last executing test programs: 7.503534557s ago: executing program 2 (id=4154): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x10000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x8008, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x18c8, 0x0, 0xfffffffc, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, 0x0, 0x0) r1 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r1, 0x107, 0xd, 0x0, 0x0) (async) setsockopt$sock_attach_bpf(r1, 0x107, 0xd, 0x0, 0x0) r2 = socket$kcm(0x15, 0xa, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) (async) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r4 = openat$cgroup_devices(r3, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r4, &(0x7f0000000140)=ANY=[@ANYBLOB='b *:4\tm\nr'], 0xa) (async) write$cgroup_devices(r4, &(0x7f0000000140)=ANY=[@ANYBLOB='b *:4\tm\nr'], 0xa) sendmsg$kcm(r2, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x0) (async) r5 = socket$kcm(0xa, 0x2, 0x0) r6 = perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x412, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000180)='cpu==0&|!') setsockopt$sock_attach_bpf(r5, 0x0, 0x27, 0x0, 0xc) (async) setsockopt$sock_attach_bpf(r5, 0x0, 0x27, 0x0, 0xc) socket$kcm(0x11, 0x3, 0x0) (async) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, 0x0, 0x0) r8 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r8, 0x29, 0x39, 0x0, 0x0) sendmsg$kcm(r7, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) (async) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) (async) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) syz_clone(0xae12e400, 0x0, 0xfff0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000001d71181a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000001d71181a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 7.027646811s ago: executing program 0 (id=4161): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair(0x22, 0x2, 0x22, &(0x7f00000006c0)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'vlan0\x00', 0x800}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000180)="d8000000140081054e81f782db44b9040a1d08020a000000040000a10d000200fec0000000000e1208000f0100810401a80016ea1f0006400303000806600cfac64dcf5c0461c1d67f6f94007134cf6ee08002a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a50b70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x8000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000300000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) 6.825217446s ago: executing program 0 (id=4164): bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/net\x00') r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) 6.310607381s ago: executing program 2 (id=4167): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0x2}, 0x100808, 0x0, 0x8000, 0x0, 0x0, 0x200, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2e6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00ee0000850000000d000000b70000000000000095000000000000002c3f2cc2b7956244cef7baf48e6d2885a09a87507ebfc75b5b0f4e4309ebcdac5f7a860c000c9c781f6410457253e89ad528d985636a86ec0f68f59cd1159a2c2e85d726859a919cc9548a349980d1ccdce27f94bc074c27f81078545c146a0857153b7b8f00034debae58a4ab415b0d7ff0575cc272cd3d7e8d974927676468ff2d86e0ffac94792ed9cf6b40b3cf252a47c05af3a70d57cc3e067d1867b54d24e20000000000000020009ebf84d3b042d6e4e4e29d8b33fbdd02e86a6432cd080e3b57239f0127473e6ba922aff649609d40b47ec331ccba3ce8f530ffff19a6471bf5abc742d9cbcfb964b13831034694a6aad84cf08a6c7b2235dc99de9aa3e6b77c7a2877261ed32da90864987f30926c9013eec3b86836ae50447aa5a79f40c235000000453302712c3d8fc4e2b61adb0695e800000000d4f4e91f0000002c33df871a8e782339bc424d1bafe5725c8a404724f8a4f1cda7997b65954f74097579b91da309b887af2485c2d9ab09b506000000000000000bf7b2ff4602aec1eea200000064881c5630521a08e051374cf05c921a06fb78183e7e68de9dc8d95e0e5b365d10e1004dae58b3b5b89709b0ff47b200000000004000cbefd9a6bb70f60eb9c01dd2fc79b85e4d961498f3a80131d21d85618ba2189f45d011ef1da5c6d57bb8fd387ccea9c3899a914e47e82f040000009de2323f927355408f87264797d3fa970949793b94329d580500d1f91c0d22587e05a61e3d8576ca168e88d7a9af95b04a37c27bfffab9abbb31fa8c0080258cfa6d3f166e695f3c56490aeef464d9965d70a50f1282619344f223548e75fa39643adac1322c87ca253ff2fb1882760d6feab16bacdf83c11816dbe959ebc5ec479c8319f73e2249eab0486b110702a481d3b51976a52303056e800b4ae5acc2df636a65eb1d672bf2000000cda8462cc9b16624998be65683321e970000000009b8e20762c1bf4a3eb6769f2b23e842bacd9c685edea0ffa3e975424f8ede49e61a4de808a38ba3512d64dc71867df4eee3f1ff791cf7c9862f98b45852e4b2f78721b978addf2f2a29a387c6f0576b36038f819286eea99a6a434811cf2a117d775fe986a49fb82cf5f15972d55185ab18f1045384501adabb20f7b0e15ff47f1744e2341b59034959a1289ba6e243668e671d305707e3de7652bfc5b60c76deff43a1d6fd6a4180ab723735abbeffe7f2ec3a0bb86f9eddfc0f3d1d503d7a540f64000000000000fbb4c256409e54daefbb107c381fa729ff5fe607d93430da178d685d7730f5e129438a5214f722096d2986334c25e454474f92e65828b018174a9f4738b8c71fbdead06ab95e02f9a847182766964976b1fccdb9f35721e43e33883cf16ed1343fb7429eb395123b0a4262b7023c22039b9002589a379ed4c6267965af78b861bd335312538cec97966b8973d4e299d9802264d06e40ae118e1d242d1128dcedeb44030df12ef68ffce8d141e8960ef790fb0078215d65f96eb55db8cbcb060000000d988374e45451a694ffe38a1d03912b31c98d42e1a1bda1290de1a499a5d6849914c1788a7aca37177cc34102f44fec5c5e0abae01c439a1b0311e074e81ae9993b5b3459553ecece78d4c1541c70f5d81e0725d5b273755c0000000000000000aa4234e282182952a76233d18e7d49638aeb04e7a9e9e7eafb7c255372795d2d192a0a33cab0f5bf2e93e0544fcdf2df2bc6ce96e5a7d72fcdb0a11993d54d97a23754ac828674dbb93c0ad345715be4a13678b01edf76d8a9236558fea2c88cce004505ab45d8f5f88aa887bbce5c18970428516f6099bdbb2cd7a2356397f1a0a23e662e2a6c4834400cbaa41c3c574ea68da5ec1ae49f968bbe0e0bf9878516f553639f5b4828e92019b61f5874be1c7cdd9482df50bc24a8a1fa10d291390eb84e26a2e8dbeaa45604b05a116c1210a7540bf81005044273f5a8ffc538db289350eb248e483bd8920efcf30a798c2b636243e0a37262ca47dfeefa1ce69b4475d7d714ba0c636e6ae9f710411d30ef424aeaabe057c7df6ff8f767bcd9012e1047c686f5ccb76ab3a5df53cbc22ba7ea8f6a8edc19d6c1be841503850803bc2c2d5e0e34270a7f1cca0c6c53a8e5f891f7a793a70da62d6d88fbb90d220acc687931b42d6be83ab870da3c0a567f5e65ec0457f4ad2a4ec0b671b36388afd5520a8483a4b11f7d02a41b315f0f9e59f47668d68a74838d6976e12fd45200014041dffacbf60892ec8bd7560686f137a806d3dfaba900b47cac62f828342fff009adb5b2251461a1b9d6ba625b8fe04e69a1a4be2696f24bb68f486e172932e03000000000000005942e1b9d6dc28ab8e19e1111dd893e8d5bc5642faf21eef40d6e7de3ef62c4bc5ff17e7aeb2841098f0cf74f845d1cc9ec4eee79c290fb0ba939b13707004e2e9cc0d350538c1c8c6bb9a38c6ac5ca07df32601240ea3f160d3a7b83ecd0509ce9eba0c7bf7843799b1b56a234f9eaab8a3f14f1472bb6aaeb8ac9ee4055f05558ab31f339f6a4caf2ee2fd01f34dca330000000000000000000000000000000000000000000000000000000000000000000000000095e6f945ba9a941cef5e70b8c152321e24b5b29bcf374dcf5a29a35d76e6e2bf8df95462690a4fc9ec8129e92b6ebb4b40a992a75d3c5954d0bfc87db24d856359079b29b3c374d081c300b2cfaa596d24e800ef8e2201f2fb7a9946f89f9f31f7cbd6f7fd7f8898c70b5c65f2e28f22e983892c383882809f557affbda5e1850d66a4a1ee73b2084681f880a754acddcdafe3ceeeebc0b5f2fedfe7d198e3067f3dbac9441a9ab8409cbbb7e15b9ae3944097de34de2001c8533a3766e6e4c4c4702ccb932a27a3962814cd6aa8fc684beeaa3932efae9052be8eec1e95f6ad8d41dd34829504ba4b66e27154cb6e34aa13450522df1723130b6fe347c93f00e40e293c98d849a33f773c743728992f40faccd5c23130a1c6bfd6fc661bca1598137ddd1090ded672f5a48a40cab3f640c8241a364cbdd3f188eec7da7bccafbd5bf28a46f0eecc6b550471b06a5a411c0e0b19e15a461e7c6833ba936e214b013f2819ec6572a43b5cd32b11d7e4f8dcf8f7820a17b7b2ee6178a03351dd31091e46bfd82a3979b9cad109fd6217cd52aa81bdabd50826a474bd16b8f7e6aed12a305366599f5f029a7b24558c02750500002f1c19d16a6f391906000000cc03bbfb8c698ecc137d96711100e01031aa74fad86b99eebf0527552a9331e646c424b14ffbb815622bfd2f635855bed1b164d0a56bd104be069854111c5b26ec3c652b5f0a6b9676dae987ec23456ba05a4dfb15321ef6b76e7e547a688c67ab531cfc86784c9f940d9fb0464a72ce635e14b80dc5c1c64e8f58c570e7afd83ee77f157c146aa747b728969aeb4aba1d8f9de1b3fb8ab6ea50e884c2ea98e6400bf0c5ae2887cd1da0e57ccfdf5eca2b455247efcc13102846c0a85f20c80007c0ce6efce627b95b8ad3003385de97101678fb2163ecea6e70a77a6fbc089e31a5ccece932229b8f79faa6863d6857c3d9a9710f938ad16eeb8342278f1c1cbc226498028234d21466892983378fe64acbb44f694cd78e43c74aa75505cb1c91b189f8f89f233a05f5cd4e173a373178557843dd705268f74a9e5429945503195aefd6706e587f7ee8375fa559c3ad195d3795df1a8364cd13acc3256ee4634c73eeb6954d0fcf09ab84df0b8900e0c6fea2cc0e7c207b8942fafd70530a0fc4622ecf132d1d5bdc9ffc79f0549b82df521817651d5fead5128205b92ccdccc69407ab556217af277af999dbd456dfc43dd061b6c91485dcc208cf0b3d0bf851de413f5de5ec015e296914afab6411109355e027ce04990d9aae251b9deb11b7db45b9f15b7b55d8fdbedd9e6cf891205694f02be8b9ea8ecd41308a0e1b93ae3435bfa88b440b1f701b4d0fc49c82193f27f8023b630ea97edbf3bf421a0a1a2b4ac7bb30bcd1cdd172c0df37408fd6827bb03e8742fc1c7a2be0d1299928c5f79e846a8dc7ca648d960a759e6711b69776896a9656d59af6d44bff348229fa84034faf8421a22c4b4c17a3d24a4aeee0d0850371feefd77cc4eef51c2b417c8c7458ddd7dd9d1a863bf0a9e1a30a19020490038017a5c7e474c83302a2b59654d49a11c6736ac63e8eb383760fc2b5c976dacf3dda7191c757f28e44f6a5f95db7055f7ed983f5665210f20a494fabb0dbcd335700000000000000000000000000000086666201251aa4f139d0485ffcf89f01639fd1579a3802f720a0215c720a97071f5065a23642a5826fdbca444b00e2e5835185d5d5b2796eb0fe32cf3b0633f58ecc7648c3c6efe82f93a3008052416512eea30ea9472e0b456a652883c0907323cf03be193ad0438cdef7a98a1671a1918df310dc4bfd61c3db3c22673884dca370558936b85737e14819ab1c57b348a8ff16d36364a20fe846d11d045de81f069bac8425b31c5d08b433562ffb318c1285011f9b78b2401989384311101e452f54661ecdb251ab9eefc8e400191f0f0f8c679b0000000000000000000000b41b0ae67d9351c49e1ff285d05a3cc39a5b0cd20afe0a00086650f8fad20c0e1e7131836c85b2cbacd41593928207312189fdd66abc45a139f0c9dbcc58237cec5bd56ffe0c6de23254a7951a298501ca04ab30b5723df6dd01d0b1a87c197b83b286374ba9a9dd1bd09ea1b71b24a1f527bf59d9633e3d15ed3757acc494f464482e49884c13780cc392bfe67b5d91e5b513daea48cac7645db35f07ba41aa187f65c5344717d7a0ee353a7e36b14fdce5898a613cef224d3addb3d2de74cef73f7520dc8cc8ffaa62cbd25e691ef4c45fdd25675b32c129a8464f08c4da9c08713b54416f3b56a04086dab1d196884e062287ad4758e883d2f99833d8aaf0c56718f6b0434740900faf4ab824662a719bf370fd0b2de04c1455ec14908ce5cbec79466f2f2cc337c53437d626254e00000000000000000000000000000000c34646f8ae68c095e7298300feab8a3dfe2c43fc971385b13b4f3b61ddbf5044ff572defcc67930f0e715774e1e970751534398faf79350255cfa9021378f10c2043e7ecd5649c9720530da7ea227b792f31cb5d688b5f1eba9ff5f85c97b35e00ecf76282912b483e31c76e303e527e98a9ca14f718d495ad45db16c4500011de506f0ca35f7ea96ed1831e3c1219f985b26cb8a70e7c8efcb287984871e0fed3f1985cf63f00289292b378188ad0dfae12c265b88961a9223b48cf7055d641595e0cb926d63c1f8a207f48bd482290b79867285c2155e655e017bca6cbba43f9b49042fb2fb390c436b3306e8a0800000090d159004da838a50235b91f5273c1fe083067ce1e2d8011c9e2b6d3ea69dfc3712e5ce440432fbd29ffd004000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x20e, 0x5ee, 0xfd000004, &(0x7f00000004c0)="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", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x500000, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r4, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x20) (async) ioctl$TUNSETDEBUG(r4, 0x400454c9, &(0x7f00000006c0)=0x4) (async) sendmsg$inet(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000013c0)="d080", 0x2}], 0x1}, 0x20000801) (async) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000001c0)=r0, 0x4) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0xc1f8, 0x4, 0x6, 0x9}]}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000020000000000000000000002000000000000000000000001"], 0x0, 0x32}, 0x28) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={r0, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000300)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000380)=[0x0], &(0x7f00000003c0)=[0x0], 0x0, 0xef, &(0x7f0000000400)=[{}, {}], 0x10, 0x10, &(0x7f0000000440), &(0x7f0000000600), 0x8, 0x3f, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f00000002c0)=ANY=[@ANYRESOCT=r2, @ANYRESHEX=r3, @ANYRES8=r6], &(0x7f0000000680)='syzkaller\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', r5, @fallback=0x12, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r6}, 0x94) 5.468623375s ago: executing program 0 (id=4173): r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="1083da0b96e7959d250000003700000086bd7fe7072a454b2e141cf7d5dfe76cc5d85ac854d6aac2209820ebe335a21418127761489fbd9692fca31800440d5ccb423b125f5f7861fbd73bdb79bf46d9f820e0a9e1012febf915b095a5f6eaf8592ba385284a465eac35a2b31de49503b0b7e0d56e3c0ebedb3336aed447d70e33db8cda0304d71804b3882b3ece0075ebf1"], 0x10}, 0x97) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)) r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3ff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0xd, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f0000000b80)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x800}, 0xbf) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) socket$kcm(0x10, 0x2, 0x0) r3 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r3, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="0213020902000000e4a17c4e2ca18baa", 0x10}], 0x1}, 0x0) r4 = perf_event_open(0x0, 0x0, 0x5, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$kcm(0xa, 0x5, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x189703, 0x0) close(r5) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r6, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x0, 0x0, 0x3, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x2, 0x0, 0x7}, 0x0, 0xffffffffffffffff, r4, 0xb) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r7 = getpid() perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x0, 0x7fffffff, 0x2, 0x3cd, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, r7, 0x0, 0xffffffffffffffff, 0x2) syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x200, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 5.423428866s ago: executing program 2 (id=4175): r0 = getpid() socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$kcm(0x10, 0x3, 0x10) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90124fc60", 0x14}], 0x1}, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)}, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000011c0)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)={[{0x2b, 'cpu'}]}, 0x5) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) r3 = perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x1c842, 0x0, 0x7fffffff, 0x2, 0x3cd, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, r0, 0x0, 0xffffffffffffffff, 0x2) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r4, &(0x7f0000002200)={&(0x7f00000004c0)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4000010}, 0x891) r5 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r5, 0x88, 0x67, 0x0, 0x0) syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair(0x1d, 0xa, 0x0, &(0x7f0000000040)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000020646c2500000000002020207b1af8ff00000000bfa10000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0x6) 4.399651095s ago: executing program 0 (id=4182): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xab5}, 0x310, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x206, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x4}, 0x11d5a2, 0xac5d, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r4, @ANYBLOB="f2000000"], 0x18, 0x1}, 0x24048014) (async) sendmsg$unix(r3, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r4, @ANYBLOB="f2000000"], 0x18, 0x1}, 0x24048014) socketpair(0x11, 0x6, 0xffff, &(0x7f0000000040)) (async) socketpair(0x11, 0x6, 0xffff, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(r5, &(0x7f0000000a40)={&(0x7f00000002c0)=@sco, 0x80, &(0x7f0000000880)=[{&(0x7f0000000340)="3128ab20831ce010ac1dcbe9ec69f7a91f76e8ff1eba8c8fbc08ce788c280be75ffd59f20455d908c4e5832fc378187893f97dba8ade72623598ea84fbb392604a7d1c33b8a1aa92516a107543f4d7821b1075c9a3e64abc5b52575584a3015c0a44cc66cfbef7ea513b1003b70e7a529f0326f3383efbf784ef397a6bd8d7951dc5b4c6f7f3f3ae05", 0x89}, {&(0x7f0000000500)="3c5864a29a2ca640f6af877cfb9b1ed2b8aa72e2abaf34e146a58a05e87026c26ec6921b366bb865203cf92b008b64d3432f3813d188711854ecd4a4e995e7084f19c39be518ea774ec60e701e18592b9d7a16f6f1a147bb83936e70705fbbd09297044bc90c59b2f2cc504d109d2f8f013150b748678a085beff867883f3755fd313da9d68e04ae695b9bc48467e7c038a095fb814f221efe69b690246b7f8e2e7e22d2556debed3a3e93d31cc2735c3db25058fdd87884941fa315f90dae9a4908c23b2aed7cc3bd8799444f2b", 0xce}, {&(0x7f0000000600)}, {&(0x7f0000000640)="6229397f99e3468fbb68152912aa06a8d2aa787886720396257f9ea778929ad65e8b0994fa206a899a2543bb21d1deb76745f85862b254afe604215169a5879d21d75587e52f825a35e9673d1554e2a57ae2c491c0b07f6c377a7ba8d1187edecf98605ed5520662afc4e92838566735c624552d4241c721ebd08877ceac5dcd9e3df9ceca97c06a63c6f7aaa7ad80172b129fde4e5705292c6583a114b84156eb3c24156ee31f7342f3c5cd2e91dfc21314cb5a79a9aeb7fd", 0xb9}, {&(0x7f0000000700)="fc6c73d6fffb7856578cb3c515b573d956f8e9b660fdae277aa486b1d5296ad7cc832cf84e138cbdfd257f76939121ec732785f1de5c46", 0x37}, {&(0x7f0000000740)="72123cc2d1aabdd291f463d60effdf9e9746621a15390eb868132f4b28573a2573029889e1a2511e9165a52c9d7dcd607bc87ca8af6220910a2dd0dc4694736d82a02285aa3e6eb43129348379b0f90c44a619f67a64464028a3ad96a0f96d2febdead8d3eebe117b0ece946489350b79bd1a8477e32b74c6a1de2f58b989cd0498a51e93e55010feb85fb7beb4c2136efcca3319fc4cf324e", 0x99}, {&(0x7f0000000800)="7eef7e5113bc068198af551a902cc760f3e583d95dee9a5227f167a6d478c1a4a14552670e20fea7c608fd67a4b04a842c20474e4e984de58d9851c00759efea72c61d65fd", 0x45}], 0x7, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x118}, 0x0) r6 = syz_clone(0x40240000, &(0x7f00000001c0)="41a4f76f3b", 0x5, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x4, 0x0, 0x9f, 0xd4, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcf, 0x4, @perf_bp={0x0}, 0x806, 0x200000000000c8, 0x0, 0x6, 0x9, 0x40000000, 0x0, 0x0, 0x5, 0x0, 0x2}, r6, 0x8, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) recvmsg$unix(r7, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40002100) (async) recvmsg$unix(r7, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40002100) write$cgroup_subtree(r9, &(0x7f0000000180)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd63fc80fc020c2f00db5b686158bbcfe8875a060300000023000000000000000000000000ac1414aa3a2008"], 0xfdef) close(r2) socket$kcm(0x10, 0x2, 0x10) (async) r10 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r10, &(0x7f0000000240)={0x0, 0xf09dbc9e9571f099, &(0x7f0000000480)=[{&(0x7f0000000200)="1400000010003507d25a806f8c6394f90324fc60e67641ea7590a0d436802696286ec7843a5f6c6ee5910c06eaf1113f", 0x14}], 0x1}, 0x40814) recvmsg$kcm(r10, &(0x7f0000000380)={0x0, 0x61, &(0x7f00000027c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x10100) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9", 0xf}], 0x1, 0x0, 0x0, 0xc9e}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b00000005000000010001000a00afcb25c4d627079d178e09140500010000", @ANYRES32, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b00000005000000010001000a00afcb25c4d627079d178e09140500010000", @ANYRES32, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="89000000120081ae08060cdc030ec0007f03e3f700000001", 0x18}], 0x1}, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="89000000120081ae08060cdc030ec0007f03e3f700000001", 0x18}], 0x1}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001500)={0x6, 0x6, &(0x7f0000000040)=ANY=[@ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x80000, 0x19, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa7e3}, 0x94) (async) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001500)={0x6, 0x6, &(0x7f0000000040)=ANY=[@ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x80000, 0x19, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa7e3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2e0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x12, 0x0, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b3114", 0x0, 0x0, 0x3}, 0x50) write$cgroup_subtree(r11, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r5], 0xfe33) r12 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r12, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe000018"], 0xfe33) (async) write$cgroup_subtree(r12, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe000018"], 0xfe33) close(r1) (async) close(r1) r13 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r13, 0x891d, &(0x7f0000000000)={'veth1_to_bridge\x00', @random="0200c100d8f1"}) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10}, 0x0, 0xca, 0x0, 0x2, 0x8000000000000, 0x10, 0x0, 0x0, 0xfffffffe, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x2) 4.203904211s ago: executing program 3 (id=4185): bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/net\x00') r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) 3.119235052s ago: executing program 3 (id=4189): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x189703, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETVNETLE(r1, 0x800454dd, &(0x7f0000001580)) close(r0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8929, &(0x7f0000000080)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002c80)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4, 0x0, 0x0, 0x700}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x3801}, {0x2c}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0xffff0000}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.242971757s ago: executing program 3 (id=4195): r0 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000000), 0x3}, 0x10c002, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2000}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x90, 0x18000000}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) close(0xffffffffffffffff) r1 = socket$kcm(0x10, 0x3, 0x10) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="1400000036000b635ef1681c717a3c4a0ed89a5b", 0x14}], 0x1}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0, 0xffffffffffffffff}, 0x4) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0xfffffffffffffd8f, &(0x7f00000000c0)=[{&(0x7f0000000100)="5c00000015006b05c84e21000af32c6e021875f802000000400001800000d34460bc04eab556a71525346182949a36c23d3b48dfd810000000003fce86b6345b05ca97fe4d5670a568fe43", 0x7c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4) r5 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080), 0x4) bpf$ITER_CREATE(0x21, &(0x7f0000000200)={r5}, 0x8) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000005c0)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x5}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={r0, 0x58, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000200)={0x3, 0x4, 0x4, 0xa, 0x0, r4, 0x10, '\x00', r6, r7, 0x0, 0x3, 0x2}, 0x50) r8 = socket$kcm(0xa, 0x2, 0x0) close(r8) r9 = socket$kcm(0xa, 0x2, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x4, 0x1076, &(0x7f0000000300)=""/4096, 0x0, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffed1}, 0x70) setsockopt$sock_attach_bpf(r9, 0x29, 0x37, &(0x7f0000000100)=r10, 0x120) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x4, 0x1000, &(0x7f0000000300)=""/4096, 0x0, 0x4, '\x00', 0x0, @xdp}, 0x94) setsockopt$sock_attach_bpf(r8, 0x29, 0x39, &(0x7f0000000100)=r11, 0x120) bpf$ITER_CREATE(0x21, &(0x7f0000000280), 0x8) 2.072442572s ago: executing program 1 (id=4196): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x42082, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x140, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) close(0x3) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x2, 0x4, 0x1, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0x10, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x200}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x6a2e4e0ed11fabf6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x12, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x2000}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) sendmsg$unix(r5, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110c230000) close(r1) 1.678286543s ago: executing program 4 (id=4198): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0xf, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000009000000000004000500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014006500b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2a}, 0x94) 1.527067647s ago: executing program 1 (id=4199): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xe, &(0x7f0000001cc0)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000fefffe7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000c9be17044171e1d3d7b1efd036d7af273bce36015779c4cef58fa35d17c668a4b63e069efb29797573b8538e31ec24925095a163b9d4e76be2661f2a395e41f7e31a8021e00b00104e0801d4de36e5fdc6c42a7b3ff13f2360a6e231fd223bc33091dd61258a1fda45991fbdce6793c8a4785ee8b60092659b941bbd694dff0f0000000000003a45404b04bf97c4fea679c032b363956cd8bac9626b5db1b07a0bd7cc85e961506a35a04617dc0200379e731d3a8d8feac94a4ee293001f6ce7d5b40bf2a7f9be8173a9639a79fae885d05afe042c0e7821d406c967379e7521292d24d6c8034f2fc7c855a8945e9bce678ee9a015abc9daac8876623db56346916674ceb55f60b493f2f4d736acb2f206fc538450a676d71c01175b8454eb92567e8f8a707b590d7219288e23ee0800000000000010a49fc8f4ff0300000000000000000000cb947d6017ad27714772ad790af252e648ef8c313c604324f5b306000000000000cf327a8f5dd89315b8c8650a70162bba30ad7804fa4140f1a754ffff000000ab744d306619dfb3a37d897662bee00189f43da46a908a235c84cbad335fd1d2f2ef93a6a70c8b8ece0e243eab05a34ab0a7e7e497065e5e282e284f8d5e8852a265d528075214af000000000070d42182d8f3a347d48289a824e5b7b238e27263a23c0b865f75331d888c72df1da4b290582f00024227f03204add786a87b23ceb17c25810e769fe2d6a7bd8e504843b66b1a8c7b364bd2194ba9c8f60ac0c9b18d8c1b9e1a736825c91b4dff0000c1c5dcffa295c2930000000000235d84b0193a5ea7c77cdb7de8ce1a59ab4158097b4dd13ebfaf4425c6855530b56a3320d85c8fe85f667998b1a7e589f486c107761108e4e230419fd27b6ad9c10b25c6b6ed84badbb970dcf133279dd355e41de944564bdab99c5c712a9fbc8e9691c775bb94f746505e1e748cf1710d52468b4b1625ce21612ed5e807dfb5f19f3267e5366b2c0b2a0be49ae476263c9407ac6c596bf3cf66204984f5aebf93d1caa220ea6969cea852fe9a7d1eee13f1f48722a69ad9fb850bd093a302b9250245900ad5c8e5f20ddf77ee3d5a168964fad1aa7347d36c502d02b1d96d753ef6fc354fc126070060c65c147651fca62c0a06939f40c90ebc3042e753fe91b5770b24f25c558736dd7e1e9fb214cbb04c5c6ee4c970b320ba6fb6ef4615f4092de54c519f4622e1224153463ea80248a45a95a189958f586d606dcaa9aac656cf95a2d35225cfb0e6f47486d5cbb04a590116d4de92e203e107d68728a189b0d537d2442beab2f8ce7b2dd357200dcd139e47267012fc2a2b6bad79be429d1ddaccbe0139f16ca1b9bc1103000000ed1ece54cfdbe04670bee9b42fe3dc42033997e2e700b6edb2b49b5f2f6001ee0a9e5d1bee199ce9124a5cb479040000000000000049ead5b02d5ea1dcf6cdcf332fe94b3c1932d8d391754774a32c9b7e6ca4023bce2c7281d27a2cb62383ab3a3bb535650fbfb96c89936855eb7a485698f0d20c3eedd6123ef8f218d52ea2c346f80acb8b9a71856d2f2d1a7c6f45ee127b6a1d1ac1e243ed02e49e8aafe835919564af915965a050c37ceff855bd2dec3452c7c38f5dbf1ff1ff00020000000000006a1a029ea6540b40b2f797813af2c7d4ed235c2dc5f1dbbfcc52b2f55fd3f9f100c4891d0cb4c10ed01489bf235c45822594842da1b411346297a40bbf221bbf63ad3822575dcc01a3c34b5aa4e3750400000000000000fc0fd9c746cf0ed4b0343d00a154e6a869346256ffbd666a34414ab0f40bec45b1c24f02ac9bc20e69201968537dd4dc61323c8b6d3643183631664eeca616696fb30fe89c8bdb15037c801fca4a9c220fec5d14582a00b62548ddf2599e5ffc5330cefb8903d276eae21b0b4b20100ead8256636c7e754185e815dd21445cc965a0526da38021a3e540949494ef3041cfa5067f556a0af5c19d27ff4f61fa7762d7963c96853709e773f14c47eef784cb145ae9d6d37fc7b5d83e05ac773fcc429eae6826a9d207d4c39df8eed9cc2ae3f68df1c6495a82d02939b448bf8038521057714e6e644d633d2abe9e0b0025d16b7eff573f78364ed70a62a7b1e55311dc0193d47f9ecc8c7ad268dc6e2e75f8cc83315411bd6c6b88e1850ee757ac2f9e4d6ac510003717d5847a19e750db92d33d6bdc434d0b52b2eb4b1790459e35122f46b205120a54bf657da9fd55d43a89e333481de468f5984a69509e9eac5a5b39c004396e8cb3ab037fd62fa43f259f13ebc4b590e9ea07ea37689049c799cd444d45dabe3e3cf086768daa6816c37793d17a284d2828f5eab2d3f0bedd5334b7bb4c983fa9cd4bd86f0ad227901e83ef4871695380d25bea2929fa66382af6ddb89917ab100046151bd08fce74247955247daa1ea75139b9ce3771526503c7db3a4b3ff39301986c1fd9b5c42d39e768946c9a7ee8dd081bfb6ea5fa132ebdbe72d02ce9f2000000006f63ae8311afc4943c963d39e42c54a3f52d121bfb425fe268892f654febdaee43e95b5ae6749275e1ad8b8b279e1ae296e03a8d9386d8e199dc1f00000008000000000000000026c43493c622f041b47d329b248e8ccd92e9b17007ba2578eefcb59f50343722e6cba3be72fd037eb5fa243a395b5c83376a14414b32c2e8a33de8000000003927da2bec76f4e15c8bf3715c5bfe7b3617d0fcf9b5861554b5b76b8ae69c644a48931306a16cff8a38ea95553867e2c5fb1e99b1802e616345871b4611627874cfbe30fa5793c873ae6f75427f3eeda690147b9615b096d967c2d7f5ddf725f0544f8750a5ed04d6ca0f223506fec5d5e65b467c59459f6113cf41c174a63a17fc79d0b777a0c903c0d2e7f79b6f9ce68a3b72315407040f6a09cadc25e87b7c6b4a3079c7989b4cf04b251fb555fa9a2d74392939b4dbaa9e620e22ab975ac3a5a329157762c1f29075fbdd39451a56b97c90e4fde6782a7c78e7fbe8400054dcafcd51e9eef2d2ea10a3f2636ac2239cef5d8505060de55f472aa89cb8e0188f2ee96cb1ae8dee3c03d0a942c6289cbc4499cea402bd0550520f4aae98c436f18a667ae4efeb5e6a4b1b3f53536145a87578eac8bfc1037acd9d9629449714ed1302714c3519fdd8529b5a86ce2fabb7f285fe73730000000000000000000000000000000073b6f8e9255567374cb2cc80be58fca5b1dc50d85342e56beda632edb7f0a4abcabae102fadfbffecc6b1549315dda8e09d18a7fe5e1574e4fad426b6ca211da39a16dffdd661a20b20c390e00004b002cd83b754c3d32819c823027b3cf8f8da6e63d099712be370bb2aa06debff931ea0a2e7aa0390000000000000045b6720d74c470d49e1e97d1668bb75ad994089d723c2eeaad3f857937fa3df615121a1841ed452dd395788e1a82efda18b41c06c948ef44af8500fbe1ee0828a3b047afb80435935b0f99b381dcf101e9a1593bdaab3bc88c70bf56995a4790a339e1b62516356644ed7df6db419d0976a5169e68e8bd4712552c5ec03f2818c17c4a5bf1e5ecd9bb40074a63c66b61f4779226a99dc5ff9c442e93991570797493569e6f9ccd6d73bcbce41022d4731fc61b6bf0188c74a21471332a546ffe8e9dd738aa2ca782ff5a547a1ad7c348c59ff99d1496404eafcd0333df8f2801d39ad0c82735af24b819efc2fd67c6a53835f0af6a51d1b9123f4b9af7fa2ee2ebf4bc2973cf04380b41aa7577e35bcd28446bfcea19aa85440fe0fdce12e53da7b8842b7527a34d1bcb16fcdc84f2c46a78c01c2ff463cdd0d65267b0822e899e893514a02acd8c21583d181208175d08ff75223da84d53656eb7ab46ad442d70c67a6010029329aaf116308d57e77065464eb94ba18e680c2030b4212c135a3c3bbce5e911453b9e35e5b2a0390ebeb084988880a7b07435188680ce166b8858f00876c191fd4df2c32440ddcce4410199080009ad86d35168a442cfb9d399172c436a744649c810ce30505348d6f7bc87f0c202ab626acfaf0c732a3536fd46796b1bb6a2217834db8066789735a67dc95c679d02e0eaf743911bde21ffe0b6ccda73dee5694020544392d0538a8075706b26b2680555bd5dd1b4e2f59275c02372ff99d5f1066d018016c43541c6374be429d483f513c84a7dc1aced670625a93082a9bfaa86b2aa73ada8945b088d9ec0aa549a8ec8e50060fcace5e89ee1ffc1dc0f8a87"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b}, 0x94) socket$kcm(0xa, 0x922000000003, 0x11) socket$kcm(0xa, 0x922000000003, 0x11) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x2d1, 0xfffffffffffffd85, &(0x7f00000000c0)="b9ff0303000d698cb89e40f086dd6000000e00ff8700630677", 0x0, 0x100, 0x2000000, 0x0, 0x0, &(0x7f0000000440)}, 0x28) 1.514347098s ago: executing program 4 (id=4200): bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) r0 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/net\x00') r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) 1.340734773s ago: executing program 3 (id=4201): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00'], 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r1}, &(0x7f0000000800), &(0x7f0000000840)=r2}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0x58, &(0x7f00000001c0)}, 0x10) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r3) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000003c0)={0x5}, 0x8) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)=@o_path={&(0x7f0000000400)='./file0\x00', 0x0, 0x8}, 0x18) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000480)={0x0, 0x9}, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40010040) r6 = socket$kcm(0x2c, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x11b, 0x2, &(0x7f0000000900)=r5, 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x4, 0xc272}, 0x10c002, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x70110, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x3110, 0x89, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1053e0, 0x2, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4c3904021d08007b490d4f0000f8d815001b001105142603600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8217cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c00)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000480)=""/241, 0x1a, 0xf1, 0x1}, 0x28) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x4e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x15}}, 0x0}, 0x94) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) 1.223570456s ago: executing program 1 (id=4202): perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0xd, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0xb, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0x1}, 0x18842, 0x0, 0x7fffffff, 0xd, 0xfffffffffffffc9d, 0x3, 0x7, 0x0, 0x0, 0x0, 0x100000000000b}, 0x0, 0x0, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x28) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x50) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8994, &(0x7f0000000080)) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x5421, 0x110e22fff7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x7, 0xc272}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54000000}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x50}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) 1.142073338s ago: executing program 4 (id=4203): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000003c0)="d8000000180081064e81f782db4cb904021d0800fe027c05e8fe55a10a0005000140020003600e41b0000900ac0006e01100000016000500014002000000035c3b61c1d67f6f94007174cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001b14d6d930dfe1d9d322fe7c4650b5b9bd6ee6f63f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b4ff010000000000000dd6e4edef3d93452a09004b43370e9703920723f97e46bb5c07540d3b", 0xd8}], 0x1}, 0x300) 1.07334871s ago: executing program 2 (id=4204): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = socket$kcm(0xa, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a00)='blkio.throttle.io_serviced\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000000)=r1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x6, 0x0, 0x0, 0x0, 0x71, 0x11, 0xbe}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe}, 0x70) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async) socket$kcm(0xa, 0x2, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a00)='blkio.throttle.io_serviced\x00', 0x26e1, 0x0) (async) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000000)=r1, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x6, 0x0, 0x0, 0x0, 0x71, 0x11, 0xbe}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe}, 0x70) (async) 803.601897ms ago: executing program 1 (id=4205): socket$kcm(0xa, 0x1, 0x106) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x1}, 0x1000, 0x2, 0xffffff7e, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0xffffffff, 0x0, 0xb}, {0x10000002, 0xfffffffe, 0x4, 0x9}], 0x10, 0xd5}, 0x94) r1 = socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x64, &(0x7f0000000000)=r4, 0x10) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000140)=[{&(0x7f00000005c0)="df", 0x1}], 0x1}, 0xfffffffffffffffe) 787.842058ms ago: executing program 4 (id=4206): socket$kcm(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x12100, 0xc8, 0x2, 0x8, 0x0, 0x10001, 0xa, 0x0, 0x800}, 0x0, 0x5, 0xffffffffffffffff, 0xa) socket$kcm(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102033a00fe08000e40000200875a65969ff57b00ff0200000000f5ff00000001ffaaaaaa"], 0xfdef) socket$kcm(0x2a, 0x2, 0x0) 652.584352ms ago: executing program 0 (id=4207): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1f, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}, [@ldst={0x3, 0x0, 0x3, 0x1, 0xb, 0x30, 0x4}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21}, 0x94) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x65, 0x4, 0x1, 0x0, 0x6, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0x81, 0xfffffffffffff425}, 0x8410, 0x1, 0xdd, 0x8, 0x3, 0x101, 0x6, 0x0, 0x101, 0x0, 0x3}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000080)='GPL\x00') 575.603704ms ago: executing program 2 (id=4208): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x0) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) perf_event_open$cgroup(&(0x7f0000000340)={0x1, 0x80, 0xf, 0x9, 0x17, 0x81, 0x0, 0x8000, 0x21, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xf91, 0x4, @perf_bp={0x0}, 0x108082, 0x2, 0x6, 0x3, 0xa4, 0x4, 0x9, 0x0, 0x16fd}, 0xffffffffffffffff, 0x9, r1, 0x3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x1, 0x10, &(0x7f00000040c0)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x1) bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@o_path={&(0x7f0000000080)='./cgroup.cpu/cpuset.cpus\x00'}, 0x18) perf_event_open$cgroup(&(0x7f0000000000)={0x6, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5c, 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x5}, 0xffffffffffffffff, 0x0, r3, 0x0) 527.455895ms ago: executing program 3 (id=4209): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffe21, 0x0, 0x0, 0x8}, 0x28) r0 = socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmsg(0xffffffffffffffff, 0x0, 0x40000004) sendmsg$inet(r0, 0x0, 0x4008800) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x101}, 0x104046}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r2 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r2, 0x0, 0x30, 0x0, 0x5000) 526.950125ms ago: executing program 4 (id=4210): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x90}, [@ldst={0x3, 0x3, 0xb, 0xa, 0x0, 0xffffffffffffffe8, 0x300}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x3f}, 0x48) 493.341427ms ago: executing program 1 (id=4211): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$TUNGETVNETLE(r0, 0x800454dd, &(0x7f0000000080)) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)={0x0, 0x1, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}]}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x400000, 0x0) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000140)) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f00000001c0)={0x8, &(0x7f0000000180)=[{0xe, 0x6, 0xf, 0x3ff}, {0xc4, 0x4, 0x3, 0x9a7b7a0d}, {0x1, 0x5, 0x81}, {0xfffc, 0xe, 0x7, 0x7}, {0x6, 0x3, 0x1, 0x2}, {0x9d1c, 0x8, 0x0, 0xb172}, {0x4, 0xc7, 0x7, 0x10000}, {0x101, 0x7, 0xd, 0x7}]}) r2 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000200)=0xffffffffffffffff, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000240)=r2, 0x4) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x14) bpf$LINK_DETACH(0x22, &(0x7f0000000280)=r2, 0x4) mkdir(&(0x7f00000002c0)='./file0\x00', 0x21) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_tracing={0x1a, 0x27, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_fd={0x18, 0x7}, @call={0x85, 0x0, 0x0, 0xba}, @jmp={0x5, 0x1, 0x0, 0x2, 0x1, 0x80, 0x8}, @jmp={0x5, 0x0, 0x7, 0x9, 0x3, 0x1, 0x8}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x3}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x401}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000480)='GPL\x00', 0x2, 0xda, &(0x7f00000004c0)=""/218, 0x40f00, 0x90, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000600)={0x4, 0xd, 0x3, 0x7fffffff}, 0x10, 0x2170c, 0xffffffffffffffff, 0x4, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000000680)=[{0x4, 0x3, 0xf, 0x6}, {0x0, 0x4, 0x5, 0x6}, {0x0, 0x1, 0x10, 0x3}, {0x5, 0x4, 0x1, 0x6}], 0x10, 0x6}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000780)=@generic={&(0x7f0000000300)='./file0\x00', r3}, 0x18) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000007c0)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000cc0)={r3, 0xe0, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000a00)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, &(0x7f0000000a40)=[0x0, 0x0, 0x0], &(0x7f0000000a80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x79, &(0x7f0000000ac0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000b00), &(0x7f0000000b40), 0x8, 0xc7, 0x8, 0x8, &(0x7f0000000b80)}}, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e40)={0x11, 0x12, &(0x7f0000000800)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @ldst={0x0, 0x1, 0x3, 0xb, 0x0, 0xfffffffffffffff4, 0xfffffffffffffff0}, @jmp={0x5, 0x1, 0xc, 0x8, 0x1, 0xfffffffffffffffc, 0x4}, @call={0x85, 0x0, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}], &(0x7f00000008c0)='GPL\x00', 0x6, 0xd1, &(0x7f0000000900)=""/209, 0x40f00, 0x10, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000d00)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000d40)={0x0, 0x5, 0x1, 0xfff}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000d80)=[0xffffffffffffffff, r3, 0x1], &(0x7f0000000dc0)=[{0x1, 0x4, 0xd, 0x7}, {0x5, 0x1, 0x8}, {0x4, 0x1, 0x2, 0x9}, {0x2, 0x2, 0xe}, {0x5, 0x3, 0xc, 0xa}, {0x0, 0x4, 0xd, 0xa}, {0x2, 0x1, 0xd, 0x6}, {0x3, 0x4, 0x1, 0x4}], 0x10, 0x1}, 0x94) ioctl$TUNGETFILTER(r3, 0x801054db, &(0x7f0000000f00)=""/135) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000fc0)='./cgroup/syz1\x00', 0x1ff) r7 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000002400)={0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001000)="d2b38d5af27ef8e4693ac59d67e2e7aed5ae8d36b3", 0x15}, {&(0x7f0000001040)="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", 0x1000}, {&(0x7f0000002040)="468bd83fbc7557f64417187047e783217b326986288f61fcd84c7f7dee81d8be02010ac9902e22cb9320eca4714660319c5fca4de8c5a679cf014a49f691fcdab4408d188012fa5fa85d3081c48ee5b3fc53e2a3adeef28f21f380fe0a3e069dbb2615e2a4941964d9c75f4c30514a260b730efd30d8e67409825ff4f3b065edd1ae82ee482499b01f3065229ed477a061fdfa", 0x93}], 0x3, &(0x7f0000002140)=[{0xa0, 0x10f, 0x6, "ce00548a926311b71ae09fbff3a04445f9d1b70c58ecbc91fa42962f19233f25e4bb66474350111257aa08366df016f466e1317002ed4efc9040d2b35cda10e395f02508a41319c647c4eb044b575ea4c9f376f10950e58abbd8c5f10f6f75020a448930b573178d32115f3cb3173df412321f356d3a57fdfdcefabf89c85619fb856d63f33bf5c6d90d368e5ca3ab73"}, {0x38, 0x0, 0x6, "d209af6bcda2a1a44244eb0b483d1c615a3f48357df42ae9b019f1ba2d647286b8fa1b"}, {0xe8, 0x119, 0x619, "fa61f76a256ec0d74cd6795ca13772addf8607248a7cf6f0c090600c0931555a06d8707780ca13b400ac98275387c477aee76b4ff8526524fd6889d20c9cbaca912ac71bae121b4231fc81ac3ca3a3e3c3c44ac3790d1d66ec02409c98a350f27715f5dc81e6637021def1cda2263c197325d49077a8701be431accfb2ec3a6fd9acffd10637d89a03bfbc09f29bd129fbcd5f73d3d9c6fbbaee87f7f1b750f44a5ac9d845d777f12e65fd2c4539aec20a3539e9ea463ab9c1a98b593a8f226a7545001d1c1f1f3dddf5383fadc3d9edce6fa303"}, {0x68, 0x11, 0x80, "67c81ffa9a93e98001c27ae84edf025a233ad28ec15633e75f071035d246d4ba6d3c1c965a64ab74ab5b67000c6f39fa56d31ffa6c303750066ea10c7c8ddbe3f440b8a38355cadeb6670a2f0d547a4bec02b225b70ee394"}, {0x78, 0x10f, 0x7f, "a3dbf61313eff8abc58d9bc40998c88241c3f4c0d74a605a749befd3340eea5636880a4d3ed3774a1ef79743a3dd03c68a04d5ac95ba8f10fd0848daeeebc5358e72362c6d000dbaf4a756366fac3cced15ac16bfd1576d6ea915bc5ca3f1258448be61ee7777f"}], 0x2a0}, 0x4000001) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000002440)={'wlan1\x00'}) r8 = syz_clone(0x100, &(0x7f0000002480)="f3184facf9ad1bb672612ee4c1e08ca121b7040e04cc055d82c455181cc7c89eafa121410d42fd959e0246122a6d18a7ab25e2bdecaeb1aeeca3ab854625fa0c22a172526d29b5d48b34383019e1f793aeb8b538a5f70ac28321bc958ceef7ef7e3baee767d26295250103eef1029b409650a70192e749cf593c3275d32c78cbde9fdf807b73529d1b135484919eb9d5582ee1e298c27ff7c2593bbd88f396", 0x9f, &(0x7f0000002540), &(0x7f0000002580), &(0x7f00000025c0)="f7d21a57af72e86137c7ebe0ed9cf2677fc2b37a8e741e8915028c6661f2d321271317258a7a5e7f0d660194f71d4099330c1a7c1367e34187b1a2493a379b6e53df5708d47c1b2b44572ecce6dc2b840d00ad1bd5c2c3f2a5a0e746bde5ef5255580667a1d9d8b092b51001b614f204f14595e6a86f26ecac4a192bfb9a4d4aad113f9d26367aa382e272373c04a594e7e0ce05") write$cgroup_pid(0xffffffffffffffff, &(0x7f0000002680)=r8, 0x12) bpf$ENABLE_STATS(0x20, &(0x7f00000026c0), 0x4) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000002700)={'veth1_macvtap\x00'}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002a00)={r6, 0xe0, &(0x7f0000002900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000002740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, &(0x7f0000002780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000027c0), 0x0, 0xa7, &(0x7f0000002800)=[{}, {}], 0x10, 0x10, &(0x7f0000002840), &(0x7f0000002880), 0x8, 0x1f, 0x8, 0x8, &(0x7f00000028c0)}}, 0x10) r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000002a40)=r9, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000002c40)={r10, 0x20, &(0x7f0000002c00)={&(0x7f0000002a80)=""/208, 0xd0, 0x0, &(0x7f0000002b80)=""/103, 0x67}}, 0x10) 279.430143ms ago: executing program 0 (id=4212): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xb6123, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0xfff, 0x10}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0xd, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000fcffffff0000000080000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305829, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000e5dcffffff85000000020000059500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000740)={0xffffffffffffffff}, 0x4) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc041308db483f0000005e290042180300182580000000fcffff0180000c0012", 0x2e}], 0x1}, 0x0) r9 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@fallback=r9, 0x0, 0x0, 0x6, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@fallback=r8, 0xffffffffffffffff, 0x23, 0x0, 0x0, @void, @value, @void, @void, r10}, 0x20) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000007c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000008c0)={0x800, 0x0}, 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000780)={@cgroup=r11, r6, 0xf, 0x2022, r7, @void, @void, @value=r12, @void, r10}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0xe, 0x0, &(0x7f0000000100)="b6f307917d3b7748922142f252fa", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r13 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x9, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0xe, 0x0, r13, 0x6, '\x00', 0x0, r5, 0x4, 0x2, 0x4}, 0x50) 142.595147ms ago: executing program 4 (id=4213): bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) r0 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/net\x00') r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) 141.696136ms ago: executing program 2 (id=4222): r0 = syz_clone(0x10a200, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r2) (async) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) (async) r3 = gettid() (async) r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000740)=0xffffffffffffffff, 0x4) sendmsg$unix(r2, &(0x7f0000000800)={&(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000080)="f30bbb551f5fc082213f2c558fdb8cb5912d1ca255536595c0091bdc7f60f59fe8028664", 0x24}, {&(0x7f00000000c0)="1b0ef3de8961cd9ed053abc092db4cd66f33e6636f2e40ba3246b2728943dae967ef4d25dee1928d4bb4b99fc97f59a848c4de07e8c1afbb0b98a39bae20a906d1bf331be3b3980c3df9c4418814dab6690bf1d25c53b2817113905a02d749c8668cbe3c44b2d38b4b81d138698467536131d8f33da86863241f649085c624147d9b60059658b4f987d007d63d1a1ca814de851b47752d4034956aa372f963d369beb4d3f66f8ca5db6cd8a45db39bbb85d954ceb46f7a2615be", 0xba}, {&(0x7f0000000180)="07235f9645243f96316317beda816f85de96693469f424f9dd94d10114e70595abd7e2aeff437127ed644382558352f8179eea5dca5b79bc8d32b26aba57288d8e7e9bcddfa7ecd7f1dcecd69c94a78702fa6632b75882fe047c31bc6958ac08389b8c2c3693f899412b8752e8cf507da1d932b247e85062073a5d88d5c5ca6c35adcd59dde8816beebb3528a5535cfafd994981497f5f152d8e045f02043bc1d564bd821374189f3ce2c6c0b2d1e375b10230f475acf9000f126d8c806f545bfac479c5ec57925c6a6a43139f6414e4354a68697d9c444f62", 0xd9}, {&(0x7f0000000280)="ece0d8ab591c983683010af851535451285effeecd6d0cd155063bd01e19690f3a574b3a6b842d0a4ad5314070a21179750f874b5efb9cdc66b1a3633e2eba5eedf50482295da4127e45cc372098d6486c0d154016f558d413b746c582e725d65dd0bb553e4d927ba03a815dc75af3b025a43eea69d587775567bc652bcef07e78bef2bf78edcb397f485537cf7479faa9e301bcedd8c568764bf61cde4c507b5ea3256fdd615b53f2733edf3d94efeeb6f16720bf9b438d62f8c501cce45a1e2a2cb78a68b7b457742708c0e3cb5e570ac297170eacd3f16876e346e0f7150d72245a27509a691f", 0xe8}, {&(0x7f0000000380)="da939d5d22452038d4b5a20c3ea3f440540c2675dcb63b12358e3c1b279d997ff8e76e1cf6ad2e68ed851085a428565e5dabd2c467e28261d63795d4998f924beea3aa65eae172c1cfa2bee65ee33e12daa9d3c631de06944e6f7378383d6c48fb1837b68a65c4331f9ed1728297998d416560cc6bb3107f0ea3ea5f1789e7adb65228c392af012d6ef1fa", 0x8b}, {&(0x7f0000000440)="6eeff1d8ee70b1b88e7d460dc86ccc9b94fdeec8438cca00e844d055e221352ea44233cba1758de2af79ad93cf86c4ace873e48122cea6ffb09c3c0ec7bf25af6b30cc11f0ffaa46de7ff69e5a6823354fd0b6ddb8baf6b2d2b3ba84cee96cb0f6260d3c1588c7b0b7cbcfb29ad8098461102571674afddcc2a2fc00824cb00893fe9315f02633e7108c6e8183fcea2625602e0f424e1b3013360fced8bd65a7fcafac86ebce1efbe8ef3e514393981940f69b4071937738c6f812d9688a4a4588925b001136e65a36cebb941c84d3", 0xcf}, {&(0x7f0000000540)="7c44ece76695f2ebca98d8ddf6d481bbabda1520a26a3d6f8d3b3707f584a292df94b9b2f4cab3fe4c7cb0bbb51ec4b7ccd0bc38fde9fa3c98f21e041d4100ae5f93e968e5c140d9dc42aaa5d37e3ef73c1c82a17ac0056a6d2ef9f5a07bfadb63cba2eae29af7ef8fa2eca3997bf3aef6cca6f82c76ba05db8aa0425f6030c9f82604a1244e84c9e9cb25d2bd8af2b4fc85ce3733b5a5912ca850", 0x9b}, {&(0x7f0000000600)="062ef681b50f31abb173b8a878034f557b7def72c2e3a8a001327f5e5bd63e2446723c2704dfdc254f314c0ac5105fe2eb262c1269607947e89d9ec68330318dafbc9278e543d9e19200feea2534fc0ffd86d693557f069b93ed48ac4288cde6d16325f95e347c07930a835ea15a27c7f5c9a7a3bac99da1a8277906b3ff7a905479a21af70ccdd0d32bf59dc1db2f4ce3ff3eb2592094772b8935e1514a4a4769b25b7635a71a70abcade57d97ce85c54db573259", 0xb5}], 0x8, &(0x7f0000000780)=[@cred={{0x1c, 0x1, 0x2, {r3, 0xffffffffffffffff, 0xee00}}}, @rights={{0x18, 0x1, 0x1, [r4, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r0, 0xffffffffffffffff, 0xee01}}}, @rights={{0x10}}], 0x68, 0x24000001}, 0x4008004) 35.04484ms ago: executing program 3 (id=4214): r0 = getpid() socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$kcm(0x10, 0x3, 0x10) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90124fc60", 0x14}], 0x1}, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)}, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000011c0)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)={[{0x2b, 'cpu'}]}, 0x5) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) r3 = perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x1c842, 0x0, 0x7fffffff, 0x2, 0x3cd, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, r0, 0x0, 0xffffffffffffffff, 0x2) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r4, &(0x7f0000002200)={&(0x7f00000004c0)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4000010}, 0x891) r5 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r5, 0x88, 0x67, 0x0, 0x0) syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair(0x1d, 0xa, 0x0, &(0x7f0000000040)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000020646c2500000000002020207b1af8ff00000000bfa10000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0x6) 0s ago: executing program 1 (id=4215): bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x21, 0x2, 0x2) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x9}, 0x0, 0xa, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000005140081054e81f782db44b9040a1d08020a000000040000a1180002003f00000000000e1208000f0100810401a80016ea1f0006400303000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08002a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) kernel console output (not intermixed with test programs): over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 537.678069][T13250] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 537.750840][T13250] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 537.770845][T13250] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 537.849174][T13250] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 538.011254][T13308] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.2933'. [ 538.026941][T13250] device hsr_slave_0 entered promiscuous mode [ 538.053936][T13250] device hsr_slave_1 entered promiscuous mode [ 538.086749][T13250] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 538.109304][T13250] Cannot create hsr debugfs directory [ 538.691930][T13322] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2936'. [ 538.706409][T13322] openvswitch: netlink: Message has 6 unknown bytes. [ 539.009481][ T4286] Bluetooth: hci5: command 0x041b tx timeout [ 539.936894][T13332] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2939'. [ 540.081353][ T4854] device 0 left promiscuous mode [ 540.115485][T13345] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2945'. [ 540.671707][T13250] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 541.105750][ T4286] Bluetooth: hci5: command 0x040f tx timeout [ 541.112244][T13367] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2951'. [ 541.126879][T13367] openvswitch: netlink: Message has 6 unknown bytes. [ 541.565763][T13250] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 541.600499][T13250] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 541.686467][T13250] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 541.977316][T13250] 8021q: adding VLAN 0 to HW filter on device bond0 [ 543.170890][ T4286] Bluetooth: hci5: command 0x0419 tx timeout [ 545.005635][ T5360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 545.042198][ T5360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 545.083408][T13250] 8021q: adding VLAN 0 to HW filter on device team0 [ 545.139076][ T5361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 545.151510][ T5361] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 545.170326][ T5361] bridge0: port 1(bridge_slave_0) entered blocking state [ 545.177525][ T5361] bridge0: port 1(bridge_slave_0) entered forwarding state [ 545.211093][ T5361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 545.250232][ T5361] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 545.290704][ T5361] bridge0: port 2(bridge_slave_1) entered blocking state [ 545.297884][ T5361] bridge0: port 2(bridge_slave_1) entered forwarding state [ 546.296144][ T5361] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 546.304529][ T5361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 546.314552][ T5361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 546.326878][ T5361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 546.361459][ T5361] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 546.401519][ T5361] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 546.449861][ T5356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 546.479284][ T5356] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 546.488234][ T5356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 546.528323][ T5356] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 546.567332][T13250] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 546.604281][T13250] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 546.622939][ T4852] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 546.640514][ T4852] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 546.773227][T13439] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2966'. [ 546.790865][T13439] openvswitch: netlink: Message has 6 unknown bytes. [ 547.095103][ T5356] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 547.110660][ T5356] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 547.124894][T13250] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 547.159156][ T5356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 547.181974][ T5356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 547.318442][T13250] device veth0_vlan entered promiscuous mode [ 547.334755][ T5360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 547.344329][ T5360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 547.366836][ T5360] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 547.377105][ T5360] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 547.394965][T13250] device veth1_vlan entered promiscuous mode [ 547.408389][T13446] FAULT_INJECTION: forcing a failure. [ 547.408389][T13446] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 547.501508][T13446] CPU: 0 PID: 13446 Comm: syz.2.2967 Not tainted syzkaller #0 [ 547.509061][T13446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 547.519183][T13446] Call Trace: [ 547.522507][T13446] [ 547.525493][T13446] dump_stack_lvl+0x188/0x24e [ 547.530267][T13446] ? show_regs_print_info+0x12/0x12 [ 547.535524][T13446] ? load_image+0x400/0x400 [ 547.540084][T13446] ? __lock_acquire+0x7d10/0x7d10 [ 547.545177][T13446] should_fail_ex+0x399/0x4d0 [ 547.549912][T13446] _copy_from_user+0x2c/0x170 [ 547.554653][T13446] kstrtouint_from_user+0xda/0x170 [ 547.559841][T13446] ? kstrtol_from_user+0x190/0x190 [ 547.565025][T13446] proc_fail_nth_write+0x8b/0x200 [ 547.570103][T13446] ? proc_fail_nth_read+0x220/0x220 [ 547.575359][T13446] ? common_file_perm+0x171/0x1c0 [ 547.580442][T13446] ? proc_fail_nth_read+0x220/0x220 [ 547.585698][T13446] vfs_write+0x2e6/0xa30 [ 547.590011][T13446] ? file_end_write+0x250/0x250 [ 547.594918][T13446] ? __fget_files+0x28/0x4b0 [ 547.599562][T13446] ? __fget_files+0x28/0x4b0 [ 547.604213][T13446] ? __fget_files+0x43d/0x4b0 [ 547.608951][T13446] ? __fdget_pos+0x2ae/0x360 [ 547.613594][T13446] ? ksys_write+0x71/0x250 [ 547.618073][T13446] ksys_write+0x14c/0x250 [ 547.622467][T13446] ? __ia32_sys_read+0x80/0x80 [ 547.627302][T13446] ? lockdep_hardirqs_on+0x94/0x140 [ 547.632549][T13446] do_syscall_64+0x4c/0xa0 [ 547.637021][T13446] ? clear_bhb_loop+0x60/0xb0 [ 547.641920][T13446] ? clear_bhb_loop+0x60/0xb0 [ 547.646644][T13446] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 547.652584][T13446] RIP: 0033:0x7fd28555d68e [ 547.657040][T13446] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 547.676690][T13446] RSP: 002b:00007fd286405fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 547.685159][T13446] RAX: ffffffffffffffda RBX: 00007fd2864066c0 RCX: 00007fd28555d68e [ 547.693186][T13446] RDX: 0000000000000001 RSI: 00007fd2864060a0 RDI: 0000000000000004 [ 547.701208][T13446] RBP: 00007fd286406090 R08: 0000000000000000 R09: 0000000000000000 [ 547.709224][T13446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 547.717240][T13446] R13: 00007fd285816038 R14: 00007fd285815fa0 R15: 00007ffdfb9f0298 [ 547.725272][T13446] [ 547.895239][T13250] device veth0_macvtap entered promiscuous mode [ 547.915686][ T5361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 547.952233][ T5361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 547.982488][ T5361] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 548.009522][T13250] device veth1_macvtap entered promiscuous mode [ 548.035526][ T4854] device bridge_slave_1 left promiscuous mode [ 548.046805][ T4854] bridge0: port 2(bridge_slave_1) entered disabled state [ 548.090954][ T4854] device bridge_slave_0 left promiscuous mode [ 548.107493][ T4854] bridge0: port 1(bridge_slave_0) entered disabled state [ 548.308417][T13470] netlink: 16211 bytes leftover after parsing attributes in process `syz.4.2976'. [ 550.389041][ T4854] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 550.435966][ T4854] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 550.701635][ T4854] bond0 (unregistering): Released all slaves [ 550.789855][T13460] netlink: 'syz.1.2972': attribute type 10 has an invalid length. [ 550.805043][ T5361] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 550.822929][T13470] netlink: 'syz.4.2976': attribute type 2 has an invalid length. [ 550.839028][T13470] netlink: 'syz.4.2976': attribute type 8 has an invalid length. [ 550.849940][T13470] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2976'. [ 550.884076][T13474] netlink: 'syz.2.2977': attribute type 10 has an invalid length. [ 550.909128][T13250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 550.954130][T13250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 550.964665][T13250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 550.985874][T13250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 551.006542][T13250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 551.017393][T13250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 551.052817][T13250] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 551.096229][ T5360] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 551.120203][ T5360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 551.129195][T13479] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2979'. [ 551.151830][T13485] netlink: 176 bytes leftover after parsing attributes in process `syz.2.2981'. [ 551.169724][T13479] openvswitch: netlink: Message has 6 unknown bytes. [ 551.178913][T13250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 551.195218][T13250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 551.205582][T13250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 551.224118][T13250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 551.234296][T13250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 551.245237][T13250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 551.262650][T13250] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 551.289740][ T5360] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 551.311723][ T5360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 551.346186][T13250] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.364575][T13250] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.382086][T13250] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.395866][T13250] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.590485][T13491] netlink: 'syz.2.2983': attribute type 13 has an invalid length. [ 551.598763][T13491] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2983'. [ 551.673974][ T5360] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 551.698687][ T5360] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 551.749535][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 551.822302][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 551.845502][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 551.871758][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 552.081963][T13506] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2989'. [ 552.166050][T13509] netlink: 'syz.1.2989': attribute type 11 has an invalid length. [ 552.201867][T13509] netlink: 140 bytes leftover after parsing attributes in process `syz.1.2989'. [ 552.281668][T13499] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2987'. [ 552.478318][T13512] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2991'. [ 553.072191][T12927] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 553.090128][ T4280] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 553.107181][T12927] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 553.138721][T12927] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 553.169794][T12927] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 553.186224][ T4280] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 553.511780][T13527] chnl_net:caif_netlink_parms(): no params data found [ 553.658441][T13527] bridge0: port 1(bridge_slave_0) entered blocking state [ 553.708631][T13527] bridge0: port 1(bridge_slave_0) entered disabled state [ 553.719530][T13527] device bridge_slave_0 entered promiscuous mode [ 553.752243][T13527] bridge0: port 2(bridge_slave_1) entered blocking state [ 553.797478][T13527] bridge0: port 2(bridge_slave_1) entered disabled state [ 553.806675][T13527] device bridge_slave_1 entered promiscuous mode [ 553.895035][T13541] FAULT_INJECTION: forcing a failure. [ 553.895035][T13541] name failslab, interval 1, probability 0, space 0, times 0 [ 553.921021][T13541] CPU: 0 PID: 13541 Comm: syz.3.2999 Not tainted syzkaller #0 [ 553.928574][T13541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 553.938683][T13541] Call Trace: [ 553.942083][T13541] [ 553.945038][T13541] dump_stack_lvl+0x188/0x24e [ 553.949755][T13541] ? show_regs_print_info+0x12/0x12 [ 553.954995][T13541] ? load_image+0x400/0x400 [ 553.959539][T13541] should_fail_ex+0x399/0x4d0 [ 553.964252][T13541] should_failslab+0x5/0x20 [ 553.968774][T13541] slab_pre_alloc_hook+0x59/0x310 [ 553.973842][T13541] kmem_cache_alloc+0x56/0x2f0 [ 553.978630][T13541] ? skb_clone+0x1e7/0x370 [ 553.983093][T13541] skb_clone+0x1e7/0x370 [ 553.987385][T13541] bpf_clone_redirect+0x163/0x4a0 [ 553.992445][T13541] bpf_prog_5e3b4e18def6d727+0x56/0x5b [ 553.997929][T13541] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 554.003946][T13541] ? lock_chain_count+0x20/0x20 [ 554.008834][T13541] ? seqcount_lockdep_reader_access+0x127/0x1d0 [ 554.015113][T13541] ? lockdep_hardirqs_on+0x94/0x140 [ 554.020338][T13541] ? ktime_get+0x7b/0x270 [ 554.024696][T13541] ? seqcount_lockdep_reader_access+0x18d/0x1d0 [ 554.030967][T13541] ? ktime_get_real_ts64+0x440/0x440 [ 554.036283][T13541] ? read_lock_is_recursive+0x10/0x10 [ 554.041687][T13541] ? __cant_sleep+0x220/0x220 [ 554.046390][T13541] ? bpf_test_timer_continue+0x142/0x380 [ 554.052050][T13541] bpf_test_run+0x2b6/0x830 [ 554.056596][T13541] ? convert___skb_to_skb+0x580/0x580 [ 554.061998][T13541] ? eth_get_headlen+0x200/0x200 [ 554.066958][T13541] ? __build_skb+0x257/0x3c0 [ 554.071583][T13541] ? bpf_prog_test_run_skb+0x773/0x12a0 [ 554.077155][T13541] ? convert___skb_to_skb+0x3d/0x580 [ 554.082469][T13541] bpf_prog_test_run_skb+0xaa6/0x12a0 [ 554.087878][T13541] ? cpu_online+0xa0/0xa0 [ 554.092252][T13541] bpf_prog_test_run+0x31e/0x390 [ 554.097226][T13541] __sys_bpf+0x62b/0x780 [ 554.101504][T13541] ? bpf_link_show_fdinfo+0x380/0x380 [ 554.106921][T13541] ? lock_chain_count+0x20/0x20 [ 554.111810][T13541] __x64_sys_bpf+0x78/0x90 [ 554.116257][T13541] do_syscall_64+0x4c/0xa0 [ 554.120709][T13541] ? clear_bhb_loop+0x60/0xb0 [ 554.125412][T13541] ? clear_bhb_loop+0x60/0xb0 [ 554.130118][T13541] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 554.136123][T13541] RIP: 0033:0x7efc0379ce59 [ 554.140567][T13541] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 554.160202][T13541] RSP: 002b:00007efc04686028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 554.168650][T13541] RAX: ffffffffffffffda RBX: 00007efc03a15fa0 RCX: 00007efc0379ce59 [ 554.176646][T13541] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 000000000000000a [ 554.184639][T13541] RBP: 00007efc04686090 R08: 0000000000000000 R09: 0000000000000000 [ 554.192633][T13541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 554.200627][T13541] R13: 00007efc03a16038 R14: 00007efc03a15fa0 R15: 00007fff893c3f98 [ 554.208633][T13541] [ 554.227262][T13544] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2998'. [ 554.246356][T13544] openvswitch: netlink: Message has 6 unknown bytes. [ 554.268489][T13545] netlink: 'syz.4.3000': attribute type 1 has an invalid length. [ 554.304903][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.316334][T13545] netlink: 121244 bytes leftover after parsing attributes in process `syz.4.3000'. [ 554.346355][T13527] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 554.363460][T13542] netlink: 'syz.1.3001': attribute type 10 has an invalid length. [ 554.387912][T13527] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 554.500807][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.607014][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.637778][T13527] team0: Port device team_slave_0 added [ 554.672664][T13527] team0: Port device team_slave_1 added [ 554.739210][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.813921][T13527] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 554.834569][T13527] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 554.901089][T13527] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 554.980533][T13527] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 554.987562][T13527] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 555.096974][T13527] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 555.249537][T12927] Bluetooth: hci3: command 0x0409 tx timeout [ 555.326681][T13527] device hsr_slave_0 entered promiscuous mode [ 555.371137][T13527] device hsr_slave_1 entered promiscuous mode [ 555.378957][T13527] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 555.393212][T13527] Cannot create hsr debugfs directory [ 555.670071][ T11] device 0 left promiscuous mode [ 555.702984][T13585] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3013'. [ 555.846519][T13585] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3013'. [ 555.908886][T13588] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3013'. [ 557.018060][T13617] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3017'. [ 557.067461][T13617] openvswitch: netlink: Message has 6 unknown bytes. [ 557.310598][T13620] netlink: 'syz.1.3019': attribute type 2 has an invalid length. [ 557.339498][T12927] Bluetooth: hci3: command 0x041b tx timeout [ 557.355027][T13620] netlink: 'syz.1.3019': attribute type 8 has an invalid length. [ 557.366084][T13620] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3019'. [ 557.403531][T13624] netlink: 'syz.1.3019': attribute type 2 has an invalid length. [ 557.421807][T13624] netlink: 'syz.1.3019': attribute type 8 has an invalid length. [ 557.447104][T13624] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3019'. [ 559.409515][T12927] Bluetooth: hci3: command 0x040f tx timeout [ 559.744967][T13527] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 559.796215][T13527] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 560.052408][T13527] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 560.101055][T13527] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 560.577211][T13678] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3033'. [ 560.609593][T13678] openvswitch: netlink: Message has 6 unknown bytes. [ 561.499641][T12927] Bluetooth: hci3: command 0x0419 tx timeout [ 562.855565][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.861988][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 565.920990][T13684] netlink: 'syz.0.3035': attribute type 4 has an invalid length. [ 565.934564][T13700] netlink: 'syz.1.3038': attribute type 19 has an invalid length. [ 565.964126][T13527] 8021q: adding VLAN 0 to HW filter on device bond0 [ 566.070957][ T5356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 566.110123][ T5356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 566.133231][T13527] 8021q: adding VLAN 0 to HW filter on device team0 [ 566.193359][ T4872] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 566.206239][ T4872] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 566.293892][ T4872] bridge0: port 1(bridge_slave_0) entered blocking state [ 566.301156][ T4872] bridge0: port 1(bridge_slave_0) entered forwarding state [ 566.321022][ T4872] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 566.350292][ T4872] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 566.361165][ T4872] bridge0: port 2(bridge_slave_1) entered blocking state [ 566.368385][ T4872] bridge0: port 2(bridge_slave_1) entered forwarding state [ 566.399883][ T4872] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 566.447051][T13713] netlink: 'syz.1.3040': attribute type 1 has an invalid length. [ 566.480856][T13713] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3040'. [ 566.611022][ T4872] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 566.640841][ T4872] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 566.699118][ T4872] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 566.748023][ T4872] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 567.024908][ T4872] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 567.039561][ T4872] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 567.048514][ T4872] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 567.105976][T13724] sctp: [Deprecated]: syz.1.3045 (pid 13724) Use of struct sctp_assoc_value in delayed_ack socket option. [ 567.105976][T13724] Use struct sctp_sack_info instead [ 567.109594][ T5360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 567.146083][T13727] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.3042'. [ 567.163916][ T5360] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 567.178424][ T5360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 567.212554][ T5360] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 567.231240][T13527] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 567.596557][T13740] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3047'. [ 567.636729][T13740] openvswitch: netlink: Message has 6 unknown bytes. [ 567.694347][T13738] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3046'. [ 568.162610][T13750] netlink: 'syz.1.3049': attribute type 27 has an invalid length. [ 568.179496][T13750] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3049'. [ 568.412617][ T5360] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 568.429010][ T5360] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 568.461109][T13527] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 568.610369][ T4872] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 568.636813][ T4872] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 568.723846][T13772] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.3056'. [ 568.970777][T13527] device veth0_vlan entered promiscuous mode [ 569.026558][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 569.070209][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 569.103327][T13527] device veth1_vlan entered promiscuous mode [ 569.231230][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 569.255635][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 569.292503][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 569.473490][ T5360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 569.495399][ T5360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 569.521580][T13527] device veth0_macvtap entered promiscuous mode [ 569.555341][T13527] device veth1_macvtap entered promiscuous mode [ 570.450416][T13527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 570.482422][T13527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 570.496430][T13527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 570.508679][T13527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 570.546728][T13527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 570.597000][T13527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 570.627402][T13527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 570.654060][T13527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 570.696822][T13527] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 570.745592][ T4862] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 570.763841][ T4862] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 570.794903][ T4862] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 570.832707][ T4862] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 570.871408][T13790] netlink: 'syz.4.3061': attribute type 4 has an invalid length. [ 570.984409][T13527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 571.015510][T13527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 571.066942][T13527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 571.098137][T13527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 571.128687][T13527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 571.169465][T13527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 571.194783][T13527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 571.215919][T13527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 571.238300][T13527] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 571.289112][ T4854] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 571.318782][ T4854] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 571.355597][T13527] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.389072][T13527] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.424385][T13527] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.462927][T13527] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.559634][T13806] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3064'. [ 571.568786][T13806] openvswitch: netlink: Message has 6 unknown bytes. [ 571.793188][ T4872] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 571.825073][ T4872] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 571.887768][ T5360] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 571.907588][ T5360] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 571.946949][ T5360] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 571.977162][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 572.822848][T13825] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.3068'. [ 574.568964][ T4286] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 574.580047][ T4286] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 574.588748][ T4286] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 574.642514][ T4286] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 574.661728][ T4286] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 574.669648][ T4286] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 575.773540][ T4872] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.143872][ T4872] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.174289][T13864] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3076'. [ 576.212156][T13864] openvswitch: netlink: Message has 6 unknown bytes. [ 576.600576][T13868] FAULT_INJECTION: forcing a failure. [ 576.600576][T13868] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 576.614364][ T4872] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.641987][T13857] netlink: 'syz.3.3073': attribute type 4 has an invalid length. [ 576.694199][T13868] CPU: 1 PID: 13868 Comm: syz.1.3077 Not tainted syzkaller #0 [ 576.701801][T13868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 576.711941][T13868] Call Trace: [ 576.715315][T13868] [ 576.718349][T13868] dump_stack_lvl+0x188/0x24e [ 576.723174][T13868] ? show_regs_print_info+0x12/0x12 [ 576.728483][T13868] ? load_image+0x400/0x400 [ 576.733114][T13868] ? __lock_acquire+0x7d10/0x7d10 [ 576.738299][T13868] should_fail_ex+0x399/0x4d0 [ 576.743123][T13868] _copy_from_user+0x2c/0x170 [ 576.747920][T13868] perf_copy_attr+0x174/0x850 [ 576.752700][T13868] ? __kmem_cache_free+0xb6/0x1f0 [ 576.757861][T13868] perf_ioctl+0x1f7/0x2420 [ 576.762547][T13868] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 576.768177][T13868] ? perf_poll+0x1b0/0x1b0 [ 576.772966][T13868] ? bpf_lsm_file_ioctl+0x5/0x10 [ 576.778002][T13868] ? security_file_ioctl+0x7c/0xa0 [ 576.779708][ T4286] Bluetooth: hci0: command 0x0409 tx timeout [ 576.783179][T13868] ? perf_poll+0x1b0/0x1b0 [ 576.793932][T13868] __se_sys_ioctl+0xfa/0x170 [ 576.798619][T13868] do_syscall_64+0x4c/0xa0 [ 576.803104][T13868] ? clear_bhb_loop+0x60/0xb0 [ 576.807857][T13868] ? clear_bhb_loop+0x60/0xb0 [ 576.812626][T13868] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 576.818582][T13868] RIP: 0033:0x7f233259ce59 [ 576.823059][T13868] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 576.842723][T13868] RSP: 002b:00007f2333411028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 576.851214][T13868] RAX: ffffffffffffffda RBX: 00007f2332815fa0 RCX: 00007f233259ce59 [ 576.859247][T13868] RDX: 0000200000000240 RSI: 000000004008240b RDI: 0000000000000003 [ 576.867290][T13868] RBP: 00007f2333411090 R08: 0000000000000000 R09: 0000000000000000 [ 576.875312][T13868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 576.883334][T13868] R13: 00007f2332816038 R14: 00007f2332815fa0 R15: 00007ffe4cbc9708 [ 576.891440][T13868] [ 576.992744][ T4872] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.078977][T13838] chnl_net:caif_netlink_parms(): no params data found [ 577.707771][T13838] bridge0: port 1(bridge_slave_0) entered blocking state [ 577.719601][T13838] bridge0: port 1(bridge_slave_0) entered disabled state [ 577.748756][T13838] device bridge_slave_0 entered promiscuous mode [ 577.878502][T13838] bridge0: port 2(bridge_slave_1) entered blocking state [ 577.886308][T13838] bridge0: port 2(bridge_slave_1) entered disabled state [ 577.948834][T13838] device bridge_slave_1 entered promiscuous mode [ 578.039757][T13891] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3081'. [ 578.472188][T13838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 578.521616][T13838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 578.849990][ T4286] Bluetooth: hci0: command 0x041b tx timeout [ 580.889516][T13928] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3087'. [ 580.909545][T13928] openvswitch: netlink: Message has 6 unknown bytes. [ 580.929490][ T4286] Bluetooth: hci0: command 0x040f tx timeout [ 581.577368][T13838] team0: Port device team_slave_0 added [ 581.630975][T13838] team0: Port device team_slave_1 added [ 581.898885][T13838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 581.910063][T13838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 582.009685][T13838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 582.193911][T13838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 582.209824][T13838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 582.312125][T13838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 582.678495][T13838] device hsr_slave_0 entered promiscuous mode [ 582.728329][T13838] device hsr_slave_1 entered promiscuous mode [ 582.768893][T13838] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 582.778698][T13838] Cannot create hsr debugfs directory [ 583.009330][ T4286] Bluetooth: hci0: command 0x0419 tx timeout [ 583.532800][T13975] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3102'. [ 584.266770][T13952] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3096'. [ 587.321552][T14005] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3107'. [ 587.533920][ T4872] device hsr_slave_0 left promiscuous mode [ 587.545361][ T4872] device hsr_slave_1 left promiscuous mode [ 587.553682][ T4872] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 587.563814][ T4872] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 587.577565][ T4872] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 587.585364][ T4872] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 587.594216][ T4872] device batadv0 left promiscuous mode [ 587.599942][ T4872] bridge0: port 3(batadv0) entered disabled state [ 587.608115][ T4872] device bridge_slave_1 left promiscuous mode [ 587.624387][ T4872] bridge0: port 2(bridge_slave_1) entered disabled state [ 587.647842][ T4872] device bridge_slave_0 left promiscuous mode [ 587.660459][ T4872] bridge0: port 1(bridge_slave_0) entered disabled state [ 587.739155][ T4872] device veth1_vlan left promiscuous mode [ 587.750746][ T4872] device veth0_vlan left promiscuous mode [ 590.302341][ T4872] team0 (unregistering): Port device geneve1 removed [ 590.339200][ T4872] team0 (unregistering): Port device macvlan1 removed [ 590.704973][ T4872] team0 (unregistering): Port device team_slave_1 removed [ 590.790473][ T4872] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 590.837889][ T4872] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 591.149977][ T4872] bond0 (unregistering): Released all slaves [ 591.607076][T13838] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 591.664226][T13838] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 591.819355][T13838] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 591.833465][T13838] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 591.883157][T14038] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3114'. [ 592.239652][T13838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 592.301184][T13838] 8021q: adding VLAN 0 to HW filter on device team0 [ 592.329836][ T5356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 592.348413][ T5356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 592.397567][ T5356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 592.431467][ T5356] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 592.456821][ T5356] bridge0: port 1(bridge_slave_0) entered blocking state [ 592.464053][ T5356] bridge0: port 1(bridge_slave_0) entered forwarding state [ 592.503674][ T5356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 592.520007][ T5356] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 592.528732][ T5356] bridge0: port 2(bridge_slave_1) entered blocking state [ 592.535952][ T5356] bridge0: port 2(bridge_slave_1) entered forwarding state [ 592.576243][ T5356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 592.614995][ T5356] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 592.693329][ T5356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 592.731093][ T5356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 592.788252][ T5356] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 592.897412][ T5356] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 592.922552][ T5356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 592.961966][ T5356] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 592.996855][ T5356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 593.030369][ T5356] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 593.075832][T13838] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 593.146300][T13838] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 593.212180][ T5356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 593.260164][ T5356] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 594.131611][ T4872] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 594.159747][ T4872] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 594.186482][T13838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 594.281295][ T4852] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 594.291457][ T4852] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 594.442981][ T4852] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 594.515519][ T4852] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 594.548731][ T4852] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 594.607020][ T4852] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 594.629620][T13838] device veth0_vlan entered promiscuous mode [ 594.691829][T13838] device veth1_vlan entered promiscuous mode [ 594.827167][ T4852] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 594.873247][ T4852] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 594.933921][T13838] device veth0_macvtap entered promiscuous mode [ 594.978800][T13838] device veth1_macvtap entered promiscuous mode [ 595.051123][T14096] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3128'. [ 595.079836][T14085] netlink: 154020 bytes leftover after parsing attributes in process `syz.2.3124'. [ 595.161059][T14092] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3124'. [ 595.210881][T14085] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 595.250939][T13838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 595.299054][T13838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.309098][T13838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 595.327396][T13838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.337628][T13838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 595.358238][T13838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.368891][T13838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 595.414532][T13838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.435806][T13838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 595.447089][ T4286] Bluetooth: hci2: unexpected event 0x30 length: 16 > 3 [ 595.505722][ T4862] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 595.569084][ T4862] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 595.591779][ T4862] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 595.620690][ T4862] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 595.662871][T13838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 595.694190][T13838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.732443][T13838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 595.771268][T13838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.802931][T13838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 595.836980][T13838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.872502][T13838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 595.904429][T13838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.943792][T13838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 595.997154][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 596.010477][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 596.036642][T13838] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.053310][T13838] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.073723][T13838] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.109325][T13838] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.411565][ T4862] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 596.461528][ T4862] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 596.507543][ T4862] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 596.591626][ T4854] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 596.606727][ T4854] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 596.644648][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 598.170357][T14148] netlink: 'syz.0.3066': attribute type 27 has an invalid length. [ 598.209210][T14148] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3066'. [ 598.268113][T14157] netlink: 'syz.2.3141': attribute type 10 has an invalid length. [ 599.082851][T14173] can: request_module (can-proto-0) failed. [ 599.178145][T12927] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 599.189828][T12927] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 599.204009][T12927] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 599.213687][T12927] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 599.221581][T12927] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 599.229055][T12927] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 599.368346][T14169] bridge0: port 2(bridge_slave_1) entered disabled state [ 599.378652][T14169] bridge0: port 1(bridge_slave_0) entered disabled state [ 599.451524][T14171] netlink: 176 bytes leftover after parsing attributes in process `syz.0.3146'. [ 599.482337][T14175] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3144'. [ 600.153583][T14179] chnl_net:caif_netlink_parms(): no params data found [ 600.263093][ T4854] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 600.541517][ C0] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 600.642892][ T4854] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 600.703340][T14218] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.3153'. [ 600.803562][T14212] netlink: 'syz.0.3154': attribute type 21 has an invalid length. [ 600.815739][T14212] netlink: 'syz.0.3154': attribute type 6 has an invalid length. [ 600.837275][T14212] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3154'. [ 600.891475][T14219] netlink: 10 bytes leftover after parsing attributes in process `syz.0.3154'. [ 600.966729][ T4854] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.196564][ T4854] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.249821][ T4286] Bluetooth: hci1: command 0x0409 tx timeout [ 601.260099][T14179] bridge0: port 1(bridge_slave_0) entered blocking state [ 601.267282][T14179] bridge0: port 1(bridge_slave_0) entered disabled state [ 601.316969][T14179] device bridge_slave_0 entered promiscuous mode [ 601.363853][T14226] tipc: Started in network mode [ 601.373927][T14226] tipc: Node identity 9215a268, cluster identity 4711 [ 601.407730][T14226] tipc: Node number set to 2450891368 [ 601.423913][T14229] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3157'. [ 601.446506][T14179] bridge0: port 2(bridge_slave_1) entered blocking state [ 601.479496][T14179] bridge0: port 2(bridge_slave_1) entered disabled state [ 601.498532][T14179] device bridge_slave_1 entered promiscuous mode [ 601.709143][T14179] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 601.745703][T14179] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 602.947422][T14179] team0: Port device team_slave_0 added [ 603.057265][T14179] team0: Port device team_slave_1 added [ 603.143408][ T4854] device 0 left promiscuous mode [ 603.246335][T14179] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 603.309459][T14179] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 603.336230][ T4286] Bluetooth: hci1: command 0x041b tx timeout [ 603.405309][T14179] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 603.638457][T14250] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3164'. [ 603.688959][T14250] device hsr_slave_0 left promiscuous mode [ 603.838508][T14250] device hsr_slave_1 left promiscuous mode [ 604.306469][T14179] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 604.319702][T14179] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 604.380833][T14179] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 604.538546][T14252] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3162'. [ 604.901892][T14179] device hsr_slave_0 entered promiscuous mode [ 604.960531][T14179] device hsr_slave_1 entered promiscuous mode [ 605.010039][T14179] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 605.035878][T14179] Cannot create hsr debugfs directory [ 605.409483][T12927] Bluetooth: hci1: command 0x040f tx timeout [ 605.685900][T14289] netlink: 'syz.3.3171': attribute type 1 has an invalid length. [ 605.708117][T14289] netlink: 118172 bytes leftover after parsing attributes in process `syz.3.3171'. [ 606.236759][T14295] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.3173'. [ 607.489300][ T4286] Bluetooth: hci1: command 0x0419 tx timeout [ 608.478073][T14335] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3179'. [ 608.854351][T14179] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 608.890593][T14345] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3184'. [ 609.154700][T14179] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 609.188646][T14179] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 609.252775][T14355] netlink: 'syz.2.3190': attribute type 10 has an invalid length. [ 609.296736][T14179] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 609.360835][ T4854] device hsr_slave_0 left promiscuous mode [ 609.389062][ T4854] device hsr_slave_1 left promiscuous mode [ 609.407334][ T4854] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 609.426877][ T4854] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 609.449096][ T4854] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 609.467276][ T4854] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 609.506090][ T4854] device veth0_to_bond left promiscuous mode [ 609.516606][ T4854] bridge0: port 3(veth0_to_bond) entered disabled state [ 610.519853][ T4854] device bridge_slave_1 left promiscuous mode [ 610.526245][ T4854] bridge0: port 2(bridge_slave_1) entered disabled state [ 610.548545][ T4854] device bridge_slave_0 left promiscuous mode [ 610.555919][ T4854] bridge0: port 1(bridge_slave_0) entered disabled state [ 611.042811][ T4854] team0 (unregistering): Port device geneve1 removed [ 611.866147][ T4854] team0 (unregistering): Port device team_slave_1 removed [ 611.961297][ T4854] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 612.292646][ T4854] bond0 (unregistering): Released all slaves [ 612.667396][T14179] 8021q: adding VLAN 0 to HW filter on device bond0 [ 612.706741][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 612.720052][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 612.783242][T14179] 8021q: adding VLAN 0 to HW filter on device team0 [ 612.827227][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 612.839051][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 612.860671][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 612.867880][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 612.909633][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 612.917884][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 612.960277][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 612.980197][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 612.987385][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 613.030024][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 613.096343][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 613.136256][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 613.162225][T14405] FAULT_INJECTION: forcing a failure. [ 613.162225][T14405] name failslab, interval 1, probability 0, space 0, times 0 [ 613.185344][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 613.206372][T14405] CPU: 1 PID: 14405 Comm: syz.1.3203 Not tainted syzkaller #0 [ 613.214001][T14405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 613.224174][T14405] Call Trace: [ 613.227557][T14405] [ 613.230591][T14405] dump_stack_lvl+0x188/0x24e [ 613.235441][T14405] ? show_regs_print_info+0x12/0x12 [ 613.240782][T14405] ? load_image+0x400/0x400 [ 613.245445][T14405] ? __might_sleep+0xd0/0xd0 [ 613.250165][T14405] ? __lock_acquire+0x7d10/0x7d10 [ 613.255357][T14405] should_fail_ex+0x399/0x4d0 [ 613.260206][T14405] should_failslab+0x5/0x20 [ 613.264820][T14405] slab_pre_alloc_hook+0x59/0x310 [ 613.269987][T14405] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 613.275851][T14405] __kmem_cache_alloc_node+0x4f/0x260 [ 613.281393][T14405] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 613.287243][T14405] __kmalloc+0xa0/0x240 [ 613.291562][T14405] tomoyo_realpath_from_path+0xdf/0x5d0 [ 613.297305][T14405] ? tomoyo_path_number_perm+0x205/0x650 [ 613.303072][T14405] tomoyo_path_number_perm+0x22f/0x650 [ 613.308689][T14405] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 613.314283][T14405] ? ksys_write+0x1c0/0x250 [ 613.318931][T14405] ? common_file_perm+0x171/0x1c0 [ 613.324320][T14405] ? __fget_files+0x28/0x4b0 [ 613.329034][T14405] ? __fget_files+0x28/0x4b0 [ 613.333843][T14405] security_file_ioctl+0x6c/0xa0 [ 613.338928][T14405] __se_sys_ioctl+0x48/0x170 [ 613.343670][T14405] do_syscall_64+0x4c/0xa0 [ 613.348204][T14405] ? clear_bhb_loop+0x60/0xb0 [ 613.352997][T14405] ? clear_bhb_loop+0x60/0xb0 [ 613.357827][T14405] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 613.363839][T14405] RIP: 0033:0x7f233259ce59 [ 613.368382][T14405] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 613.388109][T14405] RSP: 002b:00007f2333411028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 613.396663][T14405] RAX: ffffffffffffffda RBX: 00007f2332815fa0 RCX: 00007f233259ce59 [ 613.404756][T14405] RDX: 0000200000000240 RSI: 000000004008240b RDI: 0000000000000003 [ 613.412842][T14405] RBP: 00007f2333411090 R08: 0000000000000000 R09: 0000000000000000 [ 613.420930][T14405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 613.429105][T14405] R13: 00007f2332816038 R14: 00007f2332815fa0 R15: 00007ffe4cbc9708 [ 613.437309][T14405] [ 613.459335][T14403] IPv6: NLM_F_CREATE should be specified when creating new route [ 613.489164][T14403] netlink: 1 bytes leftover after parsing attributes in process `syz.0.3204'. [ 613.532067][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 613.555520][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 613.581992][T14405] ERROR: Out of memory at tomoyo_realpath_from_path. [ 613.607479][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 613.677900][T14179] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 613.730018][T14179] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 613.759531][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 613.768146][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 613.816187][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 613.828600][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 613.848222][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 615.443386][T14440] tc_dump_action: action bad kind [ 615.448739][T14443] netlink: 'syz.2.3211': attribute type 2 has an invalid length. [ 615.475121][T14443] netlink: 'syz.2.3211': attribute type 8 has an invalid length. [ 615.521889][T14443] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3211'. [ 615.713287][T14459] FAULT_INJECTION: forcing a failure. [ 615.713287][T14459] name failslab, interval 1, probability 0, space 0, times 0 [ 615.769498][T14459] CPU: 1 PID: 14459 Comm: syz.0.3212 Not tainted syzkaller #0 [ 615.777047][T14459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 615.787147][T14459] Call Trace: [ 615.790465][T14459] [ 615.793431][T14459] dump_stack_lvl+0x188/0x24e [ 615.798261][T14459] ? show_regs_print_info+0x12/0x12 [ 615.803523][T14459] ? load_image+0x400/0x400 [ 615.808075][T14459] ? __might_sleep+0xd0/0xd0 [ 615.812709][T14459] ? __lock_acquire+0x7d10/0x7d10 [ 615.817793][T14459] should_fail_ex+0x399/0x4d0 [ 615.822609][T14459] should_failslab+0x5/0x20 [ 615.827160][T14459] slab_pre_alloc_hook+0x59/0x310 [ 615.832238][T14459] ? page_pool_create+0x6d/0x5c0 [ 615.837222][T14459] __kmem_cache_alloc_node+0x4f/0x260 [ 615.842655][T14459] ? page_pool_create+0x6d/0x5c0 [ 615.847655][T14459] kmalloc_node_trace+0x22/0xe0 [ 615.852566][T14459] page_pool_create+0x6d/0x5c0 [ 615.857377][T14459] bpf_test_run_xdp_live+0x223/0x1a90 [ 615.862800][T14459] ? verify_lock_unused+0x140/0x140 [ 615.868058][T14459] ? kasan_set_track+0x60/0x70 [ 615.872874][T14459] ? kasan_set_track+0x4b/0x70 [ 615.877691][T14459] ? __kasan_kmalloc+0x8e/0xa0 [ 615.882504][T14459] ? bpf_test_init+0x9f/0x140 [ 615.887213][T14459] ? bpf_prog_test_run_xdp+0x484/0xf10 [ 615.892708][T14459] ? bpf_prog_test_run+0x31e/0x390 [ 615.897850][T14459] ? __x64_sys_bpf+0x78/0x90 [ 615.902472][T14459] ? do_syscall_64+0x4c/0xa0 [ 615.907099][T14459] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 615.913204][T14459] ? xdp_convert_md_to_buff+0x330/0x330 [ 615.918791][T14459] ? __lock_acquire+0x7d10/0x7d10 [ 615.923856][T14459] ? __virt_addr_valid+0x188/0x540 [ 615.929013][T14459] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 615.935298][T14459] ? bpf_test_init+0x119/0x140 [ 615.940093][T14459] ? xdp_convert_md_to_buff+0x5b/0x330 [ 615.945586][T14459] bpf_prog_test_run_xdp+0x736/0xf10 [ 615.950927][T14459] ? dev_put+0x80/0x80 [ 615.955036][T14459] ? dev_put+0x80/0x80 [ 615.959135][T14459] bpf_prog_test_run+0x31e/0x390 [ 615.964114][T14459] __sys_bpf+0x62b/0x780 [ 615.968393][T14459] ? bpf_link_show_fdinfo+0x380/0x380 [ 615.973809][T14459] ? lock_chain_count+0x20/0x20 [ 615.978695][T14459] __x64_sys_bpf+0x78/0x90 [ 615.983150][T14459] do_syscall_64+0x4c/0xa0 [ 615.987597][T14459] ? clear_bhb_loop+0x60/0xb0 [ 615.992307][T14459] ? clear_bhb_loop+0x60/0xb0 [ 615.997019][T14459] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 616.002942][T14459] RIP: 0033:0x7fa7b559ce59 [ 616.007382][T14459] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 616.027012][T14459] RSP: 002b:00007fa7b640a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 616.035479][T14459] RAX: ffffffffffffffda RBX: 00007fa7b5815fa0 RCX: 00007fa7b559ce59 [ 616.043487][T14459] RDX: 0000000000000050 RSI: 0000200000000500 RDI: 000000000000000a [ 616.051487][T14459] RBP: 00007fa7b640a090 R08: 0000000000000000 R09: 0000000000000000 [ 616.059479][T14459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 616.067474][T14459] R13: 00007fa7b5816038 R14: 00007fa7b5815fa0 R15: 00007ffe027c7338 [ 616.075484][T14459] [ 616.315237][ T4862] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 616.323800][ T4862] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 616.370800][T14179] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 616.848825][T14485] FAULT_INJECTION: forcing a failure. [ 616.848825][T14485] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 616.932402][T14485] CPU: 0 PID: 14485 Comm: syz.2.3219 Not tainted syzkaller #0 [ 616.939977][T14485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 616.950086][T14485] Call Trace: [ 616.953411][T14485] [ 616.956386][T14485] dump_stack_lvl+0x188/0x24e [ 616.961129][T14485] ? show_regs_print_info+0x12/0x12 [ 616.966381][T14485] ? load_image+0x400/0x400 [ 616.970938][T14485] ? __lock_acquire+0x7d10/0x7d10 [ 616.976027][T14485] ? seqcount_lockdep_reader_access+0x177/0x1d0 [ 616.982331][T14485] should_fail_ex+0x399/0x4d0 [ 616.987072][T14485] _copy_from_user+0x2c/0x170 [ 616.991801][T14485] __sys_bpf+0x2ea/0x780 [ 616.996103][T14485] ? bpf_link_show_fdinfo+0x380/0x380 [ 617.001541][T14485] ? lock_chain_count+0x20/0x20 [ 617.006447][T14485] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 617.012485][T14485] __x64_sys_bpf+0x78/0x90 [ 617.016957][T14485] do_syscall_64+0x4c/0xa0 [ 617.021442][T14485] ? clear_bhb_loop+0x60/0xb0 [ 617.026172][T14485] ? clear_bhb_loop+0x60/0xb0 [ 617.030905][T14485] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 617.036855][T14485] RIP: 0033:0x7fc164b9ce59 [ 617.041315][T14485] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 617.060974][T14485] RSP: 002b:00007fc165ae4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 617.069459][T14485] RAX: ffffffffffffffda RBX: 00007fc164e15fa0 RCX: 00007fc164b9ce59 [ 617.077491][T14485] RDX: 0000000000000048 RSI: 0000200000000140 RDI: 0100000000000000 [ 617.085517][T14485] RBP: 00007fc165ae4090 R08: 0000000000000000 R09: 0000000000000000 [ 617.093540][T14485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 617.101561][T14485] R13: 00007fc164e16038 R14: 00007fc164e15fa0 R15: 00007ffcd31e7778 [ 617.109598][T14485] [ 618.190905][ T4862] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 618.205863][ T4862] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 618.286952][ T5356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 618.316655][ T5356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 618.332391][ T5356] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 618.363580][ T5356] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 618.395888][T14179] device veth0_vlan entered promiscuous mode [ 618.425277][T14179] device veth1_vlan entered promiscuous mode [ 618.498321][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 618.544386][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 618.558267][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 618.570255][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 618.589122][T14179] device veth0_macvtap entered promiscuous mode [ 618.620589][T14179] device veth1_macvtap entered promiscuous mode [ 618.652527][T14179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 618.666867][T14179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 618.681036][T14179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 618.702115][T14179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 618.720906][T14179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 618.736591][T14179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 618.748206][T14179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 618.764046][T14179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 618.786245][T14179] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 618.796990][ T4862] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 618.806928][ T4862] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 618.815587][ T4862] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 618.827701][ T4862] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 618.842554][T14179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 618.860167][T14179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 618.877640][T14179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 618.889184][T14179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 618.907076][T14179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 618.918613][T14179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 618.936393][T14179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 618.955926][T14179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 618.967967][T14179] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 618.990962][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 619.001505][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 619.030488][T14179] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.065883][T14179] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.085292][T14179] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.105369][T14179] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.429365][ T5360] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 619.437275][ T5360] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 619.454994][ T5360] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 619.515658][ T5356] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 619.554318][ T5356] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 619.597876][ T5356] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 619.789183][T14532] netlink: 'syz.3.3230': attribute type 41 has an invalid length. [ 621.842417][T14544] can: request_module (can-proto-0) failed. [ 623.299907][T12927] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 623.310210][T12927] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 623.332065][T12927] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 623.365594][T12927] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 623.373686][T12927] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 623.384604][ T4280] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 624.028763][T14583] chnl_net:caif_netlink_parms(): no params data found [ 624.269639][T14605] delete_channel: no stack [ 624.274238][T14605] delete_channel: no stack [ 624.304436][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.310852][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.343089][T14583] bridge0: port 1(bridge_slave_0) entered blocking state [ 624.350438][T14583] bridge0: port 1(bridge_slave_0) entered disabled state [ 624.358888][T14583] device bridge_slave_0 entered promiscuous mode [ 624.413765][T14583] bridge0: port 2(bridge_slave_1) entered blocking state [ 624.428091][T14583] bridge0: port 2(bridge_slave_1) entered disabled state [ 624.437270][T14583] device bridge_slave_1 entered promiscuous mode [ 624.590307][T14583] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 624.657161][T14583] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 625.228371][ T5361] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 625.385781][T14583] team0: Port device team_slave_0 added [ 625.490031][T12927] Bluetooth: hci4: command 0x0409 tx timeout [ 625.518506][ T5361] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 625.545995][T14583] team0: Port device team_slave_1 added [ 626.814794][ T5361] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.860886][T14583] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 626.868000][T14583] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 626.949357][T14583] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 626.972585][T14583] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 626.989316][T14583] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 627.039412][T14583] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 627.121137][ T5361] batman_adv: batadv0: Removing interface: netdevsim0 [ 627.151945][ T5361] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.199127][T14645] netlink: 'syz.0.3258': attribute type 10 has an invalid length. [ 627.325759][T14583] device hsr_slave_0 entered promiscuous mode [ 627.357110][T14583] device hsr_slave_1 entered promiscuous mode [ 627.579942][T12927] Bluetooth: hci4: command 0x041b tx timeout [ 627.676290][ T5361] device 0 left promiscuous mode [ 629.075876][T14685] Dead loop on virtual device ip6_vti0, fix it urgently! [ 629.660012][T12927] Bluetooth: hci4: command 0x040f tx timeout [ 630.134787][T14680] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.3268'. [ 630.403117][T14703] netlink: 'syz.4.3273': attribute type 3 has an invalid length. [ 630.448726][T14703] netlink: 199824 bytes leftover after parsing attributes in process `syz.4.3273'. [ 630.667770][T14710] netlink: 'syz.0.3274': attribute type 29 has an invalid length. [ 630.797321][T14710] netlink: 'syz.0.3274': attribute type 29 has an invalid length. [ 630.809806][T14711] netlink: 'syz.0.3274': attribute type 29 has an invalid length. [ 630.919851][T14714] netlink: 'syz.0.3274': attribute type 29 has an invalid length. [ 630.953376][T14710] netlink: 'syz.0.3274': attribute type 29 has an invalid length. [ 631.142986][T14583] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 631.166804][T14720] netlink: 'syz.2.3278': attribute type 19 has an invalid length. [ 631.729922][T12927] Bluetooth: hci4: command 0x0419 tx timeout [ 632.207666][T14583] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 632.303372][T14583] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 632.398203][T14583] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 632.448008][T14739] netlink: 'syz.4.3283': attribute type 1 has an invalid length. [ 632.461520][T14739] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3283'. [ 632.928546][T14583] 8021q: adding VLAN 0 to HW filter on device bond0 [ 633.131151][ T5356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 633.149134][ T5356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 633.196758][T14583] 8021q: adding VLAN 0 to HW filter on device team0 [ 633.236015][ T5361] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 633.251712][ T5361] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 633.280541][ T5361] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 633.288037][ T5361] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 633.580833][ T5361] team0 (unregistering): Port device geneve1 removed [ 633.651845][T14767] netlink: 'syz.4.3288': attribute type 3 has an invalid length. [ 633.660373][T14767] netlink: 173820 bytes leftover after parsing attributes in process `syz.4.3288'. [ 633.882661][ T5361] team0 (unregistering): Port device team_slave_1 removed [ 633.933893][ T5361] team0 (unregistering): Port device team_slave_0 removed [ 633.981226][ T5361] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 633.990697][ T5361] device bond_slave_1 left promiscuous mode [ 634.036726][ T5361] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 634.046096][ T5361] device bond_slave_0 left promiscuous mode [ 634.381640][ T5361] bond0 (unregistering): Released all slaves [ 634.440423][ T5360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 634.458723][ T5360] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 634.467462][ T5360] bridge0: port 1(bridge_slave_0) entered blocking state [ 634.474651][ T5360] bridge0: port 1(bridge_slave_0) entered forwarding state [ 634.484496][ T5360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 634.493404][ T5360] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 634.502218][ T5360] bridge0: port 2(bridge_slave_1) entered blocking state [ 634.509409][ T5360] bridge0: port 2(bridge_slave_1) entered forwarding state [ 634.551408][ T5360] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 634.560345][ T5360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 634.573451][ T5360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 634.678463][ T5360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 634.702885][ T5360] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 634.721279][ T5360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 634.737844][ T5360] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 634.746923][ T5360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 634.763658][ T5360] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 634.785109][ T5360] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 634.798545][ T5360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 634.813878][ T5360] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 634.841236][T14583] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 635.217296][T14778] netlink: 'syz.4.3292': attribute type 10 has an invalid length. [ 636.391765][T14778] team0 (unregistering): Port device team_slave_0 removed [ 636.418448][T14778] team0 (unregistering): Port device team_slave_1 removed [ 636.489945][ T4862] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 636.497624][ T4862] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 636.524864][T14583] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 636.601494][ T5360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 636.624421][ T5360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 636.702801][T14793] netlink: 'syz.4.3297': attribute type 5 has an invalid length. [ 636.714562][ T4862] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 636.759201][ T4862] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 636.795978][T14583] device veth0_vlan entered promiscuous mode [ 636.821477][ T4862] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 636.859945][ T4862] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 636.897323][T14583] device veth1_vlan entered promiscuous mode [ 637.445168][ T4862] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 637.460433][ T4862] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 637.487840][ T4862] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 637.522533][ T4862] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 637.561206][T14583] device veth0_macvtap entered promiscuous mode [ 637.594299][ T4862] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 637.670416][T14583] device veth1_macvtap entered promiscuous mode [ 637.789401][T14583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 637.813805][T14583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 637.840046][T14583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 637.863251][T14583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 637.955086][T14583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 637.981641][T14583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 638.004470][T14583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 638.036710][T14583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 638.072292][T14583] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 638.096214][T14809] netlink: 830 bytes leftover after parsing attributes in process `syz.2.3301'. [ 638.127969][ T5361] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 638.160383][ T5361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 638.222669][T14583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 638.245266][T14583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 638.308875][T14583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 638.402408][T14583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 638.445653][T14583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 638.508853][T14583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 638.537224][T14583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 638.597125][T14583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 638.638925][T14583] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 638.700908][ T5360] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 638.710193][ T5360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 638.737379][T14583] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.791097][T14583] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.810591][T14583] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.831375][T14583] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 639.931788][ T4852] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 639.949428][ T4852] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 640.008797][ T5360] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 640.033910][ T5361] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 640.059335][ T5361] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 640.096998][ T5361] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 643.483815][T14915] netlink: 'syz.3.3337': attribute type 10 has an invalid length. [ 644.651212][T14927] netlink: 'syz.2.3341': attribute type 2 has an invalid length. [ 644.931422][T14930] netlink: 'syz.1.3342': attribute type 1 has an invalid length. [ 644.959621][T14930] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3342'. [ 645.017419][T14937] netlink: 'syz.4.3344': attribute type 19 has an invalid length. [ 645.061735][T14937] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3344'. [ 645.271577][T14951] netlink: 'syz.2.3346': attribute type 2 has an invalid length. [ 645.305462][T14951] netlink: 'syz.2.3346': attribute type 1 has an invalid length. [ 645.316105][T14951] netlink: 'syz.2.3346': attribute type 4 has an invalid length. [ 645.350762][T14951] netlink: 208312 bytes leftover after parsing attributes in process `syz.2.3346'. [ 645.566662][T14959] netlink: 71 bytes leftover after parsing attributes in process `syz.0.3352'. [ 646.597824][T14959] team0 (unregistering): Port device team_slave_0 removed [ 646.633015][T14959] team0 (unregistering): Port device team_slave_1 removed [ 646.709416][T14967] netlink: 'syz.2.3356': attribute type 10 has an invalid length. [ 649.473559][T15010] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.3370'. [ 649.612382][T15014] FAULT_INJECTION: forcing a failure. [ 649.612382][T15014] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 649.661364][T15014] CPU: 0 PID: 15014 Comm: syz.0.3373 Not tainted syzkaller #0 [ 649.668970][T15014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 649.679129][T15014] Call Trace: [ 649.682499][T15014] [ 649.685526][T15014] dump_stack_lvl+0x188/0x24e [ 649.690351][T15014] ? show_regs_print_info+0x12/0x12 [ 649.695665][T15014] ? load_image+0x400/0x400 [ 649.700296][T15014] ? __lock_acquire+0x7d10/0x7d10 [ 649.705453][T15014] ? snprintf+0xe5/0x140 [ 649.709822][T15014] should_fail_ex+0x399/0x4d0 [ 649.714646][T15014] _copy_to_user+0x2c/0x130 [ 649.719274][T15014] simple_read_from_buffer+0xe3/0x150 [ 649.724777][T15014] proc_fail_nth_read+0x1a6/0x220 [ 649.729923][T15014] ? proc_fault_inject_write+0x310/0x310 [ 649.735700][T15014] ? fsnotify_perm+0x248/0x550 [ 649.740599][T15014] ? proc_fault_inject_write+0x310/0x310 [ 649.746344][T15014] vfs_read+0x2de/0xa00 [ 649.750650][T15014] ? kernel_read+0x1e0/0x1e0 [ 649.755364][T15014] ? __fget_files+0x28/0x4b0 [ 649.760057][T15014] ? __fget_files+0x28/0x4b0 [ 649.764769][T15014] ? __fget_files+0x43d/0x4b0 [ 649.769623][T15014] ? __fdget_pos+0x2ae/0x360 [ 649.774315][T15014] ? ksys_read+0x71/0x250 [ 649.778775][T15014] ksys_read+0x14c/0x250 [ 649.783146][T15014] ? vfs_write+0xa30/0xa30 [ 649.787715][T15014] ? lockdep_hardirqs_on+0x94/0x140 [ 649.793041][T15014] do_syscall_64+0x4c/0xa0 [ 649.797563][T15014] ? clear_bhb_loop+0x60/0xb0 [ 649.802356][T15014] ? clear_bhb_loop+0x60/0xb0 [ 649.807157][T15014] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 649.813161][T15014] RIP: 0033:0x7fa7b555d68e [ 649.817682][T15014] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 649.837398][T15014] RSP: 002b:00007fa7b6409fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 649.845935][T15014] RAX: ffffffffffffffda RBX: 00007fa7b640a6c0 RCX: 00007fa7b555d68e [ 649.854003][T15014] RDX: 000000000000000f RSI: 00007fa7b640a0a0 RDI: 0000000000000005 [ 649.862069][T15014] RBP: 00007fa7b640a090 R08: 0000000000000000 R09: 0000000000000000 [ 649.870140][T15014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 649.878213][T15014] R13: 00007fa7b5816038 R14: 00007fa7b5815fa0 R15: 00007ffe027c7338 [ 649.886370][T15014] [ 652.169494][T15076] netlink: 'syz.2.3391': attribute type 10 has an invalid length. [ 655.299083][T15130] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3411'. [ 655.351610][T15130] openvswitch: netlink: Flow key attr not present in new flow. [ 655.824395][T15131] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3411'. [ 655.842407][T15134] netlink: 'syz.3.3412': attribute type 10 has an invalid length. [ 655.870491][T15134] team0: Device geneve1 is up. Set it down before adding it as a team port [ 657.089545][ T4286] Bluetooth: hci5: command 0x0406 tx timeout [ 657.335856][T15168] netlink: 'syz.2.3424': attribute type 10 has an invalid length. [ 658.035586][T15168] team0: Port device hsr_slave_0 added [ 658.108431][T15173] netlink: 10 bytes leftover after parsing attributes in process `syz.3.3427'. [ 658.766518][T15192] netlink: 'syz.1.3436': attribute type 39 has an invalid length. [ 660.477629][T15211] device batadv0 entered promiscuous mode [ 660.510468][T15213] netlink: 'syz.2.3445': attribute type 29 has an invalid length. [ 660.576254][T15213] netlink: 'syz.2.3445': attribute type 29 has an invalid length. [ 660.595508][T15216] netlink: 'syz.2.3445': attribute type 29 has an invalid length. [ 661.076324][T15229] FAULT_INJECTION: forcing a failure. [ 661.076324][T15229] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 661.117539][T15229] CPU: 0 PID: 15229 Comm: syz.1.3452 Not tainted syzkaller #0 [ 661.125092][T15229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 661.135197][T15229] Call Trace: [ 661.138513][T15229] [ 661.141479][T15229] dump_stack_lvl+0x188/0x24e [ 661.146216][T15229] ? show_regs_print_info+0x12/0x12 [ 661.151471][T15229] ? load_image+0x400/0x400 [ 661.156029][T15229] ? __lock_acquire+0x7d10/0x7d10 [ 661.161106][T15229] ? snprintf+0xe5/0x140 [ 661.165394][T15229] should_fail_ex+0x399/0x4d0 [ 661.170124][T15229] _copy_to_user+0x2c/0x130 [ 661.174683][T15229] simple_read_from_buffer+0xe3/0x150 [ 661.180103][T15229] proc_fail_nth_read+0x1a6/0x220 [ 661.185180][T15229] ? proc_fault_inject_write+0x310/0x310 [ 661.190864][T15229] ? fsnotify_perm+0x248/0x550 [ 661.195679][T15229] ? proc_fault_inject_write+0x310/0x310 [ 661.201362][T15229] vfs_read+0x2de/0xa00 [ 661.205580][T15229] ? kernel_read+0x1e0/0x1e0 [ 661.210221][T15229] ? __fget_files+0x28/0x4b0 [ 661.214862][T15229] ? __fget_files+0x28/0x4b0 [ 661.219506][T15229] ? __fget_files+0x43d/0x4b0 [ 661.224247][T15229] ? __fdget_pos+0x2ae/0x360 [ 661.228884][T15229] ? ksys_read+0x71/0x250 [ 661.233268][T15229] ksys_read+0x14c/0x250 [ 661.237561][T15229] ? vfs_write+0xa30/0xa30 [ 661.242129][T15229] ? lockdep_hardirqs_on+0x94/0x140 [ 661.247383][T15229] do_syscall_64+0x4c/0xa0 [ 661.251859][T15229] ? clear_bhb_loop+0x60/0xb0 [ 661.256583][T15229] ? clear_bhb_loop+0x60/0xb0 [ 661.261350][T15229] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 661.267397][T15229] RIP: 0033:0x7fea7f55d68e [ 661.272299][T15229] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 661.292743][T15229] RSP: 002b:00007fea804f0fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 661.301219][T15229] RAX: ffffffffffffffda RBX: 00007fea804f16c0 RCX: 00007fea7f55d68e [ 661.309243][T15229] RDX: 000000000000000f RSI: 00007fea804f10a0 RDI: 0000000000000004 [ 661.317266][T15229] RBP: 00007fea804f1090 R08: 0000000000000000 R09: 0000000000000000 [ 661.325303][T15229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 661.333322][T15229] R13: 00007fea7f816038 R14: 00007fea7f815fa0 R15: 00007ffce962e038 [ 661.341374][T15229] [ 664.258504][T15259] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3458'. [ 664.303980][T15259] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3458'. [ 664.321016][T15264] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3458'. [ 664.423669][T15268] netlink: 'syz.4.3462': attribute type 10 has an invalid length. [ 664.991215][T15278] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3465'. [ 665.136808][T15282] netlink: 10 bytes leftover after parsing attributes in process `syz.2.3466'. [ 665.615483][T15291] sctp: [Deprecated]: syz.0.3469 (pid 15291) Use of int in max_burst socket option deprecated. [ 665.615483][T15291] Use struct sctp_assoc_value instead [ 666.138539][T15308] netlink: 'syz.2.3471': attribute type 1 has an invalid length. [ 666.167607][T15308] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.3471'. [ 667.940153][T15337] bridge0: port 2(bridge_slave_1) entered disabled state [ 667.947727][T15337] bridge0: port 1(bridge_slave_0) entered disabled state [ 668.268023][T15348] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3488'. [ 668.491323][T15352] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3490'. [ 668.519273][T15351] netlink: 'syz.3.3489': attribute type 10 has an invalid length. [ 669.106412][T15366] netlink: 'syz.2.3494': attribute type 10 has an invalid length. [ 669.119971][T15368] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3495'. [ 669.334930][T15368] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 669.401125][T15368] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 669.440068][T15368] bond0 (unregistering): Released all slaves [ 670.427141][T15387] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3503'. [ 670.757103][T15395] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3506'. [ 670.775256][T15395] device hsr_slave_0 left promiscuous mode [ 670.798395][T15395] device hsr_slave_1 left promiscuous mode [ 671.439646][T15411] netlink: 'syz.4.3513': attribute type 1 has an invalid length. [ 671.447488][T15411] netlink: 110236 bytes leftover after parsing attributes in process `syz.4.3513'. [ 673.525650][T15464] netlink: 'syz.3.3530': attribute type 10 has an invalid length. [ 674.478682][T15485] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 674.512695][T15485] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 674.538084][T15485] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 675.621714][T15506] device veth1_macvtap left promiscuous mode [ 675.721078][T15502] FAULT_INJECTION: forcing a failure. [ 675.721078][T15502] name failslab, interval 1, probability 0, space 0, times 0 [ 675.750089][T15502] CPU: 0 PID: 15502 Comm: syz.4.3542 Not tainted syzkaller #0 [ 675.757693][T15502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 675.767827][T15502] Call Trace: [ 675.771165][T15502] [ 675.774159][T15502] dump_stack_lvl+0x188/0x24e [ 675.778938][T15502] ? show_regs_print_info+0x12/0x12 [ 675.784222][T15502] ? load_image+0x400/0x400 [ 675.788812][T15502] ? __might_sleep+0xd0/0xd0 [ 675.793474][T15502] ? __lock_acquire+0x7d10/0x7d10 [ 675.798591][T15502] should_fail_ex+0x399/0x4d0 [ 675.803358][T15502] should_failslab+0x5/0x20 [ 675.807934][T15502] slab_pre_alloc_hook+0x59/0x310 [ 675.813033][T15502] ? tomoyo_encode+0x27e/0x540 [ 675.817877][T15502] __kmem_cache_alloc_node+0x4f/0x260 [ 675.823343][T15502] ? tomoyo_encode+0x27e/0x540 [ 675.828189][T15502] __kmalloc+0xa0/0x240 [ 675.832455][T15502] tomoyo_encode+0x27e/0x540 [ 675.837148][T15502] tomoyo_realpath_from_path+0x58e/0x5d0 [ 675.842909][T15502] ? tomoyo_path_number_perm+0x205/0x650 [ 675.848618][T15502] tomoyo_path_number_perm+0x22f/0x650 [ 675.854163][T15502] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 675.859698][T15502] ? ksys_write+0x1c0/0x250 [ 675.864274][T15502] ? common_file_perm+0x171/0x1c0 [ 675.869519][T15502] ? __fget_files+0x28/0x4b0 [ 675.874186][T15502] ? __fget_files+0x28/0x4b0 [ 675.878912][T15502] security_file_ioctl+0x6c/0xa0 [ 675.883950][T15502] __se_sys_ioctl+0x48/0x170 [ 675.888635][T15502] do_syscall_64+0x4c/0xa0 [ 675.893118][T15502] ? clear_bhb_loop+0x60/0xb0 [ 675.897856][T15502] ? clear_bhb_loop+0x60/0xb0 [ 675.902610][T15502] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 675.908563][T15502] RIP: 0033:0x7f7bccb9ce59 [ 675.913042][T15502] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 675.932710][T15502] RSP: 002b:00007f7bcda31028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 675.941212][T15502] RAX: ffffffffffffffda RBX: 00007f7bcce15fa0 RCX: 00007f7bccb9ce59 [ 675.949261][T15502] RDX: 0000200000000240 RSI: 000000004008240b RDI: 0000000000000003 [ 675.957305][T15502] RBP: 00007f7bcda31090 R08: 0000000000000000 R09: 0000000000000000 [ 675.965331][T15502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 675.973355][T15502] R13: 00007f7bcce16038 R14: 00007f7bcce15fa0 R15: 00007ffe4c847db8 [ 675.981467][T15502] [ 676.050443][T15502] ERROR: Out of memory at tomoyo_realpath_from_path. [ 676.602413][T15525] netlink: 'syz.4.3548': attribute type 2 has an invalid length. [ 676.642154][T15525] netlink: 'syz.4.3548': attribute type 8 has an invalid length. [ 676.699181][T15525] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3548'. [ 676.751835][T15529] netlink: 'syz.4.3548': attribute type 2 has an invalid length. [ 676.769912][T15529] netlink: 'syz.4.3548': attribute type 8 has an invalid length. [ 676.786337][T15529] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3548'. [ 677.068034][T15535] FAULT_INJECTION: forcing a failure. [ 677.068034][T15535] name failslab, interval 1, probability 0, space 0, times 0 [ 677.116098][T15535] CPU: 0 PID: 15535 Comm: syz.0.3552 Not tainted syzkaller #0 [ 677.123662][T15535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 677.133778][T15535] Call Trace: [ 677.137107][T15535] [ 677.140083][T15535] dump_stack_lvl+0x188/0x24e [ 677.144822][T15535] ? show_regs_print_info+0x12/0x12 [ 677.150091][T15535] ? load_image+0x400/0x400 [ 677.154650][T15535] ? __might_sleep+0xd0/0xd0 [ 677.159284][T15535] ? __lock_acquire+0x7d10/0x7d10 [ 677.164429][T15535] should_fail_ex+0x399/0x4d0 [ 677.169167][T15535] should_failslab+0x5/0x20 [ 677.173717][T15535] slab_pre_alloc_hook+0x59/0x310 [ 677.178803][T15535] ? kvmalloc_node+0x6c/0x180 [ 677.183540][T15535] __kmem_cache_alloc_node+0x4f/0x260 [ 677.188969][T15535] ? kvmalloc_node+0x6c/0x180 [ 677.193700][T15535] __kmalloc_node+0xa0/0x240 [ 677.198364][T15535] kvmalloc_node+0x6c/0x180 [ 677.202925][T15535] page_pool_create+0x1e7/0x5c0 [ 677.207808][T15535] bpf_test_run_xdp_live+0x223/0x1a90 [ 677.213217][T15535] ? verify_lock_unused+0x140/0x140 [ 677.218456][T15535] ? kasan_set_track+0x60/0x70 [ 677.223257][T15535] ? kasan_set_track+0x4b/0x70 [ 677.228056][T15535] ? __kasan_kmalloc+0x8e/0xa0 [ 677.232853][T15535] ? bpf_test_init+0x9f/0x140 [ 677.237556][T15535] ? bpf_prog_test_run_xdp+0x484/0xf10 [ 677.243045][T15535] ? bpf_prog_test_run+0x31e/0x390 [ 677.248274][T15535] ? __x64_sys_bpf+0x78/0x90 [ 677.252894][T15535] ? do_syscall_64+0x4c/0xa0 [ 677.257521][T15535] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 677.263625][T15535] ? xdp_convert_md_to_buff+0x330/0x330 [ 677.269225][T15535] ? __lock_acquire+0x7d10/0x7d10 [ 677.274303][T15535] ? __virt_addr_valid+0x188/0x540 [ 677.279456][T15535] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 677.285740][T15535] ? bpf_test_init+0x119/0x140 [ 677.290531][T15535] ? xdp_convert_md_to_buff+0x5b/0x330 [ 677.296022][T15535] bpf_prog_test_run_xdp+0x736/0xf10 [ 677.301353][T15535] ? dev_put+0x80/0x80 [ 677.305460][T15535] ? dev_put+0x80/0x80 [ 677.309563][T15535] bpf_prog_test_run+0x31e/0x390 [ 677.314544][T15535] __sys_bpf+0x62b/0x780 [ 677.318830][T15535] ? bpf_link_show_fdinfo+0x380/0x380 [ 677.324250][T15535] ? lock_chain_count+0x20/0x20 [ 677.329180][T15535] __x64_sys_bpf+0x78/0x90 [ 677.333638][T15535] do_syscall_64+0x4c/0xa0 [ 677.338093][T15535] ? clear_bhb_loop+0x60/0xb0 [ 677.342801][T15535] ? clear_bhb_loop+0x60/0xb0 [ 677.347512][T15535] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 677.353435][T15535] RIP: 0033:0x7fa7b559ce59 [ 677.357878][T15535] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 677.377511][T15535] RSP: 002b:00007fa7b640a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 677.385959][T15535] RAX: ffffffffffffffda RBX: 00007fa7b5815fa0 RCX: 00007fa7b559ce59 [ 677.393959][T15535] RDX: 0000000000000050 RSI: 0000200000000500 RDI: 000000000000000a [ 677.401979][T15535] RBP: 00007fa7b640a090 R08: 0000000000000000 R09: 0000000000000000 [ 677.409990][T15535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 677.417985][T15535] R13: 00007fa7b5816038 R14: 00007fa7b5815fa0 R15: 00007ffe027c7338 [ 677.425995][T15535] [ 677.570771][T12927] Bluetooth: hci3: command 0x0406 tx timeout [ 678.115388][T15535] page_pool_create() gave up with errno -12 [ 678.907814][T15571] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.3562'. [ 678.921904][T15571] netlink: zone id is out of range [ 678.927946][T15571] netlink: zone id is out of range [ 678.940210][T15571] netlink: zone id is out of range [ 678.945577][T15571] netlink: zone id is out of range [ 678.956027][T15571] netlink: zone id is out of range [ 678.962612][T15571] netlink: zone id is out of range [ 678.968050][T15571] netlink: zone id is out of range [ 678.993285][T15571] netlink: zone id is out of range [ 678.998632][T15571] netlink: zone id is out of range [ 679.017967][T15571] netlink: zone id is out of range [ 680.037655][T15603] delete_channel: no stack [ 680.050177][T15595] can: request_module (can-proto-0) failed. [ 680.083385][T15603] delete_channel: no stack [ 681.502095][T15641] netlink: 'syz.4.3587': attribute type 10 has an invalid length. [ 683.472336][T15678] netlink: 'syz.0.3601': attribute type 3 has an invalid length. [ 683.514971][T15678] netlink: 199824 bytes leftover after parsing attributes in process `syz.0.3601'. [ 683.614193][T15687] netlink: 'syz.3.3603': attribute type 2 has an invalid length. [ 683.677359][T15691] netlink: 'syz.1.3604': attribute type 29 has an invalid length. [ 683.753512][T15691] netlink: 'syz.1.3604': attribute type 29 has an invalid length. [ 683.764847][T15697] netlink: 'syz.1.3604': attribute type 29 has an invalid length. [ 683.789690][T15696] netlink: 'syz.4.3605': attribute type 19 has an invalid length. [ 684.883186][T15691] netlink: 'syz.1.3604': attribute type 29 has an invalid length. [ 684.926012][T15706] netlink: 'syz.3.3608': attribute type 1 has an invalid length. [ 684.942437][T15706] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3608'. [ 685.418772][T15726] netlink: 'syz.0.3615': attribute type 10 has an invalid length. [ 685.460089][T15726] device syz_tun entered promiscuous mode [ 685.734582][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.740998][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 688.387951][T15821] netlink: 'syz.4.3650': attribute type 2 has an invalid length. [ 689.045875][T15847] netlink: 'syz.0.3660': attribute type 10 has an invalid length. [ 689.583176][T15865] netlink: 22 bytes leftover after parsing attributes in process `syz.1.3667'. [ 690.423938][T15871] netlink: 'syz.0.3669': attribute type 21 has an invalid length. [ 690.441497][T15873] netlink: 'syz.2.3670': attribute type 3 has an invalid length. [ 690.463753][T15879] netlink: 71 bytes leftover after parsing attributes in process `syz.3.3673'. [ 690.466171][T15873] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3670'. [ 690.646243][T15879] team0 (unregistering): Port device team_slave_0 removed [ 690.671110][T15879] team0 (unregistering): Port device team_slave_1 removed [ 692.901386][T15930] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.3690'. [ 692.962210][T15930] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 697.342490][T16030] netlink: 'syz.3.3725': attribute type 10 has an invalid length. [ 698.049569][ T4286] Bluetooth: hci0: command 0x0406 tx timeout [ 698.358606][T16045] netlink: 'syz.4.3732': attribute type 10 has an invalid length. [ 702.024954][T16106] net_ratelimit: 17 callbacks suppressed [ 702.025010][T16106] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 702.846925][T16123] delete_channel: no stack [ 703.423997][T16148] netlink: 'syz.2.3766': attribute type 21 has an invalid length. [ 703.648374][T16154] device bridge_slave_1 left promiscuous mode [ 703.689545][T16154] bridge0: port 2(bridge_slave_1) entered disabled state [ 706.409892][T16154] device bridge_slave_0 left promiscuous mode [ 706.416262][T16154] bridge0: port 1(bridge_slave_0) entered disabled state [ 707.233292][T16177] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3775'. [ 708.635774][T16226] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3793'. [ 708.676235][T16227] netlink: 'syz.1.3792': attribute type 13 has an invalid length. [ 708.705605][T16227] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3792'. [ 708.748160][T16227] syz_tun: refused to change device tx_queue_len [ 708.780162][T16227] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 708.859446][T16231] netlink: 'syz.1.3792': attribute type 10 has an invalid length. [ 709.658587][T16231] team0: Port device netdevsim0 added [ 709.667798][T16249] netlink: 'syz.3.3800': attribute type 10 has an invalid length. [ 709.682813][T16252] netlink: 'syz.0.3801': attribute type 10 has an invalid length. [ 710.145393][T16264] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3807'. [ 710.412230][T16275] FAULT_INJECTION: forcing a failure. [ 710.412230][T16275] name failslab, interval 1, probability 0, space 0, times 0 [ 710.445742][T16275] CPU: 0 PID: 16275 Comm: syz.4.3811 Not tainted syzkaller #0 [ 710.453299][T16275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 710.463407][T16275] Call Trace: [ 710.466728][T16275] [ 710.469701][T16275] dump_stack_lvl+0x188/0x24e [ 710.474439][T16275] ? show_regs_print_info+0x12/0x12 [ 710.479690][T16275] ? load_image+0x400/0x400 [ 710.484255][T16275] should_fail_ex+0x399/0x4d0 [ 710.488983][T16275] should_failslab+0x5/0x20 [ 710.493536][T16275] slab_pre_alloc_hook+0x59/0x310 [ 710.498622][T16275] kmem_cache_alloc+0x56/0x2f0 [ 710.503450][T16275] ? skb_clone+0x1e7/0x370 [ 710.507939][T16275] skb_clone+0x1e7/0x370 [ 710.512254][T16275] bpf_clone_redirect+0x163/0x4a0 [ 710.517362][T16275] bpf_prog_5e3b4e18def6d727+0x56/0x5b [ 710.522896][T16275] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 710.528947][T16275] ? lock_chain_count+0x20/0x20 [ 710.533851][T16275] ? seqcount_lockdep_reader_access+0x127/0x1d0 [ 710.540130][T16275] ? lockdep_hardirqs_on+0x94/0x140 [ 710.545371][T16275] ? ktime_get+0x7b/0x270 [ 710.549753][T16275] ? seqcount_lockdep_reader_access+0x18d/0x1d0 [ 710.556045][T16275] ? ktime_get_real_ts64+0x440/0x440 [ 710.561386][T16275] ? read_lock_is_recursive+0x10/0x10 [ 710.566818][T16275] ? __cant_sleep+0x220/0x220 [ 710.571541][T16275] ? bpf_test_timer_continue+0x142/0x380 [ 710.577234][T16275] bpf_test_run+0x2b6/0x830 [ 710.581799][T16275] ? convert___skb_to_skb+0x580/0x580 [ 710.587214][T16275] ? eth_get_headlen+0x200/0x200 [ 710.592192][T16275] ? __build_skb+0x257/0x3c0 [ 710.596832][T16275] ? bpf_prog_test_run_skb+0x773/0x12a0 [ 710.602423][T16275] ? convert___skb_to_skb+0x3d/0x580 [ 710.607755][T16275] bpf_prog_test_run_skb+0xaa6/0x12a0 [ 710.613191][T16275] ? cpu_online+0xa0/0xa0 [ 710.617650][T16275] bpf_prog_test_run+0x31e/0x390 [ 710.622651][T16275] __sys_bpf+0x62b/0x780 [ 710.627036][T16275] ? bpf_link_show_fdinfo+0x380/0x380 [ 710.632479][T16275] ? lock_chain_count+0x20/0x20 [ 710.637385][T16275] __x64_sys_bpf+0x78/0x90 [ 710.641853][T16275] do_syscall_64+0x4c/0xa0 [ 710.646320][T16275] ? clear_bhb_loop+0x60/0xb0 [ 710.651043][T16275] ? clear_bhb_loop+0x60/0xb0 [ 710.655766][T16275] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 710.661708][T16275] RIP: 0033:0x7f7bccb9ce59 [ 710.666165][T16275] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 710.685811][T16275] RSP: 002b:00007f7bcda31028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 710.694270][T16275] RAX: ffffffffffffffda RBX: 00007f7bcce15fa0 RCX: 00007f7bccb9ce59 [ 710.702275][T16275] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 000000000000000a [ 710.710281][T16275] RBP: 00007f7bcda31090 R08: 0000000000000000 R09: 0000000000000000 [ 710.718284][T16275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 710.726289][T16275] R13: 00007f7bcce16038 R14: 00007f7bcce15fa0 R15: 00007ffe4c847db8 [ 710.734315][T16275] [ 710.875888][T16280] netlink: 'syz.3.3814': attribute type 29 has an invalid length. [ 710.907938][T16280] netlink: 'syz.3.3814': attribute type 29 has an invalid length. [ 710.925637][T16279] netlink: 'syz.3.3814': attribute type 29 has an invalid length. [ 710.938757][T16282] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3815'. [ 710.971502][T16282] device hsr_slave_0 left promiscuous mode [ 710.996157][T16287] netlink: 'syz.4.3817': attribute type 29 has an invalid length. [ 711.010877][T16289] netlink: 'syz.4.3817': attribute type 29 has an invalid length. [ 711.025999][T16282] device hsr_slave_1 left promiscuous mode [ 711.307595][T16287] netlink: 'syz.4.3817': attribute type 29 has an invalid length. [ 711.365535][T16300] netlink: 73628 bytes leftover after parsing attributes in process `syz.2.3820'. [ 711.407890][T16298] device sit0 entered promiscuous mode [ 713.097470][T16355] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3841'. [ 713.121609][T16356] FAULT_INJECTION: forcing a failure. [ 713.121609][T16356] name failslab, interval 1, probability 0, space 0, times 0 [ 713.178962][T16356] CPU: 0 PID: 16356 Comm: syz.0.3842 Not tainted syzkaller #0 [ 713.186528][T16356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 713.196651][T16356] Call Trace: [ 713.199984][T16356] [ 713.202972][T16356] dump_stack_lvl+0x188/0x24e [ 713.207733][T16356] ? show_regs_print_info+0x12/0x12 [ 713.213006][T16356] ? load_image+0x400/0x400 [ 713.217578][T16356] ? __might_sleep+0xd0/0xd0 [ 713.222303][T16356] ? __lock_acquire+0x7d10/0x7d10 [ 713.227504][T16356] should_fail_ex+0x399/0x4d0 [ 713.232257][T16356] should_failslab+0x5/0x20 [ 713.235481][T16355] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 713.236791][T16356] slab_pre_alloc_hook+0x59/0x310 [ 713.257273][T16356] kmem_cache_alloc_node+0x5a/0x320 [ 713.262538][T16356] ? lock_chain_count+0x20/0x20 [ 713.267458][T16356] ? dup_task_struct+0x57/0x6b0 [ 713.272396][T16356] dup_task_struct+0x57/0x6b0 [ 713.277137][T16356] ? lockdep_hardirqs_on+0x94/0x140 [ 713.282411][T16356] copy_process+0x5fa/0x4030 [ 713.287082][T16356] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 713.292888][T16356] ? perf_trace_lock+0x301/0x390 [ 713.297908][T16356] ? idle_dummy+0x10/0x10 [ 713.302320][T16356] kernel_clone+0x24b/0x900 [ 713.306889][T16356] ? ksys_write+0x1c0/0x250 [ 713.311469][T16356] ? create_io_thread+0x170/0x170 [ 713.316596][T16356] __x64_sys_clone+0x1a7/0x220 [ 713.321425][T16356] ? __fget_files+0x43d/0x4b0 [ 713.326172][T16356] ? __ia32_sys_vfork+0x140/0x140 [ 713.331284][T16356] ? lock_chain_count+0x20/0x20 [ 713.336222][T16356] ? lockdep_hardirqs_on+0x94/0x140 [ 713.341491][T16356] do_syscall_64+0x4c/0xa0 [ 713.345966][T16356] ? clear_bhb_loop+0x60/0xb0 [ 713.350703][T16356] ? clear_bhb_loop+0x60/0xb0 [ 713.355449][T16356] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 713.361414][T16356] RIP: 0033:0x7fa7b559ce59 [ 713.365899][T16356] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 713.385573][T16356] RSP: 002b:00007fa7b6409fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 713.394076][T16356] RAX: ffffffffffffffda RBX: 00007fa7b5815fa0 RCX: 00007fa7b559ce59 [ 713.402121][T16356] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000c2002000 [ 713.410163][T16356] RBP: 00007fa7b640a090 R08: 0000000000000000 R09: 0000000000000000 [ 713.418215][T16356] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 713.426250][T16356] R13: 00007fa7b5816038 R14: 00007fa7b5815fa0 R15: 00007ffe027c7338 [ 713.434322][T16356] [ 714.490502][T16384] FAULT_INJECTION: forcing a failure. [ 714.490502][T16384] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 714.549725][T16384] CPU: 1 PID: 16384 Comm: syz.3.3850 Not tainted syzkaller #0 [ 714.557270][T16384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 714.567379][T16384] Call Trace: [ 714.570702][T16384] [ 714.573695][T16384] dump_stack_lvl+0x188/0x24e [ 714.578441][T16384] ? show_regs_print_info+0x12/0x12 [ 714.583696][T16384] ? load_image+0x400/0x400 [ 714.588262][T16384] ? __lock_acquire+0x7d10/0x7d10 [ 714.593351][T16384] should_fail_ex+0x399/0x4d0 [ 714.598076][T16384] _copy_from_user+0x2c/0x170 [ 714.602812][T16384] perf_copy_attr+0x174/0x850 [ 714.607533][T16384] ? __kmem_cache_free+0xb6/0x1f0 [ 714.612617][T16384] perf_ioctl+0x1f7/0x2420 [ 714.617088][T16384] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 714.622619][T16384] ? perf_poll+0x1b0/0x1b0 [ 714.627132][T16384] ? bpf_lsm_file_ioctl+0x5/0x10 [ 714.632122][T16384] ? security_file_ioctl+0x7c/0xa0 [ 714.637286][T16384] ? perf_poll+0x1b0/0x1b0 [ 714.641756][T16384] __se_sys_ioctl+0xfa/0x170 [ 714.646403][T16384] do_syscall_64+0x4c/0xa0 [ 714.650875][T16384] ? clear_bhb_loop+0x60/0xb0 [ 714.655603][T16384] ? clear_bhb_loop+0x60/0xb0 [ 714.660339][T16384] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 714.666284][T16384] RIP: 0033:0x7efc0379ce59 [ 714.670833][T16384] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 714.690484][T16384] RSP: 002b:00007efc04686028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 714.698941][T16384] RAX: ffffffffffffffda RBX: 00007efc03a15fa0 RCX: 00007efc0379ce59 [ 714.706951][T16384] RDX: 0000200000000240 RSI: 000000004008240b RDI: 0000000000000003 [ 714.714962][T16384] RBP: 00007efc04686090 R08: 0000000000000000 R09: 0000000000000000 [ 714.722967][T16384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 714.730976][T16384] R13: 00007efc03a16038 R14: 00007efc03a15fa0 R15: 00007fff893c3f98 [ 714.739002][T16384] [ 714.853351][T16389] validate_nla: 2 callbacks suppressed [ 714.853372][T16389] netlink: 'syz.4.3853': attribute type 2 has an invalid length. [ 714.887487][T16389] netlink: 'syz.4.3853': attribute type 8 has an invalid length. [ 714.917890][T16389] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3853'. [ 715.021279][T16397] netlink: 'syz.4.3853': attribute type 2 has an invalid length. [ 715.059601][T16397] netlink: 'syz.4.3853': attribute type 8 has an invalid length. [ 715.088073][T16397] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3853'. [ 716.266639][T16432] netlink: 'syz.4.3867': attribute type 21 has an invalid length. [ 717.182997][T16465] delete_channel: no stack [ 717.207598][T16465] delete_channel: no stack [ 718.530387][T16491] can: request_module (can-proto-0) failed. [ 718.963399][T16505] netlink: 'syz.0.3894': attribute type 10 has an invalid length. [ 719.238414][T16511] netlink: 'syz.4.3896': attribute type 10 has an invalid length. [ 719.270089][T16511] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3896'. [ 719.296484][T16511] device hsr0 entered promiscuous mode [ 719.320919][T16511] bridge0: port 3(hsr0) entered blocking state [ 719.340626][T16511] bridge0: port 3(hsr0) entered disabled state [ 719.389258][T16511] bridge0: port 3(hsr0) entered blocking state [ 719.396959][T16511] bridge0: port 3(hsr0) entered forwarding state [ 720.261831][T16523] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.3902'. [ 720.308085][T16523] netlink: zone id is out of range [ 720.320881][T16523] netlink: zone id is out of range [ 720.334119][T16530] Dead loop on virtual device ip6_vti0, fix it urgently! [ 720.350056][T16523] netlink: zone id is out of range [ 720.355686][T16523] netlink: zone id is out of range [ 720.369848][T16523] netlink: zone id is out of range [ 720.390023][T16523] netlink: zone id is out of range [ 720.405904][T16523] netlink: zone id is out of range [ 720.424721][T16523] netlink: zone id is out of range [ 720.441224][T16523] netlink: zone id is out of range [ 721.183823][T16556] netlink: 'syz.3.3912': attribute type 3 has an invalid length. [ 721.201171][T16552] netlink: 'syz.2.3914': attribute type 17 has an invalid length. [ 721.230555][T16556] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.3912'. [ 721.240947][T16552] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3914'. [ 721.403284][T16563] netlink: 'syz.1.3915': attribute type 29 has an invalid length. [ 721.435558][T16563] netlink: 'syz.1.3915': attribute type 29 has an invalid length. [ 721.467774][T16564] netlink: 'syz.1.3915': attribute type 29 has an invalid length. [ 721.524759][T16563] netlink: 'syz.1.3915': attribute type 29 has an invalid length. [ 721.556547][T16563] netlink: 'syz.1.3915': attribute type 29 has an invalid length. [ 721.911027][T16566] netlink: 'syz.1.3916': attribute type 1 has an invalid length. [ 721.929945][T16566] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3916'. [ 722.026463][T16573] netlink: 'syz.4.3918': attribute type 19 has an invalid length. [ 722.863040][T16597] netlink: 'syz.2.3928': attribute type 5 has an invalid length. [ 723.649391][T12927] Bluetooth: hci1: command 0x0406 tx timeout [ 726.651084][T16675] netlink: 'syz.3.3956': attribute type 2 has an invalid length. [ 728.242278][T16691] netlink: 'syz.3.3962': attribute type 11 has an invalid length. [ 728.369599][T16691] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3962'. [ 728.480347][T16691] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 728.853749][T16696] netlink: 'syz.4.3959': attribute type 2 has an invalid length. [ 729.066336][T16696] netlink: 'syz.4.3959': attribute type 8 has an invalid length. [ 729.175344][T16696] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3959'. [ 729.363089][T16711] netlink: 'syz.2.3968': attribute type 2 has an invalid length. [ 729.710673][T16723] netlink: 'syz.0.3973': attribute type 10 has an invalid length. [ 730.375066][T16754] netlink: 'syz.0.3982': attribute type 10 has an invalid length. [ 730.385639][T16748] netlink: 'syz.4.3980': attribute type 3 has an invalid length. [ 730.400238][T16748] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3980'. [ 730.598955][T16758] netlink: 71 bytes leftover after parsing attributes in process `syz.3.3983'. [ 733.915490][T16834] netlink: 'syz.0.4010': attribute type 6 has an invalid length. [ 733.923635][T16834] netlink: 140 bytes leftover after parsing attributes in process `syz.0.4010'. [ 734.041542][T16831] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4010'. [ 734.101894][T16831] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 734.130884][T16831] net_ratelimit: 8 callbacks suppressed [ 734.130903][T16831] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 734.198771][T16833] : port 1(ip6gretap0) entered blocking state [ 734.210657][T16833] : port 1(ip6gretap0) entered disabled state [ 734.236416][T16833] device ip6gretap0 entered promiscuous mode [ 734.367629][T16843] device ip6gretap0 left promiscuous mode [ 734.392734][T16843] : port 1(ip6gretap0) entered disabled state [ 739.609040][T16885] netlink: 'syz.1.4028': attribute type 10 has an invalid length. [ 739.618681][T16885] team0: Device geneve1 is up. Set it down before adding it as a team port [ 739.638397][T16902] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4034'. [ 741.735355][T16964] device batadv0 entered promiscuous mode [ 744.254176][T17026] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4077'. [ 744.275370][T17026] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4077'. [ 745.998969][T17045] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4083'. [ 746.185146][T17051] netlink: 144 bytes leftover after parsing attributes in process `syz.1.4087'. [ 746.658035][T17073] netlink: 'syz.3.4094': attribute type 10 has an invalid length. [ 746.944477][T17076] netlink: 'syz.0.4093': attribute type 10 has an invalid length. [ 747.182967][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.189420][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.996654][T17097] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4100'. [ 748.020811][T17105] netlink: 'syz.4.4102': attribute type 10 has an invalid length. [ 748.049406][T17105] netlink: 55 bytes leftover after parsing attributes in process `syz.4.4102'. [ 748.537974][T17125] netlink: 'syz.3.4109': attribute type 1 has an invalid length. [ 748.558168][T17125] netlink: 73372 bytes leftover after parsing attributes in process `syz.3.4109'. [ 749.154854][T17121] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4107'. [ 749.167389][T17121] device hsr_slave_0 left promiscuous mode [ 749.178052][T17121] device hsr_slave_1 left promiscuous mode [ 749.249619][T12927] Bluetooth: hci4: command 0x0406 tx timeout [ 749.293316][T17122] netlink: 10 bytes leftover after parsing attributes in process `syz.2.4108'. [ 749.613008][T17153] netlink: 'syz.1.4115': attribute type 10 has an invalid length. [ 749.660814][T17153] device geneve0 entered promiscuous mode [ 749.771180][T17153] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 749.906538][T17159] netlink: 'syz.2.4120': attribute type 10 has an invalid length. [ 750.219929][T17173] netlink: 'syz.2.4125': attribute type 1 has an invalid length. [ 750.227995][T17173] netlink: 'syz.2.4125': attribute type 2 has an invalid length. [ 750.237500][T17173] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4125'. [ 750.466921][T17176] FAULT_INJECTION: forcing a failure. [ 750.466921][T17176] name failslab, interval 1, probability 0, space 0, times 0 [ 750.509336][T17176] CPU: 1 PID: 17176 Comm: syz.2.4127 Not tainted syzkaller #0 [ 750.516908][T17176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 750.527026][T17176] Call Trace: [ 750.530359][T17176] [ 750.533339][T17176] dump_stack_lvl+0x188/0x24e [ 750.538094][T17176] ? show_regs_print_info+0x12/0x12 [ 750.543385][T17176] ? load_image+0x400/0x400 [ 750.547963][T17176] ? __lock_acquire+0x7d10/0x7d10 [ 750.553063][T17176] ? get_random_u64+0x16c/0x8d0 [ 750.557983][T17176] ? get_random_u64+0x53a/0x8d0 [ 750.562901][T17176] should_fail_ex+0x399/0x4d0 [ 750.567647][T17176] should_failslab+0x5/0x20 [ 750.572203][T17176] slab_pre_alloc_hook+0x59/0x310 [ 750.577298][T17176] ? memset+0x1e/0x40 [ 750.581350][T17176] kmem_cache_alloc+0x56/0x2f0 [ 750.586184][T17176] ? prepare_creds+0x3c/0x610 [ 750.590944][T17176] prepare_creds+0x3c/0x610 [ 750.595514][T17176] copy_creds+0x146/0xd50 [ 750.600370][T17176] copy_process+0x932/0x4030 [ 750.605056][T17176] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 750.610873][T17176] ? perf_trace_lock+0x301/0x390 [ 750.615899][T17176] ? idle_dummy+0x10/0x10 [ 750.620325][T17176] kernel_clone+0x24b/0x900 [ 750.624923][T17176] ? ksys_write+0x1c0/0x250 [ 750.629504][T17176] ? create_io_thread+0x170/0x170 [ 750.634642][T17176] __x64_sys_clone+0x1a7/0x220 [ 750.639480][T17176] ? __fget_files+0x43d/0x4b0 [ 750.644241][T17176] ? __ia32_sys_vfork+0x140/0x140 [ 750.649393][T17176] ? lock_chain_count+0x20/0x20 [ 750.654340][T17176] ? lockdep_hardirqs_on+0x94/0x140 [ 750.659616][T17176] do_syscall_64+0x4c/0xa0 [ 750.664116][T17176] ? clear_bhb_loop+0x60/0xb0 [ 750.668891][T17176] ? clear_bhb_loop+0x60/0xb0 [ 750.673648][T17176] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 750.679606][T17176] RIP: 0033:0x7fc164b9ce59 [ 750.684082][T17176] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 750.703771][T17176] RSP: 002b:00007fc165ae3fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 750.712254][T17176] RAX: ffffffffffffffda RBX: 00007fc164e15fa0 RCX: 00007fc164b9ce59 [ 750.720284][T17176] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000c2002000 [ 750.728311][T17176] RBP: 00007fc165ae4090 R08: 0000000000000000 R09: 0000000000000000 [ 750.736345][T17176] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 750.744381][T17176] R13: 00007fc164e16038 R14: 00007fc164e15fa0 R15: 00007ffcd31e7778 [ 750.752270][T17183] netlink: 'syz.1.4128': attribute type 3 has an invalid length. [ 750.752494][T17176] [ 750.796383][T17183] netlink: 13435 bytes leftover after parsing attributes in process `syz.1.4128'. [ 754.276337][T17207] FAULT_INJECTION: forcing a failure. [ 754.276337][T17207] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 754.306399][T17207] CPU: 0 PID: 17207 Comm: syz.3.4136 Not tainted syzkaller #0 [ 754.314004][T17207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 754.324161][T17207] Call Trace: [ 754.327539][T17207] [ 754.330574][T17207] dump_stack_lvl+0x188/0x24e [ 754.331171][T17216] netlink: 'syz.4.4139': attribute type 2 has an invalid length. [ 754.335403][T17207] ? show_regs_print_info+0x12/0x12 [ 754.343655][T17216] netlink: 'syz.4.4139': attribute type 8 has an invalid length. [ 754.348311][T17207] ? load_image+0x400/0x400 [ 754.360732][T17207] ? __lock_acquire+0x7d10/0x7d10 [ 754.365754][T17216] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4139'. [ 754.365872][T17207] ? snprintf+0xe5/0x140 [ 754.379253][T17207] should_fail_ex+0x399/0x4d0 [ 754.384081][T17207] _copy_to_user+0x2c/0x130 [ 754.388094][T17212] netlink: 168 bytes leftover after parsing attributes in process `syz.2.4138'. [ 754.388724][T17207] simple_read_from_buffer+0xe3/0x150 [ 754.401110][T17219] netlink: 'syz.4.4139': attribute type 2 has an invalid length. [ 754.403305][T17207] proc_fail_nth_read+0x1a6/0x220 [ 754.416162][T17207] ? proc_fault_inject_write+0x310/0x310 [ 754.416176][T17219] netlink: 'syz.4.4139': attribute type 8 has an invalid length. [ 754.416327][T17207] ? fsnotify_perm+0x248/0x550 [ 754.424521][T17219] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4139'. [ 754.429612][T17207] ? proc_fault_inject_write+0x310/0x310 [ 754.429665][T17207] vfs_read+0x2de/0xa00 [ 754.453613][T17207] ? kernel_read+0x1e0/0x1e0 [ 754.458337][T17207] ? __fget_files+0x28/0x4b0 [ 754.463035][T17207] ? __fget_files+0x28/0x4b0 [ 754.467733][T17207] ? __fget_files+0x43d/0x4b0 [ 754.472553][T17207] ? __fdget_pos+0x2ae/0x360 [ 754.477355][T17207] ? ksys_read+0x71/0x250 [ 754.481867][T17207] ksys_read+0x14c/0x250 [ 754.486190][T17207] ? vfs_write+0xa30/0xa30 [ 754.490711][T17207] ? lockdep_hardirqs_on+0x94/0x140 [ 754.495982][T17207] do_syscall_64+0x4c/0xa0 [ 754.500470][T17207] ? clear_bhb_loop+0x60/0xb0 [ 754.505238][T17207] ? clear_bhb_loop+0x60/0xb0 [ 754.510020][T17207] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 754.516021][T17207] RIP: 0033:0x7efc0375d68e [ 754.520562][T17207] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 754.540234][T17207] RSP: 002b:00007efc04685fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 754.548724][T17207] RAX: ffffffffffffffda RBX: 00007efc046866c0 RCX: 00007efc0375d68e [ 754.556747][T17207] RDX: 000000000000000f RSI: 00007efc046860a0 RDI: 0000000000000005 [ 754.564825][T17207] RBP: 00007efc04686090 R08: 0000000000000000 R09: 0000000000000000 [ 754.572901][T17207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 754.580981][T17207] R13: 00007efc03a16038 R14: 00007efc03a15fa0 R15: 00007fff893c3f98 [ 754.589163][T17207] [ 757.147855][T17282] delete_channel: no stack [ 757.163656][T17282] delete_channel: no stack [ 758.401730][T17309] netlink: 14593 bytes leftover after parsing attributes in process `syz.4.4170'. [ 758.940321][T17322] netlink: 'syz.3.4174': attribute type 10 has an invalid length. [ 759.975907][T17344] can: request_module (can-proto-0) failed. [ 760.573081][T17367] netlink: 'syz.1.4188': attribute type 29 has an invalid length. [ 760.972414][T17364] netlink: 'syz.4.4187': attribute type 2 has an invalid length. [ 760.989447][T17364] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4187'. [ 761.003339][T17367] netlink: 'syz.1.4188': attribute type 29 has an invalid length. [ 761.042094][T17368] netlink: 'syz.1.4188': attribute type 29 has an invalid length. [ 761.068840][T17369] netlink: 'syz.1.4188': attribute type 29 has an invalid length. [ 761.107657][T17370] netlink: 'syz.1.4188': attribute type 29 has an invalid length. [ 761.364836][T17376] netlink: 'syz.1.4191': attribute type 3 has an invalid length. [ 761.397091][T17376] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.4191'. [ 761.926170][T17385] netlink: 14601 bytes leftover after parsing attributes in process `syz.1.4193'. [ 761.963336][T17387] netlink: 'syz.4.4194': attribute type 19 has an invalid length. [ 762.392821][T17389] netlink: 'syz.3.4195': attribute type 1 has an invalid length. [ 762.427714][T17389] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4195'. [ 763.132229][T17407] netlink: 'syz.4.4203': attribute type 5 has an invalid length. [ 763.151106][T17403] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4201'. [ 764.153661][T17433] ================================================================== [ 764.161822][T17433] BUG: KASAN: slab-out-of-bounds in __bpf_get_stackid+0x6c9/0x920 [ 764.169681][T17433] Write of size 64 at addr ffff888073e12710 by task syz.0.4212/17433 [ 764.177790][T17433] [ 764.180154][T17433] CPU: 1 PID: 17433 Comm: syz.0.4212 Not tainted syzkaller #0 [ 764.187655][T17433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 764.197756][T17433] Call Trace: [ 764.201096][T17433] [ 764.204068][T17433] dump_stack_lvl+0x188/0x24e [ 764.208805][T17433] ? __lock_acquire+0x7d10/0x7d10 [ 764.213897][T17433] ? show_regs_print_info+0x12/0x12 [ 764.219150][T17433] ? load_image+0x400/0x400 [ 764.223706][T17433] ? __virt_addr_valid+0x465/0x540 [ 764.228876][T17433] ? __bpf_get_stackid+0x6c9/0x920 [ 764.234034][T17433] print_report+0xa8/0x210 [ 764.238507][T17433] kasan_report+0x10b/0x140 [ 764.243079][T17433] ? __bpf_get_stackid+0x6c9/0x920 [ 764.248241][T17433] kasan_check_range+0x235/0x290 [ 764.253233][T17433] ? __bpf_get_stackid+0x6c9/0x920 [ 764.258378][T17433] memcpy+0x3c/0x60 [ 764.262215][T17433] __bpf_get_stackid+0x6c9/0x920 [ 764.267182][T17433] bpf_get_stackid_pe+0x33f/0x400 [ 764.272237][T17433] bpf_prog_ceda4e53fcf21ae1+0x28/0x40 [ 764.277737][T17433] bpf_overflow_handler+0x6e8/0x7c0 [ 764.282998][T17433] ? bpf_overflow_handler+0xd9/0x7c0 [ 764.288322][T17433] ? perf_swevent_overflow+0x230/0x230 [ 764.293808][T17433] ? ct_irq_exit_irqson+0x113/0x170 [ 764.299040][T17433] ? __perf_event_account_interrupt+0x187/0x280 [ 764.305328][T17433] __perf_event_overflow+0x448/0x610 [ 764.310659][T17433] perf_swevent_event+0x315/0x570 [ 764.315723][T17433] ? perf_tp_event+0xc30/0xc30 [ 764.320534][T17433] ___perf_sw_event+0x49e/0x6e0 [ 764.325430][T17433] ? ___perf_sw_event+0x180/0x6e0 [ 764.330526][T17433] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 764.336979][T17433] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 764.342746][T17433] ? rcu_is_watching+0x11/0xa0 [ 764.347552][T17433] ? lockdep_hardirqs_on+0x94/0x140 [ 764.352785][T17433] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 764.358973][T17433] __perf_sw_event+0x135/0x260 [ 764.363785][T17433] do_user_addr_fault+0xaea/0xb10 [ 764.368845][T17433] ? trace_hardirqs_off_finish+0x86/0x180 [ 764.374600][T17433] exc_page_fault+0x60/0x100 [ 764.379226][T17433] ? __might_fault+0xa6/0x120 [ 764.383930][T17433] asm_exc_page_fault+0x22/0x30 [ 764.388814][T17433] RIP: 0010:copy_user_enhanced_fast_string+0xa/0x40 [ 764.395440][T17433] Code: ff c9 75 f2 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 8d 0c ca 89 ca eb 20 0f 01 cb 83 fa 40 72 38 89 d1 a4 31 c0 0f 01 ca c3 89 ca eb 0a 90 90 90 90 90 90 90 90 90 90 [ 764.415085][T17433] RSP: 0018:ffffc90003e47cd8 EFLAGS: 00050206 [ 764.421177][T17433] RAX: ffffffff84115b01 RBX: 0000000000002000 RCX: 0000000000000040 [ 764.429172][T17433] RDX: 0000000000002000 RSI: 0000200000002000 RDI: ffff88807ae3dfc0 [ 764.437264][T17433] RBP: 0000000000000000 R08: ffff88807ae3dfff R09: 1ffff1100f5c7bff [ 764.445260][T17433] R10: dffffc0000000000 R11: ffffed100f5c7c00 R12: 00007fffffffd000 [ 764.453260][T17433] R13: ffff88807ae3c000 R14: ffff88807ae3c000 R15: 0000200000000040 [ 764.461282][T17433] ? _copy_from_user+0xb1/0x170 [ 764.466204][T17433] _copy_from_user+0xf4/0x170 [ 764.470938][T17433] map_update_elem+0x454/0x680 [ 764.475755][T17433] __sys_bpf+0x4ec/0x780 [ 764.480047][T17433] ? bpf_link_show_fdinfo+0x380/0x380 [ 764.485476][T17433] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 764.491681][T17433] __x64_sys_bpf+0x78/0x90 [ 764.496143][T17433] do_syscall_64+0x4c/0xa0 [ 764.500614][T17433] ? clear_bhb_loop+0x60/0xb0 [ 764.505333][T17433] ? clear_bhb_loop+0x60/0xb0 [ 764.510068][T17433] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 764.516003][T17433] RIP: 0033:0x7fa7b559ce59 [ 764.520458][T17433] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 764.540198][T17433] RSP: 002b:00007fa7b640a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 764.548655][T17433] RAX: ffffffffffffffda RBX: 00007fa7b5815fa0 RCX: 00007fa7b559ce59 [ 764.556662][T17433] RDX: 0000000000000020 RSI: 0000200000000080 RDI: 0000000000000002 [ 764.564667][T17433] RBP: 00007fa7b5632d6f R08: 0000000000000000 R09: 0000000000000000 [ 764.572676][T17433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 764.580679][T17433] R13: 00007fa7b5816038 R14: 00007fa7b5815fa0 R15: 00007ffe027c7338 [ 764.588697][T17433] [ 764.591746][T17433] [ 764.594110][T17433] Allocated by task 17433: [ 764.598549][T17433] kasan_set_track+0x4b/0x70 [ 764.603193][T17433] __kasan_kmalloc+0x8e/0xa0 [ 764.607829][T17433] __kmalloc_node+0xb0/0x240 [ 764.612459][T17433] bpf_map_area_alloc+0x47/0xe0 [ 764.617348][T17433] prealloc_elems_and_freelist+0x86/0x1c0 [ 764.623110][T17433] stack_map_alloc+0x390/0x520 [ 764.627910][T17433] map_create+0x534/0x1000 [ 764.632368][T17433] __sys_bpf+0x38b/0x780 [ 764.636652][T17433] __x64_sys_bpf+0x78/0x90 [ 764.641111][T17433] do_syscall_64+0x4c/0xa0 [ 764.645573][T17433] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 764.651510][T17433] [ 764.653865][T17433] Last potentially related work creation: [ 764.659608][T17433] kasan_save_stack+0x3a/0x60 [ 764.664329][T17433] __kasan_record_aux_stack+0xb2/0xc0 [ 764.669733][T17433] call_rcu+0x14f/0x990 [ 764.673935][T17433] __nf_register_net_hook+0x788/0x910 [ 764.679350][T17433] nf_register_net_hook+0xae/0x190 [ 764.684496][T17433] nf_register_net_hooks+0x40/0x1a0 [ 764.689728][T17433] nf_ct_netns_do_get+0x20f/0x5b0 [ 764.694790][T17433] nf_ct_netns_inet_get+0x3b/0x150 [ 764.699937][T17433] nf_conncount_init+0x123/0x380 [ 764.704916][T17433] ovs_ct_init+0x312/0x480 [ 764.709376][T17433] ovs_init_net+0x1e2/0x240 [ 764.713922][T17433] ops_init+0x355/0x5f0 [ 764.718121][T17433] setup_net+0x4f2/0xbd0 [ 764.722406][T17433] copy_net_ns+0x348/0x5b0 [ 764.726866][T17433] create_new_namespaces+0x3d3/0x6f0 [ 764.732187][T17433] copy_namespaces+0x3b0/0x410 [ 764.736979][T17433] copy_process+0x19c2/0x4030 [ 764.741696][T17433] kernel_clone+0x24b/0x900 [ 764.746230][T17433] __x64_sys_clone+0x1a7/0x220 [ 764.751023][T17433] do_syscall_64+0x4c/0xa0 [ 764.755487][T17433] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 764.761426][T17433] [ 764.763777][T17433] The buggy address belongs to the object at ffff888073e12700 [ 764.763777][T17433] which belongs to the cache kmalloc-cg-64 of size 64 [ 764.777954][T17433] The buggy address is located 16 bytes inside of [ 764.777954][T17433] 64-byte region [ffff888073e12700, ffff888073e12740) [ 764.791093][T17433] [ 764.793440][T17433] The buggy address belongs to the physical page: [ 764.799884][T17433] page:ffffea0001cf8480 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888073e12880 pfn:0x73e12 [ 764.811369][T17433] memcg:ffff8880788b1601 [ 764.815630][T17433] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 764.823228][T17433] raw: 00fff00000000200 ffffea0000b79e00 dead000000000006 ffff888017442780 [ 764.831844][T17433] raw: ffff888073e12880 000000008020001f 00000001ffffffff ffff8880788b1601 [ 764.840450][T17433] page dumped because: kasan: bad access detected [ 764.846906][T17433] page_owner tracks the page as allocated [ 764.852650][T17433] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 4285, tgid 4285 (syz-executor), ts 399422003483, free_ts 399421590462 [ 764.871097][T17433] post_alloc_hook+0x173/0x1a0 [ 764.875911][T17433] get_page_from_freelist+0x1a1e/0x1ab0 [ 764.881500][T17433] __alloc_pages+0x1ec/0x4f0 [ 764.886135][T17433] alloc_slab_page+0x5d/0x160 [ 764.890853][T17433] new_slab+0x87/0x2c0 [ 764.894971][T17433] ___slab_alloc+0xbc6/0x1240 [ 764.899688][T17433] __kmem_cache_alloc_node+0x1a0/0x260 [ 764.905181][T17433] kmalloc_trace+0x26/0xe0 [ 764.909642][T17433] alloc_fdtable+0xca/0x2c0 [ 764.914184][T17433] dup_fd+0x782/0xa50 [ 764.918209][T17433] copy_files+0x72/0xe0 [ 764.922403][T17433] copy_process+0x1835/0x4030 [ 764.927117][T17433] kernel_clone+0x24b/0x900 [ 764.931656][T17433] __x64_sys_clone+0x1a7/0x220 [ 764.936454][T17433] do_syscall_64+0x4c/0xa0 [ 764.940914][T17433] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 764.946847][T17433] page last free stack trace: [ 764.951546][T17433] free_unref_page_prepare+0x8b4/0x9a0 [ 764.957056][T17433] free_unref_page+0x2e/0x3f0 [ 764.961774][T17433] __vunmap+0x856/0xa00 [ 764.965961][T17433] do_ip6t_get_ctl+0xec0/0x11b0 [ 764.970861][T17433] nf_getsockopt+0x25e/0x280 [ 764.975484][T17433] ipv6_getsockopt+0x222/0x2e0 [ 764.980284][T17433] __sys_getsockopt+0x1b0/0x230 [ 764.985178][T17433] __x64_sys_getsockopt+0xb1/0xc0 [ 764.990245][T17433] do_syscall_64+0x4c/0xa0 [ 764.994701][T17433] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 765.000628][T17433] [ 765.002974][T17433] Memory state around the buggy address: [ 765.008631][T17433] ffff888073e12600: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 765.016721][T17433] ffff888073e12680: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 765.024817][T17433] >ffff888073e12700: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 765.032911][T17433] ^ [ 765.038307][T17433] ffff888073e12780: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 765.046394][T17433] ffff888073e12800: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 765.054480][T17433] ================================================================== [ 765.062582][T17433] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 765.069811][T17433] CPU: 1 PID: 17433 Comm: syz.0.4212 Not tainted syzkaller #0 [ 765.077300][T17433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 765.087381][T17433] Call Trace: [ 765.090688][T17433] [ 765.093656][T17433] dump_stack_lvl+0x188/0x24e [ 765.098382][T17433] ? memcpy+0x3c/0x60 [ 765.102402][T17433] ? show_regs_print_info+0x12/0x12 [ 765.107648][T17433] ? load_image+0x400/0x400 [ 765.112207][T17433] panic+0x2e5/0x730 [ 765.116135][T17433] ? bpf_jit_dump+0xd0/0xd0 [ 765.120675][T17433] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 765.126604][T17433] ? _raw_spin_unlock+0x40/0x40 [ 765.131489][T17433] ? print_memory_metadata+0x314/0x400 [ 765.136990][T17433] check_panic_on_warn+0x80/0xa0 [ 765.141974][T17433] ? __bpf_get_stackid+0x6c9/0x920 [ 765.147125][T17433] end_report+0x66/0x110 [ 765.151411][T17433] kasan_report+0x118/0x140 [ 765.155957][T17433] ? __bpf_get_stackid+0x6c9/0x920 [ 765.161116][T17433] kasan_check_range+0x235/0x290 [ 765.166098][T17433] ? __bpf_get_stackid+0x6c9/0x920 [ 765.171251][T17433] memcpy+0x3c/0x60 [ 765.175095][T17433] __bpf_get_stackid+0x6c9/0x920 [ 765.180072][T17433] bpf_get_stackid_pe+0x33f/0x400 [ 765.185137][T17433] bpf_prog_ceda4e53fcf21ae1+0x28/0x40 [ 765.190630][T17433] bpf_overflow_handler+0x6e8/0x7c0 [ 765.195873][T17433] ? bpf_overflow_handler+0xd9/0x7c0 [ 765.201194][T17433] ? perf_swevent_overflow+0x230/0x230 [ 765.206689][T17433] ? ct_irq_exit_irqson+0x113/0x170 [ 765.211989][T17433] ? __perf_event_account_interrupt+0x187/0x280 [ 765.218295][T17433] __perf_event_overflow+0x448/0x610 [ 765.223635][T17433] perf_swevent_event+0x315/0x570 [ 765.228694][T17433] ? perf_tp_event+0xc30/0xc30 [ 765.233497][T17433] ___perf_sw_event+0x49e/0x6e0 [ 765.238390][T17433] ? ___perf_sw_event+0x180/0x6e0 [ 765.243484][T17433] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 765.249932][T17433] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 765.255704][T17433] ? rcu_is_watching+0x11/0xa0 [ 765.260504][T17433] ? lockdep_hardirqs_on+0x94/0x140 [ 765.265738][T17433] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 765.271928][T17433] __perf_sw_event+0x135/0x260 [ 765.276735][T17433] do_user_addr_fault+0xaea/0xb10 [ 765.281797][T17433] ? trace_hardirqs_off_finish+0x86/0x180 [ 765.287550][T17433] exc_page_fault+0x60/0x100 [ 765.292165][T17433] ? __might_fault+0xa6/0x120 [ 765.296869][T17433] asm_exc_page_fault+0x22/0x30 [ 765.301755][T17433] RIP: 0010:copy_user_enhanced_fast_string+0xa/0x40 [ 765.308378][T17433] Code: ff c9 75 f2 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 8d 0c ca 89 ca eb 20 0f 01 cb 83 fa 40 72 38 89 d1 a4 31 c0 0f 01 ca c3 89 ca eb 0a 90 90 90 90 90 90 90 90 90 90 [ 765.328019][T17433] RSP: 0018:ffffc90003e47cd8 EFLAGS: 00050206 [ 765.334118][T17433] RAX: ffffffff84115b01 RBX: 0000000000002000 RCX: 0000000000000040 [ 765.342105][T17433] RDX: 0000000000002000 RSI: 0000200000002000 RDI: ffff88807ae3dfc0 [ 765.350101][T17433] RBP: 0000000000000000 R08: ffff88807ae3dfff R09: 1ffff1100f5c7bff [ 765.358096][T17433] R10: dffffc0000000000 R11: ffffed100f5c7c00 R12: 00007fffffffd000 [ 765.366088][T17433] R13: ffff88807ae3c000 R14: ffff88807ae3c000 R15: 0000200000000040 [ 765.374086][T17433] ? _copy_from_user+0xb1/0x170 [ 765.378970][T17433] _copy_from_user+0xf4/0x170 [ 765.383678][T17433] map_update_elem+0x454/0x680 [ 765.388479][T17433] __sys_bpf+0x4ec/0x780 [ 765.392753][T17433] ? bpf_link_show_fdinfo+0x380/0x380 [ 765.398160][T17433] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 765.404348][T17433] __x64_sys_bpf+0x78/0x90 [ 765.408794][T17433] do_syscall_64+0x4c/0xa0 [ 765.413255][T17433] ? clear_bhb_loop+0x60/0xb0 [ 765.417959][T17433] ? clear_bhb_loop+0x60/0xb0 [ 765.422667][T17433] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 765.428593][T17433] RIP: 0033:0x7fa7b559ce59 [ 765.433034][T17433] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 765.452664][T17433] RSP: 002b:00007fa7b640a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 765.461103][T17433] RAX: ffffffffffffffda RBX: 00007fa7b5815fa0 RCX: 00007fa7b559ce59 [ 765.469097][T17433] RDX: 0000000000000020 RSI: 0000200000000080 RDI: 0000000000000002 [ 765.477102][T17433] RBP: 00007fa7b5632d6f R08: 0000000000000000 R09: 0000000000000000 [ 765.485109][T17433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 765.493121][T17433] R13: 00007fa7b5816038 R14: 00007fa7b5815fa0 R15: 00007ffe027c7338 [ 765.501127][T17433] [ 765.504743][T17433] Kernel Offset: disabled [ 765.509113][T17433] Rebooting in 86400 seconds..