink: 14568 bytes leftover after parsing attributes in process `syz.2.1469'. [ 280.348152][ T9390] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1474'. [ 280.663303][ T9406] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1478'. [ 280.745221][ T9406] device hsr_slave_0 left promiscuous mode [ 280.766749][ T9406] device hsr_slave_1 left promiscuous mode [ 280.772861][ T4275] Bluetooth: hci3: SCO packet for unknown connection handle 3564 [ 280.811957][ T9406] bridge0: port 3(hsr0) entered disabled state [ 280.931657][ T9406] bridge0: port 3(hsr0) entered disabled state [ 281.214495][ T9423] netlink: 202920 bytes leftover after parsing attributes in process `syz.4.1483'. [ 281.479516][ T9434] netlink: 134056 bytes leftover after parsing attributes in process `syz.0.1485'. [ 282.026286][ T9446] sctp: [Deprecated]: syz.2.1488 (pid 9446) Use of struct sctp_assoc_value in delayed_ack socket option. [ 282.026286][ T9446] Use struct sctp_sack_info instead [ 284.289060][ T9434] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 284.298967][ T9441] netlink: 63315 bytes leftover after parsing attributes in process `syz.3.1487'. [ 284.302195][ T9434] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 284.357259][ T9434] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 285.052005][ T9483] netlink: 'syz.4.1499': attribute type 3 has an invalid length. [ 285.100860][ T9483] netlink: 114680 bytes leftover after parsing attributes in process `syz.4.1499'. [ 285.472427][ T9497] netlink: 'syz.4.1507': attribute type 9 has an invalid length. [ 285.545413][ T9497] netlink: 351 bytes leftover after parsing attributes in process `syz.4.1507'. [ 285.956700][ T9511] netlink: 4068 bytes leftover after parsing attributes in process `syz.4.1510'. [ 288.264471][ T9525] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1516'. [ 288.286651][ T9525] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1516'. [ 288.322234][ T9527] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1516'. [ 289.925733][ T9583] netlink: 'syz.4.1533': attribute type 21 has an invalid length. [ 291.319783][ T9643] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1551'. [ 291.342079][ T9643] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1551'. [ 291.400639][ T9643] netlink: 33 bytes leftover after parsing attributes in process `syz.1.1551'. [ 291.477434][ T9643] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1551'. [ 291.579433][ T9643] netlink: 33 bytes leftover after parsing attributes in process `syz.1.1551'. [ 291.595905][ T9643] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1551'. [ 291.609809][ T9643] netlink: 33 bytes leftover after parsing attributes in process `syz.1.1551'. [ 293.201646][ T9697] netlink: 'syz.0.1564': attribute type 23 has an invalid length. [ 293.279126][ T9699] netlink: 'syz.0.1564': attribute type 23 has an invalid length. [ 294.239632][ T9728] netlink: 'syz.1.1575': attribute type 10 has an invalid length. [ 294.277495][ T9728] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1575'. [ 294.500034][ T9732] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 294.532525][ T9738] netlink: 'syz.3.1578': attribute type 29 has an invalid length. [ 294.566985][ T9738] netlink: 'syz.3.1578': attribute type 29 has an invalid length. [ 294.610179][ T9740] netlink: 'syz.3.1578': attribute type 29 has an invalid length. [ 294.795471][ T9738] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1578'. [ 295.289587][ T9756] netlink: 'syz.4.1582': attribute type 3 has an invalid length. [ 295.376077][ T9756] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1582'. [ 296.561788][ T9783] netlink: 'syz.4.1591': attribute type 3 has an invalid length. [ 299.559904][ T9839] device syzkaller0 entered promiscuous mode [ 299.586098][ T9846] syzkaller0: mtu less than device minimum [ 299.631048][ T9836] netlink: 134056 bytes leftover after parsing attributes in process `syz.2.1608'. [ 300.475614][ T9874] netlink: 'syz.0.1616': attribute type 3 has an invalid length. [ 300.499606][ T9874] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1616'. [ 302.556624][ T9885] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 302.578035][ T9889] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1623'. [ 302.587287][ T9885] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 302.606367][ T9885] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 302.994239][ T9912] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1631'. [ 303.151721][ T9920] netlink: 'syz.1.1630': attribute type 10 has an invalid length. [ 303.544936][ T9927] netlink: 134056 bytes leftover after parsing attributes in process `syz.0.1634'. [ 304.185013][ T9944] netlink: 'syz.1.1637': attribute type 21 has an invalid length. [ 304.222313][ T9944] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1637'. [ 304.644763][ T9964] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1645'. [ 304.686416][ T9964] openvswitch: netlink: Message has 6 unknown bytes. [ 304.843553][ T9963] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1644'. [ 304.862326][ T9969] netlink: 'syz.4.1647': attribute type 21 has an invalid length. [ 306.335226][ T9999] delete_channel: no stack [ 307.653867][ T9991] netlink: 'syz.1.1653': attribute type 12 has an invalid length. [ 307.663779][ T9991] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1653'. [ 307.676676][T10000] netlink: 'syz.0.1656': attribute type 10 has an invalid length. [ 307.718239][T10000] team0: Port device wlan1 added [ 307.723747][T10005] netlink: 'syz.4.1658': attribute type 10 has an invalid length. [ 307.833202][T10007] netlink: 192 bytes leftover after parsing attributes in process `syz.1.1659'. [ 308.403994][T10036] netlink: 'syz.0.1669': attribute type 21 has an invalid length. [ 308.439606][T10036] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1669'. [ 308.455503][T10043] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.1669'. [ 308.469595][T10041] netlink: 56815 bytes leftover after parsing attributes in process `syz.3.1668'. [ 309.232625][T10056] netlink: 'syz.3.1672': attribute type 3 has an invalid length. [ 309.261230][T10056] netlink: 149476 bytes leftover after parsing attributes in process `syz.3.1672'. [ 309.325103][T10059] netlink: 'syz.4.1673': attribute type 10 has an invalid length. [ 309.346010][T10059] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1673'. [ 309.355314][T10059] device virt_wifi0 left promiscuous mode [ 309.362267][T10059] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 311.550595][T10063] sock: sock_set_timeout: `syz.3.1675' (pid 10063) tries to set negative timeout [ 311.682445][T10072] netlink: 'syz.3.1675': attribute type 13 has an invalid length. [ 311.744363][T10072] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1675'. [ 311.918945][T10079] netlink: 'syz.0.1679': attribute type 2 has an invalid length. [ 312.057286][T10079] device 1 entered promiscuous mode [ 312.095676][T10079] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1679'. [ 313.033992][T10100] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1684'. [ 313.663968][T10112] netlink: 'syz.1.1689': attribute type 10 has an invalid length. [ 313.677501][T10112] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1689'. [ 313.703329][T10112] bridge0: port 2(veth0_vlan) entered blocking state [ 313.738455][T10112] bridge0: port 2(veth0_vlan) entered disabled state [ 313.759906][T10112] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 314.199521][T10118] netlink: 194236 bytes leftover after parsing attributes in process `syz.0.1692'. [ 314.212742][T10118] netlink: zone id is out of range [ 314.228927][T10118] netlink: zone id is out of range [ 314.234731][T10118] netlink: zone id is out of range [ 314.240467][T10118] netlink: zone id is out of range [ 314.246438][T10118] netlink: get zone limit has 8 unknown bytes [ 314.617591][T10126] delete_channel: no stack [ 314.677174][T10126] delete_channel: no stack [ 316.006429][T10144] netlink: 'syz.0.1701': attribute type 1 has an invalid length. [ 316.025103][T10146] netlink: 'syz.4.1702': attribute type 27 has an invalid length. [ 316.456838][T10168] sock: sock_set_timeout: `syz.2.1707' (pid 10168) tries to set negative timeout [ 316.531765][T10172] netlink: 'syz.2.1707': attribute type 13 has an invalid length. [ 316.551539][T10172] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1707'. [ 316.580488][T10172] syz_tun: refused to change device tx_queue_len [ 316.624807][T10172] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 316.686961][T10174] netlink: 'syz.2.1707': attribute type 10 has an invalid length. [ 316.781270][T10174] team0: Port device netdevsim0 added [ 317.007717][T10186] netlink: 188 bytes leftover after parsing attributes in process `syz.4.1712'. [ 317.020268][T10193] netlink: 194236 bytes leftover after parsing attributes in process `syz.2.1714'. [ 317.054082][T10193] netlink: zone id is out of range [ 317.060727][T10193] netlink: zone id is out of range [ 317.077600][T10193] netlink: zone id is out of range [ 317.092752][T10193] netlink: zone id is out of range [ 317.098393][T10193] netlink: get zone limit has 8 unknown bytes [ 317.148812][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.155230][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.297884][T10203] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.1717'. [ 317.325549][T10205] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.1717'. [ 317.940683][T10218] netlink: 'syz.1.1719': attribute type 10 has an invalid length. [ 318.536509][T10233] sock: sock_set_timeout: `syz.1.1725' (pid 10233) tries to set negative timeout [ 318.691999][T10231] netlink: 'syz.2.1726': attribute type 21 has an invalid length. [ 318.725611][T10231] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1726'. [ 318.793559][T10233] netlink: 'syz.1.1725': attribute type 13 has an invalid length. [ 318.839778][T10233] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1725'. [ 318.860603][T10233] syz_tun: refused to change device tx_queue_len [ 318.870869][T10233] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 318.977793][T10234] device veth0_vlan left promiscuous mode [ 319.257752][T10234] device veth0_vlan entered promiscuous mode [ 319.272211][T10241] netlink: 'syz.1.1725': attribute type 10 has an invalid length. [ 319.300112][T10241] bond0: (slave netdevsim0): Releasing backup interface [ 319.693306][T10262] sctp: [Deprecated]: syz.0.1732 (pid 10262) Use of int in max_burst socket option deprecated. [ 319.693306][T10262] Use struct sctp_assoc_value instead [ 319.983506][T10263] delete_channel: no stack [ 320.898428][T10296] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.1743'. [ 321.944581][T10311] netlink: 212168 bytes leftover after parsing attributes in process `syz.4.1748'. [ 322.846367][T10329] netlink: 'syz.2.1751': attribute type 27 has an invalid length. [ 322.867622][T10329] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1751'. [ 323.872047][T10313] netlink: 61951 bytes leftover after parsing attributes in process `syz.1.1749'. [ 323.893137][T10311] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 323.903630][T10323] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.1751'. [ 323.926264][T10311] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 323.943017][T10311] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 324.110416][T10336] netlink: 'syz.1.1754': attribute type 9 has an invalid length. [ 324.167701][T10336] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.1754'. [ 324.305770][T10340] netlink: 'syz.4.1755': attribute type 3 has an invalid length. [ 324.345779][T10340] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1755'. [ 324.951985][T10359] netlink: 'syz.2.1760': attribute type 15 has an invalid length. [ 324.996551][T10359] netlink: 'syz.2.1760': attribute type 7 has an invalid length. [ 325.980016][T10376] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1763'. [ 326.705839][T10396] netlink: 'syz.2.1770': attribute type 10 has an invalid length. [ 326.716222][T10396] netlink: 'syz.2.1770': attribute type 19 has an invalid length. [ 326.724084][T10396] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1770'. [ 326.806139][T10399] netlink: 'syz.2.1770': attribute type 21 has an invalid length. [ 326.827411][T10400] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1771'. [ 326.848103][T10399] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1770'. [ 326.890703][T10404] netlink: 'syz.1.1772': attribute type 10 has an invalid length. [ 327.189065][T10410] netlink: 'syz.0.1774': attribute type 3 has an invalid length. [ 327.215393][T10410] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1774'. [ 327.252846][T10413] netlink: zone id is out of range [ 327.347474][T10413] netlink: zone id is out of range [ 327.423711][T10413] netlink: zone id is out of range [ 327.466490][T10413] netlink: get zone limit has 8 unknown bytes [ 328.406225][T10433] netlink: 'syz.0.1779': attribute type 10 has an invalid length. [ 328.598264][T10433] team0: Port device netdevsim0 added [ 328.694272][T10434] team0: Port device netdevsim0 removed [ 328.759179][T10434] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 329.011379][T10450] __nla_validate_parse: 1 callbacks suppressed [ 329.011413][T10450] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1785'. [ 329.464957][T10466] validate_nla: 1 callbacks suppressed [ 329.464992][T10466] netlink: 'syz.3.1789': attribute type 3 has an invalid length. [ 329.500291][T10467] netlink: 'syz.2.1790': attribute type 4 has an invalid length. [ 329.556618][T10466] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1789'. [ 329.653140][T10470] netlink: 'syz.2.1790': attribute type 10 has an invalid length. [ 329.974372][T10477] netlink: 'syz.4.1792': attribute type 16 has an invalid length. [ 329.996438][T10477] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1792'. [ 330.196150][T10485] netlink: 14568 bytes leftover after parsing attributes in process `syz.1.1796'. [ 330.518755][T10489] netlink: 'syz.4.1797': attribute type 10 has an invalid length. [ 330.718621][T10493] netlink: 'syz.3.1798': attribute type 10 has an invalid length. [ 331.176904][T10499] netlink: 188 bytes leftover after parsing attributes in process `syz.4.1800'. [ 331.456541][T10507] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.1804'. [ 331.503356][T10507] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.1804'. [ 331.591057][T10512] netlink: 'syz.3.1805': attribute type 19 has an invalid length. [ 331.629023][T10512] netlink: 172 bytes leftover after parsing attributes in process `syz.3.1805'. [ 331.718700][T10511] netlink: 'syz.3.1805': attribute type 19 has an invalid length. [ 331.737121][T10511] netlink: 172 bytes leftover after parsing attributes in process `syz.3.1805'. [ 332.049011][T10526] netlink: 'syz.3.1808': attribute type 3 has an invalid length. [ 332.072644][T10526] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1808'. [ 332.096545][T10529] netlink: 'syz.4.1809': attribute type 27 has an invalid length. [ 333.347215][T10576] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 333.416201][T10576] syzkaller1: linktype set to 786 [ 333.452290][T10578] device lo entered promiscuous mode [ 333.512576][T10578] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 334.951510][T10633] validate_nla: 3 callbacks suppressed [ 334.951546][T10633] netlink: 'syz.0.1849': attribute type 3 has an invalid length. [ 334.976185][T10633] __nla_validate_parse: 5 callbacks suppressed [ 334.976217][T10633] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1849'. [ 335.026830][T10641] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1839'. [ 335.588808][T10667] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1846'. [ 335.630950][T10667] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1846'. [ 335.646270][T10666] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1846'. [ 338.956903][T10700] netlink: 'syz.2.1857': attribute type 27 has an invalid length. [ 338.973646][T10700] netlink: 2418 bytes leftover after parsing attributes in process `syz.2.1857'. [ 339.201041][T10709] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1861'. [ 339.226396][T10709] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1861'. [ 339.551444][T10738] device syzkaller0 entered promiscuous mode [ 339.664921][T10738] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1867'. [ 339.686354][T10738] openvswitch: netlink: Flow key attr not present in new flow. [ 339.990039][T10767] netlink: 'syz.0.1876': attribute type 10 has an invalid length. [ 340.253395][T10767] team0: Port device hsr_slave_0 added [ 340.457973][T10782] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1881'. [ 340.524016][T10790] netlink: 'syz.0.1883': attribute type 33 has an invalid length. [ 340.546205][T10790] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1883'. [ 340.753121][T10797] netlink: 'syz.2.1884': attribute type 17 has an invalid length. [ 340.767964][T10798] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.1885'. [ 340.936455][T10775] delete_channel: no stack [ 341.372265][T10820] netlink: 'syz.4.1891': attribute type 2 has an invalid length. [ 341.381656][T10820] netlink: 'syz.4.1891': attribute type 1 has an invalid length. [ 341.393060][T10820] netlink: 'syz.4.1891': attribute type 4 has an invalid length. [ 341.414190][T10821] netlink: 'syz.1.1892': attribute type 17 has an invalid length. [ 341.416753][T10820] netlink: 208312 bytes leftover after parsing attributes in process `syz.4.1891'. [ 341.443749][T10823] raw_sendmsg: syz.0.1893 forgot to set AF_INET. Fix it! [ 341.453415][T10821] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1892'. [ 341.519607][T10821] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 341.677573][T10831] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1895'. [ 342.115888][T10842] syz.2.1900 (10842) used obsolete PPPIOCDETACH ioctl [ 343.040703][T10876] netlink: 188 bytes leftover after parsing attributes in process `syz.4.1909'. [ 343.591861][T10899] netlink: 'syz.2.1916': attribute type 2 has an invalid length. [ 344.545494][T10939] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1928'. [ 344.732749][T10939] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 344.760354][T10939] device bond_slave_1 left promiscuous mode [ 344.781837][T10939] bond0 (unregistering): Released all slaves [ 345.482627][T10963] netlink: 40227 bytes leftover after parsing attributes in process `syz.2.1936'. [ 345.529762][T10962] netlink: 40227 bytes leftover after parsing attributes in process `syz.2.1936'. [ 345.574784][T10966] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1938'. [ 346.070362][ T4275] Bluetooth: hci0: ISO packet for unknown connection handle 3852 [ 346.277469][T10986] netlink: 61967 bytes leftover after parsing attributes in process `syz.0.1953'. [ 347.089199][T11011] netlink: 'syz.2.1950': attribute type 3 has an invalid length. [ 347.097368][T11011] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1950'. [ 347.361754][T11019] netlink: 'syz.0.1962': attribute type 20 has an invalid length. [ 347.621124][T11025] device syzkaller0 entered promiscuous mode [ 351.075755][T11031] netlink: 'syz.2.1956': attribute type 15 has an invalid length. [ 351.083684][T11031] netlink: 'syz.2.1956': attribute type 7 has an invalid length. [ 351.838754][T11084] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.1970'. [ 352.482414][T11096] device syzkaller0 entered promiscuous mode [ 357.123717][T11115] netlink: 15478 bytes leftover after parsing attributes in process `syz.2.1976'. [ 357.133132][T11121] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1980'. [ 357.530577][T11157] netlink: 'syz.4.1988': attribute type 10 has an invalid length. [ 357.892319][T11169] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1996'. [ 358.723185][T11208] netlink: 'syz.2.2006': attribute type 3 has an invalid length. [ 358.770584][T11208] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2006'. [ 359.272480][T11233] netlink: 'syz.0.2010': attribute type 21 has an invalid length. [ 359.298958][T11233] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2010'. [ 359.310956][T11231] netlink: 'syz.3.2011': attribute type 29 has an invalid length. [ 359.322976][T11231] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2011'. [ 359.990208][T11271] IPv6: Can't replace route, no match found [ 360.162053][T11276] netlink: 'syz.0.2024': attribute type 3 has an invalid length. [ 360.180448][T11276] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2024'. [ 360.830934][T11303] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2033'. [ 361.078864][T11317] netlink: 'syz.3.2036': attribute type 3 has an invalid length. [ 361.108855][T11317] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2036'. [ 361.198971][T11321] netlink: 'syz.2.2038': attribute type 10 has an invalid length. [ 361.233852][T11325] netlink: 'syz.4.2037': attribute type 49 has an invalid length. [ 361.266635][T11325] netlink: 'syz.4.2037': attribute type 49 has an invalid length. [ 361.300740][T11327] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2040'. [ 361.435710][T11327] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 361.583258][T11327] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 361.627050][T11327] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 361.659778][T11327] bond0 (unregistering): Released all slaves [ 364.784226][T11360] netlink: 'syz.2.2050': attribute type 3 has an invalid length. [ 364.813622][T11360] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2050'. [ 365.111405][T11382] netlink: 'syz.1.2056': attribute type 2 has an invalid length. [ 365.119845][T11382] netlink: 'syz.1.2056': attribute type 8 has an invalid length. [ 365.130001][T11382] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2056'. [ 366.504855][T11421] netlink: 192 bytes leftover after parsing attributes in process `syz.0.2067'. [ 366.669042][T11431] netlink: 'syz.4.2069': attribute type 3 has an invalid length. [ 366.762728][T11431] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2069'. [ 367.012677][T11430] netlink: 'syz.3.2068': attribute type 10 has an invalid length. [ 367.060788][T11430] device netdevsim0 entered promiscuous mode [ 367.120736][T11436] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2070'. [ 368.697223][T11469] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2077'. [ 369.092868][T11480] netlink: 134056 bytes leftover after parsing attributes in process `syz.4.2083'. [ 369.123519][T11482] netlink: 134056 bytes leftover after parsing attributes in process `syz.4.2083'. [ 369.323385][T11488] netlink: 'syz.2.2085': attribute type 17 has an invalid length. [ 369.342897][T11488] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2085'. [ 369.368675][T11488] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 369.627662][T11500] netlink: 'syz.1.2088': attribute type 3 has an invalid length. [ 369.635630][T11500] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2088'. [ 369.713184][T11502] netlink: 'syz.2.2089': attribute type 2 has an invalid length. [ 369.724514][T11502] netlink: 'syz.2.2089': attribute type 8 has an invalid length. [ 369.965088][T11509] mac80211_hwsim hwsim4 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 370.669485][T11527] netlink: 'syz.3.2098': attribute type 3 has an invalid length. [ 370.831239][T11527] __nla_validate_parse: 1 callbacks suppressed [ 370.831257][T11527] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2098'. [ 370.874772][T11535] netlink: 'syz.1.2100': attribute type 3 has an invalid length. [ 370.895405][T11536] netlink: 'syz.1.2100': attribute type 4 has an invalid length. [ 371.060114][T11536] netlink: 'syz.1.2100': attribute type 3 has an invalid length. [ 371.151466][T11535] netlink: 163968 bytes leftover after parsing attributes in process `syz.1.2100'. [ 371.169870][T11536] netlink: 153952 bytes leftover after parsing attributes in process `syz.1.2100'. [ 371.746539][T11562] can: request_module (can-proto-0) failed. [ 371.975419][T11567] netlink: 'syz.0.2107': attribute type 2 has an invalid length. [ 371.999013][T11567] netlink: 'syz.0.2107': attribute type 8 has an invalid length. [ 372.013954][T11567] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2107'. [ 372.345282][T11579] netlink: 'syz.3.2110': attribute type 3 has an invalid length. [ 372.387495][T11579] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2110'. [ 372.683516][T11595] sctp: [Deprecated]: syz.1.2113 (pid 11595) Use of struct sctp_assoc_value in delayed_ack socket option. [ 372.683516][T11595] Use struct sctp_sack_info instead [ 372.876216][T11603] netlink: 'syz.2.2117': attribute type 29 has an invalid length. [ 372.905404][T11603] netlink: 'syz.2.2117': attribute type 29 has an invalid length. [ 372.963073][T11608] netlink: 'syz.4.2118': attribute type 10 has an invalid length. [ 373.856271][ T6218] wlan1: Trigger new scan to find an IBSS to join [ 374.090278][T11641] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2125'. [ 374.467966][T11651] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2131'. [ 375.031757][T11663] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2132'. [ 375.284823][T11667] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2134'. [ 375.708003][T11699] validate_nla: 6 callbacks suppressed [ 375.708024][T11699] netlink: 'syz.3.2142': attribute type 1 has an invalid length. [ 375.732134][T11699] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.2142'. [ 375.753013][T11695] netlink: 'syz.0.2140': attribute type 10 has an invalid length. [ 375.818215][T11695] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 375.878601][T11701] __nla_validate_parse: 1 callbacks suppressed [ 375.878624][T11701] netlink: 146340 bytes leftover after parsing attributes in process `syz.4.2143'. [ 375.902467][T11701] openvswitch: netlink: Key type 386 is out of range max 32 [ 375.925867][T11695] batman_adv: batadv0: Adding interface: veth1_vlan [ 376.002889][T11695] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (299) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 376.183205][T11695] batman_adv: batadv0: Interface activated: veth1_vlan [ 376.279452][T11695] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 376.316444][T11699] netlink: 'syz.3.2142': attribute type 21 has an invalid length. [ 376.407412][T11715] netlink: 'syz.2.2145': attribute type 3 has an invalid length. [ 376.415206][T11715] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2145'. [ 376.896195][ T6218] wlan1: Trigger new scan to find an IBSS to join [ 378.577806][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.584148][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.624552][ T56] wlan1: Creating new IBSS network, BSSID 00:00:00:08:00:00 [ 379.892443][T11742] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2153'. [ 379.907226][T11744] netlink: 'syz.3.2154': attribute type 29 has an invalid length. [ 379.915474][T11744] netlink: 'syz.3.2154': attribute type 29 has an invalid length. [ 379.934257][T11744] netlink: 'syz.3.2154': attribute type 29 has an invalid length. [ 379.944297][T11744] netlink: 'syz.3.2154': attribute type 29 has an invalid length. [ 380.035678][T11746] device pim6reg1 entered promiscuous mode [ 380.272069][T11758] netlink: 134056 bytes leftover after parsing attributes in process `syz.3.2158'. [ 381.071682][T11777] netlink: 'syz.2.2163': attribute type 3 has an invalid length. [ 381.080522][T11777] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2163'. [ 381.611651][T11793] device syzkaller0 entered promiscuous mode [ 383.226775][T11811] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.2175'. [ 384.523430][T11827] netlink: 'syz.1.2180': attribute type 1 has an invalid length. [ 384.554663][T11827] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.2180'. [ 384.610401][T11827] netlink: 'syz.1.2180': attribute type 29 has an invalid length. [ 384.624270][T11827] netlink: 'syz.1.2180': attribute type 29 has an invalid length. [ 385.303532][T11847] netlink: 'syz.2.2186': attribute type 4 has an invalid length. [ 385.318097][T11847] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.2186'. [ 385.499699][T11853] netlink: 'syz.4.2188': attribute type 3 has an invalid length. [ 385.516579][T11853] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2188'. [ 385.524424][T11856] netlink: 'syz.2.2189': attribute type 29 has an invalid length. [ 385.574312][T11856] netlink: 'syz.2.2189': attribute type 29 has an invalid length. [ 386.133085][T11880] netlink: 'syz.3.2196': attribute type 1 has an invalid length. [ 386.146282][T11880] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2196'. [ 386.173278][T11883] netlink: 'syz.2.2197': attribute type 3 has an invalid length. [ 386.207141][T11883] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2197'. [ 386.281762][T11888] netlink: 15231 bytes leftover after parsing attributes in process `syz.1.2198'. [ 387.427999][T11913] netlink: 'syz.1.2205': attribute type 10 has an invalid length. [ 388.325260][T11935] netlink: 'syz.2.2210': attribute type 3 has an invalid length. [ 388.335373][T11936] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2211'. [ 388.393076][T11935] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2210'. [ 388.523662][T11936] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 388.627799][T11936] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 388.693303][T11936] bond0 (unregistering): Released all slaves [ 389.551796][T11971] netlink: 'syz.0.2219': attribute type 10 has an invalid length. [ 390.181746][T12003] netlink: 'syz.1.2228': attribute type 3 has an invalid length. [ 390.201230][T12003] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2228'. [ 390.326384][T12007] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.2227'. [ 390.400831][T12007] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 392.335000][T12030] netlink: 'syz.0.2236': attribute type 3 has an invalid length. [ 392.367080][T12030] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2236'. [ 392.599955][T12044] netlink: 'syz.3.2240': attribute type 11 has an invalid length. [ 392.630296][T12044] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2240'. [ 392.924802][T12051] netlink: 'syz.2.2241': attribute type 2 has an invalid length. [ 392.967254][T12051] device 2 entered promiscuous mode [ 393.776875][T12065] FAULT_INJECTION: forcing a failure. [ 393.776875][T12065] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 393.819160][T12065] CPU: 1 PID: 12065 Comm: syz.3.2246 Not tainted syzkaller #0 [ 393.826685][T12065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 393.836768][T12065] Call Trace: [ 393.840074][T12065] [ 393.843040][T12065] dump_stack_lvl+0x188/0x24e [ 393.847796][T12065] ? show_regs_print_info+0x12/0x12 [ 393.853001][T12065] ? load_image+0x410/0x410 [ 393.857537][T12065] ? __lock_acquire+0x7c40/0x7c40 [ 393.862592][T12065] should_fail_ex+0x390/0x4c0 [ 393.867335][T12065] _copy_from_user+0x2c/0x170 [ 393.872062][T12065] __sys_bpf+0x2ea/0x780 [ 393.876361][T12065] ? bpf_link_show_fdinfo+0x380/0x380 [ 393.881738][T12065] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 393.887950][T12065] __x64_sys_bpf+0x78/0x90 [ 393.892364][T12065] do_syscall_64+0x4c/0xa0 [ 393.896779][T12065] ? clear_bhb_loop+0x60/0xb0 [ 393.901455][T12065] ? clear_bhb_loop+0x60/0xb0 [ 393.906133][T12065] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 393.912029][T12065] RIP: 0033:0x7f34d3b9de59 [ 393.916442][T12065] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 393.936050][T12065] RSP: 002b:00007f34d4a1c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 393.944463][T12065] RAX: ffffffffffffffda RBX: 00007f34d3e25fa0 RCX: 00007f34d3b9de59 [ 393.954098][T12065] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 393.962121][T12065] RBP: 00007f34d4a1c090 R08: 0000000000000000 R09: 0000000000000000 [ 393.970093][T12065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 393.978061][T12065] R13: 00007f34d3e26038 R14: 00007f34d3e25fa0 R15: 00007fffa8cce848 [ 393.986040][T12065] [ 394.130819][T12070] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2249'. [ 394.602542][T12085] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.2253'. [ 394.620717][T12085] netlink: 6328 bytes leftover after parsing attributes in process `syz.0.2253'. [ 394.635692][T12085] tc_dump_action: action bad kind [ 394.709561][T12088] netlink: 'syz.3.2254': attribute type 3 has an invalid length. [ 394.720703][T12088] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.2254'. [ 395.487933][T12102] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2258'. [ 395.494705][T12097] netlink: 'syz.3.2256': attribute type 3 has an invalid length. [ 395.516114][T12097] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2256'. [ 395.742647][T12107] FAULT_INJECTION: forcing a failure. [ 395.742647][T12107] name failslab, interval 1, probability 0, space 0, times 0 [ 395.758926][T12107] CPU: 1 PID: 12107 Comm: syz.1.2260 Not tainted syzkaller #0 [ 395.766444][T12107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 395.776517][T12107] Call Trace: [ 395.779791][T12107] [ 395.782715][T12107] dump_stack_lvl+0x188/0x24e [ 395.787396][T12107] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 395.793555][T12107] ? show_regs_print_info+0x12/0x12 [ 395.798750][T12107] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 395.804901][T12107] ? dump_stack+0x5/0x12 [ 395.809145][T12107] should_fail_ex+0x390/0x4c0 [ 395.813821][T12107] should_failslab+0x5/0x20 [ 395.818392][T12107] slab_pre_alloc_hook+0x59/0x300 [ 395.823473][T12107] ? bpf_prog_test_run_skb+0x23e/0x18e0 [ 395.829117][T12107] __kmem_cache_alloc_node+0x4f/0x270 [ 395.834497][T12107] ? bpf_prog_test_run_skb+0x23e/0x18e0 [ 395.840045][T12107] __kmalloc+0xa3/0x240 [ 395.844229][T12107] bpf_prog_test_run_skb+0x23e/0x18e0 [ 395.849618][T12107] ? __fget_files+0x28/0x460 [ 395.854269][T12107] ? __fget_files+0x3fc/0x460 [ 395.858961][T12107] ? cpu_online+0xa0/0xa0 [ 395.863288][T12107] bpf_prog_test_run+0x31c/0x390 [ 395.868234][T12107] __sys_bpf+0x62b/0x780 [ 395.872480][T12107] ? bpf_link_show_fdinfo+0x380/0x380 [ 395.877857][T12107] ? lock_chain_count+0x20/0x20 [ 395.882708][T12107] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 395.888707][T12107] __x64_sys_bpf+0x78/0x90 [ 395.893136][T12107] do_syscall_64+0x4c/0xa0 [ 395.897560][T12107] ? clear_bhb_loop+0x60/0xb0 [ 395.902245][T12107] ? clear_bhb_loop+0x60/0xb0 [ 395.906926][T12107] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 395.912820][T12107] RIP: 0033:0x7ff611f9de59 [ 395.917231][T12107] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 395.936851][T12107] RSP: 002b:00007ff612ed4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 395.945259][T12107] RAX: ffffffffffffffda RBX: 00007ff612225fa0 RCX: 00007ff611f9de59 [ 395.953223][T12107] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 395.961186][T12107] RBP: 00007ff612ed4090 R08: 0000000000000000 R09: 0000000000000000 [ 395.969160][T12107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 395.977146][T12107] R13: 00007ff612226038 R14: 00007ff612225fa0 R15: 00007ffea170ffb8 [ 395.985129][T12107] [ 397.085683][T12148] IPv6: NLM_F_CREATE should be specified when creating new route [ 397.234491][T12146] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2272'. [ 397.383705][T12148] netlink: 1 bytes leftover after parsing attributes in process `syz.4.2272'. [ 397.524627][T12149] netlink: 'syz.4.2272': attribute type 21 has an invalid length. [ 397.772732][T12158] FAULT_INJECTION: forcing a failure. [ 397.772732][T12158] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 397.785516][T12157] netlink: 'syz.2.2273': attribute type 9 has an invalid length. [ 397.804222][T12158] CPU: 1 PID: 12158 Comm: syz.1.2275 Not tainted syzkaller #0 [ 397.811745][T12158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 397.814959][T12157] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.2273'. [ 397.821840][T12158] Call Trace: [ 397.821855][T12158] [ 397.821863][T12158] dump_stack_lvl+0x188/0x24e [ 397.821895][T12158] ? show_regs_print_info+0x12/0x12 [ 397.821915][T12158] ? load_image+0x410/0x410 [ 397.821935][T12158] ? __lock_acquire+0x7c40/0x7c40 [ 397.821963][T12158] should_fail_ex+0x390/0x4c0 [ 397.821990][T12158] _copy_from_user+0x2c/0x170 [ 397.822009][T12158] bpf_prog_test_run_skb+0x263/0x18e0 [ 397.822029][T12158] ? __fget_files+0x28/0x460 [ 397.822050][T12158] ? __fget_files+0x3fc/0x460 [ 397.822083][T12158] ? cpu_online+0xa0/0xa0 [ 397.822108][T12158] bpf_prog_test_run+0x31c/0x390 [ 397.822135][T12158] __sys_bpf+0x62b/0x780 [ 397.894562][T12158] ? bpf_link_show_fdinfo+0x380/0x380 [ 397.899987][T12158] ? lock_chain_count+0x20/0x20 [ 397.904868][T12158] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 397.910888][T12158] __x64_sys_bpf+0x78/0x90 [ 397.915327][T12158] do_syscall_64+0x4c/0xa0 [ 397.919774][T12158] ? clear_bhb_loop+0x60/0xb0 [ 397.924473][T12158] ? clear_bhb_loop+0x60/0xb0 [ 397.929173][T12158] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 397.935086][T12158] RIP: 0033:0x7ff611f9de59 [ 397.939516][T12158] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 397.959145][T12158] RSP: 002b:00007ff612ed4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 397.967587][T12158] RAX: ffffffffffffffda RBX: 00007ff612225fa0 RCX: 00007ff611f9de59 [ 397.975584][T12158] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 397.983583][T12158] RBP: 00007ff612ed4090 R08: 0000000000000000 R09: 0000000000000000 [ 397.991579][T12158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 397.999581][T12158] R13: 00007ff612226038 R14: 00007ff612225fa0 R15: 00007ffea170ffb8 [ 398.007594][T12158] [ 398.224687][T12174] netlink: 'syz.4.2280': attribute type 29 has an invalid length. [ 398.242291][T12174] netlink: 'syz.4.2280': attribute type 29 has an invalid length. [ 398.267353][T12174] netlink: 'syz.4.2280': attribute type 29 has an invalid length. [ 398.308233][T12174] netlink: 'syz.4.2280': attribute type 29 has an invalid length. [ 398.322612][T12174] netlink: 'syz.4.2280': attribute type 29 has an invalid length. [ 398.945637][T12206] netlink: 'syz.3.2290': attribute type 29 has an invalid length. [ 398.977005][T12206] netlink: 'syz.3.2290': attribute type 29 has an invalid length. [ 399.111704][T12206] Ÿë: port 1(gretap0) entered blocking state [ 399.121050][T12211] FAULT_INJECTION: forcing a failure. [ 399.121050][T12211] name failslab, interval 1, probability 0, space 0, times 0 [ 399.135043][T12206] Ÿë: port 1(gretap0) entered disabled state [ 399.149095][T12206] device gretap0 entered promiscuous mode [ 399.156739][T12211] CPU: 1 PID: 12211 Comm: syz.4.2293 Not tainted syzkaller #0 [ 399.164230][T12211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 399.174286][T12211] Call Trace: [ 399.177564][T12211] [ 399.180490][T12211] dump_stack_lvl+0x188/0x24e [ 399.185174][T12211] ? show_regs_print_info+0x12/0x12 [ 399.190370][T12211] ? load_image+0x410/0x410 [ 399.194872][T12211] ? __might_sleep+0xd0/0xd0 [ 399.199539][T12211] ? __lock_acquire+0x7c40/0x7c40 [ 399.204566][T12211] ? trace_event_raw_event_lock+0x230/0x230 [ 399.210468][T12211] should_fail_ex+0x390/0x4c0 [ 399.215149][T12211] should_failslab+0x5/0x20 [ 399.219646][T12211] slab_pre_alloc_hook+0x59/0x300 [ 399.224671][T12211] ? sk_prot_alloc+0xe7/0x210 [ 399.229410][T12211] __kmem_cache_alloc_node+0x4f/0x270 [ 399.234788][T12211] ? sk_prot_alloc+0xe7/0x210 [ 399.239474][T12211] __kmalloc+0xa3/0x240 [ 399.243634][T12211] sk_prot_alloc+0xe7/0x210 [ 399.248131][T12211] ? sk_alloc+0x20/0x330 [ 399.252372][T12211] sk_alloc+0x36/0x330 [ 399.256445][T12211] ? bpf_ctx_init+0x154/0x190 [ 399.261136][T12211] bpf_prog_test_run_skb+0x36d/0x18e0 [ 399.266507][T12211] ? __fget_files+0x28/0x460 [ 399.271100][T12211] ? __fget_files+0x3fc/0x460 [ 399.275787][T12211] ? cpu_online+0xa0/0xa0 [ 399.280114][T12211] bpf_prog_test_run+0x31c/0x390 [ 399.285056][T12211] __sys_bpf+0x62b/0x780 [ 399.289306][T12211] ? bpf_link_show_fdinfo+0x380/0x380 [ 399.294691][T12211] ? lock_chain_count+0x20/0x20 [ 399.299539][T12211] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 399.305529][T12211] __x64_sys_bpf+0x78/0x90 [ 399.309949][T12211] do_syscall_64+0x4c/0xa0 [ 399.314367][T12211] ? clear_bhb_loop+0x60/0xb0 [ 399.319041][T12211] ? clear_bhb_loop+0x60/0xb0 [ 399.323719][T12211] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 399.329612][T12211] RIP: 0033:0x7fc05339de59 [ 399.334026][T12211] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 399.353631][T12211] RSP: 002b:00007fc054336028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 399.362072][T12211] RAX: ffffffffffffffda RBX: 00007fc053625fa0 RCX: 00007fc05339de59 [ 399.370042][T12211] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 399.378008][T12211] RBP: 00007fc054336090 R08: 0000000000000000 R09: 0000000000000000 [ 399.385976][T12211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 399.393947][T12211] R13: 00007fc053626038 R14: 00007fc053625fa0 R15: 00007ffcf00de338 [ 399.401932][T12211] [ 399.578365][T12222] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2295'. [ 399.880435][T12235] netlink: 'syz.3.2301': attribute type 17 has an invalid length. [ 400.092826][T12235] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2301'. [ 400.941652][T12251] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.2299'. [ 401.140315][T12253] device sit0 left promiscuous mode [ 401.203399][T12255] device sit0 entered promiscuous mode [ 401.801886][T12267] FAULT_INJECTION: forcing a failure. [ 401.801886][T12267] name failslab, interval 1, probability 0, space 0, times 0 [ 401.853259][T12267] CPU: 0 PID: 12267 Comm: syz.0.2309 Not tainted syzkaller #0 [ 401.860791][T12267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 401.870866][T12267] Call Trace: [ 401.874146][T12267] [ 401.877075][T12267] dump_stack_lvl+0x188/0x24e [ 401.881761][T12267] ? show_regs_print_info+0x12/0x12 [ 401.886967][T12267] ? load_image+0x410/0x410 [ 401.891470][T12267] ? __might_sleep+0xd0/0xd0 [ 401.896094][T12267] ? __lock_acquire+0x7c40/0x7c40 [ 401.901136][T12267] should_fail_ex+0x390/0x4c0 [ 401.905825][T12267] should_failslab+0x5/0x20 [ 401.910328][T12267] slab_pre_alloc_hook+0x59/0x300 [ 401.915355][T12267] ? apparmor_sk_alloc_security+0x74/0x100 [ 401.921249][T12267] __kmem_cache_alloc_node+0x4f/0x270 [ 401.926630][T12267] ? apparmor_sk_alloc_security+0x74/0x100 [ 401.932438][T12267] kmalloc_trace+0x26/0xe0 [ 401.936866][T12267] apparmor_sk_alloc_security+0x74/0x100 [ 401.942506][T12267] security_sk_alloc+0x6a/0xa0 [ 401.947363][T12267] sk_prot_alloc+0x101/0x210 [ 401.951950][T12267] ? sk_alloc+0x20/0x330 [ 401.956218][T12267] sk_alloc+0x36/0x330 [ 401.960294][T12267] ? bpf_ctx_init+0x154/0x190 [ 401.964974][T12267] bpf_prog_test_run_skb+0x36d/0x18e0 [ 401.970351][T12267] ? __fget_files+0x28/0x460 [ 401.974950][T12267] ? __fget_files+0x3fc/0x460 [ 401.979642][T12267] ? cpu_online+0xa0/0xa0 [ 401.983972][T12267] bpf_prog_test_run+0x31c/0x390 [ 401.988921][T12267] __sys_bpf+0x62b/0x780 [ 401.993171][T12267] ? bpf_link_show_fdinfo+0x380/0x380 [ 401.998564][T12267] ? lock_chain_count+0x20/0x20 [ 402.003462][T12267] __x64_sys_bpf+0x78/0x90 [ 402.007884][T12267] do_syscall_64+0x4c/0xa0 [ 402.012303][T12267] ? clear_bhb_loop+0x60/0xb0 [ 402.016999][T12267] ? clear_bhb_loop+0x60/0xb0 [ 402.021683][T12267] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 402.027582][T12267] RIP: 0033:0x7f5272d9de59 [ 402.032003][T12267] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 402.051613][T12267] RSP: 002b:00007f5273d17028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 402.060030][T12267] RAX: ffffffffffffffda RBX: 00007f5273025fa0 RCX: 00007f5272d9de59 [ 402.068002][T12267] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 402.075978][T12267] RBP: 00007f5273d17090 R08: 0000000000000000 R09: 0000000000000000 [ 402.083952][T12267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 402.091922][T12267] R13: 00007f5273026038 R14: 00007f5273025fa0 R15: 00007ffe63f67378 [ 402.099916][T12267] [ 402.522713][T12283] netlink: 14552 bytes leftover after parsing attributes in process `syz.4.2314'. [ 402.539309][T12285] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2315'. [ 403.176346][T12308] validate_nla: 7 callbacks suppressed [ 403.176367][T12308] netlink: 'syz.3.2317': attribute type 1 has an invalid length. [ 403.210081][T12308] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.2317'. [ 403.282837][T12308] netlink: 'syz.3.2317': attribute type 29 has an invalid length. [ 403.445489][T12308] netlink: 'syz.3.2317': attribute type 29 has an invalid length. [ 403.820524][T12329] FAULT_INJECTION: forcing a failure. [ 403.820524][T12329] name failslab, interval 1, probability 0, space 0, times 0 [ 403.882925][T12329] CPU: 0 PID: 12329 Comm: syz.4.2327 Not tainted syzkaller #0 [ 403.890452][T12329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 403.900542][T12329] Call Trace: [ 403.903829][T12329] [ 403.906774][T12329] dump_stack_lvl+0x188/0x24e [ 403.911480][T12329] ? show_regs_print_info+0x12/0x12 [ 403.916717][T12329] ? load_image+0x410/0x410 [ 403.921255][T12329] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 403.923829][T12339] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.2331'. [ 403.927423][T12329] should_fail_ex+0x390/0x4c0 [ 403.927454][T12329] should_failslab+0x5/0x20 [ 403.927470][T12329] slab_pre_alloc_hook+0x59/0x300 [ 403.927497][T12329] kmem_cache_alloc+0x56/0x2f0 [ 403.927513][T12329] ? __build_skb+0x27/0x3b0 [ 403.960201][T12329] __build_skb+0x27/0x3b0 [ 403.964537][T12329] ? build_skb+0x14/0x230 [ 403.968862][T12329] build_skb+0x1e/0x230 [ 403.973013][T12329] bpf_prog_test_run_skb+0x38d/0x18e0 [ 403.978385][T12329] ? __fget_files+0x28/0x460 [ 403.982982][T12329] ? __fget_files+0x3fc/0x460 [ 403.987665][T12329] ? cpu_online+0xa0/0xa0 [ 403.991993][T12329] bpf_prog_test_run+0x31c/0x390 [ 403.996934][T12329] __sys_bpf+0x62b/0x780 [ 404.001176][T12329] ? bpf_link_show_fdinfo+0x380/0x380 [ 404.006561][T12329] ? lock_chain_count+0x20/0x20 [ 404.011532][T12329] __x64_sys_bpf+0x78/0x90 [ 404.015953][T12329] do_syscall_64+0x4c/0xa0 [ 404.020374][T12329] ? clear_bhb_loop+0x60/0xb0 [ 404.025051][T12329] ? clear_bhb_loop+0x60/0xb0 [ 404.029730][T12329] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 404.035621][T12329] RIP: 0033:0x7fc05339de59 [ 404.040037][T12329] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 404.059670][T12329] RSP: 002b:00007fc054336028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 404.068100][T12329] RAX: ffffffffffffffda RBX: 00007fc053625fa0 RCX: 00007fc05339de59 [ 404.076075][T12329] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 404.084042][T12329] RBP: 00007fc054336090 R08: 0000000000000000 R09: 0000000000000000 [ 404.092009][T12329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 404.099985][T12329] R13: 00007fc053626038 R14: 00007fc053625fa0 R15: 00007ffcf00de338 [ 404.107964][T12329] [ 404.164748][T12340] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.2331'. [ 405.444128][T12391] netlink: 'syz.1.2344': attribute type 3 has an invalid length. [ 405.473967][T12391] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2344'. [ 405.600023][T12395] netlink: 'syz.0.2341': attribute type 1 has an invalid length. [ 405.636075][T12395] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.2341'. [ 405.806519][T12395] netlink: 'syz.0.2341': attribute type 29 has an invalid length. [ 405.867707][T12395] netlink: 'syz.0.2341': attribute type 29 has an invalid length. [ 406.077623][T12404] delete_channel: no stack [ 406.082265][T12404] delete_channel: no stack [ 406.214939][T12398] FAULT_INJECTION: forcing a failure. [ 406.214939][T12398] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 406.296246][T12398] CPU: 1 PID: 12398 Comm: syz.2.2345 Not tainted syzkaller #0 [ 406.303773][T12398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 406.313850][T12398] Call Trace: [ 406.317153][T12398] [ 406.320119][T12398] dump_stack_lvl+0x188/0x24e [ 406.324844][T12398] ? show_regs_print_info+0x12/0x12 [ 406.330080][T12398] ? load_image+0x410/0x410 [ 406.334610][T12398] ? __lock_acquire+0x7c40/0x7c40 [ 406.339662][T12398] should_fail_ex+0x390/0x4c0 [ 406.344387][T12398] _copy_to_user+0x2c/0x130 [ 406.348917][T12398] bpf_test_finish+0x198/0x600 [ 406.353726][T12398] ? convert_skb_to___skb+0x420/0x420 [ 406.359126][T12398] ? bpf_prog_test_run_skb+0x597/0x18e0 [ 406.364683][T12398] bpf_prog_test_run_skb+0x1129/0x18e0 [ 406.370157][T12398] ? cpu_online+0xa0/0xa0 [ 406.374486][T12398] bpf_prog_test_run+0x31c/0x390 [ 406.379430][T12398] __sys_bpf+0x62b/0x780 [ 406.383673][T12398] ? bpf_link_show_fdinfo+0x380/0x380 [ 406.389053][T12398] ? lock_chain_count+0x20/0x20 [ 406.393910][T12398] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 406.399900][T12398] __x64_sys_bpf+0x78/0x90 [ 406.404322][T12398] do_syscall_64+0x4c/0xa0 [ 406.408746][T12398] ? clear_bhb_loop+0x60/0xb0 [ 406.413424][T12398] ? clear_bhb_loop+0x60/0xb0 [ 406.418103][T12398] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 406.423997][T12398] RIP: 0033:0x7f8298d9de59 [ 406.428410][T12398] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 406.448018][T12398] RSP: 002b:00007f8299b85028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 406.456436][T12398] RAX: ffffffffffffffda RBX: 00007f8299025fa0 RCX: 00007f8298d9de59 [ 406.464409][T12398] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 406.472382][T12398] RBP: 00007f8299b85090 R08: 0000000000000000 R09: 0000000000000000 [ 406.480356][T12398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 406.488326][T12398] R13: 00007f8299026038 R14: 00007f8299025fa0 R15: 00007ffe6fa21f68 [ 406.496319][T12398] [ 407.219594][T12430] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2354'.