last executing test programs: 22.720774461s ago: executing program 3 (id=9106): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21bef5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d55545a34effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f94306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a835701bea8240399c56ce8f58df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b262341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51427a7f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa08ad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282bffff2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae05334d5a44a020000001c0d882a564d74a7c72bf9a2152b261e58fea6d2f93589cfe261dc0410b5ccc92a5a0eab327a33431d62d2b7c75ce654d556c9e1817c1abca762ab53d40da51560351b673363652e1ecb56cfe4a746a45ab13c6014e9f361ab687d1cd1795ce9e05c817b83d76046bdb3709de5df7499a02d2f636a454b85b987580ada025d83bd7b8df28a540d5ec5537942e79f2f1ab25ea5f563bc77e4f9468bd309469880c7e34150ca886d1f9ac2f7e82dbe296c877d925c38c54cc8137b29028854b6bd57ca893927c331300e16aba792289e135589d93302fc37c73c303e383cdf8ef3f6d6265fe5ee01759d24027475c8901039a898582022bc95992b86dce0710887c8a625d9cbb897bdbfaf49a3f642a169827a9bae4fcfa5212461db000000000000e6ed75ca8fcda7ef3ee336189fef3b3ffb9f38fefc5ff39c4e69e3fa1f8b10ee97123e99b61eba065b1ad67530e7c4f11f9da7ae000002000000610101ad7f79cb9bbf64a0fc109f49fe8799fe266e2ccac80fefe750151f5ddfe51833ec65ece70e07ce8ab5d97db47da8f80000664dc0b86ae2b3ff9d4e220752a6b2f3ea9f793612386496dca5af7b8952aafa796ea7b156d19612297c63bb20e1e0469f7615f67a9218cbace38f5236821314f76302b98afa93044b83989339ca10e6ae30e70e17a82f03e915b8425e8e7a91614306d2ae0bc3550d856f2d7293672b5673d264fc886b0c8bdf436a0fcd21bf9da7bdca98e34cd6e59b0a7ce4ba1b466561aaa35448dff47bb1d7df23d467689a6669e4300d5acf12e4d0b35abf91569f605b2f6df0d861"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff6, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 22.55695761s ago: executing program 3 (id=9107): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef42b000000e3bd6efb010511000b0002000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f94124fc60", 0x14}], 0x1}, 0x0) r2 = socket$kcm(0x25, 0x1, 0x0) sendmsg$kcm(r2, &(0x7f0000000cc0)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f00000000c0)={r1}) recvmsg$kcm(r3, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x40000000) sendmsg$kcm(r3, &(0x7f0000000440)={&(0x7f0000000140)=@ll={0x11, 0x5, 0x0, 0x1, 0x5, 0x6, @multicast}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000001c0)="eec1a539e1ce4b88ad1435c47bf5391d733842939683b4a57e0c1b10cad568eaea957e476d1e869d0df6a57ea6dd8b2c2cab24ad0ee8dd72a63671635c555667bbb737e7911fb86c82edea66bc27d01fb1f4da2472fccde3c8781837b81219fa66fc0de76ce7da3c5282cd9db244b43a37f4a55c0368e2f59a1b2df3d74d9983954d267a23a87b4ec613f8f6cc7c7cbf1e2d1b8fb471620a600a81613ec2f64f79b9286ad646e022036af4bbaa5603051ecc2aca0d4447a979160c9c041df68319a22246e5686d3d2d702fa8d8feaf85080ec068e5377da0dd708181896208713b682a82daeef2f583c862b6d32e8f1748de6c4185c2401b", 0xf8}, {&(0x7f00000002c0)="2447af113b19d9b9d0dd13907d93fb182949c1ab1aeb5b931f725758519d0bcab21d4f6050b5f03208e61d18507f2308c8d15eaa6aa261f5ba6cff5557be6dd560d0352a17826594161418eb1a7a3f90884f620e274dcf3538e6af89587e156c56aca97636b7ae5100bedab8b0f8cac05f720929be06b5e5fc7780749dbbf2b89e77e6f5b563b68c547283cf21a809b6f8d4e04939df8cf93fb01e67efe45f9733ece10afc535ccf490cd960ddb9ee868eb43a4a0b7db82689f9d2f2e69ee699be22b51a27f63ab3a820bbb338cfec1a95dc4825e057", 0xd6}], 0x2, &(0x7f0000000400)=[{0x20, 0x101, 0x9, "84ed7eacbec49cbeccba703feb"}], 0x20}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{0x1, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000540)}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@bloom_filter={0x1e, 0x7, 0x8, 0x2, 0x1000, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000640), &(0x7f0000000680)}, 0x20) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="1a00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000027dff785f07100"/34], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x10, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000010000000000000001000018", @ANYRES32=r7], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r9 = openat$tun(0xffffffffffffff9c, 0x0, 0x48280, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0x58, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$TUNSETIFINDEX(r9, 0x400454da, &(0x7f0000000500)=r10) sendmsg$inet(r8, &(0x7f0000000300)={&(0x7f00000001c0)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000000740)=[{&(0x7f0000000680)="f1272aaf0d5f54b597f1f44fe64bf43432e74b0ccd40f27a48d957c0cc9f7d8ff2408a4675a28e56c8d90a329f93979b45aa6958e2a4a4b2d661f6a333bdee0be285e064b0a8d450e88cd7ff45eb172961c9b7508c342ee666cb79dcbb83a17ca5c82dacd3b89d060bb2d3dad819253d71fa0eac891986ff94121cfc4659569cbd648128ac63440fd5ce7d8816", 0x8d}, {&(0x7f0000000280)}, {&(0x7f0000000880)="b1ea64e9f496e7c7b70576f4361af18d2edc2d4a21ee6578b452dfdec752e0fa690396c3cf43636bf74bfcbdce88917283a6d3919fccbe082c8e8fcffa71a1a888bc2a4cd1c8bcb9dcdf02e800e8f8058c704db76d3c671ae6b5ed2edf916c917f1a6eb594b11bf0ab977f505b96daf47d6b9baa22649fae51513cb172b37b31405578e45f29bb7357c715f882e250649c2904484ae4a851db291474c0ea531f39dcacafc8", 0xa5}, {&(0x7f0000000a40)="d9b85badd63033d7a328bd57de582806d9820f33896dfd9a6d7131f0d37f63a4a326cf6fcc28cfbd61518a7689e5655a39f0e783e84f398cbe6569948f68479a6d57e6caacf04b15ddfad7a2aa70f91efe8512a4aa5615498a8d48b876d5e87d2cbf52037ced95d091c2abd58cad0bbfecb80c7ea1ef01c194300ed0f6c86546e7e322545ce4492b2ebc6c51465a89db1ca9cdbba3d212567889752f81d0615b7a61ae6597e738cd6c6ea5ac33ce98066ea58c6faf2b83d84b48279656a44f9cd27e2f", 0xc3}], 0x4, &(0x7f0000000940)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @loopback, @rand_addr=0x64010102}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3d}}], 0x50}, 0x1) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) write$cgroup_type(r11, &(0x7f0000000080), 0x11ffffce1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x11, 0x16, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @map_fd={0x18, 0xb, 0x1, 0x0, r5}, @tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0xa90}, @tail_call={{0x18, 0x2, 0x1, 0x0, r7}}]}, &(0x7f00000007c0)='syzkaller\x00', 0x5, 0xa6, &(0x7f0000000800)=""/166, 0x40f00, 0x1, '\x00', r10, 0x0, r11, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000008c0)=[0xffffffffffffffff], &(0x7f0000000900)=[{0x2, 0x1, 0x6, 0x3}, {0x1, 0x5, 0x2, 0x2}, {0x5, 0x1, 0x9, 0x1}, {0x4, 0x1, 0xb, 0x3}, {0x4, 0x5, 0x0, 0x5}, {0x0, 0x5, 0x0, 0x9}, {0x0, 0x4, 0x0, 0xc}], 0x10, 0x8}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000004c0)) 20.739364766s ago: executing program 3 (id=9119): socket$kcm(0xa, 0x2, 0x73) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socket$kcm(0x10, 0x2, 0x0) close(0x3) socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000240), &(0x7f0000000380)=r2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) syz_clone(0xa1000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x2, 0x1, 0x84) 19.345781086s ago: executing program 3 (id=9117): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080600000c"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x3, 0x14, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000045000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xe, 0xe00, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1, 0xf, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4000}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$inet(r6, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0x55, 0x0, 0x0, 0x0, 0x81a0}, [@call={0x85, 0x0, 0x0, 0x27}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000f0400000000005f"], 0x0, 0x28}, 0x28) (async) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000f0400000000005f"], 0x0, 0x28}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r8, 0x0, 0x1}, 0x50) (async) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r8, 0x0, 0x1}, 0x50) socket$kcm(0x10, 0x3, 0x0) (async) r10 = socket$kcm(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x1}, {0x0, 0x5, 0x0, 0x3}, {}]}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a00000008000000000000000000000000ffffffe0", @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c06", 0xfffffffffffffea7}], 0x1}, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c06", 0xfffffffffffffea7}], 0x1}, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={r9, 0x58, &(0x7f00000003c0)}, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={r9, 0x58, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r11, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r10, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000190091c8b14a0778a8123d181d"], 0xfe33) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xc, 0x4, 0x4, 0x7, 0x0, r9, 0x3, '\x00', 0x0, r8, 0x3, 0x80}, 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xc, 0x4, 0x4, 0x7, 0x0, r9, 0x3, '\x00', 0x0, r8, 0x3, 0x80}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) (async) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="b70200001a000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b70600007fffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946e0ebc622003b538dfd8e012e79578e51bc5f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e367091fd0000000000006704902cbe7bc04b82d2789cb132b803000000661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7b148ba532e6ea09c346dfebd38608b32a0080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e14861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb027aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16b089f37b3591a15c0a9be6eb18208404c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b74cd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f50714600fb6241c6e955031795b2c2f56411e48455b5a8b90dfae105004f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000694f540000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f72f3ced846891180604b6dd2499d16d7c9158ff1effff00000000ef069dc42749a89f854797fa9d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeedd005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe00000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f440624aa70300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e80339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd52364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6df53cf95819079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca060000000000000008f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b5087880000ae07c65b71088dd7d5d1e1bab9000000000000000000000000a5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e98a224f97855c02f2b7add58ffb25f3390343c12aa51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0f16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fca4d97a0ae75ccf11e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35e9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff17320adda5867947257f164391c673c1079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb75b5589829b6b0679b5d65a927de6f4c09f4b742e037381c85d2ec7bb2a8152f0d6a99a0370e0cbd65744eb2efd7b65f04aa7e72588757b9612bb4253a63bb303c0c68a07f115d104f2007237a4f771416741bfd63fdfe3ae6f8bea755d8b7202c2bbae137dc1c3cf40db74a4c1c219d8ddec8f91dae2cdea1353fe062830fa1d233296ec9d8317872257e154665485e7f31cdbfbf435517faf93015b57417d84b8bc8662e097d5ba55d02d48e150695f0fe4a676555b10da11751865126d19336116a1e58ab727dda6b343cc97f9479136a66f552abf8fe3d134f6d69df1cffe6740f90735f66ca54fd87800b4bda4db5e68aaccf44d24e09f8a769e3ae7bf246673f15e3d1adae4384bdb7cd30a33e30466b421feb96006c810fd3830a1c75af2580727ffc604c9b04f476acc21419fad9b1baec88974da2db29b80859bde08b85c8086e4b7f1fd568042ad5396d3179c71b1dc43291e450ce9b8d7d80fcb44966d7ad4691a37870000000000000000000000000000000000000000000000000000249e00000000000083a5765d06da91165d24bc316607e1d69344aa1c07ff7cd7bc3d17f122478b6e81077782b9c298edc2546045feff90e7aa7da88d2489fb000a4aa838e911c1a869fa55e979e033b7707df75b93cf5b8d25242741a88f2d54a7107375b25911aaa2efa3a4f87fc14f180e353615b3cb925cf5ea843014a277c3694a5a83266f73ef039dd731187923715548d58ff43be997e357e0cbed29faef19c0082e26fb867bf0ffe37d79f2614104e9a578aad05ce3ea8b0d66638d2f1fffc43b3bc56ac59389b4060b502557a598eef7bf5ddbfc9c503f2c6d8abe65cf98224b312dfb06ae1d8b1d9362f021f9a56b24f0b2a5ccb1c366235af5c6a548120437572bef6fe1fe75233cf3e8fc4c1c9d045ee8c8bbeecfc168b514e58f33696fce42b3d770c5ace395c3ec849ca4c25330b1e82c4be9cf00cbe449b70e2f26074d747d838f3ef56c82a10bca76a3f2368192edfc2d9e32dec544885a00645d106b0b4be9ce3d900febe533dfb05cdae58f573d045c609bb4e1542e48e25ed7b6a9c21fc1c8bc098ee6f65815b034cbff62976d0d1a20429b725d43fecd7da7fd4cf7c08fc9f8f23ae12b19694ef91e3eebbd613ba1ddc96042060cdb0cc48d363e0f8e9a559252fbdb354e8ba89df9ac02082040578966d73bf268d1c87f1518cb75057f1d4b174a1310f4c895e4970fc300afbfba7d3341c55eec92ffcb832fae7ba5deffd9d0bade63eaf59017a92a3e28a948f16cc8123c6727471ef0482563e3aa52d46f00000000421a8dcc04d69ea92f19782694bbf952342584bcad221001b4da955edab26045cb88ad6d519dff54f59b8a1f79eea20cf4f0f0e13761a352034a26cf14a5e78e45c69273e26630a3f00e92ae63eced3da5d66cedaf489def12baec4ed8f42b3d0e0f29a94b198062af5996e7f95f303da9b546ffe8c35ef25d5afaaca9a18bd7706db682ed59c3f2d1e98d6d71c50a732e02da361959a0917d50819e5260578b6f5779ea3c44ffaa0e20b9420b7f99c09057eb9aebb5cd482159b087f688ddbb7b9a03f96805a78be5581e9f516019d0a6df7dc4a2e03c29a8ecfba95f04c509315556254bcf350e3e77a845d1a4190ee536425ce0759ef54c2bdf"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r12, 0x2000000, 0x24, 0x0, &(0x7f00000002c0)="5cdd3086dd3a00663bc9ffa388a8862c0002fd0013dd000000800000000081004979df94", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0x55, 0x0, &(0x7f0000000180)="b8746999d1f3d6d851d9265d21bc0d32d6b3523d150d97713bbabba59a8a95ae3ad6fb25b88362dc061eaf03a714f7ea7de20f28652cdf5fd85a8786061a208c3a51dc49295361888cac39df7a414983a2c4d60fa0", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0x55, 0x0, &(0x7f0000000180)="b8746999d1f3d6d851d9265d21bc0d32d6b3523d150d97713bbabba59a8a95ae3ad6fb25b88362dc061eaf03a714f7ea7de20f28652cdf5fd85a8786061a208c3a51dc49295361888cac39df7a414983a2c4d60fa0", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 18.564527182s ago: executing program 3 (id=9123): socket$kcm(0x21, 0x2, 0x2) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x10, r0, 0x0) (async, rerun: 32) socket$kcm(0xa, 0x5, 0x0) (rerun: 32) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x8, 0x7, 0xb, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) (async, rerun: 64) bpf$PROG_LOAD(0x5, 0x0, 0x0) (rerun: 64) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="2e00000038000511d25a80698c63940d0124fc602f6e35400c000200001ec00037153e370a00018025641d00d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7e00950000000000000000"], &(0x7f0000000280)='syzkaller\x00'}, 0x94) (async, rerun: 32) r5 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1e, 0x1, 0x0, 0x0, 0x0, 0x0, 0xa008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x10, 0xffffffffffffffff, 0x0) (async) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x3, &(0x7f0000001240)=ANY=[@ANYRESOCT=r5], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) (async, rerun: 64) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{}, &(0x7f0000000540), &(0x7f0000000580)=r6}, 0x20) (async) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x6, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000006c0)={r6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffff2e, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="180200000000000000d1880000b00441e908b9f90000000000c871ab9530dd1d40b88df3a234c0e9bd76b91d5c2f8bab4f41a4537450927be90100202ec954c007ce18b429ccb20635db978f7868d1ae16713f029771c02d8cb5d7a21b24caa31c5a0aca21134a2fbbe9d74637cbe045f0eb1ef3143d80c09af1393c9689b8c059e236c7b2fa22a22c1e79318c1e00b6bfbbad4465"], &(0x7f0000000040)='GPL\x00'}, 0x94) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc/1/\x00\x82q\xee\xe5\xa0\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30) (async) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r8, &(0x7f0000000740)='cpu.stat\x00', 0x275a, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0x3, 0x0, &(0x7f0000000100)="e0b954", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 17.855181053s ago: executing program 3 (id=9126): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x1) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) recvmsg(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000007c0)=""/4096, 0x1000}], 0x1}, 0x20) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000080)=@in6={0xa, 0x4e1d, 0x0, @mcast2}, 0x80, 0x0}, 0x2000b90b) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8995, &(0x7f0000000cc0)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50xffffffffffffffff, 0xffffffffffffffff}) close(r9) recvmsg$unix(r8, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r10, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r11, &(0x7f0000000180), 0x40001) write$cgroup_pid(r5, &(0x7f00000001c0), 0x12) syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 17.243680809s ago: executing program 2 (id=9131): r0 = perf_event_open(0x0, 0x0, 0x9, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="a700000000000000000000000000fee9000000000000"], 0x48) r2 = perf_event_open(0x0, 0x0, 0x2, r0, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4df7, 0x0, @perf_config_ext={0x100000000}, 0x1020e7, 0xac5d, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, r2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000000140)=ANY=[@ANYRES16=r1], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000, 0x9}, 0x0, 0x8, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) socket$kcm(0x10, 0x3, 0x10) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], 0x0}, 0x94) r6 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r5}, 0x8) ioctl$TUNSETVNETBE(r6, 0x400454de, &(0x7f0000000100)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r7, 0x1, 0x22, &(0x7f0000000340)=r6, 0x4) socket$kcm(0x2, 0x3, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) ioctl$PERF_EVENT_IOC_RESET(r6, 0x2403, 0x1c) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_int(r8, &(0x7f0000000800)='cpuset.mems\x00', 0x2, 0x0) r10 = openat$cgroup_procs(r8, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r10, &(0x7f0000000380), 0x12) write$cgroup_int(r9, &(0x7f0000000040), 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000a80)={0xffffffffffffffff, &(0x7f00000009c0), &(0x7f0000000940)=""/13}, 0x20) 16.978490174s ago: executing program 2 (id=9132): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[], 0x0, 0x43}, 0x28) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000001000095000000"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) recvmsg$kcm(r2, 0x0, 0x42) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x82, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x112c0a, 0x0, 0x0, 0x0, 0x0, 0x0, 0xac}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x40000002) 16.687374131s ago: executing program 2 (id=9135): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff003, 0x66, 0x7f, 0x1}, 0x48) socket$kcm(0x10, 0x3, 0x10) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xcfa4) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e20, 0x4, @dev={0xfe, 0x80, '\x00', 0x13}, 0x2}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e21, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000070001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x20044010) 16.317571423s ago: executing program 2 (id=9137): socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0xc4, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x10c002, 0x2, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c0000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x85}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848360000005e140602000000000e000a00100000000a8000001294", 0x2e}], 0x1}, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r1, 0x0, 0x0}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000014c0)={0x0, 0x0, &(0x7f00000013c0)}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003567d25a806f8c6394f96724fc60050011000a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 15.451843872s ago: executing program 2 (id=9143): bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0x1, 0x58, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000280)=0x5) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) r4 = perf_event_open$cgroup(&(0x7f00000002c0)={0x0, 0x80, 0x5c, 0xb, 0x50, 0x4, 0x0, 0x5a7, 0xa000, 0xb, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x4, @perf_bp={0x0, 0x2}, 0x12b10, 0xd, 0x101, 0x3, 0x33, 0xffff, 0x7, 0x0, 0x1000}, r3, 0xa, r1, 0xf) r5 = openat$cgroup_subtree(r3, &(0x7f00000003c0), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000440)=ANY=[], 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_subtree(r6, &(0x7f0000000200), 0x2, 0x0) r8 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r9 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r8, 0xffffffffffffffff}, &(0x7f0000000440), &(0x7f0000000480)=r2}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000640)={{r8, 0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f0000000600)='%pI4 \x00'}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x11, 0x1d, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x200}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1445c}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @generic={0x7, 0x5, 0x6, 0x9, 0x4}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r10}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x3}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffff8}, @map_fd={0x18, 0x8, 0x1, 0x0, r11}]}, &(0x7f0000000780)='GPL\x00', 0x1f7, 0xff, &(0x7f00000007c0)=""/255, 0x41000, 0xc7fa7be57b167c7f, '\x00', r0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000008c0)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000980)={0x1, 0x9, 0x1, 0x80000000}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000009c0)=[r8, r8, r8], &(0x7f0000000a00)=[{0x3, 0x3, 0xa, 0xc}, {0x2, 0x2, 0x8, 0x2}], 0x10, 0x2}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000240)=@generic={&(0x7f00000001c0)='./cgroup/../file0\x00', r4}, 0x18) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000100240248ff05000500", 0x2c}, {&(0x7f00000019c0)="06bb", 0x2}], 0x2}, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000500)={r8, &(0x7f0000000180)="aced48", 0x0}, 0x20) write$cgroup_subtree(r7, &(0x7f0000000400)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r7, &(0x7f00000004c0)=ANY=[@ANYBLOB="2b637075202b7069647320c74de1130033b70196e9aa8177116d60354e0bf38386d118dcc593fb8bb3a1d7944941ea9204203ec20284d15b881947a0dceea872a98320cdabdf9d7d87bd7282210792281c9f238060366f0a314f42815c2b5fe03d1f6d3f71a227f2e0f6615dce6d4ed1b900"/135], 0xb) r12 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac00400020208000200030001000400068294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953000000000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x2404c0c4) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="185a16a745cec338f59cd80000000000000000000000000000008500000061000000180100002020642500000000202020207b1af8ff00000000bfa100000000000008000000f8ffffffb702000008000000b7030000fbff0000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x9, '\x00', r0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_DISABLE(r4, 0x2401, 0xffffffff) r14 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/net\x00') ioctl$PERF_EVENT_IOC_ENABLE(r14, 0x40049409, 0x5) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r13, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="d2ff0303606803ae06f7e60888a8", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 14.80064933s ago: executing program 2 (id=9145): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000040), 0xcf) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001880)="5c00000012006b1e003de3d86e6c1dff05137e0300000000000000b68675f8001d000a00a0e69ee517d34442bc24eab556a7e60f1e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f408000300060100000800030011000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x10, 0x1c, &(0x7f0000000500)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1c000000, 0x0, 0x0, 0x0, 0xfffffffe}, {{0x18, 0x1, 0x1, 0x0, r0, 0x0, 0x0, 0x4000}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1000000}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x0, 0x7ff}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {0x4, 0x0, 0x6}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000140), 0xc) 6.340301552s ago: executing program 4 (id=9182): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000014c0)={0x5, 0x80, 0x0, 0xfe, 0xff, 0x5, 0x0, 0x10001, 0x4400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000300)}, 0x1590, 0x0, 0x8, 0x3}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_open_procfs$namespace(0x0, 0x0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x80000001, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x10, 0xffffffffffffffff, 0xc) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x2a, 0x2, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x9c, 0x1a, 0x1, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="364000001a00913a"], 0x82d7) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000004200)=""/4087, 0xff7}], 0x2}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb0100180000000000000021010000210100000b00000010000000080000930b0000000400000007000000050000000100000009000000000000000500000009000000020000000f000000064000000600000001000000ff7f0000020000000b00000000080000040000000400000079a2000008005a000300000006000000ee0a0000080000000000008400040000080000000000000c050000006628cac40800000f010000000500000001000000440000000300000006ad7c4f8c00000004000000ff030000ff0300"], &(0x7f0000000280)=""/126, 0x147, 0x7e, 0x0, 0x889, 0x10000}, 0x28) bpf$ITER_CREATE(0x21, &(0x7f0000000700), 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmsg(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x2}) ioctl$TUNSETPERSIST(r1, 0x400454c9, 0x1) ioctl$TUNGETVNETHDRSZ(r1, 0x800454d7, &(0x7f0000000000)) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000001240)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000680)='7', 0x1}], 0x1}, 0x40488c4) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) socket$kcm(0x29, 0x7, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0xc, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB="ffffffff00"/15, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000665d6cf7197962910000a9fa6760e3c142bdf5a673f94df0d11d08ecaa440125ee3ff757ec526e"], 0x50) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) 5.32808756s ago: executing program 1 (id=9183): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc29a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848160000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x80054) 5.202508987s ago: executing program 0 (id=9184): socket$kcm(0xa, 0x2, 0x73) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socket$kcm(0x10, 0x2, 0x0) close(0x3) socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000240), &(0x7f0000000380)=r2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) syz_clone(0xa1000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x2, 0x1, 0x84) 5.200022518s ago: executing program 4 (id=9185): bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[], 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socket$kcm(0x10, 0x2, 0x0) close(0x3) socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) close(0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000240), &(0x7f0000000380)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$kcm(0x29, 0x5, 0x0) syz_clone(0xa1000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18006daaed13ff00000000000000000028"], 0x0}, 0x90) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="98eb000014006bcd9e", 0xeb98}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) close(r2) close(0xffffffffffffffff) 4.943295632s ago: executing program 1 (id=9186): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x11c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1b) r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x5, 0x0, 0x53) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x806, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r2, &(0x7f0000000240)=ANY=[], 0xfe33) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x0, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x1ff, 0x0, 0x0, 0x41000, 0x21, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r3 = socket$kcm(0x10, 0x2, 0x10) gettid() write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="5400020029000b05d25a806f8c6394f90424fc602f0011002f2f0100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, 0xffffffffffffffff, 0x0, 0x6, r0}, 0x38) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x20000000000000c8, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0xb) 2.788839578s ago: executing program 32 (id=9126): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x1) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) recvmsg(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000007c0)=""/4096, 0x1000}], 0x1}, 0x20) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000080)=@in6={0xa, 0x4e1d, 0x0, @mcast2}, 0x80, 0x0}, 0x2000b90b) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8995, &(0x7f0000000cc0)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50xffffffffffffffff, 0xffffffffffffffff}) close(r9) recvmsg$unix(r8, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r10, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r11, &(0x7f0000000180), 0x40001) write$cgroup_pid(r5, &(0x7f00000001c0), 0x12) syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2.383466001s ago: executing program 1 (id=9188): r0 = perf_event_open(0x0, 0x0, 0x9, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="a700000000000000000000000000fee9000000000000"], 0x48) r2 = perf_event_open(0x0, 0x0, 0x2, r0, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4df7, 0x0, @perf_config_ext={0x100000000}, 0x1020e7, 0xac5d, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, r2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000000140)=ANY=[@ANYRES16=r1], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000, 0x9}, 0x0, 0x8, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) socket$kcm(0x10, 0x3, 0x10) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], 0x0}, 0x94) r6 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r5}, 0x8) ioctl$TUNSETVNETBE(r6, 0x400454de, &(0x7f0000000100)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r7, 0x1, 0x22, &(0x7f0000000340)=r6, 0x4) socket$kcm(0x2, 0x3, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) ioctl$PERF_EVENT_IOC_RESET(r6, 0x2403, 0x1c) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_int(r8, &(0x7f0000000800)='cpuset.mems\x00', 0x2, 0x0) r10 = openat$cgroup_procs(r8, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r10, &(0x7f0000000380), 0x12) write$cgroup_int(r9, &(0x7f0000000040), 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000a80)={0xffffffffffffffff, &(0x7f00000009c0), &(0x7f0000000940)=""/13}, 0x20) 2.303645696s ago: executing program 4 (id=9189): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) close(r0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1}, &(0x7f0000000080), &(0x7f0000000280)=r2}, 0x20) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) socket$kcm(0x10, 0x2, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x7fffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) r3 = openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_int(r3, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x40) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x78}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x2c}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000d00)={0x0, 0x0, 0x0}, 0x10100) socket$kcm(0x29, 0x5, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r5 = socket$kcm(0x18, 0x7, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x40086602, &(0x7f0000000080)=0xd0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x40086602, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x4008b100, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) 2.196413422s ago: executing program 0 (id=9190): bpf$TOKEN_CREATE(0x24, &(0x7f0000000200), 0x8) (async) r0 = socket$kcm(0xa, 0x2, 0x73) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x4) (async) sendmsg$inet(r0, &(0x7f0000000540)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000000600)=[{&(0x7f0000002440)="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", 0xffa0}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}, {&(0x7f0000000580)="24a10f2a16837717b9ac706f53cbc1865aa4e9cedccce6e0f6cdd54704bfe2f26db6fd0918ff7915774192e5003559a7667bf77c485c4952a3d5647790cab7fef3989d2359387ade1a6b3c1d57dae491b8e93df2beee9bddd174f6bd022cd4f8f38b1e40f63e0eab48ddf3775067a0c5b648690d65f30a6c084c813c06e4e167"}], 0x2, &(0x7f0000001940)=[@ip_tos_int={{0x50, 0x29, 0x32}}, @ip_ttl={{0x0, 0xf00}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x6d}, 0x20004044) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x1380, 0x2, 0x4, 0x100, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x1}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, r2}, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000012c0)=@base={0x12, 0x3b6, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x800000}, 0x50) (async) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r4, 0xffffffffffffffff}, 0x4) (async) r6 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r8 = perf_event_open(&(0x7f0000002100)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0xa0100, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x6}, 0x18, 0x0, 0x80000003, 0x6}, 0x0, 0xffffffffffffffff, r6, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r7) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r5, 0xffffffffffffffff}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={r1, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0], 0x0, 0x5a, &(0x7f0000000680)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f00000006c0), &(0x7f0000000740), 0x8, 0xf7, 0x8, 0x8, &(0x7f0000000780)}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000900)={0x2, 0x4, 0x8, 0x1, 0x80, r9, 0x0, '\x00', r10, 0xffffffffffffffff, 0x1, 0x1, 0x2}, 0x50) (async) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x11, &(0x7f00000003c0)=ANY=[@ANYRESDEC, @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r11, 0x11, 0xe, 0x0, &(0x7f0000000700)="f0da37da83d22617a139d475c695", 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) (async) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x0, r3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.042580901s ago: executing program 0 (id=9191): perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x100000000000000, 0x800000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 1.798638145s ago: executing program 1 (id=9192): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x4}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001000000"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000440), &(0x7f00000003c0)='%pI4 \x00'}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b70800", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0xb, 0x0, &(0x7f0000000300)="40f0538ef047b21fb60068", 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{}, &(0x7f0000000580), 0x0}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000040)="b90103600040f000009e0ff008001f", 0x0, 0x104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff8100}, 0x50) 1.564629789s ago: executing program 1 (id=9193): bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x50) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) close(0x3) socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) close(0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000240), &(0x7f0000000380)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$kcm(0x29, 0x5, 0x0) syz_clone(0xa1000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18006daaed13ff00000000000000000028"], 0x0}, 0x90) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="98eb000014006bcd9e", 0xeb98}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) close(r2) close(0xffffffffffffffff) 1.564155099s ago: executing program 0 (id=9194): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffef, &(0x7f0000000040)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a076b876c1d0048007ea60864160af36504001a0038001d00", 0x28}, {&(0x7f00000000c0)="83d2ff5f00000080d2898a0cc6d6703b87eb28f77b09bc7e64f918fa3be4664d327d90424d5503002800"/52, 0x34}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0xa1ff) 1.162004042s ago: executing program 0 (id=9195): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000014c0)={0x5, 0x80, 0x0, 0xfe, 0xff, 0x5, 0x0, 0x10001, 0x4400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000300)}, 0x1590, 0x0, 0x8, 0x3}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_open_procfs$namespace(0x0, 0x0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x80000001, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x10, 0xffffffffffffffff, 0xc) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x2a, 0x2, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x9c, 0x1a, 0x1, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="364000001a00913a"], 0x82d7) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000004200)=""/4087, 0xff7}], 0x2}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb0100180000000000000021010000210100000b00000010000000080000930b0000000400000007000000050000000100000009000000000000000500000009000000020000000f000000064000000600000001000000ff7f0000020000000b00000000080000040000000400000079a2000008005a000300000006000000ee0a0000080000000000008400040000080000000000000c050000006628cac40800000f010000000500000001000000440000000300000006ad7c4f8c00000004000000ff030000ff0300"], &(0x7f0000000280)=""/126, 0x147, 0x7e, 0x0, 0x889, 0x10000}, 0x28) bpf$ITER_CREATE(0x21, &(0x7f0000000700), 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmsg(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x2}) ioctl$TUNSETPERSIST(r1, 0x400454c9, 0x1) ioctl$TUNGETVNETHDRSZ(r1, 0x800454d7, &(0x7f0000000000)) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000001240)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000680)='7', 0x1}], 0x1}, 0x40488c4) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) socket$kcm(0x29, 0x7, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0xc, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB="ffffffff00"/15, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000665d6cf7197962910000a9fa6760e3c142bdf5a673f94df0d11d08ecaa440125ee3ff757ec526e"], 0x50) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) 962.848934ms ago: executing program 4 (id=9196): r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xde}, 0x100800, 0x1, 0x5, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYRES32=r1, @ANYRES16=r0], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRES32=r3, @ANYBLOB, @ANYBLOB], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x24, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmsg(r1, &(0x7f0000000640)={&(0x7f0000000340)=@ethernet={0x0, @dev}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000100)=""/35, 0x23}, {&(0x7f0000000280)=""/7, 0x7}, {&(0x7f0000000540)=""/202, 0xca}, {&(0x7f0000000840)=""/208, 0xd0}, {&(0x7f0000000c40)=""/4096, 0x1000}], 0x5, &(0x7f0000000440)=""/61, 0x3d}, 0x40000161) socketpair(0x25, 0x1, 0x0, &(0x7f0000000000)) 286.966493ms ago: executing program 4 (id=9197): r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000680)={&(0x7f00000004c0)=@l2tp6={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000400)='P', 0x1}], 0x1, &(0x7f0000000b00)=[{0x10, 0x10d, 0x600}, {0x10, 0x84, 0x7}], 0x20}, 0x0) 147.179761ms ago: executing program 0 (id=9198): socket$kcm(0xa, 0x2, 0x73) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socket$kcm(0x10, 0x2, 0x0) close(0x3) socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000240), &(0x7f0000000380)=r2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) syz_clone(0xa1000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x2, 0x1, 0x84) 338.379µs ago: executing program 1 (id=9199): bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[], 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socket$kcm(0x10, 0x2, 0x0) close(0x3) socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) close(0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000240), &(0x7f0000000380)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$kcm(0x29, 0x5, 0x0) syz_clone(0xa1000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18006daaed13ff00000000000000000028"], 0x0}, 0x90) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="98eb000014006bcd9e", 0xeb98}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) close(r2) close(0xffffffffffffffff) 0s ago: executing program 4 (id=9200): r0 = perf_event_open(0x0, 0x0, 0x9, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="a700000000000000000000000000fee9000000000000"], 0x48) r2 = perf_event_open(0x0, 0x0, 0x2, r0, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4df7, 0x0, @perf_config_ext={0x100000000}, 0x1020e7, 0xac5d, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, r2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000000140)=ANY=[@ANYRES16=r1], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000, 0x9}, 0x0, 0x8, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) socket$kcm(0x10, 0x3, 0x10) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], 0x0}, 0x94) r6 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r5}, 0x8) ioctl$TUNSETVNETBE(r6, 0x400454de, &(0x7f0000000100)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r7, 0x1, 0x22, &(0x7f0000000340)=r6, 0x4) socket$kcm(0x2, 0x3, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) ioctl$PERF_EVENT_IOC_RESET(r6, 0x2403, 0x1c) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_int(r8, &(0x7f0000000800)='cpuset.mems\x00', 0x2, 0x0) r10 = openat$cgroup_procs(r8, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r10, &(0x7f0000000380), 0x12) write$cgroup_int(r9, &(0x7f0000000040), 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000a80)={0xffffffffffffffff, &(0x7f00000009c0), &(0x7f0000000940)=""/13}, 0x20) kernel console output (not intermixed with test programs): 7346][T25307] ? ieee80211_tasklet_handler+0x20/0x20 [ 1429.803051][T25307] ? memset+0x1e/0x40 [ 1429.807092][T25307] ? __hrtimer_init+0x186/0x270 [ 1429.812007][T25307] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 1429.817813][T25307] hwsim_new_radio_nl+0xafa/0xce0 [ 1429.822934][T25307] genl_family_rcv_msg_doit+0x22a/0x330 [ 1429.828547][T25307] ? end_current_label_crit_section+0x170/0x170 [ 1429.834897][T25307] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1429.840874][T25307] ? bpf_lsm_capable+0x5/0x10 [ 1429.845615][T25307] ? security_capable+0x85/0xb0 [ 1429.850534][T25307] genl_rcv_msg+0x604/0x790 [ 1429.855122][T25307] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 1429.860914][T25307] ? genl_bind+0x360/0x360 [ 1429.865574][T25307] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 1429.871985][T25307] netlink_rcv_skb+0x1fb/0x450 [ 1429.876816][T25307] ? genl_bind+0x360/0x360 [ 1429.881299][T25307] ? netlink_ack+0x1170/0x1170 [ 1429.886133][T25307] ? down_read+0x1a8/0x2d0 [ 1429.890634][T25307] genl_rcv+0x24/0x40 [ 1429.894688][T25307] netlink_unicast+0x74d/0x8d0 [ 1429.899529][T25307] netlink_sendmsg+0x8ad/0xbd0 [ 1429.904362][T25307] ? netlink_getsockopt+0x550/0x550 [ 1429.909644][T25307] ? aa_sock_msg_perm+0x94/0x150 [ 1429.914675][T25307] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1429.920011][T25307] ? security_socket_sendmsg+0x7c/0xa0 [ 1429.925622][T25307] ? netlink_getsockopt+0x550/0x550 [ 1429.930882][T25307] ____sys_sendmsg+0x5be/0x970 [ 1429.935725][T25307] ? __sys_sendmsg_sock+0x30/0x30 [ 1429.940805][T25307] ? __import_iovec+0x315/0x500 [ 1429.945723][T25307] ? import_iovec+0x6f/0xa0 [ 1429.950278][T25307] ___sys_sendmsg+0x2a2/0x360 [ 1429.955044][T25307] ? __sys_sendmsg+0x290/0x290 [ 1429.959888][T25307] ? ktime_get_real_ts64+0x440/0x440 [ 1429.965256][T25307] __se_sys_sendmsg+0x1bb/0x2a0 [ 1429.970177][T25307] ? __x64_sys_sendmsg+0x80/0x80 [ 1429.975190][T25307] ? lockdep_hardirqs_on+0x94/0x140 [ 1429.980435][T25307] do_syscall_64+0x4c/0xa0 [ 1429.984901][T25307] ? clear_bhb_loop+0x60/0xb0 [ 1429.989642][T25307] ? clear_bhb_loop+0x60/0xb0 [ 1429.994380][T25307] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1430.000327][T25307] RIP: 0033:0x7f55d739bf79 [ 1430.004784][T25307] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1430.024617][T25307] RSP: 002b:00007f55d8227028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1430.033096][T25307] RAX: ffffffffffffffda RBX: 00007f55d7615fa0 RCX: 00007f55d739bf79 [ 1430.041126][T25307] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 1430.049153][T25307] RBP: 00007f55d74327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1430.057187][T25307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1430.065237][T25307] R13: 00007f55d7616038 R14: 00007f55d7615fa0 R15: 00007ffd31635168 [ 1430.073312][T25307] [ 1431.128173][T25344] netlink: 'syz.1.6900': attribute type 1 has an invalid length. [ 1431.141695][T25344] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.6900'. [ 1431.920241][T25345] delete_channel: no stack [ 1432.511988][T25375] device syzkaller0 entered promiscuous mode [ 1432.698443][T25386] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1432.751037][T25386] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1432.760292][T25386] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1432.769437][T25386] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1432.778573][T25386] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1432.787700][T25386] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1432.796791][T25386] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1432.805940][T25386] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1432.815127][T25386] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1432.824272][T25386] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1434.623647][T25411] netlink: 'syz.4.6919': attribute type 27 has an invalid length. [ 1434.648962][T25411] netlink: 164 bytes leftover after parsing attributes in process `syz.4.6919'. [ 1435.515682][T12461] Bluetooth: hci3: command 0x0406 tx timeout [ 1437.081852][T25418] FAULT_INJECTION: forcing a failure. [ 1437.081852][T25418] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1437.157947][T25418] CPU: 1 PID: 25418 Comm: syz.2.6921 Not tainted syzkaller #0 [ 1437.165492][T25418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1437.175604][T25418] Call Trace: [ 1437.178911][T25418] [ 1437.181864][T25418] dump_stack_lvl+0x188/0x24e [ 1437.186662][T25418] ? show_regs_print_info+0x12/0x12 [ 1437.191923][T25418] ? load_image+0x400/0x400 [ 1437.196480][T25418] ? __lock_acquire+0x7d10/0x7d10 [ 1437.201540][T25418] should_fail_ex+0x399/0x4d0 [ 1437.206260][T25418] _copy_from_user+0x2c/0x170 [ 1437.210978][T25418] __sys_bpf+0x2ea/0x780 [ 1437.215256][T25418] ? bpf_link_show_fdinfo+0x380/0x380 [ 1437.220676][T25418] ? lock_chain_count+0x20/0x20 [ 1437.225559][T25418] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1437.231600][T25418] __x64_sys_bpf+0x78/0x90 [ 1437.236052][T25418] do_syscall_64+0x4c/0xa0 [ 1437.240521][T25418] ? clear_bhb_loop+0x60/0xb0 [ 1437.245231][T25418] ? clear_bhb_loop+0x60/0xb0 [ 1437.249941][T25418] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1437.255860][T25418] RIP: 0033:0x7fbd9919bf79 [ 1437.260304][T25418] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1437.279953][T25418] RSP: 002b:00007fbd9a090028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1437.288399][T25418] RAX: ffffffffffffffda RBX: 00007fbd99415fa0 RCX: 00007fbd9919bf79 [ 1437.296397][T25418] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 000000000000000a [ 1437.304392][T25418] RBP: 00007fbd9a090090 R08: 0000000000000000 R09: 0000000000000000 [ 1437.312391][T25418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1437.320384][T25418] R13: 00007fbd99416038 R14: 00007fbd99415fa0 R15: 00007ffe7b0de658 [ 1437.328405][T25418] [ 1437.579944][T25422] device sit0 left promiscuous mode [ 1437.635612][T25425] netlink: 'syz.4.6925': attribute type 1 has an invalid length. [ 1437.728882][T25426] device sit0 entered promiscuous mode [ 1437.896141][T25436] netlink: 'syz.3.6926': attribute type 7 has an invalid length. [ 1437.913826][T25436] netlink: 'syz.3.6926': attribute type 1 has an invalid length. [ 1437.933076][T25436] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.6926'. [ 1439.129401][T25450] netlink: 'syz.0.6931': attribute type 10 has an invalid length. [ 1439.137329][T25450] team0: Device dummy0 is up. Set it down before adding it as a team port [ 1439.580545][T25455] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.6932'. [ 1439.655796][T25458] netlink: 'syz.0.6933': attribute type 10 has an invalid length. [ 1439.805453][T25458] team0: Device vxcan1 is of different type [ 1442.226639][T25491] netlink: 'syz.2.6943': attribute type 3 has an invalid length. [ 1442.265678][T25491] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.6943'. [ 1442.457864][T25501] netlink: 'syz.0.6945': attribute type 29 has an invalid length. [ 1442.486465][T25501] netlink: 'syz.0.6945': attribute type 29 has an invalid length. [ 1442.844290][T25512] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.6949'. [ 1444.353356][T25545] netlink: 'syz.4.6959': attribute type 41 has an invalid length. [ 1444.937744][T25562] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.6967'. [ 1445.224864][T25573] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6971'. [ 1445.919121][T25584] netlink: 'syz.2.6974': attribute type 1 has an invalid length. [ 1445.934416][T25584] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.6974'. [ 1446.465279][T25594] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.6979'. [ 1446.502356][T25598] FAULT_INJECTION: forcing a failure. [ 1446.502356][T25598] name failslab, interval 1, probability 0, space 0, times 0 [ 1446.534321][T25598] CPU: 0 PID: 25598 Comm: syz.1.6978 Not tainted syzkaller #0 [ 1446.541883][T25598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1446.551988][T25598] Call Trace: [ 1446.555319][T25598] [ 1446.558319][T25598] dump_stack_lvl+0x188/0x24e [ 1446.563078][T25598] ? show_regs_print_info+0x12/0x12 [ 1446.568337][T25598] ? load_image+0x400/0x400 [ 1446.572905][T25598] ? __might_sleep+0xd0/0xd0 [ 1446.577539][T25598] ? __lock_acquire+0x7d10/0x7d10 [ 1446.582670][T25598] should_fail_ex+0x399/0x4d0 [ 1446.587422][T25598] should_failslab+0x5/0x20 [ 1446.592005][T25598] slab_pre_alloc_hook+0x59/0x310 [ 1446.597080][T25598] ? __xdp_reg_mem_model+0x1e0/0x5c0 [ 1446.602422][T25598] __kmem_cache_alloc_node+0x4f/0x260 [ 1446.607844][T25598] ? memset+0x1e/0x40 [ 1446.611882][T25598] ? __xdp_reg_mem_model+0x1e0/0x5c0 [ 1446.617254][T25598] kmalloc_trace+0x26/0xe0 [ 1446.621731][T25598] __xdp_reg_mem_model+0x1e0/0x5c0 [ 1446.626916][T25598] ? kvmalloc_node+0x6c/0x180 [ 1446.631761][T25598] ? kvmalloc_node+0x6c/0x180 [ 1446.636510][T25598] ? xdp_reg_mem_model+0x30/0x30 [ 1446.641525][T25598] xdp_reg_mem_model+0x1e/0x30 [ 1446.646431][T25598] bpf_test_run_xdp_live+0x299/0x1a90 [ 1446.651861][T25598] ? 0xffffffffa0004440 [ 1446.656058][T25598] ? __SCT__tp_func_snd_hdac_stream_stop+0x8/0x8 [ 1446.662456][T25598] ? 0xffffffffa0004440 [ 1446.666654][T25598] ? bpf_dispatcher_change_prog+0xcbb/0xf10 [ 1446.672603][T25598] ? 0xffffffffa0004440 [ 1446.676808][T25598] ? xdp_convert_md_to_buff+0x330/0x330 [ 1446.682444][T25598] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 1446.688777][T25598] ? bpf_test_init+0x119/0x140 [ 1446.693587][T25598] ? xdp_convert_md_to_buff+0x5b/0x330 [ 1446.699097][T25598] bpf_prog_test_run_xdp+0x736/0xf10 [ 1446.704537][T25598] ? dev_put+0x80/0x80 [ 1446.708665][T25598] ? bpf_prog_test_run+0x312/0x390 [ 1446.713841][T25598] ? dev_put+0x80/0x80 [ 1446.717957][T25598] bpf_prog_test_run+0x31e/0x390 [ 1446.722942][T25598] __sys_bpf+0x62b/0x780 [ 1446.727237][T25598] ? bpf_link_show_fdinfo+0x380/0x380 [ 1446.732679][T25598] ? lock_chain_count+0x20/0x20 [ 1446.737577][T25598] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1446.743623][T25598] __x64_sys_bpf+0x78/0x90 [ 1446.748110][T25598] do_syscall_64+0x4c/0xa0 [ 1446.752571][T25598] ? clear_bhb_loop+0x60/0xb0 [ 1446.757301][T25598] ? clear_bhb_loop+0x60/0xb0 [ 1446.762202][T25598] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1446.768140][T25598] RIP: 0033:0x7f9e8fd9bf79 [ 1446.772600][T25598] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1446.792286][T25598] RSP: 002b:00007f9e90bdc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1446.800766][T25598] RAX: ffffffffffffffda RBX: 00007f9e90015fa0 RCX: 00007f9e8fd9bf79 [ 1446.808791][T25598] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 1446.816814][T25598] RBP: 00007f9e90bdc090 R08: 0000000000000000 R09: 0000000000000000 [ 1446.824859][T25598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1446.832882][T25598] R13: 00007f9e90016038 R14: 00007f9e90015fa0 R15: 00007ffe2bab2be8 [ 1446.840931][T25598] [ 1447.563854][T25608] netlink: 'syz.1.6983': attribute type 21 has an invalid length. [ 1447.689168][T25616] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.6986'. [ 1447.775231][T25619] netlink: 'syz.4.6987': attribute type 13 has an invalid length. [ 1447.898564][T25619] netlink: 152 bytes leftover after parsing attributes in process `syz.4.6987'. [ 1447.918258][T25619] FAULT_INJECTION: forcing a failure. [ 1447.918258][T25619] name failslab, interval 1, probability 0, space 0, times 0 [ 1447.938026][T25619] CPU: 1 PID: 25619 Comm: syz.4.6987 Not tainted syzkaller #0 [ 1447.945589][T25619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1447.955714][T25619] Call Trace: [ 1447.959070][T25619] [ 1447.962066][T25619] dump_stack_lvl+0x188/0x24e [ 1447.966835][T25619] ? show_regs_print_info+0x12/0x12 [ 1447.972120][T25619] ? load_image+0x400/0x400 [ 1447.976712][T25619] ? __might_sleep+0xd0/0xd0 [ 1447.981386][T25619] ? __lock_acquire+0x7d10/0x7d10 [ 1447.986530][T25619] should_fail_ex+0x399/0x4d0 [ 1447.991311][T25619] should_failslab+0x5/0x20 [ 1447.995906][T25619] slab_pre_alloc_hook+0x59/0x310 [ 1448.001029][T25619] kmem_cache_alloc_node+0x5a/0x320 [ 1448.006302][T25619] ? if_nlmsg_size+0x5b0/0x880 [ 1448.011146][T25619] ? __alloc_skb+0xfc/0x7e0 [ 1448.015750][T25619] __alloc_skb+0xfc/0x7e0 [ 1448.020188][T25619] rtmsg_ifinfo_build_skb+0x80/0x180 [ 1448.025567][T25619] rtnetlink_event+0xcd/0x1a0 [ 1448.030324][T25619] raw_notifier_call_chain+0xcb/0x160 [ 1448.035770][T25619] dev_change_tx_queue_len+0x12a/0x280 [ 1448.041554][T25619] ? dev_set_mtu+0xc0/0xc0 [ 1448.046027][T25619] ? dev_change_flags+0xe3/0x1a0 [ 1448.051056][T25619] do_setlink+0xec3/0x3e60 [ 1448.055548][T25619] ? _printk+0xda/0x130 [ 1448.059765][T25619] ? nlmsg_parse_deprecated_strict+0x110/0x110 [ 1448.065980][T25619] ? load_image+0x400/0x400 [ 1448.070578][T25619] ? rcu_is_watching+0x11/0xa0 [ 1448.075421][T25619] ? do_trace_netlink_extack+0x9c/0x220 [ 1448.081025][T25619] ? __nla_validate_parse+0x20f9/0x2a40 [ 1448.086612][T25619] ? netlink_rcv_skb+0x1fb/0x450 [ 1448.091593][T25619] ? netlink_unicast+0x74d/0x8d0 [ 1448.096574][T25619] ? netlink_sendmsg+0x8ad/0xbd0 [ 1448.101614][T25619] ? __nla_validate+0x50/0x50 [ 1448.106396][T25619] ? validate_linkmsg+0x3db/0x4c0 [ 1448.111484][T25619] rtnl_newlink+0x177c/0x2080 [ 1448.116267][T25619] ? rtnl_newlink+0x531/0x2080 [ 1448.121126][T25619] ? rtnl_setlink+0x510/0x510 [ 1448.125859][T25619] ? trace_raw_output_contention_end+0xd0/0xd0 [ 1448.132067][T25619] ? rcu_is_watching+0x11/0xa0 [ 1448.136879][T25619] ? trace_contention_end+0x5f/0x170 [ 1448.142247][T25619] ? __mutex_lock+0x1ab/0xaf0 [ 1448.147008][T25619] ? rcu_read_unlock+0x8c/0xa0 [ 1448.151851][T25619] ? rtnetlink_rcv_msg+0x226/0xfc0 [ 1448.157022][T25619] ? rtnetlink_rcv_msg+0x226/0xfc0 [ 1448.162178][T25619] ? rtnl_setlink+0x510/0x510 [ 1448.166905][T25619] rtnetlink_rcv_msg+0x87c/0xfc0 [ 1448.171934][T25619] ? rtnetlink_bind+0x80/0x80 [ 1448.176653][T25619] ? __local_bh_enable_ip+0x136/0x1c0 [ 1448.182075][T25619] ? migrate_enable+0x148/0x220 [ 1448.186981][T25619] ? trace_call_bpf+0xbf/0x6b0 [ 1448.191794][T25619] ? trace_call_bpf+0xbf/0x6b0 [ 1448.196613][T25619] ? trace_call_bpf+0x5d6/0x6b0 [ 1448.201512][T25619] ? trace_call_bpf+0xbf/0x6b0 [ 1448.206337][T25619] ? __dev_queue_xmit+0x26b/0x37f0 [ 1448.211490][T25619] ? __dev_queue_xmit+0x26b/0x37f0 [ 1448.216679][T25619] ? __bpf_trace_bpf_trace_printk+0x20/0x20 [ 1448.222663][T25619] ? perf_trace_run_bpf_submit+0x124/0x1c0 [ 1448.228547][T25619] ? perf_trace_lock+0x301/0x390 [ 1448.233542][T25619] ? __copy_skb_header+0x3ba/0x4f0 [ 1448.238737][T25619] ? trace_event_raw_event_lock+0x250/0x250 [ 1448.244685][T25619] ? __skb_clone+0x480/0x790 [ 1448.249357][T25619] netlink_rcv_skb+0x1fb/0x450 [ 1448.254173][T25619] ? rtnetlink_bind+0x80/0x80 [ 1448.258913][T25619] ? netlink_ack+0x1170/0x1170 [ 1448.263761][T25619] ? netlink_deliver_tap+0x2e/0x1b0 [ 1448.269026][T25619] netlink_unicast+0x74d/0x8d0 [ 1448.273870][T25619] netlink_sendmsg+0x8ad/0xbd0 [ 1448.278714][T25619] ? netlink_getsockopt+0x550/0x550 [ 1448.283970][T25619] ? aa_sock_msg_perm+0x94/0x150 [ 1448.288966][T25619] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1448.294286][T25619] ? security_socket_sendmsg+0x7c/0xa0 [ 1448.299812][T25619] ? netlink_getsockopt+0x550/0x550 [ 1448.305058][T25619] ____sys_sendmsg+0x5be/0x970 [ 1448.309895][T25619] ? __sys_sendmsg_sock+0x30/0x30 [ 1448.314973][T25619] ? __import_iovec+0x315/0x500 [ 1448.319896][T25619] ? import_iovec+0x6f/0xa0 [ 1448.324467][T25619] ___sys_sendmsg+0x2a2/0x360 [ 1448.329211][T25619] ? __sys_sendmsg+0x290/0x290 [ 1448.334083][T25619] ? __lock_acquire+0x7d10/0x7d10 [ 1448.339229][T25619] __se_sys_sendmsg+0x1bb/0x2a0 [ 1448.344138][T25619] ? __x64_sys_sendmsg+0x80/0x80 [ 1448.349169][T25619] ? lockdep_hardirqs_on+0x94/0x140 [ 1448.354420][T25619] do_syscall_64+0x4c/0xa0 [ 1448.358900][T25619] ? clear_bhb_loop+0x60/0xb0 [ 1448.363618][T25619] ? clear_bhb_loop+0x60/0xb0 [ 1448.368349][T25619] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1448.374278][T25619] RIP: 0033:0x7eff6139bf79 [ 1448.378736][T25619] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1448.398405][T25619] RSP: 002b:00007eff622f5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1448.406887][T25619] RAX: ffffffffffffffda RBX: 00007eff61615fa0 RCX: 00007eff6139bf79 [ 1448.414908][T25619] RDX: 0000000000000000 RSI: 0000200000000940 RDI: 0000000000000005 [ 1448.422924][T25619] RBP: 00007eff622f5090 R08: 0000000000000000 R09: 0000000000000000 [ 1448.430934][T25619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1448.438937][T25619] R13: 00007eff61616038 R14: 00007eff61615fa0 R15: 00007fff51bdd2f8 [ 1448.446985][T25619] [ 1448.518737][T25619] erspan0: refused to change device tx_queue_len [ 1448.535898][T25619] net_ratelimit: 3256 callbacks suppressed [ 1448.535918][T25619] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 1449.919037][T25656] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.7001'. [ 1451.190049][T25692] netlink: 3775 bytes leftover after parsing attributes in process `syz.3.7007'. [ 1452.447135][T25685] netlink: 'syz.2.7010': attribute type 10 has an invalid length. [ 1452.465903][T25691] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.7011'. [ 1453.031469][T25707] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.7017'. [ 1455.895058][T25713] netlink: 'syz.3.7016': attribute type 10 has an invalid length. [ 1456.241293][T25729] bridge0: port 2(bridge_slave_1) entered disabled state [ 1456.250677][T25729] bridge0: port 1(bridge_slave_0) entered disabled state [ 1456.582599][T25738] device syzkaller0 entered promiscuous mode [ 1457.429108][T25745] netlink: 160 bytes leftover after parsing attributes in process `syz.3.7028'. [ 1457.471488][T25745] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1459.866637][T25756] netlink: 'syz.3.7032': attribute type 10 has an invalid length. [ 1460.082276][T25771] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.7035'. [ 1460.486284][T25785] netlink: 499 bytes leftover after parsing attributes in process `syz.3.7040'. [ 1460.585682][T25785] device pim6reg1 entered promiscuous mode [ 1462.697855][T25806] netlink: 'syz.0.7046': attribute type 3 has an invalid length. [ 1462.738035][T25806] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.7046'. [ 1462.779073][T25813] netlink: 'syz.4.7049': attribute type 39 has an invalid length. [ 1463.296289][T25830] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.7054'. [ 1464.825925][T25882] netlink: 'syz.0.7069': attribute type 13 has an invalid length. [ 1464.864968][T25882] netlink: 152 bytes leftover after parsing attributes in process `syz.0.7069'. [ 1465.239753][T25886] netlink: 'syz.2.7070': attribute type 3 has an invalid length. [ 1465.257714][T25886] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.7070'. [ 1465.567058][T25882] erspan0: refused to change device tx_queue_len [ 1465.699710][T25882] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 1466.096790][T25896] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.7074'. [ 1466.237793][ T4282] Bluetooth: hci5: command 0x0406 tx timeout [ 1466.731516][T25914] netlink: 'syz.3.7077': attribute type 1 has an invalid length. [ 1466.762433][T25912] netlink: 15487 bytes leftover after parsing attributes in process `syz.3.7077'. [ 1466.771370][T25914] netlink: 15487 bytes leftover after parsing attributes in process `syz.3.7077'. [ 1467.045787][T25914] netlink: 3 bytes leftover after parsing attributes in process `syz.3.7077'. [ 1467.391877][T25929] netlink: 'syz.1.7083': attribute type 10 has an invalid length. [ 1468.345397][T25948] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.7091'. [ 1468.526955][T25960] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7093'. [ 1469.510427][T25987] netlink: 'syz.1.7103': attribute type 10 has an invalid length. [ 1469.784049][T25994] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.7106'. [ 1469.859465][T25998] netlink: 'syz.1.7107': attribute type 1 has an invalid length. [ 1469.896350][T26000] netlink: 'syz.0.7108': attribute type 2 has an invalid length. [ 1469.929369][T25994] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 1469.946276][T25994] CPU: 1 PID: 25994 Comm: syz.3.7106 Not tainted syzkaller #0 [ 1469.953859][T25994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1469.963967][T25994] Call Trace: [ 1469.967293][T25994] [ 1469.970266][T25994] dump_stack_lvl+0x188/0x24e [ 1469.975010][T25994] ? show_regs_print_info+0x12/0x12 [ 1469.980269][T25994] ? load_image+0x400/0x400 [ 1469.984873][T25994] sysfs_warn_dup+0x8a/0xa0 [ 1469.989410][T25994] sysfs_do_create_link_sd+0xc0/0x110 [ 1469.994819][T25994] device_add+0x7ed/0xfb0 [ 1469.999210][T25994] wiphy_register+0x1d9f/0x2ac0 [ 1470.004113][T25994] ? cfg80211_event_work+0x40/0x40 [ 1470.009263][T25994] ? minstrel_ht_alloc+0x894/0xa20 [ 1470.014505][T25994] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1470.020618][T25994] ieee80211_register_hw+0x2d00/0x39f0 [ 1470.026119][T25994] ? ieee80211_register_hw+0xeb1/0x39f0 [ 1470.031706][T25994] ? ieee80211_register_hw+0xeb1/0x39f0 [ 1470.037326][T25994] ? ieee80211_tasklet_handler+0x20/0x20 [ 1470.043013][T25994] ? memset+0x1e/0x40 [ 1470.047022][T25994] ? __hrtimer_init+0x186/0x270 [ 1470.051903][T25994] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 1470.057681][T25994] hwsim_new_radio_nl+0xafa/0xce0 [ 1470.062750][T25994] genl_family_rcv_msg_doit+0x22a/0x330 [ 1470.068320][T25994] ? end_current_label_crit_section+0x170/0x170 [ 1470.074595][T25994] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1470.080520][T25994] ? lockdep_hardirqs_on+0x94/0x140 [ 1470.085770][T25994] ? bpf_lsm_capable+0x5/0x10 [ 1470.090476][T25994] ? security_capable+0x85/0xb0 [ 1470.095359][T25994] genl_rcv_msg+0x604/0x790 [ 1470.099915][T25994] ? genl_bind+0x360/0x360 [ 1470.104372][T25994] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 1470.110755][T25994] netlink_rcv_skb+0x1fb/0x450 [ 1470.115577][T25994] ? genl_bind+0x360/0x360 [ 1470.120054][T25994] ? netlink_ack+0x1170/0x1170 [ 1470.124867][T25994] ? down_read+0x1a8/0x2d0 [ 1470.129322][T25994] genl_rcv+0x24/0x40 [ 1470.133344][T25994] netlink_unicast+0x74d/0x8d0 [ 1470.138588][T25994] netlink_sendmsg+0x8ad/0xbd0 [ 1470.143388][T25994] ? lockdep_hardirqs_on+0x94/0x140 [ 1470.148616][T25994] ? netlink_getsockopt+0x550/0x550 [ 1470.153855][T25994] ? security_socket_sendmsg+0x41/0xa0 [ 1470.159348][T25994] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1470.164660][T25994] ? security_socket_sendmsg+0x7c/0xa0 [ 1470.170159][T25994] ? netlink_getsockopt+0x550/0x550 [ 1470.175391][T25994] ____sys_sendmsg+0x5be/0x970 [ 1470.180202][T25994] ? __sanitizer_cov_trace_pc+0x4/0x60 [ 1470.185691][T25994] ? __sys_sendmsg_sock+0x30/0x30 [ 1470.190747][T25994] ? __import_iovec+0x315/0x500 [ 1470.195686][T25994] ? import_iovec+0x6f/0xa0 [ 1470.200221][T25994] ___sys_sendmsg+0x2a2/0x360 [ 1470.204943][T25994] ? __sys_sendmsg+0x290/0x290 [ 1470.209756][T25994] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 1470.215552][T25994] __se_sys_sendmsg+0x1bb/0x2a0 [ 1470.220466][T25994] ? __x64_sys_sendmsg+0x80/0x80 [ 1470.225461][T25994] ? syscall_enter_from_user_mode+0x2a/0x80 [ 1470.231378][T25994] do_syscall_64+0x4c/0xa0 [ 1470.235821][T25994] ? clear_bhb_loop+0x60/0xb0 [ 1470.240525][T25994] ? clear_bhb_loop+0x60/0xb0 [ 1470.245234][T25994] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1470.251153][T25994] RIP: 0033:0x7f55d739bf79 [ 1470.255594][T25994] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1470.275226][T25994] RSP: 002b:00007f55d8227028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1470.283680][T25994] RAX: ffffffffffffffda RBX: 00007f55d7615fa0 RCX: 00007f55d739bf79 [ 1470.291678][T25994] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 1470.299759][T25994] RBP: 00007f55d74327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1470.307817][T25994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1470.315845][T25994] R13: 00007f55d7616038 R14: 00007f55d7615fa0 R15: 00007ffd31635168 [ 1470.323869][T25994] [ 1470.427870][T26002] netlink: 14 bytes leftover after parsing attributes in process `syz.0.7108'. [ 1471.421243][T26017] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.7114'. [ 1471.478234][T26018] netlink: 'syz.0.7115': attribute type 1 has an invalid length. [ 1471.517136][T26018] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.7115'. [ 1473.170362][T26060] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1473.297748][T26060] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1473.306938][T26060] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1473.316126][T26060] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1473.325296][T26060] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1473.334499][T26060] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1473.343709][T26060] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1473.352893][T26060] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1473.362093][T26060] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1473.371272][T26060] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1473.604099][T26074] device syzkaller0 entered promiscuous mode [ 1474.261607][T26084] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.7134'. [ 1474.283561][T26085] FAULT_INJECTION: forcing a failure. [ 1474.283561][T26085] name failslab, interval 1, probability 0, space 0, times 0 [ 1474.317312][T26085] CPU: 1 PID: 26085 Comm: syz.3.7136 Not tainted syzkaller #0 [ 1474.324859][T26085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1474.334970][T26085] Call Trace: [ 1474.338293][T26085] [ 1474.341273][T26085] dump_stack_lvl+0x188/0x24e [ 1474.346015][T26085] ? show_regs_print_info+0x12/0x12 [ 1474.351271][T26085] ? load_image+0x400/0x400 [ 1474.355834][T26085] ? __might_sleep+0xd0/0xd0 [ 1474.360469][T26085] ? __lock_acquire+0x7d10/0x7d10 [ 1474.365556][T26085] should_fail_ex+0x399/0x4d0 [ 1474.370307][T26085] should_failslab+0x5/0x20 [ 1474.374879][T26085] slab_pre_alloc_hook+0x59/0x310 [ 1474.379955][T26085] ? bpf_prog_test_run_flow_dissector+0x255/0x640 [ 1474.386427][T26085] ? bpf_prog_test_run_flow_dissector+0x255/0x640 [ 1474.392899][T26085] __kmem_cache_alloc_node+0x4f/0x260 [ 1474.398327][T26085] ? bpf_prog_test_run_flow_dissector+0x255/0x640 [ 1474.404794][T26085] __kmalloc+0xa0/0x240 [ 1474.409019][T26085] bpf_prog_test_run_flow_dissector+0x255/0x640 [ 1474.415375][T26085] ? xdp_convert_buff_to_md+0x200/0x200 [ 1474.420983][T26085] ? __fget_files+0x28/0x4b0 [ 1474.425645][T26085] ? __fget_files+0x28/0x4b0 [ 1474.430312][T26085] ? __fget_files+0x43d/0x4b0 [ 1474.435055][T26085] ? xdp_convert_buff_to_md+0x200/0x200 [ 1474.440676][T26085] bpf_prog_test_run+0x31e/0x390 [ 1474.445682][T26085] __sys_bpf+0x62b/0x780 [ 1474.450024][T26085] ? bpf_link_show_fdinfo+0x380/0x380 [ 1474.455481][T26085] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1474.461720][T26085] __x64_sys_bpf+0x78/0x90 [ 1474.466214][T26085] do_syscall_64+0x4c/0xa0 [ 1474.470706][T26085] ? clear_bhb_loop+0x60/0xb0 [ 1474.475443][T26085] ? clear_bhb_loop+0x60/0xb0 [ 1474.480173][T26085] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1474.486131][T26085] RIP: 0033:0x7f55d739bf79 [ 1474.490601][T26085] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1474.510268][T26085] RSP: 002b:00007f55d8227028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1474.518738][T26085] RAX: ffffffffffffffda RBX: 00007f55d7615fa0 RCX: 00007f55d739bf79 [ 1474.526756][T26085] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 000000000000000a [ 1474.534776][T26085] RBP: 00007f55d8227090 R08: 0000000000000000 R09: 0000000000000000 [ 1474.542816][T26085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1474.550837][T26085] R13: 00007f55d7616038 R14: 00007f55d7615fa0 R15: 00007ffd31635168 [ 1474.558900][T26085] [ 1474.881046][T26097] netlink: 'syz.0.7139': attribute type 1 has an invalid length. [ 1478.925166][T26105] netlink: 'syz.0.7143': attribute type 10 has an invalid length. [ 1478.933342][T26120] netlink: 'syz.3.7147': attribute type 10 has an invalid length. [ 1478.950697][T26120] team0: Device vxcan1 is of different type [ 1480.572573][T26155] netlink: 'syz.4.7153': attribute type 3 has an invalid length. [ 1480.611576][T26155] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.7153'. [ 1482.152130][T26137] device wg2 entered promiscuous mode [ 1482.180978][T26136] netlink: 'syz.3.7152': attribute type 7 has an invalid length. [ 1482.359775][T26159] netlink: 463 bytes leftover after parsing attributes in process `syz.2.7155'. [ 1482.483141][T26166] netlink: 'syz.4.7159': attribute type 29 has an invalid length. [ 1482.504014][T26166] netlink: 'syz.4.7159': attribute type 29 has an invalid length. [ 1482.538160][T26163] netlink: 'syz.3.7157': attribute type 3 has an invalid length. [ 1482.556326][T26163] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.7157'. [ 1482.740778][T26171] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.7160'. [ 1484.640116][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.646797][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1485.458943][T26223] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.7177'. [ 1487.201173][T26240] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.7180'. [ 1488.761215][T26260] netlink: 'syz.4.7187': attribute type 1 has an invalid length. [ 1488.800444][T26260] netlink: 105120 bytes leftover after parsing attributes in process `syz.4.7187'. [ 1488.992413][T26273] sctp: [Deprecated]: syz.4.7191 (pid 26273) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1488.992413][T26273] Use struct sctp_sack_info instead [ 1489.044672][T26274] netlink: 'syz.4.7191': attribute type 21 has an invalid length. [ 1489.075387][T26279] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.7192'. [ 1489.086228][T26262] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7186'. [ 1489.300436][T26285] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.7193'. [ 1490.181386][T26289] device syzkaller0 entered promiscuous mode [ 1491.475271][T26323] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.7209'. [ 1492.497700][T26348] netlink: 'syz.1.7218': attribute type 10 has an invalid length. [ 1492.706186][T26354] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.7221'. [ 1493.484446][T26363] device syzkaller0 entered promiscuous mode [ 1493.523559][T26380] device bridge_slave_1 left promiscuous mode [ 1493.532107][T26382] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.7230'. [ 1493.543802][T26380] bridge0: port 2(bridge_slave_1) entered disabled state [ 1493.559606][T26380] device bridge_slave_0 left promiscuous mode [ 1493.576337][T26380] bridge0: port 1(bridge_slave_0) entered disabled state [ 1493.866471][T26393] netlink: 'syz.1.7233': attribute type 3 has an invalid length. [ 1493.890066][T26393] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.7233'. [ 1494.706932][T26400] bridge0: port 2(bridge_slave_1) entered disabled state [ 1494.718706][T26400] bridge0: port 1(bridge_slave_0) entered disabled state [ 1497.257626][T26411] netlink: 160 bytes leftover after parsing attributes in process `syz.3.7239'. [ 1497.268407][T26411] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1497.488803][T26419] netlink: 'syz.3.7243': attribute type 10 has an invalid length. [ 1497.717682][T26425] device syzkaller0 entered promiscuous mode [ 1502.938960][T26468] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.7256'. [ 1505.242178][T26531] netlink: 'syz.4.7275': attribute type 21 has an invalid length. [ 1505.440335][T26531] netlink: 164 bytes leftover after parsing attributes in process `syz.4.7275'. [ 1505.898840][T26545] netlink: 'syz.2.7279': attribute type 13 has an invalid length. [ 1505.906773][T26545] netlink: 152 bytes leftover after parsing attributes in process `syz.2.7279'. [ 1505.972482][T26545] erspan0: refused to change device tx_queue_len [ 1506.028495][T26545] net_ratelimit: 3256 callbacks suppressed [ 1506.028514][T26545] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 1506.205737][T26546] device syzkaller0 entered promiscuous mode [ 1510.348575][T26591] netlink: 'syz.4.7294': attribute type 10 has an invalid length. [ 1510.375222][T26591] team0: Port device netdevsim0 added [ 1510.404186][T26594] IPv6: Can't replace route, no match found [ 1510.430185][T26595] mac80211_hwsim hwsim97 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1510.480837][T26597] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7293'. [ 1510.670261][T26608] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1510.984524][T26613] netlink: 'syz.0.7300': attribute type 4 has an invalid length. [ 1511.077622][T26613] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.7300'. [ 1511.151572][T26619] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7302'. [ 1511.688879][T26642] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7308'. [ 1511.740737][T26642] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7308'. [ 1511.847679][T26646] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7308'. [ 1512.099185][T26656] netlink: 'syz.1.7311': attribute type 10 has an invalid length. [ 1512.186424][T26656] netlink: 2 bytes leftover after parsing attributes in process `syz.1.7311'. [ 1512.261670][T26656] device bond0 entered promiscuous mode [ 1512.267322][T26656] device bond_slave_0 entered promiscuous mode [ 1512.327657][T26656] device bond_slave_1 entered promiscuous mode [ 1512.334489][T26656] bridge0: port 3(bond0) entered blocking state [ 1512.387249][T26656] bridge0: port 3(bond0) entered disabled state [ 1512.405123][T26658] netlink: 'syz.0.7313': attribute type 10 has an invalid length. [ 1514.974964][T26658] team0: Port device macvlan0 added [ 1515.082691][T26671] device syzkaller0 entered promiscuous mode [ 1515.180970][T26678] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1515.205990][T26676] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.7318'. [ 1517.506277][T26676] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 1517.519831][T26676] CPU: 1 PID: 26676 Comm: syz.0.7318 Not tainted syzkaller #0 [ 1517.527373][T26676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1517.537567][T26676] Call Trace: [ 1517.540883][T26676] [ 1517.543857][T26676] dump_stack_lvl+0x188/0x24e [ 1517.548616][T26676] ? show_regs_print_info+0x12/0x12 [ 1517.553870][T26676] ? load_image+0x400/0x400 [ 1517.558443][T26676] sysfs_warn_dup+0x8a/0xa0 [ 1517.563001][T26676] sysfs_do_create_link_sd+0xc0/0x110 [ 1517.568431][T26676] device_add+0x7ed/0xfb0 [ 1517.572838][T26676] wiphy_register+0x1d9f/0x2ac0 [ 1517.577765][T26676] ? cfg80211_event_work+0x40/0x40 [ 1517.582936][T26676] ? minstrel_ht_alloc+0x894/0xa20 [ 1517.588105][T26676] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1517.594204][T26676] ieee80211_register_hw+0x2d00/0x39f0 [ 1517.599719][T26676] ? ieee80211_register_hw+0xeb1/0x39f0 [ 1517.605303][T26676] ? ieee80211_register_hw+0xeb1/0x39f0 [ 1517.610891][T26676] ? ieee80211_tasklet_handler+0x20/0x20 [ 1517.616585][T26676] ? memset+0x1e/0x40 [ 1517.620600][T26676] ? __hrtimer_init+0x186/0x270 [ 1517.625479][T26676] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 1517.631263][T26676] hwsim_new_radio_nl+0xafa/0xce0 [ 1517.636337][T26676] genl_family_rcv_msg_doit+0x22a/0x330 [ 1517.641920][T26676] ? end_current_label_crit_section+0x170/0x170 [ 1517.648218][T26676] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1517.654151][T26676] ? bpf_lsm_capable+0x5/0x10 [ 1517.658855][T26676] ? security_capable+0x85/0xb0 [ 1517.663743][T26676] genl_rcv_msg+0x604/0x790 [ 1517.668288][T26676] ? genl_bind+0x360/0x360 [ 1517.672741][T26676] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 1517.679117][T26676] netlink_rcv_skb+0x1fb/0x450 [ 1517.683944][T26676] ? genl_bind+0x360/0x360 [ 1517.688402][T26676] ? netlink_ack+0x1170/0x1170 [ 1517.693212][T26676] ? down_read+0x1a8/0x2d0 [ 1517.697672][T26676] genl_rcv+0x24/0x40 [ 1517.701689][T26676] netlink_unicast+0x74d/0x8d0 [ 1517.706579][T26676] netlink_sendmsg+0x8ad/0xbd0 [ 1517.711398][T26676] ? netlink_getsockopt+0x550/0x550 [ 1517.716639][T26676] ? lockdep_hardirqs_on+0x94/0x140 [ 1517.721867][T26676] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1517.728070][T26676] ? aa_sock_msg_perm+0x94/0x150 [ 1517.733041][T26676] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1517.738358][T26676] ? security_socket_sendmsg+0x7c/0xa0 [ 1517.743859][T26676] ? netlink_getsockopt+0x550/0x550 [ 1517.749129][T26676] ____sys_sendmsg+0x5be/0x970 [ 1517.754033][T26676] ? __sys_sendmsg_sock+0x30/0x30 [ 1517.759106][T26676] ? __import_iovec+0x315/0x500 [ 1517.764024][T26676] ? import_iovec+0x6f/0xa0 [ 1517.768555][T26676] ___sys_sendmsg+0x2a2/0x360 [ 1517.773274][T26676] ? __sys_sendmsg+0x290/0x290 [ 1517.778087][T26676] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 1517.783857][T26676] __se_sys_sendmsg+0x1bb/0x2a0 [ 1517.788761][T26676] ? __x64_sys_sendmsg+0x80/0x80 [ 1517.793730][T26676] ? lockdep_hardirqs_on+0x94/0x140 [ 1517.798978][T26676] ? __x64_sys_sendmsg+0x19/0x80 [ 1517.803950][T26676] ? __sanitizer_cov_trace_pc+0x4/0x60 [ 1517.809444][T26676] do_syscall_64+0x4c/0xa0 [ 1517.813903][T26676] ? clear_bhb_loop+0x60/0xb0 [ 1517.818611][T26676] ? clear_bhb_loop+0x60/0xb0 [ 1517.823320][T26676] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1517.829244][T26676] RIP: 0033:0x7f497539bf79 [ 1517.833686][T26676] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1517.853402][T26676] RSP: 002b:00007f49761cb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1517.861856][T26676] RAX: ffffffffffffffda RBX: 00007f4975615fa0 RCX: 00007f497539bf79 [ 1517.869886][T26676] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 1517.877897][T26676] RBP: 00007f49754327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1517.885892][T26676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1517.893894][T26676] R13: 00007f4975616038 R14: 00007f4975615fa0 R15: 00007fff442b8e78 [ 1517.901907][T26676] [ 1518.162056][T26703] netlink: 'syz.1.7327': attribute type 1 has an invalid length. [ 1518.202897][T26703] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.7327'. [ 1521.536707][T26725] device wg2 entered promiscuous mode [ 1522.581707][T26755] netlink: 'syz.3.7341': attribute type 10 has an invalid length. [ 1522.667198][T26755] team0: Port device macvlan0 added [ 1528.006636][T26804] device wg2 entered promiscuous mode [ 1528.494091][T26824] netlink: 'syz.0.7356': attribute type 10 has an invalid length. [ 1536.342758][T26911] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7375'. [ 1537.215740][T26924] netlink: 14 bytes leftover after parsing attributes in process `syz.2.7380'. [ 1537.323792][T26925] netlink: 'syz.2.7380': attribute type 29 has an invalid length. [ 1537.581413][T26924] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1537.645282][T26924] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1537.695384][T26924] bond0 (unregistering): Released all slaves [ 1537.717486][T26925] netlink: 'syz.2.7380': attribute type 29 has an invalid length. [ 1537.793646][T26926] netlink: 'syz.2.7380': attribute type 29 has an invalid length. [ 1545.616022][T27007] netlink: 'syz.1.7395': attribute type 29 has an invalid length. [ 1546.074845][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.081342][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1548.089416][T27002] device wg2 entered promiscuous mode [ 1548.096584][T27001] netlink: 14 bytes leftover after parsing attributes in process `syz.1.7395'. [ 1548.390370][T27001] bridge0: port 3(bond0) entered disabled state [ 1548.433145][T27001] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1548.519056][T27001] device bond_slave_0 left promiscuous mode [ 1548.552899][T27001] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1548.565137][T27001] device bond_slave_1 left promiscuous mode [ 1548.610523][T27001] bond0 (unregistering): Released all slaves [ 1548.645506][T27007] netlink: 'syz.1.7395': attribute type 29 has an invalid length. [ 1550.172701][T27055] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.7410'. [ 1550.593295][T27067] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1550.644831][T27067] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1550.654122][T27067] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1550.663260][T27067] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1550.672392][T27067] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1550.681523][T27067] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1550.690672][T27067] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1550.699846][T27067] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1550.708978][T27067] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1550.718093][T27067] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1550.835472][T27076] netlink: 143932 bytes leftover after parsing attributes in process `syz.1.7418'. [ 1551.625694][T27086] FAULT_INJECTION: forcing a failure. [ 1551.625694][T27086] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1551.658919][T27086] CPU: 0 PID: 27086 Comm: syz.4.7420 Not tainted syzkaller #0 [ 1551.666473][T27086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1551.676581][T27086] Call Trace: [ 1551.679906][T27086] [ 1551.682875][T27086] dump_stack_lvl+0x188/0x24e [ 1551.687608][T27086] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1551.693817][T27086] ? show_regs_print_info+0x12/0x12 [ 1551.699075][T27086] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1551.705291][T27086] ? dump_stack+0x5/0x12 [ 1551.709590][T27086] should_fail_ex+0x399/0x4d0 [ 1551.714310][T27086] _copy_from_user+0x2c/0x170 [ 1551.719018][T27086] bpf_prog_test_run_flow_dissector+0x27d/0x640 [ 1551.725296][T27086] ? lock_chain_count+0x20/0x20 [ 1551.730180][T27086] ? xdp_convert_buff_to_md+0x200/0x200 [ 1551.735757][T27086] ? __fget_files+0x28/0x4b0 [ 1551.740377][T27086] ? __fget_files+0x28/0x4b0 [ 1551.744996][T27086] ? __fget_files+0x43d/0x4b0 [ 1551.749706][T27086] ? xdp_convert_buff_to_md+0x200/0x200 [ 1551.755287][T27086] bpf_prog_test_run+0x31e/0x390 [ 1551.760262][T27086] __sys_bpf+0x62b/0x780 [ 1551.764568][T27086] ? bpf_link_show_fdinfo+0x380/0x380 [ 1551.769979][T27086] ? lock_chain_count+0x20/0x20 [ 1551.774861][T27086] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1551.780877][T27086] __x64_sys_bpf+0x78/0x90 [ 1551.785324][T27086] do_syscall_64+0x4c/0xa0 [ 1551.789781][T27086] ? clear_bhb_loop+0x60/0xb0 [ 1551.794517][T27086] ? clear_bhb_loop+0x60/0xb0 [ 1551.799263][T27086] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1551.805204][T27086] RIP: 0033:0x7eff6139bf79 [ 1551.809655][T27086] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1551.829290][T27086] RSP: 002b:00007eff622f5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1551.837731][T27086] RAX: ffffffffffffffda RBX: 00007eff61615fa0 RCX: 00007eff6139bf79 [ 1551.845744][T27086] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 000000000000000a [ 1551.853769][T27086] RBP: 00007eff622f5090 R08: 0000000000000000 R09: 0000000000000000 [ 1551.861862][T27086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1551.869861][T27086] R13: 00007eff61616038 R14: 00007eff61615fa0 R15: 00007fff51bdd2f8 [ 1551.877888][T27086] [ 1552.011307][T27092] netlink: 'syz.1.7423': attribute type 1 has an invalid length. [ 1552.919621][T27114] delete_channel: no stack [ 1552.940574][T27114] delete_channel: no stack [ 1553.855609][T27127] netlink: 'syz.1.7432': attribute type 10 has an invalid length. [ 1553.875266][T27127] team0: Device vxcan1 is of different type [ 1554.085659][T27142] netlink: 'syz.3.7433': attribute type 10 has an invalid length. [ 1554.127959][T27142] netlink: 2 bytes leftover after parsing attributes in process `syz.3.7433'. [ 1554.409121][T27145] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7437'. [ 1554.438473][T27145] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7437'. [ 1554.485468][T27145] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7437'. [ 1555.109671][T27164] netlink: 'syz.2.7442': attribute type 3 has an invalid length. [ 1555.146048][T27164] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.7442'. [ 1556.178472][T27215] netlink: 'syz.0.7459': attribute type 1 has an invalid length. [ 1556.213746][T27215] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.7459'. [ 1556.263569][T27217] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7460'. [ 1556.326263][T27220] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.7462'. [ 1556.701521][T27234] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7467'. [ 1557.426400][T27249] netlink: 'syz.3.7471': attribute type 2 has an invalid length. [ 1557.440316][T27249] netlink: 'syz.3.7471': attribute type 9 has an invalid length. [ 1557.468452][T27249] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7471'. [ 1558.776578][T27281] device syzkaller0 entered promiscuous mode [ 1560.395936][T27306] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7492'. [ 1562.986726][T27306] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7492'. [ 1563.011806][T27311] bridge0: port 3(team0) entered blocking state [ 1563.019111][T27311] bridge0: port 3(team0) entered disabled state [ 1563.027876][T27311] device team0 entered promiscuous mode [ 1563.033481][T27311] device team_slave_0 entered promiscuous mode [ 1563.058069][T27311] device team_slave_1 entered promiscuous mode [ 1563.064421][T27311] device netdevsim0 entered promiscuous mode [ 1563.234228][T27334] netlink: 160 bytes leftover after parsing attributes in process `syz.0.7498'. [ 1563.296796][T27334] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1563.594290][T27347] device syzkaller0 entered promiscuous mode [ 1563.602348][T27348] IPv6: NLM_F_CREATE should be specified when creating new route [ 1563.614668][T27348] netlink: 1 bytes leftover after parsing attributes in process `syz.0.7503'. [ 1563.973494][T27354] netlink: 15487 bytes leftover after parsing attributes in process `syz.4.7505'. [ 1568.412887][T27377] device syzkaller0 entered promiscuous mode [ 1569.747274][T27410] netlink: 15487 bytes leftover after parsing attributes in process `syz.1.7521'. [ 1574.429333][T27409] IPv6: NLM_F_CREATE should be specified when creating new route [ 1574.437312][T27409] netlink: 1 bytes leftover after parsing attributes in process `syz.3.7520'. [ 1574.583642][T27433] netlink: 'syz.3.7525': attribute type 46 has an invalid length. [ 1574.614204][T27433] netlink: 'syz.3.7525': attribute type 46 has an invalid length. [ 1574.646843][T27436] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7526'. [ 1575.345344][T27447] netlink: 92148 bytes leftover after parsing attributes in process `syz.0.7529'. [ 1575.517768][T27459] netlink: 'syz.1.7533': attribute type 10 has an invalid length. [ 1575.808593][T27464] netlink: 56 bytes leftover after parsing attributes in process `syz.1.7535'. [ 1575.871389][T27464] netlink: 56 bytes leftover after parsing attributes in process `syz.1.7535'. [ 1575.929921][T27469] net_ratelimit: 6896 callbacks suppressed [ 1575.929943][T27469] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1576.052032][T27472] IPv6: NLM_F_CREATE should be specified when creating new route [ 1576.081600][T27469] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1576.090815][T27469] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1576.092576][T27472] netlink: 1 bytes leftover after parsing attributes in process `syz.2.7537'. [ 1576.099953][T27469] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1576.099990][T27469] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1576.100021][T27469] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1576.100053][T27469] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1576.100085][T27469] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1576.100115][T27469] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1576.100147][T27469] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1576.442849][T27485] netlink: 15487 bytes leftover after parsing attributes in process `syz.3.7539'. [ 1577.064362][T27490] FAULT_INJECTION: forcing a failure. [ 1577.064362][T27490] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1577.110047][T27490] CPU: 0 PID: 27490 Comm: syz.2.7542 Not tainted syzkaller #0 [ 1577.117587][T27490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1577.127685][T27490] Call Trace: [ 1577.130998][T27490] [ 1577.133967][T27490] dump_stack_lvl+0x188/0x24e [ 1577.138701][T27490] ? show_regs_print_info+0x12/0x12 [ 1577.143952][T27490] ? load_image+0x400/0x400 [ 1577.148506][T27490] ? __lock_acquire+0x7d10/0x7d10 [ 1577.153621][T27490] should_fail_ex+0x399/0x4d0 [ 1577.158357][T27490] _copy_to_user+0x2c/0x130 [ 1577.162912][T27490] bpf_test_finish+0x198/0x600 [ 1577.167738][T27490] ? convert_skb_to___skb+0x420/0x420 [ 1577.173171][T27490] bpf_prog_test_run_flow_dissector+0x4c5/0x640 [ 1577.179499][T27490] ? xdp_convert_buff_to_md+0x200/0x200 [ 1577.185099][T27490] ? __fget_files+0x28/0x4b0 [ 1577.189742][T27490] ? __fget_files+0x28/0x4b0 [ 1577.194397][T27490] ? xdp_convert_buff_to_md+0x200/0x200 [ 1577.199988][T27490] bpf_prog_test_run+0x31e/0x390 [ 1577.204981][T27490] __sys_bpf+0x62b/0x780 [ 1577.209278][T27490] ? bpf_link_show_fdinfo+0x380/0x380 [ 1577.214720][T27490] ? lock_chain_count+0x20/0x20 [ 1577.219625][T27490] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1577.225661][T27490] __x64_sys_bpf+0x78/0x90 [ 1577.230131][T27490] do_syscall_64+0x4c/0xa0 [ 1577.234588][T27490] ? clear_bhb_loop+0x60/0xb0 [ 1577.239309][T27490] ? clear_bhb_loop+0x60/0xb0 [ 1577.244039][T27490] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1577.249972][T27490] RIP: 0033:0x7fbd9919bf79 [ 1577.254459][T27490] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1577.274110][T27490] RSP: 002b:00007fbd9a090028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1577.282568][T27490] RAX: ffffffffffffffda RBX: 00007fbd99415fa0 RCX: 00007fbd9919bf79 [ 1577.290579][T27490] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 000000000000000a [ 1577.298601][T27490] RBP: 00007fbd9a090090 R08: 0000000000000000 R09: 0000000000000000 [ 1577.306626][T27490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1577.314644][T27490] R13: 00007fbd99416038 R14: 00007fbd99415fa0 R15: 00007ffe7b0de658 [ 1577.322681][T27490] [ 1578.546013][T27518] netlink: 'syz.2.7550': attribute type 3 has an invalid length. [ 1578.554678][T27518] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.7550'. [ 1578.721569][T27522] netlink: 'syz.1.7552': attribute type 3 has an invalid length. [ 1578.746547][T27522] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.7552'. [ 1579.048299][T27536] netlink: 128244 bytes leftover after parsing attributes in process `syz.1.7554'. [ 1579.776317][T27544] netlink: 15487 bytes leftover after parsing attributes in process `syz.0.7557'. [ 1580.288340][T27558] netlink: 'syz.4.7562': attribute type 29 has an invalid length. [ 1580.296566][T27558] netlink: 'syz.4.7562': attribute type 29 has an invalid length. [ 1580.420199][T27561] netlink: 'syz.4.7562': attribute type 29 has an invalid length. [ 1580.494988][T27566] netlink: 'syz.4.7562': attribute type 29 has an invalid length. [ 1581.481096][T27589] netlink: 'syz.4.7572': attribute type 1 has an invalid length. [ 1581.503878][T27589] netlink: 105120 bytes leftover after parsing attributes in process `syz.4.7572'. [ 1582.215334][T27614] device syzkaller0 entered promiscuous mode [ 1586.011803][T27638] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7587'. [ 1591.347661][T27772] netlink: 'syz.0.7638': attribute type 13 has an invalid length. [ 1591.431218][T27772] netlink: 152 bytes leftover after parsing attributes in process `syz.0.7638'. [ 1591.572082][T27772] erspan0: refused to change device tx_queue_len [ 1591.637149][T27772] net_ratelimit: 3609 callbacks suppressed [ 1591.637171][T27772] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 1592.162821][T27781] netlink: 'syz.0.7630': attribute type 29 has an invalid length. [ 1592.252943][T27781] netlink: 'syz.0.7630': attribute type 29 has an invalid length. [ 1592.386801][T27785] netlink: 'syz.0.7630': attribute type 29 has an invalid length. [ 1592.469444][T27788] netlink: 'syz.0.7630': attribute type 29 has an invalid length. [ 1595.508570][T27850] netlink: 'syz.1.7650': attribute type 10 has an invalid length. [ 1596.282228][T27880] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1596.396025][T27875] netlink: 'syz.1.7660': attribute type 3 has an invalid length. [ 1596.438289][T27875] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.7660'. [ 1596.515856][T27875] netlink: 'syz.1.7660': attribute type 2 has an invalid length. [ 1596.579803][T27875] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7660'. [ 1596.903530][T27892] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7665'. [ 1597.746034][T27906] netlink: 'syz.2.7669': attribute type 1 has an invalid length. [ 1597.788692][T27906] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.7669'. [ 1598.011719][T27914] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7673'. [ 1600.873605][T27975] netlink: 'syz.3.7690': attribute type 10 has an invalid length. [ 1601.626712][T27987] FAULT_INJECTION: forcing a failure. [ 1601.626712][T27987] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1601.648749][T27987] CPU: 1 PID: 27987 Comm: syz.2.7695 Not tainted syzkaller #0 [ 1601.656288][T27987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1601.666416][T27987] Call Trace: [ 1601.669752][T27987] [ 1601.672721][T27987] dump_stack_lvl+0x188/0x24e [ 1601.677464][T27987] ? show_regs_print_info+0x12/0x12 [ 1601.682717][T27987] ? load_image+0x400/0x400 [ 1601.687276][T27987] ? __lock_acquire+0x7d10/0x7d10 [ 1601.692371][T27987] should_fail_ex+0x399/0x4d0 [ 1601.697123][T27987] _copy_to_user+0x2c/0x130 [ 1601.701688][T27987] bpf_test_finish+0x266/0x600 [ 1601.706514][T27987] ? convert_skb_to___skb+0x420/0x420 [ 1601.711953][T27987] bpf_prog_test_run_flow_dissector+0x4c5/0x640 [ 1601.718261][T27987] ? xdp_convert_buff_to_md+0x200/0x200 [ 1601.723864][T27987] ? __fget_files+0x28/0x4b0 [ 1601.728514][T27987] ? __fget_files+0x28/0x4b0 [ 1601.733190][T27987] ? xdp_convert_buff_to_md+0x200/0x200 [ 1601.738792][T27987] bpf_prog_test_run+0x31e/0x390 [ 1601.743781][T27987] __sys_bpf+0x62b/0x780 [ 1601.748066][T27987] ? bpf_link_show_fdinfo+0x380/0x380 [ 1601.753491][T27987] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1601.759711][T27987] __x64_sys_bpf+0x78/0x90 [ 1601.764165][T27987] do_syscall_64+0x4c/0xa0 [ 1601.768628][T27987] ? clear_bhb_loop+0x60/0xb0 [ 1601.773341][T27987] ? clear_bhb_loop+0x60/0xb0 [ 1601.778063][T27987] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1601.784026][T27987] RIP: 0033:0x7fbd9919bf79 [ 1601.788479][T27987] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1601.808120][T27987] RSP: 002b:00007fbd9a090028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1601.816572][T27987] RAX: ffffffffffffffda RBX: 00007fbd99415fa0 RCX: 00007fbd9919bf79 [ 1601.824581][T27987] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 000000000000000a [ 1601.832577][T27987] RBP: 00007fbd9a090090 R08: 0000000000000000 R09: 0000000000000000 [ 1601.840568][T27987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1601.848560][T27987] R13: 00007fbd99416038 R14: 00007fbd99415fa0 R15: 00007ffe7b0de658 [ 1601.856613][T27987] [ 1602.279890][T28004] netlink: 'syz.3.7700': attribute type 9 has an invalid length. [ 1603.786427][T28030] device syzkaller0 entered promiscuous mode [ 1603.863733][T19039] syzkaller0: tun_net_xmit 48 [ 1607.639600][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.645978][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.990623][T28075] netlink: 'syz.1.7720': attribute type 3 has an invalid length. [ 1608.083944][T28075] netlink: 'syz.1.7720': attribute type 3 has an invalid length. [ 1608.176003][T28075] netlink: 153952 bytes leftover after parsing attributes in process `syz.1.7720'. [ 1608.196682][T28077] netlink: 'syz.2.7718': attribute type 10 has an invalid length. [ 1608.276332][T28081] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7721'. [ 1608.344814][T28081] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7721'. [ 1608.388187][T28082] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7721'. [ 1608.433421][T28086] netlink: 'syz.0.7722': attribute type 29 has an invalid length. [ 1608.447903][T28086] netlink: 'syz.0.7722': attribute type 29 has an invalid length. [ 1609.804347][T28115] netlink: 14 bytes leftover after parsing attributes in process `syz.4.7732'. [ 1610.472244][T28121] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.7735'. [ 1610.553732][T28121] bridge_slave_1: default FDB implementation only supports local addresses [ 1610.650301][T28128] netlink: 'syz.0.7736': attribute type 4 has an invalid length. [ 1610.704161][T28128] netlink: 140 bytes leftover after parsing attributes in process `syz.0.7736'. [ 1610.825958][T28136] netlink: 'syz.2.7740': attribute type 10 has an invalid length. [ 1610.941805][T28136] team0: Port device netdevsim0 added [ 1611.340322][T28142] netlink: 'syz.3.7742': attribute type 13 has an invalid length. [ 1611.418198][T28142] netlink: 152 bytes leftover after parsing attributes in process `syz.3.7742'. [ 1611.591738][T28142] erspan0: refused to change device tx_queue_len [ 1611.628494][T28142] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 1613.390620][T28165] netlink: 160 bytes leftover after parsing attributes in process `syz.1.7749'. [ 1613.540492][T28165] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1617.952029][T28213] netlink: 'syz.0.7764': attribute type 10 has an invalid length. [ 1618.431295][T28213] bond0: (slave wlan1): Releasing backup interface [ 1619.655993][T28242] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1621.686544][ T4282] Bluetooth: hci1: unexpected event 0x0f length: 151 > 4 [ 1621.832039][T28285] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.7789'. [ 1621.935065][T28285] debugfs: Directory '!!' with parent 'ieee80211' already present! [ 1622.418089][T28303] netlink: 'syz.4.7794': attribute type 1 has an invalid length. [ 1622.442360][T28301] netlink: 'syz.1.7793': attribute type 10 has an invalid length. [ 1622.585162][T28307] netlink: 'syz.4.7795': attribute type 10 has an invalid length. [ 1622.617072][T28307] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7795'. [ 1622.655005][T28307] batman_adv: batadv0: Adding interface: geneve0 [ 1622.677731][T28307] batman_adv: batadv0: The MTU of interface geneve0 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1622.748415][T28307] batman_adv: batadv0: Interface activated: geneve0 [ 1623.486868][T28315] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1623.551188][T28315] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1623.560772][T28315] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1623.569982][T28315] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1623.579336][T28315] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1623.588504][T28315] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1623.597683][T28315] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1623.606817][T28315] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1623.616013][T28315] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1623.722836][T28314] FAULT_INJECTION: forcing a failure. [ 1623.722836][T28314] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1623.777510][T28314] CPU: 0 PID: 28314 Comm: syz.0.7797 Not tainted syzkaller #0 [ 1623.785098][T28314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1623.795243][T28314] Call Trace: [ 1623.798567][T28314] [ 1623.801538][T28314] dump_stack_lvl+0x188/0x24e [ 1623.806325][T28314] ? show_regs_print_info+0x12/0x12 [ 1623.811586][T28314] ? load_image+0x400/0x400 [ 1623.816150][T28314] ? __lock_acquire+0x7d10/0x7d10 [ 1623.821247][T28314] should_fail_ex+0x399/0x4d0 [ 1623.826003][T28314] _copy_to_user+0x2c/0x130 [ 1623.830567][T28314] bpf_test_finish+0x4a2/0x600 [ 1623.835390][T28314] ? convert_skb_to___skb+0x420/0x420 [ 1623.840829][T28314] bpf_prog_test_run_flow_dissector+0x4c5/0x640 [ 1623.847142][T28314] ? xdp_convert_buff_to_md+0x200/0x200 [ 1623.852746][T28314] ? __fget_files+0x28/0x4b0 [ 1623.857436][T28314] ? __fget_files+0x28/0x4b0 [ 1623.862098][T28314] ? xdp_convert_buff_to_md+0x200/0x200 [ 1623.867725][T28314] bpf_prog_test_run+0x31e/0x390 [ 1623.872729][T28314] __sys_bpf+0x62b/0x780 [ 1623.877033][T28314] ? bpf_link_show_fdinfo+0x380/0x380 [ 1623.882480][T28314] ? lock_chain_count+0x20/0x20 [ 1623.887393][T28314] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1623.893438][T28314] __x64_sys_bpf+0x78/0x90 [ 1623.897910][T28314] do_syscall_64+0x4c/0xa0 [ 1623.902383][T28314] ? clear_bhb_loop+0x60/0xb0 [ 1623.907112][T28314] ? clear_bhb_loop+0x60/0xb0 [ 1623.911842][T28314] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1623.917779][T28314] RIP: 0033:0x7f497539bf79 [ 1623.922239][T28314] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1623.941899][T28314] RSP: 002b:00007f49761cb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1623.950384][T28314] RAX: ffffffffffffffda RBX: 00007f4975615fa0 RCX: 00007f497539bf79 [ 1623.958406][T28314] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 000000000000000a [ 1623.966419][T28314] RBP: 00007f49761cb090 R08: 0000000000000000 R09: 0000000000000000 [ 1623.974442][T28314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1623.982460][T28314] R13: 00007f4975616038 R14: 00007f4975615fa0 R15: 00007fff442b8e78 [ 1623.990503][T28314] [ 1624.383581][T28333] netlink: 'syz.1.7804': attribute type 3 has an invalid length. [ 1624.409901][T28333] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.7804'. [ 1627.792004][T28399] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.7822'. [ 1627.864398][T28397] netlink: 'syz.3.7821': attribute type 3 has an invalid length. [ 1627.961584][T28397] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.7821'. [ 1629.599995][T28444] netlink: 'syz.3.7834': attribute type 11 has an invalid length. [ 1629.648240][T28444] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.7834'. [ 1629.769391][T28447] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.7834'. [ 1629.841244][T28441] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.7834'. [ 1632.327957][T28510] netlink: 'syz.4.7857': attribute type 32 has an invalid length. [ 1632.610716][T28522] netlink: 172 bytes leftover after parsing attributes in process `syz.3.7861'. [ 1632.838348][T28528] netlink: 'syz.4.7863': attribute type 10 has an invalid length. [ 1635.266303][T28586] netlink: 160 bytes leftover after parsing attributes in process `syz.1.7884'. [ 1635.328245][T28586] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1635.419858][T28592] netlink: 'syz.3.7886': attribute type 13 has an invalid length. [ 1635.444119][T28592] netlink: 152 bytes leftover after parsing attributes in process `syz.3.7886'. [ 1635.495360][T28592] erspan0: refused to change device tx_queue_len [ 1635.518994][T28592] net_ratelimit: 3257 callbacks suppressed [ 1635.519016][T28592] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 1637.569545][T28627] device pim6reg1 entered promiscuous mode [ 1639.074239][T28653] netlink: 188 bytes leftover after parsing attributes in process `syz.1.7902'. [ 1639.302260][T28667] netlink: 134056 bytes leftover after parsing attributes in process `syz.4.7907'. [ 1640.039442][T28687] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.7913'. [ 1641.029934][T28704] netlink: 188 bytes leftover after parsing attributes in process `syz.0.7919'. [ 1641.079391][T28704] ksmbd: Unknown IPC event: 10, ignore. [ 1641.325408][T28711] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7921'. [ 1642.496713][T28724] netlink: 'syz.3.7925': attribute type 1 has an invalid length. [ 1642.509905][T28724] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.7925'. [ 1642.785847][T28746] netlink: 'syz.2.7932': attribute type 1 has an invalid length. [ 1643.039997][T28751] netlink: 'syz.2.7935': attribute type 9 has an invalid length. [ 1643.105843][T28748] netlink: 'syz.0.7933': attribute type 10 has an invalid length. [ 1643.581786][T28759] FAULT_INJECTION: forcing a failure. [ 1643.581786][T28759] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1643.667715][T28759] CPU: 1 PID: 28759 Comm: syz.0.7937 Not tainted syzkaller #0 [ 1643.675271][T28759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1643.685362][T28759] Call Trace: [ 1643.688671][T28759] [ 1643.691638][T28759] dump_stack_lvl+0x188/0x24e [ 1643.696373][T28759] ? show_regs_print_info+0x12/0x12 [ 1643.701637][T28759] ? load_image+0x400/0x400 [ 1643.706191][T28759] ? __lock_acquire+0x7d10/0x7d10 [ 1643.711277][T28759] ? snprintf+0xe5/0x140 [ 1643.715574][T28759] should_fail_ex+0x399/0x4d0 [ 1643.720321][T28759] _copy_to_user+0x2c/0x130 [ 1643.724874][T28759] simple_read_from_buffer+0xe3/0x150 [ 1643.730312][T28759] proc_fail_nth_read+0x1a6/0x220 [ 1643.735389][T28759] ? proc_fault_inject_write+0x310/0x310 [ 1643.741079][T28759] ? fsnotify_perm+0x248/0x550 [ 1643.745901][T28759] ? proc_fault_inject_write+0x310/0x310 [ 1643.751591][T28759] vfs_read+0x2de/0xa00 [ 1643.755814][T28759] ? kernel_read+0x1e0/0x1e0 [ 1643.760455][T28759] ? __fget_files+0x28/0x4b0 [ 1643.765105][T28759] ? __fget_files+0x28/0x4b0 [ 1643.769749][T28759] ? __fget_files+0x43d/0x4b0 [ 1643.774468][T28759] ? __fdget_pos+0x2ae/0x360 [ 1643.779096][T28759] ? ksys_read+0x71/0x250 [ 1643.783493][T28759] ksys_read+0x14c/0x250 [ 1643.787782][T28759] ? vfs_write+0xa30/0xa30 [ 1643.792240][T28759] ? syscall_enter_from_user_mode+0x2a/0x80 [ 1643.798170][T28759] do_syscall_64+0x4c/0xa0 [ 1643.802613][T28759] ? clear_bhb_loop+0x60/0xb0 [ 1643.807326][T28759] ? clear_bhb_loop+0x60/0xb0 [ 1643.812034][T28759] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1643.817961][T28759] RIP: 0033:0x7f497535c84e [ 1643.822403][T28759] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1643.842035][T28759] RSP: 002b:00007f49761cafe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1643.850474][T28759] RAX: ffffffffffffffda RBX: 00007f49761cb6c0 RCX: 00007f497535c84e [ 1643.858502][T28759] RDX: 000000000000000f RSI: 00007f49761cb0a0 RDI: 0000000000000008 [ 1643.866490][T28759] RBP: 00007f49761cb090 R08: 0000000000000000 R09: 0000000000000000 [ 1643.874484][T28759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1643.882489][T28759] R13: 00007f4975616038 R14: 00007f4975615fa0 R15: 00007fff442b8e78 [ 1643.890495][T28759] [ 1643.940027][T28766] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1644.029185][T28766] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1644.038403][T28766] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1644.047563][T28766] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1644.056678][T28766] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1644.065885][T28766] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1644.075044][T28766] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1644.084217][T28766] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1644.093353][T28766] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1644.102510][T28766] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1644.354924][T28776] netlink: 'syz.2.7943': attribute type 3 has an invalid length. [ 1644.387677][T28776] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.7943'. [ 1644.925260][T28787] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.7948'. [ 1645.124218][T28797] netlink: 'syz.2.7951': attribute type 10 has an invalid length. [ 1645.172744][T28797] team0: Device dummy0 is up. Set it down before adding it as a team port [ 1646.748083][T28819] netlink: 'syz.3.7956': attribute type 39 has an invalid length. [ 1647.976743][T28849] netlink: 'syz.3.7966': attribute type 29 has an invalid length. [ 1648.011525][T28849] netlink: 'syz.3.7966': attribute type 29 has an invalid length. [ 1648.071992][T28850] netlink: 'syz.3.7966': attribute type 29 has an invalid length. [ 1648.085755][T28849] netlink: 'syz.3.7966': attribute type 29 has an invalid length. [ 1648.108307][T28849] netlink: 'syz.3.7966': attribute type 29 has an invalid length. [ 1648.147740][T28850] netlink: 'syz.3.7966': attribute type 29 has an invalid length. [ 1650.437233][T28909] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.7986'. [ 1651.606193][T28947] netlink: 'syz.1.7996': attribute type 21 has an invalid length. [ 1651.634593][T28947] netlink: 156 bytes leftover after parsing attributes in process `syz.1.7996'. [ 1651.656169][T28949] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7995'. [ 1651.679275][T28950] netlink: 'syz.0.7998': attribute type 32 has an invalid length. [ 1651.925535][T28956] netlink: 'syz.0.7999': attribute type 29 has an invalid length. [ 1651.950232][T28956] netlink: 'syz.0.7999': attribute type 29 has an invalid length. [ 1652.343321][T28964] device syzkaller0 entered promiscuous mode [ 1652.726552][T28976] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.8006'. [ 1653.901693][T28987] validate_nla: 1 callbacks suppressed [ 1653.901716][T28987] netlink: 'syz.4.8008': attribute type 9 has an invalid length. [ 1653.991925][T28987] netlink: 207496 bytes leftover after parsing attributes in process `syz.4.8008'. [ 1657.891006][T29024] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.8020'. [ 1657.982922][T29029] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.8022'. [ 1660.223159][T29076] netlink: 'syz.2.8036': attribute type 3 has an invalid length. [ 1660.245746][T29076] netlink: 'syz.2.8036': attribute type 4 has an invalid length. [ 1660.270888][T29076] netlink: 9835 bytes leftover after parsing attributes in process `syz.2.8036'. [ 1660.554127][T29089] device bridge_slave_1 left promiscuous mode [ 1660.564031][T29089] bridge0: port 2(bridge_slave_1) entered disabled state [ 1660.788819][T29089] device bridge_slave_0 left promiscuous mode [ 1660.795248][T29089] bridge0: port 1(bridge_slave_0) entered disabled state [ 1662.787062][T29102] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.8042'. [ 1663.871276][T29110] device syzkaller0 entered promiscuous mode [ 1665.666699][T29137] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8052'. [ 1667.174995][T29160] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.8057'. [ 1669.070527][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1669.076950][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1673.129100][T29192] netlink: 'syz.4.8066': attribute type 21 has an invalid length. [ 1673.138657][T29192] netlink: 128 bytes leftover after parsing attributes in process `syz.4.8066'. [ 1673.149360][T29192] netlink: 'syz.4.8066': attribute type 4 has an invalid length. [ 1673.178236][T29192] netlink: 'syz.4.8066': attribute type 5 has an invalid length. [ 1673.227753][T29192] netlink: 3 bytes leftover after parsing attributes in process `syz.4.8066'. [ 1673.795674][T29232] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.8077'. [ 1674.971794][T29261] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.8085'. [ 1675.345997][T29263] netlink: 'syz.1.8086': attribute type 10 has an invalid length. [ 1675.386296][T29263] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8086'. [ 1675.436003][T29263] device team0 entered promiscuous mode [ 1675.469856][T29263] device team_slave_0 entered promiscuous mode [ 1675.552640][T29263] device team_slave_1 entered promiscuous mode [ 1675.604942][T29263] device macvlan0 entered promiscuous mode [ 1675.649365][T29263] device netdevsim0 entered promiscuous mode [ 1675.917375][T29263] bridge0: port 3(team0) entered blocking state [ 1675.992976][T29263] bridge0: port 3(team0) entered disabled state [ 1676.523921][T29279] netlink: 'syz.4.8090': attribute type 2 has an invalid length. [ 1676.545266][T29279] netlink: 'syz.4.8090': attribute type 8 has an invalid length. [ 1676.557565][T29279] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8090'. [ 1676.579828][T29289] netlink: 'syz.3.8092': attribute type 21 has an invalid length. [ 1676.597564][T29289] netlink: 'syz.3.8092': attribute type 20 has an invalid length. [ 1676.918128][T29301] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.8097'. [ 1678.756463][T29336] netlink: 'syz.3.8110': attribute type 10 has an invalid length. [ 1678.874065][T29341] netlink: 'syz.4.8111': attribute type 29 has an invalid length. [ 1678.935232][T29341] netlink: 'syz.4.8111': attribute type 29 has an invalid length. [ 1679.016085][T29343] netlink: 'syz.2.8112': attribute type 10 has an invalid length. [ 1679.715077][T29365] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8117'. [ 1680.456202][T29370] netlink: 'syz.2.8119': attribute type 4 has an invalid length. [ 1683.809378][T29406] netlink: 'syz.4.8128': attribute type 29 has an invalid length. [ 1683.850176][T29398] device syzkaller0 entered promiscuous mode [ 1684.142985][T29402] netlink: 'syz.3.8129': attribute type 41 has an invalid length. [ 1684.187693][T29406] netlink: 'syz.4.8128': attribute type 29 has an invalid length. [ 1686.949222][T29454] netlink: 'syz.4.8144': attribute type 2 has an invalid length. [ 1686.961227][T29454] netlink: 'syz.4.8144': attribute type 1 has an invalid length. [ 1686.970537][T29454] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8144'. [ 1688.687243][T29433] netlink: 160 bytes leftover after parsing attributes in process `syz.3.8137'. [ 1688.703083][T29433] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1690.544141][T29499] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8159'. [ 1690.672672][T29501] netlink: 160 bytes leftover after parsing attributes in process `syz.0.8160'. [ 1690.704362][T29503] netlink: 'syz.1.8161': attribute type 1 has an invalid length. [ 1690.715859][T29501] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1690.723792][T29503] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.8161'. [ 1690.744985][T29507] netlink: 'syz.3.8163': attribute type 1 has an invalid length. [ 1692.563291][T29540] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.8176'. [ 1692.624538][T29540] debugfs: Directory '!!' with parent 'ieee80211' already present! [ 1692.872064][T29551] net_ratelimit: 3256 callbacks suppressed [ 1692.872085][T29551] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1692.905840][T29551] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1692.915064][T29551] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1692.924229][T29551] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1692.933387][T29551] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1692.942545][T29551] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1692.951699][T29551] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1692.960841][T29551] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1692.970008][T29551] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1692.979143][T29551] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1693.111367][T29559] netlink: 'syz.0.8182': attribute type 3 has an invalid length. [ 1693.127563][T29559] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.8182'. [ 1693.628833][T29569] netlink: 'syz.4.8186': attribute type 10 has an invalid length. [ 1693.653658][T29569] team0: Device dummy0 is up. Set it down before adding it as a team port [ 1696.073700][T29593] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.8192'. [ 1697.633173][T29629] netlink: 'syz.2.8206': attribute type 1 has an invalid length. [ 1697.668175][T29629] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.8206'. [ 1699.165618][T29650] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.8214'. [ 1699.751959][T29669] netlink: 'syz.0.8220': attribute type 10 has an invalid length. [ 1700.730483][T29685] netlink: 'syz.2.8225': attribute type 1 has an invalid length. [ 1700.795250][T29685] netlink: 83992 bytes leftover after parsing attributes in process `syz.2.8225'. [ 1701.340310][T29699] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8229'. [ 1703.636180][T29720] netlink: 'syz.1.8235': attribute type 13 has an invalid length. [ 1703.687727][T29720] netlink: 152 bytes leftover after parsing attributes in process `syz.1.8235'. [ 1703.763111][T29720] erspan0: refused to change device tx_queue_len [ 1703.779190][T29720] net_ratelimit: 3256 callbacks suppressed [ 1703.779227][T29720] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 1703.831058][T29729] netlink: 160 bytes leftover after parsing attributes in process `syz.4.8237'. [ 1703.878476][T29729] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1704.599783][T29755] netlink: 'syz.2.8248': attribute type 13 has an invalid length. [ 1704.626296][T29755] netlink: 152 bytes leftover after parsing attributes in process `syz.2.8248'. [ 1704.687070][T29755] erspan0: refused to change device tx_queue_len [ 1704.718010][T29755] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 1705.458050][T29775] netlink: 830 bytes leftover after parsing attributes in process `syz.0.8255'. [ 1705.591020][T29773] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1705.629501][T29773] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1705.725604][T29773] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1705.759445][T29773] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1706.326248][T29784] device sit0 left promiscuous mode [ 1706.916290][T29811] FAULT_INJECTION: forcing a failure. [ 1706.916290][T29811] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1706.973195][T29811] CPU: 0 PID: 29811 Comm: syz.0.8266 Not tainted syzkaller #0 [ 1706.980737][T29811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1706.990842][T29811] Call Trace: [ 1706.994169][T29811] [ 1706.997137][T29811] dump_stack_lvl+0x188/0x24e [ 1707.001894][T29811] ? show_regs_print_info+0x12/0x12 [ 1707.007146][T29811] ? load_image+0x400/0x400 [ 1707.011696][T29811] ? __lock_acquire+0x7d10/0x7d10 [ 1707.016781][T29811] ? lockdep_hardirqs_on+0x94/0x140 [ 1707.022030][T29811] should_fail_ex+0x399/0x4d0 [ 1707.026769][T29811] _copy_from_user+0x2c/0x170 [ 1707.031504][T29811] __sys_bpf+0x2ea/0x780 [ 1707.035814][T29811] ? bpf_link_show_fdinfo+0x380/0x380 [ 1707.041277][T29811] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1707.047503][T29811] __x64_sys_bpf+0x78/0x90 [ 1707.051983][T29811] do_syscall_64+0x4c/0xa0 [ 1707.056454][T29811] ? clear_bhb_loop+0x60/0xb0 [ 1707.061181][T29811] ? clear_bhb_loop+0x60/0xb0 [ 1707.065914][T29811] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1707.071856][T29811] RIP: 0033:0x7f497539bf79 [ 1707.076320][T29811] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1707.095979][T29811] RSP: 002b:00007f49761cb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1707.104444][T29811] RAX: ffffffffffffffda RBX: 00007f4975615fa0 RCX: 00007f497539bf79 [ 1707.112460][T29811] RDX: 0000000000000094 RSI: 0000200000000040 RDI: 0000000000000005 [ 1707.120501][T29811] RBP: 00007f49761cb090 R08: 0000000000000000 R09: 0000000000000000 [ 1707.128541][T29811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1707.136572][T29811] R13: 00007f4975616038 R14: 00007f4975615fa0 R15: 00007fff442b8e78 [ 1707.144618][T29811] [ 1707.194760][T29808] device syzkaller0 entered promiscuous mode [ 1712.424683][T29824] device wlan1 entered promiscuous mode [ 1712.437832][T29835] netlink: 64519 bytes leftover after parsing attributes in process `syz.4.8273'. [ 1712.776761][T29852] netlink: 'syz.4.8278': attribute type 12 has an invalid length. [ 1712.805253][T29852] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8278'. [ 1713.017683][T29861] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1713.043562][T29859] device pim6reg1 entered promiscuous mode [ 1713.173390][T29864] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.8283'. [ 1714.728085][T29878] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8287'. [ 1714.911556][T29885] netlink: 'syz.1.8291': attribute type 1 has an invalid length. [ 1714.997989][T29892] netlink: 'syz.4.8292': attribute type 1 has an invalid length. [ 1715.006130][T29892] netlink: 105120 bytes leftover after parsing attributes in process `syz.4.8292'. [ 1715.346775][T29903] netlink: 830 bytes leftover after parsing attributes in process `syz.1.8297'. [ 1715.391094][T29903] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1715.400051][T29903] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1715.416718][T29903] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1715.436018][T29903] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1715.984442][T29916] netlink: 'syz.0.8300': attribute type 13 has an invalid length. [ 1716.004950][T29916] netlink: 152 bytes leftover after parsing attributes in process `syz.0.8300'. [ 1716.040855][T29916] erspan0: refused to change device tx_queue_len [ 1716.060582][T29916] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 1716.269805][T29918] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.8302'. [ 1716.798348][T29937] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.8309'. [ 1716.841512][T29937] debugfs: Directory '!!' with parent 'ieee80211' already present! [ 1717.156326][T29942] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.8312'. [ 1717.380551][T29951] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1717.457478][T29951] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1717.466677][T29951] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1717.475875][T29951] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1717.485045][T29951] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1717.494186][T29951] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1717.503342][T29951] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1717.512482][T29951] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1717.590426][T29960] netlink: 'syz.4.8314': attribute type 13 has an invalid length. [ 1717.598764][T29960] netlink: 152 bytes leftover after parsing attributes in process `syz.4.8314'. [ 1718.032829][T29951] net_ratelimit: 3193 callbacks suppressed [ 1718.032847][T29951] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1718.047861][T29951] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1718.056967][T29951] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1718.066100][T29951] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1718.075231][T29951] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1718.084364][T29951] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1718.093498][T29951] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1718.102614][T29951] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1718.111749][T29951] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1718.120904][T29951] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1718.150162][T29960] erspan0: refused to change device tx_queue_len [ 1718.160706][T29962] netlink: 'syz.2.8317': attribute type 10 has an invalid length. [ 1718.214517][T29962] team0: Port device dummy0 added [ 1719.112165][T30003] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.8329'. [ 1720.133153][T30028] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.8338'. [ 1720.144686][T30028] bridge_slave_1: default FDB implementation only supports local addresses [ 1721.944850][T30074] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.8350'. [ 1722.851238][T30108] netlink: 'syz.0.8362': attribute type 29 has an invalid length. [ 1722.856585][T30105] netlink: 'syz.4.8361': attribute type 10 has an invalid length. [ 1722.877845][T30108] netlink: 'syz.0.8362': attribute type 29 has an invalid length. [ 1723.590592][T30127] netlink: 'syz.3.8368': attribute type 3 has an invalid length. [ 1723.607783][T30127] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.8368'. [ 1723.952747][T30131] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.8369'. [ 1725.329068][T30161] netlink: 'syz.3.8379': attribute type 29 has an invalid length. [ 1725.348066][T30161] netlink: 'syz.3.8379': attribute type 29 has an invalid length. [ 1725.368406][T30161] netlink: 'syz.3.8379': attribute type 29 has an invalid length. [ 1725.994640][T30170] netlink: 160 bytes leftover after parsing attributes in process `syz.1.8382'. [ 1726.044256][T30170] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1727.158587][T30183] device syzkaller0 entered promiscuous mode [ 1729.904680][T30205] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1729.932421][T30205] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1729.956631][T30205] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1730.121841][T30229] netlink: 'syz.2.8402': attribute type 10 has an invalid length. [ 1730.390065][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.396523][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.648522][T30242] netlink: 'syz.3.8405': attribute type 21 has an invalid length. [ 1730.656417][T30242] netlink: 128 bytes leftover after parsing attributes in process `syz.3.8405'. [ 1730.850600][T30242] netlink: 'syz.3.8405': attribute type 4 has an invalid length. [ 1730.878277][T30246] FAULT_INJECTION: forcing a failure. [ 1730.878277][T30246] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1730.902597][T30242] netlink: 'syz.3.8405': attribute type 3 has an invalid length. [ 1730.926786][T30242] netlink: 3 bytes leftover after parsing attributes in process `syz.3.8405'. [ 1730.936274][T30246] CPU: 0 PID: 30246 Comm: syz.2.8409 Not tainted syzkaller #0 [ 1730.943804][T30246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1730.953915][T30246] Call Trace: [ 1730.957239][T30246] [ 1730.960207][T30246] dump_stack_lvl+0x188/0x24e [ 1730.965002][T30246] ? show_regs_print_info+0x12/0x12 [ 1730.970254][T30246] ? load_image+0x400/0x400 [ 1730.974834][T30246] ? __lock_acquire+0x7d10/0x7d10 [ 1730.979921][T30246] ? perf_trace_lock_acquire+0x100/0x3e0 [ 1730.985648][T30246] should_fail_ex+0x399/0x4d0 [ 1730.990410][T30246] strncpy_from_user+0x32/0x350 [ 1730.995331][T30246] bpf_prog_load+0x1f3/0x1560 [ 1731.000079][T30246] ? lock_chain_count+0x20/0x20 [ 1731.004993][T30246] ? map_freeze+0x390/0x390 [ 1731.009571][T30246] ? __sys_bpf+0x360/0x780 [ 1731.014042][T30246] ? __sanitizer_cov_trace_switch+0x57/0xe0 [ 1731.019993][T30246] __sys_bpf+0x5b8/0x780 [ 1731.024292][T30246] ? bpf_link_show_fdinfo+0x380/0x380 [ 1731.029822][T30246] ? lock_chain_count+0x20/0x20 [ 1731.034720][T30246] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1731.040781][T30246] __x64_sys_bpf+0x78/0x90 [ 1731.045265][T30246] do_syscall_64+0x4c/0xa0 [ 1731.049827][T30246] ? clear_bhb_loop+0x60/0xb0 [ 1731.054609][T30246] ? clear_bhb_loop+0x60/0xb0 [ 1731.059342][T30246] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1731.065286][T30246] RIP: 0033:0x7fbd9919bf79 [ 1731.069747][T30246] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1731.089424][T30246] RSP: 002b:00007fbd9a090028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1731.097910][T30246] RAX: ffffffffffffffda RBX: 00007fbd99415fa0 RCX: 00007fbd9919bf79 [ 1731.105935][T30246] RDX: 0000000000000094 RSI: 0000200000000040 RDI: 0000000000000005 [ 1731.113968][T30246] RBP: 00007fbd9a090090 R08: 0000000000000000 R09: 0000000000000000 [ 1731.121993][T30246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1731.130011][T30246] R13: 00007fbd99416038 R14: 00007fbd99415fa0 R15: 00007ffe7b0de658 [ 1731.138054][T30246] [ 1732.352401][T30280] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.8418'. [ 1733.305380][T30278] device syzkaller0 entered promiscuous mode [ 1733.566454][T30295] netlink: 194236 bytes leftover after parsing attributes in process `syz.0.8422'. [ 1733.614851][T30295] net_ratelimit: 56 callbacks suppressed [ 1733.614892][T30295] netlink: zone id is out of range [ 1733.635517][T30295] netlink: zone id is out of range [ 1733.642829][T30295] netlink: zone id is out of range [ 1733.653061][T30295] netlink: get zone limit has 8 unknown bytes [ 1733.715058][T30297] netlink: 'syz.4.8419': attribute type 1 has an invalid length. [ 1736.200378][T30287] netlink: 'syz.4.8419': attribute type 46 has an invalid length. [ 1736.208299][T30287] netlink: 55 bytes leftover after parsing attributes in process `syz.4.8419'. [ 1736.315362][T30294] device sit0 entered promiscuous mode [ 1736.383218][T30303] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8425'. [ 1736.406114][T30305] netlink: 'syz.0.8426': attribute type 10 has an invalid length. [ 1736.417427][T30309] netlink: 'syz.2.8428': attribute type 1 has an invalid length. [ 1736.435758][T30309] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.8428'. [ 1736.586249][T30314] netlink: 'syz.3.8429': attribute type 10 has an invalid length. [ 1736.715633][T30321] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.8431'. [ 1736.963324][T30330] IPv6: Can't replace route, no match found [ 1737.003842][T30330] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8436'. [ 1738.015595][T30346] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.8442'. [ 1738.122323][T30346] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 1738.150260][T30346] CPU: 1 PID: 30346 Comm: syz.1.8442 Not tainted syzkaller #0 [ 1738.157810][T30346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1738.167956][T30346] Call Trace: [ 1738.171277][T30346] [ 1738.174244][T30346] dump_stack_lvl+0x188/0x24e [ 1738.178993][T30346] ? show_regs_print_info+0x12/0x12 [ 1738.184249][T30346] ? load_image+0x400/0x400 [ 1738.188846][T30346] sysfs_warn_dup+0x8a/0xa0 [ 1738.193411][T30346] sysfs_do_create_link_sd+0xc0/0x110 [ 1738.198861][T30346] device_add+0x7ed/0xfb0 [ 1738.203264][T30346] wiphy_register+0x1d9f/0x2ac0 [ 1738.208182][T30346] ? cfg80211_event_work+0x40/0x40 [ 1738.213350][T30346] ? minstrel_ht_alloc+0x894/0xa20 [ 1738.218527][T30346] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1738.224643][T30346] ieee80211_register_hw+0x2d00/0x39f0 [ 1738.225805][T30348] netlink: 'syz.3.8443': attribute type 3 has an invalid length. [ 1738.230136][T30346] ? lockdep_hardirqs_on+0x94/0x140 [ 1738.230172][T30346] ? ieee80211_register_hw+0xeb1/0x39f0 [ 1738.230203][T30346] ? ieee80211_register_hw+0xeb1/0x39f0 [ 1738.230243][T30346] ? ieee80211_tasklet_handler+0x20/0x20 [ 1738.230285][T30346] ? memset+0x1e/0x40 [ 1738.230308][T30346] ? __hrtimer_init+0x186/0x270 [ 1738.265944][T30348] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.8443'. [ 1738.268942][T30346] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 1738.269005][T30346] hwsim_new_radio_nl+0xafa/0xce0 [ 1738.269053][T30346] genl_family_rcv_msg_doit+0x22a/0x330 [ 1738.269079][T30346] ? end_current_label_crit_section+0x170/0x170 [ 1738.301032][T30346] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1738.307008][T30346] ? bpf_lsm_capable+0x5/0x10 [ 1738.311743][T30346] ? security_capable+0x85/0xb0 [ 1738.316658][T30346] genl_rcv_msg+0x604/0x790 [ 1738.321240][T30346] ? genl_bind+0x360/0x360 [ 1738.325714][T30346] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 1738.332131][T30346] netlink_rcv_skb+0x1fb/0x450 [ 1738.336954][T30346] ? genl_bind+0x360/0x360 [ 1738.341543][T30346] ? netlink_ack+0x1170/0x1170 [ 1738.346380][T30346] ? down_read+0x1a8/0x2d0 [ 1738.350865][T30346] genl_rcv+0x24/0x40 [ 1738.354913][T30346] netlink_unicast+0x74d/0x8d0 [ 1738.359773][T30346] netlink_sendmsg+0x8ad/0xbd0 [ 1738.364861][T30346] ? netlink_getsockopt+0x550/0x550 [ 1738.370124][T30346] ? aa_sock_msg_perm+0x94/0x150 [ 1738.375116][T30346] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1738.380442][T30346] ? security_socket_sendmsg+0x7c/0xa0 [ 1738.385957][T30346] ? netlink_getsockopt+0x550/0x550 [ 1738.391209][T30346] ____sys_sendmsg+0x5be/0x970 [ 1738.396046][T30346] ? __sys_sendmsg_sock+0x30/0x30 [ 1738.401130][T30346] ? __import_iovec+0x315/0x500 [ 1738.406045][T30346] ? import_iovec+0x6f/0xa0 [ 1738.410605][T30346] ___sys_sendmsg+0x2a2/0x360 [ 1738.415347][T30346] ? __sys_sendmsg+0x290/0x290 [ 1738.420283][T30346] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 1738.426096][T30346] __se_sys_sendmsg+0x1bb/0x2a0 [ 1738.431057][T30346] ? __x64_sys_sendmsg+0x80/0x80 [ 1738.436100][T30346] ? syscall_enter_from_user_mode+0x2a/0x80 [ 1738.442057][T30346] do_syscall_64+0x4c/0xa0 [ 1738.446541][T30346] ? clear_bhb_loop+0x60/0xb0 [ 1738.451281][T30346] ? clear_bhb_loop+0x60/0xb0 [ 1738.456021][T30346] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1738.461976][T30346] RIP: 0033:0x7f9e8fd9bf79 [ 1738.466449][T30346] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1738.486120][T30346] RSP: 002b:00007f9e90bdc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1738.494595][T30346] RAX: ffffffffffffffda RBX: 00007f9e90015fa0 RCX: 00007f9e8fd9bf79 [ 1738.502627][T30346] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 1738.510647][T30346] RBP: 00007f9e8fe327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1738.518673][T30346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1738.526691][T30346] R13: 00007f9e90016038 R14: 00007f9e90015fa0 R15: 00007ffe2bab2be8 [ 1738.534734][T30346] [ 1738.952642][T30363] netlink: 'syz.1.8449': attribute type 10 has an invalid length. [ 1739.031543][T30363] team0: Device dummy0 is up. Set it down before adding it as a team port [ 1739.820694][T30373] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.8453'. [ 1740.334456][T30389] netlink: 'syz.4.8457': attribute type 29 has an invalid length. [ 1740.369974][T30389] netlink: 'syz.4.8457': attribute type 29 has an invalid length. [ 1740.425089][T30391] netlink: 'syz.4.8457': attribute type 29 has an invalid length. [ 1740.472251][T30389] netlink: 'syz.4.8457': attribute type 29 has an invalid length. [ 1741.147106][T30407] netlink: 105120 bytes leftover after parsing attributes in process `syz.4.8463'. [ 1741.479703][T30425] validate_nla: 1 callbacks suppressed [ 1741.479724][T30425] netlink: 'syz.3.8470': attribute type 29 has an invalid length. [ 1741.557456][T30425] netlink: 'syz.3.8470': attribute type 29 has an invalid length. [ 1741.572727][T30428] netlink: 'syz.3.8470': attribute type 29 has an invalid length. [ 1741.631440][T30429] netlink: 'syz.3.8470': attribute type 29 has an invalid length. [ 1741.891376][T30431] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.8471'. [ 1743.145704][T30464] netlink: 'syz.2.8483': attribute type 29 has an invalid length. [ 1743.177778][T30464] netlink: 'syz.2.8483': attribute type 29 has an invalid length. [ 1743.188031][T30467] netlink: 'syz.3.8484': attribute type 29 has an invalid length. [ 1743.207931][T30470] netlink: 'syz.2.8483': attribute type 29 has an invalid length. [ 1743.314772][T30467] netlink: 'syz.3.8484': attribute type 29 has an invalid length. [ 1743.707543][T30464] netlink: 'syz.2.8483': attribute type 29 has an invalid length. [ 1744.411665][T30484] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.8489'. [ 1747.186106][T30520] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8497'. [ 1747.751833][T30533] netlink: 160 bytes leftover after parsing attributes in process `syz.0.8505'. [ 1747.763258][T30533] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1748.175664][T30543] netlink: 'syz.4.8507': attribute type 13 has an invalid length. [ 1748.222630][T30543] netlink: 152 bytes leftover after parsing attributes in process `syz.4.8507'. [ 1748.804730][T30543] erspan0: refused to change device tx_queue_len [ 1748.835869][T30543] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 1749.042730][T30563] netlink: 'syz.4.8513': attribute type 10 has an invalid length. [ 1749.250195][T30571] device syzkaller0 entered promiscuous mode [ 1753.854463][T30631] netlink: 'syz.1.8535': attribute type 29 has an invalid length. [ 1753.907123][T30631] netlink: 'syz.1.8535': attribute type 29 has an invalid length. [ 1753.956424][T30637] netlink: 'syz.1.8535': attribute type 29 has an invalid length. [ 1754.016068][T30631] netlink: 'syz.1.8535': attribute type 29 has an invalid length. [ 1754.144208][T30638] netlink: 14546 bytes leftover after parsing attributes in process `syz.2.8534'. [ 1757.678723][T30688] netlink: 'syz.1.8549': attribute type 29 has an invalid length. [ 1757.729098][T30688] netlink: 'syz.1.8549': attribute type 29 has an invalid length. [ 1757.777578][T30690] netlink: 'syz.1.8549': attribute type 29 has an invalid length. [ 1757.798825][T30688] netlink: 'syz.1.8549': attribute type 29 has an invalid length. [ 1758.459343][T30699] netlink: 180 bytes leftover after parsing attributes in process `syz.0.8554'. [ 1758.724669][T30699] netlink: 'syz.0.8554': attribute type 6 has an invalid length. [ 1758.818139][T30699] netlink: 164 bytes leftover after parsing attributes in process `syz.0.8554'. [ 1758.909661][T30715] netlink: 'syz.2.8559': attribute type 10 has an invalid length. [ 1758.927523][T30715] team0: Device macvlan0 is up. Set it down before adding it as a team port [ 1759.258229][T30722] device wlan1 left promiscuous mode [ 1759.278682][T30724] netlink: 'syz.1.8563': attribute type 29 has an invalid length. [ 1759.301548][T30724] netlink: 'syz.1.8563': attribute type 29 has an invalid length. [ 1759.326641][T30724] netlink: 'syz.1.8563': attribute type 29 has an invalid length. [ 1759.342355][T30724] netlink: 'syz.1.8563': attribute type 29 has an invalid length. [ 1759.744530][T30722] device pim6reg1 entered promiscuous mode [ 1760.583020][T30753] netlink: 180 bytes leftover after parsing attributes in process `syz.4.8571'. [ 1760.949726][T30753] netlink: 'syz.4.8571': attribute type 6 has an invalid length. [ 1761.001148][T30753] netlink: 164 bytes leftover after parsing attributes in process `syz.4.8571'. [ 1761.444277][T30763] netlink: 'syz.1.8575': attribute type 29 has an invalid length. [ 1761.456720][T30763] netlink: 'syz.1.8575': attribute type 29 has an invalid length. [ 1761.465978][T30765] netlink: 'syz.1.8575': attribute type 29 has an invalid length. [ 1761.475820][T30763] netlink: 'syz.1.8575': attribute type 29 has an invalid length. [ 1761.885609][T30774] device syzkaller0 entered promiscuous mode [ 1762.020228][T30779] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.8582'. [ 1765.428105][T30781] validate_nla: 1 callbacks suppressed [ 1765.428125][T30781] netlink: 'syz.3.8581': attribute type 21 has an invalid length. [ 1765.454078][T30781] netlink: 156 bytes leftover after parsing attributes in process `syz.3.8581'. [ 1765.464266][T30787] netlink: 'syz.4.8585': attribute type 10 has an invalid length. [ 1765.512128][T30787] device dummy0 entered promiscuous mode [ 1765.556242][T30787] team0: Port device dummy0 added [ 1765.669046][T30799] netlink: 'syz.1.8588': attribute type 29 has an invalid length. [ 1765.708243][T30799] netlink: 'syz.1.8588': attribute type 29 has an invalid length. [ 1765.720638][T30799] netlink: 'syz.1.8588': attribute type 29 has an invalid length. [ 1765.771800][T30802] netlink: 'syz.1.8588': attribute type 29 has an invalid length. [ 1765.821350][T30792] netlink: 180 bytes leftover after parsing attributes in process `syz.3.8587'. [ 1765.870328][T30806] netlink: 'syz.3.8587': attribute type 6 has an invalid length. [ 1765.957641][T30806] netlink: 164 bytes leftover after parsing attributes in process `syz.3.8587'. [ 1766.232949][T30817] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8595'. [ 1766.264062][T30817] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8595'. [ 1766.640378][T30834] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.8601'. [ 1766.687084][T30833] netlink: 'syz.3.8599': attribute type 1 has an invalid length. [ 1766.734559][T30833] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.8599'. [ 1767.176379][T30840] netlink: 'syz.2.8603': attribute type 29 has an invalid length. [ 1767.375268][T30840] netlink: 'syz.2.8603': attribute type 29 has an invalid length. [ 1768.279001][T30869] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.8611'. [ 1768.348967][T30869] bridge_slave_1: default FDB implementation only supports local addresses [ 1768.441627][T30866] netlink: 180900 bytes leftover after parsing attributes in process `syz.0.8613'. [ 1768.462802][T30866] openvswitch: netlink: Flow actions attr not present in new flow. [ 1768.506607][T30871] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.8614'. [ 1768.789216][T30883] IPv6: Can't replace route, no match found [ 1769.900692][T30908] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.8627'. [ 1770.196353][T30913] openvswitch: netlink: Flow actions attr not present in new flow. [ 1773.869439][T30988] __nla_validate_parse: 1 callbacks suppressed [ 1773.869459][T30988] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8651'. [ 1774.786349][T31007] validate_nla: 3 callbacks suppressed [ 1774.786370][T31007] netlink: 'syz.0.8659': attribute type 29 has an invalid length. [ 1774.859220][T31007] netlink: 'syz.0.8659': attribute type 29 has an invalid length. [ 1774.938142][T31012] netlink: 'syz.0.8659': attribute type 29 has an invalid length. [ 1774.946395][T31015] netlink: 'syz.0.8659': attribute type 29 has an invalid length. [ 1776.620228][T31029] netlink: 'syz.1.8665': attribute type 21 has an invalid length. [ 1776.647483][T31029] netlink: 176 bytes leftover after parsing attributes in process `syz.1.8665'. [ 1777.069412][T31047] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.8671'. [ 1777.116113][T31047] bridge_slave_1: default FDB implementation only supports local addresses [ 1777.448538][T31046] netlink: 'syz.4.8670': attribute type 13 has an invalid length. [ 1777.456433][T31046] netlink: 152 bytes leftover after parsing attributes in process `syz.4.8670'. [ 1778.777932][T31046] erspan0: refused to change device tx_queue_len [ 1778.832204][T31046] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 1778.927409][T31050] netlink: 152 bytes leftover after parsing attributes in process `syz.4.8670'. [ 1778.968607][T31056] netlink: 'syz.2.8672': attribute type 29 has an invalid length. [ 1779.054335][T31056] netlink: 'syz.2.8672': attribute type 29 has an invalid length. [ 1779.073128][T31059] netlink: 'syz.2.8672': attribute type 29 has an invalid length. [ 1779.128033][T31060] netlink: 'syz.2.8672': attribute type 29 has an invalid length. [ 1780.285019][T31089] device syzkaller0 entered promiscuous mode [ 1780.313872][T31093] netlink: 'syz.1.8686': attribute type 29 has an invalid length. [ 1780.556625][T31093] netlink: 'syz.1.8686': attribute type 29 has an invalid length. [ 1780.565039][T31095] netlink: 'syz.1.8686': attribute type 29 has an invalid length. [ 1781.600417][T31106] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.8690'. [ 1783.901257][T31096] netlink: 'syz.1.8686': attribute type 29 has an invalid length. [ 1784.854176][T31157] netlink: 'syz.1.8707': attribute type 29 has an invalid length. [ 1784.875165][T31157] netlink: 'syz.1.8707': attribute type 29 has an invalid length. [ 1784.895865][T31157] netlink: 'syz.1.8707': attribute type 29 has an invalid length. [ 1784.917998][T31157] netlink: 'syz.1.8707': attribute type 29 has an invalid length. [ 1785.949713][T31171] netlink: 'syz.4.8709': attribute type 1 has an invalid length. [ 1785.968899][T31171] netlink: 105120 bytes leftover after parsing attributes in process `syz.4.8709'. [ 1786.134923][T31182] netlink: 188 bytes leftover after parsing attributes in process `syz.2.8712'. [ 1786.184112][T31184] netlink: 'syz.4.8713': attribute type 10 has an invalid length. [ 1787.294884][T31209] netlink: 'syz.0.8723': attribute type 1 has an invalid length. [ 1788.414348][T31230] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.8729'. [ 1788.846528][T31248] netlink: 'syz.3.8735': attribute type 21 has an invalid length. [ 1788.854673][T31248] netlink: 'syz.3.8735': attribute type 20 has an invalid length. [ 1789.362700][T31258] device syzkaller0 entered promiscuous mode [ 1789.874765][T31266] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.8741'. [ 1790.093176][T31266] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 1790.127485][T31266] CPU: 0 PID: 31266 Comm: syz.4.8741 Not tainted syzkaller #0 [ 1790.135152][T31266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1790.145231][T31266] Call Trace: [ 1790.148537][T31266] [ 1790.151496][T31266] dump_stack_lvl+0x188/0x24e [ 1790.156214][T31266] ? show_regs_print_info+0x12/0x12 [ 1790.161442][T31266] ? load_image+0x400/0x400 [ 1790.165987][T31266] sysfs_warn_dup+0x8a/0xa0 [ 1790.170515][T31266] sysfs_do_create_link_sd+0xc0/0x110 [ 1790.175915][T31266] device_add+0x7ed/0xfb0 [ 1790.180300][T31266] wiphy_register+0x1d9f/0x2ac0 [ 1790.185184][T31266] ? lock_chain_count+0x20/0x20 [ 1790.190083][T31266] ? cfg80211_event_work+0x40/0x40 [ 1790.195246][T31266] ? wiphy_register+0x11/0x2ac0 [ 1790.200151][T31266] ieee80211_register_hw+0x2d00/0x39f0 [ 1790.205642][T31266] ? lockdep_hardirqs_on+0x94/0x140 [ 1790.210903][T31266] ? ieee80211_register_hw+0xeb1/0x39f0 [ 1790.216490][T31266] ? ieee80211_register_hw+0xeb1/0x39f0 [ 1790.222075][T31266] ? ieee80211_tasklet_handler+0x20/0x20 [ 1790.227746][T31266] ? memset+0x1e/0x40 [ 1790.231750][T31266] ? __hrtimer_init+0x186/0x270 [ 1790.236717][T31266] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 1790.242481][T31266] hwsim_new_radio_nl+0xafa/0xce0 [ 1790.247563][T31266] genl_family_rcv_msg_doit+0x22a/0x330 [ 1790.253142][T31266] ? end_current_label_crit_section+0x170/0x170 [ 1790.259419][T31266] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1790.265369][T31266] ? bpf_lsm_capable+0x5/0x10 [ 1790.270087][T31266] ? security_capable+0x85/0xb0 [ 1790.274973][T31266] genl_rcv_msg+0x604/0x790 [ 1790.279505][T31266] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1790.285730][T31266] ? genl_bind+0x360/0x360 [ 1790.290172][T31266] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 1790.296532][T31266] ? lock_acquire+0x225/0x4a0 [ 1790.301246][T31266] netlink_rcv_skb+0x1fb/0x450 [ 1790.306048][T31266] ? genl_bind+0x360/0x360 [ 1790.310525][T31266] ? netlink_ack+0x1170/0x1170 [ 1790.315322][T31266] ? down_read+0x1a8/0x2d0 [ 1790.319766][T31266] genl_rcv+0x24/0x40 [ 1790.323788][T31266] netlink_unicast+0x74d/0x8d0 [ 1790.328589][T31266] netlink_sendmsg+0x8ad/0xbd0 [ 1790.333392][T31266] ? netlink_getsockopt+0x550/0x550 [ 1790.338629][T31266] ? aa_sock_msg_perm+0x94/0x150 [ 1790.343608][T31266] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1790.348940][T31266] ? security_socket_sendmsg+0x7c/0xa0 [ 1790.354431][T31266] ? netlink_getsockopt+0x550/0x550 [ 1790.359740][T31266] ____sys_sendmsg+0x5be/0x970 [ 1790.364542][T31266] ? __sys_sendmsg_sock+0x30/0x30 [ 1790.369589][T31266] ? __import_iovec+0x315/0x500 [ 1790.374467][T31266] ? import_iovec+0x6f/0xa0 [ 1790.378984][T31266] ___sys_sendmsg+0x2a2/0x360 [ 1790.383686][T31266] ? __sys_sendmsg+0x290/0x290 [ 1790.388551][T31266] __se_sys_sendmsg+0x1bb/0x2a0 [ 1790.393438][T31266] ? __x64_sys_sendmsg+0x80/0x80 [ 1790.398409][T31266] do_syscall_64+0x4c/0xa0 [ 1790.402852][T31266] ? clear_bhb_loop+0x60/0xb0 [ 1790.407545][T31266] ? clear_bhb_loop+0x60/0xb0 [ 1790.412249][T31266] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1790.418247][T31266] RIP: 0033:0x7eff6139bf79 [ 1790.422677][T31266] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1790.442309][T31266] RSP: 002b:00007eff622f5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1790.450754][T31266] RAX: ffffffffffffffda RBX: 00007eff61615fa0 RCX: 00007eff6139bf79 [ 1790.458772][T31266] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 1790.466787][T31266] RBP: 00007eff614327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1790.474810][T31266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1790.482817][T31266] R13: 00007eff61616038 R14: 00007eff61615fa0 R15: 00007fff51bdd2f8 [ 1790.490847][T31266] [ 1790.532093][T31269] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.8742'. [ 1791.748900][T31301] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1791.807981][T31301] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1791.817411][T31301] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1791.826524][T31301] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1791.835734][T31301] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1791.844908][T31301] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1791.854095][T31301] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1791.863265][T31301] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1791.872435][T31301] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1791.881611][T31301] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1791.894442][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.901421][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1792.532749][T31303] netlink: 'syz.1.8752': attribute type 1 has an invalid length. [ 1792.541085][T31303] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.8752'. [ 1794.512626][T31297] netlink: 'syz.3.8750': attribute type 12 has an invalid length. [ 1794.524393][T31297] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8750'. [ 1794.542332][T31310] netlink: 'syz.1.8753': attribute type 10 has an invalid length. [ 1794.731617][T31318] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.8757'. [ 1794.830416][T31318] bridge_slave_1: default FDB implementation only supports local addresses [ 1795.841101][T31340] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.8764'. [ 1797.354260][T31381] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8777'. [ 1797.540683][T31387] netlink: 'syz.4.8782': attribute type 13 has an invalid length. [ 1797.585200][T31387] netlink: 152 bytes leftover after parsing attributes in process `syz.4.8782'. [ 1797.660212][T31387] erspan0: refused to change device tx_queue_len [ 1797.721741][T31387] net_ratelimit: 3256 callbacks suppressed [ 1797.721788][T31387] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 1799.762257][T31426] netlink: 'syz.1.8795': attribute type 3 has an invalid length. [ 1799.786126][T31426] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.8795'. [ 1799.789014][T31428] netlink: 'syz.4.8793': attribute type 10 has an invalid length. [ 1800.193208][T31430] netlink: 192 bytes leftover after parsing attributes in process `syz.1.8795'. [ 1800.210396][T31434] netlink: 192 bytes leftover after parsing attributes in process `syz.1.8795'. [ 1800.223840][T31437] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.8797'. [ 1800.622633][T31449] netlink: 'syz.0.8801': attribute type 13 has an invalid length. [ 1800.647638][T31449] netlink: 152 bytes leftover after parsing attributes in process `syz.0.8801'. [ 1800.948012][T31449] erspan0: refused to change device tx_queue_len [ 1801.138675][T31449] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 1802.002791][T31476] netlink: 'syz.0.8810': attribute type 3 has an invalid length. [ 1802.062421][T31476] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.8810'. [ 1802.193425][T31476] netlink: 192 bytes leftover after parsing attributes in process `syz.0.8810'. [ 1802.263772][T31478] netlink: 192 bytes leftover after parsing attributes in process `syz.0.8810'. [ 1802.496407][T31483] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1802.866609][T31495] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.8817'. [ 1802.922758][T31499] netlink: 'syz.2.8818': attribute type 1 has an invalid length. [ 1802.940900][T31499] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.8818'. [ 1802.988161][T31503] netlink: 'syz.0.8819': attribute type 27 has an invalid length. [ 1803.010146][T31503] netlink: 'syz.0.8819': attribute type 3 has an invalid length. [ 1803.033064][T31503] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8819'. [ 1803.061501][T31505] netlink: 188 bytes leftover after parsing attributes in process `syz.4.8821'. [ 1803.152040][T31509] netlink: 'syz.3.8823': attribute type 10 has an invalid length. [ 1803.447162][T31518] netlink: 'syz.3.8825': attribute type 3 has an invalid length. [ 1803.471920][T31518] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.8825'. [ 1803.534271][T31518] netlink: 192 bytes leftover after parsing attributes in process `syz.3.8825'. [ 1803.575725][T31518] netlink: 192 bytes leftover after parsing attributes in process `syz.3.8825'. [ 1804.141773][T31536] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.8831'. [ 1804.246837][T31544] netlink: 'syz.3.8835': attribute type 10 has an invalid length. [ 1805.106411][T31579] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.8849'. [ 1805.535656][T31593] netlink: 'syz.1.8854': attribute type 3 has an invalid length. [ 1805.570440][T31593] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.8854'. [ 1805.698629][T31597] device syzkaller0 entered promiscuous mode [ 1805.732598][T31607] netlink: 'syz.3.8857': attribute type 10 has an invalid length. [ 1806.699054][T31610] delete_channel: no stack [ 1808.107609][T31611] __nla_validate_parse: 1 callbacks suppressed [ 1808.107626][T31611] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.8862'. [ 1808.123094][T31611] bridge_slave_1: default FDB implementation only supports local addresses [ 1808.134714][T31613] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 1808.153109][T31613] CPU: 0 PID: 31613 Comm: syz.1.8860 Not tainted syzkaller #0 [ 1808.160630][T31613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1808.170712][T31613] Call Trace: [ 1808.174019][T31613] [ 1808.176980][T31613] dump_stack_lvl+0x188/0x24e [ 1808.181711][T31613] ? show_regs_print_info+0x12/0x12 [ 1808.186964][T31613] ? load_image+0x400/0x400 [ 1808.191524][T31613] sysfs_warn_dup+0x8a/0xa0 [ 1808.196108][T31613] sysfs_do_create_link_sd+0xc0/0x110 [ 1808.201538][T31613] device_add+0x7ed/0xfb0 [ 1808.205936][T31613] wiphy_register+0x1d9f/0x2ac0 [ 1808.210861][T31613] ? cfg80211_event_work+0x40/0x40 [ 1808.216016][T31613] ? minstrel_ht_alloc+0x894/0xa20 [ 1808.221156][T31613] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1808.227257][T31613] ieee80211_register_hw+0x2d00/0x39f0 [ 1808.232789][T31613] ? ieee80211_register_hw+0xeb1/0x39f0 [ 1808.238399][T31613] ? ieee80211_register_hw+0xeb1/0x39f0 [ 1808.244017][T31613] ? ieee80211_tasklet_handler+0x20/0x20 [ 1808.249731][T31613] ? memset+0x1e/0x40 [ 1808.253759][T31613] ? __hrtimer_init+0x186/0x270 [ 1808.258666][T31613] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 1808.264474][T31613] hwsim_new_radio_nl+0xafa/0xce0 [ 1808.269569][T31613] genl_family_rcv_msg_doit+0x22a/0x330 [ 1808.275159][T31613] ? end_current_label_crit_section+0x170/0x170 [ 1808.281464][T31613] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1808.287492][T31613] ? bpf_lsm_capable+0x5/0x10 [ 1808.292225][T31613] ? security_capable+0x85/0xb0 [ 1808.297135][T31613] genl_rcv_msg+0x604/0x790 [ 1808.301705][T31613] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1808.307922][T31613] ? genl_bind+0x360/0x360 [ 1808.312382][T31613] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 1808.318767][T31613] ? lock_acquire+0x225/0x4a0 [ 1808.323484][T31613] netlink_rcv_skb+0x1fb/0x450 [ 1808.328287][T31613] ? genl_bind+0x360/0x360 [ 1808.332740][T31613] ? netlink_ack+0x1170/0x1170 [ 1808.337554][T31613] ? down_read+0x1a8/0x2d0 [ 1808.342000][T31613] genl_rcv+0x24/0x40 [ 1808.346014][T31613] netlink_unicast+0x74d/0x8d0 [ 1808.350819][T31613] netlink_sendmsg+0x8ad/0xbd0 [ 1808.355659][T31613] ? netlink_getsockopt+0x550/0x550 [ 1808.360897][T31613] ? aa_sock_msg_perm+0x94/0x150 [ 1808.365871][T31613] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1808.371182][T31613] ? security_socket_sendmsg+0x7c/0xa0 [ 1808.376689][T31613] ? netlink_getsockopt+0x550/0x550 [ 1808.381918][T31613] ____sys_sendmsg+0x5be/0x970 [ 1808.386736][T31613] ? __sys_sendmsg_sock+0x30/0x30 [ 1808.391836][T31613] ? __import_iovec+0x315/0x500 [ 1808.396726][T31613] ? import_iovec+0x6f/0xa0 [ 1808.401265][T31613] ___sys_sendmsg+0x2a2/0x360 [ 1808.405989][T31613] ? __sys_sendmsg+0x290/0x290 [ 1808.410826][T31613] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 1808.416620][T31613] __se_sys_sendmsg+0x1bb/0x2a0 [ 1808.421774][T31613] ? __x64_sys_sendmsg+0x80/0x80 [ 1808.426760][T31613] ? syscall_enter_from_user_mode+0x2a/0x80 [ 1808.432682][T31613] do_syscall_64+0x4c/0xa0 [ 1808.437127][T31613] ? clear_bhb_loop+0x60/0xb0 [ 1808.441830][T31613] ? clear_bhb_loop+0x60/0xb0 [ 1808.446535][T31613] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1808.452471][T31613] RIP: 0033:0x7f9e8fd9bf79 [ 1808.456966][T31613] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1808.476652][T31613] RSP: 002b:00007f9e90bdc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1808.485126][T31613] RAX: ffffffffffffffda RBX: 00007f9e90015fa0 RCX: 00007f9e8fd9bf79 [ 1808.493128][T31613] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 1808.501123][T31613] RBP: 00007f9e8fe327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1808.509120][T31613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1808.517111][T31613] R13: 00007f9e90016038 R14: 00007f9e90015fa0 R15: 00007ffe2bab2be8 [ 1808.525173][T31613] [ 1808.572213][T31617] netlink: 'syz.3.8862': attribute type 2 has an invalid length. [ 1808.587632][T31617] netlink: 'syz.3.8862': attribute type 1 has an invalid length. [ 1808.596088][T31617] netlink: 170140 bytes leftover after parsing attributes in process `syz.3.8862'. [ 1808.627978][T31626] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.8864'. [ 1808.833006][T31643] netlink: 'syz.2.8871': attribute type 10 has an invalid length. [ 1808.891455][T31643] team0: Device vxcan1 is of different type [ 1809.610107][T31668] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.8880'. [ 1809.894687][T31670] netlink: 'syz.0.8881': attribute type 1 has an invalid length. [ 1809.913890][T31670] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.8881'. [ 1811.972616][T31708] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.8895'. [ 1811.972768][T31712] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.8897'. [ 1812.047955][T31712] bridge_slave_1: default FDB implementation only supports local addresses [ 1812.841808][T31734] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.8902'. [ 1813.234176][T31736] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1813.241882][T31736] IPv6: NLM_F_CREATE should be set when creating new route [ 1813.249632][T31736] IPv6: NLM_F_CREATE should be set when creating new route [ 1813.257052][T31736] IPv6: NLM_F_CREATE should be set when creating new route [ 1814.665559][T31754] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.8911'. [ 1815.274013][T31783] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8918'. [ 1816.494312][T31801] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.8926'. [ 1817.082750][T31821] netlink: 'syz.1.8932': attribute type 5 has an invalid length. [ 1817.103947][T31821] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8932'. [ 1818.017879][T31843] netlink: 'syz.3.8941': attribute type 4 has an invalid length. [ 1818.766582][T31863] netlink: 14568 bytes leftover after parsing attributes in process `syz.4.8948'. [ 1819.103066][T31870] netlink: 'syz.4.8949': attribute type 5 has an invalid length. [ 1819.146885][T31870] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8949'. [ 1819.676881][T31882] netlink: 'syz.2.8953': attribute type 1 has an invalid length. [ 1819.740137][T31882] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.8953'. [ 1821.455163][T31911] netlink: 'syz.0.8964': attribute type 5 has an invalid length. [ 1821.498142][T31911] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8964'. [ 1823.137860][T31926] netlink: 160 bytes leftover after parsing attributes in process `syz.2.8969'. [ 1823.164218][T31926] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1823.572473][T31939] netlink: 'syz.0.8973': attribute type 46 has an invalid length. [ 1823.605134][T31939] netlink: 'syz.0.8973': attribute type 46 has an invalid length. [ 1824.431747][T31954] netlink: 'syz.3.8978': attribute type 3 has an invalid length. [ 1824.464821][T31954] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.8978'. [ 1825.115980][T31970] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8983'. [ 1825.163439][T31970] netlink: 'syz.2.8983': attribute type 21 has an invalid length. [ 1825.183201][T31970] netlink: 'syz.2.8983': attribute type 20 has an invalid length. [ 1825.415951][T31974] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.8984'. [ 1826.188969][T32000] netlink: 'syz.1.8991': attribute type 10 has an invalid length. [ 1826.251929][T32000] device vxcan1 entered promiscuous mode [ 1826.290932][T32000] team0: Device vxcan1 is of different type [ 1826.402104][T32004] netlink: 10 bytes leftover after parsing attributes in process `syz.2.8993'. [ 1827.072602][T32014] netlink: 'syz.2.8996': attribute type 2 has an invalid length. [ 1827.669594][T32021] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1827.706942][T32014] device .d entered promiscuous mode [ 1827.738952][T32021] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1827.748216][T32021] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1827.757461][T32021] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1827.766609][T32021] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1827.775831][T32021] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1827.785051][T32021] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1827.794273][T32021] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1827.803506][T32021] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1827.812727][T32021] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1828.392822][T32025] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.9000'. [ 1828.612240][T32028] netlink: 92148 bytes leftover after parsing attributes in process `syz.3.9001'. [ 1828.921360][T32037] netlink: 'syz.1.9003': attribute type 3 has an invalid length. [ 1828.966528][T32037] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.9003'. [ 1829.765926][T32057] netlink: 'syz.1.9014': attribute type 21 has an invalid length. [ 1829.847482][T32057] netlink: 176 bytes leftover after parsing attributes in process `syz.1.9014'. [ 1830.067195][T32065] netlink: 'syz.3.9016': attribute type 3 has an invalid length. [ 1830.107634][T32065] netlink: 118424 bytes leftover after parsing attributes in process `syz.3.9016'. [ 1830.234555][T32076] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.9021'. [ 1830.633463][T32070] cgroup: fork rejected by pids controller in /syz0 [ 1831.209316][T32118] device syzkaller0 entered promiscuous mode [ 1831.611823][T32197] netlink: 'syz.2.9026': attribute type 29 has an invalid length. [ 1831.624225][T32200] netlink: 'syz.1.9027': attribute type 29 has an invalid length. [ 1831.816486][T32208] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.9029'. [ 1832.382663][T32224] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.9034'. [ 1836.080555][T32200] netlink: 'syz.1.9027': attribute type 29 has an invalid length. [ 1836.090234][T32197] netlink: 'syz.2.9026': attribute type 29 has an invalid length. [ 1837.311232][ T5131] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1837.467934][ T5131] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1837.656793][T32274] netlink: 168 bytes leftover after parsing attributes in process `syz.1.9052'. [ 1837.678464][T32276] netlink: 'syz.1.9052': attribute type 13 has an invalid length. [ 1837.686382][T32276] netlink: 152 bytes leftover after parsing attributes in process `syz.1.9052'. [ 1837.710362][T32276] erspan0: refused to change device tx_queue_len [ 1837.725915][T32276] net_ratelimit: 3256 callbacks suppressed [ 1837.725936][T32276] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 1837.795825][ T5131] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1837.913510][ T5131] team0: Port device netdevsim0 removed [ 1837.931784][ T5131] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1838.032268][T32283] netlink: 'syz.4.9056': attribute type 29 has an invalid length. [ 1838.092777][T32283] netlink: 'syz.4.9056': attribute type 29 has an invalid length. [ 1838.257864][T32285] netlink: 'syz.4.9056': attribute type 29 has an invalid length. [ 1838.373230][T32286] netlink: 'syz.4.9056': attribute type 29 has an invalid length. [ 1838.400361][T32289] netlink: 188 bytes leftover after parsing attributes in process `syz.1.9057'. [ 1838.934884][T32303] netlink: 'syz.3.9060': attribute type 1 has an invalid length. [ 1838.988205][T32303] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.9060'. [ 1839.001705][T32305] netlink: 'syz.4.9061': attribute type 10 has an invalid length. [ 1839.088945][T32316] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1839.119759][T12461] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1839.129419][T12461] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1839.138907][T12461] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1839.147624][T12461] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1839.155218][T12461] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1839.620836][T32332] netlink: 'syz.4.9067': attribute type 1 has an invalid length. [ 1839.847039][T32333] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.9069'. [ 1839.868318][T32333] bridge_slave_1: default FDB implementation only supports local addresses [ 1840.122178][T32342] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.9070'. [ 1840.147141][T32314] chnl_net:caif_netlink_parms(): no params data found [ 1840.713357][T32314] bridge0: port 1(bridge_slave_0) entered blocking state [ 1840.720868][T32314] bridge0: port 1(bridge_slave_0) entered disabled state [ 1840.729134][T32314] device bridge_slave_0 entered promiscuous mode [ 1840.756134][T32314] bridge0: port 2(bridge_slave_1) entered blocking state [ 1840.771590][T32314] bridge0: port 2(bridge_slave_1) entered disabled state [ 1840.791054][T32314] device bridge_slave_1 entered promiscuous mode [ 1840.925528][T32314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1840.989313][T32314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1841.163752][T32314] team0: Port device team_slave_0 added [ 1841.188510][ T4282] Bluetooth: hci0: command 0x0409 tx timeout [ 1841.229443][T32314] team0: Port device team_slave_1 added [ 1841.268842][T32314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1841.275854][T32314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1841.318306][T32314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1841.331470][T32314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1841.346495][T32314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1841.406479][T32314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1842.402489][T32314] device hsr_slave_0 entered promiscuous mode [ 1842.418743][T32314] device hsr_slave_1 entered promiscuous mode [ 1842.449582][T32382] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.9082'. [ 1842.477358][T32382] bridge_slave_1: default FDB implementation only supports local addresses [ 1842.507853][T32387] netlink: 168 bytes leftover after parsing attributes in process `syz.1.9084'. [ 1843.267360][ T4282] Bluetooth: hci0: command 0x041b tx timeout [ 1843.473524][T32418] validate_nla: 1 callbacks suppressed [ 1843.473545][T32418] netlink: 'syz.3.9093': attribute type 10 has an invalid length. [ 1843.565712][T32418] team0: Device vxcan1 is of different type [ 1844.055031][T32428] netlink: 'syz.3.9097': attribute type 3 has an invalid length. [ 1844.113122][T32428] netlink: 'syz.3.9097': attribute type 1 has an invalid length. [ 1844.178737][T32428] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.9097'. [ 1844.394776][ T5131] device hsr_slave_0 left promiscuous mode [ 1844.506694][ T5131] device hsr_slave_1 left promiscuous mode [ 1844.618072][ T5131] device veth1_macvtap left promiscuous mode [ 1844.624219][ T5131] device veth0_macvtap left promiscuous mode [ 1844.657027][ T5131] device veth1_vlan left promiscuous mode [ 1845.249385][ T5131] team0 (unregistering): Port device macvlan0 removed [ 1845.350267][ T4282] Bluetooth: hci0: command 0x040f tx timeout [ 1845.555752][ T5131] team0 (unregistering): Port device team_slave_1 removed [ 1845.599740][ T5131] team0 (unregistering): Port device team_slave_0 removed [ 1845.641146][ T5131] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1845.687543][ T5131] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1845.959841][ T5131] bond0 (unregistering): Released all slaves [ 1846.061646][T32440] device syzkaller0 entered promiscuous mode [ 1846.282521][T32460] netlink: 'syz.2.9102': attribute type 1 has an invalid length. [ 1846.301721][T32460] netlink: 5 bytes leftover after parsing attributes in process `syz.2.9102'. [ 1847.431930][T12461] Bluetooth: hci0: command 0x0419 tx timeout [ 1848.700362][T32464] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.9101'. [ 1848.720739][T32475] netlink: 2 bytes leftover after parsing attributes in process `syz.3.9107'. [ 1848.739500][T32475] device batadv_slave_1 entered promiscuous mode [ 1848.934260][T32314] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1848.985371][T32314] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1849.024518][T32314] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1849.062934][T32314] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1849.665883][T32495] netlink: 'syz.4.9111': attribute type 3 has an invalid length. [ 1849.697577][T32495] netlink: 'syz.4.9111': attribute type 1 has an invalid length. [ 1849.726184][T32495] netlink: 60387 bytes leftover after parsing attributes in process `syz.4.9111'. [ 1850.047880][T32314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1850.097569][ T5131] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1850.109785][ T5131] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1850.153701][T32314] 8021q: adding VLAN 0 to HW filter on device team0 [ 1850.187669][T21790] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1850.216866][T21790] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1850.236112][T21790] bridge0: port 1(bridge_slave_0) entered blocking state [ 1850.243325][T21790] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1850.275500][T21790] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1850.296137][T21790] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1850.323693][T21790] bridge0: port 2(bridge_slave_1) entered blocking state [ 1850.330896][T21790] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1850.382426][T21790] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1850.392733][T21790] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1850.460212][T32521] netlink: 'syz.4.9116': attribute type 1 has an invalid length. [ 1850.486643][T32521] netlink: 5 bytes leftover after parsing attributes in process `syz.4.9116'. [ 1850.504660][T21790] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1850.538581][T21790] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1850.565261][T21790] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1850.589575][T21790] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1850.628955][T21790] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1850.677088][T21790] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1850.725274][T32524] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.9117'. [ 1850.771362][ T5131] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1850.793454][ T5131] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1850.831736][ T5131] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1850.853480][ T5131] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1850.884995][T32314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1851.282575][T32549] netlink: 60431 bytes leftover after parsing attributes in process `syz.2.9122'. [ 1852.245395][T32571] netlink: 'syz.1.9128': attribute type 3 has an invalid length. [ 1852.271000][ T5131] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1852.293423][ T5131] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1852.317613][T32571] netlink: 'syz.1.9128': attribute type 1 has an invalid length. [ 1852.325604][T32571] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.9128'. [ 1852.347977][T32314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1852.454073][T21790] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1852.479933][T21790] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1852.637919][T21790] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1852.656856][T21790] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1852.687792][T21790] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1852.722538][T21790] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1852.752657][T32314] device veth0_vlan entered promiscuous mode [ 1852.800215][T32314] device veth1_vlan entered promiscuous mode [ 1852.859932][T21790] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1852.880558][T21790] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1852.932169][T21790] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1852.990275][T21790] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1853.033557][T32314] device veth0_macvtap entered promiscuous mode [ 1853.169197][T32314] device veth1_macvtap entered promiscuous mode [ 1853.226879][T32314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1853.235181][T32599] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.9136'. [ 1853.247344][T32314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1853.247378][T32314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1853.247402][T32314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1853.251869][T32314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1853.307122][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.313888][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1853.401774][T21789] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1853.414528][T21789] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1853.430802][T32605] netlink: 'syz.2.9137': attribute type 10 has an invalid length. [ 1853.629747][T32605] device veth0_vlan left promiscuous mode [ 1853.655616][T32605] device veth0_vlan entered promiscuous mode [ 1853.706245][T32605] team0: Device veth0_vlan failed to register rx_handler [ 1854.000338][T32314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1854.036371][T32314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1854.055797][T32314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1854.066748][T32314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1854.083507][T32314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1854.092758][T21789] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1854.106049][T21789] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1854.130130][T32622] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9141'. [ 1854.160749][T32314] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1854.177296][T32314] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1854.190632][T32314] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1854.217379][T32314] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1854.544553][T21789] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1854.595330][T21789] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1854.615671][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1854.664024][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1854.679684][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1854.738776][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1855.467143][T32649] device syzkaller0 entered promiscuous mode [ 1855.822199][T32659] netlink: 'syz.1.9151': attribute type 13 has an invalid length. [ 1855.847823][T32659] netlink: 152 bytes leftover after parsing attributes in process `syz.1.9151'. [ 1855.896804][T32659] erspan0: refused to change device tx_queue_len [ 1855.937092][T32659] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 1856.003543][ T4282] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1856.016320][ T4282] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1856.024918][ T4282] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1856.045629][ T4282] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1856.055387][ T4282] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1856.062928][ T4282] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1856.119919][T32663] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.9152'. [ 1858.045890][T32669] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9153'. [ 1858.142324][T21797] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1858.154070][T12461] Bluetooth: hci2: command 0x0409 tx timeout [ 1858.273945][T21797] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1858.509602][T21797] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1858.640022][T21797] team0: Port device netdevsim0 removed [ 1858.658791][T21797] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1858.701338][T32665] chnl_net:caif_netlink_parms(): no params data found [ 1859.416912][T32665] bridge0: port 1(bridge_slave_0) entered blocking state [ 1859.439871][T32665] bridge0: port 1(bridge_slave_0) entered disabled state [ 1859.462075][T32665] device bridge_slave_0 entered promiscuous mode [ 1859.488730][T21797] device .d left promiscuous mode [ 1859.574206][T32665] bridge0: port 2(bridge_slave_1) entered blocking state [ 1859.609176][T32665] bridge0: port 2(bridge_slave_1) entered disabled state [ 1859.749724][T32665] device bridge_slave_1 entered promiscuous mode [ 1859.878978][T32665] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1859.900315][T32665] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1860.227644][T12461] Bluetooth: hci2: command 0x041b tx timeout [ 1860.278236][T32665] team0: Port device team_slave_0 added [ 1860.293104][T32716] netlink: 'syz.0.9166': attribute type 1 has an invalid length. [ 1860.345691][T32665] team0: Port device team_slave_1 added [ 1860.719162][T32665] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1860.798153][T32665] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1860.874718][T32665] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1861.001019][T32665] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1861.026620][T32665] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1861.123528][T32665] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1861.448469][T32665] device hsr_slave_0 entered promiscuous mode [ 1861.512444][T32665] device hsr_slave_1 entered promiscuous mode [ 1861.528878][T32665] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1861.555830][T32665] Cannot create hsr debugfs directory [ 1862.309592][T12461] Bluetooth: hci2: command 0x040f tx timeout [ 1863.915251][ T302] tap0: tun_chr_ioctl cmd 2147767511 [ 1864.014578][T32665] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1864.098204][T32665] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1864.139027][T32665] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1864.196581][T32665] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1864.387820][T12461] Bluetooth: hci2: command 0x0419 tx timeout [ 1864.510022][ T313] netlink: 'syz.1.9183': attribute type 10 has an invalid length. [ 1864.528561][ T313] team0: Device vxcan1 is of different type [ 1864.825665][ T322] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.9186'. [ 1864.991513][ T322] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 1865.017649][ T322] CPU: 0 PID: 322 Comm: syz.1.9186 Not tainted syzkaller #0 [ 1865.025022][ T322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1865.035115][ T322] Call Trace: [ 1865.038520][ T322] [ 1865.041505][ T322] dump_stack_lvl+0x188/0x24e [ 1865.046265][ T322] ? show_regs_print_info+0x12/0x12 [ 1865.051521][ T322] ? load_image+0x400/0x400 [ 1865.056084][ T322] sysfs_warn_dup+0x8a/0xa0 [ 1865.060639][ T322] sysfs_do_create_link_sd+0xc0/0x110 [ 1865.066067][ T322] device_add+0x7ed/0xfb0 [ 1865.070469][ T322] wiphy_register+0x1d9f/0x2ac0 [ 1865.075399][ T322] ? cfg80211_event_work+0x40/0x40 [ 1865.080560][ T322] ? minstrel_ht_alloc+0x894/0xa20 [ 1865.085733][ T322] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1865.091860][ T322] ieee80211_register_hw+0x2d00/0x39f0 [ 1865.097386][ T322] ? lockdep_hardirqs_on+0x94/0x140 [ 1865.102682][ T322] ? ieee80211_register_hw+0xeb1/0x39f0 [ 1865.108279][ T322] ? ieee80211_register_hw+0xeb1/0x39f0 [ 1865.113962][ T322] ? ieee80211_tasklet_handler+0x20/0x20 [ 1865.119695][ T322] ? memset+0x1e/0x40 [ 1865.123720][ T322] ? __hrtimer_init+0x186/0x270 [ 1865.128619][ T322] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 1865.134413][ T322] hwsim_new_radio_nl+0xafa/0xce0 [ 1865.139518][ T322] genl_family_rcv_msg_doit+0x22a/0x330 [ 1865.145107][ T322] ? end_current_label_crit_section+0x170/0x170 [ 1865.151379][ T322] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1865.157319][ T322] ? bpf_lsm_capable+0x5/0x10 [ 1865.162033][ T322] ? security_capable+0x85/0xb0 [ 1865.166922][ T322] genl_rcv_msg+0x604/0x790 [ 1865.171463][ T322] ? genl_bind+0x360/0x360 [ 1865.175909][ T322] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 1865.182289][ T322] netlink_rcv_skb+0x1fb/0x450 [ 1865.187092][ T322] ? genl_bind+0x360/0x360 [ 1865.191544][ T322] ? netlink_ack+0x1170/0x1170 [ 1865.196361][ T322] ? down_read+0x1a8/0x2d0 [ 1865.200810][ T322] genl_rcv+0x24/0x40 [ 1865.204854][ T322] netlink_unicast+0x74d/0x8d0 [ 1865.209658][ T322] netlink_sendmsg+0x8ad/0xbd0 [ 1865.214487][ T322] ? lockdep_hardirqs_on+0x94/0x140 [ 1865.219761][ T322] ? netlink_getsockopt+0x550/0x550 [ 1865.225009][ T322] ? bpf_lsm_socket_accept+0x10/0x10 [ 1865.230423][ T322] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1865.235776][ T322] ? security_socket_sendmsg+0x7c/0xa0 [ 1865.241281][ T322] ? netlink_getsockopt+0x550/0x550 [ 1865.246524][ T322] ____sys_sendmsg+0x5be/0x970 [ 1865.251342][ T322] ? __sys_sendmsg_sock+0x30/0x30 [ 1865.256422][ T322] ? ___sys_sendmsg+0x27d/0x360 [ 1865.261323][ T322] ___sys_sendmsg+0x2a2/0x360 [ 1865.266048][ T322] ? __sys_sendmsg+0x290/0x290 [ 1865.270890][ T322] ? ktime_get_real_ts64+0x440/0x440 [ 1865.276234][ T322] __se_sys_sendmsg+0x1bb/0x2a0 [ 1865.281131][ T322] ? __x64_sys_sendmsg+0x80/0x80 [ 1865.286156][ T322] ? lockdep_hardirqs_on+0x94/0x140 [ 1865.291395][ T322] do_syscall_64+0x4c/0xa0 [ 1865.295898][ T322] ? clear_bhb_loop+0x60/0xb0 [ 1865.300598][ T322] ? clear_bhb_loop+0x60/0xb0 [ 1865.305303][ T322] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1865.311235][ T322] RIP: 0033:0x7f9e8fd9bf79 [ 1865.315682][ T322] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1865.335323][ T322] RSP: 002b:00007f9e90bdc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1865.343764][ T322] RAX: ffffffffffffffda RBX: 00007f9e90015fa0 RCX: 00007f9e8fd9bf79 [ 1865.351765][ T322] RDX: 0000000000000020 RSI: 0000200000000000 RDI: 0000000000000006 [ 1865.359866][ T322] RBP: 00007f9e8fe327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1865.367857][ T322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1865.375846][ T322] R13: 00007f9e90016038 R14: 00007f9e90015fa0 R15: 00007ffe2bab2be8 [ 1865.383867][ T322] [ 1865.623910][T21797] device hsr_slave_0 left promiscuous mode [ 1865.636329][T21797] device hsr_slave_1 left promiscuous mode [ 1865.664127][T21797] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1865.674154][T21797] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1865.702634][T21797] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1865.714627][T21797] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1865.763766][T21797] device veth1_macvtap left promiscuous mode [ 1865.780941][T21797] device veth0_macvtap left promiscuous mode [ 1865.800934][T21797] device veth1_vlan left promiscuous mode [ 1866.232569][T21797] team0 (unregistering): Port device macvlan1 removed [ 1866.590406][T21797] team0 (unregistering): Port device team_slave_1 removed [ 1866.640390][T21797] team0 (unregistering): Port device team_slave_0 removed [ 1867.109852][T21797] team0 (unregistering): Port device dummy0 removed [ 1867.284247][ T4282] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1867.294426][ T4282] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1867.304597][ T4282] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1867.314076][ T4282] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1867.322149][ T4282] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1867.336639][ T4282] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1867.358934][T32665] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1867.476486][T32665] 8021q: adding VLAN 0 to HW filter on device team0 [ 1867.525702][T21800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1867.536092][T21800] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1867.572731][T21790] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1867.591768][T21790] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1867.627910][T21790] bridge0: port 1(bridge_slave_0) entered blocking state [ 1867.635105][T21790] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1867.673775][T21790] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1867.707418][T21798] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1867.726658][T21798] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1867.746973][T21798] bridge0: port 2(bridge_slave_1) entered blocking state [ 1867.754188][T21798] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1867.836542][T21798] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1867.880432][T21798] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1867.902115][T21798] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1867.923156][T21798] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1867.979204][T21798] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1867.999283][T21798] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1868.018733][T21798] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1868.032319][T21798] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1868.051301][T21798] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1868.093223][T32665] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1868.120795][T32665] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1868.168322][T21798] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1868.182851][T21798] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1868.663707][ T338] chnl_net:caif_netlink_parms(): no params data found [ 1869.183769][ T387] tap0: tun_chr_ioctl cmd 2147767511 [ 1869.427633][T32316] Bluetooth: hci4: command 0x0409 tx timeout [ 1869.436518][ T338] bridge0: port 1(bridge_slave_0) entered blocking state [ 1869.477782][ T338] bridge0: port 1(bridge_slave_0) entered disabled state [ 1869.519866][ T338] device bridge_slave_0 entered promiscuous mode [ 1869.587443][ T338] bridge0: port 2(bridge_slave_1) entered blocking state [ 1869.595028][ T338] bridge0: port 2(bridge_slave_1) entered disabled state [ 1869.676292][ T338] device bridge_slave_1 entered promiscuous mode [ 1869.696829][T21790] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1869.710234][T21790] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1869.737145][T32665] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1869.818826][ T338] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1869.899267][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1869.957059][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1870.006647][ T338] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1870.118486][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1870.127062][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1870.272741][ T338] team0: Port device team_slave_0 added [ 1870.340387][T32665] device veth0_vlan entered promiscuous mode [ 1870.422006][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1870.448117][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1870.490906][ T338] team0: Port device team_slave_1 added [ 1870.567588][T32665] device veth1_vlan entered promiscuous mode [ 1870.592523][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1870.670769][ T338] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1870.714924][ T338] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1870.827526][ T338] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1870.885322][ T338] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1870.922682][ T338] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1870.981665][ T338] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1871.034678][T21790] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1871.061710][T21790] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1871.103589][T32665] device veth0_macvtap entered promiscuous mode [ 1871.162269][T32665] device veth1_macvtap entered promiscuous mode [ 1871.282290][ T338] device hsr_slave_0 entered promiscuous mode [ 1871.324851][ T338] device hsr_slave_1 entered promiscuous mode [ 1871.381380][ T338] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1871.440446][ T338] Cannot create hsr debugfs directory [ 1871.511048][T32316] Bluetooth: hci4: command 0x041b tx timeout [ 1871.555921][T32665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1871.566675][T32665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1871.576869][T32665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1871.588345][T32665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1871.603050][T32665] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1871.616746][T21789] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1871.626907][T21789] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1871.638092][T21789] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1871.654196][T21789] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1871.665842][T32665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1871.705512][T32665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1871.734866][T32665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1871.778746][T32665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1871.800973][T32665] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1871.825160][T21789] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1871.871766][T21789] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1871.908050][T32665] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1871.935016][T32665] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1871.966611][T32665] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1872.001878][T32665] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1872.304545][ T421] device syzkaller0 entered promiscuous mode [ 1872.329873][T21790] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1872.364629][T21790] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1872.485376][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1873.589814][T32316] Bluetooth: hci4: command 0x040f tx timeout [ 1874.481058][T21798] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1874.490100][T21798] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1874.527857][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1874.605150][ T338] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1874.616156][ T338] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1874.632030][ T338] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1874.646703][ T338] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1874.740341][ T338] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1874.755596][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1874.765056][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1874.779809][ T338] 8021q: adding VLAN 0 to HW filter on device team0 [ 1874.790325][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1874.805121][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1874.813962][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 1874.821108][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1874.830504][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1874.841591][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1874.850857][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1874.859889][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 1874.867001][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1874.886940][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1874.903254][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1874.916144][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1874.926363][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1874.936110][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1874.952014][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1874.960993][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1874.973926][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1874.983138][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1874.995244][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1875.005688][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1875.018441][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1875.226755][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1875.237624][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1875.251869][ T338] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1875.551745][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1875.563015][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1875.593833][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1875.604471][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1875.615192][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1875.626184][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1875.636588][ T338] device veth0_vlan entered promiscuous mode [ 1875.650092][ T338] device veth1_vlan entered promiscuous mode [ 1875.667679][T32316] Bluetooth: hci4: command 0x0419 tx timeout [ 1875.682265][T21789] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1875.690886][T21789] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1875.699813][T21789] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1875.709003][T21789] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1875.722291][ T338] device veth0_macvtap entered promiscuous mode [ 1875.732851][ T338] device veth1_macvtap entered promiscuous mode [ 1875.753995][ T338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1875.765016][ T338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1875.775432][ T338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1875.786069][ T338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1875.799896][ T338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1875.810938][ T338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1875.824590][ T338] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1875.836939][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1875.845815][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1875.854288][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1875.863305][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1875.875366][ T338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1875.889746][ T338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1875.900021][ T338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1875.910983][ T338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1875.922862][ T338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1875.933395][ T338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1875.945743][ T338] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1875.953631][T21798] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1875.963276][T21798] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1875.975557][ T338] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1875.985288][ T338] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1875.995011][ T338] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1876.003838][ T338] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1876.084455][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1876.107135][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1876.116797][T21798] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1876.141410][T21798] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1876.154801][T21798] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1876.163446][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1914.710203][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.716561][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1962.877362][T12461] Bluetooth: hci0: command 0x0406 tx timeout [ 1976.149657][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1976.156057][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1978.227741][T12461] Bluetooth: hci2: command 0x0406 tx timeout [ 1993.587541][T32316] Bluetooth: hci4: command 0x0406 tx timeout [ 2037.590204][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 2037.596586][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 2099.029401][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 2099.035766][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 2160.480197][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 2160.486637][ T1277] ieee802154 phy1 wpan1: encryption failed: -22