last executing test programs: 3.333855544s ago: executing program 1 (id=4606): socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)}, 0x0) socket$kcm(0x10, 0x2, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008102e00f80ecdb4cb9f207c804a00d00000088081afb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000002640)=""/4096, 0x1000}, {&(0x7f0000000600)=""/235, 0xeb}], 0x2}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) socket$kcm(0x29, 0x6, 0x0) socket$kcm(0xa, 0x2, 0x3a) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x10, 0x32, 0x43a1bd76, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) socket$kcm(0x2, 0x200000000000003, 0x106) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYBLOB="0000008000"/17, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) socket$kcm(0x2, 0x922000000001, 0x106) socket$kcm(0x2, 0x2, 0x0) socketpair(0x22, 0x6, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, 0x0) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="b700000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0xb5, &(0x7f000000cf3d)=""/181, 0x0, 0x48, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) socketpair$unix(0x1, 0x5, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x3, 0x80000000}, 0x0, 0x0, 0x0, 0x0, 0xf60, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x5}, 0x0, 0xffffffffffffffff, r4, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="d800000018007b7be00212ba0d0505040a003f00000f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b3162700e06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5005ccca262f3d40fad95667e04adcdf63cc1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e0700000004000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="0200"}) 3.171815612s ago: executing program 3 (id=4608): mkdir(0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x5, 0xf, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000ea000000000000000700000218110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b703000000e6ff008500000083550000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f00000005c0)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100ff}, 0x94) 3.171020422s ago: executing program 2 (id=4609): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001bc0)={&(0x7f00000000c0)={0x2, 0x4e24, @remote}, 0x10, 0x0}, 0x10) r2 = socket$kcm(0x29, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3efd7ab4c41335d9, @perf_config_ext={0x7, 0x4}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000018c0)={r3}) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000002c0)=ANY=[@ANYBLOB="0a00000009000000080000000200000000010000", @ANYRES32, @ANYBLOB="00000000000000306eba2f36c3ac8bdce704055d372f1dd02e14a60106312600000cda625ecb", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r4, 0x0, 0x0}, 0x20) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000200)="2000000020008107090f9becdb4cb96b0200000000fbff01000000000000fe00", 0x20}], 0x1, 0x0, 0x0, 0x81000000}, 0x4) socketpair$unix(0x1, 0x1, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r6 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="851000000000000018100000", @ANYRES32, @ANYBLOB="f70000000000010000000000000000004500000000000000"], 0x0}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89f3, &(0x7f0000000080)) sendmsg$kcm(r6, &(0x7f0000000140)={&(0x7f0000000440)=@ethernet={0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d7000000"], 0x10b8}, 0x40186) recvmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x100) bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000008000000000000000000000000000e884dab120caef2466797a9110000a0f6a9361e7489cf1115312b675eec4f783970484ab7d6163c3e5075da69d30a99cb2071d22f1b88ab8c9893ced2bc89994d0fc5bb58926851a84f93654be537a63c8e993cbbc6a17e550a76d0f872711058cb8b0662a3b018b0d2ca9b1561139a37e736e31244ae9661a171c076294ed3e36abe2df30bf80ad3ba45b50cc55a833f049454329c370017ad796e53fce7ab8903785ac9fca61e6e1edac036fc332240a45746b09627627e54c57318becbf85ac0d537"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xd, &(0x7f0000000580)=ANY=[@ANYRES32=r6, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b70400000000000085000000330000009500000000000000"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000008c0)="d800000018007b29e00212ba0d8105040a601800fe0f040b067c55a1bc000900b80006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ccd40dd601edef3d93452a92307ff0ff0e97031e9f05e9f16e9cb500"/216, 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r8, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec000000000000", 0x0, 0x1f4d, 0x0, 0x0, 0xfffffffffffffd46, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r10 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r10, 0x40086602, &(0x7f0000000180)=0x20) bpf$ITER_CREATE(0x21, &(0x7f00000017c0)={r5}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001800)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB='z\n\x00'/24], &(0x7f0000000480)='syzkaller\x00'}, 0x94) 2.758656203s ago: executing program 1 (id=4610): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x7, 0x2, 0x1, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0300000004001f00040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) (async) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0300000004001f00040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="12000000040000000800000044"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0xe, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000003000000b70400000000000085000000030000001800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0xa}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0xe, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000003000000b70400000000000085000000030000001800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0xa}, 0x94) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0xfffffffc}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001200)={r1, 0x58, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001500)={0x6, 0x17, &(0x7f0000001280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000011c0)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', r3, 0x25, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f00000013c0)={0x2, 0x9, 0x100, 0x3}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000001480), &(0x7f00000014c0)=[{0x1, 0x2, 0xc, 0x4}, {0x1f3, 0x2, 0x5}, {0x2, 0x1, 0x4, 0xa}], 0x10, 0x6}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x13, &(0x7f0000000340)=@raw=[@jmp={0x5, 0x0, 0x4, 0x5, 0x8, 0xffffffffffffffc0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0xee, 0x0, 0x0, 0x0, 0x868e}, @generic={0x1, 0x5, 0x0, 0x3, 0x100}, @call={0x85, 0x0, 0x0, 0x25}, @map_fd={0x18, 0x8, 0x1, 0x0, r0}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7}, @jmp={0x5, 0x0, 0x8, 0xa, 0x5, 0x100, 0x8}, @jmp={0x5, 0x0, 0x4, 0xa21d6b1e98ddf49c, 0x9, 0xc, 0x8}], &(0x7f00000000c0)='GPL\x00', 0x9, 0x1000, &(0x7f0000000cc0)=""/4096, 0x41000, 0x52, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000001c0)={0x4, 0x10001, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x0, 0x10, 0xfffffff7}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x13, &(0x7f0000000340)=@raw=[@jmp={0x5, 0x0, 0x4, 0x5, 0x8, 0xffffffffffffffc0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0xee, 0x0, 0x0, 0x0, 0x868e}, @generic={0x1, 0x5, 0x0, 0x3, 0x100}, @call={0x85, 0x0, 0x0, 0x25}, @map_fd={0x18, 0x8, 0x1, 0x0, r0}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7}, @jmp={0x5, 0x0, 0x8, 0xa, 0x5, 0x100, 0x8}, @jmp={0x5, 0x0, 0x4, 0xa21d6b1e98ddf49c, 0x9, 0xc, 0x8}], &(0x7f00000000c0)='GPL\x00', 0x9, 0x1000, &(0x7f0000000cc0)=""/4096, 0x41000, 0x52, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000001c0)={0x4, 0x10001, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x0, 0x10, 0xfffffff7}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x10, 0x6, &(0x7f0000000c80)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {0x4}}, @exit], &(0x7f0000000180)='syzkaller\x00', 0x2, 0xe3, &(0x7f0000000240)=""/227}, 0x90) 2.551139593s ago: executing program 3 (id=4611): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="61123000000000006113100000000000bf2020000000000016000200071b48013f030100000000009500000000000000bc26000000000000bf67000000000000070200000fff07186702000003000000360600000ee600f0bf050000000050000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 2.550525663s ago: executing program 2 (id=4612): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800002200000000000000000000000085000000b50000007500000000020000"], &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000780)={0x0, 0x0, 0x10}, 0xc) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3}, 0x94) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000604"], 0x0, 0x26}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r4, 0x29, &(0x7f0000003fc0)}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xf, 0x240, 0xcb, 0x4, 0x12004, r1, 0x8, '\x00', r3, r4, 0x1, 0x0, 0x3}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000e2000000004c1c9eff12360000a2a8796c44d27d7e040000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x6, 0x830d}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000c00000009"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x18, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x16, 0x16, &(0x7f00000001c0)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000150400003d0301000000000095000f00000000006926000000000000bf67000000000000450700000fff07003506000002000000170600000ee50014bf250000000000005d670000000000006507000006000000070700004c0001000f75000000000000bf54000000000000070400000400f9ff2d440100000000009500000000000000050000000000000095000700000000000172dbabb733a0e757c7c45402000000a2d23da04d1ffc187f9955911aa1a2ba7ba030c7267c2de00435fd253cc0f0d9b2c3127c46b0f4f95345de3188f0d808398d09ee4dc258d726eae098804de25df627a64ab8efde50fd7f1d58d67e684c45e506598bae66ea1a7cd29032de94983dfab0e5043daf1b46bef5135c65377bdbe65d525743d88ef4b2ee62652b07e8a4b6e6355cecc13a5ddf4157f2bfab7201112a30274101fceee66eca91bd5fecb254ab358488c400330171128be291297947d474c570a385a44dd9ff4ae730ae9d0ae42d8814a8c96f101df7da839bcdd7b7c33c8cfe6fd599543ac604d8dd42fc66cdb79cd09ceeedce1e69f11967919f82b0276c90420d08897ee8514b43533f07132589a0a37110fd8571b1e69251bba35cd06c8bd430aafbecfd33757b7dc4803123e9107e5cceaec2a391f9b9b577295ac3864f6c1e30e6190a055953e18bedd1859acdd15af7209d15950f9195b401e74f8b5210e28d46dde2658b4695d9ac9ce7cbefc164a5454fc4da6104db281e18a8992b9f8c82b895da647e6ea4cb622314c5c48abfd620adf7757c23a31a619edcfb45a402c5fced05e5274e08a313d6c5fdd0a8d36b1a268056e6f7e9a6daa5632cda5ad2a9ebfac980c7db63137c226f712e522aad0f13b0e5b43d837d040f813d011538"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x253, 0x10, &(0x7f0000000000), 0x19f}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000280)="2e9a531e1759fbe9", 0x84, r5}, 0x38) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r7, 0x27, 0x22, 0x0, &(0x7f0000000000)="f83d0b4ee60e7d0348007f5b08000c2dbaba38c1edffe1d98a443c281138a6195d61", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x17, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xdffffffd}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x55}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8001c00180081064e81f782db44b9b545c7910006007c09e8fe55a10a0017", 0x1f}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f7d28344b904020000", 0x2}], 0x1}, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000840)=ANY=[@ANYRES64=r0, @ANYRESOCT, @ANYBLOB="68495a4e95984b4de495ae29efdae956fd334c61", @ANYRES8=r6, @ANYRESOCT=r1], 0x33fe0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f0000000180)=r6, 0x4) sendmsg$inet(r10, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) socketpair(0x25, 0x80000, 0x4, &(0x7f0000000740)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) 2.392353631s ago: executing program 1 (id=4613): socket$kcm(0xa, 0x2, 0x88) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6175, 0x0, 0x0, 0xffffffff, 0x0, 0x4000000000}, 0x0, 0xa, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015400100142603600e120800060000000401a80016000800014003000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffec", 0xbd}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="d8000000210081044e81f782db44b90602444e6ce51a09bc6aaa54575f71e16afea027d6bae89357dced", 0x2a}], 0x1}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x26e1, 0x0) gettid() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800f92c00000000000000001000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f00000000c0)='syzkaller\x00', 0x8, 0x1005, &(0x7f0000000e00)=""/4101, 0x0, 0xc}, 0x94) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x18, 0xf, 0x0, 0x0, 0x5, 0xd0, &(0x7f0000000600)=""/208, 0x41100, 0x0, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000a40)={0x6, 0x5, 0x80000000, 0x7fff}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000bc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_bp={0x0, 0x6}, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x8, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000100), 0x3f, r4}, 0x38) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x7a7241, 0x0) close(r5) socket$kcm(0x29, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'ip6tnl0\x00', @random="7fff00004ec6"}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0xde, 0x0, 0x0, 0x41000, 0x6f, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) 2.189611161s ago: executing program 3 (id=4614): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200005d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc, 0x0, 0xd}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x404, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0xc, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000020000000000000000000095"], &(0x7f0000000340)='GPL\x00', 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x406, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)="a0", 0x0}, 0x31) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0400000004000000040000000000010008080000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000003ffffffff00"/26], 0x48) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 1.898104286s ago: executing program 1 (id=4615): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4020940d, &(0x7f00000005c0)=0x81000000000004) (async) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4020940d, &(0x7f00000005c0)=0x81000000000004) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000f0cd000000000000044e690085000000c400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) 1.483055946s ago: executing program 2 (id=4616): r0 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r0, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0xe07e872420dfefca) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1c00000000000000000007000000440c0771640119626f"], 0x20}, 0x200040c4) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x8, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x40, 0x8}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x73) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) close(0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_procs(r2, &(0x7f0000000100)='tasks\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, r1, 0x0, 0x2, &(0x7f0000000040)='/\x00'}, 0x30) r3 = socket$kcm(0x10, 0x2, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(0x3) gettid() sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffffffffffffe1, &(0x7f00000000c0)=[{&(0x7f0000000040)="e03f03003d000b08d25a80d60f7494f90224fc605800024009000400050082c137153e3719ac018000f01700d1bd", 0x33fe0}], 0x1}, 0x8004) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000380), 0x4) 1.430399029s ago: executing program 0 (id=4617): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffff0}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x1010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.41037637s ago: executing program 1 (id=4618): socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)}, 0x0) socket$kcm(0x10, 0x2, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008102e00f80ecdb4cb9f207c804a00d00000088081afb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000002640)=""/4096, 0x1000}, {&(0x7f0000000600)=""/235, 0xeb}], 0x2}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) socket$kcm(0x29, 0x6, 0x0) socket$kcm(0xa, 0x2, 0x3a) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x10, 0x32, 0x43a1bd76, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) socket$kcm(0x2, 0x200000000000003, 0x106) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYBLOB="0000008000"/17, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) socket$kcm(0x2, 0x922000000001, 0x106) socket$kcm(0x2, 0x2, 0x0) socketpair(0x22, 0x6, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, 0x0) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="b700000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0xb5, &(0x7f000000cf3d)=""/181, 0x0, 0x48, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) socketpair$unix(0x1, 0x5, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x3, 0x80000000}, 0x0, 0x0, 0x0, 0x0, 0xf60, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x5}, 0x0, 0xffffffffffffffff, r4, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="d800000018007b7be00212ba0d0505040a003f00000f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b3162700e06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5005ccca262f3d40fad95667e04adcdf63cc1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e0700000004000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="0200"}) 1.20619395s ago: executing program 0 (id=4619): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x4}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r0, 0x58, &(0x7f00000001c0)}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x2d}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) (async) r2 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0xfffffffffffffffc}, 0x104101, 0x4, 0x0, 0x4, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) (async, rerun: 64) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 64) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) recvmsg$kcm(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 32) sendmsg$inet(r1, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) (rerun: 32) 1.183652291s ago: executing program 2 (id=4620): mkdir(0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x5, 0xf, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000ea000000000000000700000218110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b703000000e6ff008500000083600000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f00000005c0)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100ff}, 0x94) 1.089172166s ago: executing program 0 (id=4621): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001bc0)={&(0x7f00000000c0)={0x2, 0x4e24, @remote}, 0x10, 0x0}, 0x10) r2 = socket$kcm(0x29, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3efd7ab4c41335d9, @perf_config_ext={0x7, 0x4}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000018c0)={r3}) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000002c0)=ANY=[@ANYBLOB="0a00000009000000080000000200000000010000", @ANYRES32, @ANYBLOB="00000000000000306eba2f36c3ac8bdce704055d372f1dd02e14a60106312600000cda625ecb", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r4, 0x0, 0x0}, 0x20) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000200)="2000000020008107090f9becdb4cb96b0200000000fbff01000000000000ff00", 0x20}], 0x1, 0x0, 0x0, 0x81000000}, 0x4) socketpair$unix(0x1, 0x1, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r6 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="851000000000000018100000", @ANYRES32, @ANYBLOB="f70000000000010000000000000000004500000000000000"], 0x0}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89f3, &(0x7f0000000080)) sendmsg$kcm(r6, &(0x7f0000000140)={&(0x7f0000000440)=@ethernet={0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d7000000"], 0x10b8}, 0x40186) recvmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x100) bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000008000000000000000000000000000e884dab120caef2466797a9110000a0f6a9361e7489cf1115312b675eec4f783970484ab7d6163c3e5075da69d30a99cb2071d22f1b88ab8c9893ced2bc89994d0fc5bb58926851a84f93654be537a63c8e993cbbc6a17e550a76d0f872711058cb8b0662a3b018b0d2ca9b1561139a37e736e31244ae9661a171c076294ed3e36abe2df30bf80ad3ba45b50cc55a833f049454329c370017ad796e53fce7ab8903785ac9fca61e6e1edac036fc332240a45746b09627627e54c57318becbf85ac0d537"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xd, &(0x7f0000000580)=ANY=[@ANYRES32=r6, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b70400000000000085000000330000009500000000000000"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000008c0)="d800000018007b29e00212ba0d8105040a601800fe0f040b067c55a1bc000900b80006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ccd40dd601edef3d93452a92307ff0ff0e97031e9f05e9f16e9cb500"/216, 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r8, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec000000000000", 0x0, 0x1f4d, 0x0, 0x0, 0xfffffffffffffd46, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r10 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r10, 0x40086602, &(0x7f0000000180)=0x20) bpf$ITER_CREATE(0x21, &(0x7f00000017c0)={r5}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001800)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB='z\n\x00'/24], &(0x7f0000000480)='syzkaller\x00'}, 0x94) 1.083313186s ago: executing program 3 (id=4622): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x5, 0xf, &(0x7f00000009c0)=ANY=[@ANYBLOB="18e20000ea000000000000000700000218110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b703000000e6ff0085000000a4000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f00000005c0)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100ff}, 0x94) 891.035616ms ago: executing program 2 (id=4623): perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x9, 0x9549, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0x7}, 0x11efa, 0x4, 0xffffffff, 0x9, 0x8, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x1d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001780)=""/4096, 0x1000}], 0x1}, 0x10020) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000440)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e24, @remote}, 0x2, 0x4, 0x0, 0x2}}, 0x80, 0x0}, 0x20044010) recvmsg$unix(r0, &(0x7f0000000480)={0x0, 0xfffffd88, &(0x7f0000000440), 0x1}, 0x2002) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x104109, 0x4, 0x0, 0x7, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x19, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) r5 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000001c0), 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES64, @ANYBLOB='\x00'/24], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000b80)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000b7080000000000007b8af8ff00000000a70800000000", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000980)={r6, 0x58, &(0x7f0000000b00)}, 0x10) sendmsg$kcm(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)="2e00000010008188040f46ecdb4cb9cca7480ef421000000e3bd6efb440013030e000a000d000008ba8000001201", 0x2e}], 0x1}, 0x0) 889.995706ms ago: executing program 3 (id=4624): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x50, &(0x7f0000000100), 0x48) r1 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r1, &(0x7f0000000140)={'nicvf0', 0x32, 0x32}, 0x9) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000040)) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3542, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) write$cgroup_devices(r2, &(0x7f0000000000)={'c', ' *:* ', 'wm\x00'}, 0x9) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003400)={0x10, 0x2, &(0x7f0000003200)=ANY=[@ANYBLOB="850000007a0000000700000000000000"], &(0x7f0000003240)='GPL\x00'}, 0xc01) 831.112069ms ago: executing program 1 (id=4625): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x4, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002e000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000680)="5f3a2f830ad298b15b9dbcfbf6f1", 0x0, 0x440, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)="1400000037000b0fd25a806c8c6f94f90d24fc60", 0x14}], 0x1, 0x0, 0x0, 0x20000000}, 0x200000c0) r3 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x3, 0xff, 0x1cc}, 0x50) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0xfd, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)}], 0x1}, 0x8084) r4 = socket$kcm(0x29, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0xd, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x15}}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r6, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) write$cgroup_pressure(r4, &(0x7f0000000140)={'full'}, 0xfffffdef) sendmsg$inet(r4, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x48840) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xff, 0xff, 0x5, 0xf9, 0x0, 0x1, 0x4062, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x5}, 0x8400, 0xfffffffffffffff3, 0x6, 0x7, 0x800000003, 0xfff7ffff, 0x10, 0x0, 0x4, 0x0, 0xdf}, 0x0, 0x6, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x8, 0xf, 0x80, 0x5, 0x0, 0x3b5c, 0x41020, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0x1, 0x10001}, 0x102000, 0x8, 0x6, 0x6, 0x7, 0xfffffffc, 0x1, 0x0, 0x2, 0x0, 0x9}, 0xffffffffffffffff, 0x1, r1, 0xa) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000000a300)) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4140, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x103) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1d4}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r7, 0x300f000, 0xe, 0x0, &(0x7f0000000080)="0069c2704ade28eddb0000200000", 0x0, 0x48b8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 786.823641ms ago: executing program 0 (id=4626): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0xa, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) socket$kcm(0x11, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0900000004000000080000000800000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000200)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x161) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(r1, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380), 0xff7a}], 0x1, &(0x7f0000007880)=ANY=[@ANYBLOB="1100000000000000004003000100000000000000000000001c00000000000000000f00fc08000000", @ANYRES32=0x0, @ANYBLOB="ac1414bbe0000001000000001c0000000000000000078f0208000000", @ANYRES32=0x0, @ANYBLOB="a00500000000000000000000240000000000000000000000070000009404000044108800000000000000000000000000000000001100000000110000000000000100"/76], 0x98}, 0x0) 614.84946ms ago: executing program 3 (id=4627): socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)}, 0x0) socket$kcm(0x10, 0x2, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008102e00f80ecdb4cb9f207c804a00d00000088081afb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000002640)=""/4096, 0x1000}, {&(0x7f0000000600)=""/235, 0xeb}], 0x2}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) socket$kcm(0x29, 0x6, 0x0) socket$kcm(0xa, 0x2, 0x3a) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x10, 0x32, 0x43a1bd76, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) socket$kcm(0x2, 0x200000000000003, 0x106) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYBLOB="0000008000"/17, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) socket$kcm(0x2, 0x922000000001, 0x106) socket$kcm(0x2, 0x2, 0x0) socketpair(0x22, 0x6, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, 0x0) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="b700000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0xb5, &(0x7f000000cf3d)=""/181, 0x0, 0x48, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) socketpair$unix(0x1, 0x5, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x3, 0x80000000}, 0x0, 0x0, 0x0, 0x0, 0xf60, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x5}, 0x0, 0xffffffffffffffff, r4, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="d800000018007b7be00212ba0d0505040a003f00000f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b3162700e06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5005ccca262f3d40fad95667e04adcdf63cc1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e0700000004000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="0200"}) 546.585313ms ago: executing program 0 (id=4628): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffff0}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 526.754074ms ago: executing program 2 (id=4629): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x520, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xa99, 0x3}, 0x8500, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0x6, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff}, [@call={0x85, 0x0, 0x0, 0xae}, @cb_func={0x18, 0x4, 0x4, 0x0, 0xfffffffffffffffc}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0x652a0b4e, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x4}, 0x50) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000200)=@generic={&(0x7f00000001c0)='./file0\x00', r3}, 0x18) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x22005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1}, 0x1090da, 0x0, 0x0, 0x0, 0x0, 0x4, 0x749}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e00003b000b05d25a80258c6394f90424fc60100005000a000200053582c137153e3704000180fc0b09000300", 0x33fe0}], 0x1}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x40000) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}}, &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r5, 0x8, 0x0, 0x0, 0x30, &(0x7f0000000140), 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) 0s ago: executing program 0 (id=4630): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x1, 0x640bd, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80008, 0x2, @perf_bp={&(0x7f00000001c0), 0x1}, 0x102040, 0x32, 0x43a1bd76, 0x9, 0x9, 0x35de, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22101, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x1, @perf_bp={0x0}, 0x800, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x22a82, 0x0) close(r1) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001100), 0x8) socket$kcm(0x10, 0x2, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'vlan0\x00', 0x8000}) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x4000}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8914, &(0x7f0000000080)) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r7 = socket$kcm(0x1e, 0x7, 0x0) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f00000008c0), 0x43) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000280)={'wlan0\x00', @multicast}) perf_event_open(0x0, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x2) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0xb, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0}, 0x521, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) kernel console output (not intermixed with test programs): : Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 518.382462][T14818] Call Trace: [ 518.385787][T14818] [ 518.388764][T14818] dump_stack_lvl+0x18c/0x250 [ 518.393507][T14818] ? show_regs_print_info+0x20/0x20 [ 518.398777][T14818] ? load_image+0x400/0x400 [ 518.403334][T14818] ? __might_fault+0xaa/0x120 [ 518.408146][T14818] ? __lock_acquire+0x7d40/0x7d40 [ 518.413225][T14818] should_fail_ex+0x39d/0x4d0 [ 518.417957][T14818] _copy_from_user+0x2f/0xe0 [ 518.422706][T14818] __sys_bpf+0x23e/0x890 [ 518.427016][T14818] ? bpf_link_show_fdinfo+0x390/0x390 [ 518.432466][T14818] ? lock_chain_count+0x20/0x20 [ 518.437386][T14818] __x64_sys_bpf+0x7c/0x90 [ 518.441867][T14818] do_syscall_64+0x55/0xa0 [ 518.446343][T14818] ? clear_bhb_loop+0x40/0x90 [ 518.451095][T14818] ? clear_bhb_loop+0x40/0x90 [ 518.456052][T14818] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 518.462104][T14818] RIP: 0033:0x7f0b0239c799 [ 518.466677][T14818] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 518.486450][T14818] RSP: 002b:00007f0b0332f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 518.494914][T14818] RAX: ffffffffffffffda RBX: 00007f0b02615fa0 RCX: 00007f0b0239c799 [ 518.502941][T14818] RDX: 0000000000000094 RSI: 0000200000000600 RDI: 0000000000000005 [ 518.510970][T14818] RBP: 00007f0b0332f090 R08: 0000000000000000 R09: 0000000000000000 [ 518.518998][T14818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 518.527118][T14818] R13: 00007f0b02616038 R14: 00007f0b02615fa0 R15: 00007fff94e6de48 [ 518.535162][T14818] [ 518.995227][T14825] netlink: 'syz.3.3095': attribute type 39 has an invalid length. [ 519.303559][T14826] netlink: 'syz.2.3094': attribute type 10 has an invalid length. [ 519.319302][T14826] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3094'. [ 519.337944][T14826] batman_adv: batadv0: Adding interface: veth1_virt_wifi [ 519.381786][T14826] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 519.419414][T14826] batman_adv: batadv0: Interface activated: veth1_virt_wifi [ 519.747740][T14836] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 519.893610][T14842] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 520.892356][T14864] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3108'. [ 521.001972][T14864] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3108'. [ 521.181688][T14875] IPv6: Can't replace route, no match found [ 521.355288][T14883] FAULT_INJECTION: forcing a failure. [ 521.355288][T14883] name failslab, interval 1, probability 0, space 0, times 0 [ 521.374832][T14883] CPU: 1 PID: 14883 Comm: syz.3.3117 Not tainted syzkaller #0 [ 521.382392][T14883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 521.392499][T14883] Call Trace: [ 521.395825][T14883] [ 521.398816][T14883] dump_stack_lvl+0x18c/0x250 [ 521.403564][T14883] ? show_regs_print_info+0x20/0x20 [ 521.409021][T14883] ? load_image+0x400/0x400 [ 521.413682][T14883] ? __might_sleep+0xe0/0xe0 [ 521.418334][T14883] ? __lock_acquire+0x7d40/0x7d40 [ 521.423447][T14883] ? mark_lock+0x94/0x320 [ 521.427941][T14883] should_fail_ex+0x39d/0x4d0 [ 521.432706][T14883] should_failslab+0x9/0x20 [ 521.437267][T14883] slab_pre_alloc_hook+0x59/0x310 [ 521.442538][T14883] ? __get_vm_area_node+0x125/0x370 [ 521.447817][T14883] __kmem_cache_alloc_node+0x53/0x250 [ 521.453269][T14883] ? __get_vm_area_node+0x125/0x370 [ 521.458533][T14883] kmalloc_node_trace+0x26/0xe0 [ 521.463543][T14883] __get_vm_area_node+0x125/0x370 [ 521.468671][T14883] __vmalloc_node_range+0x36e/0x1330 [ 521.474016][T14883] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 521.479613][T14883] ? mark_lock+0x94/0x320 [ 521.484007][T14883] ? __lock_acquire+0x1347/0x7d40 [ 521.489091][T14883] ? verify_lock_unused+0x140/0x140 [ 521.494361][T14883] ? free_vm_area+0x50/0x50 [ 521.498931][T14883] ? end_current_label_crit_section+0x170/0x170 [ 521.505245][T14883] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 521.510947][T14883] __vmalloc+0x7a/0x90 [ 521.515076][T14883] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 521.520672][T14883] bpf_prog_alloc_no_stats+0x47/0x440 [ 521.526101][T14883] ? bpf_prog_alloc+0x2b/0x1a0 [ 521.530925][T14883] bpf_prog_alloc+0x3d/0x1a0 [ 521.535665][T14883] bpf_prog_load+0x6eb/0x1670 [ 521.540406][T14883] ? map_freeze+0x420/0x420 [ 521.544972][T14883] ? __might_fault+0xaa/0x120 [ 521.549792][T14883] ? __lock_acquire+0x7d40/0x7d40 [ 521.554870][T14883] ? file_end_write+0x159/0x250 [ 521.559780][T14883] ? __might_fault+0xaa/0x120 [ 521.564595][T14883] ? __might_fault+0xc6/0x120 [ 521.569319][T14883] ? __might_fault+0xaa/0x120 [ 521.574036][T14883] ? bpf_lsm_bpf+0x9/0x10 [ 521.578419][T14883] ? security_bpf+0x7e/0xa0 [ 521.582968][T14883] __sys_bpf+0x5ba/0x890 [ 521.587265][T14883] ? bpf_link_show_fdinfo+0x390/0x390 [ 521.592696][T14883] ? lock_chain_count+0x20/0x20 [ 521.597599][T14883] __x64_sys_bpf+0x7c/0x90 [ 521.602059][T14883] do_syscall_64+0x55/0xa0 [ 521.606531][T14883] ? clear_bhb_loop+0x40/0x90 [ 521.611252][T14883] ? clear_bhb_loop+0x40/0x90 [ 521.615990][T14883] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 521.621935][T14883] RIP: 0033:0x7f821159c799 [ 521.626397][T14883] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 521.646138][T14883] RSP: 002b:00007f8212430028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 521.654600][T14883] RAX: ffffffffffffffda RBX: 00007f8211815fa0 RCX: 00007f821159c799 [ 521.662618][T14883] RDX: 0000000000000094 RSI: 0000200000000600 RDI: 0000000000000005 [ 521.670632][T14883] RBP: 00007f8212430090 R08: 0000000000000000 R09: 0000000000000000 [ 521.678730][T14883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 521.686840][T14883] R13: 00007f8211816038 R14: 00007f8211815fa0 R15: 00007ffda8922bc8 [ 521.695008][T14883] [ 522.433993][T14883] syz.3.3117: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 522.508403][T14883] CPU: 0 PID: 14883 Comm: syz.3.3117 Not tainted syzkaller #0 [ 522.515961][T14883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 522.526157][T14883] Call Trace: [ 522.529476][T14883] [ 522.532450][T14883] dump_stack_lvl+0x18c/0x250 [ 522.537195][T14883] ? show_regs_print_info+0x20/0x20 [ 522.542451][T14883] ? load_image+0x400/0x400 [ 522.547020][T14883] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 522.553489][T14883] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 522.560045][T14883] warn_alloc+0x246/0x340 [ 522.564440][T14883] ? __get_vm_area_node+0x125/0x370 [ 522.569699][T14883] ? zone_watermark_ok_safe+0x230/0x230 [ 522.575300][T14883] ? rcu_is_watching+0x15/0xb0 [ 522.580121][T14883] ? __get_vm_area_node+0x356/0x370 [ 522.585386][T14883] __vmalloc_node_range+0x393/0x1330 [ 522.590757][T14883] ? mark_lock+0x94/0x320 [ 522.595140][T14883] ? __lock_acquire+0x1347/0x7d40 [ 522.600246][T14883] ? verify_lock_unused+0x140/0x140 [ 522.605501][T14883] ? free_vm_area+0x50/0x50 [ 522.610056][T14883] ? end_current_label_crit_section+0x170/0x170 [ 522.616364][T14883] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 522.621956][T14883] __vmalloc+0x7a/0x90 [ 522.626078][T14883] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 522.631677][T14883] bpf_prog_alloc_no_stats+0x47/0x440 [ 522.637102][T14883] ? bpf_prog_alloc+0x2b/0x1a0 [ 522.642016][T14883] bpf_prog_alloc+0x3d/0x1a0 [ 522.646656][T14883] bpf_prog_load+0x6eb/0x1670 [ 522.651393][T14883] ? map_freeze+0x420/0x420 [ 522.655956][T14883] ? __might_fault+0xaa/0x120 [ 522.660692][T14883] ? __lock_acquire+0x7d40/0x7d40 [ 522.665762][T14883] ? file_end_write+0x159/0x250 [ 522.670680][T14883] ? __might_fault+0xaa/0x120 [ 522.675493][T14883] ? __might_fault+0xc6/0x120 [ 522.680397][T14883] ? __might_fault+0xaa/0x120 [ 522.685137][T14883] ? bpf_lsm_bpf+0x9/0x10 [ 522.689520][T14883] ? security_bpf+0x7e/0xa0 [ 522.694085][T14883] __sys_bpf+0x5ba/0x890 [ 522.698473][T14883] ? bpf_link_show_fdinfo+0x390/0x390 [ 522.703915][T14883] ? lock_chain_count+0x20/0x20 [ 522.708832][T14883] __x64_sys_bpf+0x7c/0x90 [ 522.713341][T14883] do_syscall_64+0x55/0xa0 [ 522.717816][T14883] ? clear_bhb_loop+0x40/0x90 [ 522.722543][T14883] ? clear_bhb_loop+0x40/0x90 [ 522.727273][T14883] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 522.733226][T14883] RIP: 0033:0x7f821159c799 [ 522.737700][T14883] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 522.757359][T14883] RSP: 002b:00007f8212430028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 522.765842][T14883] RAX: ffffffffffffffda RBX: 00007f8211815fa0 RCX: 00007f821159c799 [ 522.773883][T14883] RDX: 0000000000000094 RSI: 0000200000000600 RDI: 0000000000000005 [ 522.782029][T14883] RBP: 00007f8212430090 R08: 0000000000000000 R09: 0000000000000000 [ 522.790060][T14883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 522.798077][T14883] R13: 00007f8211816038 R14: 00007f8211815fa0 R15: 00007ffda8922bc8 [ 522.806194][T14883] [ 522.929468][T14883] Mem-Info: [ 522.932768][T14883] active_anon:20223 inactive_anon:0 isolated_anon:0 [ 522.932768][T14883] active_file:18338 inactive_file:40109 isolated_file:0 [ 522.932768][T14883] unevictable:768 dirty:161 writeback:0 [ 522.932768][T14883] slab_reclaimable:10561 slab_unreclaimable:92767 [ 522.932768][T14883] mapped:24878 shmem:16196 pagetables:539 [ 522.932768][T14883] sec_pagetables:0 bounce:0 [ 522.932768][T14883] kernel_misc_reclaimable:0 [ 522.932768][T14883] free:1330710 free_pcp:11130 free_cma:0 [ 522.998544][T14883] Node 0 active_anon:80392kB inactive_anon:0kB active_file:73352kB inactive_file:160240kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:99512kB dirty:644kB writeback:0kB shmem:62648kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10384kB pagetables:2256kB sec_pagetables:0kB all_unreclaimable? no [ 523.038163][T14883] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 523.089329][T14883] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 523.151719][T14883] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 523.157604][T14883] Node 0 DMA32 free:1413004kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:74148kB inactive_anon:0kB active_file:73352kB inactive_file:159432kB unevictable:1536kB writepending:644kB present:3129332kB managed:2586956kB mlocked:0kB bounce:0kB free_pcp:32844kB local_pcp:21116kB free_cma:0kB [ 523.209373][T14883] lowmem_reserve[]: 0 0 0 0 0 [ 523.214426][T14883] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:808kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 523.267607][T14883] lowmem_reserve[]: 0 0 0 0 0 [ 523.277790][T14883] Node 1 Normal free:3898168kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:14016kB local_pcp:7136kB free_cma:0kB [ 523.336513][T14883] lowmem_reserve[]: 0 0 0 0 0 [ 523.346699][T14883] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 523.391139][T14883] Node 0 DMA32: 1519*4kB (UM) 1619*8kB (UME) 369*16kB (UME) 577*32kB (UME) 114*64kB (UE) 162*128kB (UME) 130*256kB (UME) 40*512kB (UM) 22*1024kB (UME) 8*2048kB (UM) 310*4096kB (UM) = 1433860kB [ 523.447558][T14883] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 523.469809][T14883] Node 1 Normal: 228*4kB (UE) 53*8kB (UE) 40*16kB (UE) 180*32kB (UE) 46*64kB (UME) 9*128kB (UME) 1*256kB (U) 2*512kB (UM) 2*1024kB (UE) 2*2048kB (UE) 947*4096kB (M) = 3898168kB [ 523.509462][T14883] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 523.530228][T14883] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 523.559308][T14883] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 523.568992][T14883] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 523.589279][T14883] 70244 total pagecache pages [ 523.594065][T14883] 0 pages in swap cache [ 523.598285][T14883] Free swap = 124996kB [ 523.609334][T14883] Total swap = 124996kB [ 523.615063][T14883] 2097051 pages RAM [ 523.618957][T14883] 0 pages HighMem/MovableOnly [ 523.629508][T14883] 416926 pages reserved [ 523.633775][T14883] 0 pages cma reserved [ 523.926913][T14898] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 524.562902][T14915] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.3127'. [ 524.585605][T14915] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.3127'. [ 524.619080][T14920] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.3127'. [ 524.651642][T14915] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.3127'. [ 525.671028][T14937] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 525.736992][T14939] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.3136'. [ 525.782207][T14939] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.3136'. [ 526.061183][T14948] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 526.293254][T14954] IPv6: NLM_F_CREATE should be specified when creating new route [ 526.951502][T14969] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3148'. [ 526.968291][T14970] netlink: 830 bytes leftover after parsing attributes in process `syz.1.3150'. [ 527.021431][T14972] IPv6: Can't replace route, no match found [ 527.042241][T14974] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.3150'. [ 527.067509][T14970] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.3150'. [ 527.165880][T14970] IPv6: Can't replace route, no match found [ 527.402083][T14976] netlink: 'syz.0.3151': attribute type 4 has an invalid length. [ 527.532422][T14976] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 528.192558][T14999] IPv6: Can't replace route, no match found [ 528.488204][T15008] IPv6: Can't replace route, no match found [ 529.283477][T15025] netlink: 'syz.0.3171': attribute type 10 has an invalid length. [ 529.335910][T15025] bond0: (slave bond_slave_0): Releasing backup interface [ 530.283515][T15055] IPv6: Can't replace route, no match found [ 531.279721][T15069] __nla_validate_parse: 5 callbacks suppressed [ 531.279741][T15069] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3187'. [ 531.395348][T15064] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 531.441067][T15070] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.3187'. [ 531.451411][T15072] netlink: 'syz.1.3188': attribute type 29 has an invalid length. [ 531.460134][T15072] netlink: 'syz.1.3188': attribute type 3 has an invalid length. [ 531.468055][T15072] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3188'. [ 531.505650][T15069] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.3187'. [ 531.773917][T15077] IPv6: Can't replace route, no match found [ 532.645719][T15092] netlink: 'syz.3.3196': attribute type 10 has an invalid length. [ 532.699498][T15092] bond0: (slave bond_slave_0): Releasing backup interface [ 533.993148][T15120] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3213'. [ 534.046978][T15122] netlink: 830 bytes leftover after parsing attributes in process `syz.3.3205'. [ 534.123990][T15125] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.3205'. [ 534.144014][T15122] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.3205'. [ 534.157242][T15126] netlink: 'syz.0.3207': attribute type 10 has an invalid length. [ 534.233859][T15122] IPv6: Can't replace route, no match found [ 534.386894][T15131] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 534.800431][T15149] netlink: 'syz.0.3219': attribute type 10 has an invalid length. [ 534.877822][T15152] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3218'. [ 535.731583][T15159] netlink: 830 bytes leftover after parsing attributes in process `syz.2.3222'. [ 535.966159][T15159] IPv6: Can't replace route, no match found [ 536.423037][T15183] __nla_validate_parse: 5 callbacks suppressed [ 536.423053][T15183] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.3231'. [ 536.457671][T15181] netlink: 'syz.0.3229': attribute type 10 has an invalid length. [ 536.504909][T15183] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3231'. [ 536.659506][T15187] netdevsim netdevsim0 ªªªªªª: renamed from netdevsim0 (while UP) [ 537.021043][T15201] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 537.097135][T15203] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3248'. [ 537.197253][T15205] netlink: 'syz.0.3240': attribute type 10 has an invalid length. [ 537.272575][T15211] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3241'. [ 538.340340][T15238] netlink: 'syz.1.3253': attribute type 10 has an invalid length. [ 538.356752][T15238] bond0: (slave bond_slave_0): Releasing backup interface [ 538.504601][T15243] netlink: 'syz.3.3255': attribute type 13 has an invalid length. [ 538.529766][T15243] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3255'. [ 538.567932][T15243] syz_tun: refused to change device tx_queue_len [ 538.591714][T15243] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 539.543733][T15271] netlink: 'syz.1.3266': attribute type 10 has an invalid length. [ 539.612933][T15279] pim6reg1: entered promiscuous mode [ 539.618515][T15279] pim6reg1: entered allmulticast mode [ 539.905725][T15285] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3272'. [ 539.987116][T15285] IPv6: Can't replace route, no match found [ 540.013142][T15288] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.3273'. [ 540.160000][T15291] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3273'. [ 540.527905][T15300] netlink: 'syz.3.3278': attribute type 10 has an invalid length. [ 540.558811][T15300] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3278'. [ 540.607412][T15300] batman_adv: batadv0: Adding interface: virt_wifi0 [ 540.629327][T15300] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 540.705919][T15300] batman_adv: batadv0: Interface activated: virt_wifi0 [ 540.792089][T15307] netlink: 'syz.2.3280': attribute type 10 has an invalid length. [ 540.898133][T15307] bond0: (slave bond_slave_0): Releasing backup interface [ 541.016051][T15315] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.3284'. [ 541.367498][T15319] netlink: 'syz.3.3285': attribute type 29 has an invalid length. [ 541.383043][T15319] netlink: 'syz.3.3285': attribute type 29 has an invalid length. [ 541.395124][T15319] netlink: 'syz.3.3285': attribute type 29 has an invalid length. [ 541.417155][T15324] netlink: 'syz.2.3295': attribute type 10 has an invalid length. [ 541.618907][T15329] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.3288'. [ 541.752441][T15333] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3288'. [ 542.276585][T15348] netlink: 763 bytes leftover after parsing attributes in process `syz.3.3297'. [ 542.394506][T15355] netlink: 830 bytes leftover after parsing attributes in process `syz.3.3299'. [ 542.422297][T15353] netlink: 'syz.2.3298': attribute type 10 has an invalid length. [ 542.480983][T15360] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.3299'. [ 542.493162][T15355] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.3299'. [ 542.572901][T15363] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 542.600739][T15360] IPv6: Can't replace route, no match found [ 542.922228][T15374] IPv6: Can't replace route, no match found [ 543.017064][T15378] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 543.239069][T15389] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3312'. [ 543.303035][T15389] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3312'. [ 543.329090][T15389] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3312'. [ 543.431421][T15394] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3314'. [ 543.485104][T15394] IPv6: Can't replace route, no match found [ 544.820213][ T5775] Bluetooth: hci2: command 0x0406 tx timeout [ 544.909254][T15419] validate_nla: 2 callbacks suppressed [ 544.909272][T15419] netlink: 'syz.3.3322': attribute type 10 has an invalid length. [ 545.277024][T15437] IPv6: Can't replace route, no match found [ 545.300342][T15440] IPv6: Can't replace route, no match found [ 545.358470][T15443] IPv6: Can't replace route, no match found [ 545.865859][T15458] netlink: 'syz.0.3338': attribute type 10 has an invalid length. [ 546.226707][T15470] netlink: 'syz.3.3343': attribute type 2 has an invalid length. [ 546.241809][T15470] netlink: 'syz.3.3343': attribute type 8 has an invalid length. [ 546.259038][T15474] netlink: 'syz.1.3345': attribute type 6 has an invalid length. [ 546.315242][T15474] raw_sendmsg: syz.1.3345 forgot to set AF_INET. Fix it! [ 546.613343][T15485] netlink: 'syz.1.3350': attribute type 10 has an invalid length. [ 546.774514][T15492] __nla_validate_parse: 9 callbacks suppressed [ 546.774551][T15492] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3353'. [ 546.855709][T15492] IPv6: Can't replace route, no match found [ 546.876991][T15496] IPv6: Can't replace route, no match found [ 547.315721][T15510] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.3360'. [ 547.431984][T15516] netlink: 'syz.3.3363': attribute type 10 has an invalid length. [ 547.688992][T15532] netlink: 'syz.3.3368': attribute type 3 has an invalid length. [ 547.704185][T15531] netlink: 'syz.3.3368': attribute type 3 has an invalid length. [ 547.718563][T15532] netlink: 13435 bytes leftover after parsing attributes in process `syz.3.3368'. [ 547.759365][T15531] netlink: 13435 bytes leftover after parsing attributes in process `syz.3.3368'. [ 548.000017][T15540] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 548.273352][T15553] netlink: 'syz.3.3376': attribute type 10 has an invalid length. [ 548.355664][T15557] IPv6: Can't replace route, no match found [ 549.929292][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 550.103461][T15641] validate_nla: 1 callbacks suppressed [ 550.103481][T15641] netlink: 'syz.2.3387': attribute type 10 has an invalid length. [ 550.839878][T15650] pim6reg1: entered promiscuous mode [ 550.845278][T15650] pim6reg1: entered allmulticast mode [ 551.293216][T15662] IPv6: Can't replace route, no match found [ 551.711374][T15678] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 551.739697][T15679] netlink: 'syz.0.3397': attribute type 10 has an invalid length. [ 554.566820][T15700] netlink: 830 bytes leftover after parsing attributes in process `syz.3.3408'. [ 554.673158][T15704] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.3408'. [ 554.685557][T15700] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.3408'. [ 554.776535][T15700] IPv6: Can't replace route, no match found [ 555.384695][T15705] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3409'. [ 556.393080][T15717] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3416'. [ 556.457460][T15723] FAULT_INJECTION: forcing a failure. [ 556.457460][T15723] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 556.471159][T15723] CPU: 0 PID: 15723 Comm: syz.0.3419 Not tainted syzkaller #0 [ 556.478681][T15723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 556.488790][T15723] Call Trace: [ 556.492202][T15723] [ 556.495179][T15723] dump_stack_lvl+0x18c/0x250 [ 556.499920][T15723] ? show_regs_print_info+0x20/0x20 [ 556.505185][T15723] ? load_image+0x400/0x400 [ 556.509758][T15723] ? __might_fault+0xaa/0x120 [ 556.514534][T15723] ? __lock_acquire+0x7d40/0x7d40 [ 556.519622][T15723] should_fail_ex+0x39d/0x4d0 [ 556.524369][T15723] _copy_from_user+0x2f/0xe0 [ 556.529020][T15723] ___sys_sendmsg+0x1c7/0x360 [ 556.533744][T15723] ? get_pid_task+0x20/0x1e0 [ 556.538389][T15723] ? __sys_sendmsg+0x2a0/0x2a0 [ 556.543231][T15723] ? __lock_acquire+0x7d40/0x7d40 [ 556.548319][T15723] __se_sys_sendmsg+0x1c2/0x2b0 [ 556.553203][T15723] ? __x64_sys_sendmsg+0x80/0x80 [ 556.558197][T15723] ? lockdep_hardirqs_on+0x98/0x150 [ 556.563428][T15723] do_syscall_64+0x55/0xa0 [ 556.567880][T15723] ? clear_bhb_loop+0x40/0x90 [ 556.572582][T15723] ? clear_bhb_loop+0x40/0x90 [ 556.577380][T15723] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 556.583327][T15723] RIP: 0033:0x7f3b5059c799 [ 556.587775][T15723] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 556.607663][T15723] RSP: 002b:00007f3b514d7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 556.616105][T15723] RAX: ffffffffffffffda RBX: 00007f3b50815fa0 RCX: 00007f3b5059c799 [ 556.624126][T15723] RDX: 0000000000008000 RSI: 0000200000000600 RDI: 0000000000000003 [ 556.632152][T15723] RBP: 00007f3b514d7090 R08: 0000000000000000 R09: 0000000000000000 [ 556.640147][T15723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 556.648143][T15723] R13: 00007f3b50816038 R14: 00007f3b50815fa0 R15: 00007ffc17e3dfb8 [ 556.656174][T15723] [ 556.663012][T15724] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3418'. [ 556.757380][T15728] netlink: 'syz.1.3420': attribute type 2 has an invalid length. [ 556.856267][T15730] netlink: 830 bytes leftover after parsing attributes in process `syz.3.3421'. [ 557.432326][T15728] syzkaller0: entered promiscuous mode [ 557.502918][T15735] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 557.529649][T15737] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.3421'. [ 557.545570][T15730] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.3421'. [ 558.420071][T15750] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3426'. [ 561.641087][T15760] veth1_vlan: entered allmulticast mode [ 561.912396][T15770] __nla_validate_parse: 1 callbacks suppressed [ 561.912414][T15770] netlink: 830 bytes leftover after parsing attributes in process `syz.1.3434'. [ 561.986080][T15774] FAULT_INJECTION: forcing a failure. [ 561.986080][T15774] name failslab, interval 1, probability 0, space 0, times 0 [ 562.011905][T15774] CPU: 1 PID: 15774 Comm: syz.0.3435 Not tainted syzkaller #0 [ 562.019454][T15774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 562.029561][T15774] Call Trace: [ 562.032885][T15774] [ 562.035854][T15774] dump_stack_lvl+0x18c/0x250 [ 562.040697][T15774] ? show_regs_print_info+0x20/0x20 [ 562.045986][T15774] ? load_image+0x400/0x400 [ 562.050563][T15774] ? __might_sleep+0xe0/0xe0 [ 562.055213][T15774] ? __lock_acquire+0x7d40/0x7d40 [ 562.060301][T15774] should_fail_ex+0x39d/0x4d0 [ 562.065108][T15774] should_failslab+0x9/0x20 [ 562.069645][T15774] slab_pre_alloc_hook+0x59/0x310 [ 562.074744][T15774] ? __lock_acquire+0x7d40/0x7d40 [ 562.079823][T15774] kmem_cache_alloc_node+0x60/0x320 [ 562.085071][T15774] ? __alloc_skb+0x103/0x2c0 [ 562.089694][T15774] __alloc_skb+0x103/0x2c0 [ 562.094141][T15774] netlink_sendmsg+0x66a/0xbf0 [ 562.098949][T15774] ? netlink_getsockopt+0x590/0x590 [ 562.104187][T15774] ? aa_sock_msg_perm+0x94/0x150 [ 562.109289][T15774] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 562.114631][T15774] ? security_socket_sendmsg+0x80/0xa0 [ 562.120140][T15774] ? netlink_getsockopt+0x590/0x590 [ 562.125380][T15774] ____sys_sendmsg+0x5ba/0x960 [ 562.130183][T15774] ? __asan_memset+0x22/0x40 [ 562.134808][T15774] ? __sys_sendmsg_sock+0x30/0x30 [ 562.139878][T15774] ? __import_iovec+0x5f2/0x850 [ 562.144769][T15774] ? import_iovec+0x73/0xa0 [ 562.149350][T15774] ___sys_sendmsg+0x2a6/0x360 [ 562.154056][T15774] ? __sys_sendmsg+0x2a0/0x2a0 [ 562.158947][T15774] ? __lock_acquire+0x7d40/0x7d40 [ 562.164017][T15774] __se_sys_sendmsg+0x1c2/0x2b0 [ 562.168893][T15774] ? __x64_sys_sendmsg+0x80/0x80 [ 562.173872][T15774] ? lockdep_hardirqs_on+0x98/0x150 [ 562.179109][T15774] do_syscall_64+0x55/0xa0 [ 562.183564][T15774] ? clear_bhb_loop+0x40/0x90 [ 562.188268][T15774] ? clear_bhb_loop+0x40/0x90 [ 562.192983][T15774] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 562.198930][T15774] RIP: 0033:0x7f3b5059c799 [ 562.203374][T15774] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 562.223095][T15774] RSP: 002b:00007f3b514d7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 562.231584][T15774] RAX: ffffffffffffffda RBX: 00007f3b50815fa0 RCX: 00007f3b5059c799 [ 562.239590][T15774] RDX: 0000000000008000 RSI: 0000200000000600 RDI: 0000000000000003 [ 562.247762][T15774] RBP: 00007f3b514d7090 R08: 0000000000000000 R09: 0000000000000000 [ 562.255753][T15774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 562.263748][T15774] R13: 00007f3b50816038 R14: 00007f3b50815fa0 R15: 00007ffc17e3dfb8 [ 562.271858][T15774] [ 562.285543][T15775] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.3434'. [ 562.305217][T15770] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.3434'. [ 562.445516][T15781] netlink: 'syz.2.3437': attribute type 10 has an invalid length. [ 562.506711][T15781] team0: Port device dummy0 removed [ 562.533684][T15781] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 562.582186][T15783] netlink: 'syz.3.3439': attribute type 7 has an invalid length. [ 562.590895][T15783] netlink: 'syz.3.3439': attribute type 1 has an invalid length. [ 562.598925][T15783] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.3439'. [ 562.766006][T15788] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3440'. [ 563.201484][T15790] IPv6: Can't replace route, no match found [ 563.259348][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.265800][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.670470][T15796] netlink: 763 bytes leftover after parsing attributes in process `syz.3.3443'. [ 564.691154][T15795] netlink: 763 bytes leftover after parsing attributes in process `syz.3.3443'. [ 564.859698][T15802] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 564.997086][T15808] netlink: 830 bytes leftover after parsing attributes in process `syz.2.3448'. [ 565.066848][T15809] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.3448'. [ 565.139052][T15808] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.3448'. [ 565.289558][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 565.814485][T15820] netlink: 'syz.1.3452': attribute type 39 has an invalid length. [ 568.253264][T15824] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 568.547046][T15834] netlink: 'syz.0.3457': attribute type 10 has an invalid length. [ 568.612185][T15834] team0: Port device dummy0 removed [ 568.695731][T15834] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 569.314305][T15849] __nla_validate_parse: 1 callbacks suppressed [ 569.314324][T15849] netlink: 830 bytes leftover after parsing attributes in process `syz.3.3461'. [ 569.401149][T15852] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.3461'. [ 569.419871][T15849] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.3461'. [ 570.145602][T15883] IPv6: Can't replace route, no match found [ 570.350924][T15889] netlink: 830 bytes leftover after parsing attributes in process `syz.2.3477'. [ 570.471360][T15892] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.3477'. [ 570.536528][T15889] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.3477'. [ 571.074373][T15903] netlink: 'syz.3.3482': attribute type 21 has an invalid length. [ 571.219840][T15909] netlink: 'syz.3.3482': attribute type 10 has an invalid length. [ 571.263939][T15909] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 571.817581][T15930] netlink: 830 bytes leftover after parsing attributes in process `syz.1.3492'. [ 571.900086][T15933] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.3492'. [ 571.918899][T15930] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.3492'. [ 571.949916][T15935] IPv6: Can't replace route, no match found [ 572.271116][T15937] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 572.782309][T15957] netlink: 830 bytes leftover after parsing attributes in process `syz.3.3503'. [ 572.836346][T15961] netlink: 'syz.1.3504': attribute type 10 has an invalid length. [ 572.868183][T15961] team0: Device ipvlan1 failed to register rx_handler [ 572.982372][T15957] IPv6: Can't replace route, no match found [ 573.021742][T15961] netlink: 'syz.1.3504': attribute type 10 has an invalid length. [ 573.050187][T15961] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 573.156085][T15963] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 573.260250][T15972] netlink: 'syz.2.3509': attribute type 39 has an invalid length. [ 573.411568][T15976] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 573.649355][T15985] IPv6: Can't replace route, no match found [ 574.136262][T16005] IPv6: Can't replace route, no match found [ 574.215617][T16009] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 574.418914][T16019] FAULT_INJECTION: forcing a failure. [ 574.418914][T16019] name failslab, interval 1, probability 0, space 0, times 0 [ 574.432383][T16019] CPU: 1 PID: 16019 Comm: syz.3.3523 Not tainted syzkaller #0 [ 574.439921][T16019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 574.450023][T16019] Call Trace: [ 574.453343][T16019] [ 574.456306][T16019] dump_stack_lvl+0x18c/0x250 [ 574.461043][T16019] ? show_regs_print_info+0x20/0x20 [ 574.466297][T16019] ? load_image+0x400/0x400 [ 574.470850][T16019] ? __might_sleep+0xe0/0xe0 [ 574.475489][T16019] ? __lock_acquire+0x7d40/0x7d40 [ 574.480571][T16019] should_fail_ex+0x39d/0x4d0 [ 574.485307][T16019] should_failslab+0x9/0x20 [ 574.489848][T16019] slab_pre_alloc_hook+0x59/0x310 [ 574.494911][T16019] ? rtnl_newlink+0x10d/0x20a0 [ 574.499698][T16019] __kmem_cache_alloc_node+0x53/0x250 [ 574.505115][T16019] ? rtnl_newlink+0x10d/0x20a0 [ 574.509903][T16019] kmalloc_trace+0x2a/0xe0 [ 574.514356][T16019] ? rtnl_setlink+0x4e0/0x4e0 [ 574.519057][T16019] rtnl_newlink+0x10d/0x20a0 [ 574.523703][T16019] ? __mutex_trylock_common+0x159/0x260 [ 574.529272][T16019] ? rtnl_setlink+0x4e0/0x4e0 [ 574.533976][T16019] ? trace_raw_output_contention_end+0xd0/0xd0 [ 574.540164][T16019] ? rcu_is_watching+0x15/0xb0 [ 574.544957][T16019] ? trace_contention_end+0x39/0xe0 [ 574.550185][T16019] ? __mutex_lock+0x315/0xcc0 [ 574.554891][T16019] ? rtnetlink_rcv_msg+0x811/0xfa0 [ 574.560038][T16019] ? mutex_lock_nested+0x20/0x20 [ 574.565002][T16019] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 574.570144][T16019] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 574.575294][T16019] ? rtnl_setlink+0x4e0/0x4e0 [ 574.579993][T16019] rtnetlink_rcv_msg+0x869/0xfa0 [ 574.584967][T16019] ? rtnetlink_bind+0x80/0x80 [ 574.589682][T16019] ? preempt_schedule+0xc0/0xd0 [ 574.594567][T16019] ? preempt_schedule_common+0x82/0xc0 [ 574.600063][T16019] ? preempt_schedule+0xc0/0xd0 [ 574.604948][T16019] ? schedule_preempt_disabled+0x20/0x20 [ 574.610615][T16019] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 574.616625][T16019] ? lock_chain_count+0x20/0x20 [ 574.621602][T16019] ? preempt_schedule_thunk+0x1a/0x30 [ 574.627002][T16019] ? _raw_spin_unlock_irqrestore+0x111/0x120 [ 574.633015][T16019] ? _raw_spin_unlock+0x40/0x40 [ 574.637899][T16019] ? rcu_preempt_deferred_qs_irqrestore+0x88e/0xce0 [ 574.644518][T16019] ? perf_trace_run_bpf_submit+0x125/0x1c0 [ 574.650454][T16019] netlink_rcv_skb+0x241/0x4d0 [ 574.655264][T16019] ? rtnetlink_bind+0x80/0x80 [ 574.660065][T16019] ? netlink_ack+0x1180/0x1180 [ 574.664886][T16019] ? __lock_acquire+0x7d40/0x7d40 [ 574.669956][T16019] ? __rcu_read_unlock+0x7c/0xd0 [ 574.674938][T16019] ? netlink_deliver_tap+0x2e/0x1b0 [ 574.680177][T16019] netlink_unicast+0x751/0x8d0 [ 574.684990][T16019] netlink_sendmsg+0x8d0/0xbf0 [ 574.689804][T16019] ? netlink_getsockopt+0x590/0x590 [ 574.695045][T16019] ? aa_sock_msg_perm+0x94/0x150 [ 574.700030][T16019] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 574.705356][T16019] ? security_socket_sendmsg+0x80/0xa0 [ 574.710859][T16019] ? netlink_getsockopt+0x590/0x590 [ 574.716114][T16019] ____sys_sendmsg+0x5ba/0x960 [ 574.720919][T16019] ? __asan_memset+0x22/0x40 [ 574.725548][T16019] ? __sys_sendmsg_sock+0x30/0x30 [ 574.730602][T16019] ? __import_iovec+0x5f2/0x850 [ 574.735490][T16019] ? import_iovec+0x73/0xa0 [ 574.740025][T16019] ___sys_sendmsg+0x2a6/0x360 [ 574.744734][T16019] ? __sys_sendmsg+0x2a0/0x2a0 [ 574.749550][T16019] ? trace_call_bpf+0xc3/0x6c0 [ 574.754367][T16019] __se_sys_sendmsg+0x1c2/0x2b0 [ 574.759351][T16019] ? __x64_sys_sendmsg+0x80/0x80 [ 574.764362][T16019] ? lockdep_hardirqs_on+0x98/0x150 [ 574.769616][T16019] do_syscall_64+0x55/0xa0 [ 574.774074][T16019] ? clear_bhb_loop+0x40/0x90 [ 574.778879][T16019] ? clear_bhb_loop+0x40/0x90 [ 574.783620][T16019] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 574.789550][T16019] RIP: 0033:0x7f821159c799 [ 574.793991][T16019] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 574.813716][T16019] RSP: 002b:00007f8212430028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 574.822162][T16019] RAX: ffffffffffffffda RBX: 00007f8211815fa0 RCX: 00007f821159c799 [ 574.830163][T16019] RDX: 0000000000008000 RSI: 0000200000000600 RDI: 0000000000000003 [ 574.838159][T16019] RBP: 00007f8212430090 R08: 0000000000000000 R09: 0000000000000000 [ 574.846151][T16019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 574.854141][T16019] R13: 00007f8211816038 R14: 00007f8211815fa0 R15: 00007ffda8922bc8 [ 574.862159][T16019] [ 575.381247][T16038] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 575.420947][T16041] __nla_validate_parse: 7 callbacks suppressed [ 575.420986][T16041] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3532'. [ 575.472719][T16041] IPv6: Can't replace route, no match found [ 576.657510][T16060] netlink: 'syz.3.3540': attribute type 10 has an invalid length. [ 576.668108][T16060] FAULT_INJECTION: forcing a failure. [ 576.668108][T16060] name failslab, interval 1, probability 0, space 0, times 0 [ 576.689419][T16060] CPU: 1 PID: 16060 Comm: syz.3.3540 Not tainted syzkaller #0 [ 576.696947][T16060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 576.707131][T16060] Call Trace: [ 576.710467][T16060] [ 576.713421][T16060] dump_stack_lvl+0x18c/0x250 [ 576.718227][T16060] ? show_regs_print_info+0x20/0x20 [ 576.723464][T16060] ? load_image+0x400/0x400 [ 576.728011][T16060] should_fail_ex+0x39d/0x4d0 [ 576.732957][T16060] should_failslab+0x9/0x20 [ 576.737500][T16060] slab_pre_alloc_hook+0x59/0x310 [ 576.742678][T16060] kmem_cache_alloc_node+0x60/0x320 [ 576.747952][T16060] ? __alloc_skb+0x103/0x2c0 [ 576.752586][T16060] __alloc_skb+0x103/0x2c0 [ 576.757043][T16060] rtmsg_ifinfo_build_skb+0x8c/0x260 [ 576.762398][T16060] rtmsg_ifinfo+0x8c/0x1a0 [ 576.766853][T16060] __dev_notify_flags+0xf3/0x310 [ 576.771837][T16060] ? __dev_change_flags+0x6a0/0x6a0 [ 576.777084][T16060] ? __dev_change_flags+0x4d4/0x6a0 [ 576.782339][T16060] ? vprintk_emit+0x53d/0x610 [ 576.787077][T16060] ? dev_get_flags+0x1c0/0x1c0 [ 576.791886][T16060] ? printk_sprint+0x460/0x460 [ 576.796872][T16060] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 576.802836][T16060] ? _raw_spin_unlock+0x40/0x40 [ 576.807719][T16060] dev_change_flags+0xe8/0x1a0 [ 576.812529][T16060] do_setlink+0xc58/0x4130 [ 576.816979][T16060] ? arch_stack_walk+0x160/0x190 [ 576.821958][T16060] ? load_image+0x400/0x400 [ 576.826510][T16060] ? nlmsg_parse_deprecated_strict+0x110/0x110 [ 576.832735][T16060] ? stack_trace_save+0xaa/0x100 [ 576.837712][T16060] ? __nla_validate_parse+0x2522/0x2ea0 [ 576.843314][T16060] ? __nla_validate+0x50/0x50 [ 576.848071][T16060] ? validate_linkmsg+0x719/0x910 [ 576.853125][T16060] rtnl_newlink+0x17da/0x20a0 [ 576.857850][T16060] ? rtnl_setlink+0x4e0/0x4e0 [ 576.862638][T16060] ? trace_raw_output_contention_end+0xd0/0xd0 [ 576.868827][T16060] ? rcu_is_watching+0x15/0xb0 [ 576.873625][T16060] ? trace_contention_end+0x39/0xe0 [ 576.878854][T16060] ? __mutex_lock+0x315/0xcc0 [ 576.883574][T16060] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 576.888724][T16060] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 576.893864][T16060] ? rtnl_setlink+0x4e0/0x4e0 [ 576.898569][T16060] rtnetlink_rcv_msg+0x869/0xfa0 [ 576.903552][T16060] ? lockdep_hardirqs_on+0x98/0x150 [ 576.908787][T16060] ? rtnetlink_bind+0x80/0x80 [ 576.913492][T16060] ? perf_trace_preemptirq_template+0xac/0x330 [ 576.919683][T16060] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 576.925702][T16060] ? lock_chain_count+0x20/0x20 [ 576.930598][T16060] ? __local_bh_enable_ip+0x13a/0x1c0 [ 576.935995][T16060] ? lockdep_hardirqs_on+0x98/0x150 [ 576.941224][T16060] ? __local_bh_enable_ip+0x13a/0x1c0 [ 576.946618][T16060] ? _local_bh_enable+0xa0/0xa0 [ 576.951505][T16060] ? __dev_queue_xmit+0x265/0x3660 [ 576.956648][T16060] ? __dev_queue_xmit+0x265/0x3660 [ 576.961789][T16060] ? __dev_queue_xmit+0x1b2c/0x3660 [ 576.967028][T16060] ? __dev_queue_xmit+0x265/0x3660 [ 576.972186][T16060] ? ref_tracker_free+0x690/0x840 [ 576.977244][T16060] netlink_rcv_skb+0x241/0x4d0 [ 576.982049][T16060] ? rtnetlink_bind+0x80/0x80 [ 576.986758][T16060] ? netlink_ack+0x1180/0x1180 [ 576.991588][T16060] ? __lock_acquire+0x7d40/0x7d40 [ 576.996674][T16060] ? netlink_deliver_tap+0x2e/0x1b0 [ 577.001929][T16060] netlink_unicast+0x751/0x8d0 [ 577.006735][T16060] netlink_sendmsg+0x8d0/0xbf0 [ 577.011546][T16060] ? netlink_getsockopt+0x590/0x590 [ 577.016781][T16060] ? aa_sock_msg_perm+0x94/0x150 [ 577.021761][T16060] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 577.027079][T16060] ? security_socket_sendmsg+0x80/0xa0 [ 577.032573][T16060] ? netlink_getsockopt+0x590/0x590 [ 577.037826][T16060] ____sys_sendmsg+0x5ba/0x960 [ 577.042707][T16060] ? __asan_memset+0x22/0x40 [ 577.047332][T16060] ? __sys_sendmsg_sock+0x30/0x30 [ 577.052378][T16060] ? __import_iovec+0x5f2/0x850 [ 577.057267][T16060] ? import_iovec+0x73/0xa0 [ 577.061800][T16060] ___sys_sendmsg+0x2a6/0x360 [ 577.066504][T16060] ? get_pid_task+0x20/0x1e0 [ 577.071137][T16060] ? __sys_sendmsg+0x2a0/0x2a0 [ 577.076036][T16060] ? __lock_acquire+0x7d40/0x7d40 [ 577.081117][T16060] __se_sys_sendmsg+0x1c2/0x2b0 [ 577.085999][T16060] ? __x64_sys_sendmsg+0x80/0x80 [ 577.090981][T16060] ? lockdep_hardirqs_on+0x98/0x150 [ 577.096304][T16060] do_syscall_64+0x55/0xa0 [ 577.100754][T16060] ? clear_bhb_loop+0x40/0x90 [ 577.105455][T16060] ? clear_bhb_loop+0x40/0x90 [ 577.110157][T16060] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 577.116079][T16060] RIP: 0033:0x7f821159c799 [ 577.120517][T16060] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 577.140149][T16060] RSP: 002b:00007f8212430028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 577.148624][T16060] RAX: ffffffffffffffda RBX: 00007f8211815fa0 RCX: 00007f821159c799 [ 577.156648][T16060] RDX: 0000000000008000 RSI: 0000200000000600 RDI: 0000000000000003 [ 577.164736][T16060] RBP: 00007f8212430090 R08: 0000000000000000 R09: 0000000000000000 [ 577.172734][T16060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 577.180830][T16060] R13: 00007f8211816038 R14: 00007f8211815fa0 R15: 00007ffda8922bc8 [ 577.188843][T16060] [ 577.311193][T16063] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3541'. [ 577.386094][T16066] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.3541'. [ 577.416305][T16063] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.3541'. [ 577.476250][T16063] IPv6: Can't replace route, no match found [ 577.944033][T16086] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3550'. [ 577.987868][T16086] IPv6: Can't replace route, no match found [ 578.057395][T16088] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 578.208399][T16097] netlink: 830 bytes leftover after parsing attributes in process `syz.1.3554'. [ 578.242977][T16100] netlink: 830 bytes leftover after parsing attributes in process `syz.2.3555'. [ 578.279858][T16102] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.3554'. [ 578.289934][T16097] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.3554'. [ 578.312859][T16103] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.3555'. [ 578.331259][T16097] IPv6: Can't replace route, no match found [ 578.370774][T16100] IPv6: Can't replace route, no match found [ 580.297016][T16130] IPv6: Can't replace route, no match found [ 580.357306][T16134] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 580.558929][T16137] syzkaller0: entered promiscuous mode [ 580.614540][T16137] syzkaller0: entered allmulticast mode [ 580.891623][T16146] tap0: tun_chr_ioctl cmd 1074025677 [ 580.898234][T16146] tap0: linktype set to 6 [ 581.070224][T16154] netlink: 'syz.3.3574': attribute type 10 has an invalid length. [ 581.091855][T16154] FAULT_INJECTION: forcing a failure. [ 581.091855][T16154] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 581.146164][T16154] CPU: 1 PID: 16154 Comm: syz.3.3574 Not tainted syzkaller #0 [ 581.153711][T16154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 581.163814][T16154] Call Trace: [ 581.167129][T16154] [ 581.170096][T16154] dump_stack_lvl+0x18c/0x250 [ 581.174870][T16154] ? show_regs_print_info+0x20/0x20 [ 581.180136][T16154] ? load_image+0x400/0x400 [ 581.184789][T16154] ? __might_fault+0xaa/0x120 [ 581.189509][T16154] ? __lock_acquire+0x7d40/0x7d40 [ 581.194588][T16154] should_fail_ex+0x39d/0x4d0 [ 581.199326][T16154] _copy_from_user+0x2f/0xe0 [ 581.204040][T16154] kstrtouint_from_user+0xde/0x170 [ 581.209217][T16154] ? kstrtol_from_user+0x190/0x190 [ 581.214407][T16154] proc_fail_nth_write+0x8f/0x250 [ 581.219490][T16154] ? proc_fail_nth_read+0x260/0x260 [ 581.224832][T16154] ? proc_fail_nth_read+0x260/0x260 [ 581.230086][T16154] vfs_write+0x296/0x990 [ 581.234392][T16154] ? file_end_write+0x250/0x250 [ 581.239294][T16154] ? __fget_files+0x28/0x4b0 [ 581.243933][T16154] ? __fget_files+0x28/0x4b0 [ 581.248574][T16154] ? __fget_files+0x43d/0x4b0 [ 581.253314][T16154] ? __fdget_pos+0x2a3/0x330 [ 581.257956][T16154] ? ksys_write+0x75/0x260 [ 581.262427][T16154] ksys_write+0x150/0x260 [ 581.266813][T16154] ? __ia32_sys_read+0x90/0x90 [ 581.271632][T16154] ? lockdep_hardirqs_on+0x98/0x150 [ 581.276882][T16154] do_syscall_64+0x55/0xa0 [ 581.281375][T16154] ? clear_bhb_loop+0x40/0x90 [ 581.286095][T16154] ? clear_bhb_loop+0x40/0x90 [ 581.290820][T16154] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 581.296757][T16154] RIP: 0033:0x7f821155cfce [ 581.301211][T16154] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 581.320871][T16154] RSP: 002b:00007f821242ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 581.329336][T16154] RAX: ffffffffffffffda RBX: 00007f82124306c0 RCX: 00007f821155cfce [ 581.337347][T16154] RDX: 0000000000000001 RSI: 00007f82124300a0 RDI: 0000000000000004 [ 581.345380][T16154] RBP: 00007f8212430090 R08: 0000000000000000 R09: 0000000000000000 [ 581.353398][T16154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 581.361410][T16154] R13: 00007f8211816038 R14: 00007f8211815fa0 R15: 00007ffda8922bc8 [ 581.369442][T16154] [ 584.844953][T16166] netlink: 'syz.3.3578': attribute type 21 has an invalid length. [ 584.853251][T16166] __nla_validate_parse: 2 callbacks suppressed [ 584.853262][T16166] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3578'. [ 584.874799][T16176] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3582'. [ 584.886796][T16178] IPv6: Can't replace route, no match found [ 585.125195][T16187] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.3584'. [ 585.152514][T16181] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 585.213380][T16187] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.3584'. [ 585.258918][T16190] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.3584'. [ 585.270473][T16193] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.3584'. [ 585.722510][T16209] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3595'. [ 585.812235][T16209] IPv6: Can't replace route, no match found [ 585.856187][T16212] netlink: 'syz.0.3596': attribute type 10 has an invalid length. [ 586.556851][T16224] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 586.842968][T16223] netlink: 'syz.0.3601': attribute type 12 has an invalid length. [ 586.869673][T16223] netlink: 'syz.0.3601': attribute type 15 has an invalid length. [ 587.595337][T16241] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.3606'. [ 587.838746][T16248] netlink: 'syz.0.3609': attribute type 10 has an invalid length. [ 587.880406][T16248] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3609'. [ 588.395369][T16260] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3614'. [ 588.462198][T16260] IPv6: Can't replace route, no match found [ 588.489279][T16269] netlink: 'syz.1.3616': attribute type 10 has an invalid length. [ 588.540651][T16269] team0: Port device dummy0 removed [ 588.577293][T16269] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 589.845607][T16306] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 590.295803][T16324] netlink: 'syz.2.3638': attribute type 10 has an invalid length. [ 591.487004][T16351] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 591.975478][T16374] __nla_validate_parse: 1 callbacks suppressed [ 591.975499][T16374] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3658'. [ 592.706010][T16383] netlink: 'syz.2.3661': attribute type 29 has an invalid length. [ 592.720101][T16383] netlink: 'syz.2.3661': attribute type 29 has an invalid length. [ 592.749312][T16383] netlink: 'syz.2.3661': attribute type 29 has an invalid length. [ 593.147978][T16396] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 593.172776][T16398] netlink: 763 bytes leftover after parsing attributes in process `syz.2.3667'. [ 594.007435][T16421] netlink: 'syz.3.3671': attribute type 12 has an invalid length. [ 594.065658][T16421] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3671'. [ 594.169747][T16423] netlink: 'syz.3.3671': attribute type 10 has an invalid length. [ 595.263658][T16429] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 595.369871][T16431] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 595.622390][T16441] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3682'. [ 595.734181][T16441] IPv6: Can't replace route, no match found [ 596.725623][T16464] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 597.464310][T16485] netlink: 'syz.3.3698': attribute type 10 has an invalid length. [ 598.224783][T16512] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3706'. [ 598.290750][T16512] IPv6: Can't replace route, no match found [ 599.125252][T16522] netlink: 'syz.2.3709': attribute type 10 has an invalid length. [ 599.535813][T16535] netlink: 'syz.2.3715': attribute type 46 has an invalid length. [ 599.618312][T16537] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 599.685913][T16535] tap0: tun_chr_ioctl cmd 1074025675 [ 599.699316][T16535] tap0: persist disabled [ 599.920599][T16548] netlink: 'syz.3.3721': attribute type 10 has an invalid length. [ 603.290066][T16577] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 603.427911][T16585] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3731'. [ 603.594433][T16585] IPv6: Can't replace route, no match found [ 604.203698][T16598] netlink: 144 bytes leftover after parsing attributes in process `syz.0.3736'. [ 604.772186][T16598] team0: Port device team_slave_0 removed [ 604.827150][T16598] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 605.132449][T16616] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 605.443289][T16623] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3745'. [ 605.513935][T16623] IPv6: Can't replace route, no match found [ 606.958966][T16660] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3759'. [ 606.978509][T16658] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3758'. [ 607.155990][T16658] team0: Port device team_slave_0 removed [ 607.212412][T16658] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 607.393524][T16665] IPv6: Can't replace route, no match found [ 608.693686][T16703] netlink: 'syz.1.3775': attribute type 10 has an invalid length. [ 608.954930][T16707] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3776'. [ 608.991142][T16706] IPv6: Can't replace route, no match found [ 609.257334][T16722] netlink: set zone limit has 8 unknown bytes [ 609.422528][T16715] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3787'. [ 609.524542][T16721] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3779'. [ 609.550971][T16721] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 609.857763][T16727] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 611.168291][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 611.180112][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 611.188627][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 611.199597][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 611.207646][ T51] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 611.216291][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 611.437769][T16747] chnl_net:caif_netlink_parms(): no params data found [ 611.547018][T16747] bridge0: port 1(bridge_slave_0) entered blocking state [ 611.554652][T16747] bridge0: port 1(bridge_slave_0) entered disabled state [ 611.562091][T16747] bridge_slave_0: entered allmulticast mode [ 611.569852][T16747] bridge_slave_0: entered promiscuous mode [ 611.579520][T16747] bridge0: port 2(bridge_slave_1) entered blocking state [ 611.586868][T16747] bridge0: port 2(bridge_slave_1) entered disabled state [ 611.594434][T16747] bridge_slave_1: entered allmulticast mode [ 611.603543][T16747] bridge_slave_1: entered promiscuous mode [ 611.643949][T16747] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 611.662110][T16747] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 611.721478][T16747] team0: Port device team_slave_0 added [ 611.732551][T16747] team0: Port device team_slave_1 added [ 611.787136][T16747] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 611.794518][T16747] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 611.828742][T16747] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 611.843323][T16747] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 611.851327][T16747] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 611.889546][T16747] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 612.266436][T16747] hsr_slave_0: entered promiscuous mode [ 612.318467][T16747] hsr_slave_1: entered promiscuous mode [ 612.339440][T16747] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 612.347081][T16747] Cannot create hsr debugfs directory [ 612.546528][T16759] netlink: 830 bytes leftover after parsing attributes in process `syz.2.3792'. [ 612.639242][T16761] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3793'. [ 612.707232][T16763] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.3792'. [ 612.898387][T16765] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.3793'. [ 613.010134][T16766] IPv6: Can't replace route, no match found [ 613.026519][T16762] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.3792'. [ 613.144029][T15624] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.213982][T16764] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.3793'. [ 613.363308][T16770] netlink: 'syz.2.3794': attribute type 3 has an invalid length. [ 613.380982][T15624] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.391784][T16770] netlink: 'syz.2.3794': attribute type 6 has an invalid length. [ 613.453349][T16770] netlink: 144448 bytes leftover after parsing attributes in process `syz.2.3794'. [ 613.634642][T15624] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.777956][T15624] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.849431][T16779] FAULT_INJECTION: forcing a failure. [ 613.849431][T16779] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 613.869054][T16779] CPU: 0 PID: 16779 Comm: syz.0.3798 Not tainted syzkaller #0 [ 613.876585][T16779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 613.886658][T16779] Call Trace: [ 613.889946][T16779] [ 613.892893][T16779] dump_stack_lvl+0x18c/0x250 [ 613.897700][T16779] ? show_regs_print_info+0x20/0x20 [ 613.902942][T16779] ? load_image+0x400/0x400 [ 613.907473][T16779] ? __lock_acquire+0x7d40/0x7d40 [ 613.912543][T16779] ? snprintf+0xe9/0x140 [ 613.916855][T16779] should_fail_ex+0x39d/0x4d0 [ 613.921598][T16779] _copy_to_user+0x2f/0xa0 [ 613.926067][T16779] simple_read_from_buffer+0xe7/0x150 [ 613.931534][T16779] proc_fail_nth_read+0x1e8/0x260 [ 613.936636][T16779] ? proc_fault_inject_write+0x360/0x360 [ 613.942423][T16779] ? fsnotify_perm+0x271/0x5e0 [ 613.947263][T16779] ? proc_fault_inject_write+0x360/0x360 [ 613.952935][T16779] vfs_read+0x28b/0x970 [ 613.957146][T16779] ? kernel_read+0x1e0/0x1e0 [ 613.961766][T16779] ? __fget_files+0x28/0x4b0 [ 613.966379][T16779] ? __fget_files+0x28/0x4b0 [ 613.971022][T16779] ? __fget_files+0x43d/0x4b0 [ 613.975793][T16779] ? __fdget_pos+0x2a3/0x330 [ 613.980532][T16779] ? ksys_read+0x75/0x260 [ 613.984912][T16779] ksys_read+0x150/0x260 [ 613.989191][T16779] ? vfs_write+0x990/0x990 [ 613.993662][T16779] ? lockdep_hardirqs_on+0x98/0x150 [ 613.998897][T16779] do_syscall_64+0x55/0xa0 [ 614.003869][T16779] ? clear_bhb_loop+0x40/0x90 [ 614.008713][T16779] ? clear_bhb_loop+0x40/0x90 [ 614.013469][T16779] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 614.019406][T16779] RIP: 0033:0x7f3b5055cfce [ 614.023871][T16779] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 614.043539][T16779] RSP: 002b:00007f3b514d6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 614.052262][T16779] RAX: ffffffffffffffda RBX: 00007f3b514d76c0 RCX: 00007f3b5055cfce [ 614.060359][T16779] RDX: 000000000000000f RSI: 00007f3b514d70a0 RDI: 0000000000000004 [ 614.068855][T16779] RBP: 00007f3b514d7090 R08: 0000000000000000 R09: 0000000000000000 [ 614.076859][T16779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 614.084878][T16779] R13: 00007f3b50816038 R14: 00007f3b50815fa0 R15: 00007ffc17e3dfb8 [ 614.092905][T16779] [ 614.249892][ T51] Bluetooth: hci4: command tx timeout [ 614.849725][T16795] netlink: 830 bytes leftover after parsing attributes in process `syz.3.3801'. [ 614.995922][T16800] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.3801'. [ 615.098082][T16795] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.3801'. [ 615.302588][T16800] IPv6: Can't replace route, no match found [ 615.376886][T16810] netlink: 'syz.0.3803': attribute type 10 has an invalid length. [ 615.492435][T16747] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 615.521985][T16747] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 615.567531][T16747] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 615.684368][T16747] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 615.782314][T16825] netlink: 'syz.2.3806': attribute type 19 has an invalid length. [ 615.790604][T16825] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3806'. [ 615.800096][T16824] netlink: 'syz.2.3806': attribute type 19 has an invalid length. [ 615.838201][T16824] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3806'. [ 616.084293][T16838] netlink: 208064 bytes leftover after parsing attributes in process `syz.0.3808'. [ 616.129397][T16838] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 616.198455][T16838] openvswitch: netlink: Message has 4 unknown bytes. [ 616.239012][T16832] syzkaller0: entered promiscuous mode [ 616.270766][T16832] syzkaller0: entered allmulticast mode [ 616.336426][ T51] Bluetooth: hci4: command tx timeout [ 616.381668][T16838] netlink: 14548 bytes leftover after parsing attributes in process `syz.0.3808'. [ 617.325215][T16850] netlink: 830 bytes leftover after parsing attributes in process `syz.2.3811'. [ 617.339528][T16854] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.3811'. [ 617.353116][T16860] IPv6: Can't replace route, no match found [ 617.409050][T16747] 8021q: adding VLAN 0 to HW filter on device bond0 [ 617.523681][T16747] 8021q: adding VLAN 0 to HW filter on device team0 [ 617.611940][T16869] netlink: 830 bytes leftover after parsing attributes in process `syz.3.3813'. [ 617.645003][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 617.652293][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 617.676198][T16874] netlink: 'syz.0.3815': attribute type 10 has an invalid length. [ 617.740731][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 617.747927][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 617.890169][T16869] IPv6: Can't replace route, no match found [ 617.909994][T15624] hsr_slave_0: left promiscuous mode [ 617.916466][T15624] hsr_slave_1: left promiscuous mode [ 617.926252][T15624] hsr0: left allmulticast mode [ 617.932345][T15624] bridge0: port 3(hsr0) entered disabled state [ 617.943754][T15624] bridge_slave_1: left allmulticast mode [ 617.949909][T15624] bridge_slave_1: left promiscuous mode [ 617.955844][T15624] bridge0: port 2(bridge_slave_1) entered disabled state [ 617.966474][T15624] bridge_slave_0: left allmulticast mode [ 617.972478][T15624] bridge_slave_0: left promiscuous mode [ 617.978505][T15624] bridge0: port 1(bridge_slave_0) entered disabled state [ 618.012927][T15624] veth1_vlan: left promiscuous mode [ 618.018338][T15624] veth0_vlan: left promiscuous mode [ 618.419673][ T51] Bluetooth: hci4: command tx timeout [ 618.639429][T15624] team0 (unregistering): Port device team_slave_1 removed [ 618.750962][T15624] team0 (unregistering): Port device C removed [ 618.812731][T15624] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 619.369392][T15624] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 619.493038][T15624] bond0 (unregistering): Released all slaves [ 619.920696][T16887] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 620.112733][T16897] __nla_validate_parse: 2 callbacks suppressed [ 620.112752][T16897] netlink: 830 bytes leftover after parsing attributes in process `syz.2.3821'. [ 620.240333][T16899] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.3821'. [ 620.341243][T16905] IPv6: Can't replace route, no match found [ 620.431275][T16897] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.3821'. [ 620.489570][ T51] Bluetooth: hci4: command tx timeout [ 620.545965][T16747] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 620.661327][T16747] veth0_vlan: entered promiscuous mode [ 620.685574][T16747] veth1_vlan: entered promiscuous mode [ 620.793906][T16747] veth0_macvtap: entered promiscuous mode [ 620.837325][T16747] veth1_macvtap: entered promiscuous mode [ 620.895719][T16747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 620.913394][T16747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 620.923451][T16747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 620.950256][T16747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 620.984255][T16747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 621.019405][T16747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 621.044154][T16747] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 621.085746][T16912] netlink: 'syz.3.3826': attribute type 21 has an invalid length. [ 621.169830][T16912] IPv6: NLM_F_CREATE should be specified when creating new route [ 621.217427][T16908] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.3826'. [ 621.234107][T16747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 621.305063][T16747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 621.339223][T16747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 621.386209][T16747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 621.457349][T16747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 621.488550][T16747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 621.538723][T16747] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 621.611977][T16918] netlink: 'syz.2.3827': attribute type 10 has an invalid length. [ 621.697839][T16918] batman_adv: batadv0: Adding interface: ÿÿÿÿÿÿ [ 621.719935][T16918] batman_adv: batadv0: The MTU of interface ÿÿÿÿÿÿ is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 621.773655][T16918] batman_adv: batadv0: Not using interface ÿÿÿÿÿÿ (retrying later): interface not active [ 621.844302][T16747] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.879271][T16747] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.888085][T16747] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.909445][T16747] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.198781][T11679] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 622.216491][T11679] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 622.272243][T15626] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 622.305215][T15626] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 622.353252][T16925] netlink: 830 bytes leftover after parsing attributes in process `syz.2.3829'. [ 622.452517][T16929] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.3829'. [ 622.545322][T16925] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.3829'. [ 622.726665][T16931] netlink: 14560 bytes leftover after parsing attributes in process `syz.1.3788'. [ 622.927159][T16929] IPv6: Can't replace route, no match found [ 623.523342][T16938] netlink: 830 bytes leftover after parsing attributes in process `syz.3.3833'. [ 623.671295][T16941] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.3833'. [ 624.016778][T16940] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 624.069510][T16938] IPv6: Can't replace route, no match found [ 624.726905][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.737539][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.800128][T16969] __nla_validate_parse: 1 callbacks suppressed [ 625.800146][T16969] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3845'. [ 625.972768][T16973] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.3845'. [ 626.013672][T16969] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.3845'. [ 626.212381][T16969] IPv6: Can't replace route, no match found [ 626.528834][T16982] netlink: 'syz.0.3850': attribute type 10 has an invalid length. [ 626.670234][T16982] team0 (unregistering): Port device team_slave_1 removed [ 627.140364][T16999] netlink: set zone limit has 8 unknown bytes [ 627.257943][T17003] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3859'. [ 627.353607][T17010] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.3859'. [ 627.385356][T17003] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.3859'. [ 627.418371][T17008] netlink: 127924 bytes leftover after parsing attributes in process `syz.1.3861'. [ 627.428518][T17008] netlink: 16384 bytes leftover after parsing attributes in process `syz.1.3861'. [ 627.507203][T17003] IPv6: Can't replace route, no match found [ 628.281985][T17023] netlink: 'syz.2.3869': attribute type 16 has an invalid length. [ 628.306158][T17023] netlink: 'syz.2.3869': attribute type 3 has an invalid length. [ 628.327737][T17023] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3869'. [ 628.464176][T17030] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 628.765546][T17040] netlink: 830 bytes leftover after parsing attributes in process `syz.1.3875'. [ 628.829933][T17042] netlink: 'syz.0.3876': attribute type 1 has an invalid length. [ 628.837739][T17042] netlink: 'syz.0.3876': attribute type 3 has an invalid length. [ 628.931547][T17040] IPv6: Can't replace route, no match found [ 629.850560][T17070] IPv6: Can't replace route, no match found [ 629.927269][T17073] IPv6: Can't replace route, no match found [ 630.310054][T17085] netlink: 'syz.2.3893': attribute type 21 has an invalid length. [ 630.318022][T17085] netlink: 'syz.2.3893': attribute type 3 has an invalid length. [ 630.340845][T17085] netlink: 'syz.2.3893': attribute type 10 has an invalid length. [ 630.405145][T17085] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 630.925899][T17099] __nla_validate_parse: 5 callbacks suppressed [ 630.925956][T17099] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3899'. [ 631.022333][T17099] IPv6: Can't replace route, no match found [ 631.525833][T17112] sctp: [Deprecated]: syz.3.3903 (pid 17112) Use of int in maxseg socket option. [ 631.525833][T17112] Use struct sctp_assoc_value instead [ 634.691204][T17139] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3913'. [ 634.918546][T17143] IPv6: Can't replace route, no match found [ 634.938588][T17149] netlink: 'syz.0.3917': attribute type 8 has an invalid length. [ 634.964761][T17149] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3917'. [ 635.009782][T17148] sctp: [Deprecated]: syz.0.3917 (pid 17148) Use of int in maxseg socket option. [ 635.009782][T17148] Use struct sctp_assoc_value instead [ 635.035495][T17149] sctp: [Deprecated]: syz.0.3917 (pid 17149) Use of int in maxseg socket option. [ 635.035495][T17149] Use struct sctp_assoc_value instead [ 635.064187][T17148] netlink: 'syz.0.3917': attribute type 21 has an invalid length. [ 635.078525][T17148] netlink: 'syz.0.3917': attribute type 30 has an invalid length. [ 635.108198][T17149] netlink: 'syz.0.3917': attribute type 21 has an invalid length. [ 635.126966][T17149] netlink: 'syz.0.3917': attribute type 30 has an invalid length. [ 635.659555][T17170] mac80211_hwsim hwsim23 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 635.682935][T17171] netlink: 'syz.3.3922': attribute type 10 has an invalid length. [ 635.824017][T17171] bridge0: port 2(bridge_slave_1) entered disabled state [ 635.832841][T17171] bridge0: port 1(bridge_slave_0) entered disabled state [ 636.061068][T17179] netlink: 830 bytes leftover after parsing attributes in process `syz.1.3925'. [ 636.204360][T17179] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.3925'. [ 636.236761][T17184] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.3925'. [ 636.328886][T17184] IPv6: Can't replace route, no match found [ 636.420830][T17189] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3929'. [ 636.482427][T17189] IPv6: Can't replace route, no match found [ 637.112668][T17212] netlink: 14975 bytes leftover after parsing attributes in process `syz.2.3937'. [ 637.218726][T17217] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3939'. [ 637.328972][T17219] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.3939'. [ 637.357483][T17217] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.3939'. [ 637.404574][T17220] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 637.468018][T17217] IPv6: Can't replace route, no match found [ 637.550052][T17228] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3942'. [ 637.565754][T17224] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3941'. [ 637.624457][T17224] IPv6: Can't replace route, no match found [ 637.694712][T17234] netlink: 'syz.3.3943': attribute type 10 has an invalid length. [ 637.855998][T17238] IPv6: Can't replace route, no match found [ 638.183881][T15624] wlan1: Trigger new scan to find an IBSS to join [ 638.565080][T17256] IPv6: Can't replace route, no match found [ 638.752174][T17265] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 638.893526][T17267] IPv6: Can't replace route, no match found [ 639.277403][T17282] netlink: 'syz.3.3964': attribute type 10 has an invalid length. [ 639.351919][T17281] IPv6: Can't replace route, no match found [ 639.574926][T17291] netlink: 'syz.0.3969': attribute type 58 has an invalid length. [ 639.757163][T17293] IPv6: Can't replace route, no match found [ 639.852865][T17296] netlink: 'syz.1.3971': attribute type 29 has an invalid length. [ 640.173968][T17295] validate_nla: 1 callbacks suppressed [ 640.173985][T17295] netlink: 'syz.1.3971': attribute type 29 has an invalid length. [ 642.175308][T11679] wlan1: Trigger new scan to find an IBSS to join [ 642.427929][T17309] delete_channel: no stack [ 642.458969][T17307] delete_channel: no stack [ 642.560739][T17316] __nla_validate_parse: 12 callbacks suppressed [ 642.560765][T17316] netlink: 830 bytes leftover after parsing attributes in process `syz.2.3978'. [ 642.666102][T17321] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.3978'. [ 642.720103][T17316] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.3978'. [ 642.792214][T17316] IPv6: Can't replace route, no match found [ 642.853634][T17320] netlink: 'syz.3.3980': attribute type 10 has an invalid length. [ 642.895867][T17320] bond0: (slave dummy0): Releasing backup interface [ 643.278625][T17328] netlink: 'syz.2.3983': attribute type 10 has an invalid length. [ 643.343053][T17328] bond0: (slave dummy0): Releasing backup interface [ 643.558009][T17331] netlink: 'syz.0.3984': attribute type 4 has an invalid length. [ 643.587642][T17331] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3984'. [ 643.635353][T17328] team0: Port device dummy0 added [ 644.169640][T15621] wlan1: Creating new IBSS network, BSSID 66:c1:f2:bc:e1:de [ 644.234737][T17344] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3987'. [ 644.309258][T17344] IPv6: Can't replace route, no match found [ 644.527424][T17350] netlink: 830 bytes leftover after parsing attributes in process `syz.1.3990'. [ 644.594467][T17351] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.3990'. [ 644.627434][T17350] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.3990'. [ 644.677932][T17350] IPv6: Can't replace route, no match found [ 645.330541][T17371] netlink: 'syz.2.3998': attribute type 10 has an invalid length. [ 645.462567][T17374] netlink: 830 bytes leftover after parsing attributes in process `syz.1.4001'. [ 645.484149][T17375] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4002'. [ 645.528151][T17382] IPv6: Can't replace route, no match found [ 645.556826][T17374] IPv6: Can't replace route, no match found [ 645.627062][T17384] openvswitch: netlink: Flow actions attr not present in new flow. [ 645.638654][T17384] openvswitch: netlink: Flow actions attr not present in new flow. [ 646.539991][T17400] netlink: 'syz.3.4009': attribute type 10 has an invalid length. [ 646.584914][T17400] bridge0: port 2(bridge_slave_1) entered blocking state [ 646.592259][T17400] bridge0: port 2(bridge_slave_1) entered forwarding state [ 646.600961][T17400] bridge0: port 1(bridge_slave_0) entered blocking state [ 646.608266][T17400] bridge0: port 1(bridge_slave_0) entered forwarding state [ 646.643510][T17400] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 646.987978][T17413] IPv6: Can't replace route, no match found [ 647.229149][T17418] IPv6: Can't replace route, no match found [ 647.263163][T17426] netlink: 'syz.0.4019': attribute type 26 has an invalid length. [ 647.450367][T17429] netlink: 'syz.1.4020': attribute type 10 has an invalid length. [ 647.704519][T17429] team0: Port device dummy0 added [ 648.566537][T17462] __nla_validate_parse: 9 callbacks suppressed [ 648.566557][T17462] netlink: 830 bytes leftover after parsing attributes in process `syz.0.4032'. [ 648.646598][T17465] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.4032'. [ 648.678882][T17462] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.4032'. [ 648.756293][T17462] IPv6: Can't replace route, no match found [ 649.011815][T17467] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 649.700913][T17498] netlink: 830 bytes leftover after parsing attributes in process `syz.1.4044'. [ 649.777041][T17502] netlink: 'syz.2.4046': attribute type 28 has an invalid length. [ 649.804240][T17502] netlink: 'syz.2.4046': attribute type 4 has an invalid length. [ 649.827246][T17503] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.4044'. [ 649.843862][T17502] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4046'. [ 649.874247][T17498] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.4044'. [ 649.921526][T17498] IPv6: Can't replace route, no match found [ 650.211661][T17513] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 650.711552][T17535] netlink: 830 bytes leftover after parsing attributes in process `syz.2.4059'. [ 650.775972][T17537] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.4059'. [ 650.798950][T17535] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.4059'. [ 650.896123][T17537] IPv6: Can't replace route, no match found [ 651.085717][T17541] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 651.180654][T17547] netlink: 'syz.2.4065': attribute type 10 has an invalid length. [ 651.189072][T17547] hsr0: entered promiscuous mode [ 651.857763][T17568] netlink: 'syz.0.4072': attribute type 10 has an invalid length. [ 652.224528][T17577] IPv6: Can't replace route, no match found [ 653.069911][T17589] netlink: 'syz.2.4078': attribute type 10 has an invalid length. [ 653.585577][T17597] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 654.513410][T17612] __nla_validate_parse: 4 callbacks suppressed [ 654.513432][T17612] netlink: 830 bytes leftover after parsing attributes in process `syz.0.4085'. [ 654.683260][T17614] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.4085'. [ 654.708686][T17612] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.4085'. [ 654.850810][T17614] IPv6: Can't replace route, no match found [ 655.144403][T17617] netlink: 'syz.2.4088': attribute type 2 has an invalid length. [ 655.303972][T17623] netlink: 'syz.0.4090': attribute type 10 has an invalid length. [ 656.736256][T17643] netlink: 'syz.3.4092': attribute type 10 has an invalid length. [ 656.863639][T17646] netlink: 830 bytes leftover after parsing attributes in process `syz.0.4099'. [ 656.976782][T17646] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.4099'. [ 657.029733][T17648] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.4099'. [ 657.190286][T17653] IPv6: Can't replace route, no match found [ 657.727675][T17657] netlink: 'syz.1.4101': attribute type 10 has an invalid length. [ 657.817686][T17657] bond0: (slave bond_slave_0): Releasing backup interface [ 658.925246][T17666] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 659.532362][T17678] netlink: 830 bytes leftover after parsing attributes in process `syz.2.4110'. [ 659.625806][T17679] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.4110'. [ 659.654966][T17678] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.4110'. [ 659.766368][T17678] IPv6: Can't replace route, no match found [ 660.021691][T17686] syzkaller0: entered allmulticast mode [ 660.365517][T17690] netlink: 'syz.2.4115': attribute type 10 has an invalid length. [ 662.734234][T17717] netlink: 'syz.0.4122': attribute type 10 has an invalid length. [ 662.770528][T17717] netlink: 2 bytes leftover after parsing attributes in process `syz.0.4122'. [ 662.790965][T17717] hsr0: entered promiscuous mode [ 662.832326][T17716] netlink: 830 bytes leftover after parsing attributes in process `syz.2.4123'. [ 662.881686][T17716] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.4123'. [ 662.922863][T17719] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.4123'. [ 663.040497][T17719] IPv6: Can't replace route, no match found [ 663.483334][T17723] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4124'. [ 663.693756][T17725] netlink: 'syz.3.4125': attribute type 10 has an invalid length. [ 664.025839][T17729] IPv6: Can't replace route, no match found [ 666.490135][T17757] netlink: 'syz.2.4134': attribute type 10 has an invalid length. [ 667.082872][T17761] netlink: 830 bytes leftover after parsing attributes in process `syz.3.4135'. [ 667.269390][T17762] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.4135'. [ 667.400265][T17761] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.4135'. [ 667.742289][T17763] IPv6: Can't replace route, no match found [ 668.361877][T17766] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 668.420472][T17767] netlink: 'syz.0.4137': attribute type 10 has an invalid length. [ 669.037782][T17773] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4139'. [ 669.366283][T17773] IPv6: Can't replace route, no match found [ 671.726441][T17796] netlink: 'syz.0.4144': attribute type 9 has an invalid length. [ 671.790848][T17796] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.4144'. [ 672.585729][T17800] netlink: 830 bytes leftover after parsing attributes in process `syz.3.4146'. [ 672.853418][T17804] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.4146'. [ 672.920068][T17800] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.4146'. [ 673.121415][T17803] IPv6: Can't replace route, no match found [ 673.248182][T17808] netlink: 'syz.2.4147': attribute type 10 has an invalid length. [ 675.309700][T17818] netlink: 'syz.1.4150': attribute type 21 has an invalid length. [ 675.389786][T17818] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4150'. [ 675.480466][T17818] netlink: 'syz.1.4150': attribute type 4 has an invalid length. [ 675.595569][T17818] netlink: 3 bytes leftover after parsing attributes in process `syz.1.4150'. [ 676.283878][T17826] netlink: 'syz.2.4153': attribute type 10 has an invalid length. [ 676.428307][T17826] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4153'. [ 676.466223][T17826] ipvlan1: entered promiscuous mode [ 676.471754][T17826] ipvlan1: entered allmulticast mode [ 676.477335][T17826] veth0_vlan: entered allmulticast mode [ 676.487136][T17826] bridge0: port 3(ipvlan1) entered blocking state [ 676.494998][T17826] bridge0: port 3(ipvlan1) entered disabled state [ 676.513787][T17826] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 676.563233][T17825] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4152'. [ 676.792335][T17825] IPv6: Can't replace route, no match found [ 677.221311][T17834] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 677.667273][T17842] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4159'. [ 677.679544][T17842] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4159'. [ 677.703799][T17842] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4159'. [ 677.734958][T17842] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4159'. [ 677.823858][T17844] netlink: 'syz.3.4158': attribute type 10 has an invalid length. [ 678.020957][T17842] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.4159'. [ 678.042629][T17842] bridge_slave_1: default FDB implementation only supports local addresses [ 678.083266][T17849] netlink: 830 bytes leftover after parsing attributes in process `syz.0.4160'. [ 678.388292][T17853] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.4160'. [ 678.684127][T17851] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.4160'. [ 678.836675][T17851] IPv6: Can't replace route, no match found [ 680.161236][T17863] netlink: 'syz.1.4161': attribute type 10 has an invalid length. [ 681.061468][T17875] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4166'. [ 681.289789][T17875] IPv6: Can't replace route, no match found [ 681.591447][T17877] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 682.386704][T17889] netlink: 830 bytes leftover after parsing attributes in process `syz.3.4171'. [ 682.550503][T17895] IPv6: Can't replace route, no match found [ 682.592218][T17892] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 682.599779][T17892] IPv6: NLM_F_CREATE should be set when creating new route [ 682.607220][T17892] IPv6: NLM_F_CREATE should be set when creating new route [ 682.614855][T17892] IPv6: NLM_F_CREATE should be set when creating new route [ 682.909208][T17897] netlink: 'syz.0.4174': attribute type 10 has an invalid length. [ 682.985468][T17897] bond0: (slave dummy0): Releasing backup interface [ 683.407521][T17902] netlink: 'syz.1.4175': attribute type 39 has an invalid length. [ 683.598595][T17913] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4178'. [ 683.639345][T17913] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4178'. [ 683.669836][T17913] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4178'. [ 683.703378][T17913] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4178'. [ 683.931380][T17924] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4182'. [ 683.999749][T17913] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.4178'. [ 684.010219][T17913] bridge_slave_1: default FDB implementation only supports local addresses [ 684.124981][T17924] IPv6: Can't replace route, no match found [ 684.350007][T17929] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 684.478773][T17936] netlink: 830 bytes leftover after parsing attributes in process `syz.1.4186'. [ 684.726222][T17942] IPv6: Can't replace route, no match found [ 684.978587][T17952] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4192'. [ 685.123294][T17955] À: port 1(vlan0) entered blocking state [ 685.151182][T17955] À: port 1(vlan0) entered disabled state [ 685.178394][T17960] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4194'. [ 685.182830][T17955] vlan0: entered allmulticast mode [ 685.227369][T17955] vlan0: entered promiscuous mode [ 685.294474][T17952] IPv6: Can't replace route, no match found [ 685.310283][T17960] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4194'. [ 685.879620][T17974] IPv6: Can't replace route, no match found [ 685.933667][T17972] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 686.330398][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.336924][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.463808][T17963] bridge_slave_1: default FDB implementation only supports local addresses [ 686.925516][T17983] netlink: 'syz.1.4197': attribute type 10 has an invalid length. [ 688.036621][T18008] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 688.218312][T18013] IPv6: Can't replace route, no match found [ 688.322618][T18017] netlink: 'syz.2.4211': attribute type 1 has an invalid length. [ 688.447344][T18024] netlink: zone id is out of range [ 688.475117][T18024] netlink: set zone limit has 8 unknown bytes [ 688.743424][T18027] __nla_validate_parse: 7 callbacks suppressed [ 688.743445][T18027] netlink: 830 bytes leftover after parsing attributes in process `syz.1.4214'. [ 688.795219][T18027] netlink: 'syz.1.4214': attribute type 6 has an invalid length. [ 689.206408][T18047] netlink: 'syz.3.4222': attribute type 21 has an invalid length. [ 689.227667][T18047] netlink: 156 bytes leftover after parsing attributes in process `syz.3.4222'. [ 689.242634][T18047] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4222'. [ 689.281277][T18047] netlink: 'syz.3.4222': attribute type 29 has an invalid length. [ 689.317394][T18047] netlink: 'syz.3.4222': attribute type 29 has an invalid length. [ 689.349171][T18052] netlink: 'syz.0.4224': attribute type 10 has an invalid length. [ 689.378508][T18048] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 689.394588][T18052] netlink: 3819 bytes leftover after parsing attributes in process `syz.0.4224'. [ 689.561561][T18058] netlink: 'syz.3.4222': attribute type 29 has an invalid length. [ 690.510995][T18072] netlink: 830 bytes leftover after parsing attributes in process `syz.3.4230'. [ 690.580968][T18072] netlink: 'syz.3.4230': attribute type 6 has an invalid length. [ 690.626554][T18077] syzkaller0: entered allmulticast mode [ 690.689846][T18077] syzkaller0: entered promiscuous mode [ 690.706498][T18077] syzkaller0: left allmulticast mode [ 690.739911][T18079] syzkaller0: left promiscuous mode [ 691.124114][T18087] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 691.899427][T18099] netlink: 'syz.2.4240': attribute type 10 has an invalid length. [ 691.920537][T18099] batman_adv: batadv0: Removing interface: ÿÿÿÿÿÿ [ 691.967223][T18099] team0: Port device ÿÿÿÿÿÿ added [ 691.983891][T18102] netlink: 'syz.2.4240': attribute type 1 has an invalid length. [ 692.003747][T18102] netlink: 209592 bytes leftover after parsing attributes in process `syz.2.4240'. [ 692.071103][T18093] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.4238'. [ 692.103666][T18093] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 692.688474][T18117] netlink: 830 bytes leftover after parsing attributes in process `syz.3.4247'. [ 692.755590][T18117] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.4247'. [ 692.817078][T18118] netlink: 830 bytes leftover after parsing attributes in process `syz.2.4246'. [ 692.933764][T18120] IPv6: Can't replace route, no match found [ 694.303393][T18144] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.4257'. [ 694.400388][T18146] netlink: 168 bytes leftover after parsing attributes in process `syz.2.4258'. [ 694.940231][T18149] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.4255'. [ 694.961377][T18149] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 695.651839][T18168] netlink: 830 bytes leftover after parsing attributes in process `syz.2.4263'. [ 695.688134][T18168] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.4263'. [ 695.994272][T18178] IPv6: Can't replace route, no match found [ 696.074307][T18177] netlink: 830 bytes leftover after parsing attributes in process `syz.0.4262'. [ 696.088948][T18177] validate_nla: 1 callbacks suppressed [ 696.088966][T18177] netlink: 'syz.0.4262': attribute type 6 has an invalid length. [ 697.164961][T18188] netlink: 'syz.0.4267': attribute type 10 has an invalid length. [ 697.782767][T18208] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.4276'. [ 699.061898][T18220] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4279'. [ 699.315291][T18220] IPv6: Can't replace route, no match found [ 701.002438][T18235] netlink: 'syz.2.4284': attribute type 10 has an invalid length. [ 701.122418][T18235] team0 (unregistering): Port device team_slave_1 removed [ 701.145749][T18235] team0 (unregistering): Port device dummy0 removed [ 701.180677][T18235] team0 (unregistering): Port device ÿÿÿÿÿÿ removed [ 701.306210][T18235] netlink: 'syz.2.4284': attribute type 10 has an invalid length. [ 701.318575][T18235] netlink: 'syz.2.4284': attribute type 10 has an invalid length. [ 701.327443][T18235] netlink: 'syz.2.4284': attribute type 10 has an invalid length. [ 701.336678][T18235] netlink: 'syz.2.4284': attribute type 10 has an invalid length. [ 701.346060][T18235] netlink: 'syz.2.4284': attribute type 10 has an invalid length. [ 701.355266][T18235] netlink: 'syz.2.4284': attribute type 10 has an invalid length. [ 701.367215][T18235] netlink: 'syz.2.4284': attribute type 10 has an invalid length. [ 701.385826][T18241] netlink: 'syz.0.4288': attribute type 10 has an invalid length. [ 701.395164][T18235] netlink: 'syz.2.4284': attribute type 10 has an invalid length. [ 701.425642][T18235] netlink: 'syz.2.4284': attribute type 10 has an invalid length. [ 701.549664][T18243] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 702.438745][T18257] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 702.458337][T18259] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.4293'. [ 703.066245][T18278] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 703.244386][T18283] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4303'. [ 703.323439][T18283] IPv6: Can't replace route, no match found [ 704.053207][T18297] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 704.235374][T18302] netlink: 830 bytes leftover after parsing attributes in process `syz.3.4310'. [ 704.526441][T18312] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 704.589248][T18315] netlink: 830 bytes leftover after parsing attributes in process `syz.2.4315'. [ 704.774050][T18324] netlink: 192440 bytes leftover after parsing attributes in process `syz.1.4319'. [ 704.789848][T18324] openvswitch: netlink: Key 9 has unexpected len 3064 expected 4 [ 705.083922][T18333] netlink: 207496 bytes leftover after parsing attributes in process `syz.1.4324'. [ 705.114099][T18331] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 705.581928][T18341] netlink: 830 bytes leftover after parsing attributes in process `syz.0.4325'. [ 705.786760][T18346] netlink: 830 bytes leftover after parsing attributes in process `syz.2.4328'. [ 705.958978][T18352] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.4331'. [ 705.982221][T18353] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.4331'. [ 706.222426][T18358] IPv6: Can't replace route, no match found [ 706.468468][T18376] validate_nla: 25 callbacks suppressed [ 706.468491][T18376] netlink: 'syz.2.4340': attribute type 12 has an invalid length. [ 706.488883][T18376] netlink: 'syz.2.4340': attribute type 11 has an invalid length. [ 706.721568][T18381] netlink: 'syz.0.4342': attribute type 10 has an invalid length. [ 707.071604][T18384] netlink: 'syz.3.4343': attribute type 33 has an invalid length. [ 707.671444][T18401] __nla_validate_parse: 4 callbacks suppressed [ 707.671487][T18401] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4349'. [ 707.763526][T18401] IPv6: Can't replace route, no match found [ 708.033004][T18419] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.4356'. [ 708.056243][T18413] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.4356'. [ 708.160312][T18413] IPv6: Can't replace route, no match found [ 708.258793][T18421] netlink: 'syz.2.4357': attribute type 10 has an invalid length. [ 709.092403][T18447] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4366'. [ 709.235825][T18447] IPv6: Can't replace route, no match found [ 709.248318][T18453] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.4367'. [ 709.286882][T18450] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.4367'. [ 709.363274][T18450] IPv6: Can't replace route, no match found [ 709.477283][T18455] netlink: 'syz.3.4370': attribute type 10 has an invalid length. [ 709.827569][T18465] netlink: 'syz.1.4372': attribute type 4 has an invalid length. [ 709.872768][T18465] netlink: 'syz.1.4372': attribute type 3 has an invalid length. [ 709.895954][T18465] netlink: 153952 bytes leftover after parsing attributes in process `syz.1.4372'. [ 710.624701][T18478] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4375'. [ 710.680384][T18478] netlink: 'syz.0.4375': attribute type 33 has an invalid length. [ 710.710137][T18478] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4375'. [ 710.807468][T18486] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4379'. [ 710.941514][T18490] veth0_to_bond: invalid flags given to default FDB implementation [ 711.104950][T18491] IPv6: Can't replace route, no match found [ 711.234688][T18495] netlink: 'syz.1.4383': attribute type 10 has an invalid length. [ 712.335761][T18527] IPv6: Can't replace route, no match found [ 712.562964][T18524] netlink: 'syz.2.4391': attribute type 33 has an invalid length. [ 712.900172][T18544] __nla_validate_parse: 14 callbacks suppressed [ 712.900194][T18544] netlink: 160 bytes leftover after parsing attributes in process `syz.1.4399'. [ 712.963391][T18548] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.4400'. [ 712.988317][T18544] netlink: 830 bytes leftover after parsing attributes in process `syz.1.4399'. [ 713.023564][T18551] netlink: 'syz.0.4401': attribute type 10 has an invalid length. [ 713.240150][T18556] netlink: 830 bytes leftover after parsing attributes in process `syz.2.4404'. [ 713.390707][T18556] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.4404'. [ 713.409871][T18561] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.4404'. [ 713.497363][T18561] IPv6: Can't replace route, no match found [ 713.853474][T18567] netlink: 'syz.3.4406': attribute type 25 has an invalid length. [ 713.862069][T18567] netlink: 'syz.3.4406': attribute type 9 has an invalid length. [ 714.160818][T18574] netlink: 830 bytes leftover after parsing attributes in process `syz.1.4415'. [ 714.186747][T18572] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4407'. [ 714.287408][T18577] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.4415'. [ 714.373153][T18574] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.4415'. [ 714.423607][T18577] IPv6: Can't replace route, no match found [ 714.803145][T18590] netlink: 'syz.1.4413': attribute type 10 has an invalid length. [ 715.020272][T18605] netlink: 'syz.1.4421': attribute type 4 has an invalid length. [ 715.044761][T18605] .`: renamed from bond0 (while UP) [ 715.239175][T18608] IPv6: Can't replace route, no match found [ 715.258231][T18611] pim6reg1: entered allmulticast mode [ 715.624880][T18623] netlink: 'syz.2.4429': attribute type 10 has an invalid length. [ 715.673117][T18627] pim6reg1: entered promiscuous mode [ 715.678896][T18627] pim6reg1: entered allmulticast mode [ 715.931310][T18631] IPv6: Can't replace route, no match found [ 716.227880][T18646] IPv6: Can't replace route, no match found [ 716.991264][T18658] netlink: 'syz.2.4441': attribute type 10 has an invalid length. [ 717.411644][T18670] netlink: 'syz.2.4443': attribute type 25 has an invalid length. [ 717.438354][T18670] netlink: 'syz.2.4443': attribute type 9 has an invalid length. [ 717.912543][T18679] __nla_validate_parse: 13 callbacks suppressed [ 717.912567][T18679] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.4449'. [ 718.170067][T18679] IPv6: Can't replace route, no match found [ 718.261363][T18687] netlink: 'syz.2.4451': attribute type 10 has an invalid length. [ 719.966583][T18716] netlink: 'syz.1.4459': attribute type 9 has an invalid length. [ 719.999354][T18716] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.4459'. [ 720.025127][T18717] netlink: 'syz.3.4462': attribute type 10 has an invalid length. [ 720.049023][T18716] netlink: 'syz.1.4459': attribute type 19 has an invalid length. [ 720.067604][T18716] netlink: 55 bytes leftover after parsing attributes in process `syz.1.4459'. [ 720.078110][T18725] netlink: 830 bytes leftover after parsing attributes in process `syz.2.4463'. [ 720.187882][T18726] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.4463'. [ 720.206710][T18725] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.4463'. [ 720.570131][T18725] IPv6: Can't replace route, no match found [ 720.955832][T18740] netlink: 'syz.2.4467': attribute type 21 has an invalid length. [ 720.974420][T18740] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4467'. [ 721.004292][T18740] netlink: 'syz.2.4467': attribute type 5 has an invalid length. [ 721.050303][T18740] netlink: 3 bytes leftover after parsing attributes in process `syz.2.4467'. [ 721.611651][T18753] netlink: 'syz.0.4472': attribute type 10 has an invalid length. [ 721.703132][T18752] netlink: 'syz.1.4470': attribute type 10 has an invalid length. [ 721.970993][T18763] netlink: 830 bytes leftover after parsing attributes in process `syz.0.4475'. [ 722.068384][T18767] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.4475'. [ 722.207940][T18767] IPv6: Can't replace route, no match found [ 722.964127][T18785] netlink: 'syz.2.4477': attribute type 3 has an invalid length. [ 723.007096][T18785] __nla_validate_parse: 1 callbacks suppressed [ 723.007137][T18785] netlink: 54868 bytes leftover after parsing attributes in process `syz.2.4477'. [ 723.192447][T18791] netlink: 'syz.0.4483': attribute type 10 has an invalid length. [ 723.462381][T18799] netlink: 830 bytes leftover after parsing attributes in process `syz.0.4486'. [ 723.589905][T18808] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.4486'. [ 723.614639][T18799] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.4486'. [ 723.740689][T18804] IPv6: Can't replace route, no match found [ 724.143335][T18819] netlink: 'syz.3.4492': attribute type 10 has an invalid length. [ 724.472619][T18827] netlink: 'syz.0.4494': attribute type 10 has an invalid length. [ 725.091313][T18838] netlink: 830 bytes leftover after parsing attributes in process `syz.0.4499'. [ 725.191019][T18839] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.4499'. [ 725.212810][T18838] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.4499'. [ 725.282099][T18838] IPv6: Can't replace route, no match found [ 725.709180][T18854] netlink: 'syz.0.4505': attribute type 10 has an invalid length. [ 725.843016][T18862] netlink: 'syz.2.4508': attribute type 10 has an invalid length. [ 726.199707][T18872] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4512'. [ 726.322968][T18872] IPv6: Can't replace route, no match found [ 726.614481][T18880] FAULT_INJECTION: forcing a failure. [ 726.614481][T18880] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 726.659309][T18880] CPU: 1 PID: 18880 Comm: syz.3.4517 Not tainted syzkaller #0 [ 726.666870][T18880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 726.676982][T18880] Call Trace: [ 726.680304][T18880] [ 726.683282][T18880] dump_stack_lvl+0x18c/0x250 [ 726.688024][T18880] ? show_regs_print_info+0x20/0x20 [ 726.693278][T18880] ? load_image+0x400/0x400 [ 726.697840][T18880] ? __might_fault+0xaa/0x120 [ 726.702601][T18880] ? __lock_acquire+0x7d40/0x7d40 [ 726.707677][T18880] should_fail_ex+0x39d/0x4d0 [ 726.712414][T18880] _copy_from_user+0x2f/0xe0 [ 726.717054][T18880] __sys_bpf+0x23e/0x890 [ 726.721441][T18880] ? bpf_link_show_fdinfo+0x390/0x390 [ 726.726883][T18880] ? lock_chain_count+0x20/0x20 [ 726.731795][T18880] __x64_sys_bpf+0x7c/0x90 [ 726.736272][T18880] do_syscall_64+0x55/0xa0 [ 726.740771][T18880] ? clear_bhb_loop+0x40/0x90 [ 726.745603][T18880] ? clear_bhb_loop+0x40/0x90 [ 726.750336][T18880] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 726.756281][T18880] RIP: 0033:0x7f821159c799 [ 726.760831][T18880] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 726.780469][T18880] RSP: 002b:00007f8212430028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 726.788929][T18880] RAX: ffffffffffffffda RBX: 00007f8211815fa0 RCX: 00007f821159c799 [ 726.796950][T18880] RDX: 000000000000000c RSI: 00002000000004c0 RDI: 000000000000000a [ 726.804979][T18880] RBP: 00007f8212430090 R08: 0000000000000000 R09: 0000000000000000 [ 726.813003][T18880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 726.821096][T18880] R13: 00007f8211816038 R14: 00007f8211815fa0 R15: 00007ffda8922bc8 [ 726.829156][T18880] [ 727.024754][T18884] netlink: 'syz.1.4519': attribute type 10 has an invalid length. [ 727.334838][T18897] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4525'. [ 727.383233][T18897] IPv6: Can't replace route, no match found [ 727.608532][T18911] FAULT_INJECTION: forcing a failure. [ 727.608532][T18911] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 727.629226][T18911] CPU: 1 PID: 18911 Comm: syz.0.4530 Not tainted syzkaller #0 [ 727.636958][T18911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 727.647081][T18911] Call Trace: [ 727.650410][T18911] [ 727.653403][T18911] dump_stack_lvl+0x18c/0x250 [ 727.658166][T18911] ? show_regs_print_info+0x20/0x20 [ 727.663533][T18911] ? load_image+0x400/0x400 [ 727.668187][T18911] ? __might_fault+0xaa/0x120 [ 727.672929][T18911] ? __lock_acquire+0x7d40/0x7d40 [ 727.678215][T18911] should_fail_ex+0x39d/0x4d0 [ 727.682974][T18911] _copy_to_user+0x2f/0xa0 [ 727.687531][T18911] bpf_prog_test_run_syscall+0x336/0x4a0 [ 727.693225][T18911] ? sock_gen_cookie+0x60/0x60 [ 727.698054][T18911] ? sock_gen_cookie+0x60/0x60 [ 727.702880][T18911] bpf_prog_test_run+0x321/0x390 [ 727.707867][T18911] __sys_bpf+0x49d/0x890 [ 727.712262][T18911] ? bpf_link_show_fdinfo+0x390/0x390 [ 727.717679][T18911] ? lock_chain_count+0x20/0x20 [ 727.722572][T18911] __x64_sys_bpf+0x7c/0x90 [ 727.727024][T18911] do_syscall_64+0x55/0xa0 [ 727.731479][T18911] ? clear_bhb_loop+0x40/0x90 [ 727.736193][T18911] ? clear_bhb_loop+0x40/0x90 [ 727.740906][T18911] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 727.746828][T18911] RIP: 0033:0x7f3b5059c799 [ 727.751275][T18911] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 727.770927][T18911] RSP: 002b:00007f3b514d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 727.779384][T18911] RAX: ffffffffffffffda RBX: 00007f3b50815fa0 RCX: 00007f3b5059c799 [ 727.787425][T18911] RDX: 000000000000000c RSI: 00002000000004c0 RDI: 000000000000000a [ 727.795454][T18911] RBP: 00007f3b514d7090 R08: 0000000000000000 R09: 0000000000000000 [ 727.803562][T18911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 727.811579][T18911] R13: 00007f3b50816038 R14: 00007f3b50815fa0 R15: 00007ffc17e3dfb8 [ 727.819617][T18911] [ 727.843429][T18910] netlink: 'syz.2.4531': attribute type 10 has an invalid length. [ 728.641466][T18929] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4538'. [ 728.760456][T18929] IPv6: Can't replace route, no match found [ 729.047585][T18943] FAULT_INJECTION: forcing a failure. [ 729.047585][T18943] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 729.060874][T18943] CPU: 0 PID: 18943 Comm: syz.1.4544 Not tainted syzkaller #0 [ 729.068418][T18943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 729.078540][T18943] Call Trace: [ 729.082068][T18943] [ 729.085073][T18943] dump_stack_lvl+0x18c/0x250 [ 729.089830][T18943] ? show_regs_print_info+0x20/0x20 [ 729.095191][T18943] ? load_image+0x400/0x400 [ 729.099780][T18943] ? __lock_acquire+0x7d40/0x7d40 [ 729.104866][T18943] ? snprintf+0xe9/0x140 [ 729.109261][T18943] should_fail_ex+0x39d/0x4d0 [ 729.114055][T18943] _copy_to_user+0x2f/0xa0 [ 729.118532][T18943] simple_read_from_buffer+0xe7/0x150 [ 729.124247][T18943] proc_fail_nth_read+0x1e8/0x260 [ 729.129378][T18943] ? proc_fault_inject_write+0x360/0x360 [ 729.135097][T18943] ? fsnotify_perm+0x271/0x5e0 [ 729.140020][T18943] ? proc_fault_inject_write+0x360/0x360 [ 729.145725][T18943] vfs_read+0x28b/0x970 [ 729.149954][T18943] ? kernel_read+0x1e0/0x1e0 [ 729.154620][T18943] ? __fget_files+0x28/0x4b0 [ 729.159275][T18943] ? __fget_files+0x28/0x4b0 [ 729.163948][T18943] ? __fget_files+0x43d/0x4b0 [ 729.168704][T18943] ? __fdget_pos+0x2a3/0x330 [ 729.173362][T18943] ? ksys_read+0x75/0x260 [ 729.177761][T18943] ksys_read+0x150/0x260 [ 729.182070][T18943] ? vfs_write+0x990/0x990 [ 729.186554][T18943] ? lockdep_hardirqs_on+0x98/0x150 [ 729.191828][T18943] do_syscall_64+0x55/0xa0 [ 729.196316][T18943] ? clear_bhb_loop+0x40/0x90 [ 729.201080][T18943] ? clear_bhb_loop+0x40/0x90 [ 729.205877][T18943] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 729.211830][T18943] RIP: 0033:0x7fa10855cfce [ 729.216320][T18943] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 729.236177][T18943] RSP: 002b:00007fa1067f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 729.244747][T18943] RAX: ffffffffffffffda RBX: 00007fa1067f66c0 RCX: 00007fa10855cfce [ 729.252780][T18943] RDX: 000000000000000f RSI: 00007fa1067f60a0 RDI: 0000000000000004 [ 729.260816][T18943] RBP: 00007fa1067f6090 R08: 0000000000000000 R09: 0000000000000000 [ 729.268850][T18943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 729.276898][T18943] R13: 00007fa108816038 R14: 00007fa108815fa0 R15: 00007ffd29ef2d78 [ 729.284971][T18943] [ 729.336090][T18941] netlink: 'syz.0.4543': attribute type 10 has an invalid length. [ 729.351873][T18948] netlink: 'syz.3.4545': attribute type 10 has an invalid length. [ 729.367416][T18948] netlink: 'syz.3.4545': attribute type 10 has an invalid length. [ 729.375621][T18948] netlink: 209216 bytes leftover after parsing attributes in process `syz.3.4545'. [ 729.415372][T18948] openvswitch: netlink: Message has 4 unknown bytes. [ 729.531169][T18953] netlink: 830 bytes leftover after parsing attributes in process `syz.0.4547'. [ 730.127940][T18970] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4554'. [ 730.245631][T18974] netlink: 'syz.0.4555': attribute type 10 has an invalid length. [ 730.265153][T18970] IPv6: Can't replace route, no match found [ 733.423560][T18984] netlink: 830 bytes leftover after parsing attributes in process `syz.0.4559'. [ 733.453779][T18999] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.4565'. [ 733.776084][T19011] netlink: 830 bytes leftover after parsing attributes in process `syz.2.4569'. [ 733.877704][T19015] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.4569'. [ 733.899752][T19011] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.4569'. [ 733.970930][T19014] netlink: 'syz.3.4567': attribute type 10 has an invalid length. [ 733.997597][T19011] IPv6: Can't replace route, no match found [ 734.420029][T19032] FAULT_INJECTION: forcing a failure. [ 734.420029][T19032] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 734.469248][T19032] CPU: 1 PID: 19032 Comm: syz.0.4577 Not tainted syzkaller #0 [ 734.476800][T19032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 734.486981][T19032] Call Trace: [ 734.490286][T19032] [ 734.493242][T19032] dump_stack_lvl+0x18c/0x250 [ 734.497965][T19032] ? show_regs_print_info+0x20/0x20 [ 734.503197][T19032] ? load_image+0x400/0x400 [ 734.507738][T19032] ? __might_fault+0xaa/0x120 [ 734.512452][T19032] ? __lock_acquire+0x7d40/0x7d40 [ 734.517528][T19032] should_fail_ex+0x39d/0x4d0 [ 734.522292][T19032] _copy_from_user+0x2f/0xe0 [ 734.526931][T19032] __sys_bpf+0x23e/0x890 [ 734.531262][T19032] ? bpf_link_show_fdinfo+0x390/0x390 [ 734.536692][T19032] ? lock_chain_count+0x20/0x20 [ 734.541591][T19032] __x64_sys_bpf+0x7c/0x90 [ 734.546068][T19032] do_syscall_64+0x55/0xa0 [ 734.550529][T19032] ? clear_bhb_loop+0x40/0x90 [ 734.555283][T19032] ? clear_bhb_loop+0x40/0x90 [ 734.560007][T19032] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 734.565939][T19032] RIP: 0033:0x7f3b5059c799 [ 734.570383][T19032] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 734.590032][T19032] RSP: 002b:00007f3b514d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 734.598683][T19032] RAX: ffffffffffffffda RBX: 00007f3b50815fa0 RCX: 00007f3b5059c799 [ 734.606687][T19032] RDX: 0000000000000094 RSI: 0000200000000600 RDI: 0000000000000005 [ 734.614719][T19032] RBP: 00007f3b514d7090 R08: 0000000000000000 R09: 0000000000000000 [ 734.622735][T19032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 734.630752][T19032] R13: 00007f3b50816038 R14: 00007f3b50815fa0 R15: 00007ffc17e3dfb8 [ 734.638971][T19032] [ 734.856870][T19042] netlink: 830 bytes leftover after parsing attributes in process `syz.1.4582'. [ 734.872644][T19039] netlink: 'syz.0.4581': attribute type 10 has an invalid length. [ 734.948336][T19052] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.4582'. [ 734.973180][T19042] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.4582'. [ 735.060599][T19042] IPv6: Can't replace route, no match found [ 735.315967][T19058] netlink: 'syz.3.4586': attribute type 10 has an invalid length. [ 735.367329][T19062] netlink: 207508 bytes leftover after parsing attributes in process `syz.1.4588'. [ 735.821043][T19073] netlink: 'syz.0.4592': attribute type 10 has an invalid length. [ 736.093281][T19083] netlink: 830 bytes leftover after parsing attributes in process `syz.0.4596'. [ 736.187755][T19086] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.4596'. [ 736.208294][T19083] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.4596'. [ 736.319254][T19083] IPv6: Can't replace route, no match found [ 736.463417][T19085] IPv6: Can't replace route, no match found [ 737.006086][T19104] netlink: 'syz.2.4604': attribute type 10 has an invalid length. [ 737.202487][T19111] IPv6: Can't replace route, no match found [ 737.409844][T19115] netlink: 'syz.0.4607': attribute type 10 has an invalid length. [ 737.580639][T19117] IPv6: Can't replace route, no match found [ 738.948659][T19141] netlink: 'syz.2.4616': attribute type 1 has an invalid length. [ 738.961144][T19141] __nla_validate_parse: 5 callbacks suppressed [ 738.961194][T19141] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.4616'. [ 738.989955][T19145] netlink: 830 bytes leftover after parsing attributes in process `syz.1.4618'. [ 739.001157][T19141] netlink: 1 bytes leftover after parsing attributes in process `syz.2.4616'. [ 739.068836][T19150] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.4618'. [ 739.101192][T19145] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.4618'. [ 739.235898][T19145] IPv6: Can't replace route, no match found [ 739.354262][T19159] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4621'. [ 739.370302][ T5775] Bluetooth: hci4: command 0x0406 tx timeout [ 739.408627][T19159] IPv6: Can't replace route, no match found [ 739.609452][T19162] netlink: 'syz.2.4623': attribute type 10 has an invalid length. [ 739.648114][T19168] netlink: 'syz.1.4625': attribute type 10 has an invalid length. [ 739.700156][T19171] netlink: 830 bytes leftover after parsing attributes in process `syz.3.4627'. [ 739.811877][T19174] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.4627'. [ 739.829853][T19171] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.4627'. [ 742.773149][T19185] netlink: 668 bytes leftover after parsing attributes in process `syz.2.4629'. [ 742.782584][T19185] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 742.792384][T19185] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 742.805630][T19185] netlink: 'syz.2.4629': attribute type 39 has an invalid length. [ 792.194568][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 792.206316][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 798.649255][ C0] icmp: detected local route for 10.128.1.153 during ICMP sending, src 10.128.0.163 [ 825.529237][ C0] icmp: detected local route for 10.128.1.153 during ICMP sending, src 10.128.0.163 [ 844.879070][ C1] rcu: INFO: rcu_preempt self-detected stall on CPU [ 844.885936][ C1] rcu: 1-....: (10499 ticks this GP) idle=d424/1/0x4000000000000000 softirq=65215/65215 fqs=5237 [ 844.897815][ C1] rcu: hardirqs softirqs csw/system [ 844.904243][ C1] rcu: number: 1333361 0 0 [ 844.910688][ C1] rcu: cputime: 18643 33836 70 ==> 52490(ms) [ 844.918569][ C1] rcu: (t=10501 jiffies g=83377 q=454 ncpus=2) [ 844.924856][ C1] CPU: 1 PID: 19177 Comm: syz.2.4629 Not tainted syzkaller #0 [ 844.932358][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 844.942446][ C1] RIP: 0010:deref_stack_reg+0x29/0x240 [ 844.947946][ C1] Code: 00 55 41 57 41 56 41 55 41 54 53 48 83 ec 28 48 89 54 24 20 48 89 34 24 49 89 ff 48 bd 00 00 00 00 00 fc ff df e8 07 bc 4b 00 <49> 8d 5f 08 48 89 d8 48 c1 e8 03 48 89 44 24 10 80 3c 28 00 74 08 [ 844.967591][ C1] RSP: 0018:ffffc900001f0458 EFLAGS: 00000246 [ 844.973866][ C1] RAX: ffffffff813b6419 RBX: ffffffff8f19ac23 RCX: ffff88802ab09e00 [ 844.981873][ C1] RDX: 0000000000000100 RSI: ffffc900001f0978 RDI: ffffc900001f0588 [ 844.989871][ C1] RBP: dffffc0000000000 R08: ffff88802ab09e00 R09: 0000000000000003 [ 844.997876][ C1] R10: 0000000000000004 R11: 0000000000000100 R12: ffffc900001f0588 [ 845.005881][ C1] R13: dffffc0000000000 R14: ffffffff8f19ac22 R15: ffffc900001f0588 [ 845.013927][ C1] FS: 00007f0b0332f6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 845.022891][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 845.029605][ C1] CR2: 0000000100000000 CR3: 000000001b39b000 CR4: 00000000003506e0 [ 845.037626][ C1] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000008d24 [ 845.045633][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 845.053637][ C1] Call Trace: [ 845.056963][ C1] [ 845.059848][ C1] unwind_next_frame+0x1789/0x2970 [ 845.065002][ C1] ? slab_post_alloc_hook+0x6e/0x4b0 [ 845.070327][ C1] ? slab_post_alloc_hook+0x6e/0x4b0 [ 845.075653][ C1] ? stack_trace_save+0x100/0x100 [ 845.080710][ C1] arch_stack_walk+0x144/0x190 [ 845.085506][ C1] ? kmem_cache_alloc_node+0x14c/0x320 [ 845.091015][ C1] stack_trace_save+0xaa/0x100 [ 845.095811][ C1] ? stack_trace_snprint+0xf0/0xf0 [ 845.101047][ C1] ? stack_trace_save+0xaa/0x100 [ 845.106017][ C1] ? stack_trace_snprint+0xf0/0xf0 [ 845.111169][ C1] kasan_set_track+0x4e/0x70 [ 845.115792][ C1] ? kasan_set_track+0x4e/0x70 [ 845.120673][ C1] ? __kasan_slab_alloc+0x6c/0x80 [ 845.125822][ C1] ? slab_post_alloc_hook+0x6e/0x4b0 [ 845.131196][ C1] __kasan_slab_alloc+0x6c/0x80 [ 845.136079][ C1] slab_post_alloc_hook+0x6e/0x4b0 [ 845.141238][ C1] kmem_cache_alloc_node+0x14c/0x320 [ 845.146572][ C1] ? kmalloc_reserve+0x95/0x240 [ 845.151454][ C1] kmalloc_reserve+0x95/0x240 [ 845.156195][ C1] __alloc_skb+0x138/0x2c0 [ 845.160759][ C1] aoecmd_cfg+0x2c5/0xa50 [ 845.165145][ C1] ? aoecmd_cfg+0x10e/0xa50 [ 845.169686][ C1] ? ktcomplete+0x2a0/0x2a0 [ 845.174402][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 845.179651][ C1] call_timer_fn+0x189/0x540 [ 845.184271][ C1] ? skbfree+0x340/0x340 [ 845.188543][ C1] ? call_timer_fn+0xd2/0x540 [ 845.193249][ C1] ? __run_timers+0x800/0x800 [ 845.198062][ C1] ? skbfree+0x340/0x340 [ 845.202360][ C1] __run_timers+0x542/0x800 [ 845.206902][ C1] ? detach_timer+0x2b0/0x2b0 [ 845.211639][ C1] run_timer_softirq+0x67/0xf0 [ 845.216475][ C1] handle_softirqs+0x280/0x820 [ 845.221277][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 845.226110][ C1] ? do_softirq+0x1a0/0x1a0 [ 845.230646][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 845.235877][ C1] __irq_exit_rcu+0xd3/0x190 [ 845.240497][ C1] ? irq_exit_rcu+0x20/0x20 [ 845.245033][ C1] irq_exit_rcu+0x9/0x20 [ 845.249325][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 845.254999][ C1] [ 845.257958][ C1] [ 845.260921][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 845.266968][ C1] RIP: 0010:generic_exec_single+0x481/0x4f0 [ 845.272924][ C1] Code: 75 11 e8 42 05 0b 00 48 85 db 75 16 e8 38 05 0b 00 eb 15 e8 31 05 0b 00 e8 4c ea 09 09 48 85 db 74 ea e8 22 05 0b 00 fb 31 c0 <48> c7 44 24 20 0e 36 e0 45 4b c7 04 2c 00 00 00 00 43 c7 44 2c 08 [ 845.292596][ C1] RSP: 0018:ffffc90004ea7a00 EFLAGS: 00000246 [ 845.298715][ C1] RAX: 0000000000000000 RBX: 0000000000000200 RCX: 0000000000080000 [ 845.306724][ C1] RDX: ffffc9000d35b000 RSI: 0000000000003971 RDI: 0000000000003972 [ 845.314749][ C1] RBP: ffffc90004ea7ad0 R08: ffffffff911c35ff R09: 1ffffffff22386bf [ 845.322786][ C1] R10: dffffc0000000000 R11: fffffbfff22386c0 R12: 1ffff920009d4f44 [ 845.330822][ C1] R13: dffffc0000000000 R14: 0000000000000000 R15: 1ffff920009d4f65 [ 845.338952][ C1] ? event_function+0x300/0x300 [ 845.343949][ C1] ? smp_call_function_single+0x5a0/0x5a0 [ 845.349723][ C1] ? percpu_counter_add_batch+0x1f1/0x2a0 [ 845.355495][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 845.360753][ C1] ? smp_call_function_single+0xb0/0x5a0 [ 845.366436][ C1] smp_call_function_single+0x36d/0x5a0 [ 845.372045][ C1] ? event_function+0x300/0x300 [ 845.376947][ C1] ? flush_smp_call_function_queue+0x250/0x250 [ 845.383149][ C1] ? event_function+0x300/0x300 [ 845.388066][ C1] perf_install_in_context+0x5be/0x920 [ 845.393757][ C1] ? exclusive_event_installable+0x2c0/0x2c0 [ 845.399780][ C1] ? add_event_to_ctx+0x1180/0x1180 [ 845.405044][ C1] ? anon_inode_getfile+0x109/0x1a0 [ 845.410293][ C1] ? perf_event__header_size+0x165/0x220 [ 845.415974][ C1] __se_sys_perf_event_open+0x1836/0x1c50 [ 845.421859][ C1] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 845.427585][ C1] ? lock_chain_count+0x20/0x20 [ 845.432487][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 845.437764][ C1] ? __x64_sys_perf_event_open+0x20/0xc0 [ 845.443624][ C1] do_syscall_64+0x55/0xa0 [ 845.448113][ C1] ? clear_bhb_loop+0x40/0x90 [ 845.452864][ C1] ? clear_bhb_loop+0x40/0x90 [ 845.457790][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 845.464002][ C1] RIP: 0033:0x7f0b0239c799 [ 845.468461][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 845.488289][ C1] RSP: 002b:00007f0b0332f028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 845.496754][ C1] RAX: ffffffffffffffda RBX: 00007f0b02615fa0 RCX: 00007f0b0239c799 [ 845.504777][ C1] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000480 [ 845.512794][ C1] RBP: 00007f0b02432c99 R08: 0000000000000000 R09: 0000000000000000 [ 845.520808][ C1] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 845.528928][ C1] R13: 00007f0b02616038 R14: 00007f0b02615fa0 R15: 00007fff94e6de48 [ 845.537068][ C1] [ 852.409262][ C0] icmp: detected local route for 10.128.1.153 during ICMP sending, src 10.128.0.163