last executing test programs: 17.076995678s ago: executing program 4 (id=4038): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000440)={{r0}, &(0x7f0000000140), &(0x7f0000000400)='%pI4 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000006c0)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x11, &(0x7f00000008c0)=ANY=[@ANYBLOB="18000000800000000000000001000000850000000f000000b7080000000000007b8af8ff00000000b7080000161300007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xffb0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 16.8023537s ago: executing program 4 (id=4041): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) recvmsg$kcm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000002a80)=""/4109, 0x100d}, {&(0x7f0000003ac0)=""/4107, 0x100b}], 0x2}, 0x2160) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) socket$kcm(0x2, 0x5, 0x84) perf_event_open(0x0, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) socket$kcm(0x28, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400000000000}, 0x0, 0x0, 0x0, 0x0, 0xf60}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f0000000100)=r3, 0x4) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000540)="7c01", 0x2}], 0x1}, 0x408c4) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x52cc) 15.732466826s ago: executing program 4 (id=4051): socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x806, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000003c0)='cpuset.cpu_exclusive\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000040), 0x12) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff00000004000000", @ANYRES32=0x1, @ANYBLOB="f43bb1b4", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000280), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000580)=""/88, 0x58}], 0x1, &(0x7f0000000600)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x48}, 0x2160) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={r4, 0x58, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000540), 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000900)={r5, 0x20, &(0x7f00000008c0)={&(0x7f00000007c0)=""/132, 0x84, 0x0, &(0x7f0000000880)=""/53, 0x35}}, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x26, 0x12952250, 0x40, 0x8, 0x4004, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x5}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000009c0)={r5, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x4, 0x11, &(0x7f0000000300)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x328}, @jmp={0x5, 0x1, 0xd, 0x2, 0x1, 0x1, 0xffffffffffffffff}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2000}}], &(0x7f00000001c0)='GPL\x00', 0x5, 0x4e, &(0x7f0000000400)=""/78, 0x41100, 0x30, '\x00', r6, @fallback=0x1, r7, 0x8, &(0x7f0000000740)={0x2a, 0x4}, 0x8, 0x10, &(0x7f0000000780)={0x1, 0x10, 0x4, 0xfffffffd}, 0x10, r8, 0xffffffffffffffff, 0x6, &(0x7f0000000a00)=[r9, r10, r2, r0], &(0x7f0000000a40)=[{0x3, 0x2, 0xc, 0x7}, {0x0, 0x5, 0xf, 0x4}, {0x3, 0x3, 0xe}, {0x1, 0x3, 0x5, 0xa}, {0x5, 0x5, 0x6, 0x7}, {0x4, 0x5, 0xa, 0xa}], 0x10, 0x5}, 0x94) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) r11 = socket$kcm(0x2b, 0x1, 0x0) recvmsg(r11, &(0x7f0000002a40)={0x0, 0x0, 0x0}, 0x102) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r12 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_config_ext, 0x100080}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x44000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r13 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r13, 0x5, 0xcc, 0x0, &(0x7f0000000000)='<', 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) r14 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000e00)={&(0x7f0000000cc0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x50, 0x50, 0x9, [@typedef={0x1, 0x0, 0x0, 0x8, 0x5}, @int={0x2, 0x0, 0x0, 0x1, 0x0, 0x34, 0x0, 0x4a, 0x2}, @int={0xa, 0x0, 0x0, 0x1, 0x0, 0x28, 0x0, 0x58, 0x3}, @float={0x5, 0x0, 0x0, 0x10, 0x10}, @func={0x5, 0x0, 0x0, 0xc, 0x5}, @type_tag={0xd, 0x0, 0x0, 0x12, 0x5}]}, {0x0, [0x0, 0x2e, 0x0, 0x2e, 0x2e, 0x2e, 0x61]}}, &(0x7f0000000d40)=""/141, 0x71, 0x8d, 0x0, 0xa9f7, 0x10000, @value=r12}, 0x28) r15 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="1e000000fbffffff02000000ff01000080060400", @ANYRES32=r4, @ANYBLOB='\v\x00'/20, @ANYRES32=r6, @ANYRES32=r12, @ANYBLOB="03000000050e0000050000000400"/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000f80)={0x18, 0xc, &(0x7f0000000b80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @ldst={0x1, 0x2, 0x6, 0xb, 0xb, 0x80, 0x4}, @jmp={0x5, 0x0, 0xc, 0x3, 0x0, 0x10}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}]}, &(0x7f0000000c00)='GPL\x00', 0x6, 0x46, &(0x7f0000000c40)=""/70, 0x1e00, 0x20, '\x00', r6, 0x0, r14, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000e40)={0x2, 0x7, 0x0, 0x7fff}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000f00)=[r5, r4, r9, r10, r9, r4, r15, r4, 0xffffffffffffffff, r10], &(0x7f0000000f40)=[{0x4, 0x2, 0x8, 0xb}, {0x1, 0x1, 0xa}, {0x2, 0x2, 0x0, 0x1}, {0x3, 0x5, 0x2, 0xb}], 0x10, 0xeb}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000280)="2a48a51a114efe7b4252ad740901f7d19bfd30a8d7d52e15562bb7326e6b2c09a7310f25fd31109b0d1d322af2795c183bd2694fc0f91d5cf9f94b85f825ad46c7d287ad0075dbb8fbdd1ccd0c98eb6b1a5061da2fa2f2b2a2339df005669faba7fe1256a8bad53eb8d1dc1621acbf133e9095b77a4c2b654b96c8000a632a133ac96a5288b852cc", 0x88}, {&(0x7f0000000440)="97ff9846214e679bd5a5ac41a010fa247ff57ed1f6fcb1d331c7d768fe2231a197a82154d3a2dd1ddd73abbb532c044876216bf7283c61c858df9c9ec036ecea0fd19d3df339cf992d80909d0ab5d9682406ae0b6b327aedf70f37e71a650c404235590c511961787f80a6da776e003cca5835b341f22c768936bbf1531bcbca3a7e95d1de7eee45ff3def4cff68f20f6e4de7462c1a2cc8ae28535810f61ab3b820cf6f4376bb2153a41cd626fc0729584536ed5da984b51a35b037f09f844e09a4", 0xc2}, {&(0x7f0000000540)="f95e6be1219ec7a24649be3129de86c2a9798e7098fdeeb7a640eff2a9edc8e3e69e9eb7a6d8487a768ded0f77f0cb2d42ef8190a8c63d4deebe90d438dc1b2b237f31c983760dfab49a76af29f2e56161e5438cceff98e79ec7048e7d6c1b541890d2adde62c1ecd30424e90c8f3abd4c4f18652c2a0085dab336f92b4df2f842f631907df8c55ff1c9128d8bcb0b1bdfb70a3975c5824c112d97b87b62861d14f3efe9b99c04038b8691e33d1c59e60302eb55220440fd9733747c756c05008c237affe1cbf7bd34886ae3e70aa0489a0447347790645aaa985e0b2417", 0xde}, {&(0x7f00000016c0)="b93981a7bbf18b24d4152cc68a93ddb934de0eedd188f8b1fdd10e60ac7d9c4dcd1dc5bee356658a748852adeca0785a593f4610b0b523d6a7ab6b663d779f5d4beca3384edb0b4ce57e7860f67aeb68a60a540d9939dbdaecabf828177d91b142776c7a0c318a1edd71828864a26e70b567fbcffc820ea557ca5f955061eaf26ad914341b5e7cbae6e7a7cd13758c57f0ee396dd2bce5963ab494c6d62b87f4", 0xa0}, {&(0x7f0000000340)="7271eec0c7288c2eccf627c83110b0bd6ca3c3000cdedb52e35fbfbce9eae57fabfd3f80ea17", 0x26}], 0x5, &(0x7f0000000b80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @empty}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_retopts={{0x14, 0x0, 0x7, {[@noop]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7fffffff}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8936df6}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xff}}], 0x98}, 0x40) sendmsg$inet(r3, &(0x7f00000018c0)={&(0x7f0000001040)={0x2, 0x4e20, @private=0xa010102}, 0x10, &(0x7f0000001640)=[{&(0x7f0000001080)="c58e47f2967b2046cbd62fa580f3e1e1fbfa3aabcc365ad33891fa2d64f684dce0f7fcdb2a9e173e2fdd1d1e7f3415e317a7bbb32e1ba308da030c26d35233928e4174bb2f8068f3b9730a9707c30b7c4dbf9a391bc9c6324e11d728c60842d0cc572f7d24ff49be43e709a39efefae99ea16b67987a2171048a6acd5b7c1b256ef820a5ce4179f6cc76af7a21ca60b909490705a0c565bfafe1ae27e35a3ce56c4fa1db431edba19feee87e2e3b3c6f7cd2361017e26321f9be18db72a4d5ebbd2818170643590befe2c1e432bedc1553314f66bd39a8a66794e4", 0xdb}, {&(0x7f0000001440)="bf17d2275b665d16284eb9f0bf7fee31d8acc98ec2f1011633d21d160a62fe3a37ac99f24d1b7bc1918b9de33cfda73445fa59b409cd632f59e773d491dd5fa1a2acd42e01790c9af7547c1b171966bb9845a681a7d5b72c8fffbb4de9a4c50e9bcaf3b74f265ec1776c3c53a0d485b0a86b86bd8ac7b305a8e0b0bf17ef358930b1dfcce3be4ed2601d3d6f2aec2f9ceb2c58fe3fec74d1dcb3db1a5e9b014135759174dafec3a4823ee6003c6d664d731b1f4d19d44f661e5521d67d504dd1469b28281124", 0xc6}, {&(0x7f0000001180)="8a048eef3c15720dbaa45948bf7e1dd5a854a6df622ce3158d452216526a7a9ec5f5bc31af2789b288d74a91334923c431d1b9ce8f90465ce9a1afaef18812d89f37d6476c1ed8d45d8baefc0d27462826995863bf3ccea32aefd50ebf0e8833d07978f2cd71560a46f2d0a82999e4c0499cc5016f6143556280f9112c6009fa2d9b0ec0dc5306b204f9d206e7e0cbc067d9305b1dcae2404a4d61c7290691ac", 0xa0}, {&(0x7f0000001540)="9665de911a4b7407dd82ccc4a35524062568eea08b6dfaceaf2042d44c73b7df6497e3176b2bab1a78b0f4a9", 0x2c}, {&(0x7f0000001580)="379d8ee3b378cc2354da6a8a8c0f0b90f838ddcf16244d1d4c27081a66ad5c41f22710c099e0025c93084855b85ad7c92c6d8513594d945bc3622cee7d28ee9cdcb6b6455843da11d3d76cbfc8dc198f5d4a7e6126ccb32fb089afcc8ceca24f60898d2c43ae2180f8ef5f74c21a90a78134ef5af1ff6533a9b44eb7edd18881e5fd2ac75abe41ac2d893f2b03e8c81582d792fb783e20fd25e625a272a92d8e925365724742c86e0ae8ae6df3ef", 0xae}], 0x5, &(0x7f0000001780)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x80}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @local, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_retopts={{0x6c, 0x0, 0x7, {[@end, @end, @lsrr={0x83, 0x23, 0xc2, [@empty, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @local, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2]}, @cipso={0x86, 0x33, 0x3, [{0x6, 0xa, "eab0e1c7adc06805"}, {0x7, 0x3, "99"}, {0x3, 0x5, "ff4e9a"}, {0x5, 0x8, "51bf4b3e9b7b"}, {0x5, 0xb, "9c5e2809af4c544fca"}, {0x0, 0x6, "5ecd6e99"}, {0x1, 0x2}]}, @noop]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast1, @empty}}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@lsrr={0x83, 0x7, 0x6d, [@multicast1]}, @ra={0x94, 0x4, 0x1}]}}}], 0x120}, 0x1) 15.337215528s ago: executing program 4 (id=4053): r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0xffffffffffffffff, 0x9, 0x69153dcad58bbad0}, 0xc) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000001c0)={r0, &(0x7f0000000300)="2de8c5ca87fea5937fd12a612eaf4d19620145a10e112b9195fd81dc3e14349e5e5f8343d1da3fec1f50765a9bfae2115cbb0fe1cd487476cd5f80b8f1ecc6aa55633f444338a67fca5e44d208699ae3f6a8879e540d05950d128ce77bbaa45d908763825e30402d3319b05f2a5fdf77a8943870e5327641c624460590a45f0e10e7739f8953ba1550712dcf514f5b396ac49c164331aa5b0395093c72c6c5f5d1934909d65020b26104e5ccfbcb62038dbaadb85a020cf45c166d3423aa9d3ebdc76c3ced37094fea4ebe37e6f776", &(0x7f0000000680)=""/222}, 0x20) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_config_ext, 0x100080}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x80) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)=@o_path={&(0x7f0000000200)='./file0\x00', 0x0, 0x10, r1}, 0x18) r4 = openat$cgroup_int(r3, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[@ANYBLOB='-0'], 0x9) syz_clone(0x4001000, 0x0, 0x408, &(0x7f0000000140), 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xcc, 0x0, &(0x7f0000000000)='<', 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) 14.43913323s ago: executing program 4 (id=4062): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) recvmsg$kcm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000002a80)=""/4109, 0x100d}, {&(0x7f0000003ac0)=""/4107, 0x100b}], 0x2}, 0x2160) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) socket$kcm(0x2, 0x5, 0x84) perf_event_open(0x0, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) socket$kcm(0x28, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400000000000}, 0x0, 0x0, 0x0, 0x0, 0xf60}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f0000000100)=r3, 0x4) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000540)="7c01", 0x2}], 0x1}, 0x408c4) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x52cc) 8.513984726s ago: executing program 4 (id=4091): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000440)={@map, 0xb, 0x1, 0xd125, &(0x7f00000002c0)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000300)=[0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r3) ioctl$SIOCSIFHWADDR(r3, 0x8b1b, &(0x7f0000000000)={'wlan1\x00', @random="9cc9de10e578"}) r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000500)=@generic={&(0x7f00000004c0)='./file0\x00', 0x0, 0x18}, 0x18) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000480)={@cgroup=r3, r1, 0x21, 0xc, 0x0, @void, @value=r4, @void, @void, r2}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0x10, &(0x7f00000008c0)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x4c, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x5, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r5, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000001280)="b9ffddc1ddcccdde75537d53888edfff70bf2dfe443b1b5e2a9080f3", 0x0, 0x600, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = socket$kcm(0xa, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="186778dc4f99000020000000000000000002000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001540)={r5, 0xe0, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000001200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000001240)=[0x0, 0x0], &(0x7f00000012c0)=[0x0, 0x0, 0x0], 0x0, 0x22, &(0x7f0000001340)=[{}, {}], 0x10, 0x10, &(0x7f0000001380), &(0x7f00000013c0), 0x8, 0xc, 0x8, 0x8, &(0x7f0000001400)}}, 0x10) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001580)={0x4, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000011c0)=ANY=[@ANYRES32=r7, @ANYRES32=r1, @ANYBLOB="000000000000030000000000", @ANYRES32=r8, @ANYBLOB, @ANYRES64=r2], 0x20) setsockopt$sock_attach_bpf(r6, 0x0, 0x4, 0x0, 0x8400) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r9, 0x541b, &(0x7f0000000640)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc5, 0xc5, 0x8, [@ptr={0xd, 0x0, 0x0, 0x2, 0x5}, @datasec={0x1, 0x1, 0x0, 0xf, 0x3, [{0x3, 0x6, 0xfffffffb}], "f28968"}, @datasec={0xa, 0xa, 0x0, 0xf, 0x2, [{0x2, 0x800, 0xe}, {0x2, 0x3, 0x62}, {0x3, 0x3, 0x2}, {0x4, 0x5, 0x5}, {0x5, 0xfffeffff, 0x80000001}, {0x1, 0x691, 0x5}, {0x3, 0x5, 0x80000000}, {0x3, 0x1, 0x81}, {0x5, 0x2, 0x7a78}, {0x3, 0x2, 0x7fffffff}], '\\C'}, @func={0x4, 0x0, 0x0, 0xc, 0x5}, @fwd={0xe}]}, {0x0, [0x5f, 0x5f, 0x2e, 0x0, 0x0, 0x2e]}}, &(0x7f0000000100)=""/199, 0xe8, 0xc7, 0x0, 0xfffffff9}, 0x28) getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x2, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 3.158333347s ago: executing program 2 (id=4135): r0 = socket$kcm(0xa, 0x3, 0x73) setsockopt$sock_attach_bpf(r0, 0x29, 0x21, &(0x7f0000000200), 0x4) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0xff, @remote}, 0x80, 0x0, 0x0, &(0x7f0000000340)=[{0x10}, {0x18, 0x29, 0xb, '\x00'}], 0x28}, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000680)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, r1, 0x0) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x7) r2 = socket$kcm(0xf, 0x3, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000140)}, 0x20) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x78, 0x78, 0x5, [@fwd={0x3}, @enum64={0xd, 0x8, 0x0, 0x13, 0x0, 0x14, [{0xc, 0x2, 0x8da}, {0x3, 0x1, 0x81}, {0xf, 0x0, 0x25ba}, {0x5, 0x401, 0x4}, {0xa, 0x3, 0x7}, {0x8, 0x6, 0x5}, {0xf, 0xfffffffe, 0x8}, {0xb, 0x1, 0x9}]}]}, {0x0, [0x0, 0x30, 0x61]}}, &(0x7f0000000500)=""/29, 0x95, 0x1d, 0x0, 0x0, 0x10000}, 0x28) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000640)=@generic={&(0x7f0000000600)='./file0\x00', 0x0, 0x18}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{0x1, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)}, 0x20) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_bp={&(0x7f0000001140), 0x1}, 0x0, 0x0, 0x8, 0x3, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x80000001}, 0x8020, 0x0, 0x1780, 0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x73) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r7, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="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", 0xd24}, {0x0, 0x4000}, {0x0, 0x21}, {0x0}, {&(0x7f00000020c0)}], 0x5}, 0x0) r8 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg$unix(r9, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r8, 0x84, 0x6e, &(0x7f0000000000)=r10, 0x10) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3}, 0x50) r12 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000840)={0xffffffffffffffff, 0x7f, 0x1c}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000880)={0x1, 0xffffffffffffffff}, 0x4) r14 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000008c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x2}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_tracing={0x1a, 0x17, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000040000000000000100000002060600ffffffff1851000009000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000377718000800000018640000030000000000000000000080889620000c00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000200007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085674700820000009500000000000000"], &(0x7f0000000380)='GPL\x00', 0x4, 0x41, &(0x7f00000003c0)=""/65, 0x41100, 0x60, '\x00', 0x0, 0x17, r4, 0x8, &(0x7f0000000580)={0x9, 0x4}, 0x8, 0x10, &(0x7f00000005c0)={0x1, 0x5, 0x2, 0x7fff}, 0x10, 0x2e2a6, 0xffffffffffffffff, 0x4, &(0x7f0000000940)=[r5, r6, r10, r11, r12, r13, r2, r14], &(0x7f0000000980)=[{0x5, 0x3, 0xd, 0x7}, {0x5, 0x3, 0x10, 0x6}, {0x5, 0x1, 0x8, 0xb}, {0x4, 0x2, 0x6, 0x2}], 0x10, 0x7a7be92e}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000e200000000611118"], 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1}) sendmsg$inet(r2, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0) 2.580610663s ago: executing program 1 (id=4139): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b40000000000000069109c00e6ffffff03000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) 2.36637942s ago: executing program 1 (id=4141): r0 = socket$kcm(0x11, 0x2, 0x0) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000000c0)=r0, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8940, &(0x7f0000000080)) r3 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r3, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x10, &(0x7f0000001080)=[{0x0}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x36}}, @ip_tos_u8={{0x11, 0x29, 0x3b}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x0) 2.106737161s ago: executing program 2 (id=4143): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000800"], 0x48) perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xee, 0xffff}, 0x10b44b, 0x800000, 0x0, 0x0, 0x40000}, 0x0, 0xf, 0xffffffffffffffff, 0xa) openat$tun(0xffffffffffffff9c, 0x0, 0x82041, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0xfc, 0x4, 0x0, 0x0, 0x88051, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_bp={0x0}, 0x0, 0xca, 0x0, 0x0, 0x3, 0x9, 0x1000}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) sendmsg$sock(r2, &(0x7f00000008c0)={&(0x7f0000000580)=@un=@abs={0x1, 0x0, 0x4e21}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000300)="04021f0834cbd913af603102fb24d434a651b2477c6a79212652578093493ae6bf848d5a1fa21eab75bd71d50e74f021e8cfec0c1737123f3f", 0x39}, {&(0x7f0000000480)="b6507c659551360101ae6792a619ee90d2280dfe4a654fc1d35e1c88f67abf729333869707fd42c220e1", 0x2a}, {&(0x7f0000000600)="74f3810b5ba51221d38bb8fb9a28b965548806ac8b5e60296073167a010e55c8e965d6f9f07524de2982bbc28facd60eb498e224e0d28c72e93fa9c6e519ab471e11490d1ec33f312a06226939148b6ed45020544d8748aee49a01ef7b20870adbc2b0bfe0546113f2eb5a6edc9b9f6dbfecfee6fb717e1546da695b7e0de91752b5a866c81f6aa350e4baa81e1a80902a0e5ca4b0ec31a97ff6bcf3afced901f2bbc4abc6fa80c646d0b0787d2ace2a0e00e3d64fa0372c4c120e42c8", 0xbd}, {&(0x7f0000000c00)="e510ffd63f4d9905a2af0e6c937c28ab21e9b206a8c9631f4adf9283769cc0d031bf04671f3bf079638cf206f378afda240a696ab23bca2fc22b514bb5fb859a82ff733c1f782a80fd4f669b0e8cdd6054fc0ae6304453859b28d2147c28311bf2011ad0e4c23075c7641f43d3b0cdab39a97e7f7d56e2de15668c0ee59eeadbdd5d8fa2abd372e1435c5c2d2e14db8c1184118132c9b80bc7c1cb0007abc4362eb1368c021035b15197ca86421e5daa800cf788ea0d7f08e4ae83143c80cd6e2bc7552e231b326fe3cbd1c28a57a2", 0xcf}, {&(0x7f00000006c0)="f1fe24b6318604ade621ad92311e4761df942dc7810ec5bdd6bb8bf4c6a66f1f62775e38b2f2bbb788bc92", 0x2b}, {&(0x7f0000000d00)="7c1da0557648c15b9c3e27c4679672261455f93ad1cf0ef8753a46793944c56a65dfe71aae1432740e3cba17e3fa58992097dfe86c5940f3996cc1bde007280f0b26068e3fe7e11be20aa8bcc4d621d8f20293bc770537ae0d586f08b9ba019bd1290b7ed6512d2272a73f0a27bb68785b1cb76b4c495882abc866ceab6657e799ca7ba68c7ba1472ed639eb2a6d95659a4ff0c22843da6f24067c3e4238d2507f93906d2744ea8c9780bd6629c11119be345dc2eb633a95256712cb9498e7460f5605e8fe0feba88ba07012c0138f81060eec3600b08e1bae8c91b7dc369ec129b23810c163e75b8d2616", 0xeb}, {&(0x7f0000000700)="01056f67b52d1c757565a8c7ac51dc13ffa2681fde43ccbf4ca4dd1526655831c80cd87a039bc7f55e0735059aa5d150aec5dcbcbcc1593c73", 0x39}], 0x7}, 0x20040001) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x110}, 0x4040) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000a40)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d03000000000000000000000400000000000000000000000b030000000000006361"], 0x0, 0x52}, 0x28) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$cgroup_subtree(r5, &(0x7f00000002c0)=ANY=[@ANYRES8=r2, @ANYRES8=r6], 0x12) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1030, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r7}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000013c0)="d080", 0xfdef}], 0x1, 0x0, 0x0, 0x800300}, 0x20000801) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e85"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = openat$cgroup_ro(r4, &(0x7f0000000200)='blkio.throttle.io_serviced\x00', 0x0, 0x0) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000cd8506000000070000000000000201000000006130303000"], &(0x7f0000000480), 0x2a, 0x0, 0x1, 0x7, 0x10000, @value=r8}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x2f, r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000004c0), 0x4) r10 = socket$kcm(0xa, 0x2, 0x0) close(r10) socket$kcm(0x2, 0x3, 0x73) 2.057114845s ago: executing program 1 (id=4144): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000001000000850000000c000043b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000200), &(0x7f00000003c0)=r1}, 0x20) 1.906260657s ago: executing program 0 (id=4146): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="05000000050000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df12c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.697556994s ago: executing program 0 (id=4147): bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="05000000050000000100000004"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r0}, 0x10) getpid() bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df12c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.62587721s ago: executing program 1 (id=4148): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x9, 0x6, 0x8, 0x8}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000900)=@bpf_tracing={0x1a, 0xf, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x5d9e}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2bf9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffa}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600000000000000000200", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.586599843s ago: executing program 2 (id=4149): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x40000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) 1.572925984s ago: executing program 3 (id=4150): perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0xd112, 0x4, 0x0, 0x1}, 0x0, 0x3, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000040)='\x00') r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r2, 0x1008, 0x0, 0x72, 0x0, &(0x7f0000000180)=""/114, 0x0, 0x0, 0x1b, 0x0, &(0x7f0000000400)="cf2240e6919817e49555d221b4e6c6ba11c4d974ddab2318db7b52", 0x0, 0x0, 0x8000}, 0x50) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000f40)}, 0x0) close(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) recvmsg$unix(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, 0x0}, 0x1c0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES8, @ANYRES8], 0x9a) 1.486198111s ago: executing program 0 (id=4151): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB], 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000500)=ANY=[], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4001000) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r2 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r2, 0x6, 0xa, &(0x7f0000000500), 0x4) sendmsg$kcm(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000280)}], 0x1, &(0x7f0000001b40)}, 0x4000) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x4}, @func_proto, @func_proto={0x2, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x44}, 0x28) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff6) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000050088bc080000004000000042000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) 1.264008579s ago: executing program 3 (id=4152): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x80}, 0x0, 0xca, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/time\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x1}, 0x1, 0x0, 0x0, 0x2, 0x619c}, 0x0, 0x40000000000, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100003a00702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0xffffffffffffffff) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) write$cgroup_subtree(r3, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r4], 0x12) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000)=r3, 0x4) sendmsg$sock(r2, &(0x7f0000000940)={&(0x7f0000000040)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e20, @multicast1}}, 0x80, &(0x7f00000008c0)=[{&(0x7f00000004c0)="d6c71cef9b46c7a9ce384122e3532f7e030048b887e1e18ae2fad6f28ca9db7b6e9466e04e9e403ac5de109f61f850c34d2f7d496dbb6978a39cc9da3f5a4a14abdb98aa9c9f6001a6d4961ccf46e8615327bfdf218fe8f6d587d124794fda36c1813ef23e9de000a202b026891764237a303eb3e0e08ce656843fc0278632cfe1bf9010781ade4edefd23c79206ec7612e34f39c7c75045cb62cf411d5fedc26e6032425c0c4c06f506598474d9e78ba9ee758010", 0xb5}, {&(0x7f00000005c0)="15752e7d2c5c138fae5a073297a5f96febaf9a04259203ceef1f4293846f3c81879962576c903036bf55f766be1caa9915e933f148cc88d07282e5de98704bb5cf51c3a99a93a8e69d7384fa69b5f4258d57c74b8883b44dfca5ad29c04a0731b80c4cd8611172de435c8a8ce56d108ea3b4667cd1b574043add6c36f7ed7d6bff73cfb5e62a179914f2df20fed59ab69423cee1cb", 0x95}, {&(0x7f00000000c0)="0ca43121387802062e6eac820b0632ed70d448708c9136261fb02e8db540dc293207d11e55d5dff33197ae32ee2ac81a21eca121b189623a28b8a5b5ae97294adcecd49854348bdd6039196ac546bc3ad8fbf4434291a3d0f5766c184992ae0ff9c5d8e2a56ecda8192b9aa265ac", 0x6e}, {&(0x7f00000002c0)="5b8d96991c8e6e239f20931bae", 0xd}, {&(0x7f0000000740)="4c510cbaa35c4b8d45b5c8c41efa4e33c96d794ac5e9a46e1cd700d73fb4683238d4aebdcea6adc94ff02353f3c586f3eb3cbda58464003ee56ee9351c6c5e307ab76bae22c4accbf23b406c14c2b37824660ee5a4ab06c0afe9649ebdeb7236b18b7b9e6782dd396df6a0005dd43599f378b97b6a0face33ac942cd4b4e2a630ecff69c859b1afe636422069f02a2362894cc670021d13e709090d53a8536eeb88ccf516d1b1821f5", 0xa9}, {&(0x7f0000000340)="91bb4bbd99e720bc9610a5d241360f2a3eed15499e350edd1b0106d6f193e50ff9acd42674967138b53631b1f755e9b1aea80f6297da16", 0x37}, {&(0x7f0000000800)="7958c69ae56823c8709138b81680856e6fabc95223bacad05e254c0f6e772503e5f2626048194d7e8c6d3a5cc92798f13a49b00d48cfb1950d32820335419a0bb5073d5ef45fc40223c8657b30bb0ad49cb322d464fc3b7f6f75686c4ce8ea1a79766c629b4648ab1ab938ad4f10a791b05b65f761d36fe2b2d2bab7eb7d2125329f220655f4cf", 0x87}], 0x7}, 0x24000050) 1.199361174s ago: executing program 0 (id=4154): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ceb71c0010ec90db133c22a690ae7080000000000040875b0089"], 0xfe1b) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0x0, 0x0, &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x30}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="0000186df4b1768c36153d42", @ANYRES32, @ANYBLOB="1c00000000000300000000000000010045"], 0x0}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) socketpair(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f3, &(0x7f0000000080)) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @multicast2}, 0x3c, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x34}}, @ip_tos_u8={{0x18, 0x29, 0x4}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @remote}}}], 0x14}, 0x0) 846.291932ms ago: executing program 2 (id=4155): r0 = socket$kcm(0x11, 0x2, 0x0) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000000c0)=r0, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8940, &(0x7f0000000080)) r3 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r3, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x10, &(0x7f0000001080)=[{0x0}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x36}}, @ip_tos_u8={{0x11, 0x29, 0x3b}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x0) 840.625533ms ago: executing program 0 (id=4156): r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000040)={&(0x7f0000000500)="27324bac2dcec70fd1e684a25cf98f09cca262b44f3c0beaf2fea85961fe0c9b1437cf4627bc4188817b7a7fe619656bb3c089ad3632618f4bf3f0f68dc6e366ddd332977b0918c1f7df9e3325bbf6161ac0bbe122b42c71dbb2fec2dd8be33572fe8ca1733a8c7581aba6bab669c946848837af8795330239ab21255f127532f101b44d37e51d026a9f3c731f3e6a83bb122a69c965b225df2e0ab8212b726a62470bea903a63bd71eba7a3b05ac40fa7d7a61467517b7d299fece25ace5e3ccc8fa64d34aed00e07857e26f578c98ce6ac341b017c12c2f036840bfda9e608ae0d60", &(0x7f00000001c0)=""/145, &(0x7f0000000000)="becc965f0574e79218bdc1dcde82b11ab763504fb679ac65220a", &(0x7f0000000600)="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", 0x0, 0xffffffffffffffff, 0x4}, 0x38) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400000000000}, 0x0, 0x0, 0x0, 0x0, 0xf60}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, 0x0, 0x0) r1 = socket$kcm(0x28, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x28, 0x6, 0x0, 0x44) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1) 839.513583ms ago: executing program 3 (id=4157): r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x891c, &(0x7f0000000000)={'ipvlan0\x00', @random="0200ff7fffff"}) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0x6e, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/73, 0x49}], 0x1, &(0x7f0000000180)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}, 0x2140) socket$kcm(0x2, 0xa, 0x2) (async) ioctl$SIOCSIFHWADDR(r0, 0x891c, &(0x7f0000000000)={'ipvlan0\x00', @random="0200ff7fffff"}) (async) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0x6e, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/73, 0x49}], 0x1, &(0x7f0000000180)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}, 0x2140) (async) 766.640579ms ago: executing program 1 (id=4158): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="05000000050000000100"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df12c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 529.834628ms ago: executing program 1 (id=4159): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x12, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="04002100000000000000000000000085000000610000001811000000", @ANYRES32=r0, @ANYRES8=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000300)="d2ffdd934517f3e145f228e088a8", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0700000004000000000000000a00000000000000", @ANYRES32, @ANYBLOB="007a5e7ca7000000000000190000000000000000", @ANYRES32=0x0, @ANYRESOCT=r2, @ANYBLOB="000000000300"/28], 0x48) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_pressure(r3, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r4, &(0x7f0000000340)={'full', 0x20, 0x7, 0x20, 0xffffa}, 0x9) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r5, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x1f00) r6 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f00000002c0)=@xdp={0x2c, 0x0, 0x0, 0x11}, 0x80, 0x0}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r7) ioctl$SIOCSIFHWADDR(r7, 0x8b26, &(0x7f0000000180)={'wlan1\x00', @random="c4521573d028"}) ioctl$TUNSETOFFLOAD(r7, 0x400454d0, 0x2) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_config_ext, 0x10a180, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8680c, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, @perf_config_ext={0x4, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x73) socket$kcm(0xa, 0x2, 0x73) socket$kcm(0x10, 0x2, 0x0) r8 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r8, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r8, 0x1, 0x3e, &(0x7f0000000100)=r9, 0x4) sendmsg$inet(r8, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x4008041) sendmsg$inet(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0x1}], 0x1, 0x0, 0x0, 0x10000000}, 0x0) 529.161978ms ago: executing program 3 (id=4160): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000001000000850000000c000060b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000200), &(0x7f00000003c0)=r1}, 0x20) 489.686841ms ago: executing program 2 (id=4161): r0 = perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0xd112, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x0, 0x480, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f00000000c0)={0x5, 0x80, 0x3, 0x6, 0xf7, 0x6, 0x0, 0x1, 0x5020a, 0xb, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0x401, 0x58469d3d}, 0x40, 0x2, 0x9e9e, 0xb, 0x0, 0x3, 0x2, 0x0, 0xb53, 0x0, 0x4}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000480)={0x2, &(0x7f00000004c0)=[{0x14}, {0x6}]}) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x10, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1f, 0x18, &(0x7f00000007c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0xb3}}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r4}, 0xc) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1b00fbffffe2ffffff0000000300f3a9d569f822d6e68099dd09ed540dc4fdf2a488a754", @ANYRES32=r3, @ANYBLOB="20ffffff040000000000000200000000000000008e071f03ba8ffbf9be360831e9ff9793b77736a96899117233ddc689492e683ed8483d9f5a74c87a129bb97ef9a45779b9f804194d65c5c7afbd298b12f655f820e1122bbb94e1f041bd5eaa3259a562a0edfd03286ec04c475e5388bac16042a20efc5756ce250f78f13f471d44aa7d7ebd0dd5d8265955c37616d50780905099f3dcfa76bc7473df3d03d82e37ba32020552f4110721d9413c3e5a7ba63fa9bc2d9cdfd5b918b0c94c24", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000050000000200"/28], 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r2}, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xa, 0x1d, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@jmp={0x5, 0x0, 0x5, 0x7, 0x7, 0x8}, @alu={0x7, 0x0, 0x2, 0x7, 0x7, 0xfffffffffffffffe, 0xfffffffffffffffc}, @alu={0x0, 0x0, 0x7, 0x9, 0xce5407acd61b44a5, 0x80, 0xffffffffffffffff}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @alu={0x0, 0x0, 0x6, 0x5, 0x4, 0xfffffffffffffff4, 0xfffffffffffffff0}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xe}}, @generic={0x8, 0x3, 0xa, 0x2, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r4}, 0x94) ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f0000000040)={'ip_vti0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x13, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000073114200000000008510000002000000850000004a00000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 426.643437ms ago: executing program 0 (id=4162): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x8, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x11, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x73) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000070000000850000005000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92010, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_config_ext={0xffffffffffffffff, 0xffffffff7fffffff}, 0x0, 0xca, 0x6, 0x0, 0x3, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x6c6}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="09000000020000006d0500000300000002000000", @ANYRES32, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000006776b6dcfef3beddc8dd56a975595e3fbf527c8bc68411842eeed8884be3d09188f9d9b9f9f5703db5c13fa848fbabbe257a20d61f9a222fd07404f2734ec4db271ded391a0d1e928b03ec3856b0186ba053df34ec84672be638232dbd2607a4665a34b067df4b66c8812be0e4f933c78d155c1c9ac5e716606b06484434dfe2e4e063ee20e372f55f4f1792e340a4106c89ea88afb2c1ad3c79ace92f100779d00c6c714d4a25e404795ae76e31d6b8e7ff5218fa3797d97607e1b790165cfea1c8084779cee720a9108d83e72cc27e57eb"], 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff2, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407ffd, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x200, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) recvmsg$unix(r4, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x98}, 0x0) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$cgroup_subtree(r7, &(0x7f00000002c0)=ANY=[@ANYRES8=r3, @ANYRES8=r8], 0x12) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x2}) openat$cgroup_pressure(r6, &(0x7f00000000c0)='cpu.pressure\x00', 0x2, 0x0) close(r9) ioctl$TUNGETFILTER(r9, 0x801054db, &(0x7f0000000200)=""/252) ioctl$TUNSETCARRIER(r9, 0x400454e2, &(0x7f00000001c0)) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 234.243541ms ago: executing program 3 (id=4163): perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0xd112, 0x4, 0x0, 0x1}, 0x0, 0x3, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000040)='\x00') r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r2, 0x1008, 0x0, 0x72, 0x0, &(0x7f0000000180)=""/114, 0x0, 0x0, 0x1b, 0x0, &(0x7f0000000400)="cf2240e6919817e49555d221b4e6c6ba11c4d974ddab2318db7b52", 0x0, 0x0, 0x8000}, 0x50) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000f40)}, 0x0) close(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) recvmsg$unix(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, 0x0}, 0x1c0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES8, @ANYBLOB, @ANYRES8], 0x9a) 105.040992ms ago: executing program 2 (id=4164): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_config_ext, 0x100080}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0xcc0, 0x0, &(0x7f0000000000)="c1188e19b95d02ff4284860186dd", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xcc, 0x0, &(0x7f0000000000)='<', 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) (fail_nth: 1) 0s ago: executing program 3 (id=4165): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x105, 0x0, @perf_bp={&(0x7f0000000240), 0x5}, 0x100080, 0x0, 0x0, 0x0, 0x99, 0x0, 0x0, 0x0, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0xa, 0x2, 0x73) setsockopt$sock_attach_bpf(r0, 0x29, 0x18, 0x0, 0xfcd8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000100000000000008082295"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000000)="c1188e19b95d02ff4284860186fd", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400000000000}, 0x0, 0x0, 0x4, 0x0, 0xf5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ca481f7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) perf_event_open$cgroup(&(0x7f0000000000)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x1c, &(0x7f0000000040), 0xcf) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2000, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r4, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r7 = socket$kcm(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(r7, 0x1, 0x45, &(0x7f0000000040)=r6, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1400000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB="0000000000001f8f9d56d5edce3d828222ed8f7b000000000020000000000010000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000100"/28], 0x48) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000100)={0x0, 0x0}) ioctl$TUNGETFILTER(r3, 0x801054db, &(0x7f0000000540)=""/249) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) kernel console output (not intermixed with test programs): 10743] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2216'. [ 707.543382][T10771] netlink: 'syz.0.2225': attribute type 3 has an invalid length. [ 707.567009][T10771] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2225'. [ 707.656547][T10773] netlink: 154020 bytes leftover after parsing attributes in process `syz.1.2226'. [ 707.670063][T10773] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 709.690117][T10800] netlink: 154020 bytes leftover after parsing attributes in process `syz.3.2236'. [ 709.752748][T10800] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 714.277991][T10860] netlink: 154020 bytes leftover after parsing attributes in process `syz.1.2256'. [ 714.318574][T10860] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 715.850313][T10905] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2271'. [ 717.269982][T10928] netlink: 'syz.3.2281': attribute type 39 has an invalid length. [ 717.514578][T10939] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2285'. [ 718.721922][T10984] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2301'. [ 719.694521][T11008] netlink: 154020 bytes leftover after parsing attributes in process `syz.1.2311'. [ 719.716449][T11008] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 720.152748][T11022] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2315'. [ 720.443705][T11032] netlink: 'syz.3.2318': attribute type 10 has an invalid length. [ 720.456393][T11032] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.2318'. [ 721.196605][T11041] netlink: 'syz.4.2323': attribute type 10 has an invalid length. [ 721.355281][T11041] 8021q: adding VLAN 0 to HW filter on device team0 [ 721.414348][T11041] bond0: (slave team0): Enslaving as an active interface with an up link [ 721.497836][T11051] netlink: 154020 bytes leftover after parsing attributes in process `syz.1.2325'. [ 721.548734][T11051] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 722.054667][T11064] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2330'. [ 722.827848][T11085] netlink: 'syz.1.2336': attribute type 2 has an invalid length. [ 722.885110][T11085] netlink: 199848 bytes leftover after parsing attributes in process `syz.1.2336'. [ 723.484861][T11090] netlink: 154020 bytes leftover after parsing attributes in process `syz.1.2338'. [ 723.528964][T11090] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 724.760887][T11119] netlink: 154020 bytes leftover after parsing attributes in process `syz.0.2350'. [ 724.800665][T11119] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 725.287184][T11141] netlink: 154020 bytes leftover after parsing attributes in process `syz.0.2354'. [ 725.309370][T11141] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 726.344976][T11167] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2363'. [ 726.448776][T11170] netlink: 154020 bytes leftover after parsing attributes in process `syz.3.2364'. [ 726.469789][T11170] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 726.713433][T11176] netlink: 'syz.3.2366': attribute type 3 has an invalid length. [ 726.732203][T11176] netlink: 'syz.3.2366': attribute type 1 has an invalid length. [ 726.751967][T11176] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.2366'. [ 727.732497][T11202] netlink: 154020 bytes leftover after parsing attributes in process `syz.1.2376'. [ 727.757130][T11201] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2375'. [ 727.757657][T11202] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 729.373823][T11233] netlink: 154020 bytes leftover after parsing attributes in process `syz.0.2388'. [ 729.403880][T11233] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 729.534515][T11237] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2389'. [ 729.692463][T11246] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2392'. [ 730.058067][T11258] netlink: 'syz.1.2397': attribute type 2 has an invalid length. [ 730.090335][T11258] netlink: 'syz.1.2397': attribute type 8 has an invalid length. [ 730.107319][T11258] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2397'. [ 730.897432][T11268] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 731.152652][T11276] netlink: 154020 bytes leftover after parsing attributes in process `syz.0.2403'. [ 731.165435][T11268] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 731.194960][T11276] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 731.363037][T11281] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2405'. [ 732.692644][T11317] netlink: 154020 bytes leftover after parsing attributes in process `syz.2.2418'. [ 732.708463][T11317] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 732.871245][T11327] netlink: 'syz.4.2420': attribute type 3 has an invalid length. [ 732.885612][T11327] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2420'. [ 732.895494][T11324] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2421'. [ 733.167601][T11334] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.2424'. [ 733.177627][T11334] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.2424'. [ 733.201103][T11334] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.2424'. [ 734.193538][T11355] netlink: 154020 bytes leftover after parsing attributes in process `syz.1.2432'. [ 734.204781][T11355] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 734.509697][T11365] netlink: 'syz.0.2436': attribute type 1 has an invalid length. [ 735.411603][T11389] __nla_validate_parse: 3 callbacks suppressed [ 735.411648][T11389] netlink: 154020 bytes leftover after parsing attributes in process `syz.0.2445'. [ 735.500998][T11389] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 735.510823][T11392] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2446'. [ 736.838862][T11419] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2455'. [ 737.328524][T11429] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2459'. [ 737.342600][T11432] netlink: 154020 bytes leftover after parsing attributes in process `syz.3.2457'. [ 737.353092][T11432] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 738.677232][T11465] netlink: 154020 bytes leftover after parsing attributes in process `syz.2.2472'. [ 738.688740][T11465] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 739.830143][T11494] netlink: 154020 bytes leftover after parsing attributes in process `syz.3.2484'. [ 739.854643][T11494] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 739.976056][T11499] netlink: 'syz.1.2485': attribute type 3 has an invalid length. [ 739.990579][T11499] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2485'. [ 740.596706][T11509] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 741.397884][T11527] netlink: 154020 bytes leftover after parsing attributes in process `syz.0.2497'. [ 741.442404][T11527] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 744.207758][T11569] netlink: 154020 bytes leftover after parsing attributes in process `syz.0.2512'. [ 744.329949][T11569] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 745.136075][T11602] FAULT_INJECTION: forcing a failure. [ 745.136075][T11602] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 745.194297][T11602] CPU: 0 PID: 11602 Comm: syz.0.2523 Not tainted 6.1.148-syzkaller #0 [ 745.203434][T11602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 745.213543][T11602] Call Trace: [ 745.216934][T11602] [ 745.219884][T11602] dump_stack_lvl+0x168/0x22e [ 745.224601][T11602] ? show_regs_print_info+0x12/0x12 [ 745.229845][T11602] ? load_image+0x3b0/0x3b0 [ 745.234422][T11602] ? __lock_acquire+0x7c50/0x7c50 [ 745.239485][T11602] should_fail_ex+0x399/0x4d0 [ 745.244208][T11602] _copy_from_user+0x2c/0x170 [ 745.248944][T11602] __sys_bpf+0x265/0x6d0 [ 745.253321][T11602] ? bpf_link_show_fdinfo+0x340/0x340 [ 745.258760][T11602] ? lock_chain_count+0x20/0x20 [ 745.263678][T11602] __x64_sys_bpf+0x78/0x90 [ 745.268153][T11602] do_syscall_64+0x4c/0xa0 [ 745.272599][T11602] ? clear_bhb_loop+0x60/0xb0 [ 745.277300][T11602] ? clear_bhb_loop+0x60/0xb0 [ 745.282001][T11602] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 745.287920][T11602] RIP: 0033:0x7f99cad8ebe9 [ 745.292352][T11602] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 745.312168][T11602] RSP: 002b:00007f99cbcb8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 745.320690][T11602] RAX: ffffffffffffffda RBX: 00007f99cafb5fa0 RCX: 00007f99cad8ebe9 [ 745.328883][T11602] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 745.337083][T11602] RBP: 00007f99cbcb8090 R08: 0000000000000000 R09: 0000000000000000 [ 745.345104][T11602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 745.353197][T11602] R13: 00007f99cafb6038 R14: 00007f99cafb5fa0 R15: 00007ffcf6fe5f08 [ 745.361314][T11602] [ 746.083959][T11611] netlink: 154020 bytes leftover after parsing attributes in process `syz.0.2526'. [ 746.094048][T11611] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 747.320011][T11647] netlink: 154020 bytes leftover after parsing attributes in process `syz.2.2540'. [ 747.370722][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.377116][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.395527][T11647] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 747.698331][T11666] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 748.729377][T11692] netlink: 154020 bytes leftover after parsing attributes in process `syz.1.2554'. [ 748.741902][T11692] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 749.225615][T11701] FAULT_INJECTION: forcing a failure. [ 749.225615][T11701] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 749.261434][T11701] CPU: 0 PID: 11701 Comm: syz.0.2557 Not tainted 6.1.148-syzkaller #0 [ 749.269709][T11701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 749.279831][T11701] Call Trace: [ 749.283344][T11701] [ 749.286344][T11701] dump_stack_lvl+0x168/0x22e [ 749.291129][T11701] ? show_regs_print_info+0x12/0x12 [ 749.296425][T11701] ? load_image+0x3b0/0x3b0 [ 749.301034][T11701] ? __lock_acquire+0x7c50/0x7c50 [ 749.306158][T11701] ? perf_swevent_get_recursion_context+0xda/0x150 [ 749.312762][T11701] should_fail_ex+0x399/0x4d0 [ 749.317542][T11701] _copy_from_user+0x2c/0x170 [ 749.322301][T11701] do_ipv6_setsockopt+0x2b3/0x3b20 [ 749.327541][T11701] ? sk_dst_reset+0xa0/0xa0 [ 749.332163][T11701] ? trace_call_bpf+0xbf/0x680 [ 749.337017][T11701] ? migrate_enable+0x148/0x220 [ 749.341960][T11701] ? __lock_acquire+0x7c50/0x7c50 [ 749.347062][T11701] ? trace_call_bpf+0xbf/0x680 [ 749.351925][T11701] ? trace_call_bpf+0x5a7/0x680 [ 749.356876][T11701] ? migrate_enable+0x148/0x220 [ 749.361910][T11701] ? trace_call_bpf+0xbf/0x680 [ 749.366752][T11701] ? trace_call_bpf+0xbf/0x680 [ 749.371599][T11701] ? trace_call_bpf+0x5a7/0x680 [ 749.376618][T11701] ? trace_call_bpf+0xbf/0x680 [ 749.381475][T11701] ? __bpf_trace_bpf_trace_printk+0x20/0x20 [ 749.387571][T11701] ? perf_trace_run_bpf_submit+0x124/0x1c0 [ 749.393474][T11701] ? aa_label_sk_perm+0x3e7/0x500 [ 749.398576][T11701] ? perf_trace_lock+0x2ec/0x370 [ 749.403615][T11701] ? aa_sk_perm+0x920/0x920 [ 749.408255][T11701] ? __might_sleep+0xd0/0xd0 [ 749.412948][T11701] ? __fget_files+0x28/0x4d0 [ 749.417679][T11701] ? __lock_acquire+0x7c50/0x7c50 [ 749.422798][T11701] ? aa_sk_perm+0x7e5/0x920 [ 749.427405][T11701] ? aa_af_perm+0x2b0/0x2b0 [ 749.431981][T11701] ? __fget_files+0x44a/0x4d0 [ 749.436793][T11701] ? aa_sock_opt_perm+0x74/0x100 [ 749.441827][T11701] ipv6_setsockopt+0x55/0x190 [ 749.446580][T11701] ? sock_common_recvmsg+0x1a0/0x1a0 [ 749.451950][T11701] __sys_setsockopt+0x2bf/0x3d0 [ 749.456911][T11701] __x64_sys_setsockopt+0xb1/0xc0 [ 749.462034][T11701] do_syscall_64+0x4c/0xa0 [ 749.466531][T11701] ? clear_bhb_loop+0x60/0xb0 [ 749.471285][T11701] ? clear_bhb_loop+0x60/0xb0 [ 749.476047][T11701] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 749.482475][T11701] RIP: 0033:0x7f99cad8ebe9 [ 749.487066][T11701] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 749.506924][T11701] RSP: 002b:00007f99cbcb8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 749.515866][T11701] RAX: ffffffffffffffda RBX: 00007f99cafb5fa0 RCX: 00007f99cad8ebe9 [ 749.523912][T11701] RDX: 0000000000000017 RSI: 0000000000000029 RDI: 0000000000000003 [ 749.531954][T11701] RBP: 00007f99cbcb8090 R08: 0000000000000004 R09: 0000000000000000 [ 749.539998][T11701] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 749.548323][T11701] R13: 00007f99cafb6038 R14: 00007f99cafb5fa0 R15: 00007ffcf6fe5f08 [ 749.556618][T11701] [ 753.348951][T11743] FAULT_INJECTION: forcing a failure. [ 753.348951][T11743] name failslab, interval 1, probability 0, space 0, times 0 [ 753.382355][T11743] CPU: 1 PID: 11743 Comm: syz.1.2570 Not tainted 6.1.148-syzkaller #0 [ 753.390601][T11743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 753.400783][T11743] Call Trace: [ 753.404100][T11743] [ 753.407067][T11743] dump_stack_lvl+0x168/0x22e [ 753.411801][T11743] ? show_regs_print_info+0x12/0x12 [ 753.417043][T11743] ? load_image+0x3b0/0x3b0 [ 753.421602][T11743] ? __might_sleep+0xd0/0xd0 [ 753.426248][T11743] ? __lock_acquire+0x7c50/0x7c50 [ 753.431350][T11743] should_fail_ex+0x399/0x4d0 [ 753.436092][T11743] should_failslab+0x5/0x20 [ 753.440647][T11743] slab_pre_alloc_hook+0x59/0x310 [ 753.445725][T11743] ? sk_prot_alloc+0xe7/0x210 [ 753.450465][T11743] __kmem_cache_alloc_node+0x4f/0x260 [ 753.455884][T11743] ? sk_prot_alloc+0xe7/0x210 [ 753.460609][T11743] __kmalloc+0xa0/0x240 [ 753.464814][T11743] sk_prot_alloc+0xe7/0x210 [ 753.469368][T11743] ? sk_alloc+0x20/0x340 [ 753.473665][T11743] sk_alloc+0x36/0x340 [ 753.477794][T11743] ? bpf_ctx_init+0x163/0x1a0 [ 753.482571][T11743] ? bpf_prog_test_run_skb+0x267/0x11b0 [ 753.488179][T11743] bpf_prog_test_run_skb+0x350/0x11b0 [ 753.493606][T11743] ? __fget_files+0x28/0x4d0 [ 753.498252][T11743] ? __fget_files+0x44a/0x4d0 [ 753.502996][T11743] ? cpu_online+0xa0/0xa0 [ 753.507384][T11743] bpf_prog_test_run+0x31e/0x390 [ 753.512383][T11743] __sys_bpf+0x593/0x6d0 [ 753.516689][T11743] ? bpf_link_show_fdinfo+0x340/0x340 [ 753.522149][T11743] ? lock_chain_count+0x20/0x20 [ 753.527070][T11743] __x64_sys_bpf+0x78/0x90 [ 753.531544][T11743] do_syscall_64+0x4c/0xa0 [ 753.536012][T11743] ? clear_bhb_loop+0x60/0xb0 [ 753.540838][T11743] ? clear_bhb_loop+0x60/0xb0 [ 753.545560][T11743] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 753.551511][T11743] RIP: 0033:0x7fe2ed98ebe9 [ 753.555968][T11743] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 753.575711][T11743] RSP: 002b:00007fe2ee7fd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 753.584165][T11743] RAX: ffffffffffffffda RBX: 00007fe2edbb5fa0 RCX: 00007fe2ed98ebe9 [ 753.592164][T11743] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 753.600165][T11743] RBP: 00007fe2ee7fd090 R08: 0000000000000000 R09: 0000000000000000 [ 753.608158][T11743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 753.616145][T11743] R13: 00007fe2edbb6038 R14: 00007fe2edbb5fa0 R15: 00007ffe1c1c34a8 [ 753.624146][T11743] [ 753.843530][T11748] netlink: 124 bytes leftover after parsing attributes in process `syz.0.2575'. [ 754.050365][T11759] netlink: 'syz.3.2577': attribute type 28 has an invalid length. [ 754.065050][T11759] netlink: 'syz.3.2577': attribute type 4 has an invalid length. [ 754.075223][T11759] netlink: 136 bytes leftover after parsing attributes in process `syz.3.2577'. [ 757.438881][T11827] netlink: 'syz.0.2601': attribute type 10 has an invalid length. [ 757.456503][T11827] team0: Device ipvlan1 failed to register rx_handler [ 757.535912][T11832] FAULT_INJECTION: forcing a failure. [ 757.535912][T11832] name failslab, interval 1, probability 0, space 0, times 0 [ 757.598467][T11832] CPU: 1 PID: 11832 Comm: syz.4.2602 Not tainted 6.1.148-syzkaller #0 [ 757.607074][T11832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 757.617176][T11832] Call Trace: [ 757.620497][T11832] [ 757.623465][T11832] dump_stack_lvl+0x168/0x22e [ 757.628203][T11832] ? show_regs_print_info+0x12/0x12 [ 757.633458][T11832] ? load_image+0x3b0/0x3b0 [ 757.638016][T11832] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 757.644061][T11832] ? lock_chain_count+0x20/0x20 [ 757.649142][T11832] ? _raw_spin_lock_irqsave+0x7f/0xf0 [ 757.654572][T11832] should_fail_ex+0x399/0x4d0 [ 757.659326][T11832] should_failslab+0x5/0x20 [ 757.663891][T11832] slab_pre_alloc_hook+0x59/0x310 [ 757.668972][T11832] kmem_cache_alloc+0x56/0x2f0 [ 757.673787][T11832] ? __build_skb+0x2a/0x3c0 [ 757.678345][T11832] __build_skb+0x2a/0x3c0 [ 757.682753][T11832] build_skb+0x1e/0x230 [ 757.686966][T11832] bpf_prog_test_run_skb+0x372/0x11b0 [ 757.692398][T11832] ? __fget_files+0x28/0x4d0 [ 757.697050][T11832] ? __fget_files+0x44a/0x4d0 [ 757.701788][T11832] ? cpu_online+0xa0/0xa0 [ 757.706184][T11832] bpf_prog_test_run+0x31e/0x390 [ 757.711175][T11832] __sys_bpf+0x593/0x6d0 [ 757.715484][T11832] ? bpf_link_show_fdinfo+0x340/0x340 [ 757.720931][T11832] ? lock_chain_count+0x20/0x20 [ 757.725853][T11832] __x64_sys_bpf+0x78/0x90 [ 757.730375][T11832] do_syscall_64+0x4c/0xa0 [ 757.734855][T11832] ? clear_bhb_loop+0x60/0xb0 [ 757.739575][T11832] ? clear_bhb_loop+0x60/0xb0 [ 757.744300][T11832] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 757.750286][T11832] RIP: 0033:0x7fdc8838ebe9 [ 757.754747][T11832] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 757.774575][T11832] RSP: 002b:00007fdc89198038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 757.783041][T11832] RAX: ffffffffffffffda RBX: 00007fdc885b5fa0 RCX: 00007fdc8838ebe9 [ 757.791066][T11832] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 757.799082][T11832] RBP: 00007fdc89198090 R08: 0000000000000000 R09: 0000000000000000 [ 757.807113][T11832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 757.815133][T11832] R13: 00007fdc885b6038 R14: 00007fdc885b5fa0 R15: 00007ffe1d24db18 [ 757.823170][T11832] [ 757.966495][T11843] netlink: 'syz.3.2603': attribute type 1 has an invalid length. [ 758.001843][T11843] netlink: 'syz.3.2603': attribute type 4 has an invalid length. [ 758.032272][T11843] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.2603'. [ 758.903064][T11867] netlink: 154020 bytes leftover after parsing attributes in process `syz.2.2614'. [ 758.916578][T11867] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 759.810972][T11902] netlink: 'syz.4.2627': attribute type 20 has an invalid length. [ 759.929037][T11904] netlink: 'syz.2.2628': attribute type 16 has an invalid length. [ 759.966869][T11904] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2628'. [ 760.309134][T11910] netlink: 154020 bytes leftover after parsing attributes in process `syz.2.2630'. [ 760.327562][T11910] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 761.863381][T11940] netlink: 154020 bytes leftover after parsing attributes in process `syz.1.2642'. [ 761.903707][T11940] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 762.176350][T11957] netlink: 'syz.1.2646': attribute type 3 has an invalid length. [ 762.185233][T11957] netlink: 'syz.1.2646': attribute type 1 has an invalid length. [ 762.194787][T11957] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.2646'. [ 762.208319][T11955] netlink: 'syz.0.2645': attribute type 1 has an invalid length. [ 762.222662][T11955] netlink: 'syz.0.2645': attribute type 4 has an invalid length. [ 762.232345][T11955] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.2645'. [ 763.940084][T11982] netlink: 154020 bytes leftover after parsing attributes in process `syz.4.2656'. [ 763.981355][T11982] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 764.003539][T11986] netlink: 'syz.2.2657': attribute type 21 has an invalid length. [ 764.022472][T11986] netlink: 'syz.2.2657': attribute type 20 has an invalid length. [ 764.046101][T11986] IPv6: NLM_F_CREATE should be specified when creating new route [ 764.226277][T11994] netlink: 'syz.0.2659': attribute type 1 has an invalid length. [ 764.283020][T11994] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2659'. [ 765.717174][T12025] netlink: 154020 bytes leftover after parsing attributes in process `syz.0.2670'. [ 765.751432][T12025] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 765.805465][T12029] FAULT_INJECTION: forcing a failure. [ 765.805465][T12029] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 765.853689][T12029] CPU: 1 PID: 12029 Comm: syz.1.2672 Not tainted 6.1.148-syzkaller #0 [ 765.861928][T12029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 765.872017][T12029] Call Trace: [ 765.875326][T12029] [ 765.878292][T12029] dump_stack_lvl+0x168/0x22e [ 765.883188][T12029] ? show_regs_print_info+0x12/0x12 [ 765.888424][T12029] ? load_image+0x3b0/0x3b0 [ 765.893005][T12029] ? __lock_acquire+0x7c50/0x7c50 [ 765.898093][T12029] ? snprintf+0xd7/0x120 [ 765.902400][T12029] should_fail_ex+0x399/0x4d0 [ 765.907149][T12029] _copy_to_user+0x2c/0x130 [ 765.911697][T12029] simple_read_from_buffer+0xe3/0x150 [ 765.917152][T12029] proc_fail_nth_read+0x19a/0x210 [ 765.922415][T12029] ? proc_fault_inject_write+0x2f0/0x2f0 [ 765.928154][T12029] ? fsnotify_perm+0x248/0x550 [ 765.933061][T12029] ? proc_fault_inject_write+0x2f0/0x2f0 [ 765.938733][T12029] vfs_read+0x2c0/0x920 [ 765.942934][T12029] ? kernel_read+0x1e0/0x1e0 [ 765.947697][T12029] ? __fget_files+0x28/0x4d0 [ 765.952357][T12029] ? __fget_files+0x44a/0x4d0 [ 765.957109][T12029] ? __fdget_pos+0x2ae/0x360 [ 765.961738][T12029] ? ksys_read+0x71/0x240 [ 765.966112][T12029] ksys_read+0x143/0x240 [ 765.970401][T12029] ? vfs_write+0x960/0x960 [ 765.974865][T12029] ? lockdep_hardirqs_on+0x94/0x140 [ 765.980116][T12029] do_syscall_64+0x4c/0xa0 [ 765.984576][T12029] ? clear_bhb_loop+0x60/0xb0 [ 765.989290][T12029] ? clear_bhb_loop+0x60/0xb0 [ 765.994020][T12029] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 765.999975][T12029] RIP: 0033:0x7fe2ed98d5fc [ 766.004437][T12029] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 766.024116][T12029] RSP: 002b:00007fe2ee7fd030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 766.032588][T12029] RAX: ffffffffffffffda RBX: 00007fe2edbb5fa0 RCX: 00007fe2ed98d5fc [ 766.040617][T12029] RDX: 000000000000000f RSI: 00007fe2ee7fd0a0 RDI: 0000000000000005 [ 766.048632][T12029] RBP: 00007fe2ee7fd090 R08: 0000000000000000 R09: 0000000000000000 [ 766.056647][T12029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 766.064729][T12029] R13: 00007fe2edbb6038 R14: 00007fe2edbb5fa0 R15: 00007ffe1c1c34a8 [ 766.072770][T12029] [ 767.477041][T12063] FAULT_INJECTION: forcing a failure. [ 767.477041][T12063] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 767.496517][T12063] CPU: 1 PID: 12063 Comm: syz.1.2685 Not tainted 6.1.148-syzkaller #0 [ 767.504743][T12063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 767.514840][T12063] Call Trace: [ 767.518151][T12063] [ 767.521118][T12063] dump_stack_lvl+0x168/0x22e [ 767.525854][T12063] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 767.532082][T12063] ? show_regs_print_info+0x12/0x12 [ 767.537337][T12063] ? load_image+0x3b0/0x3b0 [ 767.541926][T12063] should_fail_ex+0x399/0x4d0 [ 767.546672][T12063] _copy_from_user+0x2c/0x170 [ 767.551402][T12063] __sys_bpf+0x265/0x6d0 [ 767.555737][T12063] ? bpf_link_show_fdinfo+0x340/0x340 [ 767.561186][T12063] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 767.567405][T12063] __x64_sys_bpf+0x78/0x90 [ 767.571876][T12063] do_syscall_64+0x4c/0xa0 [ 767.576329][T12063] ? clear_bhb_loop+0x60/0xb0 [ 767.581049][T12063] ? clear_bhb_loop+0x60/0xb0 [ 767.585778][T12063] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 767.591726][T12063] RIP: 0033:0x7fe2ed98ebe9 [ 767.596182][T12063] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 767.616180][T12063] RSP: 002b:00007fe2ee7fd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 767.624644][T12063] RAX: ffffffffffffffda RBX: 00007fe2edbb5fa0 RCX: 00007fe2ed98ebe9 [ 767.632664][T12063] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 767.640696][T12063] RBP: 00007fe2ee7fd090 R08: 0000000000000000 R09: 0000000000000000 [ 767.648708][T12063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 767.656722][T12063] R13: 00007fe2edbb6038 R14: 00007fe2edbb5fa0 R15: 00007ffe1c1c34a8 [ 767.664765][T12063] [ 768.089218][T12071] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2688'. [ 768.341315][T12077] netlink: 'syz.0.2690': attribute type 21 has an invalid length. [ 768.350260][T12077] netlink: 'syz.0.2690': attribute type 1 has an invalid length. [ 768.358312][T12077] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2690'. [ 769.355169][T12103] netlink: 154020 bytes leftover after parsing attributes in process `syz.4.2700'. [ 769.381021][T12103] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 770.372566][T12112] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.2704'. [ 770.464691][T12117] netlink: 3291 bytes leftover after parsing attributes in process `syz.0.2706'. [ 771.747265][T12149] netlink: 154020 bytes leftover after parsing attributes in process `syz.1.2717'. [ 771.769302][T12149] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 772.089928][T12160] FAULT_INJECTION: forcing a failure. [ 772.089928][T12160] name failslab, interval 1, probability 0, space 0, times 0 [ 772.104880][T12160] CPU: 0 PID: 12160 Comm: syz.0.2720 Not tainted 6.1.148-syzkaller #0 [ 772.113107][T12160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 772.123210][T12160] Call Trace: [ 772.126531][T12160] [ 772.129498][T12160] dump_stack_lvl+0x168/0x22e [ 772.134222][T12160] ? show_regs_print_info+0x12/0x12 [ 772.139482][T12160] ? load_image+0x3b0/0x3b0 [ 772.144047][T12160] ? __might_sleep+0xd0/0xd0 [ 772.149209][T12160] ? __lock_acquire+0x7c50/0x7c50 [ 772.155537][T12160] ? mark_lock+0x94/0x320 [ 772.160351][T12160] should_fail_ex+0x399/0x4d0 [ 772.166048][T12160] should_failslab+0x5/0x20 [ 772.170990][T12160] slab_pre_alloc_hook+0x59/0x310 [ 772.176184][T12160] ? __get_vm_area_node+0x122/0x330 [ 772.181595][T12160] __kmem_cache_alloc_node+0x4f/0x260 [ 772.187200][T12160] ? __get_vm_area_node+0x122/0x330 [ 772.192450][T12160] kmalloc_node_trace+0x22/0xe0 [ 772.197346][T12160] __get_vm_area_node+0x122/0x330 [ 772.202435][T12160] __vmalloc_node_range+0x357/0x1390 [ 772.207960][T12160] ? bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 772.213675][T12160] ? free_vm_area+0x50/0x50 [ 772.218586][T12160] ? end_current_label_crit_section+0x170/0x170 [ 772.224864][T12160] ? __lock_acquire+0x7c50/0x7c50 [ 772.230026][T12160] ? bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 772.235833][T12160] __vmalloc+0x76/0x80 [ 772.239989][T12160] ? bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 772.245749][T12160] bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 772.251162][T12160] ? bpf_lsm_capable+0x5/0x10 [ 772.256067][T12160] bpf_prog_alloc+0x1c/0x1b0 [ 772.260726][T12160] bpf_prog_load+0x7b6/0x15a0 [ 772.265546][T12160] ? map_freeze+0x390/0x390 [ 772.270131][T12160] ? __might_fault+0xa6/0x120 [ 772.274872][T12160] ? __might_fault+0xa6/0x120 [ 772.279599][T12160] ? __might_fault+0xc2/0x120 [ 772.284315][T12160] ? __might_fault+0xa6/0x120 [ 772.289023][T12160] ? bpf_lsm_bpf+0x5/0x10 [ 772.293383][T12160] ? security_bpf+0x7a/0xa0 [ 772.298056][T12160] __sys_bpf+0x520/0x6d0 [ 772.302340][T12160] ? bpf_link_show_fdinfo+0x340/0x340 [ 772.307762][T12160] ? lock_chain_count+0x20/0x20 [ 772.312661][T12160] __x64_sys_bpf+0x78/0x90 [ 772.317299][T12160] do_syscall_64+0x4c/0xa0 [ 772.321766][T12160] ? clear_bhb_loop+0x60/0xb0 [ 772.326594][T12160] ? clear_bhb_loop+0x60/0xb0 [ 772.331295][T12160] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 772.337218][T12160] RIP: 0033:0x7f99cad8ebe9 [ 772.341684][T12160] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 772.361511][T12160] RSP: 002b:00007f99cbc97038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 772.370058][T12160] RAX: ffffffffffffffda RBX: 00007f99cafb6090 RCX: 00007f99cad8ebe9 [ 772.378143][T12160] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 772.386136][T12160] RBP: 00007f99cbc97090 R08: 0000000000000000 R09: 0000000000000000 [ 772.394124][T12160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 772.402579][T12160] R13: 00007f99cafb6128 R14: 00007f99cafb6090 R15: 00007ffcf6fe5f08 [ 772.410691][T12160] [ 772.420298][T12160] syz.0.2720: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 772.440499][T12160] CPU: 0 PID: 12160 Comm: syz.0.2720 Not tainted 6.1.148-syzkaller #0 [ 772.448860][T12160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 772.459155][T12160] Call Trace: [ 772.462457][T12160] [ 772.465408][T12160] dump_stack_lvl+0x168/0x22e [ 772.470108][T12160] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 772.476559][T12160] ? show_regs_print_info+0x12/0x12 [ 772.481776][T12160] ? load_image+0x3b0/0x3b0 [ 772.486304][T12160] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 772.492825][T12160] ? cpuset_print_current_mems_allowed+0x2df/0x360 [ 772.499818][T12160] warn_alloc+0x20c/0x300 [ 772.504530][T12160] ? __get_vm_area_node+0x122/0x330 [ 772.509902][T12160] ? zone_watermark_ok_safe+0x270/0x270 [ 772.515813][T12160] ? rcu_is_watching+0x11/0xa0 [ 772.521214][T12160] ? __get_vm_area_node+0x318/0x330 [ 772.526809][T12160] __vmalloc_node_range+0x37c/0x1390 [ 772.532280][T12160] ? free_vm_area+0x50/0x50 [ 772.536845][T12160] ? end_current_label_crit_section+0x170/0x170 [ 772.543968][T12160] ? __lock_acquire+0x7c50/0x7c50 [ 772.551457][T12160] ? bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 772.557403][T12160] __vmalloc+0x76/0x80 [ 772.561505][T12160] ? bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 772.567197][T12160] bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 772.572744][T12160] ? bpf_lsm_capable+0x5/0x10 [ 772.577481][T12160] bpf_prog_alloc+0x1c/0x1b0 [ 772.582577][T12160] bpf_prog_load+0x7b6/0x15a0 [ 772.587398][T12160] ? map_freeze+0x390/0x390 [ 772.591975][T12160] ? __might_fault+0xa6/0x120 [ 772.597043][T12160] ? __might_fault+0xa6/0x120 [ 772.601865][T12160] ? __might_fault+0xc2/0x120 [ 772.606898][T12160] ? __might_fault+0xa6/0x120 [ 772.612080][T12160] ? bpf_lsm_bpf+0x5/0x10 [ 772.616536][T12160] ? security_bpf+0x7a/0xa0 [ 772.621093][T12160] __sys_bpf+0x520/0x6d0 [ 772.625389][T12160] ? bpf_link_show_fdinfo+0x340/0x340 [ 772.630807][T12160] ? lock_chain_count+0x20/0x20 [ 772.635789][T12160] __x64_sys_bpf+0x78/0x90 [ 772.640245][T12160] do_syscall_64+0x4c/0xa0 [ 772.644776][T12160] ? clear_bhb_loop+0x60/0xb0 [ 772.649497][T12160] ? clear_bhb_loop+0x60/0xb0 [ 772.654198][T12160] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 772.660135][T12160] RIP: 0033:0x7f99cad8ebe9 [ 772.664679][T12160] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 772.684333][T12160] RSP: 002b:00007f99cbc97038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 772.692788][T12160] RAX: ffffffffffffffda RBX: 00007f99cafb6090 RCX: 00007f99cad8ebe9 [ 772.700779][T12160] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 772.708769][T12160] RBP: 00007f99cbc97090 R08: 0000000000000000 R09: 0000000000000000 [ 772.717368][T12160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 772.725387][T12160] R13: 00007f99cafb6128 R14: 00007f99cafb6090 R15: 00007ffcf6fe5f08 [ 772.733400][T12160] [ 772.771316][T12160] Mem-Info: [ 772.816472][T12160] active_anon:5236 inactive_anon:0 isolated_anon:0 [ 772.816472][T12160] active_file:19434 inactive_file:39969 isolated_file:0 [ 772.816472][T12160] unevictable:768 dirty:333 writeback:0 [ 772.816472][T12160] slab_reclaimable:20840 slab_unreclaimable:103583 [ 772.816472][T12160] mapped:29743 shmem:1361 pagetables:595 [ 772.816472][T12160] sec_pagetables:0 bounce:0 [ 772.816472][T12160] kernel_misc_reclaimable:0 [ 772.816472][T12160] free:1283831 free_pcp:9511 free_cma:0 [ 772.996731][T12160] Node 0 active_anon:20828kB inactive_anon:0kB active_file:77736kB inactive_file:159680kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118996kB dirty:1336kB writeback:0kB shmem:3908kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:10984kB pagetables:2380kB sec_pagetables:0kB all_unreclaimable? no [ 773.030647][T12160] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 773.108266][T12160] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 773.195954][T12160] lowmem_reserve[]: 0 2527 2528 2528 2528 [ 773.212498][T12160] Node 0 DMA32 free:1243200kB boost:0kB min:34692kB low:43364kB high:52036kB reserved_highatomic:0KB active_anon:20728kB inactive_anon:0kB active_file:77736kB inactive_file:159680kB unevictable:1536kB writepending:1336kB present:3129332kB managed:2593356kB mlocked:0kB bounce:0kB free_pcp:13632kB local_pcp:1280kB free_cma:0kB [ 773.265005][T12174] FAULT_INJECTION: forcing a failure. [ 773.265005][T12174] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 773.277228][T12160] lowmem_reserve[]: 0 0 1 1 1 [ 773.283768][T12160] Node 0 Normal free:20kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:24kB local_pcp:12kB free_cma:0kB [ 773.312167][T12174] CPU: 0 PID: 12174 Comm: syz.4.2727 Not tainted 6.1.148-syzkaller #0 [ 773.320382][T12174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 773.330594][T12174] Call Trace: [ 773.333896][T12174] [ 773.336863][T12174] dump_stack_lvl+0x168/0x22e [ 773.341693][T12174] ? show_regs_print_info+0x12/0x12 [ 773.347276][T12174] ? load_image+0x3b0/0x3b0 [ 773.352098][T12174] ? __lock_acquire+0x7c50/0x7c50 [ 773.357174][T12174] ? snprintf+0xd7/0x120 [ 773.361463][T12174] should_fail_ex+0x399/0x4d0 [ 773.366175][T12174] _copy_to_user+0x2c/0x130 [ 773.370703][T12174] simple_read_from_buffer+0xe3/0x150 [ 773.376116][T12174] proc_fail_nth_read+0x19a/0x210 [ 773.381162][T12174] ? proc_fault_inject_write+0x2f0/0x2f0 [ 773.386824][T12174] ? fsnotify_perm+0x248/0x550 [ 773.391603][T12174] ? proc_fault_inject_write+0x2f0/0x2f0 [ 773.397270][T12174] vfs_read+0x2c0/0x920 [ 773.401455][T12174] ? kernel_read+0x1e0/0x1e0 [ 773.406096][T12174] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 773.412278][T12174] ? lockdep_hardirqs_on+0x94/0x140 [ 773.417611][T12174] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 773.423924][T12174] ? ksys_read+0x89/0x240 [ 773.428299][T12174] ksys_read+0x143/0x240 [ 773.432575][T12174] ? vfs_write+0x960/0x960 [ 773.437016][T12174] ? lockdep_hardirqs_on+0x94/0x140 [ 773.442241][T12174] do_syscall_64+0x4c/0xa0 [ 773.446766][T12174] ? clear_bhb_loop+0x60/0xb0 [ 773.451761][T12174] ? clear_bhb_loop+0x60/0xb0 [ 773.456663][T12174] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 773.462655][T12174] RIP: 0033:0x7fdc8838d5fc [ 773.467092][T12174] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 773.486724][T12174] RSP: 002b:00007fdc89198030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 773.495166][T12174] RAX: ffffffffffffffda RBX: 00007fdc885b5fa0 RCX: 00007fdc8838d5fc [ 773.503244][T12174] RDX: 000000000000000f RSI: 00007fdc891980a0 RDI: 0000000000000006 [ 773.511324][T12174] RBP: 00007fdc89198090 R08: 0000000000000000 R09: 0000000000000000 [ 773.519333][T12174] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 773.527519][T12174] R13: 00007fdc885b6038 R14: 00007fdc885b5fa0 R15: 00007ffe1d24db18 [ 773.536062][T12174] [ 773.570555][T12160] lowmem_reserve[]: 0 0 0 0 0 [ 773.575372][T12160] Node 1 Normal free:3901340kB boost:0kB min:55192kB low:68988kB high:82784kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:15872kB local_pcp:5184kB free_cma:0kB [ 773.616606][T12160] lowmem_reserve[]: 0 0 0 0 0 [ 773.622140][T12160] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 773.662123][T12160] Node 0 DMA32: 1836*4kB (UME) 1750*8kB (UME) 1260*16kB (UME) 3019*32kB (UME) 1033*64kB (UME) 228*128kB (UM) 74*256kB (UME) 32*512kB (UM) 16*1024kB (UME) 7*2048kB (M) 230*4096kB (M) = 1241536kB [ 773.695362][T12160] Node 0 Normal: 3*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB [ 773.720830][T12160] Node 1 Normal: 237*4kB (UME) 53*8kB (UME) 34*16kB (UE) 93*32kB (UME) 26*64kB (UME) 14*128kB (UME) 13*256kB (UM) 3*512kB (UME) 1*1024kB (E) 2*2048kB (UE) 948*4096kB (M) = 3901340kB [ 773.746623][T12160] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 773.756534][T12160] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 773.819216][T12160] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 773.875689][T12160] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 773.906896][T12183] netlink: 154020 bytes leftover after parsing attributes in process `syz.2.2729'. [ 773.937038][T12183] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 773.938438][T12160] 60764 total pagecache pages [ 773.956961][T12160] 0 pages in swap cache [ 773.961281][T12160] Free swap = 124996kB [ 773.986297][T12160] Total swap = 124996kB [ 774.009080][T12160] 2097051 pages RAM [ 774.013067][T12160] 0 pages HighMem/MovableOnly [ 774.017775][T12160] 415111 pages reserved [ 774.042786][T12160] 0 pages cma reserved [ 774.251200][T12197] netlink: 'syz.0.2732': attribute type 10 has an invalid length. [ 774.556726][T12197] 8021q: adding VLAN 0 to HW filter on device bond0 [ 774.604228][T12197] team0: Port device bond0 added [ 774.868910][T12212] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 775.003489][T12212] device syzkaller0 entered promiscuous mode [ 776.284339][T12235] netlink: 154020 bytes leftover after parsing attributes in process `syz.3.2743'. [ 776.380969][T12235] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 779.424849][T12279] netlink: 154020 bytes leftover after parsing attributes in process `syz.2.2759'. [ 779.436079][T12279] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 780.624172][T12243] netlink: 'syz.4.2748': attribute type 10 has an invalid length. [ 780.649859][T12243] team0: Device bond0 is already an upper device of the team interface [ 782.058963][T12310] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2770'. [ 782.425772][T12319] delete_channel: no stack [ 782.434749][T12319] delete_channel: no stack [ 783.274530][T12323] netlink: 'syz.3.2775': attribute type 10 has an invalid length. [ 783.310643][T12325] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2784'. [ 783.654816][T12337] netlink: 194236 bytes leftover after parsing attributes in process `syz.1.2779'. [ 783.693565][T12337] netlink: zone id is out of range [ 783.722787][T12337] netlink: zone id is out of range [ 783.768976][T12337] netlink: zone id is out of range [ 783.798797][T12337] netlink: zone id is out of range [ 783.812895][T12337] netlink: zone id is out of range [ 783.818869][T12323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 783.828831][T12337] netlink: zone id is out of range [ 783.838076][T12337] netlink: zone id is out of range [ 783.853910][T12337] netlink: zone id is out of range [ 783.861738][T12337] netlink: zone id is out of range [ 783.867511][T12337] netlink: zone id is out of range [ 784.025020][T12323] team0: Port device bond0 added [ 785.383535][T12371] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2791'. [ 785.568935][T12375] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2793'. [ 786.195228][T12396] netlink: 178620 bytes leftover after parsing attributes in process `syz.2.2799'. [ 787.332618][T12411] netlink: 'syz.4.2805': attribute type 3 has an invalid length. [ 787.375233][T12414] netlink: 154020 bytes leftover after parsing attributes in process `syz.0.2803'. [ 787.434272][T12411] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2805'. [ 787.803887][T12426] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2809'. [ 788.132397][T12439] netlink: 'syz.1.2812': attribute type 17 has an invalid length. [ 788.142980][T12439] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2812'. [ 788.918555][T12455] device syzkaller0 entered promiscuous mode [ 789.281929][T12469] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2823'. [ 790.241123][T12485] netlink: 180 bytes leftover after parsing attributes in process `syz.2.2831'. [ 792.269476][ T4324] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 792.279799][ T4324] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 792.291481][ T4324] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 792.313272][ T4327] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 792.321506][ T4327] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 792.329119][ T4327] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 792.497804][T12524] netlink: 'syz.2.2839': attribute type 3 has an invalid length. [ 792.534673][T12524] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2839'. [ 792.917246][ T4314] bond0: (slave syz_tun): Releasing backup interface [ 793.086233][T12532] netlink: 'syz.0.2843': attribute type 3 has an invalid length. [ 793.101996][T12532] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2843'. [ 793.973307][ T4342] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 794.103334][T12519] chnl_net:caif_netlink_parms(): no params data found [ 794.181551][ T4342] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 794.388305][T12552] netlink: 'syz.2.2849': attribute type 1 has an invalid length. [ 794.397302][T12552] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2849'. [ 794.506070][ T4342] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 794.638162][T12553] netlink: 'syz.1.2848': attribute type 23 has an invalid length. [ 794.680623][ T4342] team0: Port device netdevsim0 removed [ 794.702734][ T4342] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 794.709435][ T4327] Bluetooth: hci5: command 0x0409 tx timeout [ 794.797275][T12519] bridge0: port 1(bridge_slave_0) entered blocking state [ 794.813027][T12519] bridge0: port 1(bridge_slave_0) entered disabled state [ 794.823988][T12519] device bridge_slave_0 entered promiscuous mode [ 794.850830][T12519] bridge0: port 2(bridge_slave_1) entered blocking state [ 794.860945][T12519] bridge0: port 2(bridge_slave_1) entered disabled state [ 794.871307][T12519] device bridge_slave_1 entered promiscuous mode [ 794.952787][T12519] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 794.983171][T12519] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 795.055674][T12519] team0: Port device team_slave_0 added [ 795.109013][T12519] team0: Port device team_slave_1 added [ 795.176774][ T4342] device 0 left promiscuous mode [ 795.234655][T12519] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 795.263988][T12519] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 795.392726][T12519] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 796.149016][T12586] netlink: 154020 bytes leftover after parsing attributes in process `syz.2.2856'. [ 796.211878][T12586] net_ratelimit: 155 callbacks suppressed [ 796.211900][T12586] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 796.366470][T12519] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 796.384388][T12519] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 796.462060][T12519] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 796.634750][T12519] device hsr_slave_0 entered promiscuous mode [ 796.676176][T12519] device hsr_slave_1 entered promiscuous mode [ 796.697585][T12519] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 796.735630][T12519] Cannot create hsr debugfs directory [ 796.796683][ T4327] Bluetooth: hci5: command 0x041b tx timeout [ 797.197880][T12604] netlink: 'syz.3.2860': attribute type 3 has an invalid length. [ 797.219098][T12604] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2860'. [ 798.625405][ T4342] device hsr_slave_0 left promiscuous mode [ 798.643168][ T4342] device hsr_slave_1 left promiscuous mode [ 798.663539][ T4342] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 798.672630][ T4342] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 798.685971][ T4342] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 798.693730][ T4342] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 798.715551][ T4342] bridge0: port 3(dummy0) entered disabled state [ 798.745311][ T4342] device bridge_slave_1 left promiscuous mode [ 798.779188][ T4342] bridge0: port 2(bridge_slave_1) entered disabled state [ 798.801094][ T4342] device bridge_slave_0 left promiscuous mode [ 798.807418][ T4342] bridge0: port 1(bridge_slave_0) entered disabled state [ 798.859755][ T4327] Bluetooth: hci5: command 0x040f tx timeout [ 798.928233][ T4342] device veth1_macvtap left promiscuous mode [ 798.935097][ T4342] device veth0_macvtap left promiscuous mode [ 798.943498][ T4342] device veth1_vlan left promiscuous mode [ 798.960159][ T4342] device veth0_vlan left promiscuous mode [ 799.315221][T12638] netlink: 154020 bytes leftover after parsing attributes in process `syz.1.2868'. [ 799.338674][T12638] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 799.489252][ T4342] team0 (unregistering): Port device geneve1 removed [ 799.967306][ T4342] team0 (unregistering): Port device vlan0 removed [ 800.384266][ T4342] team0 (unregistering): Port device team_slave_1 removed [ 800.427913][ T4342] team0 (unregistering): Port device team_slave_0 removed [ 800.473093][ T4342] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 800.523758][ T4342] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 800.949916][ T4327] Bluetooth: hci5: command 0x0419 tx timeout [ 801.021843][ T4342] bond0 (unregistering): (slave team0): Releasing backup interface [ 801.225875][ T4342] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 801.235069][ T4342] bond0 (unregistering): Released all slaves [ 801.316883][T12633] netlink: 'syz.3.2867': attribute type 1 has an invalid length. [ 801.576661][T12519] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 801.593970][T12519] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 801.624788][T12519] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 801.652801][T12519] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 801.911871][T12519] 8021q: adding VLAN 0 to HW filter on device bond0 [ 801.950470][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 801.966022][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 801.993352][T12519] 8021q: adding VLAN 0 to HW filter on device team0 [ 802.025937][T12695] netlink: 154020 bytes leftover after parsing attributes in process `syz.0.2882'. [ 802.036361][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 802.046135][T12695] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 802.052168][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 802.071465][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 802.078722][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 802.090089][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 802.118456][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 802.133003][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 802.160599][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 802.167767][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 802.186029][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 802.197853][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 802.211018][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 802.222342][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 802.233569][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 802.247265][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 802.256663][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 802.277251][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 802.286709][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 802.298713][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 802.311059][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 802.531781][T12707] netlink: 'syz.2.2885': attribute type 23 has an invalid length. [ 802.686159][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 802.694254][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 802.709038][T12519] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 803.081438][T12717] syzkaller1: tun_chr_ioctl cmd 1074025678 [ 803.100983][T12717] syzkaller1: group set to 778 [ 803.575851][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 803.602254][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 803.642145][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 803.656109][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 803.683274][T12519] device veth0_vlan entered promiscuous mode [ 803.709278][T12519] device veth1_vlan entered promiscuous mode [ 803.726159][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 803.735670][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 803.749698][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 803.824318][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 803.833378][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 803.843237][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 803.855725][T12519] device veth0_macvtap entered promiscuous mode [ 803.880279][T12519] device veth1_macvtap entered promiscuous mode [ 803.926873][T12519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 803.937797][T12519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 803.953694][T12519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 803.966030][T12519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 803.983716][T12519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 803.996403][T12519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 804.017428][T12519] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 804.033727][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 804.047148][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 804.058640][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 804.074688][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 804.093918][T12519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 804.110965][T12519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 804.128126][T12519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 804.149056][T12519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 804.161124][T12519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 804.179403][T12519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 804.198792][T12519] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 804.210015][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 804.227802][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 804.254613][T12519] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 804.273416][T12519] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 804.296232][T12519] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 804.315345][T12519] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 804.754838][ T4342] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 804.771871][ T4342] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 804.793307][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 804.844307][ T4408] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 804.853429][ T4408] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 804.865402][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 806.879881][T12798] netlink: 180 bytes leftover after parsing attributes in process `syz.4.2912'. [ 808.805735][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.812393][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.806946][T12849] netlink: 'syz.3.2929': attribute type 11 has an invalid length. [ 809.842339][T12849] netlink: 177212 bytes leftover after parsing attributes in process `syz.3.2929'. [ 810.570010][T12847] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 813.536965][T12906] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2947'. [ 814.807816][T12916] netlink: 154020 bytes leftover after parsing attributes in process `syz.3.2952'. [ 814.837778][T12916] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 816.506566][T12951] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2961'. [ 816.599120][T12953] sctp: [Deprecated]: syz.1.2962 (pid 12953) Use of int in maxseg socket option. [ 816.599120][T12953] Use struct sctp_assoc_value instead [ 817.246313][T12967] netlink: 154020 bytes leftover after parsing attributes in process `syz.0.2965'. [ 817.291498][T12967] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 818.173857][T12998] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2978'. [ 819.101572][T13005] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2980'. [ 819.162860][T13005] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2980'. [ 819.362835][T13011] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2980'. [ 819.418822][T13013] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2980'. [ 819.606760][T13016] netlink: 154020 bytes leftover after parsing attributes in process `syz.4.2984'. [ 819.655288][T13016] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 822.809630][ T4320] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 822.822196][ T4320] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 822.833090][ T4320] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 822.841421][ T4320] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 822.849367][ T4320] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 822.858234][ T4320] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 823.376898][T13086] chnl_net:caif_netlink_parms(): no params data found [ 824.014862][ T4421] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 824.209844][T13086] bridge0: port 1(bridge_slave_0) entered blocking state [ 824.217239][T13086] bridge0: port 1(bridge_slave_0) entered disabled state [ 824.241134][T13086] device bridge_slave_0 entered promiscuous mode [ 824.309398][T13117] netlink: 'syz.1.3017': attribute type 2 has an invalid length. [ 824.342853][T13117] netlink: 10 bytes leftover after parsing attributes in process `syz.1.3017'. [ 824.515288][ T4421] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 824.586807][T13086] bridge0: port 2(bridge_slave_1) entered blocking state [ 824.614634][T13086] bridge0: port 2(bridge_slave_1) entered disabled state [ 824.639965][T13086] device bridge_slave_1 entered promiscuous mode [ 824.955888][ T4327] Bluetooth: hci1: command 0x0409 tx timeout [ 825.128353][T13117] device veth1_macvtap left promiscuous mode [ 825.142682][T13117] device macsec0 entered promiscuous mode [ 825.208007][T13119] device veth1_macvtap entered promiscuous mode [ 825.413695][ T4421] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 825.537144][T13086] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 825.736281][ T4421] team0: Port device netdevsim0 removed [ 825.762352][ T4421] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 825.842584][T13086] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 826.068711][T13086] team0: Port device team_slave_0 added [ 826.139398][T13086] team0: Port device team_slave_1 added [ 826.326374][T13086] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 826.373406][T13086] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 826.496567][T13086] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 826.927104][T13086] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 826.948896][T13086] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 827.019930][ T4327] Bluetooth: hci1: command 0x041b tx timeout [ 827.029880][T13086] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 827.413744][T13086] device hsr_slave_0 entered promiscuous mode [ 827.450079][T13086] device hsr_slave_1 entered promiscuous mode [ 827.459483][T13086] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 827.481174][T13086] Cannot create hsr debugfs directory [ 827.711120][T13171] netlink: 'syz.4.3034': attribute type 2 has an invalid length. [ 829.099841][ T4327] Bluetooth: hci1: command 0x040f tx timeout [ 829.721002][ T4421] device hsr_slave_1 left promiscuous mode [ 829.743631][ T4421] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 829.789763][ T4421] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 829.823529][ T4421] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 829.867533][ T4421] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 829.913969][ T4421] bridge0: port 3(dummy0) entered disabled state [ 829.992644][ T4421] device bridge_slave_1 left promiscuous mode [ 830.010276][ T4421] bridge0: port 2(bridge_slave_1) entered disabled state [ 830.067843][ T4421] device bridge_slave_0 left promiscuous mode [ 830.112849][ T4421] bridge0: port 1(bridge_slave_0) entered disabled state [ 830.376381][ T4421] device veth1_macvtap left promiscuous mode [ 830.419153][ T4421] device veth0_macvtap left promiscuous mode [ 830.459742][ T4421] device veth1_vlan left promiscuous mode [ 830.480193][ T4421] device veth0_vlan left promiscuous mode [ 831.180656][ T4327] Bluetooth: hci1: command 0x0419 tx timeout [ 832.004208][ T4421] team0 (unregistering): Port device geneve1 removed [ 832.805266][ T4421] team0 (unregistering): Port device team_slave_1 removed [ 832.853719][ T4421] team0 (unregistering): Port device team_slave_0 removed [ 832.896721][ T4421] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 832.952047][ T4421] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 833.292564][ T4421] team0 (unregistering): Port device bond0 removed [ 833.422850][ T4421] bond0 (unregistering): Released all slaves [ 833.511300][T13209] device pim6reg1 entered promiscuous mode [ 833.734501][T13086] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 833.781178][T13086] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 833.863713][T13086] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 833.923302][T13086] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 834.470120][T13355] netlink: 'syz.2.3059': attribute type 10 has an invalid length. [ 834.562712][T13355] team0: Port device geneve1 added [ 834.661203][T13086] 8021q: adding VLAN 0 to HW filter on device bond0 [ 834.758291][T13297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 834.786356][T13297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 834.809254][T13086] 8021q: adding VLAN 0 to HW filter on device team0 [ 834.855963][T13301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 834.879476][T13301] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 834.918260][T13301] bridge0: port 1(bridge_slave_0) entered blocking state [ 834.925607][T13301] bridge0: port 1(bridge_slave_0) entered forwarding state [ 834.962509][T13301] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 834.981565][T13301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 835.012901][T13301] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 835.044156][T13301] bridge0: port 2(bridge_slave_1) entered blocking state [ 835.051476][T13301] bridge0: port 2(bridge_slave_1) entered forwarding state [ 835.128420][T13301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 835.147610][T13301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 835.172490][T13301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 835.214793][T13301] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 835.250881][T13301] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 835.268849][T13301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 835.291609][T13301] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 835.305403][T13301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 835.321806][T13301] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 835.354555][T13282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 835.364024][T13282] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 835.378005][T13086] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 837.072063][T13297] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 837.083338][T13297] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 837.115582][T13086] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 837.202862][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 837.224719][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 837.305336][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 837.320625][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 837.340396][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 837.360328][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 837.382707][T13086] device veth0_vlan entered promiscuous mode [ 837.413456][T13086] device veth1_vlan entered promiscuous mode [ 837.503313][T13282] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 837.532202][T13282] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 837.540819][T13282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 837.577246][T13282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 837.618265][T13086] device veth0_macvtap entered promiscuous mode [ 837.643582][T13418] netlink: 'syz.1.3074': attribute type 21 has an invalid length. [ 837.695754][T13418] netlink: 'syz.1.3074': attribute type 6 has an invalid length. [ 837.829617][T13418] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3074'. [ 837.884231][T13086] device veth1_macvtap entered promiscuous mode [ 837.986063][T13086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 838.036133][T13086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 838.078067][T13086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 838.120933][T13086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 838.155988][T13086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 838.187297][T13086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 838.262697][T13086] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 838.287745][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 838.315895][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 838.360190][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 838.400322][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 838.450595][T13086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 838.483210][T13086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 838.507828][T13086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 838.550116][T13086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 838.567646][T13086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 838.594777][T13086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 838.621287][T13086] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 838.647280][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 838.662276][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 838.693528][T13086] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 838.712910][T13086] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 838.738495][T13086] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 838.764218][T13086] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 839.094998][T13297] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 839.107757][T13440] netlink: 'syz.4.3079': attribute type 28 has an invalid length. [ 839.121956][T13297] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 839.165502][T13440] netlink: 'syz.4.3079': attribute type 4 has an invalid length. [ 839.196003][T13297] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 839.234033][T13299] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 839.234572][T13440] netlink: 136 bytes leftover after parsing attributes in process `syz.4.3079'. [ 839.260199][T13299] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 839.331625][T13299] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 841.124312][T13295] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 841.564311][T13295] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 841.770686][T13295] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 841.903401][ T4324] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 841.913658][ T4324] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 841.922220][ T4324] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 841.931006][ T4324] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 841.938960][ T4324] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 841.947088][ T4320] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 842.048452][T13295] team0: Port device netdevsim0 removed [ 842.057043][T13295] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 842.091594][T13512] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3100'. [ 842.607866][T13295] device 0 left promiscuous mode [ 843.029182][T13534] netlink: 'syz.0.3105': attribute type 13 has an invalid length. [ 843.051918][T13534] netlink: 160 bytes leftover after parsing attributes in process `syz.0.3105'. [ 843.131177][T13534] erspan0: refused to change device tx_queue_len [ 843.163761][T13534] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 843.537198][T13507] chnl_net:caif_netlink_parms(): no params data found [ 843.702494][T13546] device pim6reg1 entered promiscuous mode [ 844.059866][ T4320] Bluetooth: hci0: command 0x0409 tx timeout [ 844.179885][T13507] bridge0: port 1(bridge_slave_0) entered blocking state [ 844.187153][T13507] bridge0: port 1(bridge_slave_0) entered disabled state [ 844.217405][T13507] device bridge_slave_0 entered promiscuous mode [ 844.256969][T13565] netlink: 'syz.4.3114': attribute type 5 has an invalid length. [ 844.438546][T13507] bridge0: port 2(bridge_slave_1) entered blocking state [ 844.460007][T13507] bridge0: port 2(bridge_slave_1) entered disabled state [ 844.468361][T13507] device bridge_slave_1 entered promiscuous mode [ 844.803779][T13507] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 844.849098][T13583] netlink: 'syz.3.3120': attribute type 21 has an invalid length. [ 844.954915][T13507] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 845.937498][T13295] bond0: (slave wlan1): Releasing backup interface [ 846.062427][T13507] team0: Port device team_slave_0 added [ 846.108184][T13507] team0: Port device team_slave_1 added [ 846.139847][ T4320] Bluetooth: hci0: command 0x041b tx timeout [ 846.394841][T13507] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 846.420526][T13507] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 846.488067][T13507] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 846.517142][T13507] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 846.553688][T13507] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 846.634377][T13606] FAULT_INJECTION: forcing a failure. [ 846.634377][T13606] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 846.648506][T13507] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 846.669333][T13606] CPU: 1 PID: 13606 Comm: syz.3.3129 Not tainted 6.1.148-syzkaller #0 [ 846.677583][T13606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 846.687792][T13606] Call Trace: [ 846.691127][T13606] [ 846.694088][T13606] dump_stack_lvl+0x168/0x22e [ 846.698829][T13606] ? show_regs_print_info+0x12/0x12 [ 846.704088][T13606] ? load_image+0x3b0/0x3b0 [ 846.708728][T13606] ? __lock_acquire+0x7c50/0x7c50 [ 846.713929][T13606] should_fail_ex+0x399/0x4d0 [ 846.718751][T13606] _copy_from_user+0x2c/0x170 [ 846.723686][T13606] __sys_bpf+0x265/0x6d0 [ 846.727968][T13606] ? bpf_link_show_fdinfo+0x340/0x340 [ 846.733394][T13606] ? lock_chain_count+0x20/0x20 [ 846.738303][T13606] __x64_sys_bpf+0x78/0x90 [ 846.743193][T13606] do_syscall_64+0x4c/0xa0 [ 846.747745][T13606] ? clear_bhb_loop+0x60/0xb0 [ 846.752557][T13606] ? clear_bhb_loop+0x60/0xb0 [ 846.757398][T13606] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 846.763343][T13606] RIP: 0033:0x7fa8fa18ebe9 [ 846.767790][T13606] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 846.787438][T13606] RSP: 002b:00007fa8fb066038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 846.795891][T13606] RAX: ffffffffffffffda RBX: 00007fa8fa3b5fa0 RCX: 00007fa8fa18ebe9 [ 846.803893][T13606] RDX: 0000000000000050 RSI: 0000200000000300 RDI: 000000000000000a [ 846.811893][T13606] RBP: 00007fa8fb066090 R08: 0000000000000000 R09: 0000000000000000 [ 846.819979][T13606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 846.828675][T13606] R13: 00007fa8fa3b6038 R14: 00007fa8fa3b5fa0 R15: 00007fff2a020888 [ 846.836702][T13606] [ 846.853835][T13612] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.3131'. [ 847.173418][T13507] device hsr_slave_0 entered promiscuous mode [ 847.256444][T13507] device hsr_slave_1 entered promiscuous mode [ 847.570376][T13625] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3135'. [ 848.117305][T13295] device hsr_slave_0 left promiscuous mode [ 848.144472][T13295] device hsr_slave_1 left promiscuous mode [ 848.174046][T13295] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 848.203102][T13295] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 848.219934][ T4320] Bluetooth: hci0: command 0x040f tx timeout [ 848.291539][T13295] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 848.302544][T13295] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 848.319223][T13295] bridge0: port 3(dummy0) entered disabled state [ 848.426008][T13295] device bridge_slave_1 left promiscuous mode [ 848.434951][T13295] bridge0: port 2(bridge_slave_1) entered disabled state [ 848.476410][T13295] device bridge_slave_0 left promiscuous mode [ 848.513289][T13295] bridge0: port 1(bridge_slave_0) entered disabled state [ 848.734120][T13295] device veth1_macvtap left promiscuous mode [ 848.800994][T13295] device veth0_macvtap left promiscuous mode [ 848.822649][T13295] device veth1_vlan left promiscuous mode [ 848.848734][T13295] device veth0_vlan left promiscuous mode [ 849.082757][T13658] delete_channel: no stack [ 849.087432][T13658] delete_channel: no stack [ 849.582084][T13295] team0 (unregistering): Port device geneve1 removed [ 850.093154][T13295] team0 (unregistering): Port device vlan0 removed [ 850.306494][ T4320] Bluetooth: hci0: command 0x0419 tx timeout [ 850.480964][T13295] team0 (unregistering): Port device team_slave_1 removed [ 850.538723][T13295] team0 (unregistering): Port device team_slave_0 removed [ 850.600565][T13295] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 850.648251][T13295] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 851.118394][T13295] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 851.127698][T13295] bond0 (unregistering): Released all slaves [ 851.228097][T13658] netlink: 14601 bytes leftover after parsing attributes in process `syz.4.3143'. [ 851.240148][T13667] netlink: 'syz.0.3144': attribute type 21 has an invalid length. [ 851.248582][T13667] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3144'. [ 851.683907][T13677] netlink: 'syz.0.3146': attribute type 1 has an invalid length. [ 851.701442][T13677] netlink: 144 bytes leftover after parsing attributes in process `syz.0.3146'. [ 851.981342][T13692] FAULT_INJECTION: forcing a failure. [ 851.981342][T13692] name failslab, interval 1, probability 0, space 0, times 0 [ 852.035681][T13692] CPU: 1 PID: 13692 Comm: syz.0.3151 Not tainted 6.1.148-syzkaller #0 [ 852.044007][T13692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 852.054107][T13692] Call Trace: [ 852.057431][T13692] [ 852.060403][T13692] dump_stack_lvl+0x168/0x22e [ 852.065138][T13692] ? show_regs_print_info+0x12/0x12 [ 852.070385][T13692] ? load_image+0x3b0/0x3b0 [ 852.074949][T13692] ? __might_sleep+0xd0/0xd0 [ 852.079598][T13692] ? __lock_acquire+0x7c50/0x7c50 [ 852.084685][T13692] should_fail_ex+0x399/0x4d0 [ 852.089430][T13692] should_failslab+0x5/0x20 [ 852.093988][T13692] slab_pre_alloc_hook+0x59/0x310 [ 852.099137][T13692] ? bpf_prog_test_run_flow_dissector+0x22d/0x600 [ 852.105591][T13692] __kmem_cache_alloc_node+0x4f/0x260 [ 852.110984][T13692] ? bpf_prog_test_run_flow_dissector+0x22d/0x600 [ 852.117420][T13692] __kmalloc+0xa0/0x240 [ 852.121606][T13692] bpf_prog_test_run_flow_dissector+0x22d/0x600 [ 852.127894][T13692] ? xdp_convert_buff_to_md+0x200/0x200 [ 852.133482][T13692] ? __fget_files+0x28/0x4d0 [ 852.138550][T13692] ? __fget_files+0x44a/0x4d0 [ 852.143293][T13692] ? xdp_convert_buff_to_md+0x200/0x200 [ 852.149014][T13692] bpf_prog_test_run+0x31e/0x390 [ 852.154001][T13692] __sys_bpf+0x593/0x6d0 [ 852.158355][T13692] ? bpf_link_show_fdinfo+0x340/0x340 [ 852.163956][T13692] ? lock_chain_count+0x20/0x20 [ 852.168853][T13692] __x64_sys_bpf+0x78/0x90 [ 852.173292][T13692] do_syscall_64+0x4c/0xa0 [ 852.177727][T13692] ? clear_bhb_loop+0x60/0xb0 [ 852.182421][T13692] ? clear_bhb_loop+0x60/0xb0 [ 852.187121][T13692] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 852.193037][T13692] RIP: 0033:0x7f2644d8ebe9 [ 852.197465][T13692] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 852.217093][T13692] RSP: 002b:00007f2645b1f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 852.225721][T13692] RAX: ffffffffffffffda RBX: 00007f2644fb5fa0 RCX: 00007f2644d8ebe9 [ 852.233730][T13692] RDX: 0000000000000050 RSI: 0000200000000300 RDI: 000000000000000a [ 852.241978][T13692] RBP: 00007f2645b1f090 R08: 0000000000000000 R09: 0000000000000000 [ 852.250072][T13692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 852.258063][T13692] R13: 00007f2644fb6038 R14: 00007f2644fb5fa0 R15: 00007ffdd20b2eb8 [ 852.266505][T13692] [ 852.633728][T13507] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 852.649394][T13507] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 852.688924][T13507] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 852.748106][T13507] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 853.184065][T13507] 8021q: adding VLAN 0 to HW filter on device bond0 [ 853.234990][T13297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 853.247087][T13297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 853.286855][T13507] 8021q: adding VLAN 0 to HW filter on device team0 [ 853.316950][T13301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 853.334183][T13301] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 853.376054][T13301] bridge0: port 1(bridge_slave_0) entered blocking state [ 853.383326][T13301] bridge0: port 1(bridge_slave_0) entered forwarding state [ 853.428648][T13301] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 853.452209][T13301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 853.486748][T13301] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 853.519103][T13301] bridge0: port 2(bridge_slave_1) entered blocking state [ 853.526464][T13301] bridge0: port 2(bridge_slave_1) entered forwarding state [ 853.576356][T13301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 853.638394][T13301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 853.685425][T13301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 853.744231][T13301] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 853.801252][T13301] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 853.829356][T13301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 853.903517][T13301] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 853.924532][T13301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 853.940431][T13301] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 853.966789][T13507] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 854.013558][T13507] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 854.042927][T13301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 854.058007][T13301] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 854.712484][T13758] IPv6: NLM_F_CREATE should be specified when creating new route [ 854.738028][T13758] netlink: 1 bytes leftover after parsing attributes in process `syz.4.3166'. [ 854.959164][T13297] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 854.993879][T13297] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 855.030274][T13507] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 855.095271][T13295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 855.120699][T13295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 855.272601][T13301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 855.331506][T13301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 855.361956][T13507] device veth0_vlan entered promiscuous mode [ 855.386379][T13301] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 855.400477][T13301] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 855.437014][T13507] device veth1_vlan entered promiscuous mode [ 855.561990][T13297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 855.600636][T13297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 855.652688][T13507] device veth0_macvtap entered promiscuous mode [ 855.673630][T13785] FAULT_INJECTION: forcing a failure. [ 855.673630][T13785] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 855.688158][T13507] device veth1_macvtap entered promiscuous mode [ 855.704621][T13785] CPU: 0 PID: 13785 Comm: syz.1.3172 Not tainted 6.1.148-syzkaller #0 [ 855.712980][T13785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 855.723083][T13785] Call Trace: [ 855.726396][T13785] [ 855.729364][T13785] dump_stack_lvl+0x168/0x22e [ 855.734096][T13785] ? show_regs_print_info+0x12/0x12 [ 855.739337][T13785] ? load_image+0x3b0/0x3b0 [ 855.743891][T13785] ? __lock_acquire+0x7c50/0x7c50 [ 855.748978][T13785] should_fail_ex+0x399/0x4d0 [ 855.753722][T13785] _copy_from_user+0x2c/0x170 [ 855.758450][T13785] bpf_prog_test_run_flow_dissector+0x255/0x600 [ 855.764784][T13785] ? xdp_convert_buff_to_md+0x200/0x200 [ 855.770397][T13785] ? __fget_files+0x28/0x4d0 [ 855.775046][T13785] ? __fget_files+0x44a/0x4d0 [ 855.779792][T13785] ? xdp_convert_buff_to_md+0x200/0x200 [ 855.785402][T13785] bpf_prog_test_run+0x31e/0x390 [ 855.790397][T13785] __sys_bpf+0x593/0x6d0 [ 855.794716][T13785] ? bpf_link_show_fdinfo+0x340/0x340 [ 855.800164][T13785] ? lock_chain_count+0x20/0x20 [ 855.805081][T13785] __x64_sys_bpf+0x78/0x90 [ 855.809550][T13785] do_syscall_64+0x4c/0xa0 [ 855.814016][T13785] ? clear_bhb_loop+0x60/0xb0 [ 855.818748][T13785] ? clear_bhb_loop+0x60/0xb0 [ 855.823481][T13785] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 855.829430][T13785] RIP: 0033:0x7fe2ed98ebe9 [ 855.833887][T13785] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 855.853719][T13785] RSP: 002b:00007fe2ee7fd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 855.862186][T13785] RAX: ffffffffffffffda RBX: 00007fe2edbb5fa0 RCX: 00007fe2ed98ebe9 [ 855.870204][T13785] RDX: 0000000000000050 RSI: 0000200000000300 RDI: 000000000000000a [ 855.878394][T13785] RBP: 00007fe2ee7fd090 R08: 0000000000000000 R09: 0000000000000000 [ 855.886408][T13785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 855.894429][T13785] R13: 00007fe2edbb6038 R14: 00007fe2edbb5fa0 R15: 00007ffe1c1c34a8 [ 855.902474][T13785] [ 855.943722][T13507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 855.965144][T13507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 855.984468][T13507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 856.009266][T13507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 856.030912][T13507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 856.059961][T13507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 856.099226][T13507] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 856.123977][T13297] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 856.137958][T13297] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 856.176195][T13297] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 856.196405][T13297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 856.223947][T13507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 856.245918][T13507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 856.273793][T13507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 856.295738][T13507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 856.317106][T13507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 856.337886][T13507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 856.360836][T13507] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 856.397728][T13297] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 856.416553][T13297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 856.492287][T13507] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 856.508932][T13507] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 856.564266][T13507] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 856.591566][T13507] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 856.637834][T13798] netlink: 'syz.3.3174': attribute type 39 has an invalid length. [ 856.753821][T13798] bond0: (slave syz_tun): Releasing backup interface [ 856.984537][T13295] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 857.025519][T13295] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 857.094537][T13297] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 857.146716][T13297] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 857.176480][T13297] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 857.205127][T13301] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 858.916784][ T4327] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 858.926075][ T4327] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 858.934925][ T4324] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 858.944618][ T4327] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 858.952832][ T4327] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 858.961284][ T4327] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 859.631477][ T4321] bond0: (slave syz_tun): Releasing backup interface [ 860.023207][T13858] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3185'. [ 860.360295][T13865] netlink: 154020 bytes leftover after parsing attributes in process `syz.0.3188'. [ 860.401483][T13865] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 861.020515][ T4327] Bluetooth: hci2: command 0x0409 tx timeout [ 861.424344][ T4421] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 861.667610][ T4421] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 861.735296][T13832] chnl_net:caif_netlink_parms(): no params data found [ 861.750203][T13883] netlink: 830 bytes leftover after parsing attributes in process `syz.2.3193'. [ 861.812900][ T4421] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 862.015782][ T4421] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 862.338613][T13832] bridge0: port 1(bridge_slave_0) entered blocking state [ 862.358483][T13832] bridge0: port 1(bridge_slave_0) entered disabled state [ 862.383180][T13832] device bridge_slave_0 entered promiscuous mode [ 862.409598][T13832] bridge0: port 2(bridge_slave_1) entered blocking state [ 862.420171][T13832] bridge0: port 2(bridge_slave_1) entered disabled state [ 862.465899][T13832] device bridge_slave_1 entered promiscuous mode [ 862.771068][T13832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 862.815850][T13832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 862.914232][T13911] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3199'. [ 862.986330][T13908] FAULT_INJECTION: forcing a failure. [ 862.986330][T13908] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 863.033178][T13908] CPU: 0 PID: 13908 Comm: syz.3.3198 Not tainted 6.1.148-syzkaller #0 [ 863.041440][T13908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 863.051547][T13908] Call Trace: [ 863.054868][T13908] [ 863.058189][T13908] dump_stack_lvl+0x168/0x22e [ 863.062921][T13908] ? show_regs_print_info+0x12/0x12 [ 863.068175][T13908] ? load_image+0x3b0/0x3b0 [ 863.072760][T13908] ? __lock_acquire+0x7c50/0x7c50 [ 863.077856][T13908] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 863.083910][T13908] should_fail_ex+0x399/0x4d0 [ 863.088644][T13908] _copy_to_user+0x2c/0x130 [ 863.093214][T13908] bpf_test_finish+0x48e/0x600 [ 863.098044][T13908] ? convert_skb_to___skb+0x420/0x420 [ 863.101121][ T4327] Bluetooth: hci2: command 0x041b tx timeout [ 863.103463][T13908] bpf_prog_test_run_flow_dissector+0x49d/0x600 [ 863.115833][T13908] ? xdp_convert_buff_to_md+0x200/0x200 [ 863.121436][T13908] ? __fget_files+0x28/0x4d0 [ 863.126101][T13908] ? xdp_convert_buff_to_md+0x200/0x200 [ 863.131703][T13908] bpf_prog_test_run+0x31e/0x390 [ 863.136694][T13908] __sys_bpf+0x593/0x6d0 [ 863.140989][T13908] ? bpf_link_show_fdinfo+0x340/0x340 [ 863.146865][T13908] ? lock_chain_count+0x20/0x20 [ 863.151780][T13908] __x64_sys_bpf+0x78/0x90 [ 863.156399][T13908] do_syscall_64+0x4c/0xa0 [ 863.160876][T13908] ? clear_bhb_loop+0x60/0xb0 [ 863.165586][T13908] ? clear_bhb_loop+0x60/0xb0 [ 863.170316][T13908] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 863.176266][T13908] RIP: 0033:0x7fa8fa18ebe9 [ 863.180726][T13908] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 863.200389][T13908] RSP: 002b:00007fa8fb066038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 863.208858][T13908] RAX: ffffffffffffffda RBX: 00007fa8fa3b5fa0 RCX: 00007fa8fa18ebe9 [ 863.216890][T13908] RDX: 0000000000000050 RSI: 0000200000000300 RDI: 000000000000000a [ 863.224910][T13908] RBP: 00007fa8fb066090 R08: 0000000000000000 R09: 0000000000000000 [ 863.232925][T13908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 863.240944][T13908] R13: 00007fa8fa3b6038 R14: 00007fa8fa3b5fa0 R15: 00007fff2a020888 [ 863.249063][T13908] [ 863.258535][T13832] team0: Port device team_slave_0 added [ 863.288456][T13832] team0: Port device team_slave_1 added [ 863.585401][T13832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 863.602380][T13832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 863.679721][T13832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 864.010311][T13921] netlink: 154020 bytes leftover after parsing attributes in process `syz.3.3201'. [ 864.049989][T13921] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 864.146283][T13832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 864.157051][T13832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 864.278224][T13832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 864.564874][T13832] device hsr_slave_0 entered promiscuous mode [ 864.594186][T13832] device hsr_slave_1 entered promiscuous mode [ 864.640497][T13832] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 864.681930][T13832] Cannot create hsr debugfs directory [ 865.179949][ T4327] Bluetooth: hci2: command 0x040f tx timeout [ 865.642108][T13960] netlink: 164 bytes leftover after parsing attributes in process `syz.4.3212'. [ 866.143373][ T4421] device hsr_slave_0 left promiscuous mode [ 866.198641][ T4421] device hsr_slave_1 left promiscuous mode [ 866.212632][T13972] netlink: 154020 bytes leftover after parsing attributes in process `syz.3.3215'. [ 866.233949][ T4421] bridge0: port 3(dummy0) entered disabled state [ 866.254600][ T4421] device bridge_slave_1 left promiscuous mode [ 866.263340][T13972] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 866.273408][ T4421] bridge0: port 2(bridge_slave_1) entered disabled state [ 866.287460][ T4421] device bridge_slave_0 left promiscuous mode [ 866.333433][ T4421] bridge0: port 1(bridge_slave_0) entered disabled state [ 866.406009][ T4421] device veth1_macvtap left promiscuous mode [ 866.419665][ T4421] device veth0_macvtap left promiscuous mode [ 866.426168][ T4421] device veth1_vlan left promiscuous mode [ 866.432402][ T4421] device veth0_vlan left promiscuous mode [ 866.990998][ T4421] team0 (unregistering): Port device geneve1 removed [ 867.262896][ T4327] Bluetooth: hci2: command 0x0419 tx timeout [ 868.220506][T14030] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3220'. [ 869.129713][ T4421] team0 (unregistering): Port device team_slave_1 removed [ 869.141628][T14044] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3223'. [ 869.229280][ T4421] team0 (unregistering): Port device team_slave_0 removed [ 869.311922][T14046] netlink: 164 bytes leftover after parsing attributes in process `syz.4.3224'. [ 869.328592][ T4421] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 870.014443][T14053] netlink: 154020 bytes leftover after parsing attributes in process `syz.4.3227'. [ 870.069304][T14053] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 870.226836][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.233266][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.657138][ T4421] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 871.668127][ T4421] bond0 (unregistering): Released all slaves [ 871.805213][T14030] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3220'. [ 872.612384][T13832] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 872.663996][T13832] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 872.726564][T13832] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 872.772004][T13832] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 872.888220][T14077] netlink: 154020 bytes leftover after parsing attributes in process `syz.4.3238'. [ 872.931825][T14077] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 873.108229][T14088] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3236'. [ 873.198114][T13832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 873.230321][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 873.238394][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 873.322593][T13832] 8021q: adding VLAN 0 to HW filter on device team0 [ 873.382895][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 873.424520][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 873.444708][T14096] netlink: 154020 bytes leftover after parsing attributes in process `syz.0.3248'. [ 873.459970][T14092] netlink: 154020 bytes leftover after parsing attributes in process `syz.4.3240'. [ 873.476367][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 873.484602][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 873.492183][T14096] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 873.503156][T14092] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 873.535684][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 873.564977][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 873.583067][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 873.603914][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 873.611375][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 873.632565][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 873.735677][T13301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 873.774103][T13301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 873.822086][T13301] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 873.865782][T13301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 873.912098][T13301] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 873.948374][T13301] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 873.994824][T13301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 874.034066][T13301] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 874.076201][T13301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 874.116487][T13301] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 874.162083][T13832] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 874.384972][T14109] FAULT_INJECTION: forcing a failure. [ 874.384972][T14109] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 874.516633][T14109] CPU: 1 PID: 14109 Comm: syz.0.3242 Not tainted 6.1.148-syzkaller #0 [ 874.524907][T14109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 874.535102][T14109] Call Trace: [ 874.538425][T14109] [ 874.541400][T14109] dump_stack_lvl+0x168/0x22e [ 874.546134][T14109] ? show_regs_print_info+0x12/0x12 [ 874.551388][T14109] ? load_image+0x3b0/0x3b0 [ 874.555969][T14109] ? __lock_acquire+0x7c50/0x7c50 [ 874.561068][T14109] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 874.567139][T14109] should_fail_ex+0x399/0x4d0 [ 874.571890][T14109] _copy_to_user+0x2c/0x130 [ 874.576451][T14109] bpf_test_finish+0x4c8/0x600 [ 874.581335][T14109] ? convert_skb_to___skb+0x420/0x420 [ 874.586766][T14109] bpf_prog_test_run_flow_dissector+0x49d/0x600 [ 874.593062][T14109] ? xdp_convert_buff_to_md+0x200/0x200 [ 874.598649][T14109] ? __fget_files+0x28/0x4d0 [ 874.603289][T14109] ? xdp_convert_buff_to_md+0x200/0x200 [ 874.608874][T14109] bpf_prog_test_run+0x31e/0x390 [ 874.613860][T14109] __sys_bpf+0x593/0x6d0 [ 874.618134][T14109] ? bpf_link_show_fdinfo+0x340/0x340 [ 874.623572][T14109] ? lock_chain_count+0x20/0x20 [ 874.628569][T14109] __x64_sys_bpf+0x78/0x90 [ 874.633045][T14109] do_syscall_64+0x4c/0xa0 [ 874.637690][T14109] ? clear_bhb_loop+0x60/0xb0 [ 874.642398][T14109] ? clear_bhb_loop+0x60/0xb0 [ 874.647101][T14109] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 874.653038][T14109] RIP: 0033:0x7f2644d8ebe9 [ 874.657476][T14109] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 874.677115][T14109] RSP: 002b:00007f2645b1f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 874.685572][T14109] RAX: ffffffffffffffda RBX: 00007f2644fb5fa0 RCX: 00007f2644d8ebe9 [ 874.693572][T14109] RDX: 0000000000000050 RSI: 0000200000000300 RDI: 000000000000000a [ 874.701655][T14109] RBP: 00007f2645b1f090 R08: 0000000000000000 R09: 0000000000000000 [ 874.709750][T14109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 874.717747][T14109] R13: 00007f2644fb6038 R14: 00007f2644fb5fa0 R15: 00007ffdd20b2eb8 [ 874.725766][T14109] [ 875.576465][T14135] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3249'. [ 875.774615][T13301] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 875.808825][T13301] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 875.861867][T13832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 875.891062][T14140] netlink: 'syz.3.3251': attribute type 10 has an invalid length. [ 875.935668][T14140] netlink: 55 bytes leftover after parsing attributes in process `syz.3.3251'. [ 876.276554][T14146] netlink: 154020 bytes leftover after parsing attributes in process `syz.0.3252'. [ 876.357193][T14146] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 876.688824][T14147] netlink: 'syz.3.3251': attribute type 17 has an invalid length. [ 876.699291][T14147] netlink: 148 bytes leftover after parsing attributes in process `syz.3.3251'. [ 876.733905][T13282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 876.751240][T13282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 876.814317][T13282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 876.831068][T13282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 876.863219][T13832] device veth0_vlan entered promiscuous mode [ 876.886793][T13282] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 876.911065][T13282] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 876.934773][T13832] device veth1_vlan entered promiscuous mode [ 877.034931][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 877.058905][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 877.124375][T13832] device veth0_macvtap entered promiscuous mode [ 877.166208][T13832] device veth1_macvtap entered promiscuous mode [ 877.242689][T13832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 877.267201][T13832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 877.297603][T13832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 877.333313][T13832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 877.363696][T13832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 877.394883][T13832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 877.415312][T13832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 877.439877][T13832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 877.463143][T14179] netlink: 164 bytes leftover after parsing attributes in process `syz.4.3261'. [ 877.475528][T13832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 877.496586][T13282] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 877.514695][T13282] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 877.540601][T13282] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 877.560473][T13282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 877.606692][T13832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 877.646846][T13832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 877.669606][T13832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 877.699551][T13832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 877.714864][T13832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 877.745269][T13832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 877.774312][T13832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 877.804296][T13832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 877.824102][T13832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 877.845632][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 877.865708][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 877.887745][T13832] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 877.927131][T13832] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 877.957430][T13832] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 877.978298][T13832] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 878.151005][T14191] netlink: 154020 bytes leftover after parsing attributes in process `syz.3.3264'. [ 878.170458][T14191] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 878.229347][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 878.254232][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 878.273314][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 878.315741][ T4403] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 878.329196][ T4403] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 878.377077][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 878.534310][T14198] FAULT_INJECTION: forcing a failure. [ 878.534310][T14198] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 878.589960][T14198] CPU: 0 PID: 14198 Comm: syz.3.3266 Not tainted 6.1.148-syzkaller #0 [ 878.598206][T14198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 878.608307][T14198] Call Trace: [ 878.611712][T14198] [ 878.614687][T14198] dump_stack_lvl+0x168/0x22e [ 878.619433][T14198] ? show_regs_print_info+0x12/0x12 [ 878.624686][T14198] ? load_image+0x3b0/0x3b0 [ 878.629239][T14198] ? __lock_acquire+0x7c50/0x7c50 [ 878.634327][T14198] ? verify_lock_unused+0x140/0x140 [ 878.639606][T14198] should_fail_ex+0x399/0x4d0 [ 878.644357][T14198] _copy_from_user+0x2c/0x170 [ 878.649087][T14198] ___sys_sendmsg+0x155/0x290 [ 878.653821][T14198] ? __sys_sendmsg+0x270/0x270 [ 878.658651][T14198] ? __lock_acquire+0x7c50/0x7c50 [ 878.663741][T14198] ? __fdget+0x17c/0x200 [ 878.668028][T14198] __se_sys_sendmsg+0x19e/0x270 [ 878.672931][T14198] ? __x64_sys_sendmsg+0x80/0x80 [ 878.677937][T14198] ? lockdep_hardirqs_on+0x94/0x140 [ 878.683186][T14198] do_syscall_64+0x4c/0xa0 [ 878.687637][T14198] ? clear_bhb_loop+0x60/0xb0 [ 878.692364][T14198] ? clear_bhb_loop+0x60/0xb0 [ 878.697078][T14198] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 878.703030][T14198] RIP: 0033:0x7fa8fa18ebe9 [ 878.707478][T14198] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 878.727132][T14198] RSP: 002b:00007fa8fb045038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 878.735598][T14198] RAX: ffffffffffffffda RBX: 00007fa8fa3b6090 RCX: 00007fa8fa18ebe9 [ 878.743616][T14198] RDX: 00000000000052cc RSI: 0000200000000040 RDI: 000000000000000d [ 878.751633][T14198] RBP: 00007fa8fb045090 R08: 0000000000000000 R09: 0000000000000000 [ 878.759670][T14198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 878.767692][T14198] R13: 00007fa8fa3b6128 R14: 00007fa8fa3b6090 R15: 00007fff2a020888 [ 878.775730][T14198] [ 879.268082][T14214] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3272'. [ 880.115416][T14223] netlink: 154020 bytes leftover after parsing attributes in process `syz.1.3275'. [ 880.176587][T14223] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 881.526623][ T4320] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 881.546651][ T4320] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 881.556147][ T4320] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 881.575026][ T4320] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 881.583778][ T4320] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 881.592914][ T4320] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 881.971718][T14286] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3283'. [ 882.316600][T14275] chnl_net:caif_netlink_parms(): no params data found [ 882.717287][T14275] bridge0: port 1(bridge_slave_0) entered blocking state [ 882.746202][T14275] bridge0: port 1(bridge_slave_0) entered disabled state [ 882.795448][T14275] device bridge_slave_0 entered promiscuous mode [ 882.925459][T13287] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 882.995484][T14275] bridge0: port 2(bridge_slave_1) entered blocking state [ 883.008374][T14275] bridge0: port 2(bridge_slave_1) entered disabled state [ 883.040072][T14275] device bridge_slave_1 entered promiscuous mode [ 883.059165][T14313] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3290'. [ 883.170016][T13287] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 883.215572][T14275] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 883.234577][T14275] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 883.402295][T13287] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 883.439427][T14275] team0: Port device team_slave_0 added [ 883.475421][T14275] team0: Port device team_slave_1 added [ 883.522521][T13287] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 883.660834][ T4327] Bluetooth: hci3: command 0x0409 tx timeout [ 883.871508][T14275] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 883.878933][T14275] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 884.094471][T14275] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 884.388853][T14275] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 884.398443][T14275] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 884.442728][T14275] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 884.702674][T14275] device hsr_slave_0 entered promiscuous mode [ 884.718858][T14362] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3297'. [ 884.741214][T14275] device hsr_slave_1 entered promiscuous mode [ 884.760202][T14275] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 884.782604][T14275] Cannot create hsr debugfs directory [ 885.739949][ T4327] Bluetooth: hci3: command 0x041b tx timeout [ 886.551035][T14413] netlink: 164 bytes leftover after parsing attributes in process `syz.4.3311'. [ 887.820395][ T4327] Bluetooth: hci3: command 0x040f tx timeout [ 888.150967][T14275] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 888.646583][T14275] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 888.668023][T14275] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 888.749646][T13287] device hsr_slave_0 left promiscuous mode [ 888.767434][T13287] device hsr_slave_1 left promiscuous mode [ 888.820730][T13287] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 888.828249][T13287] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 888.921039][T13287] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 888.939840][T13287] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 888.972684][T13287] bridge0: port 3(dummy0) entered disabled state [ 888.991391][T13287] device bridge_slave_1 left promiscuous mode [ 888.997717][T13287] bridge0: port 2(bridge_slave_1) entered disabled state [ 889.055304][T13287] device bridge_slave_0 left promiscuous mode [ 889.080730][T13287] bridge0: port 1(bridge_slave_0) entered disabled state [ 889.127516][T14469] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3327'. [ 889.260836][T13287] device veth1_macvtap left promiscuous mode [ 889.278912][T13287] device veth0_macvtap left promiscuous mode [ 889.301362][T13287] device veth1_vlan left promiscuous mode [ 889.319811][T13287] device veth0_vlan left promiscuous mode [ 889.590356][T14477] FAULT_INJECTION: forcing a failure. [ 889.590356][T14477] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 889.665276][T14477] CPU: 0 PID: 14477 Comm: syz.2.3330 Not tainted 6.1.148-syzkaller #0 [ 889.673516][T14477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 889.683616][T14477] Call Trace: [ 889.686931][T14477] [ 889.689903][T14477] dump_stack_lvl+0x168/0x22e [ 889.694632][T14477] ? show_regs_print_info+0x12/0x12 [ 889.699931][T14477] ? load_image+0x3b0/0x3b0 [ 889.704493][T14477] ? __lock_acquire+0x7c50/0x7c50 [ 889.709571][T14477] ? verify_lock_unused+0x140/0x140 [ 889.714825][T14477] should_fail_ex+0x399/0x4d0 [ 889.719618][T14477] _copy_from_user+0x2c/0x170 [ 889.724355][T14477] ___sys_sendmsg+0x155/0x290 [ 889.729101][T14477] ? __sys_sendmsg+0x270/0x270 [ 889.733936][T14477] ? irqentry_enter+0x33/0x50 [ 889.738709][T14477] __se_sys_sendmsg+0x19e/0x270 [ 889.743625][T14477] ? perf_trace_preemptirq_template+0x287/0x330 [ 889.749925][T14477] ? __x64_sys_sendmsg+0x80/0x80 [ 889.754954][T14477] ? lockdep_hardirqs_on+0x94/0x140 [ 889.760210][T14477] do_syscall_64+0x4c/0xa0 [ 889.764675][T14477] ? clear_bhb_loop+0x60/0xb0 [ 889.765342][T14481] netlink: 'syz.0.3331': attribute type 3 has an invalid length. [ 889.769378][T14477] ? clear_bhb_loop+0x60/0xb0 [ 889.769406][T14477] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 889.769440][T14477] RIP: 0033:0x7f197f58ebe9 [ 889.769461][T14477] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 889.769479][T14477] RSP: 002b:00007f19804e9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 889.769506][T14477] RAX: ffffffffffffffda RBX: 00007f197f7b5fa0 RCX: 00007f197f58ebe9 [ 889.769522][T14477] RDX: 00000000000052cc RSI: 0000200000000040 RDI: 000000000000000d [ 889.769536][T14477] RBP: 00007f19804e9090 R08: 0000000000000000 R09: 0000000000000000 [ 889.769550][T14477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 889.769563][T14477] R13: 00007f197f7b6038 R14: 00007f197f7b5fa0 R15: 00007ffd6c2b06c8 [ 889.769594][T14477] [ 889.900103][ T4327] Bluetooth: hci3: command 0x0419 tx timeout [ 890.109755][T14481] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3331'. [ 891.374482][T13287] team0 (unregistering): Port device team_slave_1 removed [ 891.459384][T13287] team0 (unregistering): Port device team_slave_0 removed [ 891.536543][T13287] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 891.617446][T13287] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 892.131786][T13287] team0 (unregistering): Port device bond0 removed [ 892.538435][T13287] bond0 (unregistering): Released all slaves [ 892.643412][T14275] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 892.951778][T14538] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3339'. [ 893.060267][T14275] 8021q: adding VLAN 0 to HW filter on device bond0 [ 893.133805][T13292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 893.150580][T13292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 893.174999][T14275] 8021q: adding VLAN 0 to HW filter on device team0 [ 893.226116][T13292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 893.257279][T13292] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 893.316966][T13292] bridge0: port 1(bridge_slave_0) entered blocking state [ 893.324210][T13292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 893.405973][T13292] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 893.467367][T13292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 893.493160][T13292] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 893.536355][T13292] bridge0: port 2(bridge_slave_1) entered blocking state [ 893.543598][T13292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 893.561701][T13253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 893.600502][T13253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 893.646646][T13253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 893.693281][T13253] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 893.751137][T13253] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 893.821712][T13295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 893.849423][T13295] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 893.877097][T13295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 893.901850][T13295] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 893.937541][T14275] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 893.996527][T14275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 894.046887][T13275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 894.066314][T13275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 894.473082][T14569] netlink: 164 bytes leftover after parsing attributes in process `syz.4.3352'. [ 894.862491][T14576] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3353'. [ 894.976878][T14580] netlink: 'syz.4.3355': attribute type 2 has an invalid length. [ 894.987411][T14580] netlink: 'syz.4.3355': attribute type 1 has an invalid length. [ 895.002817][T14580] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.3355'. [ 895.082768][T14585] FAULT_INJECTION: forcing a failure. [ 895.082768][T14585] name failslab, interval 1, probability 0, space 0, times 0 [ 895.105339][T13295] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 895.118190][T13295] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 895.126526][T14585] CPU: 0 PID: 14585 Comm: syz.1.3357 Not tainted 6.1.148-syzkaller #0 [ 895.134762][T14585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 895.144850][T14585] Call Trace: [ 895.148158][T14585] [ 895.151136][T14585] dump_stack_lvl+0x168/0x22e [ 895.155873][T14585] ? show_regs_print_info+0x12/0x12 [ 895.161185][T14585] ? load_image+0x3b0/0x3b0 [ 895.165740][T14585] ? __might_sleep+0xd0/0xd0 [ 895.170363][T14585] ? __lock_acquire+0x7c50/0x7c50 [ 895.175432][T14585] should_fail_ex+0x399/0x4d0 [ 895.180260][T14585] should_failslab+0x5/0x20 [ 895.184822][T14585] slab_pre_alloc_hook+0x59/0x310 [ 895.189904][T14585] kmem_cache_alloc_node+0x5a/0x320 [ 895.195145][T14585] ? __alloc_skb+0xfc/0x7e0 [ 895.199701][T14585] __alloc_skb+0xfc/0x7e0 [ 895.204085][T14585] tcp_stream_alloc_skb+0x3e/0x330 [ 895.209256][T14585] tcp_sendmsg_locked+0xd1c/0x3f10 [ 895.214420][T14585] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 895.220483][T14585] ? tcp_sendmsg+0x1d/0x40 [ 895.225053][T14585] ? tcp_set_state+0x520/0x520 [ 895.229880][T14585] ? __local_bh_enable_ip+0x132/0x1b0 [ 895.235314][T14585] ? lock_sock_nested+0x66/0x100 [ 895.240441][T14585] tcp_sendmsg+0x2b/0x40 [ 895.244745][T14585] ? inet_send_prepare+0x260/0x260 [ 895.249900][T14585] ____sys_sendmsg+0x59b/0x970 [ 895.254705][T14585] ? __sys_sendmsg_sock+0x30/0x30 [ 895.259847][T14585] ? __import_iovec+0x315/0x500 [ 895.264834][T14585] ? import_iovec+0x6f/0xa0 [ 895.269403][T14585] ___sys_sendmsg+0x21c/0x290 [ 895.274179][T14585] ? __sys_sendmsg+0x270/0x270 [ 895.278981][T14585] ? ktime_get_real_ts64+0x420/0x420 [ 895.284306][T14585] ? __fdget+0x17c/0x200 [ 895.288634][T14585] __se_sys_sendmsg+0x19e/0x270 [ 895.293608][T14585] ? perf_trace_preemptirq_template+0x287/0x330 [ 895.299938][T14585] ? __x64_sys_sendmsg+0x80/0x80 [ 895.304937][T14585] ? lockdep_hardirqs_on+0x94/0x140 [ 895.310182][T14585] do_syscall_64+0x4c/0xa0 [ 895.314631][T14585] ? clear_bhb_loop+0x60/0xb0 [ 895.319405][T14585] ? clear_bhb_loop+0x60/0xb0 [ 895.324115][T14585] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 895.330069][T14585] RIP: 0033:0x7f5b7a38ebe9 [ 895.334529][T14585] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 895.354255][T14585] RSP: 002b:00007f5b7b1e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 895.362719][T14585] RAX: ffffffffffffffda RBX: 00007f5b7a5b5fa0 RCX: 00007f5b7a38ebe9 [ 895.370735][T14585] RDX: 00000000000052cc RSI: 0000200000000040 RDI: 000000000000000d [ 895.378735][T14585] RBP: 00007f5b7b1e7090 R08: 0000000000000000 R09: 0000000000000000 [ 895.386737][T14585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 895.394725][T14585] R13: 00007f5b7a5b6038 R14: 00007f5b7a5b5fa0 R15: 00007ffc675f2ab8 [ 895.402743][T14585] [ 895.428622][T14275] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 895.454260][T13287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 895.465192][T13287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 895.489614][T13287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 895.498889][T13287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 895.512556][T14275] device veth0_vlan entered promiscuous mode [ 895.521509][T13287] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 895.543180][T13287] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 895.567103][T14275] device veth1_vlan entered promiscuous mode [ 895.613171][T13253] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 895.623413][T13253] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 895.632701][T13253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 895.641756][T13253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 895.654205][T14275] device veth0_macvtap entered promiscuous mode [ 895.665654][T14275] device veth1_macvtap entered promiscuous mode [ 895.710991][T14275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 895.730375][T14275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 895.749391][T14275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 895.765866][T14275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 895.796040][T14275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 895.809588][T14275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 895.822085][T14275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 895.833834][T14275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 895.846451][T14275] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 895.855521][T13295] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 895.876957][T13295] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 895.914213][T13295] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 895.980052][T13295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 896.048333][T14275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 896.107456][T14275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 896.152383][T14275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 896.214955][T14275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 896.265445][T14275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 896.340229][T14595] netlink: 154020 bytes leftover after parsing attributes in process `syz.4.3359'. [ 896.342338][T14275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 896.367467][T14595] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 896.379178][T14275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 896.422480][T14275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 896.485773][T14275] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 896.495444][T13292] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 896.504938][T13292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 896.519358][T14275] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 896.547459][T14275] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 896.561143][T14275] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 896.570250][T14275] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 896.900668][T13285] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 896.908865][T13285] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 896.943153][T13295] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 897.015557][T13282] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 897.035575][T13282] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 897.130964][T13253] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 898.753074][T14662] netlink: 154020 bytes leftover after parsing attributes in process `syz.0.3391'. [ 898.770218][T14662] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 902.460686][T14699] FAULT_INJECTION: forcing a failure. [ 902.460686][T14699] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 902.501341][T14699] CPU: 0 PID: 14699 Comm: syz.4.3395 Not tainted 6.1.148-syzkaller #0 [ 902.509595][T14699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 902.519681][T14699] Call Trace: [ 902.522975][T14699] [ 902.525923][T14699] dump_stack_lvl+0x168/0x22e [ 902.530624][T14699] ? show_regs_print_info+0x12/0x12 [ 902.535842][T14699] ? load_image+0x3b0/0x3b0 [ 902.540373][T14699] ? __might_fault+0xa6/0x120 [ 902.545090][T14699] should_fail_ex+0x399/0x4d0 [ 902.549799][T14699] copyin+0x1b/0x120 [ 902.553722][T14699] _copy_from_iter+0x45a/0x10c0 [ 902.558606][T14699] ? copyout_mc+0x110/0x110 [ 902.563136][T14699] ? __phys_addr_symbol+0x32/0x70 [ 902.568196][T14699] ? __check_object_size+0x500/0xa40 [ 902.573525][T14699] tcp_sendmsg_locked+0x1967/0x3f10 [ 902.578790][T14699] ? tcp_sendmsg+0x1d/0x40 [ 902.583244][T14699] ? tcp_set_state+0x520/0x520 [ 902.588034][T14699] ? __local_bh_enable_ip+0x132/0x1b0 [ 902.593810][T14699] ? lock_sock_nested+0x66/0x100 [ 902.598782][T14699] tcp_sendmsg+0x2b/0x40 [ 902.603049][T14699] ? inet_send_prepare+0x260/0x260 [ 902.608205][T14699] ____sys_sendmsg+0x59b/0x970 [ 902.613046][T14699] ? __sys_sendmsg_sock+0x30/0x30 [ 902.618094][T14699] ? __import_iovec+0x315/0x500 [ 902.622982][T14699] ? import_iovec+0x6f/0xa0 [ 902.627513][T14699] ___sys_sendmsg+0x21c/0x290 [ 902.632222][T14699] ? __sys_sendmsg+0x270/0x270 [ 902.637052][T14699] ? __fdget+0x17c/0x200 [ 902.641328][T14699] __se_sys_sendmsg+0x19e/0x270 [ 902.646202][T14699] ? perf_trace_preemptirq_template+0x287/0x330 [ 902.652471][T14699] ? __x64_sys_sendmsg+0x80/0x80 [ 902.657440][T14699] ? lockdep_hardirqs_on+0x94/0x140 [ 902.662669][T14699] do_syscall_64+0x4c/0xa0 [ 902.667101][T14699] ? clear_bhb_loop+0x60/0xb0 [ 902.671809][T14699] ? clear_bhb_loop+0x60/0xb0 [ 902.676584][T14699] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 902.682524][T14699] RIP: 0033:0x7fa9fb18ebe9 [ 902.686974][T14699] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 902.706603][T14699] RSP: 002b:00007fa9fc08a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 902.715038][T14699] RAX: ffffffffffffffda RBX: 00007fa9fb3b5fa0 RCX: 00007fa9fb18ebe9 [ 902.723035][T14699] RDX: 00000000000052cc RSI: 0000200000000040 RDI: 000000000000000d [ 902.731043][T14699] RBP: 00007fa9fc08a090 R08: 0000000000000000 R09: 0000000000000000 [ 902.739114][T14699] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 902.747123][T14699] R13: 00007fa9fb3b6038 R14: 00007fa9fb3b5fa0 R15: 00007ffc176e1e38 [ 902.755135][T14699] [ 903.019372][T14707] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.3398'. [ 903.454131][T14716] netlink: 154020 bytes leftover after parsing attributes in process `syz.4.3402'. [ 903.495860][T14716] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 904.109169][T14739] FAULT_INJECTION: forcing a failure. [ 904.109169][T14739] name failslab, interval 1, probability 0, space 0, times 0 [ 904.141318][T14739] CPU: 0 PID: 14739 Comm: syz.1.3410 Not tainted 6.1.148-syzkaller #0 [ 904.149589][T14739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 904.160042][T14739] Call Trace: [ 904.163360][T14739] [ 904.166358][T14739] dump_stack_lvl+0x168/0x22e [ 904.171327][T14739] ? show_regs_print_info+0x12/0x12 [ 904.176595][T14739] ? load_image+0x3b0/0x3b0 [ 904.181158][T14739] ? __lock_acquire+0x7c50/0x7c50 [ 904.186238][T14739] ? perf_trace_preemptirq_template+0x287/0x330 [ 904.192541][T14739] should_fail_ex+0x399/0x4d0 [ 904.197279][T14739] should_failslab+0x5/0x20 [ 904.201838][T14739] slab_pre_alloc_hook+0x59/0x310 [ 904.206913][T14739] ? lock_chain_count+0x20/0x20 [ 904.211823][T14739] kmem_cache_alloc_node+0x5a/0x320 [ 904.217151][T14739] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 904.223373][T14739] ? __alloc_skb+0xfc/0x7e0 [ 904.227964][T14739] __alloc_skb+0xfc/0x7e0 [ 904.232362][T14739] tcp_stream_alloc_skb+0x3e/0x330 [ 904.237629][T14739] tcp_write_xmit+0xe9a/0x62b0 [ 904.242488][T14739] ? __sanitizer_cov_trace_pc+0x4/0x60 [ 904.248014][T14739] tcp_sendmsg_locked+0x216c/0x3f10 [ 904.253319][T14739] ? lock_chain_count+0x20/0x20 [ 904.258233][T14739] ? tcp_set_state+0x520/0x520 [ 904.263058][T14739] ? lock_sock_nested+0x66/0x100 [ 904.268058][T14739] tcp_sendmsg+0x2b/0x40 [ 904.272369][T14739] ? inet_send_prepare+0x260/0x260 [ 904.277617][T14739] ____sys_sendmsg+0x59b/0x970 [ 904.282446][T14739] ? __sys_sendmsg_sock+0x30/0x30 [ 904.287519][T14739] ? __import_iovec+0x315/0x500 [ 904.292439][T14739] ? import_iovec+0x6f/0xa0 [ 904.297016][T14739] ___sys_sendmsg+0x21c/0x290 [ 904.302182][T14739] ? __sys_sendmsg+0x270/0x270 [ 904.307044][T14739] ? __fdget+0x17c/0x200 [ 904.311341][T14739] __se_sys_sendmsg+0x19e/0x270 [ 904.316236][T14739] ? perf_trace_preemptirq_template+0x287/0x330 [ 904.322538][T14739] ? __x64_sys_sendmsg+0x80/0x80 [ 904.327546][T14739] ? lockdep_hardirqs_on+0x94/0x140 [ 904.332799][T14739] do_syscall_64+0x4c/0xa0 [ 904.337253][T14739] ? clear_bhb_loop+0x60/0xb0 [ 904.341975][T14739] ? clear_bhb_loop+0x60/0xb0 [ 904.346696][T14739] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 904.352644][T14739] RIP: 0033:0x7f5b7a38ebe9 [ 904.357099][T14739] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 904.376754][T14739] RSP: 002b:00007f5b7b1e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 904.385240][T14739] RAX: ffffffffffffffda RBX: 00007f5b7a5b5fa0 RCX: 00007f5b7a38ebe9 [ 904.393263][T14739] RDX: 00000000000052cc RSI: 0000200000000040 RDI: 000000000000000d [ 904.401276][T14739] RBP: 00007f5b7b1e7090 R08: 0000000000000000 R09: 0000000000000000 [ 904.409328][T14739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 904.417351][T14739] R13: 00007f5b7a5b6038 R14: 00007f5b7a5b5fa0 R15: 00007ffc675f2ab8 [ 904.425388][T14739] [ 904.996499][T14759] netlink: 154020 bytes leftover after parsing attributes in process `syz.2.3418'. [ 905.062777][T14759] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 907.467677][T14814] netlink: 154020 bytes leftover after parsing attributes in process `syz.4.3432'. [ 907.527321][T14814] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 909.148749][T14854] netlink: 154020 bytes leftover after parsing attributes in process `syz.4.3447'. [ 909.177440][T14854] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 909.475003][T14864] netlink: 'syz.2.3450': attribute type 10 has an invalid length. [ 910.082688][T14881] netlink: 'syz.3.3454': attribute type 10 has an invalid length. [ 910.183279][T14881] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.3454'. [ 910.853207][T14901] netlink: 154020 bytes leftover after parsing attributes in process `syz.1.3462'. [ 910.863870][T14901] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 911.368853][T14916] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 911.381821][T14916] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 911.441873][T14916] sock: sock_set_timeout: `syz.2.3468' (pid 14916) tries to set negative timeout [ 911.621514][T14918] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3469'. [ 911.889228][T14928] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.3472'. [ 912.436800][T14938] netlink: 154020 bytes leftover after parsing attributes in process `syz.0.3476'. [ 912.448725][T14945] device syzkaller0 entered promiscuous mode [ 912.470941][T14938] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 912.873840][T14957] FAULT_INJECTION: forcing a failure. [ 912.873840][T14957] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 912.947781][T14957] CPU: 1 PID: 14957 Comm: syz.0.3482 Not tainted 6.1.148-syzkaller #0 [ 912.956020][T14957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 912.966089][T14957] Call Trace: [ 912.969386][T14957] [ 912.972339][T14957] dump_stack_lvl+0x168/0x22e [ 912.977041][T14957] ? show_regs_print_info+0x12/0x12 [ 912.982259][T14957] ? load_image+0x3b0/0x3b0 [ 912.986795][T14957] ? __lock_acquire+0x7c50/0x7c50 [ 912.991842][T14957] ? verify_lock_unused+0x140/0x140 [ 912.997074][T14957] should_fail_ex+0x399/0x4d0 [ 913.001803][T14957] _copy_from_user+0x2c/0x170 [ 913.006500][T14957] ___sys_sendmsg+0x155/0x290 [ 913.011214][T14957] ? __sys_sendmsg+0x270/0x270 [ 913.016101][T14957] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 913.021914][T14957] ? __fdget+0x17c/0x200 [ 913.026219][T14957] __se_sys_sendmsg+0x19e/0x270 [ 913.031100][T14957] ? __x64_sys_sendmsg+0x80/0x80 [ 913.036068][T14957] ? syscall_enter_from_user_mode+0x2a/0x80 [ 913.041994][T14957] do_syscall_64+0x4c/0xa0 [ 913.046431][T14957] ? clear_bhb_loop+0x60/0xb0 [ 913.051119][T14957] ? clear_bhb_loop+0x60/0xb0 [ 913.055819][T14957] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 913.061923][T14957] RIP: 0033:0x7f2644d8ebe9 [ 913.066360][T14957] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 913.085986][T14957] RSP: 002b:00007f2645b1f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 913.094593][T14957] RAX: ffffffffffffffda RBX: 00007f2644fb5fa0 RCX: 00007f2644d8ebe9 [ 913.102579][T14957] RDX: 00000000000052cc RSI: 0000200000000040 RDI: 000000000000000d [ 913.110572][T14957] RBP: 00007f2645b1f090 R08: 0000000000000000 R09: 0000000000000000 [ 913.118562][T14957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 913.126637][T14957] R13: 00007f2644fb6038 R14: 00007f2644fb5fa0 R15: 00007ffdd20b2eb8 [ 913.134644][T14957] [ 913.534557][T14967] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3486'. [ 914.401183][T14987] netlink: 154020 bytes leftover after parsing attributes in process `syz.3.3492'. [ 914.453844][T14987] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 914.530532][T14981] delete_channel: no stack [ 915.947387][T15018] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3502'. [ 916.385831][T15033] netlink: 154020 bytes leftover after parsing attributes in process `syz.0.3509'. [ 916.422664][T15033] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 917.418552][T15062] netlink: 'syz.1.3516': attribute type 3 has an invalid length. [ 917.457135][T15062] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3516'. [ 917.682173][T15069] FAULT_INJECTION: forcing a failure. [ 917.682173][T15069] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 917.759798][T15069] CPU: 0 PID: 15069 Comm: syz.0.3520 Not tainted 6.1.148-syzkaller #0 [ 917.768034][T15069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 917.778176][T15069] Call Trace: [ 917.781492][T15069] [ 917.784458][T15069] dump_stack_lvl+0x168/0x22e [ 917.789183][T15069] ? show_regs_print_info+0x12/0x12 [ 917.794422][T15069] ? load_image+0x3b0/0x3b0 [ 917.798984][T15069] ? __lock_acquire+0x7c50/0x7c50 [ 917.804070][T15069] should_fail_ex+0x399/0x4d0 [ 917.808807][T15069] _copy_from_user+0x2c/0x170 [ 917.813537][T15069] iovec_from_user+0x143/0x360 [ 917.818375][T15069] __import_iovec+0x6d/0x500 [ 917.823039][T15069] ? __might_fault+0xa6/0x120 [ 917.827792][T15069] import_iovec+0x6f/0xa0 [ 917.832269][T15069] ___sys_sendmsg+0x1e4/0x290 [ 917.836994][T15069] ? __sys_sendmsg+0x270/0x270 [ 917.841819][T15069] ? ktime_get_real_ts64+0x420/0x420 [ 917.847164][T15069] ? __fdget+0x17c/0x200 [ 917.851462][T15069] __se_sys_sendmsg+0x19e/0x270 [ 917.856376][T15069] ? perf_trace_preemptirq_template+0x287/0x330 [ 917.862703][T15069] ? __x64_sys_sendmsg+0x80/0x80 [ 917.867719][T15069] ? lockdep_hardirqs_on+0x94/0x140 [ 917.872983][T15069] do_syscall_64+0x4c/0xa0 [ 917.877445][T15069] ? clear_bhb_loop+0x60/0xb0 [ 917.882169][T15069] ? clear_bhb_loop+0x60/0xb0 [ 917.886900][T15069] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 917.892861][T15069] RIP: 0033:0x7f2644d8ebe9 [ 917.897369][T15069] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 917.917032][T15069] RSP: 002b:00007f2645b1f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 917.925540][T15069] RAX: ffffffffffffffda RBX: 00007f2644fb5fa0 RCX: 00007f2644d8ebe9 [ 917.933576][T15069] RDX: 00000000000052cc RSI: 0000200000000040 RDI: 000000000000000d [ 917.941602][T15069] RBP: 00007f2645b1f090 R08: 0000000000000000 R09: 0000000000000000 [ 917.949633][T15069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 917.957654][T15069] R13: 00007f2644fb6038 R14: 00007f2644fb5fa0 R15: 00007ffdd20b2eb8 [ 917.965723][T15069] [ 918.005325][T15071] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3521'. [ 918.288807][T15077] netlink: 154020 bytes leftover after parsing attributes in process `syz.4.3523'. [ 918.299282][T15077] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 918.305447][T15076] netlink: 'syz.2.3522': attribute type 21 has an invalid length. [ 918.380107][ T4327] Bluetooth: hci5: command 0x0406 tx timeout [ 918.993273][T15089] netlink: 'syz.1.3528': attribute type 2 has an invalid length. [ 919.020058][T15089] netlink: 'syz.1.3528': attribute type 1 has an invalid length. [ 919.059088][T15089] netlink: 'syz.1.3528': attribute type 8 has an invalid length. [ 919.091417][T15089] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3528'. [ 919.125612][T15093] netlink: 'syz.1.3528': attribute type 21 has an invalid length. [ 919.575319][T15108] netlink: 154020 bytes leftover after parsing attributes in process `syz.2.3536'. [ 919.667853][T15108] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 919.671653][T15109] netlink: 164 bytes leftover after parsing attributes in process `syz.4.3535'. [ 920.418304][T15117] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3539'. [ 920.759451][T15123] netlink: 192156 bytes leftover after parsing attributes in process `syz.0.3539'. [ 920.869751][T15123] netlink: zone id is out of range [ 920.874953][T15123] netlink: zone id is out of range [ 920.934560][T15123] netlink: zone id is out of range [ 920.958725][T15123] netlink: zone id is out of range [ 920.988955][T15123] netlink: zone id is out of range [ 921.048044][T15123] netlink: zone id is out of range [ 921.082708][T15123] netlink: zone id is out of range [ 921.110356][T15123] netlink: zone id is out of range [ 921.141383][T15123] netlink: zone id is out of range [ 921.556902][T15139] netlink: 154020 bytes leftover after parsing attributes in process `syz.1.3548'. [ 921.694933][T15145] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3551'. [ 921.909234][T15149] netlink: 'syz.1.3553': attribute type 13 has an invalid length. [ 921.927438][T15149] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3553'. [ 921.944229][T15149] syz_tun: refused to change device tx_queue_len [ 922.076884][T15157] FAULT_INJECTION: forcing a failure. [ 922.076884][T15157] name failslab, interval 1, probability 0, space 0, times 0 [ 922.167660][T15157] CPU: 1 PID: 15157 Comm: syz.2.3556 Not tainted 6.1.148-syzkaller #0 [ 922.175908][T15157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 922.186023][T15157] Call Trace: [ 922.189360][T15157] [ 922.192327][T15157] dump_stack_lvl+0x168/0x22e [ 922.197057][T15157] ? show_regs_print_info+0x12/0x12 [ 922.202305][T15157] ? load_image+0x3b0/0x3b0 [ 922.206865][T15157] ? __might_sleep+0xd0/0xd0 [ 922.211515][T15157] ? __lock_acquire+0x7c50/0x7c50 [ 922.216602][T15157] should_fail_ex+0x399/0x4d0 [ 922.221348][T15157] should_failslab+0x5/0x20 [ 922.225900][T15157] slab_pre_alloc_hook+0x59/0x310 [ 922.230970][T15157] kmem_cache_alloc_node+0x5a/0x320 [ 922.236220][T15157] ? __alloc_skb+0xfc/0x7e0 [ 922.240789][T15157] __alloc_skb+0xfc/0x7e0 [ 922.245184][T15157] tcp_stream_alloc_skb+0x3e/0x330 [ 922.250367][T15157] tcp_sendmsg_locked+0xd1c/0x3f10 [ 922.255554][T15157] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 922.261699][T15157] ? tcp_sendmsg+0x1d/0x40 [ 922.266188][T15157] ? tcp_set_state+0x520/0x520 [ 922.271008][T15157] ? __local_bh_enable_ip+0x132/0x1b0 [ 922.276439][T15157] ? lock_sock_nested+0x66/0x100 [ 922.281432][T15157] tcp_sendmsg+0x2b/0x40 [ 922.285739][T15157] ? inet_send_prepare+0x260/0x260 [ 922.290891][T15157] ____sys_sendmsg+0x59b/0x970 [ 922.295721][T15157] ? __sys_sendmsg_sock+0x30/0x30 [ 922.300805][T15157] ? __import_iovec+0x315/0x500 [ 922.305783][T15157] ? import_iovec+0x6f/0xa0 [ 922.310366][T15157] ___sys_sendmsg+0x21c/0x290 [ 922.315129][T15157] ? __sys_sendmsg+0x270/0x270 [ 922.319995][T15157] ? ktime_get_real_ts64+0x420/0x420 [ 922.325368][T15157] ? __fdget+0x17c/0x200 [ 922.329675][T15157] __se_sys_sendmsg+0x19e/0x270 [ 922.334598][T15157] ? ct_nmi_exit+0x145/0x1c0 [ 922.339249][T15157] ? __x64_sys_sendmsg+0x80/0x80 [ 922.344265][T15157] ? lockdep_hardirqs_on+0x94/0x140 [ 922.349565][T15157] do_syscall_64+0x4c/0xa0 [ 922.354042][T15157] ? clear_bhb_loop+0x60/0xb0 [ 922.358770][T15157] ? clear_bhb_loop+0x60/0xb0 [ 922.363503][T15157] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 922.369458][T15157] RIP: 0033:0x7f197f58ebe9 [ 922.373927][T15157] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 922.393591][T15157] RSP: 002b:00007f19804e9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 922.402073][T15157] RAX: ffffffffffffffda RBX: 00007f197f7b5fa0 RCX: 00007f197f58ebe9 [ 922.410112][T15157] RDX: 00000000000052cc RSI: 0000200000000040 RDI: 000000000000000d [ 922.418141][T15157] RBP: 00007f19804e9090 R08: 0000000000000000 R09: 0000000000000000 [ 922.426167][T15157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 922.434194][T15157] R13: 00007f197f7b6038 R14: 00007f197f7b5fa0 R15: 00007ffd6c2b06c8 [ 922.442258][T15157] [ 923.102307][T15164] netlink: 'syz.0.3558': attribute type 21 has an invalid length. [ 923.113368][T15164] IPv6: NLM_F_CREATE should be specified when creating new route [ 923.134068][T15164] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 923.141467][T15164] IPv6: NLM_F_CREATE should be set when creating new route [ 923.148819][T15164] IPv6: NLM_F_CREATE should be set when creating new route [ 923.657055][T15184] netlink: 154020 bytes leftover after parsing attributes in process `syz.2.3563'. [ 924.486365][T15206] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3572'. [ 925.454286][T15224] netlink: 'syz.2.3579': attribute type 21 has an invalid length. [ 925.495858][T15224] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3579'. [ 925.523811][T15231] netlink: 'syz.2.3579': attribute type 3 has an invalid length. [ 925.528913][T15224] netlink: 'syz.2.3579': attribute type 4 has an invalid length. [ 925.597941][T15224] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3579'. [ 925.652033][T15231] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3579'. [ 925.748465][T15227] netlink: 154020 bytes leftover after parsing attributes in process `syz.1.3580'. [ 925.805256][T15227] net_ratelimit: 4 callbacks suppressed [ 925.805295][T15227] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 927.036582][T15254] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3590'. [ 928.055916][T15270] netlink: 'syz.2.3596': attribute type 3 has an invalid length. [ 928.083684][T15271] netlink: 154020 bytes leftover after parsing attributes in process `syz.0.3597'. [ 928.105039][T15270] netlink: 114680 bytes leftover after parsing attributes in process `syz.2.3596'. [ 928.132471][T15271] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 930.012168][T15303] netlink: 154020 bytes leftover after parsing attributes in process `syz.4.3609'. [ 930.079275][T15303] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 930.924437][T15322] FAULT_INJECTION: forcing a failure. [ 930.924437][T15322] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 930.989933][T15322] CPU: 0 PID: 15322 Comm: syz.4.3618 Not tainted 6.1.148-syzkaller #0 [ 930.998180][T15322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 931.008516][T15322] Call Trace: [ 931.009942][T15320] device syzkaller0 entered promiscuous mode [ 931.011817][T15322] [ 931.020840][T15322] dump_stack_lvl+0x168/0x22e [ 931.025564][T15322] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 931.031791][T15322] ? show_regs_print_info+0x12/0x12 [ 931.037039][T15322] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 931.043268][T15322] should_fail_ex+0x399/0x4d0 [ 931.048006][T15322] copyin+0x1b/0x120 [ 931.052045][T15322] _copy_from_iter+0x45a/0x10c0 [ 931.056960][T15322] ? copyout_mc+0x110/0x110 [ 931.061511][T15322] ? __virt_addr_valid+0x188/0x540 [ 931.066689][T15322] ? __virt_addr_valid+0x188/0x540 [ 931.071860][T15322] ? __virt_addr_valid+0x465/0x540 [ 931.077113][T15322] ? __phys_addr+0xb6/0x170 [ 931.081837][T15322] ? __check_object_size+0x500/0xa40 [ 931.087179][T15322] tcp_sendmsg_locked+0x1967/0x3f10 [ 931.090728][T15325] netlink: 154020 bytes leftover after parsing attributes in process `syz.1.3619'. [ 931.092445][T15322] ? tcp_sendmsg+0x1d/0x40 [ 931.092491][T15322] ? tcp_set_state+0x520/0x520 [ 931.092520][T15322] ? __local_bh_enable_ip+0x132/0x1b0 [ 931.092572][T15322] ? lock_sock_nested+0x66/0x100 [ 931.107238][T15325] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 931.111422][T15322] tcp_sendmsg+0x2b/0x40 [ 931.111463][T15322] ? inet_send_prepare+0x260/0x260 [ 931.111487][T15322] ____sys_sendmsg+0x59b/0x970 [ 931.111521][T15322] ? __sys_sendmsg_sock+0x30/0x30 [ 931.111543][T15322] ? __import_iovec+0x315/0x500 [ 931.111583][T15322] ? import_iovec+0x6f/0xa0 [ 931.111618][T15322] ___sys_sendmsg+0x21c/0x290 [ 931.111647][T15322] ? __sys_sendmsg+0x270/0x270 [ 931.111718][T15322] ? __fdget+0x17c/0x200 [ 931.111750][T15322] __se_sys_sendmsg+0x19e/0x270 [ 931.111775][T15322] ? rcu_is_watching+0x11/0xa0 [ 931.111806][T15322] ? __x64_sys_sendmsg+0x80/0x80 [ 931.111853][T15322] do_syscall_64+0x4c/0xa0 [ 931.111873][T15322] ? clear_bhb_loop+0x60/0xb0 [ 931.111893][T15322] ? clear_bhb_loop+0x60/0xb0 [ 931.111915][T15322] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 931.111947][T15322] RIP: 0033:0x7fa9fb18ebe9 [ 931.111976][T15322] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 931.111996][T15322] RSP: 002b:00007fa9fc08a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 931.242900][T15322] RAX: ffffffffffffffda RBX: 00007fa9fb3b5fa0 RCX: 00007fa9fb18ebe9 [ 931.250923][T15322] RDX: 00000000000052cc RSI: 0000200000000040 RDI: 000000000000000d [ 931.259064][T15322] RBP: 00007fa9fc08a090 R08: 0000000000000000 R09: 0000000000000000 [ 931.267078][T15322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 931.275098][T15322] R13: 00007fa9fb3b6038 R14: 00007fa9fb3b5fa0 R15: 00007ffc176e1e38 [ 931.283152][T15322] [ 931.690145][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.696610][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.285158][T15337] netlink: 154020 bytes leftover after parsing attributes in process `syz.4.3622'. [ 932.319824][T15337] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 934.560321][T15376] netlink: 154020 bytes leftover after parsing attributes in process `syz.4.3639'. [ 934.598627][T15376] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 934.728882][T15383] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3641'. [ 934.992956][T15387] FAULT_INJECTION: forcing a failure. [ 934.992956][T15387] name failslab, interval 1, probability 0, space 0, times 0 [ 935.007065][T15387] CPU: 1 PID: 15387 Comm: syz.0.3644 Not tainted 6.1.148-syzkaller #0 [ 935.015289][T15387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 935.025393][T15387] Call Trace: [ 935.028706][T15387] [ 935.031675][T15387] dump_stack_lvl+0x168/0x22e [ 935.036413][T15387] ? show_regs_print_info+0x12/0x12 [ 935.041677][T15387] ? load_image+0x3b0/0x3b0 [ 935.046262][T15387] ? __lock_acquire+0x7c50/0x7c50 [ 935.051422][T15387] ? mark_lock+0x94/0x320 [ 935.055809][T15387] should_fail_ex+0x399/0x4d0 [ 935.060553][T15387] should_failslab+0x5/0x20 [ 935.065098][T15387] slab_pre_alloc_hook+0x59/0x310 [ 935.070158][T15387] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 935.076385][T15387] kmem_cache_alloc_node+0x5a/0x320 [ 935.081626][T15387] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 935.087847][T15387] ? __alloc_skb+0xfc/0x7e0 [ 935.092406][T15387] __alloc_skb+0xfc/0x7e0 [ 935.096785][T15387] tcp_stream_alloc_skb+0x3e/0x330 [ 935.101958][T15387] tcp_write_xmit+0xe9a/0x62b0 [ 935.106842][T15387] ? __phys_addr+0xb6/0x170 [ 935.111409][T15387] tcp_sendmsg_locked+0x216c/0x3f10 [ 935.116695][T15387] ? tcp_sendmsg+0x1d/0x40 [ 935.121162][T15387] ? tcp_set_state+0x520/0x520 [ 935.125972][T15387] ? __local_bh_enable_ip+0x132/0x1b0 [ 935.131404][T15387] ? lock_sock_nested+0x66/0x100 [ 935.136405][T15387] tcp_sendmsg+0x2b/0x40 [ 935.140704][T15387] ? inet_send_prepare+0x260/0x260 [ 935.145862][T15387] ____sys_sendmsg+0x59b/0x970 [ 935.150685][T15387] ? __sys_sendmsg_sock+0x30/0x30 [ 935.155751][T15387] ? __import_iovec+0x315/0x500 [ 935.160772][T15387] ? import_iovec+0x6f/0xa0 [ 935.165341][T15387] ___sys_sendmsg+0x21c/0x290 [ 935.170070][T15387] ? __sys_sendmsg+0x270/0x270 [ 935.174903][T15387] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 935.180691][T15387] ? __fdget+0x17c/0x200 [ 935.184984][T15387] __se_sys_sendmsg+0x19e/0x270 [ 935.189886][T15387] ? __x64_sys_sendmsg+0x80/0x80 [ 935.194916][T15387] ? syscall_enter_from_user_mode+0x2a/0x80 [ 935.200864][T15387] do_syscall_64+0x4c/0xa0 [ 935.205334][T15387] ? clear_bhb_loop+0x60/0xb0 [ 935.210057][T15387] ? clear_bhb_loop+0x60/0xb0 [ 935.214770][T15387] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 935.220761][T15387] RIP: 0033:0x7f2644d8ebe9 [ 935.225346][T15387] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 935.245092][T15387] RSP: 002b:00007f2645b1f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 935.253560][T15387] RAX: ffffffffffffffda RBX: 00007f2644fb5fa0 RCX: 00007f2644d8ebe9 [ 935.261579][T15387] RDX: 00000000000052cc RSI: 0000200000000040 RDI: 000000000000000d [ 935.269594][T15387] RBP: 00007f2645b1f090 R08: 0000000000000000 R09: 0000000000000000 [ 935.277693][T15387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 935.285792][T15387] R13: 00007f2644fb6038 R14: 00007f2644fb5fa0 R15: 00007ffdd20b2eb8 [ 935.293822][T15387] [ 937.300724][T15408] netlink: 154020 bytes leftover after parsing attributes in process `syz.4.3654'. [ 937.311299][T15408] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 938.525292][T15344] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3627'. [ 939.158008][T15441] netlink: 'syz.1.3660': attribute type 29 has an invalid length. [ 939.360029][T15441] netlink: 'syz.1.3660': attribute type 29 has an invalid length. [ 941.113940][T15475] netlink: 192156 bytes leftover after parsing attributes in process `syz.1.3680'. [ 941.161658][T15475] netlink: zone id is out of range [ 941.207557][T15477] FAULT_INJECTION: forcing a failure. [ 941.207557][T15477] name failslab, interval 1, probability 0, space 0, times 0 [ 941.277979][T15477] CPU: 0 PID: 15477 Comm: syz.2.3679 Not tainted 6.1.148-syzkaller #0 [ 941.286239][T15477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 941.296427][T15477] Call Trace: [ 941.299743][T15477] [ 941.302713][T15477] dump_stack_lvl+0x168/0x22e [ 941.307439][T15477] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 941.313652][T15477] ? show_regs_print_info+0x12/0x12 [ 941.318902][T15477] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 941.325222][T15477] should_fail_ex+0x399/0x4d0 [ 941.329954][T15477] should_failslab+0x5/0x20 [ 941.334527][T15477] slab_pre_alloc_hook+0x59/0x310 [ 941.339608][T15477] kmem_cache_alloc_node+0x5a/0x320 [ 941.344857][T15477] ? __alloc_skb+0xfc/0x7e0 [ 941.349413][T15477] __alloc_skb+0xfc/0x7e0 [ 941.353798][T15477] skb_segment+0xe79/0x3fb0 [ 941.358398][T15477] ? perf_trace_preemptirq_template+0x287/0x330 [ 941.364696][T15477] tcp_gso_segment+0x3fb/0x1980 [ 941.369603][T15477] ? tcp_tasklet_func+0x460/0x460 [ 941.374725][T15477] inet_gso_segment+0x5d1/0x1420 [ 941.379730][T15477] ? inet_sk_state_store+0x90/0x90 [ 941.384889][T15477] skb_mac_gso_segment+0x2f9/0x610 [ 941.390060][T15477] ? skb_mac_gso_segment+0x17b/0x610 [ 941.395382][T15477] ? skb_eth_gso_segment+0x250/0x250 [ 941.400718][T15477] __skb_gso_segment+0x316/0x4b0 [ 941.405715][T15477] ip_finish_output+0x266/0x4c0 [ 941.410619][T15477] __ip_queue_xmit+0x1030/0x19b0 [ 941.415611][T15477] ? __ip_queue_xmit+0x58/0x19b0 [ 941.420598][T15477] __tcp_transmit_skb+0x1c6c/0x3160 [ 941.425843][T15477] ? perf_trace_preemptirq_template+0x287/0x330 [ 941.432185][T15477] ? __tcp_send_ack+0x5a0/0x5a0 [ 941.437083][T15477] ? skb_split+0xc52/0x13a0 [ 941.441654][T15477] ? tcp_small_queue_check+0x201/0x400 [ 941.447164][T15477] tcp_write_xmit+0x1755/0x62b0 [ 941.452105][T15477] tcp_sendmsg_locked+0x216c/0x3f10 [ 941.457391][T15477] ? tcp_sendmsg+0x1d/0x40 [ 941.461857][T15477] ? tcp_set_state+0x520/0x520 [ 941.466664][T15477] ? __local_bh_enable_ip+0x132/0x1b0 [ 941.472087][T15477] ? lock_sock_nested+0x66/0x100 [ 941.477077][T15477] tcp_sendmsg+0x2b/0x40 [ 941.481366][T15477] ? inet_send_prepare+0x260/0x260 [ 941.486518][T15477] ____sys_sendmsg+0x59b/0x970 [ 941.491337][T15477] ? __sys_sendmsg_sock+0x30/0x30 [ 941.496441][T15477] ? __import_iovec+0x315/0x500 [ 941.501350][T15477] ? import_iovec+0x6f/0xa0 [ 941.505920][T15477] ___sys_sendmsg+0x21c/0x290 [ 941.511442][T15477] ? __sys_sendmsg+0x270/0x270 [ 941.516388][T15477] ? __fdget+0x17c/0x200 [ 941.520694][T15477] __se_sys_sendmsg+0x19e/0x270 [ 941.525590][T15477] ? perf_trace_preemptirq_template+0x287/0x330 [ 941.531884][T15477] ? __x64_sys_sendmsg+0x80/0x80 [ 941.536909][T15477] ? lockdep_hardirqs_on+0x94/0x140 [ 941.542174][T15477] do_syscall_64+0x4c/0xa0 [ 941.546643][T15477] ? clear_bhb_loop+0x60/0xb0 [ 941.551360][T15477] ? clear_bhb_loop+0x60/0xb0 [ 941.556082][T15477] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 941.562042][T15477] RIP: 0033:0x7f197f58ebe9 [ 941.566499][T15477] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 941.586237][T15477] RSP: 002b:00007f19804e9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 941.594704][T15477] RAX: ffffffffffffffda RBX: 00007f197f7b5fa0 RCX: 00007f197f58ebe9 [ 941.602728][T15477] RDX: 00000000000052cc RSI: 0000200000000040 RDI: 000000000000000d [ 941.610756][T15477] RBP: 00007f19804e9090 R08: 0000000000000000 R09: 0000000000000000 [ 941.618796][T15477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 941.626817][T15477] R13: 00007f197f7b6038 R14: 00007f197f7b5fa0 R15: 00007ffd6c2b06c8 [ 941.634858][T15477] [ 942.626244][T15506] netlink: 'syz.2.3692': attribute type 10 has an invalid length. [ 942.657519][T15504] netlink: 'syz.2.3692': attribute type 10 has an invalid length. [ 942.896747][T15515] FAULT_INJECTION: forcing a failure. [ 942.896747][T15515] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 943.019290][T15515] CPU: 1 PID: 15515 Comm: syz.3.3694 Not tainted 6.1.148-syzkaller #0 [ 943.027535][T15515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 943.037645][T15515] Call Trace: [ 943.040955][T15515] [ 943.043913][T15515] dump_stack_lvl+0x168/0x22e [ 943.048647][T15515] ? show_regs_print_info+0x12/0x12 [ 943.053888][T15515] ? load_image+0x3b0/0x3b0 [ 943.058431][T15515] ? __lock_acquire+0x7c50/0x7c50 [ 943.063496][T15515] ? lockdep_hardirqs_on+0x94/0x140 [ 943.068739][T15515] should_fail_ex+0x399/0x4d0 [ 943.073476][T15515] _copy_from_user+0x2c/0x170 [ 943.078194][T15515] __sys_bpf+0x265/0x6d0 [ 943.082479][T15515] ? bpf_link_show_fdinfo+0x340/0x340 [ 943.087909][T15515] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 943.094124][T15515] __x64_sys_bpf+0x78/0x90 [ 943.098592][T15515] do_syscall_64+0x4c/0xa0 [ 943.103082][T15515] ? clear_bhb_loop+0x60/0xb0 [ 943.107814][T15515] ? clear_bhb_loop+0x60/0xb0 [ 943.112540][T15515] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 943.118500][T15515] RIP: 0033:0x7fb08418ebe9 [ 943.122958][T15515] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 943.142607][T15515] RSP: 002b:00007fb084f6c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 943.151069][T15515] RAX: ffffffffffffffda RBX: 00007fb0843b5fa0 RCX: 00007fb08418ebe9 [ 943.159069][T15515] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 943.167174][T15515] RBP: 00007fb084f6c090 R08: 0000000000000000 R09: 0000000000000000 [ 943.175199][T15515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 943.183858][T15515] R13: 00007fb0843b6038 R14: 00007fb0843b5fa0 R15: 00007ffe7cb99308 [ 943.191930][T15515] [ 943.467974][T15523] netlink: 'syz.1.3697': attribute type 7 has an invalid length. [ 943.514587][T15523] netlink: 'syz.1.3697': attribute type 21 has an invalid length. [ 943.589714][T15523] netlink: 'syz.1.3697': attribute type 2 has an invalid length. [ 943.962404][T15532] netlink: 'syz.2.3701': attribute type 21 has an invalid length. [ 943.986614][T15532] IPv6: NLM_F_CREATE should be specified when creating new route [ 945.461742][T15555] FAULT_INJECTION: forcing a failure. [ 945.461742][T15555] name failslab, interval 1, probability 0, space 0, times 0 [ 945.559960][T15555] CPU: 0 PID: 15555 Comm: syz.2.3711 Not tainted 6.1.148-syzkaller #0 [ 945.568292][T15555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 945.578397][T15555] Call Trace: [ 945.581714][T15555] [ 945.584682][T15555] dump_stack_lvl+0x168/0x22e [ 945.589414][T15555] ? show_regs_print_info+0x12/0x12 [ 945.594667][T15555] ? load_image+0x3b0/0x3b0 [ 945.599227][T15555] ? __lock_acquire+0x7c50/0x7c50 [ 945.604394][T15555] ? irqentry_enter+0x33/0x50 [ 945.609214][T15555] should_fail_ex+0x399/0x4d0 [ 945.613949][T15555] should_failslab+0x5/0x20 [ 945.618601][T15555] slab_pre_alloc_hook+0x59/0x310 [ 945.623675][T15555] ? rcu_is_watching+0x11/0xa0 [ 945.628487][T15555] ? bpf_test_init+0xc0/0x150 [ 945.633233][T15555] __kmem_cache_alloc_node+0x4f/0x260 [ 945.638657][T15555] ? bpf_test_init+0xc0/0x150 [ 945.643392][T15555] __kmalloc+0xa0/0x240 [ 945.647612][T15555] bpf_test_init+0xc0/0x150 [ 945.652175][T15555] bpf_prog_test_run_xdp+0x359/0xe50 [ 945.657538][T15555] ? dev_put+0x80/0x80 [ 945.661673][T15555] ? dev_put+0x80/0x80 [ 945.665797][T15555] bpf_prog_test_run+0x31e/0x390 [ 945.670797][T15555] __sys_bpf+0x593/0x6d0 [ 945.675092][T15555] ? bpf_link_show_fdinfo+0x340/0x340 [ 945.680530][T15555] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 945.686762][T15555] __x64_sys_bpf+0x78/0x90 [ 945.691238][T15555] do_syscall_64+0x4c/0xa0 [ 945.695704][T15555] ? clear_bhb_loop+0x60/0xb0 [ 945.700431][T15555] ? clear_bhb_loop+0x60/0xb0 [ 945.705165][T15555] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 945.711127][T15555] RIP: 0033:0x7f197f58ebe9 [ 945.715588][T15555] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 945.735255][T15555] RSP: 002b:00007f19804e9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 945.743719][T15555] RAX: ffffffffffffffda RBX: 00007f197f7b5fa0 RCX: 00007f197f58ebe9 [ 945.751740][T15555] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 945.759750][T15555] RBP: 00007f19804e9090 R08: 0000000000000000 R09: 0000000000000000 [ 945.767762][T15555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 945.775781][T15555] R13: 00007f197f7b6038 R14: 00007f197f7b5fa0 R15: 00007ffd6c2b06c8 [ 945.783813][T15555] [ 949.100724][ T4320] Bluetooth: hci1: command 0x0406 tx timeout [ 950.186002][T15633] netlink: 'syz.1.3738': attribute type 9 has an invalid length. [ 950.283578][T15633] netlink: 399 bytes leftover after parsing attributes in process `syz.1.3738'. [ 951.687143][T15651] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3743'. [ 952.410631][T15667] netlink: 'syz.1.3750': attribute type 10 has an invalid length. [ 952.493041][T15667] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 952.710178][T15679] netlink: 'syz.2.3754': attribute type 29 has an invalid length. [ 952.778038][T15680] netlink: 'syz.2.3754': attribute type 29 has an invalid length. [ 953.009182][T15667] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 953.046912][T15667] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 953.060000][T15680] netlink: 'syz.2.3754': attribute type 29 has an invalid length. [ 953.820172][T15700] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3760'. [ 954.047206][T15703] netlink: 'syz.3.3762': attribute type 10 has an invalid length. [ 954.237132][T15703] 8021q: adding VLAN 0 to HW filter on device bond0 [ 954.260530][T15703] team0: Port device bond0 added [ 954.938812][T15714] netlink: 'syz.4.3768': attribute type 10 has an invalid length. [ 955.000406][T15714] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 955.389535][T15714] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 955.482693][T15714] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 955.995786][T15732] netlink: 154020 bytes leftover after parsing attributes in process `syz.2.3774'. [ 956.037395][T15732] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 956.583741][T15745] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3778'. [ 956.880082][T15747] netlink: 'syz.2.3779': attribute type 9 has an invalid length. [ 956.939870][T15747] netlink: 399 bytes leftover after parsing attributes in process `syz.2.3779'. [ 957.201987][T15760] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3792'. [ 957.723045][T15772] netlink: 130181 bytes leftover after parsing attributes in process `syz.0.3787'. [ 957.958604][T15774] netlink: 'syz.3.3786': attribute type 10 has an invalid length. [ 958.080670][T15774] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 958.297340][T15774] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 958.413085][T15778] netlink: 154020 bytes leftover after parsing attributes in process `syz.2.3789'. [ 958.464079][T15778] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 958.617912][T15774] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 959.542588][T15795] netlink: 'syz.0.3795': attribute type 9 has an invalid length. [ 959.589740][T15795] netlink: 399 bytes leftover after parsing attributes in process `syz.0.3795'. [ 959.688023][T15797] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3797'. [ 960.603948][T15812] netlink: 154020 bytes leftover after parsing attributes in process `syz.1.3803'. [ 960.677744][T15812] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 962.147177][T15835] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3810'. [ 964.074135][T15850] netlink: 154020 bytes leftover after parsing attributes in process `syz.1.3816'. [ 964.161485][T15850] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 964.459710][ T4320] Bluetooth: hci0: command 0x0406 tx timeout [ 965.935989][T15875] netlink: 830 bytes leftover after parsing attributes in process `syz.2.3825'. [ 966.350599][T15887] netlink: 'syz.3.3829': attribute type 10 has an invalid length. [ 966.594153][T15887] team0: Port device wlan1 added [ 967.142252][T15894] netlink: 'syz.3.3831': attribute type 4 has an invalid length. [ 967.162292][T15894] netlink: 134728 bytes leftover after parsing attributes in process `syz.3.3831'. [ 969.703592][T15941] netlink: 'syz.2.3848': attribute type 15 has an invalid length. [ 969.830299][T15941] netlink: 'syz.2.3848': attribute type 5 has an invalid length. [ 969.875049][T15941] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3848'. [ 970.373791][T15954] netlink: 'syz.4.3854': attribute type 4 has an invalid length. [ 970.430147][T15954] netlink: 134728 bytes leftover after parsing attributes in process `syz.4.3854'. [ 970.707413][T15956] netlink: 'syz.1.3855': attribute type 28 has an invalid length. [ 970.746287][T15956] netlink: 'syz.1.3855': attribute type 4 has an invalid length. [ 970.771004][T15956] netlink: 136 bytes leftover after parsing attributes in process `syz.1.3855'. [ 971.750575][T15973] netlink: 154020 bytes leftover after parsing attributes in process `syz.3.3858'. [ 971.786739][T15973] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 973.259023][T15992] netlink: 17861 bytes leftover after parsing attributes in process `syz.1.3867'. [ 974.898776][T16008] netlink: 'syz.1.3873': attribute type 4 has an invalid length. [ 974.929772][T16008] netlink: 134728 bytes leftover after parsing attributes in process `syz.1.3873'. [ 977.938104][T16043] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3881'. [ 978.478094][T16059] netlink: 763 bytes leftover after parsing attributes in process `syz.1.3889'. [ 979.671335][T16077] netlink: 164 bytes leftover after parsing attributes in process `syz.4.3896'. [ 979.708800][T16077] syzkaller1: tun_chr_ioctl cmd 1074025676 [ 979.727569][T16077] syzkaller1: owner set to 778 [ 980.623652][T16107] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3905'. [ 980.643218][T16107] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3905'. [ 980.681087][T16104] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3905'. [ 981.754426][T16128] netlink: 'syz.3.3914': attribute type 12 has an invalid length. [ 981.779336][T16128] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3914'. [ 981.989157][T16133] syz.0.3915[16133] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 981.989273][T16133] syz.0.3915[16133] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 984.940383][ T4327] Bluetooth: hci2: command 0x0406 tx timeout [ 985.334516][T16192] netlink: 'syz.3.3934': attribute type 28 has an invalid length. [ 985.477883][T16202] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3937'. [ 986.192394][T16219] netlink: 61211 bytes leftover after parsing attributes in process `syz.4.3943'. [ 987.316559][T16236] netlink: 'syz.3.3950': attribute type 1 has an invalid length. [ 987.363571][T16236] netlink: 112865 bytes leftover after parsing attributes in process `syz.3.3950'. [ 989.052275][T16270] netlink: 61211 bytes leftover after parsing attributes in process `syz.1.3959'. [ 989.917608][T16286] netlink: 154020 bytes leftover after parsing attributes in process `syz.0.3965'. [ 989.952289][T16286] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 991.281425][T16323] device syzkaller0 entered promiscuous mode [ 991.303125][T16323] sit0: mtu less than device minimum [ 991.385050][T13285] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 991.558373][T16326] netlink: 61211 bytes leftover after parsing attributes in process `syz.3.3977'. [ 991.975254][T16338] netlink: 154020 bytes leftover after parsing attributes in process `syz.4.3981'. [ 992.046722][T16338] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 992.492346][T16346] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3983'. [ 993.108948][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.115645][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.639751][T16369] netlink: 154020 bytes leftover after parsing attributes in process `syz.0.3992'. [ 993.653637][T16369] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 993.793355][T16376] netlink: 'syz.4.3995': attribute type 39 has an invalid length. [ 993.877524][T16372] netlink: 13951 bytes leftover after parsing attributes in process `syz.3.3993'. [ 995.092940][T16409] netlink: 154020 bytes leftover after parsing attributes in process `syz.4.4006'. [ 995.200719][T16409] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 995.765191][T16428] delete_channel: no stack [ 997.280084][T16459] netlink: 154020 bytes leftover after parsing attributes in process `syz.3.4023'. [ 997.312605][T16458] netlink: 'syz.0.4024': attribute type 3 has an invalid length. [ 997.317410][T16459] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 997.323891][T16458] netlink: 'syz.0.4024': attribute type 1 has an invalid length. [ 997.339420][T16458] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.4024'. [ 998.272145][T16477] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4030'. [ 1001.276158][T16548] cgroup: fork rejected by pids controller in /syz4 [ 1002.404457][T16660] device syzkaller0 entered promiscuous mode [ 1002.478077][T16680] netlink: 'syz.3.4065': attribute type 10 has an invalid length. [ 1002.493383][T16680] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4065'. [ 1002.550732][T16680] device batadv0 entered promiscuous mode [ 1002.558462][T16680] bridge0: port 3(batadv0) entered blocking state [ 1002.569739][T16680] bridge0: port 3(batadv0) entered disabled state [ 1002.588829][T16680] bridge0: port 3(batadv0) entered blocking state [ 1002.595555][T16680] bridge0: port 3(batadv0) entered forwarding state [ 1003.080509][T13282] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 1003.090394][T13282] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 1004.724477][T16717] netlink: 154020 bytes leftover after parsing attributes in process `syz.1.4078'. [ 1004.734693][T16717] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 1005.425375][ T4320] Bluetooth: hci3: command 0x0406 tx timeout [ 1007.510719][T16721] netlink: 'syz.1.4080': attribute type 10 has an invalid length. [ 1007.552290][T16721] team0: Port device netdevsim0 added [ 1007.727929][ T4320] Bluetooth: hci1: ISO packet for unknown connection handle 9 [ 1009.130577][ T4327] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1009.140738][ T4327] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1009.149061][ T4327] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1009.157294][ T4327] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1009.170542][ T4327] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1009.178454][ T4327] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1009.286249][T16787] netlink: 'syz.0.4103': attribute type 13 has an invalid length. [ 1009.306417][T16787] netlink: 14581 bytes leftover after parsing attributes in process `syz.0.4103'. [ 1009.397471][T16787] netlink: 61967 bytes leftover after parsing attributes in process `syz.0.4103'. [ 1009.436161][T16789] netlink: 'syz.2.4104': attribute type 3 has an invalid length. [ 1009.510940][T16789] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.4104'. [ 1010.059403][T16782] chnl_net:caif_netlink_parms(): no params data found [ 1010.422712][T16822] netlink: 'syz.0.4112': attribute type 17 has an invalid length. [ 1010.453405][T16822] netlink: 148 bytes leftover after parsing attributes in process `syz.0.4112'. [ 1010.571451][T16782] bridge0: port 1(bridge_slave_0) entered blocking state [ 1010.578765][T16782] bridge0: port 1(bridge_slave_0) entered disabled state [ 1010.601507][T16782] device bridge_slave_0 entered promiscuous mode [ 1010.650600][T16782] bridge0: port 2(bridge_slave_1) entered blocking state [ 1010.683186][T16782] bridge0: port 2(bridge_slave_1) entered disabled state [ 1010.704187][T16782] device bridge_slave_1 entered promiscuous mode [ 1011.220071][T16782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1011.237739][T16844] netlink: 'syz.1.4121': attribute type 4 has an invalid length. [ 1011.260381][T16844] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4121'. [ 1011.269842][ T4327] Bluetooth: hci4: command 0x0409 tx timeout [ 1011.349005][T16844] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1011.408553][T16782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1011.565821][T16782] team0: Port device team_slave_0 added [ 1011.582963][T16782] team0: Port device team_slave_1 added [ 1011.685440][T16782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1011.716135][T16782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1011.774350][T16782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1011.817885][T16782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1011.840113][T16782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1011.868459][T16856] netlink: 154020 bytes leftover after parsing attributes in process `syz.2.4124'. [ 1011.909779][T16856] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 1011.971052][T16782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1012.103684][ T4320] Bluetooth: hci2: ISO packet for unknown connection handle 9 [ 1012.673982][T16782] device hsr_slave_0 entered promiscuous mode [ 1012.713689][T16782] device hsr_slave_1 entered promiscuous mode [ 1012.731872][T16782] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1012.762296][T16782] Cannot create hsr debugfs directory [ 1013.339739][ T4320] Bluetooth: hci4: command 0x041b tx timeout [ 1013.559879][T16782] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1013.716821][T16782] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1013.747429][T16891] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.4137'. [ 1013.869218][T16782] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1014.052191][T16782] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1014.261355][ T4320] Bluetooth: hci0: ISO packet for unknown connection handle 9 [ 1014.346293][T16782] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1014.459976][T16782] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1014.562878][T16782] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1014.593952][T16782] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1014.906725][T16782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1014.956491][T13253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1015.030433][T13253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1015.084131][T16782] 8021q: adding VLAN 0 to HW filter on device team0 [ 1015.115883][T13253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1015.140690][T13253] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1015.142397][ T4320] Bluetooth: hci3: unexpected event 0x0f length: 15 > 4 [ 1015.172060][T13253] bridge0: port 1(bridge_slave_0) entered blocking state [ 1015.186475][T13253] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1015.195519][T13253] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1015.299950][T13253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1015.329337][T13253] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1015.419708][ T4320] Bluetooth: hci4: command 0x040f tx timeout [ 1015.430184][T13253] bridge0: port 2(bridge_slave_1) entered blocking state [ 1015.437352][T13253] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1015.513420][T13253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1015.522863][T13253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1015.533878][T13253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1015.545243][T13253] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1015.557258][T13253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1015.573599][T13253] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1015.584063][T13253] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1015.616207][T16782] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1015.673649][T16782] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1015.712186][T13253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1015.722049][T13253] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1015.756040][T13253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1015.780497][T13253] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1015.833718][T13253] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1016.125042][T13275] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1016.192558][T13275] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1016.247742][T16782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1016.283988][T16969] FAULT_INJECTION: forcing a failure. [ 1016.283988][T16969] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1016.327675][T16969] CPU: 1 PID: 16969 Comm: syz.2.4164 Not tainted 6.1.148-syzkaller #0 [ 1016.335921][T16969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1016.346023][T16969] Call Trace: [ 1016.349346][T16969] [ 1016.352316][T16969] dump_stack_lvl+0x168/0x22e [ 1016.357044][T16969] ? show_regs_print_info+0x12/0x12 [ 1016.362285][T16969] ? load_image+0x3b0/0x3b0 [ 1016.366840][T16969] ? __lock_acquire+0x7c50/0x7c50 [ 1016.371928][T16969] should_fail_ex+0x399/0x4d0 [ 1016.376680][T16969] _copy_from_user+0x2c/0x170 [ 1016.381404][T16969] __sys_bpf+0x265/0x6d0 [ 1016.385702][T16969] ? bpf_link_show_fdinfo+0x340/0x340 [ 1016.391143][T16969] ? lock_chain_count+0x20/0x20 [ 1016.396046][T16969] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 1016.402088][T16969] __x64_sys_bpf+0x78/0x90 [ 1016.406555][T16969] do_syscall_64+0x4c/0xa0 [ 1016.411049][T16969] ? clear_bhb_loop+0x60/0xb0 [ 1016.415765][T16969] ? clear_bhb_loop+0x60/0xb0 [ 1016.420535][T16969] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1016.426476][T16969] RIP: 0033:0x7f197f58ebe9 [ 1016.430925][T16969] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1016.450574][T16969] RSP: 002b:00007f19804e9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1016.459035][T16969] RAX: ffffffffffffffda RBX: 00007f197f7b5fa0 RCX: 00007f197f58ebe9 [ 1016.467052][T16969] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 1016.475071][T16969] RBP: 00007f19804e9090 R08: 0000000000000000 R09: 0000000000000000 [ 1016.483085][T16969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1016.491097][T16969] R13: 00007f197f7b6038 R14: 00007f197f7b5fa0 R15: 00007ffd6c2b06c8 [ 1016.499117][T16969] [ 1019.423778][T13275] device hsr_slave_0 left promiscuous mode [ 1019.430280][T13275] device hsr_slave_1 left promiscuous mode [ 1019.436864][T13275] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1019.444951][T13275] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1019.452909][T13275] device bridge_slave_1 left promiscuous mode [ 1019.459127][T13275] bridge0: port 2(bridge_slave_1) entered disabled state [ 1019.469366][T13275] device bridge_slave_0 left promiscuous mode [ 1019.476634][T13275] bridge0: port 1(bridge_slave_0) entered disabled state [ 1019.720546][T13275] team0 (unregistering): Port device team_slave_1 removed [ 1019.765896][T13275] team0 (unregistering): Port device team_slave_0 removed [ 1019.807541][T13275] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1019.851673][T13275] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1020.282945][T13275] bond0 (unregistering): Released all slaves