last executing test programs: 2m10.273442364s ago: executing program 0 (id=840): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0xe07e872420dfefca) r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x6, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, r0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) perf_event_open(0x0, 0x0, 0x6, 0xffffffffffffffff, 0x2) socket$kcm(0xf, 0x3, 0x2) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x8b, 0x1, 0x40, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x4}, 0x0, 0x0, 0x6, 0x9, 0x9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$inet(r1, 0x0, 0x1) socketpair(0x2b, 0xa, 0xffffffdd, &(0x7f0000000440)={0x0, 0x0}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000001c0), 0x12) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz0\x00', 0x200002, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000740)="2e00000010008188e6b62aa73f72cc9f0ba1f8481a0000005e140602002100000e000a00100000000a8000001294", 0x2e}], 0x1}, 0x0) 2m9.753484392s ago: executing program 0 (id=845): bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000540)={0xffffffffffffffff, &(0x7f0000000400), 0x0}, 0x20) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x8}, 0x14b4, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0xa836, 0x6}, 0x0, 0x2, 0xfffffffe, 0x1, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r0, &(0x7f0000000b40)={&(0x7f0000000200)={0x2, 0x4c20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xf}, @loopback}}}], 0x20}, 0xe900) sendmsg$kcm(r0, &(0x7f00000020c0)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000080)="d12c7b706724a010c2", 0x9}, {&(0x7f0000000b80)="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", 0x5a0}], 0x2}, 0x24000000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) close(r1) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x55, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20012, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8, 0x36f3}, 0x0, 0x1000000000001, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = syz_clone(0x808a3000, 0x0, 0x0, &(0x7f0000000440), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={r4, r1, 0x0, 0xfffffffffffffe59, &(0x7f00000023c0)}, 0x30) 2m8.522586198s ago: executing program 0 (id=853): bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000540)={0xffffffffffffffff, &(0x7f0000000400), 0x0}, 0x20) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x8}, 0x14b4, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0xa836, 0x6}, 0x0, 0x2, 0xfffffffe, 0x1, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) close(r1) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x55, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20012, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8, 0x36f3}, 0x0, 0x1000000000001, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000b00)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6493790710000000000080000b2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9924be41a9169bdfaf16da915b2e249f21c6eee84309e7a23c19a394830f2539fcb4e0b6eab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bfb1c0e6b1244d35b213bda84cc172afcc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbb888b0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab2e4b380a00d72bc0480f94479757306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b844139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a662d8bc9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e558d17879570c8ad943e392955f4f979ea13201bafe4f0f6ea508000000a0c548552b571bed5647323478a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151fcda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526894aa7fe5e68949a3b304723177d356c4604bca492ecec37e83efceefd78a2533659edc8bef9cb85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d350000000000000000e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e5a61561a9845e4ff29e2bd43b5b923b272341c5e093fd66a2946501559335781092cf8ce987c56cd31121624d7455f2a3666276c3c0e812b28e2f30d035cee5d0e77a3c72208ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f030b8d3ebcef5af469abe753314fae31a09c3a041a1e7b55c4e81dba1e12289ee34463aaf28345bde0c195bc9f022ca8ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262d0af3246eb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a0600adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa7000008000000000000117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cd50feeb7bfad9b7be3283b6450d34264e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5a71e0d7696caba172745c7dd919ffb631820420b75b6522c0e21c882c66f4f25ffb6d95e07e068000000000000eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff201000000000000002e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa66237e0dacc107f532348cc2116473381e961f3d9c8c21578fe3245097c280abe51427b9f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6f0100000000000000f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d174b0000000000000000000000fa08ad0731ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282b6caa2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae0533496b6d58da50ee80a6b9a7438978c5465113f668eb4484350048289d07dbef325d3221a7cb35f812f257941a9781e3214c2a3dcf89d99844b762a9cf17548c54fccad2c7ae8072b82e0880815daf966bd5343c1635e123f868a7167cfcff33320253af570f4ef9c0254afdd89ac3943562b530dd88da8a94013bbaf204bebc38055adc39f07f7c22711f4d1f6dcc928d1578a093c072e0b92babc76f47ee367e745a024a2278319d9a4d1378482b74c516647652bfb6e93002494a5cd74e2a9a4734487062437da23e1efa6ef7674108aaa3ffac859c3577c2637bb3bdc69bc365b1f20dba96b8acca62f3f80045318de0facf2ed44b814e842c2a520159bb6c320cec0910c0b8bd3d547bdfba2e09d24d117ed0388afd37affbad2f9c77c9c1314a16ffe64f5e3744a2fffd7039670f5706e589a4c3868db06fd892d68a547477f8ef686ff0dba7b8c18c94d5a89b0567a851750a35d9cc2217db890d89385fcaa00f0f2e524672e6f4c8bedfd5da5b157709b8265cf511dc5846ab1d85916c4a6b2d1b408575982e11230cbac0a9c6eaa03c945645581f678403c2a936c53ae72940aa92bcf22b82c6bc028e0acdddf9fef595f0f7a9f80c0e4c659ced769ec463d26a81e468846761a8e1efd6a031ab7adc8665e267be0065cc315aa23012423ec8b8492d9b50fa4d8c5891959b761eec6dc988532782fda13239c948e27853606e26225c796b79cc04f3d1a5a13000000001e301d82a27010d3ac6119d2b12caf282413672d20c852c50084d7b2d50754775ed63bc18023c31351af76e24788d96103455693b34e09a163a9f613a7e5530222cebd7fa0fbff32dc98088f9fab33648cc38e87dd2dd6ee157f5f018702696915661715c979b7796d4f101a257688af7c148e8615c938c4ca8a69f6fc585ec1dd1857a501f90b161eff23181a11a2b0da4c58d459cbf9db"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = syz_clone(0x808a3000, 0x0, 0x0, &(0x7f0000000440), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r0, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0a000000050000000200000008"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000400008500000001000000850000000e00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r7, 0xffffffffffffffff, 0x60000000}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0xf, 0x9, 0xfffffffc, 0x200, r2, 0x6, '\x00', r5, r1, 0x1, 0x0, 0x4, 0xb}, 0x50) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={r4, r1, 0x0, 0xfffffffffffffe59, &(0x7f00000023c0)}, 0x30) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000300)={0x1, 0xa, [@random="c102715e2b4f", @random="48b95e1af8b8", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}, @local, @multicast, @remote, @empty, @empty, @remote, @remote]}) 2m7.509070382s ago: executing program 0 (id=867): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x36}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7}, 0x48) (async) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x7400}, 0x4000) 2m7.081775097s ago: executing program 0 (id=862): bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000540)={0xffffffffffffffff, &(0x7f0000000400), 0x0}, 0x20) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x8}, 0x14b4, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0xa836, 0x6}, 0x0, 0x2, 0xfffffffe, 0x1, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r0, &(0x7f0000000b40)={&(0x7f0000000200)={0x2, 0x4c20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xf}, @loopback}}}], 0x20}, 0xe900) sendmsg$kcm(r0, &(0x7f00000020c0)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000080)="d12c7b706724a010c2", 0x9}, {&(0x7f0000000b80)="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", 0x5a0}], 0x2}, 0x24000000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) close(r1) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x55, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20012, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8, 0x36f3}, 0x0, 0x1000000000001, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = syz_clone(0x808a3000, 0x0, 0x0, &(0x7f0000000440), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={r4, r1, 0x0, 0xfffffffffffffe59, &(0x7f00000023c0)}, 0x30) 2m4.68253999s ago: executing program 0 (id=873): r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) close(0xffffffffffffffff) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb}, 0x50) syz_clone(0x41200000, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000000b00)={&(0x7f0000000000)=@qipcrtr, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000340)=""/235, 0xeb}, {&(0x7f00000004c0)=""/113, 0x71}, {&(0x7f0000000700)=""/220, 0xdc}, {&(0x7f0000000800)=""/146, 0x92}, {&(0x7f00000008c0)=""/131, 0x83}, {&(0x7f0000000980)=""/171, 0xab}], 0x6, &(0x7f0000000ac0)=""/32, 0x20}, 0x60012103) 1m49.044730611s ago: executing program 32 (id=873): r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) close(0xffffffffffffffff) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb}, 0x50) syz_clone(0x41200000, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000000b00)={&(0x7f0000000000)=@qipcrtr, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000340)=""/235, 0xeb}, {&(0x7f00000004c0)=""/113, 0x71}, {&(0x7f0000000700)=""/220, 0xdc}, {&(0x7f0000000800)=""/146, 0x92}, {&(0x7f00000008c0)=""/131, 0x83}, {&(0x7f0000000980)=""/171, 0xab}], 0x6, &(0x7f0000000ac0)=""/32, 0x20}, 0x60012103) 7.255382752s ago: executing program 2 (id=1351): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000dc0)={&(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0, 0x26}, 0x20) socket$kcm(0x11, 0x3, 0x0) socket$kcm(0xa, 0x1, 0x0) socket$kcm(0x2, 0x5, 0x84) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b05c153}, 0x0, 0x1, 0xffffffffffffffff, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000aecd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad94ed406f21caf5adcf920569c00cc1199684fa75814709fea019af247c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c1faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6fab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b79db2e3d5986c82b5aa94e539b204d58f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c7160ec83070000020000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72b0000000000001cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2cc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78ac02ca3cdf6a662db1c9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad943e392955f4f979ea13201bafedcd2063d11dd665647223c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd89346cfbb5567e54d3504723177d356c4604b7a492ecec37e83efceefd7ca2533659edc8be05cc85451c6a14507434eb54b6f43caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffca9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a294351c5356c1d06c92cf8ce3c7c56cd31121624d74517fd3666277f670e812b28e2f30d035cee5d0e77a3c7220000000000000005a474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f034b8d3ebce68663ef5af469abe75b314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041e12282ce24463aaf28345bd168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f09000000000000004fc4bda3453602004535a976eacd3adaa4d2ee6fe0d072ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d401adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb40f7f02f750d6c977a191852c9ae031db044b2353199546609f9f69a6cfefdf879d447df53f3b9b70d10355b00300000000000000553d18a6cc50feeb7bfad9b7be3283b6450d264e7712d2f1d7004548b19162cef04d18d4f58fab987baab97a9bfbd8f185b5631820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe527340935aa3c0b4f3f45b418a18217747ae442e31560e5b741445ea2a1acee2a81425ff000000d2a0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51423b9f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f88735fce5115dc83ed73d8ee4a91322608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf5000000000000fa08ad0631c4b839688b22c4da2a6bc4cf45854d221a2d5f96bc64647f15daa2ba79cd0f4254ed55217912ef84bd2927df82fc061aef2920c49b2a90886da75561173fa186cb7ee86dd4285c4721eb428c953296bb2f5d825da54dbef07c1b349b4901e093d13e6b9a0000009b5b22e887bc061d40bcaf0aa18623fd9b7179ccc692ba74b531b65c4decf9d080a8ac7e82d4cde1267aa64b2a94fd87a009e6742c2ddc3a9d7eccbb1831b1fa218277c2814a91cab7cb59c697166d6f1bb1a360470000000000000000000000000000000000000000000000000000f9f9b4ce7e871f507084c8c88e0652decbe579b03ed84ea94597dd1059620a050f69ea03b99b4e19d35f4a3b54e96ae2172effecec80f6baa4bf69a6ebf5392882df78b0983e662dc0cb64b77f3f006b6b25443197ae93f0be6de5a703d003f00720943c0e4b33af00000000000000000021a688b2d7007fcc4b59f719afb0b3b7e0aee306ca70fe42bf4984a68f40e1fc043a03a17e4744359b87dc27c82d51cbeb64e52a28daeb6a78d6fe06181ecc840000"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000580)="5c00000052006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038021d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d49380e78ff6a1577ae18c819945fb4e37e70e4509c5", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x10) recvmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000002400)=""/4073, 0xfe9}, {&(0x7f0000000300)=""/180, 0xb4}], 0x2}, 0x0) recvmsg$kcm(r1, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r4 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={&(0x7f0000000100)=@in={0x2, 0x4e21, @remote}, 0x80, &(0x7f0000000000)=[{&(0x7f00000006c0)='@', 0x1}], 0x1, &(0x7f0000000040)=[{0x18, 0x84, 0x0, 'r'}, {0x20, 0x84, 0x8, "eeb4fe8ba15e3999ef"}], 0x38}, 0x41) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x12b100, 0x0) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20403, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x2, @perf_config_ext={0x9}, 0x40}, 0x0, 0x9, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0}, 0x8000, 0x3, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x28, 0x5, 0x0) socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1ff, 0x200}, 0x8000, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) socketpair(0xa, 0x3, 0x0, &(0x7f0000000180)) socket$kcm(0x2b, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x0) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$OBJ_PIN_MAP(0x9, &(0x7f0000000040)=@generic={0x0, r5}, 0x18) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000080)={r0, 0x20, &(0x7f0000000140)={0xfffffffffffffffd, 0x0, 0x0, 0xfffffffffffffffe}}, 0x10) 5.800507802s ago: executing program 2 (id=1358): bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000540)={0xffffffffffffffff, &(0x7f0000000400), 0x0}, 0x20) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x8}, 0x14b4, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0xa836, 0x6}, 0x0, 0x2, 0xfffffffe, 0x1, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r0, &(0x7f0000000b40)={&(0x7f0000000200)={0x2, 0x4c20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xf}, @loopback}}}], 0x20}, 0xe900) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89b0, &(0x7f0000000cc0)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, &(0x7f0000001d80), &(0x7f0000001d40)=r3}, 0x20) sendmsg$kcm(r2, &(0x7f0000002080)={&(0x7f0000000080)=@hci={0x1f, 0x0, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000000c40)=[{0xb0, 0x0, 0x7, "0743f9181ff34ad57bde32222cac109c69cdcd22aecdbbfa927a727661063266f6faa662edf05551d42aa0543796b2c80702000017d0c71e1a4b8e7501e749dc9d0239e7c0a10000000000000003067f9e77699d9a59783e0363179965ef92e37ca837106e787d8a8a3d90c5c162d90176f35c49c43c1d1496401dfeb0f7347ac2dce43deaac1413e023b9707c776e4f6a796b00c50b7745943ced3bb4"}, {0x30, 0x0, 0x4, "b71cc98015701df1a14a06da101e38a395be39f28b1e5cccae9708d6"}, {0xc8, 0x107, 0x7, "67fe31de3edd141f0c76bebc733acab75b1eb805a0c13fe84d113c956f151d923a8a9c1517b70706a382f656b2489f8e3eaee06565415a85807004243428cc6375ea1b2516ecabc6b7d5cfff94ea23aa2538c448e9534f1b8aaa248cf0320bbdd14e529faa11aaf30e7e165c1bbf74a2efb15fb837faa215e73736eb1d00b84cdaa4fe9c8fe9baa9af3ec4b9b7b3c36f75748df69d5becfbf2d48e41bbb0c0b7a852a8023223573a37bc7324aa6945e141f3da"}, {0x30, 0x0, 0x6, "f2d4827b9a79c3f76b0c386c93af9725254d0941cc583960584657b878b6"}, {0x10, 0x29, 0xe72}], 0x1e8}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x6, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x5, 0x4, 0x8, 0xf}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r4}, &(0x7f0000000140), &(0x7f0000000180)}, 0x20) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x19, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r6, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffe5e}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000) syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x16, 0xd, &(0x7f0000000200)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYRES8], 0x48) 3.73573217s ago: executing program 1 (id=1366): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0x1}], 0x1}, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x89a3, 0x0) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) close(r1) ioctl$TUNGETVNETLE(r0, 0xc008744c, &(0x7f0000000180)) 3.525689063s ago: executing program 2 (id=1368): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="2e00000010008188040f80ec59acbc0413a1810031ffc30002010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x40) 3.428756324s ago: executing program 1 (id=1369): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x8000) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x10000, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0x40, 0x3, 0x0, 0x0, 0x0, 0x5, 0x400, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x3, 0x0, 0x4, 0x401, 0xfeffffff, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xa) 3.034381509s ago: executing program 1 (id=1371): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x809, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0xe}, 0x0, 0x35, 0x43a1bd76, 0x1, 0x3, 0x8, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000003c0)={'macvlan1\x00', 0x600}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x16, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70300000a000000850000006900000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)=@generic={&(0x7f00000000c0)='./file0\x00', 0x0, 0x38}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0xa0800, 0x0) close(r3) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000ec0)="d80000001d0081044e81f782db44b904021d080560000000040000a1180002000000000000000e1208000f0100810401a8001600260001400300000803600cfab94dcf5c0461c16f94007134cf6ee08000a0e408e8d8ef075c11503c6baace801bcb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd6bc09000000000000002483916ddf50b8b351f55551715b52facb", 0x9b}, {&(0x7f00000006c0)="54f6d4d87eb3f1c0c5", 0x9}, {&(0x7f0000000080)="027a64c0072ebbb1512b328dda11b4efd4ba07fc642b6eb91dacc63c30ada51eb3958755533ccce04d3e635cbe848495e723490d", 0x34}], 0x3, 0x0, 0x0, 0x7400}, 0xd0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x3}, 0x10}, 0x94) r5 = socket$kcm(0x1e, 0x5, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000008c0), 0x43) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x8000, 0x5, 0x5575, 0xaaf04684de878bda, 0x9, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x3) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000780)={&(0x7f0000000580)="50ef986b53f33a324604cd5a676d861274193cf1e1b172c4204ef6e28f8795d1ad8bff535596a22774fc33ecd5458c713806f0869bcdcceab293bc67202f4f0a1718993e76e6467203b1a216a921d8df7253ee672ba96a8db60526ae5204eb28de15de2bfd7d169a8b1cd8873005abcb5d31d8", &(0x7f0000000600)=""/38, &(0x7f0000000640)="9e5fe80cde02071b1ba44675b16221cf82043e46a523e37e4e5541ca97281c23d84bacbf0a17850f5783bd1d51743aa8624ea7eedf42c619686083c9c2adb927d97283db4eb8", &(0x7f00000006c0)="f377facbc3a43db175407f82135b5a8c85b5e401767d555a9b2a7b8a77b9079371820d9bd6bc86945a4f2c2c0fadbe7b0049d38c6150e2899cf159cc3d68cdb98a6c4be79fb47d9e8ae07afa069398df55ccb8e75a1f0bb57836bbef310a994f861435206bde1b60036b5769867d3e082401f9fe752a907ff10f414db740b6d6a5c837e2c09954d6a06f6f456f51685e21429c9fbb601d6368b35bcb62fe9ecf2c8f7b7253703372fa22d3d5f360adf4306204", 0x3, r6}, 0x38) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000000040)={'syzkaller0\x00'}) 2.932033581s ago: executing program 2 (id=1372): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3efd7ab4c41335d9, @perf_config_ext={0x7, 0x7}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x10, 0x0, &(0x7f0000000680)="b14b34c6dc80e53b0fe66609b55447f5", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x5, 0x13, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xea, 0x0, 0x0, 0x0, 0x2000007}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000005c0)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100ff}, 0x94) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, @perf_bp={0x0, 0xf}, 0x1000, 0x4, 0x0, 0x8, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) ioctl$PERF_EVENT_IOC_QUERY_BPF(r3, 0xc008240a, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x100, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_msg}, 0x48) 2.662264274s ago: executing program 4 (id=1373): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x80000009}, [@call={0x85, 0x0, 0x0, 0x89}], {0x95, 0x0, 0x0, 0x30}}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.414829278s ago: executing program 4 (id=1374): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000005c0)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x90}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94) 2.056007042s ago: executing program 4 (id=1375): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000000700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000000c0)={@fallback=r4, 0xffffffffffffffff, 0x2c, 0x2c}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1d, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x88) bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x200000e, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x600, 0x4000000}, 0x28) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 1.674429948s ago: executing program 2 (id=1376): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x7, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="560a0000000000006110b3000000000095000f0000000000"], &(0x7f0000000000)='GPL\x00'}, 0x80) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x404, 0x9}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x3, 0x4, 0x801, 0x1, r0, 0x15b4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1}, &(0x7f0000000840), &(0x7f0000000880)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r1, &(0x7f0000000900)}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0x1, 0x58, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x4, '\x00', r2, 0xffffffffffffffff, 0x0, 0x5, 0x1}, 0x50) 1.655011908s ago: executing program 1 (id=1377): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000dc0)={&(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0, 0x26}, 0x20) socket$kcm(0x11, 0x3, 0x0) socket$kcm(0xa, 0x1, 0x0) socket$kcm(0x2, 0x5, 0x84) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b05c153}, 0x0, 0x1, 0xffffffffffffffff, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000aecd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad94ed406f21caf5adcf920569c00cc1199684fa75814709fea019af247c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c1faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6fab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b79db2e3d5986c82b5aa94e539b204d58f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c7160ec83070000020000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72b0000000000001cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2cc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78ac02ca3cdf6a662db1c9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad943e392955f4f979ea13201bafedcd2063d11dd665647223c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd89346cfbb5567e54d3504723177d356c4604b7a492ecec37e83efceefd7ca2533659edc8be05cc85451c6a14507434eb54b6f43caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffca9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a294351c5356c1d06c92cf8ce3c7c56cd31121624d74517fd3666277f670e812b28e2f30d035cee5d0e77a3c7220000000000000005a474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f034b8d3ebce68663ef5af469abe75b314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041e12282ce24463aaf28345bd168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f09000000000000004fc4bda3453602004535a976eacd3adaa4d2ee6fe0d072ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d401adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb40f7f02f750d6c977a191852c9ae031db044b2353199546609f9f69a6cfefdf879d447df53f3b9b70d10355b00300000000000000553d18a6cc50feeb7bfad9b7be3283b6450d264e7712d2f1d7004548b19162cef04d18d4f58fab987baab97a9bfbd8f185b5631820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe527340935aa3c0b4f3f45b418a18217747ae442e31560e5b741445ea2a1acee2a81425ff000000d2a0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51423b9f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f88735fce5115dc83ed73d8ee4a91322608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf5000000000000fa08ad0631c4b839688b22c4da2a6bc4cf45854d221a2d5f96bc64647f15daa2ba79cd0f4254ed55217912ef84bd2927df82fc061aef2920c49b2a90886da75561173fa186cb7ee86dd4285c4721eb428c953296bb2f5d825da54dbef07c1b349b4901e093d13e6b9a0000009b5b22e887bc061d40bcaf0aa18623fd9b7179ccc692ba74b531b65c4decf9d080a8ac7e82d4cde1267aa64b2a94fd87a009e6742c2ddc3a9d7eccbb1831b1fa218277c2814a91cab7cb59c697166d6f1bb1a360470000000000000000000000000000000000000000000000000000f9f9b4ce7e871f507084c8c88e0652decbe579b03ed84ea94597dd1059620a050f69ea03b99b4e19d35f4a3b54e96ae2172effecec80f6baa4bf69a6ebf5392882df78b0983e662dc0cb64b77f3f006b6b25443197ae93f0be6de5a703d003f00720943c0e4b33af00000000000000000021a688b2d7007fcc4b59f719afb0b3b7e0aee306ca70fe42bf4984a68f40e1fc043a03a17e4744359b87dc27c82d51cbeb64e52a28daeb6a78d6fe06181ecc840000"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000580)="5c00000052006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038021d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d49380e78ff6a1577ae18c819945fb4e37e70e4509c5", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x10) recvmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000002400)=""/4073, 0xfe9}, {&(0x7f0000000300)=""/180, 0xb4}], 0x2}, 0x0) recvmsg$kcm(r1, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r4 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={&(0x7f0000000100)=@in={0x2, 0x4e21, @remote}, 0x80, &(0x7f0000000000)=[{&(0x7f00000006c0)='@', 0x1}], 0x1, &(0x7f0000000040)=[{0x18, 0x84, 0x0, 'r'}, {0x20, 0x84, 0x8, "eeb4fe8ba15e3999ef"}], 0x38}, 0x41) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x12b100, 0x0) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20403, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x2, @perf_config_ext={0x9}, 0x40}, 0x0, 0x9, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0}, 0x8000, 0x3, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x28, 0x5, 0x0) socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1ff, 0x200}, 0x8000, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) socketpair(0xa, 0x3, 0x0, &(0x7f0000000180)) socket$kcm(0x2b, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x0) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$OBJ_PIN_MAP(0x9, &(0x7f0000000040)=@generic={0x0, r5}, 0x18) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000080)={r0, 0x20, &(0x7f0000000140)={0xfffffffffffffffd, 0x0, 0x0, 0xfffffffffffffffe}}, 0x10) 972.094817ms ago: executing program 2 (id=1378): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x1400, &(0x7f0000000080)=[{&(0x7f0000000040)="140000001d000b63d25a80648c2594f90524fc60", 0x14}], 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="09000000160000000800000040"], 0x50) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0xc48}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x15, 0x1c, &(0x7f00000005c0)=ANY=[@ANYBLOB="18080000d90c4d1b67d10273a969e86802554be6f7c3179f28b765699be98a4d4a59ea418333a007e607f6de3c96536b492bc4d69cbc7fe8b8ec92", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7060000000000008500000005000000bf0900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b50900000ad000007baaf0ff00000000ae8900000000000007080000f8ffffffbf8400000000000007040000f0ffffffc70200000800000018260000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000020000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x19, &(0x7f0000000000)=r5, 0x8) write$cgroup_int(r5, &(0x7f00000000c0)=0x2, 0x12) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'dvmrp1\x00', 0x2}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x40000}, [@call={0x85, 0x0, 0x0, 0x8c}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f0000000140)={0x2, &(0x7f0000000200)=[{0xac}, {0x6}]}) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x0, r0}, 0x18) 781.15861ms ago: executing program 4 (id=1379): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8712380000001f00000000000000040014000d000a001400c3ff9ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x200000000000000) 512.568563ms ago: executing program 3 (id=1380): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x8, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0xb}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x4, 0x10, &(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00'], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000900)=r0, 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0xff, 0x0, 0xfd, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x400, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x3}, 0x0, 0xf, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x3c}, [@ldst={0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x700}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x80ffff, 0x0, '\x00', 0x0, @sock_ops}, 0x48) 440.023914ms ago: executing program 4 (id=1381): socket$kcm(0x2, 0x3, 0x106) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43e1bd74, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x5}, 0x2921, 0x1, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x9, &(0x7f0000000080)=ANY=[@ANYBLOB="180800000000000f00000000000000008510000005000000850000000f0000006e8000000000000018000000fdffffff0000000000000000950000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) 382.225025ms ago: executing program 1 (id=1382): r0 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000cc0)=@l2tp6={0xa, 0x0, 0x1001000, @mcast2, 0x47}, 0x80, 0x0, 0x0, 0x0, 0x0, 0xa00}, 0x800) 267.164977ms ago: executing program 3 (id=1383): r0 = socket$kcm(0x2, 0x3, 0x106) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89a0, &(0x7f0000000340)='%d\x00\x00\x00\x00j\xfef;q1\x95\xf4\xe4\x13\x95k#Jz.F\xce\xfb\x9c\x0f\xf3v\x88\x91\xbct\xb0\x1bLq\x15\x00\xad\t\x13\xf5U\x02\xc9d6q\xc3\xa5\xcf\x01t\r%\xad-\x13\xb0 E\xaaC\xc388\x13\xc6H\x0f \x03\x86\xb5\xbfq\'\xab!\x9e\xa98\xa1\xc3\xe9\x06C\xd4\xb5\x18}4\xa9yA8\x1fQ\xdf\xde\x91\xfd\xf1B*j\n\xef\xff\xddR\xec~c\xcb\x93\x84\x7f\\x6\xedZ\x82\xa0\x1by\x17\x1a\xc8\x98\x99\x0f') sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000700)="fbd2b9ed", 0x4}, {&(0x7f0000000680)="660f829e3add48b05d82", 0xa}, {&(0x7f0000000800)="adb34727cc508a", 0x7}], 0x3}, 0x0) 79.904109ms ago: executing program 1 (id=1384): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0}, 0x28) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r1, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x14}, @dev={0xac, 0x14, 0x14, 0x3a}}}}], 0x20}, 0x8840) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8003}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x8, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x5d31, 0x20403, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x9}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0xa, 0x6, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x541b, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x60, &(0x7f0000000000)=[{&(0x7f0000000300)="2000000011008188040f80ec59acbc0413a181000d000000000100ffffffa100", 0x20}], 0x1}, 0x40000) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x21, &(0x7f0000000240), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x9, 0x4, &(0x7f0000000780)=ANY=[], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x59, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$ITER_CREATE(0x21, &(0x7f0000000200), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x0, 0x0, &(0x7f0000000740)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4004, @dev={0xac, 0x14, 0x14, 0x4}}, 0x10, 0x0}, 0x28008840) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) setsockopt$sock_attach_bpf(r8, 0x1, 0x41, &(0x7f00000006c0)=r7, 0x4) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) 78.809079ms ago: executing program 4 (id=1385): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x809, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0xe}, 0x0, 0x35, 0x43a1bd76, 0x1, 0x3, 0x8, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000003c0)={'macvlan1\x00', 0x600}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x16, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70300000a000000850000006900000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)=@generic={&(0x7f00000000c0)='./file0\x00', 0x0, 0x38}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0xa0800, 0x0) close(r3) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000ec0)="d80000001d0081044e81f782db44b904021d080560000000040000a1180002000000000000000e1208000f0100810401a8001600260001400300000803600cfab94dcf5c0461c16f94007134cf6ee08000a0e408e8d8ef075c11503c6baace801bcb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd6bc09000000000000002483916ddf50b8b351f55551715b52facb", 0x9b}, {&(0x7f00000006c0)="54f6d4d87eb3f1c0c5", 0x9}, {&(0x7f0000000080)="027a64c0072ebbb1512b328dda11b4efd4ba07fc642b6eb91dacc63c30ada51eb3958755533ccce04d3e635cbe848495e723490d", 0x34}], 0x3, 0x0, 0x0, 0x7400}, 0xd0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x3}, 0x10}, 0x94) r5 = socket$kcm(0x1e, 0x5, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000008c0), 0x43) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x8000, 0x5, 0x5575, 0xaaf04684de878bda, 0x9, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x3) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000000040)={'syzkaller0\x00'}) 0s ago: executing program 3 (id=1386): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="240000001e006bcd9e3fe3dc6e08000007000000000000007ea60864160af36504005425", 0x24}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000800000000000000000000001801000000646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x10001, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x120, 0x400000, 0xb9, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x16000, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x1, 0x0, 0x8, 0x3fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={0xffffffffffffffff, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84, &(0x7f00000004c0)=[{}], 0x8, 0x0, 0x0, 0x0, 0x0, 0x6f, 0x8, 0x0, 0x0}}, 0x10) r2 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r2, 0x84, 0x76, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="03000000040000000400"], 0x50) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x86dd, 0x26, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r5, 0x6, 0x1d, &(0x7f00000000c0), 0xd8) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="18007fffffff000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000838500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r6}, 0xc) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x102) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.209' (ED25519) to the list of known hosts. [ 77.623811][ T5762] cgroup: Unknown subsys name 'net' [ 77.774917][ T5762] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 79.450038][ T5762] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 81.103052][ T5778] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 81.103588][ T5783] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 81.112696][ T5778] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 81.121285][ T5783] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 81.125748][ T5778] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 81.132830][ T5783] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 81.141046][ T5778] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 81.147377][ T5783] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 81.153868][ T5778] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 81.160937][ T5783] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 81.167721][ T5778] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 81.175931][ T5783] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 81.201787][ T5782] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 81.212215][ T5782] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 81.226555][ T5782] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 81.234615][ T5782] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 81.243291][ T5782] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 81.250989][ T5086] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 81.259656][ T5086] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 81.297645][ T5086] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 81.298253][ T5782] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 81.312691][ T5086] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 81.313654][ T5782] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 81.329667][ T5782] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 81.692105][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 81.750594][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 81.853455][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 81.944913][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.952968][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.960572][ T5775] bridge_slave_0: entered allmulticast mode [ 81.968516][ T5775] bridge_slave_0: entered promiscuous mode [ 82.002732][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.012000][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.019967][ T5775] bridge_slave_1: entered allmulticast mode [ 82.027872][ T5775] bridge_slave_1: entered promiscuous mode [ 82.062304][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.071533][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.079537][ T5774] bridge_slave_0: entered allmulticast mode [ 82.087032][ T5774] bridge_slave_0: entered promiscuous mode [ 82.104250][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.111828][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.119535][ T5774] bridge_slave_1: entered allmulticast mode [ 82.128589][ T5774] bridge_slave_1: entered promiscuous mode [ 82.166028][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.179009][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.225958][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.235931][ T5781] chnl_net:caif_netlink_parms(): no params data found [ 82.254345][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.262356][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.270730][ T5777] bridge_slave_0: entered allmulticast mode [ 82.277842][ T5777] bridge_slave_0: entered promiscuous mode [ 82.288358][ T5775] team0: Port device team_slave_0 added [ 82.295058][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.302682][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.310492][ T5777] bridge_slave_1: entered allmulticast mode [ 82.318731][ T5777] bridge_slave_1: entered promiscuous mode [ 82.327906][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.372224][ T5775] team0: Port device team_slave_1 added [ 82.402631][ T5774] team0: Port device team_slave_0 added [ 82.438424][ T5774] team0: Port device team_slave_1 added [ 82.469024][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.494980][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.502563][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.532835][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.548340][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.562803][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.570017][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.599402][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.611471][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.618707][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.645373][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.692915][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.703137][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.730136][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.752636][ T5777] team0: Port device team_slave_0 added [ 82.793319][ T5777] team0: Port device team_slave_1 added [ 82.809919][ T5781] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.820060][ T5781] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.828165][ T5781] bridge_slave_0: entered allmulticast mode [ 82.834996][ T5781] bridge_slave_0: entered promiscuous mode [ 82.844109][ T5781] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.851912][ T5781] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.860223][ T5781] bridge_slave_1: entered allmulticast mode [ 82.871356][ T5781] bridge_slave_1: entered promiscuous mode [ 82.910224][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.917329][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.943722][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.968030][ T5775] hsr_slave_0: entered promiscuous mode [ 82.977355][ T5775] hsr_slave_1: entered promiscuous mode [ 82.995444][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.003595][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.030278][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.057188][ T5774] hsr_slave_0: entered promiscuous mode [ 83.064361][ T5774] hsr_slave_1: entered promiscuous mode [ 83.073582][ T5774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.082228][ T5774] Cannot create hsr debugfs directory [ 83.113406][ T5781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.174398][ T5781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.247558][ T5778] Bluetooth: hci0: command tx timeout [ 83.247574][ T5782] Bluetooth: hci1: command tx timeout [ 83.275761][ T5781] team0: Port device team_slave_0 added [ 83.300064][ T5777] hsr_slave_0: entered promiscuous mode [ 83.307384][ T5777] hsr_slave_1: entered promiscuous mode [ 83.313637][ T5777] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.321322][ T5777] Cannot create hsr debugfs directory [ 83.348563][ T5781] team0: Port device team_slave_1 added [ 83.406719][ T5778] Bluetooth: hci2: command tx timeout [ 83.406750][ T5782] Bluetooth: hci3: command tx timeout [ 83.430083][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.437317][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.463945][ T5781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.495082][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.505142][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.532273][ T5781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.637648][ T5781] hsr_slave_0: entered promiscuous mode [ 83.645140][ T5781] hsr_slave_1: entered promiscuous mode [ 83.652260][ T5781] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.660481][ T5781] Cannot create hsr debugfs directory [ 83.792663][ T5774] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 83.829260][ T5774] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 83.842756][ T5774] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 83.881587][ T5774] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 83.965412][ T5775] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 83.994753][ T5775] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 84.007739][ T5775] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 84.030338][ T5775] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 84.061205][ T5777] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 84.083274][ T5777] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 84.095232][ T5777] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 84.111576][ T5777] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 84.232991][ T5781] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 84.245904][ T5781] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 84.256103][ T5781] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 84.281445][ T5781] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 84.399185][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.447617][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.459619][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.499857][ T1144] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.507601][ T1144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.524590][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.540869][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.562160][ T1144] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.569450][ T1144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.600269][ T1144] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.607483][ T1144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.623280][ T1144] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.630642][ T1144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.645318][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.670653][ T2958] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.677921][ T2958] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.700308][ T1144] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.707872][ T1144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.733059][ T5781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.799184][ T5781] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.860264][ T1144] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.867999][ T1144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.932460][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.939850][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.119958][ T5781] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 85.185406][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.328956][ T5778] Bluetooth: hci1: command tx timeout [ 85.334605][ T5778] Bluetooth: hci0: command tx timeout [ 85.343088][ T5774] veth0_vlan: entered promiscuous mode [ 85.370843][ T5774] veth1_vlan: entered promiscuous mode [ 85.453868][ T5774] veth0_macvtap: entered promiscuous mode [ 85.488319][ T5782] Bluetooth: hci2: command tx timeout [ 85.488330][ T5778] Bluetooth: hci3: command tx timeout [ 85.533297][ T5774] veth1_macvtap: entered promiscuous mode [ 85.571348][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.609841][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.623729][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.652916][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.669931][ T5774] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.680457][ T5774] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.690163][ T5774] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.699270][ T5774] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.714306][ T5781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.852375][ T5781] veth0_vlan: entered promiscuous mode [ 85.864689][ T5775] veth0_vlan: entered promiscuous mode [ 85.888312][ T5777] veth0_vlan: entered promiscuous mode [ 85.908391][ T5781] veth1_vlan: entered promiscuous mode [ 85.940956][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.950390][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.953396][ T5775] veth1_vlan: entered promiscuous mode [ 86.021155][ T5777] veth1_vlan: entered promiscuous mode [ 86.081298][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.081631][ T5781] veth0_macvtap: entered promiscuous mode [ 86.090046][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.131759][ T5775] veth0_macvtap: entered promiscuous mode [ 86.148749][ T5775] veth1_macvtap: entered promiscuous mode [ 86.165324][ T5781] veth1_macvtap: entered promiscuous mode [ 86.176406][ T5777] veth0_macvtap: entered promiscuous mode [ 86.220937][ T5777] veth1_macvtap: entered promiscuous mode [ 86.238631][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.249957][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.263000][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.281520][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.297067][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.318172][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.337660][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.350005][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.361883][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.373659][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.388602][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.422698][ T5775] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.440192][ T5775] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.446487][ C1] hrtimer: interrupt took 58835 ns [ 86.459594][ T5775] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.470008][ T5775] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.503028][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.514584][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.525805][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.541801][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.559875][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.578264][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.589947][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.601656][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.616875][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.638992][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.650870][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.663376][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.695556][ T5838] netlink: 'syz.1.2': attribute type 10 has an invalid length. [ 86.716257][ T5838] team0: Device wg1 is up. Set it down before adding it as a team port [ 86.742722][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.755705][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.765864][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.783844][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.795186][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.806329][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.821438][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.831082][ T5781] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.840873][ T5781] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.851937][ T5781] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.861075][ T5781] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.952300][ T5777] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.974750][ T5777] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.998579][ T5777] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.013640][ T5777] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.114809][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.134856][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.263247][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.296617][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.348238][ T991] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.403166][ T991] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.426675][ T5782] Bluetooth: hci0: command tx timeout [ 87.429314][ T5778] Bluetooth: hci1: command tx timeout [ 87.585035][ T5778] Bluetooth: hci2: command tx timeout [ 87.585047][ T5782] Bluetooth: hci3: command tx timeout [ 87.639346][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.686671][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.863311][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.912829][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.947470][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.991374][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.711627][ T5855] netlink: 'syz.2.3': attribute type 9 has an invalid length. [ 88.799914][ T5855] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.3'. [ 89.505742][ T5778] Bluetooth: hci1: command tx timeout [ 89.512012][ T5778] Bluetooth: hci0: command tx timeout [ 89.612691][ T5857] warning: `syz.3.4' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 89.647472][ T5778] Bluetooth: hci3: command tx timeout [ 89.653169][ T5778] Bluetooth: hci2: command tx timeout [ 89.778135][ T5870] Zero length message leads to an empty skb [ 89.927821][ T5868] netlink: 'syz.1.7': attribute type 153 has an invalid length. [ 89.984315][ T5868] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.7'. [ 90.293953][ T5862] netlink: 'syz.0.6': attribute type 10 has an invalid length. [ 90.401639][ T5860] netlink: 'syz.2.3': attribute type 9 has an invalid length. [ 90.431906][ T5860] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.3'. [ 92.443885][ T787] cfg80211: failed to load regulatory.db [ 93.016183][ T5899] syz.2.14 uses obsolete (PF_INET,SOCK_PACKET) [ 93.345477][ T5901] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 93.402857][ T5901] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 93.882123][ T5907] netlink: 144 bytes leftover after parsing attributes in process `syz.0.15'. [ 94.807547][ T5911] netlink: 'syz.0.16': attribute type 21 has an invalid length. [ 95.048271][ T5911] tap0: tun_chr_ioctl cmd 1074025677 [ 95.053949][ T5911] tap0: linktype set to 778 [ 95.097518][ T5912] tap0: tun_chr_ioctl cmd 2147767511 [ 95.231260][ T5911] netlink: 'syz.0.16': attribute type 3 has an invalid length. [ 95.278839][ T5911] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.16'. [ 96.662904][ T5920] netlink: 'syz.0.20': attribute type 10 has an invalid length. [ 96.915550][ T5920] team0: Device vxcan1 is of different type [ 97.181013][ T5920] syz.0.20 (5920) used greatest stack depth: 20264 bytes left [ 97.210639][ T5931] netlink: 76 bytes leftover after parsing attributes in process `syz.3.21'. [ 97.318296][ T5931] netlink: 132 bytes leftover after parsing attributes in process `syz.3.21'. [ 97.556834][ T5929] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.598459][ T5929] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 97.764347][ T5929] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.826674][ T5929] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 98.381604][ T5939] delete_channel: no stack [ 98.453017][ T5939] delete_channel: no stack [ 98.503676][ T5933] netlink: 'syz.0.22': attribute type 1 has an invalid length. [ 99.433250][ T5948] netlink: 'syz.1.26': attribute type 39 has an invalid length. [ 101.398778][ T5960] TCP: TCP_TX_DELAY enabled [ 102.231839][ T5967] netlink: 40 bytes leftover after parsing attributes in process `syz.0.32'. [ 102.288876][ T5967] dummy0: entered promiscuous mode [ 102.339140][ T5967] dummy0: entered allmulticast mode [ 102.966530][ T5974] netlink: 'syz.1.34': attribute type 1 has an invalid length. [ 103.473436][ T5983] delete_channel: no stack [ 103.515601][ T5983] delete_channel: no stack [ 105.169747][ T6002] netlink: 'syz.2.40': attribute type 39 has an invalid length. [ 105.171754][ T6001] delete_channel: no stack [ 105.221688][ T6001] delete_channel: no stack [ 107.666842][ T6015] netlink: 'syz.3.45': attribute type 1 has an invalid length. [ 107.708437][ T6013] netlink: 40 bytes leftover after parsing attributes in process `syz.1.44'. [ 107.796906][ T6013] dummy0: entered promiscuous mode [ 107.811069][ T6013] dummy0: entered allmulticast mode [ 110.752444][ T6040] netlink: 'syz.2.53': attribute type 10 has an invalid length. [ 111.164183][ T6040] team0: Device vxcan1 is of different type [ 111.557016][ T6045] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 111.565795][ T6045] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 112.947348][ T6064] netlink: 'syz.3.56': attribute type 39 has an invalid length. [ 114.957829][ T6074] netlink: 'syz.2.58': attribute type 21 has an invalid length. [ 115.192120][ T6075] tap0: tun_chr_ioctl cmd 1074025677 [ 115.218543][ T6075] tap0: linktype set to 778 [ 115.306813][ T6074] tap0: tun_chr_ioctl cmd 2147767511 [ 115.423873][ T6070] netlink: 'syz.2.58': attribute type 3 has an invalid length. [ 115.460529][ T6070] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.58'. [ 116.137025][ T6079] netlink: 40 bytes leftover after parsing attributes in process `syz.3.61'. [ 116.199731][ T6079] dummy0: entered promiscuous mode [ 116.215057][ T6084] netlink: 'syz.1.62': attribute type 9 has an invalid length. [ 116.278964][ T6084] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.62'. [ 116.289149][ T6079] dummy0: entered allmulticast mode [ 116.648266][ T6086] netlink: 'syz.1.62': attribute type 9 has an invalid length. [ 116.655994][ T6086] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.62'. [ 117.554404][ T6096] netlink: 'syz.3.65': attribute type 3 has an invalid length. [ 117.651341][ T6096] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.65'. [ 118.273567][ T6105] netlink: 'syz.0.67': attribute type 39 has an invalid length. [ 122.404971][ T6137] netlink: 40 bytes leftover after parsing attributes in process `syz.2.74'. [ 122.497190][ T6137] dummy0: entered promiscuous mode [ 122.503925][ T6137] dummy0: entered allmulticast mode [ 123.588781][ T6156] netlink: 16 bytes leftover after parsing attributes in process `syz.2.78'. [ 123.796632][ T6156] netlink: 128 bytes leftover after parsing attributes in process `syz.2.78'. [ 123.807775][ T6157] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 127.518495][ T6184] netlink: 'syz.2.86': attribute type 10 has an invalid length. [ 127.772701][ T6184] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.972865][ T6184] bridge_slave_1: left allmulticast mode [ 128.016510][ T6184] bridge_slave_1: left promiscuous mode [ 128.104980][ T6184] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.640317][ T6184] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 128.696690][ T6188] netlink: 'syz.1.89': attribute type 10 has an invalid length. [ 128.713381][ T6188] netlink: 55 bytes leftover after parsing attributes in process `syz.1.89'. [ 130.568926][ T6213] FAULT_INJECTION: forcing a failure. [ 130.568926][ T6213] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 130.755907][ T6213] CPU: 1 PID: 6213 Comm: syz.0.94 Not tainted syzkaller #0 [ 130.763189][ T6213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 130.773570][ T6213] Call Trace: [ 130.776970][ T6213] [ 130.779942][ T6213] dump_stack_lvl+0x18c/0x250 [ 130.784687][ T6213] ? show_regs_print_info+0x20/0x20 [ 130.789931][ T6213] ? load_image+0x420/0x420 [ 130.794550][ T6213] ? __might_fault+0xaa/0x120 [ 130.800004][ T6213] ? __lock_acquire+0x7d80/0x7d80 [ 130.805137][ T6213] ? __virt_addr_valid+0x10c/0x380 [ 130.810370][ T6213] should_fail_ex+0x394/0x4c0 [ 130.815071][ T6213] _copy_from_user+0x2f/0xe0 [ 130.819687][ T6213] csum_and_copy_from_iter+0x660/0x1480 [ 130.825353][ T6213] ? iov_iter_get_pages_alloc2+0xc0/0xc0 [ 130.830997][ T6213] ? __kasan_slab_alloc+0x6c/0x80 [ 130.836149][ T6213] ? slab_post_alloc_hook+0x86/0x4d0 [ 130.841460][ T6213] ? rcu_is_watching+0x15/0xb0 [ 130.846273][ T6213] ip_generic_getfrag+0x163/0x2f0 [ 130.851342][ T6213] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 130.856209][ T6213] ? raw_getfrag+0x11d/0x390 [ 130.861174][ T6213] ? __alloc_skb+0x1b2/0x2c0 [ 130.865776][ T6213] ? skb_put+0x112/0x210 [ 130.870044][ T6213] __ip_append_data+0x2f4b/0x3be0 [ 130.875186][ T6213] ? _local_bh_enable+0xa0/0xa0 [ 130.880109][ T6213] ? raw_send_hdrinc+0x1150/0x1150 [ 130.885332][ T6213] ? mark_lock+0x94/0x320 [ 130.889797][ T6213] ? ip_setup_cork+0x840/0x840 [ 130.894582][ T6213] ? ipv4_mtu+0x313/0x430 [ 130.898928][ T6213] ? ip_setup_cork+0x527/0x840 [ 130.903738][ T6213] ? lockdep_hardirqs_on+0x98/0x150 [ 130.909160][ T6213] ip_append_data+0x10d/0x180 [ 130.913859][ T6213] ? raw_send_hdrinc+0x1150/0x1150 [ 130.918994][ T6213] raw_sendmsg+0x155e/0x1ba0 [ 130.923615][ T6213] ? compat_raw_ioctl+0x70/0x70 [ 130.928514][ T6213] ? __lock_acquire+0x1262/0x7d80 [ 130.933569][ T6213] ? tomoyo_socket_sendmsg_permission+0x216/0x2f0 [ 130.940002][ T6213] ? sock_rps_record_flow+0x19/0x3f0 [ 130.945308][ T6213] ? inet_sendmsg+0x7e/0x2a0 [ 130.949913][ T6213] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 130.955298][ T6213] ? inet_send_prepare+0x250/0x250 [ 130.961740][ T6213] ____sys_sendmsg+0x61b/0x980 [ 130.966558][ T6213] ? __asan_memset+0x22/0x40 [ 130.971195][ T6213] ? __sys_sendmsg_sock+0x30/0x30 [ 130.976240][ T6213] ? __import_iovec+0x3fa/0x850 [ 130.981113][ T6213] ? import_iovec+0x73/0xa0 [ 130.985805][ T6213] ___sys_sendmsg+0x2a6/0x360 [ 130.990502][ T6213] ? get_pid_task+0x20/0x1e0 [ 130.995215][ T6213] ? __sys_sendmsg+0x2b0/0x2b0 [ 131.000273][ T6213] ? __lock_acquire+0x7d80/0x7d80 [ 131.005422][ T6213] __se_sys_sendmsg+0x1d0/0x2c0 [ 131.010304][ T6213] ? __x64_sys_sendmsg+0x80/0x80 [ 131.015293][ T6213] ? lockdep_hardirqs_on+0x98/0x150 [ 131.020599][ T6213] do_syscall_64+0x55/0xb0 [ 131.025463][ T6213] ? clear_bhb_loop+0x40/0x90 [ 131.030161][ T6213] ? clear_bhb_loop+0x40/0x90 [ 131.035289][ T6213] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 131.041226][ T6213] RIP: 0033:0x7f5edcb9ce59 [ 131.045756][ T6213] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 131.065804][ T6213] RSP: 002b:00007f5eddad2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 131.074280][ T6213] RAX: ffffffffffffffda RBX: 00007f5edce15fa0 RCX: 00007f5edcb9ce59 [ 131.082356][ T6213] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 131.090696][ T6213] RBP: 00007f5eddad2090 R08: 0000000000000000 R09: 0000000000000000 [ 131.099052][ T6213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 131.107393][ T6213] R13: 00007f5edce16038 R14: 00007f5edce15fa0 R15: 00007ffd7c3a4c38 [ 131.115521][ T6213] [ 132.438033][ T6220] syzkaller0: entered promiscuous mode [ 132.443589][ T6220] syzkaller0: entered allmulticast mode [ 133.347317][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.366815][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.802922][ T6257] Driver unsupported XDP return value 0 on prog (id 92) dev N/A, expect packet loss! [ 138.828328][ T6252] netlink: 'syz.3.105': attribute type 64 has an invalid length. [ 139.196150][ T6252] netlink: 'syz.3.105': attribute type 64 has an invalid length. [ 139.231322][ T6251] netlink: 'syz.3.105': attribute type 64 has an invalid length. [ 140.224906][ T6292] netlink: 'syz.0.114': attribute type 10 has an invalid length. [ 140.316108][ T6292] team0: Device geneve1 is up. Set it down before adding it as a team port [ 140.362123][ T6291] netlink: 'syz.3.113': attribute type 3 has an invalid length. [ 140.407089][ T6285] tap0: tun_chr_ioctl cmd 1074025677 [ 140.414247][ T6285] tap0: linktype set to 778 [ 140.439826][ T6291] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.113'. [ 140.474352][ T6286] tap0: tun_chr_ioctl cmd 2147767511 [ 140.970057][ T6311] netlink: 'syz.3.123': attribute type 10 has an invalid length. [ 141.063406][ T6311] team0: Port device netdevsim0 added [ 141.085378][ T6314] netlink: 'syz.3.123': attribute type 10 has an invalid length. [ 141.169327][ T6314] team0: Port device netdevsim0 removed [ 141.200955][ T6314] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 144.258962][ T6351] netlink: 'syz.3.134': attribute type 10 has an invalid length. [ 144.268396][ T6351] netlink: 40 bytes leftover after parsing attributes in process `syz.3.134'. [ 144.307731][ T6351] team0: entered promiscuous mode [ 144.321933][ T6351] team_slave_0: entered promiscuous mode [ 144.467930][ T6351] team_slave_1: entered promiscuous mode [ 144.558228][ T6351] team0: entered allmulticast mode [ 144.801910][ T6351] team_slave_0: entered allmulticast mode [ 144.808295][ T6351] team_slave_1: entered allmulticast mode [ 144.814977][ T6351] bridge0: port 3(team0) entered blocking state [ 144.822024][ T6351] bridge0: port 3(team0) entered disabled state [ 144.832187][ T6351] bridge0: port 3(team0) entered blocking state [ 144.839661][ T6351] bridge0: port 3(team0) entered forwarding state [ 144.854541][ T6356] bridge_slave_0: left allmulticast mode [ 144.860936][ T6356] bridge_slave_0: left promiscuous mode [ 144.886238][ T6356] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.239726][ T6364] can: request_module (can-proto-0) failed. [ 145.325969][ T6359] €Â0: renamed from batadv_slave_1 (while UP) [ 145.650271][ T6372] netlink: 14568 bytes leftover after parsing attributes in process `syz.2.141'. [ 145.737639][ T6371] netlink: 'syz.3.140': attribute type 10 has an invalid length. [ 145.843312][ T6371] netlink: 40 bytes leftover after parsing attributes in process `syz.3.140'. [ 145.857662][ T6371] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check. [ 147.800787][ C0] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 147.825495][ T6388] netlink: 'syz.2.147': attribute type 10 has an invalid length. [ 148.099361][ T6387] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 148.447020][ T6396] netlink: 'syz.3.150': attribute type 10 has an invalid length. [ 148.467992][ T6396] netlink: 40 bytes leftover after parsing attributes in process `syz.3.150'. [ 148.493747][ T6396] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 148.882480][ T6402] netlink: 56863 bytes leftover after parsing attributes in process `syz.3.153'. [ 149.085006][ T6400] netlink: 56863 bytes leftover after parsing attributes in process `syz.2.154'. [ 149.483110][ T6412] netlink: 144 bytes leftover after parsing attributes in process `syz.3.157'. [ 149.619287][ T6413] netlink: 56863 bytes leftover after parsing attributes in process `syz.3.157'. [ 149.736547][ T6414] netlink: 188 bytes leftover after parsing attributes in process `syz.2.156'. [ 152.930618][ T6427] veth0_vlan: entered allmulticast mode [ 153.147982][ T6435] netlink: 60 bytes leftover after parsing attributes in process `syz.1.162'. [ 153.216688][ T6435] netlink: 60 bytes leftover after parsing attributes in process `syz.1.162'. [ 153.290695][ T6434] netlink: 60 bytes leftover after parsing attributes in process `syz.1.162'. [ 153.691791][ T6447] Ÿë: port 1(gretap0) entered blocking state [ 153.706831][ T6447] Ÿë: port 1(gretap0) entered disabled state [ 153.713566][ T6447] gretap0: entered allmulticast mode [ 153.735768][ T6447] gretap0: entered promiscuous mode [ 154.092387][ T6457] netlink: 60 bytes leftover after parsing attributes in process `syz.0.171'. [ 154.126580][ T6457] netlink: 60 bytes leftover after parsing attributes in process `syz.0.171'. [ 154.197758][ T6460] netlink: 60 bytes leftover after parsing attributes in process `syz.0.171'. [ 154.974002][ T6474] netlink: 'syz.0.178': attribute type 11 has an invalid length. [ 154.982479][ T6474] netlink: 184116 bytes leftover after parsing attributes in process `syz.0.178'. [ 156.828865][ T6516] netlink: 'syz.1.191': attribute type 11 has an invalid length. [ 157.451993][ T6525] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.196'. [ 157.473380][ T6525] bridge_slave_1: default FDB implementation only supports local addresses [ 158.645272][ T6547] FAULT_INJECTION: forcing a failure. [ 158.645272][ T6547] name failslab, interval 1, probability 0, space 0, times 0 [ 158.656272][ T6551] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.205'. [ 158.722059][ T6552] netlink: 'syz.3.205': attribute type 10 has an invalid length. [ 158.772110][ T6552] netlink: 156 bytes leftover after parsing attributes in process `syz.3.205'. [ 158.792593][ T6547] CPU: 1 PID: 6547 Comm: syz.0.203 Not tainted syzkaller #0 [ 158.799972][ T6547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 158.810072][ T6547] Call Trace: [ 158.813404][ T6547] [ 158.816376][ T6547] dump_stack_lvl+0x18c/0x250 [ 158.821116][ T6547] ? show_regs_print_info+0x20/0x20 [ 158.826377][ T6547] ? load_image+0x420/0x420 [ 158.830941][ T6547] ? __might_sleep+0xe0/0xe0 [ 158.835822][ T6547] ? __lock_acquire+0x7d80/0x7d80 [ 158.840884][ T6547] should_fail_ex+0x394/0x4c0 [ 158.845585][ T6547] should_failslab+0x9/0x20 [ 158.850108][ T6547] slab_pre_alloc_hook+0x59/0x300 [ 158.855239][ T6547] ? sock_kmalloc+0x96/0xf0 [ 158.859753][ T6547] ? sock_kmalloc+0x96/0xf0 [ 158.864261][ T6547] __kmem_cache_alloc_node+0x53/0x250 [ 158.869779][ T6547] ? sock_kmalloc+0x96/0xf0 [ 158.874399][ T6547] __kmalloc+0xa7/0x240 [ 158.878585][ T6547] sock_kmalloc+0x96/0xf0 [ 158.882955][ T6547] ____sys_sendmsg+0x1d4/0x980 [ 158.887913][ T6547] ? __asan_memset+0x22/0x40 [ 158.892607][ T6547] ? __sys_sendmsg_sock+0x30/0x30 [ 158.897647][ T6547] ? __import_iovec+0x3fa/0x850 [ 158.902667][ T6547] ? import_iovec+0x73/0xa0 [ 158.907195][ T6547] ___sys_sendmsg+0x2a6/0x360 [ 158.911909][ T6547] ? get_pid_task+0x20/0x1e0 [ 158.916561][ T6547] ? __sys_sendmsg+0x2b0/0x2b0 [ 158.921384][ T6547] ? __lock_acquire+0x7d80/0x7d80 [ 158.926474][ T6547] __se_sys_sendmsg+0x1d0/0x2c0 [ 158.931452][ T6547] ? __x64_sys_sendmsg+0x80/0x80 [ 158.936543][ T6547] ? lockdep_hardirqs_on+0x98/0x150 [ 158.941948][ T6547] do_syscall_64+0x55/0xb0 [ 158.946405][ T6547] ? clear_bhb_loop+0x40/0x90 [ 158.951211][ T6547] ? clear_bhb_loop+0x40/0x90 [ 158.955935][ T6547] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 158.961945][ T6547] RIP: 0033:0x7f5edcb9ce59 [ 158.966559][ T6547] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 158.987046][ T6547] RSP: 002b:00007f5eddab1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 158.995924][ T6547] RAX: ffffffffffffffda RBX: 00007f5edce16090 RCX: 00007f5edcb9ce59 [ 159.004009][ T6547] RDX: 0000000000040001 RSI: 0000200000002080 RDI: 0000000000000003 [ 159.012217][ T6547] RBP: 00007f5eddab1090 R08: 0000000000000000 R09: 0000000000000000 [ 159.021088][ T6547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 159.029160][ T6547] R13: 00007f5edce16128 R14: 00007f5edce16090 R15: 00007ffd7c3a4c38 [ 159.037162][ T6547] [ 160.701029][ T6571] netlink: 'syz.3.212': attribute type 10 has an invalid length. [ 161.134615][ T6587] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.216'. [ 161.212034][ T6587] netlink: 21056 bytes leftover after parsing attributes in process `syz.2.216'. [ 161.305341][ T6587] tipc: Started in network mode [ 161.366538][ T6587] tipc: Node identity 1a, cluster identity 106 [ 161.392325][ T6587] tipc: Node number set to 26 [ 166.020372][ T6635] delete_channel: no stack [ 166.206637][ T6643] netlink: 'syz.0.238': attribute type 29 has an invalid length. [ 166.219852][ T6643] netlink: 'syz.0.238': attribute type 29 has an invalid length. [ 166.711589][ T6655] netlink: 60 bytes leftover after parsing attributes in process `syz.0.243'. [ 166.981104][ T6655] netlink: 'syz.0.243': attribute type 9 has an invalid length. [ 167.009871][ T6655] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.243'. [ 168.446254][ T6689] netlink: 76 bytes leftover after parsing attributes in process `syz.3.257'. [ 168.530260][ T6689] netlink: 132 bytes leftover after parsing attributes in process `syz.3.257'. [ 168.841410][ T6692] netlink: 'syz.2.258': attribute type 29 has an invalid length. [ 168.865535][ T6696] netlink: 'syz.3.261': attribute type 29 has an invalid length. [ 168.893027][ T6692] netlink: 'syz.2.258': attribute type 29 has an invalid length. [ 168.914942][ T6696] netlink: 'syz.3.261': attribute type 29 has an invalid length. [ 168.934586][ T6698] netlink: 'syz.2.258': attribute type 29 has an invalid length. [ 168.955691][ T6700] netlink: 'syz.3.261': attribute type 29 has an invalid length. [ 168.978217][ T6692] netlink: 'syz.2.258': attribute type 29 has an invalid length. [ 169.852352][ T6706] netlink: 76 bytes leftover after parsing attributes in process `syz.2.264'. [ 169.951842][ T6706] netlink: 132 bytes leftover after parsing attributes in process `syz.2.264'. [ 170.103988][ T6706] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 170.196740][ T6706] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 170.370614][ T6706] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 170.420424][ T6706] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 172.123244][ T6724] validate_nla: 2 callbacks suppressed [ 172.123262][ T6724] netlink: 'syz.1.269': attribute type 10 has an invalid length. [ 172.216920][ T6724] team0: Device wg1 is up. Set it down before adding it as a team port [ 172.920901][ T6736] netlink: 'syz.2.274': attribute type 39 has an invalid length. [ 173.674447][ T6750] lo: entered promiscuous mode [ 174.503691][ T6770] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.288'. [ 174.523526][ T6770] bridge_slave_1: default FDB implementation only supports local addresses [ 174.955342][ T6780] netlink: 128 bytes leftover after parsing attributes in process `syz.2.290'. [ 174.987831][ T6782] netlink: 15999 bytes leftover after parsing attributes in process `syz.3.292'. [ 174.991560][ T6779] FAULT_INJECTION: forcing a failure. [ 174.991560][ T6779] name failslab, interval 1, probability 0, space 0, times 0 [ 175.106621][ T6779] CPU: 1 PID: 6779 Comm: syz.0.291 Not tainted syzkaller #0 [ 175.114127][ T6779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 175.124421][ T6779] Call Trace: [ 175.127838][ T6779] [ 175.130824][ T6779] dump_stack_lvl+0x18c/0x250 [ 175.135559][ T6779] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 175.141758][ T6779] ? show_regs_print_info+0x20/0x20 [ 175.146979][ T6779] ? load_image+0x420/0x420 [ 175.151551][ T6779] should_fail_ex+0x394/0x4c0 [ 175.156374][ T6779] should_failslab+0x9/0x20 [ 175.160900][ T6779] slab_pre_alloc_hook+0x59/0x300 [ 175.165945][ T6779] ? kasan_check_range+0x59/0x290 [ 175.171255][ T6779] kmem_cache_alloc+0x5a/0x2c0 [ 175.176055][ T6779] ? skb_clone+0x1eb/0x370 [ 175.180861][ T6779] skb_clone+0x1eb/0x370 [ 175.185305][ T6779] __netlink_deliver_tap+0x411/0x7f0 [ 175.190729][ T6779] ? netlink_deliver_tap+0x2e/0x1b0 [ 175.195951][ T6779] netlink_deliver_tap+0x19c/0x1b0 [ 175.201085][ T6779] netlink_unicast+0x77b/0x930 [ 175.206053][ T6779] netlink_sendmsg+0x8d0/0xbf0 [ 175.210832][ T6779] ? lockdep_hardirqs_on+0x98/0x150 [ 175.216068][ T6779] ? netlink_getsockopt+0x590/0x590 [ 175.221286][ T6779] ? security_socket_sendmsg+0x37/0xa0 [ 175.226871][ T6779] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 175.232270][ T6779] ? security_socket_sendmsg+0x80/0xa0 [ 175.237747][ T6779] ? netlink_getsockopt+0x590/0x590 [ 175.242981][ T6779] ____sys_sendmsg+0x61b/0x980 [ 175.247777][ T6779] ? __import_iovec+0x62a/0x850 [ 175.252645][ T6779] ? __sys_sendmsg_sock+0x30/0x30 [ 175.257699][ T6779] ? import_iovec+0x73/0xa0 [ 175.262391][ T6779] ___sys_sendmsg+0x2a6/0x360 [ 175.267085][ T6779] ? get_pid_task+0x20/0x1e0 [ 175.271695][ T6779] ? __sys_sendmsg+0x2b0/0x2b0 [ 175.276686][ T6779] ? __lock_acquire+0x7d80/0x7d80 [ 175.281753][ T6779] __se_sys_sendmsg+0x1d0/0x2c0 [ 175.286619][ T6779] ? perf_trace_preemptirq_template+0x269/0x330 [ 175.292983][ T6779] ? __x64_sys_sendmsg+0x80/0x80 [ 175.297980][ T6779] ? lockdep_hardirqs_on+0x98/0x150 [ 175.303377][ T6779] do_syscall_64+0x55/0xb0 [ 175.307898][ T6779] ? clear_bhb_loop+0x40/0x90 [ 175.312618][ T6779] ? clear_bhb_loop+0x40/0x90 [ 175.317308][ T6779] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 175.323394][ T6779] RIP: 0033:0x7f5edcb9ce59 [ 175.327854][ T6779] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 175.347768][ T6779] RSP: 002b:00007f5eddad2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 175.357189][ T6779] RAX: ffffffffffffffda RBX: 00007f5edce15fa0 RCX: 00007f5edcb9ce59 [ 175.365359][ T6779] RDX: 0000000000040084 RSI: 0000200000000100 RDI: 0000000000000009 [ 175.373386][ T6779] RBP: 00007f5eddad2090 R08: 0000000000000000 R09: 0000000000000000 [ 175.381467][ T6779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 175.389453][ T6779] R13: 00007f5edce16038 R14: 00007f5edce15fa0 R15: 00007ffd7c3a4c38 [ 175.397546][ T6779] [ 176.978804][ T6807] FAULT_INJECTION: forcing a failure. [ 176.978804][ T6807] name failslab, interval 1, probability 0, space 0, times 0 [ 177.026523][ T6807] CPU: 0 PID: 6807 Comm: syz.2.298 Not tainted syzkaller #0 [ 177.034071][ T6807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 177.044263][ T6807] Call Trace: [ 177.047577][ T6807] [ 177.050540][ T6807] dump_stack_lvl+0x18c/0x250 [ 177.055269][ T6807] ? show_regs_print_info+0x20/0x20 [ 177.060875][ T6807] ? load_image+0x420/0x420 [ 177.065433][ T6807] ? __might_sleep+0xe0/0xe0 [ 177.070065][ T6807] ? __lock_acquire+0x7d80/0x7d80 [ 177.075226][ T6807] should_fail_ex+0x394/0x4c0 [ 177.080573][ T6807] should_failslab+0x9/0x20 [ 177.085127][ T6807] slab_pre_alloc_hook+0x59/0x300 [ 177.090298][ T6807] ? kvmalloc_node+0x70/0x180 [ 177.095027][ T6807] ? kvmalloc_node+0x70/0x180 [ 177.099758][ T6807] __kmem_cache_alloc_node+0x53/0x250 [ 177.105212][ T6807] ? kvmalloc_node+0x70/0x180 [ 177.110134][ T6807] __kmalloc_node+0xa6/0x240 [ 177.114778][ T6807] kvmalloc_node+0x70/0x180 [ 177.119333][ T6807] __veth_napi_enable_range+0x2d5/0x700 [ 177.125051][ T6807] ? __skb_frag_ref+0x1c0/0x1c0 [ 177.130056][ T6807] veth_enable_xdp+0x301/0x4c0 [ 177.134872][ T6807] veth_xdp+0x4a6/0x720 [ 177.139169][ T6807] bond_xdp+0x40d/0x8d0 [ 177.143384][ T6807] ? bond_fix_features+0x1e0/0x1e0 [ 177.148554][ T6807] ? init_file+0x12c/0x1f0 [ 177.153029][ T6807] ? alloc_file+0x87/0x600 [ 177.157510][ T6807] dev_xdp_install+0x10c/0x270 [ 177.162323][ T6807] ? bond_fix_features+0x1e0/0x1e0 [ 177.167475][ T6807] ? bpf_xdp_link_fill_link_info+0xc0/0xc0 [ 177.173360][ T6807] ? bond_fix_features+0x1e0/0x1e0 [ 177.178484][ T6807] dev_xdp_attach+0xbc7/0x1030 [ 177.183270][ T6807] bpf_xdp_link_attach+0x3cc/0x730 [ 177.188409][ T6807] ? dev_xdp_prog+0x100/0x100 [ 177.193207][ T6807] ? attach_type_to_prog_type+0x330/0x3a0 [ 177.198962][ T6807] ? bpf_prog_attach_check_attach_type+0x2d8/0x440 [ 177.205492][ T6807] link_create+0x402/0x720 [ 177.209943][ T6807] __sys_bpf+0x4d7/0x890 [ 177.214295][ T6807] ? bpf_link_show_fdinfo+0x390/0x390 [ 177.219696][ T6807] ? lock_chain_count+0x20/0x20 [ 177.224741][ T6807] __x64_sys_bpf+0x7c/0x90 [ 177.229177][ T6807] do_syscall_64+0x55/0xb0 [ 177.233610][ T6807] ? clear_bhb_loop+0x40/0x90 [ 177.238388][ T6807] ? clear_bhb_loop+0x40/0x90 [ 177.243083][ T6807] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 177.249130][ T6807] RIP: 0033:0x7fd54119ce59 [ 177.253653][ T6807] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 177.273883][ T6807] RSP: 002b:00007fd542056028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 177.282485][ T6807] RAX: ffffffffffffffda RBX: 00007fd541416090 RCX: 00007fd54119ce59 [ 177.290820][ T6807] RDX: 0000000000000040 RSI: 0000200000000240 RDI: 000000000000001c [ 177.299079][ T6807] RBP: 00007fd542056090 R08: 0000000000000000 R09: 0000000000000000 [ 177.307148][ T6807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 177.315478][ T6807] R13: 00007fd541416128 R14: 00007fd541416090 R15: 00007fff552966f8 [ 177.323566][ T6807] [ 177.437942][ T6807] bond0: (slave bond_slave_0): Error -12 calling ndo_bpf [ 177.509502][ T6813] netlink: 16358 bytes leftover after parsing attributes in process `syz.1.300'. [ 179.862402][ T6846] netlink: 132 bytes leftover after parsing attributes in process `syz.0.304'. [ 179.969547][ T6849] netlink: 202920 bytes leftover after parsing attributes in process `syz.0.304'. [ 183.119989][ T6887] netlink: 164 bytes leftover after parsing attributes in process `syz.2.324'. [ 183.124591][ T6884] syz.2.324 (6884) used greatest stack depth: 20104 bytes left [ 183.577499][ T6902] netlink: 'syz.0.328': attribute type 10 has an invalid length. [ 184.998855][ T6937] netlink: 'syz.2.340': attribute type 3 has an invalid length. [ 185.027950][ T6938] netlink: 'syz.2.340': attribute type 10 has an invalid length. [ 185.040790][ T6937] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.340'. [ 185.092213][ T6938] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 186.080395][ T6956] netlink: 'syz.0.346': attribute type 3 has an invalid length. [ 186.181025][ T6956] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.346'. [ 187.041611][ T6978] netlink: 'syz.1.354': attribute type 39 has an invalid length. [ 191.850673][ T7025] netlink: 'syz.2.371': attribute type 3 has an invalid length. [ 191.980424][ T7025] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.371'. [ 194.819002][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.825423][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.988000][ T7068] netlink: 'syz.0.385': attribute type 10 has an invalid length. [ 196.001721][ T7068] netlink: 55 bytes leftover after parsing attributes in process `syz.0.385'. [ 196.725213][ T7082] netlink: 'syz.1.388': attribute type 21 has an invalid length. [ 196.797901][ T7082] netlink: 132 bytes leftover after parsing attributes in process `syz.1.388'. [ 197.890324][ T7101] FAULT_INJECTION: forcing a failure. [ 197.890324][ T7101] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 197.967388][ T7101] CPU: 1 PID: 7101 Comm: syz.1.395 Not tainted syzkaller #0 [ 197.974941][ T7101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 197.985035][ T7101] Call Trace: [ 197.988441][ T7101] [ 197.991402][ T7101] dump_stack_lvl+0x18c/0x250 [ 197.996127][ T7101] ? show_regs_print_info+0x20/0x20 [ 198.001359][ T7101] ? load_image+0x420/0x420 [ 198.005994][ T7101] ? __might_fault+0xaa/0x120 [ 198.010799][ T7101] ? __lock_acquire+0x7d80/0x7d80 [ 198.015867][ T7101] ? __virt_addr_valid+0x10c/0x380 [ 198.021017][ T7101] should_fail_ex+0x394/0x4c0 [ 198.025737][ T7101] _copy_from_user+0x2f/0xe0 [ 198.030368][ T7101] csum_and_copy_from_iter+0x660/0x1480 [ 198.036050][ T7101] ? iov_iter_get_pages_alloc2+0xc0/0xc0 [ 198.041990][ T7101] ? __kasan_slab_alloc+0x6c/0x80 [ 198.047053][ T7101] ? slab_post_alloc_hook+0x86/0x4d0 [ 198.052380][ T7101] ? rcu_is_watching+0x15/0xb0 [ 198.057188][ T7101] ip_generic_getfrag+0x163/0x2f0 [ 198.062254][ T7101] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 198.067227][ T7101] ? raw_getfrag+0x11d/0x390 [ 198.071956][ T7101] ? __alloc_skb+0x1b2/0x2c0 [ 198.076580][ T7101] ? skb_put+0x112/0x210 [ 198.080866][ T7101] __ip_append_data+0x2f4b/0x3be0 [ 198.086017][ T7101] ? _local_bh_enable+0xa0/0xa0 [ 198.091103][ T7101] ? raw_send_hdrinc+0x1150/0x1150 [ 198.096257][ T7101] ? mark_lock+0x94/0x320 [ 198.100815][ T7101] ? ip_setup_cork+0x840/0x840 [ 198.105813][ T7101] ? ipv4_mtu+0x313/0x430 [ 198.110206][ T7101] ? ip_setup_cork+0x527/0x840 [ 198.115099][ T7101] ? lockdep_hardirqs_on+0x98/0x150 [ 198.120341][ T7101] ip_append_data+0x10d/0x180 [ 198.125236][ T7101] ? raw_send_hdrinc+0x1150/0x1150 [ 198.130479][ T7101] raw_sendmsg+0x155e/0x1ba0 [ 198.135129][ T7101] ? compat_raw_ioctl+0x70/0x70 [ 198.140045][ T7101] ? __lock_acquire+0x1262/0x7d80 [ 198.145128][ T7101] ? tomoyo_socket_sendmsg_permission+0x216/0x2f0 [ 198.151676][ T7101] ? sock_rps_record_flow+0x19/0x3f0 [ 198.157093][ T7101] ? inet_sendmsg+0x7e/0x2a0 [ 198.161726][ T7101] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 198.167049][ T7101] ? inet_send_prepare+0x250/0x250 [ 198.172197][ T7101] ____sys_sendmsg+0x61b/0x980 [ 198.177016][ T7101] ? __asan_memset+0x22/0x40 [ 198.181655][ T7101] ? __sys_sendmsg_sock+0x30/0x30 [ 198.186709][ T7101] ? __import_iovec+0x3fa/0x850 [ 198.191605][ T7101] ? import_iovec+0x73/0xa0 [ 198.196147][ T7101] ___sys_sendmsg+0x2a6/0x360 [ 198.200863][ T7101] ? get_pid_task+0x20/0x1e0 [ 198.205586][ T7101] ? __sys_sendmsg+0x2b0/0x2b0 [ 198.210410][ T7101] ? __lock_acquire+0x7d80/0x7d80 [ 198.215542][ T7101] __se_sys_sendmsg+0x1d0/0x2c0 [ 198.220518][ T7101] ? __x64_sys_sendmsg+0x80/0x80 [ 198.225597][ T7101] ? lockdep_hardirqs_on+0x98/0x150 [ 198.230845][ T7101] do_syscall_64+0x55/0xb0 [ 198.235297][ T7101] ? clear_bhb_loop+0x40/0x90 [ 198.240003][ T7101] ? clear_bhb_loop+0x40/0x90 [ 198.244740][ T7101] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 198.250716][ T7101] RIP: 0033:0x7f7fb579ce59 [ 198.255352][ T7101] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 198.275181][ T7101] RSP: 002b:00007f7fb667d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 198.283740][ T7101] RAX: ffffffffffffffda RBX: 00007f7fb5a15fa0 RCX: 00007f7fb579ce59 [ 198.291744][ T7101] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 198.300444][ T7101] RBP: 00007f7fb667d090 R08: 0000000000000000 R09: 0000000000000000 [ 198.308452][ T7101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 198.316466][ T7101] R13: 00007f7fb5a16038 R14: 00007f7fb5a15fa0 R15: 00007ffe2f7ad588 [ 198.324494][ T7101] [ 198.727183][ T7112] netlink: 156 bytes leftover after parsing attributes in process `syz.2.398'. [ 198.919341][ T7112] netlink: 'syz.2.398': attribute type 28 has an invalid length. [ 198.927651][ T7112] netlink: 'syz.2.398': attribute type 29 has an invalid length. [ 198.935596][ T7112] netlink: 132 bytes leftover after parsing attributes in process `syz.2.398'. [ 199.922919][ T7124] netlink: 'syz.2.404': attribute type 15 has an invalid length. [ 199.946885][ T7124] netlink: 'syz.2.404': attribute type 7 has an invalid length. [ 202.442982][ T7173] netlink: 'syz.2.419': attribute type 10 has an invalid length. [ 202.508426][ T7173] team0: Device geneve1 is up. Set it down before adding it as a team port [ 203.124907][ T7187] netlink: 'syz.2.423': attribute type 10 has an invalid length. [ 203.194650][ T7187] bond0: (slave netdevsim0): Releasing backup interface [ 203.254280][ T7187] team0: Port device netdevsim0 added [ 203.281577][ T7189] netlink: 'syz.2.423': attribute type 10 has an invalid length. [ 203.325295][ T7192] netlink: 'syz.0.424': attribute type 4 has an invalid length. [ 203.346626][ T7192] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.424'. [ 203.357216][ T7189] team0: Port device netdevsim0 removed [ 205.688203][ T7217] netlink: 'syz.0.434': attribute type 10 has an invalid length. [ 206.722095][ T7217] syz.0.434 (7217) used greatest stack depth: 19880 bytes left [ 207.172488][ T5778] Bluetooth: hci1: command 0x0406 tx timeout [ 207.336946][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 207.337003][ T5778] Bluetooth: hci0: command 0x0406 tx timeout [ 207.343875][ T5783] Bluetooth: hci2: command 0x0406 tx timeout [ 207.609912][ T7256] netlink: 'syz.3.448': attribute type 10 has an invalid length. [ 207.763709][ T7255] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 208.117426][ T7271] netlink: 'syz.3.450': attribute type 10 has an invalid length. [ 208.134187][ T7271] netlink: 40 bytes leftover after parsing attributes in process `syz.3.450'. [ 208.157223][ T7271] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 208.183993][ T7270] netlink: 56863 bytes leftover after parsing attributes in process `syz.0.451'. [ 208.409356][ T7274] netlink: 'syz.3.453': attribute type 10 has an invalid length. [ 208.429507][ T7274] netlink: 40 bytes leftover after parsing attributes in process `syz.3.453'. [ 208.454335][ T7274] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 208.576596][ T7274] syz.3.453 (7274) used greatest stack depth: 19560 bytes left [ 208.587268][ T7278] netlink: 56863 bytes leftover after parsing attributes in process `syz.0.454'. [ 208.740010][ T7287] netlink: 56863 bytes leftover after parsing attributes in process `syz.2.455'. [ 209.974761][ T7304] netlink: 60 bytes leftover after parsing attributes in process `syz.1.463'. [ 210.020546][ T7304] netlink: 60 bytes leftover after parsing attributes in process `syz.1.463'. [ 210.103344][ T7301] netlink: 60 bytes leftover after parsing attributes in process `syz.1.463'. [ 211.147940][ T7313] Ÿë: port 1(veth0_to_team) entered blocking state [ 211.154697][ T7313] Ÿë: port 1(veth0_to_team) entered disabled state [ 211.236784][ T7313] veth0_to_team: entered allmulticast mode [ 211.338334][ T7313] veth0_to_team: entered promiscuous mode [ 211.902828][ T7325] netlink: 60 bytes leftover after parsing attributes in process `syz.0.472'. [ 211.923428][ T7325] netlink: 60 bytes leftover after parsing attributes in process `syz.0.472'. [ 212.083706][ T7329] netlink: 'syz.2.474': attribute type 46 has an invalid length. [ 212.130384][ T7329] netlink: 'syz.2.474': attribute type 46 has an invalid length. [ 212.441227][ T7335] netlink: 'syz.1.476': attribute type 11 has an invalid length. [ 212.524717][ T7335] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 213.580117][ T5782] Bluetooth: hci0: Malformed Event: 0x2f [ 213.930091][ T7369] netlink: 'syz.3.490': attribute type 11 has an invalid length. [ 214.522310][ T7383] __nla_validate_parse: 2 callbacks suppressed [ 214.522328][ T7383] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.495'. [ 214.557010][ T7383] bridge_slave_1: default FDB implementation only supports local addresses [ 217.453843][ T7408] netlink: 'syz.3.505': attribute type 10 has an invalid length. [ 217.558350][ T7412] netlink: 115032 bytes leftover after parsing attributes in process `syz.2.506'. [ 219.007556][ T7427] netlink: 'syz.2.511': attribute type 10 has an invalid length. [ 219.015758][ T7427] netlink: 40 bytes leftover after parsing attributes in process `syz.2.511'. [ 219.065328][ T7430] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.512'. [ 219.152215][ T7427] veth0_vlan: left promiscuous mode [ 219.179052][ T7427] veth0_vlan: left allmulticast mode [ 219.229190][ T7427] veth0_vlan: entered promiscuous mode [ 219.334843][ T7427] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 219.359523][ T7430] netlink: 21056 bytes leftover after parsing attributes in process `syz.3.512'. [ 219.371674][ T7430] tipc: Started in network mode [ 219.380574][ T7430] tipc: Node identity 1a, cluster identity 106 [ 219.389381][ T7430] tipc: Node number set to 26 [ 219.556916][ T7427] syz.2.511 (7427) used greatest stack depth: 18728 bytes left [ 219.668342][ T7442] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.514'. [ 221.378813][ T7478] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.526'. [ 221.552138][ T7477] netlink: 4 bytes leftover after parsing attributes in process `syz.0.526'. [ 222.264707][ T7479] delete_channel: no stack [ 222.339316][ T7485] netlink: 'syz.3.529': attribute type 29 has an invalid length. [ 222.359243][ T7485] netlink: 'syz.3.529': attribute type 29 has an invalid length. [ 222.511040][ T7487] netlink: 14207 bytes leftover after parsing attributes in process `syz.1.530'. [ 223.239428][ T7502] netlink: 'syz.2.537': attribute type 9 has an invalid length. [ 223.291288][ T7502] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.537'. [ 223.330351][ T7501] syzkaller0: entered promiscuous mode [ 223.341707][ T7501] syzkaller0: entered allmulticast mode [ 229.191671][ T7519] sit0: entered allmulticast mode [ 229.212117][ T7521] sit0: entered promiscuous mode [ 229.281023][ T7535] netlink: 76 bytes leftover after parsing attributes in process `syz.3.547'. [ 229.297535][ T7536] netlink: 132 bytes leftover after parsing attributes in process `syz.3.547'. [ 229.622904][ T7560] netlink: 'syz.0.554': attribute type 2 has an invalid length. [ 229.639979][ T7560] netlink: 'syz.0.554': attribute type 3 has an invalid length. [ 229.649927][ T7563] netlink: 76 bytes leftover after parsing attributes in process `syz.1.556'. [ 229.715981][ T7563] netlink: 132 bytes leftover after parsing attributes in process `syz.1.556'. [ 229.881485][ T7563] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 229.960181][ T7563] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 230.039006][ T7563] batman_adv: batadv0: Interface deactivated: €Â0 [ 230.088738][ T7563] batman_adv: batadv0: Removing interface: €Â0 [ 230.693986][ T7574] netlink: 132 bytes leftover after parsing attributes in process `syz.0.559'. [ 230.938153][ T7578] netlink: 'syz.0.561': attribute type 39 has an invalid length. [ 232.020312][ T7603] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.572'. [ 232.056777][ T7603] bridge_slave_1: default FDB implementation only supports local addresses [ 232.554968][ T7618] netlink: 15999 bytes leftover after parsing attributes in process `syz.1.576'. [ 235.393311][ T7644] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.583'. [ 237.217656][ T7665] bridge0: port 1(bridge_slave_0) entered forwarding state [ 240.626761][ T7698] netlink: 'syz.3.611': attribute type 10 has an invalid length. [ 245.752012][ T7750] netlink: 60 bytes leftover after parsing attributes in process `syz.1.616'. [ 245.875351][ T7750] netlink: 'syz.1.616': attribute type 9 has an invalid length. [ 245.896853][ T7750] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.616'. [ 247.457063][ T7777] netlink: 164 bytes leftover after parsing attributes in process `syz.3.622'. [ 249.277035][ T7802] netlink: 'syz.2.633': attribute type 3 has an invalid length. [ 249.315058][ T7802] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.633'. [ 249.355124][ T7802] netlink: 'syz.2.633': attribute type 10 has an invalid length. [ 249.442244][ T7802] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 249.683089][ T7806] netlink: 60 bytes leftover after parsing attributes in process `syz.2.634'. [ 249.878969][ T7812] netlink: 'syz.2.634': attribute type 9 has an invalid length. [ 249.936603][ T7812] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.634'. [ 250.587642][ T7826] netlink: 'syz.0.638': attribute type 10 has an invalid length. [ 250.654327][ T7826] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.721661][ T7826] bridge_slave_1: left allmulticast mode [ 250.730306][ T7826] bridge_slave_1: left promiscuous mode [ 250.748739][ T7826] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.878196][ T7826] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 250.919150][ T7830] netlink: 'syz.2.642': attribute type 39 has an invalid length. [ 254.729310][ T7873] FAULT_INJECTION: forcing a failure. [ 254.729310][ T7873] name failslab, interval 1, probability 0, space 0, times 0 [ 254.779905][ T7873] CPU: 1 PID: 7873 Comm: syz.0.654 Not tainted syzkaller #0 [ 254.787458][ T7873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 254.797628][ T7873] Call Trace: [ 254.801124][ T7873] [ 254.804102][ T7873] dump_stack_lvl+0x18c/0x250 [ 254.808852][ T7873] ? show_regs_print_info+0x20/0x20 [ 254.814108][ T7873] ? load_image+0x420/0x420 [ 254.818689][ T7873] should_fail_ex+0x394/0x4c0 [ 254.823516][ T7873] should_failslab+0x9/0x20 [ 254.828086][ T7873] slab_pre_alloc_hook+0x59/0x300 [ 254.833271][ T7873] kmem_cache_alloc+0x5a/0x2c0 [ 254.838083][ T7873] ? __nf_conntrack_alloc+0x93/0x370 [ 254.843519][ T7873] __nf_conntrack_alloc+0x93/0x370 [ 254.848856][ T7873] init_conntrack+0x166/0xf40 [ 254.853680][ T7873] ? early_drop+0x7f0/0x7f0 [ 254.858279][ T7873] ? nf_conntrack_find_get+0x670/0x670 [ 254.863787][ T7873] ? __local_bh_enable_ip+0x13a/0x1c0 [ 254.869217][ T7873] ? __siphash_unaligned+0x25c/0x3d0 [ 254.874577][ T7873] nf_conntrack_in+0xc29/0x1630 [ 254.879515][ T7873] ? nf_ct_pernet+0x270/0x270 [ 254.884341][ T7873] ? lockdep_hardirqs_on+0x98/0x150 [ 254.889604][ T7873] ? ipt_do_table+0x2c5/0x15c0 [ 254.894530][ T7873] ? ipv4_conntrack_defrag+0x29d/0x5a0 [ 254.900047][ T7873] ? ipv4_conntrack_local+0x123/0x200 [ 254.905475][ T7873] ? ipv4_conntrack_in+0x20/0x20 [ 254.910476][ T7873] nf_hook_slow+0xbd/0x200 [ 254.914960][ T7873] ? nf_hook+0x390/0x390 [ 254.919262][ T7873] nf_hook+0x228/0x390 [ 254.923388][ T7873] ? nf_hook+0xa2/0x390 [ 254.927772][ T7873] ? __ip_local_out+0x5f0/0x5f0 [ 254.932680][ T7873] ? nf_hook+0x390/0x390 [ 254.936983][ T7873] ? ip_fast_csum+0x1ee/0x2b0 [ 254.941728][ T7873] __ip_local_out+0x4db/0x5f0 [ 254.946553][ T7873] ? nf_hook+0x390/0x390 [ 254.950863][ T7873] ip_send_skb+0x4c/0x1d0 [ 254.955268][ T7873] raw_sendmsg+0x15de/0x1ba0 [ 254.959943][ T7873] ? compat_raw_ioctl+0x70/0x70 [ 254.964863][ T7873] ? __lock_acquire+0x1262/0x7d80 [ 254.969970][ T7873] ? tomoyo_socket_sendmsg_permission+0x216/0x2f0 [ 254.976547][ T7873] ? sock_rps_record_flow+0x19/0x3f0 [ 254.981891][ T7873] ? inet_sendmsg+0x7e/0x2a0 [ 254.986539][ T7873] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 254.991909][ T7873] ? inet_send_prepare+0x250/0x250 [ 254.997077][ T7873] ____sys_sendmsg+0x61b/0x980 [ 255.001910][ T7873] ? __asan_memset+0x22/0x40 [ 255.006564][ T7873] ? __sys_sendmsg_sock+0x30/0x30 [ 255.011666][ T7873] ? __import_iovec+0x3fa/0x850 [ 255.016589][ T7873] ? import_iovec+0x73/0xa0 [ 255.021148][ T7873] ___sys_sendmsg+0x2a6/0x360 [ 255.025871][ T7873] ? get_pid_task+0x20/0x1e0 [ 255.030532][ T7873] ? __sys_sendmsg+0x2b0/0x2b0 [ 255.035375][ T7873] ? __lock_acquire+0x7d80/0x7d80 [ 255.040747][ T7873] __se_sys_sendmsg+0x1d0/0x2c0 [ 255.045740][ T7873] ? __x64_sys_sendmsg+0x80/0x80 [ 255.050743][ T7873] ? lockdep_hardirqs_on+0x98/0x150 [ 255.056091][ T7873] do_syscall_64+0x55/0xb0 [ 255.060645][ T7873] ? clear_bhb_loop+0x40/0x90 [ 255.065540][ T7873] ? clear_bhb_loop+0x40/0x90 [ 255.070259][ T7873] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 255.076191][ T7873] RIP: 0033:0x7f5edcb9ce59 [ 255.080634][ T7873] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 255.100360][ T7873] RSP: 002b:00007f5eddad2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 255.108804][ T7873] RAX: ffffffffffffffda RBX: 00007f5edce15fa0 RCX: 00007f5edcb9ce59 [ 255.116809][ T7873] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 255.124825][ T7873] RBP: 00007f5eddad2090 R08: 0000000000000000 R09: 0000000000000000 [ 255.132828][ T7873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 255.141084][ T7873] R13: 00007f5edce16038 R14: 00007f5edce15fa0 R15: 00007ffd7c3a4c38 [ 255.149260][ T7873] [ 255.646214][ T7889] netlink: 'syz.0.658': attribute type 17 has an invalid length. [ 255.659287][ T7889] netlink: 'syz.0.658': attribute type 16 has an invalid length. [ 255.676970][ T7889] netlink: 152 bytes leftover after parsing attributes in process `syz.0.658'. [ 256.192524][ T7900] netlink: 'syz.1.662': attribute type 10 has an invalid length. [ 256.216856][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.226490][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.286672][ T7900] team0: Device geneve1 is up. Set it down before adding it as a team port [ 258.031185][ T7941] netlink: 'syz.2.677': attribute type 10 has an invalid length. [ 258.047484][ T7940] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 258.101331][ T7943] syz.1.675[7943] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 258.101835][ T7943] syz.1.675[7943] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 258.347140][ T7947] bridge0: port 3(team0) entered disabled state [ 259.206140][ T7947] bridge_slave_1: left allmulticast mode [ 259.223107][ T7947] bridge_slave_1: left promiscuous mode [ 259.240272][ T7947] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.307271][ T7947] bridge_slave_0: left allmulticast mode [ 259.335713][ T7947] bridge_slave_0: left promiscuous mode [ 259.392871][ T7947] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.727337][ T7957] netlink: 'syz.0.680': attribute type 3 has an invalid length. [ 259.769780][ T7957] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.680'. [ 259.969566][ T7953] netlink: 'syz.2.679': attribute type 10 has an invalid length. [ 259.988017][ T7953] netlink: 40 bytes leftover after parsing attributes in process `syz.2.679'. [ 260.012270][ T7953] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 260.083176][ T7959] netlink: 56863 bytes leftover after parsing attributes in process `syz.1.682'. [ 260.674560][ T7968] netlink: 15487 bytes leftover after parsing attributes in process `syz.2.686'. [ 262.578021][ T7991] Ÿë: port 1(veth0_to_team) entered blocking state [ 262.595163][ T7991] Ÿë: port 1(veth0_to_team) entered disabled state [ 262.608938][ T7991] veth0_to_team: entered allmulticast mode [ 262.618592][ T7991] veth0_to_team: entered promiscuous mode [ 263.222462][ T8001] netlink: 'syz.3.693': attribute type 11 has an invalid length. [ 263.256985][ T8001] netlink: 184116 bytes leftover after parsing attributes in process `syz.3.693'. [ 263.397027][ T8001] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 263.413257][ T7999] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.691'. [ 263.543468][ T7999] openvswitch: netlink: Tunnel attr 8192 out of range max 16 [ 264.173934][ T8007] netlink: 'syz.2.695': attribute type 17 has an invalid length. [ 264.198490][ T8007] netlink: 'syz.2.695': attribute type 16 has an invalid length. [ 264.216614][ T8007] netlink: 152 bytes leftover after parsing attributes in process `syz.2.695'. [ 264.559153][ T8016] netlink: 'syz.3.697': attribute type 11 has an invalid length. [ 265.684353][ T8033] netlink: 'syz.3.705': attribute type 10 has an invalid length. [ 265.732742][ T8033] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 266.491705][ T8058] netlink: 'syz.0.711': attribute type 29 has an invalid length. [ 268.145591][ T8058] netlink: 'syz.0.711': attribute type 29 has an invalid length. [ 268.310470][ T8064] delete_channel: no stack [ 268.755735][ T8072] netlink: 148 bytes leftover after parsing attributes in process `syz.3.716'. [ 269.099537][ T8079] netlink: 208064 bytes leftover after parsing attributes in process `syz.3.719'. [ 269.136594][ T8079] netlink: 'syz.3.719': attribute type 1 has an invalid length. [ 269.813921][ T8103] IPv6: NLM_F_CREATE should be specified when creating new route [ 270.276777][ T8113] netlink: 15999 bytes leftover after parsing attributes in process `syz.2.734'. [ 271.393434][ T8123] netlink: 'syz.0.735': attribute type 4 has an invalid length. [ 271.426615][ T8123] netlink: 152 bytes leftover after parsing attributes in process `syz.0.735'. [ 271.527867][ T8123] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 272.226322][ T8130] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.738'. [ 273.280041][ T8137] team0: Port device team_slave_0 removed [ 273.331522][ T8134] delete_channel: no stack [ 276.618605][ T8157] netlink: 'syz.3.747': attribute type 10 has an invalid length. [ 276.921175][ T8163] netlink: 'syz.3.750': attribute type 3 has an invalid length. [ 276.967338][ T8163] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.750'. [ 277.011518][ T8164] netlink: 'syz.3.750': attribute type 10 has an invalid length. [ 281.267147][ T8195] delete_channel: no stack [ 281.694723][ T8223] FAULT_INJECTION: forcing a failure. [ 281.694723][ T8223] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 281.728897][ T8223] CPU: 0 PID: 8223 Comm: syz.3.773 Not tainted syzkaller #0 [ 281.736445][ T8223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 281.746646][ T8223] Call Trace: [ 281.750051][ T8223] [ 281.753109][ T8223] dump_stack_lvl+0x18c/0x250 [ 281.757857][ T8223] ? show_regs_print_info+0x20/0x20 [ 281.763106][ T8223] ? load_image+0x420/0x420 [ 281.767652][ T8223] ? __might_fault+0xaa/0x120 [ 281.772367][ T8223] ? __lock_acquire+0x7d80/0x7d80 [ 281.777444][ T8223] should_fail_ex+0x394/0x4c0 [ 281.782176][ T8223] _copy_from_user+0x2f/0xe0 [ 281.786821][ T8223] kstrtouint_from_user+0xde/0x170 [ 281.792037][ T8223] ? kstrtol_from_user+0x190/0x190 [ 281.797221][ T8223] proc_fail_nth_write+0x8f/0x250 [ 281.802289][ T8223] ? proc_fail_nth_read+0x260/0x260 [ 281.807640][ T8223] ? proc_fail_nth_read+0x260/0x260 [ 281.812890][ T8223] vfs_write+0x299/0x9a0 [ 281.817272][ T8223] ? file_end_write+0x250/0x250 [ 281.822254][ T8223] ? __fget_files+0x28/0x460 [ 281.826901][ T8223] ? __fget_files+0x3fc/0x460 [ 281.831636][ T8223] ? __fdget_pos+0x2a3/0x330 [ 281.836265][ T8223] ? ksys_write+0x74/0x260 [ 281.840740][ T8223] ksys_write+0x151/0x260 [ 281.845190][ T8223] ? __ia32_sys_read+0x90/0x90 [ 281.850101][ T8223] ? lockdep_hardirqs_on+0x98/0x150 [ 281.855348][ T8223] do_syscall_64+0x55/0xb0 [ 281.859904][ T8223] ? clear_bhb_loop+0x40/0x90 [ 281.864619][ T8223] ? clear_bhb_loop+0x40/0x90 [ 281.869332][ T8223] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 281.875280][ T8223] RIP: 0033:0x7f61af35d68e [ 281.879746][ T8223] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 281.899395][ T8223] RSP: 002b:00007f61b01d2fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 281.907859][ T8223] RAX: ffffffffffffffda RBX: 00007f61b01d36c0 RCX: 00007f61af35d68e [ 281.915867][ T8223] RDX: 0000000000000001 RSI: 00007f61b01d30a0 RDI: 0000000000000004 [ 281.923884][ T8223] RBP: 00007f61b01d3090 R08: 0000000000000000 R09: 0000000000000000 [ 281.931905][ T8223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 281.940002][ T8223] R13: 00007f61af616038 R14: 00007f61af615fa0 R15: 00007ffc2b7ca398 [ 281.948210][ T8223] [ 284.734814][ T8262] netlink: 'syz.0.786': attribute type 10 has an invalid length. [ 284.754422][ T8262] team0: Device geneve1 is up. Set it down before adding it as a team port [ 284.897123][ T8272] netlink: 'syz.1.789': attribute type 10 has an invalid length. [ 285.011601][ T8272] team0: Port device netdevsim0 added [ 285.017971][ T8274] netlink: 'syz.1.789': attribute type 10 has an invalid length. [ 285.162630][ T8274] team0: Port device netdevsim0 removed [ 286.215285][ T8292] netlink: 56863 bytes leftover after parsing attributes in process `syz.0.795'. [ 286.231893][ T8282] delete_channel: no stack [ 286.445710][ T8296] netlink: 56863 bytes leftover after parsing attributes in process `syz.3.797'. [ 287.002598][ T8301] netlink: 12 bytes leftover after parsing attributes in process `syz.0.799'. [ 287.283844][ T8301] netlink: 'syz.0.799': attribute type 4 has an invalid length. [ 287.408477][ T8301] netlink: 'syz.0.799': attribute type 1 has an invalid length. [ 289.091962][ T8330] netlink: 'syz.0.815': attribute type 3 has an invalid length. [ 289.114942][ T8330] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.815'. [ 289.161362][ T8334] netlink: 'syz.1.808': attribute type 3 has an invalid length. [ 289.178913][ T8326] delete_channel: no stack [ 289.196515][ T8334] netlink: 'syz.1.808': attribute type 8 has an invalid length. [ 289.204218][ T8334] netlink: 'syz.1.808': attribute type 6 has an invalid length. [ 289.254640][ T8334] netlink: 144448 bytes leftover after parsing attributes in process `syz.1.808'. [ 289.559935][ T8347] netlink: 'syz.1.813': attribute type 9 has an invalid length. [ 289.606760][ T8347] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.813'. [ 290.522158][ T8365] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.819'. [ 290.596548][ T8365] netlink: 21056 bytes leftover after parsing attributes in process `syz.2.819'. [ 291.610793][ T8370] delete_channel: no stack [ 291.647140][ T8383] netlink: 'syz.3.825': attribute type 46 has an invalid length. [ 292.014694][ T8385] delete_channel: no stack [ 292.451172][ T8394] netlink: 'syz.2.830': attribute type 29 has an invalid length. [ 292.497183][ T8394] netlink: 'syz.2.830': attribute type 29 has an invalid length. [ 293.608642][ T8416] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 294.047030][ T8425] netlink: 'syz.0.840': attribute type 10 has an invalid length. [ 294.055032][ T8425] team0: Device wg1 is up. Set it down before adding it as a team port [ 294.289321][ T8428] netlink: 'syz.3.842': attribute type 9 has an invalid length. [ 294.369838][ T8428] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.842'. [ 294.382271][ T8433] netlink: 'syz.1.844': attribute type 39 has an invalid length. [ 295.841476][ T8454] netlink: 76 bytes leftover after parsing attributes in process `syz.3.854'. [ 295.976054][ T8459] netlink: 132 bytes leftover after parsing attributes in process `syz.3.854'. [ 296.064837][ T8462] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.856'. [ 296.109447][ T8462] bridge_slave_1: default FDB implementation only supports local addresses [ 296.678835][ T8469] netlink: 15999 bytes leftover after parsing attributes in process `syz.3.858'. [ 296.750090][ T8472] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.858'. [ 297.049231][ T8480] netlink: 'syz.2.861': attribute type 8 has an invalid length. [ 297.090907][ T8480] netlink: 199848 bytes leftover after parsing attributes in process `syz.2.861'. [ 297.262161][ T8487] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.863'. [ 297.947288][ T8493] syzkaller0: entered promiscuous mode [ 297.958956][ T8493] syzkaller0: entered allmulticast mode [ 298.110842][ T8493] netlink: 'syz.2.865': attribute type 1 has an invalid length. [ 298.132794][ T8493] netlink: 191376 bytes leftover after parsing attributes in process `syz.2.865'. [ 303.706103][ T8522] netlink: 'syz.3.877': attribute type 29 has an invalid length. [ 303.965159][ T8528] netlink: 'syz.2.879': attribute type 10 has an invalid length. [ 304.476206][ T8541] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.882'. [ 304.495948][ T8540] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.882'. [ 304.680753][ T8541] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 304.714079][ T8540] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 305.691411][ T5782] Bluetooth: hci0: unexpected event for opcode 0x00c9 [ 306.422095][ T8561] syzkaller0: entered promiscuous mode [ 306.435137][ T8561] syzkaller0: entered allmulticast mode [ 306.542578][ T8561] netlink: 'syz.3.888': attribute type 1 has an invalid length. [ 306.551088][ T8561] netlink: 191376 bytes leftover after parsing attributes in process `syz.3.888'. [ 306.654590][ T8565] netlink: 'syz.1.889': attribute type 21 has an invalid length. [ 306.672346][ T8565] IPv6: NLM_F_CREATE should be specified when creating new route [ 306.711817][ T8565] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 306.719906][ T8565] IPv6: NLM_F_CREATE should be set when creating new route [ 306.728041][ T8565] IPv6: NLM_F_CREATE should be set when creating new route [ 306.735890][ T8565] IPv6: NLM_F_CREATE should be set when creating new route [ 307.141139][ T8573] netlink: 'syz.1.891': attribute type 16 has an invalid length. [ 307.154277][ T8573] netlink: 'syz.1.891': attribute type 3 has an invalid length. [ 307.164027][ T8573] netlink: 132 bytes leftover after parsing attributes in process `syz.1.891'. [ 313.459279][ T8598] netlink: 'syz.1.900': attribute type 10 has an invalid length. [ 313.469846][ T8598] netlink: 40 bytes leftover after parsing attributes in process `syz.1.900'. [ 313.487312][ T8598] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 313.624131][ T8609] FAULT_INJECTION: forcing a failure. [ 313.624131][ T8609] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 313.658482][ T8609] CPU: 0 PID: 8609 Comm: syz.1.902 Not tainted syzkaller #0 [ 313.665845][ T8609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 313.676090][ T8609] Call Trace: [ 313.679391][ T8609] [ 313.682448][ T8609] dump_stack_lvl+0x18c/0x250 [ 313.687351][ T8609] ? show_regs_print_info+0x20/0x20 [ 313.692584][ T8609] ? load_image+0x420/0x420 [ 313.697109][ T8609] ? __might_fault+0xaa/0x120 [ 313.701839][ T8609] ? __lock_acquire+0x7d80/0x7d80 [ 313.706904][ T8609] should_fail_ex+0x394/0x4c0 [ 313.711608][ T8609] _copy_from_iter+0x1cd/0x1290 [ 313.716490][ T8609] ? rcu_is_watching+0x15/0xb0 [ 313.721302][ T8609] ? copyout_mc+0x70/0x70 [ 313.725646][ T8609] ? __virt_addr_valid+0x10c/0x380 [ 313.731045][ T8609] ? __virt_addr_valid+0x10c/0x380 [ 313.736256][ T8609] ? __virt_addr_valid+0x10c/0x380 [ 313.741396][ T8609] ? __check_object_size+0x4fc/0xa40 [ 313.746727][ T8609] kcm_sendmsg+0xddc/0x27b0 [ 313.751299][ T8609] ? kcm_getsockopt+0x280/0x280 [ 313.756558][ T8609] ? aa_sock_msg_perm+0x94/0x150 [ 313.761513][ T8609] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 313.766835][ T8609] ? security_socket_sendmsg+0x80/0xa0 [ 313.772305][ T8609] ? kcm_getsockopt+0x280/0x280 [ 313.777171][ T8609] ____sys_sendmsg+0x61b/0x980 [ 313.782046][ T8609] ? __asan_memset+0x22/0x40 [ 313.786652][ T8609] ? __sys_sendmsg_sock+0x30/0x30 [ 313.791695][ T8609] ? __import_iovec+0x5f2/0x850 [ 313.796586][ T8609] ? import_iovec+0x73/0xa0 [ 313.801104][ T8609] ___sys_sendmsg+0x2a6/0x360 [ 313.806008][ T8609] ? __sys_sendmsg+0x2b0/0x2b0 [ 313.810810][ T8609] ? trace_call_bpf+0xc3/0x6c0 [ 313.815617][ T8609] __se_sys_sendmsg+0x1d0/0x2c0 [ 313.820570][ T8609] ? perf_trace_preemptirq_template+0x269/0x330 [ 313.827004][ T8609] ? __x64_sys_sendmsg+0x80/0x80 [ 313.831971][ T8609] ? lockdep_hardirqs_on+0x98/0x150 [ 313.837362][ T8609] do_syscall_64+0x55/0xb0 [ 313.841800][ T8609] ? clear_bhb_loop+0x40/0x90 [ 313.846496][ T8609] ? clear_bhb_loop+0x40/0x90 [ 313.851193][ T8609] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 313.857194][ T8609] RIP: 0033:0x7f7fb579ce59 [ 313.861710][ T8609] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 313.881522][ T8609] RSP: 002b:00007f7fb667d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 313.890069][ T8609] RAX: ffffffffffffffda RBX: 00007f7fb5a15fa0 RCX: 00007f7fb579ce59 [ 313.898225][ T8609] RDX: 0000000000000000 RSI: 0000200000002080 RDI: 0000000000000003 [ 313.906294][ T8609] RBP: 00007f7fb667d090 R08: 0000000000000000 R09: 0000000000000000 [ 313.914278][ T8609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 313.922261][ T8609] R13: 00007f7fb5a16038 R14: 00007f7fb5a15fa0 R15: 00007ffe2f7ad588 [ 313.930267][ T8609] [ 313.980101][ T8609] netlink: 56863 bytes leftover after parsing attributes in process `syz.1.902'. [ 314.547103][ T8618] netlink: 60 bytes leftover after parsing attributes in process `syz.3.905'. [ 314.627780][ T8618] netlink: 60 bytes leftover after parsing attributes in process `syz.3.905'. [ 314.667056][ T8619] netlink: 60 bytes leftover after parsing attributes in process `syz.3.905'. [ 315.382218][ T8623] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.907'. [ 315.446567][ T8623] bridge_slave_1: default FDB implementation only supports local addresses [ 315.839799][ T8629] netlink: 56863 bytes leftover after parsing attributes in process `syz.3.909'. [ 316.026933][ T5086] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 316.039229][ T5086] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 316.066682][ T5086] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 316.086619][ T5086] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 316.117863][ T5086] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 316.128467][ T5086] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 316.561165][ T8638] netlink: 60 bytes leftover after parsing attributes in process `syz.3.912'. [ 317.030810][ T8630] chnl_net:caif_netlink_parms(): no params data found [ 317.419910][ T1133] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.705023][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.712873][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.206814][ T5086] Bluetooth: hci4: command tx timeout [ 318.350857][ T1133] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.591351][ T8630] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.630636][ T8630] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.657895][ T8630] bridge_slave_0: entered allmulticast mode [ 318.674791][ T8630] bridge_slave_0: entered promiscuous mode [ 318.685109][ T8630] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.703039][ T8630] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.711761][ T8630] bridge_slave_1: entered allmulticast mode [ 318.727991][ T8630] bridge_slave_1: entered promiscuous mode [ 318.738168][ T8665] netlink: 56863 bytes leftover after parsing attributes in process `syz.1.920'. [ 318.776757][ T8674] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.921'. [ 318.991668][ T1133] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.094052][ T8674] netlink: 21056 bytes leftover after parsing attributes in process `syz.3.921'. [ 319.201421][ T8678] netlink: 'syz.1.924': attribute type 11 has an invalid length. [ 319.226434][ T8678] netlink: 184116 bytes leftover after parsing attributes in process `syz.1.924'. [ 319.293065][ T1133] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.354518][ T8630] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 319.449206][ T8630] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 319.464789][ T8678] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 319.478625][ T8678] CPU: 0 PID: 8678 Comm: syz.1.924 Not tainted syzkaller #0 [ 319.486010][ T8678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 319.496134][ T8678] Call Trace: [ 319.499465][ T8678] [ 319.502431][ T8678] dump_stack_lvl+0x18c/0x250 [ 319.507273][ T8678] ? show_regs_print_info+0x20/0x20 [ 319.512602][ T8678] ? load_image+0x420/0x420 [ 319.517250][ T8678] sysfs_warn_dup+0x8e/0xa0 [ 319.521800][ T8678] sysfs_do_create_link_sd+0xc0/0x110 [ 319.527217][ T8678] device_add_class_symlinks+0x1cf/0x240 [ 319.532908][ T8678] device_add+0x4f9/0xc40 [ 319.537555][ T8678] wiphy_register+0x1d99/0x2ac0 [ 319.542671][ T8678] ? cfg80211_event_work+0x40/0x40 [ 319.547829][ T8678] ? minstrel_ht_alloc+0x88a/0x990 [ 319.553265][ T8678] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 319.559663][ T8678] ieee80211_register_hw+0x2dd8/0x3b30 [ 319.565194][ T8678] ? ieee80211_register_hw+0xfc1/0x3b30 [ 319.570896][ T8678] ? ieee80211_tasklet_handler+0x20/0x20 [ 319.576582][ T8678] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 319.582627][ T8678] ? __debug_object_init+0xec/0x450 [ 319.587886][ T8678] ? __asan_memset+0x22/0x40 [ 319.592510][ T8678] ? __hrtimer_init+0x189/0x270 [ 319.597465][ T8678] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 319.603243][ T8678] ? mac80211_hwsim_free+0x220/0x220 [ 319.608742][ T8678] ? rcu_is_watching+0x15/0xb0 [ 319.613698][ T8678] ? kstrndup+0xbd/0x140 [ 319.617971][ T8678] hwsim_new_radio_nl+0xdad/0x1a70 [ 319.623106][ T8678] ? __nla_validate+0x50/0x50 [ 319.627883][ T8678] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 319.634512][ T8678] ? __nla_parse+0x40/0x50 [ 319.639030][ T8678] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 319.645410][ T8678] genl_family_rcv_msg_doit+0x21a/0x310 [ 319.650992][ T8678] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 319.656909][ T8678] ? bpf_lsm_capable+0x9/0x10 [ 319.661608][ T8678] ? security_capable+0x89/0xb0 [ 319.666493][ T8678] genl_rcv_msg+0x611/0x7a0 [ 319.671020][ T8678] ? genl_bind+0x360/0x360 [ 319.675455][ T8678] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 319.681799][ T8678] ? ref_tracker_free+0x686/0x830 [ 319.686843][ T8678] ? __kasan_kmalloc_large+0x8b/0xa0 [ 319.692188][ T8678] netlink_rcv_skb+0x235/0x4c0 [ 319.696996][ T8678] ? genl_bind+0x360/0x360 [ 319.701461][ T8678] ? netlink_ack+0x1160/0x1160 [ 319.706269][ T8678] ? __lock_acquire+0x7d80/0x7d80 [ 319.711513][ T8678] ? down_read+0x1ac/0x2e0 [ 319.716143][ T8678] genl_rcv+0x28/0x40 [ 319.720280][ T8678] netlink_unicast+0x7b1/0x930 [ 319.725096][ T8678] netlink_sendmsg+0x8d0/0xbf0 [ 319.729991][ T8678] ? netlink_getsockopt+0x590/0x590 [ 319.735235][ T8678] ? aa_sock_msg_perm+0x94/0x150 [ 319.740326][ T8678] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 319.745921][ T8678] ? security_socket_sendmsg+0x80/0xa0 [ 319.751517][ T8678] ? netlink_getsockopt+0x590/0x590 [ 319.756744][ T8678] ____sys_sendmsg+0x61b/0x980 [ 319.761541][ T8678] ? __asan_memset+0x22/0x40 [ 319.766238][ T8678] ? __sys_sendmsg_sock+0x30/0x30 [ 319.771276][ T8678] ? __import_iovec+0x5f2/0x850 [ 319.776236][ T8678] ? import_iovec+0x73/0xa0 [ 319.780795][ T8678] ___sys_sendmsg+0x2a6/0x360 [ 319.785791][ T8678] ? __sys_sendmsg+0x2b0/0x2b0 [ 319.790813][ T8678] __se_sys_sendmsg+0x1d0/0x2c0 [ 319.795697][ T8678] ? perf_trace_preemptirq_template+0x269/0x330 [ 319.802352][ T8678] ? __x64_sys_sendmsg+0x80/0x80 [ 319.807608][ T8678] ? lockdep_hardirqs_on+0x98/0x150 [ 319.812850][ T8678] do_syscall_64+0x55/0xb0 [ 319.817372][ T8678] ? clear_bhb_loop+0x40/0x90 [ 319.822325][ T8678] ? clear_bhb_loop+0x40/0x90 [ 319.827188][ T8678] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 319.833220][ T8678] RIP: 0033:0x7f7fb579ce59 [ 319.837738][ T8678] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 319.857476][ T8678] RSP: 002b:00007f7fb667d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 319.866093][ T8678] RAX: ffffffffffffffda RBX: 00007f7fb5a15fa0 RCX: 00007f7fb579ce59 [ 319.874083][ T8678] RDX: 0000000008000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 319.882068][ T8678] RBP: 00007f7fb5832e6f R08: 0000000000000000 R09: 0000000000000000 [ 319.890057][ T8678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 319.898156][ T8678] R13: 00007f7fb5a16038 R14: 00007f7fb5a15fa0 R15: 00007ffe2f7ad588 [ 319.906433][ T8678] [ 320.006564][ T8680] netlink: 'syz.2.923': attribute type 2 has an invalid length. [ 320.100666][ T8630] team0: Port device team_slave_0 added [ 320.106949][ T8680] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.923'. [ 320.123638][ T8630] team0: Port device team_slave_1 added [ 320.299306][ T5086] Bluetooth: hci4: command tx timeout [ 320.414721][ T8630] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 320.443621][ T8630] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 320.501305][ T8630] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 320.536660][ T8630] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 320.554002][ T8630] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 320.596441][ T8630] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 320.835403][ T8630] hsr_slave_0: entered promiscuous mode [ 320.859743][ T5086] Bluetooth: hci2: unexpected event for opcode 0x00c9 [ 320.997103][ T8630] hsr_slave_1: entered promiscuous mode [ 321.065789][ T8630] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 321.086037][ T8630] Cannot create hsr debugfs directory [ 322.366837][ T5086] Bluetooth: hci4: command tx timeout [ 322.749131][ T8567] syz.2.887 (8567) used greatest stack depth: 17896 bytes left [ 322.938290][ T8562] syz.2.887 (8562) used greatest stack depth: 17768 bytes left [ 323.036234][ T8717] netlink: 'syz.3.932': attribute type 10 has an invalid length. [ 323.513891][ T8727] netlink: 56863 bytes leftover after parsing attributes in process `syz.2.931'. [ 323.680139][ T8552] syz.2.881 (8552) used greatest stack depth: 17096 bytes left [ 324.259287][ T8747] netlink: 'syz.1.939': attribute type 1 has an invalid length. [ 324.277995][ T8747] netlink: 'syz.1.939': attribute type 3 has an invalid length. [ 324.300138][ T8747] netlink: 132 bytes leftover after parsing attributes in process `syz.1.939'. [ 324.447089][ T5086] Bluetooth: hci4: command tx timeout [ 324.567136][ T8630] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 324.617969][ T8630] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 324.785297][ T8630] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 324.871048][ T8630] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 326.091901][ T8630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 326.206258][ T8630] 8021q: adding VLAN 0 to HW filter on device team0 [ 326.400671][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.407954][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 326.508733][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.516027][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 326.809014][ T8788] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.949'. [ 326.853944][ T8788] bridge_slave_1: default FDB implementation only supports local addresses [ 327.054809][ T1133] hsr_slave_0: left promiscuous mode [ 327.134487][ T1133] hsr_slave_1: left promiscuous mode [ 327.190076][ T1133] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 327.209092][ T1133] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 327.254071][ T1133] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 327.290009][ T1133] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 327.347924][ T1133] bridge_slave_0: left allmulticast mode [ 327.366129][ T1133] bridge_slave_0: left promiscuous mode [ 327.395070][ T1133] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.560436][ T1133] veth1_vlan: left promiscuous mode [ 327.580501][ T1133] veth0_vlan: left promiscuous mode [ 327.669307][ T8802] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.952'. [ 328.851715][ T1133] team0 (unregistering): Port device team_slave_1 removed [ 329.059353][ T1133] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 329.146806][ T1133] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 329.228334][ T1133] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 329.879393][ T1133] bond0 (unregistering): Released all slaves [ 329.984901][ T8815] netlink: 17267 bytes leftover after parsing attributes in process `syz.2.956'. [ 330.044297][ T8802] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 330.055242][ T8802] CPU: 0 PID: 8802 Comm: syz.3.952 Not tainted syzkaller #0 [ 330.062607][ T8802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 330.073323][ T8802] Call Trace: [ 330.076823][ T8802] [ 330.079810][ T8802] dump_stack_lvl+0x18c/0x250 [ 330.084799][ T8802] ? show_regs_print_info+0x20/0x20 [ 330.090050][ T8802] ? load_image+0x420/0x420 [ 330.094619][ T8802] sysfs_warn_dup+0x8e/0xa0 [ 330.099132][ T8802] sysfs_do_create_link_sd+0xc0/0x110 [ 330.104503][ T8802] device_add_class_symlinks+0x1cf/0x240 [ 330.110161][ T8802] device_add+0x4f9/0xc40 [ 330.114519][ T8802] wiphy_register+0x1d99/0x2ac0 [ 330.119469][ T8802] ? cfg80211_event_work+0x40/0x40 [ 330.124640][ T8802] ? minstrel_ht_alloc+0x88a/0x990 [ 330.129898][ T8802] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 330.136044][ T8802] ieee80211_register_hw+0x2dd8/0x3b30 [ 330.141552][ T8802] ? ieee80211_register_hw+0xfc1/0x3b30 [ 330.147153][ T8802] ? ieee80211_tasklet_handler+0x20/0x20 [ 330.152807][ T8802] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 330.158754][ T8802] ? __debug_object_init+0xec/0x450 [ 330.163993][ T8802] ? __asan_memset+0x22/0x40 [ 330.168599][ T8802] ? __hrtimer_init+0x189/0x270 [ 330.173470][ T8802] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 330.179313][ T8802] ? mac80211_hwsim_free+0x220/0x220 [ 330.184704][ T8802] ? rcu_is_watching+0x15/0xb0 [ 330.189488][ T8802] ? kstrndup+0xbd/0x140 [ 330.193762][ T8802] hwsim_new_radio_nl+0xdad/0x1a70 [ 330.198996][ T8802] ? __nla_validate+0x50/0x50 [ 330.203700][ T8802] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 330.210060][ T8802] ? __nla_parse+0x40/0x50 [ 330.214493][ T8802] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 330.220845][ T8802] genl_family_rcv_msg_doit+0x21a/0x310 [ 330.226432][ T8802] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 330.232351][ T8802] ? bpf_lsm_capable+0x9/0x10 [ 330.237269][ T8802] ? security_capable+0x89/0xb0 [ 330.242234][ T8802] genl_rcv_msg+0x611/0x7a0 [ 330.246762][ T8802] ? genl_bind+0x360/0x360 [ 330.251192][ T8802] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 330.257552][ T8802] netlink_rcv_skb+0x235/0x4c0 [ 330.262338][ T8802] ? genl_bind+0x360/0x360 [ 330.266790][ T8802] ? netlink_ack+0x1160/0x1160 [ 330.271597][ T8802] ? __lock_acquire+0x7d80/0x7d80 [ 330.276646][ T8802] ? down_read+0x1ac/0x2e0 [ 330.281082][ T8802] genl_rcv+0x28/0x40 [ 330.285261][ T8802] netlink_unicast+0x7b1/0x930 [ 330.290164][ T8802] netlink_sendmsg+0x8d0/0xbf0 [ 330.295391][ T8802] ? netlink_getsockopt+0x590/0x590 [ 330.300614][ T8802] ? aa_sock_msg_perm+0x94/0x150 [ 330.305568][ T8802] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 330.310867][ T8802] ? security_socket_sendmsg+0x80/0xa0 [ 330.316346][ T8802] ? netlink_getsockopt+0x590/0x590 [ 330.321655][ T8802] ____sys_sendmsg+0x61b/0x980 [ 330.326534][ T8802] ? __asan_memset+0x22/0x40 [ 330.331341][ T8802] ? __sys_sendmsg_sock+0x30/0x30 [ 330.336405][ T8802] ? __import_iovec+0x5f2/0x850 [ 330.341298][ T8802] ? import_iovec+0x73/0xa0 [ 330.345912][ T8802] ___sys_sendmsg+0x2a6/0x360 [ 330.350615][ T8802] ? __sys_sendmsg+0x2b0/0x2b0 [ 330.355440][ T8802] __se_sys_sendmsg+0x1d0/0x2c0 [ 330.360317][ T8802] ? perf_trace_preemptirq_template+0x269/0x330 [ 330.366682][ T8802] ? __x64_sys_sendmsg+0x80/0x80 [ 330.371656][ T8802] ? lockdep_hardirqs_on+0x98/0x150 [ 330.376878][ T8802] do_syscall_64+0x55/0xb0 [ 330.381307][ T8802] ? clear_bhb_loop+0x40/0x90 [ 330.386019][ T8802] ? clear_bhb_loop+0x40/0x90 [ 330.390712][ T8802] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 330.396631][ T8802] RIP: 0033:0x7f61af39ce59 [ 330.401060][ T8802] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 330.420798][ T8802] RSP: 002b:00007f61b01d3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 330.429325][ T8802] RAX: ffffffffffffffda RBX: 00007f61af615fa0 RCX: 00007f61af39ce59 [ 330.437320][ T8802] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000c [ 330.445335][ T8802] RBP: 00007f61af432e6f R08: 0000000000000000 R09: 0000000000000000 [ 330.453448][ T8802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 330.461966][ T8802] R13: 00007f61af616038 R14: 00007f61af615fa0 R15: 00007ffc2b7ca398 [ 330.469973][ T8802] [ 330.640181][ T8823] netlink: 'syz.2.958': attribute type 9 has an invalid length. [ 330.908184][ T8823] syzkaller0: entered promiscuous mode [ 330.917490][ T8823] syzkaller0: entered allmulticast mode [ 330.946239][ T8835] netlink: 15999 bytes leftover after parsing attributes in process `syz.3.961'. [ 330.971631][ T8835] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.961'. [ 332.444704][ T8860] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.963'. [ 334.473448][ T8835] sysfs: cannot create duplicate filename '/class/ieee80211/ô!ô' [ 334.481728][ T8835] CPU: 0 PID: 8835 Comm: syz.3.961 Not tainted syzkaller #0 [ 334.489130][ T8835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 334.499419][ T8835] Call Trace: [ 334.502737][ T8835] [ 334.505694][ T8835] dump_stack_lvl+0x18c/0x250 [ 334.510400][ T8835] ? show_regs_print_info+0x20/0x20 [ 334.515617][ T8835] ? load_image+0x420/0x420 [ 334.520146][ T8835] sysfs_warn_dup+0x8e/0xa0 [ 334.524747][ T8835] sysfs_do_create_link_sd+0xc0/0x110 [ 334.530141][ T8835] device_add_class_symlinks+0x1cf/0x240 [ 334.535798][ T8835] device_add+0x4f9/0xc40 [ 334.540171][ T8835] wiphy_register+0x1d99/0x2ac0 [ 334.545064][ T8835] ? cfg80211_event_work+0x40/0x40 [ 334.550371][ T8835] ? minstrel_ht_alloc+0x88a/0x990 [ 334.555504][ T8835] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 334.561772][ T8835] ieee80211_register_hw+0x2dd8/0x3b30 [ 334.567259][ T8835] ? ieee80211_register_hw+0xfc1/0x3b30 [ 334.572831][ T8835] ? ieee80211_tasklet_handler+0x20/0x20 [ 334.578486][ T8835] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 334.584491][ T8835] ? __debug_object_init+0xec/0x450 [ 334.589799][ T8835] ? __asan_memset+0x22/0x40 [ 334.594419][ T8835] ? __hrtimer_init+0x189/0x270 [ 334.599375][ T8835] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 334.605157][ T8835] ? mac80211_hwsim_free+0x220/0x220 [ 334.610456][ T8835] ? rcu_is_watching+0x15/0xb0 [ 334.615239][ T8835] ? kstrndup+0xbd/0x140 [ 334.619505][ T8835] hwsim_new_radio_nl+0xdad/0x1a70 [ 334.624752][ T8835] ? __nla_validate+0x50/0x50 [ 334.629475][ T8835] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 334.635848][ T8835] ? __nla_parse+0x40/0x50 [ 334.640331][ T8835] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 334.646711][ T8835] genl_family_rcv_msg_doit+0x21a/0x310 [ 334.652286][ T8835] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 334.658207][ T8835] ? bpf_lsm_capable+0x9/0x10 [ 334.662906][ T8835] ? security_capable+0x89/0xb0 [ 334.667786][ T8835] genl_rcv_msg+0x611/0x7a0 [ 334.672447][ T8835] ? genl_bind+0x360/0x360 [ 334.676898][ T8835] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 334.683275][ T8835] ? perf_trace_lock+0x303/0x3b0 [ 334.688329][ T8835] ? __kasan_kmalloc_large+0x8b/0xa0 [ 334.693669][ T8835] netlink_rcv_skb+0x235/0x4c0 [ 334.698463][ T8835] ? genl_bind+0x360/0x360 [ 334.702902][ T8835] ? netlink_ack+0x1160/0x1160 [ 334.707696][ T8835] ? __lock_acquire+0x7d80/0x7d80 [ 334.712750][ T8835] ? down_read+0x1ac/0x2e0 [ 334.717191][ T8835] genl_rcv+0x28/0x40 [ 334.721188][ T8835] netlink_unicast+0x7b1/0x930 [ 334.725976][ T8835] netlink_sendmsg+0x8d0/0xbf0 [ 334.730756][ T8835] ? perf_trace_lock+0x303/0x3b0 [ 334.735743][ T8835] ? netlink_getsockopt+0x590/0x590 [ 334.740979][ T8835] ? aa_sock_msg_perm+0x94/0x150 [ 334.746025][ T8835] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 334.751331][ T8835] ? security_socket_sendmsg+0x80/0xa0 [ 334.756837][ T8835] ? netlink_getsockopt+0x590/0x590 [ 334.762061][ T8835] ____sys_sendmsg+0x61b/0x980 [ 334.766851][ T8835] ? __asan_memset+0x22/0x40 [ 334.771458][ T8835] ? __sys_sendmsg_sock+0x30/0x30 [ 334.776496][ T8835] ? __import_iovec+0x5f2/0x850 [ 334.781367][ T8835] ? import_iovec+0x73/0xa0 [ 334.785888][ T8835] ___sys_sendmsg+0x2a6/0x360 [ 334.790585][ T8835] ? __sys_sendmsg+0x2b0/0x2b0 [ 334.795413][ T8835] __se_sys_sendmsg+0x1d0/0x2c0 [ 334.800464][ T8835] ? __x64_sys_sendmsg+0x80/0x80 [ 334.805638][ T8835] ? lockdep_hardirqs_on+0x98/0x150 [ 334.810885][ T8835] do_syscall_64+0x55/0xb0 [ 334.815344][ T8835] ? clear_bhb_loop+0x40/0x90 [ 334.820064][ T8835] ? clear_bhb_loop+0x40/0x90 [ 334.824787][ T8835] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 334.830818][ T8835] RIP: 0033:0x7f61af39ce59 [ 334.835347][ T8835] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 334.855159][ T8835] RSP: 002b:00007f61b01d3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 334.863681][ T8835] RAX: ffffffffffffffda RBX: 00007f61af615fa0 RCX: 00007f61af39ce59 [ 334.871752][ T8835] RDX: 0000000001000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 334.879867][ T8835] RBP: 00007f61af432e6f R08: 0000000000000000 R09: 0000000000000000 [ 334.888023][ T8835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 334.896089][ T8835] R13: 00007f61af616038 R14: 00007f61af615fa0 R15: 00007ffc2b7ca398 [ 334.904103][ T8835] [ 334.981494][ T8630] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 335.738035][ T8892] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.968'. [ 336.008351][ T8630] veth0_vlan: entered promiscuous mode [ 336.040371][ T8630] veth1_vlan: entered promiscuous mode [ 336.163315][ T8630] veth0_macvtap: entered promiscuous mode [ 336.217603][ T8630] veth1_macvtap: entered promiscuous mode [ 336.284533][ T8630] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 336.324765][ T8630] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 336.364576][ T8630] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.405919][ T8630] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.444568][ T8630] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.469351][ T8630] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.694860][ T8914] netlink: 'syz.3.973': attribute type 10 has an invalid length. [ 336.772313][ T8920] netlink: 'syz.3.973': attribute type 10 has an invalid length. [ 336.896785][ T1144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.947043][ T1144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.119186][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.161061][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.630959][ T8933] netlink: 'syz.4.906': attribute type 11 has an invalid length. [ 338.519042][ T8958] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.985'. [ 339.801769][ T8985] netlink: 'syz.2.992': attribute type 10 has an invalid length. [ 339.854924][ T8985] netlink: 40 bytes leftover after parsing attributes in process `syz.2.992'. [ 339.927105][ T8985] veth0_vlan: entered allmulticast mode [ 340.015677][ T8985] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 340.130251][ T8989] netlink: 'syz.4.991': attribute type 9 has an invalid length. [ 340.488024][ T8994] syzkaller0: entered promiscuous mode [ 340.493671][ T8994] syzkaller0: entered allmulticast mode [ 340.747305][ T9010] netlink: 'syz.1.995': attribute type 2 has an invalid length. [ 340.776526][ T9010] netlink: 'syz.1.995': attribute type 1 has an invalid length. [ 340.798003][ T9010] netlink: 152 bytes leftover after parsing attributes in process `syz.1.995'. [ 346.739670][ T9013] netlink: 'syz.2.996': attribute type 10 has an invalid length. [ 346.747762][ T9013] team0: Device geneve1 is up. Set it down before adding it as a team port [ 346.760118][ T9026] netlink: 'syz.1.997': attribute type 10 has an invalid length. [ 346.783325][ T9026] team0: Port device netdevsim0 added [ 346.800188][ T9028] netlink: 'syz.1.997': attribute type 10 has an invalid length. [ 346.859219][ T9028] team0: Port device netdevsim0 removed [ 346.875291][ T9047] netlink: 'syz.3.1006': attribute type 10 has an invalid length. [ 346.953676][ T9047] team0: Device hsr_slave_0 failed to register rx_handler [ 347.110236][ T9054] netlink: 56863 bytes leftover after parsing attributes in process `syz.4.1008'. [ 347.871245][ T9077] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1015'. [ 347.946806][ T9077] netlink: 134736 bytes leftover after parsing attributes in process `syz.3.1015'. [ 347.964262][ T9078] netlink: 'syz.4.1014': attribute type 21 has an invalid length. [ 348.038544][ T9078] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1014'. [ 348.116627][ T9065] netlink: 'syz.1.1012': attribute type 10 has an invalid length. [ 348.140326][ T9065] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1012'. [ 348.182895][ T9065] hsr0: entered promiscuous mode [ 348.203956][ T9065] bridge0: port 3(hsr0) entered blocking state [ 348.214173][ T9065] bridge0: port 3(hsr0) entered disabled state [ 348.243351][ T9065] hsr0: entered allmulticast mode [ 348.253663][ T9065] hsr_slave_0: entered allmulticast mode [ 348.261684][ T9065] hsr_slave_1: entered allmulticast mode [ 348.322713][ T9065] bridge0: port 3(hsr0) entered blocking state [ 348.331386][ T9065] bridge0: port 3(hsr0) entered forwarding state [ 348.897619][ T9095] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1024'. [ 348.977136][ T9090] netlink: 'syz.1.1016': attribute type 9 has an invalid length. [ 350.994448][ T9090] syzkaller0: entered promiscuous mode [ 351.066235][ T9090] syzkaller0: entered allmulticast mode [ 353.264067][ T9117] netlink: 'syz.4.1025': attribute type 10 has an invalid length. [ 353.272692][ T9117] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1025'. [ 353.281882][ T9117] hsr0: entered promiscuous mode [ 353.287698][ T9117] bridge0: port 3(hsr0) entered blocking state [ 353.294720][ T9117] bridge0: port 3(hsr0) entered disabled state [ 353.301250][ T9117] hsr0: entered allmulticast mode [ 353.308721][ T9117] hsr_slave_0: entered allmulticast mode [ 353.314435][ T9117] hsr_slave_1: entered allmulticast mode [ 353.323290][ T9117] bridge0: port 3(hsr0) entered blocking state [ 353.329920][ T9117] bridge0: port 3(hsr0) entered forwarding state [ 353.455256][ T9128] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1028'. [ 353.522514][ T9128] netlink: 134736 bytes leftover after parsing attributes in process `syz.1.1028'. [ 354.212703][ T9149] netlink: 'syz.3.1032': attribute type 10 has an invalid length. [ 354.924503][ T9166] netlink: 'syz.1.1036': attribute type 9 has an invalid length. [ 354.979079][ T9166] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1036'. [ 355.286653][ T9167] netlink: 'syz.1.1036': attribute type 9 has an invalid length. [ 355.375864][ T9167] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1036'. [ 355.846858][ T9183] netlink: zone id is out of range [ 355.873165][ T9183] netlink: set zone limit has 8 unknown bytes [ 355.881883][ T9183] netlink: 'syz.4.1039': attribute type 10 has an invalid length. [ 355.890613][ T9183] netlink: 55 bytes leftover after parsing attributes in process `syz.4.1039'. [ 356.945153][ T9188] netlink: 'syz.3.1041': attribute type 10 has an invalid length. [ 356.967472][ T9188] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1041'. [ 356.999532][ T9188] hsr0: entered promiscuous mode [ 357.124078][ T9206] netlink: 184912 bytes leftover after parsing attributes in process `syz.4.1044'. [ 357.176898][ T9207] netlink: 'syz.4.1044': attribute type 2 has an invalid length. [ 357.184953][ T9207] netlink: 'syz.4.1044': attribute type 8 has an invalid length. [ 357.257079][ T9207] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1044'. [ 358.172577][ T9219] netlink: 'syz.3.1052': attribute type 9 has an invalid length. [ 358.238681][ T9219] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1052'. [ 358.428955][ T9225] netlink: 'syz.3.1052': attribute type 9 has an invalid length. [ 358.487341][ T9225] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1052'. [ 359.604806][ T9236] netlink: 'syz.3.1055': attribute type 39 has an invalid length. [ 360.134605][ T9248] netlink: 1041 bytes leftover after parsing attributes in process `syz.3.1058'. [ 360.455106][ T9251] netlink: 'syz.3.1058': attribute type 10 has an invalid length. [ 361.507744][ T9270] netlink: 'syz.3.1062': attribute type 10 has an invalid length. [ 361.561790][ T9270] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.595076][ T9270] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.627906][ T9270] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.666580][ T9270] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.772360][ T9270] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.806705][ T9270] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.816262][ T9270] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.836785][ T9270] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.889923][ T9270] geneve1: entered promiscuous mode [ 361.908055][ T9270] geneve1: entered allmulticast mode [ 361.933673][ T9270] team0: Port device geneve1 added [ 363.240111][ T9299] netlink: 'syz.2.1069': attribute type 11 has an invalid length. [ 364.067481][ T9312] netlink: zone id is out of range [ 364.072713][ T9312] netlink: set zone limit has 8 unknown bytes [ 364.127002][ T9312] netlink: 'syz.3.1073': attribute type 10 has an invalid length. [ 364.135118][ T9312] netlink: 55 bytes leftover after parsing attributes in process `syz.3.1073'. [ 365.364187][ T9328] netlink: 'syz.2.1075': attribute type 10 has an invalid length. [ 365.437281][ T9328] netlink: 55 bytes leftover after parsing attributes in process `syz.2.1075'. [ 366.476004][ T9344] hsr0: left allmulticast mode [ 366.510473][ T9344] hsr_slave_0: left allmulticast mode [ 366.516064][ T9344] hsr_slave_1: left allmulticast mode [ 366.612671][ T9344] bridge0: port 3(hsr0) entered disabled state [ 367.463266][ T9344] bridge_slave_1: left allmulticast mode [ 367.472423][ T9344] bridge_slave_1: left promiscuous mode [ 367.531896][ T9344] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.614351][ T9344] bridge_slave_0: left allmulticast mode [ 367.656526][ T9344] bridge_slave_0: left promiscuous mode [ 367.662377][ T9344] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.201261][ T9381] netlink: 184912 bytes leftover after parsing attributes in process `syz.3.1084'. [ 368.676445][ T9377] netlink: 'syz.2.1082': attribute type 64 has an invalid length. [ 368.696525][ T9385] netlink: 'syz.3.1084': attribute type 2 has an invalid length. [ 368.722927][ T9385] netlink: 'syz.3.1084': attribute type 8 has an invalid length. [ 368.778110][ T9385] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1084'. [ 369.279004][ T9396] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1087'. [ 369.307069][ T9396] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1087'. [ 369.346271][ T9395] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1087'. [ 370.156171][ T9416] FAULT_INJECTION: forcing a failure. [ 370.156171][ T9416] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 370.235024][ T9416] CPU: 0 PID: 9416 Comm: syz.2.1092 Not tainted syzkaller #0 [ 370.242581][ T9416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 370.252896][ T9416] Call Trace: [ 370.256230][ T9416] [ 370.259281][ T9416] dump_stack_lvl+0x18c/0x250 [ 370.264014][ T9416] ? show_regs_print_info+0x20/0x20 [ 370.269253][ T9416] ? load_image+0x420/0x420 [ 370.273796][ T9416] ? __might_fault+0xaa/0x120 [ 370.278509][ T9416] ? __lock_acquire+0x7d80/0x7d80 [ 370.283653][ T9416] should_fail_ex+0x394/0x4c0 [ 370.288364][ T9416] _copy_from_iter+0x1cd/0x1290 [ 370.293326][ T9416] ? rcu_is_watching+0x15/0xb0 [ 370.298124][ T9416] ? copyout_mc+0x70/0x70 [ 370.302557][ T9416] ? __virt_addr_valid+0x10c/0x380 [ 370.307696][ T9416] ? __virt_addr_valid+0x10c/0x380 [ 370.312826][ T9416] ? __virt_addr_valid+0x10c/0x380 [ 370.317992][ T9416] ? __check_object_size+0x4fc/0xa40 [ 370.323553][ T9416] kcm_sendmsg+0xddc/0x27b0 [ 370.328198][ T9416] ? kcm_getsockopt+0x280/0x280 [ 370.333092][ T9416] ? aa_sock_msg_perm+0x94/0x150 [ 370.338071][ T9416] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 370.343546][ T9416] ? security_socket_sendmsg+0x80/0xa0 [ 370.349218][ T9416] ? kcm_getsockopt+0x280/0x280 [ 370.354109][ T9416] ____sys_sendmsg+0x61b/0x980 [ 370.359337][ T9416] ? __asan_memset+0x22/0x40 [ 370.363950][ T9416] ? __sys_sendmsg_sock+0x30/0x30 [ 370.368987][ T9416] ? __import_iovec+0x5f2/0x850 [ 370.373873][ T9416] ? import_iovec+0x73/0xa0 [ 370.378487][ T9416] ___sys_sendmsg+0x2a6/0x360 [ 370.383212][ T9416] ? get_pid_task+0x20/0x1e0 [ 370.388087][ T9416] ? __sys_sendmsg+0x2b0/0x2b0 [ 370.392892][ T9416] ? __lock_acquire+0x7d80/0x7d80 [ 370.397953][ T9416] __se_sys_sendmsg+0x1d0/0x2c0 [ 370.402829][ T9416] ? __x64_sys_sendmsg+0x80/0x80 [ 370.407807][ T9416] ? lockdep_hardirqs_on+0x98/0x150 [ 370.413025][ T9416] do_syscall_64+0x55/0xb0 [ 370.417456][ T9416] ? clear_bhb_loop+0x40/0x90 [ 370.422190][ T9416] ? clear_bhb_loop+0x40/0x90 [ 370.426977][ T9416] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 370.432888][ T9416] RIP: 0033:0x7fd54119ce59 [ 370.437328][ T9416] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 370.456983][ T9416] RSP: 002b:00007fd542056028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 370.465412][ T9416] RAX: ffffffffffffffda RBX: 00007fd541416090 RCX: 00007fd54119ce59 [ 370.473426][ T9416] RDX: 0000000000000000 RSI: 0000200000002080 RDI: 0000000000000003 [ 370.481517][ T9416] RBP: 00007fd542056090 R08: 0000000000000000 R09: 0000000000000000 [ 370.489587][ T9416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 370.497739][ T9416] R13: 00007fd541416128 R14: 00007fd541416090 R15: 00007fff552966f8 [ 370.505920][ T9416] [ 371.513833][ T9437] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.1097'. [ 371.544282][ T9437] bridge_slave_1: default FDB implementation only supports local addresses [ 372.042567][ T9452] netlink: 56863 bytes leftover after parsing attributes in process `syz.2.1099'. [ 373.525469][ T9483] netlink: 'syz.2.1107': attribute type 11 has an invalid length. [ 373.586574][ T9483] netlink: 184116 bytes leftover after parsing attributes in process `syz.2.1107'. [ 374.433398][ T9491] netlink: 'syz.3.1109': attribute type 29 has an invalid length. [ 374.487817][ T9494] netlink: 'syz.2.1110': attribute type 10 has an invalid length. [ 374.588010][ T9494] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 374.609773][ T9491] netlink: 'syz.3.1109': attribute type 29 has an invalid length. [ 374.650216][ T9496] netlink: 'syz.4.1111': attribute type 10 has an invalid length. [ 375.480195][ T9496] netlink: set zone limit has 8 unknown bytes [ 377.035059][ T9542] syzkaller0: entered promiscuous mode [ 377.068563][ T9542] syzkaller0: entered allmulticast mode [ 379.091855][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.098536][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 381.708320][ T9559] netlink: 'syz.3.1125': attribute type 4 has an invalid length. [ 381.736471][ T9580] netlink: 'syz.4.1127': attribute type 10 has an invalid length. [ 382.036006][ T9590] netlink: 'syz.2.1130': attribute type 2 has an invalid length. [ 382.050813][ T9590] netlink: 'syz.2.1130': attribute type 8 has an invalid length. [ 382.061745][ T9590] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1130'. [ 383.468691][ T9611] netlink: 15999 bytes leftover after parsing attributes in process `syz.2.1137'. [ 383.508210][ T9611] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1137'. [ 383.560576][ T9611] debugfs: Directory 'ô!ô' with parent 'ieee80211' already present! [ 384.691809][ T9636] netlink: 'syz.4.1145': attribute type 10 has an invalid length. [ 384.709239][ T9640] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1146'. [ 385.088409][ T9652] netlink: 'syz.2.1150': attribute type 10 has an invalid length. [ 385.090699][ T9651] netlink: 'syz.2.1150': attribute type 3 has an invalid length. [ 385.133531][ T9651] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.1150'. [ 386.165752][ T9670] netlink: 'syz.2.1157': attribute type 10 has an invalid length. [ 386.190259][ T9670] netlink: 55 bytes leftover after parsing attributes in process `syz.2.1157'. [ 386.900310][ T9691] netlink: 'syz.4.1162': attribute type 21 has an invalid length. [ 389.362542][ T9737] netlink: 'syz.2.1179': attribute type 10 has an invalid length. [ 389.413208][ T9737] team0: Device geneve1 is up. Set it down before adding it as a team port [ 390.329985][ T9751] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1183'. [ 391.037091][ T9765] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1186'. [ 391.089516][ T9769] FAULT_INJECTION: forcing a failure. [ 391.089516][ T9769] name failslab, interval 1, probability 0, space 0, times 0 [ 391.107105][ T9769] CPU: 0 PID: 9769 Comm: syz.2.1188 Not tainted syzkaller #0 [ 391.115181][ T9769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 391.125383][ T9769] Call Trace: [ 391.128719][ T9769] [ 391.131693][ T9769] dump_stack_lvl+0x18c/0x250 [ 391.136432][ T9769] ? show_regs_print_info+0x20/0x20 [ 391.141687][ T9769] ? load_image+0x420/0x420 [ 391.146323][ T9769] ? __might_sleep+0xe0/0xe0 [ 391.151004][ T9769] ? __lock_acquire+0x7d80/0x7d80 [ 391.156078][ T9769] ? perf_trace_lock+0xfc/0x3b0 [ 391.160984][ T9769] should_fail_ex+0x394/0x4c0 [ 391.165733][ T9769] should_failslab+0x9/0x20 [ 391.170383][ T9769] slab_pre_alloc_hook+0x59/0x300 [ 391.175466][ T9769] ? __get_vm_area_node+0x125/0x370 [ 391.180941][ T9769] __kmem_cache_alloc_node+0x53/0x250 [ 391.186464][ T9769] ? __get_vm_area_node+0x125/0x370 [ 391.191756][ T9769] kmalloc_node_trace+0x26/0xe0 [ 391.196667][ T9769] __get_vm_area_node+0x125/0x370 [ 391.201751][ T9769] __vmalloc_node_range+0x36f/0x1320 [ 391.207177][ T9769] ? netlink_sendmsg+0x602/0xbf0 [ 391.212165][ T9769] ? netlink_insert+0x1094/0x1390 [ 391.217256][ T9769] ? netlink_insert+0x2ba/0x1390 [ 391.222255][ T9769] ? free_vm_area+0x50/0x50 [ 391.226826][ T9769] ? netlink_sendmsg+0x602/0xbf0 [ 391.231812][ T9769] vmalloc+0x79/0x90 [ 391.235757][ T9769] ? netlink_sendmsg+0x602/0xbf0 [ 391.240745][ T9769] netlink_sendmsg+0x602/0xbf0 [ 391.245571][ T9769] ? netlink_getsockopt+0x590/0x590 [ 391.251025][ T9769] ? aa_sock_msg_perm+0x94/0x150 [ 391.256019][ T9769] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 391.261355][ T9769] ? security_socket_sendmsg+0x80/0xa0 [ 391.267045][ T9769] sock_write_iter+0x2dc/0x420 [ 391.271960][ T9769] ? sock_read_iter+0x3f0/0x3f0 [ 391.277224][ T9769] ? common_file_perm+0x198/0x1f0 [ 391.282407][ T9769] vfs_write+0x474/0x9a0 [ 391.287106][ T9769] ? file_end_write+0x250/0x250 [ 391.292108][ T9769] ? __fget_files+0x3fc/0x460 [ 391.296846][ T9769] ? __fdget_pos+0x1d8/0x330 [ 391.301468][ T9769] ? ksys_write+0x74/0x260 [ 391.306101][ T9769] ksys_write+0x151/0x260 [ 391.310561][ T9769] ? __ia32_sys_read+0x90/0x90 [ 391.315374][ T9769] ? lockdep_hardirqs_on+0x98/0x150 [ 391.320628][ T9769] do_syscall_64+0x55/0xb0 [ 391.325166][ T9769] ? clear_bhb_loop+0x40/0x90 [ 391.329873][ T9769] ? clear_bhb_loop+0x40/0x90 [ 391.334583][ T9769] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 391.340524][ T9769] RIP: 0033:0x7fd54119ce59 [ 391.345061][ T9769] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 391.364898][ T9769] RSP: 002b:00007fd542077028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 391.373403][ T9769] RAX: ffffffffffffffda RBX: 00007fd541415fa0 RCX: 00007fd54119ce59 [ 391.381598][ T9769] RDX: 000000000000fe33 RSI: 0000200000000040 RDI: 0000000000000003 [ 391.389619][ T9769] RBP: 00007fd542077090 R08: 0000000000000000 R09: 0000000000000000 [ 391.397725][ T9769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 391.405734][ T9769] R13: 00007fd541416038 R14: 00007fd541415fa0 R15: 00007fff552966f8 [ 391.413763][ T9769] [ 391.427055][ T9769] syz.2.1188: vmalloc error: size 65408, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 391.444095][ T9769] CPU: 1 PID: 9769 Comm: syz.2.1188 Not tainted syzkaller #0 [ 391.451543][ T9769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 391.461653][ T9769] Call Trace: [ 391.465019][ T9769] [ 391.468027][ T9769] dump_stack_lvl+0x18c/0x250 [ 391.472769][ T9769] ? show_regs_print_info+0x20/0x20 [ 391.478205][ T9769] ? load_image+0x420/0x420 [ 391.482770][ T9769] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 391.489264][ T9769] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 391.495933][ T9769] warn_alloc+0x246/0x340 [ 391.500434][ T9769] ? __get_vm_area_node+0x125/0x370 [ 391.505696][ T9769] ? zone_watermark_ok_safe+0x230/0x230 [ 391.511302][ T9769] ? rcu_is_watching+0x15/0xb0 [ 391.516114][ T9769] ? __get_vm_area_node+0x356/0x370 [ 391.521353][ T9769] __vmalloc_node_range+0x394/0x1320 [ 391.526663][ T9769] ? netlink_insert+0x1094/0x1390 [ 391.531733][ T9769] ? netlink_insert+0x2ba/0x1390 [ 391.536751][ T9769] ? free_vm_area+0x50/0x50 [ 391.541383][ T9769] ? netlink_sendmsg+0x602/0xbf0 [ 391.546349][ T9769] vmalloc+0x79/0x90 [ 391.550280][ T9769] ? netlink_sendmsg+0x602/0xbf0 [ 391.555237][ T9769] netlink_sendmsg+0x602/0xbf0 [ 391.560036][ T9769] ? netlink_getsockopt+0x590/0x590 [ 391.565268][ T9769] ? aa_sock_msg_perm+0x94/0x150 [ 391.570238][ T9769] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 391.575555][ T9769] ? security_socket_sendmsg+0x80/0xa0 [ 391.581130][ T9769] sock_write_iter+0x2dc/0x420 [ 391.585938][ T9769] ? sock_read_iter+0x3f0/0x3f0 [ 391.590844][ T9769] ? common_file_perm+0x198/0x1f0 [ 391.596080][ T9769] vfs_write+0x474/0x9a0 [ 391.600445][ T9769] ? file_end_write+0x250/0x250 [ 391.605362][ T9769] ? __fget_files+0x3fc/0x460 [ 391.610091][ T9769] ? __fdget_pos+0x1d8/0x330 [ 391.614871][ T9769] ? ksys_write+0x74/0x260 [ 391.619311][ T9769] ksys_write+0x151/0x260 [ 391.623666][ T9769] ? __ia32_sys_read+0x90/0x90 [ 391.628457][ T9769] ? lockdep_hardirqs_on+0x98/0x150 [ 391.633685][ T9769] do_syscall_64+0x55/0xb0 [ 391.638126][ T9769] ? clear_bhb_loop+0x40/0x90 [ 391.642846][ T9769] ? clear_bhb_loop+0x40/0x90 [ 391.647559][ T9769] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 391.653560][ T9769] RIP: 0033:0x7fd54119ce59 [ 391.658083][ T9769] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 391.677711][ T9769] RSP: 002b:00007fd542077028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 391.686241][ T9769] RAX: ffffffffffffffda RBX: 00007fd541415fa0 RCX: 00007fd54119ce59 [ 391.694262][ T9769] RDX: 000000000000fe33 RSI: 0000200000000040 RDI: 0000000000000003 [ 391.702363][ T9769] RBP: 00007fd542077090 R08: 0000000000000000 R09: 0000000000000000 [ 391.710362][ T9769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 391.718454][ T9769] R13: 00007fd541416038 R14: 00007fd541415fa0 R15: 00007fff552966f8 [ 391.726492][ T9769] [ 391.765191][ T9769] Mem-Info: [ 391.770148][ T9769] active_anon:12858 inactive_anon:0 isolated_anon:0 [ 391.770148][ T9769] active_file:18761 inactive_file:40068 isolated_file:0 [ 391.770148][ T9769] unevictable:768 dirty:166 writeback:0 [ 391.770148][ T9769] slab_reclaimable:10716 slab_unreclaimable:94669 [ 391.770148][ T9769] mapped:30367 shmem:7604 pagetables:711 [ 391.770148][ T9769] sec_pagetables:0 bounce:0 [ 391.770148][ T9769] kernel_misc_reclaimable:0 [ 391.770148][ T9769] free:1339811 free_pcp:9306 free_cma:0 [ 391.820844][ T9769] Node 0 active_anon:53932kB inactive_anon:0kB active_file:75044kB inactive_file:160072kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:123968kB dirty:664kB writeback:0kB shmem:31380kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10516kB pagetables:2844kB sec_pagetables:0kB all_unreclaimable? no [ 391.866875][ T9769] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 391.927831][ T9769] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 391.997288][ T9769] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 392.003160][ T9769] Node 0 DMA32 free:1446564kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:56496kB inactive_anon:0kB active_file:75044kB inactive_file:159244kB unevictable:1536kB writepending:664kB present:3129332kB managed:2586936kB mlocked:0kB bounce:0kB free_pcp:15308kB local_pcp:8616kB free_cma:0kB [ 392.064450][ T9769] lowmem_reserve[]: 0 0 0 0 0 [ 392.083660][ T9769] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 392.123886][ T9769] lowmem_reserve[]: 0 0 0 0 0 [ 392.129485][ T9769] Node 1 Normal free:3894792kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:20256kB local_pcp:7808kB free_cma:0kB [ 392.162335][ T9769] lowmem_reserve[]: 0 0 0 0 0 [ 392.167515][ T9769] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 392.202775][ T9769] Node 0 DMA32: 43*4kB (UE) 17*8kB (UME) 9*16kB (E) 957*32kB (UME) 901*64kB (UME) 380*128kB (UM) 162*256kB (UM) 64*512kB (UM) 60*1024kB (UM) 29*2048kB (UM) 272*4096kB (UM) = 1446564kB [ 392.402391][ T9769] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 392.478876][ T9769] Node 1 Normal: 234*4kB (UME) 48*8kB (UME) 36*16kB (UME) 113*32kB (UME) 38*64kB (UME) 8*128kB (UME) 3*256kB (UME) 2*512kB (UE) 1*1024kB (E) 2*2048kB (UE) 947*4096kB (M) = 3894792kB [ 392.568851][ T9786] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.1193'. [ 392.611600][ T9769] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 392.644683][ T9769] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 392.661172][ T9786] netlink: 21056 bytes leftover after parsing attributes in process `syz.3.1193'. [ 392.700924][ T9769] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 392.739013][ T9769] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 392.816977][ T9769] 73997 total pagecache pages [ 392.821931][ T9769] 0 pages in swap cache [ 392.826113][ T9769] Free swap = 124552kB [ 392.860928][ T9769] Total swap = 124996kB [ 392.865166][ T9769] 2097051 pages RAM [ 392.925361][ T9769] 0 pages HighMem/MovableOnly [ 392.956237][ T9769] 416931 pages reserved [ 392.976403][ T9769] 0 pages cma reserved [ 392.988005][ T9788] delete_channel: no stack [ 394.593527][ T9801] netlink: 'syz.1.1199': attribute type 21 has an invalid length. [ 397.113080][ T9835] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1211'. [ 399.045090][ T9858] netlink: 'syz.1.1219': attribute type 3 has an invalid length. [ 399.080241][ T9858] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.1219'. Connection to us-central1-ssh-serialport.googleapis.com closed by remote host.