last executing test programs: 7.512878487s ago: executing program 2 (id=1247): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r0 = socket$kcm(0x2b, 0x1, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0, &(0x7f0000000200)=[{}], 0x8, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0xb6, 0x8, 0x0, 0x0}}, 0x10) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_lsm={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="8510000004000000950080000000000018000000000000000000000000000002950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000000)=[0x0, 0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) setsockopt$sock_attach_bpf(r0, 0x6, 0x21, 0x0, 0x0) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000040)={'ip6_vti0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}) (async) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0xe9, 0x5, 0x0, 0x4, 0x0, 0x3, 0xd2dfc, 0x9, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xdfffffff, 0x1, @perf_bp={0x0, 0xe}, 0x2, 0x8000, 0x6, 0x8, 0x81, 0x4, 0x3, 0x0, 0xfffffffd, 0x0, 0x400000000002}, 0x0, 0xe, 0xffffffffffffffff, 0x0) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f0, &(0x7f0000000080)) 7.321321235s ago: executing program 2 (id=1250): socket$kcm(0x2, 0x200000000000001, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8, 0x4}, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8, 0x4}, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8000, 0x7}, 0x0, 0x0, 0x100000, 0x0, 0x5, 0x4, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8000, 0x7}, 0x0, 0x0, 0x100000, 0x0, 0x5, 0x4, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x6, 0x9}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000000800000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4002000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0x98}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x200}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x200}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, &(0x7f0000000080)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x13, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="6eaa0000000000007110bb000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x13, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="6eaa0000000000007110bb000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) 6.38547431s ago: executing program 2 (id=1252): bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000180)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961babf00000eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415899bc48b055a8b3f92b143cb16178c216513a045af046e00e7e1c507bedee404330f1171812cdaeed17a0e89dd4863a4e6808ca6b7046c38f33b9a0417e1c8fae7a9e1b4c8161b", 0x0, 0x0, 0x0, 0xf}, 0x38) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x53}}, &(0x7f0000000480)='GPL\x00'}, 0x80) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb010018000000000000005000000050000000020000000900d48fd6ee000e07000000010000000a0000000000000203000000000000000500000d00000000060000000300000000000000000000000000000000000000090000000000000001000000030010"], 0x0, 0x6a, 0x0, 0x0, 0x38}, 0x28) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0xfffffe8b}], 0x1}, 0x4) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a9b80"], 0xfe33) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB='6@\x00\x00I'], 0xfe33) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000180)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961babf00000eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415899bc48b055a8b3f92b143cb16178c216513a045af046e00e7e1c507bedee404330f1171812cdaeed17a0e89dd4863a4e6808ca6b7046c38f33b9a0417e1c8fae7a9e1b4c8161b", 0x0, 0x0, 0x0, 0xf}, 0x38) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x53}}, &(0x7f0000000480)='GPL\x00'}, 0x80) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb010018000000000000005000000050000000020000000900d48fd6ee000e07000000010000000a0000000000000203000000000000000500000d00000000060000000300000000000000000000000000000000000000090000000000000001000000030010"], 0x0, 0x6a, 0x0, 0x0, 0x38}, 0x28) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) (async) close(r0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) (async) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0xfffffe8b}], 0x1}, 0x4) (async) socket$kcm(0x10, 0x2, 0x0) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a9b80"], 0xfe33) (async) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB='6@\x00\x00I'], 0xfe33) (async) 6.131977668s ago: executing program 2 (id=1255): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x2, 0x56d, 0x2}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r0, &(0x7f0000000140), 0x0}, 0x20) socket$kcm(0xf, 0x3, 0x2) socketpair(0x1, 0x1, 0xfffffffd, &(0x7f0000000740)={0xffffffffffffffff}) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0e00009bd028ef8020ab0700040005234538ba55"], 0xfe33) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) (async) r4 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffffffffed4, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0xff00) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f0000000180)=r3, 0x4) (async) sendmsg$inet(r4, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="2c000000000000000000000007000000441c0503"], 0x30}, 0x40880) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r1) 6.115365785s ago: executing program 3 (id=1256): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x5, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x90) openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0xa000, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="010000000400000008000000225c000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000010400)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xe}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1, r0}, 0xc) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) socket$kcm(0xa, 0x5, 0x0) r2 = socket$kcm(0xa, 0x5, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e00000000000000fc00400009"], 0x50) r4 = socket$kcm(0x2b, 0x1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r4, 0x6, 0x6, &(0x7f0000000200)=r5, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x4, [@var={0x2, 0x0, 0x0, 0xe, 0x2}, @volatile={0x3, 0x0, 0x0, 0x2}]}, {0x0, [0x0, 0x2e]}}, 0x0, 0x38}, 0x28) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x890b, &(0x7f0000000000)) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000440)={r3, &(0x7f0000000300)="481008b204d47450fd4dd40b03bf52828928dac575ef19350697807b5ff9f57840394e20a04885afc28f9084d7085b8df11e4a132d06", &(0x7f0000000340)=""/231, 0x4}, 0x20) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0xc02, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r7, 0x1, 0x24, &(0x7f0000000000), 0x4) sendmsg$inet(r7, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x20040840) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0xfc, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x5}, 0x8a001, 0x0, 0xfffffffd, 0x6, 0x1fe, 0x0, 0x3, 0x0, 0xfffffffe, 0x0, 0x10000000000000}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f1, &(0x7f0000000080)) 5.916238212s ago: executing program 2 (id=1257): syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x41, 0x0, 0x11}, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0x9}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r3, 0x10) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xff04}], 0x1}, 0x80d1) close(r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r5, 0xffffffffffffffff}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x1d, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000001}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}, {}, {0x85, 0x0, 0x0, 0xb3}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10001}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r7}, 0xc) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000600073582c137153e37080c188008ac0f000300", 0x33fe0}], 0x1, 0x0, 0x0, 0x8100000}, 0x0) 5.581678406s ago: executing program 3 (id=1261): r0 = socket$kcm(0x29, 0x0, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000080)=@in6={0xa, 0x4e20, 0x0, @empty}, 0x80, 0x0}, 0xb80b) sendmsg$inet(r1, &(0x7f00000004c0)={&(0x7f0000000040)={0x2, 0x4e27, @loopback}, 0x10, 0x0}, 0x24000894) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x84a01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_config_ext={0x7, 0x4}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f00000018c0)={r2}) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2, 0x100}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x6, &(0x7f0000000300)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x3, 0x1, 0x0, r4}, @call={0x85, 0x0, 0x0, 0x12}]}, &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r3, 0x0, 0x0}, 0x20) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000200)="2000000020008107090f9becdb4cb96b0200000000fbff010000000000000000", 0x20}], 0x1, 0x0, 0x0, 0x81000000}, 0x4) socketpair$unix(0x1, 0x1, 0x0, 0x0) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000100)="1400000037000b0fed5a806cb07163990cc47e28", 0x14}], 0x1, 0x0, 0x0, 0x20000000}, 0x200000c0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r7 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r7, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) recvmsg$kcm(r7, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x100) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x10, 0x4, 0x4, 0x2}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7d}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000008c0)="d800000018007b29e00212ba0d8105040a601800fe0f040b067c55a1bc000900b80006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ccd40dd601edef3d93452a92307ff0ff0e97031e9f05e9f16e9cb500"/216, 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r9, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000040004000000002000000000000000000000300000000030000000200000000000000000000000000000105000000200000000000000000000003000000000228000002000000"], 0x0, 0x5a}, 0x28) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r11, 0x40086602, &(0x7f0000000180)=0x20) bpf$ITER_CREATE(0x21, &(0x7f00000017c0)={r6}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001800)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0xbf}}, &(0x7f0000000480)='syzkaller\x00'}, 0x94) 4.809542418s ago: executing program 0 (id=1266): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, &(0x7f0000001b80)=""/4090, 0x0, 0xffa, 0xa}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'pim6reg0\x00', 0x1}) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'pim6reg0\x00', 0x1}) ioctl$SIOCSIFHWADDR(r2, 0x8927, &(0x7f0000000280)={'wg2\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socket$kcm(0xf, 0x3, 0x2) (async) r3 = socket$kcm(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000e200000000611118"], 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000e200000000611118"], 0x0}, 0x94) sendmsg$inet(r3, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x4e, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0100000020000000080000000800000040000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0100000020000000080000000800000040000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r3, &(0x7f0000000440)={&(0x7f0000000000)=@ieee802154, 0x80, &(0x7f0000000200)=[{&(0x7f0000000080)="a0005bf8f1", 0x5}, {&(0x7f00000000c0)="15000000", 0x4}], 0x2, 0x0, 0x0, 0x900}, 0x40000) socket$kcm(0x11, 0x3, 0x0) (async) r4 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, 0x0}, 0x0) (async) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, 0x0}, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0x4, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0xffffffffffffffff}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x4}, 0xc00, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61123400000000006113500000000000bf200000000000001500000008ffffffbd0301000000000095000000000000006916320000000000bf67000000000000a406000007ff07006706000002000000070600000ee60000bf050000000000002e720000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070500000419311f2d4301000000000095000000000000000500000000000000950000000000000032ed3c5be95e76b67754bb12dc8c27df8ecf264e0f84f9f17d3c30e3c72fe9755ba08554bb4f2278af6d71d79a5e12810a089dc1d4681d295c45a674f888a08034b7dd399703d6c4f633a9a4f16d0a3e1282ee45a010fb94fa9de56c9d8a814261bdb94a6538b89dc6c60bf70d742a81b72bab8395fa64810b5b1bfd3782519518c51231422bb8fab4d4d897db2c544c0ec50b8eac8c63d2b1cd06a39702bd547f5ebaa6954f01cef3c9bacec15e2e3b2bd352e93a2aadfe8efe33ff2f8ee5476d4ef7a6f0c4704403b9bad2b648e90fff24f69a5ef05f5408ea197ed09a9510ee6063229de2984abdd46ea3ec78e3127002ed37c2564b8f8a621483fb2a5ff221e0d831d64759d17b8c59d0f2b0727f6b7958fb5b939af4be5e55a95f8c6d785a91c7c3f0c17ae7f9ac5ff05f5ecddf0cef90d50e763be96496661c749e21ab63a1f50b30a65a9027ba357bf8c614497ee59b68bf6a5d45c81c567e347d54574164bbea3e7b7f8a13cce7014137f250370b8a70ae3eaf736f17759c3886871e97d063b7f26eed3226bb0b9ee6320a2b02fea7a06a0e37182adf4b1be6f29358d4f5dfec405bde000000000000000000000000000000902e647cc5962eccaad64429335f3ce2a10ce72da82875427c1d16db24dca08487ba41a3fb337f8432d8176a515229e32ee11a1dd23dac038f989eafdd67f60b63f7be4d1bf325b57335b9973c73bfa89517a98b1fc15f8a2713718feb01059d8b570a0000e3b2a93bd745a74f9bf7f7abc5d15d56331055cc0820c5c9d676d92557c4e47cfbe27f91f0eb18e21dfdab3c84ec11377fbbfd1e000000000000b542a536559eed87b58edcfee83a50077ee0e8fb6e787cb3076dfeeb79f55927fef9651e176b40e64740a01944577caea4ceb9e907cec36a8429445c833b9d24d53dc91f15af1f4a1db9fa452fa3f0b812355aab5b58659ffd56034fdbb169f3e86660acdc65dc699d3e6364a80f45e54d6efcb99b41a080494f842706f3c1716d2e252bf89663393356296d89fbf95aa7966fa700b710008311d6f25e05f77d68799e671d90cb04131742790941d83ffdfa857e9e085a59a78e7a17f008ce55866fcc4de388f270a1ba675f43481bd2"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000940)={0x0, r5}, 0x8) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000780)={0x1b, 0x0, 0x0, 0x400, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x3, &(0x7f0000000480)=@raw=[@call={0x85, 0x0, 0x0, 0x89}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x6}], &(0x7f00000004c0)='syzkaller\x00', 0xd1c, 0xc4, &(0x7f0000000540)=""/196, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x8, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840), 0x10, 0x1a55}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000040), 0x4) (async) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000040), 0x4) 4.737451966s ago: executing program 1 (id=1267): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x32, 0xffffffffffffffff, 0x40}, 0x2c7d06707e8423b4) (async) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x2, 0x7, 0x9, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) r2 = socket$kcm(0x10, 0x2, 0x0) (rerun: 64) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000005c0)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015000300142603600e1208000f0000000401a8001600a400014005000200036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000f80)={@fallback=0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x0) (async) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) r4 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r4, 0x29, 0x17, 0x0, 0x0) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000440)) (async, rerun: 32) recvmsg$kcm(r3, &(0x7f0000000200)={&(0x7f0000000080)=@isdn, 0x80, &(0x7f0000000dc0)=[{&(0x7f0000000280)=""/161, 0xa1}, {&(0x7f00000006c0)=""/137, 0x89}, {&(0x7f0000000100)=""/67, 0x43}, {&(0x7f00000001c0)=""/12, 0xc}, {&(0x7f0000000780)=""/234, 0xea}, {&(0x7f0000000880)=""/234, 0xea}, {&(0x7f0000000980)=""/151, 0x97}, {&(0x7f0000000a40)=""/228, 0xe4}, {&(0x7f0000000c40)=""/144, 0x90}, {&(0x7f0000000d00)=""/132, 0x84}], 0xa}, 0x100) (async, rerun: 32) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) (async, rerun: 32) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40e00}, 0x94) (rerun: 32) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002c80)={&(0x7f0000000180)={0x2, 0x4e22, @multicast2}, 0x10, 0x0}, 0x2c000040) (async, rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (rerun: 64) 4.732062906s ago: executing program 3 (id=1268): write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0xd, 0x10000}, 0x14403, 0xfffc, 0x0, 0x5, 0x582, 0x20005, 0x8, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x1100, 0x0, @mcast1, 0x1a}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000080)="f4f20800062b2f25fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa"], 0xcfa4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 4.501131527s ago: executing program 1 (id=1269): syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x41, 0x0, 0x11}, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0x9}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r3, 0x10) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xff04}], 0x1}, 0x80d1) close(r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r5, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x1d, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000001}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}, {}, {0x85, 0x0, 0x0, 0xb3}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10001}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000600073582c137153e37080c188008ac0f000300", 0x33fe0}], 0x1, 0x0, 0x0, 0x8100000}, 0x0) 3.806085052s ago: executing program 0 (id=1270): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000740)="2e00000010008188e6b62aa73f72cc9f0bdf9b69340000005e140602000000000c000a00100000000a800000129481", 0x2f}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000801}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x2a, &(0x7f0000000100)=r4, 0x4) sendmsg$unix(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000002c0)='g', 0x1}], 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="1400"], 0x18, 0x40}, 0x40000) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x1) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x7, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x22) perf_event_open(&(0x7f00000008c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0xffffffffffffffff, 0x2b4}, 0x0, 0x10000, 0x0, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r5 = socket$kcm(0x2b, 0x93b38d930430e398, 0x0) setsockopt$sock_attach_bpf(r5, 0x0, 0x480, 0x0, 0x7) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r6, 0x0, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="0700000004000022000100000100000028000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r7, @ANYBLOB="0000000000000000b703000000010000850000001b000000b7"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r8}, 0xc) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000003c0)={r7, &(0x7f0000000300), 0x0}, 0x20) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_int(r9, &(0x7f0000000180)='cpu.weight\x00', 0x2, 0x0) openat$cgroup_subtree(r9, &(0x7f0000000800), 0x2, 0x0) write$cgroup_int(r10, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000007c0)={'syzkaller1\x00', 0x1}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={0x0, &(0x7f0000000200)=""/21, 0x0, 0x7, 0x0, 0x6}, 0x28) 3.802602032s ago: executing program 1 (id=1271): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r3 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x161) openat$cgroup_ro(r2, &(0x7f0000000000)='blkio.bfq.io_serviced\x00', 0x0, 0x0) sendmsg$inet(r3, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380), 0xff7a}], 0x1, &(0x7f0000007880)=ANY=[@ANYBLOB="1100000000000000004003000100000000000000000000001c00000000000000000f00fd08000000", @ANYRES32=0x0, @ANYBLOB="ac1414bbe0000001000000001c0000000000000000078f0208000000", @ANYRES32=0x0, @ANYBLOB="a00500000000000000000000240000000000000000000000070000009404000044108800000000000000000000000000000000001100000000000000000000c2d63c67000000000000000000"], 0x98}, 0x0) 3.776062107s ago: executing program 3 (id=1272): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0xa, 0x5, 0x0) socket$kcm(0x10, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/time\x00') perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80100, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x100904, 0x401, 0x25, 0x0, 0x1, 0x200, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000011008188040f80ec59acbc0413a181000a000000000100000010001f0e0027000f00000000800200121f", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES32=r1, @ANYRES16=r1], 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)=ANY=[], 0x20) 3.604292338s ago: executing program 0 (id=1273): socket$kcm(0x10, 0x400000002, 0x0) r0 = socket$kcm(0xa, 0x6, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x1a5c0bf06ff69310, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa31086b8703130000001f03000000000000040014000d0013000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) close(r1) socketpair(0x1, 0x801, 0x0, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x5452, &(0x7f0000000400)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdf\x85\xaac{\x8c\x8ffp`-\xcd\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\t\xed\x13q2\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\xcb\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x86\x1b\x05\xe6\"\x1d\f\xaey\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca\x04\x00\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x03\x00\x00\x00\x00\x00\x00\x00\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\xf3\xcf\x17\xf5\x86%\x7f\xec\xb2\xc5E\x00\xb2e\xa8\xf1<\xb2\xc82\xbf=o\x00\x00\x00\x00E\x00\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x922A\x95\x8e\xbc\xc80x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r6, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x35, 0x0, 0x8, 0x0, 0x0}}, 0x10) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x8e5, 0x0, r1, 0x8000, '\x00', r9, r0, 0x1, 0x5, 0x4}, 0x50) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f0000000700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc4, 0xc4, 0x4, [@struct={0x6, 0x6, 0x0, 0x4, 0x0, 0x4, [{0x2, 0x0, 0xffff}, {0xe, 0x2, 0x80000001}, {0x3, 0x2, 0x1}, {0xf, 0x4, 0x8540}, {0x5, 0x0, 0xfffffffd}, {0x9, 0x0, 0x9}]}, @typedef={0x9, 0x0, 0x0, 0x8, 0x5}, @float={0xe, 0x0, 0x0, 0x10, 0x10}, @decl_tag={0x3, 0x0, 0x0, 0x11, 0x2, 0x8}, @volatile={0x5}, @enum64={0x2, 0x2, 0x0, 0x13, 0x0, 0xd, [{0xc, 0x1f62a000}, {0x5, 0x2, 0x5}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x2, 0x4fd}}]}, {0x0, [0x0, 0x2e]}}, &(0x7f0000000900)=""/151, 0xe0, 0x97, 0x1, 0xb6f, 0x10000, @value=r1}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@bloom_filter={0x1e, 0x9, 0x10000, 0xffffff00, 0x20010, r10, 0x6, '\x00', r8, r11, 0x1, 0x0, 0x1, 0x5}, 0x50) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000600073582c137153e37080c188002ac0f000300", 0x33fe0}], 0x1, 0x0, 0x0, 0x8100000}, 0x0) r12 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r12, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r3, &(0x7f0000000340)={&(0x7f00000000c0)=@un=@abs, 0x80, &(0x7f0000000200)=[{&(0x7f0000000140)=""/38, 0x26}, {&(0x7f0000000180)=""/107, 0x6b}], 0x2, &(0x7f0000000240)=""/222, 0xde}, 0x1) 3.145805052s ago: executing program 3 (id=1275): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x8e, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x22702, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f00000000c0)=0x7) 3.081467972s ago: executing program 2 (id=1276): socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x24, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x3) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) socketpair(0x1, 0x1, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r2 = socket$kcm(0x2, 0x1, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000003c0)=[{0xffffffff, 0x0, 0xb}]}, 0x94) close(r2) r3 = socket$kcm(0x2, 0x1, 0x84) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000000c0)=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000100)="73d6a8ad1820e437d2d6a5c8c5fbc90ccfa3f18a0677f3223e7bc447d67fd37d69e4b8da051705110598eed84e9eafebc22c492dc25cf39d68c94b7c34c4d70682e552b6e6952f385b", 0x49}, {&(0x7f0000000180)="e963e11dd043", 0x6}, {&(0x7f0000000340)="340a7d4e90c5a597ffe982f21af439833b7870ab3971763c4e", 0x19}, {&(0x7f0000000700)="c17709e773a6b25764d13c4e599900e5088ccd860f1e7f6ac7bdb5ec4848b3400fc174d2f018a4216a708ad39d5e7cb6063cb9fd08555e91a2ea579e99617680a832f102c87b30af238ae81f996f3c5b99788e4d5c2e9bb95401491daf1f638ccf30230fb977c3cce60586e137756be436fb13ab0ff1a2aca717038c3a076d321b8f55819dd5cb66b0f72bca6b4e2309d5e8ff382e4d7b12e19b930543878ab49464c507235e35327e72297ce3f3a6004623fe95db40b759e0255b1ef77036e007d4331b2ca70f65a12ee280c3", 0xcd}], 0x4, &(0x7f0000000540)="96be311102b7ebde718ed31349ac2d345afafc63338223164feb81f4044dc089f3d3257e6be95aae423843d0013744ef02a4de05b4f47346462f97ce268799299f998daaa0601bc3d28b4ccb42a1c138fdfd33f0a67170ca36ed9f38ffbdc9322b33bacefa074c900fee5680d9a530882568bf5ed12d876a6121", 0x7a, 0x20000010}, 0x40) sendmsg$inet(r2, &(0x7f0000000d40)={&(0x7f0000000300)={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000440)="b628d7b8", 0x4}], 0x1}, 0x840) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000d80)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) socket$kcm(0x10, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x84, 0x64, &(0x7f0000000000)=r6, 0x10) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x80102, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x308) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f00000006c0)={'syzkaller0\x00', @multicast}) 3.005544739s ago: executing program 0 (id=1277): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x0, 0x69, 0x10, 0x16}}, &(0x7f0000000480)='GPL\x00'}, 0x80) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000380), 0x98) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x4a) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x1f2f, 0xf, 0x3253, &(0x7f00000007c0)="9f44948721919580684010a486dd", 0x0, 0x241, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39"}, 0x23) 2.966606772s ago: executing program 3 (id=1278): syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x41, 0x0, 0x11}, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0x9}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r3, 0x10) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xff04}], 0x1}, 0x80d1) close(r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r5, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x1d, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000001}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}, {}, {0x85, 0x0, 0x0, 0xb3}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10001}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000600073582c137153e37080c188008ac0f000300", 0x33fe0}], 0x1, 0x0, 0x0, 0x8100000}, 0x0) 2.266166036s ago: executing program 0 (id=1279): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)="58654e211a70b19e6fdc1244540189185215ac9edd0fed47f5555fe04301351e660566d4483a157fac84eb7c86022bd776a224678db51a83b288a1159345891f25cd67e5dc9ca16cde00"/85, 0x55}, {&(0x7f0000000440)="393ea1bfa60a77045604a5d4c5172167bb6dcc16663876e7afa7aba7b392731eca1c6e15a8d75591ed4437d49d05c212e63c77c307c7c5494ad14a70bf2ed30c0939ded4305467efcd7da4a8be62cfe2da75ae39f3d522f792cca0626c95e8c4ed0afc820178daf28a64c01e4a4266ec83831ea2bf89183b6f85", 0x7a}], 0x2, 0x0, 0x0, 0x7400}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x4000000000009, 0x640b9, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000340), 0x1}, 0x0, 0x40032, 0x43a1bd76, 0x7, 0x9, 0x3, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xe, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0x0}, 0x10) perf_event_open(&(0x7f00000007c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x8, 0x92}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, r1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000050000000000000001000004080000000000000003000000100000000000000000000002000000000300000000000004040000000000002e"], 0x0, 0x4d}, 0x28) socket$kcm(0x2, 0x1000000000000002, 0x0) r5 = perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/27], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r7, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x34004000) ioctl$sock_kcm_SIOCKCMUNATTACH(r7, 0x541b, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x12, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x2}) 2.069245054s ago: executing program 0 (id=1280): syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x41, 0x0, 0x11}, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0x9}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r3, 0x10) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xff04}], 0x1}, 0x80d1) close(r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r5, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x1d, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000001}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}, {}, {0x85, 0x0, 0x0, 0xb3}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10001}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000600073582c137153e37080c188008ac0f000300", 0x33fe0}], 0x1, 0x0, 0x0, 0x8100000}, 0x0) 2.068826534s ago: executing program 1 (id=1281): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={&(0x7f0000000040), 0x4}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x10, 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x0) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) sendmsg$inet(r4, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x4004000) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000340)="24000000240081064e81f782db44b9040a0208000300000000000100f1ffffff02001426", 0x24}], 0x1}, 0x4004000) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x10001, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)}, 0x4) sendmsg$inet(r4, &(0x7f0000000700)={&(0x7f00000000c0)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000680)=[{&(0x7f0000001980)="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", 0x1000}, {&(0x7f00000001c0)="92d41f3925554d1ec92e1e6f086c6884699cf875f8a6d86c6e403608b543c74ad135f5fecca1fc4101c76aae679cde7da05adec20ae20fc1d3b4b6e0de1cb0710c3439cd6b65723c79ec9cd5cde02bd4721da6f349275e3a5dda18a69e9c3d0a99a6e937d3ea6f9cf4a1d3694a7d14c68cb420503f111f171681ad2d80dde390", 0x80}, {&(0x7f0000000580)="6b1c508b144a15fc0ac5170d8ae4fa86d4c67ce1ca4e2bc3484dec0a3869fdbc170389638b04b74f5a269dc54f4214e4b82935ec39d0fbed4f4dbe1fa99594b688002e900a3037c67a5cfff8a508bbeaaa963fbde6683d1e65eaa41a8c3c6c29469471a3d375a8e9d36d74ef595aecfad1456423e0f2c435ba60c8b51d500972a47b27e6621f6340927dcfd569cfbb6394b95607316eeed6bc18a35d75f5021f12d529cbe7e0d8062ac457063465d393e3eeb582074fe3f0fbfab604910bba6a2780116fb343ed0a6ed31ab586a9c1a1cc6c64275ccdb1c8af675b7fc9e0fb720ec13f9a7975fb978f8e5dd93e9c55b8950ea2cd16c35cd038", 0xf9}, {&(0x7f0000000380)="e6938f9d3559d472947111ff4d69135157936f27fe95cade709ec74633f07e2ec82ab2ceb9b777bd9fefceee4db7630654688eab3013ef490102b7af67aac4fbd9d8531769dca22f7b833c2b4d", 0x4d}, {&(0x7f0000000140)="d6d663fed8d5ca269e5e535b4751", 0xe}, {&(0x7f00000002c0)="fab048fdb33acd8fbb27c3aa", 0xc}], 0x6}, 0x800) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000080)={r5}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x541b, 0x0) socketpair(0x1e, 0x1, 0x0, 0x0) 0s ago: executing program 1 (id=1282): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000740)={{r0}, &(0x7f00000006c0), &(0x7f0000000700)='%ps \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x10, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0x55, 0x0, 0x0, 0x0, 0x81a0}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000440)='\x00'/14, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): [ T6347] sysfs_do_create_link_sd+0xc0/0x110 [ 122.292911][ T6347] device_add_class_symlinks+0x1cf/0x240 [ 122.298613][ T6347] device_add+0x507/0xc20 [ 122.303019][ T6347] wiphy_register+0x1dad/0x2ae0 [ 122.308315][ T6347] ? cfg80211_event_work+0x40/0x40 [ 122.313492][ T6347] ? minstrel_ht_alloc+0x88a/0x990 [ 122.318686][ T6347] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 122.324818][ T6347] ieee80211_register_hw+0x3464/0x4250 [ 122.330511][ T6347] ? ieee80211_tasklet_handler+0x20/0x20 [ 122.336225][ T6347] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 122.342212][ T6347] ? __debug_object_init+0xec/0x450 [ 122.347493][ T6347] ? __asan_memset+0x22/0x40 [ 122.352207][ T6347] ? __hrtimer_init+0x186/0x270 [ 122.357127][ T6347] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 122.363049][ T6347] ? mac80211_hwsim_free+0x220/0x220 [ 122.368413][ T6347] ? hwsim_new_radio_nl+0xdb9/0x1a90 [ 122.373785][ T6347] hwsim_new_radio_nl+0xdc9/0x1a90 [ 122.378982][ T6347] ? __nla_validate+0x50/0x50 [ 122.383741][ T6347] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 122.390154][ T6347] ? __nla_parse+0x40/0x50 [ 122.394637][ T6347] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 122.401141][ T6347] genl_family_rcv_msg_doit+0x211/0x310 [ 122.406756][ T6347] ? end_current_label_crit_section+0x170/0x170 [ 122.413087][ T6347] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 122.419058][ T6347] ? bpf_lsm_capable+0x9/0x10 [ 122.423803][ T6347] ? security_capable+0x89/0xb0 [ 122.428734][ T6347] genl_rcv_msg+0x619/0x7a0 [ 122.433397][ T6347] ? genl_bind+0x360/0x360 [ 122.437880][ T6347] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 122.443923][ T6347] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 122.450378][ T6347] ? perf_trace_preemptirq_template+0xac/0x330 [ 122.456588][ T6347] ? rcu_read_unlock_special+0xf7/0x4d0 [ 122.462188][ T6347] netlink_rcv_skb+0x241/0x4d0 [ 122.467001][ T6347] ? genl_bind+0x360/0x360 [ 122.471452][ T6347] ? netlink_ack+0x1180/0x1180 [ 122.476271][ T6347] ? __lock_acquire+0x7d40/0x7d40 [ 122.481350][ T6347] ? rcu_read_unlock_special+0x5/0x4d0 [ 122.486856][ T6347] ? down_read+0x1ac/0x2e0 [ 122.491310][ T6347] genl_rcv+0x28/0x40 [ 122.495319][ T6347] netlink_unicast+0x751/0x8d0 [ 122.500142][ T6347] netlink_sendmsg+0x8d0/0xbf0 [ 122.504943][ T6347] ? lockdep_hardirqs_on+0x98/0x150 [ 122.510182][ T6347] ? netlink_getsockopt+0x590/0x590 [ 122.515430][ T6347] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 122.520757][ T6347] ? security_socket_sendmsg+0x80/0xa0 [ 122.526794][ T6347] ? netlink_getsockopt+0x590/0x590 [ 122.532055][ T6347] ____sys_sendmsg+0x5ba/0x960 [ 122.536889][ T6347] ? __asan_memset+0x22/0x40 [ 122.541518][ T6347] ? __sys_sendmsg_sock+0x30/0x30 [ 122.546574][ T6347] ? __import_iovec+0x5f2/0x850 [ 122.551475][ T6347] ? import_iovec+0x73/0xa0 [ 122.556046][ T6347] ___sys_sendmsg+0x2a6/0x360 [ 122.560813][ T6347] ? __sys_sendmsg+0x2a0/0x2a0 [ 122.565649][ T6347] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 122.571952][ T6347] __se_sys_sendmsg+0x1c2/0x2b0 [ 122.576838][ T6347] ? __x64_sys_sendmsg+0x80/0x80 [ 122.581819][ T6347] ? lockdep_hardirqs_on+0x98/0x150 [ 122.587055][ T6347] do_syscall_64+0x55/0xa0 [ 122.591510][ T6347] ? clear_bhb_loop+0x40/0x90 [ 122.596212][ T6347] ? clear_bhb_loop+0x40/0x90 [ 122.600960][ T6347] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 122.606883][ T6347] RIP: 0033:0x7fd54fb9c799 [ 122.611333][ T6347] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.630964][ T6347] RSP: 002b:00007fd54ddd5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 122.639430][ T6347] RAX: ffffffffffffffda RBX: 00007fd54fe16090 RCX: 00007fd54fb9c799 [ 122.647439][ T6347] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000c [ 122.655435][ T6347] RBP: 00007fd54fc32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 122.663457][ T6347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 122.671494][ T6347] R13: 00007fd54fe16128 R14: 00007fd54fe16090 R15: 00007ffde20dea28 [ 122.679514][ T6347] [ 123.752774][ T6390] validate_nla: 1 callbacks suppressed [ 123.752789][ T6390] netlink: 'syz.0.160': attribute type 10 has an invalid length. [ 124.299877][ T6390] `: Port device geneve1 added [ 124.496376][ T6400] netlink: 'syz.2.166': attribute type 10 has an invalid length. [ 124.504676][ T6400] __nla_validate_parse: 4 callbacks suppressed [ 124.504690][ T6400] netlink: 2 bytes leftover after parsing attributes in process `syz.2.166'. [ 124.621866][ T6400] netlink: 'syz.2.166': attribute type 10 has an invalid length. [ 124.668067][ T6400] netlink: 40 bytes leftover after parsing attributes in process `syz.2.166'. [ 124.704261][ T6400] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 124.752678][ T6400] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 124.982600][ T6418] syzkaller0: entered promiscuous mode [ 125.007891][ T6418] syzkaller0: entered allmulticast mode [ 125.141479][ T6418] syzkaller0: tun_net_xmit 1280 [ 125.348486][ T6427] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 127.713303][ T6427] netlink: 'syz.1.176': attribute type 1 has an invalid length. [ 127.728683][ T6434] netlink: 40227 bytes leftover after parsing attributes in process `syz.0.179'. [ 127.881010][ T6439] netlink: 'syz.2.182': attribute type 10 has an invalid length. [ 127.893341][ T6439] netlink: 2 bytes leftover after parsing attributes in process `syz.2.182'. [ 127.903849][ T6439] netlink: 'syz.2.182': attribute type 10 has an invalid length. [ 127.932286][ T6439] netlink: 40 bytes leftover after parsing attributes in process `syz.2.182'. [ 127.960928][ T6439] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 127.995620][ T6439] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 128.123582][ T6446] netlink: 'syz.0.183': attribute type 41 has an invalid length. [ 128.147479][ T6446] netlink: 40 bytes leftover after parsing attributes in process `syz.0.183'. [ 128.472351][ T6459] netlink: 16211 bytes leftover after parsing attributes in process `syz.2.187'. [ 128.749270][ T6465] macvlan1: entered promiscuous mode [ 128.755104][ T6465] macvlan1: entered allmulticast mode [ 128.762066][ T6465] veth1_vlan: entered allmulticast mode [ 129.902945][ T6478] netlink: 60 bytes leftover after parsing attributes in process `syz.1.190'. [ 129.982552][ T6478] netlink: 60 bytes leftover after parsing attributes in process `syz.1.190'. [ 130.037635][ T6480] netlink: 60 bytes leftover after parsing attributes in process `syz.1.190'. [ 130.073818][ T6475] netlink: 60 bytes leftover after parsing attributes in process `syz.1.190'. [ 130.511566][ T6485] netlink: 'syz.0.194': attribute type 2 has an invalid length. [ 130.536014][ T6485] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.194'. [ 130.612916][ T6488] netlink: 'syz.3.195': attribute type 10 has an invalid length. [ 130.646161][ T6488] netlink: 2 bytes leftover after parsing attributes in process `syz.3.195'. [ 130.848964][ T6489] netlink: 'syz.3.195': attribute type 10 has an invalid length. [ 130.866149][ T6489] netlink: 40 bytes leftover after parsing attributes in process `syz.3.195'. [ 130.875133][ T6489] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 130.897624][ T6489] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 132.489840][ T6506] netlink: 60 bytes leftover after parsing attributes in process `syz.3.201'. [ 132.545043][ T6506] netlink: 60 bytes leftover after parsing attributes in process `syz.3.201'. [ 132.646700][ T6516] netlink: 209820 bytes leftover after parsing attributes in process `syz.2.203'. [ 133.230638][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.243388][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.504003][ T6535] netlink: 'syz.0.209': attribute type 10 has an invalid length. [ 133.518934][ T6535] `: Port device virt_wifi0 added [ 133.543499][ T6535] netlink: 'syz.0.209': attribute type 10 has an invalid length. [ 133.556693][ T6535] `: Device lo is loopback device. Loopback devices can't be added as a team port [ 133.569180][ T6535] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 134.868764][ T6562] netlink: 'syz.0.219': attribute type 10 has an invalid length. [ 134.926276][ T6568] netlink: 'syz.0.219': attribute type 10 has an invalid length. [ 134.947443][ T6568] __nla_validate_parse: 4 callbacks suppressed [ 134.947461][ T6568] netlink: 40 bytes leftover after parsing attributes in process `syz.0.219'. [ 134.971861][ T6568] `: Device lo is loopback device. Loopback devices can't be added as a team port [ 134.982120][ T6568] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 135.970673][ T6586] wg2: entered promiscuous mode [ 135.990738][ T6586] wg2: entered allmulticast mode [ 136.300264][ T6592] netlink: 'syz.0.229': attribute type 21 has an invalid length. [ 136.315659][ T6592] netlink: 156 bytes leftover after parsing attributes in process `syz.0.229'. [ 136.996154][ T6606] netlink: 'syz.0.233': attribute type 10 has an invalid length. [ 137.015730][ T6606] netlink: 2 bytes leftover after parsing attributes in process `syz.0.233'. [ 137.048630][ T6606] netlink: 'syz.0.233': attribute type 10 has an invalid length. [ 137.096111][ T6606] netlink: 40 bytes leftover after parsing attributes in process `syz.0.233'. [ 137.129690][ T6606] `: Device lo is loopback device. Loopback devices can't be added as a team port [ 137.145750][ T6606] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 138.024296][ T6633] netlink: 'syz.2.242': attribute type 10 has an invalid length. [ 138.042638][ T6633] netlink: 2 bytes leftover after parsing attributes in process `syz.2.242'. [ 138.071670][ T6633] netlink: 'syz.2.242': attribute type 10 has an invalid length. [ 138.131260][ T6633] netlink: 40 bytes leftover after parsing attributes in process `syz.2.242'. [ 138.149040][ T6633] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 138.222857][ T6633] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 139.114700][ T6657] netlink: 'syz.2.252': attribute type 10 has an invalid length. [ 139.131123][ T6657] netlink: 2 bytes leftover after parsing attributes in process `syz.2.252'. [ 139.167701][ T6657] netlink: 'syz.2.252': attribute type 10 has an invalid length. [ 139.190302][ T6657] netlink: 40 bytes leftover after parsing attributes in process `syz.2.252'. [ 139.216617][ T6657] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 139.227982][ T6657] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 139.422131][ T6662] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.254'. [ 139.433998][ T6662] netlink: 64535 bytes leftover after parsing attributes in process `syz.2.254'. [ 140.044927][ T6674] netlink: 'syz.2.258': attribute type 1 has an invalid length. [ 140.076129][ T6674] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.258'. [ 140.295779][ T6682] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.261'. [ 140.306148][ T6682] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate. [ 141.940776][ T6684] netlink: 'syz.0.262': attribute type 10 has an invalid length. [ 141.949023][ T6684] netlink: 2 bytes leftover after parsing attributes in process `syz.0.262'. [ 141.958394][ T6685] netlink: 'syz.0.262': attribute type 10 has an invalid length. [ 141.967479][ T6685] netlink: 40 bytes leftover after parsing attributes in process `syz.0.262'. [ 141.977809][ T6685] `: Device lo is loopback device. Loopback devices can't be added as a team port [ 141.988214][ T6685] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 142.004295][ T6688] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.263'. [ 142.143904][ T6690] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.264'. [ 142.785563][ T6713] netlink: 'syz.3.271': attribute type 10 has an invalid length. [ 142.801285][ T6713] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 142.829533][ T6713] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 142.933560][ T6713] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 143.090937][ T6721] netlink: 188 bytes leftover after parsing attributes in process `syz.2.273'. [ 143.169071][ T6722] netlink: 'syz.2.273': attribute type 27 has an invalid length. [ 143.175603][ T6731] netlink: 'syz.0.274': attribute type 10 has an invalid length. [ 143.180929][ T6722] netlink: 164 bytes leftover after parsing attributes in process `syz.2.273'. [ 143.198829][ T6731] netlink: 2 bytes leftover after parsing attributes in process `syz.0.274'. [ 143.226001][ T6722] netlink: 'syz.2.273': attribute type 27 has an invalid length. [ 143.243924][ T6722] netlink: 164 bytes leftover after parsing attributes in process `syz.2.273'. [ 143.273112][ T6731] netlink: 'syz.0.274': attribute type 10 has an invalid length. [ 143.282243][ T6722] netlink: 'syz.2.273': attribute type 27 has an invalid length. [ 143.295983][ T6731] `: Device lo is loopback device. Loopback devices can't be added as a team port [ 143.311193][ T6731] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 143.319868][ T6722] netlink: 'syz.2.273': attribute type 27 has an invalid length. [ 143.368531][ T6722] netlink: 'syz.2.273': attribute type 27 has an invalid length. [ 144.487685][ T6756] bond0: (slave dummy0): Releasing backup interface [ 144.600499][ T6756] team0: Port device dummy0 added [ 144.619900][ T6767] `: Device lo is loopback device. Loopback devices can't be added as a team port [ 144.630279][ T6767] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 144.783851][ T6756] `: renamed from ip6tnl0 (while UP) [ 144.821508][ T6756] A link change request failed with some changes committed already. Interface ` may have been left with an inconsistent configuration, please check. [ 144.868352][ T6756] syz.3.284 (6756) used greatest stack depth: 17896 bytes left [ 146.312451][ T6794] __nla_validate_parse: 34 callbacks suppressed [ 146.312469][ T6794] netlink: 2 bytes leftover after parsing attributes in process `syz.3.296'. [ 146.338404][ T6795] netlink: 40 bytes leftover after parsing attributes in process `syz.3.296'. [ 146.348071][ T6795] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 146.363854][ T6795] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 146.628352][ T6797] netlink: 180 bytes leftover after parsing attributes in process `syz.0.297'. [ 146.675086][ T6797] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 146.696861][ T6797] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 146.713433][ T6801] netlink: 198112 bytes leftover after parsing attributes in process `syz.3.298'. [ 147.186786][ T6811] netlink: 830 bytes leftover after parsing attributes in process `syz.0.303'. [ 147.505165][ T6818] validate_nla: 47 callbacks suppressed [ 147.505182][ T6818] netlink: 'syz.0.306': attribute type 10 has an invalid length. [ 147.526497][ T6818] netlink: 2 bytes leftover after parsing attributes in process `syz.0.306'. [ 147.536425][ T6818] netlink: 'syz.0.306': attribute type 10 has an invalid length. [ 147.544466][ T6818] netlink: 40 bytes leftover after parsing attributes in process `syz.0.306'. [ 147.554604][ T6818] `: Device lo is loopback device. Loopback devices can't be added as a team port [ 147.571136][ T6818] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 148.275280][ T6833] netlink: 'syz.2.307': attribute type 10 has an invalid length. [ 148.334991][ T6833] team0: Port device geneve1 added [ 148.602564][ T6838] netlink: 'syz.0.309': attribute type 29 has an invalid length. [ 148.639926][ T6838] netlink: 'syz.0.309': attribute type 29 has an invalid length. [ 148.686386][ T6843] netlink: 'syz.0.309': attribute type 29 has an invalid length. [ 149.437221][ T6857] netlink: 'syz.1.316': attribute type 10 has an invalid length. [ 149.456367][ T6857] netlink: 2 bytes leftover after parsing attributes in process `syz.1.316'. [ 149.516651][ T6857] netlink: 'syz.1.316': attribute type 10 has an invalid length. [ 149.539787][ T6857] netlink: 40 bytes leftover after parsing attributes in process `syz.1.316'. [ 149.574853][ T6857] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 149.586941][ T6857] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 149.736993][ T6864] pim6reg1: entered promiscuous mode [ 149.742408][ T6864] pim6reg1: entered allmulticast mode [ 150.368004][ T6881] netlink: 'syz.3.321': attribute type 29 has an invalid length. [ 150.417535][ T6881] netlink: 'syz.3.321': attribute type 29 has an invalid length. [ 150.785855][ T6887] netlink: 2 bytes leftover after parsing attributes in process `syz.2.326'. [ 150.799540][ T6887] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 150.811832][ T6887] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 152.856905][ T6929] validate_nla: 2 callbacks suppressed [ 152.856924][ T6929] netlink: 'syz.1.339': attribute type 10 has an invalid length. [ 152.873099][ T6929] __nla_validate_parse: 1 callbacks suppressed [ 152.873113][ T6929] netlink: 2 bytes leftover after parsing attributes in process `syz.1.339'. [ 152.891642][ T6929] netlink: 'syz.1.339': attribute type 10 has an invalid length. [ 152.926132][ T6929] netlink: 40 bytes leftover after parsing attributes in process `syz.1.339'. [ 152.961263][ T6929] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 153.013509][ T6927] netlink: 164 bytes leftover after parsing attributes in process `syz.2.338'. [ 153.043674][ T6929] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 154.511824][ T6964] netlink: 132 bytes leftover after parsing attributes in process `syz.1.351'. [ 154.603215][ T6963] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.352'. [ 154.630131][ T6966] netlink: 'syz.0.353': attribute type 10 has an invalid length. [ 154.646137][ T6966] netlink: 2 bytes leftover after parsing attributes in process `syz.0.353'. [ 154.670789][ T6966] netlink: 'syz.0.353': attribute type 10 has an invalid length. [ 154.696108][ T6966] netlink: 40 bytes leftover after parsing attributes in process `syz.0.353'. [ 154.721898][ T6966] `: Device lo is loopback device. Loopback devices can't be added as a team port [ 154.750265][ T6966] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 154.773499][ T6963] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 155.147315][ T6976] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 155.798285][ T6988] syz.3.359[6988] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 155.798455][ T6988] syz.3.359[6988] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 158.765428][ T7004] netlink: 'syz.2.364': attribute type 10 has an invalid length. [ 158.804767][ T7004] netlink: 2 bytes leftover after parsing attributes in process `syz.2.364'. [ 158.826791][ T7004] netlink: 'syz.2.364': attribute type 10 has an invalid length. [ 158.834628][ T7004] netlink: 40 bytes leftover after parsing attributes in process `syz.2.364'. [ 158.852531][ T7004] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 158.864621][ T7004] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 158.976095][ T7011] netlink: 132 bytes leftover after parsing attributes in process `syz.0.363'. [ 159.055837][ T7013] netlink: 'syz.1.367': attribute type 7 has an invalid length. [ 160.417601][ T7038] netlink: 'syz.0.375': attribute type 21 has an invalid length. [ 160.452390][ T7038] netlink: 132 bytes leftover after parsing attributes in process `syz.0.375'. [ 160.478296][ T7040] netlink: 'syz.0.375': attribute type 21 has an invalid length. [ 160.560031][ T7040] netlink: 132 bytes leftover after parsing attributes in process `syz.0.375'. [ 160.594736][ T7040] netlink: 132 bytes leftover after parsing attributes in process `syz.0.375'. [ 160.623718][ T7038] netlink: 132 bytes leftover after parsing attributes in process `syz.0.375'. [ 160.641643][ T7045] netlink: 'syz.3.377': attribute type 10 has an invalid length. [ 160.651749][ T7045] netlink: 2 bytes leftover after parsing attributes in process `syz.3.377'. [ 160.674713][ T7047] netlink: 'syz.3.377': attribute type 10 has an invalid length. [ 160.696697][ T7047] netlink: 40 bytes leftover after parsing attributes in process `syz.3.377'. [ 160.705695][ T7047] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 160.722167][ T7047] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 162.281347][ T7087] netlink: 'syz.0.389': attribute type 10 has an invalid length. [ 162.293072][ T7087] netlink: 2 bytes leftover after parsing attributes in process `syz.0.389'. [ 162.304244][ T7087] netlink: 'syz.0.389': attribute type 10 has an invalid length. [ 162.331608][ T7087] `: Device lo is loopback device. Loopback devices can't be added as a team port [ 162.346669][ T7087] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 162.456596][ T7092] netlink: 'syz.2.391': attribute type 4 has an invalid length. [ 162.866500][ T7098] syzkaller0: entered promiscuous mode [ 164.045248][ T7124] __nla_validate_parse: 2 callbacks suppressed [ 164.045267][ T7124] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.399'. [ 166.120180][ T7120] validate_nla: 2 callbacks suppressed [ 166.120196][ T7120] netlink: 'syz.1.400': attribute type 10 has an invalid length. [ 166.134716][ T7120] netlink: 2 bytes leftover after parsing attributes in process `syz.1.400'. [ 166.148753][ T7122] netlink: 'syz.1.400': attribute type 10 has an invalid length. [ 166.176112][ T7122] netlink: 40 bytes leftover after parsing attributes in process `syz.1.400'. [ 166.205419][ T7122] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 166.227681][ T7122] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 166.246144][ T7124] netlink: 'syz.3.399': attribute type 6 has an invalid length. [ 166.258134][ T7129] @0Ù: renamed from bond_slave_1 (while UP) [ 168.370736][ T7154] syzkaller0: entered promiscuous mode [ 168.394290][ T7154] syzkaller0: entered allmulticast mode [ 171.584114][ T7177] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 171.827103][ T7179] netlink: 'syz.1.416': attribute type 3 has an invalid length. [ 171.836266][ T7179] netlink: 'syz.1.416': attribute type 1 has an invalid length. [ 171.844002][ T7179] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.416'. [ 173.371766][ T7162] netlink: 'syz.2.412': attribute type 10 has an invalid length. [ 173.379926][ T7162] netlink: 2 bytes leftover after parsing attributes in process `syz.2.412'. [ 173.389501][ T7165] netlink: 'syz.2.412': attribute type 10 has an invalid length. [ 173.399135][ T7165] netlink: 40 bytes leftover after parsing attributes in process `syz.2.412'. [ 173.414390][ T7165] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 173.430089][ T7165] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 173.608405][ T7210] netlink: 'syz.3.425': attribute type 1 has an invalid length. [ 173.678316][ T7210] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.425'. [ 174.196237][ T7218] netlink: 'syz.3.428': attribute type 21 has an invalid length. [ 174.215747][ T7218] netlink: 132 bytes leftover after parsing attributes in process `syz.3.428'. [ 174.565334][ T7233] netlink: 'syz.2.434': attribute type 10 has an invalid length. [ 174.585184][ T7233] netlink: 2 bytes leftover after parsing attributes in process `syz.2.434'. [ 174.613032][ T7233] netlink: 'syz.2.434': attribute type 10 has an invalid length. [ 174.636440][ T7233] netlink: 40 bytes leftover after parsing attributes in process `syz.2.434'. [ 174.656299][ T7233] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 174.668744][ T7233] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 175.448676][ T7255] netlink: 'syz.2.441': attribute type 46 has an invalid length. [ 175.458095][ T7255] netlink: 'syz.2.441': attribute type 46 has an invalid length. [ 175.817892][ T7265] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.444'. [ 175.878560][ T7270] netlink: 2 bytes leftover after parsing attributes in process `syz.3.445'. [ 175.888925][ T7270] netlink: 40 bytes leftover after parsing attributes in process `syz.3.445'. [ 175.898455][ T7270] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 175.909376][ T7270] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 177.032284][ T7307] validate_nla: 6 callbacks suppressed [ 177.032301][ T7307] netlink: 'syz.2.455': attribute type 10 has an invalid length. [ 177.060916][ T7307] __nla_validate_parse: 3 callbacks suppressed [ 177.060935][ T7307] netlink: 2 bytes leftover after parsing attributes in process `syz.2.455'. [ 177.083951][ T7307] netlink: 'syz.2.455': attribute type 10 has an invalid length. [ 177.093086][ T7307] netlink: 40 bytes leftover after parsing attributes in process `syz.2.455'. [ 177.107002][ T7307] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 177.120719][ T7307] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 179.122671][ T7345] netlink: 'syz.0.466': attribute type 10 has an invalid length. [ 179.139803][ T7345] netlink: 2 bytes leftover after parsing attributes in process `syz.0.466'. [ 179.176920][ T7348] netlink: 'syz.0.466': attribute type 10 has an invalid length. [ 179.219964][ T7348] netlink: 40 bytes leftover after parsing attributes in process `syz.0.466'. [ 179.249600][ T7348] `: Device lo is loopback device. Loopback devices can't be added as a team port [ 179.279007][ T7348] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 179.591478][ T7357] netlink: 60 bytes leftover after parsing attributes in process `syz.0.471'. [ 179.815965][ T7366] netlink: 'syz.2.474': attribute type 1 has an invalid length. [ 179.823812][ T7366] netlink: 146340 bytes leftover after parsing attributes in process `syz.2.474'. [ 180.231490][ T7377] netlink: 'syz.3.479': attribute type 10 has an invalid length. [ 180.250970][ T7377] netlink: 2 bytes leftover after parsing attributes in process `syz.3.479'. [ 180.263212][ T7377] netlink: 'syz.3.479': attribute type 10 has an invalid length. [ 180.285995][ T7377] netlink: 40 bytes leftover after parsing attributes in process `syz.3.479'. [ 180.307381][ T7377] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 180.338489][ T7377] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 181.532400][ T7427] netlink: 'syz.3.491': attribute type 29 has an invalid length. [ 181.551070][ T7427] netlink: 'syz.3.491': attribute type 29 has an invalid length. [ 181.686146][ T7434] netlink: 'syz.0.493': attribute type 10 has an invalid length. [ 181.694193][ T7434] netlink: 2 bytes leftover after parsing attributes in process `syz.0.493'. [ 181.704874][ T7434] netlink: 40 bytes leftover after parsing attributes in process `syz.0.493'. [ 181.717961][ T7434] `: Device lo is loopback device. Loopback devices can't be added as a team port [ 181.730657][ T7434] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 185.584777][ T7463] syzkaller0: entered promiscuous mode [ 185.644232][ T7463] syzkaller0: entered allmulticast mode [ 189.458902][ T7486] validate_nla: 1 callbacks suppressed [ 189.458914][ T7486] netlink: 'syz.2.506': attribute type 10 has an invalid length. [ 189.472700][ T7486] netlink: 2 bytes leftover after parsing attributes in process `syz.2.506'. [ 189.481935][ T7487] netlink: 'syz.2.506': attribute type 10 has an invalid length. [ 189.490133][ T7487] netlink: 40 bytes leftover after parsing attributes in process `syz.2.506'. [ 189.499510][ T7487] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 189.509841][ T7487] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 189.795064][ T7497] netlink: 'syz.2.510': attribute type 8 has an invalid length. [ 189.812761][ T7497] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.510'. [ 190.386198][ T7510] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.515'. [ 190.649660][ T7514] netlink: 'syz.0.516': attribute type 10 has an invalid length. [ 190.661138][ T7514] netlink: 2 bytes leftover after parsing attributes in process `syz.0.516'. [ 190.694969][ T7515] netlink: 'syz.0.516': attribute type 10 has an invalid length. [ 190.710779][ T7515] netlink: 40 bytes leftover after parsing attributes in process `syz.0.516'. [ 190.722932][ T7515] `: Device lo is loopback device. Loopback devices can't be added as a team port [ 190.738001][ T7515] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 191.185063][ T7534] netlink: 'syz.2.524': attribute type 3 has an invalid length. [ 191.204935][ T7534] netlink: 'syz.2.524': attribute type 275 has an invalid length. [ 191.820372][ T7543] netlink: 'syz.3.527': attribute type 4 has an invalid length. [ 191.847630][ T7543] netlink: 152 bytes leftover after parsing attributes in process `syz.3.527'. [ 191.902367][ T7543] .`: renamed from bond0 (while UP) [ 192.024431][ T7553] netlink: 'syz.0.529': attribute type 10 has an invalid length. [ 192.057774][ T7553] netlink: 2 bytes leftover after parsing attributes in process `syz.0.529'. [ 192.068940][ T7553] netlink: 'syz.0.529': attribute type 10 has an invalid length. [ 192.076964][ T7553] netlink: 40 bytes leftover after parsing attributes in process `syz.0.529'. [ 192.096087][ T7553] `: Device lo is loopback device. Loopback devices can't be added as a team port [ 192.106599][ T7553] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 192.454099][ T7571] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.534'. [ 192.471110][ T7571] openvswitch: netlink: Tunnel attr 0 has unexpected len 5 expected 8 [ 192.666799][ T7579] openvswitch: netlink: Key type 29 is not supported [ 193.264094][ T7572] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 193.692192][ T7572] .` (unregistering): (slave batadv_slave_0): Releasing backup interface [ 193.728193][ T7572] .` (unregistering): Released all slaves [ 193.856832][ T7588] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 193.881102][ T7588] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 194.677032][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.684752][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.785461][ T7627] syzkaller0: entered promiscuous mode [ 195.806117][ T7627] syzkaller0: entered allmulticast mode [ 195.830276][ T7632] validate_nla: 5 callbacks suppressed [ 195.830295][ T7632] netlink: 'syz.3.554': attribute type 10 has an invalid length. [ 195.864104][ T7632] __nla_validate_parse: 6 callbacks suppressed [ 195.864123][ T7632] netlink: 2 bytes leftover after parsing attributes in process `syz.3.554'. [ 196.077766][ T7639] netlink: 'syz.3.554': attribute type 10 has an invalid length. [ 196.103062][ T7639] netlink: 40 bytes leftover after parsing attributes in process `syz.3.554'. [ 196.173631][ T7639] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 196.234362][ T7639] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 198.822224][ T7653] netlink: 160 bytes leftover after parsing attributes in process `syz.2.558'. [ 199.088109][ T7678] netlink: 'syz.0.565': attribute type 10 has an invalid length. [ 199.096387][ T7678] netlink: 2 bytes leftover after parsing attributes in process `syz.0.565'. [ 199.106822][ T7678] netlink: 'syz.0.565': attribute type 10 has an invalid length. [ 199.114719][ T7678] netlink: 40 bytes leftover after parsing attributes in process `syz.0.565'. [ 199.124325][ T7678] `: Device lo is loopback device. Loopback devices can't be added as a team port [ 199.134605][ T7678] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 199.549464][ T51] Bluetooth: hci3: ISO packet for unknown connection handle 2622 [ 199.572489][ T7683] netlink: 'syz.1.567': attribute type 17 has an invalid length. [ 199.595497][ T7683] netlink: 152 bytes leftover after parsing attributes in process `syz.1.567'. [ 199.608361][ T7683] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 200.275492][ T7714] netlink: 'syz.1.576': attribute type 10 has an invalid length. [ 200.284668][ T7714] netlink: 2 bytes leftover after parsing attributes in process `syz.1.576'. [ 200.320127][ T7714] netlink: 'syz.1.576': attribute type 10 has an invalid length. [ 200.346797][ T7714] netlink: 40 bytes leftover after parsing attributes in process `syz.1.576'. [ 200.368416][ T7714] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 200.410862][ T7714] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 200.713201][ T7733] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 200.754543][ T7733] netlink: 'syz.2.581': attribute type 3 has an invalid length. [ 200.787871][ T7733] netlink: 16066 bytes leftover after parsing attributes in process `syz.2.581'. [ 200.927090][ T7733] netlink: 'syz.2.581': attribute type 12 has an invalid length. [ 200.949953][ T7733] netlink: 132 bytes leftover after parsing attributes in process `syz.2.581'. [ 201.143709][ T7743] €Â0: renamed from batadv_slave_1 (while UP) [ 202.754832][ T7761] netlink: 'syz.0.591': attribute type 10 has an invalid length. [ 202.771127][ T7761] netlink: 2 bytes leftover after parsing attributes in process `syz.0.591'. [ 202.795843][ T7761] netlink: 'syz.0.591': attribute type 10 has an invalid length. [ 202.828855][ T7761] netlink: 40 bytes leftover after parsing attributes in process `syz.0.591'. [ 202.885771][ T7761] `: Device lo is loopback device. Loopback devices can't be added as a team port [ 202.969118][ T7761] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 203.198902][ T4115] wlan1: Trigger new scan to find an IBSS to join [ 203.331732][ T7770] netlink: 'syz.1.592': attribute type 10 has an invalid length. [ 203.395615][ T7771] netlink: 209840 bytes leftover after parsing attributes in process `syz.1.592'. [ 203.695117][ T7756] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.588'. [ 205.625475][ T7770] team0: Port device dummy0 added [ 205.761296][ T7756] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 205.807025][ T7756] CPU: 0 PID: 7756 Comm: syz.2.588 Not tainted syzkaller #0 [ 205.814397][ T7756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 205.824520][ T7756] Call Trace: [ 205.827852][ T7756] [ 205.830834][ T7756] dump_stack_lvl+0x18c/0x250 [ 205.835585][ T7756] ? show_regs_print_info+0x20/0x20 [ 205.840857][ T7756] ? load_image+0x400/0x400 [ 205.845427][ T7756] sysfs_warn_dup+0x8e/0xa0 [ 205.849980][ T7756] sysfs_do_create_link_sd+0xc0/0x110 [ 205.855411][ T7756] device_add_class_symlinks+0x1cf/0x240 [ 205.861118][ T7756] device_add+0x507/0xc20 [ 205.865495][ T7756] wiphy_register+0x1dad/0x2ae0 [ 205.870397][ T7756] ? cfg80211_event_work+0x40/0x40 [ 205.875532][ T7756] ? minstrel_ht_alloc+0x88a/0x990 [ 205.880702][ T7756] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 205.886816][ T7756] ieee80211_register_hw+0x3464/0x4250 [ 205.892332][ T7756] ? ieee80211_tasklet_handler+0x20/0x20 [ 205.898003][ T7756] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 205.903976][ T7756] ? __debug_object_init+0xec/0x450 [ 205.909242][ T7756] ? __asan_memset+0x22/0x40 [ 205.913880][ T7756] ? __hrtimer_init+0x186/0x270 [ 205.918779][ T7756] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 205.924609][ T7756] ? mac80211_hwsim_free+0x220/0x220 [ 205.930126][ T7756] ? rcu_is_watching+0x15/0xb0 [ 205.934928][ T7756] ? kstrndup+0xbd/0x140 [ 205.939216][ T7756] hwsim_new_radio_nl+0xdc9/0x1a90 [ 205.944382][ T7756] ? __nla_validate+0x50/0x50 [ 205.949109][ T7756] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 205.955486][ T7756] ? __nla_parse+0x40/0x50 [ 205.959940][ T7756] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 205.966308][ T7756] genl_family_rcv_msg_doit+0x211/0x310 [ 205.971899][ T7756] ? end_current_label_crit_section+0x170/0x170 [ 205.978444][ T7756] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 205.984370][ T7756] ? bpf_lsm_capable+0x9/0x10 [ 205.989083][ T7756] ? security_capable+0x89/0xb0 [ 205.993988][ T7756] genl_rcv_msg+0x619/0x7a0 [ 205.998527][ T7756] ? genl_bind+0x360/0x360 [ 206.002969][ T7756] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 206.009355][ T7756] netlink_rcv_skb+0x241/0x4d0 [ 206.014158][ T7756] ? genl_bind+0x360/0x360 [ 206.018607][ T7756] ? netlink_ack+0x1180/0x1180 [ 206.023952][ T7756] ? __lock_acquire+0x7d40/0x7d40 [ 206.029106][ T7756] ? down_read+0x1ac/0x2e0 [ 206.033550][ T7756] genl_rcv+0x28/0x40 [ 206.037555][ T7756] netlink_unicast+0x751/0x8d0 [ 206.042362][ T7756] netlink_sendmsg+0x8d0/0xbf0 [ 206.047173][ T7756] ? netlink_getsockopt+0x590/0x590 [ 206.052411][ T7756] ? aa_sock_msg_perm+0x94/0x150 [ 206.057383][ T7756] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 206.062707][ T7756] ? security_socket_sendmsg+0x80/0xa0 [ 206.068196][ T7756] ? netlink_getsockopt+0x590/0x590 [ 206.073431][ T7756] ____sys_sendmsg+0x5ba/0x960 [ 206.078323][ T7756] ? __asan_memset+0x22/0x40 [ 206.082965][ T7756] ? __sys_sendmsg_sock+0x30/0x30 [ 206.088019][ T7756] ? __import_iovec+0x5f2/0x850 [ 206.092923][ T7756] ? import_iovec+0x73/0xa0 [ 206.097456][ T7756] ___sys_sendmsg+0x2a6/0x360 [ 206.102251][ T7756] ? __sys_sendmsg+0x2a0/0x2a0 [ 206.107095][ T7756] __se_sys_sendmsg+0x1c2/0x2b0 [ 206.111974][ T7756] ? __x64_sys_sendmsg+0x80/0x80 [ 206.116980][ T7756] ? lockdep_hardirqs_on+0x98/0x150 [ 206.122222][ T7756] do_syscall_64+0x55/0xa0 [ 206.126676][ T7756] ? clear_bhb_loop+0x40/0x90 [ 206.131387][ T7756] ? clear_bhb_loop+0x40/0x90 [ 206.136096][ T7756] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 206.142021][ T7756] RIP: 0033:0x7f487419c799 [ 206.146475][ T7756] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 206.166127][ T7756] RSP: 002b:00007f48750fa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 206.174575][ T7756] RAX: ffffffffffffffda RBX: 00007f4874415fa0 RCX: 00007f487419c799 [ 206.182602][ T7756] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000d [ 206.190606][ T7756] RBP: 00007f4874232bd9 R08: 0000000000000000 R09: 0000000000000000 [ 206.198611][ T7756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 206.206625][ T7756] R13: 00007f4874416038 R14: 00007f4874415fa0 R15: 00007ffca871d368 [ 206.214658][ T7756] [ 206.552079][ T7795] netlink: 'syz.1.597': attribute type 12 has an invalid length. [ 206.561588][ T7795] netlink: 132 bytes leftover after parsing attributes in process `syz.1.597'. [ 207.657360][ T7805] netlink: 'syz.0.602': attribute type 10 has an invalid length. [ 207.677960][ T7805] netlink: 2 bytes leftover after parsing attributes in process `syz.0.602'. [ 207.693096][ T7805] netlink: 'syz.0.602': attribute type 10 has an invalid length. [ 207.701054][ T7805] netlink: 40 bytes leftover after parsing attributes in process `syz.0.602'. [ 207.722028][ T7805] `: Device lo is loopback device. Loopback devices can't be added as a team port [ 207.737239][ T7805] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 207.769683][ T7808] batman_adv: batadv0: Interface deactivated: €Â0 [ 207.792555][ T7808] batman_adv: batadv0: Removing interface: €Â0 [ 208.052336][ T7818] netlink: 'syz.0.607': attribute type 21 has an invalid length. [ 208.060778][ T7818] netlink: 132 bytes leftover after parsing attributes in process `syz.0.607'. [ 208.139289][ T7823] netlink: 'syz.0.607': attribute type 21 has an invalid length. [ 208.161889][ T7823] netlink: 132 bytes leftover after parsing attributes in process `syz.0.607'. [ 208.238769][ T42] wlan1: Trigger new scan to find an IBSS to join [ 208.331425][ T7829] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 208.339169][ T7829] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 208.375212][ T7829] netlink: 180 bytes leftover after parsing attributes in process `syz.0.611'. [ 208.395340][ T7834] netlink: 'syz.3.613': attribute type 10 has an invalid length. [ 208.793678][ T7829] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 208.804239][ T7829] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 209.072083][ T7843] netlink: 'syz.1.615': attribute type 10 has an invalid length. [ 209.096524][ T7843] netlink: 2 bytes leftover after parsing attributes in process `syz.1.615'. [ 209.113565][ T7841] netlink: 4 bytes leftover after parsing attributes in process `syz.0.614'. [ 209.165333][ T42] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 209.262104][ T7843] netlink: 'syz.1.615': attribute type 10 has an invalid length. [ 209.270169][ T7843] netlink: 40 bytes leftover after parsing attributes in process `syz.1.615'. [ 209.279697][ T7843] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 209.295134][ T7843] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 209.346665][ T7854] netlink: 'syz.3.617': attribute type 1 has an invalid length. [ 209.348867][ T7850] tap0: tun_chr_ioctl cmd 35108 [ 209.354940][ T7854] netlink: 15487 bytes leftover after parsing attributes in process `syz.3.617'. [ 209.391735][ T7844] tap0: tun_chr_ioctl cmd 35108 [ 209.923500][ T7864] syzkaller0: entered promiscuous mode [ 209.933162][ T7864] syzkaller0: entered allmulticast mode [ 212.156596][ T5783] Bluetooth: hci0: command 0x0406 tx timeout [ 212.162875][ T5786] Bluetooth: hci3: command 0x0406 tx timeout [ 212.172100][ T5776] Bluetooth: hci2: command 0x0406 tx timeout [ 212.178489][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 214.989568][ T7871] lo: entered allmulticast mode [ 215.044862][ T7875] lo: entered promiscuous mode [ 215.054119][ T7875] lo: left allmulticast mode [ 215.062060][ T7876] netlink: 'syz.0.623': attribute type 10 has an invalid length. [ 215.077023][ T7876] mac80211_hwsim hwsim5 wlan1: left promiscuous mode [ 215.083780][ T7876] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 215.125799][ T7876] `: Port device wlan1 added [ 215.140561][ T7880] __nla_validate_parse: 2 callbacks suppressed [ 215.140578][ T7880] netlink: 144 bytes leftover after parsing attributes in process `syz.0.623'. [ 215.216713][ T7880] `: Port device team_slave_0 removed [ 215.222900][ T7880] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 215.265954][ T7890] netlink: 'syz.2.626': attribute type 10 has an invalid length. [ 215.273772][ T7890] netlink: 2 bytes leftover after parsing attributes in process `syz.2.626'. [ 215.319079][ T7891] netlink: 'syz.2.626': attribute type 10 has an invalid length. [ 215.332712][ T7891] netlink: 40 bytes leftover after parsing attributes in process `syz.2.626'. [ 215.341849][ T7891] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 215.364527][ T7891] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 215.706497][ T7900] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.629'. [ 215.797764][ T7907] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 215.805525][ T7907] syzkaller0: linktype set to 804 [ 215.869309][ T7909] netlink: 132 bytes leftover after parsing attributes in process `syz.0.633'. [ 215.879037][ T7907] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.632'. [ 215.896111][ T7907] netlink: 6324 bytes leftover after parsing attributes in process `syz.1.632'. [ 215.915718][ T7907] netlink: 2 bytes leftover after parsing attributes in process `syz.1.632'. [ 215.925279][ T7907] tc_dump_action: action bad kind [ 216.212074][ T7924] netlink: 'syz.1.638': attribute type 10 has an invalid length. [ 216.225430][ T7924] netlink: 2 bytes leftover after parsing attributes in process `syz.1.638'. [ 216.238113][ T7924] netlink: 'syz.1.638': attribute type 10 has an invalid length. [ 216.248768][ T7924] netlink: 40 bytes leftover after parsing attributes in process `syz.1.638'. [ 216.286274][ T7924] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 216.337525][ T7924] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 216.602372][ T7931] openvswitch: netlink: Key 32 has unexpected len 3064 expected 2 [ 217.114160][ T7937] FAULT_INJECTION: forcing a failure. [ 217.114160][ T7937] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 217.141949][ T7937] CPU: 0 PID: 7937 Comm: syz.1.643 Not tainted syzkaller #0 [ 217.149323][ T7937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 217.159444][ T7937] Call Trace: [ 217.162768][ T7937] [ 217.165740][ T7937] dump_stack_lvl+0x18c/0x250 [ 217.170478][ T7937] ? show_regs_print_info+0x20/0x20 [ 217.175743][ T7937] ? load_image+0x400/0x400 [ 217.180319][ T7937] ? __might_fault+0xaa/0x120 [ 217.185055][ T7937] ? __lock_acquire+0x7d40/0x7d40 [ 217.190150][ T7937] should_fail_ex+0x39d/0x4d0 [ 217.194909][ T7937] _copy_from_user+0x2f/0xe0 [ 217.199567][ T7937] __sys_bpf+0x23e/0x890 [ 217.203875][ T7937] ? bpf_link_show_fdinfo+0x390/0x390 [ 217.209314][ T7937] ? lock_chain_count+0x20/0x20 [ 217.214231][ T7937] __x64_sys_bpf+0x7c/0x90 [ 217.218696][ T7937] do_syscall_64+0x55/0xa0 [ 217.223153][ T7937] ? clear_bhb_loop+0x40/0x90 [ 217.227866][ T7937] ? clear_bhb_loop+0x40/0x90 [ 217.232583][ T7937] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 217.238544][ T7937] RIP: 0033:0x7fe3e4d9c799 [ 217.243037][ T7937] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 217.262770][ T7937] RSP: 002b:00007fe3e5c3b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 217.271216][ T7937] RAX: ffffffffffffffda RBX: 00007fe3e5015fa0 RCX: 00007fe3e4d9c799 [ 217.279226][ T7937] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 217.287221][ T7937] RBP: 00007fe3e5c3b090 R08: 0000000000000000 R09: 0000000000000000 [ 217.295219][ T7937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 217.303223][ T7937] R13: 00007fe3e5016038 R14: 00007fe3e5015fa0 R15: 00007ffe3caf0408 [ 217.311236][ T7937] [ 217.854729][ T7949] bridge_slave_1: left allmulticast mode [ 217.869653][ T7949] bridge_slave_1: left promiscuous mode [ 217.891708][ T7949] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.959165][ T7949] bridge_slave_0: left allmulticast mode [ 220.965445][ T7949] bridge_slave_0: left promiscuous mode [ 220.973297][ T7949] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.337381][ T7975] netlink: 'syz.2.658': attribute type 11 has an invalid length. [ 221.353847][ T7975] netlink: 'syz.2.658': attribute type 1 has an invalid length. [ 221.362370][ T7975] netlink: 'syz.2.658': attribute type 2 has an invalid length. [ 221.373792][ T7975] __nla_validate_parse: 3 callbacks suppressed [ 221.373808][ T7975] netlink: 198048 bytes leftover after parsing attributes in process `syz.2.658'. [ 221.453419][ T7950] netlink: 12 bytes leftover after parsing attributes in process `syz.1.647'. [ 221.474494][ T7970] netlink: 'syz.2.658': attribute type 21 has an invalid length. [ 221.504482][ T7970] netlink: 128 bytes leftover after parsing attributes in process `syz.2.658'. [ 221.517524][ T7970] netlink: 'syz.2.658': attribute type 4 has an invalid length. [ 221.526955][ T7970] netlink: 'syz.2.658': attribute type 3 has an invalid length. [ 221.535293][ T7970] netlink: 3 bytes leftover after parsing attributes in process `syz.2.658'. [ 221.623182][ T7978] netlink: 'syz.0.651': attribute type 10 has an invalid length. [ 221.694334][ T7978] netlink: 2 bytes leftover after parsing attributes in process `syz.0.651'. [ 221.818651][ T7987] netlink: 'syz.2.654': attribute type 3 has an invalid length. [ 221.844530][ T7987] netlink: 'syz.2.654': attribute type 1 has an invalid length. [ 221.865174][ T7982] netlink: 'syz.0.651': attribute type 10 has an invalid length. [ 221.875091][ T7987] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.654'. [ 221.888400][ T7982] netlink: 40 bytes leftover after parsing attributes in process `syz.0.651'. [ 221.900385][ T7982] lo: left promiscuous mode [ 221.905626][ T7982] `: Device lo is loopback device. Loopback devices can't be added as a team port [ 221.918666][ T7982] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 221.950269][ T7981] netlink: 152 bytes leftover after parsing attributes in process `syz.1.652'. [ 222.204425][ T8001] FAULT_INJECTION: forcing a failure. [ 222.204425][ T8001] name failslab, interval 1, probability 0, space 0, times 1 [ 222.245997][ T8001] CPU: 0 PID: 8001 Comm: syz.0.657 Not tainted syzkaller #0 [ 222.253369][ T8001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 222.263616][ T8001] Call Trace: [ 222.266943][ T8001] [ 222.269919][ T8001] dump_stack_lvl+0x18c/0x250 [ 222.274671][ T8001] ? show_regs_print_info+0x20/0x20 [ 222.279933][ T8001] ? load_image+0x400/0x400 [ 222.284522][ T8001] ? __lock_acquire+0x7d40/0x7d40 [ 222.289606][ T8001] should_fail_ex+0x39d/0x4d0 [ 222.294464][ T8001] should_failslab+0x9/0x20 [ 222.299041][ T8001] slab_pre_alloc_hook+0x59/0x310 [ 222.304124][ T8001] ? bpf_test_init+0x9f/0x140 [ 222.308849][ T8001] ? bpf_test_init+0x9f/0x140 [ 222.313668][ T8001] __kmem_cache_alloc_node+0x53/0x250 [ 222.319113][ T8001] ? bpf_test_init+0x9f/0x140 [ 222.323846][ T8001] __kmalloc+0xa4/0x230 [ 222.328065][ T8001] bpf_test_init+0x9f/0x140 [ 222.332629][ T8001] bpf_prog_test_run_xdp+0x4d1/0x10e0 [ 222.338073][ T8001] ? dev_put+0x80/0x80 [ 222.342209][ T8001] ? dev_put+0x80/0x80 [ 222.346334][ T8001] bpf_prog_test_run+0x321/0x390 [ 222.351592][ T8001] __sys_bpf+0x49d/0x890 [ 222.355888][ T8001] ? bpf_link_show_fdinfo+0x390/0x390 [ 222.361370][ T8001] ? lock_chain_count+0x20/0x20 [ 222.366303][ T8001] __x64_sys_bpf+0x7c/0x90 [ 222.370767][ T8001] do_syscall_64+0x55/0xa0 [ 222.375238][ T8001] ? clear_bhb_loop+0x40/0x90 [ 222.379966][ T8001] ? clear_bhb_loop+0x40/0x90 [ 222.384698][ T8001] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 222.390644][ T8001] RIP: 0033:0x7f881ff9c799 [ 222.395112][ T8001] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 222.414777][ T8001] RSP: 002b:00007f8820e71028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 222.423254][ T8001] RAX: ffffffffffffffda RBX: 00007f8820215fa0 RCX: 00007f881ff9c799 [ 222.431297][ T8001] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 222.439507][ T8001] RBP: 00007f8820e71090 R08: 0000000000000000 R09: 0000000000000000 [ 222.447544][ T8001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 222.455643][ T8001] R13: 00007f8820216038 R14: 00007f8820215fa0 R15: 00007ffdc66811f8 [ 222.463710][ T8001] [ 222.797056][ T8011] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 222.828371][ T8011] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 222.852796][ T8011] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 222.865391][ T8011] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 223.074399][ T8016] .&nr: renamed from bond_slave_1 (while UP) [ 223.792049][ T8023] netlink: 132 bytes leftover after parsing attributes in process `syz.0.665'. [ 223.956707][ T8022] netlink: 128 bytes leftover after parsing attributes in process `syz.3.664'. [ 223.985100][ T8026] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 224.005690][ T8026] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 224.631234][ T8034] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 224.642167][ T8034] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 226.898811][ T8051] wg2: entered promiscuous mode [ 226.926105][ T8051] wg2: entered allmulticast mode [ 227.132400][ T8062] FAULT_INJECTION: forcing a failure. [ 227.132400][ T8062] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 227.193094][ T8062] CPU: 0 PID: 8062 Comm: syz.0.673 Not tainted syzkaller #0 [ 227.200476][ T8062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 227.210585][ T8062] Call Trace: [ 227.213935][ T8062] [ 227.216916][ T8062] dump_stack_lvl+0x18c/0x250 [ 227.221703][ T8062] ? show_regs_print_info+0x20/0x20 [ 227.226965][ T8062] ? load_image+0x400/0x400 [ 227.231543][ T8062] ? __lock_acquire+0x7d40/0x7d40 [ 227.236622][ T8062] ? __virt_addr_valid+0x18c/0x540 [ 227.241810][ T8062] should_fail_ex+0x39d/0x4d0 [ 227.246567][ T8062] _copy_from_user+0x2f/0xe0 [ 227.251221][ T8062] bpf_test_init+0xde/0x140 [ 227.255765][ T8062] bpf_prog_test_run_xdp+0x4d1/0x10e0 [ 227.261283][ T8062] ? dev_put+0x80/0x80 [ 227.266013][ T8062] ? dev_put+0x80/0x80 [ 227.270124][ T8062] bpf_prog_test_run+0x321/0x390 [ 227.275096][ T8062] __sys_bpf+0x49d/0x890 [ 227.279376][ T8062] ? bpf_link_show_fdinfo+0x390/0x390 [ 227.284811][ T8062] ? lock_chain_count+0x20/0x20 [ 227.289714][ T8062] __x64_sys_bpf+0x7c/0x90 [ 227.294203][ T8062] do_syscall_64+0x55/0xa0 [ 227.298669][ T8062] ? clear_bhb_loop+0x40/0x90 [ 227.303391][ T8062] ? clear_bhb_loop+0x40/0x90 [ 227.308115][ T8062] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 227.314039][ T8062] RIP: 0033:0x7f881ff9c799 [ 227.318492][ T8062] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 227.338134][ T8062] RSP: 002b:00007f8820e71028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 227.346584][ T8062] RAX: ffffffffffffffda RBX: 00007f8820215fa0 RCX: 00007f881ff9c799 [ 227.354674][ T8062] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 227.362765][ T8062] RBP: 00007f8820e71090 R08: 0000000000000000 R09: 0000000000000000 [ 227.370765][ T8062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 227.378769][ T8062] R13: 00007f8820216038 R14: 00007f8820215fa0 R15: 00007ffdc66811f8 [ 227.386790][ T8062] [ 227.778736][ T8072] @0Ù: renamed from bond_slave_1 (while UP) [ 228.807031][ T8076] FAULT_INJECTION: forcing a failure. [ 228.807031][ T8076] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 228.836219][ T8076] CPU: 0 PID: 8076 Comm: syz.1.679 Not tainted syzkaller #0 [ 228.843594][ T8076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 228.853694][ T8076] Call Trace: [ 228.857009][ T8076] [ 228.859979][ T8076] dump_stack_lvl+0x18c/0x250 [ 228.864701][ T8076] ? show_regs_print_info+0x20/0x20 [ 228.869947][ T8076] ? load_image+0x400/0x400 [ 228.874914][ T8076] ? __might_fault+0xaa/0x120 [ 228.879623][ T8076] ? __lock_acquire+0x7d40/0x7d40 [ 228.884678][ T8076] should_fail_ex+0x39d/0x4d0 [ 228.889393][ T8076] _copy_from_user+0x2f/0xe0 [ 228.894023][ T8076] __sys_bpf+0x23e/0x890 [ 228.898299][ T8076] ? bpf_link_show_fdinfo+0x390/0x390 [ 228.903707][ T8076] ? lock_chain_count+0x20/0x20 [ 228.908617][ T8076] __x64_sys_bpf+0x7c/0x90 [ 228.913074][ T8076] do_syscall_64+0x55/0xa0 [ 228.917528][ T8076] ? clear_bhb_loop+0x40/0x90 [ 228.922245][ T8076] ? clear_bhb_loop+0x40/0x90 [ 228.927001][ T8076] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 228.932951][ T8076] RIP: 0033:0x7fe3e4d9c799 [ 228.937406][ T8076] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 228.957065][ T8076] RSP: 002b:00007fe3e5c3b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 228.965514][ T8076] RAX: ffffffffffffffda RBX: 00007fe3e5015fa0 RCX: 00007fe3e4d9c799 [ 228.973509][ T8076] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 228.981509][ T8076] RBP: 00007fe3e5c3b090 R08: 0000000000000000 R09: 0000000000000000 [ 228.989508][ T8076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 228.997503][ T8076] R13: 00007fe3e5016038 R14: 00007fe3e5015fa0 R15: 00007ffe3caf0408 [ 229.005515][ T8076] [ 229.379196][ T8090] FAULT_INJECTION: forcing a failure. [ 229.379196][ T8090] name failslab, interval 1, probability 0, space 0, times 0 [ 229.437171][ T8090] CPU: 0 PID: 8090 Comm: syz.2.693 Not tainted syzkaller #0 [ 229.444542][ T8090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 229.454640][ T8090] Call Trace: [ 229.457963][ T8090] [ 229.460915][ T8090] dump_stack_lvl+0x18c/0x250 [ 229.465646][ T8090] ? show_regs_print_info+0x20/0x20 [ 229.470876][ T8090] ? load_image+0x400/0x400 [ 229.475413][ T8090] ? __lock_acquire+0x7d40/0x7d40 [ 229.480473][ T8090] should_fail_ex+0x39d/0x4d0 [ 229.485198][ T8090] should_failslab+0x9/0x20 [ 229.489730][ T8090] slab_pre_alloc_hook+0x59/0x310 [ 229.494786][ T8090] ? bpf_test_init+0x9f/0x140 [ 229.499487][ T8090] ? bpf_test_init+0x9f/0x140 [ 229.504192][ T8090] __kmem_cache_alloc_node+0x53/0x250 [ 229.509596][ T8090] ? bpf_test_init+0x9f/0x140 [ 229.514289][ T8090] __kmalloc+0xa4/0x230 [ 229.518484][ T8090] bpf_test_init+0x9f/0x140 [ 229.523025][ T8090] bpf_prog_test_run_xdp+0x4d1/0x10e0 [ 229.528535][ T8090] ? dev_put+0x80/0x80 [ 229.532652][ T8090] ? dev_put+0x80/0x80 [ 229.536745][ T8090] bpf_prog_test_run+0x321/0x390 [ 229.541736][ T8090] __sys_bpf+0x49d/0x890 [ 229.546013][ T8090] ? bpf_link_show_fdinfo+0x390/0x390 [ 229.551619][ T8090] ? lock_chain_count+0x20/0x20 [ 229.556521][ T8090] __x64_sys_bpf+0x7c/0x90 [ 229.560979][ T8090] do_syscall_64+0x55/0xa0 [ 229.565464][ T8090] ? clear_bhb_loop+0x40/0x90 [ 229.570181][ T8090] ? clear_bhb_loop+0x40/0x90 [ 229.574903][ T8090] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 229.580840][ T8090] RIP: 0033:0x7f487419c799 [ 229.585300][ T8090] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 229.605033][ T8090] RSP: 002b:00007f48750fa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 229.613477][ T8090] RAX: ffffffffffffffda RBX: 00007f4874415fa0 RCX: 00007f487419c799 [ 229.621477][ T8090] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 229.629476][ T8090] RBP: 00007f48750fa090 R08: 0000000000000000 R09: 0000000000000000 [ 229.637471][ T8090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 229.645483][ T8090] R13: 00007f4874416038 R14: 00007f4874415fa0 R15: 00007ffca871d368 [ 229.653507][ T8090] [ 229.720150][ T8089] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 229.746277][ T8089] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 230.544808][ T8095] validate_nla: 15 callbacks suppressed [ 230.544826][ T8095] netlink: 'syz.1.685': attribute type 1 has an invalid length. [ 230.568741][ T8095] netlink: 'syz.1.685': attribute type 4 has an invalid length. [ 230.585984][ T8095] __nla_validate_parse: 8 callbacks suppressed [ 230.585999][ T8095] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.685'. [ 231.134688][ T8097] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.686'. [ 231.416447][ T8105] FAULT_INJECTION: forcing a failure. [ 231.416447][ T8105] name failslab, interval 1, probability 0, space 0, times 0 [ 231.456170][ T8105] CPU: 1 PID: 8105 Comm: syz.2.687 Not tainted syzkaller #0 [ 231.463543][ T8105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 231.473661][ T8105] Call Trace: [ 231.477101][ T8105] [ 231.480075][ T8105] dump_stack_lvl+0x18c/0x250 [ 231.484824][ T8105] ? show_regs_print_info+0x20/0x20 [ 231.490083][ T8105] ? load_image+0x400/0x400 [ 231.494733][ T8105] ? __might_sleep+0xe0/0xe0 [ 231.499387][ T8105] ? __lock_acquire+0x7d40/0x7d40 [ 231.504468][ T8105] should_fail_ex+0x39d/0x4d0 [ 231.509254][ T8105] should_failslab+0x9/0x20 [ 231.513857][ T8105] slab_pre_alloc_hook+0x59/0x310 [ 231.519037][ T8105] ? __lock_acquire+0x7d40/0x7d40 [ 231.524120][ T8105] ? kvmalloc_node+0x70/0x180 [ 231.528862][ T8105] ? kvmalloc_node+0x70/0x180 [ 231.533599][ T8105] __kmem_cache_alloc_node+0x53/0x250 [ 231.539032][ T8105] ? __schedule_delayed_monitor_work+0x200/0x200 [ 231.545437][ T8105] ? kvmalloc_node+0x70/0x180 [ 231.550175][ T8105] __kmalloc_node+0xa4/0x230 [ 231.554827][ T8105] kvmalloc_node+0x70/0x180 [ 231.559389][ T8105] bpf_test_run_xdp_live+0x1c2/0x1b20 [ 231.564829][ T8105] ? 0xffffffffa0004740 [ 231.569035][ T8105] ? 0xffffffffa0004740 [ 231.573236][ T8105] ? bpf_dispatcher_change_prog+0xcbf/0xf10 [ 231.579176][ T8105] ? 0xffffffffa0004740 [ 231.583384][ T8105] ? xdp_convert_md_to_buff+0x330/0x330 [ 231.589016][ T8105] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 231.595315][ T8105] ? _copy_from_user+0xa5/0xe0 [ 231.600137][ T8105] ? bpf_test_init+0x119/0x140 [ 231.604948][ T8105] ? xdp_convert_md_to_buff+0x5b/0x330 [ 231.610458][ T8105] bpf_prog_test_run_xdp+0x7ca/0x10e0 [ 231.615904][ T8105] ? dev_put+0x80/0x80 [ 231.620043][ T8105] ? dev_put+0x80/0x80 [ 231.624160][ T8105] bpf_prog_test_run+0x321/0x390 [ 231.629165][ T8105] __sys_bpf+0x49d/0x890 [ 231.633475][ T8105] ? bpf_link_show_fdinfo+0x390/0x390 [ 231.638930][ T8105] ? lock_chain_count+0x20/0x20 [ 231.643858][ T8105] __x64_sys_bpf+0x7c/0x90 [ 231.648337][ T8105] do_syscall_64+0x55/0xa0 [ 231.652821][ T8105] ? clear_bhb_loop+0x40/0x90 [ 231.657563][ T8105] ? clear_bhb_loop+0x40/0x90 [ 231.662468][ T8105] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 231.668419][ T8105] RIP: 0033:0x7f487419c799 [ 231.672878][ T8105] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 231.692819][ T8105] RSP: 002b:00007f48750fa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 231.701298][ T8105] RAX: ffffffffffffffda RBX: 00007f4874415fa0 RCX: 00007f487419c799 [ 231.709325][ T8105] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 231.717350][ T8105] RBP: 00007f48750fa090 R08: 0000000000000000 R09: 0000000000000000 [ 231.725367][ T8105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 231.733394][ T8105] R13: 00007f4874416038 R14: 00007f4874415fa0 R15: 00007ffca871d368 [ 231.741447][ T8105] [ 232.938917][ T8117] syzkaller0: entered promiscuous mode [ 232.944656][ T8117] syzkaller0: entered allmulticast mode [ 233.026306][ T8130] FAULT_INJECTION: forcing a failure. [ 233.026306][ T8130] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 233.042183][ T8130] CPU: 1 PID: 8130 Comm: syz.0.697 Not tainted syzkaller #0 [ 233.049558][ T8130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 233.059647][ T8130] Call Trace: [ 233.062932][ T8130] [ 233.065922][ T8130] dump_stack_lvl+0x18c/0x250 [ 233.070639][ T8130] ? show_regs_print_info+0x20/0x20 [ 233.075884][ T8130] ? load_image+0x400/0x400 [ 233.080411][ T8130] ? __lock_acquire+0x7d40/0x7d40 [ 233.085444][ T8130] ? __virt_addr_valid+0x18c/0x540 [ 233.090587][ T8130] should_fail_ex+0x39d/0x4d0 [ 233.095387][ T8130] _copy_from_user+0x2f/0xe0 [ 233.100011][ T8130] bpf_test_init+0xde/0x140 [ 233.104536][ T8130] bpf_prog_test_run_xdp+0x4d1/0x10e0 [ 233.109945][ T8130] ? dev_put+0x80/0x80 [ 233.114035][ T8130] ? dev_put+0x80/0x80 [ 233.118117][ T8130] bpf_prog_test_run+0x321/0x390 [ 233.123072][ T8130] __sys_bpf+0x49d/0x890 [ 233.127329][ T8130] ? bpf_link_show_fdinfo+0x390/0x390 [ 233.132746][ T8130] ? lock_chain_count+0x20/0x20 [ 233.137673][ T8130] __x64_sys_bpf+0x7c/0x90 [ 233.142137][ T8130] do_syscall_64+0x55/0xa0 [ 233.146591][ T8130] ? clear_bhb_loop+0x40/0x90 [ 233.151319][ T8130] ? clear_bhb_loop+0x40/0x90 [ 233.156054][ T8130] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 233.161967][ T8130] RIP: 0033:0x7f881ff9c799 [ 233.166397][ T8130] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 233.186103][ T8130] RSP: 002b:00007f8820e71028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 233.194559][ T8130] RAX: ffffffffffffffda RBX: 00007f8820215fa0 RCX: 00007f881ff9c799 [ 233.202547][ T8130] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 233.210528][ T8130] RBP: 00007f8820e71090 R08: 0000000000000000 R09: 0000000000000000 [ 233.218508][ T8130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 233.226486][ T8130] R13: 00007f8820216038 R14: 00007f8820215fa0 R15: 00007ffdc66811f8 [ 233.234496][ T8130] [ 234.981494][ T8149] netlink: 'syz.0.712': attribute type 21 has an invalid length. [ 234.998828][ T8149] netlink: 132 bytes leftover after parsing attributes in process `syz.0.712'. [ 235.230859][ T8163] FAULT_INJECTION: forcing a failure. [ 235.230859][ T8163] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 235.286016][ T8163] CPU: 0 PID: 8163 Comm: syz.1.708 Not tainted syzkaller #0 [ 235.293392][ T8163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 235.303507][ T8163] Call Trace: [ 235.306842][ T8163] [ 235.309824][ T8163] dump_stack_lvl+0x18c/0x250 [ 235.314558][ T8163] ? show_regs_print_info+0x20/0x20 [ 235.319795][ T8163] ? load_image+0x400/0x400 [ 235.324335][ T8163] ? __lock_acquire+0x7d40/0x7d40 [ 235.329390][ T8163] ? __virt_addr_valid+0x18c/0x540 [ 235.334547][ T8163] should_fail_ex+0x39d/0x4d0 [ 235.339527][ T8163] _copy_from_user+0x2f/0xe0 [ 235.344166][ T8163] bpf_test_init+0xde/0x140 [ 235.348715][ T8163] bpf_prog_test_run_xdp+0x4d1/0x10e0 [ 235.354134][ T8163] ? dev_put+0x80/0x80 [ 235.358266][ T8163] ? dev_put+0x80/0x80 [ 235.362372][ T8163] bpf_prog_test_run+0x321/0x390 [ 235.367344][ T8163] __sys_bpf+0x49d/0x890 [ 235.371634][ T8163] ? bpf_link_show_fdinfo+0x390/0x390 [ 235.377049][ T8163] ? lock_chain_count+0x20/0x20 [ 235.381942][ T8163] __x64_sys_bpf+0x7c/0x90 [ 235.386384][ T8163] do_syscall_64+0x55/0xa0 [ 235.390831][ T8163] ? clear_bhb_loop+0x40/0x90 [ 235.395537][ T8163] ? clear_bhb_loop+0x40/0x90 [ 235.400250][ T8163] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 235.406171][ T8163] RIP: 0033:0x7fe3e4d9c799 [ 235.410609][ T8163] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 235.430243][ T8163] RSP: 002b:00007fe3e5c3b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 235.438704][ T8163] RAX: ffffffffffffffda RBX: 00007fe3e5015fa0 RCX: 00007fe3e4d9c799 [ 235.446699][ T8163] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 235.454690][ T8163] RBP: 00007fe3e5c3b090 R08: 0000000000000000 R09: 0000000000000000 [ 235.462689][ T8163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 235.470688][ T8163] R13: 00007fe3e5016038 R14: 00007fe3e5015fa0 R15: 00007ffe3caf0408 [ 235.478711][ T8163] [ 235.606693][ T8158] netlink: 'syz.2.704': attribute type 9 has an invalid length. [ 235.622224][ T8158] netlink: 391 bytes leftover after parsing attributes in process `syz.2.704'. [ 236.680902][ T8196] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.718'. [ 236.742621][ T8196] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate. [ 239.044214][ T8198] FAULT_INJECTION: forcing a failure. [ 239.044214][ T8198] name failslab, interval 1, probability 0, space 0, times 0 [ 239.090432][ T8198] CPU: 0 PID: 8198 Comm: syz.2.719 Not tainted syzkaller #0 [ 239.097792][ T8198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 239.107899][ T8198] Call Trace: [ 239.111221][ T8198] [ 239.114191][ T8198] dump_stack_lvl+0x18c/0x250 [ 239.118930][ T8198] ? show_regs_print_info+0x20/0x20 [ 239.124186][ T8198] ? load_image+0x400/0x400 [ 239.128742][ T8198] ? __might_sleep+0xe0/0xe0 [ 239.133386][ T8198] ? __lock_acquire+0x7d40/0x7d40 [ 239.138467][ T8198] should_fail_ex+0x39d/0x4d0 [ 239.143207][ T8198] should_failslab+0x9/0x20 [ 239.147764][ T8198] slab_pre_alloc_hook+0x59/0x310 [ 239.152848][ T8198] ? __lock_acquire+0x7d40/0x7d40 [ 239.157918][ T8198] ? kvmalloc_node+0x70/0x180 [ 239.162667][ T8198] ? kvmalloc_node+0x70/0x180 [ 239.167398][ T8198] __kmem_cache_alloc_node+0x53/0x250 [ 239.172831][ T8198] ? __schedule_delayed_monitor_work+0x200/0x200 [ 239.179233][ T8198] ? kvmalloc_node+0x70/0x180 [ 239.184008][ T8198] __kmalloc_node+0xa4/0x230 [ 239.188674][ T8198] kvmalloc_node+0x70/0x180 [ 239.193328][ T8198] bpf_test_run_xdp_live+0x1c2/0x1b20 [ 239.198768][ T8198] ? 0xffffffffa0004740 [ 239.202981][ T8198] ? 0xffffffffa0004740 [ 239.207226][ T8198] ? bpf_dispatcher_change_prog+0xcbf/0xf10 [ 239.213171][ T8198] ? 0xffffffffa0004740 [ 239.217382][ T8198] ? xdp_convert_md_to_buff+0x330/0x330 [ 239.223014][ T8198] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 239.229314][ T8198] ? _copy_from_user+0xa5/0xe0 [ 239.234142][ T8198] ? bpf_test_init+0x119/0x140 [ 239.238968][ T8198] ? xdp_convert_md_to_buff+0x5b/0x330 [ 239.244466][ T8198] bpf_prog_test_run_xdp+0x7ca/0x10e0 [ 239.249885][ T8198] ? dev_put+0x80/0x80 [ 239.253992][ T8198] ? dev_put+0x80/0x80 [ 239.258092][ T8198] bpf_prog_test_run+0x321/0x390 [ 239.263068][ T8198] __sys_bpf+0x49d/0x890 [ 239.267426][ T8198] ? bpf_link_show_fdinfo+0x390/0x390 [ 239.272839][ T8198] ? lock_chain_count+0x20/0x20 [ 239.277724][ T8198] __x64_sys_bpf+0x7c/0x90 [ 239.282171][ T8198] do_syscall_64+0x55/0xa0 [ 239.286615][ T8198] ? clear_bhb_loop+0x40/0x90 [ 239.291355][ T8198] ? clear_bhb_loop+0x40/0x90 [ 239.296063][ T8198] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 239.302076][ T8198] RIP: 0033:0x7f487419c799 [ 239.306516][ T8198] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 239.326282][ T8198] RSP: 002b:00007f48750fa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 239.334733][ T8198] RAX: ffffffffffffffda RBX: 00007f4874415fa0 RCX: 00007f487419c799 [ 239.342738][ T8198] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 239.350744][ T8198] RBP: 00007f48750fa090 R08: 0000000000000000 R09: 0000000000000000 [ 239.358740][ T8198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 239.366736][ T8198] R13: 00007f4874416038 R14: 00007f4874415fa0 R15: 00007ffca871d368 [ 239.374750][ T8198] [ 239.382322][ T11] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 239.421942][ T8202] pim6reg1: entered promiscuous mode [ 239.436150][ T8202] pim6reg1: entered allmulticast mode [ 239.496139][ T8205] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.722'. [ 239.657895][ T8210] FAULT_INJECTION: forcing a failure. [ 239.657895][ T8210] name failslab, interval 1, probability 0, space 0, times 0 [ 239.674701][ T8210] CPU: 1 PID: 8210 Comm: syz.0.731 Not tainted syzkaller #0 [ 239.682066][ T8210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 239.692186][ T8210] Call Trace: [ 239.695439][ T8208] delete_channel: no stack [ 239.695499][ T8210] [ 239.695510][ T8210] dump_stack_lvl+0x18c/0x250 [ 239.701669][ T8208] delete_channel: no stack [ 239.702883][ T8210] ? show_regs_print_info+0x20/0x20 [ 239.702919][ T8210] ? load_image+0x400/0x400 [ 239.702948][ T8210] ? __might_sleep+0xe0/0xe0 [ 239.702974][ T8210] ? __lock_acquire+0x7d40/0x7d40 [ 239.703003][ T8210] should_fail_ex+0x39d/0x4d0 [ 239.703038][ T8210] should_failslab+0x9/0x20 [ 239.703068][ T8210] slab_pre_alloc_hook+0x59/0x310 [ 239.703101][ T8210] ? page_pool_create+0x71/0x5c0 [ 239.703129][ T8210] __kmem_cache_alloc_node+0x53/0x250 [ 239.703163][ T8210] ? page_pool_create+0x71/0x5c0 [ 239.703190][ T8210] kmalloc_node_trace+0x26/0xe0 [ 239.703223][ T8210] page_pool_create+0x71/0x5c0 [ 239.703253][ T8210] bpf_test_run_xdp_live+0x203/0x1b20 [ 239.703286][ T8210] ? 0xffffffffa0004740 [ 239.703305][ T8210] ? 0xffffffffa0004740 [ 239.703322][ T8210] ? bpf_dispatcher_change_prog+0xcbf/0xf10 [ 239.790892][ T8210] ? 0xffffffffa0004740 [ 239.795082][ T8210] ? xdp_convert_md_to_buff+0x330/0x330 [ 239.800710][ T8210] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 239.806990][ T8210] ? _copy_from_user+0xa5/0xe0 [ 239.811875][ T8210] ? bpf_test_init+0x119/0x140 [ 239.816660][ T8210] ? xdp_convert_md_to_buff+0x5b/0x330 [ 239.822154][ T8210] bpf_prog_test_run_xdp+0x7ca/0x10e0 [ 239.827655][ T8210] ? dev_put+0x80/0x80 [ 239.831774][ T8210] ? dev_put+0x80/0x80 [ 239.835875][ T8210] bpf_prog_test_run+0x321/0x390 [ 239.840861][ T8210] __sys_bpf+0x49d/0x890 [ 239.845136][ T8210] ? bpf_link_show_fdinfo+0x390/0x390 [ 239.850558][ T8210] ? lock_chain_count+0x20/0x20 [ 239.855449][ T8210] __x64_sys_bpf+0x7c/0x90 [ 239.859900][ T8210] do_syscall_64+0x55/0xa0 [ 239.864391][ T8210] ? clear_bhb_loop+0x40/0x90 [ 239.869150][ T8210] ? clear_bhb_loop+0x40/0x90 [ 239.873869][ T8210] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 239.879796][ T8210] RIP: 0033:0x7f881ff9c799 [ 239.884240][ T8210] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 239.903883][ T8210] RSP: 002b:00007f8820e71028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 239.912366][ T8210] RAX: ffffffffffffffda RBX: 00007f8820215fa0 RCX: 00007f881ff9c799 [ 239.920375][ T8210] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 239.928408][ T8210] RBP: 00007f8820e71090 R08: 0000000000000000 R09: 0000000000000000 [ 239.936408][ T8210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 239.944421][ T8210] R13: 00007f8820216038 R14: 00007f8820215fa0 R15: 00007ffdc66811f8 [ 239.952440][ T8210] [ 241.476226][ T8244] FAULT_INJECTION: forcing a failure. [ 241.476226][ T8244] name failslab, interval 1, probability 0, space 0, times 0 [ 241.520873][ T8244] CPU: 1 PID: 8244 Comm: syz.3.736 Not tainted syzkaller #0 [ 241.528280][ T8244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 241.538413][ T8244] Call Trace: [ 241.541773][ T8244] [ 241.544786][ T8244] dump_stack_lvl+0x18c/0x250 [ 241.549618][ T8244] ? show_regs_print_info+0x20/0x20 [ 241.554909][ T8244] ? load_image+0x400/0x400 [ 241.559519][ T8244] ? __might_sleep+0xe0/0xe0 [ 241.564213][ T8244] ? __lock_acquire+0x7d40/0x7d40 [ 241.569344][ T8244] should_fail_ex+0x39d/0x4d0 [ 241.574131][ T8244] should_failslab+0x9/0x20 [ 241.578719][ T8244] slab_pre_alloc_hook+0x59/0x310 [ 241.583836][ T8244] ? kvmalloc_node+0x70/0x180 [ 241.588597][ T8244] ? kvmalloc_node+0x70/0x180 [ 241.593355][ T8244] __kmem_cache_alloc_node+0x53/0x250 [ 241.598850][ T8244] ? kvmalloc_node+0x70/0x180 [ 241.603614][ T8244] __kmalloc_node+0xa4/0x230 [ 241.608301][ T8244] kvmalloc_node+0x70/0x180 [ 241.612914][ T8244] page_pool_create+0x1eb/0x5c0 [ 241.617886][ T8244] bpf_test_run_xdp_live+0x203/0x1b20 [ 241.623379][ T8244] ? bpf_dispatcher_xdp+0x800/0x1000 [ 241.628769][ T8244] ? bpf_dispatcher_xdp+0x800/0x1000 [ 241.634150][ T8244] ? bpf_dispatcher_change_prog+0xcbf/0xf10 [ 241.640129][ T8244] ? bpf_dispatcher_xdp+0x800/0x1000 [ 241.645523][ T8244] ? xdp_convert_md_to_buff+0x330/0x330 [ 241.651290][ T8244] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 241.657648][ T8244] ? _copy_from_user+0xa5/0xe0 [ 241.662500][ T8244] ? bpf_test_init+0x119/0x140 [ 241.667343][ T8244] ? xdp_convert_md_to_buff+0x5b/0x330 [ 241.672893][ T8244] bpf_prog_test_run_xdp+0x7ca/0x10e0 [ 241.678410][ T8244] ? dev_put+0x80/0x80 [ 241.682603][ T8244] ? dev_put+0x80/0x80 [ 241.686753][ T8244] bpf_prog_test_run+0x321/0x390 [ 241.691787][ T8244] __sys_bpf+0x49d/0x890 [ 241.696119][ T8244] ? bpf_link_show_fdinfo+0x390/0x390 [ 241.701629][ T8244] ? lock_chain_count+0x20/0x20 [ 241.706588][ T8244] __x64_sys_bpf+0x7c/0x90 [ 241.711084][ T8244] do_syscall_64+0x55/0xa0 [ 241.715571][ T8244] ? clear_bhb_loop+0x40/0x90 [ 241.720335][ T8244] ? clear_bhb_loop+0x40/0x90 [ 241.725100][ T8244] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 241.731071][ T8244] RIP: 0033:0x7fd54fb9c799 [ 241.735561][ T8244] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 241.755243][ T8244] RSP: 002b:00007fd54ddf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 241.763748][ T8244] RAX: ffffffffffffffda RBX: 00007fd54fe15fa0 RCX: 00007fd54fb9c799 [ 241.771803][ T8244] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 241.779900][ T8244] RBP: 00007fd54ddf6090 R08: 0000000000000000 R09: 0000000000000000 [ 241.787954][ T8244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 241.795995][ T8244] R13: 00007fd54fe16038 R14: 00007fd54fe15fa0 R15: 00007ffde20dea28 [ 241.804201][ T8244] [ 241.846046][ T8244] page_pool_create() gave up with errno -12 [ 242.128067][ T8254] netlink: 'syz.2.740': attribute type 10 has an invalid length. [ 242.139265][ T8254] netlink: 2 bytes leftover after parsing attributes in process `syz.2.740'. [ 242.157258][ T8254] netlink: 'syz.2.740': attribute type 10 has an invalid length. [ 242.195690][ T8254] netlink: 40 bytes leftover after parsing attributes in process `syz.2.740'. [ 242.205180][ T8254] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 242.218264][ T8254] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 242.233866][ T8251] netlink: 132 bytes leftover after parsing attributes in process `syz.3.738'. [ 242.255136][ T8252] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.738'. [ 243.178041][ T8275] FAULT_INJECTION: forcing a failure. [ 243.178041][ T8275] name failslab, interval 1, probability 0, space 0, times 0 [ 243.200794][ T8275] CPU: 0 PID: 8275 Comm: syz.0.746 Not tainted syzkaller #0 [ 243.208286][ T8275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 243.218423][ T8275] Call Trace: [ 243.221769][ T8275] [ 243.224784][ T8275] dump_stack_lvl+0x18c/0x250 [ 243.229659][ T8275] ? show_regs_print_info+0x20/0x20 [ 243.234959][ T8275] ? load_image+0x400/0x400 [ 243.239592][ T8275] ? __might_sleep+0xe0/0xe0 [ 243.244368][ T8275] ? __lock_acquire+0x7d40/0x7d40 [ 243.249501][ T8275] should_fail_ex+0x39d/0x4d0 [ 243.254287][ T8275] should_failslab+0x9/0x20 [ 243.258882][ T8275] slab_pre_alloc_hook+0x59/0x310 [ 243.263999][ T8275] ? __xdp_reg_mem_model+0x1e4/0x5c0 [ 243.269373][ T8275] __kmem_cache_alloc_node+0x53/0x250 [ 243.274836][ T8275] ? __asan_memset+0x22/0x40 [ 243.279520][ T8275] ? __xdp_reg_mem_model+0x1e4/0x5c0 [ 243.284895][ T8275] kmalloc_trace+0x2a/0xe0 [ 243.289529][ T8275] __xdp_reg_mem_model+0x1e4/0x5c0 [ 243.294734][ T8275] ? kvmalloc_node+0x70/0x180 [ 243.299498][ T8275] ? kvmalloc_node+0x70/0x180 [ 243.304262][ T8275] ? xdp_reg_mem_model+0x40/0x40 [ 243.309299][ T8275] xdp_reg_mem_model+0x22/0x40 [ 243.314128][ T8275] bpf_test_run_xdp_live+0x262/0x1b20 [ 243.319583][ T8275] ? 0xffffffffa0004740 [ 243.323795][ T8275] ? 0xffffffffa0004740 [ 243.328010][ T8275] ? bpf_dispatcher_change_prog+0xcbf/0xf10 [ 243.333961][ T8275] ? 0xffffffffa0004740 [ 243.338273][ T8275] ? xdp_convert_md_to_buff+0x330/0x330 [ 243.343956][ T8275] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 243.350259][ T8275] ? _copy_from_user+0xa5/0xe0 [ 243.355087][ T8275] ? bpf_test_init+0x119/0x140 [ 243.359991][ T8275] ? xdp_convert_md_to_buff+0x5b/0x330 [ 243.365513][ T8275] bpf_prog_test_run_xdp+0x7ca/0x10e0 [ 243.371000][ T8275] ? dev_put+0x80/0x80 [ 243.375149][ T8275] ? dev_put+0x80/0x80 [ 243.379282][ T8275] bpf_prog_test_run+0x321/0x390 [ 243.384286][ T8275] __sys_bpf+0x49d/0x890 [ 243.388591][ T8275] ? bpf_link_show_fdinfo+0x390/0x390 [ 243.394058][ T8275] ? lock_chain_count+0x20/0x20 [ 243.399023][ T8275] __x64_sys_bpf+0x7c/0x90 [ 243.403497][ T8275] do_syscall_64+0x55/0xa0 [ 243.407971][ T8275] ? clear_bhb_loop+0x40/0x90 [ 243.412697][ T8275] ? clear_bhb_loop+0x40/0x90 [ 243.417522][ T8275] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 243.423468][ T8275] RIP: 0033:0x7f881ff9c799 [ 243.427930][ T8275] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 243.447582][ T8275] RSP: 002b:00007f8820e71028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 243.456085][ T8275] RAX: ffffffffffffffda RBX: 00007f8820215fa0 RCX: 00007f881ff9c799 [ 243.464126][ T8275] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 243.472243][ T8275] RBP: 00007f8820e71090 R08: 0000000000000000 R09: 0000000000000000 [ 243.480267][ T8275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 243.488294][ T8275] R13: 00007f8820216038 R14: 00007f8820215fa0 R15: 00007ffdc66811f8 [ 243.496459][ T8275] [ 243.885306][ T8287] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.751'. [ 243.898129][ T8287] netlink: 6324 bytes leftover after parsing attributes in process `syz.2.751'. [ 243.907873][ T8287] netlink: 2 bytes leftover after parsing attributes in process `syz.2.751'. [ 243.921306][ T8286] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.751'. [ 243.935172][ T8286] netlink: 6324 bytes leftover after parsing attributes in process `syz.2.751'. [ 243.957154][ T8286] netlink: 2 bytes leftover after parsing attributes in process `syz.2.751'. [ 244.473975][ T8306] netlink: 'syz.2.756': attribute type 3 has an invalid length. [ 244.526130][ T8308] netlink: 'syz.1.757': attribute type 33 has an invalid length. [ 244.537389][ T8308] `: renamed from team0 (while UP) [ 247.721845][ T8319] __nla_validate_parse: 3 callbacks suppressed [ 247.721861][ T8319] netlink: 63763 bytes leftover after parsing attributes in process `syz.2.760'. [ 248.302857][ T8337] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.764'. [ 249.117591][ T8349] netlink: 'syz.0.763': attribute type 10 has an invalid length. [ 249.126215][ T8349] netlink: 2 bytes leftover after parsing attributes in process `syz.0.763'. [ 249.154627][ T8349] netlink: 'syz.0.763': attribute type 10 has an invalid length. [ 249.175131][ T8349] netlink: 40 bytes leftover after parsing attributes in process `syz.0.763'. [ 249.196857][ T8349] `: Device lo is loopback device. Loopback devices can't be added as a team port [ 249.226994][ T8349] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 249.287176][ T8357] netlink: 132 bytes leftover after parsing attributes in process `syz.3.770'. [ 249.297416][ T8359] netlink: 'syz.3.770': attribute type 25 has an invalid length. [ 249.747098][ T8375] netlink: 61967 bytes leftover after parsing attributes in process `syz.0.773'. [ 249.769563][ T8375] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.773'. [ 251.363321][ T8400] netlink: 'syz.3.782': attribute type 10 has an invalid length. [ 251.406089][ T8400] netlink: 2 bytes leftover after parsing attributes in process `syz.3.782'. [ 251.427223][ T8400] netlink: 'syz.3.782': attribute type 10 has an invalid length. [ 251.436139][ T8400] netlink: 40 bytes leftover after parsing attributes in process `syz.3.782'. [ 251.445089][ T8400] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 251.518601][ T8400] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 251.616557][ T8403] netlink: 202920 bytes leftover after parsing attributes in process `syz.0.783'. [ 251.716930][ T8407] netlink: 'syz.2.784': attribute type 39 has an invalid length. [ 254.540439][ T8419] netlink: 'syz.1.787': attribute type 16 has an invalid length. [ 254.566223][ T8419] netlink: 'syz.1.787': attribute type 3 has an invalid length. [ 254.574461][ T8419] __nla_validate_parse: 32 callbacks suppressed [ 254.574494][ T8419] netlink: 132 bytes leftover after parsing attributes in process `syz.1.787'. [ 255.027380][ T8426] netlink: 'syz.2.790': attribute type 33 has an invalid length. [ 255.046734][ T8426] netlink: 36 bytes leftover after parsing attributes in process `syz.2.790'. [ 255.175588][ T8433] netlink: 'syz.1.792': attribute type 39 has an invalid length. [ 255.262886][ T8437] netlink: 'syz.3.794': attribute type 10 has an invalid length. [ 255.272661][ T8437] netlink: 2 bytes leftover after parsing attributes in process `syz.3.794'. [ 255.283520][ T8435] netlink: 'syz.0.793': attribute type 19 has an invalid length. [ 255.319150][ T8439] netlink: 'syz.3.794': attribute type 10 has an invalid length. [ 255.327370][ T8439] netlink: 40 bytes leftover after parsing attributes in process `syz.3.794'. [ 255.337097][ T8439] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 255.348606][ T8439] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 256.106610][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.112996][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.272670][ T8461] delete_channel: no stack [ 256.987649][ T8474] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.996914][ T8474] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.016597][ T8474] bridge0: entered allmulticast mode [ 257.063502][ T8475] netlink: 'syz.0.807': attribute type 25 has an invalid length. [ 257.075205][ T8479] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.082553][ T8479] bridge0: port 2(bridge_slave_1) entered forwarding state [ 257.090205][ T8479] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.097499][ T8479] bridge0: port 1(bridge_slave_0) entered forwarding state [ 257.106761][ T8479] bridge0: entered promiscuous mode [ 257.700236][ T8495] netlink: 'syz.0.811': attribute type 1 has an invalid length. [ 257.718662][ T8495] netlink: 154788 bytes leftover after parsing attributes in process `syz.0.811'. [ 257.789784][ T8497] netlink: 'syz.3.813': attribute type 10 has an invalid length. [ 257.802923][ T8497] netlink: 2 bytes leftover after parsing attributes in process `syz.3.813'. [ 257.826736][ T8497] netlink: 40 bytes leftover after parsing attributes in process `syz.3.813'. [ 257.846533][ T8497] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 257.859123][ T8497] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 257.992454][ T8504] netlink: 65027 bytes leftover after parsing attributes in process `syz.3.815'. [ 258.321937][ T8519] netlink: 172 bytes leftover after parsing attributes in process `syz.2.820'. [ 258.529746][ T8525] netlink: 164 bytes leftover after parsing attributes in process `syz.2.821'. [ 258.558744][ T8525] syz_tun: refused to change device tx_queue_len [ 258.586494][ T8530] `: Device lo is loopback device. Loopback devices can't be added as a team port [ 258.620742][ T8530] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 258.950406][ T8538] mac80211_hwsim hwsim9 wlan1: left promiscuous mode [ 258.959934][ T8538] mac80211_hwsim hwsim9 wlan1: left allmulticast mode [ 259.003978][ T8548] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 260.043479][ T8573] validate_nla: 12 callbacks suppressed [ 260.043517][ T8573] netlink: 'syz.1.836': attribute type 19 has an invalid length. [ 261.676140][ T8592] netlink: 'syz.3.840': attribute type 17 has an invalid length. [ 261.695392][ T8592] __nla_validate_parse: 6 callbacks suppressed [ 261.695411][ T8592] netlink: 152 bytes leftover after parsing attributes in process `syz.3.840'. [ 261.712400][ T8592] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 261.760317][ T8596] netlink: 'syz.2.841': attribute type 16 has an invalid length. [ 261.775770][ T8596] netlink: 'syz.2.841': attribute type 3 has an invalid length. [ 261.811265][ T8596] netlink: 132 bytes leftover after parsing attributes in process `syz.2.841'. [ 262.102029][ T8609] netlink: 'syz.1.846': attribute type 10 has an invalid length. [ 262.122155][ T8609] netlink: 2 bytes leftover after parsing attributes in process `syz.1.846'. [ 262.648443][ T8622] syzkaller0: entered promiscuous mode [ 262.655737][ T8622] syzkaller0: entered allmulticast mode [ 262.699124][ T8621] netlink: 132 bytes leftover after parsing attributes in process `syz.1.851'. [ 262.988772][ T8633] netlink: 21 bytes leftover after parsing attributes in process `syz.0.855'. [ 262.997910][ T8633] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 263.203767][ T8636] netlink: 'syz.2.856': attribute type 2 has an invalid length. [ 263.224033][ T8636] netlink: 17267 bytes leftover after parsing attributes in process `syz.2.856'. [ 265.199312][ T8648] netlink: 'syz.1.860': attribute type 21 has an invalid length. [ 265.215938][ T8648] IPv6: NLM_F_CREATE should be specified when creating new route [ 265.235918][ T8649] netlink: 4 bytes leftover after parsing attributes in process `syz.1.860'. [ 266.596549][ T8673] syzkaller0: entered promiscuous mode [ 266.602235][ T8673] syzkaller0: entered allmulticast mode [ 266.711333][ T8684] netlink: 'syz.2.869': attribute type 9 has an invalid length. [ 266.732252][ T8684] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.869'. [ 266.830180][ T8685] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.869'. [ 266.846504][ T8685] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 270.841307][ T4115] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 273.160206][ T8679] netlink: 'syz.2.869': attribute type 22 has an invalid length. [ 273.422987][ T8715] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.877'. [ 273.604279][ T8723] netlink: 'syz.1.881': attribute type 10 has an invalid length. [ 273.613370][ T8723] netlink: 2 bytes leftover after parsing attributes in process `syz.1.881'. [ 274.314540][ T8725] delete_channel: no stack [ 275.262476][ T8770] netlink: 'syz.0.892': attribute type 9 has an invalid length. [ 275.306128][ T8770] netlink: 179280 bytes leftover after parsing attributes in process `syz.0.892'. [ 275.925747][ T8777] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.894'. [ 275.972669][ T8777] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 276.006085][ T8777] CPU: 1 PID: 8777 Comm: syz.2.894 Not tainted syzkaller #0 [ 276.013509][ T8777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 276.023624][ T8777] Call Trace: [ 276.026960][ T8777] [ 276.029946][ T8777] dump_stack_lvl+0x18c/0x250 [ 276.034709][ T8777] ? show_regs_print_info+0x20/0x20 [ 276.039985][ T8777] ? load_image+0x400/0x400 [ 276.044584][ T8777] sysfs_warn_dup+0x8e/0xa0 [ 276.049161][ T8777] sysfs_do_create_link_sd+0xc0/0x110 [ 276.054603][ T8777] device_add_class_symlinks+0x1cf/0x240 [ 276.060334][ T8777] device_add+0x507/0xc20 [ 276.064876][ T8777] wiphy_register+0x1dad/0x2ae0 [ 276.069823][ T8777] ? cfg80211_event_work+0x40/0x40 [ 276.074992][ T8777] ? minstrel_ht_alloc+0x88a/0x990 [ 276.080159][ T8777] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 276.086265][ T8777] ieee80211_register_hw+0x3464/0x4250 [ 276.091791][ T8777] ? ieee80211_tasklet_handler+0x20/0x20 [ 276.097471][ T8777] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 276.103412][ T8777] ? __debug_object_init+0xec/0x450 [ 276.108666][ T8777] ? __asan_memset+0x22/0x40 [ 276.113295][ T8777] ? __hrtimer_init+0x186/0x270 [ 276.118193][ T8777] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 276.124161][ T8777] ? mac80211_hwsim_free+0x220/0x220 [ 276.129516][ T8777] ? rcu_is_watching+0x15/0xb0 [ 276.134337][ T8777] ? kstrndup+0xbd/0x140 [ 276.138641][ T8777] hwsim_new_radio_nl+0xdc9/0x1a90 [ 276.143809][ T8777] ? __nla_validate+0x50/0x50 [ 276.148547][ T8777] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 276.154941][ T8777] ? __nla_parse+0x40/0x50 [ 276.159406][ T8777] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 276.165784][ T8777] genl_family_rcv_msg_doit+0x211/0x310 [ 276.171376][ T8777] ? end_current_label_crit_section+0x170/0x170 [ 276.177713][ T8777] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 276.183655][ T8777] ? bpf_lsm_capable+0x9/0x10 [ 276.188373][ T8777] ? security_capable+0x89/0xb0 [ 276.193357][ T8777] genl_rcv_msg+0x619/0x7a0 [ 276.197900][ T8777] ? genl_bind+0x360/0x360 [ 276.202352][ T8777] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 276.208737][ T8777] ? ref_tracker_free+0x690/0x840 [ 276.213807][ T8777] netlink_rcv_skb+0x241/0x4d0 [ 276.218616][ T8777] ? genl_bind+0x360/0x360 [ 276.223069][ T8777] ? netlink_ack+0x1180/0x1180 [ 276.227903][ T8777] ? __lock_acquire+0x7d40/0x7d40 [ 276.233021][ T8777] ? down_read+0x1ac/0x2e0 [ 276.237507][ T8777] genl_rcv+0x28/0x40 [ 276.241523][ T8777] netlink_unicast+0x751/0x8d0 [ 276.246338][ T8777] netlink_sendmsg+0x8d0/0xbf0 [ 276.251159][ T8777] ? netlink_getsockopt+0x590/0x590 [ 276.256412][ T8777] ? aa_sock_msg_perm+0x94/0x150 [ 276.261403][ T8777] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 276.266735][ T8777] ? security_socket_sendmsg+0x80/0xa0 [ 276.272234][ T8777] ? netlink_getsockopt+0x590/0x590 [ 276.277480][ T8777] ____sys_sendmsg+0x5ba/0x960 [ 276.282288][ T8777] ? __asan_memset+0x22/0x40 [ 276.286914][ T8777] ? __sys_sendmsg_sock+0x30/0x30 [ 276.291985][ T8777] ? __import_iovec+0x5f2/0x850 [ 276.296899][ T8777] ? import_iovec+0x73/0xa0 [ 276.301445][ T8777] ___sys_sendmsg+0x2a6/0x360 [ 276.306173][ T8777] ? __sys_sendmsg+0x2a0/0x2a0 [ 276.311059][ T8777] __se_sys_sendmsg+0x1c2/0x2b0 [ 276.315967][ T8777] ? __x64_sys_sendmsg+0x80/0x80 [ 276.320955][ T8777] ? lockdep_hardirqs_on+0x98/0x150 [ 276.326191][ T8777] do_syscall_64+0x55/0xa0 [ 276.330731][ T8777] ? clear_bhb_loop+0x40/0x90 [ 276.335526][ T8777] ? clear_bhb_loop+0x40/0x90 [ 276.340243][ T8777] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 276.346186][ T8777] RIP: 0033:0x7f487419c799 [ 276.350638][ T8777] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 276.370281][ T8777] RSP: 002b:00007f48750d9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 276.378738][ T8777] RAX: ffffffffffffffda RBX: 00007f4874416090 RCX: 00007f487419c799 [ 276.386736][ T8777] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 276.394731][ T8777] RBP: 00007f4874232bd9 R08: 0000000000000000 R09: 0000000000000000 [ 276.402743][ T8777] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 276.410764][ T8777] R13: 00007f4874416128 R14: 00007f4874416090 R15: 00007ffca871d368 [ 276.418800][ T8777] [ 279.588442][ T8834] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.914'. [ 280.215905][ T8844] netlink: 'syz.1.915': attribute type 10 has an invalid length. [ 280.249680][ T8844] netlink: 40 bytes leftover after parsing attributes in process `syz.1.915'. [ 280.293399][ T8848] netlink: 'syz.0.916': attribute type 29 has an invalid length. [ 280.313172][ T8844] `: Device lo is loopback device. Loopback devices can't be added as a team port [ 280.340735][ T8844] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 280.425361][ T8848] netlink: 'syz.0.916': attribute type 29 has an invalid length. [ 281.071578][ T8864] sit0: entered allmulticast mode [ 281.702555][ T8873] netlink: 'syz.0.923': attribute type 21 has an invalid length. [ 281.747851][ T8873] netlink: 'syz.0.923': attribute type 1 has an invalid length. [ 283.087013][ T8895] netlink: 'syz.3.930': attribute type 10 has an invalid length. [ 283.102294][ T8897] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.931'. [ 283.116561][ T8895] netlink: 40 bytes leftover after parsing attributes in process `syz.3.930'. [ 283.138303][ T8895] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 283.201263][ T8895] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 283.908733][ T8908] netlink: 132 bytes leftover after parsing attributes in process `syz.0.933'. [ 284.109972][ T8913] delete_channel: no stack [ 284.904306][ T8927] lo: entered allmulticast mode [ 284.928359][ T8929] netlink: 'syz.1.943': attribute type 10 has an invalid length. [ 284.947261][ T8929] netlink: 40 bytes leftover after parsing attributes in process `syz.1.943'. [ 284.956994][ T8929] `: Device lo is loopback device. Loopback devices can't be added as a team port [ 284.969257][ T8929] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 284.992090][ T8932] lo: entered promiscuous mode [ 284.997204][ T8932] lo: left allmulticast mode [ 285.142859][ T8936] netlink: 'syz.2.945': attribute type 1 has an invalid length. [ 285.160809][ T8936] netlink: 4 bytes leftover after parsing attributes in process `syz.2.945'. [ 285.183801][ T8936] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.191073][ T8936] bridge0: port 1(bridge_slave_0) entered forwarding state [ 285.826600][ T8947] netlink: 132 bytes leftover after parsing attributes in process `syz.0.946'. [ 285.849884][ T8949] netlink: 208064 bytes leftover after parsing attributes in process `syz.1.948'. [ 286.821342][ T8960] netlink: 'syz.0.951': attribute type 6 has an invalid length. [ 286.851731][ T8960] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.951'. [ 287.638839][ T8964] tap0: tun_chr_ioctl cmd 1074025675 [ 287.685945][ T8964] tap0: persist disabled [ 289.631574][ T8969] netlink: 'syz.2.953': attribute type 1 has an invalid length. [ 289.702468][ T8969] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.953'. [ 289.961918][ T8982] netlink: 'syz.3.956': attribute type 2 has an invalid length. [ 289.981691][ T8982] netlink: 'syz.3.956': attribute type 1 has an invalid length. [ 290.013697][ T8982] netlink: 199820 bytes leftover after parsing attributes in process `syz.3.956'. [ 290.182071][ T8974] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 290.206035][ T8974] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 290.242978][ T8981] netlink: 'syz.3.956': attribute type 21 has an invalid length. [ 290.286181][ T8981] netlink: 132 bytes leftover after parsing attributes in process `syz.3.956'. [ 290.868378][ T8995] netlink: 'syz.0.959': attribute type 1 has an invalid length. [ 290.894351][ T8995] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.959'. [ 291.475084][ T9006] syzkaller0: create flow: hash 2088464220 index 0 [ 291.548938][ T9001] syzkaller0: entered promiscuous mode [ 291.566168][ T9001] syzkaller0: entered allmulticast mode [ 291.605239][ T9005] lo: entered allmulticast mode [ 295.276026][ C0] syzkaller0 (unregistering): delete flow: hash 2088464220 index 0 [ 297.070858][ T9043] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.974'. [ 298.850379][ T9080] netlink: 'syz.1.986': attribute type 10 has an invalid length. [ 298.862382][ T9080] netlink: 40 bytes leftover after parsing attributes in process `syz.1.986'. [ 298.872061][ T9080] `: Device lo is loopback device. Loopback devices can't be added as a team port [ 298.886806][ T9080] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 298.907816][ T9076] netlink: 'syz.2.984': attribute type 10 has an invalid length. [ 298.916145][ T9076] netlink: 209280 bytes leftover after parsing attributes in process `syz.2.984'. [ 298.925516][ T9076] openvswitch: netlink: Flow key attr not present in new flow. [ 299.178040][ T9084] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 299.891587][ T9102] aaaaaaaaaaaaaaa: entered promiscuous mode [ 300.423510][ T9112] netlink: 'syz.2.995': attribute type 10 has an invalid length. [ 300.437036][ T9112] netlink: 40 bytes leftover after parsing attributes in process `syz.2.995'. [ 300.456354][ T9112] lo: left promiscuous mode [ 300.461461][ T9112] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 300.480394][ T9112] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 300.646269][ T9115] delete_channel: no stack [ 301.142082][ T9140] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.1004'. [ 301.728411][ T9147] netlink: 'syz.3.1007': attribute type 10 has an invalid length. [ 301.737787][ T9147] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1007'. [ 301.748824][ T9147] lo: left allmulticast mode [ 301.758419][ T9147] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 301.775757][ T9149] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1015'. [ 301.788394][ T9149] openvswitch: netlink: Geneve option length err (len 1788, max 255). [ 301.797161][ T9147] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 301.825764][ T9149] netlink: 'syz.0.1015': attribute type 2 has an invalid length. [ 301.837666][ T9149] netlink: 'syz.0.1015': attribute type 8 has an invalid length. [ 301.848613][ T9149] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1015'. [ 301.966090][ T7413] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 302.608430][ T9158] sctp: [Deprecated]: syz.3.1009 (pid 9158) Use of struct sctp_assoc_value in delayed_ack socket option. [ 302.608430][ T9158] Use struct sctp_sack_info instead [ 302.945047][ T9166] netlink: 196 bytes leftover after parsing attributes in process `syz.0.1013'. [ 303.017444][ T9166] netlink: 196 bytes leftover after parsing attributes in process `syz.0.1013'. [ 303.739476][ T9176] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1016'. [ 303.778251][ T9180] netlink: 'syz.2.1019': attribute type 3 has an invalid length. [ 303.783341][ T9177] syzkaller0: entered promiscuous mode [ 303.794069][ T9180] netlink: 201372 bytes leftover after parsing attributes in process `syz.2.1019'. [ 303.819968][ T9177] syzkaller0: entered allmulticast mode [ 303.947600][ T9183] netlink: 'syz.1.1018': attribute type 10 has an invalid length. [ 303.966455][ T9183] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1018'. [ 303.976863][ T9183] `: Device lo is loopback device. Loopback devices can't be added as a team port [ 304.012343][ T9183] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 305.296341][ T9238] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.1023'. [ 305.309588][ T9238] netlink: zone id is out of range [ 305.310361][ T9239] netlink: 'syz.3.1023': attribute type 10 has an invalid length. [ 305.323555][ T9238] netlink: zone id is out of range [ 305.325075][ T9239] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1023'. [ 305.362261][ T9239] team0: Port device virt_wifi0 removed [ 305.369491][ T9238] netlink: zone id is out of range [ 305.375208][ T9239] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 305.516598][ T9254] netlink: 'syz.2.1026': attribute type 11 has an invalid length. [ 305.524926][ T9254] netlink: 184116 bytes leftover after parsing attributes in process `syz.2.1026'. [ 305.792066][ T9258] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1028'. [ 305.813918][ T9258] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1028'. [ 307.952119][ T9270] netlink: 'syz.1.1030': attribute type 10 has an invalid length. [ 307.995992][ T9270] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1030'. [ 308.005137][ T9270] `: Device lo is loopback device. Loopback devices can't be added as a team port [ 308.037630][ T9270] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 308.328737][ T9286] netlink: 'syz.2.1037': attribute type 4 has an invalid length. [ 308.348762][ T9286] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1037'. [ 308.777696][ T9291] netlink: 6 bytes leftover after parsing attributes in process `syz.2.1039'. [ 308.787577][ T9292] sctp: [Deprecated]: syz.1.1038 (pid 9292) Use of int in max_burst socket option deprecated. [ 308.787577][ T9292] Use struct sctp_assoc_value instead [ 309.070156][ T9305] netlink: 'syz.3.1044': attribute type 10 has an invalid length. [ 309.100825][ T9305] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1044'. [ 309.130623][ T9305] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 309.158630][ T9305] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 309.381511][ T9312] netlink: 'syz.2.1047': attribute type 10 has an invalid length. [ 309.405253][ T9322] IPv6: Can't replace route, no match found [ 309.422858][ T9312] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1047'. [ 309.770197][ T9330] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 310.155357][ T9341] netlink: 822 bytes leftover after parsing attributes in process `syz.1.1053'. [ 310.270814][ T9341] netlink: 208092 bytes leftover after parsing attributes in process `syz.1.1053'. [ 310.281057][ T9341] netlink: 'syz.1.1053': attribute type 1 has an invalid length. [ 310.291677][ T9341] netlink: 'syz.1.1053': attribute type 2 has an invalid length. [ 310.300761][ T9341] netlink: 'syz.1.1053': attribute type 3 has an invalid length. [ 310.321643][ T9341] netlink: 'syz.1.1053': attribute type 4 has an invalid length. [ 310.540925][ T9357] netlink: 'syz.0.1058': attribute type 10 has an invalid length. [ 310.549987][ T9357] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1058'. [ 310.560256][ T9357] `: Device lo is loopback device. Loopback devices can't be added as a team port [ 310.581970][ T9357] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 312.102193][ T9391] netlink: 'syz.1.1066': attribute type 1 has an invalid length. [ 312.110457][ T9391] netlink: 112865 bytes leftover after parsing attributes in process `syz.1.1066'. [ 315.302990][ T9400] netlink: 'syz.1.1069': attribute type 10 has an invalid length. [ 315.311938][ T9400] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1069'. [ 315.321829][ T9400] `: Device lo is loopback device. Loopback devices can't be added as a team port [ 315.332077][ T9400] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 315.940102][ T9439] netlink: 'syz.3.1076': attribute type 21 has an invalid length. [ 315.966053][ T9439] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1076'. [ 316.018160][ T9439] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1076'. [ 316.108794][ T9439] syzkaller0: entered promiscuous mode [ 316.131927][ T9439] syzkaller0: entered allmulticast mode [ 316.343717][ T9445] netlink: 'syz.1.1078': attribute type 2 has an invalid length. [ 316.354303][ T9445] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1078'. [ 316.619894][ T9453] netlink: 'syz.3.1080': attribute type 21 has an invalid length. [ 316.687188][ T9453] IPv6: NLM_F_CREATE should be specified when creating new route [ 316.695494][ T9456] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1080'. [ 317.007045][ T9461] netlink: 'syz.2.1082': attribute type 10 has an invalid length. [ 317.015994][ T9461] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1082'. [ 317.030440][ T9461] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 317.041708][ T9461] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 317.456414][ T9468] netlink: 'syz.3.1084': attribute type 10 has an invalid length. [ 317.531606][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.540390][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.574455][ T9468] team0: Device wg1 is of different type [ 317.634454][ T9475] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1086'. [ 317.819860][ T9482] netlink: 'syz.1.1088': attribute type 39 has an invalid length. [ 317.912830][ T9484] netlink: 'syz.2.1087': attribute type 10 has an invalid length. [ 317.922866][ T9484] netlink: 'syz.2.1087': attribute type 19 has an invalid length. [ 317.933698][ T9484] netlink: 14536 bytes leftover after parsing attributes in process `syz.2.1087'. [ 320.863054][ T9498] netlink: 'syz.2.1091': attribute type 10 has an invalid length. [ 320.874087][ T9498] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1091'. [ 320.906003][ T9498] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 320.967736][ T9498] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 321.251892][ T9511] netlink: 'syz.0.1096': attribute type 7 has an invalid length. [ 321.276046][ T9511] netlink: 'syz.0.1096': attribute type 1 has an invalid length. [ 321.296009][ T9511] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1096'. [ 321.325798][ T9507] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 321.361152][ T9507] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 321.371247][ T9507] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 321.403271][ T9507] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 321.412151][ T9507] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 322.122155][ T9529] syz.0.1100[9529] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 322.122306][ T9529] syz.0.1100[9529] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 322.301450][ T9532] netlink: 'syz.3.1102': attribute type 10 has an invalid length. [ 322.346231][ T9532] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.1102'. [ 322.524050][ T9532] syzkaller0: entered promiscuous mode [ 322.535904][ T9532] syzkaller0: entered allmulticast mode [ 322.554531][ T9539] netlink: 'syz.1.1104': attribute type 10 has an invalid length. [ 322.566683][ T9539] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1104'. [ 322.603697][ T9539] `: Device lo is loopback device. Loopback devices can't be added as a team port [ 322.639624][ T9539] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 322.927198][ T9555] delete_channel: no stack [ 323.504214][ T9577] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 324.912131][ T9579] pimreg: tun_chr_ioctl cmd 1074025677 [ 324.917990][ T9579] pimreg: linktype set to 1 [ 325.031705][ T9585] netlink: 'syz.3.1114': attribute type 29 has an invalid length. [ 325.044462][ T9585] netlink: 'syz.3.1114': attribute type 29 has an invalid length. [ 325.054951][ T9585] netlink: 'syz.3.1114': attribute type 29 has an invalid length. [ 325.067193][ T9586] netlink: 'syz.2.1115': attribute type 10 has an invalid length. [ 325.095930][ T9586] hsr_slave_0: left promiscuous mode [ 325.118333][ T9586] hsr_slave_1: left promiscuous mode [ 325.203220][ T9585] netlink: 'syz.3.1114': attribute type 29 has an invalid length. [ 325.223699][ T9590] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1116'. [ 325.242334][ T9590] `: Device lo is loopback device. Loopback devices can't be added as a team port [ 325.252822][ T9590] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 326.074823][ T9615] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1124'. [ 326.126740][ T9624] validate_nla: 1 callbacks suppressed [ 326.126757][ T9624] netlink: 'syz.1.1128': attribute type 10 has an invalid length. [ 326.156160][ T9624] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1128'. [ 326.165175][ T9624] `: Device lo is loopback device. Loopback devices can't be added as a team port [ 326.179617][ T9624] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 326.418884][ T9635] netlink: 'syz.0.1139': attribute type 10 has an invalid length. [ 326.456006][ T9635] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1139'. [ 326.465050][ T9635] `: Device lo is loopback device. Loopback devices can't be added as a team port [ 326.483288][ T9631] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1131'. [ 326.522038][ T9635] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 326.762024][ T9633] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1130'. [ 327.033314][ T9648] netlink: 17023 bytes leftover after parsing attributes in process `syz.1.1135'. [ 327.587987][ T9671] netlink: 'syz.1.1140': attribute type 3 has an invalid length. [ 327.609099][ T9671] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.1140'. [ 327.942119][ T9678] netlink: 'syz.1.1142': attribute type 10 has an invalid length. [ 327.965931][ T9678] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1142'. [ 327.987440][ T9678] `: Device lo is loopback device. Loopback devices can't be added as a team port [ 328.000365][ T9678] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 328.242788][ T9687] netlink: 'syz.2.1144': attribute type 2 has an invalid length. [ 328.283685][ T9687] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1144'. [ 328.525488][ T9696] netlink: 'syz.0.1145': attribute type 10 has an invalid length. [ 329.114912][ T9696] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 329.355250][ T9699] netlink: 17023 bytes leftover after parsing attributes in process `syz.3.1147'. [ 329.387000][ T9705] debugfs: Directory '!!ô!' with parent 'ieee80211' already present! [ 329.484458][ T5782] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 329.817985][ T9725] netlink: 'syz.0.1154': attribute type 10 has an invalid length. [ 329.833093][ T9725] `: Device lo is loopback device. Loopback devices can't be added as a team port [ 329.843231][ T9725] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 330.141066][ T9737] netlink: 'syz.0.1157': attribute type 10 has an invalid length. [ 330.150172][ T9735] netlink: 'syz.3.1156': attribute type 1 has an invalid length. [ 330.262543][ T9737] `: Port device virt_wifi0 removed [ 331.322393][ T9758] netlink: 'syz.1.1164': attribute type 10 has an invalid length. [ 331.332285][ T9758] __nla_validate_parse: 6 callbacks suppressed [ 331.332301][ T9758] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1164'. [ 331.359613][ T9758] `: Device lo is loopback device. Loopback devices can't be added as a team port [ 331.370295][ T9758] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 331.919654][ T9793] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.1172'. [ 332.079022][ T9800] netlink: 'syz.0.1174': attribute type 10 has an invalid length. [ 332.087749][ T9800] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1174'. [ 332.097563][ T9800] `: Device lo is loopback device. Loopback devices can't be added as a team port [ 332.108348][ T9800] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 332.293109][ T9806] netlink: 'syz.1.1177': attribute type 7 has an invalid length. [ 332.303224][ T9806] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1177'. [ 332.965506][ T9833] netlink: 'syz.0.1184': attribute type 10 has an invalid length. [ 332.983414][ T9833] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1184'. [ 333.000585][ T7415] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 333.032468][ T9833] `: Device lo is loopback device. Loopback devices can't be added as a team port [ 333.064623][ T9833] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 333.395980][ T9843] netlink: 'syz.2.1185': attribute type 6 has an invalid length. [ 333.404486][ T9843] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1185'. [ 333.513110][ T9855] netlink: 'syz.3.1190': attribute type 2 has an invalid length. [ 333.552320][ T9855] netlink: 'syz.3.1190': attribute type 3 has an invalid length. [ 333.570004][ T9855] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1190'. [ 333.731840][ T9857] netlink: 'syz.0.1189': attribute type 10 has an invalid length. [ 334.315517][ T9884] netlink: 'syz.0.1196': attribute type 10 has an invalid length. [ 334.328598][ T9886] netlink: 'syz.1.1198': attribute type 10 has an invalid length. [ 334.336806][ T9884] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1196'. [ 334.347981][ T9886] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1198'. [ 334.391005][ T9890] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1198'. [ 334.400705][ T9890] `: Device lo is loopback device. Loopback devices can't be added as a team port [ 334.430016][ T9890] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 337.713760][ T9992] __nla_validate_parse: 3 callbacks suppressed [ 337.713774][ T9992] netlink: 3752 bytes leftover after parsing attributes in process `syz.3.1227'. [ 338.055519][T10000] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1228'. [ 340.203215][T10010] netlink: 209820 bytes leftover after parsing attributes in process `syz.3.1232'. [ 341.683169][T10039] sit0: entered allmulticast mode [ 342.007895][T10041] sit0: entered promiscuous mode [ 342.067637][T10047] validate_nla: 11 callbacks suppressed [ 342.067657][T10047] netlink: 'syz.0.1242': attribute type 5 has an invalid length. [ 342.090132][T10047] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1242'. [ 342.897718][T10065] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1249'. [ 343.610464][T10082] netlink: 16222 bytes leftover after parsing attributes in process `syz.2.1252'. [ 343.688526][T10081] tap0: tun_chr_ioctl cmd 1074025675 [ 343.693907][T10081] tap0: persist disabled [ 343.858267][T10097] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.1255'. [ 344.310689][T10114] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1257'. [ 344.382147][T10119] mac80211_hwsim hwsim7 »»»»»»: renamed from wlan0 [ 344.960321][T10121] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1261'. [ 345.014346][T10127] IPv6: Can't replace route, no match found [ 345.022371][T10135] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1264'. [ 345.264839][T10146] netlink: 'syz.1.1267': attribute type 21 has an invalid length. [ 345.725958][T10152] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1269'. [ 346.159577][T10157] netlink: 'syz.0.1270': attribute type 10 has an invalid length. [ 346.208649][T10157] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1270'. [ 346.434252][T10160] netlink: 'syz.3.1272': attribute type 39 has an invalid length. [ 346.449550][T10165] netlink: 'syz.0.1273': attribute type 19 has an invalid length. [ 346.543574][T10165] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1273'. [ 346.640378][T10165] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 346.892838][T10169] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1274'. [ 347.643249][T10179] syzkaller0: entered promiscuous mode [ 347.649622][T10179] syzkaller0: entered allmulticast mode [ 349.885433][T10173] ------------[ cut here ]------------ [ 349.891045][T10173] WARNING: CPU: 1 PID: 10173 at kernel/events/core.c:6806 perf_pending_task+0x35c/0x470 [ 349.901077][T10173] Modules linked in: [ 349.905038][T10173] CPU: 1 PID: 10173 Comm: syz.2.1276 Not tainted syzkaller #0 [ 349.912622][T10173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 349.922994][T10173] RIP: 0010:perf_pending_task+0x35c/0x470 [ 349.928967][T10173] Code: ff 84 db 75 14 e8 74 e0 d5 ff 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 60 e0 d5 ff e8 7b 61 4f ff eb e5 e8 54 e0 d5 ff <0f> 0b e9 f3 fe ff ff e8 48 e0 d5 ff 48 c7 c7 70 f3 1c 8d 4c 89 f6 [ 349.948701][T10173] RSP: 0018:ffffc900031a79c0 EFLAGS: 00010293 [ 349.954825][T10173] RAX: ffffffff81b13c0c RBX: ffff88807d2ad9b8 RCX: ffff88802ac51e00 [ 349.962944][T10173] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 349.971144][T10173] RBP: 0000000000000001 R08: ffffffff8e8aeeef R09: 1ffffffff1d15ddd [ 349.979296][T10173] R10: dffffc0000000000 R11: fffffbfff1d15dde R12: ffff88802ac51e00 [ 349.987416][T10173] R13: ffff88807dc7bd30 R14: ffff88807d2ad778 R15: 1ffff1100fa55aef [ 349.995446][T10173] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 350.004492][T10173] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 350.011167][T10173] CR2: 0000000100000000 CR3: 000000005fbd1000 CR4: 00000000003506e0 [ 350.019278][T10173] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000200000000300 [ 350.027544][T10173] DR3: 0000200000000300 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 350.035575][T10173] Call Trace: [ 350.038964][T10173] [ 350.041941][T10173] task_work_run+0x1d4/0x260 [ 350.046651][T10173] ? task_work_cancel+0x220/0x220 [ 350.051743][T10173] do_exit+0x95a/0x2460 [ 350.056023][T10173] ? put_task_struct+0xc0/0xc0 [ 350.060861][T10173] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 350.066953][T10173] ? get_signal+0x1068/0x13f0 [ 350.071770][T10173] ? lock_chain_count+0x20/0x20 [ 350.076776][T10173] ? _raw_spin_lock_irq+0xbb/0xf0 [ 350.081861][T10173] do_group_exit+0x21b/0x2d0 [ 350.086577][T10173] ? lockdep_hardirqs_on+0x98/0x150 [ 350.091871][T10173] get_signal+0x12fc/0x13f0 [ 350.096479][T10173] arch_do_signal_or_restart+0xc2/0x800 [ 350.102094][T10173] ? __ia32_sys_get_robust_list+0x110/0x110 [ 350.108087][T10173] ? blkcg_maybe_throttle_current+0x19f/0xa90 [ 350.114179][T10173] ? get_sigframe_size+0x20/0x20 [ 350.119249][T10173] ? exit_to_user_mode_loop+0x3b/0x110 [ 350.124781][T10173] exit_to_user_mode_loop+0x70/0x110 [ 350.130219][T10173] exit_to_user_mode_prepare+0xee/0x180 [ 350.135975][T10173] syscall_exit_to_user_mode+0x1a/0x50 [ 350.141491][T10173] do_syscall_64+0x61/0xa0 [ 350.146026][T10173] ? clear_bhb_loop+0x40/0x90 [ 350.150751][T10173] ? clear_bhb_loop+0x40/0x90 [ 350.154373][T10191] __nla_validate_parse: 1 callbacks suppressed [ 350.154415][T10191] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1280'. [ 350.155466][T10173] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 350.155496][T10173] RIP: 0033:0x7f487419c799 [ 350.181777][T10173] Code: Unable to access opcode bytes at 0x7f487419c76f. [ 350.188919][T10173] RSP: 002b:00007f48750fa0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 350.197429][T10173] RAX: fffffffffffffe00 RBX: 00007f4874415fa8 RCX: 00007f487419c799 [ 350.205534][T10173] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f4874415fa8 [ 350.213650][T10173] RBP: 00007f4874415fa0 R08: 0000000000000000 R09: 0000000000000000 [ 350.221759][T10173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 350.229930][T10173] R13: 00007f4874416038 R14: 00007ffca871d280 R15: 00007ffca871d368 [ 350.238192][T10173] [ 350.241259][T10173] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 350.248560][T10173] CPU: 1 PID: 10173 Comm: syz.2.1276 Not tainted syzkaller #0 [ 350.256041][T10173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 350.266116][T10173] Call Trace: [ 350.269416][T10173] [ 350.272373][T10173] dump_stack_lvl+0x18c/0x250 [ 350.277097][T10173] ? show_regs_print_info+0x20/0x20 [ 350.282327][T10173] ? load_image+0x400/0x400 [ 350.286870][T10173] panic+0x2dc/0x730 [ 350.290795][T10173] ? bpf_jit_dump+0xd0/0xd0 [ 350.295351][T10173] __warn+0x2e0/0x470 [ 350.299369][T10173] ? perf_pending_task+0x35c/0x470 [ 350.304517][T10173] ? perf_pending_task+0x35c/0x470 [ 350.309662][T10173] report_bug+0x2be/0x4f0 [ 350.314029][T10173] ? perf_pending_task+0x35c/0x470 [ 350.319184][T10173] ? perf_pending_task+0x35c/0x470 [ 350.324332][T10173] ? perf_pending_task+0x35e/0x470 [ 350.329475][T10173] handle_bug+0xcf/0x120 [ 350.333787][T10173] exc_invalid_op+0x1a/0x50 [ 350.338325][T10173] asm_exc_invalid_op+0x1a/0x20 [ 350.343234][T10173] RIP: 0010:perf_pending_task+0x35c/0x470 [ 350.348987][T10173] Code: ff 84 db 75 14 e8 74 e0 d5 ff 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 60 e0 d5 ff e8 7b 61 4f ff eb e5 e8 54 e0 d5 ff <0f> 0b e9 f3 fe ff ff e8 48 e0 d5 ff 48 c7 c7 70 f3 1c 8d 4c 89 f6 [ 350.368713][T10173] RSP: 0018:ffffc900031a79c0 EFLAGS: 00010293 [ 350.374810][T10173] RAX: ffffffff81b13c0c RBX: ffff88807d2ad9b8 RCX: ffff88802ac51e00 [ 350.382905][T10173] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 350.390898][T10173] RBP: 0000000000000001 R08: ffffffff8e8aeeef R09: 1ffffffff1d15ddd [ 350.398896][T10173] R10: dffffc0000000000 R11: fffffbfff1d15dde R12: ffff88802ac51e00 [ 350.406893][T10173] R13: ffff88807dc7bd30 R14: ffff88807d2ad778 R15: 1ffff1100fa55aef [ 350.414897][T10173] ? perf_pending_task+0x35c/0x470 [ 350.420057][T10173] task_work_run+0x1d4/0x260 [ 350.424682][T10173] ? task_work_cancel+0x220/0x220 [ 350.429749][T10173] do_exit+0x95a/0x2460 [ 350.433950][T10173] ? put_task_struct+0xc0/0xc0 [ 350.438748][T10173] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 350.444756][T10173] ? get_signal+0x1068/0x13f0 [ 350.449466][T10173] ? lock_chain_count+0x20/0x20 [ 350.454346][T10173] ? _raw_spin_lock_irq+0xbb/0xf0 [ 350.459404][T10173] do_group_exit+0x21b/0x2d0 [ 350.464037][T10173] ? lockdep_hardirqs_on+0x98/0x150 [ 350.469265][T10173] get_signal+0x12fc/0x13f0 [ 350.473809][T10173] arch_do_signal_or_restart+0xc2/0x800 [ 350.479393][T10173] ? __ia32_sys_get_robust_list+0x110/0x110 [ 350.485312][T10173] ? blkcg_maybe_throttle_current+0x19f/0xa90 [ 350.491430][T10173] ? get_sigframe_size+0x20/0x20 [ 350.496417][T10173] ? exit_to_user_mode_loop+0x3b/0x110 [ 350.501909][T10173] exit_to_user_mode_loop+0x70/0x110 [ 350.507230][T10173] exit_to_user_mode_prepare+0xee/0x180 [ 350.512813][T10173] syscall_exit_to_user_mode+0x1a/0x50 [ 350.518304][T10173] do_syscall_64+0x61/0xa0 [ 350.522754][T10173] ? clear_bhb_loop+0x40/0x90 [ 350.527466][T10173] ? clear_bhb_loop+0x40/0x90 [ 350.532187][T10173] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 350.538116][T10173] RIP: 0033:0x7f487419c799 [ 350.542560][T10173] Code: Unable to access opcode bytes at 0x7f487419c76f. [ 350.549601][T10173] RSP: 002b:00007f48750fa0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 350.558043][T10173] RAX: fffffffffffffe00 RBX: 00007f4874415fa8 RCX: 00007f487419c799 [ 350.566040][T10173] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f4874415fa8 [ 350.574035][T10173] RBP: 00007f4874415fa0 R08: 0000000000000000 R09: 0000000000000000 [ 350.582031][T10173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 350.590029][T10173] R13: 00007f4874416038 R14: 00007ffca871d280 R15: 00007ffca871d368 [ 350.598037][T10173] [ 350.601657][T10173] Kernel Offset: disabled [ 350.606001][T10173] Rebooting in 86400 seconds..