last executing test programs: 7.513110753s ago: executing program 1 (id=2276): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1f, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x10}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000040b702000014000000b7030000000000008500000083000000bf0900000000000055090100030000009500000000000000bf71000000000000b7020000000000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x4, 0xf, &(0x7f0000001e40)=""/4093, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffe14, 0x10, 0x0, 0x42}, 0x21) 7.246015199s ago: executing program 1 (id=2279): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x1}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9c, 0x1, 0x0, 0x0, 0x0, 0x5, 0x42020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd831, 0x4, @perf_config_ext={0x10000, 0x3}, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0xe, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000f40)) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x809, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0xe}, 0x0, 0x35, 0x43a1bd76, 0x1, 0x3, 0x8, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x110ee0, 0xc78, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$tun(0xffffffffffffff9c, 0x0, 0xc1842, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x830eb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x6}, 0x828, 0x0, 0x0, 0x0, 0x10000, 0x800000, 0x9, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8982, &(0x7f0000000080)) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0xa0800, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = socket$kcm(0x10, 0x0, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="78cafb73fc02010700000000ef02258f2e440ab8f9", 0x15}], 0x1}, 0x4000000) r2 = socket$kcm(0x11, 0x3, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000680)={@fallback, 0x11, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) setsockopt$sock_attach_bpf(r2, 0x107, 0x18, &(0x7f0000000b80), 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8001c00180081064e", 0x9}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="043900002000ef029dd2b97576b11d210a"], 0x33fe0) 6.84727003s ago: executing program 1 (id=2283): bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0e000000040000000800000001800000040000005a0c284266ed41a0b728adf527745f9f4e613dc57f61fe0e0fdf56cdba803a428552396464acd4ac2e76b74acf96547fd65b8030d6bff2a2852634080387c22795f6e3a6070000007b04dd4cf693308537761c67ddf6f6cc17bc56e7a4dc68abd172d59b1ff4d110490000000033f6f68f8c391b919d748f81a132e493be0454cb5e90d96b30acb5fd5db0f14958cff96b2c6e3f538237ed96de9d624e510534eb", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1e3f}, 0x0, 0x0, 0x0, 0x9, 0x4, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={0xffffffffffffffff, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000140)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, &(0x7f0000000200)=[0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x7e, &(0x7f0000000540)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000580), &(0x7f0000000700), 0x8, 0x79, 0x8, 0x8, &(0x7f0000000740)}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', r0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000180)=[{0x0, 0x2, 0x40000000, 0x9}, {0x10000002, 0x200, 0x0, 0xc}, {0x0, 0x5, 0x5, 0x9}, {0x2, 0x5, 0x9, 0x6}, {0x2, 0x4, 0x7, 0x9}]}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0xd50a, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x9, 0x1ef7}, 0x11efb, 0x2, 0x0, 0x8, 0x0, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000000c0)="1400000035000b63d25a80648c2594f90324fc60", 0x38}], 0x1}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x94) r3 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r4, 0x84, 0x64, &(0x7f0000000000)=r7, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000000)=@framed={{0x4e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x97}}, &(0x7f0000000480)='syzkaller\x00'}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000009c0)={0xffffff64}, 0x8) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 6.237294264s ago: executing program 1 (id=2290): perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x10002, 0x7c, 0x0, 0xa, 0x0, 0x0, 0x100, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000100), 0x98) 6.039877469s ago: executing program 1 (id=2293): socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0xc, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_bp={&(0x7f0000000040), 0x2}, 0x8000, 0x400000005, 0x43a1bd76, 0x7, 0x1, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000000)=r0, 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x21, 0x2, 0x2) socket$kcm(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x10002, 0x7c, 0x0, 0xa, 0x0, 0x0, 0x100, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x890b, 0x0) 5.881325844s ago: executing program 3 (id=2294): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x7, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef6}, 0xbafa, 0xff, 0x98, 0x2, 0x0, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, r1, 0x2) socket$kcm(0x23, 0x5, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, 0x0, 0x275a, 0x0) write$cgroup_devices(r3, 0x0, 0x9) r4 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x14}, @dev={0xac, 0x14, 0x14, 0x3a}}}}], 0x20}, 0x8840) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8003}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x8, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x18, &(0x7f0000000840)=ANY=[@ANYBLOB="180000008f000000000000000900000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70200fe14000000b7030000000000008500000086000000bf090000000000003609010000000000950000000000000018010000786c6c2500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b7030000080000008500000006000000bd0af4ff00000000bf91000000000000b702000003000000850000002a000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0x41, &(0x7f0000000cc0)=""/4096, 0x41100, 0x20}, 0x94) 5.809905075s ago: executing program 1 (id=2295): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x115905, 0x4, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0x1, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x7, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=r0], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000080)='./cgroup/cgroup.procs\x00') perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 5.455128634s ago: executing program 3 (id=2298): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0a00000001000000dd00000009"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020205d0af8ff00000000bea100000000000007010000f8ffffffb702000008000000b7030000ffee0000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x74, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) 5.176168611s ago: executing program 3 (id=2301): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x7, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef6}, 0xbafa, 0xff, 0x98, 0x2, 0x0, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, r1, 0x2) socket$kcm(0x23, 0x5, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, 0x0, 0x275a, 0x0) write$cgroup_devices(r3, 0x0, 0x9) r4 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x14}, @dev={0xac, 0x14, 0x14, 0x3a}}}}], 0x20}, 0x8840) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8003}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x8, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x18, &(0x7f0000000840)=ANY=[@ANYBLOB="180000008f000000000000000900000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014280000b7030000000000008500000086000000bf090000000000003609010000000000950000000000000018010000786c6c2500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b7030000080000008500000006000000bd0af4ff00000000bf91000000000000b702000003000000850000002a000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0x41, &(0x7f0000000cc0)=""/4096, 0x41100, 0x20}, 0x94) 3.563951981s ago: executing program 3 (id=2310): bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYRES16], 0x48) (async) close(0xffffffffffffffff) (async) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000200)="a68cde0d56b170df7710b5", 0xb}], 0x1}, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r0 = perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0x8e, 0x4, 0x11, 0x7, 0x0, 0x9, 0x80000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x8, @perf_bp={&(0x7f0000000580)}, 0x10, 0x1, 0x1ff, 0x0, 0xc, 0x25, 0xfff8, 0x0, 0x4, 0x0, 0x3}, 0x0, 0x9, 0xffffffffffffffff, 0x5) perf_event_open$cgroup(&(0x7f0000000500)={0x1, 0x80, 0x2, 0x6, 0x1d, 0x80, 0x0, 0xa, 0xc00a0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x2, 0x401}, 0x0, 0x428000, 0x4, 0x3, 0x8, 0x1, 0x4, 0x0, 0x5, 0x0, 0x8}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x6) (async) perf_event_open(&(0x7f0000000280)={0x3, 0x80, 0x46, 0xf7, 0x9, 0x3, 0x0, 0x3a0, 0x809, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x4, @perf_bp={&(0x7f0000000740), 0x4}, 0x10000, 0x4, 0x4, 0x8, 0x6, 0x120000, 0x5, 0x0, 0x8, 0x0, 0x100}, 0x0, 0xffffffffffffffff, r0, 0x2) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x3, 0x0, 0x10, 0xfc, 0x0, 0x6, 0x20225, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200003, 0x1, @perf_config_ext={0x8, 0x3}, 0x4048, 0xc8, 0x9, 0x7, 0x2, 0xdc4, 0x0, 0x0, 0x8, 0x0, 0x5}, 0x0, 0xa, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) (async) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="8f030000000000fc007538e486dd630ace2212102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa12006558"], 0xcfa4) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8914, &(0x7f0000000080)) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x2, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x0, 0x5}, 0x94) write$cgroup_devices(r4, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0309004d8871ef2885634a8270e7112b"], 0xee8a) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x2000020b, &(0x7f00000005c0)=ANY=[@ANYBLOB="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", @ANYRESDEC=r1, @ANYBLOB, @ANYRESHEX=r1], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) (async) ioctl$TUNSETLINK(r4, 0x400454cd, 0x8) (async) r6 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000a00)=ANY=[], 0x50) (async) socket$kcm(0x10, 0x3, 0x10) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, 0x0, 0x4000000) (async) sendmsg$kcm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="1400000027000bff001b05290000000000000000", 0x14}], 0x1}, 0x4080) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYRES8=0x0, @ANYRES32=r6, @ANYBLOB="0000000000000000660000000a00400018000000f8ffffff00000000000000009500000000000000360a00000000000018010000202078250000000000202020db1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x7, 0xde, &(0x7f0000000340)=""/222}, 0x94) 3.281951749s ago: executing program 0 (id=2312): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xa, 0x4, 0x8, 0x10, 0x0, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000300000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001240)=[{0x10, 0x110, 0x6}], 0x10}, 0x40) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) (async) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000500)={0x0, 0xfffffffffffffe18, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x3) (async) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) (async) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r6, 0x0, 0x100000) (async) write$cgroup_int(r3, &(0x7f0000000000)=0x1, 0x12) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x50) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r7) (async) r8 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r8, 0x1, 0x3e, &(0x7f0000000000)=r7, 0x4) (async) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000002c0)={'erspan0\x00', 0x8012}) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0xf2ee, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x2, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000940)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2f, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x2020, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r9 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r9, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) (async) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00005a732a8e8f7238cf00000000000000001052dc6c0000000000000000006df03dccaf52a77b593df0cb"], 0x50) sendmsg$kcm(r9, &(0x7f0000003d40)={&(0x7f0000000380)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x0, 0x2, 0x4, 0x1, {0xa, 0x4e21, 0xfffffffe, @local, 0x7f}}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000400)="31e131203ccef1fbbfb1a6410178f7996c05c4e1e8bd8e4a7e554e24ffe3a447fe78104004facfb3a83e74baf234f7aa3ab22907401670b81db680c28ca103cd89e93b5bc0d059a9531d58bb21a2defae17f208dcd56ae42a209da1b4462b2d8a1174645c1b0dc86fe6da8da36b8afa21dd23664c9a705a8dccfdf2b2c8aa229328c5ef11330226cab14d5a03aff8867195e38361ba6b52d2b000720eaca85e6d2afd408d93285c5ef563f5b62d19e53fdb529e95bf4292f53bc9034484657d411dc14230e1ea9a07fd648231b8436ed532b3bd54d82d837d7abfd81b42cc6", 0xdf}], 0x1, &(0x7f0000002a00)=[{0x1010, 0x115, 0x10, "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"}, {0x10, 0x109, 0x8}, {0x48, 0x118, 0x7, "511068656e4cd9eccf541c839bafcd6549d07055b189eb584013cc99bb22c6f3e6b3348b3a5f72ba3a6499f54a369045079d"}, {0xd0, 0x3a, 0xb97, "ea349034c2b8a20f44e2c71a653ae9c7ee7689edd964e8ee25fa79fcaf5c9dbd44a9bf35a85813f29dd373c350dadc96a4a4e879d32f7e3bbae29ae956903cdb46323fa7dbaf58eeda83e216810220a52e88fe8d6a4e776bf01695d9cd69c622955464bd8ce1bd636ff504f544679b380c466d87db1ae575b1e9b43aceadb2bb725a93488f3dc481cf017271be8884644d3d464399e3cb50b8e9cc8a6a8f9957f944b21ee030988e5e5e86c1fdc6307243cb48de7e98203b3ff5b2ebc0"}, {0x58, 0x109, 0x4dd4b70, "4fe1835407b421550ea0b83cbc0e0a0b228f76dca99982e203872291db3d617d1ea23204659a623e66e25aa9d93b93dcc89bff591fc863f720110e3aa370cbaebb5ac887"}, {0xd8, 0x113, 0xe9ae, "778c5851fe61a9a8f09aec29bf5e612b6edfe877c65092540b909a7fb5f74d8f631a5dc757dd1c8870d5fe608676ed0380ee25c0726f6a9bb97aff098d161aca5cb273b17f24d58124b4e878fea62d91edc905e6268dda96a1aee2ee34d317cd9c0eaca8c954732cee7bd158d0dd673844bfe77f9b567af41a6b418314a5e0067bbeda7b401ce8b50a75b92196050551e3cfabf8fadc6bf15d7d8c75245c9e191189dd600332a432598ca4f60cad81c8f17431b8c19934fd603a8e75026feafd70d0339739d2"}, {0xb8, 0x101, 0x6, "13b7da29171201e7e9235216911bf6dd6b77c3ab0b81ca1498cb3a4d8ce361f7ebbd01c9384d865d5f32ca239e4497cb50a0ba109e2a7e76d9ce33ec6eba18f87545f2a1216fb65a32dcf32c3c8cf71d4e35d3ce2bfadcccb37e4ad5e34eed98c6f4606464487f15cc7cd373525341b4003dd85951a632223dc9bfe1d0a77c54b423a0e93b6dfe3a6a12dae3f1fb568a2faa0daea55c3632a9944cb561f823f1aa"}], 0x1320}, 0x10) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r10}, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r10}, &(0x7f0000000000), &(0x7f0000000180)='%pS \x00'}, 0x20) 3.021584735s ago: executing program 0 (id=2313): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4bdedd79f2007915, @perf_bp={0x0, 0xa}, 0x11c92d, 0x2, 0x9, 0x4, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000780)="540000002d000b63717a3c4a7ad8985b0808aa782223fbe40f80e0932eab389d2db26277c4abda16ad715fb33005cbd9ec3dd4f1cd7d38005797c978516b8909cc0bc70f6a034cbb95c40c4c46699d726a6172e6", 0x54}], 0x1}, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x10, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="1804000000000000000000000001000018010000202070250000000000202020db1af8ffa0000000bda100000000000007010000f8ffffffb702000008000000b70300000000000085000000a000000095"], &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000200)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB='\r\x00'], 0x20) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000380)={r5, r6}) setsockopt$sock_attach_bpf(r1, 0x6, 0x3, &(0x7f0000000200), 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="d800", 0x2}], 0x1}, 0x80040) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r8) r9 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r9, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004091) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="b400000000000000631130000500000018250000", @ANYRES32=r5, @ANYBLOB="0000000002000000850000008800000095000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) r10 = socket$kcm(0x10, 0x2, 0x0) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000604000000002e"], 0x0, 0x37}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0900000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="42cac072876f484f00"/20, @ANYRES32=0x0, @ANYRES32=r11, @ANYBLOB="020000000100"/28], 0x48) openat$cgroup_procs(r8, &(0x7f0000000540)='tasks\x00', 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000018"], 0x50) sendmsg$kcm(r10, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001500030000120800040043000000a8001600a400014020000c00ffffff7fb94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@fallback=r9, 0xb, 0x1, 0x1, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) 3.017584005s ago: executing program 3 (id=2314): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xb, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa10000000000000701"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@base={0x19, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 2.867281249s ago: executing program 3 (id=2316): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffffffffffd8e, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x80) setsockopt$sock_attach_bpf(r0, 0x1, 0x42, &(0x7f0000000900), 0x4) socket$kcm(0x2, 0x5, 0x84) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) r2 = getpid() r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$kcm(0x11, 0x2, 0x300) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000002c0)=r5, 0x4) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0xc8, 0x2, 0x8, 0x0, 0x10001, 0xa, 0x0, 0x800}, 0x0, 0x5, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x38}, 0x100a0) write$cgroup_subtree(r8, &(0x7f0000000300)=ANY=[], 0xfdef) perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x0, 0x7fffffff, 0x2, 0x3cd, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, r2, 0x0, 0xffffffffffffffff, 0x2) syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r9, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000040)="b907ef19edfff007049e0ff0888e", 0x0, 0x6500, 0x18000000, 0x0, 0x0, 0x0, 0x0}, 0x48) syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0500000004000000020000000700000000000000", @ANYRES32=0x1, @ANYBLOB="920e00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000002f057c2228643df8d4078c0d08c4d588b703010f841b220f7bf7afd6435825861bf6b100cf685c7aca0175158b2efd927a76f7a820d421df5268b17a520d7a9a8d41"], 0x50) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3000000850000000700000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r12, r11}, 0xc) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r10, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0xff, 0x0, 0x40, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86, 0x2, @perf_bp={0x0, 0x2}, 0x400, 0x7b, 0x8, 0x3, 0x1, 0x0, 0x82, 0x0, 0x7, 0x0, 0xa}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0xd040, 0x10001}, 0x14403, 0xfffc, 0x0, 0x5, 0x582, 0x20005, 0x8, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) close(r1) 2.113730018s ago: executing program 2 (id=2318): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x2a}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f03, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10, 0x0}, 0x300060c1) setsockopt$sock_attach_bpf(r3, 0x6, 0x3, &(0x7f00000000c0), 0x4) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000200)=0x4) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x2, 0x7, 0x2, 0x7f, 0x0, 0x6af, 0x38300, 0x5, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x101, 0x4, @perf_config_ext={0xc, 0xfff8000000000000}, 0x2000, 0x4, 0x5, 0x5, 0xb, 0x8, 0x400, 0x0, 0x9, 0x0, 0x921}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0xa) r4 = perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0xa, 0x0, 0x0, 0xd, 0x0, 0x5, 0x44, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x4880, 0xa7, 0x2, 0x5, 0xa5, 0x9b9b, 0x7000, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f0000000040)={0x5, 0x80, 0x8, 0x4, 0x0, 0x6, 0x0, 0x3, 0x80053, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x7fffffffefff, 0x2}, 0x100040, 0xffffffff, 0xfffffffa, 0x6, 0xda0, 0xfffffffc, 0x81, 0x0, 0x400, 0x0, 0x8000000000000001}) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001880)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000018c0)={&(0x7f0000000080)="00ddf453305c7fd338cc7962159b5722ce4217fcef662ccab3b3d8ecfc7adc89cf7ba8faae37f649aa1a3be2f45c3e74aa733f3c34f61ade99a02f818a2522dbaa670b7cf8a83b51d20e303b5c2eeb723148d9af1aabca7784c1ae4cfb5eb251897294f471ca1ce1e4b7e354469050c8ea5b983591b97a1135b6d17dc9d67afdaf90a5ec806dca3243f8bcdfc70cd25be72f84960cab0d45e7254ea53e2ce57a7d9e8e606a52a99c32", &(0x7f0000000280)=""/18, &(0x7f0000000780)="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", &(0x7f0000001780), 0x0, r6, 0x4}, 0x38) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r7 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r10 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r10, 0x1, 0x3e, &(0x7f00000002c0)=r9, 0x161) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000880)={0xffffffffffffffff, 0x58, &(0x7f00000007c0)}, 0x10) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x100000, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000010040b7080000000000007b8af8ff00000000b7080000000000107b8af0ff00000064bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r11, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0xa}, 0x94) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000000)="2e00000011008188040f80ec59acbc0413a181b230000000000100000010e61e0e0027000f0000000080020012", 0x2d}, {&(0x7f0000000040)="ba6d53e0ca90a3aba0e6dd11c8249b93bb3582cfc2bd265f75d0d468216e4146b41a9f837250ada439c7cebac38416de07d6", 0x32}, {0x0}, {&(0x7f0000000340)}, {0x0}], 0x5}, 0x0) sendmsg$unix(r9, &(0x7f0000001c80)={&(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001bc0)=[{&(0x7f0000001780)="ef0b10f739cc61e06803b40d7dc1e669dd6781882ebf0f7c4716cc6aa88d72deee04908264b4335e4499ec88eff98ae67a3e999a500f7c59b4e60a8e5a80ecc04f9aed4c4e3d84d18da70bdd7d0dc0ef6550030269559f9c5d7b54ddbae5ae9872d3051d8a328d11032fd5346817134c81eabc827973c5e7d1946e5755e40083d8e74c1a0b66b76587ba1124c8324fbc7be501329f709f9acce81a1eb5b0077061856813a351e71514c3d53c099b4b73b353e9f4a0a86571fbf653713b1d745006c872cd4f8f93a8829c38b913ad", 0xce}, {&(0x7f0000001900)="9b3690b8657ff056144882d167716204bb7395c1b94fdfa833ff8e54d5611cec670682220e", 0x25}, {&(0x7f0000001940)}, {&(0x7f0000001980)="8958fae85814b28cc6ce7a40f8ec7742ecb97e67f4bc103da77964b3ad858c0a13401202f3b541310099a64a3333f59033ba4e7491930353b20e75e01e4c492daa09c2d61a5c03f5ee4753fc2661ce429aee6fa677ca779510ed50eeba9f410460b23309f13de03fe6a0b6d32786e0a440cfad16f30dce691f", 0x79}, {&(0x7f0000001a00)="fbbab9a52109caed0687e1a5650595c7adf75636bfb62261159a446218337000ac8adb4f9506255c55559c09439f5ace95bb5f732f76ccece6cd93904a9264d784f50727cbe4832095a0331737cf0a4bf0bdffd17820023463ab818c7a0196b29d7bc312c1f7dae8c9f86c4f51a5829d70e912c074eda885eb75f1dccb751e0286dedbb25f1c7a1740c24e99f6bb5f334561e5c6525f3e", 0x97}, {&(0x7f0000001ac0)="7d301102561b3c792d5cef186c9fa5d84339c36e53a5458fe1cfae8ad21d66", 0x1f}, {&(0x7f0000001b00)="0fe215bcc49c83817200509afff735cd20e4d2c194d616ac9d25d3cd7147cc153ff7edf8843986407ba4bc5fb287c2b16171ceb9f16fadbec5461c107072c60ffff51dfee9f3f08831b3ad9b1a8390321d52ce3d31e743a99facf0442ca02132b5e25f4aadb786b0b6ac7771fc03e6929f9c05fda8b767595c56f68bac5858065ee23cb749ea991a59de0e3ebfeceb1dc3d8a3670759296f3ede3005", 0x9c}], 0x7, &(0x7f0000001c40)=[@rights={{0x24, 0x1, 0x1, [r10, r7, 0xffffffffffffffff, r2, r5]}}], 0x28, 0x4040}, 0x24004081) 1.850539924s ago: executing program 0 (id=2319): ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg(r0, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002b80)=[{&(0x7f0000001680)="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", 0x1000}, {&(0x7f0000002680)="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", 0xfe}, {&(0x7f0000002780)="2b60c3325981f2e1dfdb57188832d8efc2ebc1304aa839b40653e2613bae56d05f3c6c827da901e2ccfb55ba55c6b249ee4028361452efbc83c8146cdea8bd43a6e12f8923d140baa3d9e8b80648", 0x4e}, {&(0x7f0000002800)="68b268eea2c286b8d78072a30fd42de7ea5c9693ca6e4dc3edace00468dc4f360d8b01be03bcbe8c8fb8063646e457a61bb14e6f7a98c28b22770358201b8d4775031f591eaf348b38fe501e6acc1215ffc5ee7b03df02e19f32dc17f991fae685d183484d01bd36d92329926cd7bb1641f609136cedf9bc454c1408c21c830b4066f2c5248e58eb7f0fd9e5c21fa7eafbb0ec2ad36b7f6957ec6610170c39c2f8a7cd5a26d17e0aaa267588158e4bd2521df9a861ed632c1ab4a60a3ed4311f4310b90a0ffedbc3d92eea489b7235a66c46f7b2d48082ef57a453a852f24fb27e36e0517f9e9fd42f524834", 0xec}, {&(0x7f0000002900)="49e5d40ae51e8003af3055f22941cb595af35c52a98aed7f426e196c3705a23ced54fbb729aef66f7c2235d9c17c82269ea2e2e711efecbc90e6d43f5cf0c25fa4b9f10f182b7089cc58e466e6d5642ef3d85dc7dc715f726a32913306179f1dede8f02ebb8916aeb4df8bb5619c2f00c4e4d94d106781cf239a0d0a1e1a611cf2615d2319e867e2eaf7bff8de0e24e085208758b6e9292abb465f29bc2e04dde8278b397dc43def9a6848db569a585b226a22d2190125a59bd91517d8aec92214735a", 0xc3}, {&(0x7f0000002a00)="047604027f77408ff0051cef793ada498bfa4ceb0c826b5fe0418225304c9af75584ba06a9b6827b1266c40d2b4934e7d7ca3360803eb43924f84af23699813a31d4699088bde3389d00b188cbc58577fe99015246f7ba7a90f6b91d26b6d39b6ccc5a9987a19f10f46428af85465f6262fcc25f847087174ce2630b245f9113d1b8", 0x82}, {&(0x7f0000002ac0)="2a050f39b09fccef056207e7f451e0c4c30fa4190b0f236180991c2c024c53ea987bd4d98c859f50ded17d0fcf8635522ec436ca17ea217b6d177eb545bdd07b1272fb6a972a7e621c26d5a7f472a2fdf63fc265cbfc376ef6d34eabb54d334ab74ad8bb4c52eb46e5572df8c82799b9664623ac6e5ae8599dd5f9040644cdb62d1069a8afa8e5f7a2c8e93f3a4f272c11e3174b064713f88ca6c843483f990014", 0xa1}], 0x7}, 0x801) r1 = socket$kcm(0xa, 0x2, 0x73) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000540), 0x8) sendmsg$kcm(r2, &(0x7f0000001280)={&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x0, 0x1, 0x2, 0x4, {0xa, 0x4e20, 0x1000, @empty, 0x3}}}, 0x80, 0x0}, 0x4c814) r3 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r3, 0x84, 0x14, &(0x7f0000000000), 0x8) sendmsg$inet(r3, &(0x7f0000000d80)={&(0x7f0000000b40)={0x2, 0x0, @private=0xa010102}, 0x10, &(0x7f0000000c00)=[{&(0x7f0000000b80)="e0", 0x1}], 0x1}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000003000000611063000000000095003737010000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e}, 0x94) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'pim6reg\x00', 0x52d35ce30131f272}) ioctl$TUNSETFILTEREBPF(r5, 0x800454e1, &(0x7f0000000300)) r6 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x80, 0x0, 0x40000000, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="05000000010000000400000004"], 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000500)={r7, 0x50, 0xfffffffffffffffc}, 0x10) r8 = syz_clone(0x400, &(0x7f00000002c0)="fe609aec75de2fb2a5e80a2dd5d8d1d2839573d7d424e30b9725a7d3ee05dafd73fe6c760b0b869c6e7166c0219d1d10c7e18157798dc7ed8cf2bb0e13aa475d68b9cc088c5c043b452c920fd702345b0e511c8d7a47975f734c5609e4cba4f159a359fe4b6832", 0x67, &(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400)="e7df6650cee9f5a934421a026e6edcada8b34e1b0376") perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x1}, 0x10c6e8, 0xfffffffffffffffc, 0x8, 0x5}, r8, 0xdfffffffffffffff, r6, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1000d7, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r4, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000000)="b9ff03030018698cb89e40f086dd6000000e00002f00630677", 0x0, 0xfa, 0x2000000, 0x3f, 0xc0, &(0x7f0000000440), &(0x7f0000000080), 0x4}, 0x50) 1.433670555s ago: executing program 2 (id=2320): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000004080000000000000002000000000000000000000002000000000000000000000012000002000000000000000000000004"], 0x0, 0x56}, 0x20) 1.20597637s ago: executing program 2 (id=2321): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x80, 0x0, 0x0, 0xc0004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002e000b12d25a80648c2594f90324fc60100c084002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) (async) r1 = socket$kcm(0x29, 0x2, 0x0) close(r1) (async) r2 = socket$kcm(0x2b, 0x1, 0x0) close(r2) (async) r3 = socket$kcm(0x2, 0x1, 0x84) (async) syz_clone(0x20000, &(0x7f00000000c0)="7c1ce41def6c915dc9b27556afbd322c128b483bf346a36bb572d730bfa2f48adcd648244780674b2ec7461b2f3f13a0d5dc880c131a931f5edcda93d5555dc7e8ea7e1333f73e89d9095d8536408c6ae1127f631179986da8d1037150a31afa5dd8f0025da85d2737634c844089a67e4e3aa1fa04e102cf2981fe6967f7650b5cdb60d3c79bf7dba56e0c3169913292777cf048d593b4a6f2a85f0369c1d797eab4f11424011ac51e75f59da0256386f672f78488948f053b056ffc88ec9c5f177d6f59ee0af8bd59e43e3d9b456681033e713cfa5c62a930e726c49ed75aab5e7c819ccad283ef1e7aaaab1c5b339de01162dc0354af4b", 0xf8, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000940)="8b16455113afd1c742d43851651877d423718185f2192446a37e19330159ec6164ea3cce1c2b6d44ca984991e00fb939fdba85e0c669746880e85149e123cdc8d70a6ab07aacb86ff5045f31e53596164fb529b7326c7a0502610d9b805bb9e1a9da9ada97b59591b440b4fdfb5cd752f8ca6a9a2e796010080258b8b7d6c8911b4f3be74783dcec81a6d69ae360eb59a2025204859184254ef141ea51841374057d611abe38f96823642d709913e82ad3f6cbc8a7a3edb94e41b78ff3d5507d47147265cb5c1202935c70ce9f292311ffb7168a24858b5bfb6e48c196401fec7116961cf52af6f05ec259b59027d60a7ed02a1a8d595b772f7f8836177067f5ab7bebfcfbd606bfd34b990d1cbabbfbb9377550f30225658fddb87e23ce3f878da67a59aa8ff46df8a8b64f95d2ec43480ed8e38ce5b9e2aba577b225a222774a67ea254a7de5999f03bad383235d2ee0d1640eb123281933a87336642fb3bcca4732469c505ce696602ac010d60a7613d5ed2623d3a9db351ff527d42b1c7a4783a740e253c0e077533120fed30608a4bc24186f5496f77fa005b274773541b66aeb3d8299c47b64d7cb4b48d6ba54006f5e739922497201900dfe730b638b45ce54a3b8aa00951676791bdb7815d924c563ac06c560f4056385f1cd09901b770b13f2eaf74d2653d614b6cec8aab01e038d120c3e008aa405b40214949098e216badf0ba17e5c91f59dfd2cb4118c5932725df37f5e9a4fd8879f7c1942a798184ff2c04cf02f5e4c369cbd606985ed0faab8cbe68a51d0a2d89e755970c39df36d556529b08c669bc3f15dd1bf7eaae848fb8726813a48ebe3dada104ee844252378be82eb6aed6cf9d94edb03d72d4bcc2460c0970065af932c19fd376e614fa40952911773737fb0d6378d651934cd646eaa56bb41c9c99c1243cc9bdd130f6c9ec428c38cfbdfd2eae80a8d85f6e0211daafd9ec7dd71734ba601b7642f9b4af6292fb3fdb3b68e085b4b5e5c56af68821d19ba08986f2e30f1a40930285fadab30e3b2e29bdcfd6952b962331ec90f99836f1d9b1895c0653be23daf2e801d4c4b06a723eed1754e15fcbe648eadde6282f95bcd9e488491d27c3258a0cb973dba0582f2f7bfa727c8a02b425faea373784ba8eb9da60ecddddc4ddb9c832ba0e3c1d7e9132a5769c54c64ee94c80efaafc0a0e00beed2da62c4c66af996e443d18ee65486e2f80094960b0820ba76167ae3e87a47a5eb1da78e63907ea7a477b4542e90a81bff29fe06417f7d393331ef0b74c318ea32d6795a04b0811ef2aeec90f05b44839c1f35a0fb7cae781e1ec2ec41f7356f1537199cc657cd2827bd6e06e3342707328421b178cb3a1cc26ec9d20be91da8dd623377c5a5dffef04bd5ddfa325cc98f2d04f7adaeec4c771dffc7db3282a08e72e088fa199d0906923248ea8173e4e1083bf6363e1e8cf3b76e9479a8b4fbd0e95a78880433e251960c838e724318636009e855561e04789e031bfa88567db1753059bca24d72a08e6bc572fbc1b25cdc95878d6bdf299638dee34b7beec82c6cfd56e446044ea81a9b2e1d31d5a9ebfe8e7351209d6cf3d7c33028352d0d81751ad73da3206fad36626a1346c67e42a87e111450a028606f5e3ea6fe3281b975826ec9df73ea8f985a9f98da5fdcdc8fa738d8af98c91a7ad46dca3947285d7730848940a2d1f0dda0ad562f642f4964121d74f4a39a4d877e050648e4ba344c815920d91adf2514ffe0467e68ce7f15f09991fa73436c9ba2911fc3fcf8dbd2f99fd4c0be59eb3c45c354d711558b777c6e0df1f9bf27b18fd00fc7f3e72f880af35a65d969831de721922c5e42042b35b8d4dfb39b656eb0c78c26e17248550513197eb6cbafa982b5fd956453e6032e928cda6c5d0c24fd89618b91821798bed236bbebfd75e13e86073a4d64164168bcba73f4e3b12b13f6fbbc7a5a3abe7ac1cbf2eb34a9aedc452320f4d5354a16451a9d52c4e325820a56b1ecd54b1f84cbedb0d4cbc844313528b9288aeb7ec1e75d5da881e43e59fa80a3c931b63e546ea3d2457c0dec08bbc2501b4029f20d3b8ca9fa18e76ac088289ed44f4cf1f376aef29c481102dcad95af64e4e33252c2d99d134d10142074a35f699aa5f870f549121865f1582b92ed634699181173f41c8338dc77ad2887ba8946278ca41443c6da1a217d96b7730536cf266b513a82be95829cd74ceff20bafd53ca537a3fb5eb4dda4e63b4caafae9ef709f4d4db2c105cb2ee9ae705de78035f3c6c78b29ac29e472ef3e6ce70bd46f728a538ef5105548dfb5e476b82ebc361d4e71baf1c0ed56467abdafa1683fd4debb43a6d017e9f664d3acc9d7ce799da64a65a3d3e86710f3524eeaf506186349b1e0a71137ccda6b04a7287db1168155f6e8d4a62e62ac509b7f6c762c564db52f45b1a58e403e3953d01d31f0f05e9db543ca4bdfad18a74f4ad5d4ceef1c17f7cb0208c64e1afcb8704182acc8311d5966a11ca24c88a2e66bb4b84e023b452a4d3149a4e1db33dfc6c6f5cb348ca4104895fc34be5429b9185b7fb61eb8908b9fc28838697568a9fc9bbebceaf10372edab5a5cd974a7b0d72d3670737e555196d034f5d1f74a3f88cd6b6df6e1cb4299ec22737f5fb66a2e72c434f9d5c06a4235981aa5e90c247f0f7baffebc9ffa9546e85beabecbfc9c0508e48cff3a4983298fd17489bbb52a853cc84ab11d34c056bf4ecdb5a60d5562c66c32cd83a979f82fae54c41c174fd84b80979a7ae170b3ddcd23c9504c432e2fb8ff7b98975fa58f1923465d7cae766732a7b08773aa067d987a75e8e730164051e5c693e8cc89e5e83171fcccd2552c85bbc467377c96f0b89b1ae340e9a6693bd5531c9c1b4eff794acd6ce03f66345c1834f2847fbbd41be95ee81fe7818946e774b5971e8422a62fd73c937aa1841d8b6d05817f16707ad4b1866a85a9316e20ced535c4b084f86f2784bcd04bd195da0e234dc18b1a470e36e9a36a1bbbcfb38ffaddb68e09a6ac5bd76493b62c4e7b2062657f86fc7334c766a2dbf314b27e2427f03417057dde869618ec8e10b8b9c9a472ec7f8743af186ff701d47f25b8ba516a817318c51afb9e557db34946a225934b34a2a45992c7b45a8437e320f00925cd6f66c33315037e34c2fb5cecef1cc9095151667d6f69c01b2b50dfa707856bcb1a7b1e678edf4894b107e4baee8b10f98b9f714cf825c34ab7c85c44e8047648de8ecebc93061e8b68675880bd2a4a0571c27c61269a68ec4db5928aa9cd643836254a155a23b1b93d197279a4852af9616964cfbfd62787694e70733aa265d08487dcbe95d069f7ab0856f99f3e283cd7e052d080110df070899ad4d12038707f0a30fb234216b06960e7f05b57a04373b2c3c7fad515efc0126c4b060bab022707be65e89d70623e9aafffa48297159c8f73def285366d4523ff84360e1b3b432174593bf958f8c56d42750784fdea57a4e79725d166cdc742e7421c6390d681cdbd4a429feb346affe6e2dc8f04ba1458c2adf1e1ff1b3acbdfe9eb2a664d32e023da062b1eeaa06718295824b92c22d9c9ec1d35ec9ef77774178772348af1bb4dc511143c12230349f3de63e5e7fbbc5bf186e35361b9981f57fb55c1aaaa01db9fa784171662b5e83a3a31400e3fb4bdc58b420ae2cf7d6a573f386df78246529640bba3f9dc95d42b38a1dae167744078d87811539e15442b4dbbdb448ad65a9c9dedf24c56a4e5b208c4a4b72c53261a590c62fe32f3a7cf6411efbec89559f29f37698f904430f8b90c8c2b18988192176f07f60c6f08d0ce7ab85bc52088e306774107b817b8d9925a5cddc65d688390249dc313803cf6050261b379604a93f3fc35f984f49062637fc90f5c7d41f211a941c7277eb26507048039d21ad6a03487f9eca94b8499b2909c52ccba24d2f3762220bf1f8dd1e3aa8e3b9f3a9fe4e8bc8a6a5141be163c1bbd692d9615e08dc66fc04a062339fd0430544dbeef71f40518165d16840f74c55e13fc117e4b0968a04267425cf0bfa6fc5a895e1b4ba4d4d7bbeab43758e35031f996f4934abb04065ac238d9bc2faee9b9703531d37ef7047abbf695025697c04c060738813706d94002e92e8e7f6dfddadc7669813d0bc59f17a46c4c548f0a50272c6418c9c6bed3de00b76a9b1edd11b2f55616638167b3ff6269a70ff6b68f3c18f009f41367b29052eb8af9cbcbdce8f7598bc5a6d40623fa70984ea545d4653c28456909ebf60cf03f976e0e82f1171be22a8f820b8061d77e57e79e1a1cc946f8c8256bf43f0fa8cfbba8cdcbe07441145fcc4b6fe88e01959455e095e6df87d2c4b54e8a52ad3984db7acdf13e37ebe0587f78fad9c030e800c802be45ac0f6ce152f42052e13dff7039da1291f41feb8576275240aa806bb51479d21e34534a39819172ce335ecbbfcb18db23b4e4baa55ff817295e0b2cb81f1495e475cb26b7b7d159bd12db4d905718416b4ee2a6e0054e1d3cf5eb2369c0c07b3c8e993bf4c448ee951c81fcac84c2868c9779c3a5d36cc09b68b22bf00c75004485f36d2f8f74d505c8438db663ea3b416596b48ef6e660bd567605f44f9d82f7300e11b39827a407facbcad5a93d630e6abf2ec87cd2997c3a3ce8f8a4fa399b8998aefa99967817ef6aa84cd19ff9df3d5129ff3f6772ad56c882621505ab923edcc5a483690e8368caf79a96b7940e462a1ac5c1eb470e463e9ce75a43dd4ebb78ddf201c14022587395ef05493b915f82b0a1694ce0c99d65d6b200d62cdf4c18f1dffc9948126037514f5fa3b47259d43832f50bfbc410f27508da888109b9c9c4476bcfb9612f824429bc5069e3a3653d1bbccfe7b6d397eac156b62b3d7ccd2daf48a691847e52dbe210bc1b059aaae5e0c89c04d84954dadffdb5bc1d802bc47ea9d9c782d3426f5a9ef62e7179b6c6ec2793ef90fc5e46e44d243741489d17ec95d02762a6850584614c785f6e99904fbf5dc7bbab66171f64b38d8b3bced7f78e3ba6777df2a78317810bec90e0af117b014a77795812b742882e36f72d5b1e12a61a030042527c2de0e1938998688b4a5870327ed9634540dc8cfa4a6f6f84ceade154fe85d50af5dd34f46a9ea26c740c41a2f9d6ca7c8d1f6605d8584bd60c5e8bef726d217f80ccb6a1206077be2a6c81d614f5cba730f58994f92b99ed817f5da9fd94cdefd6ccc6b9f49a2244c066a87a9117820d2c7b9515f310468f0fdc21c9f3d308239b6847205d6852a3d79be63b04ea07f05ce3db4f59e4e366713b6b37371514a5f7d9d971013ad02477c003258dfffb8f6f34dba43ca06d7dbd8051026b49ef9dfc8f8f8523ee7d1d3bb20c1c4ec9efc544dd8806f9aa8e5497adf3e33da7139be1eb402505fe73ab644fd60e2aa9e2b4f918c591dffe0f3f86510613bb070f75a17dc994ccacbc5105726470790536a11ab0d811a19a4b01b2ee5f6afd48ae0c83a3ebf6b97937ec5667291c91e77e7a052f78bd8d18993c03ec24310ca1239c1c87ffa35601578a3e7e0be2b7f4cf36852b5ef57ee504fb2739efeaa10c90625ec403d0be14f15ad9c98ea3e79a7b2832b31a8232d18c2306008901ed26078856680df598a3b1afdbefa6bf2fca8508f9c84794384f474f3c1fad4772563a6794105534249217d9726dff7b2aac1eee2e79e2923bc6823cf3302132a7d229b7dfd8187f0979bb2a4da5372499550b455428cd0c52509ec6c3") recvmsg$kcm(0xffffffffffffffff, 0x0, 0x20) (async) sendmsg$inet(r3, &(0x7f00000007c0)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000900)=[{&(0x7f0000000080)="92", 0x1}], 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="2400000000000000840000000700000044140823e000000200000002e00000010000100000000000dc00000000000000000000000700000094040000863900000001000cb2ffb69602013567ffcb060f19367d2b99bdc0f59e428bc33a050a3660f2bb77c7045b050a31efe0215e235d56060495ae0144243471ac14142700000006ac1414bb00000001ac1414bb0000ffff0a01010200000009009404010000866000000000000c253d78b48f9458beb62d0102000d3bf9f2dbdddfea00b260f00503db010436b20603c70109e35e3ab5244a640709675e60e1799f870512e123b12c8654130f6a1f80f526064d12061127d9c9821b1bfe4b42fcb33e2e2d2594040000000000001400000000000000000000000200000022a20000000000001400000000000000000000000200000005000000000000001c"], 0x158}, 0x40) (async) setsockopt$sock_attach_bpf(r1, 0x1, 0xd, &(0x7f0000000080), 0x2cb) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x80000009}, [@call={0x85, 0x0, 0x0, 0x89}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r2) 1.052580894s ago: executing program 2 (id=2322): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000030000001800000002000004080000001300000002000000080000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) 905.366998ms ago: executing program 2 (id=2323): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xb, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa10000000000000701"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@base={0x19, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 654.272474ms ago: executing program 0 (id=2324): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f00000000c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x87}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0xd0ffffff}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0xfffffffc}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x9}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x7, 0x1, 0xb, 0x4, 0xa, 0x0, 0x600}, {}, {0x4, 0x0, 0x7}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x5, 0x1, 0x7, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 653.939744ms ago: executing program 2 (id=2325): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x1400, &(0x7f0000000080)=[{&(0x7f0000000040)="140000001d000b63d25a80648c2594f90524fc60", 0x14}], 0x1, 0x0, 0x0, 0x4000}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907003675f37538e486dd6317ce623900fe800000002000e0865a6596aff57b00000000000000000000000000ac1414"], 0xfe1b) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="850020000000000018100000", @ANYRES32, @ANYBLOB="1700000000000000950000000000000045"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27}]}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000b40)="a2", 0xfffffd2a}], 0x1, 0x0, 0x0, 0x20000000}, 0x4000041) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) socket$kcm(0x10, 0x0, 0x10) 447.59954ms ago: executing program 0 (id=2326): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x115905, 0x4, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0x1, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x7, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=r0], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000080)='./cgroup/cgroup.procs\x00') perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 0s ago: executing program 0 (id=2327): socket$kcm(0x10, 0x2, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0xc, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x1, 0x3ff}, 0x8000, 0x400000005, 0x43a1bd76, 0x7, 0x1, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x21, 0x2, 0x2) r2 = syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c80)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = perf_event_open(&(0x7f00000001c0)={0x4, 0x80, 0x0, 0xb, 0x6, 0xfd, 0x0, 0x9, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7, 0x4, @perf_bp={&(0x7f0000000040)}, 0x100411, 0x7fffffff, 0x1, 0x0, 0x919, 0x9, 0x4, 0x0, 0x6, 0x0, 0x80000000}, r2, 0x2, r0, 0x9) perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40024, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfd, 0x8}, 0x0, 0x4, 0x8, 0x6, 0x0, 0x0, 0x2, 0x0, 0x9, 0x0, 0x7}, r2, 0x5, r3, 0xa) socket$kcm(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x10002, 0x7c, 0x0, 0xa, 0x0, 0x0, 0x100, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x9080, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8953, &(0x7f0000000000)={'syzkaller1\x00', @multicast}) close(r6) setsockopt$sock_attach_bpf(r4, 0x6, 0x1e, &(0x7f0000000500)=r7, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x890b, 0x0) kernel console output (not intermixed with test programs): 3.599553][ T6070] veth1_macvtap: left promiscuous mode [ 353.610911][ T6070] macsec0: left promiscuous mode [ 353.660168][ T6070] veth1_macvtap: entered promiscuous mode [ 353.669184][ T6070] veth1_macvtap: entered allmulticast mode [ 353.676620][ T6070] macsec0: entered promiscuous mode [ 353.806001][ T6075] veth0_to_batadv: entered promiscuous mode [ 353.812116][ T6075] veth0_to_batadv: entered allmulticast mode [ 353.906662][ T6077] Illegal XDP return value 4294967294 on prog (id 16) dev N/A, expect packet loss! [ 353.992111][ T6079] veth1_macvtap: left promiscuous mode [ 353.997944][ T6079] macsec0: left promiscuous mode [ 356.139385][ T6104] veth1_macvtap: left allmulticast mode [ 356.145175][ T6104] veth1_macvtap: left promiscuous mode [ 356.150795][ T6104] macsec0: left promiscuous mode [ 356.459153][ T6113] veth1_macvtap: entered promiscuous mode [ 356.465065][ T6113] veth1_macvtap: entered allmulticast mode [ 356.484792][ T6113] macsec0: entered promiscuous mode [ 356.543907][ T6116] veth1_macvtap: entered promiscuous mode [ 356.553121][ T6116] macsec0: entered promiscuous mode [ 356.796881][ T6124] netlink: 'syz.3.88': attribute type 9 has an invalid length. [ 356.810763][ T6124] netlink: 61951 bytes leftover after parsing attributes in process `syz.3.88'. [ 356.822082][ T6124] netlink: 'syz.3.88': attribute type 16 has an invalid length. [ 356.834812][ T6124] netlink: 48 bytes leftover after parsing attributes in process `syz.3.88'. [ 356.947013][ T6126] veth1_macvtap: left allmulticast mode [ 356.953926][ T6126] veth1_macvtap: left promiscuous mode [ 356.960165][ T6126] macsec0: left promiscuous mode [ 357.641433][ T6151] veth1_macvtap: left promiscuous mode [ 357.651406][ T6151] macsec0: left promiscuous mode [ 357.859622][ T6152] netlink: 'syz.2.98': attribute type 39 has an invalid length. [ 358.008318][ T6152] hsr_slave_1 (unregistering): left promiscuous mode [ 358.063656][ T6163] veth1_macvtap: entered promiscuous mode [ 358.070312][ T6163] macsec0: entered promiscuous mode [ 358.330476][ T6170] Zero length message leads to an empty skb [ 358.557623][ T6176] netlink: 209832 bytes leftover after parsing attributes in process `syz.2.110'. [ 358.968901][ T6180] veth1_macvtap: left allmulticast mode [ 358.979638][ T6180] veth1_macvtap: left promiscuous mode [ 358.985442][ T6180] macsec0: left promiscuous mode [ 359.020850][ T6182] veth1_macvtap: left promiscuous mode [ 359.034254][ T6182] macsec0: left promiscuous mode [ 360.036151][ T6204] veth1_macvtap: entered promiscuous mode [ 360.042074][ T6204] macsec0: entered promiscuous mode [ 360.113166][ T6207] netlink: 140 bytes leftover after parsing attributes in process `syz.2.121'. [ 360.125084][ T6207] netlink: 10 bytes leftover after parsing attributes in process `syz.2.121'. [ 360.152477][ T6207] bond0: (slave bond_slave_0): Releasing backup interface [ 360.164598][ T6207] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 360.185425][ T6211] netlink: 22 bytes leftover after parsing attributes in process `syz.2.121'. [ 360.205000][ T6212] veth1_macvtap: entered promiscuous mode [ 360.213486][ T6212] veth1_macvtap: entered allmulticast mode [ 360.227950][ T6212] macsec0: entered promiscuous mode [ 360.406693][ T6216] netlink: 61967 bytes leftover after parsing attributes in process `syz.2.124'. [ 361.047239][ T6232] veth1_macvtap: left allmulticast mode [ 361.087517][ T6232] veth1_macvtap: left promiscuous mode [ 361.093062][ T6232] macsec0: left promiscuous mode [ 361.236030][ T6234] netlink: 'syz.2.133': attribute type 16 has an invalid length. [ 361.256004][ T6234] netlink: 48 bytes leftover after parsing attributes in process `syz.2.133'. [ 361.679940][ T6253] syz.2.138[6253] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 361.680569][ T6253] syz.2.138[6253] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 361.800853][ T6260] veth1_macvtap: entered promiscuous mode [ 361.835794][ T6260] veth1_macvtap: entered allmulticast mode [ 361.845909][ T6260] macsec0: entered promiscuous mode [ 361.896831][ T6262] veth1_macvtap: left promiscuous mode [ 361.914848][ T6262] macsec0: left promiscuous mode [ 362.528035][ T6276] netlink: 'syz.1.147': attribute type 39 has an invalid length. [ 363.121315][ T6305] veth1_macvtap: entered promiscuous mode [ 363.141106][ T6305] macsec0: entered promiscuous mode [ 363.234097][ T6308] veth1_macvtap: left allmulticast mode [ 363.256135][ T6308] veth1_macvtap: left promiscuous mode [ 363.283681][ T6308] macsec0: left promiscuous mode [ 363.302452][ T6311] veth1_macvtap: entered promiscuous mode [ 363.322256][ T6311] veth1_macvtap: entered allmulticast mode [ 363.335808][ T6311] macsec0: entered promiscuous mode [ 364.724457][ T6363] veth1_macvtap: left allmulticast mode [ 364.731711][ T6363] veth1_macvtap: left promiscuous mode [ 364.743719][ T6363] macsec0: left promiscuous mode [ 364.775820][ T6365] netlink: 'syz.2.181': attribute type 16 has an invalid length. [ 364.807424][ T6365] netlink: 48 bytes leftover after parsing attributes in process `syz.2.181'. [ 364.882865][ T6363] veth1_macvtap: entered promiscuous mode [ 364.889364][ T6363] veth1_macvtap: entered allmulticast mode [ 364.906238][ T6363] macsec0: entered promiscuous mode [ 365.064194][ T6372] veth1_macvtap: entered promiscuous mode [ 365.072759][ T6372] veth1_macvtap: entered allmulticast mode [ 365.082334][ T6372] macsec0: entered promiscuous mode [ 365.887362][ T6390] team0: Port device team_slave_0 removed [ 366.544116][ T6406] veth1_macvtap: left promiscuous mode [ 366.590803][ T6406] macsec0: left promiscuous mode [ 366.658328][ T6406] veth1_macvtap: entered promiscuous mode [ 366.664189][ T6406] macsec0: entered promiscuous mode [ 366.914539][ T6409] netlink: 'syz.3.199': attribute type 39 has an invalid length. [ 367.355966][ T6409] hsr_slave_1 (unregistering): left promiscuous mode [ 367.916288][ T6423] veth1_macvtap: left promiscuous mode [ 367.927683][ T6409] syz.3.199 (6409) used greatest stack depth: 19992 bytes left [ 367.955762][ T6423] macsec0: left promiscuous mode [ 369.055536][ T6446] veth1_macvtap: left promiscuous mode [ 369.075990][ T6446] macsec0: left promiscuous mode [ 369.100226][ T6449] veth1_macvtap: entered promiscuous mode [ 369.145532][ T6449] macsec0: entered promiscuous mode [ 370.574504][ T6489] veth1_macvtap: left promiscuous mode [ 370.597509][ T6489] macsec0: left promiscuous mode [ 370.656180][ T6494] veth1_macvtap: entered promiscuous mode [ 370.662053][ T6494] macsec0: entered promiscuous mode [ 370.970874][ T6499] netlink: 'syz.2.232': attribute type 16 has an invalid length. [ 370.980415][ T6499] netlink: 48 bytes leftover after parsing attributes in process `syz.2.232'. [ 371.062398][ T6504] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 371.606425][ T6521] veth1_macvtap: left allmulticast mode [ 371.624615][ T6521] veth1_macvtap: left promiscuous mode [ 371.636807][ T6521] macsec0: left promiscuous mode [ 371.723201][ T6526] veth1_macvtap: entered promiscuous mode [ 371.740512][ T6526] veth1_macvtap: entered allmulticast mode [ 371.763428][ T6526] macsec0: entered promiscuous mode [ 371.898023][ T6533] netlink: 'syz.2.246': attribute type 21 has an invalid length. [ 371.906619][ T6533] netlink: 132 bytes leftover after parsing attributes in process `syz.2.246'. [ 371.918276][ T6524] netlink: 12 bytes leftover after parsing attributes in process `syz.1.243'. [ 371.976388][ T6524] netlink: 152 bytes leftover after parsing attributes in process `syz.1.243'. [ 372.104910][ T6530] netlink: 'syz.3.245': attribute type 39 has an invalid length. [ 372.303455][ T6539] veth0_macvtap: entered allmulticast mode [ 372.415533][ T6542] veth1_macvtap: left promiscuous mode [ 372.438117][ T6542] macsec0: left promiscuous mode [ 372.594557][ T6547] FAULT_INJECTION: forcing a failure. [ 372.594557][ T6547] name failslab, interval 1, probability 0, space 0, times 1 [ 372.625881][ T6547] CPU: 1 PID: 6547 Comm: syz.0.251 Not tainted syzkaller #0 [ 372.633261][ T6547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 372.643371][ T6547] Call Trace: [ 372.646707][ T6547] [ 372.649695][ T6547] dump_stack_lvl+0x18c/0x250 [ 372.654580][ T6547] ? show_regs_print_info+0x20/0x20 [ 372.659927][ T6547] ? load_image+0x420/0x420 [ 372.664555][ T6547] ? __might_sleep+0xe0/0xe0 [ 372.669269][ T6547] ? __lock_acquire+0x7d80/0x7d80 [ 372.674394][ T6547] should_fail_ex+0x394/0x4c0 [ 372.679181][ T6547] should_failslab+0x9/0x20 [ 372.683776][ T6547] slab_pre_alloc_hook+0x59/0x300 [ 372.688913][ T6547] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 372.694734][ T6547] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 372.700548][ T6547] __kmem_cache_alloc_node+0x53/0x250 [ 372.706003][ T6547] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 372.711799][ T6547] __kmalloc+0xa7/0x240 [ 372.716043][ T6547] tomoyo_realpath_from_path+0xe6/0x5c0 [ 372.721661][ T6547] ? tomoyo_domain+0xd6/0x120 [ 372.726431][ T6547] tomoyo_path_number_perm+0x248/0x5e0 [ 372.731955][ T6547] ? tomoyo_path_number_perm+0x217/0x5e0 [ 372.737639][ T6547] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 372.743132][ T6547] ? ksys_write+0x1d2/0x260 [ 372.747750][ T6547] ? __fget_files+0x28/0x460 [ 372.752416][ T6547] security_file_ioctl+0x70/0xa0 [ 372.757399][ T6547] __se_sys_ioctl+0x48/0x170 [ 372.762016][ T6547] do_syscall_64+0x55/0xb0 [ 372.766602][ T6547] ? clear_bhb_loop+0x40/0x90 [ 372.771347][ T6547] ? clear_bhb_loop+0x40/0x90 [ 372.776059][ T6547] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 372.781986][ T6547] RIP: 0033:0x7faabd39e0d9 [ 372.786426][ T6547] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 372.806143][ T6547] RSP: 002b:00007faabe228028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 372.814580][ T6547] RAX: ffffffffffffffda RBX: 00007faabd625fa0 RCX: 00007faabd39e0d9 [ 372.822570][ T6547] RDX: 0000200000000040 RSI: 0000000000008914 RDI: 0000000000000005 [ 372.830561][ T6547] RBP: 00007faabe228090 R08: 0000000000000000 R09: 0000000000000000 [ 372.838549][ T6547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 372.846536][ T6547] R13: 00007faabd626038 R14: 00007faabd625fa0 R15: 00007ffeab475198 [ 372.854557][ T6547] [ 372.860290][ T6549] veth1_macvtap: left allmulticast mode [ 372.866495][ T6549] veth1_macvtap: left promiscuous mode [ 372.875956][ T6549] macsec0: left promiscuous mode [ 372.924909][ T6547] ERROR: Out of memory at tomoyo_realpath_from_path. [ 372.946345][ T6547] veth1_macvtap: left allmulticast mode [ 372.956162][ T6547] veth1_macvtap: left promiscuous mode [ 372.963886][ T6547] macsec0: left promiscuous mode [ 373.297582][ T6558] veth1_macvtap: entered promiscuous mode [ 373.314249][ T6558] macsec0: entered promiscuous mode [ 373.398143][ T6566] veth1_macvtap: entered promiscuous mode [ 373.404533][ T6566] macsec0: entered promiscuous mode [ 373.489856][ T6569] netlink: 'syz.0.259': attribute type 21 has an invalid length. [ 373.524055][ T6569] netlink: 'syz.0.259': attribute type 21 has an invalid length. [ 373.556282][ T6569] netlink: 'syz.0.259': attribute type 21 has an invalid length. [ 373.571751][ T6569] netlink: 'syz.0.259': attribute type 21 has an invalid length. [ 373.606395][ T6569] netlink: 'syz.0.259': attribute type 21 has an invalid length. [ 373.626046][ T6569] netlink: 'syz.0.259': attribute type 21 has an invalid length. [ 373.650055][ T6569] netlink: 'syz.0.259': attribute type 21 has an invalid length. [ 374.294032][ T6596] veth1_macvtap: left promiscuous mode [ 374.308962][ T6596] macsec0: left promiscuous mode [ 374.345352][ T6596] veth1_macvtap: entered promiscuous mode [ 374.351468][ T6596] macsec0: entered promiscuous mode [ 374.918171][ T6614] netlink: 40227 bytes leftover after parsing attributes in process `syz.0.274'. [ 375.106510][ T6621] netlink: 16126 bytes leftover after parsing attributes in process `syz.1.277'. [ 375.232437][ T6623] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 375.276114][ T6623] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 375.307480][ T6627] netlink: 48 bytes leftover after parsing attributes in process `syz.3.278'. [ 375.422341][ T6630] veth1_macvtap: entered promiscuous mode [ 375.431184][ T6630] veth1_macvtap: entered allmulticast mode [ 375.440216][ T6630] macsec0: entered promiscuous mode [ 376.085004][ T6651] veth1_macvtap: left allmulticast mode [ 376.092584][ T6651] veth1_macvtap: left promiscuous mode [ 376.105097][ T6651] macsec0: left promiscuous mode [ 376.127538][ T6651] veth1_macvtap: entered promiscuous mode [ 376.133349][ T6651] veth1_macvtap: entered allmulticast mode [ 376.162516][ T6651] macsec0: entered promiscuous mode [ 376.559216][ T6659] validate_nla: 28 callbacks suppressed [ 376.559255][ T6659] netlink: 'syz.2.293': attribute type 39 has an invalid length. [ 376.598656][ T6669] veth1_macvtap: left promiscuous mode [ 376.607965][ T6669] macsec0: left promiscuous mode [ 376.866984][ T6679] FAULT_INJECTION: forcing a failure. [ 376.866984][ T6679] name failslab, interval 1, probability 0, space 0, times 0 [ 376.899279][ T6677] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 376.924968][ T6679] CPU: 0 PID: 6679 Comm: syz.3.299 Not tainted syzkaller #0 [ 376.932359][ T6679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 376.942466][ T6679] Call Trace: [ 376.945801][ T6679] [ 376.948775][ T6679] dump_stack_lvl+0x18c/0x250 [ 376.953609][ T6679] ? show_regs_print_info+0x20/0x20 [ 376.958864][ T6679] ? load_image+0x420/0x420 [ 376.963440][ T6679] ? __might_sleep+0xe0/0xe0 [ 376.968098][ T6679] ? __lock_acquire+0x7d80/0x7d80 [ 376.973189][ T6679] should_fail_ex+0x394/0x4c0 [ 376.978025][ T6679] should_failslab+0x9/0x20 [ 376.982583][ T6679] slab_pre_alloc_hook+0x59/0x300 [ 376.987671][ T6679] ? tomoyo_encode+0x2ad/0x570 [ 376.992502][ T6679] ? tomoyo_encode+0x2ad/0x570 [ 376.997319][ T6679] __kmem_cache_alloc_node+0x53/0x250 [ 377.002779][ T6679] ? tomoyo_encode+0x2ad/0x570 [ 377.007615][ T6679] __kmalloc+0xa7/0x240 [ 377.011845][ T6679] tomoyo_encode+0x2ad/0x570 [ 377.016519][ T6679] tomoyo_realpath_from_path+0x57c/0x5c0 [ 377.022251][ T6679] ? tomoyo_domain+0xd6/0x120 [ 377.026987][ T6679] tomoyo_path_number_perm+0x248/0x5e0 [ 377.032480][ T6679] ? tomoyo_path_number_perm+0x217/0x5e0 [ 377.038230][ T6679] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 377.043741][ T6679] ? ksys_write+0x1d2/0x260 [ 377.048425][ T6679] ? __fget_files+0x28/0x460 [ 377.053068][ T6679] security_file_ioctl+0x70/0xa0 [ 377.058060][ T6679] __se_sys_ioctl+0x48/0x170 [ 377.062681][ T6679] do_syscall_64+0x55/0xb0 [ 377.067127][ T6679] ? clear_bhb_loop+0x40/0x90 [ 377.071824][ T6679] ? clear_bhb_loop+0x40/0x90 [ 377.076530][ T6679] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 377.082466][ T6679] RIP: 0033:0x7fe23bf9e0d9 [ 377.086925][ T6679] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 377.106641][ T6679] RSP: 002b:00007fe23cf37028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 377.115086][ T6679] RAX: ffffffffffffffda RBX: 00007fe23c225fa0 RCX: 00007fe23bf9e0d9 [ 377.123074][ T6679] RDX: 0000200000000040 RSI: 0000000000008914 RDI: 0000000000000005 [ 377.131067][ T6679] RBP: 00007fe23cf37090 R08: 0000000000000000 R09: 0000000000000000 [ 377.139061][ T6679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 377.147052][ T6679] R13: 00007fe23c226038 R14: 00007fe23c225fa0 R15: 00007fffec675f18 [ 377.155329][ T6679] [ 377.252226][ T6683] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.300'. [ 377.266030][ T6679] ERROR: Out of memory at tomoyo_realpath_from_path. [ 377.286618][ T6683] netlink: 6320 bytes leftover after parsing attributes in process `syz.1.300'. [ 377.312447][ T6682] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.300'. [ 377.351960][ T6682] netlink: 6320 bytes leftover after parsing attributes in process `syz.1.300'. [ 377.595553][ T6687] veth1_macvtap: entered promiscuous mode [ 377.646432][ T6687] macsec0: entered promiscuous mode [ 378.984041][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.991822][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.169720][ T6708] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.309'. [ 380.404906][ T6722] veth1_macvtap: left allmulticast mode [ 380.426970][ T6722] veth1_macvtap: left promiscuous mode [ 380.432514][ T6722] macsec0: left promiscuous mode [ 380.485891][ T6723] veth1_macvtap: entered promiscuous mode [ 380.514653][ T6723] veth1_macvtap: entered allmulticast mode [ 380.541211][ T6723] macsec0: entered promiscuous mode [ 380.779697][ T6731] veth1_macvtap: entered promiscuous mode [ 380.786699][ T6731] veth1_macvtap: entered allmulticast mode [ 380.793635][ T6731] macsec0: entered promiscuous mode [ 381.758027][ T6755] netlink: 'syz.1.326': attribute type 16 has an invalid length. [ 381.776546][ T6755] netlink: 48 bytes leftover after parsing attributes in process `syz.1.326'. [ 382.272458][ T6765] veth1_macvtap: left allmulticast mode [ 382.297479][ T6765] veth1_macvtap: left promiscuous mode [ 382.315412][ T6765] macsec0: left promiscuous mode [ 382.354073][ T6772] veth1_macvtap: entered promiscuous mode [ 382.377383][ T6772] veth1_macvtap: entered allmulticast mode [ 382.383279][ T6772] macsec0: entered promiscuous mode [ 382.812102][ T6784] veth1_macvtap: left promiscuous mode [ 382.820709][ T6784] macsec0: left promiscuous mode [ 382.921579][ T6790] netlink: 'syz.3.341': attribute type 39 has an invalid length. [ 382.956451][ T6792] delete_channel: no stack [ 383.011618][ T6798] veth1_macvtap: left allmulticast mode [ 383.026934][ T6798] veth1_macvtap: left promiscuous mode [ 383.032483][ T6798] macsec0: left promiscuous mode [ 383.052833][ T6799] FAULT_INJECTION: forcing a failure. [ 383.052833][ T6799] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 383.105997][ T6799] CPU: 1 PID: 6799 Comm: syz.1.344 Not tainted syzkaller #0 [ 383.113475][ T6799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 383.123589][ T6799] Call Trace: [ 383.126934][ T6799] [ 383.129907][ T6799] dump_stack_lvl+0x18c/0x250 [ 383.134654][ T6799] ? show_regs_print_info+0x20/0x20 [ 383.139902][ T6799] ? load_image+0x420/0x420 [ 383.144474][ T6799] ? __might_fault+0xaa/0x120 [ 383.149296][ T6799] ? __lock_acquire+0x7d80/0x7d80 [ 383.154374][ T6799] ? unix_ioctl+0x259/0x6b0 [ 383.159015][ T6799] should_fail_ex+0x394/0x4c0 [ 383.163763][ T6799] _copy_from_user+0x2f/0xe0 [ 383.168411][ T6799] sock_do_ioctl+0x190/0x310 [ 383.173245][ T6799] ? sock_show_fdinfo+0xb0/0xb0 [ 383.178186][ T6799] sock_ioctl+0x5be/0x7e0 [ 383.182561][ T6799] ? sock_poll+0x3e0/0x3e0 [ 383.187028][ T6799] ? bpf_lsm_file_ioctl+0x9/0x10 [ 383.192023][ T6799] ? security_file_ioctl+0x80/0xa0 [ 383.197166][ T6799] ? sock_poll+0x3e0/0x3e0 [ 383.201611][ T6799] __se_sys_ioctl+0xfd/0x170 [ 383.206231][ T6799] do_syscall_64+0x55/0xb0 [ 383.210667][ T6799] ? clear_bhb_loop+0x40/0x90 [ 383.215369][ T6799] ? clear_bhb_loop+0x40/0x90 [ 383.220095][ T6799] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 383.226014][ T6799] RIP: 0033:0x7f782359e0d9 [ 383.230537][ T6799] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 383.250187][ T6799] RSP: 002b:00007f782454a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 383.258642][ T6799] RAX: ffffffffffffffda RBX: 00007f7823825fa0 RCX: 00007f782359e0d9 [ 383.266679][ T6799] RDX: 0000200000000040 RSI: 0000000000008914 RDI: 0000000000000005 [ 383.274675][ T6799] RBP: 00007f782454a090 R08: 0000000000000000 R09: 0000000000000000 [ 383.282669][ T6799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 383.290662][ T6799] R13: 00007f7823826038 R14: 00007f7823825fa0 R15: 00007ffe781f31d8 [ 383.298685][ T6799] [ 384.515383][ T6838] veth1_macvtap: left promiscuous mode [ 384.547909][ T6838] macsec0: left promiscuous mode [ 384.629553][ T6838] veth1_macvtap: entered promiscuous mode [ 384.645364][ T6838] macsec0: entered promiscuous mode [ 384.930716][ T6843] veth1_macvtap: entered promiscuous mode [ 384.952396][ T6843] veth1_macvtap: entered allmulticast mode [ 384.971326][ T6843] macsec0: entered promiscuous mode [ 385.736028][ T6888] veth1_macvtap: entered promiscuous mode [ 385.765368][ T6888] macsec0: entered promiscuous mode [ 386.391906][ T6917] veth1_macvtap: left promiscuous mode [ 386.412704][ T6917] macsec0: left promiscuous mode [ 386.787126][ T6928] netlink: 'syz.3.387': attribute type 39 has an invalid length. [ 387.656107][ T6936] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.390'. [ 387.676853][ T6936] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.390'. [ 387.691865][ T6933] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.390'. [ 387.713190][ T6939] FAULT_INJECTION: forcing a failure. [ 387.713190][ T6939] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 387.713612][ T6936] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.390'. [ 387.805048][ T6939] CPU: 1 PID: 6939 Comm: syz.3.391 Not tainted syzkaller #0 [ 387.812437][ T6939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 387.822810][ T6939] Call Trace: [ 387.826147][ T6939] [ 387.829133][ T6939] dump_stack_lvl+0x18c/0x250 [ 387.833882][ T6939] ? show_regs_print_info+0x20/0x20 [ 387.839247][ T6939] ? load_image+0x420/0x420 [ 387.843825][ T6939] ? __lock_acquire+0x7d80/0x7d80 [ 387.848905][ T6939] ? snprintf+0xe9/0x140 [ 387.853241][ T6939] should_fail_ex+0x394/0x4c0 [ 387.857989][ T6939] _copy_to_user+0x2f/0xa0 [ 387.862464][ T6939] simple_read_from_buffer+0xe7/0x150 [ 387.867904][ T6939] proc_fail_nth_read+0x1e8/0x260 [ 387.873040][ T6939] ? proc_fault_inject_write+0x360/0x360 [ 387.878735][ T6939] ? fsnotify_perm+0x271/0x5e0 [ 387.883555][ T6939] ? proc_fault_inject_write+0x360/0x360 [ 387.889079][ T6933] netlink: 'syz.1.390': attribute type 10 has an invalid length. [ 387.889237][ T6939] vfs_read+0x298/0x990 [ 387.889314][ T6939] ? kernel_read+0x1e0/0x1e0 [ 387.889352][ T6939] ? __fget_files+0x28/0x460 [ 387.889386][ T6939] ? __fget_files+0x3fc/0x460 [ 387.889436][ T6939] ? __fdget_pos+0x2a3/0x330 [ 387.889463][ T6939] ? ksys_read+0x74/0x260 [ 387.889501][ T6939] ksys_read+0x151/0x260 [ 387.889539][ T6939] ? vfs_write+0x9a0/0x9a0 [ 387.889578][ T6939] ? lockdep_hardirqs_on+0x98/0x150 [ 387.906494][ T6933] netlink: 40 bytes leftover after parsing attributes in process `syz.1.390'. [ 387.910671][ T6939] do_syscall_64+0x55/0xb0 [ 387.910702][ T6939] ? clear_bhb_loop+0x40/0x90 [ 387.910725][ T6939] ? clear_bhb_loop+0x40/0x90 [ 387.910755][ T6939] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 387.910779][ T6939] RIP: 0033:0x7fe23bf5e90e [ 387.910803][ T6939] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 387.910822][ T6939] RSP: 002b:00007fe23cf36fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 387.910848][ T6939] RAX: ffffffffffffffda RBX: 00007fe23cf376c0 RCX: 00007fe23bf5e90e [ 387.910865][ T6939] RDX: 000000000000000f RSI: 00007fe23cf370a0 RDI: 0000000000000006 [ 387.910880][ T6939] RBP: 00007fe23cf37090 R08: 0000000000000000 R09: 0000000000000000 [ 387.910894][ T6939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 387.910909][ T6939] R13: 00007fe23c226038 R14: 00007fe23c225fa0 R15: 00007fffec675f18 [ 387.910963][ T6939] [ 388.118221][ T6933] batman_adv: batadv0: Adding interface: veth1_virt_wifi [ 388.134369][ T6933] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 388.174982][ T6933] batman_adv: batadv0: Interface activated: veth1_virt_wifi [ 388.249316][ T6944] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.393'. [ 388.270886][ T6944] openvswitch: netlink: Geneve opt len 5 is not a multiple of 4. [ 388.472524][ T6952] veth1_macvtap: left allmulticast mode [ 388.494771][ T6952] veth1_macvtap: left promiscuous mode [ 388.531569][ T6952] macsec0: left promiscuous mode [ 388.601340][ T6956] veth1_macvtap: entered promiscuous mode [ 388.639393][ T6956] veth1_macvtap: entered allmulticast mode [ 388.645475][ T6956] macsec0: entered promiscuous mode [ 388.843387][ T6966] syz.1.402 uses obsolete (PF_INET,SOCK_PACKET) [ 390.543921][ T7004] veth1_macvtap: entered promiscuous mode [ 390.576009][ T7004] macsec0: entered promiscuous mode [ 392.101911][ T7038] veth1_macvtap: left allmulticast mode [ 392.113321][ T7038] veth1_macvtap: left promiscuous mode [ 392.126792][ T7038] macsec0: left promiscuous mode [ 392.159421][ T7041] veth1_macvtap: entered promiscuous mode [ 392.229863][ T7041] veth1_macvtap: entered allmulticast mode [ 392.249895][ T7041] macsec0: entered promiscuous mode [ 392.257643][ T7044] veth1_macvtap: left promiscuous mode [ 392.263518][ T7044] macsec0: left promiscuous mode [ 392.565173][ T7050] netlink: 'syz.3.432': attribute type 39 has an invalid length. [ 393.061630][ T7061] netlink: 'syz.2.437': attribute type 2 has an invalid length. [ 393.076093][ T7061] netlink: 17267 bytes leftover after parsing attributes in process `syz.2.437'. [ 393.664366][ T7063] veth1_macvtap: left promiscuous mode [ 393.700988][ T7063] macsec0: left promiscuous mode [ 393.913116][ T7065] syzkaller0: entered promiscuous mode [ 393.946172][ T7065] syzkaller0: entered allmulticast mode [ 396.410390][ T7085] veth1_macvtap: left allmulticast mode [ 396.418939][ T7085] veth1_macvtap: left promiscuous mode [ 396.424509][ T7085] macsec0: left promiscuous mode [ 396.434010][ T7090] veth1_macvtap: entered promiscuous mode [ 396.440180][ T7090] veth1_macvtap: entered allmulticast mode [ 396.448042][ T7090] macsec0: entered promiscuous mode [ 396.633758][ T7105] veth1_macvtap: entered promiscuous mode [ 396.653798][ T7105] macsec0: entered promiscuous mode [ 396.729623][ T7109] netlink: 208064 bytes leftover after parsing attributes in process `syz.3.453'. [ 396.753480][ T7109] netlink: 'syz.3.453': attribute type 21 has an invalid length. [ 396.965887][ T7117] netlink: 'syz.3.458': attribute type 16 has an invalid length. [ 396.992693][ T7117] netlink: 48 bytes leftover after parsing attributes in process `syz.3.458'. [ 397.416189][ T7131] veth1_macvtap: left promiscuous mode [ 397.421741][ T7131] macsec0: left promiscuous mode [ 397.478604][ T7133] veth1_macvtap: entered promiscuous mode [ 397.484484][ T7133] macsec0: entered promiscuous mode [ 397.752772][ T7143] netlink: 188 bytes leftover after parsing attributes in process `syz.2.468'. [ 397.785018][ T7147] netlink: 132 bytes leftover after parsing attributes in process `syz.3.471'. [ 398.020684][ T7154] netlink: 'syz.2.474': attribute type 39 has an invalid length. [ 398.487461][ T7169] netlink: 'syz.1.482': attribute type 10 has an invalid length. [ 399.051033][ T7188] veth1_macvtap: left promiscuous mode [ 399.059355][ T7188] macsec0: left promiscuous mode [ 399.074695][ T7189] netlink: 'syz.0.488': attribute type 10 has an invalid length. [ 399.092609][ T7189] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.488'. [ 399.102418][ T7188] veth1_macvtap: entered promiscuous mode [ 399.111058][ T7188] macsec0: entered promiscuous mode [ 399.379726][ T7198] veth1_macvtap: left allmulticast mode [ 399.391399][ T7198] veth1_macvtap: left promiscuous mode [ 399.410576][ T7198] macsec0: left promiscuous mode [ 400.501529][ T7213] delete_channel: no stack [ 400.510409][ T7218] delete_channel: no stack [ 400.515065][ T7218] delete_channel: no stack [ 400.532487][ T7213] delete_channel: no stack [ 400.552710][ T7214] netlink: 'syz.3.498': attribute type 17 has an invalid length. [ 400.574776][ T7214] netlink: 152 bytes leftover after parsing attributes in process `syz.3.498'. [ 400.623533][ T7214] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 400.650598][ T7221] netlink: 'syz.0.500': attribute type 16 has an invalid length. [ 400.666783][ T7221] netlink: 48 bytes leftover after parsing attributes in process `syz.0.500'. [ 400.696868][ T7221] veth1_macvtap: entered allmulticast mode [ 400.907202][ T7233] veth1_macvtap: entered promiscuous mode [ 400.939403][ T7233] macsec0: entered promiscuous mode [ 401.327845][ T7242] netlink: 'syz.1.510': attribute type 10 has an invalid length. [ 401.368778][ T7242] mac80211_hwsim hwsim3 wlan1: left promiscuous mode [ 401.381521][ T7242] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 401.417274][ T7242] team0: Port device wlan1 added [ 401.973377][ T7258] netlink: 'syz.3.515': attribute type 39 has an invalid length. [ 402.297033][ T7270] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.520'. [ 402.397170][ T7270] netlink: 'syz.1.520': attribute type 1 has an invalid length. [ 402.422694][ T7270] netlink: 16520 bytes leftover after parsing attributes in process `syz.1.520'. [ 402.516219][ T7277] veth1_macvtap: left promiscuous mode [ 402.521897][ T7277] macsec0: left promiscuous mode [ 402.560636][ T7279] netlink: 'syz.1.524': attribute type 4 has an invalid length. [ 402.588201][ T7279] netlink: 152 bytes leftover after parsing attributes in process `syz.1.524'. [ 402.648816][ T7283] netlink: 10 bytes leftover after parsing attributes in process `syz.2.526'. [ 402.663828][ T7283] netlink: 10 bytes leftover after parsing attributes in process `syz.2.526'. [ 402.685487][ T7277] veth1_macvtap: entered promiscuous mode [ 402.694710][ T7277] macsec0: entered promiscuous mode [ 402.704927][ T7285] veth1_macvtap: entered promiscuous mode [ 402.735964][ T7285] macsec0: entered promiscuous mode [ 403.109283][ T7297] syzkaller0: entered promiscuous mode [ 403.114835][ T7297] syzkaller0: entered allmulticast mode [ 403.446107][ T7303] netlink: 188 bytes leftover after parsing attributes in process `syz.3.533'. [ 404.794437][ T7328] veth1_macvtap: left promiscuous mode [ 404.816008][ T7328] macsec0: left promiscuous mode [ 404.835616][ T7328] veth1_macvtap: entered promiscuous mode [ 404.869549][ T7328] macsec0: entered promiscuous mode [ 404.892521][ T7324] netlink: 'syz.3.542': attribute type 15 has an invalid length. [ 404.927487][ T7327] netlink: 'syz.3.542': attribute type 16 has an invalid length. [ 404.935296][ T7327] netlink: 48 bytes leftover after parsing attributes in process `syz.3.542'. [ 405.027131][ T7333] can: request_module (can-proto-0) failed. [ 406.518331][ T7363] netlink: 'syz.2.557': attribute type 39 has an invalid length. [ 406.988524][ T7383] veth1_macvtap: left promiscuous mode [ 406.994117][ T7383] macsec0: left promiscuous mode [ 407.016924][ T7383] veth1_macvtap: entered promiscuous mode [ 407.047860][ T7383] macsec0: entered promiscuous mode [ 407.065092][ T7384] veth1_macvtap: left promiscuous mode [ 407.085045][ T7384] macsec0: left promiscuous mode [ 407.941107][ T7407] veth1_macvtap: entered promiscuous mode [ 407.958925][ T7407] macsec0: entered promiscuous mode [ 408.108967][ T7411] veth1_macvtap: left promiscuous mode [ 408.114536][ T7411] macsec0: left promiscuous mode [ 408.426239][ T7422] veth1_macvtap: entered promiscuous mode [ 408.446114][ T7422] macsec0: entered promiscuous mode [ 409.127327][ T7447] netlink: 'syz.3.590': attribute type 21 has an invalid length. [ 409.142569][ T7447] netlink: 156 bytes leftover after parsing attributes in process `syz.3.590'. [ 410.125977][ T7473] netlink: 'syz.1.601': attribute type 11 has an invalid length. [ 410.377648][ T7480] veth1_macvtap: left promiscuous mode [ 410.412358][ T7480] macsec0: left promiscuous mode [ 410.442482][ T7481] veth1_macvtap: entered promiscuous mode [ 410.491479][ T7481] macsec0: entered promiscuous mode [ 410.589974][ T7482] netlink: 'syz.0.603': attribute type 39 has an invalid length. [ 410.790931][ T7482] hsr_slave_1 (unregistering): left promiscuous mode [ 412.888427][ T7520] veth1_macvtap: left promiscuous mode [ 412.896533][ T7520] macsec0: left promiscuous mode [ 412.964668][ T7521] veth1_macvtap: entered promiscuous mode [ 412.986153][ T7521] macsec0: entered promiscuous mode [ 413.502949][ T7530] syz.3.619: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 413.528992][ T7530] CPU: 0 PID: 7530 Comm: syz.3.619 Not tainted syzkaller #0 [ 413.536407][ T7530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 413.546531][ T7530] Call Trace: [ 413.549840][ T7530] [ 413.552819][ T7530] dump_stack_lvl+0x18c/0x250 [ 413.557571][ T7530] ? show_regs_print_info+0x20/0x20 [ 413.562802][ T7530] ? load_image+0x420/0x420 [ 413.567346][ T7530] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 413.573837][ T7530] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 413.580382][ T7530] warn_alloc+0x246/0x340 [ 413.584738][ T7530] ? stack_trace_save+0xaa/0x100 [ 413.589715][ T7530] ? zone_watermark_ok_safe+0x230/0x230 [ 413.595304][ T7530] ? kasan_set_track+0x5f/0x70 [ 413.600093][ T7530] ? kasan_set_track+0x4e/0x70 [ 413.604883][ T7530] ? __kasan_kmalloc+0x8f/0xa0 [ 413.609672][ T7530] ? xsk_init_queue+0xad/0x100 [ 413.614545][ T7530] ? xsk_setsockopt+0x4c9/0x750 [ 413.619425][ T7530] ? do_sock_setsockopt+0x175/0x1a0 [ 413.624649][ T7530] ? __x64_sys_setsockopt+0x182/0x200 [ 413.630058][ T7530] __vmalloc_node_range+0x129/0x1320 [ 413.635463][ T7530] ? free_vm_area+0x50/0x50 [ 413.640022][ T7530] vmalloc_user+0x74/0x80 [ 413.644386][ T7530] ? xskq_create+0xbf/0x170 [ 413.648921][ T7530] xskq_create+0xbf/0x170 [ 413.653293][ T7530] xsk_init_queue+0xad/0x100 [ 413.657933][ T7530] xsk_setsockopt+0x4c9/0x750 [ 413.662647][ T7530] ? xsk_poll+0x670/0x670 [ 413.667016][ T7530] ? __fget_files+0x28/0x460 [ 413.671641][ T7530] ? aa_sock_opt_perm+0x74/0x100 [ 413.676608][ T7530] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 413.682178][ T7530] ? security_socket_setsockopt+0x7e/0xa0 [ 413.687932][ T7530] ? xsk_poll+0x670/0x670 [ 413.692295][ T7530] do_sock_setsockopt+0x175/0x1a0 [ 413.697435][ T7530] ? __fdget+0x180/0x210 [ 413.701711][ T7530] __x64_sys_setsockopt+0x182/0x200 [ 413.706950][ T7530] do_syscall_64+0x55/0xb0 [ 413.711392][ T7530] ? clear_bhb_loop+0x40/0x90 [ 413.716091][ T7530] ? clear_bhb_loop+0x40/0x90 [ 413.720795][ T7530] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 413.726713][ T7530] RIP: 0033:0x7fe23bf9e0d9 [ 413.731158][ T7530] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 413.750890][ T7530] RSP: 002b:00007fe23cf37028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 413.759340][ T7530] RAX: ffffffffffffffda RBX: 00007fe23c225fa0 RCX: 00007fe23bf9e0d9 [ 413.767354][ T7530] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000006 [ 413.775354][ T7530] RBP: 00007fe23c035024 R08: 0000000000000004 R09: 0000000000000000 [ 413.783369][ T7530] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 413.791396][ T7530] R13: 00007fe23c226038 R14: 00007fe23c225fa0 R15: 00007fffec675f18 [ 413.799432][ T7530] [ 413.848117][ T7530] Mem-Info: [ 413.851321][ T7530] active_anon:14563 inactive_anon:0 isolated_anon:0 [ 413.851321][ T7530] active_file:12088 inactive_file:39986 isolated_file:0 [ 413.851321][ T7530] unevictable:768 dirty:39 writeback:0 [ 413.851321][ T7530] slab_reclaimable:10111 slab_unreclaimable:91150 [ 413.851321][ T7530] mapped:33116 shmem:10507 pagetables:563 [ 413.851321][ T7530] sec_pagetables:0 bounce:0 [ 413.851321][ T7530] kernel_misc_reclaimable:0 [ 413.851321][ T7530] free:1346375 free_pcp:7031 free_cma:0 [ 413.901071][ C0] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 413.936912][ T7530] Node 0 active_anon:58152kB inactive_anon:0kB active_file:48352kB inactive_file:159744kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:132464kB dirty:156kB writeback:0kB shmem:40492kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11076kB pagetables:2252kB sec_pagetables:0kB all_unreclaimable? no [ 414.020208][ T7531] veth1_macvtap: left promiscuous mode [ 414.037533][ T7531] macsec0: left promiscuous mode [ 414.074576][ T7530] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 414.110540][ T7530] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 414.185066][ T7530] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 414.191303][ T7530] Node 0 DMA32 free:1469196kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:60824kB inactive_anon:0kB active_file:50600kB inactive_file:158920kB unevictable:1536kB writepending:156kB present:3129332kB managed:2586828kB mlocked:0kB bounce:0kB free_pcp:10524kB local_pcp:7220kB free_cma:0kB [ 414.210784][ T7539] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 414.270025][ T7530] lowmem_reserve[]: 0 0 0 0 0 [ 414.275023][ T7530] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 414.311048][ T7530] lowmem_reserve[]: 0 0 0 0 0 [ 414.318564][ T7530] Node 1 Normal free:3895644kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:17824kB local_pcp:7104kB free_cma:0kB [ 414.382410][ T7530] lowmem_reserve[]: 0 0 0 0 0 [ 414.412011][ T7545] netlink: 'syz.0.624': attribute type 16 has an invalid length. [ 414.445725][ T7545] netlink: 48 bytes leftover after parsing attributes in process `syz.0.624'. [ 414.465983][ T7530] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 414.497565][ T7530] Node 0 DMA32: 1002*4kB (UE) 727*8kB (UE) 618*16kB (UE) 308*32kB (UE) 19*64kB (UME) 24*128kB (UM) 12*256kB (ME) 11*512kB (M) 10*1024kB (UME) 4*2048kB (UME) 343*4096kB (UM) = 1465920kB [ 414.547100][ T7530] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 414.624358][ T7530] Node 1 Normal: 261*4kB (UME) 57*8kB (UME) 42*16kB (UME) 91*32kB (UME) 22*64kB (UME) 4*128kB (UE) 0*256kB 1*512kB (M) 1*1024kB (E) 2*2048kB (UE) 948*4096kB (M) = 3895644kB [ 414.665028][ T7530] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 414.696320][ T7530] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 414.724521][ T7530] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 414.735419][ T7530] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 414.775773][ T7530] 65723 total pagecache pages [ 414.795853][ T7530] 0 pages in swap cache [ 414.800080][ T7530] Free swap = 124996kB [ 414.816730][ T7530] Total swap = 124996kB [ 414.824707][ T7530] 2097051 pages RAM [ 414.833644][ T7530] 0 pages HighMem/MovableOnly [ 414.845745][ T7530] 416958 pages reserved [ 414.855743][ T7530] 0 pages cma reserved [ 415.267912][ T7565] veth1_macvtap: entered promiscuous mode [ 415.273802][ T7565] macsec0: entered promiscuous mode [ 416.641897][ T7608] netlink: 'syz.2.644': attribute type 39 has an invalid length. [ 417.006332][ T7617] veth1_macvtap: left promiscuous mode [ 417.012230][ T7617] macsec0: left promiscuous mode [ 417.076153][ T7617] veth1_macvtap: entered promiscuous mode [ 417.105904][ T7617] macsec0: entered promiscuous mode [ 418.305448][ T7653] veth1_macvtap: left promiscuous mode [ 418.323064][ T7653] macsec0: left promiscuous mode [ 418.650587][ T7672] veth1_macvtap: entered promiscuous mode [ 418.674859][ T7672] macsec0: entered promiscuous mode [ 418.942807][ T7684] netlink: 196800 bytes leftover after parsing attributes in process `syz.1.677'. [ 419.849636][ T7709] netlink: 'syz.3.685': attribute type 39 has an invalid length. [ 420.525395][ T7732] veth1_macvtap: left promiscuous mode [ 420.555113][ T7732] macsec0: left promiscuous mode [ 420.595068][ T7734] netlink: 'syz.3.695': attribute type 10 has an invalid length. [ 420.730249][ T7734] team0: Port device geneve1 added [ 420.742063][ T7732] veth1_macvtap: entered promiscuous mode [ 420.748305][ T7732] macsec0: entered promiscuous mode [ 420.874000][ T7734] syz.3.695 (7734) used greatest stack depth: 19304 bytes left [ 421.427631][ T7755] netlink: 'syz.0.702': attribute type 16 has an invalid length. [ 421.451993][ T7755] netlink: 48 bytes leftover after parsing attributes in process `syz.0.702'. [ 421.593619][ T7763] veth1_macvtap: left promiscuous mode [ 421.619736][ T7763] macsec0: left promiscuous mode [ 421.814088][ T7770] netlink: 'syz.0.708': attribute type 21 has an invalid length. [ 421.833829][ T7770] netlink: 128 bytes leftover after parsing attributes in process `syz.0.708'. [ 421.864360][ T7770] netlink: 'syz.0.708': attribute type 4 has an invalid length. [ 422.062845][ T7778] veth1_macvtap: left promiscuous mode [ 422.073208][ T7778] macsec0: left promiscuous mode [ 422.106576][ T7778] veth1_macvtap: entered promiscuous mode [ 422.125485][ T7778] macsec0: entered promiscuous mode [ 423.174953][ T7806] netlink: 'syz.0.723': attribute type 13 has an invalid length. [ 423.194280][ T7806] netlink: 24859 bytes leftover after parsing attributes in process `syz.0.723'. [ 423.490863][ T7813] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.727'. [ 423.530204][ T7813] netlink: 'syz.0.727': attribute type 21 has an invalid length. [ 423.566251][ T7813] netlink: 132 bytes leftover after parsing attributes in process `syz.0.727'. [ 423.729814][ T7820] veth1_macvtap: left promiscuous mode [ 423.742718][ T7820] macsec0: left promiscuous mode [ 423.793064][ T7821] veth1_macvtap: entered promiscuous mode [ 423.835500][ T7821] macsec0: entered promiscuous mode [ 424.021461][ T7817] netlink: 'syz.2.728': attribute type 39 has an invalid length. [ 425.130927][ T7839] netlink: 'syz.2.735': attribute type 1 has an invalid length. [ 425.206000][ T7839] netlink: 209592 bytes leftover after parsing attributes in process `syz.2.735'. [ 426.264611][ T7861] veth1_macvtap: entered promiscuous mode [ 426.331298][ T7861] macsec0: entered promiscuous mode [ 427.156591][ T7881] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.751'. [ 428.116522][ T7908] veth1_macvtap: left promiscuous mode [ 428.131412][ T7908] macsec0: left promiscuous mode [ 428.156095][ T7911] veth1_macvtap: entered promiscuous mode [ 428.204173][ T7911] macsec0: entered promiscuous mode [ 429.332212][ T7935] netlink: 'syz.3.767': attribute type 39 has an invalid length. [ 431.027218][ T7956] veth1_macvtap: left promiscuous mode [ 431.032776][ T7956] macsec0: left promiscuous mode [ 431.097171][ T7956] veth1_macvtap: entered promiscuous mode [ 431.102997][ T7956] macsec0: entered promiscuous mode [ 432.309119][ T7995] veth1_macvtap: left promiscuous mode [ 432.349598][ T7995] macsec0: left promiscuous mode [ 432.536552][ T7998] netlink: 14 bytes leftover after parsing attributes in process `syz.2.796'. [ 432.959351][ T7998] team0: Port device team_slave_0 removed [ 433.243796][ T8009] veth1_macvtap: left promiscuous mode [ 433.250860][ T8009] macsec0: left promiscuous mode [ 433.270711][ T8010] veth1_macvtap: entered promiscuous mode [ 433.284352][ T8010] macsec0: entered promiscuous mode [ 433.910660][ T8032] netlink: 'syz.1.808': attribute type 3 has an invalid length. [ 433.929481][ T8032] netlink: 132 bytes leftover after parsing attributes in process `syz.1.808'. [ 434.071984][ T8030] netlink: 'syz.0.806': attribute type 39 has an invalid length. [ 434.784664][ T8056] veth1_macvtap: entered promiscuous mode [ 434.852120][ T8056] macsec0: entered promiscuous mode [ 436.300711][ T8100] veth1_macvtap: left promiscuous mode [ 436.311184][ T8100] macsec0: left promiscuous mode [ 436.397497][ T8105] veth1_macvtap: left promiscuous mode [ 436.403145][ T8105] macsec0: left promiscuous mode [ 436.449617][ T8105] veth1_macvtap: entered promiscuous mode [ 436.469981][ T8105] macsec0: entered promiscuous mode [ 437.487755][ T8132] netlink: 'syz.3.844': attribute type 39 has an invalid length. [ 437.531366][ T8136] veth1_macvtap: entered promiscuous mode [ 437.543251][ T8136] macsec0: entered promiscuous mode [ 437.952083][ T8152] veth1_macvtap: left promiscuous mode [ 437.965244][ T8152] macsec0: left promiscuous mode [ 438.009505][ T8152] veth1_macvtap: entered promiscuous mode [ 438.027371][ T8152] macsec0: entered promiscuous mode [ 439.649504][ T8197] veth1_macvtap: left promiscuous mode [ 439.684609][ T8197] macsec0: left promiscuous mode [ 439.728103][ T8200] veth1_macvtap: entered promiscuous mode [ 439.746551][ T8200] macsec0: entered promiscuous mode [ 440.367023][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.373450][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.428901][ T8235] veth1_macvtap: left promiscuous mode [ 441.445825][ T8235] macsec0: left promiscuous mode [ 441.553249][ T8243] veth1_macvtap: entered promiscuous mode [ 441.564011][ T8243] macsec0: entered promiscuous mode [ 441.571453][ T8230] netlink: 'syz.0.885': attribute type 39 has an invalid length. [ 443.357609][ T8289] veth1_macvtap: left promiscuous mode [ 443.373038][ T8289] macsec0: left promiscuous mode [ 443.394811][ T8289] veth1_macvtap: entered promiscuous mode [ 443.401128][ T8289] macsec0: entered promiscuous mode [ 443.704009][ T8297] veth1_macvtap: left promiscuous mode [ 443.710653][ T8297] macsec0: left promiscuous mode [ 443.877207][ T8299] veth1_macvtap: entered promiscuous mode [ 443.884022][ T8299] macsec0: entered promiscuous mode [ 444.074038][ T8301] netlink: 'syz.1.911': attribute type 21 has an invalid length. [ 444.085038][ T8301] netlink: 'syz.1.911': attribute type 11 has an invalid length. [ 444.244445][ T8309] netlink: 'syz.2.914': attribute type 9 has an invalid length. [ 444.270917][ T8309] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.914'. [ 444.832375][ T8329] veth1_macvtap: left promiscuous mode [ 444.851567][ T8329] macsec0: left promiscuous mode [ 444.901904][ T8335] veth1_macvtap: entered promiscuous mode [ 444.982011][ T8335] macsec0: entered promiscuous mode [ 445.135146][ T8342] netlink: 'syz.2.925': attribute type 39 has an invalid length. [ 446.098135][ T8368] netlink: 'syz.1.937': attribute type 29 has an invalid length. [ 446.137405][ T8368] netlink: 'syz.1.937': attribute type 29 has an invalid length. [ 446.158406][ T8369] netlink: 'syz.1.937': attribute type 29 has an invalid length. [ 446.173098][ T8372] netlink: 'syz.1.937': attribute type 29 has an invalid length. [ 446.185067][ T8368] netlink: 'syz.1.937': attribute type 29 has an invalid length. [ 446.490933][ T8379] veth1_macvtap: left promiscuous mode [ 446.545782][ T8379] macsec0: left promiscuous mode [ 446.573498][ T8380] veth1_macvtap: entered promiscuous mode [ 446.614658][ T8380] macsec0: entered promiscuous mode [ 446.766177][ T8385] netlink: 209604 bytes leftover after parsing attributes in process `syz.3.942'. [ 447.073350][ T8391] netlink: 'syz.3.945': attribute type 21 has an invalid length. [ 447.098615][ T8391] veth1_macvtap: left promiscuous mode [ 447.112856][ T8391] macsec0: left promiscuous mode [ 448.350666][ T8428] veth1_macvtap: left promiscuous mode [ 448.362896][ T8428] macsec0: left promiscuous mode [ 448.406641][ T8428] veth1_macvtap: entered promiscuous mode [ 448.437878][ T8428] macsec0: entered promiscuous mode [ 448.627862][ T8437] netlink: 132 bytes leftover after parsing attributes in process `syz.3.961'. [ 448.692885][ T8437] netlink: 132 bytes leftover after parsing attributes in process `syz.3.961'. [ 450.089663][ T8501] validate_nla: 3 callbacks suppressed [ 450.089680][ T8501] netlink: 'syz.3.969': attribute type 10 has an invalid length. [ 450.120426][ T8501] netlink: 40 bytes leftover after parsing attributes in process `syz.3.969'. [ 450.183678][ T8507] netlink: 'syz.3.969': attribute type 10 has an invalid length. [ 450.208531][ T8507] netlink: 40 bytes leftover after parsing attributes in process `syz.3.969'. [ 450.383280][ T8515] veth1_macvtap: left promiscuous mode [ 450.391414][ T8515] macsec0: left promiscuous mode [ 450.432966][ T8515] veth1_macvtap: entered promiscuous mode [ 450.456992][ T8515] macsec0: entered promiscuous mode [ 450.505598][ T8517] veth1_macvtap: entered promiscuous mode [ 450.512566][ T8517] macsec0: entered promiscuous mode [ 450.672847][ T8524] raw_sendmsg: syz.3.977 forgot to set AF_INET. Fix it! [ 451.408055][ T5818] Bluetooth: hci3: unexpected subevent 0x0a length: 150 > 30 [ 452.233041][ T8562] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.991'. [ 452.293487][ T8562] netlink: 6320 bytes leftover after parsing attributes in process `syz.2.991'. [ 452.392045][ T8562] netlink: 6 bytes leftover after parsing attributes in process `syz.2.991'. [ 452.401709][ T8562] tc_dump_action: action bad kind [ 452.453335][ T8562] netlink: 'syz.2.991': attribute type 1 has an invalid length. [ 452.492054][ T8568] veth1_macvtap: left promiscuous mode [ 452.503332][ T8568] macsec0: left promiscuous mode [ 452.509434][ T8562] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.991'. [ 452.548552][ T8569] veth1_macvtap: entered promiscuous mode [ 452.565889][ T8569] macsec0: entered promiscuous mode [ 453.455904][ T5818] Bluetooth: hci3: command tx timeout [ 453.605588][ T8583] delete_channel: no stack [ 453.751624][ T8587] netlink: 'syz.3.1001': attribute type 39 has an invalid length. [ 454.418360][ T8611] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1009'. [ 454.448502][ T8613] veth1_macvtap: left promiscuous mode [ 454.481794][ T8613] macsec0: left promiscuous mode [ 454.546739][ T8616] veth1_macvtap: entered promiscuous mode [ 454.566073][ T8618] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.1012'. [ 454.638600][ T8616] macsec0: entered promiscuous mode [ 455.437046][ T8632] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1018'. [ 455.531605][ T8632] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 455.578050][ T8639] veth1_macvtap: left promiscuous mode [ 455.583630][ T8639] macsec0: left promiscuous mode [ 455.633452][ T8639] veth1_macvtap: entered promiscuous mode [ 455.643546][ T8639] macsec0: entered promiscuous mode [ 456.062638][ T8643] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1021'. [ 457.461872][ T8659] veth1_macvtap: left promiscuous mode [ 457.475823][ T8659] macsec0: left promiscuous mode [ 457.484903][ T8660] veth1_macvtap: left promiscuous mode [ 457.502737][ T8660] macsec0: left promiscuous mode [ 457.533561][ T8662] veth1_macvtap: entered promiscuous mode [ 457.551778][ T8662] macsec0: entered promiscuous mode [ 457.721216][ T8666] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1030'. [ 457.743299][ T8665] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1030'. [ 457.781535][ T8665] netlink: 'syz.0.1030': attribute type 153 has an invalid length. [ 457.795819][ T8665] netlink: 'syz.0.1030': attribute type 3 has an invalid length. [ 457.809265][ T8665] netlink: 125364 bytes leftover after parsing attributes in process `syz.0.1030'. [ 458.217227][ T8675] veth1_macvtap: left promiscuous mode [ 458.240783][ T8675] macsec0: left promiscuous mode [ 458.295157][ T8675] veth1_macvtap: entered promiscuous mode [ 458.301329][ T8675] macsec0: entered promiscuous mode [ 459.297206][ T8693] veth1_macvtap: left promiscuous mode [ 459.306108][ T8693] macsec0: left promiscuous mode [ 459.356569][ T8694] veth1_macvtap: left promiscuous mode [ 459.362120][ T8694] macsec0: left promiscuous mode [ 459.617153][ T8693] veth1_macvtap: entered promiscuous mode [ 459.632116][ T8693] macsec0: entered promiscuous mode [ 459.639462][ T8694] veth1_macvtap: entered promiscuous mode [ 459.645460][ T8694] macsec0: entered promiscuous mode [ 459.897000][ T8708] veth1_macvtap: entered promiscuous mode [ 459.903081][ T8708] macsec0: entered promiscuous mode [ 460.220228][ T8712] netlink: 'syz.2.1054': attribute type 10 has an invalid length. [ 460.623698][ T8717] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1057'. [ 461.328709][ T8735] veth1_macvtap: left promiscuous mode [ 461.334256][ T8735] macsec0: left promiscuous mode [ 461.600428][ T8740] veth1_macvtap: entered promiscuous mode [ 461.616569][ T8740] macsec0: entered promiscuous mode [ 461.747157][ T8745] veth1_macvtap: left promiscuous mode [ 461.752743][ T8745] macsec0: left promiscuous mode [ 461.825958][ T8748] veth1_macvtap: entered promiscuous mode [ 461.831844][ T8748] macsec0: entered promiscuous mode [ 461.984768][ T8753] netlink: 'syz.3.1061': attribute type 10 has an invalid length. [ 462.333644][ T8762] veth1_macvtap: left promiscuous mode [ 462.352445][ T8762] macsec0: left promiscuous mode [ 462.777850][ T8769] veth1_macvtap: entered promiscuous mode [ 462.805094][ T8769] macsec0: entered promiscuous mode [ 462.883692][ T8768] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1065'. [ 462.895812][ T5822] Bluetooth: hci0: command 0x0406 tx timeout [ 462.904084][ T5822] Bluetooth: hci1: command 0x0406 tx timeout [ 462.904774][ T5826] Bluetooth: hci2: command 0x0406 tx timeout [ 462.911133][ T5822] Bluetooth: hci3: command 0x0406 tx timeout [ 463.360008][ T8777] veth1_macvtap: left promiscuous mode [ 463.376022][ T8777] macsec0: left promiscuous mode [ 463.411586][ T8777] veth1_macvtap: entered promiscuous mode [ 463.422312][ T8777] macsec0: entered promiscuous mode [ 464.136132][ T8793] veth1_macvtap: left promiscuous mode [ 464.154131][ T8793] macsec0: left promiscuous mode [ 464.195725][ T8793] veth1_macvtap: entered promiscuous mode [ 464.201547][ T8793] macsec0: entered promiscuous mode [ 464.711998][ T8807] veth1_macvtap: left promiscuous mode [ 464.720837][ T8807] macsec0: left promiscuous mode [ 465.010999][ T8819] veth1_macvtap: left promiscuous mode [ 465.021533][ T8819] macsec0: left promiscuous mode [ 465.044062][ T8818] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1085'. [ 465.053404][ T8818] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 465.070152][ T8815] veth1_macvtap: entered promiscuous mode [ 465.077995][ T8815] macsec0: entered promiscuous mode [ 465.094926][ T8819] veth1_macvtap: entered promiscuous mode [ 465.108198][ T8819] macsec0: entered promiscuous mode [ 465.136465][ T8820] veth1_macvtap: left promiscuous mode [ 465.142098][ T8820] macsec0: left promiscuous mode [ 465.168284][ T8822] veth1_macvtap: entered promiscuous mode [ 465.174234][ T8822] macsec0: entered promiscuous mode [ 466.258647][ T8838] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1091'. [ 466.926945][ T8856] veth1_macvtap: left promiscuous mode [ 466.955956][ T8856] macsec0: left promiscuous mode [ 466.982251][ T8856] veth1_macvtap: entered promiscuous mode [ 467.009878][ T8856] macsec0: entered promiscuous mode [ 467.870452][ T8863] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1101'. [ 467.896117][ T8863] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 467.982994][ T8868] veth1_macvtap: left promiscuous mode [ 467.999800][ T8868] macsec0: left promiscuous mode [ 468.031798][ T8868] veth1_macvtap: entered promiscuous mode [ 468.053773][ T8868] macsec0: entered promiscuous mode [ 468.247162][ T8872] netlink: 'syz.2.1104': attribute type 39 has an invalid length. [ 468.924839][ T8884] veth1_macvtap: left promiscuous mode [ 468.953152][ T8884] macsec0: left promiscuous mode [ 468.983891][ T8889] veth1_macvtap: entered promiscuous mode [ 469.014285][ T8889] macsec0: entered promiscuous mode [ 475.182461][ T8916] netlink: 'syz.0.1117': attribute type 39 has an invalid length. [ 475.240230][ T8914] syz.1.1120 (8914) used greatest stack depth: 19048 bytes left [ 475.416819][ T8923] netlink: 209832 bytes leftover after parsing attributes in process `syz.1.1121'. [ 475.536589][ T8929] veth1_macvtap: left promiscuous mode [ 475.542139][ T8929] macsec0: left promiscuous mode [ 475.586688][ T8929] veth1_macvtap: entered promiscuous mode [ 475.594820][ T8929] macsec0: entered promiscuous mode [ 476.554002][ T8943] veth1_macvtap: left promiscuous mode [ 476.562926][ T8943] macsec0: left promiscuous mode [ 476.576382][ T8939] netlink: 'syz.1.1127': attribute type 39 has an invalid length. [ 476.588153][ T8943] veth1_macvtap: entered promiscuous mode [ 476.593950][ T8943] macsec0: entered promiscuous mode [ 477.350576][ T8957] netlink: 209832 bytes leftover after parsing attributes in process `syz.3.1134'. [ 477.616323][ T8963] netlink: 'syz.1.1137': attribute type 10 has an invalid length. [ 477.656240][ T8963] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1137'. [ 477.692029][ T8963] vcan0: entered promiscuous mode [ 477.711639][ T8963] A link change request failed with some changes committed already. Interface vcan0 may have been left with an inconsistent configuration, please check. [ 478.251802][ T8982] veth1_macvtap: left promiscuous mode [ 478.257654][ T8982] macsec0: left promiscuous mode [ 478.282294][ T8982] veth1_macvtap: entered promiscuous mode [ 478.291496][ T8982] macsec0: entered promiscuous mode [ 478.380944][ T8984] netlink: 'syz.1.1144': attribute type 11 has an invalid length. [ 478.411282][ T8984] netlink: 'syz.1.1144': attribute type 2 has an invalid length. [ 478.424157][ T8984] netlink: 198100 bytes leftover after parsing attributes in process `syz.1.1144'. [ 479.753211][ T9025] netlink: 'syz.1.1160': attribute type 39 has an invalid length. [ 479.760618][ T9032] netlink: 16399 bytes leftover after parsing attributes in process `syz.0.1163'. [ 479.906630][ T9038] veth1_macvtap: left promiscuous mode [ 479.912589][ T9038] macsec0: left promiscuous mode [ 479.951853][ T9038] veth1_macvtap: entered promiscuous mode [ 479.958240][ T9038] macsec0: entered promiscuous mode [ 481.020405][ T9066] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1177'. [ 481.240439][ T9072] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.1180'. [ 481.261098][ T9072] netlink: 6324 bytes leftover after parsing attributes in process `syz.1.1180'. [ 481.482122][ T9080] veth1_macvtap: left promiscuous mode [ 481.488510][ T9080] macsec0: left promiscuous mode [ 481.526885][ T9080] veth1_macvtap: entered promiscuous mode [ 481.534994][ T9080] macsec0: entered promiscuous mode [ 481.747534][ T9083] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1184'. [ 481.768847][ T9083] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 482.622689][ T9095] netlink: 'syz.1.1188': attribute type 39 has an invalid length. [ 488.542320][ T9127] veth1_macvtap: left promiscuous mode [ 488.548048][ T9127] macsec0: left promiscuous mode [ 488.557809][ T9130] veth1_macvtap: entered promiscuous mode [ 488.563620][ T9130] macsec0: entered promiscuous mode [ 488.626130][ T9137] netlink: 'syz.3.1198': attribute type 10 has an invalid length. [ 488.645784][ T9137] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1198'. [ 488.677921][ T9137] hsr0: entered promiscuous mode [ 488.686729][ T9137] bridge0: port 3(hsr0) entered blocking state [ 488.697560][ T9137] bridge0: port 3(hsr0) entered disabled state [ 488.703962][ T9137] hsr0: entered allmulticast mode [ 488.728648][ T9137] hsr_slave_0: entered allmulticast mode [ 488.751630][ T9137] bridge0: port 3(hsr0) entered blocking state [ 488.758255][ T9137] bridge0: port 3(hsr0) entered forwarding state [ 489.033396][ T9143] sock: sock_timestamping_bind_phc: sock not bind to device [ 489.044372][ T9141] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1201'. [ 489.205496][ T9141] bridge0: port 1(bridge_slave_0) entered disabled state [ 489.525484][ T9141] bridge_slave_0 (unregistering): left allmulticast mode [ 489.533545][ T9141] bridge_slave_0 (unregistering): left promiscuous mode [ 489.549154][ T9141] bridge0: port 1(bridge_slave_0) entered disabled state [ 490.635980][ T9162] veth1_macvtap: left promiscuous mode [ 490.641536][ T9162] macsec0: left promiscuous mode [ 490.793056][ T9172] veth1_macvtap: left promiscuous mode [ 490.804295][ T9172] macsec0: left promiscuous mode [ 490.831808][ T9175] veth1_macvtap: entered promiscuous mode [ 490.858400][ T9175] macsec0: entered promiscuous mode [ 491.353974][ T9180] mac80211_hwsim hwsim3 .3ãc¤±: renamed from wlan1 (while UP) [ 494.462238][ T9192] veth1_macvtap: entered promiscuous mode [ 494.476139][ T9192] macsec0: entered promiscuous mode [ 494.665336][ T9199] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1218'. [ 495.551634][ T9209] veth1_macvtap: left promiscuous mode [ 495.615734][ T9209] macsec0: left promiscuous mode [ 495.886637][ T9212] veth1_macvtap: left promiscuous mode [ 495.892186][ T9212] macsec0: left promiscuous mode [ 495.926121][ T9213] veth1_macvtap: entered promiscuous mode [ 495.941647][ T9213] macsec0: entered promiscuous mode [ 496.720663][ T9220] syzkaller0: entered promiscuous mode [ 496.765349][ T9220] syzkaller0: entered allmulticast mode [ 499.912443][ T9237] veth1_macvtap: left promiscuous mode [ 499.918008][ T9237] macsec0: left promiscuous mode [ 499.936688][ T9250] veth1_macvtap: left promiscuous mode [ 499.942241][ T9250] macsec0: left promiscuous mode [ 499.958048][ T9251] veth1_macvtap: entered promiscuous mode [ 499.963868][ T9251] macsec0: entered promiscuous mode [ 500.946136][ T9269] veth1_macvtap: left promiscuous mode [ 500.959518][ T9269] macsec0: left promiscuous mode [ 501.162896][ T9273] netlink: 'syz.3.1239': attribute type 30 has an invalid length. [ 501.173533][ T9275] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1239'. [ 501.193821][ T9275] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 501.314178][ T9276] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1240'. [ 501.646205][ T9286] netlink: 'syz.2.1245': attribute type 39 has an invalid length. [ 501.766970][ T9291] veth1_macvtap: entered promiscuous mode [ 501.772853][ T9291] macsec0: entered promiscuous mode [ 501.913336][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.919893][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.095259][ T9290] syzkaller0: entered promiscuous mode [ 502.130900][ T9290] syzkaller0: entered allmulticast mode [ 504.272203][ T9311] pimreg1: tun_chr_ioctl cmd 2147767517 [ 504.296889][ T9317] veth1_macvtap: left promiscuous mode [ 504.303031][ T9317] macsec0: left promiscuous mode [ 504.348836][ T9323] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1254'. [ 504.372649][ T9323] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 506.261182][ T9357] netlink: 6 bytes leftover after parsing attributes in process `syz.0.1266'. [ 506.304332][ T9354] syzkaller0: entered promiscuous mode [ 506.311808][ T9354] syzkaller0: entered allmulticast mode [ 506.335037][ T9365] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.1267'. [ 506.664866][ T9369] netlink: 'syz.3.1269': attribute type 33 has an invalid length. [ 510.774213][ T9368] netlink: 'syz.0.1268': attribute type 39 has an invalid length. [ 515.122730][ T9480] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1311'. [ 516.796753][ T9526] netlink: 'syz.0.1328': attribute type 39 has an invalid length. [ 517.490685][ T9528] syzkaller0: entered promiscuous mode [ 517.502146][ T9528] syzkaller0: entered allmulticast mode [ 517.523832][ T9536] netlink: 'syz.3.1332': attribute type 6 has an invalid length. [ 517.556052][ T9536] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1332'. [ 517.942139][ T9547] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1335'. [ 517.951737][ T9547] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 520.356650][ T9582] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1348'. [ 520.393959][ T9582] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 520.425278][ T9580] netlink: 'syz.3.1349': attribute type 39 has an invalid length. [ 520.484103][ T9586] veth1_macvtap: entered promiscuous mode [ 520.499771][ T9586] macsec0: entered promiscuous mode [ 521.092994][ T9605] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1359'. [ 521.103169][ T9605] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 521.275820][ T9609] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1360'. [ 521.284914][ T9609] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 521.423621][ T9613] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1362'. [ 521.468507][ T9613] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 521.898307][ T9629] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1369'. [ 521.913501][ T9629] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 522.321119][ T9640] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1373'. [ 522.361454][ T9640] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 522.693674][ T9650] veth1_macvtap: entered promiscuous mode [ 522.710933][ T9650] macsec0: entered promiscuous mode [ 522.756433][ T9655] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1379'. [ 522.766015][ T9655] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 522.880454][ T9659] netlink: 'syz.2.1381': attribute type 4 has an invalid length. [ 522.890160][ T9659] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1381'. [ 523.027743][ T9657] netlink: 'syz.1.1380': attribute type 39 has an invalid length. [ 523.480341][ T9679] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1389'. [ 523.526446][ T9679] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 523.565991][ T9680] netlink: 'syz.3.1388': attribute type 2 has an invalid length. [ 523.573839][ T9680] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1388'. [ 524.842362][ T9687] delete_channel: no stack [ 524.896087][ T9709] veth1_macvtap: entered promiscuous mode [ 524.905886][ T9709] macsec0: entered promiscuous mode [ 524.935142][ T9711] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 525.566363][ T9739] __nla_validate_parse: 2 callbacks suppressed [ 525.566384][ T9739] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1412'. [ 525.596843][ T9739] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 528.802157][ T9771] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1424'. [ 528.876091][ T9771] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 529.442347][ T9774] IPv6: NLM_F_CREATE should be specified when creating new route [ 531.042685][ T5821] Bluetooth: hci3: unexpected event 0x04 length: 15 > 10 [ 531.042805][ T5821] Bluetooth: unknown link type 101 [ 531.056989][ T5821] Bluetooth: hci3: connection err: -111 [ 531.714302][ T9795] netlink: 'syz.2.1433': attribute type 16 has an invalid length. [ 531.733281][ T9795] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1433'. [ 532.623826][ T9804] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1436'. [ 532.637061][ T9804] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 535.634756][ T9835] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1447'. [ 535.680880][ T9835] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 537.575352][ T9851] veth1_macvtap: left promiscuous mode [ 537.815940][ T9851] macsec0: left promiscuous mode [ 538.672587][ T9863] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1457'. [ 538.681994][ T9863] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 538.924381][ T9867] netlink: 64999 bytes leftover after parsing attributes in process `syz.1.1456'. [ 539.113062][ T9867] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1456'. [ 539.306813][ T9867] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 539.335955][ T9867] CPU: 1 PID: 9867 Comm: syz.1.1456 Not tainted syzkaller #0 [ 539.343413][ T9867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 539.353524][ T9867] Call Trace: [ 539.356864][ T9867] [ 539.359842][ T9867] dump_stack_lvl+0x18c/0x250 [ 539.364588][ T9867] ? show_regs_print_info+0x20/0x20 [ 539.369845][ T9867] ? load_image+0x420/0x420 [ 539.374427][ T9867] sysfs_warn_dup+0x8e/0xa0 [ 539.378992][ T9867] sysfs_do_create_link_sd+0xc0/0x110 [ 539.384423][ T9867] device_add_class_symlinks+0x1cf/0x240 [ 539.390424][ T9867] device_add+0x4f9/0xc40 [ 539.394799][ T9867] wiphy_register+0x1d99/0x2ac0 [ 539.399837][ T9867] ? cfg80211_event_work+0x40/0x40 [ 539.405008][ T9867] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 539.411236][ T9867] ieee80211_register_hw+0x2dd8/0x3b30 [ 539.416853][ T9867] ? ieee80211_register_hw+0xfb1/0x3b30 [ 539.422462][ T9867] ? ieee80211_tasklet_handler+0x20/0x20 [ 539.428149][ T9867] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 539.434162][ T9867] ? __debug_object_init+0xec/0x450 [ 539.439401][ T9867] ? __asan_memset+0x22/0x40 [ 539.444021][ T9867] ? __hrtimer_init+0x189/0x270 [ 539.448907][ T9867] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 539.454708][ T9867] ? mac80211_hwsim_free+0x220/0x220 [ 539.460033][ T9867] ? hwsim_new_radio_nl+0xd9d/0x1a70 [ 539.465358][ T9867] hwsim_new_radio_nl+0xdad/0x1a70 [ 539.470500][ T9867] ? __nla_validate+0x50/0x50 [ 539.475249][ T9867] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 539.481605][ T9867] ? __nla_parse+0x40/0x50 [ 539.486051][ T9867] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 539.492493][ T9867] genl_family_rcv_msg_doit+0x21a/0x310 [ 539.498063][ T9867] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 539.503978][ T9867] ? bpf_lsm_capable+0x9/0x10 [ 539.508696][ T9867] ? security_capable+0x89/0xb0 [ 539.513569][ T9867] genl_rcv_msg+0x611/0x7a0 [ 539.518090][ T9867] ? genl_bind+0x360/0x360 [ 539.522534][ T9867] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 539.528530][ T9867] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 539.534873][ T9867] ? ref_tracker_free+0x686/0x830 [ 539.539922][ T9867] netlink_rcv_skb+0x235/0x4c0 [ 539.544696][ T9867] ? genl_bind+0x360/0x360 [ 539.549148][ T9867] ? netlink_ack+0x1160/0x1160 [ 539.553936][ T9867] ? __lock_acquire+0x7d80/0x7d80 [ 539.559008][ T9867] ? down_read+0x1ac/0x2e0 [ 539.563454][ T9867] genl_rcv+0x28/0x40 [ 539.567449][ T9867] netlink_unicast+0x7b1/0x930 [ 539.572305][ T9867] netlink_sendmsg+0x8d0/0xbf0 [ 539.577087][ T9867] ? netlink_getsockopt+0x590/0x590 [ 539.582304][ T9867] ? apparmor_socket_sendmsg+0x8e/0x330 [ 539.587887][ T9867] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 539.593214][ T9867] ? security_socket_sendmsg+0x80/0xa0 [ 539.598702][ T9867] ? netlink_getsockopt+0x590/0x590 [ 539.603925][ T9867] ____sys_sendmsg+0x61b/0x980 [ 539.608725][ T9867] ? __asan_memset+0x22/0x40 [ 539.613331][ T9867] ? __sys_sendmsg_sock+0x30/0x30 [ 539.618366][ T9867] ? __import_iovec+0x5f2/0x850 [ 539.623244][ T9867] ? import_iovec+0x73/0xa0 [ 539.627797][ T9867] ___sys_sendmsg+0x2a6/0x360 [ 539.632495][ T9867] ? __sys_sendmsg+0x2b0/0x2b0 [ 539.637339][ T9867] __se_sys_sendmsg+0x1d0/0x2c0 [ 539.642208][ T9867] ? __x64_sys_sendmsg+0x80/0x80 [ 539.647184][ T9867] ? syscall_enter_from_user_mode+0x2e/0x80 [ 539.653110][ T9867] do_syscall_64+0x55/0xb0 [ 539.657546][ T9867] ? clear_bhb_loop+0x40/0x90 [ 539.662235][ T9867] ? clear_bhb_loop+0x40/0x90 [ 539.666927][ T9867] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 539.672919][ T9867] RIP: 0033:0x7f782359e0d9 [ 539.677346][ T9867] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 539.697227][ T9867] RSP: 002b:00007f7824529028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 539.705662][ T9867] RAX: ffffffffffffffda RBX: 00007f7823826090 RCX: 00007f782359e0d9 [ 539.713646][ T9867] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 539.721638][ T9867] RBP: 00007f7823635024 R08: 0000000000000000 R09: 0000000000000000 [ 539.729622][ T9867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 539.737692][ T9867] R13: 00007f7823826128 R14: 00007f7823826090 R15: 00007ffe781f31d8 [ 539.745692][ T9867] [ 539.795399][ T9888] veth1_macvtap: entered promiscuous mode [ 539.812802][ T9888] macsec0: entered promiscuous mode [ 539.993349][ T9890] netlink: 15974 bytes leftover after parsing attributes in process `syz.0.1467'. [ 540.094474][ T9892] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1468'. [ 540.105312][ T9892] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 540.778468][ T9914] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1480'. [ 540.797151][ T9914] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 540.832053][ T9917] veth1_macvtap: left promiscuous mode [ 540.838876][ T9917] macsec0: left promiscuous mode [ 540.861513][ T9917] veth1_macvtap: entered promiscuous mode [ 540.867854][ T9917] macsec0: entered promiscuous mode [ 540.890418][ T9916] netlink: 'syz.2.1479': attribute type 2 has an invalid length. [ 540.901594][ T9916] netlink: 17267 bytes leftover after parsing attributes in process `syz.2.1479'. [ 541.630897][ T9937] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1490'. [ 541.649222][ T9937] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 541.984685][ T9948] @0Ù: renamed from bridge_slave_0 (while UP) [ 542.218249][ T9956] veth1_macvtap: left promiscuous mode [ 542.223840][ T9956] macsec0: left promiscuous mode [ 542.285278][ T9959] veth1_macvtap: entered promiscuous mode [ 542.336773][ T9959] macsec0: entered promiscuous mode [ 542.353839][ T9958] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1499'. [ 542.375962][ T9958] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 543.086113][ T9980] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1509'. [ 543.101426][ T9980] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 543.857398][ T9990] netlink: 'syz.3.1512': attribute type 21 has an invalid length. [ 545.231837][T10006] netlink: 'syz.1.1517': attribute type 39 has an invalid length. [ 545.273036][T10010] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1519'. [ 545.294350][T10010] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 545.322980][T10013] veth1_macvtap: left promiscuous mode [ 545.340517][T10013] macsec0: left promiscuous mode [ 545.385989][T10013] veth1_macvtap: entered promiscuous mode [ 545.391797][T10013] macsec0: entered promiscuous mode [ 545.538993][T10020] netlink: 'syz.3.1522': attribute type 39 has an invalid length. [ 545.646087][T10028] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1521'. [ 545.688692][T10021] netlink: 64999 bytes leftover after parsing attributes in process `syz.2.1521'. [ 545.744467][T10028] debugfs: Directory '!!ô!' with parent 'ieee80211' already present! [ 546.087508][T10034] netlink: 'syz.3.1525': attribute type 21 has an invalid length. [ 546.319009][T10044] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1531'. [ 546.336214][T10044] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 547.038915][T10064] veth1_macvtap: left promiscuous mode [ 547.044463][T10064] macsec0: left promiscuous mode [ 547.079253][T10064] veth1_macvtap: entered promiscuous mode [ 547.118272][T10064] macsec0: entered promiscuous mode [ 547.327060][T10074] netlink: 'syz.1.1542': attribute type 39 has an invalid length. [ 547.341517][T10079] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1544'. [ 547.351280][T10079] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 547.528777][T10085] netlink: 'syz.1.1547': attribute type 10 has an invalid length. [ 547.540516][T10085] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.1547'. [ 548.458901][T10106] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1555'. [ 548.757976][T10118] netlink: 'syz.2.1560': attribute type 4 has an invalid length. [ 548.770995][T10118] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1560'. [ 548.836155][T10121] veth1_macvtap: left promiscuous mode [ 548.841728][T10121] macsec0: left promiscuous mode [ 548.867587][T10123] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1562'. [ 548.896004][T10123] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 548.939242][T10121] veth1_macvtap: entered promiscuous mode [ 548.945127][T10121] macsec0: entered promiscuous mode [ 549.280742][T10144] netlink: 65027 bytes leftover after parsing attributes in process `syz.1.1570'. [ 549.346365][T10143] delete_channel: no stack [ 549.426697][T10142] netlink: 'syz.3.1569': attribute type 39 has an invalid length. [ 549.644949][T10154] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 550.283893][T10182] veth1_macvtap: left promiscuous mode [ 550.299842][T10182] macsec0: left promiscuous mode [ 550.349215][T10182] veth1_macvtap: entered promiscuous mode [ 550.361692][T10182] macsec0: entered promiscuous mode [ 550.429192][T10188] __nla_validate_parse: 1 callbacks suppressed [ 550.429209][T10188] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1588'. [ 550.452638][T10188] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 550.489876][T10191] netlink: 'syz.3.1587': attribute type 5 has an invalid length. [ 550.516281][T10191] netlink: 'syz.3.1587': attribute type 1 has an invalid length. [ 550.541534][T10191] netlink: 199820 bytes leftover after parsing attributes in process `syz.3.1587'. [ 550.973611][T10210] netlink: 'syz.1.1596': attribute type 6 has an invalid length. [ 550.987931][T10210] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1596'. [ 551.044803][T10208] netlink: 'syz.3.1595': attribute type 39 has an invalid length. [ 551.243843][T10218] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1598'. [ 551.268120][T10218] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 551.722214][T10222] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1600'. [ 551.808578][T10222] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1600'. [ 552.253156][T10247] veth1_macvtap: left promiscuous mode [ 552.267343][T10247] macsec0: left promiscuous mode [ 552.327076][T10247] veth1_macvtap: entered promiscuous mode [ 552.333071][T10247] macsec0: entered promiscuous mode [ 552.934665][T10265] netlink: 'syz.1.1616': attribute type 10 has an invalid length. [ 553.118296][T10265] bond0: (slave veth1_to_bridge): Enslaving as an active interface with an up link [ 553.476297][T10273] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1619'. [ 553.803847][T10278] netlink: 'syz.2.1621': attribute type 39 has an invalid length. [ 553.922634][T10282] netlink: 'syz.3.1622': attribute type 46 has an invalid length. [ 553.946201][T10282] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1622'. [ 554.306910][T10297] veth1_macvtap: left promiscuous mode [ 554.312475][T10297] macsec0: left promiscuous mode [ 554.340117][T10299] netlink: 'syz.2.1630': attribute type 5 has an invalid length. [ 554.357595][T10299] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1630'. [ 554.382667][T10297] veth1_macvtap: entered promiscuous mode [ 554.400397][T10297] macsec0: entered promiscuous mode [ 554.911254][T10316] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1637'. [ 554.921443][T10316] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 554.929771][T10316] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 554.941740][T10316] netlink: 'syz.0.1637': attribute type 17 has an invalid length. [ 554.949715][T10316] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 555.660504][T10342] veth1_macvtap: left promiscuous mode [ 555.677118][T10342] macsec0: left promiscuous mode [ 555.723130][T10342] veth1_macvtap: entered promiscuous mode [ 555.904190][T10342] macsec0: entered promiscuous mode [ 555.924417][ T5821] Bluetooth: hci1: Malformed Event: 0x13 [ 555.983999][T10352] netlink: 'syz.1.1651': attribute type 39 has an invalid length. [ 557.044513][T10397] veth1_macvtap: left promiscuous mode [ 557.050816][T10397] macsec0: left promiscuous mode [ 557.065147][T10397] veth1_macvtap: entered promiscuous mode [ 557.086496][T10397] macsec0: entered promiscuous mode [ 557.728482][T10418] __nla_validate_parse: 1 callbacks suppressed [ 557.728502][T10418] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1676'. [ 557.877991][T10422] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1678'. [ 558.397727][T10424] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1679'. [ 558.454064][T10424] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1679'. [ 558.983386][T10433] mac80211_hwsim hwsim8 wlan1: entered promiscuous mode [ 559.058437][T10433] mac80211_hwsim hwsim8 wlan1: entered allmulticast mode [ 559.337448][T10424] syz.2.1679 (10424) used greatest stack depth: 18792 bytes left [ 559.489030][T10444] netlink: 'syz.0.1686': attribute type 39 has an invalid length. [ 559.681042][T10456] veth1_macvtap: left promiscuous mode [ 559.721092][T10456] macsec0: left promiscuous mode [ 559.756302][T10456] veth1_macvtap: entered promiscuous mode [ 559.826623][T10456] macsec0: entered promiscuous mode [ 560.176161][T10465] netlink: 'syz.0.1695': attribute type 10 has an invalid length. [ 560.292092][T10465] bond0: (slave veth1_to_bridge): Enslaving as an active interface with an up link [ 560.508848][T10478] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1698'. [ 560.551087][T10478] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1698'. [ 561.508109][T10501] veth1_macvtap: left promiscuous mode [ 561.516887][T10501] macsec0: left promiscuous mode [ 561.550285][T10501] veth1_macvtap: entered promiscuous mode [ 561.558689][T10501] macsec0: entered promiscuous mode [ 561.567280][T10504] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1709'. [ 561.576910][T10504] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 561.613636][T10505] netlink: 'syz.0.1710': attribute type 3 has an invalid length. [ 561.621853][T10505] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1710'. [ 561.879506][T10507] netlink: 'syz.2.1711': attribute type 10 has an invalid length. [ 562.100118][T10507] bond0: (slave veth1_to_bridge): Enslaving as an active interface with an up link [ 562.684136][T10526] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1719'. [ 562.726715][T10526] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 562.981009][T10543] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1726'. [ 563.000814][T10548] veth1_macvtap: left promiscuous mode [ 563.007117][T10548] macsec0: left promiscuous mode [ 563.035332][T10548] veth1_macvtap: entered promiscuous mode [ 563.053626][T10548] macsec0: entered promiscuous mode [ 563.231568][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.238593][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.403304][T10562] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1732'. [ 563.412796][T10562] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 564.090853][T10591] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1742'. [ 564.113081][T10591] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 564.154615][T10592] veth1_macvtap: left promiscuous mode [ 564.163579][T10592] macsec0: left promiscuous mode [ 564.214297][T10592] veth1_macvtap: entered promiscuous mode [ 564.220841][T10592] macsec0: entered promiscuous mode [ 564.547344][T10604] mac80211_hwsim hwsim13 wlan1: entered promiscuous mode [ 564.585761][T10604] mac80211_hwsim hwsim13 wlan1: entered allmulticast mode [ 565.056064][T10610] veth1_macvtap: left promiscuous mode [ 565.071868][T10610] macsec0: left promiscuous mode [ 565.112158][T10610] veth1_macvtap: entered promiscuous mode [ 565.136010][T10610] macsec0: entered promiscuous mode [ 565.147793][T10612] netlink: 'syz.1.1749': attribute type 21 has an invalid length. [ 565.173783][T10612] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1749'. [ 565.509586][ T5821] Bluetooth: hci2: Malformed Event: 0x13 [ 565.561546][T10624] netlink: 'syz.3.1753': attribute type 6 has an invalid length. [ 565.602508][T10624] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1753'. [ 565.603902][T10627] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1753'. [ 565.855804][T10641] netlink: 6 bytes leftover after parsing attributes in process `syz.2.1758'. [ 565.972577][T10643] netlink: 35840 bytes leftover after parsing attributes in process `syz.3.1760'. [ 566.814451][T10661] veth1_macvtap: left promiscuous mode [ 566.831278][T10661] macsec0: left promiscuous mode [ 566.847231][T10662] veth1_macvtap: entered promiscuous mode [ 566.860250][T10662] macsec0: entered promiscuous mode [ 567.433458][T10673] veth1_macvtap: left promiscuous mode [ 567.446869][T10673] macsec0: left promiscuous mode [ 567.527057][T10673] veth1_macvtap: entered promiscuous mode [ 567.555306][T10673] macsec0: entered promiscuous mode [ 567.749085][T10677] netlink: 'syz.3.1772': attribute type 39 has an invalid length. [ 568.275054][T10704] veth1_macvtap: left promiscuous mode [ 568.280858][T10704] macsec0: left promiscuous mode [ 568.300908][T10704] veth1_macvtap: entered promiscuous mode [ 568.315423][T10704] macsec0: entered promiscuous mode [ 568.816380][T10724] FAULT_INJECTION: forcing a failure. [ 568.816380][T10724] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 568.838293][T10724] CPU: 0 PID: 10724 Comm: syz.3.1791 Not tainted syzkaller #0 [ 568.843585][T10725] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.1790'. [ 568.845811][T10724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 568.845828][T10724] Call Trace: [ 568.845836][T10724] [ 568.845845][T10724] dump_stack_lvl+0x18c/0x250 [ 568.845878][T10724] ? show_regs_print_info+0x20/0x20 [ 568.845900][T10724] ? load_image+0x420/0x420 [ 568.845931][T10724] ? __might_fault+0xaa/0x120 [ 568.845954][T10724] ? __lock_acquire+0x7d80/0x7d80 [ 568.845978][T10724] ? __virt_addr_valid+0x10c/0x380 [ 568.846033][T10724] should_fail_ex+0x394/0x4c0 [ 568.846065][T10724] _copy_from_user+0x2f/0xe0 [ 568.846088][T10724] sctp_setsockopt+0x19e/0x11e0 [ 568.846163][T10724] ? sock_common_recvmsg+0x190/0x190 [ 568.863008][T10725] tc_dump_action: action bad kind [ 568.865419][T10724] do_sock_setsockopt+0x175/0x1a0 [ 568.865452][T10724] ? __fdget+0x180/0x210 [ 568.934850][T10724] __x64_sys_setsockopt+0x182/0x200 [ 568.939496][T10729] netlink: 209832 bytes leftover after parsing attributes in process `syz.0.1793'. [ 568.940082][T10724] do_syscall_64+0x55/0xb0 [ 568.953821][T10724] ? clear_bhb_loop+0x40/0x90 [ 568.958543][T10724] ? clear_bhb_loop+0x40/0x90 [ 568.963275][T10724] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 568.969244][T10724] RIP: 0033:0x7fe23bf9e0d9 [ 568.973697][T10724] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 568.993349][T10724] RSP: 002b:00007fe23cf37028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 569.001813][T10724] RAX: ffffffffffffffda RBX: 00007fe23c225fa0 RCX: 00007fe23bf9e0d9 [ 569.009827][T10724] RDX: 0000000000000009 RSI: 0000000000000084 RDI: 0000000000000003 [ 569.017848][T10724] RBP: 00007fe23cf37090 R08: 0000000000000098 R09: 0000000000000000 [ 569.025875][T10724] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 569.033929][T10724] R13: 00007fe23c226038 R14: 00007fe23c225fa0 R15: 00007fffec675f18 [ 569.041959][T10724] [ 569.411017][T10743] netlink: 'syz.2.1799': attribute type 21 has an invalid length. [ 569.435901][T10743] IPv6: NLM_F_CREATE should be specified when creating new route [ 569.453907][T10743] IPv6: Can't replace route, no match found [ 569.579793][T10749] netlink: 'syz.1.1801': attribute type 39 has an invalid length. [ 569.904529][T10768] veth1_macvtap: left promiscuous mode [ 569.910261][T10768] macsec0: left promiscuous mode [ 569.961801][T10768] veth1_macvtap: entered promiscuous mode [ 569.976376][T10768] macsec0: entered promiscuous mode [ 570.408487][T10787] FAULT_INJECTION: forcing a failure. [ 570.408487][T10787] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 570.422035][T10787] CPU: 0 PID: 10787 Comm: syz.0.1818 Not tainted syzkaller #0 [ 570.429548][T10787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 570.439640][T10787] Call Trace: [ 570.442943][T10787] [ 570.445909][T10787] dump_stack_lvl+0x18c/0x250 [ 570.450644][T10787] ? show_regs_print_info+0x20/0x20 [ 570.455896][T10787] ? load_image+0x420/0x420 [ 570.460547][T10787] ? __lock_acquire+0x7d80/0x7d80 [ 570.465590][T10787] ? snprintf+0xe9/0x140 [ 570.469883][T10787] should_fail_ex+0x394/0x4c0 [ 570.474625][T10787] _copy_to_user+0x2f/0xa0 [ 570.479068][T10787] simple_read_from_buffer+0xe7/0x150 [ 570.484466][T10787] proc_fail_nth_read+0x1e8/0x260 [ 570.489541][T10787] ? proc_fault_inject_write+0x360/0x360 [ 570.495213][T10787] ? fsnotify_perm+0x271/0x5e0 [ 570.499988][T10787] ? proc_fault_inject_write+0x360/0x360 [ 570.505637][T10787] vfs_read+0x298/0x990 [ 570.509853][T10787] ? kernel_read+0x1e0/0x1e0 [ 570.514475][T10787] ? __fget_files+0x28/0x460 [ 570.519071][T10787] ? __fget_files+0x3fc/0x460 [ 570.523776][T10787] ? __fdget_pos+0x2a3/0x330 [ 570.528378][T10787] ? ksys_read+0x74/0x260 [ 570.532736][T10787] ksys_read+0x151/0x260 [ 570.536984][T10787] ? vfs_write+0x9a0/0x9a0 [ 570.541447][T10787] ? lockdep_hardirqs_on+0x98/0x150 [ 570.546668][T10787] do_syscall_64+0x55/0xb0 [ 570.551107][T10787] ? clear_bhb_loop+0x40/0x90 [ 570.555801][T10787] ? clear_bhb_loop+0x40/0x90 [ 570.560520][T10787] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 570.566437][T10787] RIP: 0033:0x7faabd35e90e [ 570.570875][T10787] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 570.590576][T10787] RSP: 002b:00007faabe227fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 570.598991][T10787] RAX: ffffffffffffffda RBX: 00007faabe2286c0 RCX: 00007faabd35e90e [ 570.607066][T10787] RDX: 000000000000000f RSI: 00007faabe2280a0 RDI: 0000000000000004 [ 570.615073][T10787] RBP: 00007faabe228090 R08: 0000000000000000 R09: 0000000000000000 [ 570.623058][T10787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 570.631056][T10787] R13: 00007faabd626038 R14: 00007faabd625fa0 R15: 00007ffeab475198 [ 570.639087][T10787] [ 570.823366][T10795] netlink: 'syz.3.1820': attribute type 1 has an invalid length. [ 571.111779][T10804] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1825'. [ 571.761895][T10821] veth1_macvtap: left promiscuous mode [ 571.775764][T10821] macsec0: left promiscuous mode [ 571.803377][T10826] veth1_macvtap: entered promiscuous mode [ 571.809654][T10826] macsec0: entered promiscuous mode [ 573.527078][T10830] netlink: 'syz.1.1833': attribute type 5 has an invalid length. [ 573.535042][T10830] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1833'. [ 574.057022][T10849] netlink: 'syz.3.1841': attribute type 19 has an invalid length. [ 574.215985][T10858] veth1_macvtap: left promiscuous mode [ 574.225795][T10858] macsec0: left promiscuous mode [ 574.252662][T10863] veth1_macvtap: entered promiscuous mode [ 574.258681][T10863] macsec0: entered promiscuous mode [ 574.884950][T10876] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 575.570233][T10889] syzkaller0: entered promiscuous mode [ 575.604219][T10889] syzkaller0: entered allmulticast mode [ 575.953331][T10912] veth1_macvtap: left promiscuous mode [ 575.975694][T10912] macsec0: left promiscuous mode [ 576.230613][T10912] veth1_macvtap: entered promiscuous mode [ 576.239873][T10912] macsec0: entered promiscuous mode [ 577.215914][ T5868] wlan1: Trigger new scan to find an IBSS to join [ 580.463991][T10929] netlink: 'syz.3.1867': attribute type 39 has an invalid length. [ 581.312367][T10963] veth1_macvtap: left promiscuous mode [ 581.334467][T10963] macsec0: left promiscuous mode [ 581.390233][T10964] veth1_macvtap: entered promiscuous mode [ 581.425548][T10964] macsec0: entered promiscuous mode [ 582.084363][T10981] IPv6: Can't replace route, no match found [ 582.207393][ T6864] wlan1: Trigger new scan to find an IBSS to join [ 583.260634][T11014] veth1_macvtap: left promiscuous mode [ 583.266508][T11014] macsec0: left promiscuous mode [ 583.304829][T11014] veth1_macvtap: entered promiscuous mode [ 583.315916][T11014] macsec0: entered promiscuous mode [ 583.421121][ T6874] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 583.573876][T11018] syzkaller0: entered promiscuous mode [ 583.610347][T11018] syzkaller0: entered allmulticast mode [ 586.063630][T11047] veth1_macvtap: left promiscuous mode [ 586.080021][T11047] macsec0: left promiscuous mode [ 586.136440][T11047] veth1_macvtap: entered promiscuous mode [ 586.142312][T11047] macsec0: entered promiscuous mode [ 587.769618][T11079] netlink: 'syz.3.1920': attribute type 39 has an invalid length. [ 587.813919][T11085] veth1_macvtap: left promiscuous mode [ 587.819921][T11085] macsec0: left promiscuous mode [ 587.859935][T11085] veth1_macvtap: entered promiscuous mode [ 587.877127][T11085] macsec0: entered promiscuous mode [ 589.067030][T11102] netlink: 'syz.1.1927': attribute type 3 has an invalid length. [ 589.075199][T11102] netlink: 13435 bytes leftover after parsing attributes in process `syz.1.1927'. [ 589.584809][T11122] netlink: 'syz.0.1937': attribute type 10 has an invalid length. [ 589.632305][T11122] team0: Port device geneve1 added [ 589.697570][T11126] veth1_macvtap: left promiscuous mode [ 589.716303][T11126] macsec0: left promiscuous mode [ 589.777992][T11126] veth1_macvtap: entered promiscuous mode [ 589.805961][T11126] macsec0: entered promiscuous mode [ 590.029702][T11136] netlink: 'syz.2.1941': attribute type 2 has an invalid length. [ 590.106969][T11141] €Â0: renamed from batadv_slave_1 (while UP) [ 591.367435][T11182] veth1_macvtap: left promiscuous mode [ 591.376482][T11182] macsec0: left promiscuous mode [ 591.418926][T11182] veth1_macvtap: entered promiscuous mode [ 591.445941][T11182] macsec0: entered promiscuous mode [ 591.683044][T11187] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.1957'. [ 591.707559][T11187] netlink: 6320 bytes leftover after parsing attributes in process `syz.2.1957'. [ 592.068630][T11197] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.1960'. [ 592.082383][T11197] bridge_slave_1: default FDB implementation only supports local addresses [ 592.346945][T11207] netlink: 14546 bytes leftover after parsing attributes in process `syz.3.1965'. [ 592.894857][T11225] veth1_macvtap: left promiscuous mode [ 592.918009][T11225] macsec0: left promiscuous mode [ 592.966202][T11225] veth1_macvtap: entered promiscuous mode [ 592.980310][T11225] macsec0: entered promiscuous mode [ 593.153268][T11233] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.1975'. [ 593.184184][T11230] netlink: 'syz.1.1974': attribute type 39 has an invalid length. [ 594.443762][T11277] veth1_macvtap: left promiscuous mode [ 594.463216][T11277] macsec0: left promiscuous mode [ 594.502672][T11277] veth1_macvtap: entered promiscuous mode [ 594.535735][T11277] macsec0: entered promiscuous mode [ 594.558011][T11282] netlink: 703 bytes leftover after parsing attributes in process `syz.1.1993'. [ 594.895014][T11290] netlink: 'syz.3.1995': attribute type 39 has an invalid length. [ 595.248320][T11295] tun0: tun_chr_ioctl cmd 1074025681 [ 596.386290][T11327] veth1_macvtap: left promiscuous mode [ 596.420655][T11327] macsec0: left promiscuous mode [ 596.498161][T11327] veth1_macvtap: entered promiscuous mode [ 596.503966][T11327] macsec0: entered promiscuous mode [ 597.328166][T11338] FAULT_INJECTION: forcing a failure. [ 597.328166][T11338] name failslab, interval 1, probability 0, space 0, times 0 [ 597.365732][T11338] CPU: 1 PID: 11338 Comm: syz.3.2012 Not tainted syzkaller #0 [ 597.373463][T11338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 597.383554][T11338] Call Trace: [ 597.387041][T11338] [ 597.390004][T11338] dump_stack_lvl+0x18c/0x250 [ 597.394736][T11338] ? show_regs_print_info+0x20/0x20 [ 597.400066][T11338] ? load_image+0x420/0x420 [ 597.404708][T11338] ? __might_sleep+0xe0/0xe0 [ 597.409526][T11338] ? __lock_acquire+0x7d80/0x7d80 [ 597.414700][T11338] should_fail_ex+0x394/0x4c0 [ 597.419453][T11338] should_failslab+0x9/0x20 [ 597.424005][T11338] slab_pre_alloc_hook+0x59/0x300 [ 597.429168][T11338] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 597.434946][T11338] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 597.440970][T11338] __kmem_cache_alloc_node+0x53/0x250 [ 597.446415][T11338] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 597.452276][T11338] __kmalloc+0xa7/0x240 [ 597.456486][T11338] tomoyo_realpath_from_path+0xe6/0x5c0 [ 597.462090][T11338] ? tomoyo_domain+0xd6/0x120 [ 597.466826][T11338] tomoyo_path_number_perm+0x248/0x5e0 [ 597.472325][T11338] ? tomoyo_path_number_perm+0x217/0x5e0 [ 597.478171][T11338] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 597.483865][T11338] ? ksys_write+0x1d2/0x260 [ 597.488447][T11338] ? __fget_files+0x28/0x460 [ 597.493140][T11338] security_file_ioctl+0x70/0xa0 [ 597.498134][T11338] __se_sys_ioctl+0x48/0x170 [ 597.502768][T11338] do_syscall_64+0x55/0xb0 [ 597.507234][T11338] ? clear_bhb_loop+0x40/0x90 [ 597.512041][T11338] ? clear_bhb_loop+0x40/0x90 [ 597.516758][T11338] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 597.522683][T11338] RIP: 0033:0x7fe23bf9e0d9 [ 597.527141][T11338] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 597.546780][T11338] RSP: 002b:00007fe23cef5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 597.555232][T11338] RAX: ffffffffffffffda RBX: 00007fe23c226180 RCX: 00007fe23bf9e0d9 [ 597.563237][T11338] RDX: 0000000000000000 RSI: 000000000000890b RDI: 0000000000000005 [ 597.571530][T11338] RBP: 00007fe23cef5090 R08: 0000000000000000 R09: 0000000000000000 [ 597.579536][T11338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 597.587724][T11338] R13: 00007fe23c226218 R14: 00007fe23c226180 R15: 00007fffec675f18 [ 597.595745][T11338] [ 597.675846][T11338] ERROR: Out of memory at tomoyo_realpath_from_path. [ 598.861094][T11340] tun0: tun_chr_ioctl cmd 1074025681 [ 599.697004][T11365] netlink: 'syz.3.2023': attribute type 29 has an invalid length. [ 599.705224][T11365] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2023'. [ 599.730377][T11361] veth1_macvtap: left promiscuous mode [ 599.737337][T11361] macsec0: left promiscuous mode [ 599.871951][T11368] veth1_macvtap: entered promiscuous mode [ 599.888907][T11368] macsec0: entered promiscuous mode [ 599.901549][T11365] netlink: 'syz.3.2023': attribute type 29 has an invalid length. [ 599.933795][T11365] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2023'. [ 599.960118][T11369] netlink: 'syz.3.2023': attribute type 15 has an invalid length. [ 599.969142][T11369] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2023'. [ 600.287081][T11384] tun0: tun_chr_ioctl cmd 1074025681 [ 600.748235][T11400] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2035'. [ 600.769108][T11400] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 600.841208][T11403] netlink: 'syz.0.2036': attribute type 11 has an invalid length. [ 600.854877][T11403] netlink: 184116 bytes leftover after parsing attributes in process `syz.0.2036'. [ 601.310582][T11409] veth1_macvtap: left promiscuous mode [ 601.317775][T11409] macsec0: left promiscuous mode [ 601.356704][T11409] veth1_macvtap: entered promiscuous mode [ 601.365679][T11409] macsec0: entered promiscuous mode [ 603.170797][T11458] veth1_macvtap: left promiscuous mode [ 603.177771][T11458] macsec0: left promiscuous mode [ 603.200549][T11459] veth1_macvtap: entered promiscuous mode [ 603.216544][T11459] macsec0: entered promiscuous mode [ 604.066971][T11485] FAULT_INJECTION: forcing a failure. [ 604.066971][T11485] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 604.091299][T11485] CPU: 0 PID: 11485 Comm: syz.1.2065 Not tainted syzkaller #0 [ 604.098817][T11485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 604.110333][T11485] Call Trace: [ 604.113727][T11485] [ 604.116678][T11485] dump_stack_lvl+0x18c/0x250 [ 604.121388][T11485] ? show_regs_print_info+0x20/0x20 [ 604.126609][T11485] ? load_image+0x420/0x420 [ 604.131232][T11485] ? __might_fault+0xaa/0x120 [ 604.136015][T11485] ? __lock_acquire+0x7d80/0x7d80 [ 604.141060][T11485] should_fail_ex+0x394/0x4c0 [ 604.145761][T11485] _copy_from_user+0x2f/0xe0 [ 604.150397][T11485] inet_ioctl+0x2f9/0x560 [ 604.154766][T11485] ? inet_shutdown+0x370/0x370 [ 604.159555][T11485] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 604.165755][T11485] ? lockdep_hardirqs_on+0x98/0x150 [ 604.171005][T11485] ? packet_ioctl+0x29e/0x350 [ 604.175793][T11485] ? packet_ioctl+0x279/0x350 [ 604.180907][T11485] sock_do_ioctl+0xfc/0x310 [ 604.185439][T11485] ? sock_show_fdinfo+0xb0/0xb0 [ 604.190441][T11485] sock_ioctl+0x5be/0x7e0 [ 604.194839][T11485] ? sock_poll+0x3e0/0x3e0 [ 604.199391][T11485] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 604.206120][T11485] ? bpf_lsm_file_ioctl+0x9/0x10 [ 604.211119][T11485] ? security_file_ioctl+0x80/0xa0 [ 604.216428][T11485] ? sock_poll+0x3e0/0x3e0 [ 604.220866][T11485] __se_sys_ioctl+0xfd/0x170 [ 604.225489][T11485] do_syscall_64+0x55/0xb0 [ 604.230103][T11485] ? clear_bhb_loop+0x40/0x90 [ 604.234980][T11485] ? clear_bhb_loop+0x40/0x90 [ 604.239757][T11485] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 604.245665][T11485] RIP: 0033:0x7f782359e0d9 [ 604.250318][T11485] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 604.270279][T11485] RSP: 002b:00007f782454a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 604.278910][T11485] RAX: ffffffffffffffda RBX: 00007f7823825fa0 RCX: 00007f782359e0d9 [ 604.286913][T11485] RDX: 0000000000000000 RSI: 000000000000890b RDI: 0000000000000005 [ 604.294921][T11485] RBP: 00007f782454a090 R08: 0000000000000000 R09: 0000000000000000 [ 604.303187][T11485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 604.311266][T11485] R13: 00007f7823826038 R14: 00007f7823825fa0 R15: 00007ffe781f31d8 [ 604.319423][T11485] [ 604.690849][T11497] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.2071'. [ 604.830920][T11504] veth1_macvtap: left promiscuous mode [ 604.849523][T11504] macsec0: left promiscuous mode [ 604.880371][T11504] veth1_macvtap: entered promiscuous mode [ 604.905896][T11504] macsec0: entered promiscuous mode [ 605.830721][T11542] netlink: 'syz.3.2090': attribute type 39 has an invalid length. [ 606.189898][T11562] FAULT_INJECTION: forcing a failure. [ 606.189898][T11562] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 606.237390][T11562] CPU: 0 PID: 11562 Comm: syz.2.2096 Not tainted syzkaller #0 [ 606.244932][T11562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 606.255035][T11562] Call Trace: [ 606.258351][T11562] [ 606.261349][T11562] dump_stack_lvl+0x18c/0x250 [ 606.266047][T11562] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 606.272243][T11562] ? show_regs_print_info+0x20/0x20 [ 606.277491][T11562] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 606.283720][T11562] ? dump_stack+0x9/0x20 [ 606.288032][T11562] should_fail_ex+0x394/0x4c0 [ 606.292769][T11562] _copy_to_user+0x2f/0xa0 [ 606.297254][T11562] simple_read_from_buffer+0xe7/0x150 [ 606.302683][T11562] proc_fail_nth_read+0x1e8/0x260 [ 606.307767][T11562] ? proc_fault_inject_write+0x360/0x360 [ 606.313725][T11562] ? fsnotify_perm+0x271/0x5e0 [ 606.318549][T11562] ? proc_fault_inject_write+0x360/0x360 [ 606.324263][T11562] vfs_read+0x298/0x990 [ 606.328479][T11562] ? kernel_read+0x1e0/0x1e0 [ 606.333125][T11562] ? __fget_files+0x28/0x460 [ 606.337776][T11562] ? __fget_files+0x3fc/0x460 [ 606.342524][T11562] ? __fdget_pos+0x2a3/0x330 [ 606.347161][T11562] ? ksys_read+0x74/0x260 [ 606.351631][T11562] ksys_read+0x151/0x260 [ 606.355930][T11562] ? vfs_write+0x9a0/0x9a0 [ 606.360396][T11562] ? syscall_enter_from_user_mode+0x2e/0x80 [ 606.366344][T11562] do_syscall_64+0x55/0xb0 [ 606.370886][T11562] ? clear_bhb_loop+0x40/0x90 [ 606.375687][T11562] ? clear_bhb_loop+0x40/0x90 [ 606.380405][T11562] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 606.386345][T11562] RIP: 0033:0x7f7275b5e90e [ 606.390825][T11562] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 606.410644][T11562] RSP: 002b:00007f7276ad9fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 606.419178][T11562] RAX: ffffffffffffffda RBX: 00007f7276ada6c0 RCX: 00007f7275b5e90e [ 606.427267][T11562] RDX: 000000000000000f RSI: 00007f7276ada0a0 RDI: 0000000000000009 [ 606.435271][T11562] RBP: 00007f7276ada090 R08: 0000000000000000 R09: 0000000000000000 [ 606.443340][T11562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 606.451434][T11562] R13: 00007f7275e26038 R14: 00007f7275e25fa0 R15: 00007fff6ad11368 [ 606.459554][T11562] [ 606.478261][T11574] veth1_macvtap: left promiscuous mode [ 606.483813][T11574] macsec0: left promiscuous mode [ 606.553448][T11579] veth1_macvtap: entered promiscuous mode [ 606.591592][T11579] macsec0: entered promiscuous mode [ 607.438243][T11601] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.2109'. [ 608.477367][T11616] netlink: 'syz.0.2114': attribute type 39 has an invalid length. [ 608.887347][T11632] netlink: 'syz.2.2117': attribute type 17 has an invalid length. [ 608.908966][T11632] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2117'. [ 608.935741][T11632] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 609.006177][T11640] veth1_macvtap: left promiscuous mode [ 609.011718][T11640] macsec0: left promiscuous mode [ 609.057887][T11640] veth1_macvtap: entered promiscuous mode [ 609.065873][T11640] macsec0: entered promiscuous mode [ 610.051943][T11662] netlink: 'syz.3.2126': attribute type 33 has an invalid length. [ 610.064979][T11662] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2126'. [ 610.306416][T11667] sit0: entered allmulticast mode [ 610.385921][T11673] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2129'. [ 610.395141][T11673] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2129'. [ 610.932540][T11689] veth1_macvtap: left promiscuous mode [ 610.962056][T11689] macsec0: left promiscuous mode [ 610.995751][T11692] veth1_macvtap: entered promiscuous mode [ 611.037542][T11692] macsec0: entered promiscuous mode [ 611.338636][T11700] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.2141'. [ 611.455752][T11708] netlink: 'syz.0.2144': attribute type 10 has an invalid length. [ 611.565398][T11708] team0: Device wg1 is of different type [ 612.734087][T11734] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.2154'. [ 613.298231][T11745] veth1_macvtap: left promiscuous mode [ 613.319153][T11745] macsec0: left promiscuous mode [ 613.475403][T11745] veth1_macvtap: entered promiscuous mode [ 613.487020][T11745] macsec0: entered promiscuous mode [ 614.738908][T11772] netlink: 'syz.1.2165': attribute type 10 has an invalid length. [ 614.998682][T11772] team0: Device wg1 is of different type [ 615.492440][T11792] veth1_macvtap: left promiscuous mode [ 615.515655][T11792] macsec0: left promiscuous mode [ 615.548434][T11792] veth1_macvtap: entered promiscuous mode [ 615.554339][T11792] macsec0: entered promiscuous mode [ 616.000290][T11804] netlink: 'syz.2.2178': attribute type 10 has an invalid length. [ 616.045819][T11804] team0: Device wg1 is of different type [ 617.098927][T11828] netlink: set zone limit has 8 unknown bytes [ 617.762209][T11832] netlink: 'syz.3.2189': attribute type 10 has an invalid length. [ 618.001231][T11832] team0: Device wg1 is of different type [ 618.720941][T11850] netlink: 'syz.3.2198': attribute type 10 has an invalid length. [ 618.769104][T11850] team0: Device wg1 is of different type [ 619.906296][T11878] FAULT_INJECTION: forcing a failure. [ 619.906296][T11878] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 619.924146][T11878] CPU: 1 PID: 11878 Comm: syz.0.2208 Not tainted syzkaller #0 [ 619.931634][T11878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 619.941703][T11878] Call Trace: [ 619.944999][T11878] [ 619.947940][T11878] dump_stack_lvl+0x18c/0x250 [ 619.952634][T11878] ? asm_sysvec_call_function_single+0x1a/0x20 [ 619.958886][T11878] ? show_regs_print_info+0x20/0x20 [ 619.964095][T11878] ? asm_sysvec_call_function_single+0x1a/0x20 [ 619.971817][T11878] should_fail_ex+0x394/0x4c0 [ 619.976541][T11878] _copy_to_user+0x2f/0xa0 [ 619.980980][T11878] bpf_prog_test_run_syscall+0x33f/0x4b0 [ 619.986643][T11878] ? sock_gen_cookie+0x60/0x60 [ 619.991578][T11878] ? sock_gen_cookie+0x60/0x60 [ 619.996362][T11878] bpf_prog_test_run+0x31f/0x390 [ 620.001321][T11878] __sys_bpf+0x49d/0x890 [ 620.005595][T11878] ? read_tsc+0x9/0x20 [ 620.009688][T11878] ? bpf_link_show_fdinfo+0x390/0x390 [ 620.015081][T11878] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 620.021348][T11878] __x64_sys_bpf+0x7c/0x90 [ 620.025786][T11878] do_syscall_64+0x55/0xb0 [ 620.030835][T11878] ? clear_bhb_loop+0x40/0x90 [ 620.035624][T11878] ? clear_bhb_loop+0x40/0x90 [ 620.040315][T11878] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 620.046222][T11878] RIP: 0033:0x7faabd39e0d9 [ 620.050648][T11878] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 620.070448][T11878] RSP: 002b:00007faabe228028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 620.078967][T11878] RAX: ffffffffffffffda RBX: 00007faabd625fa0 RCX: 00007faabd39e0d9 [ 620.086958][T11878] RDX: 0000000000000048 RSI: 0000200000000500 RDI: 000000000000000a [ 620.094959][T11878] RBP: 00007faabe228090 R08: 0000000000000000 R09: 0000000000000000 [ 620.102969][T11878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 620.111581][T11878] R13: 00007faabd626038 R14: 00007faabd625fa0 R15: 00007ffeab475198 [ 620.119592][T11878] [ 620.234214][T11886] netlink: 'syz.2.2212': attribute type 21 has an invalid length. [ 620.268089][T11888] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2213'. [ 620.295760][T11888] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 620.348360][T11888] FAULT_INJECTION: forcing a failure. [ 620.348360][T11888] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 620.381305][T11891] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2215'. [ 620.392618][T11891] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 620.449152][T11888] CPU: 0 PID: 11888 Comm: syz.3.2213 Not tainted syzkaller #0 [ 620.456697][T11888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 620.466803][T11888] Call Trace: [ 620.470117][T11888] [ 620.473079][T11888] dump_stack_lvl+0x18c/0x250 [ 620.477897][T11888] ? show_regs_print_info+0x20/0x20 [ 620.483149][T11888] ? load_image+0x420/0x420 [ 620.487720][T11888] ? __lock_acquire+0x7d80/0x7d80 [ 620.492799][T11888] ? snprintf+0xe9/0x140 [ 620.497108][T11888] should_fail_ex+0x394/0x4c0 [ 620.501842][T11888] _copy_to_user+0x2f/0xa0 [ 620.506319][T11888] simple_read_from_buffer+0xe7/0x150 [ 620.511745][T11888] proc_fail_nth_read+0x1e8/0x260 [ 620.516929][T11888] ? proc_fault_inject_write+0x360/0x360 [ 620.522619][T11888] ? fsnotify_perm+0x271/0x5e0 [ 620.527432][T11888] ? proc_fault_inject_write+0x360/0x360 [ 620.533119][T11888] vfs_read+0x298/0x990 [ 620.537332][T11888] ? kernel_read+0x1e0/0x1e0 [ 620.541978][T11888] ? __fget_files+0x28/0x460 [ 620.546617][T11888] ? __fget_files+0x3fc/0x460 [ 620.551353][T11888] ? __fdget_pos+0x2a3/0x330 [ 620.555986][T11888] ? ksys_read+0x74/0x260 [ 620.560369][T11888] ksys_read+0x151/0x260 [ 620.564659][T11888] ? vfs_write+0x9a0/0x9a0 [ 620.569132][T11888] ? lockdep_hardirqs_on+0x98/0x150 [ 620.574393][T11888] do_syscall_64+0x55/0xb0 [ 620.578866][T11888] ? clear_bhb_loop+0x40/0x90 [ 620.583770][T11888] ? clear_bhb_loop+0x40/0x90 [ 620.588495][T11888] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 620.594433][T11888] RIP: 0033:0x7fe23bf5e90e [ 620.598981][T11888] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 620.618648][T11888] RSP: 002b:00007fe23cf36fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 620.627119][T11888] RAX: ffffffffffffffda RBX: 00007fe23cf376c0 RCX: 00007fe23bf5e90e [ 620.635337][T11888] RDX: 000000000000000f RSI: 00007fe23cf370a0 RDI: 0000000000000006 [ 620.643365][T11888] RBP: 00007fe23cf37090 R08: 0000000000000000 R09: 0000000000000000 [ 620.651471][T11888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 620.659513][T11888] R13: 00007fe23c226038 R14: 00007fe23c225fa0 R15: 00007fffec675f18 [ 620.667549][T11888] [ 621.258291][T11913] netlink: 208052 bytes leftover after parsing attributes in process `syz.1.2223'. [ 621.279316][T11913] netlink: 'syz.1.2223': attribute type 1 has an invalid length. [ 621.297312][T11913] netlink: 'syz.1.2223': attribute type 2 has an invalid length. [ 621.305326][T11913] netlink: 'syz.1.2223': attribute type 3 has an invalid length. [ 621.314364][T11913] netlink: 'syz.1.2223': attribute type 4 has an invalid length. [ 621.727696][T11923] netlink: 'syz.2.2227': attribute type 39 has an invalid length. [ 622.319450][T11940] netlink: 'syz.1.2236': attribute type 10 has an invalid length. [ 622.334878][T11940] team0: Device wg1 is of different type [ 623.476856][T11975] netlink: 'syz.1.2250': attribute type 10 has an invalid length. [ 623.551597][T11975] team0: Device wg1 is of different type [ 623.717723][T11980] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2251'. [ 624.374299][T11996] netlink: 'syz.0.2259': attribute type 39 has an invalid length. [ 624.662970][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.669533][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.697768][T12005] netlink: 'syz.1.2264': attribute type 10 has an invalid length. [ 624.717886][T12005] team0: Device wg1 is of different type [ 624.867609][T12012] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2266'. [ 624.877253][T12012] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 625.471325][T12039] netlink: 'syz.2.2277': attribute type 10 has an invalid length. [ 625.485462][T12039] team0: Device wg1 is of different type [ 625.571351][T12033] netlink: 'syz.3.2275': attribute type 10 has an invalid length. [ 625.587260][T12033] netlink: 'syz.3.2275': attribute type 19 has an invalid length. [ 625.601447][T12033] netlink: 14536 bytes leftover after parsing attributes in process `syz.3.2275'. [ 625.691722][T12045] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2278'. [ 625.727418][T12045] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 626.093802][T12053] netlink: 'syz.3.2282': attribute type 39 has an invalid length. [ 626.183184][T12055] netlink: 'syz.1.2283': attribute type 39 has an invalid length. [ 626.705430][T12068] netlink: 'syz.3.2289': attribute type 10 has an invalid length. [ 626.725494][T12068] team0: Device wg1 is of different type [ 627.117484][T12080] netlink: 'syz.0.2302': attribute type 10 has an invalid length. [ 627.151258][T12080] team0: Device wg1 is of different type [ 627.786249][T12098] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2299'. [ 628.172677][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 628.191493][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 628.211075][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 628.221092][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 628.238374][ T51] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 628.246567][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 628.658957][T11155] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.793837][T12121] validate_nla: 2 callbacks suppressed [ 628.793854][T12121] netlink: 'syz.2.2307': attribute type 4 has an invalid length. [ 628.842272][T12121] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2307'. [ 629.388659][T11155] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.527331][T11155] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.576348][T12135] netlink: 'syz.2.2311': attribute type 10 has an invalid length. [ 629.595886][T12135] bridge0: port 2(bridge_slave_1) entered disabled state [ 629.689978][T12135] bridge0: port 2(bridge_slave_1) entered blocking state [ 629.697906][T12135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 629.758041][T12135] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 629.864584][T11155] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.064538][T12149] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2313'. [ 630.129008][T12108] chnl_net:caif_netlink_parms(): no params data found [ 630.296793][T12151] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2313'. [ 630.345852][ T5821] Bluetooth: hci4: command tx timeout [ 630.352824][T12151] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 631.222597][T12108] bridge0: port 1(bridge_slave_0) entered blocking state [ 631.233842][T12108] bridge0: port 1(bridge_slave_0) entered disabled state [ 631.241736][T12108] bridge_slave_0: entered allmulticast mode [ 631.251155][T12108] bridge_slave_0: entered promiscuous mode [ 631.259590][T12166] netlink: 'syz.2.2318': attribute type 39 has an invalid length. [ 631.322911][T12108] bridge0: port 2(bridge_slave_1) entered blocking state [ 631.330401][T12108] bridge0: port 2(bridge_slave_1) entered disabled state [ 631.342348][T12108] bridge_slave_1: entered allmulticast mode [ 631.350878][T12108] bridge_slave_1: entered promiscuous mode [ 631.502470][T12108] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 631.593421][T12108] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 631.731960][T12179] netlink: 'syz.2.2321': attribute type 8 has an invalid length. [ 631.750599][T12179] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2321'. [ 631.960302][T12108] team0: Port device team_slave_0 added [ 632.001109][T12108] team0: Port device team_slave_1 added [ 632.273398][T12108] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 632.291952][T12108] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 632.340007][T12108] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 632.418146][ T5821] Bluetooth: hci4: command tx timeout [ 632.596494][T12108] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 632.603519][T12108] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 632.672522][T12108] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 633.419168][T12108] hsr_slave_0: entered promiscuous mode [ 633.437944][T12108] hsr_slave_1: entered promiscuous mode [ 633.444738][T12108] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 633.469812][T12108] Cannot create hsr debugfs directory [ 633.694016][T11155] [ 633.696408][T11155] ====================================================== [ 633.703451][T11155] WARNING: possible circular locking dependency detected [ 633.710494][T11155] syzkaller #0 Not tainted [ 633.714934][T11155] ------------------------------------------------------ [ 633.721988][T11155] kworker/u4:29/11155 is trying to acquire lock: [ 633.728338][T11155] ffff88807acacd80 (team->team_lock_key){+.+.}-{3:3}, at: team_del_slave+0x31/0x1b0 [ 633.737851][T11155] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 633.737851][T11155] but task is already holding lock: [ 633.745238][T11155] ffff88807da58768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x2bd/0x690 [ 633.755713][T11155] [ 633.755713][T11155] which lock already depends on the new lock. [ 633.755713][T11155] [ 633.766138][T11155] [ 633.766138][T11155] the existing dependency chain (in reverse order) is: [ 633.775270][T11155] [ 633.775270][T11155] -> #1 (&rdev->wiphy.mtx){+.+.}-{3:3}: [ 633.783312][T11155] __mutex_lock+0x135/0xc80 [ 633.788863][T11155] ieee80211_open+0x144/0x200 [ 633.794666][T11155] __dev_open+0x2cb/0x430 [ 633.800133][T11155] dev_open+0xab/0x190 [ 633.804761][T11155] team_add_slave+0x703/0x28a0 [ 633.810092][T11155] do_setlink+0xcde/0x3f40 [ 633.815220][T11155] rtnl_newlink+0x1848/0x2170 [ 633.820624][T11155] rtnetlink_rcv_msg+0x843/0xf90 [ 633.826121][T11155] netlink_rcv_skb+0x235/0x4c0 [ 633.831447][T11155] netlink_unicast+0x7b1/0x930 [ 633.836803][T11155] netlink_sendmsg+0x8d0/0xbf0 [ 633.842127][T11155] ____sys_sendmsg+0x61b/0x980 [ 633.847450][T11155] ___sys_sendmsg+0x2a6/0x360 [ 633.852685][T11155] __se_sys_sendmsg+0x1d0/0x2c0 [ 633.858117][T11155] do_syscall_64+0x55/0xb0 [ 633.863090][T11155] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 633.869543][T11155] [ 633.869543][T11155] -> #0 (team->team_lock_key){+.+.}-{3:3}: [ 633.877589][T11155] __lock_acquire+0x37ef/0x7d80 [ 633.883004][T11155] lock_acquire+0x19e/0x420 [ 633.888070][T11155] __mutex_lock+0x135/0xc80 [ 633.893133][T11155] team_del_slave+0x31/0x1b0 [ 633.898286][T11155] team_device_event+0x297/0xa30 [ 633.903777][T11155] notifier_call_chain+0x18f/0x380 [ 633.909440][T11155] unregister_netdevice_many_notify+0x1037/0x1910 [ 633.916573][T11155] unregister_netdevice_queue+0x2e9/0x330 [ 633.922931][T11155] _cfg80211_unregister_wdev+0x16d/0x580 [ 633.929119][T11155] ieee80211_remove_interfaces+0x4b3/0x690 [ 633.935474][T11155] ieee80211_unregister_hw+0x5d/0x2a0 [ 633.941389][T11155] mac80211_hwsim_del_radio+0x289/0x480 [ 633.947486][T11155] hwsim_exit_net+0x58d/0x650 [ 633.952714][T11155] cleanup_net+0x707/0xbb0 [ 633.957672][T11155] process_scheduled_works+0xa60/0x1600 [ 633.963768][T11155] worker_thread+0xa5e/0xfe0 [ 633.968908][T11155] kthread+0x2fa/0x390 [ 633.973523][T11155] ret_from_fork+0x48/0x80 [ 633.978471][T11155] ret_from_fork_asm+0x11/0x20 [ 633.983800][T11155] [ 633.983800][T11155] other info that might help us debug this: [ 633.983800][T11155] [ 633.994033][T11155] Possible unsafe locking scenario: [ 633.994033][T11155] [ 634.001516][T11155] CPU0 CPU1 [ 634.006900][T11155] ---- ---- [ 634.012372][T11155] lock(&rdev->wiphy.mtx); [ 634.016910][T11155] lock(team->team_lock_key); [ 634.024240][T11155] lock(&rdev->wiphy.mtx); [ 634.031283][T11155] lock(team->team_lock_key); [ 634.036086][T11155] [ 634.036086][T11155] *** DEADLOCK *** [ 634.036086][T11155] [ 634.044256][T11155] 5 locks held by kworker/u4:29/11155: [ 634.049745][T11155] #0: ffff888140049138 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 634.060883][T11155] #1: ffffc9000c4e7d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 634.071471][T11155] #2: ffffffff8e3c9ad0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x14c/0xbb0 [ 634.080935][T11155] #3: ffffffff8e3d6ac8 (rtnl_mutex){+.+.}-{3:3}, at: ieee80211_unregister_hw+0x55/0x2a0 [ 634.090830][T11155] #4: ffff88807da58768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x2bd/0x690 [ 634.101956][T11155] [ 634.101956][T11155] stack backtrace: [ 634.107961][T11155] CPU: 1 PID: 11155 Comm: kworker/u4:29 Not tainted syzkaller #0 [ 634.115808][T11155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 634.126073][T11155] Workqueue: netns cleanup_net [ 634.130881][T11155] Call Trace: [ 634.134227][T11155] [ 634.137187][T11155] dump_stack_lvl+0x18c/0x250 [ 634.141902][T11155] ? load_image+0x420/0x420 [ 634.146462][T11155] ? show_regs_print_info+0x20/0x20 [ 634.151716][T11155] ? print_circular_bug+0x12b/0x1a0 [ 634.156956][T11155] check_noncircular+0x2fc/0x400 [ 634.162106][T11155] ? print_deadlock_bug+0x5d0/0x5d0 [ 634.167336][T11155] ? lockdep_lock+0xf5/0x230 [ 634.171966][T11155] ? _find_first_zero_bit+0xd6/0x100 [ 634.177304][T11155] __lock_acquire+0x37ef/0x7d80 [ 634.182221][T11155] ? verify_lock_unused+0x140/0x140 [ 634.187465][T11155] ? verify_lock_unused+0x140/0x140 [ 634.192795][T11155] ? __up_read+0x2b8/0x6b0 [ 634.197244][T11155] lock_acquire+0x19e/0x420 [ 634.201872][T11155] ? team_del_slave+0x31/0x1b0 [ 634.206766][T11155] ? __might_sleep+0xe0/0xe0 [ 634.211400][T11155] ? read_lock_is_recursive+0x20/0x20 [ 634.216824][T11155] __mutex_lock+0x135/0xc80 [ 634.221374][T11155] ? team_del_slave+0x31/0x1b0 [ 634.226277][T11155] ? __mutex_lock+0x30d/0xc80 [ 634.231079][T11155] ? team_del_slave+0x31/0x1b0 [ 634.235949][T11155] ? mutex_lock_nested+0x20/0x20 [ 634.240937][T11155] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 634.246715][T11155] team_del_slave+0x31/0x1b0 [ 634.251349][T11155] team_device_event+0x297/0xa30 [ 634.256414][T11155] notifier_call_chain+0x18f/0x380 [ 634.261579][T11155] unregister_netdevice_many_notify+0x1037/0x1910 [ 634.268129][T11155] ? unregister_netdevice_many+0x20/0x20 [ 634.273809][T11155] ? kernfs_remove_by_name_ns+0x117/0x150 [ 634.279584][T11155] ? __lock_acquire+0x7d80/0x7d80 [ 634.284753][T11155] unregister_netdevice_queue+0x2e9/0x330 [ 634.290511][T11155] ? list_netdevice+0x730/0x730 [ 634.295385][T11155] ? kernfs_remove_by_name_ns+0x117/0x150 [ 634.301132][T11155] _cfg80211_unregister_wdev+0x16d/0x580 [ 634.306778][T11155] ieee80211_remove_interfaces+0x4b3/0x690 [ 634.312625][T11155] ? ieee80211_do_stop+0x2000/0x2000 [ 634.317922][T11155] ? rcu_is_watching+0x15/0xb0 [ 634.322705][T11155] ieee80211_unregister_hw+0x5d/0x2a0 [ 634.328098][T11155] mac80211_hwsim_del_radio+0x289/0x480 [ 634.333651][T11155] ? rhashtable_remove_fast+0xc00/0xc00 [ 634.339235][T11155] hwsim_exit_net+0x58d/0x650 [ 634.343927][T11155] ? hwsim_init_net+0x90/0x90 [ 634.348608][T11155] ? __ip_vs_dev_cleanup_batch+0x238/0x250 [ 634.354483][T11155] cleanup_net+0x707/0xbb0 [ 634.358913][T11155] ? ops_free_list+0x3b0/0x3b0 [ 634.363688][T11155] ? _raw_spin_unlock_irq+0x23/0x50 [ 634.368910][T11155] ? process_scheduled_works+0x975/0x1600 [ 634.374626][T11155] ? process_scheduled_works+0x975/0x1600 [ 634.380358][T11155] process_scheduled_works+0xa60/0x1600 [ 634.385935][T11155] ? worker_attach_to_pool+0x370/0x370 [ 634.391392][T11155] ? assign_work+0x3cc/0x5d0 [ 634.395980][T11155] worker_thread+0xa5e/0xfe0 [ 634.400580][T11155] ? _raw_spin_unlock+0x40/0x40 [ 634.405448][T11155] ? __kthread_parkme+0x71/0x1c0 [ 634.410383][T11155] kthread+0x2fa/0x390 [ 634.414445][T11155] ? pr_cont_work+0x550/0x550 [ 634.419118][T11155] ? kthread_blkcg+0xd0/0xd0 [ 634.423703][T11155] ret_from_fork+0x48/0x80 [ 634.428127][T11155] ? kthread_blkcg+0xd0/0xd0 [ 634.432712][T11155] ret_from_fork_asm+0x11/0x20 [ 634.437494][T11155] [ 634.466397][T11155] team0: Port device .3ãc¤± removed [ 634.495764][ T5821] Bluetooth: hci4: command tx timeout [ 635.262238][T11155] hsr_slave_0: left promiscuous mode [ 635.288065][T11155] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 635.295513][T11155] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 635.322865][T11155] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 635.330772][T11155] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 635.339378][T11155] batman_adv: batadv0: Interface deactivated: veth1_virt_wifi [ 635.355718][T11155] batman_adv: batadv0: Removing interface: veth1_virt_wifi [ 635.363853][T11155] bridge_slave_1: left allmulticast mode [ 635.376286][T11155] bridge_slave_1: left promiscuous mode [ 635.382253][T11155] bridge0: port 2(bridge_slave_1) entered disabled state [ 635.409516][T11155] bridge_slave_0: left allmulticast mode [ 635.415313][T11155] bridge_slave_0: left promiscuous mode [ 635.436040][T11155] bridge0: port 1(bridge_slave_0) entered disabled state [ 635.460015][T11155] veth1_macvtap: left promiscuous mode [ 635.477173][T11155] veth0_macvtap: left promiscuous mode [ 635.737692][T11155] team0 (unregistering): Port device team_slave_1 removed [ 635.765314][T11155] team0 (unregistering): Port device team_slave_0 removed [ 635.792405][T11155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 635.820196][T11155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 635.852088][T11155] bond0 (unregistering): (slave veth1_to_bridge): Releasing backup interface [ 635.946553][T11155] bond0 (unregistering): Released all slaves [ 636.427949][T11155] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.468333][T11155] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.523865][T11155] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.604480][T11155] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.714472][T11155] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.773092][T11155] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.822422][T11155] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.893332][T11155] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.026827][T11155] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.081283][T11155] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.132284][T11155] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.182264][T11155] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.932885][T11155] hsr_slave_0: left promiscuous mode [ 638.939259][T11155] hsr_slave_1: left promiscuous mode [ 638.945123][T11155] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 638.952986][T11155] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 638.962559][T11155] bridge_slave_1: left allmulticast mode [ 638.968291][T11155] bridge_slave_1: left promiscuous mode [ 638.973948][T11155] bridge0: port 2(bridge_slave_1) entered disabled state [ 638.982207][T11155] bridge_slave_0: left allmulticast mode [ 638.987952][T11155] bridge_slave_0: left promiscuous mode [ 638.993697][T11155] bridge0: port 1(bridge_slave_0) entered disabled state [ 639.003222][T11155] hsr_slave_0: left promiscuous mode [ 639.009003][T11155] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 639.016567][T11155] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 639.024073][T11155] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 639.031522][T11155] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 639.040518][T11155] bridge_slave_1: left allmulticast mode [ 639.046572][T11155] bridge_slave_1: left promiscuous mode [ 639.052318][T11155] bridge0: port 2(bridge_slave_1) entered disabled state [ 639.060463][T11155] bridge_slave_0: left allmulticast mode [ 639.066173][T11155] bridge_slave_0: left promiscuous mode [ 639.071816][T11155] bridge0: port 1(bridge_slave_0) entered disabled state [ 639.081301][T11155] hsr_slave_0: left promiscuous mode [ 639.087142][T11155] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 639.094604][T11155] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 639.102776][T11155] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 639.110308][T11155] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 639.118962][T11155] hsr0: left allmulticast mode [ 639.123912][T11155] bridge0: port 3(hsr0) entered disabled state [ 639.131288][T11155] bridge_slave_1: left allmulticast mode [ 639.137333][T11155] bridge_slave_1: left promiscuous mode [ 639.142966][T11155] bridge0: port 2(bridge_slave_1) entered disabled state [ 639.151911][T11155] @0Ù: left allmulticast mode [ 639.156852][T11155] @0Ù: left promiscuous mode [ 639.161978][T11155] bridge0: port 1(c@0Ù) entered disabled state [ 639.172306][T11155] hsr_slave_0: left promiscuous mode [ 639.178398][T11155] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 639.185925][T11155] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 639.194118][T11155] batman_adv: batadv0: Interface deactivated: €Â0 [ 639.200880][T11155] batman_adv: batadv0: Removing interface: €Â0 [ 639.208373][T11155] bridge_slave_1: left allmulticast mode [ 639.214027][T11155] bridge_slave_1: left promiscuous mode [ 639.220240][T11155] bridge0: port 2(bridge_slave_1) entered disabled state [ 639.231746][T11155] veth1_macvtap: left promiscuous mode [ 639.238237][T11155] veth1_macvtap: left promiscuous mode [ 639.243858][T11155] veth0_macvtap: left promiscuous mode [ 639.250522][T11155] veth1_macvtap: left promiscuous mode [ 639.256206][T11155] veth0_macvtap: left promiscuous mode [ 639.261790][T11155] veth1_vlan: left promiscuous mode [ 639.268729][T11155] veth0_vlan: left promiscuous mode [ 639.436790][T11155] team0 (unregistering): Port device team_slave_1 removed [ 639.451787][T11155] team0 (unregistering): Port device team_slave_0 removed [ 639.478858][T11155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 639.505516][T11155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 639.556084][T11155] bond0 (unregistering): Released all slaves [ 639.605832][T11155] team0 (unregistering): Port device geneve1 removed [ 639.735221][T11155] team0 (unregistering): Port device team_slave_1 removed [ 639.794353][T11155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 639.825115][T11155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 639.853380][T11155] bond0 (unregistering): (slave veth1_to_bridge): Releasing backup interface [ 639.926065][T11155] bond0 (unregistering): Released all slaves [ 640.000226][T11155] team0 (unregistering): Port device geneve1 removed [ 640.159990][T11155] team0 (unregistering): Port device team_slave_1 removed [ 640.194127][T11155] team0 (unregistering): Port device team_slave_0 removed [ 640.208373][T11155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 640.233757][T11155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 640.308291][T11155] bond0 (unregistering): Released all slaves [ 640.490621][T11155] team0 (unregistering): Port device team_slave_1 removed [ 640.516341][T11155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 640.580749][T11155] bond0 (unregistering): (slave veth1_to_bridge): Releasing backup interface [ 640.643116][T11155] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 640.657879][T11155] bond0 (unregistering): Released all slaves