last executing test programs: 13.749419103s ago: executing program 4 (id=9408): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') 4.578907028s ago: executing program 4 (id=9410): perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbd0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000008c0), 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff200000000021000aac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) 4.462990935s ago: executing program 4 (id=9525): r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b90402", 0x11}], 0x1, 0x0, 0x0, 0x7400}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x90) socket$kcm(0x10, 0x2, 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='syzkaller\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x36c}, 0x48) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000009ac38c19a6e1eb5500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x8}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xffffffffffffff54, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b03d25a806c8c6f94f90624fc601000127a0a000600093582c137153e37080c188001ac0f000300", 0x33fe0}], 0x1}, 0x4) 4.116359845s ago: executing program 4 (id=9529): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xffc0) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f00000000c0)=r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40305828, &(0x7f0000000040)=0x20000) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0xc, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x18, '\x00', 0x0, @fallback=0x1b, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xc, &(0x7f00000002c0), 0x4) perf_event_open(&(0x7f0000000100)={0x5, 0xfffffffffffffea3, 0x0, 0x0, 0x1, 0x7, 0x0, 0x10000005, 0x80100, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x3, @perf_bp={&(0x7f0000000080), 0xa}, 0x115e0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3}, 0x94) sendmsg(0xffffffffffffffff, 0x0, 0x20000000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0xec16, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffffea) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x0, 0x0, 0x0}, 0x94) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8916, &(0x7f0000000040)={'bond_slave_1\x00', @random="0200ac7f7f00"}) 4.022298501s ago: executing program 4 (id=9533): perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x28, 0x2, 0x28, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = socket$kcm(0x11, 0x2, 0x0) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r2, 0x107, 0x12, &(0x7f00000000c0)=r1, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xfd, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x50) 3.622765365s ago: executing program 4 (id=9538): perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x48) openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="12000000070000000800000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1}, &(0x7f0000000180), &(0x7f0000000280)=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r1, &(0x7f0000000300), 0x0}, 0x20) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000440)) r2 = socket$kcm(0x10, 0x3, 0x0) write$cgroup_subtree(r2, &(0x7f0000001ec0)=ANY=[@ANYBLOB="13120000120091ef04e9befbbd00005c0a"], 0xfe33) recvmsg$kcm(r2, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000003300)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/212, 0xd4}, {&(0x7f00000012c0)=""/90, 0x5a}, {&(0x7f0000002f00)=""/219, 0xdb}, {&(0x7f0000000600)=""/153, 0x99}, {&(0x7f0000003100)=""/216, 0xd8}, {&(0x7f0000003200)=""/226, 0xe2}], 0x7}, 0x12000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4000010) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) syz_clone(0x61000600, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) (async) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) (async) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="12000000070000000800000002"], 0x50) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1}, &(0x7f0000000180), &(0x7f0000000280)=r0}, 0x20) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r1, &(0x7f0000000300), 0x0}, 0x20) (async) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000440)) (async) socket$kcm(0x10, 0x3, 0x0) (async) write$cgroup_subtree(r2, &(0x7f0000001ec0)=ANY=[@ANYBLOB="13120000120091ef04e9befbbd00005c0a"], 0xfe33) (async) recvmsg$kcm(r2, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000003300)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/212, 0xd4}, {&(0x7f00000012c0)=""/90, 0x5a}, {&(0x7f0000002f00)=""/219, 0xdb}, {&(0x7f0000000600)=""/153, 0x99}, {&(0x7f0000003100)=""/216, 0xd8}, {&(0x7f0000003200)=""/226, 0xe2}], 0x7}, 0x12000) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, 0x0, 0x0}, 0x94) (async) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4000010) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) (async) syz_clone(0x61000600, 0x0, 0x0, 0x0, 0x0, 0x0) (async) 3.317414913s ago: executing program 0 (id=9542): r0 = socket$kcm(0xa, 0x2, 0x88) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x4, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x41}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) r1 = socket$kcm(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700400008"], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890b, &(0x7f0000000000)) sendmsg$inet(r0, &(0x7f0000000000)={&(0x7f0000001340)={0x2, 0x6, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x41}, @multicast1}}}], 0x20}, 0x8000) sendmsg$inet(r0, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x0) 3.144829563s ago: executing program 0 (id=9543): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0309004d8871ef2885634a8270e7112b00000000000000000000000000ac141401827511d5b4d3a9f536f45a"], 0xee8a) 3.132849324s ago: executing program 1 (id=9544): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000002c0)=r1, 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000003c0)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fec00000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5", 0xd2}, {&(0x7f00000004c0)="f80ec2e2badd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x0) 2.966201064s ago: executing program 1 (id=9547): r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x6, 0x830d}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r1, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1}}}], 0x20}, 0x4008804) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="0a00000004000000e27f00000100000002000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000000080000005c0a00007b00000001000000", @ANYRES32=0x1, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/24], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000080), &(0x7f0000000280)=r4}, 0x20) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0xca, r5}, 0x38) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400}, 0x0) recvmsg(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x104) sendmsg$inet(r1, &(0x7f0000000500)={&(0x7f00000005c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000000240)=[{&(0x7f00000011c0)}, {0x0}], 0x2}, 0x4000000) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)="d8000000180081054e81f783db4cb9040a1d080006007c03e8fc55a10a0004000600142603600e120800060021000401a80008002000000001000000035c0461c1d67f6f94007134cf6efb8000a007a290457f010400000000000000ceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d405fe4f0e59a6c5870e1cace0d81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x40044) r6 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r6, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) setsockopt$sock_attach_bpf(r6, 0x1, 0xd, &(0x7f0000000080), 0x24) close(r6) 2.761902316s ago: executing program 3 (id=9548): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x88) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xa, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) sendmsg$kcm(r0, &(0x7f0000000340)={&(0x7f00000002c0)=@in6={0xa, 0x4e23, 0x0, @loopback}, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000240)="0ea415"}, {&(0x7f0000000740)="8b0a751c7aead06880515a5d", 0x3}, {&(0x7f0000000800)="c8ea972e8fbc5218c56e7b9c7ef9c62f186d531c8a26c50e09e4267c68eedb106c2f9d33ca75", 0xffc9}], 0x3}, 0x200ce0c0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xac, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0xa505, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x1, 0x8}, 0x0, 0x4, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x64d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000f00)={&(0x7f0000000140), 0x6e, &(0x7f0000000e00)=[{&(0x7f0000000200)=""/33, 0x21}, {&(0x7f0000000a00)=""/25, 0x19}, {&(0x7f0000000a40)=""/8, 0x8}, {&(0x7f0000000b40)=""/174, 0xae}, {&(0x7f0000000c00)=""/244, 0xf4}, {&(0x7f0000000d00)=""/160, 0xa0}, {&(0x7f0000000a80)=""/41, 0x29}, {&(0x7f0000000ac0)=""/42, 0x2a}], 0x8, &(0x7f0000000e80)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}, 0x40000040) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0xffffffffffffffff, 0x2, 0x10}, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x3, [@decl_tag={0x6, 0x0, 0x0, 0x11, 0x3, 0x9}, @restrict={0x6, 0x0, 0x0, 0xb, 0x1}]}, {0x0, [0x2e]}}, &(0x7f0000001b80)=""/4096, 0x37, 0x1000, 0x1, 0xfffffff7, 0x10000}, 0x28) r2 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x34, 0x8}, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000400)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xd00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000340)}, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2.67876715s ago: executing program 0 (id=9549): perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) (async) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x8, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x3}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) (async) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x6, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x23, &(0x7f0000000040), 0xcf) close(r0) (async) socket$kcm(0x10, 0x0, 0x4) (async, rerun: 32) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x55, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x58}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) (rerun: 32) syz_clone(0xc0000, &(0x7f00000000c0)="cc5a553b22113d3309a5b95f1520612dceddd6d199de0768dcac9dabf224541def119b3b0d328c958e229bae", 0x2c, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)="9ce007887571f0b38dcc32eec5254e7b4042d0bb29bd") ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) r2 = socket$kcm(0x2, 0x3, 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x4, 0x104, 0x2, 0x0, 0x1}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x20000252, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) (async) perf_event_open(&(0x7f0000000700)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async) r5 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1800000015007f089e", 0x9}, {&(0x7f0000000300)="68ca8abda8fbff0200258f2e440bb8", 0xf}], 0x2}, 0x0) (async) ioctl$SIOCSIFHWADDR(r2, 0x891a, 0x0) (async, rerun: 32) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) (rerun: 32) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 64) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) (rerun: 64) r6 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r6, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) socket$kcm(0x10, 0x2, 0x0) (async, rerun: 64) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2.242071447s ago: executing program 1 (id=9551): r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001ac0)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169b740ac03d7c64cee49ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d54f45a24effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f949c479757306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c7724e9e7e7babf61fe358ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51427a7f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa08ad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282bffff2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae05334d5a44a020000001c0d882a564d74a7c72bf9a2152b261ed1d4515f46290d5c6579b63358fea6d2f93589cfe261dc0410b5ccc92a5a0eab327a33431d62d2b7c75ce654d556c9e1817c1abca762ab53d40da51560351b673363652e1ecb56cfe4a746a45ab13c6014e9f361ab687d1cd1795ce9e05c817b83d76046bdb3709de5df7499a02d2f636a454b85b987580ada025d83bd7b8df28a540d5ec5537942e79f2f1ab25ea5f563bc77e4f9468bd309469880c7e34150ca886d1f13dff7e82dbe296c877d925c38c54cc8137b29028854b6bd57ca893927c331300e16aba792289e135589d93302fc37c73c303e383cdf8ef3f6d6265fe5ee01759d24027475c8901039a898582022bc95992b86dce0710887c8a625d9cbb897bdbfaf49a3f642a169827a9bae4fcfa5212461db000000000000e6ed75ca8fcda7ef3ee336189fef3b3ffb9f38fefc5ff39c4e69e3fa1f8b10ee97123e99b61eba065b1ad67530e7c4f11f9da7ae000002000000610101ad7f79cb9bbf64a0fc109f49fe8799fe266e2ccac80fefe750151f5ddfe51833ec65ece70e07ce8ab5d97db47da8f80000664dc0b86ae2b3ff9d4e220752a6b2f3ea9f793612386496dca5af7b8952aafa796ea7b156d19612297c63e774e940bfeb0de83f42fd565a299f741f9b00be4e8fcaf4ec85daceb16d9e8a438e3eb2556570e381b03d9e3c245728648ed9ff22dc963ed105c851c3481125b4c0c8a08a0c9930190902af109fc56b64cc952f298ebe73d7b18052e0147356228ca171b06274a871e2cf9609e0b4cdad36c3250bc8f56f95a6ed"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b90402", 0x11}], 0x1, 0x0, 0x0, 0x7400}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x90) socket$kcm(0x10, 0x2, 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='syzkaller\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x36c}, 0x48) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000009ac38c19a6e1eb5500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x8}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffffffffffff54, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b03d25a806c8c6f94f90624fc601000127a0a000600093582c137153e37080c188001ac0f000300", 0x33fe0}], 0x1}, 0x4) 1.754198906s ago: executing program 3 (id=9553): r0 = socket$kcm(0xa, 0x2, 0x88) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x4, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x41}, [@call={0xb7}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) r1 = socket$kcm(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700400008"], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890b, &(0x7f0000000000)) sendmsg$inet(r0, &(0x7f0000000000)={&(0x7f0000001340)={0x2, 0x6, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x41}, @multicast1}}}], 0x20}, 0x8000) sendmsg$inet(r0, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x0) 1.639182783s ago: executing program 2 (id=9554): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg(0xffffffffffffffff, 0x0, 0x2000) perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x0, 0x6, 0xf3, 0x6, 0x0, 0x0, 0xd006e1258c48358c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x9}, 0x101c21, 0xc8, 0x94a, 0x7, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x4}, 0x0, 0xc, 0xffffffffffffffff, 0xc) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000000000000f37538e486dd630080fc09042c00db5bffffffffff000000060300000023000000000000060000000000ac1414aa2c200007"], 0xfdef) 1.550049208s ago: executing program 0 (id=9555): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000002c0)=r1, 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000003c0)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe80000a000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5", 0xd2}, {&(0x7f00000004c0)="f80ec2e2badd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x0) 1.519730189s ago: executing program 3 (id=9556): r0 = socket$kcm(0x1e, 0x5, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) sendmsg$kcm(r0, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0x1}], 0x1}, 0x24800) r1 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0x85, &(0x7f0000000ac0), 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x13, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xd, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x20, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = socket$kcm(0x10, 0x2, 0x10) recvmsg(r4, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x20) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003507d25a806f8c6394f90524fc600d001141090005000500000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)=""/238, 0xee}, {&(0x7f0000000180)=""/117, 0x75}], 0x2}, 0x2000) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x8, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x3}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0x1, 0x58, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e, '\x00', r5, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r6) ioctl$SIOCSIFHWADDR(r6, 0xc0189436, &(0x7f0000000000)={'bridge_slave_1\x00'}) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r7}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x63}}]}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = socket$kcm(0x10, 0x2, 0x0) gettid() sendmsg$kcm(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000740)="d800000019008111e0020f060d8107040a60000000020000001455a12a00090008000699e3ffffff14000500fe80817806000567b8b7b94002000009080016060000000000000000d67f6f9400f7d1d9bbe94fa27100a007a2f7457f01896034277ce06bbace8017cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a237e09000000b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad95667e006dcdf634c1f215ce3bb9ad809d50b7b4338c9f1ac76efb42a9ecbee5de6ccd44242f4d643f6fd0f26187b51980dd6", 0xd8}], 0x1}, 0x80) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40004, 0x0) 1.395097157s ago: executing program 0 (id=9557): r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x3, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4044}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') 1.388059828s ago: executing program 2 (id=9558): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000900)="27030200590200000100002f1eafaef706e105000000894f000f110186cee84400000008000000001900000000000200000000000005000000000000266c", 0x3e}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada302c9e37eed5653ecb716cdb8981cd819af0b33254465cc904be0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x81}, {&(0x7f0000000280)="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", 0x1a1}, {&(0x7f0000000180)="6fe4dd9e", 0x4}], 0x4}, 0x0) 1.382642948s ago: executing program 1 (id=9559): perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x28, 0x2, 0x28, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = socket$kcm(0x11, 0x2, 0x0) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r2, 0x107, 0x12, &(0x7f00000000c0)=r1, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xfd, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x50) 1.233693576s ago: executing program 2 (id=9560): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0309004d8871ef2885634a8270e7112b00000000000000000000000000ac141401827511d5b4d3a9f536f45a"], 0xee8a) 1.18034823s ago: executing program 1 (id=9561): perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0xe, 0x0, 0x0, 0x3ff, 0x201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xe}, 0x200, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4003, 0x0, 0xffffffff02000000}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 1.16954238s ago: executing program 3 (id=9562): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2c9882, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2c9882, 0x0) r0 = socket$kcm(0x2, 0x1, 0x84) r1 = socket$kcm(0xa, 0x3, 0x106) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x20000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2800000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x20000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2800000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r3) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000120081044e81f782db44b9040a11080211000000040000a118000200e000000000000e1208000f0100810401a80016ea1f000940032e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) (async) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000120081044e81f782db44b9040a11080211000000040000a118000200e000000000000e1208000f0100810401a80016ea1f000940032e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r7 = socket$kcm(0xa, 0x5, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000c40)="5c00000016006bab9a3fe3d86e17aa0a046b876c060048007ea60864160af36504811a0038001d001931a0e69ee517d34460be06000000a705251e6182949a9a7b9bcb84c9f4d4938037e70e4509c5bb4de385aa2adb88a899a655ab", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) sendmsg$inet(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000c40)="5c00000016006bab9a3fe3d86e17aa0a046b876c060048007ea60864160af36504811a0038001d001931a0e69ee517d34460be06000000a705251e6182949a9a7b9bcb84c9f4d4938037e70e4509c5bb4de385aa2adb88a899a655ab", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r9 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f91924fc60040011000a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) (async) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f91924fc60040011000a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x44804) setsockopt$sock_attach_bpf(r7, 0x84, 0x30, 0x0, 0x20000) bpf$ENABLE_STATS(0x20, 0x0, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x4c, 0x0, 0x0) (async) setsockopt$sock_attach_bpf(r1, 0x29, 0x4c, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)="b2", 0x1}, {&(0x7f0000000180)="23480d95ed94c4265b88f5532b5a63b5a84615cc674c206880d2eade17b1b60edf2ac4126ba663cce2046c70b60f7f5cfd0c621f483e40757769dbdf76ebcf74e4400bc1", 0x44}], 0x2}, 0x80) socket$kcm(0xa, 0x1, 0x106) r10 = syz_clone(0x80000000, &(0x7f0000000cc0)="1dfb87a951afb08f773bae7b50cf234d70933c001718a9eb705bff5247f7e86e0f16531db216a1b1ee34fb2b588ef2ead85a673fb84c4340d1b4504ffa085969e4286b9f19173af11c0ec11e3c980bc61d0cc7177b41cce7b13987e22554e224ab59fb2cf22ae109ee04d63fdf61b7b271a57a265f770ac3bc31ef677371ed33424dff8de01332c262d4d200a66e817be750c82527da739724f1b5e680f480f91bd5f9e3a1650d5beb8dc69feb242c81ab0ded124aa848a5267c20b96b5bc5cd0eddce496de4fa7172659d0ac66ac9f7a96aacdd658ff1dbdf3ad96a42eccf6c5840f6580d02fdee7f2e21b27f5436b54e3f8ea402be902f056b88a2dedf16ad7999a283499bac64d06b6de5121adffe57a8d1a4c6253319141f9ea9aee220b8f78166da43f47593c47b46762ffc71a1deb67cd9770986913b6852005af44fb155aaa13adf29174b47c36be3177375106a39221b5672aecf8f6a548dbde9f47671ea6c24958bfb9087a446750a82c3980589f0a730b88d33d4847c5bd8335608abb4724fd058682d08f8125dc0bc6cecf41570ee7cc1c2101712146b66aad5bfefcf01592fbe5251e6cf702a83ad769115d8c7a5d1b2d0c0039277a2b01fa3074e25cb5c6817d362ca739c68c2dd37856ab62c90f3b0e5f8763ca1628ac86699a77d2422e799233294190824aa2ceb3136ae8952a177d7a4bc5d5745f5bb328a67d99abf1b0f99c754a15590306def8deff299c82f16c380c198c2eba39eec322a3ee2973ed3e42085a7bed8f504bf611d042b1adf6cdb65f1bf16452f633e48253f532f90ecb3755966173dae228f45e8b19ddecaeb562d0934bad804724d930cf1e373ca0701250a3ee6a55de0376509adeb843d3f776beb87f78d6cf2f1d2af58a7a3bdd26a7c68cfafd4eacb1d2e6312f32b9b14993ae158470c661925511560b58a06b6b3df1ed93150037170f3ccb7e77d9bfca6038a6db1967e65d222ea1005bad0b3bcbfc4d9d2570467d215acc94c2ad373da8f93b9db10d9b0117ad36a430ca3267248cd493d48d10c444eea6fa24cfc5a3048244a0089182b26070730922ab8aed2c23282fd426a213ddd9755ece56863b5c043745ac0ebf53afe6abe3b06ac298836e65ea289556c96959cd71c472630afc45b5e1200c4c57118a2145c381cdc5a5b941271959a65188d88b4e455ed201bb9e0e109f51cc4cf09df8b34e77976502699771accf3e471a53cdd96a999fe201645a9e794887d992ee670872e78b2d33ce732fd268add94cf892c321fac4464a5e4bad00ac8397c72d9044dd254b360e0fd4d3b5e7fdc29908a377c0cfcb486434a7367ee3af8e8e2de38db7d08978c2da8d0e2bc1842fed7acdab736725de691434135ab8a5a707dc91e181c833ca0e287a5179bcc459d068f4458c0ce66368a5be1b4a3f2a6cb331debc9d20b4eab1717957483368fbc3be0cfd663dd886ed555a925ae620e288b0363b155fc3bc67f34dfdc1d9e227ba5b5964e2fb69222ff7287c12c52bc063e13c1f903e14a6344de6382bc2db0f7a8c72b67feaff48017b8eb586651ccef80662374ff6587e7705a357239630c51bffb785364fe3df711be5b62bd6bdf169be41e75d47d7e1ea5be0381dd9848dfb632118a669b5318c4fbfd782c8ac926b90fdd5bc20c60b9bd0cfbf87f2d587f642477e218beabe16914b7263fd1cd6f35826eab4713fed991813018c4ce715df18fc9bc18bc800378b59f5e4fae0915ae2f537e7508dcda4f61f3161f76a789d390bd49b4301c76823bceb27db4f297b26745ce5f77824554648c32b815639a98ea056865ceb1523685c92bf3e908b1a64be589a616994833af280129163423d5554f8e85c8d7cb59390fefb6cdb09d4e0ff8a3f15529dbf048b0cf9239960af0aeb60ef65d1292878edeec9be853b7fed859561fac82b6b29ab62ec3888ea987d55208dc631a472ae4b4f65d2e9e0abc7d367f008e8673dd7061e5b8290275b37300669b052d437904d00446a20a6081cb8f4aa743f5afacd76d931292a256ae6ef33249e228199a9f15f11543fc615fef595e5c8f0ed17ae02f8419244273ab131818454533151e3a69c5a042689f446216f835cb8fbceaaab2c6e82d42d99fda61732ab96c82be0a31fedf59f21a62d8de8f9e6890fc73d0772d3259de8221eae351cb13fdc590c7cb7a6cb0fd4578d0c68271fc5bdffb0668854436e8e05d81031cfb04fd2a8b74e5d38b8386b2edf46e6b12c169b953ff50abbcfc6bb62c9268b971578bb336d2fc53c23904ca28dc778819450929a91c0361232ba48f97cdaebd33a81a580c5cbf6490d1b119aceb87a704182a997b0ac1d29580aa43bf53cc663593b185e664318e37752f4088756c0347e6687121dc878d31f799b227ad328dfa9bc30d689830d4e4df8122bcd1e2f397d0c99874d0114e542195bc5dd843bd5c99862090d643ecf0f83ade57ca88ed95c364d9d322bc465ee8211fd155ec7d9389e454b7e722df50b153fce97c35247f8b732a8eb903b12b37d9573ed9baf64e4949fa112af6b7feffc814058f962b64caed8f47c0e08f49de0defd5428ddf3ef1ffd3949a64b7334e4b9610b1ff7925d8de4d8b7f8a054a320d5a43aa3e229c2e38ecf521b2cd60ae931e1d7261c730f39de017c304b46926d39cb52d45dc57ca973faf7248f74b2bdc4bdb7d5655d3cdf04d08345de97ac5f5866ffc7a0d70dbe383d28bfa77a0451df853b8f6bdbb5f6ea1ce9633c4c7ce7f20ee3f8362615a78f000ffc9237585af988a810351397c5276a71ec6f35c728809f80fd9bf57b217f47c29c66f7df22c513a9357444ce30d6391f2bbfc16f26eee51583024f2c306dddda42603e96849a3ea61a094c08938912b257a3571f207026addae7f06a7a50ec9a4aa18f428993847973817855d1bc4db41af0fdb417374281da8db7098df0cc9b18681d2b27d5151eb3ac2abceaee97d47604de47627ea7172252933925b9c57bd7d695f3c4c6f32213adc8a2d2babbc6c4fe4273e31b50801c42ddb2eb92da8e33d7164666c4c6d7bb0b7d9b2aa924617f88c2d340c3accde9a5259d1f87cc2ed08e96d0178e37add688cced99536832336b6740bfb4a8bbb7267154713a573caeaf6fdcb98a8fc66c89ca76b84220d0361ec4e1a144665393e37f954d55fd3678357c50d8c35f57fb7ded7814b93fe3efb5cf02736eca506fa8cd8fd69f4c8c280f3714633f764be5c780b5b3527ba653258fa831a71511cee9a2f8496a0295bf95f14f315c4d34dd1464fd03f19dedbf3ff3a8ae4f6108b5595b00c7dab9a1f2d9f081520cb3eb10a3e9ed471b32f86f8e46af4d14fa73e69ce4b8f2266d1a027b0fe37731167a696a4b5a6bce9565a6ea8a138948b49ed178825d4283dd6b2234ee4ef5336459e2c29f7c9bd00ee8973874f7256418ffb5beea8d8863f2dabce2bda79ca1cebcc58bf2b381e83fb4cf3521b7a5bbb8db8ff04bb07c68a5835f09665072919bdec83a35bb2282b68787f541cd1684ed542431f673fab339555faac182b66efc4bc8f1205e9a1dd933150fe1dbb94fb326f8c27b9bb051e1ef9b69ba10e208aa59bc4b6ec479f378bfc8747c2f1672236e721bed2834b35268388a8dea91ba5f2556e281681fb3ebff04e55d19cfd0dd3ad0c28f866c4bc42a54b70f266db1e8a67cfa178be700e9e561b4492760471236ed6fd01a5b24f585689e14cb397bcb047d2295784204d8b4cd598a30639deef15269c4c5ab5868e017363d03a71dc2282049de54198037e85c2fe8f57647b54ed7a9dc1d7d587b1740a4539cdc3a82ccabd06bc57c204878ef8b3a202643b8e10f58b5187d4764178b6528f68ea8edcc8958a32e7b282f7a81a18d597bc321b811a5ed114e0d00ea6eae4bb881ed6ca85f91cd212d2f14a8de228e1246533ce5e0fe8e3fd6563ca9c1abdff959e0ed89afb5b014ff2884254af2aa69d58ab461703d9fdffec130275f285135b996389fe84c92956a659388870d7c3f3f080df308c677cebe0cea5424814635dd2f28d8a8be3aa44fac3fb3e013b982953802584f4a79fe2b238d11e4a8d8bc66d682f80e7e15836cc6db48aae83646724e9d99fe102adee244aa984abe98cb9ca0d2bc05b756c8c7394618100adedb53182677717b5a963ed3322ac25ca14b022a22c5e2b1872328b050da95975390b1c6be696980996debd94a4ae3ff7eb1513cbe224b5aa320d702bd1b020578b23f4347bf450ba5f5a2488351af6fe0828ce01d147ab11288f15ce5a822d3a5611caadd12574a2f55951009d19b9bca1ac4051ff261d3b20028060b0bdee36375b512cc7d89eb662c7d94bbe33eb1531d0b71698c9ba5f8c262b558c81ca0f567ca96fa6cc1eec08d58a3caf3335880229e3b53d6e4391511dc97400f54065cff75904611ab2459faf6318bcb1d9a349b9b3f81ce93ae1ee3f1a3d3458650c7ef2e8a450503eb965a46bf3f13d328d2d7f0c173e47c7f883a92ce43bf7da7c8689c79ebb37e854dc3149b639acf1f313c9d3bbea3619907319718b893ef1b74119214611025c2cbe2482e35b968ba528d1c7cdb3b8bff08db72c49e07a47e2fd25f302e008c10105e793ff2c4514f192fcff16b6809136fcf75da30ef71986556ca322ee4be46ce9fe17c74364c766071ab9f7778f2c31f9b75dd98e95cd5bbe05e8cf61f5b16fc2f579c2d966107d9f21e92df45c63d19d154ad1f3d84bc0aded03d298b3288c736cf739fb76658598755273f49fe9f0fedbc6d5c9915c16ac675cb1134d56268eb78193101bb340fb6e06319e5d76b3949138a56d6cdb8040a265f90f20c338e0db521cb327de7967175672a2d41a68100bfda47c6114f5801e00eb47cbaf43e46477d226830c3eda597c5429471b9298d6f444f43be88a1c664af940dfdeb873255243a9d3cb7c7eaf8151c6f8e4b4638b92366d091af00d4dbaa06c94ba6ddeb202d5cd8b63d49cc7321fc33c7e2d8e787bf5802df202a6c37e678ecd353b99e92b7f5033c12d36780ed0811964579f740324719cd9017124859f8d1098c310b74c0287cd8cb871d2d1caf317a0e37c33204b73f9bd9ba1935564224417c22bc29e7febead653e87befd41943c4501c893a51bb29b1bc96622224996941de4a50db63ef834dfdc2edb85bd8318877290f183151ff51eb9b4c9acd0a3d14d97b6edcf7d858820c51f7b9fec3ca7f4f5e0b31de9d7d3634f51086fc3ec0c0223d9a48acd8b1ea161f63d33e598a5d0061add978c867e8dc36335dde6fdb8cba42fcefb1f5cedf3143d05f66e27ac0cdf88d63869c0fe04a6e6753d2a205b24959cf7f8373a097486f1964f9e8338d3e160b963dcda808e95d6365ee56ab915a5fd72fb5a2712005cb7a7e699ea85ea8540b74b4be41eb034758be20d3dd46227c21575ebbfc4202d339f238584c00267a3c002c7ccfb089dd65d5b2d3b418a5cb10324d9087eb5098a1aa0ce4b37a13ba8966ad7605712cbf8c9dde20feafae4e33507eb5838fb8d64f599ab3c59a3b96a7296af9bcdf0c03aabc1a508aa04b6da3d2f198627cf10d847a8e2a6d0eb2eec53fd0cf23192ffa54ca51b1eb56f3bb55452c550302ceaa48837b9b27b1bffe0470113d34c7967d7b15e78bb0b1ebb8e241ea937ba7e44a3c65fc3be58f214b7aa15c1ed04e1fd4a8c96f86a5b2a1a94aa916ad7a894762c4d9f5a6bc6ec3555673fbe4879617667005acc4977672a38edebdc0dae7e243d9b88f35", 0x1000, &(0x7f00000000c0), &(0x7f0000000140), &(0x7f0000000280)="2a30541b23f18afc3d6c1673be487c61d1cea64e1e8889be69b2c9aa8518b792a9ad0e58c567d6ec4f508eda5ecd13b9dfd87d12ceb8dfa34c51108498ee") perf_event_open(0x0, r10, 0x400000000000004, r2, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) (async) socket$kcm(0x2, 0x200000000000001, 0x106) 1.093128805s ago: executing program 0 (id=9563): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x88) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xa, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) sendmsg$kcm(r0, &(0x7f0000000340)={&(0x7f00000002c0)=@in6={0xa, 0x4e23, 0x0, @loopback}, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000240)="0ea415"}, {&(0x7f0000000740)="8b0a751c7aead06880515a5d", 0x3}, {&(0x7f0000000800)="c8ea972e8fbc5218c56e7b9c7ef9c62f186d531c8a26c50e09e4267c68eedb106c2f9d33ca75", 0xffc9}], 0x3}, 0x200ce0c0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xac, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0xa505, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x1, 0x8}, 0x0, 0x4, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x64d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000f00)={&(0x7f0000000140), 0x6e, &(0x7f0000000e00)=[{&(0x7f0000000200)=""/33, 0x21}, {&(0x7f0000000a00)=""/25, 0x19}, {&(0x7f0000000a40)=""/8, 0x8}, {&(0x7f0000000b40)=""/174, 0xae}, {&(0x7f0000000c00)=""/244, 0xf4}, {&(0x7f0000000d00)=""/160, 0xa0}, {&(0x7f0000000a80)=""/41, 0x29}, {&(0x7f0000000ac0)=""/42, 0x2a}], 0x8, &(0x7f0000000e80)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}, 0x40000040) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0xffffffffffffffff, 0x2, 0x10}, 0xc) r2 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x34, 0x8}, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000400)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xd00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000340)}, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 1.054833657s ago: executing program 2 (id=9564): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb01001800000020000000640000006400000003000000000000000000000d0a0000000000000002000006040000000100000000000133bae0d6cacee500000600000004000013030000000900000006000000020000000900000008000000530e000003000000ffffffff0f0000000c0000000000000002000000002e"], &(0x7f0000000f40)=""/4089, 0x7f, 0xff9, 0x1}, 0x28) 921.910745ms ago: executing program 2 (id=9565): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x890b, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) close(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r1, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008d8dff"}) r2 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r2, &(0x7f00000014c0)={&(0x7f0000001540)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, 0x0}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES64, @ANYBLOB="f9ffffffffffffffdcd5635f5f"], 0x48) socket$kcm(0x11, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20282, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x9000, 0x0, 0x2, 0x4, 0x1000000, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000266881bc9aee9ce4a2df0cd1387d607eddd6b0f1d973f8fe645a"], 0x48) r3 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x34, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001340)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d55545a34effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f949c479757306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a867e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c27578fe3245097c280abe51427a7f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa08ad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282bffff2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae05334d5a44a020000001c0d882a564d74a7c72bf9a2152b261e58fea6d2f93589cfe261dc0410b5ccc92a5a0eab327a33431d62d2b7c75ce654d556c9e1817c1abca762ab53d40da51560351b673363652e1ecb56cfe4a746a45ab13c6014e9f361ab687d1cd1795ce9e05c817b83d76046bdb3709de5df7499a02d2f636a454b85b987580ada025d83bd7b8df28a540d5ec5537942e79f2f1ab25ea5f563bc77e4f9468bd309469880c7e34150ca886d1f13dff7e82dbe296c877d925c38c54cc8137b29028854b6bd57ca893927c331300e16aba792289e135589d93302fc37c73c303e383cdf8ef3f6d6265fe5ee01759d24027475c8901039a898582022bc95992b86dce0710887c8a625d9cbb897bdbfaf49a3f642a169827a9bae4fcfa5212461db000000000000e6ed75ca8fcda7ef3ee336189fef3b3ffb9f38fefc5ff39c4e69e3fa1f8b10ee97123e99b61eba065b1ad67530e7c4f11f9da7ae000002000000610101ad7f79cb9bbf64a0fc109f49fe8799fe266e2ccac80fefe750151f5ddfe51833ec65ece70e07ce8ab5d97db47da8f80000664dc0b86ae2b3ff9d4e220752a6b2f3ea9f793612386496dca5af7b8952aafa796ea7b156d19612297c63"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8922, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r6, &(0x7f0000000440)={&(0x7f0000000180)=@in6={0xa, 0xffff, 0x0, @mcast1, 0x6}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000780)="80005b020eaa4da2", 0x8}], 0x1, 0x0, 0x0, 0x900}, 0x0) sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000000c0)="5c00000014006b05c84e21000ab16d6e230675f802000000440002005817d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 190.449029ms ago: executing program 3 (id=9566): r0 = socket$kcm(0xa, 0x2, 0x88) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x4, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x41}, [@call={0xb7}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) r1 = socket$kcm(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700400008"], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890b, &(0x7f0000000000)) sendmsg$inet(r0, &(0x7f0000000000)={&(0x7f0000001340)={0x2, 0x6, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x41}, @multicast1}}}], 0x20}, 0x8000) sendmsg$inet(r0, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x0) 56.762807ms ago: executing program 1 (id=9567): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x7, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = socket$kcm(0x21, 0x2, 0x2) (async) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e23, @multicast2}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x10) sendmsg$kcm(r2, &(0x7f0000000280)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @multicast1}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0) (async, rerun: 32) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e23, @multicast2}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[], 0x18}, 0x10) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r4) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x5}, 0x48) bpf$MAP_LOOKUP_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000001840), 0xfffffff7, r5}, 0x38) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081084e81f782db44b904021d080006067c09e8fe55a10a0015400800142603600e12080016", 0x2b}], 0x1, 0x0, 0x0, 0x6000}, 0x0) r6 = socket$kcm(0x23, 0x5, 0x0) sendmsg$kcm(r6, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000001000)="5df44b", 0x3}], 0x1}, 0x80) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0x12, &(0x7f00000000c0)=r7, 0x4) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8001c00180081064e81f782db44b9b545c7910006007c09e8fe55a10a0017", 0x1f}], 0x1}, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f7d28344b904020000", 0x2}], 0x1}, 0x0) (async) r8 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[], 0x33fe0) 11.444869ms ago: executing program 3 (id=9568): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000180)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x4}, @exit, @initr0, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @exit], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x4000}, 0x78) 0s ago: executing program 2 (id=9569): r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001ac0)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169b740ac03d7c64cee49ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d54f45a24effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f949c479757306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c7724e9e7e7babf61fe358ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51427a7f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa08ad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282bffff2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae05334d5a44a020000001c0d882a564d74a7c72bf9a2152b261ed1d4515f46290d5c6579b63358fea6d2f93589cfe261dc0410b5ccc92a5a0eab327a33431d62d2b7c75ce654d556c9e1817c1abca762ab53d40da51560351b673363652e1ecb56cfe4a746a45ab13c6014e9f361ab687d1cd1795ce9e05c817b83d76046bdb3709de5df7499a02d2f636a454b85b987580ada025d83bd7b8df28a540d5ec5537942e79f2f1ab25ea5f563bc77e4f9468bd309469880c7e34150ca886d1f13dff7e82dbe296c877d925c38c54cc8137b29028854b6bd57ca893927c331300e16aba792289e135589d93302fc37c73c303e383cdf8ef3f6d6265fe5ee01759d24027475c8901039a898582022bc95992b86dce0710887c8a625d9cbb897bdbfaf49a3f642a169827a9bae4fcfa5212461db000000000000e6ed75ca8fcda7ef3ee336189fef3b3ffb9f38fefc5ff39c4e69e3fa1f8b10ee97123e99b61eba065b1ad67530e7c4f11f9da7ae000002000000610101ad7f79cb9bbf64a0fc109f49fe8799fe266e2ccac80fefe750151f5ddfe51833ec65ece70e07ce8ab5d97db47da8f80000664dc0b86ae2b3ff9d4e220752a6b2f3ea9f793612386496dca5af7b8952aafa796ea7b156d19612297c63e774e940bfeb0de83f42fd565a299f741f9b00be4e8fcaf4ec85daceb16d9e8a438e3eb2556570e381b03d9e3c245728648ed9ff22dc963ed105c851c3481125b4c0c8a08a0c9930190902af109fc56b64cc952f298ebe73d7b18052e0147356228ca171b06274a871e2cf9609e0b4cdad36c3250bc8f56f95a6ed"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b90402", 0x11}], 0x1, 0x0, 0x0, 0x7400}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x90) socket$kcm(0x10, 0x2, 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='syzkaller\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x36c}, 0x48) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000009ac38c19a6e1eb5500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x8}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0}, 0x90) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffffffffffff54, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b03d25a806c8c6f94f90624fc601000127a0a000600093582c137153e37080c188001ac0f000300", 0x33fe0}], 0x1}, 0x4) kernel console output (not intermixed with test programs): 0, space 0, times 0 [ 786.795860][T26361] netlink: 'syz.0.8172': attribute type 3 has an invalid length. [ 786.810529][T26360] CPU: 0 PID: 26360 Comm: syz.1.8174 Not tainted syzkaller #0 [ 786.818041][T26360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 786.828146][T26360] Call Trace: [ 786.831444][T26360] [ 786.834394][T26360] dump_stack_lvl+0x188/0x250 [ 786.839110][T26360] ? show_regs_print_info+0x20/0x20 [ 786.844327][T26360] ? load_image+0x400/0x400 [ 786.848860][T26360] ? __might_sleep+0xf0/0xf0 [ 786.853487][T26360] ? __lock_acquire+0x7d10/0x7d10 [ 786.858541][T26360] ? __local_bh_enable_ip+0x136/0x1c0 [ 786.863948][T26360] should_fail+0x38c/0x4c0 [ 786.868408][T26360] should_failslab+0x5/0x20 [ 786.872941][T26360] slab_pre_alloc_hook+0x51/0xc0 [ 786.877909][T26360] kmem_cache_alloc_node_trace+0x4a/0x300 [ 786.883662][T26360] ? __get_vm_area_node+0x119/0x2d0 [ 786.888910][T26360] __get_vm_area_node+0x119/0x2d0 [ 786.893971][T26360] __vmalloc_node_range+0xef/0x8b0 [ 786.899114][T26360] ? netlink_sendmsg+0x5ec/0xbe0 [ 786.904082][T26360] ? netlink_data_ready+0x10/0x10 [ 786.909162][T26360] ? netlink_sendmsg+0x5ec/0xbe0 [ 786.914115][T26360] vmalloc+0x75/0x80 [ 786.918035][T26360] ? netlink_sendmsg+0x5ec/0xbe0 [ 786.922992][T26360] netlink_sendmsg+0x5ec/0xbe0 [ 786.927826][T26360] ? netlink_getsockopt+0x570/0x570 [ 786.933049][T26360] ? aa_sock_msg_perm+0x94/0x150 [ 786.938012][T26360] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 786.943311][T26360] ? security_socket_sendmsg+0x7c/0xa0 [ 786.948776][T26360] ? netlink_getsockopt+0x570/0x570 [ 786.953989][T26360] ____sys_sendmsg+0x5b7/0x8f0 [ 786.958774][T26360] ? __sys_sendmsg_sock+0x30/0x30 [ 786.963816][T26360] ? import_iovec+0x6f/0xa0 [ 786.968338][T26360] ___sys_sendmsg+0x236/0x2e0 [ 786.973045][T26360] ? __sys_sendmsg+0x2a0/0x2a0 [ 786.977831][T26360] ? vfs_write+0x8b2/0xd60 [ 786.982282][T26360] __se_sys_sendmsg+0x1af/0x290 [ 786.987142][T26360] ? __x64_sys_sendmsg+0x80/0x80 [ 786.992091][T26360] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 786.998269][T26360] ? lockdep_hardirqs_on+0x94/0x140 [ 787.003476][T26360] do_syscall_64+0x4c/0xa0 [ 787.007927][T26360] ? clear_bhb_loop+0x30/0x80 [ 787.012731][T26360] ? clear_bhb_loop+0x30/0x80 [ 787.017429][T26360] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 787.023344][T26360] RIP: 0033:0x7f65a251ceb9 [ 787.027768][T26360] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 787.047394][T26360] RSP: 002b:00007f65a0778028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 787.055825][T26360] RAX: ffffffffffffffda RBX: 00007f65a2797fa0 RCX: 00007f65a251ceb9 [ 787.063823][T26360] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 787.071817][T26360] RBP: 00007f65a0778090 R08: 0000000000000000 R09: 0000000000000000 [ 787.079815][T26360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 787.087808][T26360] R13: 00007f65a2798038 R14: 00007f65a2797fa0 R15: 00007fffed6aa078 [ 787.095811][T26360] [ 787.249197][T26375] netlink: 'syz.0.8179': attribute type 3 has an invalid length. [ 787.341554][T26360] syz.1.8174: vmalloc error: size 213312, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 787.360915][T26360] CPU: 1 PID: 26360 Comm: syz.1.8174 Not tainted syzkaller #0 [ 787.368441][T26360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 787.378713][T26360] Call Trace: [ 787.382018][T26360] [ 787.384983][T26360] dump_stack_lvl+0x188/0x250 [ 787.389682][T26360] ? rcu_lock_release+0x5/0x20 [ 787.394469][T26360] ? show_regs_print_info+0x20/0x20 [ 787.399677][T26360] ? load_image+0x400/0x400 [ 787.404205][T26360] warn_alloc+0x243/0x320 [ 787.408551][T26360] ? zone_watermark_ok_safe+0x240/0x240 [ 787.414114][T26360] ? kmem_cache_alloc_node_trace+0x16c/0x300 [ 787.420110][T26360] ? __get_vm_area_node+0x119/0x2d0 [ 787.425342][T26360] __vmalloc_node_range+0x2b1/0x8b0 [ 787.430589][T26360] ? netlink_data_ready+0x10/0x10 [ 787.435641][T26360] ? netlink_sendmsg+0x5ec/0xbe0 [ 787.440596][T26360] vmalloc+0x75/0x80 [ 787.444510][T26360] ? netlink_sendmsg+0x5ec/0xbe0 [ 787.449460][T26360] netlink_sendmsg+0x5ec/0xbe0 [ 787.454245][T26360] ? netlink_getsockopt+0x570/0x570 [ 787.459462][T26360] ? aa_sock_msg_perm+0x94/0x150 [ 787.464411][T26360] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 787.469808][T26360] ? security_socket_sendmsg+0x7c/0xa0 [ 787.475306][T26360] ? netlink_getsockopt+0x570/0x570 [ 787.480544][T26360] ____sys_sendmsg+0x5b7/0x8f0 [ 787.485323][T26360] ? __sys_sendmsg_sock+0x30/0x30 [ 787.490366][T26360] ? import_iovec+0x6f/0xa0 [ 787.494884][T26360] ___sys_sendmsg+0x236/0x2e0 [ 787.499576][T26360] ? __sys_sendmsg+0x2a0/0x2a0 [ 787.504384][T26360] ? vfs_write+0x8b2/0xd60 [ 787.508843][T26360] __se_sys_sendmsg+0x1af/0x290 [ 787.513726][T26360] ? __x64_sys_sendmsg+0x80/0x80 [ 787.518696][T26360] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 787.524699][T26360] ? lockdep_hardirqs_on+0x94/0x140 [ 787.529917][T26360] do_syscall_64+0x4c/0xa0 [ 787.534350][T26360] ? clear_bhb_loop+0x30/0x80 [ 787.539054][T26360] ? clear_bhb_loop+0x30/0x80 [ 787.543769][T26360] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 787.549699][T26360] RIP: 0033:0x7f65a251ceb9 [ 787.554151][T26360] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 787.573777][T26360] RSP: 002b:00007f65a0778028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 787.582221][T26360] RAX: ffffffffffffffda RBX: 00007f65a2797fa0 RCX: 00007f65a251ceb9 [ 787.590210][T26360] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 787.598194][T26360] RBP: 00007f65a0778090 R08: 0000000000000000 R09: 0000000000000000 [ 787.606181][T26360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 787.614158][T26360] R13: 00007f65a2798038 R14: 00007f65a2797fa0 R15: 00007fffed6aa078 [ 787.622158][T26360] [ 787.679866][T26383] FAULT_INJECTION: forcing a failure. [ 787.679866][T26383] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 787.717485][T26379] device wlan0 left promiscuous mode [ 787.724172][T26383] CPU: 0 PID: 26383 Comm: syz.4.8182 Not tainted syzkaller #0 [ 787.731672][T26383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 787.741747][T26383] Call Trace: [ 787.745061][T26383] [ 787.748017][T26383] dump_stack_lvl+0x188/0x250 [ 787.752749][T26383] ? show_regs_print_info+0x20/0x20 [ 787.758000][T26383] ? load_image+0x400/0x400 [ 787.762539][T26383] ? verify_lock_unused+0x140/0x140 [ 787.767780][T26383] ? verify_lock_unused+0x140/0x140 [ 787.773015][T26383] should_fail+0x38c/0x4c0 [ 787.777463][T26383] prepare_alloc_pages+0x1e4/0x5f0 [ 787.782617][T26383] __alloc_pages+0x11b/0x480 [ 787.787242][T26383] ? zone_statistics+0x170/0x170 [ 787.792213][T26383] ? alloc_pages+0x438/0x550 [ 787.796845][T26383] new_slab+0xc0/0x4b0 [ 787.800939][T26383] ___slab_alloc+0x80a/0xdd0 [ 787.805559][T26383] ? sk_prot_alloc+0xe7/0x210 [ 787.810265][T26383] __kmalloc+0x1cd/0x330 [ 787.814525][T26383] ? sk_prot_alloc+0xe7/0x210 [ 787.819255][T26383] sk_prot_alloc+0xe7/0x210 [ 787.823797][T26383] ? sk_alloc+0x1d/0x310 [ 787.828066][T26383] sk_alloc+0x2f/0x310 [ 787.832155][T26383] bpf_prog_test_run_skb+0x240/0x1180 [ 787.837554][T26383] ? __fget_files+0x40f/0x480 [ 787.842274][T26383] ? cpu_online+0x60/0x60 [ 787.846631][T26383] bpf_prog_test_run+0x31e/0x390 [ 787.851600][T26383] __sys_bpf+0x5a5/0x6f0 [ 787.855875][T26383] ? bpf_link_show_fdinfo+0x380/0x380 [ 787.861319][T26383] ? vtime_user_exit+0x2c8/0x3e0 [ 787.866306][T26383] __x64_sys_bpf+0x78/0x90 [ 787.868011][T26360] Mem-Info: [ 787.870744][T26383] do_syscall_64+0x4c/0xa0 [ 787.870767][T26383] ? clear_bhb_loop+0x30/0x80 [ 787.883054][T26383] ? clear_bhb_loop+0x30/0x80 [ 787.887762][T26383] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 787.893674][T26383] RIP: 0033:0x7fbaf9a40eb9 [ 787.898109][T26383] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 787.906742][T26360] active_anon:279 inactive_anon:5816 isolated_anon:0 [ 787.906742][T26360] active_file:26172 inactive_file:36843 isolated_file:0 [ 787.906742][T26360] unevictable:768 dirty:122 writeback:0 [ 787.906742][T26360] slab_reclaimable:21087 slab_unreclaimable:102583 [ 787.906742][T26360] mapped:30951 shmem:1629 pagetables:582 bounce:0 [ 787.906742][T26360] kernel_misc_reclaimable:0 [ 787.906742][T26360] free:1357503 free_pcp:10586 free_cma:0 [ 787.917733][T26383] RSP: 002b:00007fbaf7c9c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 787.917759][T26383] RAX: ffffffffffffffda RBX: 00007fbaf9cbbfa0 RCX: 00007fbaf9a40eb9 [ 787.917774][T26383] RDX: 0000000000000050 RSI: 0000200000001200 RDI: 000000000000000a [ 787.917787][T26383] RBP: 00007fbaf7c9c090 R08: 0000000000000000 R09: 0000000000000000 [ 787.917799][T26383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 787.999872][T26383] R13: 00007fbaf9cbc038 R14: 00007fbaf9cbbfa0 R15: 00007fff6fc648f8 [ 788.007885][T26383] [ 788.014545][T26360] Node 0 active_anon:1084kB inactive_anon:22756kB active_file:104484kB inactive_file:147372kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:123504kB dirty:484kB writeback:0kB shmem:4440kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:11292kB pagetables:2328kB all_unreclaimable? no [ 788.053282][T26360] Node 1 active_anon:32kB inactive_anon:508kB active_file:204kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:2076kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no [ 788.083305][T26360] Node 0 DMA free:15360kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 788.110239][T26360] lowmem_reserve[]: 0 2539 2540 2540 2540 [ 788.131302][T26360] Node 0 DMA32 free:1488504kB min:34784kB low:43480kB high:52176kB reserved_highatomic:0KB active_anon:1084kB inactive_anon:22756kB active_file:104484kB inactive_file:147372kB unevictable:1536kB writepending:484kB present:3129332kB managed:2606560kB mlocked:0kB bounce:0kB free_pcp:42456kB local_pcp:21148kB free_cma:0kB [ 788.192594][T26360] lowmem_reserve[]: 0 0 0 0 0 [ 788.197427][T26360] Node 0 Normal free:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:660kB mlocked:0kB bounce:0kB free_pcp:20kB local_pcp:8kB free_cma:0kB [ 788.227181][T26360] lowmem_reserve[]: 0 0 0 0 0 [ 788.233434][T26360] Node 1 Normal free:3925700kB min:55108kB low:68884kB high:82660kB reserved_highatomic:0KB active_anon:32kB inactive_anon:508kB active_file:204kB inactive_file:0kB unevictable:1536kB writepending:4kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 788.282358][T26360] lowmem_reserve[]: 0 0 0 0 0 [ 788.287139][T26360] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 788.306035][T26360] Node 0 DMA32: 3691*4kB (UM) 1846*8kB (UME) 1223*16kB (UME) 2188*32kB (UME) 974*64kB (UME) 901*128kB (UME) 283*256kB (UM) 43*512kB (UM) 6*1024kB (UM) 1*2048kB (M) 266*4096kB (ME) = 1488972kB [ 788.330091][T26360] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 788.360618][T26360] Node 1 Normal: 241*4kB (UME) 46*8kB (UME) 29*16kB (UME) 184*32kB (UME) 73*64kB (UME) 23*128kB (UE) 11*256kB (UME) 10*512kB (U) 1*1024kB (U) 3*2048kB (UME) 951*4096kB (M) = 3925700kB [ 788.391664][T26360] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 788.409923][T26360] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 788.419875][T26360] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 788.433925][T26360] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 788.445328][T26360] 64644 total pagecache pages [ 788.450039][T26360] 0 pages in swap cache [ 788.457262][T26360] Swap cache stats: add 0, delete 0, find 0/0 [ 788.484168][T26360] Free swap = 124996kB [ 788.488370][T26360] Total swap = 124996kB [ 788.498075][T26360] 2097051 pages RAM [ 788.502215][T26360] 0 pages HighMem/MovableOnly [ 788.507044][T26360] 411488 pages reserved [ 788.511664][T26360] 0 pages cma reserved [ 788.565114][T26404] __nla_validate_parse: 4 callbacks suppressed [ 788.565132][T26404] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8191'. [ 788.581655][T26404] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8191'. [ 788.592478][T26404] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8191'. [ 788.606596][T26404] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8191'. [ 788.923544][T26419] netlink: 'syz.3.8197': attribute type 3 has an invalid length. [ 788.935604][T26419] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8197'. [ 789.121363][T26428] netlink: 'syz.0.8201': attribute type 9 has an invalid length. [ 789.129333][T26428] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.8201'. [ 789.159442][T26424] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 789.473858][T26439] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 789.486302][T26439] device syzkaller0 entered promiscuous mode [ 790.075679][T26468] chnl_net:caif_netlink_parms(): no params data found [ 790.149909][T26468] bridge0: port 1(bridge_slave_0) entered blocking state [ 790.157960][T26468] bridge0: port 1(bridge_slave_0) entered disabled state [ 790.167888][T26468] device bridge_slave_0 entered promiscuous mode [ 790.195315][T26468] bridge0: port 2(bridge_slave_1) entered blocking state [ 790.204248][T26468] bridge0: port 2(bridge_slave_1) entered disabled state [ 790.217094][T26468] device bridge_slave_1 entered promiscuous mode [ 790.234646][T26482] netlink: 'syz.1.8218': attribute type 21 has an invalid length. [ 790.242719][T26482] netlink: 'syz.1.8218': attribute type 6 has an invalid length. [ 790.250644][T26482] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8218'. [ 790.274729][T26468] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 790.288759][T26468] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 790.343625][T26468] team0: Port device team_slave_0 added [ 790.353181][T26468] team0: Port device team_slave_1 added [ 790.386568][T26468] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 790.394035][T26468] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 790.433433][T26468] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 790.458151][T26484] netlink: 'syz.4.8219': attribute type 2 has an invalid length. [ 790.480842][T26484] netlink: 'syz.4.8219': attribute type 8 has an invalid length. [ 790.493598][T26484] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8219'. [ 790.525428][T26468] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 790.540567][T26468] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 790.577012][T26468] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 790.595227][ T4259] tipc: Subscription rejected, illegal request [ 790.879387][T26468] device hsr_slave_0 entered promiscuous mode [ 791.322188][T26468] device hsr_slave_1 entered promiscuous mode [ 791.387346][T26505] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 791.590392][T26468] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 791.624136][T26521] netlink: 168 bytes leftover after parsing attributes in process `syz.0.8233'. [ 791.671590][T26468] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 791.792609][T26468] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 791.818734][T26527] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 791.838800][T26534] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.8235'. [ 791.874147][T26468] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 792.001971][T24703] Bluetooth: hci3: command 0x0409 tx timeout [ 792.346241][T26541] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 792.478247][T26468] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 792.495731][T26468] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 792.519018][T26468] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 792.541066][T26468] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 792.791345][T26468] 8021q: adding VLAN 0 to HW filter on device bond0 [ 792.829995][T26468] 8021q: adding VLAN 0 to HW filter on device team0 [ 792.861579][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 792.885283][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 792.916567][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 792.943679][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 792.975168][ T4259] bridge0: port 1(bridge_slave_0) entered blocking state [ 792.982419][ T4259] bridge0: port 1(bridge_slave_0) entered forwarding state [ 793.020927][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 793.060644][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 793.095603][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 793.113591][ T4259] bridge0: port 2(bridge_slave_1) entered blocking state [ 793.120972][ T4259] bridge0: port 2(bridge_slave_1) entered forwarding state [ 793.168064][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 793.205128][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 793.275959][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 793.300240][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 793.331869][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 793.379837][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 793.407693][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 793.454683][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 793.503153][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 793.521044][T26468] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 793.533267][T26468] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 793.551857][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 793.581751][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 793.869976][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 793.895941][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 793.937192][T26468] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 794.030791][ T4938] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 794.049430][T26608] netlink: 212168 bytes leftover after parsing attributes in process `syz.3.8268'. [ 794.061849][ T4938] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 794.071359][T24703] Bluetooth: hci3: command 0x041b tx timeout [ 794.101583][T26468] device veth0_vlan entered promiscuous mode [ 794.126610][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 794.137060][T26610] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x31 [ 794.147013][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 794.185820][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 794.206357][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 794.241079][T26468] device veth1_vlan entered promiscuous mode [ 794.284697][ T4938] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 794.294313][ T4938] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 794.302588][ T4938] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 794.333781][ T4938] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 794.365907][T26468] device veth0_macvtap entered promiscuous mode [ 794.411916][T26468] device veth1_macvtap entered promiscuous mode [ 794.429940][T26616] netlink: 'syz.1.8272': attribute type 10 has an invalid length. [ 794.457530][T26468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 794.468691][T26468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 794.479530][T26468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 794.495848][T26468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 794.517243][T26468] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 794.558096][T26468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 794.573355][T26468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 794.585972][T26468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 794.599606][T26468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 794.617537][T26468] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 794.627088][T26617] netlink: 144 bytes leftover after parsing attributes in process `syz.4.8271'. [ 794.668581][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 794.682231][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 794.695234][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 794.708724][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 794.720518][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 794.732230][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 794.753543][T26468] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 794.771316][T26468] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 794.780103][T26468] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 794.791688][T26468] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 794.891070][ T4938] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 794.910775][ T4938] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 794.969942][ T4938] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 794.987264][ T4938] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 795.006096][ T4938] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 795.018157][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 795.140147][T26638] netlink: 'syz.2.8209': attribute type 10 has an invalid length. [ 795.167305][T26638] device hsr_slave_0 left promiscuous mode [ 795.179579][T26638] device hsr_slave_1 left promiscuous mode [ 795.227300][T26649] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8282'. [ 795.327936][T26653] netlink: 61967 bytes leftover after parsing attributes in process `syz.0.8283'. [ 795.970538][T26672] netlink: 144 bytes leftover after parsing attributes in process `syz.3.8292'. [ 796.152589][T24702] Bluetooth: hci3: command 0x040f tx timeout [ 796.443324][T26691] netlink: 'syz.4.8300': attribute type 10 has an invalid length. [ 796.527341][T26697] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 796.534692][T26697] IPv6: NLM_F_CREATE should be set when creating new route [ 796.734091][T26703] netlink: 144 bytes leftover after parsing attributes in process `syz.1.8305'. [ 797.107712][T26705] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8306'. [ 797.178009][T26708] netlink: 'syz.3.8307': attribute type 27 has an invalid length. [ 797.187236][T26708] netlink: 'syz.3.8307': attribute type 3 has an invalid length. [ 797.196873][T26708] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8307'. [ 797.212367][T26708] netlink: 'syz.3.8307': attribute type 3 has an invalid length. [ 797.220556][T26708] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.8307'. [ 797.535180][T26731] FAULT_INJECTION: forcing a failure. [ 797.535180][T26731] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 797.576528][T26735] IPv6: NLM_F_CREATE should be specified when creating new route [ 797.586152][T26731] CPU: 0 PID: 26731 Comm: syz.4.8316 Not tainted syzkaller #0 [ 797.593641][T26731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 797.603722][T26731] Call Trace: [ 797.607022][T26731] [ 797.609966][T26731] dump_stack_lvl+0x188/0x250 [ 797.614679][T26731] ? show_regs_print_info+0x20/0x20 [ 797.619923][T26731] ? load_image+0x400/0x400 [ 797.624466][T26731] ? __lock_acquire+0x7d10/0x7d10 [ 797.629525][T26731] should_fail+0x38c/0x4c0 [ 797.633972][T26731] _copy_to_user+0x2e/0x130 [ 797.638505][T26731] simple_read_from_buffer+0xe3/0x150 [ 797.643908][T26731] proc_fail_nth_read+0x1a6/0x220 [ 797.648967][T26731] ? proc_fault_inject_write+0x310/0x310 [ 797.654631][T26731] ? fsnotify_perm+0x254/0x560 [ 797.659441][T26731] ? proc_fault_inject_write+0x310/0x310 [ 797.665112][T26731] vfs_read+0x301/0xd60 [ 797.669305][T26731] ? kernel_read+0x1e0/0x1e0 [ 797.673936][T26731] ? __fget_files+0x40f/0x480 [ 797.678657][T26731] ? mutex_lock_nested+0x17/0x20 [ 797.683624][T26731] ? __fdget_pos+0x2bf/0x370 [ 797.688259][T26731] ? ksys_read+0x71/0x260 [ 797.692622][T26731] ksys_read+0x152/0x260 [ 797.696888][T26731] ? vfs_write+0xd60/0xd60 [ 797.701327][T26731] ? lockdep_hardirqs_on+0x94/0x140 [ 797.706563][T26731] do_syscall_64+0x4c/0xa0 [ 797.711015][T26731] ? clear_bhb_loop+0x30/0x80 [ 797.715743][T26731] ? clear_bhb_loop+0x30/0x80 [ 797.720566][T26731] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 797.726577][T26731] RIP: 0033:0x7fbaf9a0178e [ 797.731022][T26731] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 797.750650][T26731] RSP: 002b:00007fbaf7c7afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 797.759092][T26731] RAX: ffffffffffffffda RBX: 00007fbaf7c7b6c0 RCX: 00007fbaf9a0178e [ 797.767092][T26731] RDX: 000000000000000f RSI: 00007fbaf7c7b0a0 RDI: 0000000000000004 [ 797.775090][T26731] RBP: 00007fbaf7c7b090 R08: 0000000000000000 R09: 0000000000000000 [ 797.783097][T26731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 797.791095][T26731] R13: 00007fbaf9cbc128 R14: 00007fbaf9cbc090 R15: 00007fff6fc648f8 [ 797.799121][T26731] [ 797.814508][T26735] netlink: 1 bytes leftover after parsing attributes in process `syz.0.8318'. [ 798.029291][T26750] netlink: 'syz.3.8326': attribute type 3 has an invalid length. [ 798.241392][T24703] Bluetooth: hci3: command 0x0419 tx timeout [ 798.846979][T26790] netlink: 'syz.4.8338': attribute type 10 has an invalid length. [ 799.829103][T26815] __nla_validate_parse: 3 callbacks suppressed [ 799.829119][T26815] netlink: 26 bytes leftover after parsing attributes in process `syz.4.8347'. [ 800.035821][T26830] netlink: 144 bytes leftover after parsing attributes in process `syz.2.8350'. [ 800.092895][T26833] netlink: 144 bytes leftover after parsing attributes in process `syz.0.8351'. [ 800.192795][T26840] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 800.200111][T26840] IPv6: NLM_F_CREATE should be set when creating new route [ 800.551834][T26860] netlink: 'syz.3.8365': attribute type 4 has an invalid length. [ 800.788875][T26875] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 800.796186][T26875] IPv6: NLM_F_CREATE should be set when creating new route [ 800.803520][T26875] IPv6: NLM_F_CREATE should be set when creating new route [ 800.810840][T26875] IPv6: NLM_F_CREATE should be set when creating new route [ 800.949661][T26880] netlink: 'syz.3.8372': attribute type 4 has an invalid length. [ 800.997454][T26888] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 801.004923][T26888] IPv6: NLM_F_CREATE should be set when creating new route [ 801.034274][T26888] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.8375'. [ 801.177181][T26898] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.8378'. [ 802.489270][T26931] chnl_net:caif_netlink_parms(): no params data found [ 802.609575][T26931] bridge0: port 1(bridge_slave_0) entered blocking state [ 802.617317][T26931] bridge0: port 1(bridge_slave_0) entered disabled state [ 802.625771][T26931] device bridge_slave_0 entered promiscuous mode [ 802.639594][T26931] bridge0: port 2(bridge_slave_1) entered blocking state [ 802.646952][T26931] bridge0: port 2(bridge_slave_1) entered disabled state [ 802.655514][T26931] device bridge_slave_1 entered promiscuous mode [ 802.679867][T26931] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 802.694265][T26931] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 802.723249][T26931] team0: Port device team_slave_0 added [ 802.730791][T26931] team0: Port device team_slave_1 added [ 802.749119][T26931] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 802.756206][T26931] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 802.785736][T26931] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 802.798127][T26931] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 802.808537][T26931] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 802.839662][T26931] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 802.870993][T26931] device hsr_slave_0 entered promiscuous mode [ 802.878225][T26931] device hsr_slave_1 entered promiscuous mode [ 802.958213][T26931] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 803.028124][T26931] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 803.107771][T26959] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.8397'. [ 803.527608][T26931] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 803.598413][T26972] netlink: 144 bytes leftover after parsing attributes in process `syz.2.8401'. [ 803.634668][T26973] netlink: 61211 bytes leftover after parsing attributes in process `syz.4.8402'. [ 803.740155][T26931] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 803.931765][T26931] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 803.950743][T26931] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 803.966855][T26931] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 803.978007][T26931] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 803.985994][T26989] delete_channel: no stack [ 804.045317][T26998] netlink: 207508 bytes leftover after parsing attributes in process `syz.4.8407'. [ 804.128076][T26931] 8021q: adding VLAN 0 to HW filter on device bond0 [ 804.154747][T27004] netlink: 212168 bytes leftover after parsing attributes in process `syz.2.8411'. [ 804.175527][T12714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 804.186731][T12714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 804.201876][T26931] 8021q: adding VLAN 0 to HW filter on device team0 [ 804.216620][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 804.233333][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 804.248500][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 804.255768][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 804.279931][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 804.294435][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 804.311403][T24703] Bluetooth: hci4: command 0x0409 tx timeout [ 804.319611][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 804.338361][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 804.345516][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 804.358803][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 804.385463][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 804.400473][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 804.418384][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 804.430710][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 804.455544][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 804.477445][T27015] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 804.500743][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 804.516191][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 804.528558][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 804.550574][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 804.569285][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 804.580581][T26931] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 804.817198][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 804.830704][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 804.847723][T27033] netlink: 'syz.2.8423': attribute type 33 has an invalid length. [ 804.862709][T27033] __nla_validate_parse: 2 callbacks suppressed [ 804.862750][T27033] netlink: 152 bytes leftover after parsing attributes in process `syz.2.8423'. [ 804.921469][T26931] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 804.979589][T12714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 804.988978][T12714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 805.021036][T12714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 805.030103][T12714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 805.040665][T26931] device veth0_vlan entered promiscuous mode [ 805.067178][T12714] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 805.121929][T12714] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 805.136771][T26931] device veth1_vlan entered promiscuous mode [ 805.204508][ T4938] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 805.215261][ T4938] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 805.234557][ T4938] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 805.268838][ T4938] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 805.307174][T26931] device veth0_macvtap entered promiscuous mode [ 805.329652][T26931] device veth1_macvtap entered promiscuous mode [ 805.390859][T26931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 805.418817][T26931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 805.433207][T26931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 805.455885][T26931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 805.466383][T26931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 805.484006][T26931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 805.496700][T26931] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 805.508280][ T4938] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 805.537853][ T4938] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 805.562251][ T4938] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 805.584187][ T4938] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 805.602596][T26931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 805.613453][T26931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 805.636405][T27065] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.8433'. [ 805.645902][T26931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 805.662926][T26931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 805.677630][T26931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 805.690779][T26931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 805.706903][T26931] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 805.719150][ T4938] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 805.739641][ T4938] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 805.774864][T26931] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.792303][T26931] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.805705][T26931] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.815027][T26931] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.969811][ T4316] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 805.997342][ T4316] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 806.050604][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 806.070325][T12714] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 806.092216][T12714] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 806.117114][ T4938] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 806.370879][T27082] netlink: 'syz.2.8439': attribute type 4 has an invalid length. [ 806.392063][ T4292] Bluetooth: hci4: command 0x041b tx timeout [ 806.581265][T27097] netlink: 'syz.1.8444': attribute type 10 has an invalid length. [ 806.742127][T27101] netlink: 'syz.1.8446': attribute type 3 has an invalid length. [ 806.761394][T27101] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.8446'. [ 806.863641][T27105] netlink: 'syz.1.8450': attribute type 3 has an invalid length. [ 806.903797][T27103] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8448'. [ 806.927358][T27105] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.8450'. [ 807.080998][T27119] netlink: 'syz.4.8453': attribute type 21 has an invalid length. [ 807.318676][T27133] netlink: 'syz.4.8461': attribute type 3 has an invalid length. [ 807.350399][T27133] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8461'. [ 807.738416][T27156] netlink: 'syz.3.8468': attribute type 2 has an invalid length. [ 807.749175][T27156] netlink: 'syz.3.8468': attribute type 8 has an invalid length. [ 807.772480][T27156] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8468'. [ 807.873373][T27156] netlink: 'syz.3.8468': attribute type 9 has an invalid length. [ 807.887933][T27156] netlink: 61951 bytes leftover after parsing attributes in process `syz.3.8468'. [ 807.975241][T27164] netlink: 'syz.0.8472': attribute type 10 has an invalid length. [ 808.285121][T27172] device wg2 entered promiscuous mode [ 808.393858][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.400314][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.474652][ T4186] Bluetooth: hci4: command 0x040f tx timeout [ 808.947118][T27200] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8485'. [ 808.965467][T27187] netlink: 17279 bytes leftover after parsing attributes in process `syz.3.8481'. [ 809.220089][T27203] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 809.342376][T27210] device wg2 entered promiscuous mode [ 809.400921][T27214] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 809.408235][T27214] IPv6: NLM_F_CREATE should be set when creating new route [ 809.891627][T27230] __nla_validate_parse: 4 callbacks suppressed [ 809.891645][T27230] netlink: 17279 bytes leftover after parsing attributes in process `syz.0.8498'. [ 809.936411][T27246] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 809.943721][T27246] IPv6: NLM_F_CREATE should be set when creating new route [ 809.950972][T27246] IPv6: NLM_F_CREATE should be set when creating new route [ 809.958246][T27246] IPv6: NLM_F_CREATE should be set when creating new route [ 810.100539][T27247] device wg2 entered promiscuous mode [ 810.446768][T27273] FAULT_INJECTION: forcing a failure. [ 810.446768][T27273] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 810.508109][T27273] CPU: 0 PID: 27273 Comm: syz.1.8514 Not tainted syzkaller #0 [ 810.515654][T27273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 810.525736][T27273] Call Trace: [ 810.529037][T27273] [ 810.531985][T27273] dump_stack_lvl+0x188/0x250 [ 810.536688][T27273] ? show_regs_print_info+0x20/0x20 [ 810.541914][T27273] ? load_image+0x400/0x400 [ 810.546450][T27273] ? __lock_acquire+0x7d10/0x7d10 [ 810.551499][T27273] ? vfs_write+0x8b2/0xd60 [ 810.555953][T27273] should_fail+0x38c/0x4c0 [ 810.560404][T27273] _copy_from_user+0x2e/0x170 [ 810.565114][T27273] __sys_bpf+0x26d/0x6f0 [ 810.569390][T27273] ? bpf_link_show_fdinfo+0x380/0x380 [ 810.574804][T27273] ? vtime_user_exit+0x2c8/0x3e0 [ 810.579882][T27273] __x64_sys_bpf+0x78/0x90 [ 810.584324][T27273] do_syscall_64+0x4c/0xa0 [ 810.588759][T27273] ? clear_bhb_loop+0x30/0x80 [ 810.593449][T27273] ? clear_bhb_loop+0x30/0x80 [ 810.598128][T27273] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 810.604039][T27273] RIP: 0033:0x7f65a251ceb9 [ 810.608479][T27273] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 810.628106][T27273] RSP: 002b:00007f65a0778028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 810.636538][T27273] RAX: ffffffffffffffda RBX: 00007f65a2797fa0 RCX: 00007f65a251ceb9 [ 810.644536][T27273] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 000000000000000a [ 810.652526][T27273] RBP: 00007f65a0778090 R08: 0000000000000000 R09: 0000000000000000 [ 810.660523][T27273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 810.668512][T27273] R13: 00007f65a2798038 R14: 00007f65a2797fa0 R15: 00007fffed6aa078 [ 810.676518][T27273] [ 810.683462][ T4244] Bluetooth: hci4: command 0x0419 tx timeout [ 810.702266][T27281] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 810.885820][T27286] netlink: 144 bytes leftover after parsing attributes in process `syz.2.8519'. [ 811.028104][T27294] delete_channel: no stack [ 811.041231][T27294] delete_channel: no stack [ 811.064604][T27297] netlink: 144 bytes leftover after parsing attributes in process `syz.4.8523'. [ 811.106914][T27294] netlink: 1042 bytes leftover after parsing attributes in process `syz.0.8530'. [ 812.488122][T27319] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 812.506879][T27320] netlink: 15231 bytes leftover after parsing attributes in process `syz.2.8531'. [ 812.799436][T27336] validate_nla: 8 callbacks suppressed [ 812.799470][T27336] netlink: 'syz.0.8536': attribute type 39 has an invalid length. [ 813.564794][T27354] netlink: 'syz.3.8542': attribute type 1 has an invalid length. [ 813.598389][T27358] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8543'. [ 813.702776][T27368] netlink: 'syz.4.8549': attribute type 10 has an invalid length. [ 813.825164][T27381] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8553'. [ 813.887253][T27374] netlink: 100 bytes leftover after parsing attributes in process `syz.2.8553'. [ 813.907347][T27381] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8553'. [ 813.987789][T27380] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 814.082349][T27383] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8553'. [ 814.095572][T27389] delete_channel: no stack [ 814.264335][T27400] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 814.271624][T27400] IPv6: NLM_F_CREATE should be set when creating new route [ 814.477775][T27411] netlink: 'syz.3.8563': attribute type 3 has an invalid length. [ 814.489649][T27411] netlink: 'syz.3.8563': attribute type 1 has an invalid length. [ 814.518884][T27411] netlink: 'syz.3.8563': attribute type 10 has an invalid length. [ 814.577048][T27411] team0: Cannot enslave team device to itself [ 814.610947][T27410] delete_channel: no stack [ 814.664402][T27410] delete_channel: no stack [ 814.837870][T27417] netlink: 'syz.0.8565': attribute type 4 has an invalid length. [ 815.346763][T27434] netlink: 'syz.4.8573': attribute type 10 has an invalid length. [ 815.365781][T27434] __nla_validate_parse: 2 callbacks suppressed [ 815.365824][T27434] netlink: 2 bytes leftover after parsing attributes in process `syz.4.8573'. [ 815.454632][T27442] netlink: 'syz.4.8573': attribute type 3 has an invalid length. [ 815.457612][T27434] device bond0 entered promiscuous mode [ 815.496172][T27434] device bond_slave_1 entered promiscuous mode [ 815.507957][T27434] bridge0: port 3(bond0) entered blocking state [ 815.512765][T27442] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.8573'. [ 815.533507][T27434] bridge0: port 3(bond0) entered disabled state [ 815.577025][T27434] bridge0: port 3(bond0) entered blocking state [ 815.583487][T27434] bridge0: port 3(bond0) entered forwarding state [ 815.602379][T27438] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8575'. [ 815.645253][T27448] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.8577'. [ 815.852617][T27460] netlink: 'syz.2.8582': attribute type 3 has an invalid length. [ 815.880476][T27460] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8582'. [ 815.954088][T27465] netlink: 144 bytes leftover after parsing attributes in process `syz.0.8581'. [ 816.596070][T27482] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 816.603608][T27482] IPv6: NLM_F_CREATE should be set when creating new route [ 816.610863][T27482] IPv6: NLM_F_CREATE should be set when creating new route [ 817.008172][T27496] FAULT_INJECTION: forcing a failure. [ 817.008172][T27496] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 817.028243][T27496] CPU: 1 PID: 27496 Comm: syz.0.8597 Not tainted syzkaller #0 [ 817.035754][T27496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 817.045832][T27496] Call Trace: [ 817.049145][T27496] [ 817.052100][T27496] dump_stack_lvl+0x188/0x250 [ 817.056824][T27496] ? show_regs_print_info+0x20/0x20 [ 817.062050][T27496] ? load_image+0x400/0x400 [ 817.066613][T27496] ? __lock_acquire+0x7d10/0x7d10 [ 817.071665][T27496] ? bpf_test_run+0x78e/0x800 [ 817.076369][T27496] should_fail+0x38c/0x4c0 [ 817.080829][T27496] _copy_to_user+0x2e/0x130 [ 817.085361][T27496] bpf_test_finish+0x1e6/0x2f0 [ 817.090153][T27496] ? convert_skb_to___skb+0x360/0x360 [ 817.095556][T27496] ? __build_skb+0x1e2/0x2e0 [ 817.100159][T27496] ? convert_skb_to___skb+0x1ff/0x360 [ 817.105549][T27496] bpf_prog_test_run_skb+0xb8f/0x1180 [ 817.110999][T27496] ? cpu_online+0x60/0x60 [ 817.115344][T27496] bpf_prog_test_run+0x31e/0x390 [ 817.120304][T27496] __sys_bpf+0x5a5/0x6f0 [ 817.124558][T27496] ? bpf_link_show_fdinfo+0x380/0x380 [ 817.129952][T27496] ? vtime_user_exit+0x2c8/0x3e0 [ 817.134914][T27496] __x64_sys_bpf+0x78/0x90 [ 817.139427][T27496] do_syscall_64+0x4c/0xa0 [ 817.143849][T27496] ? clear_bhb_loop+0x30/0x80 [ 817.148538][T27496] ? clear_bhb_loop+0x30/0x80 [ 817.153227][T27496] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 817.159155][T27496] RIP: 0033:0x7f424499aeb9 [ 817.163582][T27496] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 817.183197][T27496] RSP: 002b:00007f4242bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 817.191649][T27496] RAX: ffffffffffffffda RBX: 00007f4244c15fa0 RCX: 00007f424499aeb9 [ 817.199631][T27496] RDX: 0000000000000050 RSI: 0000200000001200 RDI: 000000000000000a [ 817.207606][T27496] RBP: 00007f4242bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 817.215583][T27496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 817.223563][T27496] R13: 00007f4244c16038 R14: 00007f4244c15fa0 R15: 00007ffd67c58628 [ 817.231556][T27496] [ 817.339191][T27505] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.8600'. [ 817.362865][T27501] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.8599'. [ 817.730857][T27520] netlink: 144 bytes leftover after parsing attributes in process `syz.4.8603'. [ 817.955527][T27533] validate_nla: 3 callbacks suppressed [ 817.955552][T27533] netlink: 'syz.3.8610': attribute type 10 has an invalid length. [ 817.992552][T27533] netlink: 2 bytes leftover after parsing attributes in process `syz.3.8610'. [ 818.016393][T27533] device bond0 entered promiscuous mode [ 818.024995][T27536] netlink: 'syz.3.8610': attribute type 3 has an invalid length. [ 818.033556][T27533] device bond_slave_0 entered promiscuous mode [ 818.040446][T27533] device bond_slave_1 entered promiscuous mode [ 818.053822][T27533] bridge0: port 3(bond0) entered blocking state [ 818.064772][T27533] bridge0: port 3(bond0) entered disabled state [ 818.103289][T27533] bridge0: port 3(bond0) entered blocking state [ 818.109733][T27533] bridge0: port 3(bond0) entered forwarding state [ 818.859632][T27584] FAULT_INJECTION: forcing a failure. [ 818.859632][T27584] name failslab, interval 1, probability 0, space 0, times 0 [ 818.959068][T27584] CPU: 0 PID: 27584 Comm: syz.2.8629 Not tainted syzkaller #0 [ 818.966767][T27584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 818.976846][T27584] Call Trace: [ 818.980143][T27584] [ 818.983093][T27584] dump_stack_lvl+0x188/0x250 [ 818.987808][T27584] ? show_regs_print_info+0x20/0x20 [ 818.993035][T27584] ? load_image+0x400/0x400 [ 818.997573][T27584] ? __lock_acquire+0x7d10/0x7d10 [ 819.002627][T27584] ? verify_lock_unused+0x140/0x140 [ 819.007861][T27584] should_fail+0x38c/0x4c0 [ 819.012320][T27584] should_failslab+0x5/0x20 [ 819.016869][T27584] slab_pre_alloc_hook+0x51/0xc0 [ 819.021842][T27584] __kmalloc+0x6b/0x330 [ 819.026016][T27584] ? bpf_prog_test_run_flow_dissector+0x29f/0x630 [ 819.032464][T27584] ? xdp_convert_buff_to_md+0x1e0/0x1e0 [ 819.038069][T27584] bpf_prog_test_run_flow_dissector+0x29f/0x630 [ 819.044340][T27584] ? __lock_acquire+0x7d10/0x7d10 [ 819.049409][T27584] ? xdp_convert_buff_to_md+0x1e0/0x1e0 [ 819.054990][T27584] ? __fget_files+0x40f/0x480 [ 819.059721][T27584] ? xdp_convert_buff_to_md+0x1e0/0x1e0 [ 819.065310][T27584] bpf_prog_test_run+0x31e/0x390 [ 819.070291][T27584] __sys_bpf+0x5a5/0x6f0 [ 819.074575][T27584] ? perf_trace_preemptirq_template+0x2aa/0x360 [ 819.080844][T27584] ? bpf_link_show_fdinfo+0x380/0x380 [ 819.086245][T27584] ? rcu_nmi_exit+0x6f/0xf0 [ 819.090798][T27584] ? vtime_user_exit+0x2c8/0x3e0 [ 819.095773][T27584] __x64_sys_bpf+0x78/0x90 [ 819.100221][T27584] do_syscall_64+0x4c/0xa0 [ 819.104662][T27584] ? clear_bhb_loop+0x30/0x80 [ 819.109360][T27584] ? clear_bhb_loop+0x30/0x80 [ 819.114065][T27584] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 819.119979][T27584] RIP: 0033:0x7f759492feb9 [ 819.124427][T27584] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 819.144050][T27584] RSP: 002b:00007f7592b8b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 819.152499][T27584] RAX: ffffffffffffffda RBX: 00007f7594baafa0 RCX: 00007f759492feb9 [ 819.160504][T27584] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 000000000000000a [ 819.168505][T27584] RBP: 00007f7592b8b090 R08: 0000000000000000 R09: 0000000000000000 [ 819.176501][T27584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 819.184492][T27584] R13: 00007f7594bab038 R14: 00007f7594baafa0 R15: 00007ffea6a4c708 [ 819.192498][T27584] [ 819.689980][T27620] netlink: 'syz.0.8639': attribute type 4 has an invalid length. [ 820.483447][T27658] netlink: 'syz.2.8657': attribute type 10 has an invalid length. [ 820.558286][T27658] team0: Port device wlan1 added [ 820.624586][T27658] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 820.863286][T27683] netlink: 'syz.3.8661': attribute type 3 has an invalid length. [ 820.884371][T27683] __nla_validate_parse: 5 callbacks suppressed [ 820.884388][T27683] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.8661'. [ 820.965575][T27688] netlink: 144 bytes leftover after parsing attributes in process `syz.4.8665'. [ 821.072637][T27692] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8667'. [ 821.203209][T27700] netlink: 'syz.0.8671': attribute type 10 has an invalid length. [ 821.322150][T27713] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8676'. [ 821.344726][T27713] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8676'. [ 821.359048][T27713] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8676'. [ 821.422727][T27717] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 821.430020][T27717] IPv6: NLM_F_CREATE should be set when creating new route [ 821.746258][T27733] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.8684'. [ 821.810532][T27739] netlink: 'syz.4.8687': attribute type 10 has an invalid length. [ 822.003389][T27750] netlink: 'syz.2.8692': attribute type 3 has an invalid length. [ 822.027072][T27750] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.8692'. [ 822.143749][T27751] netlink: 'syz.1.8691': attribute type 4 has an invalid length. [ 822.354320][T27764] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8698'. [ 822.371531][T27764] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8698'. [ 823.178919][T27812] netlink: 'syz.3.8718': attribute type 3 has an invalid length. [ 823.448690][T27827] device syzkaller0 entered promiscuous mode [ 823.535651][T27835] netlink: 'syz.3.8728': attribute type 3 has an invalid length. [ 823.801015][T27852] netlink: 'syz.4.8734': attribute type 10 has an invalid length. [ 824.453407][T27879] netlink: 'syz.2.8744': attribute type 29 has an invalid length. [ 824.513209][T27879] netlink: 'syz.2.8744': attribute type 29 has an invalid length. [ 825.576480][T27893] chnl_net:caif_netlink_parms(): no params data found [ 825.900176][T27917] __nla_validate_parse: 15 callbacks suppressed [ 825.900205][T27917] netlink: 143108 bytes leftover after parsing attributes in process `syz.0.8755'. [ 825.986115][T27917] netlink: 'syz.0.8755': attribute type 1 has an invalid length. [ 826.017211][T27893] bridge0: port 1(bridge_slave_0) entered blocking state [ 826.037261][T27893] bridge0: port 1(bridge_slave_0) entered disabled state [ 826.073476][T27893] device bridge_slave_0 entered promiscuous mode [ 826.135756][T27925] netlink: 144 bytes leftover after parsing attributes in process `syz.3.8757'. [ 826.186825][T27930] FAULT_INJECTION: forcing a failure. [ 826.186825][T27930] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 826.200520][T27893] bridge0: port 2(bridge_slave_1) entered blocking state [ 826.211398][T27930] CPU: 0 PID: 27930 Comm: syz.0.8759 Not tainted syzkaller #0 [ 826.218909][T27930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 826.229004][T27930] Call Trace: [ 826.232343][T27930] [ 826.235309][T27930] dump_stack_lvl+0x188/0x250 [ 826.240048][T27930] ? show_regs_print_info+0x20/0x20 [ 826.245297][T27930] ? load_image+0x400/0x400 [ 826.249850][T27930] ? __lock_acquire+0x7d10/0x7d10 [ 826.254933][T27930] ? bpf_test_run+0x78e/0x800 [ 826.259669][T27930] should_fail+0x38c/0x4c0 [ 826.264147][T27930] _copy_to_user+0x2e/0x130 [ 826.268704][T27930] bpf_test_finish+0x215/0x2f0 [ 826.273516][T27930] ? convert_skb_to___skb+0x360/0x360 [ 826.278942][T27930] ? __build_skb+0x1e2/0x2e0 [ 826.283603][T27930] ? convert_skb_to___skb+0x1ff/0x360 [ 826.289023][T27930] bpf_prog_test_run_skb+0xb8f/0x1180 [ 826.294674][T27930] ? cpu_online+0x60/0x60 [ 826.299085][T27930] bpf_prog_test_run+0x31e/0x390 [ 826.302054][T27893] bridge0: port 2(bridge_slave_1) entered disabled state [ 826.304070][T27930] __sys_bpf+0x5a5/0x6f0 [ 826.315392][T27930] ? bpf_link_show_fdinfo+0x380/0x380 [ 826.320838][T27930] ? vtime_user_exit+0x2c8/0x3e0 [ 826.325837][T27930] __x64_sys_bpf+0x78/0x90 [ 826.330324][T27930] do_syscall_64+0x4c/0xa0 [ 826.334774][T27930] ? clear_bhb_loop+0x30/0x80 [ 826.339481][T27930] ? clear_bhb_loop+0x30/0x80 [ 826.344208][T27930] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 826.350164][T27930] RIP: 0033:0x7f424499aeb9 [ 826.354620][T27930] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 826.362146][T27893] device bridge_slave_1 entered promiscuous mode [ 826.374287][T27930] RSP: 002b:00007f4242bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 826.374324][T27930] RAX: ffffffffffffffda RBX: 00007f4244c15fa0 RCX: 00007f424499aeb9 [ 826.374343][T27930] RDX: 0000000000000050 RSI: 0000200000001200 RDI: 000000000000000a [ 826.374361][T27930] RBP: 00007f4242bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 826.374380][T27930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 826.374397][T27930] R13: 00007f4244c16038 R14: 00007f4244c15fa0 R15: 00007ffd67c58628 [ 826.374467][T27930] [ 826.556211][T27893] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 826.596724][T27893] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 826.718225][T27936] device syzkaller0 entered promiscuous mode [ 826.823317][T27893] team0: Port device team_slave_0 added [ 826.859331][T27893] team0: Port device team_slave_1 added [ 827.008206][T27893] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 827.019982][T27893] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 827.047168][ T4292] Bluetooth: hci1: command 0x0409 tx timeout [ 827.103841][T27893] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 827.130740][T27893] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 827.138814][T27893] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 827.207213][T27893] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 827.417973][T27893] device hsr_slave_0 entered promiscuous mode [ 827.436908][T27893] device hsr_slave_1 entered promiscuous mode [ 827.457007][T27893] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 827.482993][T27893] Cannot create hsr debugfs directory [ 827.716284][T27974] netlink: 'syz.0.8773': attribute type 21 has an invalid length. [ 827.893463][T27893] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 827.924475][T27972] netlink: 144 bytes leftover after parsing attributes in process `syz.3.8772'. [ 828.016014][T27893] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 828.062608][T27984] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.8777'. [ 828.199571][T27893] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 828.219086][ T4316] tipc: Subscription rejected, illegal request [ 828.352234][T27893] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 828.397319][T28005] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 828.452670][T28005] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.8786'. [ 828.577923][T27893] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 828.624395][T28012] FAULT_INJECTION: forcing a failure. [ 828.624395][T28012] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 828.648244][T27893] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 828.674924][T27893] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 828.708146][T27893] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 828.751219][T28012] CPU: 1 PID: 28012 Comm: syz.2.8789 Not tainted syzkaller #0 [ 828.758733][T28012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 828.768811][T28012] Call Trace: [ 828.772110][T28012] [ 828.775069][T28012] dump_stack_lvl+0x188/0x250 [ 828.779783][T28012] ? show_regs_print_info+0x20/0x20 [ 828.785013][T28012] ? load_image+0x400/0x400 [ 828.789541][T28012] ? __lock_acquire+0x7d10/0x7d10 [ 828.794599][T28012] should_fail+0x38c/0x4c0 [ 828.799051][T28012] _copy_from_user+0x2e/0x170 [ 828.803765][T28012] bpf_prog_test_run_flow_dissector+0x2c4/0x630 [ 828.810036][T28012] ? __lock_acquire+0x7d10/0x7d10 [ 828.815102][T28012] ? xdp_convert_buff_to_md+0x1e0/0x1e0 [ 828.820687][T28012] ? __fget_files+0x40f/0x480 [ 828.825398][T28012] ? xdp_convert_buff_to_md+0x1e0/0x1e0 [ 828.830971][T28012] bpf_prog_test_run+0x31e/0x390 [ 828.835948][T28012] __sys_bpf+0x5a5/0x6f0 [ 828.840227][T28012] ? bpf_link_show_fdinfo+0x380/0x380 [ 828.845642][T28012] ? vtime_user_exit+0x2c8/0x3e0 [ 828.850617][T28012] __x64_sys_bpf+0x78/0x90 [ 828.855060][T28012] do_syscall_64+0x4c/0xa0 [ 828.859494][T28012] ? clear_bhb_loop+0x30/0x80 [ 828.864214][T28012] ? clear_bhb_loop+0x30/0x80 [ 828.868931][T28012] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 828.874849][T28012] RIP: 0033:0x7f759492feb9 [ 828.879289][T28012] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 828.898916][T28012] RSP: 002b:00007f7592b8b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 828.907364][T28012] RAX: ffffffffffffffda RBX: 00007f7594baafa0 RCX: 00007f759492feb9 [ 828.915357][T28012] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 000000000000000a [ 828.923350][T28012] RBP: 00007f7592b8b090 R08: 0000000000000000 R09: 0000000000000000 [ 828.931345][T28012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 828.939336][T28012] R13: 00007f7594bab038 R14: 00007f7594baafa0 R15: 00007ffea6a4c708 [ 828.947343][T28012] [ 829.031040][T28015] netlink: 144 bytes leftover after parsing attributes in process `syz.3.8790'. [ 829.111307][T18414] Bluetooth: hci1: command 0x041b tx timeout [ 829.149372][T27893] 8021q: adding VLAN 0 to HW filter on device bond0 [ 829.194661][ T4938] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 829.248407][ T4938] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 829.265377][T27893] 8021q: adding VLAN 0 to HW filter on device team0 [ 829.295848][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 829.315624][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 829.361324][ T4259] bridge0: port 1(bridge_slave_0) entered blocking state [ 829.368479][ T4259] bridge0: port 1(bridge_slave_0) entered forwarding state [ 829.425847][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 829.450049][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 829.478451][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 829.541972][ T4259] bridge0: port 2(bridge_slave_1) entered blocking state [ 829.549105][ T4259] bridge0: port 2(bridge_slave_1) entered forwarding state [ 829.564729][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 829.592515][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 829.603972][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 829.633086][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 829.658100][T28048] netlink: 'syz.2.8810': attribute type 21 has an invalid length. [ 829.684828][T28048] netlink: 'syz.2.8810': attribute type 6 has an invalid length. [ 829.708435][T28048] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8810'. [ 829.776819][T28044] netlink: 'syz.3.8799': attribute type 4 has an invalid length. [ 829.788621][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 829.810305][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 829.882708][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 829.908558][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 829.929181][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 829.954684][T28048] netlink: 'syz.2.8810': attribute type 10 has an invalid length. [ 829.971536][T28048] netlink: 156 bytes leftover after parsing attributes in process `syz.2.8810'. [ 830.013462][T27893] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 830.043100][T27893] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 830.063181][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 830.074337][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 830.415142][T28074] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8807'. [ 830.437576][T28074] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8807'. [ 830.607612][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 830.622845][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 830.664544][T27893] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 830.727672][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 830.747377][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 830.815691][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 830.825625][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 830.849328][T28097] netlink: 'syz.2.8816': attribute type 10 has an invalid length. [ 830.865061][T27893] device veth0_vlan entered promiscuous mode [ 830.882318][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 830.891481][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 830.936602][T27893] device veth1_vlan entered promiscuous mode [ 831.010497][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 831.030836][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 831.102742][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 831.138229][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 831.168653][T27893] device veth0_macvtap entered promiscuous mode [ 831.191304][T24706] Bluetooth: hci1: command 0x040f tx timeout [ 831.242625][T27893] device veth1_macvtap entered promiscuous mode [ 831.306671][T27893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 831.331177][T27893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 831.361154][T27893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 831.378402][T28126] netlink: 'syz.4.8829': attribute type 3 has an invalid length. [ 831.422195][T27893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 831.433640][T28126] __nla_validate_parse: 2 callbacks suppressed [ 831.433656][T28126] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.8829'. [ 831.449338][T27893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 831.460378][T27893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 831.472854][T27893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 831.483977][T27893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 831.504676][T27893] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 831.544374][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 831.566270][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 831.615727][T27893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 831.649379][T27893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 831.687401][T27893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 831.721950][T27893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 831.761311][T27893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 831.798843][T27893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 831.835694][T27893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 831.883382][T27893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 831.925966][T27893] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 831.959954][T28128] netlink: 144 bytes leftover after parsing attributes in process `syz.0.8828'. [ 831.977666][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 831.996656][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 832.036918][T27893] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 832.073899][T27893] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 832.103859][T27893] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 832.141148][T27893] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 832.249392][T28145] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8835'. [ 832.434335][T12714] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 832.483752][T28156] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8840'. [ 832.494528][T12714] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 832.530672][T12714] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 832.561855][T12714] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 832.571285][T12714] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 832.624713][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 832.664640][T28167] netlink: 'syz.3.8844': attribute type 3 has an invalid length. [ 832.761231][T28167] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.8844'. [ 833.050043][T28174] netlink: 144 bytes leftover after parsing attributes in process `syz.3.8846'. [ 833.154751][T28183] netlink: 'syz.0.8850': attribute type 21 has an invalid length. [ 833.183658][T28183] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 833.190925][T28183] IPv6: NLM_F_CREATE should be set when creating new route [ 833.198348][T28183] IPv6: NLM_F_CREATE should be set when creating new route [ 833.205797][T28183] IPv6: NLM_F_CREATE should be set when creating new route [ 833.268931][T28187] netlink: 'syz.1.8852': attribute type 3 has an invalid length. [ 833.271852][T18410] Bluetooth: hci1: command 0x0419 tx timeout [ 833.287919][T28187] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8852'. [ 833.314433][T28189] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8853'. [ 833.354830][T28189] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8853'. [ 833.381735][T28191] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8853'. [ 833.395512][T28189] sock: sock_timestamping_bind_phc: sock not bind to device [ 833.692853][T28207] netlink: 'syz.2.8859': attribute type 10 has an invalid length. [ 834.737844][T28248] validate_nla: 1 callbacks suppressed [ 834.737876][T28248] netlink: 'syz.4.8877': attribute type 6 has an invalid length. [ 834.761647][T28255] netlink: 'syz.0.8879': attribute type 4 has an invalid length. [ 835.033021][T28263] device lo entered promiscuous mode [ 836.680624][T28336] netlink: 'syz.4.8908': attribute type 4 has an invalid length. [ 836.836128][T28338] __nla_validate_parse: 5 callbacks suppressed [ 836.836146][T28338] netlink: 144 bytes leftover after parsing attributes in process `syz.3.8911'. [ 837.261601][T28361] netlink: 'syz.3.8921': attribute type 29 has an invalid length. [ 837.276863][T28361] netlink: 'syz.3.8921': attribute type 29 has an invalid length. [ 838.074734][T28386] netlink: 144 bytes leftover after parsing attributes in process `syz.4.8927'. [ 838.499276][T28421] FAULT_INJECTION: forcing a failure. [ 838.499276][T28421] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 838.681540][T28421] CPU: 1 PID: 28421 Comm: syz.2.8941 Not tainted syzkaller #0 [ 838.689062][T28421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 838.699140][T28421] Call Trace: [ 838.702444][T28421] [ 838.705390][T28421] dump_stack_lvl+0x188/0x250 [ 838.710093][T28421] ? show_regs_print_info+0x20/0x20 [ 838.715314][T28421] ? load_image+0x400/0x400 [ 838.719861][T28421] ? __lock_acquire+0x7d10/0x7d10 [ 838.724923][T28421] should_fail+0x38c/0x4c0 [ 838.729370][T28421] _copy_to_user+0x2e/0x130 [ 838.733920][T28421] bpf_test_finish+0x1b7/0x2f0 [ 838.738709][T28421] ? convert_skb_to___skb+0x360/0x360 [ 838.744100][T28421] ? ktime_get+0x247/0x270 [ 838.748540][T28421] bpf_prog_test_run_flow_dissector+0x509/0x630 [ 838.754818][T28421] ? xdp_convert_buff_to_md+0x1e0/0x1e0 [ 838.760412][T28421] ? xdp_convert_buff_to_md+0x1e0/0x1e0 [ 838.765975][T28421] bpf_prog_test_run+0x31e/0x390 [ 838.770954][T28421] __sys_bpf+0x5a5/0x6f0 [ 838.775222][T28421] ? bpf_link_show_fdinfo+0x380/0x380 [ 838.780616][T28421] ? rcu_nmi_exit+0x6f/0xf0 [ 838.785149][T28421] ? vtime_user_exit+0x2c8/0x3e0 [ 838.790116][T28421] __x64_sys_bpf+0x78/0x90 [ 838.794579][T28421] do_syscall_64+0x4c/0xa0 [ 838.799024][T28421] ? clear_bhb_loop+0x30/0x80 [ 838.803751][T28421] ? clear_bhb_loop+0x30/0x80 [ 838.808479][T28421] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 838.814409][T28421] RIP: 0033:0x7f759492feb9 [ 838.818846][T28421] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 838.838660][T28421] RSP: 002b:00007f7592b8b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 838.847103][T28421] RAX: ffffffffffffffda RBX: 00007f7594baafa0 RCX: 00007f759492feb9 [ 838.855135][T28421] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 000000000000000a [ 838.863126][T28421] RBP: 00007f7592b8b090 R08: 0000000000000000 R09: 0000000000000000 [ 838.871119][T28421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 838.879109][T28421] R13: 00007f7594bab038 R14: 00007f7594baafa0 R15: 00007ffea6a4c708 [ 838.887208][T28421] [ 838.941904][T28426] netlink: 144 bytes leftover after parsing attributes in process `syz.0.8943'. [ 839.186365][T28436] bridge0: port 3(team0) entered blocking state [ 839.202175][T28436] bridge0: port 3(team0) entered disabled state [ 839.221534][T28436] device team0 entered promiscuous mode [ 839.227138][T28436] device team_slave_0 entered promiscuous mode [ 839.252580][T28436] device team_slave_1 entered promiscuous mode [ 839.292936][T28436] bridge0: port 3(team0) entered blocking state [ 839.299290][T28436] bridge0: port 3(team0) entered forwarding state [ 839.904711][T28457] netlink: 144 bytes leftover after parsing attributes in process `syz.0.8955'. [ 840.081661][T28460] netlink: 'syz.4.8954': attribute type 4 has an invalid length. [ 841.028789][T28504] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 841.036243][T28504] IPv6: NLM_F_CREATE should be set when creating new route [ 841.043637][T28504] IPv6: NLM_F_CREATE should be set when creating new route [ 841.050888][T28504] IPv6: NLM_F_CREATE should be set when creating new route [ 841.086685][T28505] netlink: 'syz.4.8969': attribute type 10 has an invalid length. [ 841.574254][T28535] netlink: 'syz.2.8982': attribute type 10 has an invalid length. [ 842.260457][T28576] device wlan0 entered promiscuous mode [ 842.290997][T28569] netlink: 'syz.1.8995': attribute type 9 has an invalid length. [ 842.318582][T28569] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.8995'. [ 842.429729][T28575] netlink: 60 bytes leftover after parsing attributes in process `syz.4.8994'. [ 842.763684][T28592] netlink: 'syz.2.9002': attribute type 3 has an invalid length. [ 842.776620][T28592] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9002'. [ 842.805770][T28588] netlink: 'syz.0.9000': attribute type 4 has an invalid length. [ 843.393312][T28607] netlink: 60 bytes leftover after parsing attributes in process `syz.1.9008'. [ 843.399746][T28611] netlink: 'syz.4.9009': attribute type 10 has an invalid length. [ 844.192389][T28620] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 844.215129][T28620] device syzkaller0 entered promiscuous mode [ 844.515701][T28643] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.9022'. [ 845.215080][T28661] netlink: 144 bytes leftover after parsing attributes in process `syz.2.9030'. [ 845.254330][T28672] netlink: 'syz.0.9032': attribute type 10 has an invalid length. [ 846.752325][T28707] netlink: 144 bytes leftover after parsing attributes in process `syz.1.9048'. [ 847.917085][T28757] netlink: 'syz.4.9062': attribute type 3 has an invalid length. [ 847.965509][T28757] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.9062'. [ 848.767484][T28784] netlink: 14593 bytes leftover after parsing attributes in process `syz.0.9071'. [ 849.442842][T28798] device syzkaller0 entered promiscuous mode [ 849.543068][T28803] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.9079'. [ 850.363203][T28833] netlink: 'syz.1.9089': attribute type 4 has an invalid length. [ 850.403768][T28833] netlink: 152 bytes leftover after parsing attributes in process `syz.1.9089'. [ 850.549361][T28833] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 851.016019][T28856] netlink: 212168 bytes leftover after parsing attributes in process `syz.1.9100'. [ 851.429321][T28858] netlink: 144 bytes leftover after parsing attributes in process `syz.0.9099'. [ 851.576880][T28870] netlink: 'syz.2.9105': attribute type 4 has an invalid length. [ 851.611600][T28870] netlink: 152 bytes leftover after parsing attributes in process `syz.2.9105'. [ 851.872738][T28870] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 852.468694][T28898] mac80211_hwsim hwsim60 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 853.279245][T28920] netlink: 'syz.2.9123': attribute type 4 has an invalid length. [ 853.410502][T28926] device syzkaller0 entered promiscuous mode [ 853.445463][T28931] FAULT_INJECTION: forcing a failure. [ 853.445463][T28931] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 853.569841][T28931] CPU: 0 PID: 28931 Comm: syz.3.9127 Not tainted syzkaller #0 [ 853.577372][T28931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 853.587450][T28931] Call Trace: [ 853.590771][T28931] [ 853.593746][T28931] dump_stack_lvl+0x188/0x250 [ 853.598471][T28931] ? show_regs_print_info+0x20/0x20 [ 853.603707][T28931] ? load_image+0x400/0x400 [ 853.608293][T28931] ? __lock_acquire+0x7d10/0x7d10 [ 853.613376][T28931] should_fail+0x38c/0x4c0 [ 853.617854][T28931] _copy_from_user+0x2e/0x170 [ 853.622569][T28931] __copy_msghdr_from_user+0xc9/0x630 [ 853.627971][T28931] ? verify_lock_unused+0x140/0x140 [ 853.633211][T28931] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 853.638552][T28931] ? perf_trace_run_bpf_submit+0x1c0/0x1c0 [ 853.644409][T28931] ___sys_sendmsg+0x19a/0x2e0 [ 853.649145][T28931] ? __sys_sendmsg+0x2a0/0x2a0 [ 853.654024][T28931] __se_sys_sendmsg+0x1af/0x290 [ 853.658916][T28931] ? __x64_sys_sendmsg+0x80/0x80 [ 853.663879][T28931] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 853.669931][T28931] ? lockdep_hardirqs_on+0x94/0x140 [ 853.675168][T28931] do_syscall_64+0x4c/0xa0 [ 853.679614][T28931] ? clear_bhb_loop+0x30/0x80 [ 853.684317][T28931] ? clear_bhb_loop+0x30/0x80 [ 853.689050][T28931] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 853.694981][T28931] RIP: 0033:0x7fa01152deb9 [ 853.699433][T28931] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 853.719063][T28931] RSP: 002b:00007fa00f789028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 853.727511][T28931] RAX: ffffffffffffffda RBX: 00007fa0117a8fa0 RCX: 00007fa01152deb9 [ 853.735651][T28931] RDX: 0000000020000001 RSI: 0000200000000780 RDI: 0000000000000004 [ 853.743660][T28931] RBP: 00007fa00f789090 R08: 0000000000000000 R09: 0000000000000000 [ 853.751661][T28931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 853.759672][T28931] R13: 00007fa0117a9038 R14: 00007fa0117a8fa0 R15: 00007fff3250c088 [ 853.767713][T28931] [ 854.170679][T28937] netlink: 144 bytes leftover after parsing attributes in process `syz.0.9129'. [ 854.643546][T12714] wlan1: Trigger new scan to find an IBSS to join [ 854.975971][T28957] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 854.983282][T28957] IPv6: NLM_F_CREATE should be set when creating new route [ 855.125831][T28969] netlink: 'syz.2.9142': attribute type 10 has an invalid length. [ 856.180272][T29004] netlink: 'syz.1.9155': attribute type 153 has an invalid length. [ 856.221612][T29004] netlink: 69544 bytes leftover after parsing attributes in process `syz.1.9155'. [ 856.515874][T29023] netlink: 'syz.2.9161': attribute type 3 has an invalid length. [ 856.551029][T29020] netlink: 'syz.0.9157': attribute type 3 has an invalid length. [ 856.591260][T29023] netlink: 'syz.2.9161': attribute type 1 has an invalid length. [ 856.607860][T29020] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.9157'. [ 856.660469][T29023] netlink: 193404 bytes leftover after parsing attributes in process `syz.2.9161'. [ 857.134336][T29026] netlink: 'syz.3.9162': attribute type 1 has an invalid length. [ 857.178134][T29038] netlink: 'syz.2.9167': attribute type 3 has an invalid length. [ 857.193659][T29026] netlink: 'syz.3.9162': attribute type 4 has an invalid length. [ 857.208664][T29038] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9167'. [ 857.249943][T29026] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.9162'. [ 857.328648][T29034] netlink: 48 bytes leftover after parsing attributes in process `syz.1.9165'. [ 857.374379][T29042] netlink: 'syz.4.9169': attribute type 4 has an invalid length. [ 857.501413][T29051] netlink: 'syz.1.9172': attribute type 3 has an invalid length. [ 857.509204][T29051] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.9172'. [ 857.537613][T29054] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9173'. [ 858.405472][T29077] netlink: 'syz.2.9181': attribute type 10 has an invalid length. [ 858.660568][T29078] netlink: 144 bytes leftover after parsing attributes in process `syz.0.9180'. [ 859.232295][T29120] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9200'. [ 859.560370][T29132] netlink: 144 bytes leftover after parsing attributes in process `syz.1.9204'. [ 860.076443][T29153] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.9212'. [ 860.521096][T29166] netlink: 144 bytes leftover after parsing attributes in process `syz.3.9216'. [ 860.542914][T29164] netlink: 2418 bytes leftover after parsing attributes in process `syz.1.9215'. [ 861.126783][T29173] chnl_net:caif_netlink_parms(): no params data found [ 861.179659][T29186] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9220'. [ 861.366174][T29173] bridge0: port 1(bridge_slave_0) entered blocking state [ 861.374426][T29173] bridge0: port 1(bridge_slave_0) entered disabled state [ 861.383209][T29173] device bridge_slave_0 entered promiscuous mode [ 861.483473][T29173] bridge0: port 2(bridge_slave_1) entered blocking state [ 861.490581][T29173] bridge0: port 2(bridge_slave_1) entered disabled state [ 861.626694][T29173] device bridge_slave_1 entered promiscuous mode [ 861.647174][T29202] validate_nla: 3 callbacks suppressed [ 861.647193][T29202] netlink: 'syz.1.9225': attribute type 21 has an invalid length. [ 861.662662][T29202] netlink: 128 bytes leftover after parsing attributes in process `syz.1.9225'. [ 861.673165][T29202] netlink: 'syz.1.9225': attribute type 4 has an invalid length. [ 861.682867][T29202] netlink: 'syz.1.9225': attribute type 5 has an invalid length. [ 861.690951][T29202] netlink: 3 bytes leftover after parsing attributes in process `syz.1.9225'. [ 861.722176][T29204] netlink: 'syz.3.9226': attribute type 3 has an invalid length. [ 861.804789][T29173] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 861.812271][T29204] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.9226'. [ 861.928392][T29173] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 862.024163][T29173] team0: Port device team_slave_0 added [ 862.052732][T29173] team0: Port device team_slave_1 added [ 862.123612][T29173] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 862.130642][T29173] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 862.220131][T29173] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 862.268024][T29173] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 862.304366][T29173] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 862.335825][T29173] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 862.534376][T29173] device hsr_slave_0 entered promiscuous mode [ 862.565314][T29173] device hsr_slave_1 entered promiscuous mode [ 862.585445][T29173] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 862.622260][T29173] Cannot create hsr debugfs directory [ 862.711704][T24706] Bluetooth: hci5: command 0x0409 tx timeout [ 862.887844][ T4259] tipc: Subscription rejected, illegal request [ 862.996291][T29173] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 863.088888][T29173] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 863.235991][T29173] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 863.323092][T29252] netlink: 144 bytes leftover after parsing attributes in process `syz.4.9247'. [ 863.387500][T29173] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 863.528171][T29272] netlink: 'syz.4.9256': attribute type 10 has an invalid length. [ 863.616461][T29173] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 863.753876][T29173] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 863.800537][T29173] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 863.852852][T29173] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 864.074010][T29298] bridge0: port 3(bond0) entered disabled state [ 864.170687][T29298] device bridge_slave_1 left promiscuous mode [ 864.178268][T29298] bridge0: port 2(bridge_slave_1) entered disabled state [ 864.187636][T29298] device bridge_slave_0 left promiscuous mode [ 864.194304][T29298] bridge0: port 1(bridge_slave_0) entered disabled state [ 864.377747][T29173] 8021q: adding VLAN 0 to HW filter on device bond0 [ 864.424022][T12714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 864.449092][T12714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 864.485655][T29173] 8021q: adding VLAN 0 to HW filter on device team0 [ 864.571339][T12714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 864.602870][T12714] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 864.623030][T12714] bridge0: port 1(bridge_slave_0) entered blocking state [ 864.630241][T12714] bridge0: port 1(bridge_slave_0) entered forwarding state [ 864.658955][T29311] __nla_validate_parse: 2 callbacks suppressed [ 864.658977][T29311] netlink: 144 bytes leftover after parsing attributes in process `syz.2.9266'. [ 864.732217][T12714] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 864.772039][T12714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 864.789896][T12714] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 864.791704][ T4256] Bluetooth: hci5: command 0x041b tx timeout [ 864.819381][T12714] bridge0: port 2(bridge_slave_1) entered blocking state [ 864.826500][T12714] bridge0: port 2(bridge_slave_1) entered forwarding state [ 864.851296][T12714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 864.881236][T12714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 864.921893][T29322] netlink: 'syz.4.9271': attribute type 1 has an invalid length. [ 864.942060][T29322] netlink: 16150 bytes leftover after parsing attributes in process `syz.4.9271'. [ 864.998962][T29329] netlink: 40227 bytes leftover after parsing attributes in process `syz.2.9273'. [ 865.025756][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 865.055680][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 865.082476][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 865.094296][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 865.115286][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 865.148289][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 865.318462][T29173] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 865.331199][T29173] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 865.343471][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 865.354272][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 865.366022][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 865.376937][T29343] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9279'. [ 865.418199][T29345] netlink: 144 bytes leftover after parsing attributes in process `syz.1.9280'. [ 865.494366][T29351] netlink: 140 bytes leftover after parsing attributes in process `syz.2.9282'. [ 865.536222][T29351] netlink: 6 bytes leftover after parsing attributes in process `syz.2.9282'. [ 865.578719][T29354] netlink: 'syz.1.9283': attribute type 10 has an invalid length. [ 865.711447][T29364] netlink: 40227 bytes leftover after parsing attributes in process `syz.3.9286'. [ 865.893425][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 865.901046][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 865.924333][T29173] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 865.956399][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 865.972056][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 866.041347][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 866.067307][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 866.089345][T29173] device veth0_vlan entered promiscuous mode [ 866.102973][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 866.124256][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 866.141908][T29173] device veth1_vlan entered promiscuous mode [ 866.225439][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 866.249340][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 866.259040][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 866.268386][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 866.292790][T29173] device veth0_macvtap entered promiscuous mode [ 866.364145][T29173] device veth1_macvtap entered promiscuous mode [ 866.393016][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 866.412824][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 866.516951][T29173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 866.553993][T29173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 866.586989][T29173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 866.613449][T29173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 866.636678][T29173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 866.693347][T29173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 866.710834][T29173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 866.730902][T29173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 866.750438][T29173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 866.771383][T29173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 866.795299][T29173] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 866.829676][T29405] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9300'. [ 866.854948][T29387] netlink: 'syz.3.9295': attribute type 39 has an invalid length. [ 866.873337][ T4256] Bluetooth: hci5: command 0x040f tx timeout [ 866.895820][T29387] device veth0_macvtap left promiscuous mode [ 867.092763][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 867.122256][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 867.173175][T29173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 867.220813][T29173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 867.261277][T29173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 867.311081][T29173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 867.341987][T29173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 867.373628][T29173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 867.401184][T29173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 867.441370][T29173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 867.467090][T29173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 867.486637][T29173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 867.522111][T29173] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 867.571370][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 867.590790][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 867.633110][T29173] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 867.664164][T29173] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 867.696671][T29173] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 867.720295][T29173] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 867.729481][T29427] netlink: 'syz.3.9308': attribute type 3 has an invalid length. [ 867.763832][T29426] netlink: 60 bytes leftover after parsing attributes in process `syz.1.9307'. [ 867.977002][ T4316] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 867.996368][ T4316] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 868.031027][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 868.173282][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 868.208399][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 868.286370][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 868.953691][T18414] Bluetooth: hci5: command 0x0419 tx timeout [ 868.983899][T29476] device wlan0 left promiscuous mode [ 869.046673][T29476] device wlan0 entered promiscuous mode [ 869.833203][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.839589][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.007494][T29523] netlink: 'syz.3.9346': attribute type 1 has an invalid length. [ 870.018796][T29523] __nla_validate_parse: 3 callbacks suppressed [ 870.018810][T29523] netlink: 112865 bytes leftover after parsing attributes in process `syz.3.9346'. [ 870.109335][T29518] netlink: 144 bytes leftover after parsing attributes in process `syz.4.9344'. [ 871.427899][T29558] netlink: 144 bytes leftover after parsing attributes in process `syz.1.9360'. [ 871.850716][T29599] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 871.907930][T29599] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.9379'. [ 871.982511][T29602] netlink: 144 bytes leftover after parsing attributes in process `syz.0.9380'. [ 872.275632][T29629] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.9392'. [ 872.695676][T29652] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 872.712401][T29654] FAULT_INJECTION: forcing a failure. [ 872.712401][T29654] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 872.746649][T29654] CPU: 0 PID: 29654 Comm: syz.1.9403 Not tainted syzkaller #0 [ 872.754255][T29654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 872.764341][T29654] Call Trace: [ 872.767640][T29654] [ 872.770586][T29654] dump_stack_lvl+0x188/0x250 [ 872.775279][T29654] ? show_regs_print_info+0x20/0x20 [ 872.780514][T29654] ? load_image+0x400/0x400 [ 872.785035][T29654] ? __lock_acquire+0x7d10/0x7d10 [ 872.790064][T29654] ? perf_trace_lock_acquire+0xed/0x3e0 [ 872.795629][T29654] should_fail+0x38c/0x4c0 [ 872.800070][T29654] _copy_from_user+0x2e/0x170 [ 872.804760][T29654] __copy_msghdr_from_user+0xc9/0x630 [ 872.810146][T29654] ? verify_lock_unused+0x140/0x140 [ 872.815376][T29654] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 872.820698][T29654] ___sys_sendmsg+0x19a/0x2e0 [ 872.825407][T29654] ? __sys_sendmsg+0x2a0/0x2a0 [ 872.830203][T29654] ? vfs_write+0x8b2/0xd60 [ 872.834647][T29654] __se_sys_sendmsg+0x1af/0x290 [ 872.839514][T29654] ? __x64_sys_sendmsg+0x80/0x80 [ 872.844814][T29654] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 872.850819][T29654] ? lockdep_hardirqs_on+0x94/0x140 [ 872.856030][T29654] do_syscall_64+0x4c/0xa0 [ 872.860446][T29654] ? clear_bhb_loop+0x30/0x80 [ 872.865215][T29654] ? clear_bhb_loop+0x30/0x80 [ 872.869904][T29654] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 872.875809][T29654] RIP: 0033:0x7fc614212eb9 [ 872.880233][T29654] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 872.900193][T29654] RSP: 002b:00007fc61246e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 872.908620][T29654] RAX: ffffffffffffffda RBX: 00007fc61448dfa0 RCX: 00007fc614212eb9 [ 872.916693][T29654] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 872.924767][T29654] RBP: 00007fc61246e090 R08: 0000000000000000 R09: 0000000000000000 [ 872.932746][T29654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 872.940726][T29654] R13: 00007fc61448e038 R14: 00007fc61448dfa0 R15: 00007ffc9062bed8 [ 872.948737][T29654] [ 872.960966][T29655] device syzkaller0 left promiscuous mode [ 873.218361][T29662] netlink: 'syz.1.9406': attribute type 2 has an invalid length. [ 873.243500][T29662] netlink: 'syz.1.9406': attribute type 1 has an invalid length. [ 873.260765][T29662] netlink: 'syz.1.9406': attribute type 1 has an invalid length. [ 873.272125][T29662] netlink: 'syz.1.9406': attribute type 11 has an invalid length. [ 873.293284][T29662] netlink: 198172 bytes leftover after parsing attributes in process `syz.1.9406'. [ 873.463389][T29677] FAULT_INJECTION: forcing a failure. [ 873.463389][T29677] name failslab, interval 1, probability 0, space 0, times 0 [ 873.500616][T29677] CPU: 0 PID: 29677 Comm: syz.0.9411 Not tainted syzkaller #0 [ 873.508174][T29677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 873.518262][T29677] Call Trace: [ 873.521572][T29677] [ 873.524535][T29677] dump_stack_lvl+0x188/0x250 [ 873.529252][T29677] ? show_regs_print_info+0x20/0x20 [ 873.534493][T29677] ? load_image+0x400/0x400 [ 873.539029][T29677] ? __might_sleep+0xf0/0xf0 [ 873.543664][T29677] ? __lock_acquire+0x7d10/0x7d10 [ 873.548729][T29677] should_fail+0x38c/0x4c0 [ 873.553194][T29677] should_failslab+0x5/0x20 [ 873.557727][T29677] slab_pre_alloc_hook+0x51/0xc0 [ 873.562707][T29677] kmem_cache_alloc_trace+0x47/0x2a0 [ 873.568021][T29677] ? tcp_sendmsg_fastopen+0x1d5/0x600 [ 873.573451][T29677] tcp_sendmsg_fastopen+0x1d5/0x600 [ 873.578729][T29677] tcp_sendmsg_locked+0x30cc/0x35f0 [ 873.583965][T29677] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 873.589721][T29677] ? mark_lock+0x94/0x320 [ 873.594077][T29677] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 873.600083][T29677] ? lock_chain_count+0x20/0x20 [ 873.604970][T29677] ? tcp_free_fastopen_req+0x70/0x70 [ 873.610297][T29677] tcp_sendmsg+0x2b/0x40 [ 873.614550][T29677] ? inet6_compat_ioctl+0x3c0/0x3c0 [ 873.619761][T29677] ____sys_sendmsg+0x5b7/0x8f0 [ 873.624553][T29677] ? __sys_sendmsg_sock+0x30/0x30 [ 873.629601][T29677] ? import_iovec+0x6f/0xa0 [ 873.634133][T29677] ___sys_sendmsg+0x236/0x2e0 [ 873.638847][T29677] ? __sys_sendmsg+0x2a0/0x2a0 [ 873.643692][T29677] __se_sys_sendmsg+0x1af/0x290 [ 873.648586][T29677] ? __x64_sys_sendmsg+0x80/0x80 [ 873.653540][T29677] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 873.659556][T29677] ? lockdep_hardirqs_on+0x94/0x140 [ 873.664785][T29677] do_syscall_64+0x4c/0xa0 [ 873.669216][T29677] ? clear_bhb_loop+0x30/0x80 [ 873.674023][T29677] ? clear_bhb_loop+0x30/0x80 [ 873.678726][T29677] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 873.684644][T29677] RIP: 0033:0x7f51d6865eb9 [ 873.689079][T29677] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 873.708693][T29677] RSP: 002b:00007f51d4ac1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 873.717126][T29677] RAX: ffffffffffffffda RBX: 00007f51d6ae0fa0 RCX: 00007f51d6865eb9 [ 873.725116][T29677] RDX: 0000000020000001 RSI: 0000200000000780 RDI: 0000000000000004 [ 873.733196][T29677] RBP: 00007f51d4ac1090 R08: 0000000000000000 R09: 0000000000000000 [ 873.741180][T29677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 873.749162][T29677] R13: 00007f51d6ae1038 R14: 00007f51d6ae0fa0 R15: 00007ffc41c2b4d8 [ 873.757166][T29677] [ 873.828407][T29684] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 873.835742][T29684] IPv6: NLM_F_CREATE should be set when creating new route [ 874.023580][T29682] netlink: 'syz.1.9413': attribute type 10 has an invalid length. [ 874.252317][T29701] netlink: 'syz.1.9418': attribute type 10 has an invalid length. [ 874.394125][T29701] device veth0_vlan left promiscuous mode [ 874.426544][T29701] device veth0_vlan entered promiscuous mode [ 874.442416][T29701] team0: Device veth0_vlan failed to register rx_handler [ 874.769934][T29720] netlink: 'syz.3.9427': attribute type 10 has an invalid length. [ 874.787326][T29720] device hsr_slave_0 left promiscuous mode [ 874.796810][T29720] device hsr_slave_1 left promiscuous mode [ 874.944770][T29693] chnl_net:caif_netlink_parms(): no params data found [ 875.223873][T29747] FAULT_INJECTION: forcing a failure. [ 875.223873][T29747] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 875.238399][T29747] CPU: 1 PID: 29747 Comm: syz.0.9435 Not tainted syzkaller #0 [ 875.245921][T29747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 875.256091][T29747] Call Trace: [ 875.259401][T29747] [ 875.262355][T29747] dump_stack_lvl+0x188/0x250 [ 875.267060][T29747] ? show_regs_print_info+0x20/0x20 [ 875.272283][T29747] ? load_image+0x400/0x400 [ 875.276822][T29747] ? __lock_acquire+0x7d10/0x7d10 [ 875.281930][T29747] should_fail+0x38c/0x4c0 [ 875.286381][T29747] _copy_from_user+0x2e/0x170 [ 875.291126][T29747] __sys_bpf+0x26d/0x6f0 [ 875.295414][T29747] ? bpf_link_show_fdinfo+0x380/0x380 [ 875.300833][T29747] ? vtime_user_exit+0x2c8/0x3e0 [ 875.305815][T29747] __x64_sys_bpf+0x78/0x90 [ 875.310272][T29747] do_syscall_64+0x4c/0xa0 [ 875.314716][T29747] ? clear_bhb_loop+0x30/0x80 [ 875.319419][T29747] ? clear_bhb_loop+0x30/0x80 [ 875.324131][T29747] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 875.330047][T29747] RIP: 0033:0x7f51d6865eb9 [ 875.334487][T29747] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 875.354115][T29747] RSP: 002b:00007f51d4aa0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 875.362557][T29747] RAX: ffffffffffffffda RBX: 00007f51d6ae1090 RCX: 00007f51d6865eb9 [ 875.370551][T29747] RDX: 0000000000000090 RSI: 00002000000000c0 RDI: 0000000000000005 [ 875.378538][T29747] RBP: 00007f51d4aa0090 R08: 0000000000000000 R09: 0000000000000000 [ 875.386571][T29747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 875.394561][T29747] R13: 00007f51d6ae1128 R14: 00007f51d6ae1090 R15: 00007ffc41c2b4d8 [ 875.402654][T29747] [ 875.427575][T29751] netlink: 144 bytes leftover after parsing attributes in process `syz.3.9434'. [ 875.460715][T29693] bridge0: port 1(bridge_slave_0) entered blocking state [ 875.470788][T29693] bridge0: port 1(bridge_slave_0) entered disabled state [ 875.489633][T29693] device bridge_slave_0 entered promiscuous mode [ 875.506093][T29693] bridge0: port 2(bridge_slave_1) entered blocking state [ 875.519050][T29693] bridge0: port 2(bridge_slave_1) entered disabled state [ 875.537984][T29693] device bridge_slave_1 entered promiscuous mode [ 875.590226][T29693] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 875.620505][T29693] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 875.731306][T29693] team0: Port device team_slave_0 added [ 875.759564][T29693] team0: Port device team_slave_1 added [ 875.857900][T29693] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 875.880387][T29693] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 875.941319][T29693] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 875.992145][T29693] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 875.999130][T29693] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 876.036931][T29693] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 876.096207][T29765] netlink: 10 bytes leftover after parsing attributes in process `syz.1.9442'. [ 876.152269][ T4256] Bluetooth: hci0: command 0x0409 tx timeout [ 876.172993][T29693] device hsr_slave_0 entered promiscuous mode [ 876.202779][T29693] device hsr_slave_1 entered promiscuous mode [ 876.815595][T29693] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 876.852963][T29780] netlink: 'syz.2.9448': attribute type 10 has an invalid length. [ 876.898898][T29780] device geneve0 entered promiscuous mode [ 876.987477][T29780] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 877.095477][T29693] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 877.144327][T29790] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9452'. [ 877.279131][T29693] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 877.367470][T29693] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 877.570732][T29693] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 877.860564][T29693] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 877.889700][T29693] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 877.904198][T29693] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 878.199094][T29693] 8021q: adding VLAN 0 to HW filter on device bond0 [ 878.218536][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 878.238004][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 878.245779][ T4292] Bluetooth: hci0: command 0x041b tx timeout [ 878.294821][T29693] 8021q: adding VLAN 0 to HW filter on device team0 [ 878.319022][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 878.346503][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 878.359683][ T4278] bridge0: port 1(bridge_slave_0) entered blocking state [ 878.366838][ T4278] bridge0: port 1(bridge_slave_0) entered forwarding state [ 878.383494][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 878.424447][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 878.457788][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 878.499227][ T4278] bridge0: port 2(bridge_slave_1) entered blocking state [ 878.506426][ T4278] bridge0: port 2(bridge_slave_1) entered forwarding state [ 878.569268][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 878.602278][T12714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 878.615788][T29849] device syzkaller0 entered promiscuous mode [ 878.661166][T12714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 878.681883][T12714] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 878.690935][T12714] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 878.727694][T12714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 878.759433][T12714] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 878.775996][T12714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 878.785043][T12714] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 878.818961][T29693] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 878.868401][T29693] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 878.934915][T12714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 878.946511][T12714] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 878.957468][T29861] netlink: 'syz.0.9474': attribute type 10 has an invalid length. [ 878.968184][T29861] device geneve0 entered promiscuous mode [ 879.020470][T29861] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 879.304272][T29866] netlink: 144 bytes leftover after parsing attributes in process `syz.3.9478'. [ 879.348269][T29693] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 879.378847][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 879.395920][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 879.528331][T29878] netlink: 144 bytes leftover after parsing attributes in process `syz.0.9490'. [ 880.005045][T12714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 880.030660][T12714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 880.056352][T29907] netlink: 'syz.1.9487': attribute type 10 has an invalid length. [ 880.066344][T29907] device geneve0 entered promiscuous mode [ 880.199745][T29907] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 880.255076][T12714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 880.276891][T12714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 880.305135][T29693] device veth0_vlan entered promiscuous mode [ 880.311622][ T4239] Bluetooth: hci0: command 0x040f tx timeout [ 880.333977][T12714] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 880.350448][T12714] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 880.388182][T29693] device veth1_vlan entered promiscuous mode [ 880.489029][T12714] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 880.498105][T12714] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 880.513888][T12714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 880.532293][T12714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 880.554402][T29693] device veth0_macvtap entered promiscuous mode [ 880.565707][T29924] netlink: 15119 bytes leftover after parsing attributes in process `syz.1.9495'. [ 880.737879][T29693] device veth1_macvtap entered promiscuous mode [ 880.824745][T12714] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 880.846080][T12714] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 881.048767][T29693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 881.089144][T29693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 881.128531][T29693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 881.149301][T29693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 881.162689][T29952] syz.1.9504[29952] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 881.162789][T29952] syz.1.9504[29952] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 881.169815][T29693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 881.237016][T29693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 881.257281][T29693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 881.278035][T29693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 881.298341][T29693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 881.319153][T29693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 881.330780][T29693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 881.342154][T29693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 881.357727][T29693] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 881.371293][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 881.389951][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 881.415345][T29693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 881.428901][T29693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 881.440486][T29693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 881.452484][T29693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 881.471243][T29693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 881.482245][T29693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 881.492624][T29693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 881.503195][T29693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 881.517401][T29693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 881.530112][T29693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 881.550999][T29693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 881.571561][T29693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 881.604146][T29693] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 881.638001][T12714] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 881.648943][T12714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 881.676929][T29693] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 881.701643][T29693] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 881.717415][T29693] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 881.736708][T29693] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 881.815344][T29966] netlink: 'syz.1.9508': attribute type 2 has an invalid length. [ 881.870022][T29968] netlink: 144 bytes leftover after parsing attributes in process `syz.2.9510'. [ 882.027037][ T4259] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 882.048724][ T4259] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 882.103005][T29977] netlink: 209820 bytes leftover after parsing attributes in process `syz.1.9513'. [ 882.117934][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 882.138976][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 882.163414][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 882.214020][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 882.391605][ T4274] Bluetooth: hci0: command 0x0419 tx timeout [ 882.958555][T30007] netlink: 144 bytes leftover after parsing attributes in process `syz.3.9524'. [ 883.557622][T30040] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.9538'. [ 883.927444][T30051] netlink: 144 bytes leftover after parsing attributes in process `syz.3.9541'. [ 884.084729][T30058] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 884.092057][T30058] IPv6: NLM_F_CREATE should be set when creating new route [ 884.392654][T30067] netlink: 'syz.1.9547': attribute type 4 has an invalid length. [ 884.667679][T30071] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9550'. [ 884.893988][T30081] FAULT_INJECTION: forcing a failure. [ 884.893988][T30081] name failslab, interval 1, probability 0, space 0, times 0 [ 884.907291][T30081] CPU: 0 PID: 30081 Comm: syz.2.9552 Not tainted syzkaller #0 [ 884.914809][T30081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 884.924901][T30081] Call Trace: [ 884.928210][T30081] [ 884.931169][T30081] dump_stack_lvl+0x188/0x250 [ 884.935893][T30081] ? lock_chain_count+0x20/0x20 [ 884.940791][T30081] ? show_regs_print_info+0x20/0x20 [ 884.946062][T30081] ? load_image+0x400/0x400 [ 884.950651][T30081] ? __inet_hash_connect+0x234/0xe40 [ 884.956009][T30081] should_fail+0x38c/0x4c0 [ 884.960479][T30081] should_failslab+0x5/0x20 [ 884.965017][T30081] slab_pre_alloc_hook+0x51/0xc0 [ 884.970071][T30081] ? __inet_hash_connect+0x7c4/0xe40 [ 884.975505][T30081] kmem_cache_alloc+0x3d/0x290 [ 884.980311][T30081] __inet_hash_connect+0x7c4/0xe40 [ 884.985475][T30081] ? inet6_hash_connect+0xd0/0xd0 [ 884.990558][T30081] ? inet_unhash+0x540/0x540 [ 884.995178][T30081] ? rcu_is_watching+0x11/0xa0 [ 884.999990][T30081] ? inet6_hash_connect+0x77/0xd0 [ 885.005053][T30081] tcp_v6_connect+0xfaf/0x1a30 [ 885.009876][T30081] ? tcp_v6_pre_connect+0xf0/0xf0 [ 885.014955][T30081] ? perf_trace_lock+0xe4/0x390 [ 885.019876][T30081] ? tcp_sendmsg_fastopen+0x1d5/0x600 [ 885.025275][T30081] ? tcp_sendmsg_locked+0x30cc/0x35f0 [ 885.030668][T30081] ? tcp_sendmsg+0x2b/0x40 [ 885.035108][T30081] ? ____sys_sendmsg+0x5b7/0x8f0 [ 885.040086][T30081] ? ___sys_sendmsg+0x236/0x2e0 [ 885.044970][T30081] ? __se_sys_sendmsg+0x1af/0x290 [ 885.050012][T30081] ? do_syscall_64+0x4c/0xa0 [ 885.054627][T30081] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 885.060781][T30081] __inet_stream_connect+0x244/0xd70 [ 885.066152][T30081] ? inet_dgram_connect+0x360/0x360 [ 885.071425][T30081] tcp_sendmsg_fastopen+0x38f/0x600 [ 885.076674][T30081] tcp_sendmsg_locked+0x30cc/0x35f0 [ 885.081944][T30081] ? perf_trace_lock+0xe4/0x390 [ 885.086851][T30081] ? mark_lock+0x94/0x320 [ 885.091231][T30081] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 885.097252][T30081] ? lock_chain_count+0x20/0x20 [ 885.102186][T30081] ? lockdep_hardirqs_on_prepare+0x770/0x770 [ 885.108231][T30081] ? tcp_free_fastopen_req+0x70/0x70 [ 885.113596][T30081] tcp_sendmsg+0x2b/0x40 [ 885.117880][T30081] ? inet6_compat_ioctl+0x3c0/0x3c0 [ 885.123114][T30081] ____sys_sendmsg+0x5b7/0x8f0 [ 885.128216][T30081] ? __sys_sendmsg_sock+0x30/0x30 [ 885.133295][T30081] ? import_iovec+0x6f/0xa0 [ 885.137839][T30081] ___sys_sendmsg+0x236/0x2e0 [ 885.142577][T30081] ? __sys_sendmsg+0x2a0/0x2a0 [ 885.147396][T30081] ? trace_event_raw_event_lock+0x270/0x270 [ 885.153311][T30081] ? vfs_write+0x8b2/0xd60 [ 885.157812][T30081] __se_sys_sendmsg+0x1af/0x290 [ 885.162701][T30081] ? __x64_sys_sendmsg+0x80/0x80 [ 885.167663][T30081] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 885.173703][T30081] ? lockdep_hardirqs_on+0x94/0x140 [ 885.178944][T30081] do_syscall_64+0x4c/0xa0 [ 885.183399][T30081] ? clear_bhb_loop+0x30/0x80 [ 885.188108][T30081] ? clear_bhb_loop+0x30/0x80 [ 885.192835][T30081] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 885.198803][T30081] RIP: 0033:0x7f759492feb9 [ 885.203274][T30081] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 885.222928][T30081] RSP: 002b:00007f7592b8b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 885.231554][T30081] RAX: ffffffffffffffda RBX: 00007f7594baafa0 RCX: 00007f759492feb9 [ 885.239553][T30081] RDX: 0000000020000001 RSI: 0000200000000780 RDI: 0000000000000004 [ 885.247549][T30081] RBP: 00007f7592b8b090 R08: 0000000000000000 R09: 0000000000000000 [ 885.255558][T30081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 885.263550][T30081] R13: 00007f7594bab038 R14: 00007f7594baafa0 R15: 00007ffea6a4c708 [ 885.271599][T30081] [ 885.628684][T30087] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 885.635975][T30087] IPv6: NLM_F_CREATE should be set when creating new route [ 885.643297][T30087] IPv6: NLM_F_CREATE should be set when creating new route [ 885.650542][T30087] IPv6: NLM_F_CREATE should be set when creating new route [ 885.849532][T30089] netlink: 144 bytes leftover after parsing attributes in process `syz.3.9556'. [ 887.221983][ T9] unregister_netdevice: waiting for lo to become free. Usage count = 2