last executing test programs: 3m31.675487024s ago: executing program 3 (id=1302): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a806f8c6394f91424fc60040f030047000000053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r3 = socket$kcm(0x15, 0x5, 0x0) recvmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffd}, 0x100) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000011c0)={&(0x7f0000001000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xb, [@enum64={0x9, 0x2, 0x0, 0x13, 0x1, 0x1, [{0x9, 0xc, 0xe}, {0x3, 0xa3e2, 0x4}]}]}, {0x0, [0x71, 0x30, 0x5f, 0x2e, 0x2e, 0x30, 0x61, 0x5f, 0x61]}}, &(0x7f00000010c0)=""/250, 0x47, 0xfa, 0x1, 0x6}, 0x1f) 3m30.335174031s ago: executing program 3 (id=1308): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0xb, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x40}, [@map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xc}, @tail_call, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}]}, &(0x7f0000000180)='syzkaller\x00', 0x3, 0xe4, &(0x7f0000000200)=""/228, 0x41100, 0xe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x4, 0xe, 0x4, 0xe13}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000380)=[0xffffffffffffffff], &(0x7f00000003c0)=[{0x3, 0x1, 0xb, 0xa}, {0x1, 0x1, 0x1, 0xa}, {0x1, 0x1, 0x5, 0x5}], 0x10, 0x30000}, 0x94) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000004c0), 0x4) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000006c0)="1400000030000b07005a806f8c6394f90424fc60", 0x14}], 0x1}, 0x0) (async) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000005c0)=@bpf_lsm={0x1d, 0x10, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000002000000000000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000014000000b7030100000000008500000083000000bf09000000000000550900000000006217f8ff10000000bf9100000000000084000000b700000000000000950000000000000000c9bb4b9b0d21f01c4e2ca5fcf86482168e4525ca81ead248fc6d14bd"], &(0x7f00000003c0)='GPL\x00', 0x5, 0xa7, &(0x7f0000000400)=""/167, 0x41100, 0x20, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000500)={0x5, 0xc, 0x8}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000540)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000580)=[{0x1, 0x4, 0x8, 0x2}, {0x2, 0x5, 0x3, 0xf}, {0x1, 0x1, 0xc, 0x4}, {0x4, 0x3, 0x5, 0xc}], 0x10, 0x4}, 0x94) (async) r4 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000900)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000007c0)={@cgroup=r4, 0x1f, 0x0, 0x1, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000700)=[0x0, 0x0, 0x0], &(0x7f0000000740)=[0x0], &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r6, 0x4) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000800)={@fallback=r2, r3, 0x10, 0x203c, 0x0, @void, @void, @value=r6, @void, r5}, 0x20) (async) r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000580)=@o_path={&(0x7f0000000540)='./file0\x00', 0x0, 0x10}, 0x18) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000005c0)={0x33af, 0x0}, 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000500)={@map=r7, r0, 0x15, 0x2029, r1, @void, @void, @value=r8, @void, r5}, 0x20) (async) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(r9, &(0x7f00000000c0), 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffff4}, 0x104101, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b904021d080304000000e8fe03a1180015000600142603600e1208000f0000810401a80016040a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x8008) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfe33) 3m30.022222207s ago: executing program 3 (id=1310): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r1 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r1, 0x1, 0x7, &(0x7f0000000040), 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x24000059) close(0x3) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=ANY=[@ANYBLOB="12000000030000000400000002"], 0x50) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001, 0x10001, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x4, 0x10000, 0x1, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x295}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x9) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)) ioctl$SIOCSIFHWADDR(r4, 0x8b1b, &(0x7f0000000000)={'wlan1\x00'}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r3, &(0x7f0000000000), 0x0}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000e00)={&(0x7f0000000e40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xb, [@enum64={0x9, 0x1, 0x0, 0x13, 0x1, 0x1, [{0x6, 0x0, 0x8}]}]}, {0x0, [0x5f, 0x30, 0x5f, 0x30, 0x30, 0x2e, 0x30, 0x10, 0x2e]}}, 0x0, 0x3b, 0x0, 0x1, 0x6}, 0x28) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f00000003c0)='%ps \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r5}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000feffffff0000000000000000b7080000000000007b8af8ff00000000b7080000010000807b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b770000008000f0000000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00') r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000006000000d277e325556dbcb9cb72bac341058046003a4780ae2de8e1d06b398df4c93c14114b6b25716692a92ba90d3b1abcf800"/83], 0x48) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b00)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="18c600000000000000000018110400", @ANYRES32=r8, @ANYBLOB="0000000000000000b70200001c000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b702000004000000632af8ff00000000b509000000000000c3aaf8fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffc40200000800000018220000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3m29.511849356s ago: executing program 3 (id=1312): syz_open_procfs$namespace(0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000400), 0x620401, 0x0) socketpair(0x26, 0x1, 0x9, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8941, 0x0) recvmsg$kcm(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000580)=""/111, 0x6f}, {&(0x7f0000000600)=""/108, 0x6c}, {&(0x7f0000000680)=""/66, 0x42}], 0x3, &(0x7f0000000840)=""/218, 0xda}, 0x40002140) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xb, &(0x7f00000009c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='percpu_alloc_percpu\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x2, 0x2, 0x4}, 0x50) r3 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r3, 0x29, 0x24, &(0x7f00000000c0), 0x19) sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f00000009c0)=@l2tp6={0xa, 0x0, 0x28e, @mcast1, 0x9}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000140)="f4000900062b2c25fe80000000000000dc8b850f238466ccfe8000000000e82ff6ed88672eb00944", 0xdc0}, {0x0}], 0x2}, 0x20000884) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000570600000fff07006706000002000000270600000ee60000bf2500000000000073350000000000006507000002001000070700004c0000001f75000000000000bf54000000000000070400004400f9f0ad32010000000000950000000000000005000000000000009500000000000000debfa255e44e4cc39f211fb04d7f202e6a53bd86bde99b679b4e6d24b8125690361eec3b181dcfd7c2fb2d1f8975b579a085bee32d414c1f3ab987a9de6385ae8021f4ca33b9b35fe817e98beb9cefe7f40fd6f0ea3affbdaaa897c70fb01d270a7b00d36fb5ab8fa92ac014a106e3e4decc68652503ca54fcef437d96c8a05d59ddcc8abf09cd77e93e940207b03189c5d4661e43df6f1f036c8d85a2ad7615a021f8cbe507ef94fb9f33315366e9ae080000001b532226b63b460d68808a67529637bf7f6731ad0cf1718bae3c8b9d2f89050cb496fe791381af6fab290900000000000000d640a5fde1f7d5eaa97cd25523fbd77300000000000000d67559b0c848aa3e7091f33e2dfc351e903ce85488fb25691249545bcf877011847df184bae6d3f5d0c016ec7d581d5b2fcb494d8c2df1929398ec5c3675ed16c27fff46a695eed7f50c531a612d5677b5e949ee4f16d10e41074702c4e89ee401ec2ec65f38f64189f1fa2cc0a42add3119025764759de2f093c26fe51d2f7635bb06bdf0b97d4a96cb0813e084232421c6026629fbf4c81954d11e154659b54fcf3468577295c700000000000000000000000000000000fe31e1e02dd54ac3c7af2b3d76a63b79ca6f9a20b26761254aee1352ad08118a58802cc8f107852b8f5382f0871255ce5c0b31e39637850330f520d03ed2aa076efa8401613537585d45bd27454beccdc32645cfe67921df3f2bbf88cacc83f82e916f0ee19ad20cdf5ce3b2ee147f78c1caf8b8024bac9809015b2210d7c2471dfd73f6eb"], &(0x7f0000000100)='GPL\x00'}, 0x48) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000980)={'veth1_to_hsr\x00', @local}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x29, &(0x7f0000000000), 0x4) sendmsg$kcm(r6, &(0x7f00000002c0)={&(0x7f0000000100)=@in6={0xa, 0x4e23, 0x0, @loopback={0xffffff7f00000000}}, 0x80, 0x0}, 0x0) sendmsg$inet(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600), 0x3e}, 0x100) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x4}, 0x6d) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x8, 0x8, 0x6, 0x4, 0x1}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r7}, &(0x7f0000000180), &(0x7f00000001c0)='%pK \x00'}, 0x20) socketpair(0x1, 0x1, 0x0, 0x0) 3m29.072685225s ago: executing program 3 (id=1317): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = socket$kcm(0x2, 0x5, 0x84) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x0, 0xe62}, 0x0, 0xc8, 0x0, 0x6, 0x0, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x69}, 0x0, 0x10, 0xffffffffffffffff, 0x3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000fffe80000000000000101000007f0c08000000000000000071273fa7b49301641184a907c5"], 0xfdef) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000), 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0x22, 0x0, &(0x7f0000000140)="3d6ee2e04b91ab10143d9abe86dd", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r6 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000000c0), 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000180)=r6, 0x4) setsockopt$sock_attach_bpf(r1, 0x84, 0x19, &(0x7f0000000000), 0x8) socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) (async) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) (async) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) (async) socket$kcm(0x2, 0x5, 0x84) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x0, 0xe62}, 0x0, 0xc8, 0x0, 0x6, 0x0, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x69}, 0x0, 0x10, 0xffffffffffffffff, 0x3) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) close(r4) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000fffe80000000000000101000007f0c08000000000000000071273fa7b49301641184a907c5"], 0xfdef) (async) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) (async) write$cgroup_subtree(r5, &(0x7f0000000000), 0xfdef) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0x22, 0x0, &(0x7f0000000140)="3d6ee2e04b91ab10143d9abe86dd", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000000c0), 0x4) (async) bpf$LINK_DETACH(0x22, &(0x7f0000000180)=r6, 0x4) (async) setsockopt$sock_attach_bpf(r1, 0x84, 0x19, &(0x7f0000000000), 0x8) (async) 3m28.594349614s ago: executing program 3 (id=1320): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000100), 0x1001) ioctl$SIOCSIFHWADDR(r0, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc, 0x8}}) write$cgroup_pid(r0, &(0x7f00000000c0), 0x12) bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r0}, 0x8) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa35f086dd"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48) 3m28.008579326s ago: executing program 32 (id=1320): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000100), 0x1001) ioctl$SIOCSIFHWADDR(r0, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc, 0x8}}) write$cgroup_pid(r0, &(0x7f00000000c0), 0x12) bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r0}, 0x8) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa35f086dd"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48) 6.785407998s ago: executing program 1 (id=2417): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@cgroup, 0x4, 0x1, 0x10001, &(0x7f0000000400)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000440), 0x0, 0x0}, 0x40) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000040)) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x3, '\x00', 0x0, r0, 0x4, 0x5, 0x10000000}, 0x50) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000640)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x15, 0x8, 0x3ff}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e00)={0x6, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r2}, 0xc) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8910, &(0x7f0000000040)={'wlan1\x00', @multicast}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000006000)=[{&(0x7f0000005f80)="1f", 0x1}], 0x1}, 0x4) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x300080c1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000900)="5490", 0x2}], 0x1}, 0x4048841) recvmsg(r5, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) recvmsg(r5, &(0x7f0000000000)={0x0, 0x46, &(0x7f0000000440)=[{&(0x7f0000000080)=""/45, 0x23}], 0x1, 0x0, 0xffffffffffffff28}, 0x40008140) setsockopt$sock_attach_bpf(r4, 0x1, 0x9, &(0x7f0000000800), 0x4) 5.821219157s ago: executing program 1 (id=2426): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0)={0x9, 0x0}, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0xa, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x1f4, 0xfffffd64, 0x0, &(0x7f0000000240)="ff412f66b083dcc1010b3efc8864", 0x0, 0x5, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x46}, 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x5, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4}, &(0x7f0000000040), &(0x7f0000000140)=r3}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r4, &(0x7f0000000040)}, 0x20) 5.403819555s ago: executing program 1 (id=2434): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x8, 0x650b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={&(0x7f0000000140), 0x2}, 0x2402, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x80) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00', 0x10}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f2, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r1, 0x0, 0x40000000) sendmsg$inet(r1, 0x0, 0x20000000) recvmsg$kcm(r1, &(0x7f0000000e80)={0x0, 0x0, 0x0}, 0x40000002) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)='.', 0x1}], 0x1}, 0x300) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="005500000000000000000000000000000000bc73", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/21], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 4.993415003s ago: executing program 0 (id=2430): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001900599c6d0e00009bd028ef8020ab0700040005"], 0xfe33) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f00000000c0)={r1}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x766073b3f9440989, 0x30000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x6, 0x40, 0x40, 0x41}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000a40), &(0x7f00000008c0), 0x1003, r3}, 0x38) socketpair(0xb, 0x2, 0x99e1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x4c800100, 0x0, 0x0, 0x0, 0x0, 0x0) 4.429793054s ago: executing program 1 (id=2436): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0)={0x9, 0x0}, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0xa, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0x12, &(0x7f00000008c0)=r5, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x16, 0x6, 0x4, 0x4, 0x80, 0x1, 0x4, '\x00', 0x0, r5, 0x0, 0x3, 0x5}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0}, 0x28) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000300000000000000000000030000000003000000020000000000000000000000000000010500000010000000010000000000000800000000005f"], 0x0, 0x4f}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x1f4, 0xfffffd64, 0x0, &(0x7f0000000240)="ff412f66b083dcc1010b3efc8864", 0x0, 0x5, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x46}, 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x5, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r7}, &(0x7f0000000040), &(0x7f0000000140)=r6}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r7, &(0x7f0000000040)}, 0x20) 3.682093218s ago: executing program 0 (id=2446): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, 0x0, &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000040)) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x3, '\x00', 0x0, r0, 0x4, 0x5, 0x10000000}, 0x50) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000640)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x15, 0x8, 0x3ff}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e00)={0x6, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r2}, 0xc) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8910, &(0x7f0000000040)={'wlan1\x00', @multicast}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000006000)=[{&(0x7f0000005f80)="1f", 0x1}], 0x1}, 0x4) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x300080c1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000900)="5490", 0x2}], 0x1}, 0x4048841) recvmsg(r5, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) recvmsg(r5, &(0x7f0000000000)={0x0, 0x46, &(0x7f0000000440)=[{&(0x7f0000000080)=""/45, 0x23}], 0x1, 0x0, 0xffffffffffffff28}, 0x40008140) setsockopt$sock_attach_bpf(r4, 0x1, 0x9, &(0x7f0000000800), 0x4) 2.886670574s ago: executing program 1 (id=2440): perf_event_open(&(0x7f0000000480)={0x1, 0x38, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5d31, 0x48010, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000001340)={0x2, 0x2, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @loopback, @local}}}], 0x20}, 0x8000) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) socket$kcm(0x2, 0x5, 0x84) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r3 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xe, &(0x7f0000000000), 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1c, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x13, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x11, 0x4, 0x4, 0x80000001, 0x10, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r4, 0x27, 0xe, 0x0, &(0x7f0000000180)="553d87000000120b334eecd80f06", 0x0, 0x8, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2.789448505s ago: executing program 2 (id=2441): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1e0000007b0000000d05", @ANYRES32=0x1, @ANYBLOB="08000000000000000000000000fcff"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/12, @ANYRES32, @ANYBLOB="0d00ff0000000000830000000000000045"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x18, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) 2.713524017s ago: executing program 0 (id=2442): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c) 2.593867289s ago: executing program 2 (id=2443): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400000000000}, 0x0, 0x0, 0x0, 0x0, 0xf60}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="020000000100"}) 2.53755598s ago: executing program 0 (id=2444): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x8, 0x650b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={&(0x7f0000000140), 0x2}, 0x2402, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x80) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00', 0x10}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f2, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r1, 0x0, 0x40000000) sendmsg$inet(r1, 0x0, 0x20000000) recvmsg$kcm(r1, &(0x7f0000000e80)={0x0, 0x0, 0x0}, 0x40000002) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)='.', 0x1}], 0x1}, 0x300) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="005500000000000000000000000000000000bc73", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/21], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2.53728986s ago: executing program 1 (id=2445): bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x8, 0x650b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={&(0x7f0000000140), 0x2}, 0x2402, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xfe33) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x80) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00', 0x10}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f2, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f00000016c0)}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000000) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="b7020000b96871dfbfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe0000004f850000001a000000b7000000000000009500000000000000455781a5feee5e1ce784909b849d5550adf200000000000000b61d69f2ffdaa10350e11cb97c8ad51bcda0c4ee6d9674c77404ceb9971e43405d62de53a9a53608c10556e5734eb84049761451ce2e2d9f8004e26f7fcc059c06220002595f6dba87b81d1106fb026cce67a66afd9ac3d09e29a9d542ca9d85a5c9c88474895c679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd6fee53f5b2e7b91c61ced1ebad000000000000e8122a793c080a882add4e1179bd4a44f2fcb6d753a78845d8363e0401861abebe428ba953df4aece69311687f4122073a236c3ad198e3f3a532efa04137d452ff47d2638da3261c8362bb7c7824be6195a66d2e17e122040e11e3bd4a69fc6e8d9f7043e09b9e10dc7777bfae5884e4ba1e9cc4a2bbe99e30810400000000000000d63d716c0975e1ce4a655362e7062ff6ab3934555c01840219829472adefa06d3482c7b2711b98eabdca89b77efd13e6dba4a431ce47911834118093b6cabaa17a57727474e1785ee234835088445aa4a9b677d3d342640e328504aea02a2d727e62b7f097a02dbf8fe1d704765de7482040b2fc3000000000000000008947baeaaf954aff687deaa2f804924600273ee26d8115cbca081a14cba24788779291745083fccdddc90d7af35c048d46362ea0d8d79c79ddca066da478c197d4a550470557bc99cca336bd88cd28a5ee651627e3a6fbf6ea53b95ddb64c69c7d8d2f4baddc239828760459564124bad68209d2a1d16ad085886c017679cfcda8b10700ac1e2bcc5ede5b5687aa418abfa29acd7339e73b2cd185c9eb5fb34fccd20ffa155b16c0c309ed6f6663677df37de0ec0d0f548b273940be5d1fe0bae14d1a76bf741330dacd9cc19c0163bcc93059e8d2d120ea257bba458ecd989cb3581a3f270ad48255ac0dad4923e3e357e4e90583ce8d43ec65ed491d87a51d7c13f665dcf772e3ead71112008b16b0ea821f70aee1ccbd71c5a1c21e87d5b7b73d356337dbcf3456ff6cd0d6b98a258e3509a7d15b9dcae4d0d750ffa07909c955e718585b2456308beda2fa03bb9bcf03cdff31ee4b1665b987"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)='.', 0x1}], 0x1}, 0x300) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="005500000000000000000000000000000000bc73", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/21], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2.446895762s ago: executing program 4 (id=2447): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0)={0x9, 0x0}, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0xa, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) socket$kcm(0x11, 0x200000000000002, 0x300) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x1f4, 0xfffffd64, 0x0, &(0x7f0000000240)="ff412f66b083dcc1010b3efc8864", 0x0, 0x5, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x46}, 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x5, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4}, &(0x7f0000000040), &(0x7f0000000140)=r3}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r4, &(0x7f0000000040)}, 0x20) 2.356827744s ago: executing program 2 (id=2448): bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400000000004, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7a, 0x2, @perf_bp={0x0, 0x4}, 0x19122, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffeffffffff}, 0xc001, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x300, &(0x7f0000000300)=[{&(0x7f0000000340)="d8000000210081044e81f782db44b9040200", 0x12}, {&(0x7f0000004200)="3d8c5ddb30a3718cef4f5210732f747226e8d7f41c83b136ac097b9a3c24c45639c2d70ee16c4b00790aca819a43b054bd01626eb0402783358806f064ef1fd963ab9b3f56cd18c60b0906d39e860184856b478f1ba6888cc780673762b0ee290d2b7dc0c21ff48175f779a7249c3f043c08a71a2f5abe07c7374fb92b8b3b61da1fa2d87a5263140bb672027b87cacc1b26a07901697eab4911135583935d28d3deb4720aad045d01d80f00db35ede34e1db4a9b9c9e4c8521575a0c0641a92ff7327130f1c", 0xc6}], 0x2}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) close(0xffffffffffffffff) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4", 0x46}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000d00)=""/242, 0xfffffd63}, {&(0x7f0000000240)=""/205, 0xcd}, {&(0x7f0000000380)=""/210, 0xd2}, {&(0x7f00000006c0)=""/188, 0xc9}, {&(0x7f0000000f40)=""/213, 0xd5}, {&(0x7f0000002100)=""/4077, 0xfed}, {&(0x7f00000007c0)=""/211, 0xd3}, {&(0x7f0000000b00)=""/231, 0xe7}, {&(0x7f0000000480)=""/176, 0xb0}, {&(0x7f0000000c00)=""/208, 0xd0}], 0xa}, 0x40012100) recvmsg(r1, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0600000004000000990500000a"], 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001340), &(0x7f0000000900), 0x404, r2, 0x0, 0x1ba8847c99}, 0x38) recvmsg$kcm(r1, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) 1.5301701s ago: executing program 0 (id=2450): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0)={0x9, 0x0}, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0xa, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0x12, &(0x7f00000008c0)=r5, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x16, 0x6, 0x4, 0x4, 0x80, 0x1, 0x4, '\x00', 0x0, r5, 0x0, 0x3, 0x5}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0}, 0x28) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000300000000000000000000030000000003000000020000000000000000000000000000010500000010000000010000000000000800000000005f"], 0x0, 0x4f}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x1f4, 0xfffffd64, 0x0, &(0x7f0000000240)="ff412f66b083dcc1010b3efc8864", 0x0, 0x5, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x46}, 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x5, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r7}, &(0x7f0000000040), &(0x7f0000000140)=r6}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r7, &(0x7f0000000040)}, 0x20) 1.52936988s ago: executing program 4 (id=2451): r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b03d25a806f", 0xc}], 0x1}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="934300005a0033"], 0xfe33) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="110000002000ff07090f9becdb4cb96b0a", 0x11}], 0x1, 0x0, 0x0, 0x81000000}, 0x0) socket$kcm(0x10, 0x2, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d08020a000000040000a1180002000000000000000e1208000f0100810401a80016ea1f0006400303000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r4 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, 0x0) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(r4, 0x107, 0x12, &(0x7f0000000340), 0x4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000008c0), 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0x34, 0x10000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x6}, 0x2c) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000f40)={0x6, 0x7, &(0x7f0000000300)=@raw=[@ldst={0x0, 0x45781507f1a42390, 0x2, 0x1, 0x2, 0xffffffffffffffa8}, @ldst={0x1, 0x3, 0x1, 0x8, 0x7}, @jmp={0x5, 0x0, 0xb, 0x1, 0x6, 0x40, 0x8}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x9}, @exit, @ldst={0x0, 0x3, 0x3, 0x1, 0x9, 0xffffffffffffffc0, 0x8}], &(0x7f0000000380)='GPL\x00', 0x22a6c808, 0x8a, &(0x7f0000000e00)=""/138, 0x0, 0xd0dfc355ee63aac1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000ec0)={0x5, 0x9, 0xfffffffb, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000f00)=[0xffffffffffffffff], 0x0, 0x10, 0x8, @value=r3}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000001000)=@generic={&(0x7f00000002c0)='./file0\x00', r6}, 0x18) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) 1.372080143s ago: executing program 2 (id=2452): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, 0x0, &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000040)) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x3, '\x00', 0x0, r0, 0x4, 0x5, 0x10000000}, 0x50) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000640)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x15, 0x8, 0x3ff}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e00)={0x6, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r2}, 0xc) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8910, &(0x7f0000000040)={'wlan1\x00', @multicast}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000006000)=[{&(0x7f0000005f80)="1f", 0x1}], 0x1}, 0x4) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x300080c1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000900)="5490", 0x2}], 0x1}, 0x4048841) recvmsg(r5, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) recvmsg(r5, &(0x7f0000000000)={0x0, 0x46, &(0x7f0000000440)=[{&(0x7f0000000080)=""/45, 0x23}], 0x1, 0x0, 0xffffffffffffff28}, 0x40008140) setsockopt$sock_attach_bpf(r4, 0x1, 0x9, &(0x7f0000000800), 0x4) 1.177596017s ago: executing program 4 (id=2453): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1e0000007b0000000d050000420000", @ANYRES32=0x1, @ANYBLOB="08000000000000000000000000fcff"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/12, @ANYRES32, @ANYBLOB="0d00ff0000000000830000000000000045"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x18, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) 1.087640758s ago: executing program 4 (id=2454): perf_event_open(&(0x7f0000000480)={0x1, 0x38, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5d31, 0x48010, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000001340)={0x2, 0x2, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @loopback, @local}}}], 0x20}, 0x8000) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) socket$kcm(0x2, 0x5, 0x84) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r3 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xe, &(0x7f0000000000), 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1c, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x13, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x11, 0x4, 0x4, 0x80000001, 0x10, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r4, 0x27, 0xe, 0x0, &(0x7f0000000180)="553d87000000120b334eecd80f06", 0x0, 0x8, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 927.733112ms ago: executing program 4 (id=2455): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c) 827.358384ms ago: executing program 4 (id=2456): bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400000000004, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7a, 0x2, @perf_bp={0x0, 0x4}, 0x19122, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffeffffffff}, 0xc001, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x300, &(0x7f0000000300)=[{&(0x7f0000000340)="d8000000210081044e81f782db44b9040200", 0x12}, {&(0x7f0000004200)="3d8c5ddb30a3718cef4f5210732f747226e8d7f41c83b136ac097b9a3c24c45639c2d70ee16c4b00790aca819a43b054bd01626eb0402783358806f064ef1fd963ab9b3f56cd18c60b0906d39e860184856b478f1ba6888cc780673762b0ee290d2b7dc0c21ff48175f779a7249c3f043c08a71a2f5abe07c7374fb92b8b3b61da1fa2d87a5263140bb672027b87cacc1b26a07901697eab4911135583935d28d3deb4720aad045d01d80f00db35ede34e1db4a9b9c9e4c8521575a0c0641a92ff7327130f1c", 0xc6}], 0x2}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) close(0xffffffffffffffff) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509", 0x4e}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000d00)=""/242, 0xfffffd63}, {&(0x7f0000000240)=""/205, 0xcd}, {&(0x7f0000000380)=""/210, 0xd2}, {&(0x7f00000006c0)=""/188, 0xc9}, {&(0x7f0000000f40)=""/213, 0xd5}, {&(0x7f0000002100)=""/4077, 0xfed}, {&(0x7f00000007c0)=""/211, 0xd3}, {&(0x7f0000000b00)=""/231, 0xe7}, {&(0x7f0000000480)=""/176, 0xb0}, {&(0x7f0000000c00)=""/208, 0xd0}], 0xa}, 0x40012100) recvmsg(r1, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0600000004000000990500000a"], 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001340), &(0x7f0000000900), 0x404, r2, 0x0, 0x1ba8847c99}, 0x38) recvmsg$kcm(r1, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) 515.9817ms ago: executing program 0 (id=2457): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x8, 0x650b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={&(0x7f0000000140), 0x2}, 0x2402, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x80) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00', 0x10}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f2, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r1, 0x0, 0x40000000) sendmsg$inet(r1, 0x0, 0x20000000) recvmsg$kcm(r1, &(0x7f0000000e80)={0x0, 0x0, 0x0}, 0x40000002) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)='.', 0x1}], 0x1}, 0x300) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="005500000000000000000000000000000000bc73", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/21], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 399.374332ms ago: executing program 2 (id=2458): bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x8, 0x650b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={&(0x7f0000000140), 0x2}, 0x2402, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xfe33) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x80) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00', 0x10}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f2, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f00000016c0)}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000000) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="b7020000b96871dfbfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe0000004f850000001a000000b7000000000000009500000000000000455781a5feee5e1ce784909b849d5550adf200000000000000b61d69f2ffdaa10350e11cb97c8ad51bcda0c4ee6d9674c77404ceb9971e43405d62de53a9a53608c10556e5734eb84049761451ce2e2d9f8004e26f7fcc059c06220002595f6dba87b81d1106fb026cce67a66afd9ac3d09e29a9d542ca9d85a5c9c88474895c679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd6fee53f5b2e7b91c61ced1ebad000000000000e8122a793c080a882add4e1179bd4a44f2fcb6d753a78845d8363e0401861abebe428ba953df4aece69311687f4122073a236c3ad198e3f3a532efa04137d452ff47d2638da3261c8362bb7c7824be6195a66d2e17e122040e11e3bd4a69fc6e8d9f7043e09b9e10dc7777bfae5884e4ba1e9cc4a2bbe99e30810400000000000000d63d716c0975e1ce4a655362e7062ff6ab3934555c01840219829472adefa06d3482c7b2711b98eabdca89b77efd13e6dba4a431ce47911834118093b6cabaa17a57727474e1785ee234835088445aa4a9b677d3d342640e328504aea02a2d727e62b7f097a02dbf8fe1d704765de7482040b2fc3000000000000000008947baeaaf954aff687deaa2f804924600273ee26d8115cbca081a14cba24788779291745083fccdddc90d7af35c048d46362ea0d8d79c79ddca066da478c197d4a550470557bc99cca336bd88cd28a5ee651627e3a6fbf6ea53b95ddb64c69c7d8d2f4baddc239828760459564124bad68209d2a1d16ad085886c017679cfcda8b10700ac1e2bcc5ede5b5687aa418abfa29acd7339e73b2cd185c9eb5fb34fccd20ffa155b16c0c309ed6f6663677df37de0ec0d0f548b273940be5d1fe0bae14d1a76bf741330dacd9cc19c0163bcc93059e8d2d120ea257bba458ecd989cb3581a3f270ad48255ac0dad4923e3e357e4e90583ce8d43ec65ed491d87a51d7c13f665dcf772e3ead71112008b16b0ea821f70aee1ccbd71c5a1c21e87d5b7b73d356337dbcf3456ff6cd0d6b98a258e3509a7d15b9dcae4d0d750ffa07909c955e718585b2456308beda2fa03bb9bcf03cdff31ee4b1665b987829c0f0872c006c6e4ed666fe23b343aae943923eedbdb0e7abee90e3da7b98b7d07d2d4816201ad1737798635b0a3ebd3aed120e4500c16e6c9dc729f009db49c6b8b19613e4d792cb4ff5106419291d4222980b49ddb9527ce785822d8f4e2bc30a96767f500b9e26e3b12854da63083320d8bfe49d85e0842803dc59d6375bce2b8a93caf39c0ba767880bbb9bf9407e6a6c0"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)='.', 0x1}], 0x1}, 0x300) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="005500000000000000000000000000000000bc73", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/21], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 0s ago: executing program 2 (id=2459): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0)={0x9, 0x0}, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0xa, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) socket$kcm(0x11, 0x200000000000002, 0x300) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x1f4, 0xfffffd64, 0x0, &(0x7f0000000240)="ff412f66b083dcc1010b3efc8864", 0x0, 0x5, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x46}, 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x5, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4}, &(0x7f0000000040), &(0x7f0000000140)=r3}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r4, &(0x7f0000000040)}, 0x20) kernel console output (not intermixed with test programs): 1] ? aa_sk_perm+0x7fc/0x930 [ 338.912583][T10931] ? aa_af_perm+0x2b0/0x2b0 [ 338.917124][T10931] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 338.923600][T10931] ? sock_rps_record_flow+0x19/0x400 [ 338.928932][T10931] ? inet_send_prepare+0x260/0x260 [ 338.934084][T10931] ? inet_sendmsg+0x7c/0x2f0 [ 338.938708][T10931] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 338.944029][T10931] ? security_socket_sendmsg+0x80/0xa0 [ 338.949570][T10931] ? inet_send_prepare+0x260/0x260 [ 338.954743][T10931] ____sys_sendmsg+0x5bf/0x950 [ 338.959584][T10931] ? __asan_memset+0x22/0x40 [ 338.964222][T10931] ? __sys_sendmsg_sock+0x30/0x30 [ 338.969299][T10931] ? __import_iovec+0x5f2/0x860 [ 338.974247][T10931] ? import_iovec+0x73/0xa0 [ 338.978829][T10931] ___sys_sendmsg+0x220/0x290 [ 338.983561][T10931] ? __sys_sendmsg+0x270/0x270 [ 338.988425][T10931] ? __lock_acquire+0x7c80/0x7c80 [ 338.993584][T10931] __se_sys_sendmsg+0x1a5/0x270 [ 338.998505][T10931] ? __x64_sys_sendmsg+0x80/0x80 [ 339.003551][T10931] ? lockdep_hardirqs_on+0x98/0x150 [ 339.008840][T10931] do_syscall_64+0x55/0xb0 [ 339.013302][T10931] ? clear_bhb_loop+0x40/0x90 [ 339.018017][T10931] ? clear_bhb_loop+0x40/0x90 [ 339.022741][T10931] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 339.028682][T10931] RIP: 0033:0x7f400e18ebe9 [ 339.033138][T10931] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 339.052787][T10931] RSP: 002b:00007f400f02f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 339.061250][T10931] RAX: ffffffffffffffda RBX: 00007f400e3c6180 RCX: 00007f400e18ebe9 [ 339.069256][T10931] RDX: 00000000240448c4 RSI: 0000200000000500 RDI: 0000000000000004 [ 339.077275][T10931] RBP: 00007f400f02f090 R08: 0000000000000000 R09: 0000000000000000 [ 339.085295][T10931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 339.093304][T10931] R13: 00007f400e3c6218 R14: 00007f400e3c6180 R15: 00007ffc8c6ae198 [ 339.101357][T10931] [ 339.391009][T10941] FAULT_INJECTION: forcing a failure. [ 339.391009][T10941] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 339.434311][T10941] CPU: 0 PID: 10941 Comm: syz.2.1659 Not tainted syzkaller #0 [ 339.441856][T10941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 339.451952][T10941] Call Trace: [ 339.455309][T10941] [ 339.458264][T10941] dump_stack_lvl+0x16c/0x230 [ 339.462990][T10941] ? show_regs_print_info+0x20/0x20 [ 339.468241][T10941] ? load_image+0x3b0/0x3b0 [ 339.472779][T10941] ? __might_fault+0xaa/0x120 [ 339.477497][T10941] ? __lock_acquire+0x7c80/0x7c80 [ 339.482594][T10941] should_fail_ex+0x39d/0x4d0 [ 339.487315][T10941] _copy_from_iter+0x1d3/0x1290 [ 339.492197][T10941] ? slab_post_alloc_hook+0x8a/0x4d0 [ 339.497506][T10941] ? __virt_addr_valid+0x18c/0x540 [ 339.502644][T10941] ? __lock_acquire+0x7c80/0x7c80 [ 339.507681][T10941] ? rcu_is_watching+0x15/0xb0 [ 339.512469][T10941] ? copyout_mc+0x70/0x70 [ 339.516823][T10941] ? __virt_addr_valid+0x18c/0x540 [ 339.521950][T10941] ? __virt_addr_valid+0x18c/0x540 [ 339.527072][T10941] ? __virt_addr_valid+0x469/0x540 [ 339.532201][T10941] ? __check_object_size+0x506/0xa30 [ 339.537516][T10941] netlink_sendmsg+0x75c/0xbe0 [ 339.542319][T10941] ? netlink_getsockopt+0x580/0x580 [ 339.547536][T10941] ? aa_sock_msg_perm+0x94/0x150 [ 339.552490][T10941] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 339.557798][T10941] ? security_socket_sendmsg+0x80/0xa0 [ 339.563272][T10941] ? netlink_getsockopt+0x580/0x580 [ 339.568487][T10941] ____sys_sendmsg+0x5bf/0x950 [ 339.573279][T10941] ? __asan_memset+0x22/0x40 [ 339.577885][T10941] ? __sys_sendmsg_sock+0x30/0x30 [ 339.582938][T10941] ? __import_iovec+0x5f2/0x860 [ 339.587814][T10941] ? import_iovec+0x73/0xa0 [ 339.592344][T10941] ___sys_sendmsg+0x220/0x290 [ 339.597044][T10941] ? __sys_sendmsg+0x270/0x270 [ 339.601844][T10941] ? __lock_acquire+0x7c80/0x7c80 [ 339.606901][T10941] __se_sys_sendmsg+0x1a5/0x270 [ 339.611777][T10941] ? __x64_sys_sendmsg+0x80/0x80 [ 339.616745][T10941] ? lockdep_hardirqs_on+0x98/0x150 [ 339.621974][T10941] do_syscall_64+0x55/0xb0 [ 339.626401][T10941] ? clear_bhb_loop+0x40/0x90 [ 339.631089][T10941] ? clear_bhb_loop+0x40/0x90 [ 339.635789][T10941] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 339.641712][T10941] RIP: 0033:0x7f65e878ebe9 [ 339.646146][T10941] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 339.665778][T10941] RSP: 002b:00007f65e957c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 339.674213][T10941] RAX: ffffffffffffffda RBX: 00007f65e89c5fa0 RCX: 00007f65e878ebe9 [ 339.682205][T10941] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 339.690197][T10941] RBP: 00007f65e957c090 R08: 0000000000000000 R09: 0000000000000000 [ 339.698185][T10941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 339.706252][T10941] R13: 00007f65e89c6038 R14: 00007f65e89c5fa0 R15: 00007ffc7b92dfd8 [ 339.714258][T10941] [ 339.974454][T10954] FAULT_INJECTION: forcing a failure. [ 339.974454][T10954] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 339.988014][T10954] CPU: 0 PID: 10954 Comm: syz.4.1665 Not tainted syzkaller #0 [ 339.995540][T10954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 340.005646][T10954] Call Trace: [ 340.008954][T10954] [ 340.011916][T10954] dump_stack_lvl+0x16c/0x230 [ 340.016638][T10954] ? show_regs_print_info+0x20/0x20 [ 340.021881][T10954] ? load_image+0x3b0/0x3b0 [ 340.026431][T10954] ? __might_fault+0xaa/0x120 [ 340.031146][T10954] ? __lock_acquire+0x7c80/0x7c80 [ 340.036235][T10954] should_fail_ex+0x39d/0x4d0 [ 340.040964][T10954] _copy_from_user+0x2f/0xe0 [ 340.045589][T10954] ___bpf_copy_key+0xb0/0x100 [ 340.050305][T10954] map_delete_elem+0x1fb/0x570 [ 340.055103][T10954] ? bpf_lsm_bpf+0x9/0x10 [ 340.059493][T10954] __sys_bpf+0x4a4/0x800 [ 340.063790][T10954] ? bpf_link_show_fdinfo+0x350/0x350 [ 340.069236][T10954] ? lock_chain_count+0x20/0x20 [ 340.074145][T10954] __x64_sys_bpf+0x7c/0x90 [ 340.078593][T10954] do_syscall_64+0x55/0xb0 [ 340.083039][T10954] ? clear_bhb_loop+0x40/0x90 [ 340.087778][T10954] ? clear_bhb_loop+0x40/0x90 [ 340.092510][T10954] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 340.098477][T10954] RIP: 0033:0x7fefbad8ebe9 [ 340.102939][T10954] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 340.122598][T10954] RSP: 002b:00007fefbbbb1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 340.131054][T10954] RAX: ffffffffffffffda RBX: 00007fefbafc5fa0 RCX: 00007fefbad8ebe9 [ 340.139061][T10954] RDX: 0000000000000020 RSI: 0000200000001380 RDI: 0000000000000003 [ 340.147061][T10954] RBP: 00007fefbbbb1090 R08: 0000000000000000 R09: 0000000000000000 [ 340.155065][T10954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 340.163092][T10954] R13: 00007fefbafc6038 R14: 00007fefbafc5fa0 R15: 00007ffd891a7f48 [ 340.171164][T10954] [ 341.122478][T10971] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1670'. [ 341.139897][T10971] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1670'. [ 341.161826][T10969] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1670'. [ 341.186667][T10971] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1670'. [ 341.497733][T10982] validate_nla: 82 callbacks suppressed [ 341.497754][T10982] netlink: 'syz.4.1672': attribute type 30 has an invalid length. [ 341.754632][T10993] netlink: 'syz.0.1677': attribute type 29 has an invalid length. [ 341.770132][T10993] netlink: 'syz.0.1677': attribute type 29 has an invalid length. [ 341.783346][T10993] netlink: 'syz.0.1677': attribute type 29 has an invalid length. [ 341.797454][T10993] netlink: 'syz.0.1677': attribute type 29 has an invalid length. [ 341.831911][T10993] netlink: 'syz.0.1677': attribute type 29 has an invalid length. [ 341.846448][T10991] netlink: 'syz.1.1684': attribute type 29 has an invalid length. [ 341.872028][T10991] netlink: 'syz.1.1684': attribute type 29 has an invalid length. [ 341.899192][T10997] netlink: 'syz.1.1684': attribute type 29 has an invalid length. [ 341.928152][T10991] netlink: 'syz.1.1684': attribute type 29 has an invalid length. [ 342.013066][T11000] netlink: 16166 bytes leftover after parsing attributes in process `syz.0.1679'. [ 342.400719][T11013] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1683'. [ 342.429900][T11013] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1683'. [ 342.465082][T11010] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1683'. [ 342.505757][T11015] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1683'. [ 343.015616][T11028] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1689'. [ 344.427471][T11048] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 344.623251][T11048] syz.4.1697 (11048) used greatest stack depth: 18888 bytes left [ 345.636318][T11086] bridge0: port 4(batadv0) entered disabled state [ 345.643392][T11086] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.651269][T11086] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.712704][T11087] batadv0: left allmulticast mode [ 345.734173][T11087] bridge0: port 4(batadv0) entered disabled state [ 345.782908][T11087] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 345.790290][T11087] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 345.797630][T11087] bridge0: port 3(netdevsim0) entered disabled state [ 345.821643][T11087] bridge_slave_1: left allmulticast mode [ 345.827388][T11087] bridge_slave_1: left promiscuous mode [ 345.842228][T11087] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.853737][T11087] bridge_slave_0: left allmulticast mode [ 345.868072][T11087] bridge_slave_0: left promiscuous mode [ 345.876370][T11087] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.020436][T11085] batman_adv: batadv0: Adding interface: team0 [ 346.054867][T11085] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 346.087895][T11085] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 346.127153][T11089] team0: entered promiscuous mode [ 346.139043][T11089] C: entered promiscuous mode [ 346.186346][T11089] team_slave_1: entered promiscuous mode [ 346.193208][T11089] dummy0: entered promiscuous mode [ 346.198707][T11089] geneve1: entered promiscuous mode [ 346.391217][T11089] 8021q: adding VLAN 0 to HW filter on device team0 [ 346.398305][T11089] batman_adv: batadv0: Interface activated: team0 [ 346.407686][T11089] batman_adv: batadv0: Interface deactivated: team0 [ 346.414809][T11089] batman_adv: batadv0: Removing interface: team0 [ 346.425281][T11092] __nla_validate_parse: 8 callbacks suppressed [ 346.425297][T11092] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1714'. [ 346.449902][T11090] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1714'. [ 346.479974][T11094] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1714'. [ 346.631747][T11103] tap0: tun_chr_ioctl cmd 1074025677 [ 346.637417][T11103] tap0: linktype set to 773 [ 346.753166][T11110] validate_nla: 44 callbacks suppressed [ 346.753184][T11110] netlink: 'syz.0.1720': attribute type 12 has an invalid length. [ 346.769213][T11110] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1720'. [ 346.935505][T11113] netlink: 'syz.2.1721': attribute type 29 has an invalid length. [ 347.029187][T11113] netlink: 'syz.2.1721': attribute type 29 has an invalid length. [ 347.046147][T11119] netlink: 'syz.2.1721': attribute type 29 has an invalid length. [ 347.074765][T11113] netlink: 'syz.2.1721': attribute type 29 has an invalid length. [ 347.232024][T11119] netlink: 'syz.2.1721': attribute type 29 has an invalid length. [ 347.491041][T11122] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1724'. [ 347.534367][T11122] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1724'. [ 347.629216][T11121] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1724'. [ 347.643742][T11125] netlink: 'syz.2.1725': attribute type 33 has an invalid length. [ 347.654802][T11125] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1725'. [ 347.666998][T11123] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1724'. [ 348.214907][T11141] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1731'. [ 348.528768][T11151] netlink: 'syz.0.1736': attribute type 21 has an invalid length. [ 348.566623][T11154] netlink: 'syz.1.1733': attribute type 29 has an invalid length. [ 348.599225][T11154] netlink: 'syz.1.1733': attribute type 29 has an invalid length. [ 351.077972][T11209] FAULT_INJECTION: forcing a failure. [ 351.077972][T11209] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 351.167182][T11209] CPU: 0 PID: 11209 Comm: syz.0.1754 Not tainted syzkaller #0 [ 351.174737][T11209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 351.184844][T11209] Call Trace: [ 351.188160][T11209] [ 351.191130][T11209] dump_stack_lvl+0x16c/0x230 [ 351.195864][T11209] ? show_regs_print_info+0x20/0x20 [ 351.201102][T11209] ? load_image+0x3b0/0x3b0 [ 351.205645][T11209] ? __might_fault+0xaa/0x120 [ 351.210364][T11209] ? __lock_acquire+0x7c80/0x7c80 [ 351.215432][T11209] should_fail_ex+0x39d/0x4d0 [ 351.220156][T11209] _copy_from_user+0x2f/0xe0 [ 351.224790][T11209] ___sys_sendmsg+0x159/0x290 [ 351.229530][T11209] ? __sys_sendmsg+0x270/0x270 [ 351.234366][T11209] ? __lock_acquire+0x7c80/0x7c80 [ 351.239453][T11209] __se_sys_sendmsg+0x1a5/0x270 [ 351.244357][T11209] ? __x64_sys_sendmsg+0x80/0x80 [ 351.249363][T11209] ? lockdep_hardirqs_on+0x98/0x150 [ 351.254708][T11209] do_syscall_64+0x55/0xb0 [ 351.259170][T11209] ? clear_bhb_loop+0x40/0x90 [ 351.263890][T11209] ? clear_bhb_loop+0x40/0x90 [ 351.268613][T11209] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 351.274562][T11209] RIP: 0033:0x7fdf4218ebe9 [ 351.279020][T11209] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 351.298679][T11209] RSP: 002b:00007fdf430d4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 351.307150][T11209] RAX: ffffffffffffffda RBX: 00007fdf423c5fa0 RCX: 00007fdf4218ebe9 [ 351.315170][T11209] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000003 [ 351.323189][T11209] RBP: 00007fdf430d4090 R08: 0000000000000000 R09: 0000000000000000 [ 351.331212][T11209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 351.339231][T11209] R13: 00007fdf423c6038 R14: 00007fdf423c5fa0 R15: 00007ffe8e404148 [ 351.347267][T11209] [ 351.629108][T11211] __nla_validate_parse: 12 callbacks suppressed [ 351.629133][T11211] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1753'. [ 352.008634][T11226] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1759'. [ 352.018564][T11226] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1759'. [ 352.334167][T11229] validate_nla: 25 callbacks suppressed [ 352.334206][T11229] netlink: 'syz.4.1761': attribute type 29 has an invalid length. [ 352.350342][T11229] netlink: 'syz.4.1761': attribute type 29 has an invalid length. [ 352.350521][T11232] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1762'. [ 352.392979][T11233] netlink: 'syz.4.1761': attribute type 29 has an invalid length. [ 352.417020][T11232] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1762'. [ 352.450364][T11231] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1762'. [ 352.495158][T11229] netlink: 'syz.4.1761': attribute type 29 has an invalid length. [ 352.506924][T11234] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1762'. [ 352.592016][T11233] netlink: 'syz.4.1761': attribute type 29 has an invalid length. [ 353.175275][T11236] netlink: 'syz.4.1763': attribute type 29 has an invalid length. [ 353.298084][T11236] netlink: 'syz.4.1763': attribute type 29 has an invalid length. [ 353.541272][T11245] IPv6: NLM_F_CREATE should be specified when creating new route [ 353.571152][T11245] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1766'. [ 353.621235][T11241] netlink: 'syz.4.1763': attribute type 29 has an invalid length. [ 353.652776][T11243] netlink: 'syz.4.1763': attribute type 29 has an invalid length. [ 353.671561][T11236] netlink: 'syz.4.1763': attribute type 29 has an invalid length. [ 354.188172][T11255] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1768'. [ 354.374256][T11250] pim6reg1: entered promiscuous mode [ 354.384373][T11250] pim6reg1: entered allmulticast mode [ 354.394315][T11258] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1770'. [ 358.126095][T11314] validate_nla: 23 callbacks suppressed [ 358.126128][T11314] netlink: 'syz.1.1789': attribute type 29 has an invalid length. [ 358.155831][T11319] netlink: set zone limit has 8 unknown bytes [ 358.172942][T11314] netlink: 'syz.1.1789': attribute type 29 has an invalid length. [ 358.182731][T11318] __nla_validate_parse: 8 callbacks suppressed [ 358.182767][T11318] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1791'. [ 358.203719][T11318] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1791'. [ 358.217063][T11320] netlink: 'syz.1.1789': attribute type 29 has an invalid length. [ 358.228540][T11314] netlink: 'syz.1.1789': attribute type 29 has an invalid length. [ 358.395080][T11323] netlink: 'syz.1.1789': attribute type 29 has an invalid length. [ 359.031870][T11330] netlink: 'syz.2.1794': attribute type 29 has an invalid length. [ 359.053815][T11330] netlink: 'syz.2.1794': attribute type 29 has an invalid length. [ 359.088348][T11331] netlink: 'syz.2.1794': attribute type 29 has an invalid length. [ 359.173838][T11330] netlink: 'syz.2.1794': attribute type 29 has an invalid length. [ 359.201417][T11331] netlink: 'syz.2.1794': attribute type 29 has an invalid length. [ 359.475290][T11344] FAULT_INJECTION: forcing a failure. [ 359.475290][T11344] name failslab, interval 1, probability 0, space 0, times 0 [ 359.515372][T11346] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1801'. [ 359.549577][T11344] CPU: 1 PID: 11344 Comm: syz.0.1800 Not tainted syzkaller #0 [ 359.557129][T11344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 359.567226][T11344] Call Trace: [ 359.570542][T11344] [ 359.573502][T11344] dump_stack_lvl+0x16c/0x230 [ 359.578228][T11344] ? show_regs_print_info+0x20/0x20 [ 359.583466][T11344] ? load_image+0x3b0/0x3b0 [ 359.588007][T11344] ? __might_sleep+0xe0/0xe0 [ 359.592635][T11344] ? __lock_acquire+0x7c80/0x7c80 [ 359.597707][T11344] should_fail_ex+0x39d/0x4d0 [ 359.602435][T11344] should_failslab+0x9/0x20 [ 359.606985][T11344] slab_pre_alloc_hook+0x59/0x310 [ 359.612065][T11344] ? __lock_acquire+0x7c80/0x7c80 [ 359.617133][T11344] kmem_cache_alloc+0x5a/0x2e0 [ 359.621940][T11344] ? security_file_alloc+0x34/0x120 [ 359.627186][T11344] security_file_alloc+0x34/0x120 [ 359.632269][T11344] init_file+0x94/0x1f0 [ 359.636472][T11344] alloc_empty_file+0xb7/0x1d0 [ 359.641272][T11344] path_openat+0x100/0x3190 [ 359.645864][T11344] ? kasan_set_track+0x4e/0x70 [ 359.650660][T11344] ? __kasan_slab_alloc+0x6c/0x80 [ 359.655720][T11344] ? do_sys_openat2+0xcb/0x1c0 [ 359.660525][T11344] ? __x64_sys_openat+0x139/0x160 [ 359.665584][T11344] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 359.671697][T11344] ? verify_lock_unused+0x140/0x140 [ 359.676933][T11344] ? do_filp_open+0x3d0/0x3d0 [ 359.681657][T11344] ? __virt_addr_valid+0x18c/0x540 [ 359.686826][T11344] do_filp_open+0x1c5/0x3d0 [ 359.691376][T11344] ? vfs_tmpfile+0x490/0x490 [ 359.696030][T11344] ? _raw_spin_unlock+0x28/0x40 [ 359.700927][T11344] ? alloc_fd+0x58f/0x630 [ 359.705305][T11344] do_sys_openat2+0x12c/0x1c0 [ 359.710020][T11344] ? do_sys_open+0xe0/0xe0 [ 359.714513][T11344] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 359.720528][T11344] ? lock_chain_count+0x20/0x20 [ 359.725418][T11344] ? lock_chain_count+0x20/0x20 [ 359.730311][T11344] __x64_sys_openat+0x139/0x160 [ 359.735205][T11344] do_syscall_64+0x55/0xb0 [ 359.739668][T11344] ? clear_bhb_loop+0x40/0x90 [ 359.744373][T11344] ? clear_bhb_loop+0x40/0x90 [ 359.749104][T11344] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 359.755066][T11344] RIP: 0033:0x7fdf4218d550 [ 359.759516][T11344] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 359.779245][T11344] RSP: 002b:00007fdf430d3f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 359.787691][T11344] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fdf4218d550 [ 359.795697][T11344] RDX: 0000000000000002 RSI: 00007fdf430d3fa0 RDI: 00000000ffffff9c [ 359.803695][T11344] RBP: 00007fdf430d3fa0 R08: 0000000000000000 R09: 0000000000000000 [ 359.811698][T11344] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 359.819780][T11344] R13: 00007fdf423c6038 R14: 00007fdf423c5fa0 R15: 00007ffe8e404148 [ 359.827792][T11344] [ 359.861926][T11346] caif0: entered promiscuous mode [ 359.867400][T11346] caif0: entered allmulticast mode [ 359.872733][T11346] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 360.704088][T11355] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1804'. [ 360.753253][T11357] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1802'. [ 360.977943][T11357] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1802'. [ 361.272535][T11363] pim6reg1: entered promiscuous mode [ 361.279618][T11363] pim6reg1: entered allmulticast mode [ 361.887667][T11378] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1810'. [ 363.680839][T11414] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1820'. [ 363.731694][T11414] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1820'. [ 363.814815][T11412] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1820'. [ 363.855329][T11419] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1820'. [ 364.283032][T11423] validate_nla: 14 callbacks suppressed [ 364.283071][T11423] netlink: 'syz.1.1824': attribute type 29 has an invalid length. [ 364.313376][T11423] netlink: 'syz.1.1824': attribute type 29 has an invalid length. [ 364.343726][T11425] netlink: 'syz.1.1824': attribute type 29 has an invalid length. [ 364.416321][T11426] netlink: 'syz.1.1824': attribute type 29 has an invalid length. [ 364.453708][T11428] netlink: 'syz.0.1825': attribute type 29 has an invalid length. [ 364.462078][T11425] netlink: 'syz.1.1824': attribute type 29 has an invalid length. [ 364.497252][T11428] netlink: 'syz.0.1825': attribute type 29 has an invalid length. [ 364.539123][T11433] netlink: 'syz.0.1825': attribute type 29 has an invalid length. [ 364.578999][T11428] netlink: 'syz.0.1825': attribute type 29 has an invalid length. [ 364.660664][T11428] netlink: 'syz.0.1825': attribute type 29 has an invalid length. [ 365.009264][T11442] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1827'. [ 365.100680][T11442] pim6reg1: entered promiscuous mode [ 365.117331][T11442] pim6reg1: entered allmulticast mode [ 366.093705][T11453] FAULT_INJECTION: forcing a failure. [ 366.093705][T11453] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 366.130002][T11453] CPU: 0 PID: 11453 Comm: syz.2.1830 Not tainted syzkaller #0 [ 366.137583][T11453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 366.147726][T11453] Call Trace: [ 366.151088][T11453] [ 366.154100][T11453] dump_stack_lvl+0x16c/0x230 [ 366.158881][T11453] ? show_regs_print_info+0x20/0x20 [ 366.164186][T11453] ? load_image+0x3b0/0x3b0 [ 366.168789][T11453] ? __might_fault+0xaa/0x120 [ 366.173811][T11453] ? __lock_acquire+0x7c80/0x7c80 [ 366.178940][T11453] should_fail_ex+0x39d/0x4d0 [ 366.183742][T11453] _copy_from_user+0x2f/0xe0 [ 366.188447][T11453] kstrtouint_from_user+0xc2/0x150 [ 366.193654][T11453] ? kstrtol_from_user+0x150/0x150 [ 366.198940][T11453] proc_fail_nth_write+0x89/0x240 [ 366.204049][T11453] ? proc_fail_nth_read+0x250/0x250 [ 366.209372][T11453] ? proc_fail_nth_read+0x250/0x250 [ 366.214648][T11453] vfs_write+0x288/0x940 [ 366.219005][T11453] ? file_end_write+0x250/0x250 [ 366.223958][T11453] ? __fget_files+0x28/0x4d0 [ 366.228625][T11453] ? __fget_files+0x44a/0x4d0 [ 366.233416][T11453] ? __fdget_pos+0x2a3/0x330 [ 366.238082][T11453] ? ksys_write+0x75/0x250 [ 366.242589][T11453] ksys_write+0x147/0x250 [ 366.247017][T11453] ? __ia32_sys_read+0x90/0x90 [ 366.251887][T11453] ? trace_sys_enter+0x1f/0x80 [ 366.256761][T11453] do_syscall_64+0x55/0xb0 [ 366.261262][T11453] ? clear_bhb_loop+0x40/0x90 [ 366.266011][T11453] ? clear_bhb_loop+0x40/0x90 [ 366.270777][T11453] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 366.276750][T11453] RIP: 0033:0x7f65e878d69f [ 366.281239][T11453] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 366.300925][T11453] RSP: 002b:00007f65e955b030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 366.309421][T11453] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f65e878d69f [ 366.317469][T11453] RDX: 0000000000000001 RSI: 00007f65e955b0a0 RDI: 0000000000000005 [ 366.325516][T11453] RBP: 00007f65e955b090 R08: 0000000000000000 R09: 0000000000000000 [ 366.333555][T11453] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 366.341591][T11453] R13: 00007f65e89c6128 R14: 00007f65e89c6090 R15: 00007ffc7b92dfd8 [ 366.349697][T11453] [ 371.805589][T11471] FAULT_INJECTION: forcing a failure. [ 371.805589][T11471] name failslab, interval 1, probability 0, space 0, times 0 [ 371.829044][T11471] CPU: 0 PID: 11471 Comm: syz.1.1839 Not tainted syzkaller #0 [ 371.836614][T11471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 371.846747][T11471] Call Trace: [ 371.850099][T11471] [ 371.853102][T11471] dump_stack_lvl+0x16c/0x230 [ 371.857872][T11471] ? show_regs_print_info+0x20/0x20 [ 371.863161][T11471] ? load_image+0x3b0/0x3b0 [ 371.867745][T11471] ? __might_sleep+0xe0/0xe0 [ 371.872413][T11471] ? __lock_acquire+0x7c80/0x7c80 [ 371.877554][T11471] should_fail_ex+0x39d/0x4d0 [ 371.882332][T11471] should_failslab+0x9/0x20 [ 371.886908][T11471] slab_pre_alloc_hook+0x59/0x310 [ 371.892036][T11471] kmem_cache_alloc_lru+0x4d/0x2e0 [ 371.897224][T11471] ? __d_alloc+0x31/0x730 [ 371.901653][T11471] __d_alloc+0x31/0x730 [ 371.905883][T11471] ? __lock_acquire+0x7c80/0x7c80 [ 371.910975][T11471] ? do_raw_spin_lock+0x121/0x2c0 [ 371.916087][T11471] d_alloc_pseudo+0x1d/0x70 [ 371.920718][T11471] alloc_file_pseudo+0xcc/0x200 [ 371.925662][T11471] ? alloc_empty_backing_file+0xe0/0xe0 [ 371.931289][T11471] ? alloc_fd+0x58f/0x630 [ 371.935722][T11471] anon_inode_getfd+0xca/0x1c0 [ 371.940593][T11471] btf_new_fd+0x7ea/0x980 [ 371.945029][T11471] ? bpf_btf_show_fdinfo+0x80/0x80 [ 371.950225][T11471] ? capable+0x88/0xe0 [ 371.954391][T11471] __sys_bpf+0x60e/0x800 [ 371.958720][T11471] ? bpf_link_show_fdinfo+0x350/0x350 [ 371.964214][T11471] ? lock_chain_count+0x20/0x20 [ 371.969173][T11471] __x64_sys_bpf+0x7c/0x90 [ 371.973671][T11471] do_syscall_64+0x55/0xb0 [ 371.978160][T11471] ? clear_bhb_loop+0x40/0x90 [ 371.982905][T11471] ? clear_bhb_loop+0x40/0x90 [ 371.987678][T11471] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 371.993652][T11471] RIP: 0033:0x7f400e18ebe9 [ 371.998118][T11471] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 372.017765][T11471] RSP: 002b:00007f400f071038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 372.026226][T11471] RAX: ffffffffffffffda RBX: 00007f400e3c5fa0 RCX: 00007f400e18ebe9 [ 372.034234][T11471] RDX: 0000000000000028 RSI: 00002000000008c0 RDI: 0000000000000012 [ 372.042239][T11471] RBP: 00007f400f071090 R08: 0000000000000000 R09: 0000000000000000 [ 372.050241][T11471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 372.058239][T11471] R13: 00007f400e3c6038 R14: 00007f400e3c5fa0 R15: 00007ffc8c6ae198 [ 372.066288][T11471] [ 372.376556][T11479] validate_nla: 7 callbacks suppressed [ 372.376592][T11479] netlink: 'syz.2.1843': attribute type 29 has an invalid length. [ 372.403724][T11479] netlink: 'syz.2.1843': attribute type 29 has an invalid length. [ 372.415928][T11480] netlink: 'syz.2.1843': attribute type 29 has an invalid length. [ 372.441396][T11476] netlink: 'syz.1.1842': attribute type 29 has an invalid length. [ 372.456932][T11479] netlink: 'syz.2.1843': attribute type 29 has an invalid length. [ 372.481511][T11476] netlink: 'syz.1.1842': attribute type 29 has an invalid length. [ 372.511055][T11481] netlink: 'syz.1.1842': attribute type 29 has an invalid length. [ 372.565922][T11476] netlink: 'syz.1.1842': attribute type 29 has an invalid length. [ 372.620111][T11480] netlink: 'syz.2.1843': attribute type 29 has an invalid length. [ 372.644616][T11481] netlink: 'syz.1.1842': attribute type 29 has an invalid length. [ 372.788346][T11483] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 372.840772][T11483] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1844'. [ 372.908793][T11486] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1845'. [ 373.035364][T11492] netlink: 146340 bytes leftover after parsing attributes in process `syz.1.1848'. [ 373.187643][T11492] batman_adv: batadv0: Adding interface: team0 [ 373.201234][T11492] batman_adv: batadv0: The MTU of interface team0 is too small (299) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 373.245700][T11492] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 373.280890][T11497] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1848'. [ 373.297377][T11497] team0: entered promiscuous mode [ 373.304548][T11497] C: entered promiscuous mode [ 373.319678][T11497] team_slave_1: entered promiscuous mode [ 373.326789][T11497] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 373.352514][T11497] 8021q: adding VLAN 0 to HW filter on device team0 [ 373.366222][T11497] batman_adv: batadv0: Interface activated: team0 [ 373.377283][T11497] batman_adv: batadv0: Interface deactivated: team0 [ 373.400193][T11497] batman_adv: batadv0: Removing interface: team0 [ 374.345994][T11520] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 374.416365][T11520] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1858'. [ 374.439075][T11523] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1859'. [ 374.584895][T11530] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1862'. [ 374.657807][T11528] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1861'. [ 374.669023][T11528] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1861'. [ 374.804738][T11535] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1864'. [ 376.553381][T11582] FAULT_INJECTION: forcing a failure. [ 376.553381][T11582] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 376.587833][T11582] CPU: 0 PID: 11582 Comm: syz.1.1891 Not tainted syzkaller #0 [ 376.595387][T11582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 376.605499][T11582] Call Trace: [ 376.608816][T11582] [ 376.611794][T11582] dump_stack_lvl+0x16c/0x230 [ 376.616522][T11582] ? show_regs_print_info+0x20/0x20 [ 376.621762][T11582] ? load_image+0x3b0/0x3b0 [ 376.626296][T11582] ? __lock_acquire+0x7c80/0x7c80 [ 376.631361][T11582] ? snprintf+0xdb/0x120 [ 376.635628][T11582] should_fail_ex+0x39d/0x4d0 [ 376.640346][T11582] _copy_to_user+0x2f/0xa0 [ 376.644797][T11582] simple_read_from_buffer+0xe7/0x150 [ 376.650210][T11582] proc_fail_nth_read+0x1e3/0x250 [ 376.655269][T11582] ? proc_fault_inject_write+0x340/0x340 [ 376.660951][T11582] ? fsnotify_perm+0x271/0x5e0 [ 376.665755][T11582] ? proc_fault_inject_write+0x340/0x340 [ 376.671426][T11582] vfs_read+0x27e/0x920 [ 376.675622][T11582] ? kernel_read+0x1e0/0x1e0 [ 376.680255][T11582] ? __fget_files+0x28/0x4d0 [ 376.684877][T11582] ? __fget_files+0x44a/0x4d0 [ 376.689596][T11582] ? __fdget_pos+0x2a3/0x330 [ 376.694215][T11582] ? ksys_read+0x75/0x250 [ 376.698596][T11582] ksys_read+0x147/0x250 [ 376.702884][T11582] ? vfs_write+0x940/0x940 [ 376.707337][T11582] ? lockdep_hardirqs_on+0x98/0x150 [ 376.712580][T11582] do_syscall_64+0x55/0xb0 [ 376.717027][T11582] ? clear_bhb_loop+0x40/0x90 [ 376.721729][T11582] ? clear_bhb_loop+0x40/0x90 [ 376.726439][T11582] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 376.732374][T11582] RIP: 0033:0x7f400e18d5fc [ 376.736828][T11582] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 376.756484][T11582] RSP: 002b:00007f400f071030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 376.764946][T11582] RAX: ffffffffffffffda RBX: 00007f400e3c5fa0 RCX: 00007f400e18d5fc [ 376.772953][T11582] RDX: 000000000000000f RSI: 00007f400f0710a0 RDI: 0000000000000004 [ 376.780958][T11582] RBP: 00007f400f071090 R08: 0000000000000000 R09: 0000000000000000 [ 376.788967][T11582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 376.796969][T11582] R13: 00007f400e3c6038 R14: 00007f400e3c5fa0 R15: 00007ffc8c6ae198 [ 376.804987][T11582] [ 377.925337][T11612] __nla_validate_parse: 16 callbacks suppressed [ 377.925368][T11612] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1896'. [ 377.943124][T11612] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1896'. [ 378.250230][T11625] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1901'. [ 378.690177][T11641] validate_nla: 17 callbacks suppressed [ 378.690198][T11641] netlink: 'syz.0.1906': attribute type 27 has an invalid length. [ 378.718632][T11641] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1906'. [ 378.913336][T11647] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1909'. [ 378.951318][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.952121][T11648] netlink: 'syz.0.1908': attribute type 29 has an invalid length. [ 378.957866][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.994961][T11648] netlink: 'syz.0.1908': attribute type 29 has an invalid length. [ 379.004743][T11647] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1909'. [ 379.050527][T11649] netlink: 'syz.0.1908': attribute type 29 has an invalid length. [ 379.066072][T11648] netlink: 'syz.0.1908': attribute type 29 has an invalid length. [ 379.273219][T11659] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1913'. [ 379.409922][T11664] netlink: 'syz.1.1916': attribute type 29 has an invalid length. [ 379.431792][T11664] netlink: 'syz.1.1916': attribute type 29 has an invalid length. [ 379.461780][T11664] netlink: 'syz.1.1916': attribute type 29 has an invalid length. [ 379.491848][T11664] netlink: 'syz.1.1916': attribute type 29 has an invalid length. [ 379.557125][T11664] netlink: 'syz.1.1916': attribute type 29 has an invalid length. [ 379.866460][T11679] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1921'. [ 379.891445][T11679] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1921'. [ 381.386931][T11717] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1933'. [ 382.762700][T11756] FAULT_INJECTION: forcing a failure. [ 382.762700][T11756] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 382.799559][T11756] CPU: 1 PID: 11756 Comm: syz.2.1948 Not tainted syzkaller #0 [ 382.807134][T11756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 382.817233][T11756] Call Trace: [ 382.820547][T11756] [ 382.823511][T11756] dump_stack_lvl+0x16c/0x230 [ 382.828246][T11756] ? show_regs_print_info+0x20/0x20 [ 382.833494][T11756] ? load_image+0x3b0/0x3b0 [ 382.838047][T11756] ? __might_fault+0xaa/0x120 [ 382.842764][T11756] ? __lock_acquire+0x7c80/0x7c80 [ 382.847833][T11756] should_fail_ex+0x39d/0x4d0 [ 382.852564][T11756] _copy_from_user+0x2f/0xe0 [ 382.857200][T11756] __sys_bpf+0x1e9/0x800 [ 382.861498][T11756] ? bpf_link_show_fdinfo+0x350/0x350 [ 382.866935][T11756] ? lock_chain_count+0x20/0x20 [ 382.871836][T11756] __x64_sys_bpf+0x7c/0x90 [ 382.876300][T11756] do_syscall_64+0x55/0xb0 [ 382.880761][T11756] ? clear_bhb_loop+0x40/0x90 [ 382.885479][T11756] ? clear_bhb_loop+0x40/0x90 [ 382.890198][T11756] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 382.896144][T11756] RIP: 0033:0x7f65e878ebe9 [ 382.900603][T11756] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 382.920266][T11756] RSP: 002b:00007f65e957c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 382.928734][T11756] RAX: ffffffffffffffda RBX: 00007f65e89c5fa0 RCX: 00007f65e878ebe9 [ 382.936773][T11756] RDX: 0000000000000028 RSI: 0000200000000840 RDI: 0000000000000012 [ 382.944806][T11756] RBP: 00007f65e957c090 R08: 0000000000000000 R09: 0000000000000000 [ 382.952823][T11756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 382.960841][T11756] R13: 00007f65e89c6038 R14: 00007f65e89c5fa0 R15: 00007ffc7b92dfd8 [ 382.968912][T11756] [ 383.347789][T11773] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 383.987468][T11787] validate_nla: 33 callbacks suppressed [ 383.987507][T11787] netlink: 'syz.0.1959': attribute type 29 has an invalid length. [ 384.014121][T11787] netlink: 'syz.0.1959': attribute type 29 has an invalid length. [ 384.026918][T11788] netlink: 'syz.0.1959': attribute type 29 has an invalid length. [ 384.046533][T11787] netlink: 'syz.0.1959': attribute type 29 has an invalid length. [ 384.079201][T11787] netlink: 'syz.0.1959': attribute type 29 has an invalid length. [ 384.397136][T11792] netlink: 'syz.1.1961': attribute type 29 has an invalid length. [ 384.466402][T11798] netlink: 'syz.0.1963': attribute type 29 has an invalid length. [ 384.474696][T11792] netlink: 'syz.1.1961': attribute type 29 has an invalid length. [ 384.486070][T11799] netlink: 'syz.1.1961': attribute type 29 has an invalid length. [ 384.495780][T11800] netlink: 'syz.1.1961': attribute type 29 has an invalid length. [ 384.855506][T11814] FAULT_INJECTION: forcing a failure. [ 384.855506][T11814] name failslab, interval 1, probability 0, space 0, times 0 [ 384.938514][T11814] CPU: 0 PID: 11814 Comm: syz.0.1964 Not tainted syzkaller #0 [ 384.946068][T11814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 384.956169][T11814] Call Trace: [ 384.959486][T11814] [ 384.962459][T11814] dump_stack_lvl+0x16c/0x230 [ 384.967198][T11814] ? show_regs_print_info+0x20/0x20 [ 384.972444][T11814] ? load_image+0x3b0/0x3b0 [ 384.977007][T11814] ? __might_sleep+0xe0/0xe0 [ 384.981643][T11814] ? __lock_acquire+0x7c80/0x7c80 [ 384.986727][T11814] should_fail_ex+0x39d/0x4d0 [ 384.991461][T11814] should_failslab+0x9/0x20 [ 384.996015][T11814] slab_pre_alloc_hook+0x59/0x310 [ 385.001095][T11814] ? __lock_acquire+0x7c80/0x7c80 [ 385.006167][T11814] kmem_cache_alloc+0x5a/0x2e0 [ 385.010973][T11814] ? security_file_alloc+0x34/0x120 [ 385.016223][T11814] security_file_alloc+0x34/0x120 [ 385.021299][T11814] init_file+0x94/0x1f0 [ 385.025508][T11814] alloc_empty_file+0xb7/0x1d0 [ 385.030327][T11814] path_openat+0x100/0x3190 [ 385.034896][T11814] ? kasan_set_track+0x4e/0x70 [ 385.039708][T11814] ? __kasan_slab_alloc+0x6c/0x80 [ 385.044777][T11814] ? do_sys_openat2+0xcb/0x1c0 [ 385.049675][T11814] ? __x64_sys_openat+0x139/0x160 [ 385.054765][T11814] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 385.060903][T11814] ? verify_lock_unused+0x140/0x140 [ 385.066158][T11814] ? do_filp_open+0x3d0/0x3d0 [ 385.070895][T11814] ? __virt_addr_valid+0x18c/0x540 [ 385.076076][T11814] do_filp_open+0x1c5/0x3d0 [ 385.080634][T11814] ? vfs_tmpfile+0x490/0x490 [ 385.085392][T11814] ? _raw_spin_unlock+0x28/0x40 [ 385.090385][T11814] ? alloc_fd+0x58f/0x630 [ 385.094861][T11814] do_sys_openat2+0x12c/0x1c0 [ 385.099592][T11814] ? do_sys_open+0xe0/0xe0 [ 385.104064][T11814] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 385.110094][T11814] ? lock_chain_count+0x20/0x20 [ 385.115085][T11814] __x64_sys_openat+0x139/0x160 [ 385.119989][T11814] do_syscall_64+0x55/0xb0 [ 385.124450][T11814] ? clear_bhb_loop+0x40/0x90 [ 385.129153][T11814] ? clear_bhb_loop+0x40/0x90 [ 385.133855][T11814] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 385.139783][T11814] RIP: 0033:0x7fdf4218ebe9 [ 385.144221][T11814] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 385.163861][T11814] RSP: 002b:00007fdf43092038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 385.172300][T11814] RAX: ffffffffffffffda RBX: 00007fdf423c6180 RCX: 00007fdf4218ebe9 [ 385.180289][T11814] RDX: 000000000000275a RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 385.188271][T11814] RBP: 00007fdf43092090 R08: 0000000000000000 R09: 0000000000000000 [ 385.196260][T11814] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 385.204241][T11814] R13: 00007fdf423c6218 R14: 00007fdf423c6180 R15: 00007ffe8e404148 [ 385.212240][T11814] [ 385.376036][T11826] __nla_validate_parse: 1 callbacks suppressed [ 385.376073][T11826] netlink: 196 bytes leftover after parsing attributes in process `syz.2.1973'. [ 390.343039][T11852] validate_nla: 11 callbacks suppressed [ 390.343059][T11852] netlink: 'syz.2.1981': attribute type 21 has an invalid length. [ 390.371173][T11852] netlink: 'syz.2.1981': attribute type 6 has an invalid length. [ 390.386032][T11852] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1981'. [ 390.556664][T11857] FAULT_INJECTION: forcing a failure. [ 390.556664][T11857] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 390.581369][T11857] CPU: 0 PID: 11857 Comm: syz.0.1982 Not tainted syzkaller #0 [ 390.588929][T11857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 390.599031][T11857] Call Trace: [ 390.602357][T11857] [ 390.605321][T11857] dump_stack_lvl+0x16c/0x230 [ 390.610051][T11857] ? show_regs_print_info+0x20/0x20 [ 390.615291][T11857] ? load_image+0x3b0/0x3b0 [ 390.618115][T11862] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1983'. [ 390.619822][T11857] ? __might_fault+0xaa/0x120 [ 390.619848][T11857] ? __lock_acquire+0x7c80/0x7c80 [ 390.619877][T11857] should_fail_ex+0x39d/0x4d0 [ 390.619911][T11857] _copy_from_user+0x2f/0xe0 [ 390.619936][T11857] csum_and_copy_from_iter+0x1ed/0x1450 [ 390.619983][T11857] ? iov_iter_get_pages_alloc2+0xc0/0xc0 [ 390.620017][T11857] ? __kmem_cache_alloc_node+0x13e/0x260 [ 390.620048][T11857] ? __alloc_skb+0x138/0x2c0 [ 390.620075][T11857] ? rcu_is_watching+0x15/0xb0 [ 390.649930][T11862] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1983'. [ 390.653532][T11857] ip_generic_getfrag+0x145/0x2d0 [ 390.665361][T11859] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1983'. [ 390.669431][T11857] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 390.669478][T11857] __ip6_append_data+0x2f08/0x3c40 [ 390.669529][T11857] ? rawv6_send_hdrinc+0x16a0/0x16a0 [ 390.669558][T11857] ? ip6_mtu+0x7d/0x3f0 [ 390.681862][T11862] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1983'. [ 390.683264][T11857] ? ip6_setup_cork+0xfe0/0xfe0 [ 390.683304][T11857] ip6_append_data+0x1b0/0x350 [ 390.735431][T11857] ? rawv6_send_hdrinc+0x16a0/0x16a0 [ 390.740742][T11857] rawv6_sendmsg+0x1262/0x17f0 [ 390.745534][T11857] ? __might_sleep+0xe0/0xe0 [ 390.750231][T11857] ? compat_rawv6_ioctl+0x70/0x70 [ 390.755283][T11857] ? aa_sk_perm+0x7fc/0x930 [ 390.759818][T11857] ? tomoyo_socket_sendmsg_permission+0x216/0x2f0 [ 390.766351][T11857] ? inet_send_prepare+0x260/0x260 [ 390.771475][T11857] ? inet_sendmsg+0x7c/0x2f0 [ 390.776072][T11857] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 390.781374][T11857] ? security_socket_sendmsg+0x80/0xa0 [ 390.786847][T11857] ? inet_send_prepare+0x260/0x260 [ 390.791971][T11857] ____sys_sendmsg+0x5bf/0x950 [ 390.796763][T11857] ? __asan_memset+0x22/0x40 [ 390.801371][T11857] ? __sys_sendmsg_sock+0x30/0x30 [ 390.806416][T11857] ? __import_iovec+0x5f2/0x860 [ 390.811298][T11857] ? import_iovec+0x73/0xa0 [ 390.815871][T11857] ___sys_sendmsg+0x220/0x290 [ 390.820572][T11857] ? __sys_sendmsg+0x270/0x270 [ 390.825464][T11857] ? __lock_acquire+0x7c80/0x7c80 [ 390.830524][T11857] __se_sys_sendmsg+0x1a5/0x270 [ 390.835404][T11857] ? __x64_sys_sendmsg+0x80/0x80 [ 390.840375][T11857] ? lockdep_hardirqs_on+0x98/0x150 [ 390.845597][T11857] do_syscall_64+0x55/0xb0 [ 390.850117][T11857] ? clear_bhb_loop+0x40/0x90 [ 390.854826][T11857] ? clear_bhb_loop+0x40/0x90 [ 390.859517][T11857] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 390.865433][T11857] RIP: 0033:0x7fdf4218ebe9 [ 390.869879][T11857] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 390.889500][T11857] RSP: 002b:00007fdf430d4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 390.897931][T11857] RAX: ffffffffffffffda RBX: 00007fdf423c5fa0 RCX: 00007fdf4218ebe9 [ 390.905919][T11857] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000003 [ 390.913898][T11857] RBP: 00007fdf430d4090 R08: 0000000000000000 R09: 0000000000000000 [ 390.921877][T11857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 390.929856][T11857] R13: 00007fdf423c6038 R14: 00007fdf423c5fa0 R15: 00007ffe8e404148 [ 390.937854][T11857] [ 390.999887][T11866] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1987'. [ 391.018884][T11866] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1987'. [ 391.363856][T11872] netlink: 196 bytes leftover after parsing attributes in process `syz.0.1989'. [ 391.480407][T11877] netlink: 'syz.4.1992': attribute type 29 has an invalid length. [ 391.489350][T11877] netlink: 'syz.4.1992': attribute type 29 has an invalid length. [ 391.515158][T11877] netlink: 'syz.4.1992': attribute type 29 has an invalid length. [ 391.555323][T11877] netlink: 'syz.4.1992': attribute type 29 has an invalid length. [ 391.594868][T11877] netlink: 'syz.4.1992': attribute type 29 has an invalid length. [ 392.271791][T11888] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1995'. [ 392.397408][T11892] netlink: 'syz.1.1997': attribute type 21 has an invalid length. [ 392.406413][T11892] IPv6: NLM_F_CREATE should be specified when creating new route [ 392.414515][T11892] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 392.422770][T11892] IPv6: NLM_F_CREATE should be set when creating new route [ 392.430132][T11892] IPv6: NLM_F_CREATE should be set when creating new route [ 392.437407][T11892] IPv6: NLM_F_CREATE should be set when creating new route [ 392.596357][T11898] FAULT_INJECTION: forcing a failure. [ 392.596357][T11898] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 392.640846][T11898] CPU: 1 PID: 11898 Comm: syz.2.2000 Not tainted syzkaller #0 [ 392.648436][T11898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 392.658534][T11898] Call Trace: [ 392.661850][T11898] [ 392.664810][T11898] dump_stack_lvl+0x16c/0x230 [ 392.669542][T11898] ? show_regs_print_info+0x20/0x20 [ 392.674840][T11898] ? load_image+0x3b0/0x3b0 [ 392.679388][T11898] ? __might_fault+0xaa/0x120 [ 392.684105][T11898] ? __lock_acquire+0x7c80/0x7c80 [ 392.689190][T11898] should_fail_ex+0x39d/0x4d0 [ 392.693917][T11898] _copy_from_user+0x2f/0xe0 [ 392.698545][T11898] __sys_bpf+0x1e9/0x800 [ 392.702827][T11898] ? bpf_link_show_fdinfo+0x350/0x350 [ 392.708262][T11898] ? lock_chain_count+0x20/0x20 [ 392.713171][T11898] __x64_sys_bpf+0x7c/0x90 [ 392.717639][T11898] do_syscall_64+0x55/0xb0 [ 392.722097][T11898] ? clear_bhb_loop+0x40/0x90 [ 392.726822][T11898] ? clear_bhb_loop+0x40/0x90 [ 392.730421][T11901] netlink: 'syz.0.2002': attribute type 29 has an invalid length. [ 392.731518][T11898] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 392.731558][T11898] RIP: 0033:0x7f65e878ebe9 [ 392.731577][T11898] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 392.731596][T11898] RSP: 002b:00007f65e957c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 392.731621][T11898] RAX: ffffffffffffffda RBX: 00007f65e89c5fa0 RCX: 00007f65e878ebe9 [ 392.731637][T11898] RDX: 0000000000000028 RSI: 0000200000000840 RDI: 0000000000000012 [ 392.761377][T11901] netlink: 'syz.0.2002': attribute type 29 has an invalid length. [ 392.769376][T11898] RBP: 00007f65e957c090 R08: 0000000000000000 R09: 0000000000000000 [ 392.769397][T11898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 392.769409][T11898] R13: 00007f65e89c6038 R14: 00007f65e89c5fa0 R15: 00007ffc7b92dfd8 [ 392.769440][T11898] [ 392.864344][T11902] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2001'. [ 393.934852][T11930] FAULT_INJECTION: forcing a failure. [ 393.934852][T11930] name failslab, interval 1, probability 0, space 0, times 0 [ 393.948430][T11930] CPU: 0 PID: 11930 Comm: syz.4.2011 Not tainted syzkaller #0 [ 393.956020][T11930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 393.966138][T11930] Call Trace: [ 393.969460][T11930] [ 393.972427][T11930] dump_stack_lvl+0x16c/0x230 [ 393.977151][T11930] ? show_regs_print_info+0x20/0x20 [ 393.982395][T11930] ? load_image+0x3b0/0x3b0 [ 393.986952][T11930] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 393.992988][T11930] ? lock_chain_count+0x20/0x20 [ 393.997893][T11930] should_fail_ex+0x39d/0x4d0 [ 394.002615][T11930] should_failslab+0x9/0x20 [ 394.007142][T11930] slab_pre_alloc_hook+0x59/0x310 [ 394.012199][T11930] kmem_cache_alloc+0x5a/0x2e0 [ 394.016980][T11930] ? dst_alloc+0x105/0x170 [ 394.021415][T11930] dst_alloc+0x105/0x170 [ 394.025676][T11930] ip_route_output_key_hash_rcu+0x14f0/0x2360 [ 394.031765][T11930] ? ip_route_output_key_hash+0x12f/0x340 [ 394.037501][T11930] ip_route_output_key_hash+0x20b/0x340 [ 394.043065][T11930] ? ip_route_input_rcu+0x3010/0x3010 [ 394.048467][T11930] ? bpf_lsm_xfrm_decode_session+0x9/0x10 [ 394.054209][T11930] vti6_tnl_xmit+0xb9e/0x1970 [ 394.058906][T11930] ? verify_lock_unused+0x140/0x140 [ 394.064160][T11930] ? validate_xmit_xfrm+0xc1/0x12a0 [ 394.069400][T11930] ? vti6_dev_uninit+0x120/0x120 [ 394.074387][T11930] dev_hard_start_xmit+0x246/0x740 [ 394.079528][T11930] __dev_queue_xmit+0x1a64/0x35a0 [ 394.084582][T11930] ? __dev_queue_xmit+0x245/0x35a0 [ 394.089801][T11930] ? __kmem_cache_alloc_node+0x13e/0x260 [ 394.095462][T11930] ? netdev_core_pick_tx+0x340/0x340 [ 394.100770][T11930] ? skb_release_data+0x1cf/0x800 [ 394.105837][T11930] ? pskb_expand_head+0xbfe/0x1230 [ 394.110971][T11930] ? __bpf_redirect+0x533/0xe60 [ 394.115839][T11930] __bpf_tx_skb+0x189/0x250 [ 394.120364][T11930] bpf_clone_redirect+0x270/0x3d0 [ 394.125406][T11930] ? bpf_test_run+0x15c/0x810 [ 394.130107][T11930] bpf_prog_6893982b85ceadf7+0x5e/0x63 [ 394.135580][T11930] ? perf_trace_run_bpf_submit+0x125/0x1c0 [ 394.141401][T11930] ? perf_trace_preemptirq_template+0x281/0x340 [ 394.147670][T11930] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 394.153670][T11930] ? lockdep_softirqs_on+0x570/0x570 [ 394.158971][T11930] ? lock_chain_count+0x20/0x20 [ 394.163845][T11930] ? __local_bh_disable_ip+0xf2/0x190 [ 394.169235][T11930] ? __cant_sleep+0x210/0x210 [ 394.173929][T11930] ? __local_bh_enable_ip+0x12e/0x1c0 [ 394.179334][T11930] ? _local_bh_enable+0xa0/0xa0 [ 394.184217][T11930] ? bpf_test_run+0x15c/0x810 [ 394.189364][T11930] ? kvm_sched_clock_read+0x11/0x20 [ 394.194606][T11930] bpf_test_run+0x4e6/0x810 [ 394.199152][T11930] ? bpf_test_run+0x15c/0x810 [ 394.203856][T11930] ? convert___skb_to_skb+0x590/0x590 [ 394.209260][T11930] ? eth_get_headlen+0x200/0x200 [ 394.214227][T11930] ? slab_build_skb+0x25f/0x3f0 [ 394.219095][T11930] ? convert___skb_to_skb+0x3d/0x590 [ 394.224406][T11930] bpf_prog_test_run_skb+0xa67/0x11c0 [ 394.229819][T11930] ? cpu_online+0x60/0x60 [ 394.234173][T11930] bpf_prog_test_run+0x321/0x390 [ 394.239135][T11930] __sys_bpf+0x440/0x800 [ 394.243399][T11930] ? bpf_link_show_fdinfo+0x350/0x350 [ 394.248799][T11930] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 394.254985][T11930] __x64_sys_bpf+0x7c/0x90 [ 394.259432][T11930] do_syscall_64+0x55/0xb0 [ 394.263871][T11930] ? clear_bhb_loop+0x40/0x90 [ 394.268562][T11930] ? clear_bhb_loop+0x40/0x90 [ 394.273259][T11930] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 394.279176][T11930] RIP: 0033:0x7fefbad8ebe9 [ 394.283605][T11930] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 394.303243][T11930] RSP: 002b:00007fefbbbb1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 394.311680][T11930] RAX: ffffffffffffffda RBX: 00007fefbafc5fa0 RCX: 00007fefbad8ebe9 [ 394.319665][T11930] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 394.327647][T11930] RBP: 00007fefbbbb1090 R08: 0000000000000000 R09: 0000000000000000 [ 394.335631][T11930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 394.343615][T11930] R13: 00007fefbafc6038 R14: 00007fefbafc5fa0 R15: 00007ffd891a7f48 [ 394.351621][T11930] [ 395.392336][T11962] validate_nla: 8 callbacks suppressed [ 395.392375][T11962] netlink: 'syz.0.2021': attribute type 29 has an invalid length. [ 395.419306][T11962] netlink: 'syz.0.2021': attribute type 29 has an invalid length. [ 395.451823][T11964] netlink: 'syz.0.2021': attribute type 29 has an invalid length. [ 395.467965][T11962] netlink: 'syz.0.2021': attribute type 29 has an invalid length. [ 395.511129][T11962] netlink: 'syz.0.2021': attribute type 29 has an invalid length. [ 395.766944][T11965] __nla_validate_parse: 5 callbacks suppressed [ 395.766982][T11965] netlink: 61211 bytes leftover after parsing attributes in process `syz.4.2022'. [ 396.464112][ T5800] Bluetooth: hci0: command 0x0406 tx timeout [ 409.818631][T11982] netlink: 11254 bytes leftover after parsing attributes in process `syz.0.2027'. [ 409.831218][T11986] netlink: 11562 bytes leftover after parsing attributes in process `syz.1.2030'. [ 409.883483][T11989] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2031'. [ 409.910745][T11989] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2031'. [ 409.941875][T11988] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2031'. [ 409.986767][T11989] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2031'. [ 410.110852][T11992] netlink: 'syz.1.2032': attribute type 29 has an invalid length. [ 410.145740][T11992] netlink: 'syz.1.2032': attribute type 29 has an invalid length. [ 410.159015][T11996] netlink: 'syz.1.2032': attribute type 29 has an invalid length. [ 410.184638][T11992] netlink: 'syz.1.2032': attribute type 29 has an invalid length. [ 410.231430][T11992] netlink: 'syz.1.2032': attribute type 29 has an invalid length. [ 411.218134][T12011] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2038'. [ 411.236507][T12011] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2038'. [ 411.301360][T12013] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2039'. [ 411.310872][T12013] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2039'. [ 412.003825][T12023] netlink: 'syz.1.2042': attribute type 29 has an invalid length. [ 412.041836][T12023] netlink: 'syz.1.2042': attribute type 29 has an invalid length. [ 412.075661][T12023] netlink: 'syz.1.2042': attribute type 29 has an invalid length. [ 412.085361][T12025] netlink: 'syz.1.2042': attribute type 29 has an invalid length. [ 412.095995][T12024] netlink: 'syz.1.2042': attribute type 29 has an invalid length. [ 412.153835][T12029] syz.4.2043[12029] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 412.153994][T12029] syz.4.2043[12029] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 414.006114][T12065] sctp: [Deprecated]: syz.4.2056 (pid 12065) Use of int in maxseg socket option. [ 414.006114][T12065] Use struct sctp_assoc_value instead [ 415.540547][T12075] validate_nla: 8 callbacks suppressed [ 415.540565][T12075] netlink: 'syz.1.2059': attribute type 4 has an invalid length. [ 415.707220][T12086] __nla_validate_parse: 15 callbacks suppressed [ 415.707242][T12086] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2061'. [ 415.728491][T12086] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2061'. [ 415.752576][T12086] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2061'. [ 415.769161][T12086] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2061'. [ 415.843524][T12089] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2060'. [ 416.223747][T12093] FAULT_INJECTION: forcing a failure. [ 416.223747][T12093] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 416.249629][T12093] CPU: 1 PID: 12093 Comm: syz.0.2071 Not tainted syzkaller #0 [ 416.257179][T12093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 416.267270][T12093] Call Trace: [ 416.270584][T12093] [ 416.273552][T12093] dump_stack_lvl+0x16c/0x230 [ 416.278275][T12093] ? show_regs_print_info+0x20/0x20 [ 416.283518][T12093] ? load_image+0x3b0/0x3b0 [ 416.288059][T12093] ? __might_fault+0xaa/0x120 [ 416.292768][T12093] ? __lock_acquire+0x7c80/0x7c80 [ 416.297835][T12093] should_fail_ex+0x39d/0x4d0 [ 416.302569][T12093] _copy_to_user+0x2f/0xa0 [ 416.307019][T12093] bpf_obj_get_info_by_fd+0x1775/0x2d90 [ 416.312621][T12093] ? bpf_map_get_fd_by_id+0x310/0x310 [ 416.318037][T12093] ? get_pid_task+0x20/0x1e0 [ 416.322672][T12093] ? file_end_write+0x159/0x250 [ 416.327549][T12093] ? __might_fault+0xaa/0x120 [ 416.332239][T12093] ? __might_fault+0xc6/0x120 [ 416.337009][T12093] ? __might_fault+0xaa/0x120 [ 416.341710][T12093] ? bpf_lsm_bpf+0x9/0x10 [ 416.346055][T12093] ? security_bpf+0x7e/0xa0 [ 416.350573][T12093] __sys_bpf+0x781/0x800 [ 416.354832][T12093] ? bpf_link_show_fdinfo+0x350/0x350 [ 416.360238][T12093] ? lock_chain_count+0x20/0x20 [ 416.365113][T12093] __x64_sys_bpf+0x7c/0x90 [ 416.369546][T12093] do_syscall_64+0x55/0xb0 [ 416.373988][T12093] ? clear_bhb_loop+0x40/0x90 [ 416.378688][T12093] ? clear_bhb_loop+0x40/0x90 [ 416.383376][T12093] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 416.389296][T12093] RIP: 0033:0x7fdf4218ebe9 [ 416.393726][T12093] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 416.413349][T12093] RSP: 002b:00007fdf430d4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 416.421777][T12093] RAX: ffffffffffffffda RBX: 00007fdf423c5fa0 RCX: 00007fdf4218ebe9 [ 416.429762][T12093] RDX: 0000000000000010 RSI: 0000200000000800 RDI: 000000000000000f [ 416.437745][T12093] RBP: 00007fdf430d4090 R08: 0000000000000000 R09: 0000000000000000 [ 416.445724][T12093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 416.453708][T12093] R13: 00007fdf423c6038 R14: 00007fdf423c5fa0 R15: 00007ffe8e404148 [ 416.461715][T12093] [ 416.605007][T12096] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2062'. [ 416.875044][T12089] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2060'. [ 416.887660][T12096] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2062'. [ 416.997119][T12105] netlink: 'syz.2.2064': attribute type 29 has an invalid length. [ 417.013427][T12105] netlink: 'syz.2.2064': attribute type 29 has an invalid length. [ 417.041036][T12105] netlink: 'syz.2.2064': attribute type 29 has an invalid length. [ 417.067094][T12105] netlink: 'syz.2.2064': attribute type 29 has an invalid length. [ 417.085418][T12105] netlink: 'syz.2.2064': attribute type 29 has an invalid length. [ 417.558213][T12119] netlink: 'syz.0.2078': attribute type 29 has an invalid length. [ 417.576382][T12119] netlink: 'syz.0.2078': attribute type 29 has an invalid length. [ 417.598406][T12120] netlink: 'syz.0.2078': attribute type 29 has an invalid length. [ 417.614694][T12119] netlink: 'syz.0.2078': attribute type 29 has an invalid length. [ 417.772431][T12123] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.2072'. [ 418.990979][T12149] FAULT_INJECTION: forcing a failure. [ 418.990979][T12149] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 419.004189][T12149] CPU: 0 PID: 12149 Comm: syz.2.2081 Not tainted syzkaller #0 [ 419.011689][T12149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 419.021778][T12149] Call Trace: [ 419.025091][T12149] [ 419.028065][T12149] dump_stack_lvl+0x16c/0x230 [ 419.032798][T12149] ? show_regs_print_info+0x20/0x20 [ 419.038047][T12149] ? load_image+0x3b0/0x3b0 [ 419.042594][T12149] ? __might_fault+0xaa/0x120 [ 419.047306][T12149] ? __lock_acquire+0x7c80/0x7c80 [ 419.052371][T12149] should_fail_ex+0x39d/0x4d0 [ 419.057097][T12149] _copy_from_user+0x2f/0xe0 [ 419.061729][T12149] __sys_bpf+0x1e9/0x800 [ 419.065998][T12149] ? bpf_link_show_fdinfo+0x350/0x350 [ 419.071401][T12149] ? lock_chain_count+0x20/0x20 [ 419.076274][T12149] __x64_sys_bpf+0x7c/0x90 [ 419.080705][T12149] do_syscall_64+0x55/0xb0 [ 419.085137][T12149] ? clear_bhb_loop+0x40/0x90 [ 419.089828][T12149] ? clear_bhb_loop+0x40/0x90 [ 419.094522][T12149] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 419.100442][T12149] RIP: 0033:0x7f65e878ebe9 [ 419.104876][T12149] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 419.124508][T12149] RSP: 002b:00007f65e957c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 419.132971][T12149] RAX: ffffffffffffffda RBX: 00007f65e89c5fa0 RCX: 00007f65e878ebe9 [ 419.140954][T12149] RDX: 0000000000000028 RSI: 0000200000000840 RDI: 0000000000000012 [ 419.148933][T12149] RBP: 00007f65e957c090 R08: 0000000000000000 R09: 0000000000000000 [ 419.156918][T12149] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 419.164930][T12149] R13: 00007f65e89c6038 R14: 00007f65e89c5fa0 R15: 00007ffc7b92dfd8 [ 419.172951][T12149] [ 419.578377][T12155] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.2084'. [ 420.713623][T12190] validate_nla: 7 callbacks suppressed [ 420.713660][T12190] netlink: 'syz.1.2097': attribute type 29 has an invalid length. [ 420.738199][T12190] netlink: 'syz.1.2097': attribute type 29 has an invalid length. [ 420.768800][T12194] netlink: 'syz.1.2097': attribute type 29 has an invalid length. [ 420.781188][T12190] netlink: 'syz.1.2097': attribute type 29 has an invalid length. [ 420.798916][T12190] netlink: 'syz.1.2097': attribute type 29 has an invalid length. [ 420.909144][T12197] IPv6: NLM_F_CREATE should be specified when creating new route [ 420.957626][T12197] __nla_validate_parse: 3 callbacks suppressed [ 420.957647][T12197] netlink: 4083 bytes leftover after parsing attributes in process `syz.4.2099'. [ 421.205055][T12205] netlink: 140 bytes leftover after parsing attributes in process `syz.0.2100'. [ 421.448102][T12210] FAULT_INJECTION: forcing a failure. [ 421.448102][T12210] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 421.482510][T12210] CPU: 0 PID: 12210 Comm: syz.1.2105 Not tainted syzkaller #0 [ 421.490081][T12210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 421.500198][T12210] Call Trace: [ 421.503543][T12210] [ 421.506543][T12210] dump_stack_lvl+0x16c/0x230 [ 421.511311][T12210] ? show_regs_print_info+0x20/0x20 [ 421.516594][T12210] ? load_image+0x3b0/0x3b0 [ 421.521184][T12210] ? __might_fault+0xaa/0x120 [ 421.525928][T12210] ? __lock_acquire+0x7c80/0x7c80 [ 421.531041][T12210] should_fail_ex+0x39d/0x4d0 [ 421.535813][T12210] _copy_from_iter+0x1d3/0x1290 [ 421.540743][T12210] ? slab_post_alloc_hook+0x8a/0x4d0 [ 421.546102][T12210] ? __virt_addr_valid+0x18c/0x540 [ 421.551283][T12210] ? __lock_acquire+0x7c80/0x7c80 [ 421.556361][T12210] ? rcu_is_watching+0x15/0xb0 [ 421.561229][T12210] ? copyout_mc+0x70/0x70 [ 421.565609][T12210] ? __virt_addr_valid+0x18c/0x540 [ 421.570775][T12210] ? __virt_addr_valid+0x18c/0x540 [ 421.575942][T12210] ? __virt_addr_valid+0x469/0x540 [ 421.581116][T12210] ? __check_object_size+0x506/0xa30 [ 421.586453][T12210] netlink_sendmsg+0x75c/0xbe0 [ 421.591282][T12210] ? netlink_getsockopt+0x580/0x580 [ 421.596552][T12210] ? aa_sock_msg_perm+0x94/0x150 [ 421.601532][T12210] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 421.606858][T12210] ? security_socket_sendmsg+0x80/0xa0 [ 421.612358][T12210] ? netlink_getsockopt+0x580/0x580 [ 421.617602][T12210] ____sys_sendmsg+0x5bf/0x950 [ 421.622434][T12210] ? __asan_memset+0x22/0x40 [ 421.627066][T12210] ? __sys_sendmsg_sock+0x30/0x30 [ 421.632128][T12210] ? __import_iovec+0x5f2/0x860 [ 421.637046][T12210] ? import_iovec+0x73/0xa0 [ 421.641615][T12210] ___sys_sendmsg+0x220/0x290 [ 421.646352][T12210] ? __sys_sendmsg+0x270/0x270 [ 421.651229][T12210] ? __lock_acquire+0x7c80/0x7c80 [ 421.656349][T12210] __se_sys_sendmsg+0x1a5/0x270 [ 421.661248][T12210] ? __x64_sys_sendmsg+0x80/0x80 [ 421.666265][T12210] ? lockdep_hardirqs_on+0x98/0x150 [ 421.671534][T12210] do_syscall_64+0x55/0xb0 [ 421.675983][T12210] ? clear_bhb_loop+0x40/0x90 [ 421.680698][T12210] ? clear_bhb_loop+0x40/0x90 [ 421.685418][T12210] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 421.691351][T12210] RIP: 0033:0x7f400e18ebe9 [ 421.695807][T12210] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 421.715466][T12210] RSP: 002b:00007f400f071038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 421.724009][T12210] RAX: ffffffffffffffda RBX: 00007f400e3c5fa0 RCX: 00007f400e18ebe9 [ 421.732014][T12210] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 421.740021][T12210] RBP: 00007f400f071090 R08: 0000000000000000 R09: 0000000000000000 [ 421.748028][T12210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 421.756031][T12210] R13: 00007f400e3c6038 R14: 00007f400e3c5fa0 R15: 00007ffc8c6ae198 [ 421.764076][T12210] [ 422.150454][T12232] netlink: 'syz.1.2108': attribute type 21 has an invalid length. [ 422.186171][T12232] netlink: 'syz.1.2108': attribute type 22 has an invalid length. [ 422.207115][T12231] netlink: 'syz.0.2110': attribute type 29 has an invalid length. [ 422.257658][T12231] netlink: 'syz.0.2110': attribute type 29 has an invalid length. [ 422.280174][T12234] netlink: 'syz.0.2110': attribute type 29 has an invalid length. [ 423.199600][T12255] FAULT_INJECTION: forcing a failure. [ 423.199600][T12255] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 423.219616][T12255] CPU: 0 PID: 12255 Comm: syz.4.2116 Not tainted syzkaller #0 [ 423.227163][T12255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 423.237262][T12255] Call Trace: [ 423.240588][T12255] [ 423.243546][T12255] dump_stack_lvl+0x16c/0x230 [ 423.248268][T12255] ? show_regs_print_info+0x20/0x20 [ 423.253518][T12255] ? load_image+0x3b0/0x3b0 [ 423.258066][T12255] ? __might_fault+0xaa/0x120 [ 423.262793][T12255] ? __lock_acquire+0x7c80/0x7c80 [ 423.267874][T12255] should_fail_ex+0x39d/0x4d0 [ 423.272613][T12255] _copy_from_user+0x2f/0xe0 [ 423.277253][T12255] __sys_bpf+0x1e9/0x800 [ 423.281547][T12255] ? bpf_link_show_fdinfo+0x350/0x350 [ 423.286969][T12255] ? lock_chain_count+0x20/0x20 [ 423.291868][T12255] __x64_sys_bpf+0x7c/0x90 [ 423.296334][T12255] do_syscall_64+0x55/0xb0 [ 423.300812][T12255] ? clear_bhb_loop+0x40/0x90 [ 423.305521][T12255] ? clear_bhb_loop+0x40/0x90 [ 423.310236][T12255] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 423.316156][T12255] RIP: 0033:0x7fefbad8ebe9 [ 423.320588][T12255] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 423.340234][T12255] RSP: 002b:00007fefbbbb1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 423.348673][T12255] RAX: ffffffffffffffda RBX: 00007fefbafc5fa0 RCX: 00007fefbad8ebe9 [ 423.356663][T12255] RDX: 0000000000000050 RSI: 0000200000000340 RDI: 000000000000000a [ 423.364649][T12255] RBP: 00007fefbbbb1090 R08: 0000000000000000 R09: 0000000000000000 [ 423.372637][T12255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 423.380619][T12255] R13: 00007fefbafc6038 R14: 00007fefbafc5fa0 R15: 00007ffd891a7f48 [ 423.388620][T12255] [ 423.591433][T12265] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2121'. [ 423.618268][T12265] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 423.670641][T12270] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2119'. [ 423.759253][T12268] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.2122'. [ 423.838526][T12270] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2119'. [ 425.183818][T12289] FAULT_INJECTION: forcing a failure. [ 425.183818][T12289] name failslab, interval 1, probability 0, space 0, times 0 [ 425.329472][T12289] CPU: 1 PID: 12289 Comm: syz.4.2126 Not tainted syzkaller #0 [ 425.337021][T12289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 425.347116][T12289] Call Trace: [ 425.350427][T12289] [ 425.353387][T12289] dump_stack_lvl+0x16c/0x230 [ 425.358115][T12289] ? show_regs_print_info+0x20/0x20 [ 425.363351][T12289] ? load_image+0x3b0/0x3b0 [ 425.367885][T12289] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 425.373910][T12289] ? __asan_memset+0x22/0x40 [ 425.378542][T12289] should_fail_ex+0x39d/0x4d0 [ 425.383268][T12289] should_failslab+0x9/0x20 [ 425.387812][T12289] slab_pre_alloc_hook+0x59/0x310 [ 425.392883][T12289] ? __debug_object_init+0xe8/0x430 [ 425.398140][T12289] kmem_cache_alloc+0x5a/0x2e0 [ 425.402945][T12289] ? slab_build_skb+0x2b/0x3f0 [ 425.407764][T12289] slab_build_skb+0x2b/0x3f0 [ 425.412404][T12289] bpf_prog_test_run_skb+0x3ba/0x11c0 [ 425.417827][T12289] ? __fget_files+0x28/0x4d0 [ 425.422473][T12289] ? cpu_online+0x60/0x60 [ 425.426849][T12289] bpf_prog_test_run+0x321/0x390 [ 425.431825][T12289] __sys_bpf+0x440/0x800 [ 425.436112][T12289] ? bpf_link_show_fdinfo+0x350/0x350 [ 425.441535][T12289] ? lock_chain_count+0x20/0x20 [ 425.446451][T12289] __x64_sys_bpf+0x7c/0x90 [ 425.450901][T12289] do_syscall_64+0x55/0xb0 [ 425.455347][T12289] ? clear_bhb_loop+0x40/0x90 [ 425.460057][T12289] ? clear_bhb_loop+0x40/0x90 [ 425.464787][T12289] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 425.470728][T12289] RIP: 0033:0x7fefbad8ebe9 [ 425.475175][T12289] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 425.494820][T12289] RSP: 002b:00007fefbbbb1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 425.503274][T12289] RAX: ffffffffffffffda RBX: 00007fefbafc5fa0 RCX: 00007fefbad8ebe9 [ 425.511285][T12289] RDX: 000000000000004c RSI: 0000200000000240 RDI: 000000000000000a [ 425.519284][T12289] RBP: 00007fefbbbb1090 R08: 0000000000000000 R09: 0000000000000000 [ 425.527285][T12289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 425.535286][T12289] R13: 00007fefbafc6038 R14: 00007fefbafc5fa0 R15: 00007ffd891a7f48 [ 425.543318][T12289] [ 426.376351][T12299] validate_nla: 8 callbacks suppressed [ 426.376371][T12299] netlink: 'syz.0.2130': attribute type 29 has an invalid length. [ 428.917721][T12299] netlink: 'syz.0.2130': attribute type 29 has an invalid length. [ 429.146210][T12309] netlink: 'syz.0.2133': attribute type 29 has an invalid length. [ 430.992378][T12305] netlink: 'syz.4.2132': attribute type 28 has an invalid length. [ 431.004492][T12309] netlink: 'syz.0.2133': attribute type 29 has an invalid length. [ 431.192965][T12321] netlink: 196 bytes leftover after parsing attributes in process `syz.0.2136'. [ 433.176240][T12341] netlink: 'syz.4.2141': attribute type 29 has an invalid length. [ 433.204266][T12341] netlink: 'syz.4.2141': attribute type 29 has an invalid length. [ 433.238497][T12346] netlink: 'syz.4.2141': attribute type 29 has an invalid length. [ 433.294968][T12347] netlink: 'syz.0.2144': attribute type 29 has an invalid length. [ 433.336059][T12347] netlink: 'syz.0.2144': attribute type 29 has an invalid length. [ 433.350176][T12349] netlink: 'syz.0.2144': attribute type 29 has an invalid length. [ 433.358943][T12341] netlink: 'syz.4.2141': attribute type 29 has an invalid length. [ 433.374856][T12347] netlink: 'syz.0.2144': attribute type 29 has an invalid length. [ 433.408108][T12341] netlink: 'syz.4.2141': attribute type 29 has an invalid length. [ 433.422916][T12347] netlink: 'syz.0.2144': attribute type 29 has an invalid length. [ 433.627120][T12360] netlink: 196 bytes leftover after parsing attributes in process `syz.4.2148'. [ 434.542984][T12377] netlink: 196 bytes leftover after parsing attributes in process `syz.1.2162'. [ 435.124736][T12391] netlink: 144 bytes leftover after parsing attributes in process `syz.4.2158'. [ 435.174302][T12391] netlink: 703 bytes leftover after parsing attributes in process `syz.4.2158'. [ 437.035786][T12426] netlink: 196 bytes leftover after parsing attributes in process `syz.1.2173'. [ 437.748765][T12442] netlink: 188 bytes leftover after parsing attributes in process `syz.0.2178'. [ 438.516625][T12461] FAULT_INJECTION: forcing a failure. [ 438.516625][T12461] name failslab, interval 1, probability 0, space 0, times 0 [ 438.559436][T12461] CPU: 1 PID: 12461 Comm: syz.1.2187 Not tainted syzkaller #0 [ 438.566991][T12461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 438.577100][T12461] Call Trace: [ 438.580428][T12461] [ 438.583399][T12461] dump_stack_lvl+0x16c/0x230 [ 438.588134][T12461] ? show_regs_print_info+0x20/0x20 [ 438.593386][T12461] ? load_image+0x3b0/0x3b0 [ 438.597938][T12461] ? __lock_acquire+0x7c80/0x7c80 [ 438.603020][T12461] should_fail_ex+0x39d/0x4d0 [ 438.607764][T12461] should_failslab+0x9/0x20 [ 438.612345][T12461] slab_pre_alloc_hook+0x59/0x310 [ 438.617423][T12461] kmem_cache_alloc_lru+0x4d/0x2e0 [ 438.622577][T12461] ? proc_alloc_inode+0x2a/0xb0 [ 438.627475][T12461] proc_alloc_inode+0x2a/0xb0 [ 438.632201][T12461] ? proc_invalidate_siblings_dcache+0x6c0/0x6c0 [ 438.638671][T12461] new_inode_pseudo+0x63/0x1d0 [ 438.643486][T12461] new_inode+0x22/0x1b0 [ 438.646849][T12466] netlink: 196 bytes leftover after parsing attributes in process `syz.0.2189'. [ 438.647671][T12461] proc_pid_make_inode+0x24/0x190 [ 438.647740][T12461] proc_pident_instantiate+0x6d/0x2b0 [ 438.647772][T12461] proc_pident_lookup+0x1b3/0x290 [ 438.647806][T12461] __lookup_slow+0x281/0x3b0 [ 438.647841][T12461] ? lookup_one_len+0x2c0/0x2c0 [ 438.681853][T12461] ? try_to_unlazy+0x34c/0x5a0 [ 438.686674][T12461] ? down_read+0x1ac/0x2e0 [ 438.691143][T12461] lookup_slow+0x53/0x70 [ 438.695441][T12461] link_path_walk+0x970/0xe00 [ 438.700180][T12461] ? handle_lookup_down+0x130/0x130 [ 438.705432][T12461] path_openat+0x283/0x3190 [ 438.710019][T12461] ? __kasan_slab_alloc+0x6c/0x80 [ 438.715094][T12461] ? __x64_sys_openat+0x139/0x160 [ 438.720161][T12461] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 438.726284][T12461] ? verify_lock_unused+0x140/0x140 [ 438.731567][T12461] ? do_filp_open+0x3d0/0x3d0 [ 438.736302][T12461] ? __virt_addr_valid+0x18c/0x540 [ 438.741485][T12461] do_filp_open+0x1c5/0x3d0 [ 438.746046][T12461] ? vfs_tmpfile+0x490/0x490 [ 438.750703][T12461] ? noop_direct_IO+0x20/0x20 [ 438.755449][T12461] ? _raw_spin_unlock+0x28/0x40 [ 438.760368][T12461] ? alloc_fd+0x58f/0x630 [ 438.764754][T12461] do_sys_openat2+0x12c/0x1c0 [ 438.769475][T12461] ? perf_trace_preemptirq_template+0x281/0x340 [ 438.775767][T12461] ? do_sys_open+0xe0/0xe0 [ 438.780248][T12461] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 438.786287][T12461] ? lock_chain_count+0x20/0x20 [ 438.791196][T12461] __x64_sys_openat+0x139/0x160 [ 438.796114][T12461] do_syscall_64+0x55/0xb0 [ 438.800576][T12461] ? clear_bhb_loop+0x40/0x90 [ 438.805296][T12461] ? clear_bhb_loop+0x40/0x90 [ 438.810024][T12461] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 438.815973][T12461] RIP: 0033:0x7f400e18d550 [ 438.820425][T12461] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 438.840160][T12461] RSP: 002b:00007f400f070f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 438.848630][T12461] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f400e18d550 [ 438.856652][T12461] RDX: 0000000000000002 RSI: 00007f400f070fa0 RDI: 00000000ffffff9c [ 438.864664][T12461] RBP: 00007f400f070fa0 R08: 0000000000000000 R09: 0000000000000000 [ 438.872679][T12461] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 438.880690][T12461] R13: 00007f400e3c6038 R14: 00007f400e3c5fa0 R15: 00007ffc8c6ae198 [ 438.888725][T12461] [ 439.209212][T12472] validate_nla: 22 callbacks suppressed [ 439.209230][T12472] netlink: 'syz.1.2190': attribute type 10 has an invalid length. [ 439.294723][T12472] .`: (slave netdevsim0): Enslaving as an active interface with an up link [ 439.443746][T12475] netlink: 'syz.2.2192': attribute type 29 has an invalid length. [ 439.482825][T12475] netlink: 'syz.2.2192': attribute type 29 has an invalid length. [ 439.524065][T12477] netlink: 'syz.2.2192': attribute type 29 has an invalid length. [ 439.592596][T12475] netlink: 'syz.2.2192': attribute type 29 has an invalid length. [ 439.644719][T12477] netlink: 'syz.2.2192': attribute type 29 has an invalid length. [ 439.871773][T12487] netlink: 'syz.4.2197': attribute type 10 has an invalid length. [ 439.919287][T12487] batman_adv: batadv0: Adding interface: team0 [ 439.927717][T12487] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 439.957237][T12487] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 439.987027][T12493] netlink: 'syz.4.2197': attribute type 10 has an invalid length. [ 440.004275][T12493] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2197'. [ 440.024669][T12493] team0: entered promiscuous mode [ 440.030094][T12493] team_slave_0: entered promiscuous mode [ 440.036374][T12493] team_slave_1: entered promiscuous mode [ 440.044389][T12493] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 440.054698][T12493] 8021q: adding VLAN 0 to HW filter on device team0 [ 440.081670][T12493] batman_adv: batadv0: Interface activated: team0 [ 440.106354][T12493] batman_adv: batadv0: Interface deactivated: team0 [ 440.126700][T12493] batman_adv: batadv0: Removing interface: team0 [ 440.155941][T12493] bridge0: port 3(team0) entered blocking state [ 440.167860][T12493] bridge0: port 3(team0) entered disabled state [ 440.174897][T12493] team0: entered allmulticast mode [ 440.185992][T12493] team_slave_0: entered allmulticast mode [ 440.193504][T12493] team_slave_1: entered allmulticast mode [ 440.199771][T12493] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 440.380464][T12504] netlink: 196 bytes leftover after parsing attributes in process `syz.4.2202'. [ 440.387190][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.396263][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.331152][T12518] netlink: 'syz.2.2207': attribute type 29 has an invalid length. [ 441.351324][T12518] netlink: 'syz.2.2207': attribute type 29 has an invalid length. [ 441.571149][T12526] netlink: 56863 bytes leftover after parsing attributes in process `syz.2.2211'. [ 441.914614][T12541] netlink: 196 bytes leftover after parsing attributes in process `syz.1.2217'. [ 443.290717][T12578] netlink: 196 bytes leftover after parsing attributes in process `syz.1.2231'. [ 443.825375][T12590] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2235'. [ 444.353409][T12605] validate_nla: 13 callbacks suppressed [ 444.353428][T12605] netlink: 'syz.1.2239': attribute type 28 has an invalid length. [ 444.375701][T12605] netlink: 'syz.1.2239': attribute type 4 has an invalid length. [ 444.383752][T12605] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2239'. [ 444.449080][T12609] netlink: 'syz.4.2241': attribute type 29 has an invalid length. [ 444.466353][T12609] netlink: 'syz.4.2241': attribute type 29 has an invalid length. [ 444.484122][T12609] netlink: 'syz.4.2241': attribute type 29 has an invalid length. [ 444.504119][T12609] netlink: 'syz.4.2241': attribute type 29 has an invalid length. [ 444.528664][T12609] netlink: 'syz.4.2241': attribute type 29 has an invalid length. [ 444.842946][T12624] netlink: 196 bytes leftover after parsing attributes in process `syz.2.2247'. [ 445.349070][T12640] netlink: 'syz.1.2252': attribute type 29 has an invalid length. [ 445.375385][T12640] netlink: 'syz.1.2252': attribute type 29 has an invalid length. [ 445.397342][T12641] netlink: 'syz.1.2252': attribute type 29 has an invalid length. [ 445.562429][T12643] FAULT_INJECTION: forcing a failure. [ 445.562429][T12643] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 445.581505][T12643] CPU: 1 PID: 12643 Comm: syz.1.2253 Not tainted syzkaller #0 [ 445.589002][T12643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 445.599069][T12643] Call Trace: [ 445.602395][T12643] [ 445.605335][T12643] dump_stack_lvl+0x16c/0x230 [ 445.610029][T12643] ? lockdep_hardirqs_on+0x98/0x150 [ 445.615263][T12643] ? show_regs_print_info+0x20/0x20 [ 445.620495][T12643] ? dump_stack+0x9/0x20 [ 445.624770][T12643] ? dump_stack_lvl+0xc/0x230 [ 445.629464][T12643] should_fail_ex+0x39d/0x4d0 [ 445.634177][T12643] _copy_from_user+0x2f/0xe0 [ 445.638805][T12643] dev_ethtool+0xc5/0x1720 [ 445.643245][T12643] ? lockdep_hardirqs_on+0x98/0x150 [ 445.648460][T12643] ? ethtool_get_module_eeprom_call+0x170/0x170 [ 445.654713][T12643] ? __lock_acquire+0x7c80/0x7c80 [ 445.659757][T12643] ? dev_load+0x21/0x1f0 [ 445.664027][T12643] dev_ioctl+0x4ca/0x1170 [ 445.668400][T12643] sock_do_ioctl+0x226/0x2f0 [ 445.673148][T12643] ? sock_show_fdinfo+0xb0/0xb0 [ 445.678078][T12643] sock_ioctl+0x623/0x7a0 [ 445.682451][T12643] ? sock_poll+0x3d0/0x3d0 [ 445.686929][T12643] ? bpf_lsm_file_ioctl+0x9/0x10 [ 445.691904][T12643] ? security_file_ioctl+0x80/0xa0 [ 445.697058][T12643] ? sock_poll+0x3d0/0x3d0 [ 445.701523][T12643] __se_sys_ioctl+0xfd/0x170 [ 445.706156][T12643] do_syscall_64+0x55/0xb0 [ 445.710614][T12643] ? clear_bhb_loop+0x40/0x90 [ 445.715328][T12643] ? clear_bhb_loop+0x40/0x90 [ 445.720056][T12643] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 445.726005][T12643] RIP: 0033:0x7f400e18ebe9 [ 445.730455][T12643] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 445.750112][T12643] RSP: 002b:00007f400f071038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 445.758573][T12643] RAX: ffffffffffffffda RBX: 00007f400e3c5fa0 RCX: 00007f400e18ebe9 [ 445.766590][T12643] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000017 [ 445.774597][T12643] RBP: 00007f400f071090 R08: 0000000000000000 R09: 0000000000000000 [ 445.782614][T12643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 445.790620][T12643] R13: 00007f400e3c6038 R14: 00007f400e3c5fa0 R15: 00007ffc8c6ae198 [ 445.798643][T12643] [ 446.167014][T12660] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2260'. [ 446.221764][T12663] netlink: 196 bytes leftover after parsing attributes in process `syz.0.2262'. [ 446.466577][T12673] FAULT_INJECTION: forcing a failure. [ 446.466577][T12673] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 446.481157][T12673] CPU: 0 PID: 12673 Comm: syz.4.2265 Not tainted syzkaller #0 [ 446.488679][T12673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 446.498783][T12673] Call Trace: [ 446.502103][T12673] [ 446.505067][T12673] dump_stack_lvl+0x16c/0x230 [ 446.509803][T12673] ? show_regs_print_info+0x20/0x20 [ 446.515048][T12673] ? load_image+0x3b0/0x3b0 [ 446.519603][T12673] ? __might_fault+0xaa/0x120 [ 446.524319][T12673] ? __lock_acquire+0x7c80/0x7c80 [ 446.529390][T12673] should_fail_ex+0x39d/0x4d0 [ 446.534306][T12673] _copy_from_user+0x2f/0xe0 [ 446.538941][T12673] __sys_bpf+0x1e9/0x800 [ 446.543225][T12673] ? bpf_link_show_fdinfo+0x350/0x350 [ 446.548654][T12673] ? lock_chain_count+0x20/0x20 [ 446.553551][T12673] __x64_sys_bpf+0x7c/0x90 [ 446.558018][T12673] do_syscall_64+0x55/0xb0 [ 446.562491][T12673] ? clear_bhb_loop+0x40/0x90 [ 446.567256][T12673] ? clear_bhb_loop+0x40/0x90 [ 446.571973][T12673] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 446.577922][T12673] RIP: 0033:0x7fefbad8ebe9 [ 446.582377][T12673] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 446.602026][T12673] RSP: 002b:00007fefbbbb1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 446.610491][T12673] RAX: ffffffffffffffda RBX: 00007fefbafc5fa0 RCX: 00007fefbad8ebe9 [ 446.618489][T12673] RDX: 0000000000000028 RSI: 00002000000000c0 RDI: 000000000000000a [ 446.626476][T12673] RBP: 00007fefbbbb1090 R08: 0000000000000000 R09: 0000000000000000 [ 446.634469][T12673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 446.642465][T12673] R13: 00007fefbafc6038 R14: 00007fefbafc5fa0 R15: 00007ffd891a7f48 [ 446.650472][T12673] [ 447.205590][T12690] FAULT_INJECTION: forcing a failure. [ 447.205590][T12690] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 447.225241][T12690] CPU: 0 PID: 12690 Comm: syz.0.2273 Not tainted syzkaller #0 [ 447.232770][T12690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 447.242868][T12690] Call Trace: [ 447.246175][T12690] [ 447.249139][T12690] dump_stack_lvl+0x16c/0x230 [ 447.253862][T12690] ? show_regs_print_info+0x20/0x20 [ 447.259110][T12690] ? load_image+0x3b0/0x3b0 [ 447.263659][T12690] ? __might_fault+0xaa/0x120 [ 447.268383][T12690] ? __lock_acquire+0x7c80/0x7c80 [ 447.273457][T12690] should_fail_ex+0x39d/0x4d0 [ 447.278188][T12690] _copy_to_user+0x2f/0xa0 [ 447.282667][T12690] bpf_test_finish+0x19a/0x620 [ 447.287524][T12690] ? convert___skb_to_skb+0x590/0x590 [ 447.292950][T12690] ? convert_skb_to___skb+0x420/0x420 [ 447.298376][T12690] ? slab_build_skb+0x25f/0x3f0 [ 447.303274][T12690] bpf_prog_test_run_skb+0xc28/0x11c0 [ 447.308714][T12690] ? cpu_online+0x60/0x60 [ 447.313083][T12690] bpf_prog_test_run+0x321/0x390 [ 447.318060][T12690] __sys_bpf+0x440/0x800 [ 447.322341][T12690] ? bpf_link_show_fdinfo+0x350/0x350 [ 447.327773][T12690] ? lock_chain_count+0x20/0x20 [ 447.332684][T12690] __x64_sys_bpf+0x7c/0x90 [ 447.337142][T12690] do_syscall_64+0x55/0xb0 [ 447.341606][T12690] ? clear_bhb_loop+0x40/0x90 [ 447.346319][T12690] ? clear_bhb_loop+0x40/0x90 [ 447.351042][T12690] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 447.356993][T12690] RIP: 0033:0x7fdf4218ebe9 [ 447.361448][T12690] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 447.381101][T12690] RSP: 002b:00007fdf430d4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 447.389567][T12690] RAX: ffffffffffffffda RBX: 00007fdf423c5fa0 RCX: 00007fdf4218ebe9 [ 447.397591][T12690] RDX: 0000000000000048 RSI: 00002000000002c0 RDI: 000000000000000a [ 447.405611][T12690] RBP: 00007fdf430d4090 R08: 0000000000000000 R09: 0000000000000000 [ 447.413634][T12690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 447.421652][T12690] R13: 00007fdf423c6038 R14: 00007fdf423c5fa0 R15: 00007ffe8e404148 [ 447.429690][T12690] [ 447.935406][T12711] netlink: 196 bytes leftover after parsing attributes in process `syz.1.2281'. [ 448.025294][T12716] netlink: 201372 bytes leftover after parsing attributes in process `syz.4.2283'. [ 448.025429][T12715] netlink: 201372 bytes leftover after parsing attributes in process `syz.4.2283'. [ 448.436829][T12726] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2286'. [ 448.725813][T12734] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2290'. [ 449.308088][T12748] FAULT_INJECTION: forcing a failure. [ 449.308088][T12748] name failslab, interval 1, probability 0, space 0, times 0 [ 449.320846][T12748] CPU: 1 PID: 12748 Comm: syz.1.2295 Not tainted syzkaller #0 [ 449.328367][T12748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 449.338461][T12748] Call Trace: [ 449.341784][T12748] [ 449.344748][T12748] dump_stack_lvl+0x16c/0x230 [ 449.349473][T12748] ? show_regs_print_info+0x20/0x20 [ 449.354714][T12748] ? load_image+0x3b0/0x3b0 [ 449.359262][T12748] ? skb_network_protocol+0x509/0x760 [ 449.364686][T12748] should_fail_ex+0x39d/0x4d0 [ 449.369418][T12748] should_failslab+0x9/0x20 [ 449.373968][T12748] slab_pre_alloc_hook+0x59/0x310 [ 449.379055][T12748] kmem_cache_alloc+0x5a/0x2e0 [ 449.383877][T12748] ? skb_clone+0x1eb/0x370 [ 449.388441][T12748] skb_clone+0x1eb/0x370 [ 449.392736][T12748] ? dev_queue_xmit_nit+0x212/0xbb0 [ 449.397988][T12748] dev_queue_xmit_nit+0x24d/0xbb0 [ 449.403055][T12748] ? dev_queue_xmit_nit+0x2d/0xbb0 [ 449.408206][T12748] ? validate_xmit_skb+0x953/0xf50 [ 449.413373][T12748] dev_hard_start_xmit+0x148/0x740 [ 449.418546][T12748] __dev_queue_xmit+0x1a64/0x35a0 [ 449.423646][T12748] ? __dev_queue_xmit+0x245/0x35a0 [ 449.428815][T12748] ? netdev_core_pick_tx+0x340/0x340 [ 449.434147][T12748] ? __copy_skb_header+0xa7/0x550 [ 449.439220][T12748] ? __asan_memcpy+0x40/0x70 [ 449.443859][T12748] ? __skb_clone+0x63/0x790 [ 449.448419][T12748] ? __skb_clone+0x480/0x790 [ 449.453063][T12748] ? skb_clone+0x21f/0x370 [ 449.457533][T12748] __netlink_deliver_tap+0x5ab/0x830 [ 449.462889][T12748] ? netlink_deliver_tap+0x2e/0x1b0 [ 449.468145][T12748] netlink_deliver_tap+0x19c/0x1b0 [ 449.473311][T12748] netlink_unicast+0x72c/0x8d0 [ 449.478139][T12748] netlink_sendmsg+0x8c1/0xbe0 [ 449.482958][T12748] ? netlink_getsockopt+0x580/0x580 [ 449.488208][T12748] ? aa_sock_msg_perm+0x94/0x150 [ 449.493189][T12748] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 449.498516][T12748] ? security_socket_sendmsg+0x80/0xa0 [ 449.504020][T12748] ? netlink_getsockopt+0x580/0x580 [ 449.509259][T12748] ____sys_sendmsg+0x5bf/0x950 [ 449.514056][T12748] ? __asan_memset+0x22/0x40 [ 449.518666][T12748] ? __sys_sendmsg_sock+0x30/0x30 [ 449.523708][T12748] ? __import_iovec+0x5f2/0x860 [ 449.528596][T12748] ? import_iovec+0x73/0xa0 [ 449.533123][T12748] ___sys_sendmsg+0x220/0x290 [ 449.537824][T12748] ? __sys_sendmsg+0x270/0x270 [ 449.542640][T12748] ? __lock_acquire+0x7c80/0x7c80 [ 449.547699][T12748] __se_sys_sendmsg+0x1a5/0x270 [ 449.552573][T12748] ? perf_trace_preemptirq_template+0x281/0x340 [ 449.558846][T12748] ? __x64_sys_sendmsg+0x80/0x80 [ 449.563820][T12748] ? lockdep_hardirqs_on+0x98/0x150 [ 449.569048][T12748] do_syscall_64+0x55/0xb0 [ 449.573483][T12748] ? clear_bhb_loop+0x40/0x90 [ 449.578172][T12748] ? clear_bhb_loop+0x40/0x90 [ 449.582864][T12748] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 449.588782][T12748] RIP: 0033:0x7f400e18ebe9 [ 449.593213][T12748] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 449.612837][T12748] RSP: 002b:00007f400f050038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 449.621267][T12748] RAX: ffffffffffffffda RBX: 00007f400e3c6090 RCX: 00007f400e18ebe9 [ 449.629254][T12748] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 449.637239][T12748] RBP: 00007f400f050090 R08: 0000000000000000 R09: 0000000000000000 [ 449.645221][T12748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 449.653203][T12748] R13: 00007f400e3c6128 R14: 00007f400e3c6090 R15: 00007ffc8c6ae198 [ 449.661203][T12748] [ 450.102297][T12762] netlink: 196 bytes leftover after parsing attributes in process `syz.4.2300'. [ 450.215589][T12766] validate_nla: 24 callbacks suppressed [ 450.215653][T12766] netlink: 'syz.0.2302': attribute type 29 has an invalid length. [ 450.238701][T12766] netlink: 'syz.0.2302': attribute type 29 has an invalid length. [ 450.250522][T12770] netlink: 'syz.0.2302': attribute type 29 has an invalid length. [ 450.265455][T12766] netlink: 'syz.0.2302': attribute type 29 has an invalid length. [ 451.620590][T12799] netlink: 'syz.4.2314': attribute type 10 has an invalid length. [ 451.629273][T12799] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2314'. [ 451.643954][T12799] batadv0: entered promiscuous mode [ 451.694899][T12799] bridge0: port 4(batadv0) entered blocking state [ 451.711778][T12799] bridge0: port 4(batadv0) entered disabled state [ 451.733763][T12799] batadv0: entered allmulticast mode [ 451.912300][T12813] netlink: 196 bytes leftover after parsing attributes in process `syz.1.2319'. [ 451.968236][T12817] netlink: 'syz.0.2321': attribute type 11 has an invalid length. [ 451.976714][T12817] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2321'. [ 452.257420][ T3455] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 452.267214][ T3455] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 452.462659][T12833] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2323'. [ 453.298079][T12858] netlink: 196 bytes leftover after parsing attributes in process `syz.4.2333'. [ 453.347165][T12861] bond_slave_1: mtu less than device minimum [ 453.512245][T12866] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 453.536861][T12868] netlink: 'syz.0.2336': attribute type 33 has an invalid length. [ 453.589706][T12868] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2336'. [ 454.192587][T12877] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2340'. [ 454.231176][T12877] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 454.282583][T12877] openvswitch: netlink: Message has 1 unknown bytes. [ 454.370725][ T5800] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 454.381811][ T5800] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 454.390585][ T5800] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 454.403838][ T5800] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 454.412079][ T5800] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 454.420175][ T5800] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 454.586934][T12888] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 454.650650][ T5977] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.762032][ T5977] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.874562][ T5977] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.047646][ T5977] bond0: (slave netdevsim0): Releasing backup interface [ 455.066455][ T5977] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.104266][T12883] chnl_net:caif_netlink_parms(): no params data found [ 455.122174][T12904] netlink: 196 bytes leftover after parsing attributes in process `syz.1.2349'. [ 455.236210][T12883] bridge0: port 1(bridge_slave_0) entered blocking state [ 455.244210][T12883] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.252750][T12883] bridge_slave_0: entered allmulticast mode [ 455.262352][T12883] bridge_slave_0: entered promiscuous mode [ 455.275209][T12883] bridge0: port 2(bridge_slave_1) entered blocking state [ 455.283452][T12883] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.291342][T12883] bridge_slave_1: entered allmulticast mode [ 455.308045][T12883] bridge_slave_1: entered promiscuous mode [ 455.426420][T12883] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 455.511289][T12883] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 455.730685][T12883] team0: Port device team_slave_0 added [ 455.746345][T12883] team0: Port device team_slave_1 added [ 455.927611][T12883] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 455.950202][T12883] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 456.007468][T12883] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 456.095708][T12883] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 456.113213][T12883] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 456.171159][T12883] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 456.392550][T12883] hsr_slave_0: entered promiscuous mode [ 456.426276][T12883] hsr_slave_1: entered promiscuous mode [ 456.441239][T12883] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 456.459568][ T5800] Bluetooth: hci4: command tx timeout [ 456.459583][T12883] Cannot create hsr debugfs directory [ 456.908651][T12937] netlink: 196 bytes leftover after parsing attributes in process `syz.2.2360'. [ 457.394109][ T5977] hsr_slave_0: left promiscuous mode [ 457.416247][ T5977] hsr_slave_1: left promiscuous mode [ 457.437091][ T5977] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 457.457340][ T5977] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 457.479885][ T5977] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 457.487380][ T5977] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 457.515358][ T5977] veth1_macvtap: left allmulticast mode [ 457.521530][ T5977] veth1_macvtap: left promiscuous mode [ 457.527132][ T5977] veth0_macvtap: left promiscuous mode [ 457.533307][ T5977] veth1_vlan: left promiscuous mode [ 457.538691][ T5977] veth0_vlan: left promiscuous mode [ 458.169897][ T5977] team0 (unregistering): Port device team_slave_1 removed [ 458.217610][ T5977] team0 (unregistering): Port device C removed [ 458.274165][ T5977] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 458.334282][ T5977] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 458.543325][ T5800] Bluetooth: hci4: command tx timeout [ 458.817632][ T5977] bond0 (unregistering): Released all slaves [ 458.864167][T12943] netlink: 'syz.4.2361': attribute type 13 has an invalid length. [ 458.874779][T12943] netlink: 24859 bytes leftover after parsing attributes in process `syz.4.2361'. [ 458.887118][T12944] netlink: 'syz.4.2361': attribute type 13 has an invalid length. [ 458.895599][T12944] netlink: 24859 bytes leftover after parsing attributes in process `syz.4.2361'. [ 459.266204][T12883] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 459.312235][T12883] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 459.334525][T12883] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 459.390761][T12965] netlink: 196 bytes leftover after parsing attributes in process `syz.1.2370'. [ 459.391291][T12883] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 459.538518][T12883] 8021q: adding VLAN 0 to HW filter on device bond0 [ 459.575126][T12883] 8021q: adding VLAN 0 to HW filter on device team0 [ 459.600474][ T5977] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.607738][ T5977] bridge0: port 1(bridge_slave_0) entered forwarding state [ 459.643115][ T5977] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.650408][ T5977] bridge0: port 2(bridge_slave_1) entered forwarding state [ 460.125523][T12883] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 460.217981][T12883] veth0_vlan: entered promiscuous mode [ 460.232981][T12981] FAULT_INJECTION: forcing a failure. [ 460.232981][T12981] name failslab, interval 1, probability 0, space 0, times 0 [ 460.234510][T12883] veth1_vlan: entered promiscuous mode [ 460.245691][T12981] CPU: 0 PID: 12981 Comm: syz.4.2371 Not tainted syzkaller #0 [ 460.258647][T12981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 460.268756][T12981] Call Trace: [ 460.272083][T12981] [ 460.275048][T12981] dump_stack_lvl+0x16c/0x230 [ 460.279777][T12981] ? show_regs_print_info+0x20/0x20 [ 460.285042][T12981] ? load_image+0x3b0/0x3b0 [ 460.289605][T12981] ? __kmem_cache_alloc_node+0x13e/0x260 [ 460.295283][T12981] ? netdev_core_pick_tx+0x340/0x340 [ 460.300616][T12981] should_fail_ex+0x39d/0x4d0 [ 460.305345][T12981] should_failslab+0x9/0x20 [ 460.309894][T12981] slab_pre_alloc_hook+0x59/0x310 [ 460.314954][T12981] kmem_cache_alloc+0x5a/0x2e0 [ 460.319736][T12981] ? skb_clone+0x1eb/0x370 [ 460.324186][T12981] skb_clone+0x1eb/0x370 [ 460.328450][T12981] bpf_clone_redirect+0xad/0x3d0 [ 460.333411][T12981] bpf_prog_6893982b85ceadf7+0x5e/0x63 [ 460.338889][T12981] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 460.344887][T12981] ? lock_chain_count+0x20/0x20 [ 460.349765][T12981] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 460.355763][T12981] ? lockdep_softirqs_on+0x570/0x570 [ 460.361062][T12981] ? lock_chain_count+0x20/0x20 [ 460.365946][T12981] ? seqcount_lockdep_reader_access+0x176/0x1c0 [ 460.372212][T12981] ? __local_bh_disable_ip+0xf2/0x190 [ 460.377598][T12981] ? __cant_sleep+0x210/0x210 [ 460.382292][T12981] ? __local_bh_enable_ip+0x12e/0x1c0 [ 460.387678][T12981] ? _local_bh_enable+0xa0/0xa0 [ 460.392547][T12981] ? bpf_test_timer_continue+0x135/0x380 [ 460.398202][T12981] ? bpf_test_run+0x15c/0x810 [ 460.402899][T12981] bpf_test_run+0x2c7/0x810 [ 460.407437][T12981] ? bpf_test_run+0x15c/0x810 [ 460.412137][T12981] ? convert___skb_to_skb+0x590/0x590 [ 460.417541][T12981] ? eth_get_headlen+0x200/0x200 [ 460.422500][T12981] ? slab_build_skb+0x25f/0x3f0 [ 460.427490][T12981] ? convert___skb_to_skb+0x3d/0x590 [ 460.432819][T12981] bpf_prog_test_run_skb+0xa67/0x11c0 [ 460.438242][T12981] ? cpu_online+0x60/0x60 [ 460.442621][T12981] bpf_prog_test_run+0x321/0x390 [ 460.447592][T12981] __sys_bpf+0x440/0x800 [ 460.451867][T12981] ? bpf_link_show_fdinfo+0x350/0x350 [ 460.457282][T12981] ? lock_chain_count+0x20/0x20 [ 460.462191][T12981] __x64_sys_bpf+0x7c/0x90 [ 460.466633][T12981] do_syscall_64+0x55/0xb0 [ 460.471076][T12981] ? clear_bhb_loop+0x40/0x90 [ 460.475776][T12981] ? clear_bhb_loop+0x40/0x90 [ 460.480474][T12981] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 460.486391][T12981] RIP: 0033:0x7fefbad8ebe9 [ 460.490819][T12981] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 460.510436][T12981] RSP: 002b:00007fefbbbb1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 460.518876][T12981] RAX: ffffffffffffffda RBX: 00007fefbafc5fa0 RCX: 00007fefbad8ebe9 [ 460.526894][T12981] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 460.534903][T12981] RBP: 00007fefbbbb1090 R08: 0000000000000000 R09: 0000000000000000 [ 460.542913][T12981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 460.550897][T12981] R13: 00007fefbafc6038 R14: 00007fefbafc5fa0 R15: 00007ffd891a7f48 [ 460.558901][T12981] [ 460.575761][T12883] veth0_macvtap: entered promiscuous mode [ 460.598643][T12883] veth1_macvtap: entered promiscuous mode [ 460.628828][T12883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 460.640649][T12883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 460.659459][T12883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 460.668330][ T5800] Bluetooth: hci4: command tx timeout [ 460.675788][T12883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 460.699806][T12883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 460.715054][T12883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 460.728903][T12883] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 460.748836][T12985] tap0: tun_chr_ioctl cmd 1074025677 [ 460.767585][T12985] tap0: linktype set to 774 [ 460.795566][T12883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 460.821517][T12883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 460.833624][T12883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 460.844229][T12883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 460.854673][T12883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 460.865551][T12883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 460.878756][T12883] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 460.906814][T12883] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.933863][T12883] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.943304][T12883] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.952899][T12883] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.973069][T12985] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2373'. [ 461.077995][T12985] netlink: 'syz.1.2373': attribute type 1 has an invalid length. [ 461.103284][T12993] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2376'. [ 461.130326][ T5800] Bluetooth: hci1: ISO packet for unknown connection handle 3849 [ 461.170131][ T5958] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 461.193874][ T8488] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 461.194880][T12995] FAULT_INJECTION: forcing a failure. [ 461.194880][T12995] name failslab, interval 1, probability 0, space 0, times 0 [ 461.210983][ T5958] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 461.214465][T12995] CPU: 1 PID: 12995 Comm: syz.2.2377 Not tainted syzkaller #0 [ 461.222095][ T8488] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 461.229310][T12995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 461.246702][T12995] Call Trace: [ 461.249989][T12995] [ 461.252965][T12995] dump_stack_lvl+0x16c/0x230 [ 461.257658][T12995] ? show_regs_print_info+0x20/0x20 [ 461.262883][T12995] ? load_image+0x3b0/0x3b0 [ 461.267398][T12995] ? __kmem_cache_alloc_node+0x13e/0x260 [ 461.273054][T12995] ? netdev_core_pick_tx+0x340/0x340 [ 461.278361][T12995] should_fail_ex+0x39d/0x4d0 [ 461.283076][T12995] should_failslab+0x9/0x20 [ 461.287603][T12995] slab_pre_alloc_hook+0x59/0x310 [ 461.292651][T12995] kmem_cache_alloc+0x5a/0x2e0 [ 461.297436][T12995] ? skb_clone+0x1eb/0x370 [ 461.301893][T12995] skb_clone+0x1eb/0x370 [ 461.306162][T12995] bpf_clone_redirect+0xad/0x3d0 [ 461.311123][T12995] bpf_prog_208b094576c80b22+0x5e/0x63 [ 461.316591][T12995] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 461.322589][T12995] ? lock_chain_count+0x20/0x20 [ 461.327456][T12995] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 461.333451][T12995] ? lockdep_softirqs_on+0x570/0x570 [ 461.338745][T12995] ? lock_chain_count+0x20/0x20 [ 461.343605][T12995] ? seqcount_lockdep_reader_access+0x176/0x1c0 [ 461.349871][T12995] ? __local_bh_disable_ip+0xf2/0x190 [ 461.355257][T12995] ? __cant_sleep+0x210/0x210 [ 461.359949][T12995] ? __local_bh_enable_ip+0x12e/0x1c0 [ 461.365337][T12995] ? _local_bh_enable+0xa0/0xa0 [ 461.370201][T12995] ? bpf_test_timer_continue+0x135/0x380 [ 461.375861][T12995] ? bpf_test_run+0x15c/0x810 [ 461.380563][T12995] bpf_test_run+0x2c7/0x810 [ 461.385098][T12995] ? bpf_test_run+0x15c/0x810 [ 461.389799][T12995] ? convert___skb_to_skb+0x590/0x590 [ 461.395214][T12995] ? eth_get_headlen+0x200/0x200 [ 461.400178][T12995] ? slab_build_skb+0x25f/0x3f0 [ 461.405049][T12995] ? convert___skb_to_skb+0x3d/0x590 [ 461.410361][T12995] bpf_prog_test_run_skb+0xa67/0x11c0 [ 461.415784][T12995] ? cpu_online+0x60/0x60 [ 461.420135][T12995] bpf_prog_test_run+0x321/0x390 [ 461.425085][T12995] __sys_bpf+0x440/0x800 [ 461.429342][T12995] ? bpf_link_show_fdinfo+0x350/0x350 [ 461.434743][T12995] ? lock_chain_count+0x20/0x20 [ 461.439613][T12995] __x64_sys_bpf+0x7c/0x90 [ 461.444041][T12995] do_syscall_64+0x55/0xb0 [ 461.448479][T12995] ? clear_bhb_loop+0x40/0x90 [ 461.453188][T12995] ? clear_bhb_loop+0x40/0x90 [ 461.457875][T12995] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 461.463800][T12995] RIP: 0033:0x7f65e878ebe9 [ 461.468249][T12995] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 461.487893][T12995] RSP: 002b:00007f65e957c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 461.496328][T12995] RAX: ffffffffffffffda RBX: 00007f65e89c5fa0 RCX: 00007f65e878ebe9 [ 461.504315][T12995] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 000000000000000a [ 461.512294][T12995] RBP: 00007f65e957c090 R08: 0000000000000000 R09: 0000000000000000 [ 461.520276][T12995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 461.528261][T12995] R13: 00007f65e89c6038 R14: 00007f65e89c5fa0 R15: 00007ffc7b92dfd8 [ 461.536318][T12995] [ 461.754550][T13003] netlink: 196 bytes leftover after parsing attributes in process `syz.1.2380'. [ 462.707826][ T5800] Bluetooth: hci4: command tx timeout [ 462.790199][T13021] mac80211_hwsim hwsim17 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 463.083019][T13030] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2390'. [ 463.352575][T13038] netlink: 196 bytes leftover after parsing attributes in process `syz.1.2395'. [ 463.447215][ T5788] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 463.461159][ T5788] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 463.470174][ T5788] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 463.480473][ T5788] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 463.488844][ T5788] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 463.508804][ T5788] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 463.548058][ T5958] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.677145][ T5958] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.783427][ T5958] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.898356][ T5958] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.364367][T13041] chnl_net:caif_netlink_parms(): no params data found [ 464.463320][T13056] netlink: 'syz.0.2398': attribute type 2 has an invalid length. [ 464.477052][T13056] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2398'. [ 464.657040][T13064] netlink: 203516 bytes leftover after parsing attributes in process `syz.4.2401'. [ 464.683852][T13064] netlink: zone id is out of range [ 464.692910][T13064] netlink: del zone limit has 8 unknown bytes [ 465.199759][ T5941] wlan1: Trigger new scan to find an IBSS to join [ 465.309001][T13041] bridge0: port 1(bridge_slave_0) entered blocking state [ 465.317682][T13041] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.330736][T13074] netlink: 196 bytes leftover after parsing attributes in process `syz.4.2404'. [ 465.344691][T13041] bridge_slave_0: entered allmulticast mode [ 465.358964][T13041] bridge_slave_0: entered promiscuous mode [ 465.401740][T13041] bridge0: port 2(bridge_slave_1) entered blocking state [ 465.409034][T13041] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.433787][T13041] bridge_slave_1: entered allmulticast mode [ 465.446612][T13041] bridge_slave_1: entered promiscuous mode [ 465.580590][ T5788] Bluetooth: hci2: command tx timeout [ 465.599672][T13041] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 465.725760][T13041] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 465.924241][T13041] team0: Port device team_slave_0 added [ 466.010225][T13041] team0: Port device team_slave_1 added [ 466.253172][T13041] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 466.267870][T13041] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 466.312825][T13041] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 466.443437][T13041] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 466.456299][T13041] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 466.507614][T13041] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 466.546940][T13092] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2409'. [ 466.745772][T13041] hsr_slave_0: entered promiscuous mode [ 466.758311][T13041] hsr_slave_1: entered promiscuous mode [ 466.766035][T13041] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 466.777052][T13041] Cannot create hsr debugfs directory [ 466.789618][T13097] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2411'. [ 466.815576][ T5958] hsr_slave_0: left promiscuous mode [ 466.829087][ T5958] hsr_slave_1: left promiscuous mode [ 466.835550][ T5958] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 466.848839][ T5958] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 466.861021][ T5958] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 466.868609][ T5958] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 466.935722][ T5958] veth1_macvtap: left promiscuous mode [ 466.947813][ T5958] veth0_macvtap: left promiscuous mode [ 466.958406][ T5958] veth1_vlan: left promiscuous mode [ 466.971154][ T5958] veth0_vlan: left promiscuous mode [ 467.251779][ T5958] geneve1 (unregistering): left promiscuous mode [ 467.297902][ T5958] team0 (unregistering): Port device geneve1 removed [ 467.671178][ T5788] Bluetooth: hci2: command tx timeout [ 468.196779][ T5958] team_slave_1 (unregistering): left promiscuous mode [ 468.215933][ T5958] team0 (unregistering): Port device team_slave_1 removed [ 468.296517][ T5958] C (unregistering): left promiscuous mode [ 468.313203][ T5958] team0 (unregistering): Port device C removed [ 468.396270][ T5958] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 468.476404][ T5958] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 468.694109][ T5958] dummy0 (unregistering): left promiscuous mode [ 468.704210][ T5958] team0 (unregistering): Port device dummy0 removed [ 468.941789][ T5958] .` (unregistering): Released all slaves [ 469.143927][T13114] netlink: 196 bytes leftover after parsing attributes in process `syz.1.2415'. [ 469.260862][ T3455] wlan1: Trigger new scan to find an IBSS to join [ 469.740287][ T5788] Bluetooth: hci2: command tx timeout [ 469.917778][T13041] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 469.937385][T13041] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 469.950167][T13041] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 469.978259][T13041] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 470.208893][T13041] 8021q: adding VLAN 0 to HW filter on device bond0 [ 470.265195][T13041] 8021q: adding VLAN 0 to HW filter on device team0 [ 470.288039][ T3455] bridge0: port 1(bridge_slave_0) entered blocking state [ 470.295307][ T3455] bridge0: port 1(bridge_slave_0) entered forwarding state [ 470.351912][ T3455] bridge0: port 2(bridge_slave_1) entered blocking state [ 470.359133][ T3455] bridge0: port 2(bridge_slave_1) entered forwarding state [ 470.747874][T13148] netlink: 196 bytes leftover after parsing attributes in process `syz.0.2425'. [ 470.765747][T13041] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 470.820960][T13041] veth0_vlan: entered promiscuous mode [ 470.836368][T13041] veth1_vlan: entered promiscuous mode [ 470.867924][T13041] veth0_macvtap: entered promiscuous mode [ 470.878379][T13041] veth1_macvtap: entered promiscuous mode [ 470.906664][T13041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 470.918256][T13041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.931607][T13041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 470.942998][T13041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.953227][T13041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 470.982318][T13041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.062452][T13041] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 471.080492][T13041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 471.094812][T13041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.132239][T13041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 471.154458][T13041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.177818][T13041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 471.192802][T13041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.205716][T13041] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 471.226418][T13041] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.235674][T13041] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.247372][T13041] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.256789][T13041] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.268768][ T5958] wlan1: Creating new IBSS network, BSSID 5e:fa:b1:08:68:c7 [ 471.353497][ T8488] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 471.368470][ T8488] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 471.435449][ T5958] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 471.452729][ T5958] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 471.566170][T13161] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2385'. [ 471.587260][T13161] bond_slave_0: entered promiscuous mode [ 471.593125][T13161] bond_slave_1: entered promiscuous mode [ 471.821141][ T5788] Bluetooth: hci2: command tx timeout [ 472.495777][T13189] netlink: 196 bytes leftover after parsing attributes in process `syz.4.2437'. [ 473.176049][T13195] netlink: 'syz.2.2438': attribute type 2 has an invalid length. [ 473.185892][T13195] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2438'. [ 473.496514][T13201] netlink: 196 bytes leftover after parsing attributes in process `syz.4.2439'. [ 474.336737][T13215] mac80211_hwsim hwsim19 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 474.527789][T13221] netlink: 196 bytes leftover after parsing attributes in process `syz.2.2448'. [ 475.186581][ T33] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.223967][ T5800] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 475.233170][ T5800] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 475.243195][ T5800] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 475.252839][ T5800] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 475.268062][ T5800] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 475.277126][ T5800] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 475.319223][ T33] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.428740][ T33] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.475481][T13232] netlink: 'syz.4.2451': attribute type 2 has an invalid length. [ 475.487115][T13232] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2451'. [ 475.526923][ T33] .`: (slave netdevsim0): Releasing backup interface [ 475.536272][ T33] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.953809][T13226] chnl_net:caif_netlink_parms(): no params data found [ 476.027724][T13247] netlink: 196 bytes leftover after parsing attributes in process `syz.4.2456'. [ 476.202708][T13226] bridge0: port 1(bridge_slave_0) entered blocking state [ 476.216203][T13226] bridge0: port 1(bridge_slave_0) entered disabled state [ 476.225237][T13226] bridge_slave_0: entered allmulticast mode [ 476.233514][T13226] bridge_slave_0: entered promiscuous mode [ 476.370225][T13226] bridge0: port 2(bridge_slave_1) entered blocking state [ 476.405361][T13226] bridge0: port 2(bridge_slave_1) entered disabled state [ 476.434570][T13226] bridge_slave_1: entered allmulticast mode [ 476.463691][T13226] bridge_slave_1: entered promiscuous mode [ 476.662910][T13226] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 476.676232][T13226] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 476.754718][T13226] team0: Port device team_slave_0 added [ 476.766123][T13226] team0: Port device team_slave_1 added [ 476.847006][T13226] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 476.855825][T13226] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 476.897885][T13226] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 476.955659][T13226] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 476.962944][T13226] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 476.989117][T13226] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 477.059145][T13226] hsr_slave_0: entered promiscuous mode [ 477.067228][T13226] hsr_slave_1: entered promiscuous mode [ 477.074115][T13226] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 477.084775][T13226] Cannot create hsr debugfs directory [ 477.245389][ T33] [ 477.247863][ T33] ====================================================== [ 477.254894][ T33] WARNING: possible circular locking dependency detected [ 477.261947][ T33] syzkaller #0 Not tainted [ 477.266359][ T33] ------------------------------------------------------ [ 477.273372][ T33] kworker/u4:2/33 is trying to acquire lock: [ 477.279355][ T33] ffff88801d360d00 (team->team_lock_key#2){+.+.}-{3:3}, at: team_del_slave+0x32/0x1c0 [ 477.288959][ T33] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 477.288959][ T33] but task is already holding lock: [ 477.296319][ T33] ffff88805e7e0768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x292/0x680 [ 477.306699][ T33] [ 477.306699][ T33] which lock already depends on the new lock. [ 477.306699][ T33] [ 477.317136][ T33] [ 477.317136][ T33] the existing dependency chain (in reverse order) is: [ 477.326181][ T33] [ 477.326181][ T33] -> #1 (&rdev->wiphy.mtx){+.+.}-{3:3}: [ 477.333965][ T33] __mutex_lock+0x129/0xcc0 [ 477.339031][ T33] ieee80211_open+0x144/0x200 [ 477.344270][ T33] __dev_open+0x2bc/0x430 [ 477.349164][ T33] dev_open+0xab/0x170 [ 477.353793][ T33] team_add_slave+0xae7/0x2660 [ 477.359106][ T33] do_setlink+0xe14/0x3fb0 [ 477.364077][ T33] rtnl_newlink+0x175b/0x2020 [ 477.369305][ T33] rtnetlink_rcv_msg+0x7c7/0xf10 [ 477.374804][ T33] netlink_rcv_skb+0x216/0x480 [ 477.380137][ T33] netlink_unicast+0x751/0x8d0 [ 477.385446][ T33] netlink_sendmsg+0x8c1/0xbe0 [ 477.390759][ T33] ____sys_sendmsg+0x5bf/0x950 [ 477.396079][ T33] ___sys_sendmsg+0x220/0x290 [ 477.401315][ T33] __se_sys_sendmsg+0x1a5/0x270 [ 477.406728][ T33] do_syscall_64+0x55/0xb0 [ 477.411700][ T33] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 477.418155][ T33] [ 477.418155][ T33] -> #0 (team->team_lock_key#2){+.+.}-{3:3}: [ 477.426373][ T33] __lock_acquire+0x2ddb/0x7c80 [ 477.431781][ T33] lock_acquire+0x197/0x410 [ 477.436838][ T33] __mutex_lock+0x129/0xcc0 [ 477.441905][ T33] team_del_slave+0x32/0x1c0 [ 477.447036][ T33] team_device_event+0x28d/0xa20 [ 477.452518][ T33] notifier_call_chain+0x197/0x390 [ 477.458175][ T33] unregister_netdevice_many_notify+0xf36/0x1810 [ 477.465054][ T33] unregister_netdevice_queue+0x324/0x360 [ 477.471329][ T33] _cfg80211_unregister_wdev+0x16b/0x580 [ 477.477515][ T33] ieee80211_remove_interfaces+0x496/0x680 [ 477.483878][ T33] ieee80211_unregister_hw+0x5d/0x2a0 [ 477.489798][ T33] mac80211_hwsim_del_radio+0x274/0x450 [ 477.495902][ T33] hwsim_exit_net+0x585/0x640 [ 477.501131][ T33] cleanup_net+0x6f4/0xb90 [ 477.506088][ T33] process_scheduled_works+0xa45/0x15b0 [ 477.512179][ T33] worker_thread+0xa55/0xfc0 [ 477.517318][ T33] kthread+0x2fa/0x390 [ 477.521931][ T33] ret_from_fork+0x48/0x80 [ 477.526908][ T33] ret_from_fork_asm+0x11/0x20 [ 477.532229][ T33] [ 477.532229][ T33] other info that might help us debug this: [ 477.532229][ T33] [ 477.542478][ T33] Possible unsafe locking scenario: [ 477.542478][ T33] [ 477.549946][ T33] CPU0 CPU1 [ 477.555336][ T33] ---- ---- [ 477.560724][ T33] lock(&rdev->wiphy.mtx); [ 477.565256][ T33] lock(team->team_lock_key#2); [ 477.572756][ T33] lock(&rdev->wiphy.mtx); [ 477.579805][ T33] lock(team->team_lock_key#2); [ 477.584762][ T33] [ 477.584762][ T33] *** DEADLOCK *** [ 477.584762][ T33] [ 477.592906][ T33] 5 locks held by kworker/u4:2/33: [ 477.598026][ T33] #0: ffff888017873938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 477.608924][ T33] #1: ffffc90000a9fd00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 477.619470][ T33] #2: ffffffff8dfaf650 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x136/0xb90 [ 477.628904][ T33] #3: ffffffff8dfbc488 (rtnl_mutex){+.+.}-{3:3}, at: ieee80211_unregister_hw+0x55/0x2a0 [ 477.638756][ T33] #4: ffff88805e7e0768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x292/0x680 [ 477.649570][ T33] [ 477.649570][ T33] stack backtrace: [ 477.655458][ T33] CPU: 1 PID: 33 Comm: kworker/u4:2 Not tainted syzkaller #0 [ 477.662832][ T33] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 477.672899][ T33] Workqueue: netns cleanup_net [ 477.677692][ T33] Call Trace: [ 477.680981][ T33] [ 477.683924][ T33] dump_stack_lvl+0x16c/0x230 [ 477.688612][ T33] ? load_image+0x3b0/0x3b0 [ 477.693121][ T33] ? show_regs_print_info+0x20/0x20 [ 477.698332][ T33] ? print_circular_bug+0x12b/0x1a0 [ 477.703542][ T33] check_noncircular+0x2bd/0x3c0 [ 477.708498][ T33] ? print_deadlock_bug+0x5d0/0x5d0 [ 477.713707][ T33] ? lockdep_lock+0xe0/0x220 [ 477.718307][ T33] ? __lock_acquire+0x1334/0x7c80 [ 477.723343][ T33] ? _find_first_zero_bit+0xd3/0x100 [ 477.728648][ T33] __lock_acquire+0x2ddb/0x7c80 [ 477.733522][ T33] ? verify_lock_unused+0x140/0x140 [ 477.738731][ T33] ? verify_lock_unused+0x140/0x140 [ 477.743943][ T33] lock_acquire+0x197/0x410 [ 477.748453][ T33] ? team_del_slave+0x32/0x1c0 [ 477.753228][ T33] ? __might_sleep+0xe0/0xe0 [ 477.757829][ T33] ? read_lock_is_recursive+0x20/0x20 [ 477.763218][ T33] __mutex_lock+0x129/0xcc0 [ 477.767734][ T33] ? team_del_slave+0x32/0x1c0 [ 477.772506][ T33] ? __lock_acquire+0x7c80/0x7c80 [ 477.777540][ T33] ? rcu_is_watching+0x15/0xb0 [ 477.782316][ T33] ? trace_contention_end+0x39/0xe0 [ 477.787530][ T33] ? __mutex_lock+0x304/0xcc0 [ 477.792217][ T33] ? team_del_slave+0x32/0x1c0 [ 477.796986][ T33] ? mutex_lock_nested+0x20/0x20 [ 477.801935][ T33] ? bond_netdev_event+0xe1/0xef0 [ 477.806975][ T33] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 477.812623][ T33] ? bond_ipsec_offload_ok+0x410/0x410 [ 477.818101][ T33] team_del_slave+0x32/0x1c0 [ 477.822701][ T33] team_device_event+0x28d/0xa20 [ 477.827655][ T33] notifier_call_chain+0x197/0x390 [ 477.832786][ T33] unregister_netdevice_many_notify+0xf36/0x1810 [ 477.839140][ T33] ? lock_chain_count+0x20/0x20 [ 477.844007][ T33] ? unregister_netdevice_many+0x20/0x20 [ 477.849662][ T33] ? kernfs_remove_by_name_ns+0x117/0x150 [ 477.855398][ T33] ? __lock_acquire+0x7c80/0x7c80 [ 477.860440][ T33] unregister_netdevice_queue+0x324/0x360 [ 477.866177][ T33] ? list_netdevice+0x730/0x730 [ 477.871043][ T33] ? kernfs_remove_by_name_ns+0x117/0x150 [ 477.876782][ T33] _cfg80211_unregister_wdev+0x16b/0x580 [ 477.882446][ T33] ieee80211_remove_interfaces+0x496/0x680 [ 477.888274][ T33] ? ieee80211_do_stop+0x1db0/0x1db0 [ 477.893577][ T33] ? rcu_is_watching+0x15/0xb0 [ 477.898362][ T33] ieee80211_unregister_hw+0x5d/0x2a0 [ 477.903754][ T33] mac80211_hwsim_del_radio+0x274/0x450 [ 477.909318][ T33] ? rhashtable_remove_fast+0xbf0/0xbf0 [ 477.914885][ T33] hwsim_exit_net+0x585/0x640 [ 477.919580][ T33] ? hwsim_init_net+0x90/0x90 [ 477.924271][ T33] ? __ip_vs_dev_cleanup_batch+0x238/0x250 [ 477.930100][ T33] cleanup_net+0x6f4/0xb90 [ 477.934533][ T33] ? ops_free_list+0x3b0/0x3b0 [ 477.939312][ T33] ? _raw_spin_unlock_irq+0x23/0x50 [ 477.944528][ T33] ? process_scheduled_works+0x957/0x15b0 [ 477.950276][ T33] ? process_scheduled_works+0x957/0x15b0 [ 477.956024][ T33] process_scheduled_works+0xa45/0x15b0 [ 477.961616][ T33] ? assign_work+0x400/0x400 [ 477.966241][ T33] ? assign_work+0x39e/0x400 [ 477.970850][ T33] worker_thread+0xa55/0xfc0 [ 477.975467][ T33] kthread+0x2fa/0x390 [ 477.979548][ T33] ? pr_cont_work+0x560/0x560 [ 477.984239][ T33] ? kthread_blkcg+0xd0/0xd0 [ 477.988836][ T33] ret_from_fork+0x48/0x80 [ 477.993261][ T33] ? kthread_blkcg+0xd0/0xd0 [ 477.997856][ T33] ret_from_fork_asm+0x11/0x20 [ 478.002638][ T33] [ 478.010333][ T5800] Bluetooth: hci1: command tx timeout [ 478.081642][ T33] mac80211_hwsim hwsim9 wlan1 (unregistering): left promiscuous mode [ 478.206193][ T33] team0: Port device wlan1 removed [ 478.220210][ T5941] wlan1: Trigger new scan to find an IBSS to join [ 479.845846][ T33] hsr_slave_0: left promiscuous mode [ 479.851734][ T33] hsr_slave_1: left promiscuous mode [ 479.857523][ T33] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 479.865171][ T33] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 479.873461][ T33] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 479.881481][ T33] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 479.892486][ T33] veth1_macvtap: left promiscuous mode [ 479.898087][ T33] veth0_vlan: left promiscuous mode [ 480.126635][ T33] team_slave_1 (unregistering): left promiscuous mode [ 480.137182][ T33] team0 (unregistering): Port device team_slave_1 removed [ 480.153259][ T33] C (unregistering): left promiscuous mode [ 480.160613][ T33] team0 (unregistering): Port device C removed [ 480.190144][ T33] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 480.217497][ T33] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 480.527518][ T33] .` (unregistering): Released all slaves [ 481.259696][ T5977] wlan1: Trigger new scan to find an IBSS to join [ 482.149909][ T5941] wlan1: Creating new IBSS network, BSSID c2:42:ce:5e:84:5d [ 482.330917][ T5950] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.385086][ T5950] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.425874][ T5950] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.475385][ T5950] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.559121][ T5950] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.627634][ T5950] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.685400][ T5950] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.726000][ T5950] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.825904][ T5950] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.864763][ T5950] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.914463][ T5950] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.992176][ T5950] netdevsim netdevsim4 netdevsim0 (unregistering): left promiscuous mode [ 483.000890][ T5950] netdevsim netdevsim4 netdevsim0 (unregistering): left allmulticast mode [ 483.010551][ T5950] team0: Port device netdevsim0 removed [ 483.017323][ T5950] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.135893][ T5950] hsr_slave_0: left promiscuous mode [ 484.142104][ T5950] hsr_slave_1: left promiscuous mode [ 484.147922][ T5950] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 484.155767][ T5950] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 484.164713][ T5950] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 484.172311][ T5950] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 484.180538][ T5950] bridge_slave_1: left allmulticast mode [ 484.186203][ T5950] bridge_slave_1: left promiscuous mode [ 484.191946][ T5950] bridge0: port 2(bridge_slave_1) entered disabled state [ 484.201906][ T5950] bridge_slave_0: left allmulticast mode [ 484.207651][ T5950] bridge_slave_0: left promiscuous mode [ 484.213559][ T5950] bridge0: port 1(bridge_slave_0) entered disabled state [ 484.226780][ T5950] hsr_slave_0: left promiscuous mode [ 484.233166][ T5950] hsr_slave_1: left promiscuous mode [ 484.238951][ T5950] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 484.246693][ T5950] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 484.254360][ T5950] bridge_slave_1: left allmulticast mode [ 484.260052][ T5950] bridge_slave_1: left promiscuous mode [ 484.265727][ T5950] bridge0: port 2(bridge_slave_1) entered disabled state [ 484.275560][ T5950] bridge_slave_0: left allmulticast mode [ 484.281372][ T5950] bridge_slave_0: left promiscuous mode [ 484.287049][ T5950] bridge0: port 1(bridge_slave_0) entered disabled state [ 484.298909][ T5950] hsr_slave_0: left promiscuous mode [ 484.304919][ T5950] hsr_slave_1: left promiscuous mode [ 484.312020][ T5950] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 484.325061][ T5950] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 484.332962][ T5950] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 484.340558][ T5950] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 484.348281][ T5950] bridge_slave_1: left allmulticast mode [ 484.354168][ T5950] bridge_slave_1: left promiscuous mode [ 484.359947][ T5950] bridge0: port 2(bridge_slave_1) entered disabled state [ 484.368469][ T5950] bridge_slave_0: left allmulticast mode [ 484.374459][ T5950] bridge_slave_0: left promiscuous mode [ 484.380270][ T5950] bridge0: port 1(bridge_slave_0) entered disabled state [ 484.393110][ T5950] hsr_slave_0: left promiscuous mode [ 484.398835][ T5950] hsr_slave_1: left promiscuous mode [ 484.404796][ T5950] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 484.412329][ T5950] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 484.420522][ T5950] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 484.427924][ T5950] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 484.435726][ T5950] batadv0: left allmulticast mode [ 484.440947][ T5950] bridge0: port 4(batadv0) entered disabled state [ 484.448509][ T5950] team0: left allmulticast mode [ 484.453532][ T5950] team_slave_0: left allmulticast mode [ 484.459019][ T5950] team_slave_1: left allmulticast mode [ 484.464699][ T5950] bridge0: port 3(team0) entered disabled state [ 484.472286][ T5950] bridge_slave_1: left allmulticast mode [ 484.477933][ T5950] bridge_slave_1: left promiscuous mode [ 484.483688][ T5950] bridge0: port 2(bridge_slave_1) entered disabled state [ 484.492327][ T5950] bridge_slave_0: left allmulticast mode [ 484.497975][ T5950] bridge_slave_0: left promiscuous mode [ 484.503768][ T5950] bridge0: port 1(bridge_slave_0) entered disabled state [ 484.517762][ T5950] veth1_macvtap: left promiscuous mode [ 484.523467][ T5950] veth0_macvtap: left promiscuous mode [ 484.529046][ T5950] veth1_vlan: left promiscuous mode [ 484.534951][ T5950] veth0_vlan: left promiscuous mode [ 484.542871][ T5950] veth1_macvtap: left promiscuous mode [ 484.548518][ T5950] veth0_macvtap: left promiscuous mode [ 484.554290][ T5950] veth1_vlan: left promiscuous mode [ 484.559940][ T5950] veth0_vlan: left promiscuous mode [ 484.566307][ T5950] veth1_macvtap: left allmulticast mode [ 484.572749][ T5950] veth1_macvtap: left promiscuous mode [ 484.578284][ T5950] veth0_macvtap: left promiscuous mode [ 484.583971][ T5950] veth1_vlan: left promiscuous mode [ 484.589268][ T5950] veth0_vlan: left promiscuous mode [ 484.924492][ T5950] team0 (unregistering): Port device team_slave_1 removed [ 484.937596][ T5950] team0 (unregistering): Port device team_slave_0 removed [ 484.966531][ T5950] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 484.995037][ T5950] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 485.077680][ T5950] bond0 (unregistering): Released all slaves [ 485.223678][ T5950] team0 (unregistering): Port device team_slave_1 removed [ 485.235776][ T5950] team0 (unregistering): Port device team_slave_0 removed [ 485.248250][ T5950] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 485.265874][ T5950] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 485.327244][ T5950] bond0 (unregistering): Released all slaves [ 485.524777][ T5950] team0 (unregistering): Port device team_slave_1 removed [ 485.554278][ T5950] team0 (unregistering): Port device team_slave_0 removed [ 485.580194][ T5950] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 485.609865][ T5950] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 485.683220][ T5950] bond0 (unregistering): Released all slaves [ 485.879497][ T5950] team_slave_1 (unregistering): left promiscuous mode [ 485.886980][ T5950] team0 (unregistering): Port device team_slave_1 removed [ 485.917941][ T5950] team_slave_0 (unregistering): left promiscuous mode [ 485.925510][ T5950] team0 (unregistering): Port device team_slave_0 removed [ 485.953240][ T5950] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 485.967484][ T5950] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 486.027634][ T5950] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 486.158560][ T5950] bond0 (unregistering): Released all slaves