last executing test programs: 25.149393991s ago: executing program 2 (id=2480): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x104007, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r0, &(0x7f0000000700)={&(0x7f0000000000)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000540)=[{&(0x7f00000001c0)="97cafebcb71250cb5d687d0009088fee", 0x10}], 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="280000000000000000000000070000000717a87f000001ac141400e0000001ac1e0001ac1414bb011c000000000000000000000008000000", @ANYRES64=r0], 0x48}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f00000002c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x87}, @printk={@lli}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r1, 0x0, 0xe, 0x0, &(0x7f0000000280)="b306ac9676b27004d3c8ff6f88ec", 0x0, 0x2000300, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 24.123609169s ago: executing program 2 (id=2484): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x3, 0x3a) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fd1ff7907001175f37538e486dd6317010000213a00db536873f45f08c6feaa70e2aef57b20000000000000000000000000ac1414aa"], 0xfdef) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000021c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x32, 0x43e1bd74, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000780)='}', 0x1}], 0x1}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0), 0x4) recvmsg$unix(r4, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 22.000475819s ago: executing program 2 (id=2490): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="b702000010000000bfa300000000000007030000f0ffffff7a0af0ff0000000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe0000000085000000a3000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87867c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b2314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f86bb47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8dd63d4b77b206000000000000e254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad91935a6ddfa8f90e79321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f3813e2c25a61ec45c3af9948f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469600241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7b9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c12e28ef97d9ebd9c77f1774cf4683c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f011000000f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497a6103876843ee04ed9ff002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd1304202274f20675eb781925440578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec780f535e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e9338c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b96508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e25c89b552d7fcd116bce9c764c714c9402c21d1aac59efb28d4f91652f6000000000000000320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a575939206d0c0f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000ff0ffd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536607a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8000000edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e820a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f7f05b47d3e519f1634e8fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a426a996d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db76cf059f40fa2640b6bfb74dd35391b8fa18479da9f4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0dac4728288e78980c1184d8223edbccbf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847db97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ccfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f0000000000000000000000000000000003ba34b611569a451564d3a5400f9097ffe7a37e765be352be71ee24250d6828562c7e24cb763062d6000c409de6a6135eae8a00000000008d797190a26c933f933aff5c521eeb7a84a62d148a846e74e76b515b6b8be29e8b69310fa130cf6d6b74f33205d3cc218ca554ed8085ae044f5bf2e89a0000bde05c114e7a020fc1a5fd3eeeb822008b2d7d1cc062b51b0aca4956b557e51a1385cc572b0074b0950fb1437de2590bf99ec7ceb69e1fe2465fce099c992d57b804a22e148ae3411523814aee03ee2df877edfabf4aa94f07c6fdd127e57a8bf7975f2e606c25a299980a6e52fcf7849d45bb38573fbba8afef1aa7a24c805f7aee3e39a3000000000000000000000000000000000000878f88c4742ac490951c36c610a0d266588ec6a0bd300cf160b5a5d9e9fafa49ecc8430832d795e727b7fc2b76e7fc4141fdbb82f45d3cdd3fb8d4b443ab4954fdf5c1b9a6ab3e457f098329307ccb0a1989b6c37509692e952e7244f48bc12569ff8eb30d0f887b85b5ef44fb9a7571319190be0c226ed72f346cc4aa071ae0c72fa8bd00d5590c4f4ba65d0c8e1f4870fe3c414681e41b40163eb1aa2a7429a2208cd6e69c7d959e87da3fd0101159a03ab7fe78881ee7a1ee7a2edff75fb18a181e0c54352be2b7a5b5273198291c28d9141deeb3cdba5d414ae4b0000000000000000000000000009eacd83458d8a606be71970497a4fd4ca3b48ca482ab3804e2fac216b3ba613608b1a465456a33fd08491d337d7344c01cfc9e73"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r0, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe3b, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r1}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2f00020b, 0x5ea, 0x2f000000, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 21.57317571s ago: executing program 2 (id=2491): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="850020000000000018100000", @ANYRES32, @ANYBLOB="1700000000000000950000000000000045"], 0x0}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) sendmsg$sock(r1, &(0x7f0000000840)={&(0x7f0000000340)=@tipc=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x0, 0x3}}, 0x80, 0x0, 0x0, &(0x7f0000000640)=[@mark={{0x18, 0x1, 0x24, 0xff}}], 0x18}, 0x4048873) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'}) r2 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000000c0), 0x12) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) 21.091877972s ago: executing program 2 (id=2493): bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x10, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa12000", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$sock(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000002c0)="0c9fd6e5abc0263d038e09375c61ca", 0xf}, {&(0x7f00000005c0)="91f8ccf9febe6b297e3dbdfadcb8986e18f7cbc5e533640def4c9d8abc74d2346ed79ec7cacd455b269052ab27e8d5500a9e4fdf87627b8905eb6ee6319b29b5c1c6948d1d8f4253b26d59df9e25a41bc6606c6634283abf768969fc98d7a736f8e9e33edd00e88a0e4c6009a38a62d1e4b2a919d556bd3cb0ab3d7ffa03edb72bbe6ffd601ecc9235f20b9bdd26bbd1011af82f4ee9a6d93bb3caf540b975b063f79157279adc49871f0a2aa18931c00ffd6c6ed87c5157256ea1e0a62efbfaffcfeed352b3fe00dfcf353188f5967d011d9ff9ec593dad3a26a4f5587a077096541652778882", 0xe7}, {&(0x7f00000006c0)="0686811c014d58bb6947b9412af8a2df1a490a226f886ae1d3dc1628be6c04aa811825234898f02b6f474e71dbac2ed9ac4c9e24c9818b06ba0a7462bf7d538aa103dd0f3a", 0x45}, {&(0x7f0000000740)="134bb4cc93760c3cd9db445c7dce4920141b8cd368ac138bd21f15d40576d34297315090f770777be5fef06abd6f05df9aa74925a831d006a81702ac5054cd1e5ef139a834babc3723bfcb456dd7802545bb3926266f132ec2ad6e3e015e8a2047fdff1bd7e99a94fa350e36922618f9b8ea59186bb565effeada83e4a81643d00e5cb4a0837c580ce89", 0x8a}], 0x4, &(0x7f0000000840)=[@txtime={{0x18, 0x1, 0x3d, 0x7}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}, @mark={{0x14, 0x1, 0x24, 0x6f72}}, @mark={{0x14, 0x1, 0x24, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}, @mark={{0x14, 0x1, 0x24, 0x8}}], 0xf0}, 0x40) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r1, 0x0, 0x0}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x60000004, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x25, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b311453dcbb62932a01105d0a8066ca8e5e1f2f575d0d6e996b57fd408d420abb7337934e59815d75b4eb3e7206afce", &(0x7f0000000380)="af5fa441b438b5156d8a9fcc090f586e979858f64170cde36889dcc8539ffcca62621a4c3ea3f7acee366e6fb0b94314f90931dec60fed6c9fee64af416c29f65e47110b81f6b4da06db5e1aad1f627acb", 0x0, 0x3}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xb, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x3a}]}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x10, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa12000", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) sendmsg$sock(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000002c0)="0c9fd6e5abc0263d038e09375c61ca", 0xf}, {&(0x7f00000005c0)="91f8ccf9febe6b297e3dbdfadcb8986e18f7cbc5e533640def4c9d8abc74d2346ed79ec7cacd455b269052ab27e8d5500a9e4fdf87627b8905eb6ee6319b29b5c1c6948d1d8f4253b26d59df9e25a41bc6606c6634283abf768969fc98d7a736f8e9e33edd00e88a0e4c6009a38a62d1e4b2a919d556bd3cb0ab3d7ffa03edb72bbe6ffd601ecc9235f20b9bdd26bbd1011af82f4ee9a6d93bb3caf540b975b063f79157279adc49871f0a2aa18931c00ffd6c6ed87c5157256ea1e0a62efbfaffcfeed352b3fe00dfcf353188f5967d011d9ff9ec593dad3a26a4f5587a077096541652778882", 0xe7}, {&(0x7f00000006c0)="0686811c014d58bb6947b9412af8a2df1a490a226f886ae1d3dc1628be6c04aa811825234898f02b6f474e71dbac2ed9ac4c9e24c9818b06ba0a7462bf7d538aa103dd0f3a", 0x45}, {&(0x7f0000000740)="134bb4cc93760c3cd9db445c7dce4920141b8cd368ac138bd21f15d40576d34297315090f770777be5fef06abd6f05df9aa74925a831d006a81702ac5054cd1e5ef139a834babc3723bfcb456dd7802545bb3926266f132ec2ad6e3e015e8a2047fdff1bd7e99a94fa350e36922618f9b8ea59186bb565effeada83e4a81643d00e5cb4a0837c580ce89", 0x8a}], 0x4, &(0x7f0000000840)=[@txtime={{0x18, 0x1, 0x3d, 0x7}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}, @mark={{0x14, 0x1, 0x24, 0x6f72}}, @mark={{0x14, 0x1, 0x24, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}, @mark={{0x14, 0x1, 0x24, 0x8}}], 0xf0}, 0x40) (async) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r1, 0x0, 0x0}, 0x10) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x60000004, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x25, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b311453dcbb62932a01105d0a8066ca8e5e1f2f575d0d6e996b57fd408d420abb7337934e59815d75b4eb3e7206afce", &(0x7f0000000380)="af5fa441b438b5156d8a9fcc090f586e979858f64170cde36889dcc8539ffcca62621a4c3ea3f7acee366e6fb0b94314f90931dec60fed6c9fee64af416c29f65e47110b81f6b4da06db5e1aad1f627acb", 0x0, 0x3}, 0x2c) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xb, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x3a}]}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) (async) 20.492997441s ago: executing program 2 (id=2494): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x3, 0x3a) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fd1ff7907001175f37538e486dd6317010000213a00db536873f45f08c6feaa70e2aef57b20000000000000000000000000ac1414aa"], 0xfdef) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000021c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x32, 0x43e1bd74, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000780)='}', 0x1}], 0x1}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0), 0x4) recvmsg$unix(r4, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 7.19124746s ago: executing program 3 (id=2516): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) close(r2) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x200004, 0x5, 0x3, 0x2, {0xa, 0x4e23, 0x9, @mcast1, 0x97}}}, 0x80, 0x0}, 0x2000f765) ioctl$SIOCSIFHWADDR(r2, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @random="0000000000e5"}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)={@fallback=r0, r1, 0x0, 0x200c, r1, @value=r2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x1f4, 0x20, 0x0, &(0x7f0000000100)="ff410800b083dcc1010b3efc88643acd3aaf000c0057bd21762ae3fe8892b69c", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x4}, 0x50) 6.145420819s ago: executing program 3 (id=2517): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000002dc0)={&(0x7f0000001580)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xfffffffffffffffd}, 0x1, 0x5c4}, 0x80, &(0x7f00000029c0)=[{&(0x7f0000001480)="89", 0x1}], 0x1}, 0xc9) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, 0x0, 0x20008000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4840) sendmsg$sock(r1, &(0x7f00000007c0)={&(0x7f00000001c0)=@phonet={0x23, 0x6, 0x4, 0xf8}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000280)="0254652b36dd63ef11b733dc82d03f3a0d1469de6dc81c0950286dd46b6791a223c28003a3ef64671d7d51327b189482fb681ead647748adacac7706c4575a658c85714ad10da68bcdf143d735a583d1587ef4b3f6a96d33cdf1f196b688ee3bb3b4d6e0d58db543586965fd0a287702ffb6b022544fe10ff3f391420e77dd8a76d67b8d1f46e0cd98e63f60a01de247995b2c177d", 0x95}, {&(0x7f0000000340)="c4ff3cbca7c7703d19d02482ced33b47ae03156ba66f46ea878e960b406e3b6342bd37ddbd7a0f28138fad8015db1e5f2d99a3312d416ea19ffe947304883d14d531a372f7af0c5dae5b15f2bb7634f52f45f735492c81d1d234aec6", 0x5c}, {&(0x7f00000003c0)="3574dc29abe806ecb544a70727e1a1affaec7276c18dd0a3c7eb5078ed14dc632fcc", 0x22}], 0x3, &(0x7f0000000700)}, 0x800) r3 = socket$kcm(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000130000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0600000004000000060000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="040000000000000000000000020038ea9c198ec5be0ed5f8131f000000000761cbdd84b4a7db88048000"/51], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, 0x0) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r6}, &(0x7f0000000280), &(0x7f0000000240)=r5}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0)=r7, 0x4) r8 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r1, &(0x7f0000002700)={&(0x7f0000000080)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000580)=[{&(0x7f00000005c0)="3cd08d4e7e1bdc2332e23d7062fac6b08b3b0b6d1b07fac4a170ac28d0ebaff1b99349089a578bf43816c28a5d8dca2b4da55c5e5a73a5efda83b86a70518eebc556955a7016b20059cef96ca384ff38232863dec31f5e60b71b0f1baed4a70eb98ac02202d28838774a7e5ac3fa641822d51efd82d1", 0x76}], 0x1}, 0x8040) r9 = socket$kcm(0x10, 0x2, 0x4) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000540), 0x2, 0x0) sendmsg$inet(r8, &(0x7f0000001580)={&(0x7f0000000dc0)={0x2, 0x4e23, @local}, 0x10, &(0x7f0000001140)=[{&(0x7f0000000e00)="17", 0x1}], 0x1}, 0xc000) sendmsg$inet(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d00028422fb564500006e23e3f58e76110165f450e71bfc74e3002500028d459e37000f0000000000bf9367a17e51f60a64c9f4d4938037e786a6d0bdd700000000000000000051fd1f33597225", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40000) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b06d25a806c8c6f94f90424fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) 5.951473419s ago: executing program 1 (id=2518): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x3, 0x3a) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fd1ff7907001175f37538e486dd6317010000213a00db536873f45f08c6feaa70e2aef57b20000000000000000000000000ac1414aa"], 0xfdef) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000021c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x32, 0x43e1bd74, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000780)='}', 0x1}], 0x1}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0), 0x4) recvmsg$unix(r4, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 3.254566716s ago: executing program 0 (id=2519): bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x8, 0x9}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89ef, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000a00)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000e, 0x95c9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xf7fff271, 0xffff, 0x0, 0x0, 0x0, 0x8000000020}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) syz_clone(0x10000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000001340)=@hci={0x1f, 0x8e88, 0x47}, 0x80, 0x0}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x100000000c, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8004}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x2500, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x22, 0x2, 0x24, &(0x7f0000000000)) 3.025829327s ago: executing program 3 (id=2520): r0 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r0, 0x1, 0x19, &(0x7f0000000180), 0x4) r1 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x241a2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffe, 0x3, @perf_config_ext={0x0, 0xfffffffffffffff4}, 0x0, 0x2, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYRES16=r1], 0x20) 3.023195707s ago: executing program 1 (id=2521): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000024000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000003c0)={r2, &(0x7f00000001c0)="126efb8e70bbd1ead86a9bb7258eae8f8cd869a89ddcfedcc6368f7472", &(0x7f0000000280)=""/121}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xb, 0x7, 0x7ff, 0x9, 0x1, 0xffffffffffffffff, 0xfffffff8}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r3, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) 2.871548564s ago: executing program 0 (id=2522): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socket$kcm(0x10, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x40, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0xa, 0x3, 0x3a) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fd1ff7907001175f37538e486dd6317010000213a00db536873f45f08c6feaa70e2aef57b20000000000000000000000000ac1414aa"], 0xfdef) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000021c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000780)='}', 0x1}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.761455289s ago: executing program 1 (id=2523): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x4, 0x4, 0xe}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xb, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000002080000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000100000085000000a0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x1f2f, 0x18, 0x1e8, &(0x7f00000007c0)="9f44948721919580684010a49e66", 0x0, 0x1e8, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000000000), 0x0, 0xe8030000}, 0x23) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) socketpair$unix(0x1, 0x1, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="5c00000014006b", 0x7}, {&(0x7f00000017c0)="00000000ffffffff1f01a0c9a1171aa56a7f9138a6c073e99f8f2ffed6bd642c1238663e9e5189a46cb56c776afa8ec3d4d4d9c0648fc18bad3a6b5656235d60cb5af5c5a69e10ed9fd4ea", 0x4b}, {&(0x7f0000001840)="9a9245a259250adbc6e2", 0xa}], 0x3, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e020000000000000000"], 0x0, 0x37, 0x0, 0x1}, 0x28) r7 = socket$kcm(0x2, 0x1000000000000005, 0x0) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1400000016000b63d25a80dc9f14e53420", 0x11}], 0x1}, 0x0) sendmsg$inet(r7, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0xc, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x2, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/31], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000080000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) sendmsg$unix(r2, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 2.761095359s ago: executing program 3 (id=2524): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x4, 0x4, 0xe}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xb, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000002080000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000100000085000000a0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x1f2f, 0x18, 0x1e8, &(0x7f00000007c0)="9f44948721919580684010a49e66", 0x0, 0x1e8, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000000000), 0x0, 0xe8030000}, 0x23) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) socketpair$unix(0x1, 0x1, 0x0, 0x0) r8 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="5c00000014006b", 0x7}, {&(0x7f00000017c0)="00000000ffffffff1f01a0c9a1171aa56a7f9138a6c073e99f8f2ffed6bd642c1238663e9e5189a46cb56c776afa8ec3d4d4d9c0648fc18bad3a6b5656235d60cb5af5c5a69e10ed9fd4ea", 0x4b}, {&(0x7f0000001840)="9a9245a259250adbc6e2", 0xa}], 0x3, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e020000000000000000"], 0x0, 0x37, 0x0, 0x1}, 0x28) r9 = socket$kcm(0x2, 0x1000000000000005, 0x0) r10 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1400000016000b63d25a80dc9f14e53420", 0x11}], 0x1}, 0x0) sendmsg$inet(r9, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0xc, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x2, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000080000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 2.419108065s ago: executing program 3 (id=2525): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x40, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0xa, 0x3, 0x3a) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fd1ff7907001175f37538e486dd6317010000213a00db536873f45f08c6feaa70e2aef57b20000000000000000000000000ac1414aa"], 0xfdef) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000021c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.12875235s ago: executing program 1 (id=2526): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x4, 0x4, 0xe}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xb, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000002080000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000100000085000000a0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x1f2f, 0x18, 0x1e8, &(0x7f00000007c0)="9f44948721919580684010a49e66", 0x0, 0x1e8, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000000000), 0x0, 0xe8030000}, 0x23) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) socketpair$unix(0x1, 0x1, 0x0, 0x0) r8 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="5c00000014006b", 0x7}, {&(0x7f00000017c0)="00000000ffffffff1f01a0c9a1171aa56a7f9138a6c073e99f8f2ffed6bd642c1238663e9e5189a46cb56c776afa8ec3d4d4d9c0648fc18bad3a6b5656235d60cb5af5c5a69e10ed9fd4ea", 0x4b}, {&(0x7f0000001840)="9a9245a259250adbc6e2", 0xa}], 0x3, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e020000000000000000"], 0x0, 0x37, 0x0, 0x1}, 0x28) r9 = socket$kcm(0x2, 0x1000000000000005, 0x0) r10 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1400000016000b63d25a80dc9f14e53420", 0x11}], 0x1}, 0x0) sendmsg$inet(r9, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0xc, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x2, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/31], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 1.740834577s ago: executing program 1 (id=2527): r0 = socket$kcm(0x2b, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x17, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000900000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000007b000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000004c0)='ns/pid_for_children\x00') ioctl$TUNSETFILTEREBPF(r3, 0xb702, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0x22, 0x8, &(0x7f0000000080)="fbc76a3c5f93418d873df60870a18627a0068114991bfada0f47502ac851ae1bfa60", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$inet(r0, &(0x7f00000009c0)={&(0x7f00000000c0)={0x2, 0x4001, @loopback}, 0x10, 0x0, 0x4a, 0x0, 0xffffffffffffff6a, 0x300}, 0x2004c818) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400, 0x0, 0x3f, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x705080, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0f000000040000000800000001"], 0x37) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r6 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)=ANY=[@ANYRESOCT=r5], 0x48) openat$ppp(0xffffffffffffff9c, &(0x7f0000000480), 0x400000, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='\a'], 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1f, 0x14, &(0x7f0000000800)=ANY=[@ANYBLOB="180000000d00000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000316200007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) close(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r5}, 0x20) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x3}, 0x828, 0x0, 0x0, 0x7, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0x9b, 0x1, 0x0, 0x0, 0x0, 0x2, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffe, 0x3, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x7, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r9, 0x29, 0x12, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='mem\x00\x10\x00\x00\x00\x00\x00\x00I\xa2l') r10 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) write$cgroup_subtree(r10, &(0x7f0000000740)=ANY=[@ANYBLOB="59640c4a49204d76fa2d75d621dc3fb2a307bf86da92a84e4bac77660f64824707b875e1f0320be9f702c11df35cd9fa739eb6f244570cbb35f7fc960c3db17ba0350a71642f41e0b90d8c44b9f4c75a2cbad2299643cdcd4236a25cf3bf866c2f70fd39302ac33af677504e55edf13426bc83c8f3d72c677800000000000000"], 0xfffffffffffffced) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001540)={{r6}, &(0x7f00000014c0), &(0x7f0000001500)=r5}, 0x20) sendmsg$sock(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000380)='b', 0x1}], 0x1, &(0x7f0000000140)=[@timestamping={{0x14, 0x1, 0x25, 0x303}}], 0x18}, 0x400c081) 881.667938ms ago: executing program 1 (id=2528): r0 = socket$kcm(0x29, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='notify_on_release\x00', 0x2, 0x0) close(0x3) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1ad76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYRES8=r2], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x800, 0x0, 0x4000000000}, 0x0, 0xffffffffffffff7f, 0xffffffffffffffff, 0xa) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0xc000000, 0x2125, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904, 0x0, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r6 = openat$cgroup_devices(r5, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r6, &(0x7f0000000280)=ANY=[@ANYBLOB='a'], 0x9) r7 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r7, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x34004000) write$cgroup_int(r2, &(0x7f00000003c0)=0xfffffffffffffffc, 0x12) mkdirat$cgroup(r1, &(0x7f0000000080)='syz0\x00', 0x1ff) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000100)={0xffffffffffffffff, r4, 0x4, r4}, 0x10) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000200)={r7}) ioctl$TUNSETCARRIER(r8, 0x400454e2, &(0x7f0000000100)) ioctl$TUNSETLINK(r8, 0x400454cd, 0x301) mkdir(&(0x7f00000000c0)='./file0\x00', 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x5, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000036000000180100006420002500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001800000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r9, 0x0, 0xe, 0x0, &(0x7f0000000380)="178d048604bf0bfb1945d7430008", 0x0, 0x501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 839.71428ms ago: executing program 3 (id=2529): bpf$MAP_CREATE(0x0, 0x0, 0x3b) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r3 = socket$kcm(0x11, 0x200000000000003, 0x300) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0x8, &(0x7f0000000040)=r4, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x2a}, 0x94) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2}, 0x0, &(0x7f0000000040)}, 0x20) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x1, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x10801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x6f}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa33"], 0xfdef) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce220000000000000000000000000000000000000001"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 730.568815ms ago: executing program 0 (id=2530): r0 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r0, 0x1, 0x19, &(0x7f0000000180), 0x4) r1 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x241a2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffe, 0x3, @perf_config_ext={0x0, 0xfffffffffffffff4}, 0x0, 0x2, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYRES16=r1], 0x20) 595.088002ms ago: executing program 0 (id=2531): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b03d25a806c8c6394f90324fc60100000000a000200053582c137153e37000c0a80fc0b1000f835", 0x33fe0}], 0x1, 0x0, 0x41}, 0x0) 431.20244ms ago: executing program 0 (id=2532): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x4, 0x4, 0xe}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xb, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000002080000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000100000085000000a0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x1f2f, 0x18, 0x1e8, &(0x7f00000007c0)="9f44948721919580684010a49e66", 0x0, 0x1e8, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000000000), 0x0, 0xe8030000}, 0x23) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) socketpair$unix(0x1, 0x1, 0x0, 0x0) r8 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="5c00000014006b", 0x7}, {&(0x7f00000017c0)="00000000ffffffff1f01a0c9a1171aa56a7f9138a6c073e99f8f2ffed6bd642c1238663e9e5189a46cb56c776afa8ec3d4d4d9c0648fc18bad3a6b5656235d60cb5af5c5a69e10ed9fd4ea", 0x4b}, {&(0x7f0000001840)="9a9245a259250adbc6e2", 0xa}], 0x3, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e020000000000000000"], 0x0, 0x37, 0x0, 0x1}, 0x28) r9 = socket$kcm(0x2, 0x1000000000000005, 0x0) r10 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1400000016000b63d25a80dc9f14e53420", 0x11}], 0x1}, 0x0) sendmsg$inet(r9, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0xc, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x2, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000080000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 0s ago: executing program 0 (id=2533): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa1a9, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x100084, 0x10000, 0x0, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab0300817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014751c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa407e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a0c93d47018c12e7ba8188a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab188dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b4896c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987595ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e547f7ad33850d9feccd0111a2e3700845dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005202000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a12489c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af14915f29b719f54926fc32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b4c8787361f3289f86ae826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa520000afe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da357f9e93ce055019c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c672b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981fd9086e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b6059b9ef90c2f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c33f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217bcfd1ef24284de8a0a9f068f297037d6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2826b47ad8ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d0f889d518f64ee50f562b5fdb1f76d4a7fe14701f8ed0c6a55d66a6efea3e449e6b478abc5b196dd5308cb20c4e2a0bd702651bb39f10523102dcd8ece692159028f314e0d6bfa400475c6699fdc40efe0948e3cef7419a7f113134e5ee20fd87c4521ccfbd32d6f147f743d30866bdd86ca8bf0c7bcc475f4ed53517aaa51f1c151d859a7f0b53abd332c84bdad313e82ac3777a6f7f649ff8a25f6dfe09cb29213896b49a825257bf143e9fa3bbd47009e66fe5705b3ef2b40a182e408c680727d64e00e1ce508f8fd64ac6c84ccc28fc333067de63b9bb5daaa12ce60ee3779ded79651be69d2a413cd948a873dd7ad7017b150828cf100d3df8537f22aff58343c9ee966fceb594bbe10b911427f76a25a219be2f85287b7f83d323a30991067ad1369792166062085ff20c5fb9f6e4f78dd09c7d2d6ca3c8a5d0d26ccbe576f44a1bc94194817"], &(0x7f0000000340)='syzkaller\x00'}, 0x1b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x6002, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e00806200000000002000aac141417e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) kernel console output (not intermixed with test programs): 460][T10321] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.1518'. [ 399.839401][T10324] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.1519'. [ 400.182993][T10336] netlink: 'syz.0.1522': attribute type 10 has an invalid length. [ 400.926949][T10357] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1530'. [ 400.951479][T10357] openvswitch: netlink: Flow key attribute not present in set flow. [ 401.273976][T10362] netlink: 'syz.2.1531': attribute type 153 has an invalid length. [ 401.289879][T10362] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.1531'. [ 402.164480][T10374] netlink: 'syz.0.1534': attribute type 10 has an invalid length. [ 403.038327][T10399] netlink: 'syz.1.1544': attribute type 153 has an invalid length. [ 403.047211][T10399] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.1544'. [ 403.461479][T10413] syzkaller0: entered promiscuous mode [ 403.467059][T10413] syzkaller0: entered allmulticast mode [ 403.656857][T10417] FAULT_INJECTION: forcing a failure. [ 403.656857][T10417] name failslab, interval 1, probability 0, space 0, times 0 [ 403.669610][T10417] CPU: 0 PID: 10417 Comm: syz.2.1552 Not tainted syzkaller #0 [ 403.677108][T10417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 403.687229][T10417] Call Trace: [ 403.690550][T10417] [ 403.693530][T10417] dump_stack_lvl+0x18c/0x250 [ 403.698266][T10417] ? trace_event_raw_event_lock_acquire+0x290/0x290 [ 403.704922][T10417] ? show_regs_print_info+0x20/0x20 [ 403.710190][T10417] ? load_image+0x420/0x420 [ 403.714763][T10417] should_fail_ex+0x394/0x4c0 [ 403.719505][T10417] should_failslab+0x9/0x20 [ 403.724063][T10417] slab_pre_alloc_hook+0x59/0x300 [ 403.729161][T10417] ? __lock_acquire+0x7d80/0x7d80 [ 403.734237][T10417] kmem_cache_alloc+0x5a/0x2c0 [ 403.739045][T10417] ? skb_clone+0x1eb/0x370 [ 403.743527][T10417] skb_clone+0x1eb/0x370 [ 403.747825][T10417] ? packet_rcv+0x46a/0x1360 [ 403.752472][T10417] packet_rcv+0x5a9/0x1360 [ 403.756942][T10417] ? fanout_init_data+0xf0/0xf0 [ 403.761862][T10417] dev_queue_xmit_nit+0x5d5/0xba0 [ 403.766956][T10417] ? dev_queue_xmit_nit+0x2d/0xba0 [ 403.772147][T10417] dev_hard_start_xmit+0x150/0x790 [ 403.777333][T10417] __dev_queue_xmit+0x1be8/0x37e0 [ 403.782405][T10417] ? __dev_queue_xmit+0x272/0x37e0 [ 403.787587][T10417] ? netdev_core_pick_tx+0x370/0x370 [ 403.792916][T10417] ? pskb_expand_head+0x17a/0x1150 [ 403.798124][T10417] ? pskb_expand_head+0x17a/0x1150 [ 403.803295][T10417] ? skb_release_data+0x1de/0x7f0 [ 403.808392][T10417] ? __bpf_redirect+0x4d1/0xdf0 [ 403.813288][T10417] __bpf_tx_skb+0x181/0x260 [ 403.817876][T10417] bpf_clone_redirect+0x315/0x4a0 [ 403.822959][T10417] bpf_prog_c9d58f5b8698340d+0x5e/0x63 [ 403.828480][T10417] ? perf_trace_run_bpf_submit+0x125/0x1c0 [ 403.834351][T10417] ? perf_trace_preemptirq_template+0x269/0x330 [ 403.840677][T10417] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 403.846728][T10417] ? lockdep_softirqs_on+0x5b0/0x5b0 [ 403.852091][T10417] ? lock_chain_count+0x20/0x20 [ 403.857001][T10417] ? seqcount_lockdep_reader_access+0x191/0x1d0 [ 403.863307][T10417] ? __local_bh_disable_ip+0x108/0x1a0 [ 403.868817][T10417] ? __cant_sleep+0x220/0x220 [ 403.873552][T10417] ? __local_bh_enable_ip+0x13a/0x1c0 [ 403.878973][T10417] ? _local_bh_enable+0xa0/0xa0 [ 403.883890][T10417] ? bpf_test_timer_continue+0x135/0x380 [ 403.889579][T10417] ? bpf_test_run+0x174/0x870 [ 403.894312][T10417] bpf_test_run+0x2df/0x870 [ 403.898898][T10417] ? bpf_test_run+0x174/0x870 [ 403.903637][T10417] ? dst_hold+0x70/0x70 [ 403.907852][T10417] ? eth_get_headlen+0x210/0x210 [ 403.912868][T10417] bpf_prog_test_run_skb+0xdbb/0x18f0 [ 403.918321][T10417] ? cpu_online+0x60/0x60 [ 403.922714][T10417] bpf_prog_test_run+0x31f/0x390 [ 403.927708][T10417] __sys_bpf+0x49d/0x890 [ 403.932003][T10417] ? bpf_link_show_fdinfo+0x560/0x560 [ 403.937452][T10417] ? lock_chain_count+0x20/0x20 [ 403.942374][T10417] __x64_sys_bpf+0x7c/0x90 [ 403.946842][T10417] do_syscall_64+0x55/0xb0 [ 403.951314][T10417] ? clear_bhb_loop+0x40/0x90 [ 403.956052][T10417] ? clear_bhb_loop+0x40/0x90 [ 403.960797][T10417] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 403.966755][T10417] RIP: 0033:0x7f743d19e159 [ 403.971223][T10417] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 403.990884][T10417] RSP: 002b:00007f743e156028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 403.999382][T10417] RAX: ffffffffffffffda RBX: 00007f743d425fa0 RCX: 00007f743d19e159 [ 404.007416][T10417] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 404.015449][T10417] RBP: 00007f743e156090 R08: 0000000000000000 R09: 0000000000000000 [ 404.023485][T10417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 404.031516][T10417] R13: 00007f743d426038 R14: 00007f743d425fa0 R15: 00007ffdaf147f18 [ 404.039559][T10417] [ 405.582017][T10435] netlink: 'syz.3.1558': attribute type 21 has an invalid length. [ 405.599714][T10435] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1558'. [ 405.617929][T10435] netlink: 'syz.3.1558': attribute type 4 has an invalid length. [ 405.947879][T10445] netlink: 'syz.2.1562': attribute type 153 has an invalid length. [ 405.960854][T10445] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.1562'. [ 406.455356][T10462] syzkaller0: entered promiscuous mode [ 406.462653][T10462] syzkaller0: entered allmulticast mode [ 408.637915][T10499] netlink: 'syz.3.1578': attribute type 153 has an invalid length. [ 408.669826][T10499] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.1578'. [ 408.708571][T10501] netlink: 'syz.2.1579': attribute type 21 has an invalid length. [ 408.751864][T10501] netlink: 'syz.2.1579': attribute type 6 has an invalid length. [ 408.783571][T10501] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1579'. [ 408.860312][T10508] syzkaller0: entered promiscuous mode [ 408.865895][T10508] syzkaller0: entered allmulticast mode [ 412.427694][T10577] syzkaller0: entered promiscuous mode [ 412.449617][T10577] syzkaller0: entered allmulticast mode [ 412.458758][T10581] netlink: 'syz.0.1603': attribute type 153 has an invalid length. [ 412.471606][T10581] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.1603'. [ 412.651305][T10585] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1605'. [ 414.086210][T10597] netlink: 'syz.0.1608': attribute type 10 has an invalid length. [ 414.736986][T10612] netlink: 'syz.3.1614': attribute type 153 has an invalid length. [ 414.764885][T10612] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.1614'. [ 414.804528][T10621] netlink: 'syz.0.1618': attribute type 21 has an invalid length. [ 414.847964][T10621] netlink: 'syz.0.1618': attribute type 4 has an invalid length. [ 414.878590][T10621] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1618'. [ 415.112556][T10634] netlink: 'syz.1.1617': attribute type 21 has an invalid length. [ 415.178401][T10634] netlink: 'syz.1.1617': attribute type 6 has an invalid length. [ 415.225898][T10634] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1617'. [ 415.630452][T10638] syzkaller0: entered promiscuous mode [ 415.636062][T10638] syzkaller0: entered allmulticast mode [ 418.498621][T10642] netlink: 'syz.3.1620': attribute type 10 has an invalid length. [ 418.507182][T10642] netlink: 'syz.3.1620': attribute type 4 has an invalid length. [ 418.516964][T10642] netlink: 116 bytes leftover after parsing attributes in process `syz.3.1620'. [ 418.527675][T10642] wlan1: mtu greater than device maximum [ 418.534132][T10642] team0: Device wlan1 failed to change mtu [ 418.690454][T10647] netlink: 'syz.1.1621': attribute type 10 has an invalid length. [ 419.136891][T10661] netlink: 'syz.1.1628': attribute type 153 has an invalid length. [ 419.146230][T10661] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.1628'. [ 419.840306][T10676] syzkaller0: entered promiscuous mode [ 419.846669][T10676] syzkaller0: entered allmulticast mode [ 421.600684][T10682] netlink: 'syz.3.1633': attribute type 10 has an invalid length. [ 422.815647][T10696] netlink: 'syz.1.1639': attribute type 21 has an invalid length. [ 422.826048][T10696] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1639'. [ 423.034869][T10702] netlink: 'syz.3.1641': attribute type 153 has an invalid length. [ 423.053658][T10702] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.1641'. [ 423.247608][T10712] netlink: 'syz.1.1644': attribute type 21 has an invalid length. [ 423.260956][T10712] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1644'. [ 423.445199][T10718] netlink: 'syz.2.1646': attribute type 10 has an invalid length. [ 424.020846][T10735] syzkaller0: entered promiscuous mode [ 424.027514][T10735] syzkaller0: entered allmulticast mode [ 424.379168][T10741] netlink: 'syz.2.1655': attribute type 153 has an invalid length. [ 424.393954][T10741] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.1655'. [ 425.587058][T10752] netlink: 'syz.1.1657': attribute type 10 has an invalid length. [ 426.161025][T10772] syzkaller0: entered promiscuous mode [ 426.233434][T10772] syzkaller0: entered allmulticast mode [ 426.250435][T10774] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 65487 [ 427.414177][T10782] netlink: 'syz.3.1668': attribute type 153 has an invalid length. [ 427.439660][T10782] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.1668'. [ 427.540094][T10788] netlink: 'syz.2.1670': attribute type 10 has an invalid length. [ 427.922628][T10803] syzkaller0: entered promiscuous mode [ 427.928440][T10803] syzkaller0: entered allmulticast mode [ 428.195309][T10814] netlink: 'syz.2.1678': attribute type 21 has an invalid length. [ 428.204665][T10814] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1678'. [ 430.937275][T10809] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1677'. [ 431.404754][T10833] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1683'. [ 431.576748][T10836] netlink: 'syz.0.1684': attribute type 153 has an invalid length. [ 431.602970][T10836] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.1684'. [ 432.347817][T10862] netlink: 'syz.3.1694': attribute type 153 has an invalid length. [ 432.358855][T10862] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.1694'. [ 432.378740][T10860] syzkaller0: entered promiscuous mode [ 432.400850][T10860] syzkaller0: entered allmulticast mode [ 433.936209][T10894] FAULT_INJECTION: forcing a failure. [ 433.936209][T10894] name failslab, interval 1, probability 0, space 0, times 0 [ 433.948954][T10894] CPU: 1 PID: 10894 Comm: syz.2.1706 Not tainted syzkaller #0 [ 433.956457][T10894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 433.966561][T10894] Call Trace: [ 433.969881][T10894] [ 433.972856][T10894] dump_stack_lvl+0x18c/0x250 [ 433.977593][T10894] ? show_regs_print_info+0x20/0x20 [ 433.982842][T10894] ? load_image+0x420/0x420 [ 433.987402][T10894] ? skb_network_protocol+0x529/0x790 [ 433.992830][T10894] should_fail_ex+0x394/0x4c0 [ 433.997571][T10894] should_failslab+0x9/0x20 [ 434.002136][T10894] slab_pre_alloc_hook+0x59/0x300 [ 434.007223][T10894] kmem_cache_alloc+0x5a/0x2c0 [ 434.012040][T10894] ? skb_clone+0x1eb/0x370 [ 434.016523][T10894] skb_clone+0x1eb/0x370 [ 434.020821][T10894] ? dev_queue_xmit_nit+0x204/0xba0 [ 434.026072][T10894] dev_queue_xmit_nit+0x23f/0xba0 [ 434.031145][T10894] ? dev_queue_xmit_nit+0x2d/0xba0 [ 434.036324][T10894] dev_hard_start_xmit+0x150/0x790 [ 434.041499][T10894] __dev_queue_xmit+0x1be8/0x37e0 [ 434.046579][T10894] ? __dev_queue_xmit+0x272/0x37e0 [ 434.051766][T10894] ? netdev_core_pick_tx+0x370/0x370 [ 434.057090][T10894] ? __copy_skb_header+0xa3/0x4a0 [ 434.062155][T10894] ? __asan_memcpy+0x40/0x70 [ 434.066799][T10894] ? __skb_clone+0x5c/0x6c0 [ 434.071360][T10894] ? __skb_clone+0x446/0x6c0 [ 434.076016][T10894] ? skb_clone+0x21f/0x370 [ 434.080481][T10894] __netlink_deliver_tap+0x579/0x7f0 [ 434.085818][T10894] ? netlink_deliver_tap+0x2e/0x1b0 [ 434.091065][T10894] netlink_deliver_tap+0x19c/0x1b0 [ 434.096224][T10894] netlink_unicast+0x77b/0x930 [ 434.101039][T10894] netlink_sendmsg+0x8d0/0xbf0 [ 434.105855][T10894] ? netlink_getsockopt+0x590/0x590 [ 434.111094][T10894] ? apparmor_socket_sendmsg+0x8e/0x330 [ 434.116685][T10894] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 434.122039][T10894] ? security_socket_sendmsg+0x80/0xa0 [ 434.127535][T10894] ? netlink_getsockopt+0x590/0x590 [ 434.132802][T10894] ____sys_sendmsg+0x61b/0x980 [ 434.137634][T10894] ? __asan_memset+0x22/0x40 [ 434.142291][T10894] ? __sys_sendmsg_sock+0x30/0x30 [ 434.147382][T10894] ? __import_iovec+0x5f2/0x850 [ 434.152296][T10894] ? import_iovec+0x73/0xa0 [ 434.156854][T10894] ___sys_sendmsg+0x2a6/0x360 [ 434.161574][T10894] ? get_pid_task+0x20/0x1e0 [ 434.166238][T10894] ? __sys_sendmsg+0x2b0/0x2b0 [ 434.171074][T10894] ? __lock_acquire+0x7d80/0x7d80 [ 434.176179][T10894] __se_sys_sendmsg+0x1d0/0x2c0 [ 434.181082][T10894] ? __x64_sys_sendmsg+0x80/0x80 [ 434.186102][T10894] ? lockdep_hardirqs_on+0x98/0x150 [ 434.191366][T10894] do_syscall_64+0x55/0xb0 [ 434.195836][T10894] ? clear_bhb_loop+0x40/0x90 [ 434.200559][T10894] ? clear_bhb_loop+0x40/0x90 [ 434.205304][T10894] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 434.211246][T10894] RIP: 0033:0x7f743d19e159 [ 434.215703][T10894] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 434.235359][T10894] RSP: 002b:00007f743e156028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 434.243863][T10894] RAX: ffffffffffffffda RBX: 00007f743d425fa0 RCX: 00007f743d19e159 [ 434.251888][T10894] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 434.259896][T10894] RBP: 00007f743e156090 R08: 0000000000000000 R09: 0000000000000000 [ 434.267915][T10894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 434.275924][T10894] R13: 00007f743d426038 R14: 00007f743d425fa0 R15: 00007ffdaf147f18 [ 434.283959][T10894] [ 434.326464][T10897] netlink: 'syz.0.1705': attribute type 153 has an invalid length. [ 434.334766][T10897] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.1705'. [ 435.086080][T10912] syzkaller0: entered promiscuous mode [ 435.109645][T10912] syzkaller0: entered allmulticast mode [ 435.899177][T10923] netlink: 'syz.0.1717': attribute type 153 has an invalid length. [ 435.973873][T10923] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.1717'. [ 437.986769][T10946] netlink: 'syz.1.1726': attribute type 1 has an invalid length. [ 438.210910][T10953] netlink: 'syz.1.1728': attribute type 153 has an invalid length. [ 438.241015][T10953] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.1728'. [ 438.716855][T10968] syzkaller0: entered promiscuous mode [ 438.725992][T10968] syzkaller0: entered allmulticast mode [ 440.402568][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.409186][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.460792][T10993] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1740'. [ 440.744951][T11000] netlink: 'syz.3.1742': attribute type 153 has an invalid length. [ 440.759975][T11000] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.1742'. [ 440.955613][T11008] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1746'. [ 441.199978][T11023] syzkaller0: entered promiscuous mode [ 441.205856][T11023] syzkaller0: entered allmulticast mode [ 441.271630][T11016] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1748'. [ 442.974978][T11041] netlink: 'syz.2.1755': attribute type 153 has an invalid length. [ 443.001833][T11041] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.1755'. [ 444.123679][T11069] netlink: 'syz.0.1763': attribute type 10 has an invalid length. [ 444.137619][T11069] netlink: 9279 bytes leftover after parsing attributes in process `syz.0.1763'. [ 444.340976][T11081] syzkaller0: entered promiscuous mode [ 444.346611][T11081] syzkaller0: entered allmulticast mode [ 444.367855][T11083] netlink: 'syz.0.1769': attribute type 153 has an invalid length. [ 444.384045][T11083] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.1769'. [ 446.276865][T11108] netlink: 'syz.0.1779': attribute type 153 has an invalid length. [ 446.287014][T11108] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.1779'. [ 446.360415][T11109] syzkaller0: entered promiscuous mode [ 446.366073][T11109] syzkaller0: entered allmulticast mode [ 446.778936][T11125] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1783'. [ 446.924741][T11128] syzkaller0: entered promiscuous mode [ 446.932994][T11128] syzkaller0: entered allmulticast mode [ 447.454932][T11139] netlink: 'syz.2.1789': attribute type 153 has an invalid length. [ 447.474283][T11139] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.1789'. [ 452.340003][T11175] netlink: 'syz.2.1802': attribute type 153 has an invalid length. [ 452.351145][T11175] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.1802'. [ 452.782389][T11189] syzkaller0: entered promiscuous mode [ 452.796677][T11189] syzkaller0: entered allmulticast mode [ 452.898643][T11192] FAULT_INJECTION: forcing a failure. [ 452.898643][T11192] name failslab, interval 1, probability 0, space 0, times 0 [ 452.947988][T11192] CPU: 1 PID: 11192 Comm: syz.2.1807 Not tainted syzkaller #0 [ 452.955560][T11192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 452.965675][T11192] Call Trace: [ 452.969012][T11192] [ 452.971989][T11192] dump_stack_lvl+0x18c/0x250 [ 452.976734][T11192] ? show_regs_print_info+0x20/0x20 [ 452.981991][T11192] ? load_image+0x420/0x420 [ 452.986556][T11192] ? __might_sleep+0xe0/0xe0 [ 452.991211][T11192] ? __lock_acquire+0x7d80/0x7d80 [ 452.996319][T11192] should_fail_ex+0x394/0x4c0 [ 453.001084][T11192] should_failslab+0x9/0x20 [ 453.005655][T11192] slab_pre_alloc_hook+0x59/0x300 [ 453.010747][T11192] ? __lock_acquire+0x7d80/0x7d80 [ 453.015826][T11192] kmem_cache_alloc_node+0x5e/0x310 [ 453.021088][T11192] ? __alloc_skb+0x103/0x2c0 [ 453.025741][T11192] __alloc_skb+0x103/0x2c0 [ 453.030224][T11192] netlink_sendmsg+0x66a/0xbf0 [ 453.035058][T11192] ? netlink_getsockopt+0x590/0x590 [ 453.040344][T11192] ? apparmor_socket_sendmsg+0x8e/0x330 [ 453.045961][T11192] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 453.051302][T11192] ? security_socket_sendmsg+0x80/0xa0 [ 453.056817][T11192] ? netlink_getsockopt+0x590/0x590 [ 453.062079][T11192] ____sys_sendmsg+0x61b/0x980 [ 453.066946][T11192] ? __asan_memset+0x22/0x40 [ 453.071605][T11192] ? __sys_sendmsg_sock+0x30/0x30 [ 453.076690][T11192] ? __import_iovec+0x5f2/0x850 [ 453.081612][T11192] ? import_iovec+0x73/0xa0 [ 453.086175][T11192] ___sys_sendmsg+0x2a6/0x360 [ 453.090920][T11192] ? __sys_sendmsg+0x2b0/0x2b0 [ 453.095767][T11192] ? __lock_acquire+0x7d80/0x7d80 [ 453.100871][T11192] __se_sys_sendmsg+0x1d0/0x2c0 [ 453.105788][T11192] ? __x64_sys_sendmsg+0x80/0x80 [ 453.110826][T11192] ? lockdep_hardirqs_on+0x98/0x150 [ 453.116106][T11192] do_syscall_64+0x55/0xb0 [ 453.120579][T11192] ? clear_bhb_loop+0x40/0x90 [ 453.125341][T11192] ? clear_bhb_loop+0x40/0x90 [ 453.130086][T11192] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 453.136036][T11192] RIP: 0033:0x7f743d19e159 [ 453.140493][T11192] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 453.160174][T11192] RSP: 002b:00007f743e156028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 453.168635][T11192] RAX: ffffffffffffffda RBX: 00007f743d425fa0 RCX: 00007f743d19e159 [ 453.176655][T11192] RDX: 0000000004004004 RSI: 0000200000000040 RDI: 0000000000000003 [ 453.184680][T11192] RBP: 00007f743e156090 R08: 0000000000000000 R09: 0000000000000000 [ 453.192703][T11192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 453.200733][T11192] R13: 00007f743d426038 R14: 00007f743d425fa0 R15: 00007ffdaf147f18 [ 453.208769][T11192] [ 453.227315][T11195] FAULT_INJECTION: forcing a failure. [ 453.227315][T11195] name failslab, interval 1, probability 0, space 0, times 0 [ 453.244686][T11195] CPU: 1 PID: 11195 Comm: syz.3.1808 Not tainted syzkaller #0 [ 453.252214][T11195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 453.262361][T11195] Call Trace: [ 453.265686][T11195] [ 453.268666][T11195] dump_stack_lvl+0x18c/0x250 [ 453.273425][T11195] ? sctp_sendmsg+0x1519/0x27b0 [ 453.278350][T11195] ? ___sys_sendmsg+0x2a6/0x360 [ 453.283260][T11195] ? show_regs_print_info+0x20/0x20 [ 453.288525][T11195] ? load_image+0x420/0x420 [ 453.293094][T11195] should_fail_ex+0x394/0x4c0 [ 453.297839][T11195] should_failslab+0x9/0x20 [ 453.302400][T11195] slab_pre_alloc_hook+0x59/0x300 [ 453.307490][T11195] ? sctp_add_bind_addr+0x8c/0x360 [ 453.312664][T11195] __kmem_cache_alloc_node+0x53/0x250 [ 453.318104][T11195] ? sctp_add_bind_addr+0x8c/0x360 [ 453.323283][T11195] kmalloc_trace+0x2a/0xe0 [ 453.327769][T11195] sctp_add_bind_addr+0x8c/0x360 [ 453.332776][T11195] sctp_copy_local_addr_list+0x31b/0x4e0 [ 453.338471][T11195] ? sctp_copy_local_addr_list+0xa4/0x4e0 [ 453.345033][T11195] ? sctp_do_8_2_transport_strike+0x910/0x910 [ 453.351169][T11195] ? sctp_v6_is_any+0x64/0x70 [ 453.355904][T11195] ? sctp_copy_one_addr+0x8c/0x350 [ 453.361174][T11195] sctp_bind_addr_copy+0xb3/0x3c0 [ 453.366265][T11195] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 453.372664][T11195] sctp_connect_new_asoc+0x2f9/0x6a0 [ 453.378003][T11195] ? __sctp_connect+0xd80/0xd80 [ 453.382902][T11195] ? __local_bh_enable_ip+0x13a/0x1c0 [ 453.388348][T11195] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 453.393962][T11195] ? security_sctp_bind_connect+0x89/0xb0 [ 453.399741][T11195] sctp_sendmsg+0x1519/0x27b0 [ 453.404508][T11195] ? sctp_getsockopt+0xb60/0xb60 [ 453.409565][T11195] ? aa_af_perm+0x330/0x330 [ 453.414144][T11195] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 453.420638][T11195] ? sock_rps_record_flow+0x19/0x3f0 [ 453.425990][T11195] ? inet_sendmsg+0xce/0x2a0 [ 453.430643][T11195] ? inet_send_prepare+0x250/0x250 [ 453.435833][T11195] ____sys_sendmsg+0x61b/0x980 [ 453.440666][T11195] ? __asan_memset+0x22/0x40 [ 453.445325][T11195] ? __sys_sendmsg_sock+0x30/0x30 [ 453.450411][T11195] ? __import_iovec+0x5f2/0x850 [ 453.455345][T11195] ? import_iovec+0x73/0xa0 [ 453.459923][T11195] ___sys_sendmsg+0x2a6/0x360 [ 453.464692][T11195] ? __sys_sendmsg+0x2b0/0x2b0 [ 453.469547][T11195] ? trace_call_bpf+0xc3/0x6c0 [ 453.474401][T11195] __se_sys_sendmsg+0x1d0/0x2c0 [ 453.479314][T11195] ? perf_trace_preemptirq_template+0x269/0x330 [ 453.485625][T11195] ? __x64_sys_sendmsg+0x80/0x80 [ 453.490658][T11195] ? lockdep_hardirqs_on+0x98/0x150 [ 453.495930][T11195] do_syscall_64+0x55/0xb0 [ 453.501028][T11195] ? clear_bhb_loop+0x40/0x90 [ 453.505780][T11195] ? clear_bhb_loop+0x40/0x90 [ 453.510543][T11195] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 453.516502][T11195] RIP: 0033:0x7f892fb9e159 [ 453.520975][T11195] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 453.540878][T11195] RSP: 002b:00007f8930a9f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 453.549408][T11195] RAX: ffffffffffffffda RBX: 00007f892fe26090 RCX: 00007f892fb9e159 [ 453.557446][T11195] RDX: 0000000030008041 RSI: 0000200000002dc0 RDI: 0000000000000004 [ 453.565483][T11195] RBP: 00007f8930a9f090 R08: 0000000000000000 R09: 0000000000000000 [ 453.574044][T11195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 453.582080][T11195] R13: 00007f892fe26128 R14: 00007f892fe26090 R15: 00007ffd7b0c2428 [ 453.590128][T11195] [ 455.145763][T11213] netlink: 'syz.1.1815': attribute type 153 has an invalid length. [ 455.160866][T11213] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.1815'. [ 455.714286][T11229] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1819'. [ 455.745323][T11229] openvswitch: netlink: Key 32 has unexpected len 3064 expected 2 [ 455.988823][T11237] syzkaller0: entered promiscuous mode [ 456.012429][T11237] syzkaller0: entered allmulticast mode [ 456.410448][T11246] netlink: 'syz.0.1827': attribute type 153 has an invalid length. [ 456.440017][T11246] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.1827'. [ 457.097383][T11255] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1830'. [ 457.558556][T11269] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.1832'. [ 457.579321][T11272] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1834'. [ 457.843939][T11279] netlink: 'syz.3.1838': attribute type 153 has an invalid length. [ 457.855402][T11279] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.1838'. [ 458.492518][T11292] syzkaller0: entered promiscuous mode [ 458.502152][T11292] syzkaller0: entered allmulticast mode [ 460.190498][T11310] netlink: 'syz.1.1849': attribute type 153 has an invalid length. [ 460.199419][T11310] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.1849'. [ 460.695884][T11330] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1856'. [ 461.366446][T11342] syzkaller0: entered promiscuous mode [ 461.399863][T11342] syzkaller0: entered allmulticast mode [ 461.793344][T11349] netlink: 'syz.1.1865': attribute type 153 has an invalid length. [ 461.827779][T11349] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.1865'. [ 464.944208][T11379] netlink: 'syz.2.1876': attribute type 153 has an invalid length. [ 464.960402][T11381] syzkaller0: entered promiscuous mode [ 464.966161][T11381] syzkaller0: entered allmulticast mode [ 464.972148][T11379] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.1876'. [ 467.039028][T11407] FAULT_INJECTION: forcing a failure. [ 467.039028][T11407] name failslab, interval 1, probability 0, space 0, times 0 [ 467.052253][T11407] CPU: 1 PID: 11407 Comm: syz.2.1886 Not tainted syzkaller #0 [ 467.059782][T11407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 467.069886][T11407] Call Trace: [ 467.073221][T11407] [ 467.076201][T11407] dump_stack_lvl+0x18c/0x250 [ 467.080948][T11407] ? show_regs_print_info+0x20/0x20 [ 467.086229][T11407] ? load_image+0x420/0x420 [ 467.090803][T11407] should_fail_ex+0x394/0x4c0 [ 467.095568][T11407] should_failslab+0x9/0x20 [ 467.100135][T11407] slab_pre_alloc_hook+0x59/0x300 [ 467.105237][T11407] kmem_cache_alloc+0x5a/0x2c0 [ 467.110057][T11407] ? radix_tree_node_alloc+0x7e/0x3a0 [ 467.115492][T11407] radix_tree_node_alloc+0x7e/0x3a0 [ 467.120769][T11407] idr_get_free+0x28f/0xa10 [ 467.125343][T11407] idr_alloc_cyclic+0x28a/0x610 [ 467.130334][T11407] ? idr_alloc+0x2e0/0x2e0 [ 467.134797][T11407] ? do_raw_spin_lock+0x11f/0x2b0 [ 467.139880][T11407] ? bpf_map_alloc_id+0x21/0xd0 [ 467.144776][T11407] bpf_map_alloc_id+0x40/0xd0 [ 467.149507][T11407] map_create+0xe24/0x12f0 [ 467.154002][T11407] __sys_bpf+0x651/0x890 [ 467.158307][T11407] ? bpf_link_show_fdinfo+0x560/0x560 [ 467.163719][T11407] ? lock_chain_count+0x20/0x20 [ 467.168620][T11407] __x64_sys_bpf+0x7c/0x90 [ 467.173093][T11407] do_syscall_64+0x55/0xb0 [ 467.177546][T11407] ? clear_bhb_loop+0x40/0x90 [ 467.182300][T11407] ? clear_bhb_loop+0x40/0x90 [ 467.187020][T11407] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 467.192950][T11407] RIP: 0033:0x7f743d19e159 [ 467.197406][T11407] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 467.217206][T11407] RSP: 002b:00007f743e156028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 467.225651][T11407] RAX: ffffffffffffffda RBX: 00007f743d425fa0 RCX: 00007f743d19e159 [ 467.233664][T11407] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 0000000000000000 [ 467.241669][T11407] RBP: 00007f743e156090 R08: 0000000000000000 R09: 0000000000000000 [ 467.249718][T11407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 467.257721][T11407] R13: 00007f743d426038 R14: 00007f743d425fa0 R15: 00007ffdaf147f18 [ 467.265794][T11407] [ 467.355047][T11409] netlink: 'syz.0.1885': attribute type 21 has an invalid length. [ 467.379659][T11409] netlink: 'syz.0.1885': attribute type 1 has an invalid length. [ 467.743199][T11426] netlink: 'syz.1.1894': attribute type 153 has an invalid length. [ 467.768432][T11426] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.1894'. [ 467.836503][T11433] syzkaller0: entered promiscuous mode [ 467.845100][T11433] syzkaller0: entered allmulticast mode [ 470.214262][T11464] netlink: 'syz.2.1906': attribute type 153 has an invalid length. [ 470.234902][T11464] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.1906'. [ 470.817766][T11482] syzkaller0: entered promiscuous mode [ 470.826059][T11482] syzkaller0: entered allmulticast mode [ 471.811988][T11497] netlink: 'syz.3.1918': attribute type 153 has an invalid length. [ 471.829228][T11497] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.1918'. [ 472.097013][T11505] netlink: 196 bytes leftover after parsing attributes in process `syz.2.1919'. [ 472.142961][T11505] netlink: 'syz.2.1919': attribute type 153 has an invalid length. [ 472.161096][T11505] netlink: 'syz.2.1919': attribute type 1 has an invalid length. [ 472.169090][T11505] netlink: 104088 bytes leftover after parsing attributes in process `syz.2.1919'. [ 472.211824][T11512] FAULT_INJECTION: forcing a failure. [ 472.211824][T11512] name failslab, interval 1, probability 0, space 0, times 0 [ 472.224584][T11512] CPU: 1 PID: 11512 Comm: syz.0.1922 Not tainted syzkaller #0 [ 472.232147][T11512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 472.242253][T11512] Call Trace: [ 472.245585][T11512] [ 472.248648][T11512] dump_stack_lvl+0x18c/0x250 [ 472.253410][T11512] ? show_regs_print_info+0x20/0x20 [ 472.258667][T11512] ? load_image+0x420/0x420 [ 472.263244][T11512] should_fail_ex+0x394/0x4c0 [ 472.267990][T11512] should_failslab+0x9/0x20 [ 472.272551][T11512] slab_pre_alloc_hook+0x59/0x300 [ 472.277671][T11512] kmem_cache_alloc+0x5a/0x2c0 [ 472.282529][T11512] ? radix_tree_node_alloc+0x7e/0x3a0 [ 472.287971][T11512] radix_tree_node_alloc+0x7e/0x3a0 [ 472.293245][T11512] idr_get_free+0x28f/0xa10 [ 472.297837][T11512] idr_alloc_cyclic+0x28a/0x610 [ 472.302755][T11512] ? idr_alloc+0x2e0/0x2e0 [ 472.307226][T11512] ? do_raw_spin_lock+0x11f/0x2b0 [ 472.312312][T11512] ? bpf_map_alloc_id+0x21/0xd0 [ 472.317209][T11512] bpf_map_alloc_id+0x40/0xd0 [ 472.321936][T11512] map_create+0xe24/0x12f0 [ 472.326486][T11512] __sys_bpf+0x651/0x890 [ 472.330764][T11512] ? bpf_link_show_fdinfo+0x560/0x560 [ 472.336191][T11512] ? lock_chain_count+0x20/0x20 [ 472.341086][T11512] __x64_sys_bpf+0x7c/0x90 [ 472.345540][T11512] do_syscall_64+0x55/0xb0 [ 472.349988][T11512] ? clear_bhb_loop+0x40/0x90 [ 472.354697][T11512] ? clear_bhb_loop+0x40/0x90 [ 472.359409][T11512] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 472.365345][T11512] RIP: 0033:0x7f4bee39e159 [ 472.370049][T11512] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 472.389770][T11512] RSP: 002b:00007f4bef2b9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 472.398218][T11512] RAX: ffffffffffffffda RBX: 00007f4bee625fa0 RCX: 00007f4bee39e159 [ 472.406392][T11512] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 0000000000000000 [ 472.414403][T11512] RBP: 00007f4bef2b9090 R08: 0000000000000000 R09: 0000000000000000 [ 472.422506][T11512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 472.430515][T11512] R13: 00007f4bee626038 R14: 00007f4bee625fa0 R15: 00007ffedc1d7548 [ 472.438528][T11512] [ 473.506085][T11520] syzkaller0: entered promiscuous mode [ 473.512286][T11520] syzkaller0: entered allmulticast mode [ 474.266174][T11551] netlink: 'syz.3.1932': attribute type 153 has an invalid length. [ 474.278021][T11551] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.1932'. [ 476.048319][T11560] FAULT_INJECTION: forcing a failure. [ 476.048319][T11560] name failslab, interval 1, probability 0, space 0, times 0 [ 476.061482][T11560] CPU: 1 PID: 11560 Comm: syz.0.1934 Not tainted syzkaller #0 [ 476.069007][T11560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 476.079118][T11560] Call Trace: [ 476.082446][T11560] [ 476.085423][T11560] dump_stack_lvl+0x18c/0x250 [ 476.090160][T11560] ? trace_raw_output_percpu_destroy_chunk+0xc0/0xc0 [ 476.096900][T11560] ? show_regs_print_info+0x20/0x20 [ 476.102157][T11560] ? load_image+0x420/0x420 [ 476.106733][T11560] ? pcpu_alloc+0x11e7/0x1880 [ 476.111468][T11560] should_fail_ex+0x394/0x4c0 [ 476.116204][T11560] should_failslab+0x9/0x20 [ 476.120770][T11560] slab_pre_alloc_hook+0x59/0x300 [ 476.125855][T11560] ? __lock_acquire+0x1336/0x7d80 [ 476.130937][T11560] kmem_cache_alloc+0x5a/0x2c0 [ 476.135754][T11560] ? fib6_add_1+0x736/0x13c0 [ 476.140411][T11560] fib6_add_1+0x736/0x13c0 [ 476.144901][T11560] fib6_add+0x1f6/0x49d0 [ 476.149208][T11560] ? ip_fib_metrics_init+0x417/0x6f0 [ 476.154551][T11560] ? fib6_update_sernum_stub+0x1e0/0x1e0 [ 476.160255][T11560] ? do_raw_spin_lock+0x11f/0x2b0 [ 476.165342][T11560] ? __rwlock_init+0x150/0x150 [ 476.170167][T11560] ? ip6_route_add+0x75/0x160 [ 476.174907][T11560] ip6_route_add+0x8a/0x160 [ 476.179496][T11560] ipv6_route_ioctl+0x3af/0x500 [ 476.184424][T11560] ? rt6_purge_dflt_routers+0xb20/0xb20 [ 476.190071][T11560] ? __might_fault+0xaa/0x120 [ 476.194807][T11560] ? __might_fault+0xc6/0x120 [ 476.199533][T11560] ? __might_fault+0xaa/0x120 [ 476.204279][T11560] inet6_ioctl+0x247/0x2d0 [ 476.208758][T11560] ? inet6_getname+0x670/0x670 [ 476.213594][T11560] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 476.219128][T11560] sock_do_ioctl+0xfc/0x310 [ 476.223692][T11560] ? sock_show_fdinfo+0xb0/0xb0 [ 476.228615][T11560] sock_ioctl+0x5be/0x7e0 [ 476.233021][T11560] ? sock_poll+0x3e0/0x3e0 [ 476.237533][T11560] ? bpf_lsm_file_ioctl+0x9/0x10 [ 476.242527][T11560] ? security_file_ioctl+0x80/0xa0 [ 476.247694][T11560] ? sock_poll+0x3e0/0x3e0 [ 476.252450][T11560] __se_sys_ioctl+0xfd/0x170 [ 476.257105][T11560] do_syscall_64+0x55/0xb0 [ 476.261583][T11560] ? clear_bhb_loop+0x40/0x90 [ 476.266314][T11560] ? clear_bhb_loop+0x40/0x90 [ 476.271047][T11560] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 476.276989][T11560] RIP: 0033:0x7f4bee39e159 [ 476.281444][T11560] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 476.301124][T11560] RSP: 002b:00007f4bef2b9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 476.309583][T11560] RAX: ffffffffffffffda RBX: 00007f4bee625fa0 RCX: 00007f4bee39e159 [ 476.317626][T11560] RDX: 0000200000000000 RSI: 000000000000890b RDI: 0000000000000003 [ 476.325667][T11560] RBP: 00007f4bef2b9090 R08: 0000000000000000 R09: 0000000000000000 [ 476.333694][T11560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 476.341726][T11560] R13: 00007f4bee626038 R14: 00007f4bee625fa0 R15: 00007ffedc1d7548 [ 476.349770][T11560] [ 476.477569][T11568] netlink: 'syz.3.1938': attribute type 28 has an invalid length. [ 476.486005][T11568] netlink: 'syz.3.1938': attribute type 29 has an invalid length. [ 476.500460][T11568] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1938'. [ 476.695488][T11580] netlink: 'syz.3.1941': attribute type 153 has an invalid length. [ 476.705542][T11580] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.1941'. [ 477.197052][T11593] syzkaller0: entered promiscuous mode [ 477.204779][T11593] syzkaller0: entered allmulticast mode [ 478.569841][T11612] netlink: 'syz.0.1952': attribute type 153 has an invalid length. [ 478.594240][T11608] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.1950'. [ 478.619998][T11612] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.1952'. [ 478.675186][T11617] netlink: 'syz.1.1953': attribute type 29 has an invalid length. [ 478.701140][T11617] netlink: 'syz.1.1953': attribute type 29 has an invalid length. [ 482.212076][T11643] syzkaller0: entered promiscuous mode [ 482.242096][T11643] syzkaller0: entered allmulticast mode [ 482.266185][T11647] netlink: 'syz.3.1965': attribute type 153 has an invalid length. [ 482.276101][T11647] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.1965'. [ 482.960517][T11668] netlink: 'syz.2.1969': attribute type 1 has an invalid length. [ 482.969341][T11668] netlink: 'syz.2.1969': attribute type 3 has an invalid length. [ 482.977849][T11668] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1969'. [ 484.056996][T11692] netlink: 'syz.1.1977': attribute type 10 has an invalid length. [ 484.225430][T11692] bond0: (slave geneve0): Releasing backup interface [ 484.367504][T11696] netlink: 'syz.3.1979': attribute type 153 has an invalid length. [ 484.380068][T11696] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.1979'. [ 485.151469][T11719] syzkaller0: entered promiscuous mode [ 485.167385][T11719] syzkaller0: entered allmulticast mode [ 486.013459][T11729] FAULT_INJECTION: forcing a failure. [ 486.013459][T11729] name failslab, interval 1, probability 0, space 0, times 0 [ 486.026707][T11729] CPU: 0 PID: 11729 Comm: syz.3.1991 Not tainted syzkaller #0 [ 486.034344][T11729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 486.044498][T11729] Call Trace: [ 486.047853][T11729] [ 486.050875][T11729] dump_stack_lvl+0x18c/0x250 [ 486.055716][T11729] ? show_regs_print_info+0x20/0x20 [ 486.061094][T11729] ? load_image+0x420/0x420 [ 486.065692][T11729] ? __might_sleep+0xe0/0xe0 [ 486.070577][T11729] ? __lock_acquire+0x7d80/0x7d80 [ 486.075710][T11729] should_fail_ex+0x394/0x4c0 [ 486.080488][T11729] should_failslab+0x9/0x20 [ 486.085080][T11729] slab_pre_alloc_hook+0x59/0x300 [ 486.090192][T11729] ? __lock_acquire+0x7d80/0x7d80 [ 486.095346][T11729] kmem_cache_alloc_node+0x5e/0x310 [ 486.100656][T11729] ? __alloc_skb+0x103/0x2c0 [ 486.105358][T11729] __alloc_skb+0x103/0x2c0 [ 486.109872][T11729] netlink_sendmsg+0x66a/0xbf0 [ 486.114751][T11729] ? netlink_getsockopt+0x590/0x590 [ 486.120032][T11729] ? apparmor_socket_sendmsg+0x170/0x330 [ 486.125712][T11729] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 486.131050][T11729] ? security_socket_sendmsg+0x80/0xa0 [ 486.136586][T11729] ? netlink_getsockopt+0x590/0x590 [ 486.141894][T11729] ____sys_sendmsg+0x61b/0x980 [ 486.146766][T11729] ? __asan_memset+0x22/0x40 [ 486.151446][T11729] ? __sys_sendmsg_sock+0x30/0x30 [ 486.156630][T11729] ? __import_iovec+0x5f2/0x850 [ 486.161601][T11729] ? import_iovec+0x73/0xa0 [ 486.166209][T11729] ___sys_sendmsg+0x2a6/0x360 [ 486.170967][T11729] ? get_pid_task+0x20/0x1e0 [ 486.175670][T11729] ? __sys_sendmsg+0x2b0/0x2b0 [ 486.180612][T11729] ? __lock_acquire+0x7d80/0x7d80 [ 486.185817][T11729] __se_sys_sendmsg+0x1d0/0x2c0 [ 486.190769][T11729] ? __x64_sys_sendmsg+0x80/0x80 [ 486.195851][T11729] ? lockdep_hardirqs_on+0x98/0x150 [ 486.201168][T11729] do_syscall_64+0x55/0xb0 [ 486.205759][T11729] ? clear_bhb_loop+0x40/0x90 [ 486.210527][T11729] ? clear_bhb_loop+0x40/0x90 [ 486.215307][T11729] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 486.221284][T11729] RIP: 0033:0x7f892fb9e159 [ 486.225788][T11729] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 486.245479][T11729] RSP: 002b:00007f8930ac0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 486.254082][T11729] RAX: ffffffffffffffda RBX: 00007f892fe25fa0 RCX: 00007f892fb9e159 [ 486.262130][T11729] RDX: 000000002000c880 RSI: 0000200000000040 RDI: 0000000000000003 [ 486.270183][T11729] RBP: 00007f8930ac0090 R08: 0000000000000000 R09: 0000000000000000 [ 486.278698][T11729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 486.287032][T11729] R13: 00007f892fe26038 R14: 00007f892fe25fa0 R15: 00007ffd7b0c2428 [ 486.295160][T11729] [ 486.353313][T11731] netlink: 'syz.0.1992': attribute type 153 has an invalid length. [ 486.362066][T11731] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.1992'. [ 486.892787][T11753] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 486.952501][T11759] syzkaller0: entered promiscuous mode [ 486.959333][T11759] syzkaller0: entered allmulticast mode [ 487.065370][T11761] FAULT_INJECTION: forcing a failure. [ 487.065370][T11761] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 487.078863][T11761] CPU: 1 PID: 11761 Comm: syz.2.2003 Not tainted syzkaller #0 [ 487.086473][T11761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 487.096587][T11761] Call Trace: [ 487.099909][T11761] [ 487.102882][T11761] dump_stack_lvl+0x18c/0x250 [ 487.107619][T11761] ? show_regs_print_info+0x20/0x20 [ 487.112868][T11761] ? load_image+0x420/0x420 [ 487.117435][T11761] ? __might_fault+0xaa/0x120 [ 487.122169][T11761] ? __lock_acquire+0x7d80/0x7d80 [ 487.127253][T11761] should_fail_ex+0x394/0x4c0 [ 487.132077][T11761] _copy_from_user+0x2f/0xe0 [ 487.136726][T11761] __sys_bpf+0x23e/0x890 [ 487.141019][T11761] ? bpf_link_show_fdinfo+0x560/0x560 [ 487.146453][T11761] ? lock_chain_count+0x20/0x20 [ 487.151365][T11761] __x64_sys_bpf+0x7c/0x90 [ 487.155870][T11761] do_syscall_64+0x55/0xb0 [ 487.160344][T11761] ? clear_bhb_loop+0x40/0x90 [ 487.165082][T11761] ? clear_bhb_loop+0x40/0x90 [ 487.169816][T11761] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 487.175764][T11761] RIP: 0033:0x7f743d19e159 [ 487.180589][T11761] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 487.200248][T11761] RSP: 002b:00007f743e156028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 487.208720][T11761] RAX: ffffffffffffffda RBX: 00007f743d425fa0 RCX: 00007f743d19e159 [ 487.216748][T11761] RDX: 000000000000000c RSI: 0000200000000840 RDI: 000000000000000a [ 487.224760][T11761] RBP: 00007f743e156090 R08: 0000000000000000 R09: 0000000000000000 [ 487.232762][T11761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 487.240758][T11761] R13: 00007f743d426038 R14: 00007f743d425fa0 R15: 00007ffdaf147f18 [ 487.248775][T11761] [ 487.734886][T11770] netlink: 'syz.1.2005': attribute type 153 has an invalid length. [ 487.782210][T11770] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.2005'. [ 489.388073][T11789] netlink: 208064 bytes leftover after parsing attributes in process `syz.1.2012'. [ 489.414399][T11789] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2012'. [ 490.222497][T11812] netlink: 'syz.1.2018': attribute type 153 has an invalid length. [ 490.233965][T11812] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.2018'. [ 490.602517][T11823] syzkaller0: entered promiscuous mode [ 490.618359][T11823] syzkaller0: entered allmulticast mode [ 493.363019][T11834] netlink: 'syz.3.2026': attribute type 1 has an invalid length. [ 493.473988][T11834] netlink: 'syz.3.2026': attribute type 10 has an invalid length. [ 493.584813][T11842] FAULT_INJECTION: forcing a failure. [ 493.584813][T11842] name failslab, interval 1, probability 0, space 0, times 0 [ 493.598414][T11842] CPU: 0 PID: 11842 Comm: syz.2.2030 Not tainted syzkaller #0 [ 493.605963][T11842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 493.616083][T11842] Call Trace: [ 493.619417][T11842] [ 493.622408][T11842] dump_stack_lvl+0x18c/0x250 [ 493.627171][T11842] ? show_regs_print_info+0x20/0x20 [ 493.632456][T11842] ? load_image+0x420/0x420 [ 493.637032][T11842] ? __might_sleep+0xe0/0xe0 [ 493.641695][T11842] ? __lock_acquire+0x7d80/0x7d80 [ 493.646813][T11842] should_fail_ex+0x394/0x4c0 [ 493.651582][T11842] should_failslab+0x9/0x20 [ 493.656179][T11842] slab_pre_alloc_hook+0x59/0x300 [ 493.661311][T11842] ? d_instantiate+0x6f/0x90 [ 493.665994][T11842] kmem_cache_alloc+0x5a/0x2c0 [ 493.670842][T11842] ? alloc_empty_file+0x9e/0x1d0 [ 493.675868][T11842] alloc_empty_file+0x9e/0x1d0 [ 493.680744][T11842] alloc_file+0x5b/0x600 [ 493.685079][T11842] alloc_file_pseudo+0x184/0x210 [ 493.690093][T11842] ? fput+0x1a0/0x1a0 [ 493.694175][T11842] anon_inode_getfile+0xc5/0x1a0 [ 493.699202][T11842] __se_sys_perf_event_open+0xf37/0x1d40 [ 493.704932][T11842] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 493.710667][T11842] ? lock_chain_count+0x20/0x20 [ 493.715573][T11842] ? lockdep_hardirqs_on+0x98/0x150 [ 493.720894][T11842] ? __x64_sys_perf_event_open+0x20/0xc0 [ 493.726675][T11842] do_syscall_64+0x55/0xb0 [ 493.731142][T11842] ? clear_bhb_loop+0x40/0x90 [ 493.735857][T11842] ? clear_bhb_loop+0x40/0x90 [ 493.740611][T11842] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 493.746925][T11842] RIP: 0033:0x7f743d19e159 [ 493.751442][T11842] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 493.771213][T11842] RSP: 002b:00007f743e156028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 493.779709][T11842] RAX: ffffffffffffffda RBX: 00007f743d425fa0 RCX: 00007f743d19e159 [ 493.787759][T11842] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000100 [ 493.795829][T11842] RBP: 00007f743e156090 R08: 000000000000000a R09: 0000000000000000 [ 493.803871][T11842] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 493.811904][T11842] R13: 00007f743d426038 R14: 00007f743d425fa0 R15: 00007ffdaf147f18 [ 493.819983][T11842] [ 493.838615][T11845] netlink: 'syz.0.2031': attribute type 153 has an invalid length. [ 493.847550][T11845] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.2031'. [ 494.233589][T11834] team0 (unregistering): Port device team_slave_0 removed [ 494.262259][T11834] team0 (unregistering): Port device team_slave_1 removed [ 494.312479][T11834] team0 (unregistering): Port device wlan1 removed [ 494.550884][T11865] syzkaller0: entered promiscuous mode [ 494.564295][T11865] syzkaller0: entered allmulticast mode [ 496.203422][T11876] netlink: 'syz.3.2044': attribute type 153 has an invalid length. [ 496.212815][T11876] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.2044'. [ 497.067505][T11901] netlink: 'syz.3.2052': attribute type 10 has an invalid length. [ 497.177909][T11905] syzkaller0: entered promiscuous mode [ 497.185985][T11905] syzkaller0: entered allmulticast mode [ 497.594291][T11911] netlink: 'syz.0.2057': attribute type 153 has an invalid length. [ 497.604783][T11911] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.2057'. [ 498.883044][T11914] FAULT_INJECTION: forcing a failure. [ 498.883044][T11914] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 498.919616][T11914] CPU: 1 PID: 11914 Comm: syz.1.2058 Not tainted syzkaller #0 [ 498.927161][T11914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 498.937268][T11914] Call Trace: [ 498.940603][T11914] [ 498.943582][T11914] dump_stack_lvl+0x18c/0x250 [ 498.948334][T11914] ? show_regs_print_info+0x20/0x20 [ 498.953676][T11914] ? load_image+0x420/0x420 [ 498.958247][T11914] ? __might_fault+0xaa/0x120 [ 498.962985][T11914] ? __lock_acquire+0x7d80/0x7d80 [ 498.968071][T11914] should_fail_ex+0x394/0x4c0 [ 498.972832][T11914] _copy_from_user+0x2f/0xe0 [ 498.977471][T11914] ___sys_sendmsg+0x1c7/0x360 [ 498.982193][T11914] ? __sys_sendmsg+0x2b0/0x2b0 [ 498.987071][T11914] __se_sys_sendmsg+0x1d0/0x2c0 [ 498.991986][T11914] ? __x64_sys_sendmsg+0x80/0x80 [ 498.996995][T11914] ? syscall_enter_from_user_mode+0x2e/0x80 [ 499.003028][T11914] do_syscall_64+0x55/0xb0 [ 499.007516][T11914] ? clear_bhb_loop+0x40/0x90 [ 499.012340][T11914] ? clear_bhb_loop+0x40/0x90 [ 499.017075][T11914] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 499.023028][T11914] RIP: 0033:0x7fd60359e159 [ 499.027511][T11914] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 499.047173][T11914] RSP: 002b:00007fd6044bb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 499.055650][T11914] RAX: ffffffffffffffda RBX: 00007fd603825fa0 RCX: 00007fd60359e159 [ 499.063668][T11914] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000000 [ 499.071687][T11914] RBP: 00007fd6044bb090 R08: 0000000000000000 R09: 0000000000000000 [ 499.079703][T11914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 499.087727][T11914] R13: 00007fd603826038 R14: 00007fd603825fa0 R15: 00007fff2b15ce18 [ 499.095774][T11914] [ 499.502706][T11933] team0: mtu greater than device maximum [ 499.724915][T11945] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2071'. [ 499.737058][T11945] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2071'. [ 499.776344][T11944] netlink: 'syz.0.2069': attribute type 153 has an invalid length. [ 499.795195][T11944] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.2069'. [ 499.983556][T11951] syzkaller0: entered promiscuous mode [ 499.989291][T11951] syzkaller0: entered allmulticast mode [ 500.056666][T11957] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2075'. [ 501.838313][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.844789][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.949866][T11979] netlink: 'syz.3.2085': attribute type 153 has an invalid length. [ 501.968616][T11979] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.2085'. [ 503.105998][T12006] syzkaller0: entered promiscuous mode [ 503.117662][T12006] syzkaller0: entered allmulticast mode [ 504.659066][T12021] netlink: 'syz.2.2098': attribute type 153 has an invalid length. [ 504.699690][T12021] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.2098'. [ 505.211243][T12041] netlink: 'syz.2.2106': attribute type 153 has an invalid length. [ 505.221880][T12041] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.2106'. [ 505.522074][T12053] syzkaller0: entered promiscuous mode [ 505.527807][T12053] syzkaller0: entered allmulticast mode [ 505.564098][T12048] netlink: 'syz.0.2115': attribute type 153 has an invalid length. [ 505.573472][T12048] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.2115'. [ 507.657736][T12078] netlink: 'syz.3.2120': attribute type 153 has an invalid length. [ 507.674360][T12078] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.2120'. [ 508.305100][T12090] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2123'. [ 508.315711][T12091] netlink: 'syz.0.2122': attribute type 153 has an invalid length. [ 508.330734][T12091] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.2122'. [ 508.395227][T12090] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 508.748141][T12102] syzkaller0: entered promiscuous mode [ 508.777272][T12102] syzkaller0: entered allmulticast mode [ 509.736647][T12115] syzkaller0: entered promiscuous mode [ 509.744893][T12115] syzkaller0: entered allmulticast mode [ 510.235724][T12123] netlink: 'syz.1.2133': attribute type 1 has an invalid length. [ 510.507413][T12124] netlink: 'syz.1.2133': attribute type 10 has an invalid length. [ 511.728133][T12127] netlink: 'syz.0.2134': attribute type 153 has an invalid length. [ 511.759867][T12127] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.2134'. [ 511.800402][T12124] team0 (unregistering): Port device team_slave_0 removed [ 511.875897][T12124] team0 (unregistering): Port device team_slave_1 removed [ 512.248141][T12133] netlink: 'syz.3.2136': attribute type 153 has an invalid length. [ 512.281059][T12133] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.2136'. [ 512.387232][T12140] netlink: 'syz.2.2140': attribute type 1 has an invalid length. [ 512.541024][T12143] syzkaller0: entered promiscuous mode [ 512.571088][T12143] syzkaller0: entered allmulticast mode [ 512.854220][T12152] netlink: 'syz.2.2145': attribute type 10 has an invalid length. [ 512.865056][T12152] netlink: 'syz.2.2145': attribute type 4 has an invalid length. [ 512.876071][T12152] netlink: 116 bytes leftover after parsing attributes in process `syz.2.2145'. [ 512.894046][T12152] bridge0: port 3(team0) entered disabled state [ 513.865478][T12152] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 513.883925][T12150] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2144'. [ 514.157218][T12160] netlink: 'syz.2.2147': attribute type 153 has an invalid length. [ 514.176100][T12160] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.2147'. [ 514.193778][T12158] netlink: 'syz.3.2148': attribute type 153 has an invalid length. [ 514.230632][T12158] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.2148'. [ 515.983665][T12191] syzkaller0: entered promiscuous mode [ 515.992304][T12191] syzkaller0: entered allmulticast mode [ 516.694557][T12202] netlink: 'syz.1.2158': attribute type 153 has an invalid length. [ 516.704396][T12202] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.2158'. [ 519.155451][T12212] syzkaller0: entered promiscuous mode [ 519.161707][T12212] syzkaller0: entered allmulticast mode [ 519.237235][T12216] netlink: 'syz.0.2162': attribute type 153 has an invalid length. [ 519.266119][T12216] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.2162'. [ 519.510783][T12223] netlink: 'syz.1.2164': attribute type 10 has an invalid length. [ 519.519141][T12223] netlink: 'syz.1.2164': attribute type 4 has an invalid length. [ 519.534798][T12223] netlink: 116 bytes leftover after parsing attributes in process `syz.1.2164'. [ 519.642691][T12224] netlink: 'syz.3.2165': attribute type 153 has an invalid length. [ 519.677237][T12224] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.2165'. [ 523.209356][T12252] syzkaller0: entered promiscuous mode [ 523.215169][T12252] syzkaller0: entered allmulticast mode [ 523.370741][T12258] syzkaller0: entered promiscuous mode [ 523.376398][T12258] syzkaller0: entered allmulticast mode [ 523.463164][T12261] netlink: 'syz.3.2176': attribute type 1 has an invalid length. [ 525.665875][T12289] netlink: 'syz.1.2182': attribute type 153 has an invalid length. [ 525.684162][T12289] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.2182'. [ 526.102275][T12298] syzkaller0: entered promiscuous mode [ 526.107871][T12298] syzkaller0: entered allmulticast mode [ 526.141614][T12299] syzkaller0: entered promiscuous mode [ 526.147183][T12299] syzkaller0: entered allmulticast mode [ 527.957964][T12303] syzkaller0: entered promiscuous mode [ 527.968246][T12303] syzkaller0: entered allmulticast mode [ 528.026970][T12305] syzkaller0: entered promiscuous mode [ 528.035540][T12305] syzkaller0: entered allmulticast mode [ 528.962108][T12310] netlink: 'syz.0.2188': attribute type 1 has an invalid length. [ 528.980191][T12311] netlink: 'syz.0.2188': attribute type 10 has an invalid length. [ 529.216656][T12311] bond0: (slave team0): Releasing backup interface [ 529.312872][T12311] team0 (unregistering): Port device team_slave_0 removed [ 529.350705][T12311] team0 (unregistering): Port device team_slave_1 removed [ 529.799170][T12327] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2195'. [ 529.828911][T12327] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 529.997518][T12329] syzkaller0: entered promiscuous mode [ 530.019994][T12329] syzkaller0: entered allmulticast mode [ 530.879838][T12334] syzkaller0: entered promiscuous mode [ 530.886418][T12334] syzkaller0: entered allmulticast mode [ 532.514122][T12361] syzkaller0: entered promiscuous mode [ 532.533232][T12361] syzkaller0: entered allmulticast mode [ 533.197222][T12376] syzkaller0: entered promiscuous mode [ 533.219614][T12376] syzkaller0: entered allmulticast mode [ 534.324878][T12384] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2215'. [ 534.336082][T12384] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 534.355142][T12385] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2215'. [ 534.365924][T12385] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 534.772471][T12402] FAULT_INJECTION: forcing a failure. [ 534.772471][T12402] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 534.800876][T12402] CPU: 0 PID: 12402 Comm: syz.3.2219 Not tainted syzkaller #0 [ 534.808525][T12402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 534.818654][T12402] Call Trace: [ 534.821998][T12402] [ 534.824982][T12402] dump_stack_lvl+0x18c/0x250 [ 534.829740][T12402] ? show_regs_print_info+0x20/0x20 [ 534.835015][T12402] ? load_image+0x420/0x420 [ 534.839581][T12402] ? __might_fault+0xaa/0x120 [ 534.844327][T12402] ? __lock_acquire+0x7d80/0x7d80 [ 534.849435][T12402] should_fail_ex+0x394/0x4c0 [ 534.854188][T12402] _copy_from_user+0x2f/0xe0 [ 534.858859][T12402] __sys_bpf+0x23e/0x890 [ 534.863179][T12402] ? bpf_link_show_fdinfo+0x560/0x560 [ 534.868628][T12402] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 534.874885][T12402] __x64_sys_bpf+0x7c/0x90 [ 534.879370][T12402] do_syscall_64+0x55/0xb0 [ 534.883853][T12402] ? clear_bhb_loop+0x40/0x90 [ 534.888604][T12402] ? clear_bhb_loop+0x40/0x90 [ 534.893352][T12402] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 534.899406][T12402] RIP: 0033:0x7f892fb9e159 [ 534.903876][T12402] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 534.923565][T12402] RSP: 002b:00007f8930ac0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 534.932255][T12402] RAX: ffffffffffffffda RBX: 00007f892fe25fa0 RCX: 00007f892fb9e159 [ 534.940337][T12402] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 534.948358][T12402] RBP: 00007f8930ac0090 R08: 0000000000000000 R09: 0000000000000000 [ 534.956473][T12402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 534.964489][T12402] R13: 00007f892fe26038 R14: 00007f892fe25fa0 R15: 00007ffd7b0c2428 [ 534.972523][T12402] [ 535.937117][T12421] syzkaller0: entered promiscuous mode [ 535.969890][T12421] syzkaller0: entered allmulticast mode [ 536.399210][T12427] syzkaller0: entered promiscuous mode [ 536.408050][T12427] syzkaller0: entered allmulticast mode [ 536.507633][T12429] sctp: [Deprecated]: syz.3.2229 (pid 12429) Use of int in maxseg socket option. [ 536.507633][T12429] Use struct sctp_assoc_value instead [ 537.153146][T12439] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.2232'. [ 537.164946][T12442] sit0: entered allmulticast mode [ 537.194373][T12440] netlink: 'syz.0.2232': attribute type 4 has an invalid length. [ 537.207730][T12440] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2232'. [ 537.655656][T12455] syzkaller0: entered promiscuous mode [ 537.661456][T12455] syzkaller0: entered allmulticast mode [ 537.789019][T12461] netlink: 'syz.3.2241': attribute type 10 has an invalid length. [ 537.802396][T12459] syzkaller0: entered promiscuous mode [ 537.819323][T12459] syzkaller0: entered allmulticast mode [ 538.131459][T12457] netlink: 'syz.2.2239': attribute type 4 has an invalid length. [ 538.180141][T12464] syzkaller0: entered promiscuous mode [ 538.207130][T12464] syzkaller0: entered allmulticast mode [ 539.703450][T12471] netlink: 'syz.2.2244': attribute type 29 has an invalid length. [ 539.730355][T12472] netlink: 'syz.2.2244': attribute type 29 has an invalid length. [ 540.208341][T12471] netlink: 'syz.2.2244': attribute type 29 has an invalid length. [ 540.303211][T12474] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2245'. [ 540.312951][T12474] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2245'. [ 540.323446][T12474] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2245'. [ 540.522985][T12484] netlink: 'syz.0.2247': attribute type 29 has an invalid length. [ 540.630190][T12487] netlink: 'syz.3.2250': attribute type 15 has an invalid length. [ 540.661418][T12487] netlink: 'syz.3.2250': attribute type 7 has an invalid length. [ 540.767219][T12495] syzkaller0: entered promiscuous mode [ 540.773018][T12495] syzkaller0: entered allmulticast mode [ 540.971644][T12500] syzkaller0: entered promiscuous mode [ 540.977522][T12500] syzkaller0: entered allmulticast mode [ 541.195195][T12506] syzkaller0: entered promiscuous mode [ 541.204231][T12506] syzkaller0: entered allmulticast mode [ 543.143824][T12521] syzkaller0: entered promiscuous mode [ 543.151429][T12521] syzkaller0: entered allmulticast mode [ 543.474134][T12533] netlink: 'syz.1.2270': attribute type 2 has an invalid length. [ 543.827663][T12540] netlink: 'syz.2.2280': attribute type 1 has an invalid length. [ 543.897234][T12540] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.2280'. [ 543.937771][T12540] netlink: 'syz.2.2280': attribute type 1 has an invalid length. [ 546.967507][T12548] netlink: 'syz.2.2275': attribute type 1 has an invalid length. [ 546.976263][T12548] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.2275'. [ 546.988953][T12548] netlink: 'syz.2.2275': attribute type 1 has an invalid length. [ 547.089906][T12547] syzkaller0: entered promiscuous mode [ 547.095602][T12547] syzkaller0: entered allmulticast mode [ 547.240853][T12558] netlink: 'syz.0.2277': attribute type 3 has an invalid length. [ 547.259170][T12558] netlink: 'syz.0.2277': attribute type 275 has an invalid length. [ 547.351971][T12565] FAULT_INJECTION: forcing a failure. [ 547.351971][T12565] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 547.379522][T12565] CPU: 1 PID: 12565 Comm: syz.1.2278 Not tainted syzkaller #0 [ 547.387086][T12565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 547.397284][T12565] Call Trace: [ 547.400628][T12565] [ 547.403601][T12565] dump_stack_lvl+0x18c/0x250 [ 547.408347][T12565] ? show_regs_print_info+0x20/0x20 [ 547.413623][T12565] ? load_image+0x420/0x420 [ 547.418385][T12565] ? __might_fault+0xaa/0x120 [ 547.423130][T12565] ? __lock_acquire+0x7d80/0x7d80 [ 547.428742][T12565] should_fail_ex+0x394/0x4c0 [ 547.433500][T12565] _copy_from_iter+0x1cd/0x1290 [ 547.438903][T12565] ? rcu_is_watching+0x15/0xb0 [ 547.443747][T12565] ? copyout_mc+0x70/0x70 [ 547.448146][T12565] ? __virt_addr_valid+0x10c/0x380 [ 547.453320][T12565] ? __virt_addr_valid+0x10c/0x380 [ 547.458533][T12565] ? __virt_addr_valid+0x10c/0x380 [ 547.463708][T12565] ? __check_object_size+0x4fc/0xa40 [ 547.469052][T12565] netlink_sendmsg+0x76b/0xbf0 [ 547.473922][T12565] ? netlink_getsockopt+0x590/0x590 [ 547.479285][T12565] ? apparmor_socket_sendmsg+0x8e/0x330 [ 547.484946][T12565] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 547.490496][T12565] ? security_socket_sendmsg+0x80/0xa0 [ 547.496050][T12565] ? netlink_getsockopt+0x590/0x590 [ 547.501322][T12565] ____sys_sendmsg+0x61b/0x980 [ 547.506176][T12565] ? __asan_memset+0x22/0x40 [ 547.510847][T12565] ? __sys_sendmsg_sock+0x30/0x30 [ 547.515946][T12565] ? __import_iovec+0x5f2/0x850 [ 547.520885][T12565] ? import_iovec+0x73/0xa0 [ 547.525488][T12565] ___sys_sendmsg+0x2a6/0x360 [ 547.530245][T12565] ? get_pid_task+0x20/0x1e0 [ 547.534915][T12565] ? __sys_sendmsg+0x2b0/0x2b0 [ 547.539778][T12565] ? __lock_acquire+0x7d80/0x7d80 [ 547.544904][T12565] __se_sys_sendmsg+0x1d0/0x2c0 [ 547.549834][T12565] ? __x64_sys_sendmsg+0x80/0x80 [ 547.554874][T12565] ? lockdep_hardirqs_on+0x98/0x150 [ 547.560153][T12565] do_syscall_64+0x55/0xb0 [ 547.564713][T12565] ? clear_bhb_loop+0x40/0x90 [ 547.569473][T12565] ? clear_bhb_loop+0x40/0x90 [ 547.574358][T12565] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 547.580325][T12565] RIP: 0033:0x7fd60359e159 [ 547.584817][T12565] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 547.604502][T12565] RSP: 002b:00007fd60449a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 547.612999][T12565] RAX: ffffffffffffffda RBX: 00007fd603826090 RCX: 00007fd60359e159 [ 547.621041][T12565] RDX: 0000000000004080 RSI: 0000200000000040 RDI: 0000000000000004 [ 547.629087][T12565] RBP: 00007fd60449a090 R08: 0000000000000000 R09: 0000000000000000 [ 547.637154][T12565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 547.645678][T12565] R13: 00007fd603826128 R14: 00007fd603826090 R15: 00007fff2b15ce18 [ 547.653738][T12565] [ 547.851879][T12567] syzkaller0: entered promiscuous mode [ 547.857478][T12567] syzkaller0: entered allmulticast mode [ 549.397318][T12587] syzkaller0: entered promiscuous mode [ 549.446092][T12587] syzkaller0: entered allmulticast mode [ 549.473443][T12593] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 549.481099][T12593] IPv6: NLM_F_CREATE should be set when creating new route [ 549.489189][T12593] IPv6: NLM_F_CREATE should be set when creating new route [ 549.497251][T12593] IPv6: NLM_F_CREATE should be set when creating new route [ 549.694816][T12593] netlink: 'syz.2.2291': attribute type 9 has an invalid length. [ 549.720780][T12593] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2291'. [ 549.780794][T12599] FAULT_INJECTION: forcing a failure. [ 549.780794][T12599] name failslab, interval 1, probability 0, space 0, times 0 [ 549.819575][T12599] CPU: 1 PID: 12599 Comm: syz.3.2292 Not tainted syzkaller #0 [ 549.827130][T12599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 549.837244][T12599] Call Trace: [ 549.840578][T12599] [ 549.843558][T12599] dump_stack_lvl+0x18c/0x250 [ 549.848341][T12599] ? show_regs_print_info+0x20/0x20 [ 549.853609][T12599] ? load_image+0x420/0x420 [ 549.858176][T12599] ? __might_sleep+0xe0/0xe0 [ 549.862825][T12599] ? __lock_acquire+0x7d80/0x7d80 [ 549.867917][T12599] should_fail_ex+0x394/0x4c0 [ 549.872660][T12599] should_failslab+0x9/0x20 [ 549.877220][T12599] slab_pre_alloc_hook+0x59/0x300 [ 549.882299][T12599] kmem_cache_alloc_node+0x5e/0x310 [ 549.887714][T12599] ? kmem_cache_free+0xf8/0x290 [ 549.892601][T12599] ? __alloc_skb+0x103/0x2c0 [ 549.897237][T12599] __alloc_skb+0x103/0x2c0 [ 549.901694][T12599] pfkey_sendmsg+0xdd0/0x11a0 [ 549.906498][T12599] ? pfkey_release+0x340/0x340 [ 549.911305][T12599] ? aa_sk_perm+0x83c/0x970 [ 549.915863][T12599] ? aa_sock_msg_perm+0x94/0x150 [ 549.920844][T12599] ? apparmor_socket_sendmsg+0x8e/0x330 [ 549.926427][T12599] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 549.931770][T12599] ? security_socket_sendmsg+0x80/0xa0 [ 549.937267][T12599] ? pfkey_release+0x340/0x340 [ 549.942074][T12599] ____sys_sendmsg+0x61b/0x980 [ 549.946882][T12599] ? __asan_memset+0x22/0x40 [ 549.951509][T12599] ? __sys_sendmsg_sock+0x30/0x30 [ 549.956576][T12599] ? __import_iovec+0x5f2/0x850 [ 549.961473][T12599] ? import_iovec+0x73/0xa0 [ 549.966021][T12599] ___sys_sendmsg+0x2a6/0x360 [ 549.970746][T12599] ? get_pid_task+0x20/0x1e0 [ 549.975468][T12599] ? __sys_sendmsg+0x2b0/0x2b0 [ 549.980282][T12599] ? __lock_acquire+0x7d80/0x7d80 [ 549.985356][T12599] __se_sys_sendmsg+0x1d0/0x2c0 [ 549.990255][T12599] ? __x64_sys_sendmsg+0x80/0x80 [ 549.995254][T12599] ? lockdep_hardirqs_on+0x98/0x150 [ 550.000494][T12599] do_syscall_64+0x55/0xb0 [ 550.004949][T12599] ? clear_bhb_loop+0x40/0x90 [ 550.009661][T12599] ? clear_bhb_loop+0x40/0x90 [ 550.014388][T12599] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 550.020326][T12599] RIP: 0033:0x7f892fb9e159 [ 550.024775][T12599] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 550.044586][T12599] RSP: 002b:00007f8930ac0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 550.053294][T12599] RAX: ffffffffffffffda RBX: 00007f892fe25fa0 RCX: 00007f892fb9e159 [ 550.061581][T12599] RDX: 0000000000000600 RSI: 0000200000003780 RDI: 0000000000000003 [ 550.069667][T12599] RBP: 00007f8930ac0090 R08: 0000000000000000 R09: 0000000000000000 [ 550.077663][T12599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 550.085661][T12599] R13: 00007f892fe26038 R14: 00007f892fe25fa0 R15: 00007ffd7b0c2428 [ 550.093674][T12599] [ 550.423031][T12604] netlink: 'syz.3.2294': attribute type 1 has an invalid length. [ 550.846415][T12615] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 550.856708][T12615] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 550.870345][T12615] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 550.892115][T12615] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 550.916439][T12615] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 550.924289][T12615] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 551.918930][T12631] syzkaller0: entered promiscuous mode [ 551.927870][T12631] syzkaller0: entered allmulticast mode [ 552.949664][T12615] Bluetooth: hci4: command tx timeout [ 553.140008][T12643] syzkaller0: entered promiscuous mode [ 553.145556][T12643] syzkaller0: entered allmulticast mode [ 553.237422][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.425366][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.534750][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.555912][T12612] chnl_net:caif_netlink_parms(): no params data found [ 553.946783][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.148695][T12612] bridge0: port 1(bridge_slave_0) entered blocking state [ 554.156354][T12612] bridge0: port 1(bridge_slave_0) entered disabled state [ 554.163826][T12612] bridge_slave_0: entered allmulticast mode [ 554.173450][T12612] bridge_slave_0: entered promiscuous mode [ 554.184017][T12612] bridge0: port 2(bridge_slave_1) entered blocking state [ 554.191802][T12612] bridge0: port 2(bridge_slave_1) entered disabled state [ 554.199152][T12612] bridge_slave_1: entered allmulticast mode [ 554.207093][T12612] bridge_slave_1: entered promiscuous mode [ 554.296531][T12681] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.2311'. [ 554.348019][T12612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 554.370424][T12681] netlink: 'syz.0.2311': attribute type 4 has an invalid length. [ 554.381132][T12681] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2311'. [ 554.421439][T12612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 554.520507][T12612] team0: Port device team_slave_0 added [ 554.596429][T12612] team0: Port device team_slave_1 added [ 554.631816][T12684] syzkaller0: entered promiscuous mode [ 554.645942][T12684] syzkaller0: entered allmulticast mode [ 554.726517][T12612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 554.736918][T12612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 554.764793][T12612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 554.777106][T12687] syzkaller0: entered promiscuous mode [ 554.785584][T12687] syzkaller0: entered allmulticast mode [ 554.807709][T12612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 554.836851][T12612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 554.947468][T12612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 555.029806][T12615] Bluetooth: hci4: command tx timeout [ 556.965136][T12612] hsr_slave_0: entered promiscuous mode [ 556.991005][T12612] hsr_slave_1: entered promiscuous mode [ 556.999687][T12612] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 557.011426][T12612] Cannot create hsr debugfs directory [ 557.065459][T12698] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2315'. [ 557.109922][T12615] Bluetooth: hci4: command tx timeout [ 557.410338][T12714] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.2316'. [ 557.422466][T12714] netlink: zone id is out of range [ 557.427822][T12714] netlink: zone id is out of range [ 557.444305][T12714] netlink: zone id is out of range [ 557.458102][T12714] netlink: zone id is out of range [ 557.473161][T12714] netlink: zone id is out of range [ 557.483228][T12714] netlink: zone id is out of range [ 557.497996][T12714] netlink: zone id is out of range [ 557.514507][T12714] netlink: zone id is out of range [ 557.524717][T12714] netlink: zone id is out of range [ 557.533676][T12714] netlink: zone id is out of range [ 557.557830][T12715] syzkaller0: entered promiscuous mode [ 557.565101][T12715] syzkaller0: entered allmulticast mode [ 559.064275][T12741] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2320'. [ 559.075270][T12741] tc_dump_action: action bad kind [ 559.189812][T12615] Bluetooth: hci4: command tx timeout [ 559.396055][T12752] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.2322'. [ 559.407706][T12746] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.2322'. [ 560.234912][T12751] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2323'. [ 560.603773][T12784] syzkaller0: entered promiscuous mode [ 560.609926][T12784] syzkaller0: entered allmulticast mode [ 560.736053][ T12] hsr_slave_0: left promiscuous mode [ 560.750497][ T12] hsr_slave_1: left promiscuous mode [ 561.325431][T12794] netlink: 'syz.0.2333': attribute type 27 has an invalid length. [ 561.339628][T12794] netlink: 'syz.0.2333': attribute type 3 has an invalid length. [ 561.347478][T12794] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2333'. [ 562.221573][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 562.239665][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 562.257760][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 562.265423][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 562.305037][ T12] veth1_macvtap: left allmulticast mode [ 562.311032][ T12] veth1_macvtap: left promiscuous mode [ 562.317192][ T12] veth0_macvtap: left promiscuous mode [ 562.324193][ T12] veth1_vlan: left promiscuous mode [ 562.330037][ T12] veth0_vlan: left promiscuous mode [ 563.020515][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 563.074576][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 563.278415][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.289272][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.413098][ T12] bond0 (unregistering): Released all slaves [ 563.456460][T12612] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 563.467794][T12612] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 563.477777][T12793] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2332'. [ 563.490641][T12795] netlink: 'syz.3.2332': attribute type 46 has an invalid length. [ 563.498539][T12795] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2332'. [ 563.569982][T12612] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 563.602640][T12612] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 563.639211][T12803] netlink: 'syz.0.2343': attribute type 12 has an invalid length. [ 563.648522][T12803] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2343'. [ 563.948038][T12802] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2336'. [ 563.978468][T12809] syzkaller0: entered promiscuous mode [ 564.012946][T12809] syzkaller0: entered allmulticast mode [ 564.057258][T12612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 565.350012][T12821] syzkaller0: entered promiscuous mode [ 565.355591][T12821] syzkaller0: entered allmulticast mode [ 567.383905][T12612] 8021q: adding VLAN 0 to HW filter on device team0 [ 567.448490][ T2970] bridge0: port 1(bridge_slave_0) entered blocking state [ 567.455772][ T2970] bridge0: port 1(bridge_slave_0) entered forwarding state [ 567.523874][ T2970] bridge0: port 2(bridge_slave_1) entered blocking state [ 567.531275][ T2970] bridge0: port 2(bridge_slave_1) entered forwarding state [ 567.637814][T12839] FAULT_INJECTION: forcing a failure. [ 567.637814][T12839] name failslab, interval 1, probability 0, space 0, times 0 [ 567.673348][T12839] CPU: 0 PID: 12839 Comm: syz.2.2341 Not tainted syzkaller #0 [ 567.680895][T12839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 567.690983][T12839] Call Trace: [ 567.694292][T12839] [ 567.697260][T12839] dump_stack_lvl+0x18c/0x250 [ 567.701990][T12839] ? show_regs_print_info+0x20/0x20 [ 567.707273][T12839] ? load_image+0x420/0x420 [ 567.711835][T12839] ? __might_sleep+0xe0/0xe0 [ 567.716481][T12839] ? __lock_acquire+0x7d80/0x7d80 [ 567.721549][T12839] should_fail_ex+0x394/0x4c0 [ 567.726287][T12839] should_failslab+0x9/0x20 [ 567.730856][T12839] slab_pre_alloc_hook+0x59/0x300 [ 567.735990][T12839] ? tomoyo_encode+0x2ad/0x570 [ 567.740804][T12839] ? tomoyo_encode+0x2ad/0x570 [ 567.745617][T12839] __kmem_cache_alloc_node+0x53/0x250 [ 567.751049][T12839] ? tomoyo_encode+0x2ad/0x570 [ 567.755846][T12839] __kmalloc+0xa7/0x240 [ 567.760082][T12839] tomoyo_encode+0x2ad/0x570 [ 567.764716][T12839] tomoyo_realpath_from_path+0x57c/0x5c0 [ 567.770390][T12839] ? tomoyo_domain+0xd6/0x120 [ 567.775110][T12839] tomoyo_path_number_perm+0x248/0x5e0 [ 567.780618][T12839] ? tomoyo_path_number_perm+0x217/0x5e0 [ 567.786286][T12839] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 567.791776][T12839] ? ksys_write+0x1d2/0x260 [ 567.796375][T12839] ? __fget_files+0x28/0x460 [ 567.801032][T12839] security_file_ioctl+0x70/0xa0 [ 567.806011][T12839] __se_sys_ioctl+0x48/0x170 [ 567.810644][T12839] do_syscall_64+0x55/0xb0 [ 567.815091][T12839] ? clear_bhb_loop+0x40/0x90 [ 567.819851][T12839] ? clear_bhb_loop+0x40/0x90 [ 567.824576][T12839] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 567.830510][T12839] RIP: 0033:0x7f743d19e159 [ 567.834960][T12839] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 567.854693][T12839] RSP: 002b:00007f743e156028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 567.863313][T12839] RAX: ffffffffffffffda RBX: 00007f743d425fa0 RCX: 00007f743d19e159 [ 567.871344][T12839] RDX: 0000000000000000 RSI: 00000000400454da RDI: 0000000000000003 [ 567.879364][T12839] RBP: 00007f743e156090 R08: 0000000000000000 R09: 0000000000000000 [ 567.887403][T12839] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 567.895402][T12839] R13: 00007f743d426038 R14: 00007f743d425fa0 R15: 00007ffdaf147f18 [ 567.903448][T12839] [ 567.999990][T12839] ERROR: Out of memory at tomoyo_realpath_from_path. [ 568.077360][T12848] netlink: 'syz.3.2346': attribute type 12 has an invalid length. [ 568.091952][T12848] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2346'. [ 568.296256][T12855] syzkaller0: entered promiscuous mode [ 568.303122][T12855] syzkaller0: entered allmulticast mode [ 568.367350][T12612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 568.571847][T12612] veth0_vlan: entered promiscuous mode [ 568.612931][T12612] veth1_vlan: entered promiscuous mode [ 568.728516][T12612] veth0_macvtap: entered promiscuous mode [ 568.757168][T12612] veth1_macvtap: entered promiscuous mode [ 568.821293][T12612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 568.846498][T12612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 568.859309][T12612] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 568.887092][T12612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 568.906437][T12612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 568.919359][T12612] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 568.956654][T12612] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.983438][T12612] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.002676][T12612] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.025472][T12612] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.428001][ T2974] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 570.459963][ T2974] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 570.517894][ T5081] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 570.539337][ T5081] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 570.604992][T12888] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2349'. [ 570.662692][T12887] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2355'. [ 570.735547][T12887] netlink: 'syz.0.2355': attribute type 46 has an invalid length. [ 570.753397][T12887] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2355'. [ 570.769008][T12888] pimreg0: tun_chr_ioctl cmd 35111 [ 570.781139][T12888] pimreg0: tun_chr_ioctl cmd 1074025681 [ 570.976777][T12897] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2348'. [ 571.052181][T12903] FAULT_INJECTION: forcing a failure. [ 571.052181][T12903] name failslab, interval 1, probability 0, space 0, times 0 [ 571.106570][T12903] CPU: 0 PID: 12903 Comm: syz.3.2351 Not tainted syzkaller #0 [ 571.114126][T12903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 571.124407][T12903] Call Trace: [ 571.127731][T12903] [ 571.130711][T12903] dump_stack_lvl+0x18c/0x250 [ 571.135455][T12903] ? show_regs_print_info+0x20/0x20 [ 571.140723][T12903] ? load_image+0x420/0x420 [ 571.145294][T12903] ? __might_sleep+0xe0/0xe0 [ 571.149950][T12903] ? __lock_acquire+0x7d80/0x7d80 [ 571.155034][T12903] should_fail_ex+0x394/0x4c0 [ 571.159821][T12903] should_failslab+0x9/0x20 [ 571.164389][T12903] slab_pre_alloc_hook+0x59/0x300 [ 571.169462][T12903] ? __lock_acquire+0x7d80/0x7d80 [ 571.174535][T12903] kmem_cache_alloc+0x5a/0x2c0 [ 571.179390][T12903] ? security_file_alloc+0x34/0x120 [ 571.184683][T12903] security_file_alloc+0x34/0x120 [ 571.189773][T12903] init_file+0x94/0x1f0 [ 571.193993][T12903] alloc_empty_file+0xb7/0x1d0 [ 571.198807][T12903] path_openat+0x120/0x3270 [ 571.203403][T12903] ? verify_lock_unused+0x140/0x140 [ 571.208676][T12903] ? do_filp_open+0x430/0x430 [ 571.213401][T12903] ? perf_trace_lock_acquire+0x105/0x400 [ 571.219112][T12903] ? trace_event_raw_event_lock_acquire+0x290/0x290 [ 571.225755][T12903] do_filp_open+0x1f2/0x430 [ 571.230309][T12903] ? vfs_tmpfile+0x620/0x620 [ 571.234968][T12903] ? _raw_spin_unlock+0x28/0x40 [ 571.239862][T12903] ? alloc_fd+0x590/0x640 [ 571.244245][T12903] do_sys_openat2+0x134/0x1d0 [ 571.248989][T12903] ? do_sys_open+0xe0/0xe0 [ 571.253468][T12903] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 571.259534][T12903] ? srcu_init_notifier_head+0x90/0x90 [ 571.265060][T12903] ? lock_chain_count+0x20/0x20 [ 571.269975][T12903] __x64_sys_openat+0x139/0x160 [ 571.274894][T12903] do_syscall_64+0x55/0xb0 [ 571.279367][T12903] ? clear_bhb_loop+0x40/0x90 [ 571.284128][T12903] ? clear_bhb_loop+0x40/0x90 [ 571.288870][T12903] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 571.294821][T12903] RIP: 0033:0x7f892fb5e98e [ 571.299293][T12903] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 571.318964][T12903] RSP: 002b:00007f8930abfec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 571.327434][T12903] RAX: ffffffffffffffda RBX: 00007f8930ac06c0 RCX: 00007f892fb5e98e [ 571.335465][T12903] RDX: 0000000000000002 RSI: 00007f8930abff90 RDI: ffffffffffffff9c [ 571.343509][T12903] RBP: 00007f8930ac0090 R08: 0000000000000000 R09: 0000000000000000 [ 571.352139][T12903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 571.360241][T12903] R13: 00007f892fe26038 R14: 00007f892fe25fa0 R15: 00007ffd7b0c2428 [ 571.368287][T12903] [ 571.694961][T12917] syzkaller0: entered promiscuous mode [ 571.703738][T12917] syzkaller0: entered allmulticast mode [ 571.876747][T12924] syzkaller0: entered promiscuous mode [ 571.910704][T12924] syzkaller0: entered allmulticast mode [ 571.980188][T12928] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2360'. [ 572.145666][T12928] pimreg0: tun_chr_ioctl cmd 35111 [ 572.178112][T12928] pimreg0: tun_chr_ioctl cmd 1074025681 [ 573.048656][T12959] FAULT_INJECTION: forcing a failure. [ 573.048656][T12959] name failslab, interval 1, probability 0, space 0, times 0 [ 573.068361][T12959] CPU: 0 PID: 12959 Comm: syz.3.2369 Not tainted syzkaller #0 [ 573.075902][T12959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 573.086015][T12959] Call Trace: [ 573.089382][T12959] [ 573.092367][T12959] dump_stack_lvl+0x18c/0x250 [ 573.097122][T12959] ? show_regs_print_info+0x20/0x20 [ 573.102393][T12959] ? load_image+0x420/0x420 [ 573.106970][T12959] ? __lock_acquire+0x7d80/0x7d80 [ 573.112063][T12959] should_fail_ex+0x394/0x4c0 [ 573.116820][T12959] should_failslab+0x9/0x20 [ 573.121419][T12959] slab_pre_alloc_hook+0x59/0x300 [ 573.126507][T12959] ? bpf_test_init+0x9f/0x140 [ 573.131222][T12959] ? bpf_test_init+0x9f/0x140 [ 573.135934][T12959] __kmem_cache_alloc_node+0x53/0x250 [ 573.141472][T12959] ? bpf_test_init+0x9f/0x140 [ 573.146191][T12959] __kmalloc+0xa7/0x240 [ 573.150384][T12959] bpf_test_init+0x9f/0x140 [ 573.154948][T12959] bpf_prog_test_run_xdp+0x4cd/0x1140 [ 573.160382][T12959] ? __lock_acquire+0x7d80/0x7d80 [ 573.165456][T12959] ? dev_put+0x80/0x80 [ 573.169580][T12959] ? dev_put+0x80/0x80 [ 573.173694][T12959] bpf_prog_test_run+0x31f/0x390 [ 573.178668][T12959] __sys_bpf+0x49d/0x890 [ 573.182976][T12959] ? bpf_link_show_fdinfo+0x560/0x560 [ 573.188381][T12959] ? lock_chain_count+0x20/0x20 [ 573.193288][T12959] __x64_sys_bpf+0x7c/0x90 [ 573.197731][T12959] do_syscall_64+0x55/0xb0 [ 573.202183][T12959] ? clear_bhb_loop+0x40/0x90 [ 573.206901][T12959] ? clear_bhb_loop+0x40/0x90 [ 573.211641][T12959] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 573.217569][T12959] RIP: 0033:0x7f892fb9e159 [ 573.222015][T12959] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 573.241649][T12959] RSP: 002b:00007f8930ac0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 573.250102][T12959] RAX: ffffffffffffffda RBX: 00007f892fe25fa0 RCX: 00007f892fb9e159 [ 573.258103][T12959] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 573.266119][T12959] RBP: 00007f8930ac0090 R08: 0000000000000000 R09: 0000000000000000 [ 573.274122][T12959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 573.282121][T12959] R13: 00007f892fe26038 R14: 00007f892fe25fa0 R15: 00007ffd7b0c2428 [ 573.290141][T12959] [ 573.778817][T12968] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2372'. [ 573.896774][T12968] pimreg0: tun_chr_ioctl cmd 35111 [ 573.923557][T12968] pimreg0: tun_chr_ioctl cmd 1074025681 [ 574.428155][ T5788] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 574.438807][ T5788] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 574.447554][ T5788] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 574.480534][ T5788] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 574.498089][ T5788] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 574.513292][ T5788] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 575.116044][T12987] syzkaller0: entered promiscuous mode [ 575.124240][T12987] syzkaller0: entered allmulticast mode [ 576.621652][ T5081] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.640008][T12615] Bluetooth: hci0: command tx timeout [ 576.794041][ T5081] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.836231][T12980] chnl_net:caif_netlink_parms(): no params data found [ 576.914413][ T5081] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.227937][ T5081] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.345548][T13021] syzkaller0: entered promiscuous mode [ 577.361235][T13021] syzkaller0: entered allmulticast mode [ 577.509250][T12980] bridge0: port 1(bridge_slave_0) entered blocking state [ 577.516877][T12980] bridge0: port 1(bridge_slave_0) entered disabled state [ 577.524686][T12980] bridge_slave_0: entered allmulticast mode [ 577.532692][T12980] bridge_slave_0: entered promiscuous mode [ 577.583541][T12980] bridge0: port 2(bridge_slave_1) entered blocking state [ 577.622163][T12980] bridge0: port 2(bridge_slave_1) entered disabled state [ 577.645736][T12980] bridge_slave_1: entered allmulticast mode [ 577.676838][T12980] bridge_slave_1: entered promiscuous mode [ 577.739078][T12980] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 577.753888][T12980] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 577.828776][T12980] team0: Port device team_slave_0 added [ 577.847962][T12980] team0: Port device team_slave_1 added [ 577.898641][T12980] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 577.906117][T12980] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 577.939643][T12980] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 578.264871][T12980] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 578.279120][T12980] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 578.312738][T12980] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 578.684747][T12980] hsr_slave_0: entered promiscuous mode [ 578.709730][T12615] Bluetooth: hci0: command tx timeout [ 578.737576][T12980] hsr_slave_1: entered promiscuous mode [ 579.256899][T13042] syzkaller0: entered promiscuous mode [ 579.283509][T13042] syzkaller0: entered allmulticast mode [ 579.475738][T13050] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2392'. [ 579.542279][T13038] syzkaller0: entered promiscuous mode [ 579.609680][T13038] syzkaller0: entered allmulticast mode [ 579.708210][T13050] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2392'. [ 579.821988][T13049] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2392'. [ 580.789613][T12615] Bluetooth: hci0: command tx timeout [ 582.872354][T12615] Bluetooth: hci0: command tx timeout [ 583.548127][T13077] netlink: 'syz.1.2396': attribute type 12 has an invalid length. [ 583.564780][T13077] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2396'. [ 585.922807][T13090] netlink: 'syz.0.2401': attribute type 10 has an invalid length. [ 586.215858][T13092] syzkaller0: entered promiscuous mode [ 586.235991][T13092] syzkaller0: entered allmulticast mode [ 586.279391][T12980] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 586.721499][T13096] syzkaller0: entered promiscuous mode [ 586.742274][T13096] syzkaller0: entered allmulticast mode [ 586.772932][T12980] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 589.469813][T12980] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 589.512375][T12980] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 589.590644][T13106] netlink: 'syz.0.2406': attribute type 64 has an invalid length. [ 589.625146][T13107] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2406'. [ 590.189793][T13123] netlink: 6 bytes leftover after parsing attributes in process `syz.0.2409'. [ 590.213641][T13123] net_ratelimit: 331 callbacks suppressed [ 590.213661][T13123] openvswitch: netlink: Flow actions attr not present in new flow. [ 590.280543][T13123] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2409'. [ 591.585098][T13121] netlink: 'syz.0.2409': attribute type 19 has an invalid length. [ 591.598283][T13121] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2409'. [ 591.846677][ T5081] veth1_macvtap: left promiscuous mode [ 591.861331][ T5081] veth0_macvtap: left promiscuous mode [ 591.888526][ T5081] veth1_vlan: left promiscuous mode [ 591.918026][ T5081] veth0_vlan: left promiscuous mode [ 592.441940][ T5081] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 593.370717][T13172] FAULT_INJECTION: forcing a failure. [ 593.370717][T13172] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 593.400023][T13172] CPU: 0 PID: 13172 Comm: syz.0.2417 Not tainted syzkaller #0 [ 593.407592][T13172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 593.417700][T13172] Call Trace: [ 593.421038][T13172] [ 593.424023][T13172] dump_stack_lvl+0x18c/0x250 [ 593.428781][T13172] ? show_regs_print_info+0x20/0x20 [ 593.434062][T13172] ? load_image+0x420/0x420 [ 593.438649][T13172] ? __might_fault+0xaa/0x120 [ 593.443413][T13172] ? __lock_acquire+0x7d80/0x7d80 [ 593.448632][T13172] should_fail_ex+0x394/0x4c0 [ 593.453434][T13172] _copy_from_iter+0x1cd/0x1290 [ 593.458395][T13172] ? rcu_is_watching+0x15/0xb0 [ 593.463252][T13172] ? copyout_mc+0x70/0x70 [ 593.467660][T13172] ? __virt_addr_valid+0x10c/0x380 [ 593.472842][T13172] ? __virt_addr_valid+0x10c/0x380 [ 593.478048][T13172] ? __virt_addr_valid+0x10c/0x380 [ 593.483254][T13172] ? __check_object_size+0x4fc/0xa40 [ 593.488714][T13172] netlink_sendmsg+0x76b/0xbf0 [ 593.493600][T13172] ? netlink_getsockopt+0x590/0x590 [ 593.498887][T13172] ? apparmor_socket_sendmsg+0x8e/0x330 [ 593.504515][T13172] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 593.509895][T13172] ? security_socket_sendmsg+0x80/0xa0 [ 593.515432][T13172] ? netlink_getsockopt+0x590/0x590 [ 593.520713][T13172] ____sys_sendmsg+0x61b/0x980 [ 593.525587][T13172] ? __asan_memset+0x22/0x40 [ 593.530279][T13172] ? __sys_sendmsg_sock+0x30/0x30 [ 593.535415][T13172] ? __import_iovec+0x5f2/0x850 [ 593.540368][T13172] ? import_iovec+0x73/0xa0 [ 593.544959][T13172] ___sys_sendmsg+0x2a6/0x360 [ 593.549707][T13172] ? get_pid_task+0x20/0x1e0 [ 593.554385][T13172] ? __sys_sendmsg+0x2b0/0x2b0 [ 593.559311][T13172] ? __lock_acquire+0x7d80/0x7d80 [ 593.564512][T13172] __se_sys_sendmsg+0x1d0/0x2c0 [ 593.569558][T13172] ? __x64_sys_sendmsg+0x80/0x80 [ 593.574663][T13172] ? lockdep_hardirqs_on+0x98/0x150 [ 593.579954][T13172] do_syscall_64+0x55/0xb0 [ 593.584436][T13172] ? clear_bhb_loop+0x40/0x90 [ 593.589174][T13172] ? clear_bhb_loop+0x40/0x90 [ 593.593929][T13172] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 593.599890][T13172] RIP: 0033:0x7f4bee39e159 [ 593.604394][T13172] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 593.624067][T13172] RSP: 002b:00007f4bef2b9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 593.632574][T13172] RAX: ffffffffffffffda RBX: 00007f4bee625fa0 RCX: 00007f4bee39e159 [ 593.640612][T13172] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 593.648736][T13172] RBP: 00007f4bef2b9090 R08: 0000000000000000 R09: 0000000000000000 [ 593.656784][T13172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 593.664809][T13172] R13: 00007f4bee626038 R14: 00007f4bee625fa0 R15: 00007ffedc1d7548 [ 593.672898][T13172] [ 595.293190][T13175] FAULT_INJECTION: forcing a failure. [ 595.293190][T13175] name fail_futex, interval 1, probability 0, space 0, times 1 [ 595.309943][T13175] CPU: 1 PID: 13175 Comm: syz.0.2418 Not tainted syzkaller #0 [ 595.317514][T13175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 595.327724][T13175] Call Trace: [ 595.331088][T13175] [ 595.334090][T13175] dump_stack_lvl+0x18c/0x250 [ 595.338871][T13175] ? show_regs_print_info+0x20/0x20 [ 595.344142][T13175] ? load_image+0x420/0x420 [ 595.348709][T13175] ? __lock_acquire+0x1336/0x7d80 [ 595.353805][T13175] ? trace_call_bpf+0xc3/0x6c0 [ 595.358661][T13175] should_fail_ex+0x394/0x4c0 [ 595.363412][T13175] get_futex_key+0x136/0x1030 [ 595.368148][T13175] ? perf_trace_run_bpf_submit+0x125/0x1c0 [ 595.374022][T13175] ? futex_setup_timer+0xc0/0xc0 [ 595.379038][T13175] futex_wake+0x127/0x4f0 [ 595.383440][T13175] ? futex_wake_mark+0x150/0x150 [ 595.388479][T13175] do_futex+0x35d/0x3e0 [ 595.392675][T13175] ? __might_fault+0xaa/0x120 [ 595.397427][T13175] ? __ia32_sys_get_robust_list+0x110/0x110 [ 595.403401][T13175] ? __might_fault+0xc6/0x120 [ 595.408126][T13175] mm_release+0x184/0x3a0 [ 595.412504][T13175] ? exit_mm_release+0x30/0x30 [ 595.417311][T13175] ? lockdep_hardirqs_on+0x98/0x150 [ 595.422592][T13175] exit_mm+0xa4/0x340 [ 595.426641][T13175] ? do_exit+0x2530/0x2530 [ 595.431136][T13175] do_exit+0x909/0x2530 [ 595.435392][T13175] ? put_task_struct+0xc0/0xc0 [ 595.440228][T13175] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 595.446256][T13175] ? get_signal+0x100e/0x1390 [ 595.451082][T13175] ? lock_chain_count+0x20/0x20 [ 595.455992][T13175] do_group_exit+0x22d/0x2f0 [ 595.460635][T13175] ? lockdep_hardirqs_on+0x98/0x150 [ 595.465895][T13175] get_signal+0x12a6/0x1390 [ 595.470496][T13175] arch_do_signal_or_restart+0xc2/0x7b0 [ 595.476124][T13175] ? get_sigframe_size+0x20/0x20 [ 595.481185][T13175] ? exit_to_user_mode_loop+0x3b/0x110 [ 595.486728][T13175] exit_to_user_mode_loop+0x70/0x110 [ 595.492077][T13175] exit_to_user_mode_prepare+0xee/0x180 [ 595.497685][T13175] syscall_exit_to_user_mode+0x1a/0x50 [ 595.503205][T13175] do_syscall_64+0x61/0xb0 [ 595.507669][T13175] ? clear_bhb_loop+0x40/0x90 [ 595.512411][T13175] ? clear_bhb_loop+0x40/0x90 [ 595.517151][T13175] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 595.523092][T13175] RIP: 0033:0x7f4bee39e159 [ 595.527554][T13175] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 595.547638][T13175] RSP: 002b:00007f4bef298028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 595.556118][T13175] RAX: fffffffffffffffc RBX: 00007f4bee626090 RCX: 00007f4bee39e159 [ 595.564132][T13175] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 000000000000000a [ 595.572162][T13175] RBP: 00007f4bef298090 R08: 0000000000000000 R09: 0000000000000000 [ 595.580187][T13175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 595.588193][T13175] R13: 00007f4bee626128 R14: 00007f4bee626090 R15: 00007ffedc1d7548 [ 595.596280][T13175] [ 596.243684][ T5081] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 596.297804][ T5081] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 596.707020][ T5081] bond0 (unregistering): Released all slaves [ 596.810845][T13161] netlink: 'syz.2.2416': attribute type 64 has an invalid length. [ 596.853542][T13165] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2416'. [ 597.046159][T12980] 8021q: adding VLAN 0 to HW filter on device bond0 [ 597.126996][T12980] 8021q: adding VLAN 0 to HW filter on device team0 [ 597.152336][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 597.159558][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 597.182032][T13181] netlink: 'syz.0.2419': attribute type 29 has an invalid length. [ 597.193544][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 597.200834][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 597.236294][T13181] netlink: 'syz.0.2419': attribute type 29 has an invalid length. [ 597.294621][T13182] netlink: 'syz.0.2419': attribute type 29 has an invalid length. [ 598.200580][T12980] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 598.338394][T12980] veth0_vlan: entered promiscuous mode [ 598.369994][T12980] veth1_vlan: entered promiscuous mode [ 598.426887][T12980] veth0_macvtap: entered promiscuous mode [ 598.462043][T12980] veth1_macvtap: entered promiscuous mode [ 598.518969][T12980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 598.534378][T12980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 598.554490][T12980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 598.565820][T12980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 598.582948][T12980] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 598.608839][T12980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 598.621288][T12980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 598.635314][T12980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 598.647338][T12980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 598.668087][T12980] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 598.693440][T12980] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.703681][T12980] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.717668][T12980] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.728317][T12980] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.424626][ T2970] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 599.436277][ T2970] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 599.495330][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 599.517283][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 599.738868][T13218] netlink: 'syz.0.2430': attribute type 19 has an invalid length. [ 599.767625][T13218] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2430'. [ 601.130794][ T5788] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 601.155113][ T5788] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 601.163311][ T5788] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 601.185458][ T5788] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 601.197449][ T5788] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 601.208724][ T5788] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 601.312064][ T33] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.353794][T13245] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2435'. [ 601.402258][T13245] bridge0: port 1(bridge_slave_0) entered disabled state [ 601.558924][T13245] bridge_slave_0 (unregistering): left allmulticast mode [ 601.566327][T13245] bridge_slave_0 (unregistering): left promiscuous mode [ 601.577163][T13245] bridge0: port 1(bridge_slave_0) entered disabled state [ 601.689121][ T33] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.852982][ T33] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.930823][ T33] bond0: (slave netdevsim0): Releasing backup interface [ 601.939288][ T33] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.319786][T13239] chnl_net:caif_netlink_parms(): no params data found [ 602.662151][T13239] bridge0: port 1(bridge_slave_0) entered blocking state [ 602.697665][T13239] bridge0: port 1(bridge_slave_0) entered disabled state [ 602.718965][T13239] bridge_slave_0: entered allmulticast mode [ 602.742339][T13239] bridge_slave_0: entered promiscuous mode [ 602.785884][T13239] bridge0: port 2(bridge_slave_1) entered blocking state [ 602.809219][T13239] bridge0: port 2(bridge_slave_1) entered disabled state [ 602.832265][T13239] bridge_slave_1: entered allmulticast mode [ 602.847479][T13239] bridge_slave_1: entered promiscuous mode [ 603.021771][T13239] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 603.071503][T13239] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 603.275822][T12615] Bluetooth: hci1: command tx timeout [ 603.490043][T13239] team0: Port device team_slave_0 added [ 603.682240][T13239] team0: Port device team_slave_1 added [ 604.958395][T13239] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 604.967490][T13239] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 604.994028][T13239] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 605.006879][T13309] syzkaller0: entered promiscuous mode [ 605.014236][T13309] syzkaller0: entered allmulticast mode [ 605.189124][T13239] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 605.196644][T13239] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 605.223820][T13239] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 605.349982][T12615] Bluetooth: hci1: command tx timeout [ 606.093070][T13381] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2459'. [ 606.137141][T13239] hsr_slave_0: entered promiscuous mode [ 606.167031][T13239] hsr_slave_1: entered promiscuous mode [ 606.182048][T13239] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 606.204670][T13239] Cannot create hsr debugfs directory [ 606.868363][T13414] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 607.430231][T12615] Bluetooth: hci1: command tx timeout [ 607.894556][T13423] syzkaller0: entered promiscuous mode [ 607.903863][T13423] syzkaller0: entered allmulticast mode [ 607.984667][T13436] FAULT_INJECTION: forcing a failure. [ 607.984667][T13436] name failslab, interval 1, probability 0, space 0, times 0 [ 608.016820][T13436] CPU: 0 PID: 13436 Comm: syz.1.2465 Not tainted syzkaller #0 [ 608.024388][T13436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 608.034585][T13436] Call Trace: [ 608.037911][T13436] [ 608.040890][T13436] dump_stack_lvl+0x18c/0x250 [ 608.045641][T13436] ? show_regs_print_info+0x20/0x20 [ 608.050914][T13436] ? load_image+0x420/0x420 [ 608.055487][T13436] ? __might_sleep+0xe0/0xe0 [ 608.060144][T13436] ? __lock_acquire+0x7d80/0x7d80 [ 608.065226][T13436] should_fail_ex+0x394/0x4c0 [ 608.069963][T13436] should_failslab+0x9/0x20 [ 608.074529][T13436] slab_pre_alloc_hook+0x59/0x300 [ 608.079619][T13436] ? kvmalloc_node+0x70/0x180 [ 608.084354][T13436] ? kvmalloc_node+0x70/0x180 [ 608.089081][T13436] __kmem_cache_alloc_node+0x53/0x250 [ 608.094534][T13436] ? dev_addr_init+0x17c/0x240 [ 608.099366][T13436] ? kvmalloc_node+0x70/0x180 [ 608.104106][T13436] __kmalloc_node+0xa6/0x240 [ 608.108767][T13436] kvmalloc_node+0x70/0x180 [ 608.113347][T13436] alloc_netdev_mqs+0x8ba/0x1040 [ 608.118353][T13436] ? mr_dump+0x6e0/0x6e0 [ 608.122650][T13436] __ip_tunnel_create+0x303/0x4d0 [ 608.127743][T13436] ? ip_tunnel_init_net+0x7c0/0x7c0 [ 608.133018][T13436] ? bpf_lsm_capable+0x9/0x10 [ 608.137739][T13436] ? security_capable+0x89/0xb0 [ 608.142656][T13436] ip_tunnel_ctl+0xc36/0x1910 [ 608.147402][T13436] ip_tunnel_siocdevprivate+0x138/0x1f0 [ 608.153012][T13436] ? dev_ioctl+0x83c/0x1140 [ 608.157570][T13436] ? ip_tunnel_update+0xae0/0xae0 [ 608.162771][T13436] ? dev_ifsioc+0x957/0xc40 [ 608.167346][T13436] dev_ioctl+0x84c/0x1140 [ 608.171734][T13436] sock_ioctl+0x74c/0x7e0 [ 608.176123][T13436] ? sock_poll+0x3e0/0x3e0 [ 608.180607][T13436] ? bpf_lsm_file_ioctl+0x9/0x10 [ 608.185593][T13436] ? security_file_ioctl+0x80/0xa0 [ 608.190766][T13436] ? sock_poll+0x3e0/0x3e0 [ 608.195252][T13436] __se_sys_ioctl+0xfd/0x170 [ 608.199941][T13436] do_syscall_64+0x55/0xb0 [ 608.204413][T13436] ? clear_bhb_loop+0x40/0x90 [ 608.209163][T13436] ? clear_bhb_loop+0x40/0x90 [ 608.213894][T13436] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 608.219847][T13436] RIP: 0033:0x7f437519e159 [ 608.224306][T13436] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 608.243985][T13436] RSP: 002b:00007f4375fd4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 608.252449][T13436] RAX: ffffffffffffffda RBX: 00007f4375425fa0 RCX: 00007f437519e159 [ 608.260471][T13436] RDX: 0000200000000080 RSI: 00000000000089f1 RDI: 0000000000000004 [ 608.268490][T13436] RBP: 00007f4375fd4090 R08: 0000000000000000 R09: 0000000000000000 [ 608.276518][T13436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 608.284531][T13436] R13: 00007f4375426038 R14: 00007f4375425fa0 R15: 00007ffd40193ef8 [ 608.292654][T13436] [ 609.432502][ T33] hsr0: left allmulticast mode [ 609.458702][ T33] hsr_slave_0: left allmulticast mode [ 609.484737][ T33] hsr_slave_1: left allmulticast mode [ 609.505163][ T33] hsr0: left promiscuous mode [ 609.510301][T12615] Bluetooth: hci1: command tx timeout [ 609.521424][ T33] nr0: port 1(hsr0) entered disabled state [ 612.413129][ T33] hsr_slave_0: left promiscuous mode [ 612.419359][ T33] hsr_slave_1: left promiscuous mode [ 612.426944][ T33] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 612.441193][ T33] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 612.467291][ T33] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 612.482220][ T33] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 612.506834][ T33] veth1_macvtap: left promiscuous mode [ 612.512571][ T33] veth0_macvtap: left promiscuous mode [ 612.518852][ T33] veth1_vlan: left promiscuous mode [ 612.524392][ T33] veth0_vlan: left promiscuous mode [ 612.742898][ T33] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 613.218346][ T33] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 613.261898][ T33] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 613.557375][ T33] bond0 (unregistering): Released all slaves [ 613.634519][T13446] syzkaller0: entered promiscuous mode [ 613.649682][T13446] syzkaller0: entered allmulticast mode [ 615.526535][T13239] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 615.623391][T13239] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 615.648163][T13471] syzkaller0: entered promiscuous mode [ 615.660677][T13471] syzkaller0: entered allmulticast mode [ 615.685071][T13239] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 615.731823][T13239] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 616.510230][T13239] 8021q: adding VLAN 0 to HW filter on device bond0 [ 616.596087][T13239] 8021q: adding VLAN 0 to HW filter on device team0 [ 616.624242][T13362] bridge0: port 1(bridge_slave_0) entered blocking state [ 616.631542][T13362] bridge0: port 1(bridge_slave_0) entered forwarding state [ 616.863548][ T2974] bridge0: port 2(bridge_slave_1) entered blocking state [ 616.870790][ T2974] bridge0: port 2(bridge_slave_1) entered forwarding state [ 617.945625][T13239] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 618.092696][T13239] veth0_vlan: entered promiscuous mode [ 618.128542][T13239] veth1_vlan: entered promiscuous mode [ 618.222859][T13239] veth0_macvtap: entered promiscuous mode [ 618.252930][T13239] veth1_macvtap: entered promiscuous mode [ 618.294491][T13239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 618.313137][T13239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 618.323616][T13239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 618.335520][T13239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 618.347422][T13239] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 618.366850][T13239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 618.377637][T13239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 618.388313][T13239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 618.401233][T13239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 618.425006][T13239] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 618.443022][T13239] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 618.452104][T13239] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 618.463157][T13239] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 618.473354][T13239] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 618.834039][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 618.876958][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 618.945902][T13526] syzkaller0: entered promiscuous mode [ 618.965629][T13526] syzkaller0: entered allmulticast mode [ 619.017812][T13531] netlink: 703 bytes leftover after parsing attributes in process `syz.1.2489'. [ 622.929336][ T2987] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 622.937299][ T2987] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 623.187071][T13576] syzkaller0: entered promiscuous mode [ 623.229513][T13576] syzkaller0: entered allmulticast mode [ 623.279138][T13574] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2495'. [ 624.207416][ T5788] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 624.265242][ T5788] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 624.286593][ T5788] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 624.295783][ T5788] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 624.305170][ T5788] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 624.313465][ T5788] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 624.725150][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.734083][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.147851][T13598] netlink: 'syz.1.2501': attribute type 7 has an invalid length. [ 625.440845][T13605] syzkaller0: entered promiscuous mode [ 625.446620][T13605] syzkaller0: entered allmulticast mode [ 625.779942][T13590] chnl_net:caif_netlink_parms(): no params data found [ 626.048587][T13590] bridge0: port 1(bridge_slave_0) entered blocking state [ 626.057804][T13590] bridge0: port 1(bridge_slave_0) entered disabled state [ 626.071204][T13590] bridge_slave_0: entered allmulticast mode [ 626.096086][T13590] bridge_slave_0: entered promiscuous mode [ 626.141491][T13590] bridge0: port 2(bridge_slave_1) entered blocking state [ 626.178132][T13590] bridge0: port 2(bridge_slave_1) entered disabled state [ 626.186609][T13590] bridge_slave_1: entered allmulticast mode [ 626.194674][T13590] bridge_slave_1: entered promiscuous mode [ 626.243942][T13590] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 626.267523][T13590] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 626.311396][T13590] team0: Port device team_slave_0 added [ 626.323436][T13590] team0: Port device team_slave_1 added [ 626.364464][T13590] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 626.380515][T13590] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 626.410123][ T5788] Bluetooth: hci2: command tx timeout [ 626.451285][T13590] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 626.507401][ T2974] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.483050][ T5788] Bluetooth: hci2: command tx timeout [ 629.668485][T13590] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 629.676813][T13590] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 629.704061][T13590] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 629.722157][T13617] syzkaller0: entered promiscuous mode [ 629.727771][T13617] syzkaller0: entered allmulticast mode [ 629.761034][ T2974] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.023886][ T2974] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.073840][T13590] hsr_slave_0: entered promiscuous mode [ 630.109955][T13590] hsr_slave_1: entered promiscuous mode [ 630.157334][T13590] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 630.170449][T13590] Cannot create hsr debugfs directory [ 630.199029][ T2974] bond0: (slave netdevsim0): Releasing backup interface [ 630.221362][ T2974] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.349819][T13630] syzkaller0: entered promiscuous mode [ 630.362999][T13630] syzkaller0: entered allmulticast mode [ 630.549768][ T5788] Bluetooth: hci2: command tx timeout [ 632.639696][ T5788] Bluetooth: hci2: command tx timeout [ 633.516707][T13638] syzkaller0: entered promiscuous mode [ 633.547610][T13638] syzkaller0: entered allmulticast mode [ 635.055908][T13655] netlink: 'syz.3.2517': attribute type 9 has an invalid length. [ 635.082723][T13655] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2517'. [ 637.751330][T13663] delete_channel: no stack [ 637.780022][T13663] delete_channel: no stack [ 638.200157][T13671] syzkaller0: entered promiscuous mode [ 638.207127][T13671] syzkaller0: entered allmulticast mode [ 640.113593][T13590] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 640.219242][T13590] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 640.245549][T13590] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 640.382409][T13709] syzkaller0: entered promiscuous mode [ 640.396392][T13709] syzkaller0: entered allmulticast mode [ 640.452350][T13590] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 655.701620][T12615] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 655.713140][T12615] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 655.720946][T12615] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 655.729057][T12615] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 655.739630][T12615] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 655.747012][T12615] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 657.175739][T12615] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 657.185467][T12615] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 657.201324][T12615] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 657.209526][T12615] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 657.218392][T12615] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 657.225899][T12615] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 657.317023][ T5788] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 657.326439][ T5788] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 657.339802][ T5788] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 657.347966][ T5788] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 657.368135][ T5788] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 657.384399][ T5788] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 657.829608][T12615] Bluetooth: hci3: command tx timeout [ 659.275216][T12615] Bluetooth: hci5: command tx timeout [ 659.435900][T12615] Bluetooth: hci6: command tx timeout [ 659.920411][ T5788] Bluetooth: hci3: command tx timeout [ 661.360014][T12615] Bluetooth: hci5: command tx timeout [ 661.509637][T12615] Bluetooth: hci6: command tx timeout [ 661.989599][T12615] Bluetooth: hci3: command tx timeout [ 663.430059][T12615] Bluetooth: hci5: command tx timeout [ 663.590080][T12615] Bluetooth: hci6: command tx timeout [ 664.069472][T12615] Bluetooth: hci3: command tx timeout [ 665.520070][T12615] Bluetooth: hci5: command tx timeout [ 665.671149][T12615] Bluetooth: hci6: command tx timeout [ 678.000019][T12615] Bluetooth: hci4: command 0x0406 tx timeout [ 684.342821][T13754] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 684.351915][T13754] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 684.359849][T13754] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 684.370743][T13754] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 684.378935][T13754] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 684.387187][T13754] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 686.169313][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.175851][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 698.472503][T13757] Bluetooth: hci0: command 0x0406 tx timeout [ 716.470141][T13766] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 716.479040][T13766] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 716.494861][T13766] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 716.504451][T13766] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 716.521742][T13766] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 716.529100][T13766] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 718.061431][ T5786] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 718.071790][ T5786] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 718.080466][ T5786] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 718.088608][ T5786] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 718.096867][ T5786] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 718.104987][ T5786] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 718.114907][ T5786] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 718.122611][ T5786] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 718.132645][T13766] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 718.201925][ T5786] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 718.211135][ T5786] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 718.219590][ T5786] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 737.356449][T13776] Bluetooth: hci1: command 0x0406 tx timeout [ 745.316133][T13780] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 745.329618][T13780] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 745.338180][T13780] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 745.348981][T13780] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 745.363614][T13780] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 745.371227][T13780] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 746.019372][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 746.026372][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P7648/1:b..l [ 746.034706][ C1] rcu: (detected by 1, t=10503 jiffies, g=62249, q=2350 ncpus=2) [ 746.042549][ C1] task:kworker/0:7 state:R running task stack:25416 pid:7648 ppid:2 flags:0x00004000 [ 746.054208][ C1] Workqueue: events_power_efficient gc_worker [ 746.060334][ C1] Call Trace: [ 746.063643][ C1] [ 746.066616][ C1] __schedule+0x15ae/0x4660 [ 746.071210][ C1] ? asan.module_dtor+0x20/0x20 [ 746.076102][ C1] ? mark_lock+0x94/0x320 [ 746.080486][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 746.086558][ C1] ? preempt_schedule_irq+0xb4/0x150 [ 746.091916][ C1] preempt_schedule_irq+0xbf/0x150 [ 746.097094][ C1] ? preempt_schedule_notrace+0x110/0x110 [ 746.102878][ C1] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 746.108749][ C1] irqentry_exit+0x67/0x70 [ 746.113210][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 746.119235][ C1] RIP: 0010:seqcount_lockdep_reader_access+0x19a/0x1d0 [ 746.126122][ C1] Code: f8 4d 85 e4 75 16 e8 85 e8 bf f8 eb 15 e8 7e e8 bf f8 e8 09 a8 c9 01 4d 85 e4 74 ea e8 6f e8 bf f8 fb 48 c7 04 24 0e 36 e0 45 <4b> c7 04 3e 00 00 00 00 43 c7 44 3e 08 00 00 00 00 65 48 8b 04 25 [ 746.145790][ C1] RSP: 0018:ffffc9000cd279a0 EFLAGS: 00000293 [ 746.151896][ C1] RAX: ffffffff88c7a2e1 RBX: 0000000000000000 RCX: ffff88802b305a00 [ 746.159904][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 746.167910][ C1] RBP: ffffc9000cd27a50 R08: ffffffff911eb597 R09: 1ffffffff223d6b2 [ 746.175928][ C1] R10: dffffc0000000000 R11: fffffbfff223d6b3 R12: 0000000000000200 [ 746.183971][ C1] R13: dffffc0000000000 R14: 1ffff920019a4f34 R15: dffffc0000000000 [ 746.191981][ C1] ? seqcount_lockdep_reader_access+0x191/0x1d0 [ 746.198275][ C1] ? nf_conntrack_hash_check_insert+0x6f0/0x6f0 [ 746.204567][ C1] gc_worker+0x314/0x14a0 [ 746.208959][ C1] ? gc_worker+0x266/0x14a0 [ 746.213513][ C1] ? init_conntrack+0xe20/0xe20 [ 746.218426][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 746.223662][ C1] ? process_scheduled_works+0x975/0x1600 [ 746.229427][ C1] ? process_scheduled_works+0x975/0x1600 [ 746.235191][ C1] process_scheduled_works+0xa60/0x1600 [ 746.240797][ C1] ? worker_attach_to_pool+0x370/0x370 [ 746.246310][ C1] ? assign_work+0x3cc/0x5d0 [ 746.250942][ C1] worker_thread+0xa5e/0xfe0 [ 746.255586][ C1] kthread+0x2fa/0x390 [ 746.259685][ C1] ? pr_cont_work+0x550/0x550 [ 746.264392][ C1] ? kthread_blkcg+0xd0/0xd0 [ 746.269050][ C1] ret_from_fork+0x48/0x80 [ 746.273514][ C1] ? kthread_blkcg+0xd0/0xd0 [ 746.278160][ C1] ret_from_fork_asm+0x11/0x20 [ 746.282988][ C1] [ 747.605062][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.616079][ T1291] ieee802154 phy1 wpan1: encryption failed: -22