last executing test programs: 18m11.289455282s ago: executing program 3 (id=5440): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0xdfc, r0, 0x4}, 0x38) 18m11.073366005s ago: executing program 3 (id=5443): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x36}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000040)="f7edad00"/14, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 18m10.951031672s ago: executing program 3 (id=5447): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f0000000500)=@framed, &(0x7f0000000580)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r0, 0x21, 0x85, 0xcf, &(0x7f0000000000)="fae68670fef1c45ff0634fe72a6253b4357c978887379648e34b8e43761f35000437ab851cde4821ce97abc68f6a1c3593e2a7a267f78fff0e9e1743899a7dc5c1d2ecae353bd4bcdb61c053b1d7b1223331d664596d93a54d408700062455bf71027a99387a4c190aa0098ed6ed8951ff86c092399a8d11b76c5e00"/133, &(0x7f00000008c0)=""/206, 0x1000, 0x0, 0x1a, 0x64, 0xfffffffffffffffe, &(0x7f00000000c0)="d5231f25b5f85be12036902ce1a29123e3c1d41aa6d9c06ff230c473bf3c", 0x0, 0x8000}, 0x48) 18m10.701292317s ago: executing program 3 (id=5451): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0}, 0x28) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000000000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 18m10.509242608s ago: executing program 3 (id=5456): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000c40), 0x12) r2 = syz_clone(0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f00000001c0)=r2, 0x12) 18m10.185238807s ago: executing program 3 (id=5460): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r0, 0xfffffffe}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r1}, 0x38) 17m57.90093366s ago: executing program 1 (id=5528): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000080000000c00000001"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7679b6df}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r2, 0x0, 0xffffffffffffff9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe}, 0x37) 17m57.55408534s ago: executing program 1 (id=5530): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 17m57.241006208s ago: executing program 1 (id=5542): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 17m57.053332909s ago: executing program 1 (id=5534): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x306) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) close(0x3) 17m56.645912333s ago: executing program 1 (id=5535): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0xf242, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4204, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0xc, 0x9, 0x0, 0x1, 0x2000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xc, 0x9, 0x0, 0x0, 0x80ffffff}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0x5}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 17m56.114874834s ago: executing program 1 (id=5543): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r2}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r3}, 0x38) socketpair$unix(0x1, 0x5, 0x0, 0x0) close(0xffffffffffffffff) 17m55.056167016s ago: executing program 32 (id=5460): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r0, 0xfffffffe}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r1}, 0x38) 17m41.021815301s ago: executing program 33 (id=5543): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r2}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r3}, 0x38) socketpair$unix(0x1, 0x5, 0x0, 0x0) close(0xffffffffffffffff) 35.771295958s ago: executing program 4 (id=9293): r0 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x3, 0x20, 0x0, 0x0, 0xffff, 0x8a410, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_bp={0x0, 0xe}, 0x8018, 0x6b31, 0x6, 0x9, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2}, 0x0, 0x800, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0xf3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x50194, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, @perf_config_ext={0x8, 0x6}, 0x8621, 0x0, 0x6, 0x8, 0x0, 0x2, 0x4}, 0x0, 0x1, r0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x1) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x101, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) r3 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) recvmsg$kcm(r3, 0x0, 0x10000) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0500000005000000400000004000000041000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000006d3873f7247e1e75c16ee8991064a5e6a961caf897562d0ffb820448ba99144e31ec82fcf9c07e5b756bdcddef790489dc3d5e9df336041ff8730b2b4b3ed7720e"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, 0x0, &(0x7f0000002500), 0xc, r4}, 0x38) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000b80)={r4, &(0x7f00000014c0), &(0x7f0000000100)=""/31}, 0x20) sendmsg$inet(r2, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) socket$kcm(0xa, 0x3, 0x73) socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00'}, 0x90) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r6, 0x58, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x1, &(0x7f0000000080)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x4}], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0xb, '\x00', r7}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0x81, '\x00', r7, r5, 0x0, 0x1, 0x3}, 0x50) ioctl$PERF_EVENT_IOC_ID(r1, 0x80082407, &(0x7f0000000200)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x9}, 0x50) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xfe33) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000040), 0xcf) 35.288032867s ago: executing program 4 (id=9296): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4000000}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffffe4) syz_clone(0x630c0700, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b9040a1d08020a000000040000a118000200ffe0000000000e1208000f0100810401a80016ea1f0006400303000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08002a0e408e8d8ef075c0100000000000000cb090000001fb79164", 0x6c}], 0x1, 0x0, 0x0, 0x7400}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001b80)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21ca0000cf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d55545a34effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f94306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b262341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51427a7f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa08ad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282bffff2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae05334d5a44a020000001c0d882a564d74a7c72bf9a2152b261e58fea6d2f93589cfe261dc0410b5ccc92a5a0eab327a33431d62d2b7c75ce654d556c9e1817c1abca762ab53d40da51560351b673363652e1ecb56cfe4a746a45ab13c6014e9f361ab687d1cd1795ce9e05c817b83d76046bdb3709de5df7499a02d2f636a454b85b987580ada025d83bd7b8df28a540d5ec5537942e79f2f1ab25ea5f563bc77e4f9468bd309469880c7e34150ca886d1f9ac2f7e82dbe296c877d925c38c54cc8137b29028854b6bd57ca893927c331300e16aba792289e135589d93302fc37c73c303e383cdf8ef3f6d6265fe5ee01759d24027475c8901039a898582022bc95992b86dce0710887c8a625d9cbb897bdbfaf49a3f642a169827a9bae4fcfa5212461db000000000000e6ed75ca8fcda7ef3ee336189fef3b3ffb9f38fefc5ff39c4e69e3fa1f8b10ee97123e99b61eba065b1ad67530e7c4f11f9da7ae000002000000610101ad7f79cb9bbf64a0fc109f49fe8799fe266e2ccac80fefe750151f5ddfe51833ec65ece70e07ce8ab5d97db47da8f80000664dc0b86ae2b3ff9d4e220752a6b2f3ea9f793612386496dca5af7b8952aafa796ea7b156d19612297c63bb20e1e0469f7615f67a9218cbace38f5236821314f76302b98afa93044b83989339ca10e6ae30e70e17a82f03e915b8425e8e7a91614306d2ae0bc3550d856f2d7293672b5673d264fc886b0c8bdf436a0fcd21bf9da7bdca98e34cd6e59b0a7ce4ba1b466561aaa35448dff47bb1d7df23d467689a66"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000001000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x0, 0x36, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68886dd", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 27.468601472s ago: executing program 4 (id=9307): ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x60, 0x8}, {}, {0x2}]}) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0xc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0xe}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(r3, &(0x7f0000000e40)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r3, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0) sendmsg$tipc(r3, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000740)={'batadv_slave_1\x00', 0x200}) setsockopt$sock_attach_bpf(r2, 0x1, 0x21, &(0x7f00000000c0), 0x4) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) close(r3) recvmsg(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000600)=""/203, 0xcb}, {&(0x7f00000003c0)=""/120, 0x78}], 0x2}, 0x0) r4 = socket$kcm(0x22, 0x2, 0x21) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x80044944, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f7", 0xb}], 0x1}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="6000000022007f029e607dd75fcb520000a124b244de91f7f414adcf41bfafdd1b1e93c6292aefa3ca89563a63fb94b2584ca2faa20f2c308b0fe298acec10e3019e1e26e6efd0166e6c1b01132e5423294ac2f4d53c38", 0x57}], 0x1, 0x0, 0x0, 0x6}, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000580)=@o_path={&(0x7f0000000540)='./file0\x00', 0x0, 0x8, r6}, 0x18) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x1, 0x7e, 0x1, 0xffffffffffffffff, 0x2}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0xca, r7}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000005c0)={r7, &(0x7f0000000080), &(0x7f0000000140)=""/241}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1b, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xe5d8, 0x0, 0x0, 0x0, 0x2}, {}, {}, [@map_idx={0x18, 0x0, 0x5, 0x0, 0x10}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x3}, @alu={0x7, 0x0, 0xa, 0x2, 0xb, 0x4, 0xfffffffffffffff0}, @alu={0x4, 0x0, 0xc, 0xb, 0x18406e88a3ee9a99, 0xffffffffffffffff, 0x8}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, @map_idx={0x18, 0x9, 0x5, 0x0, 0xb}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x66a543a30c39cdf, 0x2e, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0x7, 0x8, 0x3}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000280)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000002c0)=[{0x4, 0x2, 0xe, 0x1}], 0x10, 0xeaf1}, 0x94) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x33fe0) 26.696612417s ago: executing program 4 (id=9313): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[], 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="52ee58bf2d00", 0x6}], 0x1000000000000342}, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) write$cgroup_subtree(r2, &(0x7f0000000240)=ANY=[@ANYRES16=0x0, @ANYRES8=r1, @ANYRES32=r0, @ANYRESOCT=r0, @ANYRES16=r2], 0xfe33) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000001, 0x1, @perf_bp={0x0}, 0x8061, 0x3, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x3, 0x3a) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80040001, 0x45040, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_bp={0x0, 0x7}, 0x406a, 0x1ffffffffffff, 0x8, 0x0, 0xfffffffffffffff8, 0xffffffff, 0x200, 0x0, 0x40}, 0x0, 0xa, 0xffffffffffffffff, 0x2) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0x12, &(0x7f00000008c0)=r6, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 26.085437333s ago: executing program 4 (id=9316): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4000000}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffffe4) syz_clone(0x630c0700, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b9040a1d08020a000000040000a118000200ffe0000000000e1208000f0100810401a80016ea1f0006400303000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08002a0e408e8d8ef075c0100000000000000cb090000001fb79164", 0x6c}], 0x1, 0x0, 0x0, 0x7400}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000001000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x0, 0x36, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68886dd", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 15.623112971s ago: executing program 2 (id=9333): socket$kcm(0x10, 0x2, 0x0) r0 = syz_clone(0x800a000, &(0x7f0000000080), 0x0, &(0x7f00000000c0), &(0x7f0000000100), 0x0) r1 = perf_event_open$cgroup(&(0x7f0000000280)={0x1, 0x80, 0x6, 0x6, 0x7, 0xc0, 0x0, 0x6, 0x71a01, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000240), 0x10}, 0x804, 0xc3, 0x9032, 0x6, 0x400, 0xf7, 0x7, 0x0, 0x9, 0x0, 0xd}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x6, 0x6, &(0x7f00000005c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x41}, @map_fd={0x18, 0x1}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0xffffffffffffff3c, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0x7, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f00000008c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0xfffffffd}}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$kcm(r2, &(0x7f0000000100)={&(0x7f0000001540)=@tipc, 0x80, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000340)}], 0x1}, 0x4004000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='!', 0x1}], 0x1}, 0x0) close(r5) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x7, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0xffff}, 0x2, 0x2, 0x0, 0x9}, r0, 0xf, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000040), 0x3f00}], 0x1}, 0x0) recvmsg$kcm(r6, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x40010122) setsockopt$sock_attach_bpf(r3, 0x1, 0x3c, &(0x7f0000000040), 0x3b) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xe4, 0x0, 0x10, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x8000000000000002, 0x1000, 0x1, 0x81, 0xfffffff, 0x0, 0x0, 0x0, 0x0, 0x85c}, r0, 0xf, r1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000007c0)=ANY=[], 0x50) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xc2bb, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="d8000000200081044e81f782db44b90402000000e8fe450f55a1180015000600142603600e120900100000000401a80016000a00114006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee0808856e408e8d8cbf7a7ff4841ef52b49816277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4d180a54f14f00004d9db22fe7c9f8775730d16a4683f1aea4edbb57a5025ccca9e00360db70100000040fad95667e006d8df969b3ef35ce3bb9ad809d561cace91ed0bffd6e4edef3d93452a92954b43370e00"/216, 0xd8}], 0x1}, 0x0) 15.496969298s ago: executing program 4 (id=9334): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x9}, 0x104000, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x200, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4000000}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffffe4) syz_clone(0x630c0700, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, 0x0, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b9040a1d08020a000000040000a118000200ffe0000000000e1208000f0100810401a80016ea1f0006400303000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08002a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b705000008000000850000001000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r3}, 0xc) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r5, 0x0, 0x36, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68886dd", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 15.345202717s ago: executing program 5 (id=9335): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$kcm(0x2, 0x3, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000007c0), 0x4}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r0 = socket$kcm(0x2, 0x5, 0x84) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x104007, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x0) r3 = socket$kcm(0x21, 0x2, 0x2) recvmsg$kcm(r3, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0x602f, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff200000000021000aac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) sendmsg$sock(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000180)="db0e", 0x2}], 0x1}, 0x40000) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYRESOCT, @ANYRES8=r0, @ANYRES16=r2], 0x48) socket$kcm(0x11, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r4, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0xc0}, 0x0) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 15.257359662s ago: executing program 0 (id=9336): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000002000000000000000100008018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000450000001801000020756c2500000000002020207b1a00ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xffc0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0xc}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r4, r3}, 0xc) recvmsg$unix(r2, &(0x7f0000000380)={&(0x7f0000000280), 0x6e, &(0x7f0000000300)=[{&(0x7f0000000440)=""/215, 0xd7}], 0x1, &(0x7f0000000340)=[@cred={{0x1c}}], 0x20}, 0x2000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xb, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x80000000}, [@call={0x85, 0x0, 0x0, 0x2a}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @jmp={0x5, 0x1, 0x4, 0xb, 0x5, 0x40, 0xfffffffffffffff0}, @map_val={0x18, 0x1, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x5942597a}, @jmp={0x5, 0x0, 0x1, 0xa, 0x9, 0x8, 0xfffffffffffffff0}, @map_val={0x18, 0x7, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}]}, &(0x7f00000000c0)='syzkaller\x00', 0x7, 0x2b, &(0x7f0000000100)=""/43, 0x40f00, 0x7e, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000000140)={0x7, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000180)=[{0x4, 0x5, 0x3, 0xc}, {0x1, 0x2, 0x6, 0x3}, {0x2, 0x5, 0x6, 0x4}], 0x10, 0x7}, 0x94) 14.44102589s ago: executing program 5 (id=9337): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x3, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x37e2f4aba9289b81, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r2}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000200"/20, @ANYRES32, @ANYBLOB='\x00'/13, @ANYRES32], 0x50) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x890b, &(0x7f0000000100)) 14.181161715s ago: executing program 0 (id=9338): socketpair(0x1, 0x1, 0x0, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r0, 0x0, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 12.642353045s ago: executing program 2 (id=9339): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x94, 0x1}, 0x48) sendmsg$kcm(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000001c0)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe55a19c9d8714060014000000000508000a0043000040a80012001200014006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d765dd11683296b7947968c7c0b7a196e6f661", 0x6e}, {&(0x7f0000000140)="aa581ff83dac4a519b67538bfa897e210c31e1446808358248cf2d795634b12c4ce81c3876aff89235b78ea0e5c5badfa122797d62c09ada7441b4f31cd5e6fc4b2a325fb5e811fead55530751e6f4bc4b40d94743ed5bd8ec1fff7b0abcc6eaabeb7a2f5f985467a8db", 0x6a}], 0x2}, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001740)={@ifindex, 0x36, 0x0, 0x5, &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000001680)=[0x0, 0x0, 0x0, 0x0], 0x0, &(0x7f0000001700)}, 0x40) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000740)=@generic={&(0x7f0000000700)='./file0\x00', 0x0, 0x8}, 0x18) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001580)={0x18, 0xc, &(0x7f00000013c0)=ANY=[@ANYBLOB="180000000200000000000000080000000c910c00080000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000400000087000000060000009500000000000000"], &(0x7f0000001440)='syzkaller\x00', 0x7d3, 0x7, &(0x7f0000001480)=""/7, 0x40f00, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000014c0)={0x2, 0x5, 0x6474, 0xfffffffd}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000001500)=[0x1], &(0x7f0000001540)=[{0x2, 0x3, 0x9, 0x6}, {0x5, 0x2, 0xf, 0x8}, {0xef, 0x5, 0x8, 0xa}], 0x10, 0xc2d1}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r5, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001340)={@fallback, r2, 0x4, 0x0, r3, @void, @value=r4}, 0x20) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r6, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1c, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) r8 = socket$kcm(0x2, 0x922000000004, 0x106) setsockopt$sock_attach_bpf(r8, 0x29, 0x46, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0xdc, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f086dd47e0ffff00122c00631177fbac141416e000030a44079f034d2f87e589ca6aab845013f2325f1a3987050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a22", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0}, 0x50) 12.273139466s ago: executing program 6 (id=9341): r0 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x3, 0x20, 0x0, 0x0, 0xffff, 0x8a410, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_bp={0x0, 0xe}, 0x8018, 0x6b31, 0x6, 0x9, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2}, 0x0, 0x800, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0xf3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x50194, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, @perf_config_ext={0x8, 0x6}, 0x8621, 0x0, 0x6, 0x8, 0x0, 0x2, 0x4}, 0x0, 0x1, r0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x1) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x101, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) r3 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) recvmsg$kcm(r3, 0x0, 0x10000) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0500000005000000400000004000000041000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000006d3873f7247e1e75c16ee8991064a5e6a961caf897562d0ffb820448ba99144e31ec82fcf9c07e5b756bdcddef790489dc3d5e9df336041ff8730b2b4b3ed7720e"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, 0x0, &(0x7f0000002500), 0xc, r4}, 0x38) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000b80)={r4, &(0x7f00000014c0), &(0x7f0000000100)=""/31}, 0x20) sendmsg$inet(r2, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x40000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00'}, 0x90) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r6, 0x58, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x1, &(0x7f0000000080)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x4}], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0xb, '\x00', r7}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0x81, '\x00', r7, r5, 0x0, 0x1, 0x3}, 0x50) ioctl$PERF_EVENT_IOC_ID(r1, 0x80082407, &(0x7f0000000200)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x9}, 0x50) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xfe33) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000040), 0xcf) 12.272825106s ago: executing program 5 (id=9342): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[], 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="52ee58bf2d00", 0x6}], 0x1000000000000342}, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) write$cgroup_subtree(r2, &(0x7f0000000240)=ANY=[@ANYRES16=0x0, @ANYRES8=r1, @ANYRES32=r0, @ANYRESOCT=r0, @ANYRES16=r2], 0xfe33) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000001, 0x1, @perf_bp={0x0}, 0x8061, 0x3, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x3, 0x3a) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80040001, 0x45040, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_bp={0x0, 0x7}, 0x406a, 0x1ffffffffffff, 0x8, 0x0, 0xfffffffffffffff8, 0xffffffff, 0x200, 0x0, 0x40}, 0x0, 0xa, 0xffffffffffffffff, 0x2) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0x12, &(0x7f00000000c0), 0x4) setsockopt$sock_attach_bpf(r3, 0x107, 0x12, &(0x7f00000008c0)=r6, 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffff7, 0xbb88}, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 11.474379863s ago: executing program 6 (id=9343): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x102, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x200002, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='cpu.max.burst\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000400)=0xffffffff, 0x12) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001200)='./cgroup/syz0\x00', 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r2, 0x40047459, &(0x7f0000001200)) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x4004743d, 0x110e22fff6) socket$kcm(0xa, 0x5, 0x0) r5 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x4, @perf_config_ext, 0x10c002, 0xac5d, 0xffffff9a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r6, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r5) r7 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x3e, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) r8 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000280)='syz0\x00', 0x200002, 0x0) perf_event_open$cgroup(0x0, r8, 0xb, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071120d000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) socket$kcm(0xa, 0x2, 0x73) socket$kcm(0x10, 0x2, 0x0) 11.371123779s ago: executing program 5 (id=9344): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4000000}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffffe4) syz_clone(0x630c0700, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b9040a1d08020a000000040000a118000200ffe0000000000e1208000f0100810401a80016ea1f00", 0x36}], 0x1, 0x0, 0x0, 0x7400}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001b80)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21ca0000cf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d55545a34effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f94306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b262341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51427a7f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa08ad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282bffff2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae05334d5a44a020000001c0d882a564d74a7c72bf9a2152b261e58fea6d2f93589cfe261dc0410b5ccc92a5a0eab327a33431d62d2b7c75ce654d556c9e1817c1abca762ab53d40da51560351b673363652e1ecb56cfe4a746a45ab13c6014e9f361ab687d1cd1795ce9e05c817b83d76046bdb3709de5df7499a02d2f636a454b85b987580ada025d83bd7b8df28a540d5ec5537942e79f2f1ab25ea5f563bc77e4f9468bd309469880c7e34150ca886d1f9ac2f7e82dbe296c877d925c38c54cc8137b29028854b6bd57ca893927c331300e16aba792289e135589d93302fc37c73c303e383cdf8ef3f6d6265fe5ee01759d24027475c8901039a898582022bc95992b86dce0710887c8a625d9cbb897bdbfaf49a3f642a169827a9bae4fcfa5212461db000000000000e6ed75ca8fcda7ef3ee336189fef3b3ffb9f38fefc5ff39c4e69e3fa1f8b10ee97123e99b61eba065b1ad67530e7c4f11f9da7ae000002000000610101ad7f79cb9bbf64a0fc109f49fe8799fe266e2ccac80fefe750151f5ddfe51833ec65ece70e07ce8ab5d97db47da8f80000664dc0b86ae2b3ff9d4e220752a6b2f3ea9f793612386496dca5af7b8952aafa796ea7b156d19612297c63bb20e1e0469f7615f67a9218cbace38f5236821314f76302b98afa93044b83989339ca10e6ae30e70e17a82f03e915b8425e8e7a91614306d2ae0bc3550d856f2d7293672b5673d264fc886b0c8bdf436a0fcd21bf9da7bdca98e34cd6e59b0a7ce4ba1b466561aaa35448dff47bb1d7df23d467689a66"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000001000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x0, 0x36, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68886dd", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 6.806722674s ago: executing program 0 (id=9345): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x9}, 0x104000, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x200, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4000000}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffffe4) syz_clone(0x630c0700, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, 0x0, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b9040a1d08020a000000040000a118000200ffe0000000000e1208000f0100810401a80016ea1f0006400303000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08002a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b705000008000000850000001000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r3}, 0xc) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r5, 0x0, 0x36, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68886dd", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 6.745565218s ago: executing program 2 (id=9346): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$kcm(0x2, 0x3, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab0300817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014751c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa407e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a0c93d47018c12e7ba8188a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab188dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b4896c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987595ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e547f7ad33850d9feccd0111a2e3700845dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005202000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a12489c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af14915f29b719f54926fc32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b4c8787361f3289f86ae826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa520000afe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da357f9e93ce055019c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c672b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981fd9086e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b6059b9ef90c2f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c33f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217bcfd1ef24284de8a0a9f068f297037d6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2826b47ad8ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d0f889d518f64ee50f562b5fdb1f76d4a7fe14701f8ed0c6a55d66a6efea3e449e6b478abc5b196dd5308cb20c4e2a0bd702651bb39f10523102dcd8ece692159028f314e0d6bfa400475c6699fdc40efe0948e3cef7419a7f113134e5ee20fd87c4521ccfbd32d6f147f743d30866bdd86ca8bf0c7bcc475f4ed53517aaa51f1c151d859a7f0b53abd332c84bdad313e82ac3777a6f7f649ff8a25f6dfe09cb29213896b49a825257bf143e9fa3bbd47009e66fe5705b3ef2b40a182e408c680727d64e00e1ce508f8fd64ac6c84ccc28fc333067de63b9bb5daaa12ce60ee3779ded79651be69d2a413cd948a873dd7ad7017b150828cf100d3df8537f22aff58343c9ee966fceb594bbe10b911427f76a25a219be2f85287b7f83d323a30991067ad1369792166062085ff20c5fb9f6e4f78dd09c7d2d6ca3c8a5d0d26ccbe576f44a1bc94194817"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x104007, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) r2 = socket$kcm(0x21, 0x2, 0x2) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0x602f, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff200000000021000aac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYRESOCT, @ANYRES8=r0, @ANYRES16=r2], 0x48) socket$kcm(0x11, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100"], 0x128}, 0x0) recvmsg$unix(r3, 0x0, 0x0) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 6.596164826s ago: executing program 6 (id=9347): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$kcm(0x2, 0x3, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000007c0), 0x4}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r0 = socket$kcm(0x2, 0x5, 0x84) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x104007, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x0) r3 = socket$kcm(0x21, 0x2, 0x2) recvmsg$kcm(r3, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0x602f, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff200000000021000aac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) sendmsg$sock(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000180)="db0e", 0x2}], 0x1}, 0x40000) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYRESOCT, @ANYRES8=r0, @ANYRES16=r2], 0x48) socket$kcm(0x11, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r4, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0xc0}, 0x0) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 6.336192611s ago: executing program 2 (id=9348): socketpair(0x1, 0x1, 0x0, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1, 0x0, 0x0, 0x400300}, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000240), 0x8) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 6.335642021s ago: executing program 5 (id=9349): socket$kcm(0x10, 0x2, 0x0) r0 = syz_clone(0x800a000, &(0x7f0000000080), 0x0, &(0x7f00000000c0), &(0x7f0000000100), 0x0) r1 = perf_event_open$cgroup(&(0x7f0000000280)={0x1, 0x80, 0x6, 0x6, 0x7, 0xc0, 0x0, 0x6, 0x71a01, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000240), 0x10}, 0x804, 0xc3, 0x9032, 0x6, 0x400, 0xf7, 0x7, 0x0, 0x9, 0x0, 0xd}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x6, 0x6, &(0x7f00000005c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x41}, @map_fd={0x18, 0x1}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0xffffffffffffff3c, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0x7, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f00000008c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0xfffffffd}}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$kcm(r2, &(0x7f0000000100)={&(0x7f0000001540)=@tipc, 0x80, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000340)}], 0x1}, 0x4004000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='!', 0x1}], 0x1}, 0x0) close(r5) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x7, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0xffff}, 0x2, 0x2, 0x0, 0x9}, r0, 0xf, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000040), 0x3f00}], 0x1}, 0x0) recvmsg$kcm(r6, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x40010122) setsockopt$sock_attach_bpf(r3, 0x1, 0x3c, &(0x7f0000000040), 0x3b) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xe4, 0x0, 0x10, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x8000000000000002, 0x1000, 0x1, 0x81, 0xfffffff, 0x0, 0x0, 0x0, 0x0, 0x85c}, r0, 0xf, r1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000007c0)=ANY=[], 0x50) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xc2bb, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="d8000000200081044e81f782db44b90402000000e8fe450f55a1180015000600142603600e120900100000000401a80016000a00114006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee0808856e408e8d8cbf7a7ff4841ef52b49816277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4d180a54f14f00004d9db22fe7c9f8775730d16a4683f1aea4edbb57a5025ccca9e00360db70100000040fad95667e006d8df969b3ef35ce3bb9ad809d561cace91ed0bffd6e4edef3d93452a92954b43370e00"/216, 0xd8}], 0x1}, 0x0) 5.67506651s ago: executing program 0 (id=9350): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f0000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000100b0000850000000800000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xd, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000000)="c1188e19b95d02ff4284860151b0", 0x0, 0xa3d8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000200)=""/166}, 0xfffffffffffffd45) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x31, 0x0, &(0x7f0000000200)="e460cdfbef2408002900119386dd6a00000000072feb3014cd3ec8a755c1e1380081ffad000400e8d50000000100000bb5", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f2, &(0x7f0000000080)) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) socket$kcm(0x11, 0xa, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r4, 0x5, 0xe, 0x0, &(0x7f0000000300)="259a53b0711a55d47470a8da88ca", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}, 0x50) 5.660016261s ago: executing program 5 (id=9351): socketpair(0x1, 0x1, 0x0, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1, 0x0, 0x0, 0x400300}, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000240), 0x8) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 5.576653106s ago: executing program 6 (id=9352): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x3, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x37e2f4aba9289b81, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r2}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000200"/20, @ANYRES32, @ANYBLOB='\x00'/13, @ANYRES32], 0x50) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x890b, &(0x7f0000000100)) 2.58446507s ago: executing program 6 (id=9353): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[], 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="52ee58bf2d00", 0x6}], 0x1000000000000342}, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) write$cgroup_subtree(r2, &(0x7f0000000240)=ANY=[@ANYRES16=0x0, @ANYRES8=r1, @ANYRES32=r0, @ANYRESOCT=r0, @ANYRES16=r2], 0xfe33) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000001, 0x1, @perf_bp={0x0}, 0x8061, 0x3, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x3, 0x3a) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80040001, 0x45040, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_bp={0x0, 0x7}, 0x406a, 0x1ffffffffffff, 0x8, 0x0, 0xfffffffffffffff8, 0xffffffff, 0x200, 0x0, 0x40}, 0x0, 0xa, 0xffffffffffffffff, 0x2) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) setsockopt$sock_attach_bpf(r3, 0x107, 0x12, &(0x7f00000008c0), 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffff7, 0xbb88}, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.488443296s ago: executing program 0 (id=9354): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[], 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="52ee58bf2d00", 0x6}], 0x1000000000000342}, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) write$cgroup_subtree(r2, &(0x7f0000000240)=ANY=[@ANYRES16=0x0, @ANYRES8=r1, @ANYRES32=r0, @ANYRESOCT=r0, @ANYRES16=r2], 0xfe33) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000001, 0x1, @perf_bp={0x0}, 0x8061, 0x3, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x3, 0x3a) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80040001, 0x45040, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_bp={0x0, 0x7}, 0x406a, 0x1ffffffffffff, 0x8, 0x0, 0xfffffffffffffff8, 0xffffffff, 0x200, 0x0, 0x40}, 0x0, 0xa, 0xffffffffffffffff, 0x2) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0x12, &(0x7f00000000c0), 0x4) setsockopt$sock_attach_bpf(r3, 0x107, 0x12, &(0x7f00000008c0)=r6, 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffff7, 0xbb88}, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.486721586s ago: executing program 2 (id=9355): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[], 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="52ee58bf2d00", 0x6}], 0x1000000000000342}, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) write$cgroup_subtree(r2, &(0x7f0000000240)=ANY=[@ANYRES16=0x0, @ANYRES8=r1, @ANYRES32=r0, @ANYRESOCT=r0, @ANYRES16=r2], 0xfe33) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000001, 0x1, @perf_bp={0x0}, 0x8061, 0x3, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x3, 0x3a) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80040001, 0x45040, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_bp={0x0, 0x7}, 0x406a, 0x1ffffffffffff, 0x8, 0x0, 0xfffffffffffffff8, 0xffffffff, 0x200, 0x0, 0x40}, 0x0, 0xa, 0xffffffffffffffff, 0x2) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0x12, &(0x7f00000008c0)=r6, 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffff7, 0xbb88}, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.648760044s ago: executing program 0 (id=9356): ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x60, 0x8}, {}, {0x2}]}) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0xc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0xe}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(r3, &(0x7f0000000e40)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r3, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0) sendmsg$tipc(r3, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000740)={'batadv_slave_1\x00', 0x200}) setsockopt$sock_attach_bpf(r2, 0x1, 0x21, &(0x7f00000000c0), 0x4) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) close(r3) recvmsg(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000600)=""/203, 0xcb}, {&(0x7f00000003c0)=""/120, 0x78}], 0x2}, 0x0) r4 = socket$kcm(0x22, 0x2, 0x21) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x80044944, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f7", 0xb}], 0x1}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="6000000022007f029e607dd75fcb520000a124b244de91f7f414adcf41bfafdd1b1e93c6292aefa3ca89563a63fb94b2584ca2faa20f2c308b0fe298acec10e3019e1e26e6efd0166e6c1b01132e5423294ac2f4d53c38", 0x57}], 0x1, 0x0, 0x0, 0x6}, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000580)=@o_path={&(0x7f0000000540)='./file0\x00', 0x0, 0x8, r6}, 0x18) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x1, 0x7e, 0x1, 0xffffffffffffffff, 0x2}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0xca, r7}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000005c0)={r7, &(0x7f0000000080), &(0x7f0000000140)=""/241}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1b, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xe5d8, 0x0, 0x0, 0x0, 0x2}, {}, {}, [@map_idx_val={0x18, 0x1, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x3}, @alu={0x7, 0x0, 0xa, 0x2, 0xb, 0x4, 0xfffffffffffffff0}, @alu={0x4, 0x0, 0xc, 0xb, 0x18406e88a3ee9a99, 0xffffffffffffffff, 0x8}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x1}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, @map_idx={0x18, 0x9, 0x5, 0x0, 0xb}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x66a543a30c39cdf, 0x2e, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0x7, 0x8, 0x3}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000280)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000002c0)=[{0x4, 0x2, 0xe, 0x1}], 0x10, 0xeaf1}, 0x94) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x33fe0) 1.635192195s ago: executing program 6 (id=9357): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x94, 0x1}, 0x48) sendmsg$kcm(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000001c0)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe55a19c9d8714060014000000000508000a0043000040a80012001200014006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d765dd11683296b7947968c7c0b7a196e6f661", 0x6e}, {&(0x7f0000000140)="aa581ff83dac4a519b67538bfa897e210c31e1446808358248cf2d795634b12c4ce81c3876aff89235b78ea0e5c5badfa122797d62c09ada7441b4f31cd5e6fc4b2a325fb5e811fead55530751e6f4bc4b40d94743ed5bd8ec1fff7b0abcc6eaabeb7a2f5f985467a8db", 0x6a}], 0x2}, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001740)={@ifindex, 0x36, 0x0, 0x5, &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000001680)=[0x0, 0x0, 0x0, 0x0], 0x0, &(0x7f0000001700)}, 0x40) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000740)=@generic={&(0x7f0000000700)='./file0\x00', 0x0, 0x8}, 0x18) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001580)={0x18, 0xc, &(0x7f00000013c0)=ANY=[@ANYBLOB="180000000200000000000000080000000c910c00080000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000400000087000000060000009500000000000000"], &(0x7f0000001440)='syzkaller\x00', 0x7d3, 0x7, &(0x7f0000001480)=""/7, 0x40f00, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000014c0)={0x2, 0x5, 0x6474, 0xfffffffd}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000001500)=[0x1], &(0x7f0000001540)=[{0x2, 0x3, 0x9, 0x6}, {0x5, 0x2, 0xf, 0x8}, {0xef, 0x5, 0x8, 0xa}], 0x10, 0xc2d1}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r5, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001340)={@fallback, r2, 0x4, 0x0, r3, @void, @value=r4}, 0x20) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r6, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1c, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) r8 = socket$kcm(0x2, 0x922000000004, 0x106) setsockopt$sock_attach_bpf(r8, 0x29, 0x46, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0xdc, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f086dd47e0ffff00122c00631177fbac141416e000030a44079f034d2f87e589ca6aab845013f2325f1a3987050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a22", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0}, 0x50) 1.472453315s ago: executing program 2 (id=9358): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4000000}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffffe4) syz_clone(0x630c0700, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b9040a1d08020a000000040000a118000200ffe0000000000e1208000f0100810401a80016ea1f00", 0x36}], 0x1, 0x0, 0x0, 0x7400}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000001000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x0, 0x36, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68886dd", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 34 (id=9334): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x9}, 0x104000, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x200, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4000000}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffffe4) syz_clone(0x630c0700, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, 0x0, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b9040a1d08020a000000040000a118000200ffe0000000000e1208000f0100810401a80016ea1f0006400303000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08002a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b705000008000000850000001000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r3}, 0xc) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r5, 0x0, 0x36, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68886dd", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): interval 1, probability 0, space 0, times 0 [ 1603.129656][T29488] CPU: 1 PID: 29488 Comm: syz.4.7990 Not tainted syzkaller #0 [ 1603.137194][T29488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1603.147295][T29488] Call Trace: [ 1603.150607][T29488] [ 1603.153548][T29488] dump_stack_lvl+0x188/0x24e [ 1603.158256][T29488] ? show_regs_print_info+0x12/0x12 [ 1603.163481][T29488] ? load_image+0x400/0x400 [ 1603.167990][T29488] ? ___sys_recvmsg+0x212/0x590 [ 1603.172867][T29488] should_fail_ex+0x399/0x4d0 [ 1603.177572][T29488] should_failslab+0x5/0x20 [ 1603.182102][T29488] slab_pre_alloc_hook+0x59/0x310 [ 1603.187150][T29488] ? mark_lock+0x94/0x320 [ 1603.191511][T29488] kmem_cache_alloc_node+0x5a/0x320 [ 1603.196728][T29488] ? __alloc_skb+0xfc/0x7e0 [ 1603.201256][T29488] __alloc_skb+0xfc/0x7e0 [ 1603.205614][T29488] tipc_msg_create+0x4b/0x4d0 [ 1603.210320][T29488] tipc_sk_send_ack+0x101/0x580 [ 1603.215191][T29488] ? tipc_recvstream+0x78c/0xe70 [ 1603.220150][T29488] ? kmem_cache_free+0xf7/0x290 [ 1603.225026][T29488] tipc_recvstream+0x82e/0xe70 [ 1603.229821][T29488] ? tipc_sendstream+0x70/0x70 [ 1603.234596][T29488] ____sys_recvmsg+0x2cb/0x5e0 [ 1603.239408][T29488] ? __sys_recvmsg_sock+0x40/0x40 [ 1603.244462][T29488] ? import_iovec+0x6f/0xa0 [ 1603.248975][T29488] ___sys_recvmsg+0x212/0x590 [ 1603.253679][T29488] ? __sys_recvmsg+0x290/0x290 [ 1603.258470][T29488] ? common_file_perm+0x171/0x1c0 [ 1603.263522][T29488] ? __fget_files+0x43d/0x4b0 [ 1603.268227][T29488] __x64_sys_recvmsg+0x205/0x2e0 [ 1603.273191][T29488] ? ___sys_recvmsg+0x590/0x590 [ 1603.278070][T29488] ? lockdep_hardirqs_on+0x94/0x140 [ 1603.283285][T29488] do_syscall_64+0x4c/0xa0 [ 1603.287718][T29488] ? clear_bhb_loop+0x60/0xb0 [ 1603.292416][T29488] ? clear_bhb_loop+0x60/0xb0 [ 1603.297138][T29488] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1603.303045][T29488] RIP: 0033:0x7f0155f9bf79 [ 1603.307483][T29488] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1603.327111][T29488] RSP: 002b:00007f0156e05028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1603.335539][T29488] RAX: ffffffffffffffda RBX: 00007f0156216090 RCX: 00007f0155f9bf79 [ 1603.343520][T29488] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000006 [ 1603.351513][T29488] RBP: 00007f0156e05090 R08: 0000000000000000 R09: 0000000000000000 [ 1603.359493][T29488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1603.367482][T29488] R13: 00007f0156216128 R14: 00007f0156216090 R15: 00007fff0107c298 [ 1603.375485][T29488] [ 1603.433168][T29490] delete_channel: no stack [ 1603.678560][T29499] netlink: 180 bytes leftover after parsing attributes in process `syz.4.7993'. [ 1603.797204][T29499] netlink: 'syz.4.7993': attribute type 6 has an invalid length. [ 1603.826693][T29499] netlink: 164 bytes leftover after parsing attributes in process `syz.4.7993'. [ 1606.862222][T29511] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8004'. [ 1607.198881][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.205329][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.890226][T29527] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8002'. [ 1609.949822][T29541] netlink: 144 bytes leftover after parsing attributes in process `syz.4.8008'. [ 1609.973291][T29541] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1610.110998][T29535] netlink: 180 bytes leftover after parsing attributes in process `syz.6.8005'. [ 1610.212484][T29547] netlink: 'syz.5.8009': attribute type 39 has an invalid length. [ 1610.290377][T29535] netlink: 'syz.6.8005': attribute type 6 has an invalid length. [ 1610.332624][T29535] netlink: 164 bytes leftover after parsing attributes in process `syz.6.8005'. [ 1610.814179][T29557] netlink: 'syz.0.8012': attribute type 39 has an invalid length. [ 1611.003056][T29563] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8013'. [ 1611.237113][T29569] netlink: 132 bytes leftover after parsing attributes in process `syz.5.8015'. [ 1612.040801][T29570] delete_channel: no stack [ 1614.655249][T29596] FAULT_INJECTION: forcing a failure. [ 1614.655249][T29596] name failslab, interval 1, probability 0, space 0, times 0 [ 1614.674213][T29596] CPU: 0 PID: 29596 Comm: syz.4.8021 Not tainted syzkaller #0 [ 1614.681716][T29596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1614.691817][T29596] Call Trace: [ 1614.695118][T29596] [ 1614.698066][T29596] dump_stack_lvl+0x188/0x24e [ 1614.702786][T29596] ? show_regs_print_info+0x12/0x12 [ 1614.708037][T29596] ? load_image+0x400/0x400 [ 1614.712573][T29596] ? __might_sleep+0xd0/0xd0 [ 1614.717203][T29596] ? __lock_acquire+0x7d10/0x7d10 [ 1614.722301][T29596] should_fail_ex+0x399/0x4d0 [ 1614.727021][T29596] should_failslab+0x5/0x20 [ 1614.731565][T29596] slab_pre_alloc_hook+0x59/0x310 [ 1614.736670][T29596] ? sk_prot_alloc+0xe7/0x210 [ 1614.741392][T29596] __kmem_cache_alloc_node+0x4f/0x260 [ 1614.746845][T29596] ? sk_prot_alloc+0xe7/0x210 [ 1614.751549][T29596] __kmalloc+0xa0/0x240 [ 1614.755738][T29596] sk_prot_alloc+0xe7/0x210 [ 1614.760273][T29596] ? sk_alloc+0x20/0x340 [ 1614.764565][T29596] sk_alloc+0x36/0x340 [ 1614.768667][T29596] ? bpf_ctx_init+0x163/0x1a0 [ 1614.773377][T29596] ? bpf_prog_test_run_skb+0x26f/0x12a0 [ 1614.778948][T29596] bpf_prog_test_run_skb+0x35e/0x12a0 [ 1614.784356][T29596] ? __fget_files+0x28/0x4b0 [ 1614.788987][T29596] ? __fget_files+0x43d/0x4b0 [ 1614.793737][T29596] ? cpu_online+0xa0/0xa0 [ 1614.798113][T29596] bpf_prog_test_run+0x31e/0x390 [ 1614.803094][T29596] __sys_bpf+0x62b/0x780 [ 1614.807370][T29596] ? bpf_link_show_fdinfo+0x380/0x380 [ 1614.812785][T29596] ? lock_chain_count+0x20/0x20 [ 1614.817674][T29596] __x64_sys_bpf+0x78/0x90 [ 1614.822130][T29596] do_syscall_64+0x4c/0xa0 [ 1614.826593][T29596] ? clear_bhb_loop+0x60/0xb0 [ 1614.831305][T29596] ? clear_bhb_loop+0x60/0xb0 [ 1614.836012][T29596] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1614.841932][T29596] RIP: 0033:0x7f0155f9bf79 [ 1614.846376][T29596] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1614.866014][T29596] RSP: 002b:00007f0156de4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1614.874457][T29596] RAX: ffffffffffffffda RBX: 00007f0156216180 RCX: 00007f0155f9bf79 [ 1614.882459][T29596] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 1614.890455][T29596] RBP: 00007f0156de4090 R08: 0000000000000000 R09: 0000000000000000 [ 1614.898451][T29596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1614.906444][T29596] R13: 00007f0156216218 R14: 00007f0156216180 R15: 00007fff0107c298 [ 1614.914461][T29596] [ 1616.036858][T29591] netlink: 'syz.0.8022': attribute type 39 has an invalid length. [ 1616.064372][T29601] netlink: 180 bytes leftover after parsing attributes in process `syz.5.8023'. [ 1616.135725][T29601] netlink: 'syz.5.8023': attribute type 6 has an invalid length. [ 1616.182009][T29601] netlink: 164 bytes leftover after parsing attributes in process `syz.5.8023'. [ 1616.255484][T29609] netlink: 144 bytes leftover after parsing attributes in process `syz.4.8025'. [ 1616.318230][T29609] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1616.706280][T29621] delete_channel: no stack [ 1619.716171][T29643] netlink: 132 bytes leftover after parsing attributes in process `syz.6.8031'. [ 1619.906307][T29648] netlink: 'syz.2.8033': attribute type 2 has an invalid length. [ 1620.039137][T29648] netlink: 'syz.2.8033': attribute type 1 has an invalid length. [ 1620.116944][T29648] netlink: 170140 bytes leftover after parsing attributes in process `syz.2.8033'. [ 1620.957246][T29664] delete_channel: no stack [ 1628.149049][T29658] netlink: 132 bytes leftover after parsing attributes in process `syz.5.8035'. [ 1628.158668][T29667] netlink: 156 bytes leftover after parsing attributes in process `syz.0.8036'. [ 1628.252725][T29659] device syzkaller0 entered promiscuous mode [ 1628.277216][T29679] netlink: 132 bytes leftover after parsing attributes in process `syz.6.8041'. [ 1632.830723][T29684] netlink: 180 bytes leftover after parsing attributes in process `syz.4.8042'. [ 1632.840151][T29687] netlink: 'syz.4.8042': attribute type 6 has an invalid length. [ 1632.852388][T29687] netlink: 164 bytes leftover after parsing attributes in process `syz.4.8042'. [ 1633.110040][T29689] netlink: 'syz.0.8054': attribute type 39 has an invalid length. [ 1633.168602][T29695] netlink: 'syz.5.8046': attribute type 11 has an invalid length. [ 1633.178198][T29695] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.8046'. [ 1633.195028][T29692] netlink: 180 bytes leftover after parsing attributes in process `syz.2.8045'. [ 1633.209234][T29695] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1633.373842][T29692] netlink: 'syz.2.8045': attribute type 6 has an invalid length. [ 1633.398844][T29692] netlink: 164 bytes leftover after parsing attributes in process `syz.2.8045'. [ 1633.465531][T29699] delete_channel: no stack [ 1633.610823][T29703] delete_channel: no stack [ 1633.752595][T29707] netlink: 132 bytes leftover after parsing attributes in process `syz.5.8048'. [ 1634.480561][T29723] delete_channel: no stack [ 1636.769843][T29730] netlink: 180 bytes leftover after parsing attributes in process `syz.0.8055'. [ 1636.847969][T29735] netlink: 180 bytes leftover after parsing attributes in process `syz.6.8056'. [ 1636.908664][T29730] netlink: 'syz.0.8055': attribute type 6 has an invalid length. [ 1636.941316][T29730] netlink: 164 bytes leftover after parsing attributes in process `syz.0.8055'. [ 1637.045678][T29742] netlink: 'syz.6.8056': attribute type 6 has an invalid length. [ 1637.057759][T29745] netlink: 'syz.2.8060': attribute type 11 has an invalid length. [ 1637.084474][T29745] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.8060'. [ 1637.097329][T29742] netlink: 164 bytes leftover after parsing attributes in process `syz.6.8056'. [ 1637.110292][T29746] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1637.280954][T29747] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8059'. [ 1637.438399][T29749] netlink: 'syz.2.8061': attribute type 39 has an invalid length. [ 1638.461253][T29758] delete_channel: no stack [ 1639.422369][T29784] netlink: 'syz.4.8072': attribute type 11 has an invalid length. [ 1639.450543][T29784] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.8072'. [ 1639.490514][T29785] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1639.736154][T29788] netlink: 160 bytes leftover after parsing attributes in process `syz.5.8073'. [ 1639.784583][T29788] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1639.928164][T29790] netlink: 'syz.5.8073': attribute type 11 has an invalid length. [ 1639.940713][T29790] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.8073'. [ 1639.992195][T29790] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1640.588030][T29800] delete_channel: no stack [ 1640.801927][T29791] delete_channel: no stack [ 1648.326922][T29796] netlink: 'syz.4.8076': attribute type 39 has an invalid length. [ 1648.340891][T29802] netlink: 132 bytes leftover after parsing attributes in process `syz.5.8078'. [ 1648.603002][T29834] netlink: 160 bytes leftover after parsing attributes in process `syz.6.8089'. [ 1648.648081][T29834] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1648.738667][T29834] netlink: 'syz.6.8089': attribute type 11 has an invalid length. [ 1648.769303][T29834] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.8089'. [ 1648.801224][T29834] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1648.849487][T29840] delete_channel: no stack [ 1648.909639][T29847] netlink: 'syz.2.8095': attribute type 21 has an invalid length. [ 1649.092554][T29849] netlink: 'syz.2.8095': attribute type 15 has an invalid length. [ 1649.120253][T29849] netlink: 'syz.2.8095': attribute type 7 has an invalid length. [ 1649.150214][T29852] netlink: 126588 bytes leftover after parsing attributes in process `syz.5.8097'. [ 1649.162487][T29850] netlink: 144 bytes leftover after parsing attributes in process `syz.6.8096'. [ 1649.185479][T29850] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1649.230288][T19653] tipc: Subscription rejected, illegal request [ 1649.917867][T29881] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8102'. [ 1650.271660][T29888] delete_channel: no stack [ 1650.288321][T29890] netlink: 'syz.6.8107': attribute type 11 has an invalid length. [ 1650.300978][T29890] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.8107'. [ 1650.329894][T29890] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1652.678381][T29887] netlink: 160 bytes leftover after parsing attributes in process `syz.6.8107'. [ 1652.688759][T29887] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1652.964662][T29909] FAULT_INJECTION: forcing a failure. [ 1652.964662][T29909] name failslab, interval 1, probability 0, space 0, times 0 [ 1652.992357][T29909] CPU: 1 PID: 29909 Comm: syz.5.8115 Not tainted syzkaller #0 [ 1652.999954][T29909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1653.010011][T29909] Call Trace: [ 1653.013296][T29909] [ 1653.016225][T29909] dump_stack_lvl+0x188/0x24e [ 1653.020917][T29909] ? show_regs_print_info+0x12/0x12 [ 1653.026131][T29909] ? load_image+0x400/0x400 [ 1653.030654][T29909] ? __might_sleep+0xd0/0xd0 [ 1653.035278][T29909] ? __lock_acquire+0x7d10/0x7d10 [ 1653.040303][T29909] ? __lock_acquire+0x12f4/0x7d10 [ 1653.045353][T29909] ? verify_lock_unused+0x140/0x140 [ 1653.050569][T29909] should_fail_ex+0x399/0x4d0 [ 1653.055277][T29909] should_failslab+0x5/0x20 [ 1653.059793][T29909] slab_pre_alloc_hook+0x59/0x310 [ 1653.064845][T29909] kmem_cache_alloc_node+0x5a/0x320 [ 1653.070044][T29909] ? __alloc_skb+0xfc/0x7e0 [ 1653.074582][T29909] __alloc_skb+0xfc/0x7e0 [ 1653.078921][T29909] alloc_skb_with_frags+0xa7/0x710 [ 1653.084043][T29909] ? __lock_acquire+0x7d10/0x7d10 [ 1653.089081][T29909] sock_alloc_send_pskb+0x87f/0x9a0 [ 1653.094287][T29909] ? sock_kzfree_s+0x50/0x50 [ 1653.098878][T29909] ? dev_get_by_index+0x1e/0x2d0 [ 1653.103815][T29909] ? dev_get_by_index+0x1e/0x2d0 [ 1653.108784][T29909] packet_sendmsg+0x32b0/0x4e60 [ 1653.113662][T29909] ? __might_sleep+0xd0/0xd0 [ 1653.118253][T29909] ? verify_lock_unused+0x140/0x140 [ 1653.123466][T29909] ? aa_sk_perm+0x81f/0x950 [ 1653.127974][T29909] ? packet_getsockopt+0x9a0/0x9a0 [ 1653.133111][T29909] ? aa_sock_msg_perm+0x94/0x150 [ 1653.138047][T29909] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1653.143365][T29909] ? security_socket_sendmsg+0x7c/0xa0 [ 1653.148834][T29909] ? packet_getsockopt+0x9a0/0x9a0 [ 1653.153952][T29909] ____sys_sendmsg+0x5be/0x970 [ 1653.158724][T29909] ? __sys_sendmsg_sock+0x30/0x30 [ 1653.163760][T29909] ? __import_iovec+0x315/0x500 [ 1653.168620][T29909] ? import_iovec+0x6f/0xa0 [ 1653.173136][T29909] ___sys_sendmsg+0x2a2/0x360 [ 1653.177819][T29909] ? __sys_sendmsg+0x290/0x290 [ 1653.182615][T29909] ? __lock_acquire+0x7d10/0x7d10 [ 1653.187662][T29909] __se_sys_sendmsg+0x1bb/0x2a0 [ 1653.192519][T29909] ? __x64_sys_sendmsg+0x80/0x80 [ 1653.197468][T29909] ? lockdep_hardirqs_on+0x94/0x140 [ 1653.202666][T29909] do_syscall_64+0x4c/0xa0 [ 1653.207085][T29909] ? clear_bhb_loop+0x60/0xb0 [ 1653.211763][T29909] ? clear_bhb_loop+0x60/0xb0 [ 1653.216441][T29909] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1653.222334][T29909] RIP: 0033:0x7fdeb399bf79 [ 1653.226756][T29909] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1653.246359][T29909] RSP: 002b:00007fdeb4918028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1653.254767][T29909] RAX: ffffffffffffffda RBX: 00007fdeb3c15fa0 RCX: 00007fdeb399bf79 [ 1653.262737][T29909] RDX: 0000000000000004 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1653.270719][T29909] RBP: 00007fdeb4918090 R08: 0000000000000000 R09: 0000000000000000 [ 1653.278722][T29909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1653.286733][T29909] R13: 00007fdeb3c16038 R14: 00007fdeb3c15fa0 R15: 00007ffee3af8368 [ 1653.294711][T29909] [ 1653.936322][T29922] netlink: 144 bytes leftover after parsing attributes in process `syz.0.8119'. [ 1653.964204][T29922] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1654.106022][T29927] netlink: 132 bytes leftover after parsing attributes in process `syz.6.8120'. [ 1654.176800][T29928] netlink: 'syz.4.8122': attribute type 39 has an invalid length. [ 1654.201007][T29929] netlink: 160 bytes leftover after parsing attributes in process `syz.2.8121'. [ 1654.245017][T29929] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1654.503787][T29933] netlink: 'syz.2.8121': attribute type 11 has an invalid length. [ 1654.530803][T29933] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.8121'. [ 1654.570089][T29935] delete_channel: no stack [ 1654.607206][T29933] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1655.156026][T29954] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8130'. [ 1655.258793][T29956] FAULT_INJECTION: forcing a failure. [ 1655.258793][T29956] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1655.287795][T29956] CPU: 1 PID: 29956 Comm: syz.5.8131 Not tainted syzkaller #0 [ 1655.295332][T29956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1655.305425][T29956] Call Trace: [ 1655.308735][T29956] [ 1655.311694][T29956] dump_stack_lvl+0x188/0x24e [ 1655.316424][T29956] ? show_regs_print_info+0x12/0x12 [ 1655.321665][T29956] ? load_image+0x400/0x400 [ 1655.326209][T29956] ? __lock_acquire+0x7d10/0x7d10 [ 1655.331291][T29956] should_fail_ex+0x399/0x4d0 [ 1655.336017][T29956] _copy_to_user+0x2c/0x130 [ 1655.340565][T29956] bpf_obj_get_info_by_fd+0x21b9/0x2f50 [ 1655.346174][T29956] ? __lock_acquire+0x7d10/0x7d10 [ 1655.351244][T29956] ? bpf_map_get_fd_by_id+0x310/0x310 [ 1655.356663][T29956] ? get_pid_task+0x1c/0x1e0 [ 1655.361397][T29956] ? __might_fault+0xa6/0x120 [ 1655.366138][T29956] ? __might_fault+0xc2/0x120 [ 1655.370853][T29956] ? __might_fault+0xa6/0x120 [ 1655.375562][T29956] ? bpf_lsm_bpf+0x5/0x10 [ 1655.379928][T29956] ? security_bpf+0x7a/0xa0 [ 1655.384469][T29956] __sys_bpf+0x505/0x780 [ 1655.388760][T29956] ? bpf_link_show_fdinfo+0x380/0x380 [ 1655.394189][T29956] ? lock_chain_count+0x20/0x20 [ 1655.399083][T29956] __x64_sys_bpf+0x78/0x90 [ 1655.403540][T29956] do_syscall_64+0x4c/0xa0 [ 1655.407996][T29956] ? clear_bhb_loop+0x60/0xb0 [ 1655.412707][T29956] ? clear_bhb_loop+0x60/0xb0 [ 1655.417421][T29956] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1655.423353][T29956] RIP: 0033:0x7fdeb399bf79 [ 1655.427799][T29956] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1655.447463][T29956] RSP: 002b:00007fdeb4918028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1655.455927][T29956] RAX: ffffffffffffffda RBX: 00007fdeb3c15fa0 RCX: 00007fdeb399bf79 [ 1655.463925][T29956] RDX: 0000000000000010 RSI: 0000200000000380 RDI: 000000000000000f [ 1655.471922][T29956] RBP: 00007fdeb4918090 R08: 0000000000000000 R09: 0000000000000000 [ 1655.479922][T29956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1655.487924][T29956] R13: 00007fdeb3c16038 R14: 00007fdeb3c15fa0 R15: 00007ffee3af8368 [ 1655.495935][T29956] [ 1656.229560][T29967] delete_channel: no stack [ 1658.114029][T29966] netlink: 'syz.0.8134': attribute type 39 has an invalid length. [ 1658.318858][T29971] delete_channel: no stack [ 1658.439099][T29979] netlink: 160 bytes leftover after parsing attributes in process `syz.4.8137'. [ 1658.500000][T29979] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1658.630250][T29976] netlink: 144 bytes leftover after parsing attributes in process `syz.2.8140'. [ 1658.668357][T29976] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1658.742574][T29981] netlink: 'syz.4.8137': attribute type 11 has an invalid length. [ 1658.760736][T29983] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8139'. [ 1658.790850][T29981] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.8137'. [ 1658.836773][T29981] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1659.647244][T30005] delete_channel: no stack [ 1659.749769][T30013] netlink: 'syz.6.8149': attribute type 39 has an invalid length. [ 1659.963832][T30018] netlink: 132 bytes leftover after parsing attributes in process `syz.6.8152'. [ 1659.984247][T30019] delete_channel: no stack [ 1660.633368][T30033] netlink: 'syz.4.8156': attribute type 11 has an invalid length. [ 1660.675043][T30033] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.8156'. [ 1660.731349][T30033] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1663.129766][T30031] netlink: 160 bytes leftover after parsing attributes in process `syz.4.8156'. [ 1663.141307][T30031] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1663.160419][T30032] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8153'. [ 1663.506730][T30043] delete_channel: no stack [ 1663.555724][T30045] netlink: 132 bytes leftover after parsing attributes in process `syz.6.8158'. [ 1663.641764][T30048] FAULT_INJECTION: forcing a failure. [ 1663.641764][T30048] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1663.695221][T30048] CPU: 1 PID: 30048 Comm: syz.2.8161 Not tainted syzkaller #0 [ 1663.702739][T30048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1663.712827][T30048] Call Trace: [ 1663.716134][T30048] [ 1663.719084][T30048] dump_stack_lvl+0x188/0x24e [ 1663.723796][T30048] ? show_regs_print_info+0x12/0x12 [ 1663.729033][T30048] ? load_image+0x400/0x400 [ 1663.733567][T30048] ? __lock_acquire+0x7d10/0x7d10 [ 1663.738632][T30048] should_fail_ex+0x399/0x4d0 [ 1663.743352][T30048] strncpy_from_user+0x32/0x350 [ 1663.748243][T30048] bpf_prog_load+0x1f3/0x1560 [ 1663.752972][T30048] ? map_freeze+0x390/0x390 [ 1663.757503][T30048] ? __might_fault+0xa6/0x120 [ 1663.762207][T30048] ? __might_fault+0xa6/0x120 [ 1663.766893][T30048] ? __might_fault+0xc2/0x120 [ 1663.771582][T30048] ? __might_fault+0xa6/0x120 [ 1663.776279][T30048] ? bpf_lsm_bpf+0x5/0x10 [ 1663.780630][T30048] ? security_bpf+0x7a/0xa0 [ 1663.785150][T30048] __sys_bpf+0x5b8/0x780 [ 1663.789422][T30048] ? bpf_link_show_fdinfo+0x380/0x380 [ 1663.794822][T30048] ? lock_chain_count+0x20/0x20 [ 1663.799695][T30048] __x64_sys_bpf+0x78/0x90 [ 1663.804134][T30048] do_syscall_64+0x4c/0xa0 [ 1663.808615][T30048] ? clear_bhb_loop+0x60/0xb0 [ 1663.813316][T30048] ? clear_bhb_loop+0x60/0xb0 [ 1663.818022][T30048] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1663.823931][T30048] RIP: 0033:0x7f17fcb9bf79 [ 1663.828372][T30048] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1663.848009][T30048] RSP: 002b:00007f17fda11028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1663.856446][T30048] RAX: ffffffffffffffda RBX: 00007f17fce15fa0 RCX: 00007f17fcb9bf79 [ 1663.864431][T30048] RDX: 0000000000000021 RSI: 00002000000007c0 RDI: 0000000000000005 [ 1663.872411][T30048] RBP: 00007f17fda11090 R08: 0000000000000000 R09: 0000000000000000 [ 1663.880402][T30048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1663.888389][T30048] R13: 00007f17fce16038 R14: 00007f17fce15fa0 R15: 00007fff322316d8 [ 1663.896402][T30048] [ 1663.906373][T30050] netlink: 'syz.4.8162': attribute type 39 has an invalid length. [ 1664.117930][T30054] delete_channel: no stack [ 1664.343919][T30064] netlink: 160 bytes leftover after parsing attributes in process `syz.0.8167'. [ 1664.364408][T30064] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1664.518640][T30072] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8170'. [ 1664.527807][T30069] netlink: 'syz.0.8167': attribute type 11 has an invalid length. [ 1664.527856][T30069] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.8167'. [ 1664.546730][T30069] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1664.622808][T30075] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8168'. [ 1667.535432][T30080] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1667.544754][T30080] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1667.553596][T30080] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1667.562231][T30080] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1667.823360][T30084] delete_channel: no stack [ 1668.149504][T30093] delete_channel: no stack [ 1668.167592][T30098] netlink: 'syz.5.8179': attribute type 39 has an invalid length. [ 1668.241250][T30101] netlink: 132 bytes leftover after parsing attributes in process `syz.6.8175'. [ 1668.345406][T30105] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.8181'. [ 1668.419218][T30110] netlink: 160 bytes leftover after parsing attributes in process `syz.4.8182'. [ 1668.439951][T30110] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1668.522871][T30110] netlink: 'syz.4.8182': attribute type 11 has an invalid length. [ 1668.566353][T30110] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.8182'. [ 1668.599649][T30110] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1668.640538][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.647028][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 1671.587422][T30116] netlink: 132 bytes leftover after parsing attributes in process `syz.5.8183'. [ 1671.605458][T30120] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8185'. [ 1671.936878][T30130] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8187'. [ 1672.151671][T30131] delete_channel: no stack [ 1672.457774][T30139] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8200'. [ 1672.513337][T30140] netlink: 132 bytes leftover after parsing attributes in process `syz.5.8190'. [ 1675.225981][T30149] netlink: 'syz.6.8193': attribute type 39 has an invalid length. [ 1675.236324][T30152] netlink: 180 bytes leftover after parsing attributes in process `syz.2.8194'. [ 1675.261272][T30155] netlink: 'syz.2.8194': attribute type 6 has an invalid length. [ 1675.269765][T30155] netlink: 164 bytes leftover after parsing attributes in process `syz.2.8194'. [ 1675.625198][T30163] netlink: 160 bytes leftover after parsing attributes in process `syz.2.8197'. [ 1675.660829][T30163] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1675.744805][T30163] netlink: 'syz.2.8197': attribute type 11 has an invalid length. [ 1675.790810][T30163] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.8197'. [ 1675.817842][T30163] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1676.050278][T30177] FAULT_INJECTION: forcing a failure. [ 1676.050278][T30177] name failslab, interval 1, probability 0, space 0, times 0 [ 1676.090516][T30177] CPU: 1 PID: 30177 Comm: syz.4.8203 Not tainted syzkaller #0 [ 1676.098059][T30177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1676.108162][T30177] Call Trace: [ 1676.111507][T30177] [ 1676.114492][T30177] dump_stack_lvl+0x188/0x24e [ 1676.119250][T30177] ? show_regs_print_info+0x12/0x12 [ 1676.124530][T30177] ? load_image+0x400/0x400 [ 1676.129107][T30177] ? __might_sleep+0xd0/0xd0 [ 1676.133765][T30177] ? __lock_acquire+0x7d10/0x7d10 [ 1676.138866][T30177] should_fail_ex+0x399/0x4d0 [ 1676.143639][T30177] should_failslab+0x5/0x20 [ 1676.148207][T30177] slab_pre_alloc_hook+0x59/0x310 [ 1676.153274][T30177] ? trace_call_bpf+0x5d6/0x6b0 [ 1676.158171][T30177] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 1676.163942][T30177] __kmem_cache_alloc_node+0x4f/0x260 [ 1676.169375][T30177] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 1676.175134][T30177] __kmalloc+0xa0/0x240 [ 1676.179339][T30177] tomoyo_realpath_from_path+0xdf/0x5d0 [ 1676.184957][T30177] ? tomoyo_path_number_perm+0x205/0x650 [ 1676.190721][T30177] tomoyo_path_number_perm+0x22f/0x650 [ 1676.196225][T30177] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1676.201727][T30177] ? ksys_write+0x1c0/0x250 [ 1676.206285][T30177] ? common_file_perm+0x171/0x1c0 [ 1676.211420][T30177] ? __fget_files+0x28/0x4b0 [ 1676.216037][T30177] ? __fget_files+0x28/0x4b0 [ 1676.220695][T30177] security_file_ioctl+0x6c/0xa0 [ 1676.225670][T30177] __se_sys_ioctl+0x48/0x170 [ 1676.230325][T30177] do_syscall_64+0x4c/0xa0 [ 1676.234794][T30177] ? clear_bhb_loop+0x60/0xb0 [ 1676.239499][T30177] ? clear_bhb_loop+0x60/0xb0 [ 1676.244223][T30177] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1676.250152][T30177] RIP: 0033:0x7f0155f9bf79 [ 1676.254602][T30177] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1676.274241][T30177] RSP: 002b:00007f0156e26028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1676.282785][T30177] RAX: ffffffffffffffda RBX: 00007f0156215fa0 RCX: 00007f0155f9bf79 [ 1676.290776][T30177] RDX: 0000200000000040 RSI: 00000000c008240a RDI: 0000000000000003 [ 1676.298766][T30177] RBP: 00007f0156e26090 R08: 0000000000000000 R09: 0000000000000000 [ 1676.306781][T30177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1676.314787][T30177] R13: 00007f0156216038 R14: 00007f0156215fa0 R15: 00007fff0107c298 [ 1676.322821][T30177] [ 1676.921102][T30178] netlink: 188 bytes leftover after parsing attributes in process `syz.2.8202'. [ 1677.012012][T30176] delete_channel: no stack [ 1677.244557][T30177] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1677.266503][T30183] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1677.291487][T30183] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1677.327864][T30183] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1677.347618][T30183] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1677.656806][T30190] netlink: 'syz.0.8206': attribute type 39 has an invalid length. [ 1678.055558][T30193] netlink: 180 bytes leftover after parsing attributes in process `syz.4.8208'. [ 1678.103111][T30193] netlink: 'syz.4.8208': attribute type 6 has an invalid length. [ 1678.120541][T30193] netlink: 164 bytes leftover after parsing attributes in process `syz.4.8208'. [ 1678.567762][T30212] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8212'. [ 1679.508069][T30213] delete_channel: no stack [ 1681.943559][T30221] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8215'. [ 1681.967927][T30226] netlink: 132 bytes leftover after parsing attributes in process `syz.6.8217'. [ 1682.303640][T30237] netlink: 188 bytes leftover after parsing attributes in process `syz.2.8219'. [ 1682.335543][T30235] delete_channel: no stack [ 1682.372203][T30239] netlink: 'syz.4.8221': attribute type 39 has an invalid length. [ 1682.565188][T30241] netlink: 180 bytes leftover after parsing attributes in process `syz.6.8223'. [ 1682.637560][T30241] netlink: 'syz.6.8223': attribute type 6 has an invalid length. [ 1682.697358][T30241] netlink: 164 bytes leftover after parsing attributes in process `syz.6.8223'. [ 1682.814924][T30249] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1682.844714][T30249] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1682.865214][T30249] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1682.919883][T30249] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1683.144957][T30248] netlink: 188 bytes leftover after parsing attributes in process `syz.0.8235'. [ 1683.176145][T30247] delete_channel: no stack [ 1683.854637][T30266] delete_channel: no stack [ 1684.055976][T30276] FAULT_INJECTION: forcing a failure. [ 1684.055976][T30276] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1684.104651][T30276] CPU: 0 PID: 30276 Comm: syz.2.8234 Not tainted syzkaller #0 [ 1684.112190][T30276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1684.122304][T30276] Call Trace: [ 1684.125636][T30276] [ 1684.128593][T30276] dump_stack_lvl+0x188/0x24e [ 1684.133316][T30276] ? show_regs_print_info+0x12/0x12 [ 1684.138558][T30276] ? load_image+0x400/0x400 [ 1684.143100][T30276] ? __lock_acquire+0x7d10/0x7d10 [ 1684.148176][T30276] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1684.154211][T30276] should_fail_ex+0x399/0x4d0 [ 1684.158943][T30276] prepare_alloc_pages+0x1e2/0x5f0 [ 1684.164107][T30276] __alloc_pages+0x130/0x4f0 [ 1684.168743][T30276] ? zone_statistics+0x170/0x170 [ 1684.173778][T30276] ? xdp_convert_md_to_buff+0x5b/0x330 [ 1684.179302][T30276] bpf_prog_test_run_xdp+0xaf7/0xf10 [ 1684.184639][T30276] ? dev_put+0x80/0x80 [ 1684.188752][T30276] ? dev_put+0x80/0x80 [ 1684.192854][T30276] bpf_prog_test_run+0x31e/0x390 [ 1684.197840][T30276] __sys_bpf+0x62b/0x780 [ 1684.202139][T30276] ? bpf_link_show_fdinfo+0x380/0x380 [ 1684.207693][T30276] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1684.213904][T30276] __x64_sys_bpf+0x78/0x90 [ 1684.218388][T30276] do_syscall_64+0x4c/0xa0 [ 1684.222846][T30276] ? clear_bhb_loop+0x60/0xb0 [ 1684.227578][T30276] ? clear_bhb_loop+0x60/0xb0 [ 1684.232293][T30276] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1684.238220][T30276] RIP: 0033:0x7f17fcb9bf79 [ 1684.242665][T30276] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1684.262657][T30276] RSP: 002b:00007f17fda11028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1684.271111][T30276] RAX: ffffffffffffffda RBX: 00007f17fce15fa0 RCX: 00007f17fcb9bf79 [ 1684.279124][T30276] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 1684.287138][T30276] RBP: 00007f17fda11090 R08: 0000000000000000 R09: 0000000000000000 [ 1684.295142][T30276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1684.303137][T30276] R13: 00007f17fce16038 R14: 00007f17fce15fa0 R15: 00007fff322316d8 [ 1684.311176][T30276] [ 1684.698213][T30284] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8236'. [ 1684.744461][T30283] netlink: 'syz.0.8237': attribute type 39 has an invalid length. [ 1684.838846][T30289] netlink: 180 bytes leftover after parsing attributes in process `syz.5.8239'. [ 1684.987215][T30289] netlink: 'syz.5.8239': attribute type 6 has an invalid length. [ 1685.027710][T30293] FAULT_INJECTION: forcing a failure. [ 1685.027710][T30293] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1685.046015][T30289] netlink: 164 bytes leftover after parsing attributes in process `syz.5.8239'. [ 1685.083111][T30293] CPU: 0 PID: 30293 Comm: syz.4.8240 Not tainted syzkaller #0 [ 1685.090639][T30293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1685.100723][T30293] Call Trace: [ 1685.104035][T30293] [ 1685.106995][T30293] dump_stack_lvl+0x188/0x24e [ 1685.111720][T30293] ? show_regs_print_info+0x12/0x12 [ 1685.116972][T30293] ? load_image+0x400/0x400 [ 1685.121518][T30293] ? __lock_acquire+0x7d10/0x7d10 [ 1685.126591][T30293] should_fail_ex+0x399/0x4d0 [ 1685.131318][T30293] _copy_to_user+0x2c/0x130 [ 1685.135873][T30293] bpf_verifier_vlog+0x172/0x390 [ 1685.140860][T30293] __btf_verifier_log+0xdf/0x130 [ 1685.145844][T30293] ? btf_check_sec_info+0x350/0x350 [ 1685.151077][T30293] ? __virt_addr_valid+0x188/0x540 [ 1685.156217][T30293] ? btf_parse_hdr+0x1e0/0x7e0 [ 1685.161000][T30293] btf_parse_hdr+0x3b0/0x7e0 [ 1685.165609][T30293] btf_new_fd+0x3c6/0x780 [ 1685.169958][T30293] __sys_bpf+0x612/0x780 [ 1685.174227][T30293] ? bpf_link_show_fdinfo+0x380/0x380 [ 1685.179643][T30293] ? lock_chain_count+0x20/0x20 [ 1685.184521][T30293] __x64_sys_bpf+0x78/0x90 [ 1685.188955][T30293] do_syscall_64+0x4c/0xa0 [ 1685.193385][T30293] ? clear_bhb_loop+0x60/0xb0 [ 1685.198089][T30293] ? clear_bhb_loop+0x60/0xb0 [ 1685.202775][T30293] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1685.208678][T30293] RIP: 0033:0x7f0155f9bf79 [ 1685.213116][T30293] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1685.232730][T30293] RSP: 002b:00007f0156e26028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1685.241154][T30293] RAX: ffffffffffffffda RBX: 00007f0156215fa0 RCX: 00007f0155f9bf79 [ 1685.249135][T30293] RDX: 0000000000000028 RSI: 0000200000000840 RDI: 0000000000000012 [ 1685.257130][T30293] RBP: 00007f0156e26090 R08: 0000000000000000 R09: 0000000000000000 [ 1685.265118][T30293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1685.273098][T30293] R13: 00007f0156216038 R14: 00007f0156215fa0 R15: 00007fff0107c298 [ 1685.281088][T30293] [ 1685.537862][T30295] netlink: 188 bytes leftover after parsing attributes in process `syz.0.8241'. [ 1685.572013][T30294] delete_channel: no stack [ 1686.071612][T30316] netlink: 'syz.4.8246': attribute type 20 has an invalid length. [ 1686.133720][T30318] netlink: 'syz.5.8247': attribute type 20 has an invalid length. [ 1689.371861][T30335] netlink: 132 bytes leftover after parsing attributes in process `syz.6.8250'. [ 1689.549008][T30338] netlink: 'syz.4.8251': attribute type 39 has an invalid length. [ 1689.658109][T30342] netlink: 180 bytes leftover after parsing attributes in process `syz.2.8253'. [ 1689.713305][T30347] netlink: 144 bytes leftover after parsing attributes in process `syz.5.8254'. [ 1689.753568][T30347] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1689.815298][T30346] netlink: 'syz.2.8253': attribute type 6 has an invalid length. [ 1689.826589][T30346] netlink: 164 bytes leftover after parsing attributes in process `syz.2.8253'. [ 1690.416228][T30354] netlink: 160 bytes leftover after parsing attributes in process `syz.4.8255'. [ 1690.475102][T30354] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1690.550955][T30359] netlink: 'syz.4.8255': attribute type 11 has an invalid length. [ 1690.597248][T30359] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.8255'. [ 1690.675253][T30359] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1691.055002][T30366] delete_channel: no stack [ 1691.064588][T30371] netlink: 10 bytes leftover after parsing attributes in process `syz.4.8263'. [ 1691.293695][T30378] netlink: 10 bytes leftover after parsing attributes in process `syz.2.8264'. [ 1691.459299][T30386] netlink: 144 bytes leftover after parsing attributes in process `syz.5.8268'. [ 1691.479469][T30386] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1691.558913][T30384] netlink: 'syz.4.8267': attribute type 39 has an invalid length. [ 1691.705782][T30391] netlink: 132 bytes leftover after parsing attributes in process `syz.6.8266'. [ 1692.110182][T30398] netlink: 'syz.4.8270': attribute type 6 has an invalid length. [ 1692.683524][T30408] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1692.912606][T30412] netlink: 'syz.0.8275': attribute type 11 has an invalid length. [ 1692.995130][T30412] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1695.473014][T30426] FAULT_INJECTION: forcing a failure. [ 1695.473014][T30426] name failslab, interval 1, probability 0, space 0, times 0 [ 1695.524662][T30426] CPU: 1 PID: 30426 Comm: syz.4.8280 Not tainted syzkaller #0 [ 1695.532294][T30426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1695.542363][T30426] Call Trace: [ 1695.545684][T30426] [ 1695.548648][T30426] dump_stack_lvl+0x188/0x24e [ 1695.553356][T30426] ? show_regs_print_info+0x12/0x12 [ 1695.558570][T30426] ? load_image+0x400/0x400 [ 1695.563087][T30426] ? __lock_acquire+0x7d10/0x7d10 [ 1695.568127][T30426] should_fail_ex+0x399/0x4d0 [ 1695.572824][T30426] should_failslab+0x5/0x20 [ 1695.577344][T30426] slab_pre_alloc_hook+0x59/0x310 [ 1695.582394][T30426] ? verify_lock_unused+0x140/0x140 [ 1695.587620][T30426] ? bpf_test_init+0x9f/0x140 [ 1695.592314][T30426] __kmem_cache_alloc_node+0x4f/0x260 [ 1695.597710][T30426] ? bpf_test_init+0x9f/0x140 [ 1695.602408][T30426] __kmalloc+0xa0/0x240 [ 1695.606580][T30426] bpf_test_init+0x9f/0x140 [ 1695.611108][T30426] bpf_prog_test_run_xdp+0x484/0xf10 [ 1695.616419][T30426] ? dev_put+0x80/0x80 [ 1695.620511][T30426] ? dev_put+0x80/0x80 [ 1695.624593][T30426] bpf_prog_test_run+0x31e/0x390 [ 1695.629548][T30426] __sys_bpf+0x62b/0x780 [ 1695.633806][T30426] ? bpf_link_show_fdinfo+0x380/0x380 [ 1695.639204][T30426] ? lock_chain_count+0x20/0x20 [ 1695.644098][T30426] __x64_sys_bpf+0x78/0x90 [ 1695.648534][T30426] do_syscall_64+0x4c/0xa0 [ 1695.652980][T30426] ? clear_bhb_loop+0x60/0xb0 [ 1695.657669][T30426] ? clear_bhb_loop+0x60/0xb0 [ 1695.662369][T30426] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1695.668275][T30426] RIP: 0033:0x7f0155f9bf79 [ 1695.672700][T30426] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1695.692318][T30426] RSP: 002b:00007f0156e26028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1695.700740][T30426] RAX: ffffffffffffffda RBX: 00007f0156215fa0 RCX: 00007f0155f9bf79 [ 1695.708750][T30426] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 1695.716746][T30426] RBP: 00007f0156e26090 R08: 0000000000000000 R09: 0000000000000000 [ 1695.724757][T30426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1695.732740][T30426] R13: 00007f0156216038 R14: 00007f0156215fa0 R15: 00007fff0107c298 [ 1695.740739][T30426] [ 1696.005959][T30427] delete_channel: no stack [ 1696.129573][T30436] __nla_validate_parse: 5 callbacks suppressed [ 1696.129606][T30436] netlink: 160 bytes leftover after parsing attributes in process `syz.0.8292'. [ 1696.174803][T30436] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1696.371919][T30437] netlink: 'syz.0.8292': attribute type 11 has an invalid length. [ 1696.382980][T30434] netlink: 188 bytes leftover after parsing attributes in process `syz.4.8282'. [ 1696.396346][T30439] netlink: 144 bytes leftover after parsing attributes in process `syz.5.8284'. [ 1696.414203][T30433] delete_channel: no stack [ 1696.433060][T30437] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.8292'. [ 1696.448680][T30439] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1696.478029][T30437] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1696.580254][T30441] netlink: 144 bytes leftover after parsing attributes in process `syz.2.8283'. [ 1696.621720][T30441] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1696.763056][T30447] netlink: 180 bytes leftover after parsing attributes in process `syz.6.8285'. [ 1696.806491][T30456] netlink: 'syz.0.8286': attribute type 29 has an invalid length. [ 1696.816916][T30453] netlink: 'syz.6.8285': attribute type 6 has an invalid length. [ 1696.846658][T30456] netlink: 'syz.0.8286': attribute type 3 has an invalid length. [ 1696.862389][T30453] netlink: 164 bytes leftover after parsing attributes in process `syz.6.8285'. [ 1696.886109][T30456] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8286'. [ 1697.215628][T30459] netlink: 160 bytes leftover after parsing attributes in process `syz.0.8298'. [ 1697.240859][T30459] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1697.297457][T30462] netlink: 160 bytes leftover after parsing attributes in process `syz.5.8287'. [ 1697.310434][T30459] netlink: 'syz.0.8298': attribute type 11 has an invalid length. [ 1697.352958][T30459] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1697.374062][T30462] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1697.518942][T30465] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1697.554557][T30466] netlink: 'syz.5.8287': attribute type 11 has an invalid length. [ 1697.672782][T30466] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1698.185266][T30488] netlink: 'syz.2.8293': attribute type 20 has an invalid length. [ 1699.238665][T30493] delete_channel: no stack [ 1700.753510][T30498] delete_channel: no stack [ 1701.099345][T30509] netlink: 'syz.5.8301': attribute type 6 has an invalid length. [ 1701.237787][T30511] __nla_validate_parse: 9 callbacks suppressed [ 1701.237823][T30511] netlink: 144 bytes leftover after parsing attributes in process `syz.2.8302'. [ 1701.258285][T30511] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1701.631032][T30520] netlink: 160 bytes leftover after parsing attributes in process `syz.5.8304'. [ 1701.664323][T30520] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1701.760123][T30520] netlink: 'syz.5.8304': attribute type 11 has an invalid length. [ 1701.792173][T30520] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.8304'. [ 1701.844525][T30520] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1702.165273][T30533] netlink: 188 bytes leftover after parsing attributes in process `syz.2.8308'. [ 1702.208671][T30532] delete_channel: no stack [ 1702.215737][T30539] netlink: 'syz.5.8311': attribute type 10 has an invalid length. [ 1702.255658][T30539] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1702.329535][T30539] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1702.353681][T30542] netlink: 'syz.0.8310': attribute type 20 has an invalid length. [ 1702.419831][T30547] netlink: 132 bytes leftover after parsing attributes in process `syz.6.8312'. [ 1702.516492][T30550] FAULT_INJECTION: forcing a failure. [ 1702.516492][T30550] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1702.532876][T30550] CPU: 0 PID: 30550 Comm: syz.2.8313 Not tainted syzkaller #0 [ 1702.540443][T30550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1702.550529][T30550] Call Trace: [ 1702.553834][T30550] [ 1702.556805][T30550] dump_stack_lvl+0x188/0x24e [ 1702.561527][T30550] ? show_regs_print_info+0x12/0x12 [ 1702.566771][T30550] ? load_image+0x400/0x400 [ 1702.571310][T30550] ? __lock_acquire+0x7d10/0x7d10 [ 1702.576370][T30550] ? __kmem_cache_alloc_node+0x140/0x260 [ 1702.582045][T30550] should_fail_ex+0x399/0x4d0 [ 1702.586778][T30550] _copy_from_user+0x2c/0x170 [ 1702.591504][T30550] ___bpf_copy_key+0xb0/0x100 [ 1702.596217][T30550] map_delete_elem+0x1f8/0x570 [ 1702.601011][T30550] ? bpf_lsm_bpf+0x5/0x10 [ 1702.605369][T30550] __sys_bpf+0x51e/0x780 [ 1702.609645][T30550] ? bpf_link_show_fdinfo+0x380/0x380 [ 1702.615106][T30550] ? lock_chain_count+0x20/0x20 [ 1702.619997][T30550] __x64_sys_bpf+0x78/0x90 [ 1702.624454][T30550] do_syscall_64+0x4c/0xa0 [ 1702.628898][T30550] ? clear_bhb_loop+0x60/0xb0 [ 1702.633609][T30550] ? clear_bhb_loop+0x60/0xb0 [ 1702.638317][T30550] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1702.644248][T30550] RIP: 0033:0x7f17fcb9bf79 [ 1702.648696][T30550] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1702.668341][T30550] RSP: 002b:00007f17fda11028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1702.676798][T30550] RAX: ffffffffffffffda RBX: 00007f17fce15fa0 RCX: 00007f17fcb9bf79 [ 1702.684815][T30550] RDX: 0000000000000020 RSI: 0000200000000740 RDI: 0000000000000003 [ 1702.692821][T30550] RBP: 00007f17fda11090 R08: 0000000000000000 R09: 0000000000000000 [ 1702.700847][T30550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1702.708843][T30550] R13: 00007f17fce16038 R14: 00007f17fce15fa0 R15: 00007fff322316d8 [ 1702.716864][T30550] [ 1704.454337][T30553] netlink: 180 bytes leftover after parsing attributes in process `syz.5.8314'. [ 1704.490496][T30562] netlink: 'syz.5.8314': attribute type 6 has an invalid length. [ 1704.503917][T30562] netlink: 164 bytes leftover after parsing attributes in process `syz.5.8314'. [ 1704.646535][T30569] netlink: 144 bytes leftover after parsing attributes in process `syz.4.8319'. [ 1704.683558][T30569] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1704.718904][T30571] netlink: 160 bytes leftover after parsing attributes in process `syz.0.8320'. [ 1704.736030][T30571] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1704.831105][T30571] netlink: 'syz.0.8320': attribute type 11 has an invalid length. [ 1704.850936][T30571] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.8320'. [ 1704.888577][T30571] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1704.932118][T30581] netlink: 'syz.6.8322': attribute type 1 has an invalid length. [ 1705.206114][T30583] delete_channel: no stack [ 1705.320229][T30589] netlink: 'syz.4.8326': attribute type 2 has an invalid length. [ 1705.417527][T30594] FAULT_INJECTION: forcing a failure. [ 1705.417527][T30594] name failslab, interval 1, probability 0, space 0, times 0 [ 1705.442719][T30594] CPU: 0 PID: 30594 Comm: syz.2.8327 Not tainted syzkaller #0 [ 1705.450242][T30594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1705.460346][T30594] Call Trace: [ 1705.463661][T30594] [ 1705.466619][T30594] dump_stack_lvl+0x188/0x24e [ 1705.471334][T30594] ? show_regs_print_info+0x12/0x12 [ 1705.476584][T30594] ? load_image+0x400/0x400 [ 1705.481125][T30594] ? __lock_acquire+0x7d10/0x7d10 [ 1705.486195][T30594] should_fail_ex+0x399/0x4d0 [ 1705.490917][T30594] should_failslab+0x5/0x20 [ 1705.495458][T30594] slab_pre_alloc_hook+0x59/0x310 [ 1705.500511][T30594] ? bpf_test_init+0x9f/0x140 [ 1705.505237][T30594] __kmem_cache_alloc_node+0x4f/0x260 [ 1705.510642][T30594] ? bpf_test_init+0x9f/0x140 [ 1705.515338][T30594] __kmalloc+0xa0/0x240 [ 1705.519547][T30594] bpf_test_init+0x9f/0x140 [ 1705.524069][T30594] bpf_prog_test_run_xdp+0x484/0xf10 [ 1705.529378][T30594] ? dev_put+0x80/0x80 [ 1705.533491][T30594] ? dev_put+0x80/0x80 [ 1705.537573][T30594] bpf_prog_test_run+0x31e/0x390 [ 1705.542532][T30594] __sys_bpf+0x62b/0x780 [ 1705.546801][T30594] ? bpf_link_show_fdinfo+0x380/0x380 [ 1705.552205][T30594] ? lock_chain_count+0x20/0x20 [ 1705.557115][T30594] __x64_sys_bpf+0x78/0x90 [ 1705.561557][T30594] do_syscall_64+0x4c/0xa0 [ 1705.565993][T30594] ? clear_bhb_loop+0x60/0xb0 [ 1705.570687][T30594] ? clear_bhb_loop+0x60/0xb0 [ 1705.575379][T30594] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1705.581287][T30594] RIP: 0033:0x7f17fcb9bf79 [ 1705.585720][T30594] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1705.605337][T30594] RSP: 002b:00007f17fda11028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1705.613770][T30594] RAX: ffffffffffffffda RBX: 00007f17fce15fa0 RCX: 00007f17fcb9bf79 [ 1705.621772][T30594] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 1705.629753][T30594] RBP: 00007f17fda11090 R08: 0000000000000000 R09: 0000000000000000 [ 1705.637841][T30594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1705.645863][T30594] R13: 00007f17fce16038 R14: 00007f17fce15fa0 R15: 00007fff322316d8 [ 1705.653906][T30594] [ 1705.963537][T30600] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1706.030027][T30601] netlink: 'syz.2.8330': attribute type 11 has an invalid length. [ 1706.083930][T30601] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1706.192326][T30608] netlink: 'syz.6.8331': attribute type 20 has an invalid length. [ 1706.395298][T30611] __nla_validate_parse: 5 callbacks suppressed [ 1706.395330][T30611] netlink: 180 bytes leftover after parsing attributes in process `syz.0.8332'. [ 1706.422200][T30617] netlink: 160 bytes leftover after parsing attributes in process `syz.5.8334'. [ 1706.435916][T30617] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1706.498445][T30617] netlink: 'syz.5.8334': attribute type 11 has an invalid length. [ 1706.519290][T30611] netlink: 'syz.0.8332': attribute type 6 has an invalid length. [ 1706.527806][T30617] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.8334'. [ 1706.543921][T30617] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1706.556753][T30611] netlink: 164 bytes leftover after parsing attributes in process `syz.0.8332'. [ 1706.612688][T30618] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8333'. [ 1709.606826][T30625] netlink: 144 bytes leftover after parsing attributes in process `syz.5.8336'. [ 1709.618127][T30625] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1709.641525][T30633] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8337'. [ 1710.140944][T30645] netlink: 14 bytes leftover after parsing attributes in process `syz.5.8342'. [ 1710.197212][T30645] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1710.198617][T30653] netlink: 'syz.5.8342': attribute type 29 has an invalid length. [ 1710.223597][T30645] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1710.241099][T30645] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 1710.258925][T30645] bond0 (unregistering): Released all slaves [ 1710.288023][T30653] netlink: 'syz.5.8342': attribute type 29 has an invalid length. [ 1710.337704][T30654] netlink: 'syz.5.8342': attribute type 29 has an invalid length. [ 1710.426770][T30659] netlink: 160 bytes leftover after parsing attributes in process `syz.6.8345'. [ 1710.439618][T30659] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1710.501861][T30659] netlink: 'syz.6.8345': attribute type 11 has an invalid length. [ 1710.510661][T30659] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.8345'. [ 1710.524308][T30659] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1710.730047][T30665] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1710.813714][T30665] netlink: 'syz.6.8348': attribute type 11 has an invalid length. [ 1710.825176][T30665] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1710.866991][T30666] netlink: 'syz.2.8349': attribute type 39 has an invalid length. [ 1710.884017][T30668] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1712.194884][T30695] netlink: 'syz.4.8360': attribute type 29 has an invalid length. [ 1712.232724][T30695] netlink: 'syz.4.8360': attribute type 29 has an invalid length. [ 1712.262297][T30697] netlink: 'syz.4.8360': attribute type 29 has an invalid length. [ 1712.301935][T30696] __nla_validate_parse: 4 callbacks suppressed [ 1712.301954][T30696] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8359'. [ 1712.654645][T30708] netlink: 160 bytes leftover after parsing attributes in process `syz.0.8362'. [ 1712.666492][T30708] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1712.710249][T30708] netlink: 'syz.0.8362': attribute type 11 has an invalid length. [ 1712.729042][T30708] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.8362'. [ 1712.749694][T30708] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1712.797977][T30711] netlink: 'syz.4.8361': attribute type 41 has an invalid length. [ 1713.521809][T30731] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8363'. [ 1713.634468][T30736] netlink: 144 bytes leftover after parsing attributes in process `syz.0.8368'. [ 1713.665132][T30736] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1713.732858][T30733] netlink: 'syz.5.8367': attribute type 39 has an invalid length. [ 1714.033403][T30744] netlink: 132 bytes leftover after parsing attributes in process `syz.6.8369'. [ 1714.652178][T30755] netlink: 160 bytes leftover after parsing attributes in process `syz.5.8374'. [ 1714.672387][T30755] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1714.745627][T30757] netlink: 'syz.5.8374': attribute type 11 has an invalid length. [ 1714.792725][T30757] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.8374'. [ 1714.826061][T30757] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1715.166440][T30763] netlink: 132 bytes leftover after parsing attributes in process `syz.6.8375'. [ 1717.819639][T30774] netlink: 132 bytes leftover after parsing attributes in process `syz.5.8376'. [ 1723.855139][T30797] netlink: 144 bytes leftover after parsing attributes in process `syz.2.8381'. [ 1723.865449][T30797] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1723.890937][T30799] netlink: 'syz.0.8383': attribute type 39 has an invalid length. [ 1723.898866][T30808] netlink: 132 bytes leftover after parsing attributes in process `syz.6.8385'. [ 1724.104164][T30817] netlink: 160 bytes leftover after parsing attributes in process `syz.5.8387'. [ 1724.114165][T30817] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1724.169872][T30817] netlink: 'syz.5.8387': attribute type 11 has an invalid length. [ 1724.182830][T30817] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.8387'. [ 1724.228334][T30817] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1724.326821][T30823] delete_channel: no stack [ 1725.793426][T30850] netlink: 144 bytes leftover after parsing attributes in process `syz.6.8397'. [ 1725.806512][T30850] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1725.902481][T30851] netlink: 'syz.2.8396': attribute type 3 has an invalid length. [ 1725.945049][T30851] netlink: 199824 bytes leftover after parsing attributes in process `syz.2.8396'. [ 1725.959214][T30856] netlink: 'syz.2.8396': attribute type 9 has an invalid length. [ 1726.044209][T30856] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.8396'. [ 1726.281523][T30865] netlink: 132 bytes leftover after parsing attributes in process `syz.6.8400'. [ 1726.415224][T30868] netlink: 160 bytes leftover after parsing attributes in process `syz.5.8402'. [ 1726.441925][T30868] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1726.541824][T30868] netlink: 'syz.5.8402': attribute type 11 has an invalid length. [ 1726.587413][T30870] delete_channel: no stack [ 1726.603543][T30868] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.8402'. [ 1726.672474][T30868] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1727.056473][T30887] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1727.081701][T30889] netlink: 'syz.4.8406': attribute type 39 has an invalid length. [ 1727.111136][T30887] netlink: 'syz.0.8416': attribute type 11 has an invalid length. [ 1727.122801][T30887] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1727.192799][T30885] netlink: 'syz.2.8407': attribute type 6 has an invalid length. [ 1727.386988][T30897] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1727.626056][T30898] netlink: 'syz.4.8411': attribute type 6 has an invalid length. [ 1727.655779][T30906] netlink: 'syz.2.8412': attribute type 41 has an invalid length. [ 1728.330093][T30915] delete_channel: no stack [ 1728.561308][T30913] netlink: 'syz.6.8414': attribute type 3 has an invalid length. [ 1728.608151][T30913] netlink: 'syz.6.8414': attribute type 9 has an invalid length. [ 1730.079391][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.085913][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 1731.380071][T30936] netlink: 'syz.5.8422': attribute type 11 has an invalid length. [ 1731.430642][T30936] __nla_validate_parse: 9 callbacks suppressed [ 1731.430687][T30936] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.8422'. [ 1731.503568][T30936] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1733.299720][T30932] netlink: 160 bytes leftover after parsing attributes in process `syz.5.8422'. [ 1733.309172][T30932] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1733.323627][T30938] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8420'. [ 1733.343849][T30943] netlink: 180 bytes leftover after parsing attributes in process `syz.4.8424'. [ 1733.356820][T30946] netlink: 'syz.4.8424': attribute type 6 has an invalid length. [ 1733.365338][T30946] netlink: 164 bytes leftover after parsing attributes in process `syz.4.8424'. [ 1733.623747][T30957] netlink: 144 bytes leftover after parsing attributes in process `syz.6.8428'. [ 1733.633926][T30957] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1733.908562][T30963] netlink: 180 bytes leftover after parsing attributes in process `syz.5.8429'. [ 1734.013149][T30969] netlink: 'syz.0.8431': attribute type 41 has an invalid length. [ 1734.108922][T30970] netlink: 'syz.5.8429': attribute type 6 has an invalid length. [ 1734.127281][T30970] netlink: 164 bytes leftover after parsing attributes in process `syz.5.8429'. [ 1734.229009][T30972] delete_channel: no stack [ 1734.578143][T30978] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1734.610938][T30978] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1734.731339][T30978] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1734.738970][T30978] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1735.067183][T30980] netlink: 180 bytes leftover after parsing attributes in process `syz.4.8435'. [ 1735.180515][T30980] netlink: 'syz.4.8435': attribute type 6 has an invalid length. [ 1735.197721][T30980] netlink: 164 bytes leftover after parsing attributes in process `syz.4.8435'. [ 1735.256939][T30988] netlink: 'syz.0.8436': attribute type 11 has an invalid length. [ 1735.291157][T30988] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1735.681888][T30995] netlink: 'syz.0.8437': attribute type 3 has an invalid length. [ 1735.698584][T30995] netlink: 'syz.0.8437': attribute type 9 has an invalid length. [ 1735.756375][T30993] netlink: 'syz.6.8438': attribute type 6 has an invalid length. [ 1735.811676][T31006] FAULT_INJECTION: forcing a failure. [ 1735.811676][T31006] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1735.849483][T31006] CPU: 0 PID: 31006 Comm: syz.2.8442 Not tainted syzkaller #0 [ 1735.857115][T31006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1735.867215][T31006] Call Trace: [ 1735.870528][T31006] [ 1735.873486][T31006] dump_stack_lvl+0x188/0x24e [ 1735.878213][T31006] ? show_regs_print_info+0x12/0x12 [ 1735.883491][T31006] ? load_image+0x400/0x400 [ 1735.888031][T31006] ? __lock_acquire+0x7d10/0x7d10 [ 1735.893111][T31006] should_fail_ex+0x399/0x4d0 [ 1735.897850][T31006] _copy_from_user+0x2c/0x170 [ 1735.902591][T31006] __sys_bpf+0x2ea/0x780 [ 1735.906889][T31006] ? bpf_link_show_fdinfo+0x380/0x380 [ 1735.912325][T31006] ? lock_chain_count+0x20/0x20 [ 1735.917240][T31006] __x64_sys_bpf+0x78/0x90 [ 1735.921736][T31006] do_syscall_64+0x4c/0xa0 [ 1735.926191][T31006] ? clear_bhb_loop+0x60/0xb0 [ 1735.930911][T31006] ? clear_bhb_loop+0x60/0xb0 [ 1735.935636][T31006] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1735.941563][T31006] RIP: 0033:0x7f17fcb9bf79 [ 1735.946113][T31006] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1735.965767][T31006] RSP: 002b:00007f17fda11028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1735.974217][T31006] RAX: ffffffffffffffda RBX: 00007f17fce15fa0 RCX: 00007f17fcb9bf79 [ 1735.982216][T31006] RDX: 0000000000000050 RSI: 0000200000000140 RDI: 000000000000000a [ 1735.990232][T31006] RBP: 00007f17fda11090 R08: 0000000000000000 R09: 0000000000000000 [ 1735.998238][T31006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1736.006249][T31006] R13: 00007f17fce16038 R14: 00007f17fce15fa0 R15: 00007fff322316d8 [ 1736.014277][T31006] [ 1736.116154][T31008] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1736.199100][T31009] delete_channel: no stack [ 1736.436985][T31021] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1736.578671][T31013] netlink: 'syz.6.8445': attribute type 6 has an invalid length. [ 1736.634569][T31013] __nla_validate_parse: 8 callbacks suppressed [ 1736.657862][T31013] netlink: 164 bytes leftover after parsing attributes in process `syz.6.8445'. [ 1736.721827][T31024] netlink: 'syz.2.8447': attribute type 11 has an invalid length. [ 1736.757094][T31024] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.8447'. [ 1736.792781][T31024] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1737.582176][T31036] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1737.589734][T31036] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1737.818090][T31036] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1737.870027][T31036] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1738.247087][T31035] netlink: 180 bytes leftover after parsing attributes in process `syz.5.8451'. [ 1738.330737][T31045] netlink: 'syz.5.8451': attribute type 6 has an invalid length. [ 1738.338568][T31045] netlink: 164 bytes leftover after parsing attributes in process `syz.5.8451'. [ 1738.432233][T31055] netlink: 'syz.6.8455': attribute type 29 has an invalid length. [ 1738.470540][T31044] netlink: 'syz.0.8454': attribute type 10 has an invalid length. [ 1738.478816][T31055] netlink: 'syz.6.8455': attribute type 29 has an invalid length. [ 1738.631639][T31058] FAULT_INJECTION: forcing a failure. [ 1738.631639][T31058] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1738.675180][T31058] CPU: 0 PID: 31058 Comm: syz.2.8457 Not tainted syzkaller #0 [ 1738.682735][T31058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1738.692828][T31058] Call Trace: [ 1738.696143][T31058] [ 1738.699103][T31058] dump_stack_lvl+0x188/0x24e [ 1738.703828][T31058] ? show_regs_print_info+0x12/0x12 [ 1738.709082][T31058] ? load_image+0x400/0x400 [ 1738.713647][T31058] ? __lock_acquire+0x7d10/0x7d10 [ 1738.718741][T31058] should_fail_ex+0x399/0x4d0 [ 1738.723533][T31058] _copy_from_user+0x2c/0x170 [ 1738.728264][T31058] ___sys_sendmsg+0x1c3/0x360 [ 1738.732989][T31058] ? __sys_sendmsg+0x290/0x290 [ 1738.737822][T31058] ? __lock_acquire+0x7d10/0x7d10 [ 1738.742938][T31058] __se_sys_sendmsg+0x1bb/0x2a0 [ 1738.747843][T31058] ? __x64_sys_sendmsg+0x80/0x80 [ 1738.752850][T31058] ? lockdep_hardirqs_on+0x94/0x140 [ 1738.758081][T31058] do_syscall_64+0x4c/0xa0 [ 1738.762547][T31058] ? clear_bhb_loop+0x60/0xb0 [ 1738.767265][T31058] ? clear_bhb_loop+0x60/0xb0 [ 1738.771984][T31058] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1738.777911][T31058] RIP: 0033:0x7f17fcb9bf79 [ 1738.782362][T31058] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1738.802006][T31058] RSP: 002b:00007f17fda11028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1738.810468][T31058] RAX: ffffffffffffffda RBX: 00007f17fce15fa0 RCX: 00007f17fcb9bf79 [ 1738.818474][T31058] RDX: 00000000040000d0 RSI: 0000200000000080 RDI: 0000000000000003 [ 1738.826475][T31058] RBP: 00007f17fda11090 R08: 0000000000000000 R09: 0000000000000000 [ 1738.834515][T31058] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1738.842528][T31058] R13: 00007f17fce16038 R14: 00007f17fce15fa0 R15: 00007fff322316d8 [ 1738.850546][T31058] [ 1739.091746][T31063] netlink: 188 bytes leftover after parsing attributes in process `syz.6.8459'. [ 1739.145139][T31066] netlink: 144 bytes leftover after parsing attributes in process `syz.2.8461'. [ 1739.154495][T31060] delete_channel: no stack [ 1739.180828][T31066] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1739.355173][T31071] netlink: 160 bytes leftover after parsing attributes in process `syz.4.8462'. [ 1739.409313][T31071] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1739.651383][T31072] netlink: 'syz.4.8462': attribute type 11 has an invalid length. [ 1739.689922][T31072] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.8462'. [ 1739.771623][T31072] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1739.882039][T31078] netlink: 180 bytes leftover after parsing attributes in process `syz.0.8464'. [ 1739.958472][T31078] netlink: 'syz.0.8464': attribute type 6 has an invalid length. [ 1740.000495][T31078] netlink: 164 bytes leftover after parsing attributes in process `syz.0.8464'. [ 1740.268495][T31090] FAULT_INJECTION: forcing a failure. [ 1740.268495][T31090] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1740.318247][T31090] CPU: 1 PID: 31090 Comm: syz.4.8468 Not tainted syzkaller #0 [ 1740.325767][T31090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1740.335848][T31090] Call Trace: [ 1740.339161][T31090] [ 1740.342118][T31090] dump_stack_lvl+0x188/0x24e [ 1740.346848][T31090] ? show_regs_print_info+0x12/0x12 [ 1740.352081][T31090] ? load_image+0x400/0x400 [ 1740.356615][T31090] ? __lock_acquire+0x7d10/0x7d10 [ 1740.361680][T31090] ? seqcount_lockdep_reader_access+0x177/0x1d0 [ 1740.367978][T31090] should_fail_ex+0x399/0x4d0 [ 1740.372706][T31090] _copy_from_user+0x2c/0x170 [ 1740.377416][T31090] __sys_bpf+0x2ea/0x780 [ 1740.381695][T31090] ? bpf_link_show_fdinfo+0x380/0x380 [ 1740.387133][T31090] ? lock_chain_count+0x20/0x20 [ 1740.392050][T31090] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1740.398070][T31090] __x64_sys_bpf+0x78/0x90 [ 1740.402554][T31090] do_syscall_64+0x4c/0xa0 [ 1740.407002][T31090] ? clear_bhb_loop+0x60/0xb0 [ 1740.411710][T31090] ? clear_bhb_loop+0x60/0xb0 [ 1740.416486][T31090] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1740.422406][T31090] RIP: 0033:0x7f0155f9bf79 [ 1740.426846][T31090] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1740.446518][T31090] RSP: 002b:00007f0156e26028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1740.454972][T31090] RAX: ffffffffffffffda RBX: 00007f0156215fa0 RCX: 00007f0155f9bf79 [ 1740.462987][T31090] RDX: 0000000000000048 RSI: 0000200000000040 RDI: 000000000000000a [ 1740.470990][T31090] RBP: 00007f0156e26090 R08: 0000000000000000 R09: 0000000000000000 [ 1740.478983][T31090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1740.486990][T31090] R13: 00007f0156216038 R14: 00007f0156215fa0 R15: 00007fff0107c298 [ 1740.495007][T31090] [ 1740.572068][T31099] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1740.581597][T31099] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1740.589214][T31099] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1740.605869][T31099] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1740.613470][T31099] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1740.620949][T31099] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1741.258521][T31100] netlink: 'syz.0.8469': attribute type 6 has an invalid length. [ 1741.384350][T31098] chnl_net:caif_netlink_parms(): no params data found [ 1741.748238][T31098] bridge0: port 1(bridge_slave_0) entered blocking state [ 1741.801490][T31098] bridge0: port 1(bridge_slave_0) entered disabled state [ 1741.822958][T31098] device bridge_slave_0 entered promiscuous mode [ 1741.842456][T31098] bridge0: port 2(bridge_slave_1) entered blocking state [ 1741.849629][T31098] bridge0: port 2(bridge_slave_1) entered disabled state [ 1741.868653][T31098] device bridge_slave_1 entered promiscuous mode [ 1742.185326][T31098] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1742.254712][T31118] __nla_validate_parse: 2 callbacks suppressed [ 1742.254749][T31118] netlink: 144 bytes leftover after parsing attributes in process `syz.4.8476'. [ 1742.328595][T31118] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1742.503228][T31098] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1742.533348][T31133] netlink: 'syz.6.8477': attribute type 11 has an invalid length. [ 1742.580908][T31133] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.8477'. [ 1742.592258][T31130] netlink: 160 bytes leftover after parsing attributes in process `syz.6.8477'. [ 1742.592752][T31130] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1742.665451][T31122] netlink: 188 bytes leftover after parsing attributes in process `syz.0.8474'. [ 1742.710769][T12902] Bluetooth: hci2: command 0x0409 tx timeout [ 1742.739298][T31133] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1742.772735][T31121] delete_channel: no stack [ 1742.852457][T19687] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1742.950082][T31098] team0: Port device team_slave_0 added [ 1743.083744][T19687] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1743.122194][T31098] team0: Port device team_slave_1 added [ 1743.170384][T31138] netlink: 'syz.4.8479': attribute type 10 has an invalid length. [ 1743.309913][T31147] FAULT_INJECTION: forcing a failure. [ 1743.309913][T31147] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1743.418862][T19687] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1743.430718][T31147] CPU: 0 PID: 31147 Comm: syz.0.8481 Not tainted syzkaller #0 [ 1743.438222][T31147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1743.448302][T31147] Call Trace: [ 1743.451617][T31147] [ 1743.454572][T31147] dump_stack_lvl+0x188/0x24e [ 1743.459291][T31147] ? show_regs_print_info+0x12/0x12 [ 1743.464528][T31147] ? load_image+0x400/0x400 [ 1743.469067][T31147] ? __lock_acquire+0x7d10/0x7d10 [ 1743.474139][T31147] should_fail_ex+0x399/0x4d0 [ 1743.478918][T31147] _copy_from_user+0x2c/0x170 [ 1743.483635][T31147] tipc_setsockopt+0x261/0x960 [ 1743.488435][T31147] ? tipc_shutdown+0x560/0x560 [ 1743.493248][T31147] ? aa_sock_opt_perm+0x74/0x100 [ 1743.498232][T31147] ? bpf_lsm_socket_setsockopt+0x5/0x10 [ 1743.503816][T31147] ? security_socket_setsockopt+0x7a/0xa0 [ 1743.509586][T31147] ? tipc_shutdown+0x560/0x560 [ 1743.514396][T31147] __sys_setsockopt+0x2bf/0x3d0 [ 1743.519299][T31147] __x64_sys_setsockopt+0xb1/0xc0 [ 1743.524381][T31147] do_syscall_64+0x4c/0xa0 [ 1743.528846][T31147] ? clear_bhb_loop+0x60/0xb0 [ 1743.533567][T31147] ? clear_bhb_loop+0x60/0xb0 [ 1743.538287][T31147] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1743.544225][T31147] RIP: 0033:0x7f0380f9bf79 [ 1743.548664][T31147] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1743.568313][T31147] RSP: 002b:00007f0381e50028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1743.576757][T31147] RAX: ffffffffffffffda RBX: 00007f0381215fa0 RCX: 00007f0380f9bf79 [ 1743.584755][T31147] RDX: 0000000000000082 RSI: 000000000000010f RDI: 0000000000000005 [ 1743.592752][T31147] RBP: 00007f0381e50090 R08: 0000000000000043 R09: 0000000000000000 [ 1743.600740][T31147] R10: 00002000000008c0 R11: 0000000000000246 R12: 0000000000000001 [ 1743.608729][T31147] R13: 00007f0381216038 R14: 00007f0381215fa0 R15: 00007ffdbdb79f98 [ 1743.616729][T31147] [ 1743.625189][T31098] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1743.661464][T31098] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1743.721496][T31098] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1743.813245][T31098] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1743.826211][T31098] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1743.910572][T31098] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1744.067332][T19687] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1744.236102][T31098] device hsr_slave_0 entered promiscuous mode [ 1744.296855][T31098] device hsr_slave_1 entered promiscuous mode [ 1744.791104][T12902] Bluetooth: hci2: command 0x041b tx timeout [ 1746.871131][T12902] Bluetooth: hci2: command 0x040f tx timeout [ 1747.371775][T31173] FAULT_INJECTION: forcing a failure. [ 1747.371775][T31173] name failslab, interval 1, probability 0, space 0, times 0 [ 1747.426189][T31173] CPU: 0 PID: 31173 Comm: syz.0.8486 Not tainted syzkaller #0 [ 1747.433732][T31173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1747.443817][T31173] Call Trace: [ 1747.447119][T31173] [ 1747.450080][T31173] dump_stack_lvl+0x188/0x24e [ 1747.454824][T31173] ? show_regs_print_info+0x12/0x12 [ 1747.460089][T31173] ? load_image+0x400/0x400 [ 1747.464651][T31173] ? __lock_acquire+0x7d10/0x7d10 [ 1747.469769][T31173] should_fail_ex+0x399/0x4d0 [ 1747.474503][T31173] should_failslab+0x5/0x20 [ 1747.479048][T31173] slab_pre_alloc_hook+0x59/0x310 [ 1747.484115][T31173] ? verify_lock_unused+0x140/0x140 [ 1747.489365][T31173] ? bpf_test_init+0x9f/0x140 [ 1747.494081][T31173] __kmem_cache_alloc_node+0x4f/0x260 [ 1747.499491][T31173] ? bpf_test_init+0x9f/0x140 [ 1747.504206][T31173] __kmalloc+0xa0/0x240 [ 1747.508420][T31173] bpf_test_init+0x9f/0x140 [ 1747.512960][T31173] bpf_prog_test_run_xdp+0x484/0xf10 [ 1747.518314][T31173] ? dev_put+0x80/0x80 [ 1747.522435][T31173] ? dev_put+0x80/0x80 [ 1747.526577][T31173] bpf_prog_test_run+0x31e/0x390 [ 1747.531560][T31173] __sys_bpf+0x62b/0x780 [ 1747.535843][T31173] ? bpf_link_show_fdinfo+0x380/0x380 [ 1747.541269][T31173] ? lock_chain_count+0x20/0x20 [ 1747.546182][T31173] __x64_sys_bpf+0x78/0x90 [ 1747.550664][T31173] do_syscall_64+0x4c/0xa0 [ 1747.555118][T31173] ? clear_bhb_loop+0x60/0xb0 [ 1747.559827][T31173] ? clear_bhb_loop+0x60/0xb0 [ 1747.564544][T31173] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1747.570472][T31173] RIP: 0033:0x7f0380f9bf79 [ 1747.574918][T31173] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1747.594555][T31173] RSP: 002b:00007f0381e2f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1747.603007][T31173] RAX: ffffffffffffffda RBX: 00007f0381216090 RCX: 00007f0380f9bf79 [ 1747.611035][T31173] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 1747.619040][T31173] RBP: 00007f0381e2f090 R08: 0000000000000000 R09: 0000000000000000 [ 1747.627041][T31173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1747.635050][T31173] R13: 00007f0381216128 R14: 00007f0381216090 R15: 00007ffdbdb79f98 [ 1747.643073][T31173] [ 1747.722021][T31180] netlink: 144 bytes leftover after parsing attributes in process `syz.2.8488'. [ 1747.740920][T31180] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1748.150864][T31191] netlink: 'syz.6.8490': attribute type 11 has an invalid length. [ 1748.170519][T31191] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.8490'. [ 1748.202185][T31191] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1748.314803][T31187] netlink: 160 bytes leftover after parsing attributes in process `syz.6.8490'. [ 1748.327971][T31187] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1748.507201][T31199] netlink: 188 bytes leftover after parsing attributes in process `syz.0.8491'. [ 1748.554156][T31194] delete_channel: no stack [ 1748.645522][T31208] netlink: 'syz.6.8493': attribute type 3 has an invalid length. [ 1748.659491][T31208] netlink: 105116 bytes leftover after parsing attributes in process `syz.6.8493'. [ 1748.950446][T12902] Bluetooth: hci2: command 0x0419 tx timeout [ 1749.639540][T31223] netlink: 'syz.6.8496': attribute type 2 has an invalid length. [ 1750.029301][T31221] netlink: 14 bytes leftover after parsing attributes in process `syz.6.8496'. [ 1752.156946][T31231] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8497'. [ 1752.185170][T31241] netlink: 'syz.6.8500': attribute type 10 has an invalid length. [ 1752.287900][T31098] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1752.303141][T31247] netlink: 144 bytes leftover after parsing attributes in process `syz.4.8501'. [ 1752.327349][T31247] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1752.365745][T31098] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1752.404305][T31098] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1752.445987][T31098] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1752.486776][T19687] device hsr_slave_0 left promiscuous mode [ 1752.501924][T19687] bridge0: port 3(team0) entered disabled state [ 1752.519361][T19687] device bridge_slave_1 left promiscuous mode [ 1752.533856][T19687] bridge0: port 2(bridge_slave_1) entered disabled state [ 1752.552567][T19687] device bridge_slave_0 left promiscuous mode [ 1752.566882][T19687] bridge0: port 1(bridge_slave_0) entered disabled state [ 1752.617955][T19687] device veth1_macvtap left promiscuous mode [ 1752.632470][T19687] device veth0_macvtap left promiscuous mode [ 1752.647910][T19687] device veth1_vlan left promiscuous mode [ 1752.662744][T19687] device veth0_vlan left promiscuous mode [ 1753.358335][T19687] device team_slave_1 left promiscuous mode [ 1753.368695][T19687] team0 (unregistering): Port device team_slave_1 removed [ 1753.708443][T31261] delete_channel: no stack [ 1753.807632][T31259] netlink: 'syz.6.8503': attribute type 11 has an invalid length. [ 1753.816019][T31257] netlink: 160 bytes leftover after parsing attributes in process `syz.6.8503'. [ 1753.825124][T31259] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.8503'. [ 1753.830885][T31257] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1753.841906][T31259] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1753.894079][T31262] netlink: 188 bytes leftover after parsing attributes in process `syz.4.8504'. [ 1757.871915][T31282] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8510'. [ 1758.025733][T31098] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1758.051719][T19649] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1758.059962][T19649] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1758.072912][T31098] 8021q: adding VLAN 0 to HW filter on device team0 [ 1758.092442][T19649] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1758.103194][T19649] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1758.113080][T19649] bridge0: port 1(bridge_slave_0) entered blocking state [ 1758.120221][T19649] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1758.153493][T19649] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1758.162780][T19649] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1758.174595][T19649] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1758.186695][T19649] bridge0: port 2(bridge_slave_1) entered blocking state [ 1758.193887][T19649] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1758.203323][T19649] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1758.212578][T19649] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1758.222266][T19649] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1758.233851][T19649] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1758.261503][T19649] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1758.296995][T19649] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1758.307857][T19649] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1758.326627][T19649] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1758.337149][T19649] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1758.355598][T31098] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1758.372422][T31098] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1758.385517][T19649] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1758.395756][T19649] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1758.751828][T31306] netlink: 160 bytes leftover after parsing attributes in process `syz.6.8514'. [ 1758.775939][T31306] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1758.812791][T31305] netlink: 144 bytes leftover after parsing attributes in process `syz.0.8513'. [ 1758.855042][T31306] netlink: 'syz.6.8514': attribute type 11 has an invalid length. [ 1758.866412][T31305] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1758.899437][T31306] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.8514'. [ 1758.923370][T31306] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1758.960250][T31312] netlink: 'syz.2.8512': attribute type 10 has an invalid length. [ 1759.292010][T31324] netlink: 188 bytes leftover after parsing attributes in process `syz.6.8515'. [ 1759.312428][T31322] delete_channel: no stack [ 1759.377278][T19695] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1759.385263][T19695] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1759.409648][T31098] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1761.235090][T31336] delete_channel: no stack [ 1762.445174][T31349] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8522'. [ 1764.571213][T31362] netlink: 'syz.6.8525': attribute type 11 has an invalid length. [ 1764.579957][T31362] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.8525'. [ 1764.592705][T31362] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1765.972956][T19695] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1765.982033][T19695] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1765.993353][T31358] netlink: 'syz.2.8523': attribute type 39 has an invalid length. [ 1766.003501][T31358] device veth0_macvtap left promiscuous mode [ 1766.049993][T31361] netlink: 160 bytes leftover after parsing attributes in process `syz.6.8525'. [ 1766.059340][T31361] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1766.113701][T19687] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1766.133142][T19687] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1766.165680][T31098] device veth0_vlan entered promiscuous mode [ 1766.184463][T19687] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1766.203300][T19687] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1766.227447][T31098] device veth1_vlan entered promiscuous mode [ 1766.273303][T13410] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1766.283942][T13410] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1766.295394][T13410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1766.314885][T13410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1766.332645][T31098] device veth0_macvtap entered promiscuous mode [ 1766.344148][T31367] netlink: 144 bytes leftover after parsing attributes in process `syz.6.8527'. [ 1766.368047][T31367] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1766.409178][T31369] netlink: 188 bytes leftover after parsing attributes in process `syz.2.8528'. [ 1766.449858][T31098] device veth1_macvtap entered promiscuous mode [ 1766.454517][T31368] delete_channel: no stack [ 1766.467591][T31372] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8526'. [ 1766.544253][T31098] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1766.573378][T19695] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1766.591486][T19695] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1766.610250][T19695] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1766.620983][T19695] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1767.518787][T31376] delete_channel: no stack [ 1769.143130][T31098] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1769.158782][T19689] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1769.185353][T19689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1769.214002][T31098] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1769.226065][T31098] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1769.235297][T31098] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1769.244342][T31098] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1769.567659][T31384] netlink: 180 bytes leftover after parsing attributes in process `syz.6.8533'. [ 1769.584938][T31387] netlink: 'syz.6.8533': attribute type 6 has an invalid length. [ 1769.610741][T31387] netlink: 164 bytes leftover after parsing attributes in process `syz.6.8533'. [ 1771.703226][T19689] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1771.716539][T19689] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1771.726214][T13410] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1771.767029][T13410] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1771.782504][T13410] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1771.810720][T19649] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1771.884719][T31394] netlink: 'syz.6.8536': attribute type 2 has an invalid length. [ 1771.911470][T31394] netlink: 199848 bytes leftover after parsing attributes in process `syz.6.8536'. [ 1772.042782][T31401] netlink: 160 bytes leftover after parsing attributes in process `syz.0.8538'. [ 1772.055939][T31401] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1772.148511][T31401] netlink: 'syz.0.8538': attribute type 11 has an invalid length. [ 1772.191191][T31401] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.8538'. [ 1772.258557][T31401] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1772.505918][T31407] netlink: 'syz.5.8540': attribute type 39 has an invalid length. [ 1772.769372][T31407] device hsr_slave_1 left promiscuous mode [ 1772.904291][T31404] netlink: 188 bytes leftover after parsing attributes in process `syz.6.8539'. [ 1772.914620][T31411] netlink: 144 bytes leftover after parsing attributes in process `syz.0.8541'. [ 1772.925664][T31403] delete_channel: no stack [ 1772.929363][T31411] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1773.262656][T31424] FAULT_INJECTION: forcing a failure. [ 1773.262656][T31424] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1773.276803][T31424] CPU: 0 PID: 31424 Comm: syz.6.8546 Not tainted syzkaller #0 [ 1773.284315][T31424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1773.294398][T31424] Call Trace: [ 1773.297746][T31424] [ 1773.300724][T31424] dump_stack_lvl+0x188/0x24e [ 1773.305457][T31424] ? show_regs_print_info+0x12/0x12 [ 1773.310739][T31424] ? load_image+0x400/0x400 [ 1773.315298][T31424] ? __lock_acquire+0x7d10/0x7d10 [ 1773.320376][T31424] ? ct_irq_exit_irqson+0x113/0x170 [ 1773.325624][T31424] should_fail_ex+0x399/0x4d0 [ 1773.330350][T31424] prepare_alloc_pages+0x1e2/0x5f0 [ 1773.335512][T31424] __alloc_pages+0x130/0x4f0 [ 1773.340142][T31424] ? asm_exc_page_fault+0x22/0x30 [ 1773.345204][T31424] ? zone_statistics+0x170/0x170 [ 1773.350198][T31424] ? _copy_from_user+0xa1/0x170 [ 1773.355105][T31424] bpf_prog_test_run_xdp+0xaf7/0xf10 [ 1773.360441][T31424] ? dev_put+0x80/0x80 [ 1773.364566][T31424] ? dev_put+0x80/0x80 [ 1773.368675][T31424] bpf_prog_test_run+0x31e/0x390 [ 1773.373681][T31424] __sys_bpf+0x62b/0x780 [ 1773.377987][T31424] ? bpf_link_show_fdinfo+0x380/0x380 [ 1773.383420][T31424] ? lock_chain_count+0x20/0x20 [ 1773.388315][T31424] __x64_sys_bpf+0x78/0x90 [ 1773.392767][T31424] do_syscall_64+0x4c/0xa0 [ 1773.397217][T31424] ? clear_bhb_loop+0x60/0xb0 [ 1773.402087][T31424] ? clear_bhb_loop+0x60/0xb0 [ 1773.406808][T31424] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1773.412748][T31424] RIP: 0033:0x7f302c19bf79 [ 1773.417193][T31424] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1773.436840][T31424] RSP: 002b:00007f302d0e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1773.445289][T31424] RAX: ffffffffffffffda RBX: 00007f302c415fa0 RCX: 00007f302c19bf79 [ 1773.453289][T31424] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 1773.461300][T31424] RBP: 00007f302d0e6090 R08: 0000000000000000 R09: 0000000000000000 [ 1773.469306][T31424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1773.477308][T31424] R13: 00007f302c416038 R14: 00007f302c415fa0 R15: 00007ffc4061f8d8 [ 1773.485321][T31424] [ 1773.568551][T31416] delete_channel: no stack [ 1777.476981][T31439] netlink: 132 bytes leftover after parsing attributes in process `syz.5.8549'. [ 1777.802678][T31449] netlink: 'syz.0.8551': attribute type 11 has an invalid length. [ 1777.813925][T31449] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.8551'. [ 1777.870322][T31449] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1779.732205][T31445] netlink: 160 bytes leftover after parsing attributes in process `syz.0.8551'. [ 1779.741600][T31445] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1779.759316][T31451] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8552'. [ 1779.851626][T31458] netlink: 10 bytes leftover after parsing attributes in process `syz.4.8553'. [ 1779.914849][T31460] netlink: 144 bytes leftover after parsing attributes in process `syz.6.8554'. [ 1779.935178][T31460] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1780.056573][T31462] netlink: 188 bytes leftover after parsing attributes in process `syz.0.8555'. [ 1780.092643][T31461] delete_channel: no stack [ 1780.241262][T31469] netlink: 'syz.4.8557': attribute type 39 has an invalid length. [ 1780.448246][T31476] netlink: 'syz.4.8560': attribute type 10 has an invalid length. [ 1780.542936][T31477] delete_channel: no stack [ 1780.683893][T31480] netlink: 180 bytes leftover after parsing attributes in process `syz.6.8562'. [ 1780.758458][T31480] netlink: 'syz.6.8562': attribute type 6 has an invalid length. [ 1780.779950][T31480] netlink: 164 bytes leftover after parsing attributes in process `syz.6.8562'. [ 1780.809796][T31486] netlink: 160 bytes leftover after parsing attributes in process `syz.5.8565'. [ 1780.934761][T31486] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1781.220207][T31500] delete_channel: no stack [ 1781.545327][T31508] team0: Port device team_slave_0 removed [ 1781.584053][T31508] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1781.859031][T31521] netlink: 'syz.0.8575': attribute type 10 has an invalid length. [ 1781.941983][T31516] netlink: 'syz.6.8572': attribute type 39 has an invalid length. [ 1781.943420][T31517] delete_channel: no stack [ 1782.442969][T31533] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1782.718956][T31535] __nla_validate_parse: 6 callbacks suppressed [ 1782.718993][T31535] netlink: 188 bytes leftover after parsing attributes in process `syz.0.8582'. [ 1782.754917][T31534] delete_channel: no stack [ 1785.374418][T31549] netlink: 180 bytes leftover after parsing attributes in process `syz.6.8584'. [ 1785.497641][T31553] netlink: 144 bytes leftover after parsing attributes in process `syz.0.8588'. [ 1785.522753][T31553] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1785.709098][T31555] delete_channel: no stack [ 1785.971558][T31565] netlink: 'syz.2.8591': attribute type 10 has an invalid length. [ 1786.074711][T31565] device macvlan1 entered promiscuous mode [ 1786.108781][T31565] team0: Port device macvlan1 added [ 1786.444472][T31571] netlink: 160 bytes leftover after parsing attributes in process `syz.0.8594'. [ 1786.492085][T31571] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1786.564162][T31572] netlink: 'syz.2.8593': attribute type 39 has an invalid length. [ 1786.638327][T31574] netlink: 180 bytes leftover after parsing attributes in process `syz.6.8603'. [ 1786.678568][T31576] netlink: 'syz.0.8594': attribute type 11 has an invalid length. [ 1786.688947][T31576] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.8594'. [ 1786.713079][T31576] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1786.804885][T31574] netlink: 'syz.6.8603': attribute type 6 has an invalid length. [ 1786.843713][T31574] netlink: 164 bytes leftover after parsing attributes in process `syz.6.8603'. [ 1787.030254][T31586] netlink: 188 bytes leftover after parsing attributes in process `syz.5.8596'. [ 1787.283784][T31583] delete_channel: no stack [ 1787.399815][T31593] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8598'. [ 1787.605819][T31598] FAULT_INJECTION: forcing a failure. [ 1787.605819][T31598] name failslab, interval 1, probability 0, space 0, times 0 [ 1787.618508][T31598] CPU: 1 PID: 31598 Comm: syz.5.8601 Not tainted syzkaller #0 [ 1787.626007][T31598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1787.636106][T31598] Call Trace: [ 1787.639435][T31598] [ 1787.642413][T31598] dump_stack_lvl+0x188/0x24e [ 1787.647148][T31598] ? show_regs_print_info+0x12/0x12 [ 1787.652415][T31598] ? load_image+0x400/0x400 [ 1787.656980][T31598] ? verify_lock_unused+0x140/0x140 [ 1787.662239][T31598] ? verify_lock_unused+0x140/0x140 [ 1787.667505][T31598] should_fail_ex+0x399/0x4d0 [ 1787.672275][T31598] should_failslab+0x5/0x20 [ 1787.676871][T31598] slab_pre_alloc_hook+0x59/0x310 [ 1787.681939][T31598] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1787.687969][T31598] ? ref_tracker_alloc+0x14e/0x4b0 [ 1787.693144][T31598] __kmem_cache_alloc_node+0x4f/0x260 [ 1787.698570][T31598] ? ref_tracker_alloc+0x14e/0x4b0 [ 1787.703738][T31598] kmalloc_trace+0x26/0xe0 [ 1787.708203][T31598] ref_tracker_alloc+0x14e/0x4b0 [ 1787.713196][T31598] ? ref_tracker_dir_print+0x150/0x150 [ 1787.718720][T31598] ? _raw_spin_lock_irqsave+0x8b/0x100 [ 1787.724229][T31598] ? _raw_spin_lock_irqsave+0x8b/0x100 [ 1787.729718][T31598] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 1787.735201][T31598] ? _raw_spin_lock+0x40/0x40 [ 1787.739959][T31598] ? linkwatch_fire_event+0x13/0x210 [ 1787.745287][T31598] linkwatch_fire_event+0x1a9/0x210 [ 1787.750532][T31598] veth_set_channels+0x322/0xbe0 [ 1787.755511][T31598] ethtool_set_channels+0x574/0x5c0 [ 1787.760746][T31598] ? ethtool_get_channels+0x190/0x190 [ 1787.766161][T31598] ? lockdep_hardirqs_on+0x94/0x140 [ 1787.771395][T31598] ? dev_ethtool+0xcd5/0x12f0 [ 1787.776106][T31598] dev_ethtool+0xce2/0x12f0 [ 1787.780653][T31598] ? ethtool_get_module_eeprom_call+0x170/0x170 [ 1787.786932][T31598] ? __lock_acquire+0x7d10/0x7d10 [ 1787.792013][T31598] ? full_name_hash+0x8e/0xe0 [ 1787.796720][T31598] ? dev_load+0x1d/0x1e0 [ 1787.800990][T31598] ? dev_load+0x1d/0x1e0 [ 1787.805252][T31598] dev_ioctl+0x474/0xe80 [ 1787.809523][T31598] sock_do_ioctl+0x245/0x320 [ 1787.814136][T31598] ? sock_show_fdinfo+0xb0/0xb0 [ 1787.819027][T31598] sock_ioctl+0x4d2/0x710 [ 1787.823398][T31598] ? sock_poll+0x410/0x410 [ 1787.827868][T31598] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1787.832848][T31598] ? security_file_ioctl+0x7c/0xa0 [ 1787.837992][T31598] ? sock_poll+0x410/0x410 [ 1787.842438][T31598] __se_sys_ioctl+0xfa/0x170 [ 1787.847061][T31598] do_syscall_64+0x4c/0xa0 [ 1787.851514][T31598] ? clear_bhb_loop+0x60/0xb0 [ 1787.856220][T31598] ? clear_bhb_loop+0x60/0xb0 [ 1787.860923][T31598] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1787.866846][T31598] RIP: 0033:0x7fb2dcd9bf79 [ 1787.871283][T31598] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1787.890910][T31598] RSP: 002b:00007fb2ddd3f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1787.899347][T31598] RAX: ffffffffffffffda RBX: 00007fb2dd015fa0 RCX: 00007fb2dcd9bf79 [ 1787.907342][T31598] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 000000000000000a [ 1787.915346][T31598] RBP: 00007fb2ddd3f090 R08: 0000000000000000 R09: 0000000000000000 [ 1787.923339][T31598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1787.931328][T31598] R13: 00007fb2dd016038 R14: 00007fb2dd015fa0 R15: 00007ffcc05f3e98 [ 1787.939387][T31598] [ 1788.134909][T31605] netlink: 144 bytes leftover after parsing attributes in process `syz.4.8605'. [ 1788.161162][T31605] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1788.531642][T31600] delete_channel: no stack [ 1788.710921][T31617] netlink: 'syz.5.8607': attribute type 10 has an invalid length. [ 1788.783665][T31617] team0: Port device macvlan1 added [ 1788.921971][T31619] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8617'. [ 1789.105951][T31625] netlink: 160 bytes leftover after parsing attributes in process `syz.6.8610'. [ 1789.126129][T31625] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1789.454580][T31631] netlink: 'syz.6.8610': attribute type 11 has an invalid length. [ 1789.488320][T31631] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.8610'. [ 1789.567265][T31631] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1789.727507][T31640] netlink: 188 bytes leftover after parsing attributes in process `syz.4.8613'. [ 1789.796407][T31636] delete_channel: no stack [ 1789.826356][T31638] netlink: 180 bytes leftover after parsing attributes in process `syz.5.8614'. [ 1789.914999][T31638] netlink: 'syz.5.8614': attribute type 6 has an invalid length. [ 1789.950840][T31638] netlink: 164 bytes leftover after parsing attributes in process `syz.5.8614'. [ 1790.658636][T31653] delete_channel: no stack [ 1791.038402][T31664] netlink: 144 bytes leftover after parsing attributes in process `syz.5.8623'. [ 1791.157196][T31664] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1791.199918][T31671] FAULT_INJECTION: forcing a failure. [ 1791.199918][T31671] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1791.247169][T31671] CPU: 1 PID: 31671 Comm: syz.0.8626 Not tainted syzkaller #0 [ 1791.254717][T31671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1791.264819][T31671] Call Trace: [ 1791.268135][T31671] [ 1791.271118][T31671] dump_stack_lvl+0x188/0x24e [ 1791.275850][T31671] ? show_regs_print_info+0x12/0x12 [ 1791.281099][T31671] ? load_image+0x400/0x400 [ 1791.285652][T31671] ? __lock_acquire+0x7d10/0x7d10 [ 1791.290730][T31671] ? snprintf+0xe5/0x140 [ 1791.295015][T31671] should_fail_ex+0x399/0x4d0 [ 1791.299932][T31671] _copy_to_user+0x2c/0x130 [ 1791.304499][T31671] simple_read_from_buffer+0xe3/0x150 [ 1791.309947][T31671] proc_fail_nth_read+0x1a6/0x220 [ 1791.315027][T31671] ? proc_fault_inject_write+0x310/0x310 [ 1791.320714][T31671] ? fsnotify_perm+0x248/0x550 [ 1791.325526][T31671] ? proc_fault_inject_write+0x310/0x310 [ 1791.331218][T31671] vfs_read+0x2de/0xa00 [ 1791.335422][T31671] ? kernel_read+0x1e0/0x1e0 [ 1791.340056][T31671] ? __fget_files+0x28/0x4b0 [ 1791.344696][T31671] ? __fget_files+0x28/0x4b0 [ 1791.349337][T31671] ? __fget_files+0x43d/0x4b0 [ 1791.354099][T31671] ? __fdget_pos+0x2ae/0x360 [ 1791.358756][T31671] ? ksys_read+0x71/0x250 [ 1791.363138][T31671] ksys_read+0x14c/0x250 [ 1791.367439][T31671] ? vfs_write+0xa30/0xa30 [ 1791.371922][T31671] ? lockdep_hardirqs_on+0x94/0x140 [ 1791.377169][T31671] do_syscall_64+0x4c/0xa0 [ 1791.381641][T31671] ? clear_bhb_loop+0x60/0xb0 [ 1791.386364][T31671] ? clear_bhb_loop+0x60/0xb0 [ 1791.391091][T31671] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1791.397032][T31671] RIP: 0033:0x7f0380f5c84e [ 1791.401485][T31671] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1791.421141][T31671] RSP: 002b:00007f0381e4ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1791.429600][T31671] RAX: ffffffffffffffda RBX: 00007f0381e506c0 RCX: 00007f0380f5c84e [ 1791.437615][T31671] RDX: 000000000000000f RSI: 00007f0381e500a0 RDI: 0000000000000005 [ 1791.445630][T31671] RBP: 00007f0381e50090 R08: 0000000000000000 R09: 0000000000000000 [ 1791.453643][T31671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1791.461669][T31671] R13: 00007f0381216038 R14: 00007f0381215fa0 R15: 00007ffdbdb79f98 [ 1791.469743][T31671] [ 1791.513828][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.520219][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 1791.774479][T31678] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8629'. [ 1794.379896][T31688] delete_channel: no stack [ 1794.668721][T31684] netlink: 160 bytes leftover after parsing attributes in process `syz.6.8630'. [ 1794.709435][T31684] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1794.767400][T31695] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8628'. [ 1795.183271][T31703] netlink: 180 bytes leftover after parsing attributes in process `syz.5.8633'. [ 1795.377735][T31703] netlink: 'syz.5.8633': attribute type 6 has an invalid length. [ 1795.421184][T31703] netlink: 164 bytes leftover after parsing attributes in process `syz.5.8633'. [ 1795.510558][T31718] netlink: 134056 bytes leftover after parsing attributes in process `syz.4.8638'. [ 1795.811443][T31723] bridge0: port 1(bridge_slave_0) entered disabled state [ 1795.869007][T31725] netlink: 144 bytes leftover after parsing attributes in process `syz.2.8641'. [ 1795.900821][T31725] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1796.037717][T31709] delete_channel: no stack [ 1796.259281][T31729] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1796.367120][T31729] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1796.457689][T31729] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1796.550826][T31729] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1796.928376][T31730] delete_channel: no stack [ 1796.991845][T31731] netlink: 188 bytes leftover after parsing attributes in process `syz.4.8643'. [ 1797.115034][T31739] netlink: 160 bytes leftover after parsing attributes in process `syz.0.8645'. [ 1797.138363][T31739] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1797.405420][T31743] netlink: 'syz.0.8645': attribute type 11 has an invalid length. [ 1797.462270][T31743] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.8645'. [ 1797.483061][T31744] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8646'. [ 1797.532696][T31743] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1803.401152][T31771] __nla_validate_parse: 2 callbacks suppressed [ 1803.401173][T31771] netlink: 180 bytes leftover after parsing attributes in process `syz.6.8653'. [ 1805.078578][T31774] netlink: 'syz.6.8653': attribute type 6 has an invalid length. [ 1805.086493][T31774] netlink: 164 bytes leftover after parsing attributes in process `syz.6.8653'. [ 1805.354081][T31780] netlink: 144 bytes leftover after parsing attributes in process `syz.5.8656'. [ 1805.386900][T31780] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1805.575115][T31785] netlink: 188 bytes leftover after parsing attributes in process `syz.2.8657'. [ 1805.611945][T31783] delete_channel: no stack [ 1805.884851][T31099] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1805.895645][T31099] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1805.904407][T31099] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1805.920728][T31099] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1805.928807][T31099] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1805.936274][T31099] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1806.094805][T31777] delete_channel: no stack [ 1806.323673][T31789] chnl_net:caif_netlink_parms(): no params data found [ 1806.614413][T31807] netlink: 'syz.4.8661': attribute type 11 has an invalid length. [ 1806.675459][T31807] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.8661'. [ 1806.694433][T31802] netlink: 160 bytes leftover after parsing attributes in process `syz.4.8661'. [ 1806.761521][T31802] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1806.764152][T31807] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1806.882141][T31806] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8660'. [ 1806.950561][T31812] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8662'. [ 1807.139958][T31789] bridge0: port 1(bridge_slave_0) entered blocking state [ 1807.162901][T31789] bridge0: port 1(bridge_slave_0) entered disabled state [ 1807.194672][T31789] device bridge_slave_0 entered promiscuous mode [ 1807.211281][T31789] bridge0: port 2(bridge_slave_1) entered blocking state [ 1807.226291][T31789] bridge0: port 2(bridge_slave_1) entered disabled state [ 1807.242877][T31789] device bridge_slave_1 entered promiscuous mode [ 1807.443205][T31789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1807.526361][T31789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1807.643676][T31789] team0: Port device team_slave_0 added [ 1807.653811][T31789] team0: Port device team_slave_1 added [ 1807.803093][T31789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1807.810142][T31789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1807.850362][T31789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1807.896518][T31789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1807.904608][T31789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1807.940512][T31789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1807.990403][T31099] Bluetooth: hci4: command 0x0409 tx timeout [ 1808.914532][T31789] device hsr_slave_0 entered promiscuous mode [ 1809.168475][T31789] device hsr_slave_1 entered promiscuous mode [ 1809.183307][T31789] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1809.214865][T31789] Cannot create hsr debugfs directory [ 1809.251384][T31821] netlink: 'syz.5.8664': attribute type 39 has an invalid length. [ 1809.388374][T19687] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1809.587249][T19687] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1809.768810][T19687] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1809.841973][T31828] netlink: 188 bytes leftover after parsing attributes in process `syz.5.8668'. [ 1809.871752][T31827] delete_channel: no stack [ 1810.091420][T31099] Bluetooth: hci4: command 0x041b tx timeout [ 1810.135590][T31833] netlink: 180 bytes leftover after parsing attributes in process `syz.0.8666'. [ 1810.297226][T19687] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1810.417519][T31842] netlink: 'syz.0.8666': attribute type 6 has an invalid length. [ 1810.458317][T31842] netlink: 164 bytes leftover after parsing attributes in process `syz.0.8666'. [ 1810.953115][T31843] delete_channel: no stack [ 1812.151353][T31099] Bluetooth: hci4: command 0x040f tx timeout [ 1812.811229][T31862] netlink: 'syz.5.8675': attribute type 11 has an invalid length. [ 1812.821413][T31862] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.8675'. [ 1812.841430][T31862] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1814.234800][T31099] Bluetooth: hci4: command 0x0419 tx timeout [ 1814.267428][T31850] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8671'. [ 1814.293720][T31861] netlink: 160 bytes leftover after parsing attributes in process `syz.5.8675'. [ 1814.305773][T31861] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1814.573790][T19687] tipc: Left network mode [ 1814.962308][T31872] netlink: 'syz.2.8677': attribute type 39 has an invalid length. [ 1815.227437][T31878] netlink: 188 bytes leftover after parsing attributes in process `syz.4.8679'. [ 1815.271847][T31883] netlink: 144 bytes leftover after parsing attributes in process `syz.5.8680'. [ 1815.285313][T31883] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1815.304941][T31877] delete_channel: no stack [ 1817.252354][T31906] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8676'. [ 1817.406570][T31915] netlink: 'syz.5.8686': attribute type 11 has an invalid length. [ 1817.439206][T31915] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.8686'. [ 1817.476818][T31915] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1819.246565][T31912] netlink: 160 bytes leftover after parsing attributes in process `syz.5.8686'. [ 1819.255891][T31912] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1819.672696][T19687] bond0: (slave wlan1): Releasing backup interface [ 1819.712963][T31789] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1819.733119][T31928] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8688'. [ 1819.768597][T31789] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1820.747619][T31932] delete_channel: no stack [ 1822.444891][T31789] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1822.594635][T31933] netlink: 188 bytes leftover after parsing attributes in process `syz.5.8691'. [ 1822.605510][T31943] netlink: 'syz.4.8693': attribute type 39 has an invalid length. [ 1822.686993][T31789] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1822.792382][T19687] device hsr_slave_0 left promiscuous mode [ 1822.799172][T19687] bridge0: port 3(team0) entered disabled state [ 1822.853194][T19687] device bridge_slave_1 left promiscuous mode [ 1822.859576][T19687] bridge0: port 2(bridge_slave_1) entered disabled state [ 1822.902288][T19687] device bridge_slave_0 left promiscuous mode [ 1822.915128][T19687] bridge0: port 1(bridge_slave_0) entered disabled state [ 1822.981214][T19687] device veth1_macvtap left promiscuous mode [ 1823.001845][T19687] device veth0_macvtap left promiscuous mode [ 1823.162408][T31972] netlink: 'syz.0.8698': attribute type 11 has an invalid length. [ 1823.184564][T31972] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.8698'. [ 1823.224912][T31972] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1823.717331][T19687] device team_slave_1 left promiscuous mode [ 1823.727054][T19687] team0 (unregistering): Port device team_slave_1 removed [ 1823.805537][T19687] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1823.849308][T19687] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1824.128904][T19687] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1824.137906][T19687] bond0 (unregistering): Released all slaves [ 1824.227543][T31970] netlink: 132 bytes leftover after parsing attributes in process `syz.5.8695'. [ 1824.237555][T31969] netlink: 160 bytes leftover after parsing attributes in process `syz.0.8698'. [ 1824.248752][T31969] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1824.283080][T31978] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8700'. [ 1824.497325][T31789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1824.514626][T19695] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1824.532041][T19695] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1824.575507][T31789] 8021q: adding VLAN 0 to HW filter on device team0 [ 1824.620748][T19681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1824.632274][T19681] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1824.643547][T19681] bridge0: port 1(bridge_slave_0) entered blocking state [ 1824.650754][T19681] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1824.659931][T19681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1824.672308][T19681] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1824.681477][T19681] bridge0: port 2(bridge_slave_1) entered blocking state [ 1824.688602][T19681] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1824.726864][T19681] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1824.738881][T19681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1824.775842][T19681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1824.785867][T19681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1824.801148][T19681] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1824.824091][T19681] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1824.850084][T19681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1824.871941][T19681] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1824.881203][T19681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1824.890235][T19681] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1824.908909][T31989] netlink: 188 bytes leftover after parsing attributes in process `syz.2.8704'. [ 1824.933776][T19649] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1824.942497][T31988] delete_channel: no stack [ 1824.943467][T19649] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1824.961269][T31789] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1825.611167][T31998] netlink: 'syz.0.8706': attribute type 39 has an invalid length. [ 1826.163808][T32014] netlink: 'syz.2.8711': attribute type 11 has an invalid length. [ 1826.176761][T32014] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.8711'. [ 1826.198352][T32014] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1826.461639][T32012] netlink: 160 bytes leftover after parsing attributes in process `syz.2.8711'. [ 1826.477040][T32012] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1826.529517][T19653] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1826.547675][T19653] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1826.606811][T31789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1826.839904][T32024] netlink: 188 bytes leftover after parsing attributes in process `syz.2.8714'. [ 1826.881618][T32023] delete_channel: no stack [ 1827.034663][T32030] netlink: 132 bytes leftover after parsing attributes in process `syz.5.8712'. [ 1827.515294][T32035] delete_channel: no stack [ 1827.717834][T32041] __nla_validate_parse: 1 callbacks suppressed [ 1827.717855][T32041] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8717'. [ 1828.131569][T19689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1828.151724][T19689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1828.314296][T19685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1828.325101][T19685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1828.343216][T31789] device veth0_vlan entered promiscuous mode [ 1828.352053][T19685] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1828.370643][T19685] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1828.385128][T31789] device veth1_vlan entered promiscuous mode [ 1828.436929][T19685] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1828.453089][T19685] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1828.471395][T19685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1828.481531][T19685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1828.494974][T31789] device veth0_macvtap entered promiscuous mode [ 1828.509462][T31789] device veth1_macvtap entered promiscuous mode [ 1828.534722][T31789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1828.547735][T19685] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1828.558091][T19685] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1828.569337][T19685] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1828.579422][T19685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1828.596597][T31789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1828.606439][T19653] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1828.616260][T19653] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1828.632290][T31789] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1828.645129][T31789] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1828.657966][T31789] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1828.668251][T31789] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1829.804625][T19689] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1829.831616][T19689] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1829.863540][T19685] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1829.901886][T19689] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1829.909822][T19689] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1829.953429][T19685] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1830.228049][T32056] netlink: 180 bytes leftover after parsing attributes in process `syz.0.8722'. [ 1830.489417][T32058] netlink: 'syz.0.8722': attribute type 6 has an invalid length. [ 1830.534858][T32058] netlink: 164 bytes leftover after parsing attributes in process `syz.0.8722'. [ 1831.128833][T32067] netlink: 160 bytes leftover after parsing attributes in process `syz.5.8724'. [ 1831.251247][T32067] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1831.368527][T32067] netlink: 'syz.5.8724': attribute type 11 has an invalid length. [ 1831.428748][T32067] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.8724'. [ 1831.492237][T32067] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1832.695493][T32088] netlink: 132 bytes leftover after parsing attributes in process `syz.6.8729'. [ 1832.730640][T32092] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8732'. [ 1832.780508][T32093] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8730'. [ 1835.933654][T32108] netlink: 180 bytes leftover after parsing attributes in process `syz.0.8736'. [ 1835.997219][T32113] netlink: 'syz.0.8736': attribute type 6 has an invalid length. [ 1836.026321][T32113] netlink: 164 bytes leftover after parsing attributes in process `syz.0.8736'. [ 1836.313327][T32123] netlink: 160 bytes leftover after parsing attributes in process `syz.4.8742'. [ 1836.447120][T32126] netlink: 'syz.4.8742': attribute type 11 has an invalid length. [ 1836.479208][T32123] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1836.524484][T32126] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.8742'. [ 1836.628027][T32126] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1837.273346][T32143] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8746'. [ 1843.250426][T32166] netlink: 180 bytes leftover after parsing attributes in process `syz.2.8755'. [ 1843.267612][T32169] netlink: 'syz.2.8755': attribute type 6 has an invalid length. [ 1843.276478][T32169] netlink: 164 bytes leftover after parsing attributes in process `syz.2.8755'. [ 1843.411514][T32177] netlink: 160 bytes leftover after parsing attributes in process `syz.0.8757'. [ 1843.422069][T32177] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1843.502767][T32177] netlink: 'syz.0.8757': attribute type 11 has an invalid length. [ 1843.530564][T32177] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.8757'. [ 1843.571941][T32177] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1843.615944][T32180] netlink: 132 bytes leftover after parsing attributes in process `syz.6.8756'. [ 1846.125283][T32191] netlink: 144 bytes leftover after parsing attributes in process `syz.2.8758'. [ 1846.151306][T32191] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1847.250118][T32211] netlink: 132 bytes leftover after parsing attributes in process `syz.5.8764'. [ 1847.338467][T12902] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1847.348669][T12902] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1847.371854][T12902] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1847.391966][T12902] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1847.399929][T12902] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1847.409725][T12902] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1847.573833][T32204] delete_channel: no stack [ 1847.629469][T19681] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1848.460126][T19681] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1849.432967][T31099] Bluetooth: hci0: command 0x0409 tx timeout [ 1850.293168][T32222] netlink: 'syz.6.8768': attribute type 39 has an invalid length. [ 1850.366005][T32222] device hsr_slave_1 left promiscuous mode [ 1850.448255][T19681] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1850.576740][T19681] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1850.626064][T32230] netlink: 'syz.2.8769': attribute type 11 has an invalid length. [ 1850.645491][T32232] netlink: 144 bytes leftover after parsing attributes in process `syz.0.8771'. [ 1850.660173][T32230] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.8769'. [ 1850.680239][T32232] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1850.708250][T32230] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1850.740214][T32227] netlink: 160 bytes leftover after parsing attributes in process `syz.2.8769'. [ 1850.765655][T32227] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1850.899799][T32213] chnl_net:caif_netlink_parms(): no params data found [ 1851.445350][T32213] bridge0: port 1(bridge_slave_0) entered blocking state [ 1851.460875][T32213] bridge0: port 1(bridge_slave_0) entered disabled state [ 1851.491541][T32213] device bridge_slave_0 entered promiscuous mode [ 1851.510911][T31099] Bluetooth: hci0: command 0x041b tx timeout [ 1851.522033][T32213] bridge0: port 2(bridge_slave_1) entered blocking state [ 1851.549776][T32213] bridge0: port 2(bridge_slave_1) entered disabled state [ 1851.583259][T32213] device bridge_slave_1 entered promiscuous mode [ 1852.963577][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 1852.969979][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 1853.590709][T31099] Bluetooth: hci0: command 0x040f tx timeout [ 1854.452771][T32213] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1854.484217][T32213] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1854.622557][T32213] team0: Port device team_slave_0 added [ 1854.669222][T32213] team0: Port device team_slave_1 added [ 1854.842339][T32213] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1854.849375][T32213] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1854.897266][T32213] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1855.286987][T32269] delete_channel: no stack [ 1855.402283][T32213] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1855.409472][T32213] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1855.477804][T32213] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1855.685884][T31099] Bluetooth: hci0: command 0x0419 tx timeout [ 1857.593583][T32295] netlink: 'syz.2.8780': attribute type 39 has an invalid length. [ 1858.049563][T32304] netlink: 'syz.5.8782': attribute type 11 has an invalid length. [ 1858.066462][T32304] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.8782'. [ 1858.105468][T32304] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1860.318534][T32302] netlink: 160 bytes leftover after parsing attributes in process `syz.5.8782'. [ 1860.334774][T32302] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1860.444212][T32213] device hsr_slave_0 entered promiscuous mode [ 1860.463094][T32213] device hsr_slave_1 entered promiscuous mode [ 1860.469816][T32213] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1860.479252][T32213] Cannot create hsr debugfs directory [ 1860.573500][T19681] bond0: (slave wlan1): Releasing backup interface [ 1860.700698][T32311] netlink: 144 bytes leftover after parsing attributes in process `syz.0.8783'. [ 1860.751210][T32311] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1861.252610][T19681] device hsr_slave_0 left promiscuous mode [ 1861.291549][T19681] device team0 left promiscuous mode [ 1861.313095][T19681] device team_slave_1 left promiscuous mode [ 1861.354460][T19681] bridge0: port 3(team0) entered disabled state [ 1861.412646][T19681] device bridge_slave_1 left promiscuous mode [ 1861.418969][T19681] bridge0: port 2(bridge_slave_1) entered disabled state [ 1861.493371][T19681] device bridge_slave_0 left promiscuous mode [ 1861.515290][T19681] bridge0: port 1(bridge_slave_0) entered disabled state [ 1861.932228][T19681] device veth1_macvtap left promiscuous mode [ 1861.938358][T19681] device veth0_macvtap left promiscuous mode [ 1862.563915][T32355] netlink: 'syz.6.8794': attribute type 11 has an invalid length. [ 1862.584625][T32355] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.8794'. [ 1862.633598][T32355] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1863.015113][T19681] team0 (unregistering): Port device team_slave_1 removed [ 1863.093215][T19681] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1863.153644][T19681] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1863.615217][T19681] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1863.628414][T19681] bond0 (unregistering): Released all slaves [ 1863.762155][T32338] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8788'. [ 1863.774978][T32353] netlink: 160 bytes leftover after parsing attributes in process `syz.6.8794'. [ 1863.798781][T32353] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1865.275228][T12902] Bluetooth: hci2: command 0x0406 tx timeout [ 1866.633225][T32383] netlink: 144 bytes leftover after parsing attributes in process `syz.6.8800'. [ 1867.134891][T32383] team0: Port device team_slave_0 removed [ 1867.188449][T32383] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1869.616387][T32385] netlink: 'syz.0.8801': attribute type 1 has an invalid length. [ 1869.626681][T32385] netlink: 152 bytes leftover after parsing attributes in process `syz.0.8801'. [ 1870.479890][T32213] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1870.543495][T32425] netlink: 180 bytes leftover after parsing attributes in process `syz.2.8806'. [ 1870.564778][T32428] netlink: 'syz.2.8806': attribute type 6 has an invalid length. [ 1870.584836][T32428] netlink: 164 bytes leftover after parsing attributes in process `syz.2.8806'. [ 1870.960223][T32431] netlink: 'syz.2.8807': attribute type 11 has an invalid length. [ 1870.978566][T32431] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.8807'. [ 1871.000914][T32431] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1874.795412][T32213] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1874.812759][T32430] netlink: 160 bytes leftover after parsing attributes in process `syz.2.8807'. [ 1874.822156][T32430] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1874.848246][T32213] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1874.913544][T32213] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1875.083928][T32213] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1875.098969][T19649] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1875.121118][T19649] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1875.132360][T32213] 8021q: adding VLAN 0 to HW filter on device team0 [ 1875.154242][T19649] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1875.174274][T19649] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1875.219913][T19649] bridge0: port 1(bridge_slave_0) entered blocking state [ 1875.227381][T19649] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1875.282866][T19649] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1875.318174][T32462] netlink: 144 bytes leftover after parsing attributes in process `syz.2.8813'. [ 1875.386217][T32462] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1875.456326][T19681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1875.495418][T19681] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1875.552378][T19681] bridge0: port 2(bridge_slave_1) entered blocking state [ 1875.559605][T19681] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1875.622456][T19681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1875.638607][T19681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1875.710927][T19681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1875.747747][T19681] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1875.814146][T19681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1875.853988][T19681] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1875.903555][T19681] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1875.967663][T32473] netlink: 132 bytes leftover after parsing attributes in process `syz.6.8811'. [ 1876.133574][T19681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1876.173315][T19681] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1876.231416][T19681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1876.266419][T19681] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1876.296124][T32213] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1876.598944][T32482] netlink: 188 bytes leftover after parsing attributes in process `syz.2.8816'. [ 1876.661303][T32481] delete_channel: no stack [ 1876.861099][T32493] sctp: [Deprecated]: syz.0.8818 (pid 32493) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1876.861099][T32493] Use struct sctp_sack_info instead [ 1876.888425][T32494] sctp: [Deprecated]: syz.0.8818 (pid 32494) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1876.888425][T32494] Use struct sctp_sack_info instead [ 1877.268393][T32503] delete_channel: no stack [ 1877.274543][T19653] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1877.298451][T19653] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1877.325459][T32213] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1878.861541][T19653] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1878.880812][T19653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1878.950441][T19653] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1878.959069][T19653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1878.987955][T19653] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1879.008355][T19653] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1879.032388][T32213] device veth0_vlan entered promiscuous mode [ 1879.066666][T32213] device veth1_vlan entered promiscuous mode [ 1879.144065][T19681] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1879.153385][T19681] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1879.184201][T19681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1879.198108][T19681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1879.219435][T32213] device veth0_macvtap entered promiscuous mode [ 1879.235151][T32213] device veth1_macvtap entered promiscuous mode [ 1879.269220][T32213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1879.288809][T32213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1879.313326][T32213] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1879.320876][T19687] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1879.334900][T19687] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1879.357590][T19687] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1879.377195][T19687] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1879.392503][T32213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1879.413439][T32213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1879.448836][T32213] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1879.471260][T19687] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1879.491278][T19687] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1879.505750][T32213] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1879.525397][T32213] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1879.540431][T32213] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1879.559642][T32213] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1880.650405][T19687] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1880.658317][T19687] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1880.705028][T19685] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1880.732972][T19687] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1880.740359][T19685] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1880.768174][T19687] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1880.805480][T32553] netlink: 144 bytes leftover after parsing attributes in process `syz.0.8826'. [ 1880.883241][T32553] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1881.867119][T32574] netlink: 188 bytes leftover after parsing attributes in process `syz.6.8830'. [ 1882.006203][T32579] FAULT_INJECTION: forcing a failure. [ 1882.006203][T32579] name failslab, interval 1, probability 0, space 0, times 0 [ 1882.082346][T32579] CPU: 0 PID: 32579 Comm: syz.4.8831 Not tainted syzkaller #0 [ 1882.089991][T32579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1882.100089][T32579] Call Trace: [ 1882.103402][T32579] [ 1882.106365][T32579] dump_stack_lvl+0x188/0x24e [ 1882.111104][T32579] ? show_regs_print_info+0x12/0x12 [ 1882.116350][T32579] ? load_image+0x400/0x400 [ 1882.120884][T32579] ? __might_sleep+0xd0/0xd0 [ 1882.125511][T32579] ? __lock_acquire+0x7d10/0x7d10 [ 1882.130587][T32579] should_fail_ex+0x399/0x4d0 [ 1882.135344][T32579] should_failslab+0x5/0x20 [ 1882.139900][T32579] slab_pre_alloc_hook+0x59/0x310 [ 1882.144971][T32579] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 1882.150755][T32579] __kmem_cache_alloc_node+0x4f/0x260 [ 1882.156178][T32579] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 1882.161952][T32579] __kmalloc+0xa0/0x240 [ 1882.166163][T32579] tomoyo_realpath_from_path+0xdf/0x5d0 [ 1882.171794][T32579] ? tomoyo_path_number_perm+0x205/0x650 [ 1882.177477][T32579] tomoyo_path_number_perm+0x22f/0x650 [ 1882.183000][T32579] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1882.188515][T32579] ? ksys_write+0x1c0/0x250 [ 1882.193074][T32579] ? common_file_perm+0x171/0x1c0 [ 1882.198180][T32579] ? __fget_files+0x28/0x4b0 [ 1882.202820][T32579] ? __fget_files+0x28/0x4b0 [ 1882.207598][T32579] security_file_ioctl+0x6c/0xa0 [ 1882.212592][T32579] __se_sys_ioctl+0x48/0x170 [ 1882.217235][T32579] do_syscall_64+0x4c/0xa0 [ 1882.221731][T32579] ? clear_bhb_loop+0x60/0xb0 [ 1882.226462][T32579] ? clear_bhb_loop+0x60/0xb0 [ 1882.231193][T32579] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1882.237135][T32579] RIP: 0033:0x7fe3d239bf79 [ 1882.241596][T32579] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1882.261258][T32579] RSP: 002b:00007fe3d3284028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1882.269715][T32579] RAX: ffffffffffffffda RBX: 00007fe3d2616090 RCX: 00007fe3d239bf79 [ 1882.277739][T32579] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 000000000000000a [ 1882.285754][T32579] RBP: 00007fe3d3284090 R08: 0000000000000000 R09: 0000000000000000 [ 1882.293798][T32579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1882.301815][T32579] R13: 00007fe3d2616128 R14: 00007fe3d2616090 R15: 00007fff59d0de78 [ 1882.309853][T32579] [ 1882.350542][T32579] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1882.483371][T32572] delete_channel: no stack [ 1882.993482][T32591] delete_channel: no stack [ 1883.409344][T32602] netlink: 132 bytes leftover after parsing attributes in process `syz.6.8834'. [ 1886.138922][T32640] netlink: 144 bytes leftover after parsing attributes in process `syz.6.8844'. [ 1886.155964][T32640] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1886.748039][T32664] delete_channel: no stack [ 1887.029781][T32673] netlink: 188 bytes leftover after parsing attributes in process `syz.0.8847'. [ 1887.076434][T32669] delete_channel: no stack [ 1887.096366][T32671] netlink: 180 bytes leftover after parsing attributes in process `syz.6.8848'. [ 1887.142000][T32671] netlink: 'syz.6.8848': attribute type 6 has an invalid length. [ 1887.180489][T32671] netlink: 164 bytes leftover after parsing attributes in process `syz.6.8848'. [ 1887.380528][T32685] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8851'. [ 1888.887286][T32704] netlink: 'syz.4.8858': attribute type 11 has an invalid length. [ 1888.932823][T32704] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.8858'. [ 1888.987032][T32704] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1890.673895][T32710] delete_channel: no stack [ 1891.448703][T32697] netlink: 144 bytes leftover after parsing attributes in process `syz.0.8857'. [ 1891.458805][T32697] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1891.481897][T32703] netlink: 160 bytes leftover after parsing attributes in process `syz.4.8858'. [ 1891.512321][T32703] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1891.872427][T32719] netlink: 180 bytes leftover after parsing attributes in process `syz.6.8864'. [ 1894.659300][T32719] netlink: 'syz.6.8864': attribute type 6 has an invalid length. [ 1894.710041][T32719] netlink: 164 bytes leftover after parsing attributes in process `syz.6.8864'. [ 1895.074066][T32749] netlink: 144 bytes leftover after parsing attributes in process `syz.5.8871'. [ 1895.121763][T32749] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1895.182998][T32751] netlink: 160 bytes leftover after parsing attributes in process `syz.0.8872'. [ 1895.239969][T32751] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1895.694207][T32753] netlink: 'syz.0.8872': attribute type 11 has an invalid length. [ 1895.759030][T32753] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.8872'. [ 1895.876358][T32753] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1895.977286][T32756] delete_channel: no stack [ 1895.983852][T32750] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1896.653525][ T309] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8877'. [ 1896.713090][ T307] netlink: 180 bytes leftover after parsing attributes in process `syz.5.8879'. [ 1897.081231][ T311] netlink: 'syz.5.8879': attribute type 6 has an invalid length. [ 1897.089066][ T311] netlink: 164 bytes leftover after parsing attributes in process `syz.5.8879'. [ 1897.598805][ T321] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8882'. [ 1897.705606][ T322] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8883'. [ 1899.838999][ T331] FAULT_INJECTION: forcing a failure. [ 1899.838999][ T331] name failslab, interval 1, probability 0, space 0, times 0 [ 1899.921118][ T331] CPU: 1 PID: 331 Comm: syz.4.8885 Not tainted syzkaller #0 [ 1899.928493][ T331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1899.938607][ T331] Call Trace: [ 1899.941932][ T331] [ 1899.944933][ T331] dump_stack_lvl+0x188/0x24e [ 1899.949685][ T331] ? show_regs_print_info+0x12/0x12 [ 1899.954953][ T331] ? load_image+0x400/0x400 [ 1899.959513][ T331] ? __lock_acquire+0x7d10/0x7d10 [ 1899.964610][ T331] should_fail_ex+0x399/0x4d0 [ 1899.969359][ T331] should_failslab+0x5/0x20 [ 1899.973923][ T331] slab_pre_alloc_hook+0x59/0x310 [ 1899.979002][ T331] ? verify_lock_unused+0x140/0x140 [ 1899.984275][ T331] ? bpf_test_init+0x9f/0x140 [ 1899.989015][ T331] __kmem_cache_alloc_node+0x4f/0x260 [ 1899.994448][ T331] ? bpf_test_init+0x9f/0x140 [ 1899.999178][ T331] __kmalloc+0xa0/0x240 [ 1900.003414][ T331] bpf_test_init+0x9f/0x140 [ 1900.007979][ T331] bpf_prog_test_run_xdp+0x484/0xf10 [ 1900.013335][ T331] ? dev_put+0x80/0x80 [ 1900.017471][ T331] ? dev_put+0x80/0x80 [ 1900.021598][ T331] bpf_prog_test_run+0x31e/0x390 [ 1900.026607][ T331] __sys_bpf+0x62b/0x780 [ 1900.030913][ T331] ? bpf_link_show_fdinfo+0x380/0x380 [ 1900.036361][ T331] ? lock_chain_count+0x20/0x20 [ 1900.041294][ T331] __x64_sys_bpf+0x78/0x90 [ 1900.045791][ T331] do_syscall_64+0x4c/0xa0 [ 1900.050273][ T331] ? clear_bhb_loop+0x60/0xb0 [ 1900.055006][ T331] ? clear_bhb_loop+0x60/0xb0 [ 1900.059737][ T331] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1900.065673][ T331] RIP: 0033:0x7fe3d239bf79 [ 1900.070125][ T331] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1900.089779][ T331] RSP: 002b:00007fe3d32a5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1900.098250][ T331] RAX: ffffffffffffffda RBX: 00007fe3d2615fa0 RCX: 00007fe3d239bf79 [ 1900.106276][ T331] RDX: 000000000000003e RSI: 0000200000000640 RDI: 000000000000000a [ 1900.114289][ T331] RBP: 00007fe3d32a5090 R08: 0000000000000000 R09: 0000000000000000 [ 1900.122299][ T331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1900.130316][ T331] R13: 00007fe3d2616038 R14: 00007fe3d2615fa0 R15: 00007fff59d0de78 [ 1900.138354][ T331] [ 1900.329869][ T332] delete_channel: no stack [ 1902.306105][ T355] netlink: 144 bytes leftover after parsing attributes in process `syz.4.8893'. [ 1903.000769][ T355] team0: Port device team_slave_0 removed [ 1903.023723][ T355] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1903.489852][ T376] netlink: 'syz.4.8899': attribute type 10 has an invalid length. [ 1903.545341][ T378] netlink: 'syz.4.8899': attribute type 1 has an invalid length. [ 1903.601996][ T378] netlink: 105120 bytes leftover after parsing attributes in process `syz.4.8899'. [ 1903.955815][ T376] team0: Port device veth0_to_hsr added [ 1903.999746][ T382] netlink: 180 bytes leftover after parsing attributes in process `syz.0.8900'. [ 1904.018759][ T377] netlink: 132 bytes leftover after parsing attributes in process `syz.5.8897'. [ 1904.048527][ T378] netlink: 'syz.4.8899': attribute type 10 has an invalid length. [ 1904.105721][ T378] team0: Port device macvlan1 added [ 1904.142320][ T384] netlink: 'syz.0.8900': attribute type 6 has an invalid length. [ 1904.237433][ T384] netlink: 164 bytes leftover after parsing attributes in process `syz.0.8900'. [ 1904.948244][ T407] netlink: 144 bytes leftover after parsing attributes in process `syz.2.8911'. [ 1905.046010][ T407] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1906.624249][ T430] netlink: 180 bytes leftover after parsing attributes in process `syz.4.8918'. [ 1907.109793][ T434] netlink: 'syz.4.8918': attribute type 6 has an invalid length. [ 1907.141874][ T434] netlink: 164 bytes leftover after parsing attributes in process `syz.4.8918'. [ 1907.240110][ T447] netlink: 132 bytes leftover after parsing attributes in process `syz.6.8922'. [ 1907.363442][ T449] FAULT_INJECTION: forcing a failure. [ 1907.363442][ T449] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1907.481464][ T449] CPU: 0 PID: 449 Comm: syz.5.8924 Not tainted syzkaller #0 [ 1907.488835][ T449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1907.498941][ T449] Call Trace: [ 1907.502263][ T449] [ 1907.505229][ T449] dump_stack_lvl+0x188/0x24e [ 1907.509985][ T449] ? show_regs_print_info+0x12/0x12 [ 1907.515241][ T449] ? load_image+0x400/0x400 [ 1907.519803][ T449] ? __lock_acquire+0x7d10/0x7d10 [ 1907.524882][ T449] ? __virt_addr_valid+0x188/0x540 [ 1907.530063][ T449] should_fail_ex+0x399/0x4d0 [ 1907.534894][ T449] _copy_from_user+0x2c/0x170 [ 1907.539618][ T449] iovec_from_user+0x143/0x360 [ 1907.544453][ T449] __import_iovec+0x6d/0x500 [ 1907.549098][ T449] ? __might_fault+0xa6/0x120 [ 1907.553823][ T449] import_iovec+0x6f/0xa0 [ 1907.558207][ T449] ___sys_recvmsg+0x4b6/0x590 [ 1907.562955][ T449] ? __sys_recvmsg+0x290/0x290 [ 1907.567789][ T449] ? common_file_perm+0x171/0x1c0 [ 1907.572878][ T449] ? __fget_files+0x43d/0x4b0 [ 1907.577623][ T449] __x64_sys_recvmsg+0x205/0x2e0 [ 1907.582625][ T449] ? ___sys_recvmsg+0x590/0x590 [ 1907.587557][ T449] ? lockdep_hardirqs_on+0x94/0x140 [ 1907.592811][ T449] do_syscall_64+0x4c/0xa0 [ 1907.597277][ T449] ? clear_bhb_loop+0x60/0xb0 [ 1907.602018][ T449] ? clear_bhb_loop+0x60/0xb0 [ 1907.606756][ T449] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1907.612723][ T449] RIP: 0033:0x7fb2dcd9bf79 [ 1907.617179][ T449] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1907.636834][ T449] RSP: 002b:00007fb2ddd3f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1907.645359][ T449] RAX: ffffffffffffffda RBX: 00007fb2dd015fa0 RCX: 00007fb2dcd9bf79 [ 1907.653391][ T449] RDX: 0000000000010000 RSI: 0000200000000040 RDI: 0000000000000003 [ 1907.661411][ T449] RBP: 00007fb2ddd3f090 R08: 0000000000000000 R09: 0000000000000000 [ 1907.669437][ T449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1907.677448][ T449] R13: 00007fb2dd016038 R14: 00007fb2dd015fa0 R15: 00007ffcc05f3e98 [ 1907.685480][ T449] [ 1910.358536][ T486] netlink: 'syz.4.8933': attribute type 39 has an invalid length. [ 1911.497089][ T486] device hsr_slave_1 left promiscuous mode [ 1911.751265][ T494] netlink: 180 bytes leftover after parsing attributes in process `syz.5.8937'. [ 1911.801371][ T505] netlink: 'syz.5.8937': attribute type 6 has an invalid length. [ 1911.868042][ T505] netlink: 164 bytes leftover after parsing attributes in process `syz.5.8937'. [ 1912.428840][ T519] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1912.683989][T12902] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1912.694491][T12902] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1912.705292][T12902] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1912.713436][T12902] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1912.742960][T12902] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1912.755328][T12902] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1913.053225][ T535] netlink: 132 bytes leftover after parsing attributes in process `syz.5.8944'. [ 1914.394115][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.400599][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 1914.790514][T12902] Bluetooth: hci1: command 0x0409 tx timeout [ 1915.957712][ T539] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8951'. [ 1915.970573][ T543] netlink: 'syz.6.8953': attribute type 39 has an invalid length. [ 1916.295799][ T557] netlink: 180 bytes leftover after parsing attributes in process `syz.6.8955'. [ 1916.520903][ T560] netlink: 'syz.6.8955': attribute type 6 has an invalid length. [ 1916.528733][ T560] netlink: 164 bytes leftover after parsing attributes in process `syz.6.8955'. [ 1916.584923][ T523] chnl_net:caif_netlink_parms(): no params data found [ 1916.734725][T19681] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1916.870539][T12902] Bluetooth: hci1: command 0x041b tx timeout [ 1917.216251][T19681] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1917.608043][T19681] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1917.754406][ T523] bridge0: port 1(bridge_slave_0) entered blocking state [ 1917.765186][ T523] bridge0: port 1(bridge_slave_0) entered disabled state [ 1917.798608][ T523] device bridge_slave_0 entered promiscuous mode [ 1917.863256][ T523] bridge0: port 2(bridge_slave_1) entered blocking state [ 1917.882719][ T523] bridge0: port 2(bridge_slave_1) entered disabled state [ 1917.927121][ T523] device bridge_slave_1 entered promiscuous mode [ 1918.090825][ T523] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1918.183038][ T523] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1918.218290][ T588] netlink: 160 bytes leftover after parsing attributes in process `syz.4.8964'. [ 1918.275062][ T588] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1918.319198][ T589] netlink: 'syz.4.8964': attribute type 11 has an invalid length. [ 1918.338063][ T589] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.8964'. [ 1918.421047][ T589] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1918.596830][ T523] team0: Port device team_slave_0 added [ 1918.621264][ T593] netlink: 'syz.6.8965': attribute type 39 has an invalid length. [ 1918.737013][T19681] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1918.841655][ T523] team0: Port device team_slave_1 added [ 1918.908797][ T602] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8966'. [ 1918.957783][T31099] Bluetooth: hci1: command 0x040f tx timeout [ 1919.048337][ T523] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1919.143834][ T523] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1919.234273][ T523] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1919.304347][ T523] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1919.360531][ T523] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1919.580391][ T523] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1919.780433][ T605] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8968'. [ 1920.231339][ T613] netlink: 'syz.5.8971': attribute type 2 has an invalid length. [ 1920.239156][ T613] netlink: 'syz.5.8971': attribute type 1 has an invalid length. [ 1920.267685][ T613] netlink: 152 bytes leftover after parsing attributes in process `syz.5.8971'. [ 1920.736721][ T619] netlink: 'syz.5.8973': attribute type 1 has an invalid length. [ 1920.763892][ T619] netlink: 105120 bytes leftover after parsing attributes in process `syz.5.8973'. [ 1921.030591][T12902] Bluetooth: hci1: command 0x0419 tx timeout [ 1921.750086][ T523] device hsr_slave_0 entered promiscuous mode [ 1921.762400][ T523] device hsr_slave_1 entered promiscuous mode [ 1921.770166][ T523] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1921.796440][ T523] Cannot create hsr debugfs directory [ 1921.819897][ T618] netlink: 'syz.5.8973': attribute type 10 has an invalid length. [ 1921.847247][ T618] team0: Port device veth0_to_hsr added [ 1921.867686][ T619] netlink: 'syz.5.8973': attribute type 10 has an invalid length. [ 1921.931725][ T624] delete_channel: no stack [ 1923.066961][ T642] netlink: 'syz.6.8978': attribute type 39 has an invalid length. [ 1923.921970][ T666] delete_channel: no stack [ 1923.963920][ T672] netlink: 'syz.2.8986': attribute type 10 has an invalid length. [ 1924.017890][ T675] netlink: 'syz.2.8986': attribute type 1 has an invalid length. [ 1924.055633][ T672] device veth0_to_hsr entered promiscuous mode [ 1924.057108][ T675] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.8986'. [ 1924.145407][ T672] team0: Port device veth0_to_hsr added [ 1924.301918][ T675] netlink: 'syz.2.8986': attribute type 10 has an invalid length. [ 1927.739928][ T523] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1927.810089][ T523] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1927.854575][T19681] device hsr_slave_0 left promiscuous mode [ 1927.864773][T19681] bridge0: port 3(team0) entered disabled state [ 1927.885478][T19681] device bridge_slave_1 left promiscuous mode [ 1927.894463][T19681] bridge0: port 2(bridge_slave_1) entered disabled state [ 1927.906649][T19681] device bridge_slave_0 left promiscuous mode [ 1927.915347][T19681] bridge0: port 1(bridge_slave_0) entered disabled state [ 1927.968716][T19681] device veth1_macvtap left promiscuous mode [ 1927.985361][T19681] device veth0_macvtap left promiscuous mode [ 1928.833401][ T704] delete_channel: no stack [ 1929.219398][T19681] device team_slave_1 left promiscuous mode [ 1929.231446][T19681] team0 (unregistering): Port device team_slave_1 removed [ 1929.352258][T19681] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1929.463302][T19681] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1929.843921][T19681] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1929.853254][T19681] bond0 (unregistering): Released all slaves [ 1929.948410][ T523] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1930.017989][ T523] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1931.840377][T12902] Bluetooth: hci4: command 0x0406 tx timeout [ 1932.005246][ T523] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1932.025605][ T523] 8021q: adding VLAN 0 to HW filter on device team0 [ 1932.032878][T19689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1932.045357][T19689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1932.074220][T19689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1932.092871][T19689] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1932.104962][T19689] bridge0: port 1(bridge_slave_0) entered blocking state [ 1932.112165][T19689] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1932.120884][T19689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1932.130165][T19689] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1932.139244][T19689] bridge0: port 2(bridge_slave_1) entered blocking state [ 1932.146473][T19689] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1932.155235][T19689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1932.174442][T19689] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1932.190169][T19689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1932.209481][T19689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1932.221959][T19689] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1932.240920][ T523] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1932.251488][ T523] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1932.276972][T19689] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1932.291261][T19689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1932.312994][T19689] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1932.322696][T19689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1932.332776][T19689] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1932.344787][T19689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1932.355466][T19689] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1932.367627][T19689] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1932.614131][T13410] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1932.626590][T13410] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1932.659797][ T523] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1932.685501][T19689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1932.714562][T19689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1933.149588][ T523] device veth0_vlan entered promiscuous mode [ 1933.205634][T13410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1933.226523][T13410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1933.268668][T13410] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1933.326268][T13410] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1933.384876][ T523] device veth1_vlan entered promiscuous mode [ 1933.472484][ T523] device veth0_macvtap entered promiscuous mode [ 1933.508973][T19685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1933.559268][T19685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1933.622482][ T523] device veth1_macvtap entered promiscuous mode [ 1933.637178][ T760] netlink: 180 bytes leftover after parsing attributes in process `syz.4.9007'. [ 1933.705186][T19685] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1933.725850][T19685] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1933.941501][ T762] netlink: 'syz.4.9007': attribute type 6 has an invalid length. [ 1933.952582][ T768] raw_sendmsg: syz.2.9008 forgot to set AF_INET. Fix it! [ 1933.963513][ T762] netlink: 164 bytes leftover after parsing attributes in process `syz.4.9007'. [ 1934.097572][ T523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1934.160303][ T523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1934.210440][ T523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1934.232208][ T523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1934.278170][ T523] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1934.314698][ T768] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9008'. [ 1934.350578][T19685] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1934.360117][T19685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1934.385671][ T523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1934.411862][ T523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1934.432181][ T523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1934.463447][ T523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1934.492030][ T523] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1934.531058][T13410] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1934.539814][T13410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1934.576987][ T523] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1934.607252][ T523] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1934.640337][ T523] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1934.682232][ T523] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1939.972748][T19695] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1940.010519][T19695] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1940.028011][ T621] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1940.057275][ T621] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1940.065957][ T621] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1940.077070][ T621] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1940.984455][ T823] netlink: 160 bytes leftover after parsing attributes in process `syz.2.9025'. [ 1940.999066][ T823] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1941.327831][ T824] netlink: 'syz.2.9025': attribute type 11 has an invalid length. [ 1941.369594][ T824] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.9025'. [ 1941.428585][ T824] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1941.456825][ T826] netlink: 160 bytes leftover after parsing attributes in process `syz.5.9026'. [ 1941.480065][ T826] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1941.801994][ T827] netlink: 'syz.5.9026': attribute type 11 has an invalid length. [ 1941.812769][ T827] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.9026'. [ 1941.840625][ T827] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1942.047970][ T834] netlink: 180 bytes leftover after parsing attributes in process `syz.0.9028'. [ 1942.423800][ T834] netlink: 'syz.0.9028': attribute type 6 has an invalid length. [ 1942.455364][ T834] netlink: 164 bytes leftover after parsing attributes in process `syz.0.9028'. [ 1942.758447][ T836] netlink: 180 bytes leftover after parsing attributes in process `syz.2.9029'. [ 1942.800712][ T849] netlink: 'syz.2.9029': attribute type 6 has an invalid length. [ 1942.815100][ T849] netlink: 164 bytes leftover after parsing attributes in process `syz.2.9029'. [ 1943.514812][ T863] netlink: 'syz.6.9038': attribute type 11 has an invalid length. [ 1943.531871][ T863] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.9038'. [ 1943.557996][ T863] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1946.310613][ T862] netlink: 160 bytes leftover after parsing attributes in process `syz.6.9038'. [ 1946.320168][ T862] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1946.861088][ T885] netlink: 160 bytes leftover after parsing attributes in process `syz.6.9045'. [ 1946.899001][ T885] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1947.610602][ T891] delete_channel: no stack [ 1948.240778][ T924] netlink: 160 bytes leftover after parsing attributes in process `syz.6.9054'. [ 1948.271483][ T924] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1948.353239][ T909] netlink: 180 bytes leftover after parsing attributes in process `syz.5.9052'. [ 1948.477154][ T929] netlink: 'syz.6.9054': attribute type 11 has an invalid length. [ 1948.492883][ T929] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.9054'. [ 1948.526737][ T929] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1950.394540][ T926] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9047'. [ 1950.430031][ T930] netlink: 'syz.5.9052': attribute type 6 has an invalid length. [ 1950.448230][ T930] netlink: 164 bytes leftover after parsing attributes in process `syz.5.9052'. [ 1950.851578][ T943] netlink: 160 bytes leftover after parsing attributes in process `syz.0.9060'. [ 1950.974728][ T943] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1951.166930][ T947] netlink: 'syz.0.9060': attribute type 11 has an invalid length. [ 1951.215252][ T947] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.9060'. [ 1951.266584][ T947] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1951.887080][ T961] netlink: 'syz.5.9061': attribute type 2 has an invalid length. [ 1951.896822][ T961] netlink: 'syz.5.9061': attribute type 1 has an invalid length. [ 1951.907110][ T961] netlink: 152 bytes leftover after parsing attributes in process `syz.5.9061'. [ 1952.458508][ T954] delete_channel: no stack [ 1954.101195][ T975] netlink: 160 bytes leftover after parsing attributes in process `syz.0.9070'. [ 1954.111881][ T975] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1954.218654][ T979] netlink: 132 bytes leftover after parsing attributes in process `syz.6.9072'. [ 1954.229724][ T975] netlink: 'syz.0.9070': attribute type 11 has an invalid length. [ 1954.250521][ T975] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.9070'. [ 1954.287973][ T975] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1954.769406][ T994] netlink: 'syz.4.9076': attribute type 1 has an invalid length. [ 1954.788581][ T994] netlink: 105120 bytes leftover after parsing attributes in process `syz.4.9076'. [ 1957.459799][ T1009] delete_channel: no stack [ 1957.702953][ T1008] netlink: 180 bytes leftover after parsing attributes in process `syz.6.9080'. [ 1957.741176][ T1022] netlink: 'syz.6.9080': attribute type 6 has an invalid length. [ 1957.772745][ T1022] netlink: 164 bytes leftover after parsing attributes in process `syz.6.9080'. [ 1958.117241][ T1035] netlink: 160 bytes leftover after parsing attributes in process `syz.2.9086'. [ 1958.147846][ T1035] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1958.329503][ T1037] netlink: 'syz.2.9086': attribute type 11 has an invalid length. [ 1958.345604][ T1037] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.9086'. [ 1958.361965][ T1037] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1958.438097][ T1046] netlink: 132 bytes leftover after parsing attributes in process `syz.5.9090'. [ 1958.457507][ T1045] netlink: 60 bytes leftover after parsing attributes in process `syz.4.9089'. [ 1958.489966][ T1045] netlink: 60 bytes leftover after parsing attributes in process `syz.4.9089'. [ 1958.503497][ T1045] netlink: 60 bytes leftover after parsing attributes in process `syz.4.9089'. [ 1958.999986][ T1065] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9095'. [ 1959.825396][ T1079] netlink: 180 bytes leftover after parsing attributes in process `syz.6.9099'. [ 1960.055898][ T1085] netlink: 'syz.6.9099': attribute type 6 has an invalid length. [ 1962.165066][ T1095] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1962.530249][ T1097] netlink: 'syz.4.9103': attribute type 11 has an invalid length. [ 1962.598822][ T1097] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1962.615512][ T1103] netlink: 'syz.0.9105': attribute type 37 has an invalid length. [ 1965.597971][ T1112] __nla_validate_parse: 4 callbacks suppressed [ 1965.597994][ T1112] netlink: 112 bytes leftover after parsing attributes in process `syz.0.9108'. [ 1966.486252][ T1117] delete_channel: no stack [ 1968.614875][ T1118] netlink: 188 bytes leftover after parsing attributes in process `syz.4.9113'. [ 1968.945891][ T1131] netlink: 180 bytes leftover after parsing attributes in process `syz.2.9118'. [ 1969.065255][ T1131] netlink: 'syz.2.9118': attribute type 6 has an invalid length. [ 1969.119879][ T1131] netlink: 164 bytes leftover after parsing attributes in process `syz.2.9118'. [ 1969.423225][ T1145] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9121'. [ 1969.595540][ T1148] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1969.671939][ T1148] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1972.148208][ T1148] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1972.164287][ T1148] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1972.724324][ T1174] netlink: 'syz.0.9127': attribute type 33 has an invalid length. [ 1972.801823][T31099] Bluetooth: hci0: command 0x0406 tx timeout [ 1972.830617][ T1174] netlink: 164 bytes leftover after parsing attributes in process `syz.0.9127'. [ 1972.855890][ T1176] netlink: 188 bytes leftover after parsing attributes in process `syz.5.9129'. [ 1972.927252][ T1175] delete_channel: no stack [ 1973.344273][ T1187] netlink: 180 bytes leftover after parsing attributes in process `syz.4.9133'. [ 1973.564181][ T1205] FAULT_INJECTION: forcing a failure. [ 1973.564181][ T1205] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1973.593869][ T1205] CPU: 0 PID: 1205 Comm: syz.5.9137 Not tainted syzkaller #0 [ 1973.601327][ T1205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1973.611427][ T1205] Call Trace: [ 1973.614751][ T1205] [ 1973.617722][ T1205] dump_stack_lvl+0x188/0x24e [ 1973.622497][ T1205] ? show_regs_print_info+0x12/0x12 [ 1973.627743][ T1205] ? load_image+0x400/0x400 [ 1973.632301][ T1205] ? __lock_acquire+0x7d10/0x7d10 [ 1973.637375][ T1205] ? snprintf+0xe5/0x140 [ 1973.641668][ T1205] should_fail_ex+0x399/0x4d0 [ 1973.646411][ T1205] _copy_to_user+0x2c/0x130 [ 1973.650971][ T1205] simple_read_from_buffer+0xe3/0x150 [ 1973.656391][ T1205] proc_fail_nth_read+0x1a6/0x220 [ 1973.661465][ T1205] ? proc_fault_inject_write+0x310/0x310 [ 1973.667151][ T1205] ? fsnotify_perm+0x248/0x550 [ 1973.671969][ T1205] ? proc_fault_inject_write+0x310/0x310 [ 1973.677644][ T1205] vfs_read+0x2de/0xa00 [ 1973.681854][ T1205] ? kernel_read+0x1e0/0x1e0 [ 1973.686498][ T1205] ? __fget_files+0x28/0x4b0 [ 1973.691152][ T1205] ? __fget_files+0x28/0x4b0 [ 1973.695792][ T1205] ? __fget_files+0x43d/0x4b0 [ 1973.700524][ T1205] ? __fdget_pos+0x2ae/0x360 [ 1973.705165][ T1205] ? ksys_read+0x71/0x250 [ 1973.709551][ T1205] ksys_read+0x14c/0x250 [ 1973.713855][ T1205] ? vfs_write+0xa30/0xa30 [ 1973.718341][ T1205] ? lockdep_hardirqs_on+0x94/0x140 [ 1973.723593][ T1205] do_syscall_64+0x4c/0xa0 [ 1973.728072][ T1205] ? clear_bhb_loop+0x60/0xb0 [ 1973.732810][ T1205] ? clear_bhb_loop+0x60/0xb0 [ 1973.737541][ T1205] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1973.743509][ T1205] RIP: 0033:0x7fb2dcd5c84e [ 1973.747984][ T1205] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1973.767650][ T1205] RSP: 002b:00007fb2ddd3efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1973.776120][ T1205] RAX: ffffffffffffffda RBX: 00007fb2ddd3f6c0 RCX: 00007fb2dcd5c84e [ 1973.784171][ T1205] RDX: 000000000000000f RSI: 00007fb2ddd3f0a0 RDI: 0000000000000004 [ 1973.792189][ T1205] RBP: 00007fb2ddd3f090 R08: 0000000000000000 R09: 0000000000000000 [ 1973.800205][ T1205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1973.808215][ T1205] R13: 00007fb2dd016038 R14: 00007fb2dd015fa0 R15: 00007ffcc05f3e98 [ 1973.816249][ T1205] [ 1975.833332][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 1975.839736][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 1976.203660][ T1187] netlink: 'syz.4.9133': attribute type 6 has an invalid length. [ 1976.224257][ T1187] netlink: 164 bytes leftover after parsing attributes in process `syz.4.9133'. [ 1976.728423][ T1224] netlink: 'syz.2.9143': attribute type 10 has an invalid length. [ 1976.930689][ T1234] netlink: 188 bytes leftover after parsing attributes in process `syz.0.9145'. [ 1976.966766][ T1232] delete_channel: no stack [ 1976.997658][ T1231] delete_channel: no stack [ 1977.360187][ T1245] netlink: 160 bytes leftover after parsing attributes in process `syz.0.9150'. [ 1977.375086][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1977.535303][ T1248] netlink: 'syz.0.9150': attribute type 11 has an invalid length. [ 1977.547834][ T1248] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.9150'. [ 1977.567916][ T1248] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1977.603976][ T1254] netlink: 180 bytes leftover after parsing attributes in process `syz.2.9152'. [ 1977.759580][ T1254] netlink: 'syz.2.9152': attribute type 6 has an invalid length. [ 1977.810550][ T1254] netlink: 164 bytes leftover after parsing attributes in process `syz.2.9152'. [ 1977.861487][ T1265] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9141'. [ 1981.956283][ T1297] netlink: 'syz.0.9162': attribute type 11 has an invalid length. [ 1981.982229][ T1297] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.9162'. [ 1982.032316][ T1298] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1982.454674][ T1283] netlink: 40 bytes leftover after parsing attributes in process `syz.6.9159'. [ 1982.493429][ T1283] bridge0: port 1(bridge_slave_0) entered disabled state [ 1982.615090][ T1283] device bridge_slave_0 left promiscuous mode [ 1982.624009][ T1283] bridge0: port 1(bridge_slave_0) entered disabled state [ 1982.661375][ T1296] netlink: 160 bytes leftover after parsing attributes in process `syz.0.9162'. [ 1982.683846][ T1296] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1982.891426][ T1305] delete_channel: no stack [ 1983.132804][ T1318] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.9170'. [ 1983.171753][ T1310] netlink: 180 bytes leftover after parsing attributes in process `syz.5.9167'. [ 1983.247634][ T1322] netlink: 'syz.5.9167': attribute type 6 has an invalid length. [ 1983.296503][ T1322] netlink: 164 bytes leftover after parsing attributes in process `syz.5.9167'. [ 1984.221904][ T1340] netlink: 160 bytes leftover after parsing attributes in process `syz.2.9176'. [ 1984.276164][ T1340] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1984.304060][ T1341] netlink: 'syz.2.9176': attribute type 11 has an invalid length. [ 1984.397457][ T1341] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.9176'. [ 1984.473241][ T1341] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1985.040759][ T1347] delete_channel: no stack [ 1985.094099][ T1345] netlink: 40 bytes leftover after parsing attributes in process `syz.5.9177'. [ 1985.300580][ T1345] bridge0: port 1(bridge_slave_0) entered disabled state [ 1985.761972][ T1345] device bridge_slave_0 left promiscuous mode [ 1985.790434][ T1345] bridge0: port 1(bridge_slave_0) entered disabled state [ 1988.867738][ T1361] netlink: 180 bytes leftover after parsing attributes in process `syz.4.9183'. [ 1988.891886][ T1370] netlink: 'syz.4.9183': attribute type 6 has an invalid length. [ 1988.911719][ T1370] netlink: 164 bytes leftover after parsing attributes in process `syz.4.9183'. [ 1989.618202][ T1393] netlink: 'syz.5.9192': attribute type 11 has an invalid length. [ 1989.715935][ T1393] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.9192'. [ 1989.806025][ T1393] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1990.017884][ T1390] netlink: 160 bytes leftover after parsing attributes in process `syz.5.9192'. [ 1990.072714][ T1390] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1990.243407][ T1401] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9191'. [ 1991.384444][ T1405] delete_channel: no stack [ 1993.683006][ T1427] netlink: 180 bytes leftover after parsing attributes in process `syz.6.9203'. [ 1993.764159][ T1421] netlink: 188 bytes leftover after parsing attributes in process `syz.2.9201'. [ 1993.819648][ T1420] delete_channel: no stack [ 1993.904799][ T1423] netlink: 'syz.6.9203': attribute type 6 has an invalid length. [ 1993.934707][ T1423] netlink: 164 bytes leftover after parsing attributes in process `syz.6.9203'. [ 1994.044942][ T1434] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9205'. [ 1994.090940][ T1434] bridge0: port 1(bridge_slave_0) entered disabled state [ 1994.276145][ T1434] device bridge_slave_0 left promiscuous mode [ 1994.321289][ T1434] bridge0: port 1(bridge_slave_0) entered disabled state [ 1995.227353][ T1441] netlink: 160 bytes leftover after parsing attributes in process `syz.6.9208'. [ 1995.260904][ T1441] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1995.503207][ T1450] delete_channel: no stack [ 1995.687201][ T1465] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9213'. [ 2001.710096][ T1485] netlink: 'syz.5.9219': attribute type 6 has an invalid length. [ 2001.735809][ T1485] netlink: 164 bytes leftover after parsing attributes in process `syz.5.9219'. [ 2001.763499][ T1484] netlink: 188 bytes leftover after parsing attributes in process `syz.2.9221'. [ 2001.815444][ T1483] delete_channel: no stack [ 2003.241517][ T1493] delete_channel: no stack [ 2004.706406][ T1494] netlink: 188 bytes leftover after parsing attributes in process `syz.5.9224'. [ 2004.715875][ T1497] netlink: 160 bytes leftover after parsing attributes in process `syz.2.9225'. [ 2004.727655][ T1497] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2004.852675][ T1503] delete_channel: no stack [ 2006.078355][ T1514] netlink: 144 bytes leftover after parsing attributes in process `syz.5.9230'. [ 2006.099015][ T1514] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 2006.433881][ T1523] delete_channel: no stack [ 2010.935921][ T1525] netlink: 'syz.4.9232': attribute type 6 has an invalid length. [ 2010.943878][ T1525] netlink: 164 bytes leftover after parsing attributes in process `syz.4.9232'. [ 2010.954725][ T1524] netlink: 188 bytes leftover after parsing attributes in process `syz.2.9233'. [ 2010.976966][ T1534] netlink: 160 bytes leftover after parsing attributes in process `syz.5.9236'. [ 2010.989178][ T1534] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2011.335435][ T1542] delete_channel: no stack [ 2011.964195][ T1540] delete_channel: no stack [ 2013.390008][ T1541] netlink: 188 bytes leftover after parsing attributes in process `syz.2.9238'. [ 2013.414797][ T1549] netlink: 144 bytes leftover after parsing attributes in process `syz.5.9242'. [ 2013.426221][ T1549] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 2013.695036][ T1567] netlink: 144 bytes leftover after parsing attributes in process `syz.4.9246'. [ 2013.711046][ T1567] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 2014.689122][ T1573] delete_channel: no stack [ 2014.801292][ T1576] netlink: 188 bytes leftover after parsing attributes in process `syz.2.9249'. [ 2015.106107][ T1586] delete_channel: no stack [ 2015.757074][T12902] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2015.777326][T12902] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2015.795739][ T4278] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2015.805267][ T4278] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2015.819325][ T4278] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 2015.828863][ T4278] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2017.779219][ T1583] netlink: 'syz.4.9250': attribute type 6 has an invalid length. [ 2017.788891][ T1583] netlink: 164 bytes leftover after parsing attributes in process `syz.4.9250'. [ 2017.910488][T31099] Bluetooth: hci3: command 0x0409 tx timeout [ 2018.019150][ T1608] netlink: 144 bytes leftover after parsing attributes in process `syz.6.9258'. [ 2018.071940][ T1608] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 2019.551283][ T1620] delete_channel: no stack [ 2020.000393][T31099] Bluetooth: hci3: command 0x041b tx timeout [ 2022.080431][T31099] Bluetooth: hci3: command 0x040f tx timeout [ 2023.630960][ T1621] netlink: 188 bytes leftover after parsing attributes in process `syz.6.9262'. [ 2023.641037][ T1624] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9260'. [ 2024.171281][T31099] Bluetooth: hci3: command 0x0419 tx timeout [ 2024.815679][ T1600] chnl_net:caif_netlink_parms(): no params data found [ 2024.892908][ T1643] netlink: 'syz.0.9267': attribute type 6 has an invalid length. [ 2024.905405][ T1643] netlink: 164 bytes leftover after parsing attributes in process `syz.0.9267'. [ 2026.216403][ T1657] delete_channel: no stack [ 2026.636028][ T1662] delete_channel: no stack [ 2028.630502][ T1658] netlink: 188 bytes leftover after parsing attributes in process `syz.5.9273'. [ 2028.639880][ T1661] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9274'. [ 2028.734997][ T1600] bridge0: port 1(bridge_slave_0) entered blocking state [ 2028.742402][ T1600] bridge0: port 1(bridge_slave_0) entered disabled state [ 2028.750872][ T1600] device bridge_slave_0 entered promiscuous mode [ 2028.760877][ T1600] bridge0: port 2(bridge_slave_1) entered blocking state [ 2028.768144][ T1600] bridge0: port 2(bridge_slave_1) entered disabled state [ 2028.776680][ T1600] device bridge_slave_1 entered promiscuous mode [ 2028.804637][ T1600] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2028.832874][ T1600] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2028.939566][ T1600] team0: Port device team_slave_0 added [ 2028.982403][ T1600] team0: Port device team_slave_1 added [ 2029.067081][ T1669] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2029.078468][ T1669] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2029.088070][ T1669] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2029.095684][ T1669] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2029.651692][T13410] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2029.750767][ T1600] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2029.776671][ T1600] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2029.876241][ T1600] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2031.876726][T13410] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2033.156330][ T1680] netlink: 132 bytes leftover after parsing attributes in process `syz.5.9276'. [ 2033.205178][ T1600] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2033.212373][ T1600] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2033.241240][ T1600] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2033.263079][ T1686] netlink: 132 bytes leftover after parsing attributes in process `syz.6.9281'. [ 2033.307494][T13410] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2033.402960][T13410] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2033.437676][ T1600] device hsr_slave_0 entered promiscuous mode [ 2033.444609][ T1600] device hsr_slave_1 entered promiscuous mode [ 2033.451759][ T1600] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2033.459479][ T1600] Cannot create hsr debugfs directory [ 2034.681175][ T1715] netlink: 144 bytes leftover after parsing attributes in process `syz.4.9287'. [ 2034.706075][ T1715] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 2036.219026][ T1740] netlink: 188 bytes leftover after parsing attributes in process `syz.6.9292'. [ 2036.261931][ T1739] delete_channel: no stack [ 2036.290776][ T1747] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9295'. [ 2037.273481][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 2037.279941][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 2037.941050][ T1600] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2039.350468][ T4278] Bluetooth: hci1: command 0x0406 tx timeout [ 2039.522629][ T1600] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2039.535638][ T1600] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2039.569172][ T1600] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2039.654766][T13410] device team0 left promiscuous mode [ 2039.660128][T13410] device team_slave_1 left promiscuous mode [ 2039.680458][T13410] device macvlan1 left promiscuous mode [ 2039.686208][T13410] device veth0_to_hsr left promiscuous mode [ 2039.697817][T13410] bridge0: port 3(team0) entered disabled state [ 2039.722950][T13410] device bridge_slave_1 left promiscuous mode [ 2039.729304][T13410] bridge0: port 2(bridge_slave_1) entered disabled state [ 2041.971529][T13410] device bridge_slave_0 left promiscuous mode [ 2041.977789][T13410] bridge0: port 1(bridge_slave_0) entered disabled state [ 2042.023880][T13410] device veth1_macvtap left promiscuous mode [ 2042.030012][T13410] device veth1_vlan left promiscuous mode [ 2042.039009][T13410] device veth0_vlan left promiscuous mode [ 2042.245430][T13410] team0 (unregistering): Port device macvlan1 removed [ 2042.395925][T13410] team0 (unregistering): Port device veth0_to_hsr removed [ 2042.493322][T13410] team0 (unregistering): Port device team_slave_1 removed [ 2042.564173][T13410] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2042.607408][T13410] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2042.891544][T13410] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 2042.900386][T13410] bond0 (unregistering): Released all slaves [ 2042.982533][ T1789] netlink: 132 bytes leftover after parsing attributes in process `syz.6.9300'. [ 2043.009975][ T1794] netlink: 144 bytes leftover after parsing attributes in process `syz.5.9303'. [ 2043.019850][ T1794] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 2043.169958][ T1600] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2043.184375][ T621] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2043.197310][ T621] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2043.208963][ T1600] 8021q: adding VLAN 0 to HW filter on device team0 [ 2043.526628][T19649] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2043.541388][T19649] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2043.550123][T19649] bridge0: port 1(bridge_slave_0) entered blocking state [ 2043.557339][T19649] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2043.584088][T19649] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2043.592454][T19649] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2043.602077][T19649] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2043.610792][T19649] bridge0: port 2(bridge_slave_1) entered blocking state [ 2043.617970][T19649] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2043.643082][T19689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2043.688361][ T623] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2043.736161][ T621] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2043.748978][ T621] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2043.759331][ T621] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2043.769414][ T621] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2043.778832][ T621] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2043.788433][ T621] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2043.798379][ T621] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2043.821440][ T1600] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2043.835104][ T1600] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2043.845479][ T621] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2043.857193][ T621] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2044.368228][ T1813] delete_channel: no stack [ 2044.392864][ T1816] netlink: 188 bytes leftover after parsing attributes in process `syz.4.9307'. [ 2044.431131][ T1812] delete_channel: no stack [ 2044.551214][T19649] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2044.580800][T19649] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2044.617189][ T1600] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2044.715287][ T1817] netlink: 'syz.5.9309': attribute type 6 has an invalid length. [ 2044.724570][ T1817] netlink: 164 bytes leftover after parsing attributes in process `syz.5.9309'. [ 2044.966026][T19689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2044.975936][T19689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2045.032348][T19689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2045.044351][T19689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2045.070097][T19689] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2045.091352][T19689] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2045.125349][ T1600] device veth0_vlan entered promiscuous mode [ 2050.148376][ T1600] device veth1_vlan entered promiscuous mode [ 2050.162313][ T1836] netlink: 144 bytes leftover after parsing attributes in process `syz.6.9315'. [ 2050.171621][ T1836] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 2050.323783][T13410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2050.333029][T13410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2050.368092][ T1600] device veth0_macvtap entered promiscuous mode [ 2050.398384][ T1600] device veth1_macvtap entered promiscuous mode [ 2050.432651][ T1600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2050.450313][ T1600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2050.471640][ T1600] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2050.483434][ T623] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2050.493271][ T623] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2050.503363][ T623] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2050.518207][ T623] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2050.591062][ T1600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2050.608658][ T1600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2050.621315][ T1600] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2050.629142][T13410] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2050.640858][T13410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2050.975374][ T1600] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2050.984598][ T1600] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2050.994044][ T1600] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2051.003281][ T1600] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2055.351428][ T1876] netlink: 144 bytes leftover after parsing attributes in process `syz.5.9327'. [ 2055.361452][ T1876] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 2055.463804][ T621] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2055.485300][ T621] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2055.532701][T19649] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2055.563526][T19649] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2055.581073][T19649] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2055.631459][T19689] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2055.855708][ T1890] netlink: 160 bytes leftover after parsing attributes in process `syz.2.9251'. [ 2055.888507][ T1890] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2058.891314][ T1906] netlink: 'syz.2.9333': attribute type 6 has an invalid length. [ 2058.899598][ T1906] netlink: 164 bytes leftover after parsing attributes in process `syz.2.9333'. [ 2058.916521][ T1910] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9334'. [ 2059.051639][ T1924] FAULT_INJECTION: forcing a failure. [ 2059.051639][ T1924] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2059.066273][ T1924] CPU: 1 PID: 1924 Comm: syz.6.9340 Not tainted syzkaller #0 [ 2059.073694][ T1924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 2059.083783][ T1924] Call Trace: [ 2059.087094][ T1924] [ 2059.090061][ T1924] dump_stack_lvl+0x188/0x24e [ 2059.094787][ T1924] ? show_regs_print_info+0x12/0x12 [ 2059.100020][ T1924] ? load_image+0x400/0x400 [ 2059.104554][ T1924] ? __lock_acquire+0x7d10/0x7d10 [ 2059.109621][ T1924] should_fail_ex+0x399/0x4d0 [ 2059.114339][ T1924] _copy_from_user+0x2c/0x170 [ 2059.119057][ T1924] __sys_bpf+0x2ea/0x780 [ 2059.123341][ T1924] ? bpf_link_show_fdinfo+0x380/0x380 [ 2059.128752][ T1924] ? lock_chain_count+0x20/0x20 [ 2059.133665][ T1924] __x64_sys_bpf+0x78/0x90 [ 2059.138117][ T1924] do_syscall_64+0x4c/0xa0 [ 2059.142573][ T1924] ? clear_bhb_loop+0x60/0xb0 [ 2059.147323][ T1924] ? clear_bhb_loop+0x60/0xb0 [ 2059.152029][ T1924] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2059.157946][ T1924] RIP: 0033:0x7f659ed9bf79 [ 2059.162418][ T1924] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2059.182052][ T1924] RSP: 002b:00007f659fcd9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2059.190502][ T1924] RAX: ffffffffffffffda RBX: 00007f659f015fa0 RCX: 00007f659ed9bf79 [ 2059.198493][ T1924] RDX: 0000000000000050 RSI: 0000200000000140 RDI: 000000000000000a [ 2059.206481][ T1924] RBP: 00007f659fcd9090 R08: 0000000000000000 R09: 0000000000000000 [ 2059.214471][ T1924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2059.222466][ T1924] R13: 00007f659f016038 R14: 00007f659f015fa0 R15: 00007ffc7231fe68 [ 2059.230471][ T1924] [ 2064.738640][ T1931] netlink: 144 bytes leftover after parsing attributes in process `syz.2.9339'. [ 2064.766302][ T1931] team0: Port device team_slave_0 removed [ 2064.805323][ T1931] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 2065.035654][ T1952] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9345'. [ 2065.760679][ T1958] netlink: 'syz.5.9349': attribute type 6 has an invalid length. [ 2065.784636][ T1958] netlink: 164 bytes leftover after parsing attributes in process `syz.5.9349'. [ 2070.857564][ T1988] delete_channel: no stack [ 2071.976950][T31099] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2071.986791][T31099] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2072.000250][T31099] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2072.009273][T31099] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2072.017682][T31099] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 2072.025771][T31099] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2074.070703][T31099] Bluetooth: hci5: command 0x0409 tx timeout [ 2074.751902][ T1991] netlink: 144 bytes leftover after parsing attributes in process `syz.6.9357'. [ 2074.761164][ T1991] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 2074.777890][ T1989] netlink: 188 bytes leftover after parsing attributes in process `syz.0.9356'. [ 2075.422481][ T2014] netlink: 'syz.5.9361': attribute type 6 has an invalid length. [ 2075.568133][ T2014] netlink: 164 bytes leftover after parsing attributes in process `syz.5.9361'. [ 2076.150406][T31099] Bluetooth: hci5: command 0x041b tx timeout [ 2078.231434][ T4278] Bluetooth: hci5: command 0x040f tx timeout [ 2080.314160][ T4278] Bluetooth: hci5: command 0x0419 tx timeout [ 2080.437730][ T2015] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9362'. [ 2080.503263][ T2028] netlink: 'syz.0.9365': attribute type 33 has an invalid length. [ 2080.511641][ T2028] netlink: 152 bytes leftover after parsing attributes in process `syz.0.9365'. [ 2080.522997][ T2029] netlink: 132 bytes leftover after parsing attributes in process `syz.5.9364'. [ 2080.782778][ T2000] chnl_net:caif_netlink_parms(): no params data found [ 2080.961246][ T2000] bridge0: port 1(bridge_slave_0) entered blocking state [ 2080.968682][ T2000] bridge0: port 1(bridge_slave_0) entered disabled state [ 2080.977353][ T2000] device bridge_slave_0 entered promiscuous mode [ 2080.986625][ T2000] bridge0: port 2(bridge_slave_1) entered blocking state [ 2080.994128][ T2000] bridge0: port 2(bridge_slave_1) entered disabled state [ 2081.002658][ T2000] device bridge_slave_1 entered promiscuous mode [ 2081.034069][ T2000] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2081.049659][ T2000] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2081.083122][ T2000] team0: Port device team_slave_0 added [ 2081.094458][ T2000] team0: Port device team_slave_1 added [ 2081.120238][ T2000] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2081.127516][ T2000] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2081.156939][ T2000] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2081.170629][ T2000] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2081.177721][ T2000] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2081.211783][ T2000] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2081.496256][ T2000] device hsr_slave_0 entered promiscuous mode [ 2081.554585][ T2000] device hsr_slave_1 entered promiscuous mode [ 2081.569058][ T2000] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2081.579899][ T2000] Cannot create hsr debugfs directory [ 2081.713087][ T2000] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 2081.723725][ T2000] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 2081.744037][ T2000] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 2081.754764][ T2000] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 2081.836268][ T2000] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2081.849743][T19653] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2081.859337][T19653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2081.885819][ T2000] 8021q: adding VLAN 0 to HW filter on device team0 [ 2081.896383][T19649] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2081.905811][T19649] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2081.914975][T19649] bridge0: port 1(bridge_slave_0) entered blocking state [ 2081.922172][T19649] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2081.930450][T19649] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2081.951284][T19653] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2081.962389][T19653] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2081.972191][T19653] bridge0: port 2(bridge_slave_1) entered blocking state [ 2081.979310][T19653] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2082.002926][T19649] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2082.018737][T19649] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2082.031687][T19649] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2082.041844][T19649] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2082.062054][T19649] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2082.070014][T19649] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2082.080005][T19649] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2082.091756][T19649] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2082.100919][T19649] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2082.120121][T19649] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2082.130477][T19649] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2082.144021][ T2000] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2082.395313][T19689] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2082.418261][T19681] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2082.428592][T19681] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2082.442693][ T2000] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2082.472989][T19689] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2082.557529][T19689] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2082.610366][T19689] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2082.829139][T19681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2082.843878][T19681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2082.878867][T19681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2082.895760][T19681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2082.915675][T19681] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2082.929140][T19681] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2082.939707][ T2000] device veth0_vlan entered promiscuous mode [ 2082.999292][ T2000] device veth1_vlan entered promiscuous mode [ 2083.059487][ T2000] device veth0_macvtap entered promiscuous mode [ 2083.069222][T19681] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2083.081809][T19681] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2083.093792][T19681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2083.104979][T19681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2083.116910][ T2000] device veth1_macvtap entered promiscuous mode [ 2083.149140][T19681] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2083.159889][T19681] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2083.178010][ T2000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2083.189468][ T2000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2083.207972][ T2000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2083.220847][ T2000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2083.235893][ T2000] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2083.266270][T19681] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2083.277997][T19681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2083.290166][ T2000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2083.302418][ T2000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2083.314178][ T2000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2083.324783][ T2000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2083.336379][ T2000] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2083.373599][T19681] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2083.386214][T19681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2083.405420][ T2000] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2083.418370][ T2000] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2083.427439][ T2000] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2083.441589][ T2000] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2083.578523][T19681] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2083.599142][T19681] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2083.629934][T19649] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2083.673757][T19649] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2083.683202][T19649] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2083.693798][T19649] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2084.096019][T19689] device hsr_slave_0 left promiscuous mode [ 2084.105673][T19689] device bridge_slave_1 left promiscuous mode [ 2084.113812][T19689] bridge0: port 2(bridge_slave_1) entered disabled state [ 2084.126958][T19689] device bridge_slave_0 left promiscuous mode [ 2084.138291][T19689] bridge0: port 1(bridge_slave_0) entered disabled state [ 2084.164946][T19689] device veth1_macvtap left promiscuous mode [ 2084.171338][T19689] device veth0_macvtap left promiscuous mode [ 2084.177464][T19689] device veth1_vlan left promiscuous mode [ 2084.183730][T19689] device veth0_vlan left promiscuous mode [ 2084.479835][T19689] team0 (unregistering): Port device macvlan1 removed [ 2084.711850][T19689] team0 (unregistering): Port device veth0_to_hsr removed [ 2084.799849][T19689] team0 (unregistering): Port device team_slave_1 removed [ 2084.869313][T19689] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2084.909464][T19689] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2085.177653][T19689] bond0 (unregistering): Released all slaves [ 2098.713149][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 2098.719602][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 2141.750420][T31099] Bluetooth: hci3: command 0x0406 tx timeout [ 2160.162824][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 2160.169209][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 2198.070292][ T4278] Bluetooth: hci5: command 0x0406 tx timeout [ 2221.593135][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 2221.599479][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 2283.032569][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 2283.038998][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 2344.474674][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 2344.481178][ T1269] ieee802154 phy1 wpan1: encryption failed: -22