last executing test programs: 4.709292023s ago: executing program 1 (id=3034): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x11}, @multicast1}}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp_addr={0x44, 0xc, 0x7, 0x1, 0x7, [{@dev={0xac, 0x14, 0x14, 0x1d}, 0x5}]}]}}}], 0x40}, 0x200040c4) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907a56675f37538ec86dd6317ce22667f1100db5b686158bbcfe8875a65969ff57b03000000000000000000000000ac1414aa"], 0xfdef) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x7, 0x0, 0x10, 0xfc, 0x0, 0x0, 0x28040, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0, 0xf}, 0x100, 0xc8, 0x209, 0x0, 0xffffffffffffffff, 0x5a, 0x0, 0x0, 0x8, 0x0, 0x200002000000}, 0x0, 0x0, 0xffffffffffffffff, 0xb) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0xfdef) 4.608874026s ago: executing program 1 (id=3035): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) socket$kcm(0xa, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) socket$kcm(0x11, 0x3, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/31], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x2014, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r2, 0x6, 0x1e, &(0x7f0000000500), 0x4) r3 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)) r5 = syz_clone(0x2020200, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffd}, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="8dffffff0600"}) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000640)='ns/user\x00') sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x11, &(0x7f00000002c0)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc041389810039000000060fe30c000000000e0027008f000000028002922d1f", 0x2e}], 0x1}, 0x40) 3.921803112s ago: executing program 1 (id=3039): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x11}, @multicast1}}}, @ip_retopts={{0x10}}], 0x30}, 0x200040c4) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907a56675f37538ec86dd6317ce22"], 0xfdef) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x7, 0x0, 0x10, 0xfc, 0x0, 0x0, 0x28040, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000500), 0xf}, 0x100, 0xc8, 0x209, 0x0, 0xffffffffffffffff, 0x5a, 0x0, 0x0, 0x8, 0x0, 0x200002000000}, 0x0, 0x0, 0xffffffffffffffff, 0xb) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000), 0xfdef) 3.818888275s ago: executing program 1 (id=3040): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0xcc3, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000180)={0x0, 0x8782559fc2aff2e2, &(0x7f0000000080)=[{&(0x7f0000000040)="0f02000039000511d25a80648c63940d0324fc600b003540280009000200002037153e37eb010280060410000a00", 0x33fe0}], 0x1}, 0x0) 3.720758017s ago: executing program 3 (id=3042): r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0xd, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)}, 0x800) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = socket$kcm(0xa, 0x2, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r2 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r2, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) recvmsg$kcm(r1, 0x0, 0xf3fd) r3 = perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f0000000180)=r4, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0x14, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7ffffffd}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x1e}}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x800}}]}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x8, 0x6, 0x94, 0x7, 0x0, 0x0, 0x400, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x39a, 0x2, @perf_config_ext={0x7fffffffffffffff, 0x80000000}, 0x8, 0x0, 0x10, 0x0, 0x8, 0x4, 0x2, 0x0, 0x7fffffff, 0x0, 0xb}, 0x0, 0xf, r3, 0x8) socket$kcm(0xa, 0x5, 0x0) r6 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r6, &(0x7f0000003780)={0x0, 0x0, &(0x7f00000001c0)}, 0xc040) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)}], 0x1, 0x0, 0x0, 0x2663}, 0x0) 3.537978032s ago: executing program 1 (id=3044): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000080)='blkio.throttle.io_serviced\x00', 0x26e1, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r2, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000040)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0], 0x0, 0x69, &(0x7f00000001c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0x23, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000480)=r3) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x400000000005, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r4, 0xc008240a, 0x0) write$cgroup_subtree(r7, &(0x7f00000000c0)=ANY=[@ANYBLOB='8-N:0/2'], 0x6a) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="1e0000000500000009000000ffffffff90cb0400", @ANYRES32=r5, @ANYBLOB='\a\x00'/20, @ANYRES32=r3, @ANYRES32=r2, @ANYBLOB="0400000000400000000000000ff8ffffff000000", @ANYRES32, @ANYBLOB='\x00\x00'], 0x50) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000e00)=@generic={&(0x7f0000000dc0)='./file0\x00', 0x0, 0x8}, 0x18) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x7, 0x4, 0x2}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={r10, &(0x7f00000001c0), 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0x0, 0x0, &(0x7f0000000980)='GPL\x00', 0x7fffffff, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000000cc0)={0x3, 0x1000}, 0x8, 0x10, &(0x7f0000000d00)={0x3, 0x5, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000e40)=[r2, r8, r2, r9, r10, r2, r2], 0x0, 0x10, 0x40}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000500)=@framed={{0x18, 0x2, 0x0, 0x0, 0x5}}, &(0x7f00000001c0)='GPL\x00', 0x1, 0x0, 0x0, 0xfae70cd23e750632, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r11, 0x0, 0xe, 0x0, &(0x7f0000000100)="54ae1f8219560625baa794a469ce", 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xffffffffffffff86) r12 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r12, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b8825fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x0) mkdirat$cgroup(r6, &(0x7f0000000200)='syz0\x00', 0x1ff) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000011008188040f80ec59acbc0413a181b230000000000100000010e61e0e0027000f00000000800200121f", 0x2e}], 0x1}, 0x0) 3.345560386s ago: executing program 1 (id=3048): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) socket$kcm(0xa, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) socket$kcm(0x11, 0x3, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/31], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x2014, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r2, 0x6, 0x1e, &(0x7f0000000500), 0x4) r3 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)) r5 = syz_clone(0x2020200, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffd}, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="8dffffff0600"}) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000640)='ns/user\x00') sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x11, &(0x7f00000002c0)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc041389810039000000060fe30c000000000e0027008f000000028002922d1f", 0x2e}], 0x1}, 0x40) 2.852418649s ago: executing program 3 (id=3050): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907a56675f37538ec86dd6317ce22667f1100db5b686158bbcfe8875a65969ff57b0300"/48], 0xfdef) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x7, 0x0, 0x10, 0xfc, 0x0, 0x0, 0x28040, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000500), 0xf}, 0x100, 0xc8, 0x209, 0x0, 0xffffffffffffffff, 0x5a, 0x0, 0x0, 0x8, 0x0, 0x200002000000}, 0x0, 0x0, 0xffffffffffffffff, 0xb) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000), 0xfdef) 2.597098485s ago: executing program 3 (id=3052): r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0xd, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)}, 0x800) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = socket$kcm(0xa, 0x2, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r2 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r2, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) recvmsg$kcm(r1, 0x0, 0xf3fd) r3 = perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f0000000180)=r4, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0x14, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7ffffffd}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x1e}}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x800}}]}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x8, 0x6, 0x94, 0x7, 0x0, 0x0, 0x400, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x39a, 0x2, @perf_config_ext={0x7fffffffffffffff, 0x80000000}, 0x8, 0x0, 0x10, 0x0, 0x8, 0x4, 0x2, 0x0, 0x7fffffff, 0x0, 0xb}, 0x0, 0xf, r3, 0x8) socket$kcm(0xa, 0x5, 0x0) r6 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r6, &(0x7f0000003780)={0x0, 0x0, &(0x7f00000001c0)}, 0xc040) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="d800000018007b7be00212ba0d0505040a003f00000f040b067c55a1bc0009001e0006990300000015000500fe800000001000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b3162700e06bbace8017cbec4c2ee5a7cef4090000001fb791643a5e", 0x6c}], 0x1, 0x0, 0x0, 0x2663}, 0x0) 2.332651182s ago: executing program 2 (id=3055): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r1}, &(0x7f0000000840), &(0x7f0000000340)=r0}, 0x20) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xb) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffe81}, 0x48) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) close(r2) r3 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r3, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r4}, &(0x7f0000000000), &(0x7f0000000580)=r2}, 0x20) r5 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f95524fc60040011000a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000100)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f95524fc60040011000a7403004700000037153e370248018000f01700d1bd", 0x31abf}], 0x1}, 0x0) recvmsg$kcm(r3, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)=""/117, 0x75}], 0x1}, 0x102) 2.296023943s ago: executing program 4 (id=3056): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x11}, @multicast1}}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp_addr={0x44, 0xc, 0x7, 0x1, 0x7, [{@dev={0xac, 0x14, 0x14, 0x1d}, 0x5}]}]}}}], 0x40}, 0x200040c4) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907a56675f37538ec86dd6317ce22667f1100db5b686158bbcfe8875a65969ff57b03000000000000000000000000ac1414aa"], 0xfdef) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x7, 0x0, 0x10, 0xfc, 0x0, 0x0, 0x28040, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0, 0xf}, 0x100, 0xc8, 0x209, 0x0, 0xffffffffffffffff, 0x5a, 0x0, 0x0, 0x8, 0x0, 0x200002000000}, 0x0, 0x0, 0xffffffffffffffff, 0xb) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0xfdef) 2.02084118s ago: executing program 4 (id=3057): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000080)='blkio.throttle.io_serviced\x00', 0x26e1, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r2, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000040)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0], 0x0, 0x69, &(0x7f00000001c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0x23, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000480)=r3) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x400000000005, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r4, 0xc008240a, 0x0) write$cgroup_subtree(r7, &(0x7f00000000c0)=ANY=[@ANYBLOB='8-N:0/2'], 0x6a) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="1e0000000500000009000000ffffffff90cb0400", @ANYRES32=r5, @ANYBLOB='\a\x00'/20, @ANYRES32=r3, @ANYRES32=r2, @ANYBLOB="0400000000400000000000000ff8ffffff000000", @ANYRES32, @ANYBLOB='\x00\x00'], 0x50) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000e00)=@generic={&(0x7f0000000dc0)='./file0\x00', 0x0, 0x8}, 0x18) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x7, 0x4, 0x2}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={r10, &(0x7f00000001c0), 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0x0, 0x0, &(0x7f0000000980)='GPL\x00', 0x7fffffff, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000000cc0)={0x3, 0x1000}, 0x8, 0x10, &(0x7f0000000d00)={0x3, 0x5, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000e40)=[r2, r8, r2, r9, r10, r2, r2], 0x0, 0x10, 0x40}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000500)=@framed={{0x18, 0x2, 0x0, 0x0, 0x5}}, &(0x7f00000001c0)='GPL\x00', 0x1, 0x0, 0x0, 0xfae70cd23e750632, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r11, 0x0, 0xe, 0x0, &(0x7f0000000100)="54ae1f8219560625baa794a469ce", 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xffffffffffffff86) r12 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r12, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b8825fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x0) mkdirat$cgroup(r6, &(0x7f0000000200)='syz0\x00', 0x1ff) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000011008188040f80ec59acbc0413a181b230000000000100000010e61e0e0027000f00000000800200121f", 0x2e}], 0x1}, 0x0) 1.778163405s ago: executing program 2 (id=3059): r0 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x100b0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001ac0)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169b740ac03d7c64cee49ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d54f45a24effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f949c479757306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c7724e9e7e7babf61fe358ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51427a7f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa08ad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282bffff2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae05334d5a44a020000001c0d882a564d74a7c72bf9a2152b261ed1d4515f46290d5c6579b63358fea6d2f93589cfe261dc0410b5ccc92a5a0eab327a33431d62d2b7c75ce654d556c9e1817c1abca762ab53d40da51560351b673363652e1ecb56cfe4a746a45ab13c6014e9f361ab687d1cd1795ce9e05c817b83d76046bdb3709de5df7499a02d2f636a454b85b987580ada025d83bd7b8df28a540d5ec5537942e79f2f1ab25ea5f563bc77e4f9468bd309469880c7e34150ca886d1f13dff7e82dbe296c877d925c38c54cc8137b29028854b6bd57ca893927c331300e16aba792289e135589d93302fc37c73c303e383cdf8ef3f6d6265fe5ee01759d24027475c8901039a898582022bc95992b86dce0710887c8a625d9cbb897bdbfaf49a3f642a169827a9bae4fcfa5212461db000000000000e6ed75ca8fcda7ef3ee336189fef3b3ffb9f38fefc5ff39c4e69e3fa1f8b10ee97123e99b61eba065b1ad67530e7c4f11f9da7ae000002000000610101ad7f79cb9bbf64a0fc109f49fe8799fe266e2ccac80fefe750151f5ddfe51833ec65ece70e07ce8ab5d97db47da8f80000664dc0b86ae2b3ff9d4e220752a6b2f3ea9f793612386496dca5af7b8952aafa796ea7b156d19612297c63e774e940bfeb0de83f42fd565a299f741f9b00be4e8fcaf4ec85daceb16d9e8a438e3eb2556570e381b03d9e3c245728648ed9ff22dc963ed105c851c3481125b4c0c8a08a0c9930190902af109fc56b64cc952f298ebe73d7b18052e0147356228ca171b06274a871e2cf9609e0b4cdad36c3250bc8f56f95a6ed"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x29, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d08007b490d4f1e81f8d815000100ff05142603600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r3) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x13, 0xc, &(0x7f00000003c0)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1a41, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8b26, &(0x7f0000000280)={'wlan1\x00', @random="26e9b28de000"}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r4, 0x2f, 0xe, 0x0, &(0x7f0000000640)="c1dfb080cd21d308098e00008100", 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xa, [@struct={0x8, 0x1, 0x0, 0xf, 0x0, 0x5, [{0x1, 0x0, 0x3}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e]}}, &(0x7f0000000280)=""/266, 0x3a, 0x10a, 0x6}, 0x20) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x20, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000011008b88040f80ec59acbc0413a1f8480f0000005e2900421803001825000a001400000002800000121f", 0x2e}], 0x1}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) perf_event_open$cgroup(&(0x7f00000001c0)={0x1, 0x80, 0x2, 0x1, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x19c, 0x2, @perf_config_ext={0x9, 0x3}, 0x100208, 0x519, 0xf5f, 0x2, 0xe, 0x9, 0x1, 0x0, 0xffffffff, 0x0, 0xe}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x1) 1.61513964s ago: executing program 3 (id=3060): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r1, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x0, 0x0, 0x0, 0x9, 0x0, 0x10000000000000, 0x180, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe1, 0x4a302b3c}, 0xa100, 0xc8, 0x5, 0x5, 0x8001, 0x0, 0x8}, 0x0, 0xc, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x15) r5 = perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80720, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000000000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f000001000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f000001ac141400000000001c00000000000000000000004700000044aa00210a2101"], 0x230}, 0x0) r6 = socket$kcm(0x10, 0x3, 0x10) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffc}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union]}}, 0x0, 0x26}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000440)={r7, 0x20, &(0x7f0000000400)={0xfffffffffffffffe, 0x0, 0x0, &(0x7f0000000780)=""/164, 0xa4}}, 0x10) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000c80)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000060000000400000000000007000000000000000061"], 0x0, 0x2a}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000029c0)={r8, 0x20, &(0x7f0000002980)={&(0x7f00000018c0)=""/4096, 0x1000, 0x0, 0x0}}, 0x10) r9 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8916, &(0x7f0000000040)={'wlan1\x00', @random="02000000e29b"}) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90324fc60100005000a000248053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r0) 1.58713243s ago: executing program 0 (id=3061): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x11}, @multicast1}}}, @ip_retopts={{0x10}}], 0x30}, 0x200040c4) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907a56675f37538ec86dd6317ce22"], 0xfdef) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x7, 0x0, 0x10, 0xfc, 0x0, 0x0, 0x28040, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000500), 0xf}, 0x100, 0xc8, 0x209, 0x0, 0xffffffffffffffff, 0x5a, 0x0, 0x0, 0x8, 0x0, 0x200002000000}, 0x0, 0x0, 0xffffffffffffffff, 0xb) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000), 0xfdef) 1.405841785s ago: executing program 0 (id=3062): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907a56675f37538ec86dd6317ce22667f1100db5b686158bbcfe8875a65969ff57b0300"/48], 0xfdef) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x7, 0x0, 0x10, 0xfc, 0x0, 0x0, 0x28040, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000500), 0xf}, 0x100, 0xc8, 0x209, 0x0, 0xffffffffffffffff, 0x5a, 0x0, 0x0, 0x8, 0x0, 0x200002000000}, 0x0, 0x0, 0xffffffffffffffff, 0xb) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000), 0xfdef) 1.405040775s ago: executing program 0 (id=3063): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = getpid() syz_open_procfs$namespace(r3, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r5, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(r5, &(0x7f0000000e40)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r5, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000c80)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x80000, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x2}, 0x50) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000d00)={r6, r7}, 0xc) sendmsg$tipc(r5, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) close(r5) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000140), 0x4) recvmsg(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0xfff, r1, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x9a, 0xfb, 0x0, 0x0, 0x0, 0x9, 0x84404, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x3, 0x2}, 0x4c1, 0x4, 0x401, 0x8, 0x2, 0xcce, 0x3, 0x0, 0xffff, 0x0, 0x80000000}, 0x0, 0x2, r2, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) socketpair(0x8, 0x3, 0x9, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000540)=@rc={0x1f, @none}, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000780)=""/58, 0x3a}, {&(0x7f00000007c0)=""/56, 0x38}, {&(0x7f0000000a80)=""/244, 0xf4}], 0x3, &(0x7f0000000bc0)=""/100, 0x64}, 0x40000000) 1.110434782s ago: executing program 0 (id=3064): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000080)='blkio.throttle.io_serviced\x00', 0x26e1, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r2, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000040)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0], 0x0, 0x69, &(0x7f00000001c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0x23, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000480)=r3) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x400000000005, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r4, 0xc008240a, 0x0) write$cgroup_subtree(r7, &(0x7f00000000c0)=ANY=[@ANYBLOB='8-N:0/2'], 0x6a) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="1e0000000500000009000000ffffffff90cb0400", @ANYRES32=r5, @ANYBLOB='\a\x00'/20, @ANYRES32=r3, @ANYRES32=r2, @ANYBLOB="0400000000400000000000000ff8ffffff000000", @ANYRES32, @ANYBLOB], 0x50) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000e00)=@generic={&(0x7f0000000dc0)='./file0\x00', 0x0, 0x8}, 0x18) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x7, 0x4, 0x2}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={r10, &(0x7f00000001c0), 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0x0, 0x0, &(0x7f0000000980)='GPL\x00', 0x7fffffff, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000000cc0)={0x3, 0x1000}, 0x8, 0x10, &(0x7f0000000d00)={0x3, 0x5, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000e40)=[r2, r8, r2, r9, r10, r2, r2], 0x0, 0x10, 0x40}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000500)=@framed={{0x18, 0x2, 0x0, 0x0, 0x5}}, &(0x7f00000001c0)='GPL\x00', 0x1, 0x0, 0x0, 0xfae70cd23e750632, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r11, 0x0, 0xe, 0x0, &(0x7f0000000100)="54ae1f8219560625baa794a469ce", 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xffffffffffffff86) r12 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r12, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b8825fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x0) mkdirat$cgroup(r6, &(0x7f0000000200)='syz0\x00', 0x1ff) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000011008188040f80ec59acbc0413a181b230000000000100000010e61e0e0027000f00000000800200121f", 0x2e}], 0x1}, 0x0) 1.072901483s ago: executing program 3 (id=3065): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1}}}], 0x20}, 0x4008804) sendmsg$kcm(r0, &(0x7f0000000540)={&(0x7f00000000c0)=@qipcrtr={0x2a, 0xffffffff00000000, 0x1}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="f1e00845c39a1d430bf00a4b5de05985bf83fdbd9e66f505663ca592e8ee16ffede5d2cdb8e2b96d7bae7f88eee58eb24d803f9908f72f766d1a3e23cb81164c6d4aeded1886c4c3633325138265b2adc1dd7275f3666bec1b635291d8d16728227e7985a78d08883219c036c21164bae41ac7559adb6fcff1780d327cf73dcb29aceb9e08f791d2bae7e85d413dfa555bf540d230cd5a213191725b42a5ba1b165e00f0242381d43aa2ebc1c24332b6cfcebf8ac916ea", 0xb7}], 0x1}, 0x50) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0xd) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x202, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x9934, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x248, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x40000000, 0x10005}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000000)=ANY=[@ANYRES32], 0x10) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305829, &(0x7f0000000040)) r1 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000005c0)=[{0x80000005}, {0x2, 0x40}]}, 0x94) sendmsg$inet(r1, &(0x7f00000029c0)={&(0x7f0000000100)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000002780)=[{&(0x7f00000006c0)='{', 0x1}], 0x1}, 0x4000040) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000001040)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000140)="97", 0xffe0}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x7b, &(0x7f0000000000)=r4, 0x8) openat$cgroup_subtree(r4, &(0x7f0000000580), 0x2, 0x0) close(r1) sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f00000002c0)=@l2tp={0x2, 0x0, @remote, 0xfffffffe}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000c40)="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", 0x3f3}, {&(0x7f0000002b40)="da752f575198baaac222d34e85893d37a6bd281687872ed9151c56f415698f3fecf56eebf5edb42ed5d54e0419b2a13128d3ad19b6eed6b450aad46baaa57203e0d4f567d8d79fe07e7b3142de43e55cf69c65db2469175cf60c82f49d0f9dc4c4dde733a14d57f4117ed2f46aea5950ff0176d73349c2808eee62ce1c7d846ffdf65211f3192dabe5b3ac1516ad90e618d0ca9e4ac2778acabeac244f2f90af2616647e5cf8ab5e2ac404ebf2a866c8a73f68ae2cc4523e63e3a1aa5ab60a23e4c47534bda546042120c5333d91fefc68226bc9149d282937797a2fe036a58c9ecd19e54bcfb85d3f75ec7c74d86be94ef6b9191e0fa86d2a9330af3f592e24bc30b84632e5121bf04abc0e12f4073f6678ad97b786cc73b8175e35eda542e3631d283a3ca6fef91607ec7dee1b4a62bae169cc8fb64e8bdef95474f0b3c526f69ce55281e18016a4785875ba99e313fd63f66cfd36234bcc6048f25bce8cce39cf709eb10e1ea88497ff7401aae0d4a7e07f14691b6c4b75dc16e2586744317ffbb9966d8bfb16efcdf6ab308426e5c1aec6a6636122ffaca89af3b03834612b93989d0bbb251a42c1b48b86ac7162ad8d5cbf3d6cfccdc590724ff6caa853", 0x1c0}], 0x2}, 0x8400) recvmsg(r0, &(0x7f0000002100)={&(0x7f0000000000)=@caif=@util, 0x80, &(0x7f0000002040)=[{&(0x7f0000000340)=""/231, 0xe7}, {0x0}, {&(0x7f0000001040)=""/4096, 0x1000}], 0x3, &(0x7f00000020c0)=""/49, 0x31}, 0x182) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a7401", 0x17}], 0x1}, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000100000000a500000000000018490000fe"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x19, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa7e3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2e0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x12, 0x0, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b3114", 0x0, 0x0, 0x3}, 0x50) r6 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d087277b9b108b4ab51c"], 0xfe33) write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[@ANYBLOB="1c00000018"], 0xfe33) sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000640)="a1ca", 0x2}], 0x1}, 0x0) 1.071700803s ago: executing program 4 (id=3066): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x200, 0x7}, 0x0, 0x0, 0xffffffff, 0x0, 0xe2704ec, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x68}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x3, 0x8, 0x5}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff00000085000000a800000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r4}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1482c8f52105e4fbdb10ee64545f476bca8f00000008000000080000000000000097965d507db4f231924d1148631d2288bf36744b75d230f6d57bc6b77a685871ff8c313192563be07b283a23aaf299b6dca52aee166c0d863930d81280", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000010000000000000000000000850000005300000085000000050000009500000000000000a94be0c51261be6a99fe3d0000a232d5e1f59f18f845f82e9a7bde9e8f4b9197701b547edf612a03f1737d95"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r5 = socket$kcm(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003840)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="fbe6bd8dfcdda5a210b8cfefbd66f459c7261b927d25d3cf74d2f7c97735eba47f606a290d18492592230700000000000000081fdbd921ed4db0e67c9d5ab1452445a1e0da5ac68b13f4afe2712eeaad350d07", 0x53}], 0x1}, 0x0) close(r7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x81018, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0xc8, 0x3, 0x0, 0x2, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r11) recvmsg$unix(r10, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r12, &(0x7f0000000c80)=ANY=[@ANYBLOB="9fedcb7968ddc36c8f263408008daa"], 0xfdef) close(r9) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0xfffffffe}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETQUEUE(r13, 0x400454d9, &(0x7f0000000940)={'veth1_macvtap\x00', 0x600}) recvmsg$unix(r8, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_devices(r14, 0x0, 0x0) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40010061) setsockopt$sock_attach_bpf(r5, 0x107, 0x12, &(0x7f00000008c0)=r15, 0x4) r16 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r16, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff200000000021000aac141419e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) 1.023993124s ago: executing program 2 (id=3067): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x8, 0xc0314, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0x6, 0xa5}, 0x0, 0x13, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb4, 0xb4, 0xa, [@var={0x10, 0x0, 0x0, 0xe, 0x4, 0x2}, @struct={0x9, 0x2, 0x0, 0x4, 0x0, 0x46c, [{0x0, 0x0, 0xfffffffd}, {0x4, 0x5, 0x8b46}]}, @int={0xc, 0x0, 0x0, 0x1, 0x0, 0x6b, 0x0, 0x10, 0x1}, @enum={0x2, 0x5, 0x0, 0x6, 0x4, [{0xa, 0x7}, {0x2, 0x20}, {0x8, 0x4}, {0x4, 0x5}, {0xa, 0x9}]}, @volatile={0x1, 0x0, 0x0, 0x9, 0x1}, @volatile={0x9, 0x0, 0x0, 0x9, 0x5}, @volatile={0x2, 0x0, 0x0, 0x9, 0x4}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x4, 0xfffffffc}}]}, {0x0, [0x5f, 0x5f, 0x30, 0x0, 0x30, 0x61, 0x2e, 0x5f]}}, &(0x7f0000000600)=""/76, 0xd6, 0x4c, 0x0, 0x9fc}, 0x28) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000340)=@generic={&(0x7f0000000300)='./file0/file0\x00', 0x0, 0x8}, 0x18) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000780)={@fallback=r0, 0x36, 0x1, 0xc00, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000440)=[0x0], &(0x7f00000006c0)=[0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0], 0x0}, 0x40) r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000880), 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000007c0)={@fallback=r1, r2, 0x4, 0x201c, 0x0, @value=r4, @void, @void, @void, r3}, 0x20) socketpair$unix(0x1, 0x5, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x10}}], 0x10}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0xfdef) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89a0, &(0x7f0000000080)) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x6, 0x80}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x1) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000600073582c137153e37080c18800dac0f0003ff", 0x33fe0}], 0x1, 0x0, 0x0, 0x8100000}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x3c, 0x0, 0x0, 0x8, 0xd0b14, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0xffffffffffffffc0, 0xa5}, 0x0, 0x5, 0x4, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89a2, &(0x7f0000000080)) 591.154995ms ago: executing program 4 (id=3068): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r1}, &(0x7f0000000840), &(0x7f0000000340)=r0}, 0x20) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xb) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffe81}, 0x48) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) close(r2) r3 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r3, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r4}, &(0x7f0000000000), &(0x7f0000000580)=r2}, 0x20) r5 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f95524fc60040011000a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000100)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f95524fc60040011000a7403004700000037153e370248018000f01700d1bd", 0x31abf}], 0x1}, 0x0) recvmsg$kcm(r3, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)=""/117, 0x75}], 0x1}, 0x102) 416.786949ms ago: executing program 0 (id=3069): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[], 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)}, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x6, 0x13, &(0x7f0000000200)=r4, 0x4) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x5, 0xb912c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x7ffffffffffffffd, 0x200000000000000}, 0x0, 0x7, 0xfffffffe, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa06"], 0xfdef) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r8, &(0x7f0000000000), 0xfdef) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)="d8000000140081044e81f782db44b9040a1d080201000000040000a118000200ff020000000000000000000000000001a80016ea1f000840032e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f722f054f55153c6f94007134cf6ee08000a09108e8d8ef075c0100000000000000cb090000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e0060000000000000580bb9ad809d5e1cace81b341139fe3cd4032e8edb12d", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x4040c04) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000900000000000000fdffffff03736107e30000800020f80000000116c976740900001812000083d2bcb4192d314e84ea81c1d32b255e4c4e85bfc47488172205a071dab572eeee3ff6ee5a516b988f84dfc4ce659b8196692c72e376f7f3b8b2493369dcd27adfa75e03e51a62a619287f6dfa69e2f89e35cfc66080fc65391059e83ac99bc85daba735d887dd24582b33c0af21d7a5895db3c0c825f1283901f573a18741a4e2fd0484ccabe09e890f11a6a91a5d4b40a461c4706589", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000140)='syzkaller\x00', 0x6, 0xe8, &(0x7f0000000440)=""/232, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x7, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000580)=[r0, r0, r0, r4, r4, r0, r4], &(0x7f00000005c0)=[{0x0, 0x5, 0x6}, {0x2, 0x4, 0x8, 0x4}, {0x3, 0x2, 0x6}, {0x2, 0x3, 0x1, 0x9}, {0x3, 0x2, 0x5, 0x2}], 0x10, 0x800}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000700)=r9, 0x4) 372.44496ms ago: executing program 2 (id=3070): perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000001280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d32, 0x24008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x11}, @multicast1}}}, @ip_retopts={{0x28, 0x0, 0x7, {[@noop, @timestamp_addr={0x44, 0x14, 0x7, 0x1, 0x7, [{@rand_addr=0x64010101}, {@dev={0xac, 0x14, 0x14, 0x1d}, 0x5}]}]}}}], 0x48}, 0x200040c4) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907a56675f37538ec86dd6317ce22667f1100db5b686158bbcfe8875a65969ff57b03000000000000000000000000ac1414aa"], 0xfdef) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x7, 0x0, 0x10, 0xfc, 0x0, 0x0, 0x28040, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000500), 0xf}, 0x100, 0xc8, 0x209, 0x0, 0xffffffffffffffff, 0x5a, 0x0, 0x0, 0x8, 0x0, 0x200002000000}, 0x0, 0x0, r0, 0xb) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000), 0xfdef) 309.481732ms ago: executing program 2 (id=3071): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x11}, @multicast1}}}, @ip_retopts={{0x10}}], 0x30}, 0x200040c4) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907a56675f37538ec86dd6317ce"], 0xfdef) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x7, 0x0, 0x10, 0xfc, 0x0, 0x0, 0x28040, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0, 0xf}, 0x100, 0xc8, 0x209, 0x0, 0xffffffffffffffff, 0x5a, 0x0, 0x0, 0x8, 0x0, 0x200002000000}, 0x0, 0x0, 0xffffffffffffffff, 0xb) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0xfdef) 278.933742ms ago: executing program 4 (id=3072): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x11}, @multicast1}}}, @ip_retopts={{0x10}}], 0x30}, 0x200040c4) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907a56675f37538ec86dd6317ce22"], 0xfdef) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000), 0xfdef) 278.156593ms ago: executing program 2 (id=3073): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = getpid() syz_open_procfs$namespace(r3, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r5, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(r5, &(0x7f0000000e40)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r5, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000c80)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x80000, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x2}, 0x50) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000d00)={r6, r7}, 0xc) sendmsg$tipc(r5, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) close(r5) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000140), 0x4) recvmsg(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0xfff, r1, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x9a, 0xfb, 0x0, 0x0, 0x0, 0x9, 0x84404, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x3, 0x2}, 0x4c1, 0x4, 0x401, 0x8, 0x2, 0xcce, 0x3, 0x0, 0xffff, 0x0, 0x80000000}, 0x0, 0x2, r2, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) socketpair(0x8, 0x3, 0x9, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000540)=@rc={0x1f, @none}, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000780)=""/58, 0x3a}, {&(0x7f00000007c0)=""/56, 0x38}, {&(0x7f0000000a80)=""/244, 0xf4}], 0x3, &(0x7f0000000bc0)=""/100, 0x64}, 0x40000000) 125.198047ms ago: executing program 4 (id=3074): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x2e, &(0x7f0000000040)=r1, 0xffa8) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x4, 0x4, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x3, 0x82, &(0x7f0000000240)=""/130}, 0x94) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x15, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000000)={r2}) write$cgroup_subtree(r1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x79, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x5931a207a26eb393) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000007b0800000500000001000000", @ANYRES32, @ANYBLOB='\x00'/14, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00 \x00'/25], 0x50) r3 = socket$kcm(0x2, 0x3, 0x106) sendmsg(r3, &(0x7f0000000640)={&(0x7f00000000c0)=@in={0x2, 0x4e22, @rand_addr=0x64010100}, 0x80, 0x0, 0x0, &(0x7f0000004000)=ANY=[@ANYBLOB="100000000020000001000000"], 0x10}, 0x8080) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x104046, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="260a0000000000006110940000000000180000b07600000000000000000000009500000000000000976c3dc5337f155f2efce58df51eda3224f97540b92c8084d292facbc65202578635069a06cc04f91095172d9b1a887392d08c24beb6a7fceacfafe87ccea93cd8f96b25a9498d52d9cdb1e7733615a43cb01f88fe4110d2c92d"], &(0x7f0000000000)='GPL\x00'}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0a000000040000000600000080"], 0x48) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x100b0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000080), 0x619, r1}, 0x38) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001840)={0xffffffffffffffff, 0x0, 0x0, 0x1003, 0x0, &(0x7f00000028c0)=""/4099, 0x3ff, 0x0, 0x40, 0x18, &(0x7f00000005c0)="1d6108189dd5f871348cfdb0046c7da44c8ee80c0a7865ece03229876696f3cff8202e96e306f678fca2c77e0c8f86b4fbd87d16bfffe0d30c7878e999c55618", &(0x7f0000001800)="e0a1a5286849cf033b508032c21f53ab86b591b32a38340e", 0x5, 0x0, 0x4b}, 0x50) socket$kcm(0x10, 0x2, 0x0) 367.24µs ago: executing program 3 (id=3075): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r0, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x0, 0x0, 0x0, 0x9, 0x0, 0x10000000000000, 0x180, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe1, 0x4a302b3c}, 0xa100, 0xc8, 0x5, 0x5, 0x8001, 0x0, 0x8}, 0x0, 0xc, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x15) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80720, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000000000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f000001000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f000001ac141400000000001c00000000000000000000004700000044aa00210a2101"], 0x230}, 0x0) socket$kcm(0x10, 0x3, 0x10) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffc}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union]}}, 0x0, 0x26}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000440)={r4, 0x20, &(0x7f0000000400)={0xfffffffffffffffe, 0x0, 0x0, &(0x7f0000000780)=""/164, 0xa4}}, 0x10) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000c80)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000060000000400000000000007000000000000000061"], 0x0, 0x2a}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000029c0)={r5, 0x20, &(0x7f0000002980)={&(0x7f00000018c0)=""/4096, 0x1000, 0x0, 0x0}}, 0x10) r6 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8916, &(0x7f0000000040)={'wlan1\x00', @random="02000000e29b"}) 0s ago: executing program 0 (id=3076): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000080)='blkio.throttle.io_serviced\x00', 0x26e1, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r2, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000040)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0], 0x0, 0x69, &(0x7f00000001c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0x23, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000480)=r3) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x400000000005, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r4, 0xc008240a, 0x0) write$cgroup_subtree(r7, &(0x7f00000000c0)=ANY=[@ANYBLOB='8-N:0/2'], 0x6a) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="1e0000000500000009000000ffffffff90cb0400", @ANYRES32=r5, @ANYBLOB='\a\x00'/20, @ANYRES32=r3, @ANYRES32=r2, @ANYBLOB="0400000000400000000000000ff8ffffff000000", @ANYRES32, @ANYBLOB='\x00\x00\x00'], 0x50) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000e00)=@generic={&(0x7f0000000dc0)='./file0\x00', 0x0, 0x8}, 0x18) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x7, 0x4, 0x2}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={r10, &(0x7f00000001c0), 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0x0, 0x0, &(0x7f0000000980)='GPL\x00', 0x7fffffff, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000000cc0)={0x3, 0x1000}, 0x8, 0x10, &(0x7f0000000d00)={0x3, 0x5, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000e40)=[r2, r8, r2, r9, r10, r2, r2], 0x0, 0x10, 0x40}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000500)=@framed={{0x18, 0x2, 0x0, 0x0, 0x5}}, &(0x7f00000001c0)='GPL\x00', 0x1, 0x0, 0x0, 0xfae70cd23e750632, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r11, 0x0, 0xe, 0x0, &(0x7f0000000100)="54ae1f8219560625baa794a469ce", 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xffffffffffffff86) r12 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r12, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b8825fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x0) mkdirat$cgroup(r6, &(0x7f0000000200)='syz0\x00', 0x1ff) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000011008188040f80ec59acbc0413a181b230000000000100000010e61e0e0027000f00000000800200121f", 0x2e}], 0x1}, 0x0) kernel console output (not intermixed with test programs): n: request_module (can-proto-0) failed. [ 117.908541][ T6809] IPv6: Can't replace route, no match found [ 117.983653][ T6812] netlink: 'syz.1.1096': attribute type 39 has an invalid length. [ 118.054136][ T6814] netlink: 'syz.2.1097': attribute type 3 has an invalid length. [ 118.124072][ T6814] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1097'. [ 118.173701][ T6814] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1097'. [ 118.345377][ T6827] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.1102'. [ 118.382089][ T6822] IPv6: Can't replace route, no match found [ 118.464396][ T6833] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1105'. [ 118.538545][ T6835] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1106'. [ 118.584743][ T6837] netlink: 'syz.3.1107': attribute type 3 has an invalid length. [ 118.623392][ T6837] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1107'. [ 118.758211][ T6837] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1107'. [ 118.840969][ T6843] netlink: 'syz.0.1109': attribute type 39 has an invalid length. [ 118.908296][ T6849] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1112'. [ 119.683781][ T6873] IPv6: Can't replace route, no match found [ 120.018431][ T6893] IPv6: Can't replace route, no match found [ 120.515784][ T6914] can: request_module (can-proto-0) failed. [ 120.981345][ T6933] IPv6: Can't replace route, no match found [ 121.035632][ T6940] validate_nla: 8 callbacks suppressed [ 121.035663][ T6940] netlink: 'syz.0.1150': attribute type 39 has an invalid length. [ 121.149191][ T6946] netlink: 'syz.2.1152': attribute type 39 has an invalid length. [ 121.378543][ T6959] netlink: 'syz.2.1158': attribute type 3 has an invalid length. [ 121.401945][ T6960] netlink: 'syz.1.1156': attribute type 3 has an invalid length. [ 122.000474][ T6988] netlink: 'syz.1.1170': attribute type 3 has an invalid length. [ 122.112560][ T6996] netlink: 'syz.3.1172': attribute type 3 has an invalid length. [ 122.149214][ T6996] netlink: 'syz.3.1172': attribute type 3 has an invalid length. [ 122.293437][ T7000] netlink: 'syz.2.1175': attribute type 3 has an invalid length. [ 122.646946][ T7007] __nla_validate_parse: 29 callbacks suppressed [ 122.646968][ T7007] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1178'. [ 123.014722][ T7018] netlink: 140 bytes leftover after parsing attributes in process `syz.4.1183'. [ 123.155859][ T7028] netlink: 'syz.1.1187': attribute type 3 has an invalid length. [ 123.164688][ T7028] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1187'. [ 123.296175][ T7024] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1185'. [ 123.310162][ T7028] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1187'. [ 123.614208][ T7042] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1192'. [ 123.737016][ T7053] netlink: 'syz.0.1197': attribute type 3 has an invalid length. [ 123.755409][ T7053] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1197'. [ 123.784492][ T7054] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1194'. [ 123.858631][ T7055] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1194'. [ 123.935657][ T7053] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1197'. [ 126.563389][ T7163] validate_nla: 4 callbacks suppressed [ 126.563408][ T7163] netlink: 'syz.2.1245': attribute type 3 has an invalid length. [ 126.623352][ T7169] netlink: 'syz.2.1245': attribute type 3 has an invalid length. [ 126.784684][ T7171] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 127.180253][ T7184] can: request_module (can-proto-0) failed. [ 127.427670][ T7207] netlink: 'syz.3.1262': attribute type 3 has an invalid length. [ 127.469304][ T7212] netlink: 'syz.3.1262': attribute type 3 has an invalid length. [ 127.630409][ T7210] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 128.063269][ T7227] __nla_validate_parse: 16 callbacks suppressed [ 128.063291][ T7227] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1281'. [ 128.215546][ T7220] can: request_module (can-proto-0) failed. [ 128.317230][ T7233] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1272'. [ 128.717749][ T7255] netlink: 'syz.3.1283': attribute type 3 has an invalid length. [ 128.755365][ T7259] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1285'. [ 128.766363][ T7255] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1283'. [ 128.940354][ T7255] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1283'. [ 129.096176][ T7264] can: request_module (can-proto-0) failed. [ 129.234430][ T7273] netlink: 'syz.2.1289': attribute type 39 has an invalid length. [ 129.245269][ T7272] netlink: 'syz.3.1290': attribute type 39 has an invalid length. [ 129.485799][ T7288] netlink: 140 bytes leftover after parsing attributes in process `syz.4.1298'. [ 129.595290][ T7292] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1299'. [ 129.610457][ T7294] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1301'. [ 129.668158][ T7296] can: request_module (can-proto-0) failed. [ 129.744314][ T7305] netlink: 'syz.2.1306': attribute type 3 has an invalid length. [ 129.782378][ T7305] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1306'. [ 129.985525][ T7305] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1306'. [ 130.086403][ T7315] netlink: 'syz.1.1310': attribute type 39 has an invalid length. [ 130.258984][ T7325] netlink: 'syz.1.1323': attribute type 3 has an invalid length. [ 131.473465][ T7387] can: request_module (can-proto-0) failed. [ 131.823091][ T7410] validate_nla: 2 callbacks suppressed [ 131.823110][ T7410] netlink: 'syz.4.1352': attribute type 3 has an invalid length. [ 131.902349][ T7418] netlink: 'syz.4.1352': attribute type 3 has an invalid length. [ 132.509922][ T7445] can: request_module (can-proto-0) failed. [ 132.720092][ T1424] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.726566][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.936815][ T7468] netlink: 'syz.4.1377': attribute type 39 has an invalid length. [ 133.189377][ T7475] can: request_module (can-proto-0) failed. [ 133.325892][ T7489] netlink: 'syz.4.1386': attribute type 3 has an invalid length. [ 133.333721][ T7489] __nla_validate_parse: 13 callbacks suppressed [ 133.333738][ T7489] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1386'. [ 133.427737][ T7497] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1386'. [ 133.475607][ T7502] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1392'. [ 133.683550][ T7505] netlink: 'syz.3.1393': attribute type 39 has an invalid length. [ 133.831791][ T7523] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.1399'. [ 134.010915][ T7533] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1404'. [ 134.205359][ T7541] netlink: 'syz.3.1407': attribute type 3 has an invalid length. [ 134.220948][ T7541] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1407'. [ 134.298531][ T7541] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1407'. [ 134.570918][ T7557] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1416'. [ 134.798286][ T7567] netlink: 'syz.0.1420': attribute type 39 has an invalid length. [ 134.821924][ T7574] IPv6: Can't replace route, no match found [ 134.845637][ T7573] netlink: 'syz.2.1423': attribute type 3 has an invalid length. [ 134.894077][ T7573] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1423'. [ 135.044305][ T7578] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1423'. [ 135.254155][ T7591] netlink: 'syz.2.1431': attribute type 39 has an invalid length. [ 135.508877][ T7608] IPv6: Can't replace route, no match found [ 135.613402][ T7612] netlink: 'syz.3.1441': attribute type 3 has an invalid length. [ 136.969929][ T7679] validate_nla: 3 callbacks suppressed [ 136.969945][ T7679] netlink: 'syz.4.1471': attribute type 3 has an invalid length. [ 137.302964][ T7691] can: request_module (can-proto-0) failed. [ 137.345228][ T7697] netlink: 'syz.4.1477': attribute type 39 has an invalid length. [ 138.500765][ T7723] __nla_validate_parse: 15 callbacks suppressed [ 138.500800][ T7723] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1485'. [ 138.804819][ T7738] can: request_module (can-proto-0) failed. [ 139.587340][ T7741] netlink: 'syz.0.1492': attribute type 3 has an invalid length. [ 139.595131][ T7741] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1492'. [ 139.709090][ T7741] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1492'. [ 140.290158][ T7765] can: request_module (can-proto-0) failed. [ 140.913683][ T7776] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1505'. [ 141.192618][ T7784] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.1509'. [ 141.210913][ T7794] netlink: 'syz.3.1513': attribute type 3 has an invalid length. [ 141.219129][ T7794] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1513'. [ 141.304271][ T7794] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1513'. [ 141.506443][ T7802] can: request_module (can-proto-0) failed. [ 142.455111][ T7809] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1519'. [ 142.654546][ T7822] IPv6: Can't replace route, no match found [ 143.048223][ T7835] can: request_module (can-proto-0) failed. [ 143.115125][ T7838] netlink: 'syz.2.1528': attribute type 3 has an invalid length. [ 143.136070][ T7838] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1528'. [ 143.153950][ T7838] netlink: 'syz.2.1528': attribute type 3 has an invalid length. [ 143.162577][ T7838] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1528'. [ 143.975297][ T7848] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1530'. [ 144.103898][ T7854] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1533'. [ 144.133500][ T7853] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1534'. [ 144.152614][ T7856] netlink: 'syz.0.1535': attribute type 39 has an invalid length. [ 144.514206][ T7870] can: request_module (can-proto-0) failed. [ 145.358815][ T7875] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1542'. [ 145.451744][ T7877] netlink: 'syz.4.1543': attribute type 3 has an invalid length. [ 145.531316][ T7877] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1543'. [ 145.532335][ T7883] netlink: 'syz.4.1543': attribute type 3 has an invalid length. [ 145.599298][ T7883] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1543'. [ 145.680693][ T7882] netlink: 'syz.0.1546': attribute type 39 has an invalid length. [ 145.796779][ T7885] netlink: 'syz.1.1547': attribute type 39 has an invalid length. [ 145.948940][ T7894] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1550'. [ 145.987751][ T7891] IPv6: Can't replace route, no match found [ 146.108537][ T7904] can: request_module (can-proto-0) failed. [ 146.925739][ T7912] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1556'. [ 147.033441][ T7919] can: request_module (can-proto-0) failed. [ 147.117854][ T7922] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.1555'. [ 148.150505][ T7941] netlink: 'syz.3.1561': attribute type 3 has an invalid length. [ 148.159933][ T7938] netlink: 'syz.3.1561': attribute type 3 has an invalid length. [ 148.165288][ T7940] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1564'. [ 148.594090][ T7948] netlink: 'syz.4.1569': attribute type 39 has an invalid length. [ 149.333804][ T7978] netlink: 'syz.0.1582': attribute type 39 has an invalid length. [ 149.452099][ T7985] netlink: 'syz.2.1585': attribute type 3 has an invalid length. [ 149.498383][ T7985] __nla_validate_parse: 6 callbacks suppressed [ 149.498402][ T7985] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1585'. [ 149.503013][ T7988] netlink: 'syz.2.1585': attribute type 3 has an invalid length. [ 149.522303][ T7988] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1585'. [ 149.836569][ T7997] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1588'. [ 150.044107][ T8006] netlink: 'syz.4.1595': attribute type 3 has an invalid length. [ 150.052595][ T8006] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1595'. [ 150.071216][ T8009] IPv6: Can't replace route, no match found [ 150.131481][ T8006] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1595'. [ 150.244663][ T8019] netlink: 'syz.3.1596': attribute type 3 has an invalid length. [ 150.254906][ T8019] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1596'. [ 150.274696][ T8016] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1597'. [ 150.438374][ T8019] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1596'. [ 150.501262][ T8026] netlink: 'syz.2.1601': attribute type 3 has an invalid length. [ 150.521759][ T8029] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.1600'. [ 150.538686][ T8026] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1601'. [ 150.589727][ T8033] netlink: 'syz.2.1601': attribute type 3 has an invalid length. [ 152.740894][ T8128] can: request_module (can-proto-0) failed. [ 153.851651][ T8140] validate_nla: 9 callbacks suppressed [ 153.851760][ T8140] netlink: 'syz.3.1648': attribute type 39 has an invalid length. [ 153.953474][ T8143] netlink: 'syz.4.1650': attribute type 39 has an invalid length. [ 154.160395][ T8157] can: request_module (can-proto-0) failed. [ 154.188461][ T8159] netlink: 'syz.4.1655': attribute type 39 has an invalid length. [ 155.099154][ T8167] __nla_validate_parse: 18 callbacks suppressed [ 155.099172][ T8167] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1657'. [ 155.152262][ T8170] netlink: 'syz.3.1660': attribute type 3 has an invalid length. [ 155.173460][ T8170] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1660'. [ 155.205406][ T8170] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1660'. [ 155.441052][ T8181] netlink: 'syz.4.1663': attribute type 39 has an invalid length. [ 155.462581][ T8183] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1664'. [ 155.574892][ T8185] netlink: 'syz.1.1665': attribute type 39 has an invalid length. [ 155.709011][ T8195] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1669'. [ 155.761668][ T8199] IPv6: Can't replace route, no match found [ 156.006401][ T8210] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1675'. [ 156.104429][ T8215] netlink: 'syz.2.1677': attribute type 39 has an invalid length. [ 156.130162][ T8217] netlink: 'syz.4.1678': attribute type 39 has an invalid length. [ 156.232488][ T8221] netlink: 'syz.1.1680': attribute type 39 has an invalid length. [ 156.458339][ T8235] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.1686'. [ 156.489544][ T8238] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1687'. [ 156.635067][ T8247] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1692'. [ 156.687864][ T8249] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1690'. [ 156.780053][ T8253] netlink: 'syz.0.1694': attribute type 39 has an invalid length. [ 158.606371][ T8294] IPv6: Can't replace route, no match found [ 158.911761][ T8311] validate_nla: 4 callbacks suppressed [ 158.911796][ T8311] netlink: 'syz.0.1715': attribute type 39 has an invalid length. [ 159.022881][ T8316] IPv6: Can't replace route, no match found [ 159.342731][ T8325] netlink: 'syz.1.1723': attribute type 39 has an invalid length. [ 159.528953][ T8340] netlink: 'syz.1.1728': attribute type 3 has an invalid length. [ 159.577044][ T8340] netlink: 'syz.1.1728': attribute type 3 has an invalid length. [ 159.991965][ T8347] netlink: 'syz.3.1730': attribute type 39 has an invalid length. [ 160.384246][ T8358] __nla_validate_parse: 10 callbacks suppressed [ 160.384364][ T8358] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1736'. [ 160.544855][ T8363] netlink: 'syz.4.1738': attribute type 39 has an invalid length. [ 160.648806][ T8375] netlink: 'syz.1.1750': attribute type 3 has an invalid length. [ 160.657689][ T8375] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1750'. [ 160.687173][ T8369] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1741'. [ 160.995237][ T8388] netlink: 'syz.1.1748': attribute type 39 has an invalid length. [ 161.201035][ T8399] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1753'. [ 161.363779][ T8405] netlink: 'syz.2.1755': attribute type 39 has an invalid length. [ 161.520119][ T8411] netlink: 'syz.4.1759': attribute type 3 has an invalid length. [ 161.552810][ T8411] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1759'. [ 161.594805][ T8414] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1759'. [ 161.916901][ T8429] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1767'. [ 161.966767][ T8435] IPv6: Can't replace route, no match found [ 162.167171][ T8449] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.1771'. [ 162.312234][ T8458] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1777'. [ 162.324349][ T8458] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1777'. [ 164.183313][ T8523] validate_nla: 9 callbacks suppressed [ 164.183335][ T8523] netlink: 'syz.4.1807': attribute type 39 has an invalid length. [ 164.354476][ T8530] netlink: 'syz.0.1809': attribute type 39 has an invalid length. [ 164.363232][ T8528] netlink: 'syz.3.1810': attribute type 39 has an invalid length. [ 164.961148][ T8557] netlink: 'syz.2.1824': attribute type 39 has an invalid length. [ 165.048973][ T8559] netlink: 'syz.4.1825': attribute type 39 has an invalid length. [ 165.936625][ T8589] netlink: 'syz.3.1838': attribute type 39 has an invalid length. [ 165.996594][ T8591] netlink: 'syz.1.1839': attribute type 39 has an invalid length. [ 166.058045][ T8593] netlink: 'syz.2.1841': attribute type 3 has an invalid length. [ 166.093428][ T8600] __nla_validate_parse: 11 callbacks suppressed [ 166.093448][ T8600] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.1840'. [ 166.145688][ T8603] netlink: 'syz.2.1841': attribute type 3 has an invalid length. [ 166.146570][ T8593] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1841'. [ 166.184730][ T8603] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1841'. [ 166.505605][ T8617] netlink: 'syz.0.1849': attribute type 39 has an invalid length. [ 166.660941][ T8624] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1853'. [ 166.722703][ T8624] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1853'. [ 167.407778][ T8651] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1863'. [ 167.459819][ T8654] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1863'. [ 167.499286][ T8653] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1866'. [ 167.663749][ T8657] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1867'. [ 167.841674][ T8657] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1867'. [ 169.261689][ T8713] validate_nla: 10 callbacks suppressed [ 169.261706][ T8713] netlink: 'syz.4.1892': attribute type 3 has an invalid length. [ 169.363697][ T8719] netlink: 'syz.3.1894': attribute type 39 has an invalid length. [ 169.919482][ T8749] netlink: 'syz.0.1908': attribute type 3 has an invalid length. [ 169.929378][ T8746] netlink: 'syz.4.1907': attribute type 39 has an invalid length. [ 170.106849][ T8754] netlink: 'syz.3.1909': attribute type 3 has an invalid length. [ 170.189849][ T8759] netlink: 'syz.3.1909': attribute type 3 has an invalid length. [ 170.882573][ T8779] netlink: 'syz.4.1919': attribute type 39 has an invalid length. [ 170.919348][ T8781] netlink: 'syz.0.1921': attribute type 39 has an invalid length. [ 171.159473][ T8795] netlink: 'syz.3.1925': attribute type 3 has an invalid length. [ 171.204073][ T8795] __nla_validate_parse: 12 callbacks suppressed [ 171.204088][ T8795] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1925'. [ 171.272247][ T8795] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1925'. [ 171.453363][ T8809] netlink: 'syz.4.1932': attribute type 3 has an invalid length. [ 171.471228][ T8809] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1932'. [ 171.494635][ T8809] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1932'. [ 171.591895][ T8813] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1933'. [ 171.688364][ T8813] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1933'. [ 171.884724][ T8823] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1938'. [ 172.349922][ T8850] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1948'. [ 172.411780][ T8854] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1948'. [ 172.441375][ T8853] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1951'. [ 174.562717][ T8902] device syzkaller0 entered promiscuous mode [ 174.899990][ T8933] validate_nla: 9 callbacks suppressed [ 174.900010][ T8933] netlink: 'syz.2.1982': attribute type 3 has an invalid length. [ 174.920530][ T8933] netlink: 'syz.2.1982': attribute type 3 has an invalid length. [ 175.756196][ T4258] Bluetooth: hci3: command 0x0406 tx timeout [ 175.766522][ T1326] Bluetooth: hci0: command 0x0406 tx timeout [ 175.774882][ T1326] Bluetooth: hci1: command 0x0406 tx timeout [ 175.793186][ T1326] Bluetooth: hci2: command 0x0406 tx timeout [ 175.810993][ T1326] Bluetooth: hci4: command 0x0406 tx timeout [ 175.929456][ T8961] netlink: 'syz.2.1993': attribute type 3 has an invalid length. [ 175.948755][ T8961] netlink: 'syz.2.1993': attribute type 3 has an invalid length. [ 176.595347][ T8975] __nla_validate_parse: 10 callbacks suppressed [ 176.595454][ T8975] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2000'. [ 176.667971][ T8982] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2004'. [ 176.995219][ T8999] netlink: 'syz.0.2009': attribute type 3 has an invalid length. [ 177.048144][ T9003] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.2010'. [ 177.061045][ T9004] netlink: 'syz.0.2009': attribute type 3 has an invalid length. [ 177.099756][ T8999] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2009'. [ 177.134943][ T9004] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2009'. [ 177.553060][ T9021] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2019'. [ 177.974182][ T9037] delete_channel: no stack [ 178.061343][ T9048] netlink: 'syz.1.2028': attribute type 3 has an invalid length. [ 178.078419][ T9048] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2028'. [ 178.103252][ T9048] netlink: 'syz.1.2028': attribute type 3 has an invalid length. [ 178.115695][ T9048] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2028'. [ 178.577764][ T9054] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2032'. [ 178.993430][ T9071] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.2035'. [ 179.607109][ T9100] netlink: 'syz.3.2049': attribute type 3 has an invalid length. [ 179.650104][ T9100] netlink: 'syz.3.2049': attribute type 3 has an invalid length. [ 181.067309][ T9156] netlink: 'syz.1.2076': attribute type 3 has an invalid length. [ 181.081006][ T9156] netlink: 'syz.1.2076': attribute type 3 has an invalid length. [ 182.096451][ T9191] __nla_validate_parse: 8 callbacks suppressed [ 182.096469][ T9191] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.2092'. [ 182.441164][ T9203] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2107'. [ 183.095048][ T9233] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2111'. [ 183.184041][ T9244] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 183.191373][ T9244] IPv6: NLM_F_CREATE should be set when creating new route [ 183.198739][ T9244] IPv6: NLM_F_CREATE should be set when creating new route [ 183.206026][ T9244] IPv6: NLM_F_CREATE should be set when creating new route [ 183.563136][ T9267] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.2122'. [ 183.820700][ T9280] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2128'. [ 184.073785][ T9292] netlink: 'syz.4.2134': attribute type 39 has an invalid length. [ 184.660317][ T9318] netlink: 'syz.2.2148': attribute type 3 has an invalid length. [ 184.697332][ T9318] netlink: 'syz.2.2148': attribute type 6 has an invalid length. [ 184.738685][ T9318] netlink: 144448 bytes leftover after parsing attributes in process `syz.2.2148'. [ 184.833841][ T9331] netlink: 'syz.0.2152': attribute type 39 has an invalid length. [ 184.928685][ T9341] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.2154'. [ 185.570011][ T9365] netlink: 'syz.2.2168': attribute type 3 has an invalid length. [ 185.608836][ T9365] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2168'. [ 186.040961][ T9401] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.2185'. [ 186.120090][ T9408] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.2186'. [ 189.238338][ T9470] netlink: 'syz.2.2212': attribute type 3 has an invalid length. [ 189.285975][ T9470] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2212'. [ 189.317469][ T9478] netlink: 'syz.2.2212': attribute type 3 has an invalid length. [ 189.364356][ T9478] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2212'. [ 190.479810][ T9491] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.487446][ T9491] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.530852][ T9493] device bridge_slave_1 left promiscuous mode [ 190.551296][ T9493] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.212195][ T9493] device bridge_slave_0 left promiscuous mode [ 191.218714][ T9493] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.667124][ T9512] netlink: 'syz.0.2227': attribute type 3 has an invalid length. [ 191.712834][ T9512] netlink: 'syz.0.2227': attribute type 6 has an invalid length. [ 191.762891][ T9512] netlink: 144448 bytes leftover after parsing attributes in process `syz.0.2227'. [ 192.690530][ T9545] netlink: 'syz.2.2241': attribute type 3 has an invalid length. [ 192.716381][ T9545] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2241'. [ 192.788138][ T9552] netlink: 'syz.2.2241': attribute type 3 has an invalid length. [ 192.868381][ T9552] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2241'. [ 192.980199][ T9557] netlink: 'syz.0.2244': attribute type 39 has an invalid length. [ 193.011635][ T9562] FAULT_INJECTION: forcing a failure. [ 193.011635][ T9562] name failslab, interval 1, probability 0, space 0, times 1 [ 193.024623][ T9562] CPU: 1 PID: 9562 Comm: syz.2.2246 Not tainted syzkaller #0 [ 193.032006][ T9562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 193.042076][ T9562] Call Trace: [ 193.045351][ T9562] [ 193.048275][ T9562] dump_stack_lvl+0x188/0x250 [ 193.052962][ T9562] ? verify_lock_unused+0x140/0x140 [ 193.058154][ T9562] ? show_regs_print_info+0x20/0x20 [ 193.063345][ T9562] ? load_image+0x410/0x410 [ 193.067840][ T9562] ? __kasan_kmalloc+0xc6/0xe0 [ 193.072606][ T9562] should_fail+0x383/0x4b0 [ 193.077021][ T9562] should_failslab+0x5/0x20 [ 193.081599][ T9562] slab_pre_alloc_hook+0x51/0xc0 [ 193.086523][ T9562] ? sctp_addr_wq_mgmt+0x2c7/0x720 [ 193.091630][ T9562] __kmalloc_track_caller+0x69/0x330 [ 193.096898][ T9562] ? sctp_addr_wq_mgmt+0x2c7/0x720 [ 193.102007][ T9562] kmemdup+0x22/0x50 [ 193.105896][ T9562] sctp_addr_wq_mgmt+0x2c7/0x720 [ 193.111005][ T9562] ? sctp_inet6addr_event+0x43b/0x700 [ 193.116369][ T9562] sctp_inet6addr_event+0x54d/0x700 [ 193.121565][ T9562] ? ieee80211_ifa6_changed+0xcd/0x380 [ 193.127012][ T9562] ? ipvlan_addr6_event+0xf1/0x270 [ 193.132115][ T9562] ? masq_inet6_event+0xf0/0x130 [ 193.137044][ T9562] atomic_notifier_call_chain+0x15d/0x280 [ 193.142845][ T9562] ipv6_add_addr+0xb5b/0xe10 [ 193.147428][ T9562] ? ipv6_count_addresses+0x170/0x170 [ 193.152789][ T9562] ? ipv6_get_ifaddr+0x66a/0x6e0 [ 193.157720][ T9562] inet6_addr_add+0x437/0x9b0 [ 193.162416][ T9562] inet6_rtm_newaddr+0x64c/0x8f0 [ 193.167372][ T9562] ? inet6_dump_ifinfo+0x930/0x930 [ 193.172498][ T9562] ? inet6_dump_ifinfo+0x930/0x930 [ 193.177600][ T9562] rtnetlink_rcv_msg+0x7f1/0xf10 [ 193.182534][ T9562] ? lock_chain_count+0x20/0x20 [ 193.187376][ T9562] ? rtnetlink_bind+0x80/0x80 [ 193.192047][ T9562] ? __local_bh_enable_ip+0x136/0x1c0 [ 193.197404][ T9562] ? lockdep_hardirqs_on+0x94/0x140 [ 193.202593][ T9562] ? __local_bh_enable_ip+0x136/0x1c0 [ 193.207963][ T9562] ? _local_bh_enable+0xa0/0xa0 [ 193.212808][ T9562] ? __dev_queue_xmit+0x1b64/0x2e50 [ 193.218032][ T9562] ? dev_queue_xmit+0x20/0x20 [ 193.222713][ T9562] ? memcpy+0x3c/0x60 [ 193.226684][ T9562] ? __copy_skb_header+0x3ba/0x4f0 [ 193.231792][ T9562] netlink_rcv_skb+0x1e9/0x430 [ 193.236544][ T9562] ? rtnetlink_bind+0x80/0x80 [ 193.241210][ T9562] ? netlink_ack+0xb10/0xb10 [ 193.245800][ T9562] netlink_unicast+0x78f/0x940 [ 193.250560][ T9562] netlink_sendmsg+0x8ba/0xbe0 [ 193.255317][ T9562] ? netlink_getsockopt+0x570/0x570 [ 193.260517][ T9562] ? aa_sock_msg_perm+0x94/0x150 [ 193.265445][ T9562] ? apparmor_socket_sendmsg+0x88/0x230 [ 193.270978][ T9562] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 193.276257][ T9562] ? security_socket_sendmsg+0x7c/0xa0 [ 193.281725][ T9562] ? netlink_getsockopt+0x570/0x570 [ 193.286956][ T9562] ____sys_sendmsg+0x5be/0x8f0 [ 193.291719][ T9562] ? __sys_sendmsg_sock+0x30/0x30 [ 193.296744][ T9562] ? import_iovec+0x6f/0xa0 [ 193.301239][ T9562] ___sys_sendmsg+0x236/0x2e0 [ 193.306005][ T9562] ? __sys_sendmsg+0x290/0x290 [ 193.310791][ T9562] __se_sys_sendmsg+0x1b7/0x2a0 [ 193.315631][ T9562] ? __x64_sys_sendmsg+0x80/0x80 [ 193.320554][ T9562] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 193.326535][ T9562] ? lockdep_hardirqs_on+0x94/0x140 [ 193.331725][ T9562] do_syscall_64+0x4c/0xa0 [ 193.336128][ T9562] ? clear_bhb_loop+0x30/0x80 [ 193.340794][ T9562] ? clear_bhb_loop+0x30/0x80 [ 193.345463][ T9562] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 193.351362][ T9562] RIP: 0033:0x7f44616100d9 [ 193.355769][ T9562] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 193.375365][ T9562] RSP: 002b:00007f445f868028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 193.383784][ T9562] RAX: ffffffffffffffda RBX: 00007f4461897fa0 RCX: 00007f44616100d9 [ 193.391742][ T9562] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 193.399707][ T9562] RBP: 00007f445f868090 R08: 0000000000000000 R09: 0000000000000000 [ 193.407672][ T9562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 193.415629][ T9562] R13: 00007f4461898038 R14: 00007f4461897fa0 R15: 00007ffdcc4367a8 [ 193.423603][ T9562] [ 193.491652][ T9568] raw_sendmsg: syz.3.2248 forgot to set AF_INET. Fix it! [ 194.043784][ T9588] netlink: 'syz.1.2257': attribute type 3 has an invalid length. [ 194.146508][ T9588] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2257'. [ 194.253997][ T9590] netlink: 'syz.1.2257': attribute type 3 has an invalid length. [ 194.296694][ T1424] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.303061][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.425848][ T9590] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2257'. [ 194.950581][ T9602] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2263'. [ 196.022747][ T9635] netlink: 'syz.3.2276': attribute type 3 has an invalid length. [ 196.038898][ T9635] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2276'. [ 196.089335][ T9637] netlink: 'syz.3.2276': attribute type 3 has an invalid length. [ 196.152292][ T9637] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2276'. [ 196.308499][ T9641] netlink: 'syz.4.2277': attribute type 39 has an invalid length. [ 196.692108][ T9648] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2281'. [ 197.204472][ T9670] netlink: 'syz.2.2291': attribute type 39 has an invalid length. [ 197.209524][ T9671] netlink: 'syz.4.2292': attribute type 3 has an invalid length. [ 197.335185][ T9671] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2292'. [ 197.363964][ T9677] netlink: 'syz.4.2292': attribute type 3 has an invalid length. [ 197.370240][ T9675] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2295'. [ 197.381612][ T9677] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2292'. [ 197.409788][ T9676] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2293'. [ 197.550809][ T9681] netlink: 'syz.2.2296': attribute type 3 has an invalid length. [ 197.576217][ T9681] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2296'. [ 197.612882][ T9682] netlink: 'syz.2.2296': attribute type 3 has an invalid length. [ 198.308461][ T9708] netlink: 'syz.2.2308': attribute type 21 has an invalid length. [ 199.324015][ T9743] validate_nla: 3 callbacks suppressed [ 199.324052][ T9743] netlink: 'syz.0.2324': attribute type 39 has an invalid length. [ 199.662546][ T9760] netlink: 'syz.4.2327': attribute type 3 has an invalid length. [ 199.692634][ T9760] __nla_validate_parse: 5 callbacks suppressed [ 199.692650][ T9760] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2327'. [ 199.712553][ T9760] netlink: 'syz.4.2327': attribute type 3 has an invalid length. [ 199.721562][ T9760] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2327'. [ 200.046738][ T9777] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2338'. [ 200.471710][ T9798] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2341'. [ 201.075270][ T9821] FAULT_INJECTION: forcing a failure. [ 201.075270][ T9821] name failslab, interval 1, probability 0, space 0, times 0 [ 201.101637][ T9821] CPU: 0 PID: 9821 Comm: syz.3.2353 Not tainted syzkaller #0 [ 201.109062][ T9821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 201.119129][ T9821] Call Trace: [ 201.122420][ T9821] [ 201.125361][ T9821] dump_stack_lvl+0x188/0x250 [ 201.130063][ T9821] ? show_regs_print_info+0x20/0x20 [ 201.135278][ T9821] ? load_image+0x410/0x410 [ 201.139802][ T9821] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 201.145800][ T9821] ? lock_chain_count+0x20/0x20 [ 201.150672][ T9821] should_fail+0x383/0x4b0 [ 201.155086][ T9821] should_failslab+0x5/0x20 [ 201.159585][ T9821] slab_pre_alloc_hook+0x51/0xc0 [ 201.164513][ T9821] ? __build_skb+0x26/0x2e0 [ 201.169005][ T9821] kmem_cache_alloc+0x3d/0x280 [ 201.173760][ T9821] __build_skb+0x26/0x2e0 [ 201.178075][ T9821] build_skb+0x1e/0x160 [ 201.182224][ T9821] bpf_prog_test_run_skb+0x25c/0x1190 [ 201.187614][ T9821] ? __fget_files+0x402/0x470 [ 201.192285][ T9821] ? cpu_online+0x60/0x60 [ 201.196611][ T9821] bpf_prog_test_run+0x31c/0x390 [ 201.201562][ T9821] __sys_bpf+0x5a5/0x6f0 [ 201.201850][ T9825] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2354'. [ 201.205846][ T9821] ? bpf_link_show_fdinfo+0x380/0x380 [ 201.205889][ T9821] __x64_sys_bpf+0x78/0x90 [ 201.205908][ T9821] do_syscall_64+0x4c/0xa0 [ 201.205924][ T9821] ? clear_bhb_loop+0x30/0x80 [ 201.205942][ T9821] ? clear_bhb_loop+0x30/0x80 [ 201.205958][ T9821] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 201.205977][ T9821] RIP: 0033:0x7fd8a96870d9 [ 201.205997][ T9821] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 201.268444][ T9821] RSP: 002b:00007fd8a78df028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 201.276863][ T9821] RAX: ffffffffffffffda RBX: 00007fd8a990efa0 RCX: 00007fd8a96870d9 [ 201.284849][ T9821] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 201.292811][ T9821] RBP: 00007fd8a78df090 R08: 0000000000000000 R09: 0000000000000000 [ 201.300772][ T9821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 201.308763][ T9821] R13: 00007fd8a990f038 R14: 00007fd8a990efa0 R15: 00007ffe106b01d8 [ 201.316741][ T9821] [ 201.483059][ T9833] FAULT_INJECTION: forcing a failure. [ 201.483059][ T9833] name failslab, interval 1, probability 0, space 0, times 0 [ 201.536412][ T9833] CPU: 0 PID: 9833 Comm: syz.0.2357 Not tainted syzkaller #0 [ 201.543869][ T9833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 201.553941][ T9833] Call Trace: [ 201.557234][ T9833] [ 201.560176][ T9833] dump_stack_lvl+0x188/0x250 [ 201.564872][ T9833] ? show_regs_print_info+0x20/0x20 [ 201.570089][ T9833] ? load_image+0x410/0x410 [ 201.574610][ T9833] ? __might_sleep+0xf0/0xf0 [ 201.579213][ T9833] ? __lock_acquire+0x7b50/0x7b50 [ 201.584251][ T9833] ? netlink_insert+0xe90/0x11f0 [ 201.589201][ T9833] should_fail+0x383/0x4b0 [ 201.591134][ T9842] netlink: 'syz.1.2362': attribute type 22 has an invalid length. [ 201.593633][ T9833] should_failslab+0x5/0x20 [ 201.605948][ T9833] slab_pre_alloc_hook+0x51/0xc0 [ 201.607860][ T9842] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2362'. [ 201.610904][ T9833] kmem_cache_alloc_node+0x47/0x2c0 [ 201.624924][ T9833] ? __alloc_skb+0xf4/0x750 [ 201.629442][ T9833] __alloc_skb+0xf4/0x750 [ 201.633791][ T9833] netlink_sendmsg+0x654/0xbe0 [ 201.638585][ T9833] ? netlink_getsockopt+0x570/0x570 [ 201.643796][ T9833] ? aa_sock_msg_perm+0x94/0x150 [ 201.648743][ T9833] ? apparmor_socket_sendmsg+0x88/0x230 [ 201.654301][ T9833] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 201.659602][ T9833] ? security_socket_sendmsg+0x7c/0xa0 [ 201.665074][ T9833] ? netlink_getsockopt+0x570/0x570 [ 201.670292][ T9833] ____sys_sendmsg+0x5be/0x8f0 [ 201.675076][ T9833] ? __sys_sendmsg_sock+0x30/0x30 [ 201.680124][ T9833] ? import_iovec+0x6f/0xa0 [ 201.684639][ T9833] ___sys_sendmsg+0x236/0x2e0 [ 201.689325][ T9833] ? __sys_sendmsg+0x290/0x290 [ 201.694130][ T9833] __se_sys_sendmsg+0x1b7/0x2a0 [ 201.698995][ T9833] ? __x64_sys_sendmsg+0x80/0x80 [ 201.703948][ T9833] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 201.709958][ T9833] ? lockdep_hardirqs_on+0x94/0x140 [ 201.715176][ T9833] do_syscall_64+0x4c/0xa0 [ 201.719604][ T9833] ? clear_bhb_loop+0x30/0x80 [ 201.724295][ T9833] ? clear_bhb_loop+0x30/0x80 [ 201.728991][ T9833] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 201.734899][ T9833] RIP: 0033:0x7f42f00ea0d9 [ 201.739327][ T9833] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 201.758944][ T9833] RSP: 002b:00007f42ee342028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 201.767373][ T9833] RAX: ffffffffffffffda RBX: 00007f42f0371fa0 RCX: 00007f42f00ea0d9 [ 201.775362][ T9833] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 201.783352][ T9833] RBP: 00007f42ee342090 R08: 0000000000000000 R09: 0000000000000000 [ 201.791342][ T9833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 201.799331][ T9833] R13: 00007f42f0372038 R14: 00007f42f0371fa0 R15: 00007ffd5495cf58 [ 201.807341][ T9833] [ 201.887303][ T9852] netlink: 'syz.2.2366': attribute type 39 has an invalid length. [ 201.959636][ T9857] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2369'. [ 202.033437][ T9861] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2380'. [ 202.330115][ T9877] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.2385'. [ 202.500063][ T9885] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.2378'. [ 202.587997][ T9889] netlink: 'syz.4.2382': attribute type 39 has an invalid length. [ 203.591939][ T9903] device syzkaller0 entered promiscuous mode [ 203.684129][ T9903] netlink: 'syz.0.2387': attribute type 8 has an invalid length. [ 203.965812][ T9921] netlink: 'syz.3.2396': attribute type 39 has an invalid length. [ 204.460999][ T9958] FAULT_INJECTION: forcing a failure. [ 204.460999][ T9958] name failslab, interval 1, probability 0, space 0, times 0 [ 204.484959][ T9958] CPU: 0 PID: 9958 Comm: syz.1.2412 Not tainted syzkaller #0 [ 204.492400][ T9958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 204.502476][ T9958] Call Trace: [ 204.505772][ T9958] [ 204.508716][ T9958] dump_stack_lvl+0x188/0x250 [ 204.513414][ T9958] ? show_regs_print_info+0x20/0x20 [ 204.518764][ T9958] ? load_image+0x410/0x410 [ 204.523282][ T9958] ? __might_sleep+0xf0/0xf0 [ 204.527886][ T9958] ? __lock_acquire+0x7b50/0x7b50 [ 204.532920][ T9958] should_fail+0x383/0x4b0 [ 204.537342][ T9958] should_failslab+0x5/0x20 [ 204.541871][ T9958] slab_pre_alloc_hook+0x51/0xc0 [ 204.546802][ T9958] __kmalloc+0x6b/0x340 [ 204.550948][ T9958] ? tomoyo_realpath_from_path+0xed/0x5e0 [ 204.556663][ T9958] tomoyo_realpath_from_path+0xed/0x5e0 [ 204.562220][ T9958] ? __sanitizer_cov_trace_pc+0x4/0x60 [ 204.567682][ T9958] tomoyo_path_number_perm+0x251/0x6b0 [ 204.573140][ T9958] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 204.578594][ T9958] ? ksys_write+0x1d4/0x260 [ 204.583127][ T9958] security_file_ioctl+0x6c/0xa0 [ 204.588067][ T9958] __se_sys_ioctl+0x48/0x170 [ 204.592651][ T9958] do_syscall_64+0x4c/0xa0 [ 204.597058][ T9958] ? clear_bhb_loop+0x30/0x80 [ 204.601751][ T9958] ? clear_bhb_loop+0x30/0x80 [ 204.606422][ T9958] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 204.612303][ T9958] RIP: 0033:0x7f336ff600d9 [ 204.616710][ T9958] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 204.636342][ T9958] RSP: 002b:00007f336e1b8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 204.644753][ T9958] RAX: ffffffffffffffda RBX: 00007f33701e7fa0 RCX: 00007f336ff600d9 [ 204.652733][ T9958] RDX: 0000200000000040 RSI: 0000000000008953 RDI: 000000000000000d [ 204.660697][ T9958] RBP: 00007f336e1b8090 R08: 0000000000000000 R09: 0000000000000000 [ 204.668657][ T9958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 204.676618][ T9958] R13: 00007f33701e8038 R14: 00007f33701e7fa0 R15: 00007ffd817ca0f8 [ 204.684594][ T9958] [ 204.701193][ T9961] __nla_validate_parse: 4 callbacks suppressed [ 204.701238][ T9961] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2413'. [ 204.732637][ T9958] ERROR: Out of memory at tomoyo_realpath_from_path. [ 205.085423][ T9982] netlink: 'syz.4.2424': attribute type 39 has an invalid length. [ 205.251986][ T9992] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.2427'. [ 205.286418][ T9994] FAULT_INJECTION: forcing a failure. [ 205.286418][ T9994] name failslab, interval 1, probability 0, space 0, times 0 [ 205.299449][ T9994] CPU: 0 PID: 9994 Comm: syz.1.2429 Not tainted syzkaller #0 [ 205.306853][ T9994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 205.316919][ T9994] Call Trace: [ 205.320221][ T9994] [ 205.323168][ T9994] dump_stack_lvl+0x188/0x250 [ 205.327875][ T9994] ? show_regs_print_info+0x20/0x20 [ 205.333095][ T9994] ? load_image+0x410/0x410 [ 205.337641][ T9994] should_fail+0x383/0x4b0 [ 205.342078][ T9994] should_failslab+0x5/0x20 [ 205.346593][ T9994] slab_pre_alloc_hook+0x51/0xc0 [ 205.351550][ T9994] ? radix_tree_node_alloc+0x7e/0x3a0 [ 205.356938][ T9994] kmem_cache_alloc+0x3d/0x280 [ 205.361722][ T9994] radix_tree_node_alloc+0x7e/0x3a0 [ 205.366951][ T9994] idr_get_free+0x28b/0xa10 [ 205.371486][ T9994] idr_alloc_cyclic+0x286/0x610 [ 205.376361][ T9994] ? idr_alloc+0x2e0/0x2e0 [ 205.380794][ T9994] ? do_raw_spin_lock+0x128/0x2f0 [ 205.386190][ T9994] ? __radix_tree_preload+0x3cf/0x450 [ 205.391577][ T9994] ? bpf_map_alloc_id+0x2e/0x180 [ 205.396540][ T9994] bpf_map_alloc_id+0x4d/0x180 [ 205.401322][ T9994] map_create+0x19db/0x2330 [ 205.405854][ T9994] ? bpf_lsm_bpf+0x5/0x10 [ 205.410204][ T9994] __sys_bpf+0x30a/0x6f0 [ 205.414473][ T9994] ? bpf_link_show_fdinfo+0x380/0x380 [ 205.419889][ T9994] __x64_sys_bpf+0x78/0x90 [ 205.424363][ T9994] do_syscall_64+0x4c/0xa0 [ 205.428795][ T9994] ? clear_bhb_loop+0x30/0x80 [ 205.433494][ T9994] ? clear_bhb_loop+0x30/0x80 [ 205.438194][ T9994] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 205.444103][ T9994] RIP: 0033:0x7f336ff600d9 [ 205.448536][ T9994] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 205.468154][ T9994] RSP: 002b:00007f336e1b8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 205.476587][ T9994] RAX: ffffffffffffffda RBX: 00007f33701e7fa0 RCX: 00007f336ff600d9 [ 205.484575][ T9994] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 0000000000000000 [ 205.492566][ T9994] RBP: 00007f336e1b8090 R08: 0000000000000000 R09: 0000000000000000 [ 205.500560][ T9994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 205.508545][ T9994] R13: 00007f33701e8038 R14: 00007f33701e7fa0 R15: 00007ffd817ca0f8 [ 205.516553][ T9994] [ 205.645635][ T9999] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2431'. [ 205.904984][T10017] netlink: 'syz.4.2438': attribute type 39 has an invalid length. [ 206.230848][T10035] netlink: 'syz.3.2445': attribute type 3 has an invalid length. [ 206.260098][T10035] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2445'. [ 206.281294][T10039] netlink: 'syz.3.2445': attribute type 3 has an invalid length. [ 206.347391][T10039] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2445'. [ 206.610593][T10051] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.2450'. [ 206.625657][T10050] netlink: 'syz.3.2452': attribute type 39 has an invalid length. [ 207.260667][T10077] netlink: 'syz.2.2462': attribute type 3 has an invalid length. [ 207.341777][T10077] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2462'. [ 207.344753][T10080] netlink: 'syz.2.2462': attribute type 3 has an invalid length. [ 207.366437][T10080] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2462'. [ 207.756477][T10101] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2471'. [ 207.929083][T10107] delete_channel: no stack [ 207.976835][T10114] syz.4.2476 uses obsolete (PF_INET,SOCK_PACKET) [ 208.264557][T10120] netlink: 'syz.0.2478': attribute type 3 has an invalid length. [ 208.290083][T10120] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2478'. [ 208.335419][T10125] netlink: 'syz.0.2478': attribute type 3 has an invalid length. [ 208.655565][T10132] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 208.684232][T10132] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 209.170844][T10157] netlink: 'syz.2.2494': attribute type 3 has an invalid length. [ 209.943199][T10189] __nla_validate_parse: 9 callbacks suppressed [ 209.943219][T10189] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.2505'. [ 210.144506][T10197] validate_nla: 2 callbacks suppressed [ 210.144530][T10197] netlink: 'syz.4.2512': attribute type 3 has an invalid length. [ 210.179923][T10197] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2512'. [ 210.220283][T10202] netlink: 'syz.4.2512': attribute type 3 has an invalid length. [ 210.234136][T10198] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2510'. [ 210.252739][T10202] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2512'. [ 210.510133][T10211] netlink: 'syz.3.2516': attribute type 3 has an invalid length. [ 210.520836][T10211] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2516'. [ 210.584768][T10211] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2516'. [ 211.030503][T10224] netlink: 'syz.2.2524': attribute type 39 has an invalid length. [ 211.104574][T10228] netlink: 'syz.3.2525': attribute type 39 has an invalid length. [ 211.141752][T10230] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2526'. [ 211.215776][T10238] netlink: 'syz.1.2527': attribute type 3 has an invalid length. [ 211.256276][T10238] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2527'. [ 211.291822][T10240] netlink: 'syz.1.2527': attribute type 3 has an invalid length. [ 211.325281][T10240] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2527'. [ 212.112058][T10253] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.2533'. [ 212.424608][T10275] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 212.453801][T10275] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 212.488145][T10278] netlink: 'syz.2.2544': attribute type 3 has an invalid length. [ 212.497041][T10272] netlink: 'syz.1.2539': attribute type 39 has an invalid length. [ 213.262356][T10286] netlink: 'syz.2.2547': attribute type 3 has an invalid length. [ 215.707178][T10424] validate_nla: 7 callbacks suppressed [ 215.707195][T10424] netlink: 'syz.1.2586': attribute type 3 has an invalid length. [ 215.820816][T10430] netlink: 'syz.3.2587': attribute type 39 has an invalid length. [ 216.217010][T10444] netlink: 'syz.0.2589': attribute type 39 has an invalid length. [ 216.257131][T10424] __nla_validate_parse: 13 callbacks suppressed [ 216.257151][T10424] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2586'. [ 216.381148][T10416] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2586'. [ 216.522721][T10465] FAULT_INJECTION: forcing a failure. [ 216.522721][T10465] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 216.555160][T10465] CPU: 0 PID: 10465 Comm: syz.2.2594 Not tainted syzkaller #0 [ 216.562674][T10465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 216.572727][T10465] Call Trace: [ 216.575998][T10465] [ 216.578918][T10465] dump_stack_lvl+0x188/0x250 [ 216.583600][T10465] ? show_regs_print_info+0x20/0x20 [ 216.588811][T10465] ? load_image+0x410/0x410 [ 216.593307][T10465] ? __lock_acquire+0x7b50/0x7b50 [ 216.598322][T10465] ? do_user_addr_fault+0x69f/0xc90 [ 216.603520][T10465] should_fail+0x383/0x4b0 [ 216.607961][T10465] prepare_alloc_pages+0x1e3/0x5b0 [ 216.613072][T10465] __alloc_pages+0x11b/0x480 [ 216.617654][T10465] ? copy_page_from_iter+0x3b1/0x760 [ 216.622927][T10465] ? zone_statistics+0x170/0x170 [ 216.627858][T10465] ? copy_user_enhanced_fast_string+0xe/0x40 [ 216.633826][T10465] ? copy_page_from_iter+0x499/0x760 [ 216.639100][T10465] ? alloc_pages+0x452/0x560 [ 216.643681][T10465] pipe_write+0x5cd/0x1b40 [ 216.648092][T10465] ? pipe_write+0x191/0x1b40 [ 216.652683][T10465] ? pipe_read+0x12d0/0x12d0 [ 216.657259][T10465] ? end_current_label_crit_section+0x14b/0x170 [ 216.663491][T10465] ? memset+0x1e/0x40 [ 216.667461][T10465] ? iov_iter_init+0xb4/0x170 [ 216.672128][T10465] vfs_write+0x748/0xd70 [ 216.676369][T10465] ? file_end_write+0x250/0x250 [ 216.681213][T10465] ? __fget_files+0x402/0x470 [ 216.685925][T10465] ? __fdget_pos+0x1e2/0x370 [ 216.690516][T10465] ? ksys_write+0x70/0x260 [ 216.694925][T10465] ksys_write+0x153/0x260 [ 216.699256][T10465] ? __ia32_sys_read+0x80/0x80 [ 216.704017][T10465] do_syscall_64+0x4c/0xa0 [ 216.708421][T10465] ? clear_bhb_loop+0x30/0x80 [ 216.713087][T10465] ? clear_bhb_loop+0x30/0x80 [ 216.717760][T10465] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 216.723643][T10465] RIP: 0033:0x7f44616100d9 [ 216.728048][T10465] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 216.747644][T10465] RSP: 002b:00007f445f868028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 216.756051][T10465] RAX: ffffffffffffffda RBX: 00007f4461897fa0 RCX: 00007f44616100d9 [ 216.764042][T10465] RDX: 000000000000cfe8 RSI: 00002000000001c0 RDI: 0000000000000000 [ 216.772024][T10465] RBP: 00007f445f868090 R08: 0000000000000000 R09: 0000000000000000 [ 216.779986][T10465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 216.788515][T10465] R13: 00007f4461898038 R14: 00007f4461897fa0 R15: 00007ffdcc4367a8 [ 216.796507][T10465] [ 217.245179][T10480] Ÿë: port 1(gretap0) entered blocking state [ 217.256407][T10480] Ÿë: port 1(gretap0) entered disabled state [ 217.310705][T10480] device gretap0 entered promiscuous mode [ 217.412158][T10484] Ÿë: port 2(veth0_to_team) entered blocking state [ 217.444855][T10484] Ÿë: port 2(veth0_to_team) entered disabled state [ 217.452837][T10484] device veth0_to_team entered promiscuous mode [ 217.461425][T10487] netlink: 'syz.3.2603': attribute type 39 has an invalid length. [ 217.613717][T10504] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.2607'. [ 217.694170][T10505] netlink: 'syz.0.2606': attribute type 1 has an invalid length. [ 217.756349][T10505] netlink: 'syz.0.2606': attribute type 4 has an invalid length. [ 217.803841][T10505] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.2606'. [ 217.901393][T10512] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.2612'. [ 218.072399][T10523] netlink: 'syz.0.2617': attribute type 39 has an invalid length. [ 218.488892][T10548] netlink: 'syz.4.2628': attribute type 39 has an invalid length. [ 218.864109][T10574] IPv6: Can't replace route, no match found [ 218.942575][T10579] tap0: tun_chr_ioctl cmd 35111 [ 218.949679][T10580] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.2639'. [ 219.117593][T10583] netlink: 'syz.1.2642': attribute type 39 has an invalid length. [ 219.391426][T10605] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.2649'. [ 219.714837][T10621] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.2655'. [ 219.777718][T10619] netlink: 'syz.3.2657': attribute type 39 has an invalid length. [ 219.935615][T10634] FAULT_INJECTION: forcing a failure. [ 219.935615][T10634] name failslab, interval 1, probability 0, space 0, times 0 [ 219.962940][T10634] CPU: 0 PID: 10634 Comm: syz.4.2663 Not tainted syzkaller #0 [ 219.970452][T10634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 219.980524][T10634] Call Trace: [ 219.983822][T10634] [ 219.986763][T10634] dump_stack_lvl+0x188/0x250 [ 219.991463][T10634] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 219.997641][T10634] ? show_regs_print_info+0x20/0x20 [ 220.002863][T10634] ? load_image+0x410/0x410 [ 220.007380][T10634] ? _printk+0xd/0x130 [ 220.011459][T10634] should_fail+0x383/0x4b0 [ 220.015890][T10634] should_failslab+0x5/0x20 [ 220.020407][T10634] slab_pre_alloc_hook+0x51/0xc0 [ 220.025364][T10634] __kmalloc_node_track_caller+0x68/0x3a0 [ 220.031097][T10634] ? netlink_dump+0x1cc/0xdd0 [ 220.035920][T10634] ? __alloc_skb+0xf4/0x750 [ 220.040442][T10634] ? netlink_dump+0x1cc/0xdd0 [ 220.045144][T10634] __alloc_skb+0x22c/0x750 [ 220.049667][T10634] netlink_dump+0x1cc/0xdd0 [ 220.054196][T10634] ? __netlink_dump_start+0xf5/0x720 [ 220.059512][T10634] ? rcu_lock_release+0x5/0x20 [ 220.064307][T10634] ? netlink_lookup+0x1d0/0x1d0 [ 220.069189][T10634] __netlink_dump_start+0x4e4/0x720 [ 220.074502][T10634] xsk_diag_handler_dump+0x197/0x230 [ 220.079808][T10634] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 220.086002][T10634] ? xp_dma_sync_for_device_slow+0x50/0x50 [ 220.091821][T10634] ? xsk_diag_handler_dump+0x230/0x230 [ 220.097300][T10634] ? xp_dma_sync_for_device_slow+0x50/0x50 [ 220.103115][T10634] sock_diag_rcv_msg+0x15c/0x3e0 [ 220.108062][T10634] netlink_rcv_skb+0x1e9/0x430 [ 220.112834][T10634] ? sock_diag_bind+0xa0/0xa0 [ 220.117692][T10634] ? netlink_ack+0xb10/0xb10 [ 220.122301][T10634] sock_diag_rcv+0x26/0x40 [ 220.126719][T10634] netlink_unicast+0x78f/0x940 [ 220.131541][T10634] netlink_sendmsg+0x8ba/0xbe0 [ 220.136317][T10634] ? netlink_getsockopt+0x570/0x570 [ 220.141537][T10634] ? netlink_getsockopt+0x570/0x570 [ 220.146735][T10634] ____sys_sendmsg+0x5be/0x8f0 [ 220.151502][T10634] ? __sys_sendmsg_sock+0x30/0x30 [ 220.156553][T10634] ? import_iovec+0x6f/0xa0 [ 220.161060][T10634] ___sys_sendmsg+0x236/0x2e0 [ 220.165838][T10634] ? __sys_sendmsg+0x290/0x290 [ 220.170642][T10634] __se_sys_sendmsg+0x1b7/0x2a0 [ 220.175496][T10634] ? __x64_sys_sendmsg+0x80/0x80 [ 220.180434][T10634] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 220.186420][T10634] ? trace_sys_enter+0x1f/0x80 [ 220.191185][T10634] do_syscall_64+0x4c/0xa0 [ 220.195597][T10634] ? clear_bhb_loop+0x30/0x80 [ 220.200267][T10634] ? clear_bhb_loop+0x30/0x80 [ 220.204933][T10634] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 220.210819][T10634] RIP: 0033:0x7fa0a29b60d9 [ 220.215351][T10634] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 220.234961][T10634] RSP: 002b:00007fa0a0c0e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 220.243380][T10634] RAX: ffffffffffffffda RBX: 00007fa0a2c3dfa0 RCX: 00007fa0a29b60d9 [ 220.251351][T10634] RDX: 0000000000000010 RSI: 0000200000000040 RDI: 0000000000000007 [ 220.259321][T10634] RBP: 00007fa0a0c0e090 R08: 0000000000000000 R09: 0000000000000000 [ 220.267291][T10634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 220.275269][T10634] R13: 00007fa0a2c3e038 R14: 00007fa0a2c3dfa0 R15: 00007ffd85752608 [ 220.283277][T10634] [ 220.436151][T10642] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2666'. [ 220.714485][T10658] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.2674'. [ 221.484549][T10682] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.2681'. [ 221.611128][T10691] sctp: [Deprecated]: syz.2.2684 (pid 10691) Use of int in maxseg socket option. [ 221.611128][T10691] Use struct sctp_assoc_value instead [ 221.664290][T10696] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.2683'. [ 221.820914][T10703] validate_nla: 3 callbacks suppressed [ 221.820940][T10703] netlink: 'syz.4.2688': attribute type 10 has an invalid length. [ 221.836274][T10703] netlink: 'syz.4.2688': attribute type 10 has an invalid length. [ 221.868325][T10705] netlink: 'syz.0.2687': attribute type 39 has an invalid length. [ 221.931091][T10708] netlink: 'syz.4.2688': attribute type 21 has an invalid length. [ 221.939278][T10708] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2688'. [ 222.119113][T10719] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2694'. [ 222.327430][T10734] netlink: 'syz.2.2699': attribute type 29 has an invalid length. [ 222.343721][T10734] netlink: 'syz.2.2699': attribute type 29 has an invalid length. [ 222.354774][T10734] netlink: 'syz.2.2699': attribute type 29 has an invalid length. [ 222.370076][T10734] netlink: 'syz.2.2699': attribute type 29 has an invalid length. [ 222.386672][T10734] netlink: 'syz.2.2699': attribute type 29 has an invalid length. [ 222.414755][T10736] netlink: 'syz.3.2700': attribute type 39 has an invalid length. [ 222.718166][T10747] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2706'. [ 223.021467][T10771] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.2711'. [ 223.248862][T10778] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2716'. [ 223.294281][T10777] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2717'. [ 223.315065][T10777] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2717'. [ 223.337261][T10780] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2718'. [ 223.925506][T10806] FAULT_INJECTION: forcing a failure. [ 223.925506][T10806] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 223.954829][T10809] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 223.964359][T10806] CPU: 0 PID: 10806 Comm: syz.3.2730 Not tainted syzkaller #0 [ 223.980817][T10806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 223.990878][T10806] Call Trace: [ 223.994160][T10806] [ 223.997084][T10806] dump_stack_lvl+0x188/0x250 [ 224.001762][T10806] ? show_regs_print_info+0x20/0x20 [ 224.006954][T10806] ? load_image+0x410/0x410 [ 224.011452][T10806] ? __lock_acquire+0x7b50/0x7b50 [ 224.016473][T10806] should_fail+0x383/0x4b0 [ 224.020887][T10806] _copy_from_user+0x2e/0x170 [ 224.025557][T10806] get_user_ifreq+0x67/0x170 [ 224.030142][T10806] sock_ioctl+0x61f/0x700 [ 224.034462][T10806] ? sock_poll+0x420/0x420 [ 224.038876][T10806] ? bpf_lsm_file_ioctl+0x5/0x10 [ 224.043799][T10806] ? security_file_ioctl+0x7c/0xa0 [ 224.048899][T10806] ? sock_poll+0x420/0x420 [ 224.053304][T10806] __se_sys_ioctl+0xfa/0x170 [ 224.057884][T10806] do_syscall_64+0x4c/0xa0 [ 224.062292][T10806] ? clear_bhb_loop+0x30/0x80 [ 224.066957][T10806] ? clear_bhb_loop+0x30/0x80 [ 224.071622][T10806] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 224.077504][T10806] RIP: 0033:0x7fd8a96870d9 [ 224.081912][T10806] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 224.101516][T10806] RSP: 002b:00007fd8a78df028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 224.109922][T10806] RAX: ffffffffffffffda RBX: 00007fd8a990efa0 RCX: 00007fd8a96870d9 [ 224.117884][T10806] RDX: 0000200000000080 RSI: 00000000000089f1 RDI: 0000000000000007 [ 224.125847][T10806] RBP: 00007fd8a78df090 R08: 0000000000000000 R09: 0000000000000000 [ 224.133897][T10806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 224.141856][T10806] R13: 00007fd8a990f038 R14: 00007fd8a990efa0 R15: 00007ffe106b01d8 [ 224.149833][T10806] [ 226.523760][T10895] __nla_validate_parse: 20 callbacks suppressed [ 226.523778][T10895] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2766'. [ 226.625336][T10894] netlink: 184112 bytes leftover after parsing attributes in process `syz.1.2764'. [ 226.854793][T10895] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2766'. [ 226.927403][T10892] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2765'. [ 227.043199][T10892] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 227.070302][T10892] CPU: 0 PID: 10892 Comm: syz.3.2765 Not tainted syzkaller #0 [ 227.077814][T10892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 227.087878][T10892] Call Trace: [ 227.091172][T10892] [ 227.094118][T10892] dump_stack_lvl+0x188/0x250 [ 227.098826][T10892] ? show_regs_print_info+0x20/0x20 [ 227.104050][T10892] ? load_image+0x410/0x410 [ 227.108614][T10892] sysfs_warn_dup+0x8a/0xa0 [ 227.113136][T10892] sysfs_do_create_link_sd+0xc0/0x110 [ 227.118523][T10892] device_add+0x83b/0x1050 [ 227.122993][T10892] wiphy_register+0x1e74/0x2c40 [ 227.127887][T10892] ? cfg80211_event_work+0x40/0x40 [ 227.133034][T10892] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 227.139150][T10892] ieee80211_register_hw+0x2a03/0x3a60 [ 227.144635][T10892] ? ieee80211_register_hw+0xae1/0x3a60 [ 227.150213][T10892] ? ieee80211_tasklet_handler+0x20/0x20 [ 227.155872][T10892] ? rcu_is_watching+0x11/0xa0 [ 227.160656][T10892] ? hrtimer_init+0x10c/0x220 [ 227.165355][T10892] mac80211_hwsim_new_radio+0x209d/0x4050 [ 227.171116][T10892] hwsim_new_radio_nl+0xa7d/0xc50 [ 227.176182][T10892] genl_rcv_msg+0xd0b/0xfa0 [ 227.180722][T10892] ? genl_bind+0x370/0x370 [ 227.185154][T10892] ? _raw_spin_unlock_irqrestore+0xbc/0x120 [ 227.191089][T10892] ? verify_lock_unused+0x140/0x140 [ 227.196328][T10892] ? perf_trace_lock_acquire+0xed/0x3f0 [ 227.201911][T10892] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 227.208567][T10892] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 227.214939][T10892] netlink_rcv_skb+0x1e9/0x430 [ 227.219725][T10892] ? genl_bind+0x370/0x370 [ 227.224175][T10892] ? netlink_ack+0xb10/0xb10 [ 227.228809][T10892] ? down_read+0x1aa/0x2e0 [ 227.233248][T10892] genl_rcv+0x24/0x40 [ 227.237244][T10892] netlink_unicast+0x78f/0x940 [ 227.242043][T10892] netlink_sendmsg+0x8ba/0xbe0 [ 227.246837][T10892] ? netlink_getsockopt+0x570/0x570 [ 227.252048][T10892] ? aa_sock_msg_perm+0x94/0x150 [ 227.256998][T10892] ? apparmor_socket_sendmsg+0x88/0x230 [ 227.262552][T10892] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 227.267863][T10892] ? security_socket_sendmsg+0x7c/0xa0 [ 227.273336][T10892] ? netlink_getsockopt+0x570/0x570 [ 227.278551][T10892] ____sys_sendmsg+0x5be/0x8f0 [ 227.283340][T10892] ? __sys_sendmsg_sock+0x30/0x30 [ 227.288407][T10892] ? import_iovec+0x6f/0xa0 [ 227.292928][T10892] ___sys_sendmsg+0x236/0x2e0 [ 227.297627][T10892] ? __sys_sendmsg+0x290/0x290 [ 227.302457][T10892] __se_sys_sendmsg+0x1b7/0x2a0 [ 227.307326][T10892] ? __x64_sys_sendmsg+0x80/0x80 [ 227.312298][T10892] ? syscall_enter_from_user_mode+0x2a/0x70 [ 227.318213][T10892] do_syscall_64+0x4c/0xa0 [ 227.322637][T10892] ? clear_bhb_loop+0x30/0x80 [ 227.327327][T10892] ? clear_bhb_loop+0x30/0x80 [ 227.332032][T10892] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 227.337937][T10892] RIP: 0033:0x7fd8a96870d9 [ 227.342385][T10892] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 227.362013][T10892] RSP: 002b:00007fd8a78df028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 227.370429][T10892] RAX: ffffffffffffffda RBX: 00007fd8a990efa0 RCX: 00007fd8a96870d9 [ 227.378434][T10892] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 227.386402][T10892] RBP: 00007fd8a971e024 R08: 0000000000000000 R09: 0000000000000000 [ 227.394385][T10892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 227.402376][T10892] R13: 00007fd8a990f038 R14: 00007fd8a990efa0 R15: 00007ffe106b01d8 [ 227.410380][T10892] [ 227.487306][T10909] validate_nla: 11 callbacks suppressed [ 227.487348][T10909] netlink: 'syz.2.2770': attribute type 39 has an invalid length. [ 227.572312][T10912] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2771'. [ 227.869529][T10901] chnl_net:caif_netlink_parms(): no params data found [ 227.974544][T10932] netlink: 'syz.3.2778': attribute type 3 has an invalid length. [ 227.984845][T10932] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2778'. [ 228.013842][T10442] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.096950][T10934] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2778'. [ 228.224440][T10442] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.263872][T10901] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.295346][T10901] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.311583][T10901] device bridge_slave_0 entered promiscuous mode [ 228.329465][T10901] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.336826][T10901] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.345354][T10901] device bridge_slave_1 entered promiscuous mode [ 228.363624][T10442] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.435399][T10901] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 228.449209][T10947] netlink: 'syz.1.2783': attribute type 39 has an invalid length. [ 228.475147][T10901] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 228.566061][T10949] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2784'. [ 228.596778][T10901] team0: Port device team_slave_0 added [ 228.625000][T10901] team0: Port device team_slave_1 added [ 228.750913][T10901] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 228.762114][T10901] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.832019][T10901] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 228.905468][T10961] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2789'. [ 228.925931][T10901] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 228.938686][T10901] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.997844][T10965] netlink: 'syz.1.2791': attribute type 3 has an invalid length. [ 229.010279][T10963] netlink: 399 bytes leftover after parsing attributes in process `syz.0.2790'. [ 229.016723][T10901] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 229.196303][ T4258] Bluetooth: hci5: command 0x0409 tx timeout [ 229.369953][T10901] device hsr_slave_0 entered promiscuous mode [ 229.394224][T10901] device hsr_slave_1 entered promiscuous mode [ 229.404713][T10901] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 229.438830][T10901] Cannot create hsr debugfs directory [ 229.464778][T10974] netlink: 'syz.1.2794': attribute type 39 has an invalid length. [ 229.752589][T10990] netlink: 'syz.1.2798': attribute type 9 has an invalid length. [ 230.245716][T11007] FAULT_INJECTION: forcing a failure. [ 230.245716][T11007] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 230.267579][T10442] device erspan0 left promiscuous mode [ 230.286878][T10442] ¥: port 1(erspan0) entered disabled state [ 230.392395][T11007] CPU: 1 PID: 11007 Comm: syz.3.2801 Not tainted syzkaller #0 [ 230.399910][T11007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 230.410177][T11007] Call Trace: [ 230.413489][T11007] [ 230.416432][T11007] dump_stack_lvl+0x188/0x250 [ 230.421137][T11007] ? show_regs_print_info+0x20/0x20 [ 230.426367][T11007] ? load_image+0x410/0x410 [ 230.430894][T11007] ? __lock_acquire+0x7b50/0x7b50 [ 230.435937][T11007] ? perf_trace_lock_acquire+0xed/0x3f0 [ 230.441509][T11007] should_fail+0x383/0x4b0 [ 230.445947][T11007] strncpy_from_user+0x32/0x350 [ 230.450818][T11007] bpf_prog_load+0x1fd/0x14e0 [ 230.455541][T11007] ? map_freeze+0x360/0x360 [ 230.460073][T11007] ? __might_fault+0xb7/0x110 [ 230.464809][T11007] ? __might_fault+0xb3/0x110 [ 230.469515][T11007] ? bpf_lsm_bpf+0x5/0x10 [ 230.473862][T11007] ? security_bpf+0x7a/0xa0 [ 230.478386][T11007] __sys_bpf+0x532/0x6f0 [ 230.482655][T11007] ? bpf_link_show_fdinfo+0x380/0x380 [ 230.488053][T11007] ? rcu_nmi_exit+0x6f/0xf0 [ 230.492597][T11007] __x64_sys_bpf+0x78/0x90 [ 230.497148][T11007] do_syscall_64+0x4c/0xa0 [ 230.501590][T11007] ? clear_bhb_loop+0x30/0x80 [ 230.506379][T11007] ? clear_bhb_loop+0x30/0x80 [ 230.511079][T11007] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 230.517031][T11007] RIP: 0033:0x7fd8a96870d9 [ 230.521459][T11007] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 230.541071][T11007] RSP: 002b:00007fd8a78be028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 230.549486][T11007] RAX: ffffffffffffffda RBX: 00007fd8a990f090 RCX: 00007fd8a96870d9 [ 230.557453][T11007] RDX: 0000000000000090 RSI: 0000200000000880 RDI: 0000000000000005 [ 230.565420][T11007] RBP: 00007fd8a78be090 R08: 0000000000000000 R09: 0000000000000000 [ 230.573383][T11007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 230.581346][T11007] R13: 00007fd8a990f128 R14: 00007fd8a990f090 R15: 00007ffe106b01d8 [ 230.589607][T11007] [ 230.643395][T11019] netlink: 'syz.2.2804': attribute type 3 has an invalid length. [ 231.276223][ T4258] Bluetooth: hci5: command 0x041b tx timeout [ 231.432763][T11034] netlink: 'syz.0.2807': attribute type 39 has an invalid length. [ 231.653234][T11045] __nla_validate_parse: 6 callbacks suppressed [ 231.653270][T11045] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.2811'. [ 231.684976][T11048] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2812'. [ 231.704932][T11045] netlink: 'syz.0.2811': attribute type 9 has an invalid length. [ 231.770282][T11045] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2811'. [ 232.032874][T11053] netlink: 64535 bytes leftover after parsing attributes in process `syz.2.2813'. [ 232.144934][T11054] netlink: 'syz.0.2811': attribute type 9 has an invalid length. [ 232.163171][T11054] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2811'. [ 232.206370][T10901] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 232.265853][T10901] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 232.310049][T10901] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 232.347182][T10901] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 232.564313][T10901] 8021q: adding VLAN 0 to HW filter on device bond0 [ 232.591964][T11075] netlink: 'syz.0.2820': attribute type 39 has an invalid length. [ 232.641966][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 232.668012][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 232.694270][T10901] 8021q: adding VLAN 0 to HW filter on device team0 [ 232.773948][T10446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 232.791407][T10446] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 232.847945][T10446] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.855049][T10446] bridge0: port 1(bridge_slave_0) entered forwarding state [ 232.896490][T10446] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 232.987219][T10437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 233.004112][T10437] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 233.032340][T10437] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.039537][T10437] bridge0: port 2(bridge_slave_1) entered forwarding state [ 233.126117][T10437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 233.166759][T10437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 233.258792][T10435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 233.324071][T10435] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 233.341989][T11106] netlink: 399 bytes leftover after parsing attributes in process `syz.2.2826'. [ 233.356418][ T4199] Bluetooth: hci5: command 0x040f tx timeout [ 233.377503][T10435] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 233.446970][T10435] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 233.478320][T10435] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 233.556700][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 233.585306][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 233.621336][T10901] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 233.659067][T10901] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 233.676921][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 233.685481][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 233.910845][T11129] netlink: 'syz.2.2832': attribute type 39 has an invalid length. [ 234.298423][T10435] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 234.311992][T10435] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 234.420233][T10901] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 234.492557][T11142] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.2833'. [ 234.610478][T11148] netlink: 'syz.3.2833': attribute type 9 has an invalid length. [ 234.692316][T11148] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2833'. [ 234.940076][T11160] netlink: 399 bytes leftover after parsing attributes in process `syz.1.2840'. [ 235.154214][T11142] netlink: 'syz.3.2833': attribute type 9 has an invalid length. [ 235.170459][T11142] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2833'. [ 235.389416][T10429] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 235.425270][T10429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 235.436177][ T4229] Bluetooth: hci5: command 0x0419 tx timeout [ 235.462562][T11177] netlink: 'syz.2.2847': attribute type 3 has an invalid length. [ 235.496720][T10442] device hsr_slave_0 left promiscuous mode [ 235.509266][T10442] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 235.541828][T10442] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 235.568488][T10442] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 235.586163][T10442] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 235.599089][T10442] device bridge_slave_1 left promiscuous mode [ 235.618895][T10442] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.648866][T10442] device bridge_slave_0 left promiscuous mode [ 235.655184][T10442] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.703515][T10442] device veth1_macvtap left promiscuous mode [ 235.717710][T10442] device veth0_macvtap left promiscuous mode [ 235.723841][T10442] device veth1_vlan left promiscuous mode [ 235.757694][T10442] device veth0_vlan left promiscuous mode [ 236.295080][T10442] team0 (unregistering): Port device team_slave_1 removed [ 236.323050][T10442] team0 (unregistering): Port device team_slave_0 removed [ 236.487797][T10429] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 236.536746][T10429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 236.552231][T10429] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 236.560550][T10429] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 236.576449][T10901] device veth0_vlan entered promiscuous mode [ 236.614498][T10901] device veth1_vlan entered promiscuous mode [ 236.699002][T10437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 236.716370][T10437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 236.743330][T10901] device veth0_macvtap entered promiscuous mode [ 236.803955][T11205] netlink: 'syz.0.2863': attribute type 3 has an invalid length. [ 236.809389][T10901] device veth1_macvtap entered promiscuous mode [ 236.841896][T11205] __nla_validate_parse: 5 callbacks suppressed [ 236.841918][T11205] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2863'. [ 236.879628][T10901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.881739][T11206] netlink: 'syz.0.2863': attribute type 3 has an invalid length. [ 236.890966][T10901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.909414][T10901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.922870][T10901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.923103][T11206] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2863'. [ 236.934384][T10901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.958002][T10901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.968966][T10901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.980502][T10901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.012044][T10901] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 237.035543][T10429] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 237.047464][T10429] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 237.077201][T10429] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 237.111437][T10429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 237.141532][T10901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.163023][T10901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.175037][T10901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.189348][T10901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.200223][T10901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.211624][T10901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.246074][T10901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.281199][T10901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.298710][T10901] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 237.308989][T10437] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 237.331799][T10437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 237.355755][T11210] netlink: 399 bytes leftover after parsing attributes in process `syz.1.2857'. [ 237.379029][T10901] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.395366][T10901] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.416070][T10901] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.436068][T10901] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.709331][T11213] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.2859'. [ 237.796058][T11218] netlink: 'syz.0.2861': attribute type 3 has an invalid length. [ 237.803852][T11218] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2861'. [ 237.851162][ T1237] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.866112][ T1237] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.908292][T10435] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 238.026566][T11224] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2861'. [ 238.037200][T11213] netlink: 'syz.2.2859': attribute type 9 has an invalid length. [ 238.050806][T11213] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2859'. [ 238.135946][T11222] netlink: 64535 bytes leftover after parsing attributes in process `syz.3.2864'. [ 238.147975][T10433] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.164636][T10433] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.174733][T10435] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 238.371166][T11229] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2865'. [ 238.393766][T11227] netlink: 'syz.1.2874': attribute type 39 has an invalid length. [ 238.629382][T11223] netlink: 'syz.2.2859': attribute type 9 has an invalid length. [ 238.649553][T11242] netlink: 399 bytes leftover after parsing attributes in process `syz.4.2870'. [ 238.854044][T11250] netlink: 'syz.0.2871': attribute type 3 has an invalid length. [ 238.918891][T11252] netlink: 'syz.0.2871': attribute type 3 has an invalid length. [ 240.152819][T11278] netlink: 'syz.0.2882': attribute type 39 has an invalid length. [ 240.161104][T11260] netlink: 'syz.3.2877': attribute type 2 has an invalid length. [ 240.232886][T11278] device macvlan0 entered promiscuous mode [ 240.507645][T11291] netlink: 'syz.0.2888': attribute type 1 has an invalid length. [ 240.806680][T11304] netlink: 'syz.3.2890': attribute type 3 has an invalid length. [ 240.866451][T11267] chnl_net:caif_netlink_parms(): no params data found [ 241.119424][T11267] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.154074][T11267] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.207816][T11267] device bridge_slave_0 entered promiscuous mode [ 241.237988][T11267] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.259549][T11267] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.291711][T11267] device bridge_slave_1 entered promiscuous mode [ 241.322795][T11317] FAULT_INJECTION: forcing a failure. [ 241.322795][T11317] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 241.392316][T11267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 241.402195][T11317] CPU: 1 PID: 11317 Comm: syz.4.2897 Not tainted syzkaller #0 [ 241.409703][T11317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 241.419795][T11317] Call Trace: [ 241.423102][T11317] [ 241.426057][T11317] dump_stack_lvl+0x188/0x250 [ 241.430804][T11317] ? show_regs_print_info+0x20/0x20 [ 241.436041][T11317] ? load_image+0x410/0x410 [ 241.440601][T11317] ? __lock_acquire+0x7b50/0x7b50 [ 241.445682][T11317] should_fail+0x383/0x4b0 [ 241.450149][T11317] _copy_from_iter+0x234/0x1160 [ 241.455046][T11317] ? __lock_acquire+0x7b50/0x7b50 [ 241.460132][T11317] ? copy_mc_pipe_to_iter+0x7d0/0x7d0 [ 241.465560][T11317] ? __virt_addr_valid+0x3c6/0x470 [ 241.470706][T11317] ? __phys_addr_symbol+0x2b/0x70 [ 241.475754][T11317] ? __check_object_size+0x30c/0x410 [ 241.481076][T11317] kcm_sendmsg+0xc55/0x22b0 [ 241.485712][T11317] ? kcm_getsockopt+0x280/0x280 [ 241.490586][T11317] ? aa_sock_msg_perm+0x94/0x150 [ 241.495555][T11317] ? apparmor_socket_sendmsg+0x88/0x230 [ 241.501134][T11317] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 241.506442][T11317] ? security_socket_sendmsg+0x7c/0xa0 [ 241.511919][T11317] ? kcm_getsockopt+0x280/0x280 [ 241.516807][T11317] ____sys_sendmsg+0x5be/0x8f0 [ 241.521628][T11317] ? __sys_sendmsg_sock+0x30/0x30 [ 241.526714][T11317] ? import_iovec+0x6f/0xa0 [ 241.531267][T11317] ___sys_sendmsg+0x236/0x2e0 [ 241.535991][T11317] ? __sys_sendmsg+0x290/0x290 [ 241.540814][T11317] ? trace_event_raw_event_lock+0x250/0x250 [ 241.546830][T11317] __se_sys_sendmsg+0x1b7/0x2a0 [ 241.551720][T11317] ? __x64_sys_sendmsg+0x80/0x80 [ 241.556672][T11317] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 241.562715][T11317] ? trace_sys_enter+0x1f/0x80 [ 241.567506][T11317] do_syscall_64+0x4c/0xa0 [ 241.571940][T11317] ? clear_bhb_loop+0x30/0x80 [ 241.576630][T11317] ? clear_bhb_loop+0x30/0x80 [ 241.581329][T11317] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 241.587250][T11317] RIP: 0033:0x7fd3e3c470d9 [ 241.591689][T11317] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 241.611350][T11317] RSP: 002b:00007fd3e1e9f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 241.619796][T11317] RAX: ffffffffffffffda RBX: 00007fd3e3ecefa0 RCX: 00007fd3e3c470d9 [ 241.627787][T11317] RDX: 0000000000000000 RSI: 0000200000002080 RDI: 0000000000000003 [ 241.635780][T11317] RBP: 00007fd3e1e9f090 R08: 0000000000000000 R09: 0000000000000000 [ 241.643766][T11317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 241.651750][T11317] R13: 00007fd3e3ecf038 R14: 00007fd3e3ecefa0 R15: 00007ffd72a06508 [ 241.659785][T11317] [ 241.719257][T11316] IPv6: Can't replace route, no match found [ 241.728739][T11267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 241.762203][ T4199] Bluetooth: hci1: command 0x0409 tx timeout [ 241.767042][T11267] team0: Port device team_slave_0 added [ 241.803798][T11267] team0: Port device team_slave_1 added [ 241.866489][T11267] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 241.874808][T11267] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.902512][T11267] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 241.967222][T11267] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 241.974206][T11267] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 242.058636][T11267] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 242.201379][T11267] device hsr_slave_0 entered promiscuous mode [ 242.247405][T11267] device hsr_slave_1 entered promiscuous mode [ 242.257489][T11267] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 242.266236][T11267] Cannot create hsr debugfs directory [ 242.567301][T11350] __nla_validate_parse: 17 callbacks suppressed [ 242.567322][T11350] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.2908'. [ 242.646362][T11351] ¥: port 1(erspan0) entered blocking state [ 242.656405][T11351] ¥: port 1(erspan0) entered disabled state [ 242.693414][T11351] device erspan0 entered promiscuous mode [ 242.864759][T11267] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.953010][T11358] validate_nla: 1 callbacks suppressed [ 242.953026][T11358] netlink: 'syz.3.2912': attribute type 39 has an invalid length. [ 243.039394][T11267] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.123565][T11267] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.295831][T11367] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.303689][T11367] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.378044][T11367] device bridge_slave_1 left promiscuous mode [ 243.386610][T11367] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.406420][T11367] device bridge_slave_0 left promiscuous mode [ 243.413918][T11367] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.542239][T11267] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 243.565336][T11267] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 243.574839][T11267] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 243.601320][T11267] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 243.705707][T10442] device erspan0 left promiscuous mode [ 243.712150][T10442] ¥: port 1(erspan0) entered disabled state [ 243.796979][T10442] device gretap0 left promiscuous mode [ 243.807099][T10442] Ÿë: port 1(gretap0) entered disabled state [ 243.841159][ T4199] Bluetooth: hci1: command 0x041b tx timeout [ 243.870795][T11267] 8021q: adding VLAN 0 to HW filter on device bond0 [ 243.903322][T11378] device batadv0 entered promiscuous mode [ 243.979358][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 244.017377][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 244.055084][T11267] 8021q: adding VLAN 0 to HW filter on device team0 [ 244.084954][T10435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 244.094242][T10435] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 244.112373][T10435] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.119560][T10435] bridge0: port 1(bridge_slave_0) entered forwarding state [ 244.135490][T10435] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 244.158294][T10437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 244.195614][T10437] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 244.227625][T10437] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.234748][T10437] bridge0: port 2(bridge_slave_1) entered forwarding state [ 244.284179][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 244.293918][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 244.328039][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 244.351996][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 244.364246][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 244.387206][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 244.399263][T11396] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.2925'. [ 244.455725][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 244.471910][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 244.487678][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 244.512052][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 244.549371][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 244.578281][T11267] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 244.626427][T11399] netlink: 'syz.1.2926': attribute type 39 has an invalid length. [ 244.635678][T11399] device macvlan0 entered promiscuous mode [ 244.941323][T11417] netlink: 'syz.3.2934': attribute type 3 has an invalid length. [ 244.965199][T11417] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2934'. [ 244.989095][T10433] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 245.000702][T10433] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 245.031064][T11419] netlink: 'syz.3.2934': attribute type 3 has an invalid length. [ 245.060150][T11267] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 245.066083][T11419] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2934'. [ 245.163158][T10433] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 245.187748][T10433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 245.425345][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 245.455238][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 245.496784][T11267] device veth0_vlan entered promiscuous mode [ 245.537520][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 245.548353][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 245.611292][T11267] device veth1_vlan entered promiscuous mode [ 245.689070][T11430] netlink: 399 bytes leftover after parsing attributes in process `syz.1.2940'. [ 245.841348][T11267] device veth0_macvtap entered promiscuous mode [ 245.870304][T10435] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 245.885540][T10435] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 245.914093][T10435] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 245.916067][ T4199] Bluetooth: hci1: command 0x040f tx timeout [ 245.934024][T10435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 245.965298][T10435] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 246.026767][T11267] device veth1_macvtap entered promiscuous mode [ 246.158399][T11442] netlink: 'syz.4.2943': attribute type 39 has an invalid length. [ 246.183449][T11442] device macvlan0 entered promiscuous mode [ 246.229045][T11267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.248020][T11267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.260060][T11449] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.2946'. [ 246.269556][T11267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.296355][T11451] netlink: 'syz.3.2947': attribute type 3 has an invalid length. [ 246.301390][T11267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.304602][T11451] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2947'. [ 246.333670][T11267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.366204][T11267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.376676][T11267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.397023][T11267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.426026][T11267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.446028][T11267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.481322][T11267] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 246.531775][T10435] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 246.541965][T10435] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 246.553948][T10435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 246.587052][T11453] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2947'. [ 246.607869][T11267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.655984][T11267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.687742][T11267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.702288][T11267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.712868][T11267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.724562][T11267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.735106][T11267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.746265][T11267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.756735][T11267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.768314][T11267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.800782][T11267] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 246.810941][T10435] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 246.821612][T10435] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 246.884550][T11267] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.901864][T11267] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.913383][T11267] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.922854][T11267] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.983099][T11466] netlink: 'syz.3.2951': attribute type 3 has an invalid length. [ 246.983177][T11465] netlink: 399 bytes leftover after parsing attributes in process `syz.0.2953'. [ 247.023497][T11466] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2951'. [ 247.051621][T11467] netlink: 'syz.3.2951': attribute type 3 has an invalid length. [ 247.310561][T11469] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.340630][T11469] device bridge_slave_0 left promiscuous mode [ 247.355055][T11469] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.549507][T10435] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.592590][T10435] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.663962][T10433] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 247.745808][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.773360][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.818345][T10437] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 247.985148][T11484] FAULT_INJECTION: forcing a failure. [ 247.985148][T11484] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 248.000276][ T1337] Bluetooth: hci1: command 0x0419 tx timeout [ 248.025700][T11484] CPU: 1 PID: 11484 Comm: syz.4.2961 Not tainted syzkaller #0 [ 248.033220][T11484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 248.043283][T11484] Call Trace: [ 248.046572][T11484] [ 248.049526][T11484] dump_stack_lvl+0x188/0x250 [ 248.054235][T11484] ? show_regs_print_info+0x20/0x20 [ 248.059452][T11484] ? load_image+0x410/0x410 [ 248.063987][T11484] ? __lock_acquire+0x7b50/0x7b50 [ 248.069032][T11484] ? bpf_test_run+0x78e/0x800 [ 248.073725][T11484] should_fail+0x383/0x4b0 [ 248.078164][T11484] _copy_to_user+0x2e/0x130 [ 248.082683][T11484] bpf_test_finish+0x215/0x2f0 [ 248.087548][T11484] ? convert_skb_to___skb+0x360/0x360 [ 248.092941][T11484] ? convert_skb_to___skb+0x1ff/0x360 [ 248.098343][T11484] bpf_prog_test_run_skb+0xbc0/0x1190 [ 248.103824][T11484] ? cpu_online+0x60/0x60 [ 248.108164][T11484] bpf_prog_test_run+0x31c/0x390 [ 248.113104][T11484] __sys_bpf+0x5a5/0x6f0 [ 248.117350][T11484] ? bpf_link_show_fdinfo+0x380/0x380 [ 248.122733][T11484] __x64_sys_bpf+0x78/0x90 [ 248.127144][T11484] do_syscall_64+0x4c/0xa0 [ 248.131554][T11484] ? clear_bhb_loop+0x30/0x80 [ 248.136219][T11484] ? clear_bhb_loop+0x30/0x80 [ 248.140886][T11484] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 248.146880][T11484] RIP: 0033:0x7fd3e3c470d9 [ 248.151301][T11484] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 248.170894][T11484] RSP: 002b:00007fd3e1e9f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 248.179307][T11484] RAX: ffffffffffffffda RBX: 00007fd3e3ecefa0 RCX: 00007fd3e3c470d9 [ 248.187276][T11484] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 000000000000000a [ 248.195235][T11484] RBP: 00007fd3e1e9f090 R08: 0000000000000000 R09: 0000000000000000 [ 248.203197][T11484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 248.211158][T11484] R13: 00007fd3e3ecf038 R14: 00007fd3e3ecefa0 R15: 00007ffd72a06508 [ 248.219133][T11484] [ 248.564758][T11500] __nla_validate_parse: 1 callbacks suppressed [ 248.564774][T11500] netlink: 399 bytes leftover after parsing attributes in process `syz.3.2965'. [ 248.818423][T11503] device batadv0 entered promiscuous mode [ 248.870788][T10442] device veth0_to_team left promiscuous mode [ 248.886976][T10442] Ÿë: port 2(veth0_to_team) entered disabled state [ 248.893671][T11511] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.2968'. [ 248.951580][T10442] device hsr_slave_0 left promiscuous mode [ 248.967962][T10442] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 248.979835][T10442] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 248.999899][T10442] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 249.020871][T10442] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 250.476053][ T4258] Bluetooth: hci2: command 0x0409 tx timeout [ 251.558098][T10442] device bridge_slave_1 left promiscuous mode [ 251.564365][T10442] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.585127][T10442] device bridge_slave_0 left promiscuous mode [ 251.591445][T10442] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.621621][T10442] device veth1_macvtap left promiscuous mode [ 251.627804][T10442] device veth0_macvtap left promiscuous mode [ 251.633968][T10442] device veth1_vlan left promiscuous mode [ 251.639881][T10442] device veth0_vlan left promiscuous mode [ 251.878813][T10442] team0 (unregistering): Port device team_slave_1 removed [ 251.893409][T10442] team0 (unregistering): Port device team_slave_0 removed [ 252.216699][T11528] netlink: 'syz.4.2972': attribute type 3 has an invalid length. [ 252.224532][T11528] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2972'. [ 252.299497][T11533] netlink: 'syz.4.2972': attribute type 3 has an invalid length. [ 252.342732][T11533] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2972'. [ 252.399610][T11537] FAULT_INJECTION: forcing a failure. [ 252.399610][T11537] name failslab, interval 1, probability 0, space 0, times 0 [ 252.412567][T11537] CPU: 0 PID: 11537 Comm: syz.2.2975 Not tainted syzkaller #0 [ 252.420059][T11537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 252.430138][T11537] Call Trace: [ 252.433442][T11537] [ 252.436389][T11537] dump_stack_lvl+0x188/0x250 [ 252.441104][T11537] ? show_regs_print_info+0x20/0x20 [ 252.446335][T11537] ? load_image+0x410/0x410 [ 252.450893][T11537] ? mark_lock+0x94/0x320 [ 252.455275][T11537] should_fail+0x383/0x4b0 [ 252.459739][T11537] should_failslab+0x5/0x20 [ 252.464271][T11537] slab_pre_alloc_hook+0x51/0xc0 [ 252.469238][T11537] ? skb_clone+0x1bd/0x350 [ 252.473684][T11537] kmem_cache_alloc+0x3d/0x280 [ 252.478486][T11537] skb_clone+0x1bd/0x350 [ 252.482763][T11537] ? packet_rcv_spkt+0x10f/0x4a0 [ 252.487739][T11537] packet_rcv_spkt+0x131/0x4a0 [ 252.492531][T11537] ? packet_rcv+0x1260/0x1260 [ 252.497242][T11537] __netif_receive_skb_core+0x2a42/0x3670 [ 252.503048][T11537] ? set_rps_cpu+0x660/0x660 [ 252.507682][T11537] ? ktime_get_with_offset+0xff/0x320 [ 252.513106][T11537] ? read_lock_is_recursive+0x10/0x10 [ 252.518533][T11537] __netif_receive_skb+0x74/0x290 [ 252.523583][T11537] ? ktime_get_with_offset+0x2d7/0x320 [ 252.529084][T11537] netif_receive_skb+0x19e/0x700 [ 252.534061][T11537] ? __bpf_trace_softirq+0x10/0x10 [ 252.539222][T11537] ? netif_receive_skb_core+0x210/0x210 [ 252.544969][T11537] ? rcu_nmi_exit+0x6f/0xf0 [ 252.549537][T11537] tun_rx_batched+0x606/0x760 [ 252.554268][T11537] ? local_bh_enable+0x20/0x20 [ 252.556232][ T4229] Bluetooth: hci2: command 0x041b tx timeout [ 252.559056][T11537] ? __local_bh_enable_ip+0x136/0x1c0 [ 252.559095][T11537] ? read_lock_is_recursive+0x10/0x10 [ 252.559127][T11537] ? __local_bh_enable_ip+0x136/0x1c0 [ 252.581255][T11537] ? _local_bh_enable+0xa0/0xa0 [ 252.586174][T11537] tun_get_user+0x25bf/0x3b60 [ 252.590906][T11537] ? perf_trace_lock+0x301/0x390 [ 252.595892][T11537] ? trace_event_raw_event_lock+0x250/0x250 [ 252.601883][T11537] ? tun_ring_recv+0xc90/0xc90 [ 252.606711][T11537] ? rcu_lock_release+0x5/0x20 [ 252.611518][T11537] ? __lock_acquire+0x7b50/0x7b50 [ 252.616590][T11537] ? trace_event_raw_event_lock+0x250/0x250 [ 252.622560][T11537] tun_chr_write_iter+0x112/0x1e0 [ 252.627625][T11537] vfs_write+0x748/0xd70 [ 252.631922][T11537] ? file_end_write+0x250/0x250 [ 252.636863][T11537] ? __fget_files+0x402/0x470 [ 252.641589][T11537] ? __fdget_pos+0x1e2/0x370 [ 252.646205][T11537] ? ksys_write+0x70/0x260 [ 252.650665][T11537] ksys_write+0x153/0x260 [ 252.655036][T11537] ? __ia32_sys_read+0x80/0x80 [ 252.659854][T11537] ? lockdep_hardirqs_on+0x94/0x140 [ 252.665098][T11537] do_syscall_64+0x4c/0xa0 [ 252.669533][T11537] ? clear_bhb_loop+0x30/0x80 [ 252.674231][T11537] ? clear_bhb_loop+0x30/0x80 [ 252.678940][T11537] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 252.684860][T11537] RIP: 0033:0x7f847d8f70d9 [ 252.689325][T11537] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 252.709250][T11537] RSP: 002b:00007f847bb4f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 252.717892][T11537] RAX: ffffffffffffffda RBX: 00007f847db7efa0 RCX: 00007f847d8f70d9 [ 252.725915][T11537] RDX: 000000000000cfe8 RSI: 00002000000001c0 RDI: 00000000000000c8 [ 252.733923][T11537] RBP: 00007f847bb4f090 R08: 0000000000000000 R09: 0000000000000000 [ 252.741930][T11537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 252.749935][T11537] R13: 00007f847db7f038 R14: 00007f847db7efa0 R15: 00007ffd94dfca88 [ 252.757988][T11537] [ 252.843078][T11542] netlink: 399 bytes leftover after parsing attributes in process `syz.1.2976'. [ 252.955105][T11494] chnl_net:caif_netlink_parms(): no params data found [ 253.274021][T11494] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.284551][T11494] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.293405][T11494] device bridge_slave_0 entered promiscuous mode [ 253.335923][T11494] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.349074][T11494] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.375783][T11494] device bridge_slave_1 entered promiscuous mode [ 253.477768][T11494] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 253.843286][T11494] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 253.922021][T11494] team0: Port device team_slave_0 added [ 253.939210][T11494] team0: Port device team_slave_1 added [ 253.952058][T11565] netlink: 'syz.4.2983': attribute type 39 has an invalid length. [ 254.027185][T11494] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 254.043778][T11494] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.089866][T11569] netlink: 399 bytes leftover after parsing attributes in process `syz.4.2987'. [ 254.118580][T11494] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 254.196543][T11494] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 254.207722][T11494] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.279609][T11494] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 254.281001][T11576] netlink: 'syz.3.2988': attribute type 3 has an invalid length. [ 254.361193][T11576] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2988'. [ 254.588828][T11494] device hsr_slave_0 entered promiscuous mode [ 254.611944][T11494] device hsr_slave_1 entered promiscuous mode [ 254.636210][ T4258] Bluetooth: hci2: command 0x040f tx timeout [ 254.678402][T11494] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 254.687817][T11494] Cannot create hsr debugfs directory [ 254.707935][T11581] netlink: 'syz.3.2988': attribute type 3 has an invalid length. [ 254.750074][T11581] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2988'. [ 255.031097][T11590] netlink: 'syz.1.2996': attribute type 39 has an invalid length. [ 255.240526][T11494] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.352567][T11604] netlink: 399 bytes leftover after parsing attributes in process `syz.4.3001'. [ 255.378866][T11494] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.459163][T11494] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.600691][ T1424] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.607074][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.793467][T11494] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 255.827407][T11494] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 255.863205][T11494] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 255.884411][T11494] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 255.974402][T11620] netlink: 'syz.1.3009': attribute type 39 has an invalid length. [ 256.040582][T11622] netlink: 'syz.4.3008': attribute type 3 has an invalid length. [ 256.106068][T11622] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3008'. [ 256.109309][T11626] netlink: 'syz.4.3008': attribute type 3 has an invalid length. [ 256.156428][T11626] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3008'. [ 256.319688][T11631] netlink: 399 bytes leftover after parsing attributes in process `syz.1.3013'. [ 256.408942][T11494] 8021q: adding VLAN 0 to HW filter on device bond0 [ 256.439732][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 256.466171][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 256.477660][T11494] 8021q: adding VLAN 0 to HW filter on device team0 [ 256.504440][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 256.570805][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 256.579776][ T1237] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.587053][ T1237] bridge0: port 1(bridge_slave_0) entered forwarding state [ 256.633809][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 256.657643][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 256.687231][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 256.698032][ T1237] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.705231][ T1237] bridge0: port 2(bridge_slave_1) entered forwarding state [ 256.716057][ T4199] Bluetooth: hci2: command 0x0419 tx timeout [ 256.722657][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 256.772802][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 256.784420][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 256.826510][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 256.866820][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 256.898186][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 256.926289][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 256.946431][T10435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 256.969625][T10435] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 256.994632][T11494] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 257.017415][T11494] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 257.040907][T10435] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 257.065092][T10435] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 257.281990][T11661] netlink: 'syz.3.3022': attribute type 39 has an invalid length. [ 257.386778][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 257.404187][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 257.410528][T11669] netlink: 'syz.2.3024': attribute type 3 has an invalid length. [ 257.426995][T11669] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3024'. [ 257.444317][T11494] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 257.472130][T11669] netlink: 'syz.2.3024': attribute type 3 has an invalid length. [ 257.499887][T11669] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3024'. [ 257.561448][T11674] netlink: 399 bytes leftover after parsing attributes in process `syz.3.3026'. [ 257.572429][T10435] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 257.582111][T10435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 257.619741][T10437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 257.650874][T10437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 257.679263][T11494] device veth0_vlan entered promiscuous mode [ 257.697108][T10437] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 257.726876][T10437] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 257.769030][T11494] device veth1_vlan entered promiscuous mode [ 257.875776][T11494] device veth0_macvtap entered promiscuous mode [ 257.938671][T10429] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 257.957478][T10429] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 257.982593][T10429] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 258.015145][T10429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 258.038082][T11494] device veth1_macvtap entered promiscuous mode [ 258.052998][T11682] netlink: 'syz.3.3030': attribute type 39 has an invalid length. [ 258.124829][T11685] netlink: 'syz.1.3031': attribute type 39 has an invalid length. [ 258.172052][T10429] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 258.200968][T10429] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 258.432111][T11494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.458522][T11494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.469205][T11494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.481604][T11494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.491884][T11494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.502880][T11494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.515401][T11494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.557106][T11494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.574965][T11494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.595719][T11494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.617812][T11494] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 258.665652][T10429] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 258.682533][T10429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 258.699396][T11695] netlink: 'syz.1.3035': attribute type 39 has an invalid length. [ 258.718588][T11494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.745818][T11494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.770952][T11494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.785315][T11494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.802308][T11494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.819417][T11494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.836455][T11494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.856110][T11494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.879021][T11494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.899324][T11494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.918193][T11494] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 258.952905][T10429] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 258.993856][T10429] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 259.102200][T11494] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.137632][T11494] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.164074][T11494] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.190635][T11494] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.275689][T11701] netlink: 'syz.4.3037': attribute type 3 has an invalid length. [ 259.343330][T11701] __nla_validate_parse: 1 callbacks suppressed [ 259.343346][T11701] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3037'. [ 259.378183][T11706] netlink: 399 bytes leftover after parsing attributes in process `syz.1.3040'. [ 259.379576][T11709] netlink: 'syz.4.3037': attribute type 3 has an invalid length. [ 259.405924][T11709] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3037'. [ 259.482052][ T1237] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 259.498356][ T1237] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 259.534646][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 259.580035][T10429] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 259.597226][T11718] netlink: 'syz.1.3044': attribute type 39 has an invalid length. [ 259.606663][T10429] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 259.633911][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 259.654342][T10442] device erspan0 left promiscuous mode [ 259.661644][T10442] ¥: port 1(erspan0) entered disabled state [ 259.982216][T11728] netlink: 'syz.1.3048': attribute type 39 has an invalid length. [ 260.429925][T11738] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.2963'. [ 260.580205][T11735] ¥: port 1(erspan0) entered blocking state [ 260.606603][T11735] ¥: port 1(erspan0) entered disabled state [ 260.633053][T11735] device erspan0 entered promiscuous mode [ 260.981239][T11752] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3055'. [ 261.057114][T11757] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3055'. [ 261.341426][T11765] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3059'. [ 261.377123][T11761] device hsr_slave_1 left promiscuous mode [ 261.516610][T11764] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3059'. [ 261.752599][T11776] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.3060'. [ 261.807617][T11776] netlink: zone id is out of range [ 261.814076][T11764] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 261.847663][T11764] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 261.862988][T11764] bond0 (unregistering): Released all slaves [ 262.169062][T11753] chnl_net:caif_netlink_parms(): no params data found [ 262.281580][T11790] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.3067'. [ 262.354858][T11782] device hsr_slave_1 left promiscuous mode [ 262.429636][T11793] validate_nla: 5 callbacks suppressed [ 262.429655][T11793] netlink: 'syz.4.3068': attribute type 3 has an invalid length. [ 262.452941][T11791] ¥: port 1(erspan0) entered blocking state [ 262.471332][T11791] ¥: port 1(erspan0) entered disabled state [ 262.484852][T11794] netlink: 'syz.4.3068': attribute type 3 has an invalid length. [ 262.503765][T11791] device erspan0 entered promiscuous mode [ 262.613335][T11753] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.643060][T11753] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.655928][T11753] device bridge_slave_0 entered promiscuous mode [ 262.693094][T11753] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.700755][T11753] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.709500][T11753] device bridge_slave_1 entered promiscuous mode [ 262.777671][T11753] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 262.794706][T11753] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 262.830841][T11753] team0: Port device team_slave_0 added [ 262.858774][T11753] team0: Port device team_slave_1 added [ 262.876500][ T4229] Bluetooth: hci4: command 0x0409 tx timeout [ 262.902398][T11753] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 262.909730][T11753] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.023216][T11753] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 263.393379][T11753] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 263.406944][T11753] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.436174][ C1] ------------[ cut here ]------------ [ 263.442064][ C1] WARNING: CPU: 1 PID: 10429 at mm/maccess.c:226 copy_from_user_nofault+0x160/0x1c0 [ 263.451705][ C1] Modules linked in: [ 263.455615][ C1] CPU: 1 PID: 10429 Comm: kworker/u4:16 Not tainted syzkaller #0 [ 263.463386][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 263.473489][ C1] Workqueue: bat_events batadv_nc_worker [ 263.479166][ C1] RIP: 0010:copy_from_user_nofault+0x160/0x1c0 [ 263.485333][ C1] Code: 24 45 31 f6 31 ff 89 de e8 4d 97 d8 ff 85 db 48 c7 c0 f2 ff ff ff 49 0f 44 c6 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 d0 93 d8 ff <0f> 0b e9 1c ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ea fe [ 263.504986][ C1] RSP: 0018:ffffc90000dcfe88 EFLAGS: 00010246 [ 263.511104][ C1] RAX: ffffffff81a068e0 RBX: 0000000000000000 RCX: ffff88807e759dc0 [ 263.519110][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 263.527116][ C1] RBP: 0000000000000000 R08: ffffc90000dd02b7 R09: ffffc90000dd0284 [ 263.535093][ C1] R10: dffffc0000000000 R11: fffff520001ba057 R12: ffff88807e75b548 [ 263.543107][ C1] R13: ffffc9000139d030 R14: ffffc90000dcfee8 R15: 0000000000000000 [ 263.551113][ C1] FS: 0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 263.560080][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 263.566700][ C1] CR2: 00007f22549e37c0 CR3: 000000006185f000 CR4: 00000000003506e0 [ 263.574682][ C1] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 263.582702][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 263.590710][ C1] Call Trace: [ 263.593994][ C1] [ 263.596874][ C1] bpf_probe_read_user+0x26/0x70 [ 263.601840][ C1] bpf_prog_f2594087b0f175cc+0x32/0x440 [ 263.607437][ C1] bpf_flow_dissect+0x12b/0x3e0 [ 263.612313][ C1] __skb_flow_dissect+0x7cc/0x6180 [ 263.617516][ C1] ? mark_lock+0x94/0x320 [ 263.621861][ C1] ? __lock_acquire+0x1305/0x7b50 [ 263.626940][ C1] ? bpf_flow_dissect+0x3e0/0x3e0 [ 263.631995][ C1] ? mark_lock+0x94/0x320 [ 263.636376][ C1] ? mark_lock+0x94/0x320 [ 263.640786][ C1] ? __lock_acquire+0x13dc/0x7b50 [ 263.645837][ C1] ? mark_lock+0x94/0x320 [ 263.650232][ C1] ? __lock_acquire+0x1305/0x7b50 [ 263.655273][ C1] ? get_stack_info_noinstr+0x15/0x130 [ 263.660777][ C1] ? deref_stack_reg+0xd0/0x120 [ 263.665637][ C1] ? verify_lock_unused+0x140/0x140 [ 263.670888][ C1] ? perf_trace_lock+0xe4/0x390 [ 263.675765][ C1] ___skb_get_hash+0x55/0x680 [ 263.680492][ C1] __skb_get_hash+0xd2/0x270 [ 263.685093][ C1] ? __skb_get_hash_symmetric+0x3b0/0x3b0 [ 263.690855][ C1] ? rcu_lock_release+0x9/0x20 [ 263.695667][ C1] netdev_pick_tx+0x335/0xad0 [ 263.700403][ C1] ? ret_from_fork+0x1f/0x30 [ 263.705035][ C1] netdev_core_pick_tx+0x141/0x300 [ 263.710351][ C1] __dev_queue_xmit+0x797/0x2e50 [ 263.715365][ C1] ? dev_queue_xmit+0x20/0x20 [ 263.720101][ C1] ? __copy_skb_header+0x3ba/0x4f0 [ 263.725230][ C1] ? memcpy+0x3c/0x60 [ 263.729270][ C1] ? __copy_skb_header+0x3ba/0x4f0 [ 263.734405][ C1] ? __skb_clone+0x446/0x6c0 [ 263.739041][ C1] ? hsr_addr_subst_dest+0x1d5/0x500 [ 263.744337][ C1] ? skb_clone+0x1f1/0x350 [ 263.748809][ C1] hsr_forward_skb+0xf82/0x16b0 [ 263.753702][ C1] ? prp_fill_frame_info+0x660/0x660 [ 263.759032][ C1] ? do_raw_spin_lock+0x128/0x2f0 [ 263.764076][ C1] ? __rwlock_init+0x140/0x140 [ 263.768903][ C1] ? __skb_pad+0x3fa/0x610 [ 263.773343][ C1] send_hsr_supervision_frame+0x5f7/0xb90 [ 263.779139][ C1] hsr_announce+0x168/0x310 [ 263.783662][ C1] ? hsr_dev_finalize+0x870/0x870 [ 263.788864][ C1] ? hsr_dev_finalize+0x870/0x870 [ 263.793901][ C1] call_timer_fn+0x17b/0x540 [ 263.798540][ C1] ? hsr_dev_finalize+0x870/0x870 [ 263.803579][ C1] ? __run_timers+0x810/0x810 [ 263.808313][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 263.813546][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 263.818824][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 263.824034][ C1] ? hsr_dev_finalize+0x870/0x870 [ 263.829116][ C1] __run_timers+0x56c/0x810 [ 263.833654][ C1] ? detach_timer+0x2b0/0x2b0 [ 263.838374][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 263.844390][ C1] ? sched_clock_cpu+0x15/0x3c0 [ 263.849298][ C1] ? seqcount_lockdep_reader_access+0x177/0x1d0 [ 263.855553][ C1] ? handle_softirqs+0x19f/0x830 [ 263.860541][ C1] run_timer_softirq+0x63/0xf0 [ 263.865404][ C1] handle_softirqs+0x336/0x830 [ 263.870221][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 263.875085][ C1] ? do_softirq+0x210/0x210 [ 263.879622][ C1] ? hrtimer_interrupt+0x6a2/0x8b0 [ 263.884756][ C1] __irq_exit_rcu+0x13b/0x230 [ 263.889482][ C1] ? irq_exit_rcu+0x20/0x20 [ 263.894010][ C1] irq_exit_rcu+0x5/0x20 [ 263.898286][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 263.903932][ C1] [ 263.906896][ C1] [ 263.909837][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 263.915828][ C1] RIP: 0010:lock_acquire+0x208/0x400 [ 263.921176][ C1] Code: f7 84 24 80 00 00 00 00 02 00 00 43 c6 44 3d 04 f8 0f 85 f1 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 44 3d 00 00 00 00 00 43 c7 44 3d 08 00 00 00 00 65 48 8b 04 [ 263.940912][ C1] RSP: 0018:ffffc900032cfaa0 EFLAGS: 00000206 [ 263.947024][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 2cdaa5da2aa24000 [ 263.955009][ C1] RDX: 0000000000000000 RSI: ffffffff8a2b3e80 RDI: ffffffff8a7a4200 [ 263.963020][ C1] RBP: ffffc900032cfbc0 R08: dffffc0000000000 R09: 1ffffffff203dc18 [ 263.971064][ C1] R10: dffffc0000000000 R11: fffffbfff203dc19 R12: ffffffff8c31ef60 [ 263.979079][ C1] R13: 1ffff92000659f60 R14: 0000000000000246 R15: dffffc0000000000 [ 263.987128][ C1] ? rcu_lock_release+0x5/0x20 [ 263.991912][ C1] ? read_lock_is_recursive+0x10/0x10 [ 263.997338][ C1] ? __lock_acquire+0x7b50/0x7b50 [ 264.002401][ C1] rcu_lock_acquire+0x2a/0x30 [ 264.007121][ C1] ? rcu_lock_acquire+0x5/0x30 [ 264.011893][ C1] batadv_nc_worker+0xc9/0x5c0 [ 264.016710][ C1] process_one_work+0x867/0xff0 [ 264.021605][ C1] ? worker_detach_from_pool+0x240/0x240 [ 264.027280][ C1] ? lockdep_hardirqs_off+0x70/0x100 [ 264.032582][ C1] ? _raw_spin_lock_irq+0xb7/0xf0 [ 264.037643][ C1] ? _raw_spin_lock_irqsave+0x100/0x100 [ 264.043199][ C1] ? wq_worker_running+0x97/0x170 [ 264.048286][ C1] worker_thread+0xad7/0x12a0 [ 264.053066][ C1] kthread+0x42e/0x520 [ 264.057227][ C1] ? rcu_lock_release+0x20/0x20 [ 264.062113][ C1] ? kthread_blkcg+0xd0/0xd0 [ 264.066745][ C1] ret_from_fork+0x1f/0x30 [ 264.071198][ C1] [ 264.074240][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 264.081517][ C1] CPU: 1 PID: 10429 Comm: kworker/u4:16 Not tainted syzkaller #0 [ 264.089231][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 264.099287][ C1] Workqueue: bat_events batadv_nc_worker [ 264.104942][ C1] Call Trace: [ 264.108219][ C1] [ 264.111067][ C1] dump_stack_lvl+0x188/0x250 [ 264.115757][ C1] ? show_regs_print_info+0x20/0x20 [ 264.120961][ C1] ? load_image+0x410/0x410 [ 264.125585][ C1] panic+0x2f8/0x850 [ 264.129492][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 264.134013][ C1] ? ret_from_fork+0x1f/0x30 [ 264.138614][ C1] ? copy_from_user_nofault+0x160/0x1c0 [ 264.144201][ C1] __warn+0x248/0x2b0 [ 264.148188][ C1] ? copy_from_user_nofault+0x160/0x1c0 [ 264.153744][ C1] report_bug+0x1b9/0x2e0 [ 264.158085][ C1] handle_bug+0x3a/0x70 [ 264.162242][ C1] exc_invalid_op+0x16/0x40 [ 264.166751][ C1] asm_exc_invalid_op+0x16/0x20 [ 264.171609][ C1] RIP: 0010:copy_from_user_nofault+0x160/0x1c0 [ 264.177771][ C1] Code: 24 45 31 f6 31 ff 89 de e8 4d 97 d8 ff 85 db 48 c7 c0 f2 ff ff ff 49 0f 44 c6 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 d0 93 d8 ff <0f> 0b e9 1c ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ea fe [ 264.197380][ C1] RSP: 0018:ffffc90000dcfe88 EFLAGS: 00010246 [ 264.203459][ C1] RAX: ffffffff81a068e0 RBX: 0000000000000000 RCX: ffff88807e759dc0 [ 264.211430][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 264.219404][ C1] RBP: 0000000000000000 R08: ffffc90000dd02b7 R09: ffffc90000dd0284 [ 264.227378][ C1] R10: dffffc0000000000 R11: fffff520001ba057 R12: ffff88807e75b548 [ 264.235355][ C1] R13: ffffc9000139d030 R14: ffffc90000dcfee8 R15: 0000000000000000 [ 264.243350][ C1] ? copy_from_user_nofault+0x160/0x1c0 [ 264.248915][ C1] ? copy_from_user_nofault+0x160/0x1c0 [ 264.254467][ C1] bpf_probe_read_user+0x26/0x70 [ 264.259414][ C1] bpf_prog_f2594087b0f175cc+0x32/0x440 [ 264.264964][ C1] bpf_flow_dissect+0x12b/0x3e0 [ 264.269826][ C1] __skb_flow_dissect+0x7cc/0x6180 [ 264.274968][ C1] ? mark_lock+0x94/0x320 [ 264.279316][ C1] ? __lock_acquire+0x1305/0x7b50 [ 264.284357][ C1] ? bpf_flow_dissect+0x3e0/0x3e0 [ 264.289428][ C1] ? mark_lock+0x94/0x320 [ 264.293772][ C1] ? mark_lock+0x94/0x320 [ 264.298106][ C1] ? __lock_acquire+0x13dc/0x7b50 [ 264.303160][ C1] ? mark_lock+0x94/0x320 [ 264.307513][ C1] ? __lock_acquire+0x1305/0x7b50 [ 264.312550][ C1] ? get_stack_info_noinstr+0x15/0x130 [ 264.318017][ C1] ? deref_stack_reg+0xd0/0x120 [ 264.322876][ C1] ? verify_lock_unused+0x140/0x140 [ 264.328086][ C1] ? perf_trace_lock+0xe4/0x390 [ 264.332959][ C1] ___skb_get_hash+0x55/0x680 [ 264.337649][ C1] __skb_get_hash+0xd2/0x270 [ 264.342243][ C1] ? __skb_get_hash_symmetric+0x3b0/0x3b0 [ 264.347972][ C1] ? rcu_lock_release+0x9/0x20 [ 264.352768][ C1] netdev_pick_tx+0x335/0xad0 [ 264.357456][ C1] ? ret_from_fork+0x1f/0x30 [ 264.362061][ C1] netdev_core_pick_tx+0x141/0x300 [ 264.367183][ C1] __dev_queue_xmit+0x797/0x2e50 [ 264.372148][ C1] ? dev_queue_xmit+0x20/0x20 [ 264.376825][ C1] ? __copy_skb_header+0x3ba/0x4f0 [ 264.381944][ C1] ? memcpy+0x3c/0x60 [ 264.385927][ C1] ? __copy_skb_header+0x3ba/0x4f0 [ 264.391046][ C1] ? __skb_clone+0x446/0x6c0 [ 264.395731][ C1] ? hsr_addr_subst_dest+0x1d5/0x500 [ 264.401023][ C1] ? skb_clone+0x1f1/0x350 [ 264.405446][ C1] hsr_forward_skb+0xf82/0x16b0 [ 264.410319][ C1] ? prp_fill_frame_info+0x660/0x660 [ 264.415610][ C1] ? do_raw_spin_lock+0x128/0x2f0 [ 264.420641][ C1] ? __rwlock_init+0x140/0x140 [ 264.425414][ C1] ? __skb_pad+0x3fa/0x610 [ 264.429843][ C1] send_hsr_supervision_frame+0x5f7/0xb90 [ 264.435578][ C1] hsr_announce+0x168/0x310 [ 264.440084][ C1] ? hsr_dev_finalize+0x870/0x870 [ 264.445119][ C1] ? hsr_dev_finalize+0x870/0x870 [ 264.450147][ C1] call_timer_fn+0x17b/0x540 [ 264.454743][ C1] ? hsr_dev_finalize+0x870/0x870 [ 264.459769][ C1] ? __run_timers+0x810/0x810 [ 264.464457][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 264.469659][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 264.474857][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 264.480054][ C1] ? hsr_dev_finalize+0x870/0x870 [ 264.485084][ C1] __run_timers+0x56c/0x810 [ 264.489613][ C1] ? detach_timer+0x2b0/0x2b0 [ 264.494296][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 264.500292][ C1] ? sched_clock_cpu+0x15/0x3c0 [ 264.505145][ C1] ? seqcount_lockdep_reader_access+0x177/0x1d0 [ 264.511385][ C1] ? handle_softirqs+0x19f/0x830 [ 264.516328][ C1] run_timer_softirq+0x63/0xf0 [ 264.521096][ C1] handle_softirqs+0x336/0x830 [ 264.525866][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 264.530724][ C1] ? do_softirq+0x210/0x210 [ 264.535227][ C1] ? hrtimer_interrupt+0x6a2/0x8b0 [ 264.540362][ C1] __irq_exit_rcu+0x13b/0x230 [ 264.545042][ C1] ? irq_exit_rcu+0x20/0x20 [ 264.549564][ C1] irq_exit_rcu+0x5/0x20 [ 264.553804][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 264.559454][ C1] [ 264.562381][ C1] [ 264.565311][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 264.571293][ C1] RIP: 0010:lock_acquire+0x208/0x400 [ 264.576583][ C1] Code: f7 84 24 80 00 00 00 00 02 00 00 43 c6 44 3d 04 f8 0f 85 f1 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 44 3d 00 00 00 00 00 43 c7 44 3d 08 00 00 00 00 65 48 8b 04 [ 264.596189][ C1] RSP: 0018:ffffc900032cfaa0 EFLAGS: 00000206 [ 264.602281][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 2cdaa5da2aa24000 [ 264.610260][ C1] RDX: 0000000000000000 RSI: ffffffff8a2b3e80 RDI: ffffffff8a7a4200 [ 264.618231][ C1] RBP: ffffc900032cfbc0 R08: dffffc0000000000 R09: 1ffffffff203dc18 [ 264.626210][ C1] R10: dffffc0000000000 R11: fffffbfff203dc19 R12: ffffffff8c31ef60 [ 264.634189][ C1] R13: 1ffff92000659f60 R14: 0000000000000246 R15: dffffc0000000000 [ 264.642198][ C1] ? rcu_lock_release+0x5/0x20 [ 264.646974][ C1] ? read_lock_is_recursive+0x10/0x10 [ 264.652354][ C1] ? __lock_acquire+0x7b50/0x7b50 [ 264.657399][ C1] rcu_lock_acquire+0x2a/0x30 [ 264.662075][ C1] ? rcu_lock_acquire+0x5/0x30 [ 264.666838][ C1] batadv_nc_worker+0xc9/0x5c0 [ 264.671610][ C1] process_one_work+0x867/0xff0 [ 264.676493][ C1] ? worker_detach_from_pool+0x240/0x240 [ 264.682125][ C1] ? lockdep_hardirqs_off+0x70/0x100 [ 264.687419][ C1] ? _raw_spin_lock_irq+0xb7/0xf0 [ 264.692535][ C1] ? _raw_spin_lock_irqsave+0x100/0x100 [ 264.698088][ C1] ? wq_worker_running+0x97/0x170 [ 264.703128][ C1] worker_thread+0xad7/0x12a0 [ 264.707856][ C1] kthread+0x42e/0x520 [ 264.711926][ C1] ? rcu_lock_release+0x20/0x20 [ 264.716871][ C1] ? kthread_blkcg+0xd0/0xd0 [ 264.721464][ C1] ret_from_fork+0x1f/0x30 [ 264.725903][ C1] [ 264.729043][ C1] Kernel Offset: disabled [ 264.733544][ C1] Rebooting in 86400 seconds..