last executing test programs: 4m6.768933473s ago: executing program 1 (id=2407): perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x3, 0x80, 0x0, 0x0, 0x0, 0x7, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x1ff, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) socket$kcm(0x10, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)) r0 = perf_event_open(0x0, 0x0, 0x4000000000000200, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r1 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x23, &(0x7f0000000040), 0xcf) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9b, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0xffffffffffffffff) sendmsg$inet(0xffffffffffffffff, 0x0, 0x3000c085) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000003}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x40, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000000, 0xc93}, 0x0, 0x0, 0xffffff08, 0x0, 0x3, 0x8, 0x8, 0x0, 0x0, 0x0, 0xe4}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x890b, &(0x7f0000000000)) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x5744935563dc1402) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x44080) socketpair$unix(0x1, 0x3, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) socket$kcm(0x10, 0x2, 0x4) 4m6.48910887s ago: executing program 1 (id=2410): r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe1b) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x3}, 0x100020, 0x400000000, 0x100, 0x0, 0x1000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYBLOB="00000000d3ec66ecc053c5"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x1d, 0x2, 0x7, &(0x7f0000000000)={0x0, 0x0}) r1 = socket$kcm(0xa, 0x1, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0x200000000000009a, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={&(0x7f00000001c0)=@l2tp6={0xa, 0x0, 0x0, @empty, 0xff000000}, 0x80, 0x0}, 0x20000881) sendmsg$kcm(r1, &(0x7f0000000640)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x3, @loopback, 0x9}, 0x80, 0x0, 0x0, &(0x7f00000018c0)=ANY=[], 0x1c8}, 0x33c5c7fe60a346e6) 4m6.249901663s ago: executing program 1 (id=2414): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x404, 0x9}, 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xb, [@typedef={0xd, 0x0, 0x0, 0x8, 0x2}, @func={0xd, 0x0, 0x0, 0xc, 0x3}, @float={0x10, 0x0, 0x0, 0x10, 0x2}]}, {0x0, [0x0, 0x4f, 0x0, 0x5f, 0x2e, 0x61, 0x5f, 0x0, 0x1e]}}, &(0x7f0000000280)=""/243, 0x47, 0xf3, 0x1, 0x6}, 0x28) r1 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x14, &(0x7f0000000000), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0x4}, 0x48) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) close(r2) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x127) r4 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x8}, 0x12400, 0x0, 0x0, 0x0, 0xfffffffffffbfffe, 0x0, 0x20}, 0x0, 0x0, r4, 0x0) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000002000000a00300000500000000000000", @ANYRES32, @ANYBLOB="0000000000000000405d86327c0001"], 0x48) r5 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB='V?\x00\x00-\x00Y'], 0xfe33) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) r7 = socket$kcm(0x11, 0x200000000000002, 0x300) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8906, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r7, 0x8907, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r8 = socket$kcm(0xa, 0x3, 0x73) sendmsg$inet(r8, 0x0, 0x0) r9 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r9, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a40)={r6, 0x0, 0x0}, 0x10) r10 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000008c0)={0x1b, 0x0, 0x0, 0x1000, 0x0, 0x1, 0x81, '\x00', 0x0, r10, 0x0, 0x2, 0x4}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0x58, &(0x7f0000000940)}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) 4m5.859543057s ago: executing program 1 (id=2419): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x404, 0x9}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x3, 0x4, 0x801, 0x1, r0, 0x15b4}, 0x50) (fail_nth: 2) 4m5.449865871s ago: executing program 1 (id=2423): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x61800}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28}, 0x94) (async) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000140)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x6, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xd4, &(0x7f0000000200)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0xf4, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x2, 0x0, r0, 0x5, '\x00', r1, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x50) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_vlan\x00', 0x800}) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 4m5.326568188s ago: executing program 1 (id=2431): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x2, 0x1, 0x0) (async) r0 = socket$kcm(0x2, 0x1, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x30f) sendmsg$inet(r0, 0x0, 0x20000811) socket$kcm(0x21, 0x2, 0xa) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, 0x0, 0x600) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x24008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x24008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0xfffffffb) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040)) (async) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_type(r2, 0x0, 0x2, 0x0) syz_clone(0x61000600, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x61000600, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000140)=@ieee802154, 0x80, &(0x7f00000008c0)=[{0x0}, {0x0}, {&(0x7f0000000580)=""/169, 0xa9}, {0x0}, {&(0x7f0000000700)=""/219, 0xdb}, {&(0x7f0000000800)=""/189, 0xbd}], 0x6}, 0x2040) (async) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000140)=@ieee802154, 0x80, &(0x7f00000008c0)=[{0x0}, {0x0}, {&(0x7f0000000580)=""/169, 0xa9}, {0x0}, {&(0x7f0000000700)=""/219, 0xdb}, {&(0x7f0000000800)=""/189, 0xbd}], 0x6}, 0x2040) r3 = socket$kcm(0x22, 0x2, 0x21) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x88, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x200000000000006, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000002c0)=@generic={&(0x7f0000000280)='./file0\x00', 0x0, 0x8}, 0x18) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)=ANY=[@ANYRES32=0x1, @ANYBLOB="a8dd00"/20, @ANYRESHEX=r2, @ANYRESDEC=r3, @ANYRES64=0x0], 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r4, 0x58, &(0x7f0000000380)}, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r4, 0x58, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffff7, 0x6}, 0x4000, 0x0, 0x0, 0x1, 0xfffffffffffffff9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffff7, 0x6}, 0x4000, 0x0, 0x0, 0x1, 0xfffffffffffffff9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x0) (async) r6 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r6, 0x29, 0x23, 0x0, 0x0) sendmsg$kcm(r6, &(0x7f0000001240)={0x0, 0x0, 0x0}, 0x0) socket$kcm(0x10, 0x2, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000940)={0x8, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x1b, 0x2, &(0x7f00000004c0)=@raw=[@ldst={0x2, 0x1, 0x6, 0xa, 0x1, 0x6, 0x10}, @jmp={0x5, 0x1, 0x4, 0x4, 0x7, 0x6, 0x12}], &(0x7f0000000500)='syzkaller\x00', 0x9, 0x22, &(0x7f0000000540)=""/34, 0x41100, 0x60, '\x00', r5, @fallback=0xe, r7, 0x8, &(0x7f0000000680)={0x0, 0x5}, 0x8, 0x10, &(0x7f00000006c0)={0x0, 0xf, 0x3, 0xffffff7f}, 0x10, r8, r7, 0x3, &(0x7f0000000b00), &(0x7f0000000b40)=[{0x0, 0x4, 0x3, 0x8}, {0x2, 0x5, 0xc, 0x2}, {0x3, 0x4, 0xe, 0x3}], 0x10, 0x2e765820}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x1b, 0x2, &(0x7f00000004c0)=@raw=[@ldst={0x2, 0x1, 0x6, 0xa, 0x1, 0x6, 0x10}, @jmp={0x5, 0x1, 0x4, 0x4, 0x7, 0x6, 0x12}], &(0x7f0000000500)='syzkaller\x00', 0x9, 0x22, &(0x7f0000000540)=""/34, 0x41100, 0x60, '\x00', r5, @fallback=0xe, r7, 0x8, &(0x7f0000000680)={0x0, 0x5}, 0x8, 0x10, &(0x7f00000006c0)={0x0, 0xf, 0x3, 0xffffff7f}, 0x10, r8, r7, 0x3, &(0x7f0000000b00), &(0x7f0000000b40)=[{0x0, 0x4, 0x3, 0x8}, {0x2, 0x5, 0xc, 0x2}, {0x3, 0x4, 0xe, 0x3}], 0x10, 0x2e765820}, 0x94) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) 3m50.201027813s ago: executing program 32 (id=2431): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x2, 0x1, 0x0) (async) r0 = socket$kcm(0x2, 0x1, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x30f) sendmsg$inet(r0, 0x0, 0x20000811) socket$kcm(0x21, 0x2, 0xa) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, 0x0, 0x600) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x24008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x24008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0xfffffffb) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040)) (async) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_type(r2, 0x0, 0x2, 0x0) syz_clone(0x61000600, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x61000600, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000140)=@ieee802154, 0x80, &(0x7f00000008c0)=[{0x0}, {0x0}, {&(0x7f0000000580)=""/169, 0xa9}, {0x0}, {&(0x7f0000000700)=""/219, 0xdb}, {&(0x7f0000000800)=""/189, 0xbd}], 0x6}, 0x2040) (async) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000140)=@ieee802154, 0x80, &(0x7f00000008c0)=[{0x0}, {0x0}, {&(0x7f0000000580)=""/169, 0xa9}, {0x0}, {&(0x7f0000000700)=""/219, 0xdb}, {&(0x7f0000000800)=""/189, 0xbd}], 0x6}, 0x2040) r3 = socket$kcm(0x22, 0x2, 0x21) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x88, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x200000000000006, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000002c0)=@generic={&(0x7f0000000280)='./file0\x00', 0x0, 0x8}, 0x18) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)=ANY=[@ANYRES32=0x1, @ANYBLOB="a8dd00"/20, @ANYRESHEX=r2, @ANYRESDEC=r3, @ANYRES64=0x0], 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r4, 0x58, &(0x7f0000000380)}, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r4, 0x58, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffff7, 0x6}, 0x4000, 0x0, 0x0, 0x1, 0xfffffffffffffff9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffff7, 0x6}, 0x4000, 0x0, 0x0, 0x1, 0xfffffffffffffff9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x0) (async) r6 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r6, 0x29, 0x23, 0x0, 0x0) sendmsg$kcm(r6, &(0x7f0000001240)={0x0, 0x0, 0x0}, 0x0) socket$kcm(0x10, 0x2, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000940)={0x8, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x1b, 0x2, &(0x7f00000004c0)=@raw=[@ldst={0x2, 0x1, 0x6, 0xa, 0x1, 0x6, 0x10}, @jmp={0x5, 0x1, 0x4, 0x4, 0x7, 0x6, 0x12}], &(0x7f0000000500)='syzkaller\x00', 0x9, 0x22, &(0x7f0000000540)=""/34, 0x41100, 0x60, '\x00', r5, @fallback=0xe, r7, 0x8, &(0x7f0000000680)={0x0, 0x5}, 0x8, 0x10, &(0x7f00000006c0)={0x0, 0xf, 0x3, 0xffffff7f}, 0x10, r8, r7, 0x3, &(0x7f0000000b00), &(0x7f0000000b40)=[{0x0, 0x4, 0x3, 0x8}, {0x2, 0x5, 0xc, 0x2}, {0x3, 0x4, 0xe, 0x3}], 0x10, 0x2e765820}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x1b, 0x2, &(0x7f00000004c0)=@raw=[@ldst={0x2, 0x1, 0x6, 0xa, 0x1, 0x6, 0x10}, @jmp={0x5, 0x1, 0x4, 0x4, 0x7, 0x6, 0x12}], &(0x7f0000000500)='syzkaller\x00', 0x9, 0x22, &(0x7f0000000540)=""/34, 0x41100, 0x60, '\x00', r5, @fallback=0xe, r7, 0x8, &(0x7f0000000680)={0x0, 0x5}, 0x8, 0x10, &(0x7f00000006c0)={0x0, 0xf, 0x3, 0xffffff7f}, 0x10, r8, r7, 0x3, &(0x7f0000000b00), &(0x7f0000000b40)=[{0x0, 0x4, 0x3, 0x8}, {0x2, 0x5, 0xc, 0x2}, {0x3, 0x4, 0xe, 0x3}], 0x10, 0x2e765820}, 0x94) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) 24.360768807s ago: executing program 2 (id=3500): socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0xea7c, 0xfffffffffffffffe}, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x2c}], {0x95, 0x0, 0x0, 0x18000000}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) 24.14580113s ago: executing program 2 (id=3505): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a80)={r2, 0x39, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fc, 0x0, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1a, 0xf, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x107a654, 0x0, 0x0, 0x0, 0x1}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xa8}, [@ldst={0x6, 0x3}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) 23.910150574s ago: executing program 2 (id=3509): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0xc0042, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfefffffc, 0x2, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x3fe, 0x3, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x3a}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000}, 0x48) socket$kcm(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x3ffffe, 0x0, 0x41000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$kcm(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x60}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x0, 0xe80, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888808", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 20.684127325s ago: executing program 2 (id=3515): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{r0, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000180)='%ps \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r1}, 0x4) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r2, 0x18000000000002a0, 0xe80, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f086dd", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x50) 4.478789634s ago: executing program 4 (id=3678): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x20, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8e, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000440)=@caif=@util={0x25, "a2a8a5222ff1140b1db69ccc6131b57f"}, 0x80, &(0x7f0000000300)}, 0x448c0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x400}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) r1 = perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0xc0000000, 0x0, 0xfffffffffffffffd, 0x6, 0x0, 0x0, 0x2000}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0xd) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f00000017c0)={0x2, 0x4e20, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000100)}, 0x8000) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x400c804) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000540)=@o_path={&(0x7f0000000180)='./file0/file0\x00', 0x0, 0x4010, r1}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000065f30000000000000000000000000000000000000000000000002f94ac70d1d8d9e4e212bc78fd84c14561d047b247e0b6946724d08485237e56ba77f155b1518ff828171497ca88c6d6bdb6b63b0602bac1e19319a31c56b276d7"], 0x50) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r7, 0x400454c9, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x6, 0x9}, 0x50) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000000800000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r9, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4002000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETTXFILTER(r7, 0x400454d1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r6}, &(0x7f0000000280), &(0x7f0000000240)=r3}, 0x20) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000000c0)=r10, 0x4) sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 3.52745422s ago: executing program 4 (id=3687): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r0 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080), 0x4) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x6, 0x8, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000000000000000000000000000c6000100250000008510000001000000950000000000000018400008ffffffff000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x6, 0x10c, &(0x7f0000000cc0)=""/268, 0x729c10b274fd1a11, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe}, 0x16) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8906, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x8907, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007"], 0x0, 0x4}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0x1d, 0x1, &(0x7f0000000040)=@raw=[@exit], 0x0, 0x81, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d08000b000000e8fe55a1180015000600142603600e1209000d00e8030000a80016000a0003", 0x37}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe5538250015000600149b0000001208000313eba96240a8002b", 0x33}], 0x1}, 0x80) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xfe33) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05000000010000000400000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r5 = socket$kcm(0xa, 0x3, 0x73) sendmsg$inet(r5, &(0x7f0000000400)={&(0x7f0000000000)={0xa, 0x0, @multicast1}, 0x10, &(0x7f0000000180)=[{&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af", 0x32}], 0x1, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x8}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x38}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000c00)}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x8847, &(0x7f0000000140)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a0007000140020203600e4109000800ac00060311000000160012000a00f6000000035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) 3.063928938s ago: executing program 5 (id=3690): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x11300}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) r1 = socket$kcm(0x10, 0x2, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f92124fc60041111000a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 3.017783141s ago: executing program 0 (id=3691): socketpair$unix(0x1, 0x1, 0x0, 0x0) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0xed, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x100, 0x0, 0x3f, 0x0, 0x0, 0x8, 0xfffc, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000029000007000000890704e068000000110000000000000000dbc790ad000000fc000000000000001400000000000000000000000200000004000000000000001c000000000000000000000008"], 0x68}, 0x0) 2.892779308s ago: executing program 0 (id=3692): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0xc0042, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfefffffc, 0x2, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x3fe, 0x3, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x3a}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000}, 0x48) socket$kcm(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x3ffffe, 0x0, 0x41000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$kcm(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x60}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x0, 0xe80, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888808", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.549757588s ago: executing program 4 (id=3694): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000380)={0x0, 0x0}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="d800000019007b", 0x7}], 0x1, 0x0, 0x0, 0x2663}, 0x0) r2 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r2, 0x84, 0x77, &(0x7f0000000380), 0x98) close(r1) socket$kcm(0x10, 0x2, 0x4) setsockopt$sock_attach_bpf(r1, 0x10e, 0xb, &(0x7f0000000180), 0x4) sendmsg$inet(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="6000000054c80cdb917f5687aab998b8", 0x10}, {&(0x7f0000000080)="68cabf2dfb58fc021d6b689866f05d48000500000000000000258f2e6400b8f9e6aaeb88bea123dc2c6726e89b0ce24f89a565ee52dcd729cd3909bc510293bca0b646a3ce904f6e6b788b3204c233e6", 0x50}], 0x2}, 0x2400c000) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0xa, 0x300) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x20, 0xff, 0x0, 0x0, 0xc0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xf, @perf_config_ext={0x7, 0x1}, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x5, 0x4, 0x0, 0x89}, 0x0, 0x2, 0xffffffffffffffff, 0x0) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000c76d000000000000008100000081"], 0x48) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x15) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000240)={&(0x7f00000001c0)=@in6={0xa, 0x4e21, 0x0, @mcast2}, 0x80, 0x0}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)="d8000000580081044e81f782db44b904021d080009000200e8fe55a1180015000600142603600e120900210000000401a80016000a00014006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7ce", 0x6c}, {&(0x7f0000000540)="47e2ef3330b4efa56e2aed9961d244728046f7e077f2e17fe99eb02cc704ca74e513a8046b12c800061e2d1a3b750e5d29002c99980f4a0ccd7a793f2f41bf6f028eb2ad8ba2068150ea4164d3cc2563ae7aaa346f975c0bbc6150f0b4ad75d246ac5fecbd465371b5cf8316", 0x6c}], 0x2}, 0x84884) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) socket$kcm(0x2, 0x3, 0x106) 2.195309359s ago: executing program 0 (id=3697): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x11300}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) r1 = socket$kcm(0x10, 0x2, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000200000000ff0f00000000000000009800", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB='\x00'/21], 0x48) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f92124fc60041111000a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 2.194359879s ago: executing program 5 (id=3698): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @remote}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x4048800) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000064001001000001"], 0x18}, 0x0) 2.01011356s ago: executing program 4 (id=3700): socket$kcm(0x10, 0x2, 0x0) (async) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="180200000100000000000000000000008500000053000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70600000000000085000000070000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x81) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000000c0)="c1b9545dd30a1d31677b2d0bfa91", 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f00000000c0)={r0, r1}) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_sys\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f0000000100)=r3, 0x4) (async) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f0000000100)=r3, 0x4) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x80000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0xc8, 0x100002, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x80000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0xc8, 0x100002, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000a80)={&(0x7f0000000180)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f00000009c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}], 0x30}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c00000002000000000000000000000300000000020000000200000000000000000000000000000105000000080000020000000002000005000000000000000001000000000000000000000001"], 0x0, 0x66}, 0x20) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c00000002000000000000000000000300000000020000000200000000000000000000000000000105000000080000020000000002000005000000000000000001000000000000000000000001"], 0x0, 0x66}, 0x20) 1.948821264s ago: executing program 3 (id=3701): perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)=@o_path={&(0x7f0000000080)='./cgroup.cpu/cpuset.cpus\x00'}, 0x18) perf_event_open$cgroup(&(0x7f0000000000)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 1.897445447s ago: executing program 0 (id=3702): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x20002, 0x0) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8942, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}, 0x100c, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000a80)="d80000001d0081044e81f777db44b904021d080201000000040000a1bc0001000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c16fb4007134cf6ee08000a0e408e8d8ef075c11503c6bbace801bcb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322107c9fd6", 0x81}, {&(0x7f00000006c0)="54f6d4d87eb3f140c5", 0x9}, {&(0x7f0000000980)="027a64c0072ebbb1512b328dda11b4efd4ba07fc642b7e012bea071dbbdea51e41958755533ccce04d3e635cbe848495e723490d8e93db224d82d4fbfe76bd22fd358cd467795ad7febfc220d72f", 0x4e}], 0x3, 0x0, 0x0, 0x7400}, 0x10) perf_event_open(0x0, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], &(0x7f0000000840)=""/262, 0x37, 0x106, 0x1}, 0x28) r2 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x9, 0x3}, 0x14021, 0x9, 0x0, 0x0, 0x43cd, 0x400, 0x2, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = socket$kcm(0x10, 0x0, 0x4) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900)=[{0x0}], 0x1}, 0xff0f000020000080) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x14, 0x33, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lirc_mode2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r6 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) close(0x4) sendmsg$kcm(r6, 0x0, 0x20000000) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x35, 0x0, 0x3, 0x5}, {0x48, 0x0, 0x0, 0x3}, {0x44, 0x94, 0x0, 0x9}, {}, {0x6}]}) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="d800000018008111e00212ba0d8105040a020000030f000b067c55a1bc000900b8000699030000000500050002008178a8001500030001400200000901ac040000d67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e970300000000000000000000000000000000000000008dc5fb510162", 0xd8}], 0x1}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89a2, &(0x7f0000000080)={'bridge0\x00', @random="0c0000000988"}) 1.84568905s ago: executing program 3 (id=3703): socket$kcm(0x10, 0x400000002, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000440)="5c00000013006bcc9e3be35c6e17aa33074b866c1d0000007ea60864160af3653c000cc0080008000000000060001cc00200bc24eab5008000001e618294ff4051f60a84c9f4d4938037aef751022297e786a6d20010000420000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4004084) 1.832246731s ago: executing program 3 (id=3704): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x1}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="882f1242a03c3f98722780b605a7", 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{}, &(0x7f0000000080), &(0x7f0000000240)}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x3, 0x40}, 0x8210, 0x10000, 0x9e4, 0x5, 0x8, 0xe, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TUNSETCARRIER(r2, 0x400454e2, &(0x7f00000001c0)=0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x0, 0x40}, 0x114905, 0x4, 0x6, 0x1, 0x101, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000e40)={0x0, 0x0, 0x56}, 0x28) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000380)="2e00000011008188040f80ec59acbc0413a181002e00000001010000000000000e000a000f000000028002002d1fdfa3b0316525242572353078510adf666c8ac28e14d44df55f1562fef83db28e3d310befa47763fd684af1fcea040d9d9503d35a8280caff5b8557550d786259679d13467f0dacba6017365efdd8fd5dbfe11461cc", 0x83}], 0x1}, 0x2404c050) 1.708285358s ago: executing program 5 (id=3705): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000340)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001780)=""/4071, 0xfe7}], 0x1}, 0x40000102) sendmsg$inet(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x1}], 0x1}, 0x40) 1.395318487s ago: executing program 3 (id=3706): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0xc0042, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfefffffc, 0x2, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x3fe, 0x3, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x3a}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000}, 0x48) socket$kcm(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x3ffffe, 0x0, 0x41000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$kcm(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x60}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x0, 0xe80, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888808", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.271575974s ago: executing program 5 (id=3707): r0 = getpid() (async) r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xd, 0x2b, 0x8, 0xd4, 0x0, 0x9, 0x402, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xc, 0x4, @perf_bp={&(0x7f00000000c0), 0x2}, 0x8000, 0x81, 0xac, 0x6, 0x101, 0x401, 0x1000, 0x0, 0x8, 0x0, 0x537}, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x9, 0x9, 0x5, 0xf4, 0x0, 0x7, 0x1080, 0x14, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x40, 0x3, 0x4, 0x6, 0xf5e8, 0x0, 0x2, 0x0, 0x9, 0x0, 0xfffffffffffffff8}, r0, 0x10, r1, 0xb) (async) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x40, 0x5, 0x79, 0xd, 0x0, 0x8, 0x40000, 0xa, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x9, 0x1, @perf_config_ext={0x9, 0xb}, 0x100000, 0x4, 0x9, 0x7, 0xa9c9, 0xe149, 0x0, 0x0, 0x101, 0x0, 0x6}, r0, 0x4, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x3) (async, rerun: 64) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) (async, rerun: 64) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0x20, &(0x7f0000000500)={&(0x7f00000003c0)=""/79, 0x4f, 0x0, &(0x7f0000000440)=""/133, 0x85}}, 0x10) (async) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000580)={0xffffffffffffffff}, 0x4) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{0x1, 0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f0000000600)}, 0x20) (async) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)={0x1b, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x1}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x5, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1c000000}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}]}, &(0x7f0000000240)='GPL\x00', 0x5, 0x71, &(0x7f0000000280)=""/113, 0x40f00, 0x0, '\x00', 0x0, @sk_msg=0x7, r3, 0x8, &(0x7f0000000340)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000380)={0x2, 0xa, 0xfffffc01, 0x401}, 0x10, r4, r5, 0x5, &(0x7f0000000700)=[r6, r7], &(0x7f0000000740)=[{0x4, 0x4, 0x8, 0x8}, {0x5, 0x1, 0xe, 0x8}, {0x0, 0x5, 0x7, 0x10}, {0x4, 0x4, 0x4, 0x6}, {0x3, 0x2, 0x3, 0x1}]}, 0x94) close(r2) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000880)={r8, r6}, 0xc) (async) r9 = perf_event_open(&(0x7f0000000900)={0x4, 0x80, 0xb2, 0xfd, 0x4, 0x9e, 0x0, 0x101, 0x10028, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f00000008c0), 0x6}, 0x14084, 0x800, 0xc, 0x8, 0x68a, 0x8, 0x7f, 0x0, 0x358f5a8e, 0x0, 0x8}, 0x0, 0x3, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x40082406, &(0x7f0000000980)='GPL\x00') (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000ac0)={@cgroup=r3, 0x1, 0x1, 0x9, &(0x7f00000009c0)=[0x0], 0x1, 0x0, &(0x7f0000000a00)=[0x0, 0x0, 0x0], &(0x7f0000000a40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000a80)=[0x0, 0x0, 0x0, 0x0]}, 0x40) recvmsg$unix(r3, &(0x7f0000001380)={&(0x7f0000000b00)=@abs, 0x6e, &(0x7f0000001200)=[{&(0x7f0000000b80)=""/227, 0xe3}, {&(0x7f0000000c80)=""/213, 0xd5}, {&(0x7f0000000d80)=""/176, 0xb0}, {&(0x7f0000000e40)=""/195, 0xc3}, {&(0x7f0000000f40)=""/111, 0x6f}, {&(0x7f0000000fc0)=""/68, 0x44}, {&(0x7f0000001040)=""/175, 0xaf}, {&(0x7f0000001100)=""/202, 0xca}], 0x8, &(0x7f0000001280)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf8}, 0x2000) (async) ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, &(0x7f00000013c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001600)={0x0, 0x25, &(0x7f0000001400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r16}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @tail_call={{0x18, 0x2, 0x1, 0x0, r18}}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r10}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @generic={0x3, 0x3, 0x3, 0x5, 0x1}]}, &(0x7f0000001540)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f0000001580)={0x8, 0x5}, 0x8, 0x10, &(0x7f00000015c0)={0x2, 0x7, 0x81, 0xffff}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) (async) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000016c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r21, &(0x7f0000001d00)={&(0x7f0000001700)=@ax25={{0x3, @default, 0x8}, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x80, &(0x7f0000001780), 0x0, &(0x7f00000017c0)=[{0xd8, 0x1, 0x2, "a37799addb9bd9c40e07eb17880a1ace19f739b676cd758ab449dc870414ed5ff3818bc2f7caa2a4756fde52d9540dd7fdd6ebd63edbefce163d3f79a0ac30576d216e4d12959a17065f700621b3f292855b8447316ad7e9227d3f933caa64f8729e5a8f241be7e9b7319f7a77a3c0dc396daf67a000d0bd073dd326b90d97c42e0265f84dbb02e987e2572e77fd3a560c599ede7652e3d35d6915038351ebaddaaa1cf64f7a03fe579ab20b1251938b6a4924c45bfef7a19c1d74866f4e9736cc"}, {0x110, 0x0, 0x83, "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"}, {0x10, 0x88, 0x2}, {0xe8, 0x10d, 0x7ff, "c88ff1adf37a620c2da69f93ff21fba9c1a9917bc369a598eea6b9fc96fd351118466c21c34cce1f809bd4fd0e958aa3da88769db5a99243c0700d728f86ce850b14eab9518341fc4f09acf24e5def04c107973ab87fc99d3659aaef90346ce9809335c74e068268d47e10b5e2a7709e7b496002c49698f8a008fac3d24d487353054267d203aebb63c10d6573f8b8ef170623033854bce45cbf5850edc4e6977b8315f42093e14739ea637c73999efb6d8dc2289ab808b86c4d69d1cb170ab659d3bd7cdb922fcd63b8d95671ae610250"}, {0xc0, 0x11, 0x8, "5fa951ce5edf6324be9afd6e20dee5f9c5395abdc2efd7caa2c43b2fb83618afa2e26ccce65116bd8c10fcdface0d44bf2e46b94ad1aed544dacea1cff29a12d0ee29758c786ab6f62043afae128b2c5f87debbaa8e19a067a08006f7ee897242184ca569e862340ed0114aeebd0c03244601e2c29aaccf991c879ec60ddc62cb62b2a985c65ce9c61614ad2a0b7bbbc4d0a08fcf81c748728b5a6585b418befd3f6cb00930876e1e09b021148a850"}, {0xf8, 0x114, 0x7, "9dcd7678e0e908f85cc823b780c5ecc0bbc14915b3e0c48bfa34cce01e673643b37a61743f66c1f11ef71daea5f884e336dd0f332b2b0bc9bb4be98436cadc1f8621871288efd7c33763ef7c4f14630b6c3b2ae319524342edd3abe326c1ef1d88dbd7e77d3aa4a1d1ae6cc53ce607aac0592a3d8ecc3962b426284514a8d668d3252ef80abfa33877ad4eebedf8598ff3df4f4a88cf3ee618127356f3f68a6ae69c3688ad75eee65f3281f3930d0b5ed663cd722b0728a53f90714f66c3b939ce565bd02cb1530a4ea3f0f5b99c79ed0c2a8519067c5a2cd827d45905f64a60cb06e2c0"}, {0x88, 0x114, 0x22f, "84c5d9f61688fe69816edb1c7e1396892d46d2b8b5c294656be064442b228267dec9c6818ddb56554bcde5be1700a540845e7f6e5ed055bf671d4c73542f854936e236f3501ca3998f9599f806fb487aced5af3c26eede1604be3c897832af2334dcead496554bbbef53078373179b60292086a371"}], 0x520}, 0x4000000) (async, rerun: 32) r22 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001d40)={0x0, 0xaf0f, 0x18}, 0xc) (rerun: 32) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001d80)={r22}, 0x4) (async, rerun: 32) write$cgroup_subtree(r19, &(0x7f0000001dc0)={[{0x2d, 'rdma'}, {0x2d, 'cpuset'}, {0x2b, 'memory'}]}, 0x16) (rerun: 32) r23 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001e00)={0x1b, 0x0, 0x0, 0x10001, 0x0, r15, 0x6, '\x00', 0x0, r17, 0x3, 0x1, 0x5}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000023c0)={r14, 0xe0, &(0x7f00000022c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000020c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0xa, &(0x7f0000002100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x67, &(0x7f00000021c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000002200), &(0x7f0000002240), 0x8, 0x11, 0x8, 0x8, &(0x7f0000002280)}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000024c0)={0x11, 0x20, &(0x7f0000001e80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r23}}, {}, [@exit, @exit, @cb_func={0x18, 0x9, 0x4, 0x0, 0x3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffff523f}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r17}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001f80)='GPL\x00', 0x3, 0xcd, &(0x7f0000001fc0)=""/205, 0x40f00, 0x42, '\x00', r24, 0x0, r20, 0x8, 0x0, 0x0, 0x10, &(0x7f0000002400)={0x1, 0x3, 0x80000000, 0x6}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000002440)=[r6, r17, r3, r13, r20], &(0x7f0000002480)=[{0x0, 0x2, 0x4, 0xb}, {0x3, 0x4, 0xe, 0x9}, {0x2, 0x5, 0xe, 0x7}], 0x10, 0x4}, 0x94) bpf$ENABLE_STATS(0x20, &(0x7f0000002580), 0x4) (async, rerun: 64) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000026c0)={@cgroup=r11, 0x37, 0x0, 0x2, &(0x7f00000025c0)=[0x0], 0x1, 0x0, &(0x7f0000002600)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000002640)=[0x0, 0x0], &(0x7f0000002680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) (rerun: 64) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000002b00)={@fallback=r15, 0xffffffffffffffff, 0x31, 0x8, 0x0, @void, @value=r12, @void, @void, r25}, 0x20) 1.00574978s ago: executing program 3 (id=3708): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000001300)={0x2, 0x80, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/222, 0xde}], 0x1}, 0x40000020) sendmsg$tipc(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8084}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x1e140000000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xe, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, '\x00', 0x0, @sk_skb=0x4}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x2000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x11, 0x2, 0x0) r6 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r6, 0x107, 0x12, 0x0, 0x0) close(r5) socket$kcm(0x11, 0x2, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r7, 0x4004743d, 0x110e22fff6) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) close(r7) socket$kcm(0x2, 0x6, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x1c) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[], 0x48) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000080)={r8, 0x0, 0x0}, 0x20) 983.530751ms ago: executing program 5 (id=3709): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x0, 0x0}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000017000000bca30000001400002403000040feffff6b0af0ff0000000071a4f0ff000000001f030000000000002e0a0200000000002604fdffffff000061140800000000001d430000000000007a0a00fe0000001f6114100000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f30002af51efd601b6bf01c8e8b1fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff6194732827a58f0177184b6a89adaf17b0a6041bdef728f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5901a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb1188883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d648532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0900000000000000ff0f4000000000f00700003c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c1011e32f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963442aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2869291b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e637d4219ef7ec61261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addbc4b3093c91b8068c5adfcb0d7fd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f37382000000000000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf799b3746979f99f6a1527f004f37e84fb478199dc1020f4beb98b8074bf7df8b5e783637daf121f175a81cffff4ac55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a274000000000000000000000000000000000000000000000009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4120260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07e18b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e8c0a0d213c3ffad44d2a376def42e41e9fc3167a257e040fa7cf32c221aaac6cfdeb33c27500001a0000000000000000000017350000c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d10522a7a945b93fb705b95b6aae27a8fab1e6984c8bdc12360627137ab6737b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481ffe46a4ce86be0b1f8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0b74903580ac987fd637c80d6c7d0de4614195e40d797c0348dd70f36a220e8b3710fb5358c27e90793bcb9ee6319342c4b239ca8cbc6fc83d32e6eb62ad92e43991f2447be9c2a1ae1119eafb901a43d57e885116d19aa152bfb89f8d0b2516f80120a1cddff771657f3d0288ec3899f1e3ba0151c4037148fb479de703fd52b6573349c28d1b107d859b4961324c17756dde99de1924a1d2b7095d34a55060f47f4407d89acf9f285b20c2e6b3d0491d0d3591b0d94713332b6b79c8297117b0d14eff64e0aca8a4b4aa773d8fba1217e9519952419bb9dd998d0ec870ff00b6d556018602738fbc6cec89d6dd13cf55b96f6fe9a137d2d6a56ad78e52c23ed080000000000002bc261a781fd14126c146a0aac4221839a4b9bbf61e4bba695a41e2109eba8e40c370267cc51ffadbd15cafc97a4d3edfdcb9b5729307c6bdaf7b69325fb05fa8a9869de0600ee477d71bf3e36d1d9019edfa27aae24b632f251df210c86a18fae731ecb8b0d48357378caf2b6789509b1bacfd4fa812fc341875cfa5e798bbf59770000000000000000c8a594ea3c3347962d9113b1fecdfad5a8da641053f02e49456f5d21674521e67a5b18ea451eccf69dd6af928d2d68da9304a2271d96c22fdcea26498d26229110b1aade386b113045033a6188d56e675564d8cb8d5b40114b0f5bf15dd64c9ece60b8588ee8777d0ea8f4713b258427c7d90f9e93348e17723ba9ab8ae790f74cc41ae5795d35f3cec40dff485d2802c08611454d9ea784a205bcc07ec26f906f3cf45bb37014ab6f22af6213618e242b283ea9d3f0677ee598072ec06f7170009d92bb7eddd12c378dfd3e74ec056ee83eef666423d934fc5908c9ff98715218a5964f1e00000000426ac9588e27aefe307f49662990ee823568bbc2f89596ced7c6c52d76b8096f1848410843b93fd404f535be474f456778b5ef85abb8fc2336abd5ea64a6efea8a5aca0015499b0200780a7bae4df603bd3c72808cf300440b1b638a6640f7de8d0d82f359ca2f779cd48cd8d3603f4f69e47f386988c9b7b5d6dd3d48a1fdca78fa04d7c87bea42161a4c0d7cf0125b43dc9d8845f3c05a08acda647e7143d0e0aee2949a45e2848890522c2288072467d2afe269f589fb7e034b92d3ca245b16b71998711bfe206c9690b6d0eebb06a29349229eb45ff15c63aa2c82c56d7420738cd1b04eb16e87cb524315d7361ea3635d3799bb7fcc56aa5e1dbe031a7a12554dee6754b72f43a6fddf427f32ec3df274a88097725679769beebf1aa6eb09d5154e4900000000000d0f7160a05911d969879953d3d4702b78825d5ed789711b77d40dc31e0b8fc651b45559da463f00000000000000005bae7859839f856e7a397913eec7977f6231c5f11849b3deabc60c5ccf240d16924eb760a969813be02a229c674045b88915518a17b683268f10358e1c0b20cfc2bd105e5e1db7fed951b8faf126267bb38b8d356f63d3433d3dee643503a8ba4968adf6673f720c474ecf324d989235f1b52aacfe52e4519af87b7e1594728d6d6fff1248e72d5b1b1b692b2b732f0f2ac0714079fd7bf97bf2b5687d1db91daa5210d09ebe66d00ff4f35143be01585e629d408f2d00a0a290db76adc5f57e160b2c188bb1ecc4e7d2948788e4f9c1bcaf91dac53a2f525f7385d5d82728b5217908748f4c22b6d797b5bbeb61411f88ee1554a78306fe"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x5, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) 665.83164ms ago: executing program 4 (id=3710): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa, 0x0, 0x68}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x83}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000}, 0x48) 463.361372ms ago: executing program 4 (id=3711): bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x15, 0x1, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x101048, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r0) ioctl$SIOCSIFHWADDR(r0, 0x8b1a, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x43}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x81, 0xfc, 0x4, 0xa, 0x0, 0x2, 0xb4608, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x5, 0x4, @perf_bp={0x0, 0x6}, 0x2000, 0xfffffffffffffff1, 0x2, 0x8, 0x4, 0x1ff, 0xf5d4, 0x0, 0x3ea9, 0x0, 0x9408}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x6e, 0xa, 0xa, 0x0, 0x0, 0x61, 0x10, 0x24}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{0xffffffffffffffff, 0xffffffffffffffff}, 0x0, &(0x7f0000000080)=r0}, 0xfffffffffffffdbe) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r1, 0x0, &(0x7f0000001780)=""/4096}, 0x20) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0xc, 0x0, 0x0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0xe, 0x0, 0x0, 0x7602, 0x0, 0x140, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0xf, 0x7f, 0x0, 0x0, 0x7602, 0x7f, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 325.7368ms ago: executing program 0 (id=3712): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x11300}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) r1 = socket$kcm(0x10, 0x2, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000200000000ff0f00000000000000009800", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB='\x00'/21], 0x48) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f92124fc60041111000a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 224.474236ms ago: executing program 2 (id=3517): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000013006bcd9e3fe3d46e48aa31086b8703130000001f00000000000000080003002e000a000d002e009ee517d34460bc24eab556a705251e6182949a3651f60a84c902d1938037e73f07d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8983, &(0x7f00000000c0)='\x02\x00\x00\x00\xbc$j\xfef;q1\xff\xd3r\xa3\xc81U\x8ez.F\xce\xfb\x9c\x19\xf3v\x88\x91\xbct\xb0\x1bLq\x15\x00\xad\t\x13\xf5U\x02\xc9d6q\xc3\xa5\xcd\x01t\r=\xad-\x13\xb0 U\xaaC\xc388\x13\xc6H\x0f \x03\x9e\xa98\xa1\xc3\xe9\x06C\xd4\xb5\x18}4\xa9yA8\x1fQ\xdfN\x8e\xd7m\xee\xb8N\x98\xef\xff\xddR\xec~c\xcb\x93\x84\x7f\\x6\xedZ\x82\xa0\x1by\x17\x1a\xc8\x98\x99\x0f') perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x6, 0xfe, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x72bd1de2ad10d6f3, 0xfffffffffffffffc, 0xcfb5, 0x1, 0x0, 0x4, 0x0, 0x0, 0x84000, 0x0, 0x1}, 0x0, 0xb, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000280)={&(0x7f00000000c0)="6f4926419c2799bc2554f68789a9092b288f81fbfa1d792165c2ad9a49d3ec9e580c5e1f5e23bfa84423a236284eb619220609460a33eed5a3c88faef00bdf4a89b18c3588b62d9b3826df6bfb572e65f102f895cc2ac54ee42f812b7aa58f44f7abdb0e36", &(0x7f0000000000)=""/8, &(0x7f0000000200)="cd2db2d098f44eafd57a2bc4a60882f4767f61aa61c5e01648390335ead7c1589a4392c28478921e7468bf00a1ae4aaff5cbc81fb1f0b8e853669db8c430e5acba20364e6397d02600bbef997172113c5558f19fed", &(0x7f0000000140)="3a620764182394395405f28d831b3e675d8a1a2fa88932bea8a9b0a3cd80", 0xd, r0}, 0x38) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40305828, &(0x7f0000000040)=0x20000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) 101.173383ms ago: executing program 5 (id=3713): recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000600)=@l2tp={0x2, 0x0, @broadcast}, 0x80, 0x0}, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540, 0x0, 0x120}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1, 0x1, 0x7fe2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x305800, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) r4 = socket$kcm(0x2, 0x2, 0x0) perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0xf, &(0x7f00000002c0), 0x161) sendmsg$kcm(r4, &(0x7f0000000b40)={0x0, 0x0, 0x0}, 0x20000800) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="14000000040000000400000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r5, &(0x7f0000000140), &(0x7f0000000200)=""/221}, 0x20) close(0x4) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f00000001c0)={'team0\x00', @broadcast}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x4, 0x9, 0x3, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r7 = perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@ifindex, 0x11, 0x1, 0x5, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x6, '\x00', 0x0, r6, 0x2, 0x3, 0x1}, 0x50) 99.588643ms ago: executing program 3 (id=3714): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0xc0042, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfefffffc, 0x2, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x3fe, 0x3, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x3a}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000}, 0x48) socket$kcm(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x3ffffe, 0x0, 0x41000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$kcm(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008000000"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x60}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x0, 0xe80, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888808", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.048479ms ago: executing program 2 (id=3715): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x1}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="882f1242a03c3f98722780b605a7", 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{}, &(0x7f0000000080), &(0x7f0000000240)}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x3, 0x40}, 0x8210, 0x10000, 0x9e4, 0x5, 0x8, 0xe, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TUNSETCARRIER(r2, 0x400454e2, &(0x7f00000001c0)=0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x0, 0x40}, 0x114905, 0x4, 0x6, 0x1, 0x101, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000e40)={0x0, 0x0, 0x56}, 0x28) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000380)="2e00000011008188040f80ec59acbc0413a181002e00000001010000000000000e000a000f000000028002002d1fdfa3b0316525242572353078510adf666c8ac28e14d44df55f1562fef83db28e3d310befa47763fd684af1fcea040d9d9503d35a8280caff5b8557550d786259679d13467f0dacba6017365efdd8fd5dbfe11461cc", 0x83}], 0x1}, 0x2404c050) 0s ago: executing program 0 (id=3716): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000340)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001780)=""/4071, 0xfe7}], 0x1}, 0x40000102) sendmsg$inet(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x1}], 0x1}, 0x40) kernel console output (not intermixed with test programs): [T11183] genl_rcv_msg+0xcea/0xf90 [ 635.177943][T11183] ? genl_bind+0x380/0x380 [ 635.182383][T11183] ? __dev_queue_xmit+0x1c51/0x2fd0 [ 635.187603][T11183] ? verify_lock_unused+0x140/0x140 [ 635.192838][T11183] ? kmalloc_large_node+0xf2/0x190 [ 635.197994][T11183] ? dev_queue_xmit+0x20/0x20 [ 635.202691][T11183] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 635.209341][T11183] netlink_rcv_skb+0x1f5/0x440 [ 635.214126][T11183] ? genl_bind+0x380/0x380 [ 635.218557][T11183] ? netlink_ack+0xb50/0xb50 [ 635.223170][T11183] ? __lock_acquire+0x7d10/0x7d10 [ 635.228223][T11183] ? down_read+0x1aa/0x2e0 [ 635.232658][T11183] genl_rcv+0x24/0x40 [ 635.236653][T11183] netlink_unicast+0x774/0x920 [ 635.241443][T11183] netlink_sendmsg+0x8ba/0xbe0 [ 635.246225][T11183] ? netlink_getsockopt+0x570/0x570 [ 635.251438][T11183] ? aa_sock_msg_perm+0x94/0x150 [ 635.256394][T11183] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 635.261704][T11183] ? security_socket_sendmsg+0x7c/0xa0 [ 635.267183][T11183] ? netlink_getsockopt+0x570/0x570 [ 635.272408][T11183] ____sys_sendmsg+0x5b7/0x8f0 [ 635.277202][T11183] ? __sys_sendmsg_sock+0x30/0x30 [ 635.282250][T11183] ? import_iovec+0x6f/0xa0 [ 635.286786][T11183] ___sys_sendmsg+0x236/0x2e0 [ 635.291489][T11183] ? __sys_sendmsg+0x2a0/0x2a0 [ 635.296315][T11183] __se_sys_sendmsg+0x1af/0x290 [ 635.301184][T11183] ? __x64_sys_sendmsg+0x80/0x80 [ 635.306151][T11183] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 635.312161][T11183] ? trace_sys_enter+0x1f/0x80 [ 635.316939][T11183] do_syscall_64+0x4c/0xa0 [ 635.321368][T11183] ? clear_bhb_loop+0x30/0x80 [ 635.326067][T11183] ? clear_bhb_loop+0x30/0x80 [ 635.330765][T11183] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 635.336680][T11183] RIP: 0033:0x7f2bef182eb9 [ 635.341111][T11183] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 635.360734][T11183] RSP: 002b:00007f2bed3bd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 635.369165][T11183] RAX: ffffffffffffffda RBX: 00007f2bef3fe090 RCX: 00007f2bef182eb9 [ 635.377152][T11183] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 635.385143][T11183] RBP: 00007f2bef1f0c1f R08: 0000000000000000 R09: 0000000000000000 [ 635.393128][T11183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 635.401115][T11183] R13: 00007f2bef3fe128 R14: 00007f2bef3fe090 R15: 00007ffc8093ca68 [ 635.409117][T11183] [ 635.687447][T11197] device bond_slave_0 left promiscuous mode [ 635.694182][T11197] device bond_slave_1 left promiscuous mode [ 635.820361][T11197] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 635.847674][T11197] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 635.867137][T11197] bond0 (unregistering): Released all slaves [ 636.373012][T11202] device wlan0 left promiscuous mode [ 636.391480][T11203] device wlan0 entered promiscuous mode [ 636.542597][T11206] __nla_validate_parse: 6 callbacks suppressed [ 636.542616][T11206] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2373'. [ 636.814200][T11228] validate_nla: 2 callbacks suppressed [ 636.814219][T11228] netlink: 'syz.1.2379': attribute type 3 has an invalid length. [ 636.869437][T11228] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2379'. [ 636.942567][T11233] netlink: 'syz.3.2384': attribute type 46 has an invalid length. [ 636.950620][T11233] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2384'. [ 637.421405][T11263] netlink: 'syz.0.2393': attribute type 1 has an invalid length. [ 637.446222][T11263] netlink: 'syz.0.2393': attribute type 4 has an invalid length. [ 637.481583][T11263] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.2393'. [ 640.405595][T11270] netlink: 'syz.4.2397': attribute type 10 has an invalid length. [ 640.427012][T11270] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2397'. [ 640.603663][T11270] device veth0_vlan left promiscuous mode [ 640.638089][T11270] device veth0_vlan entered promiscuous mode [ 640.694178][T11270] team0: Device veth0_vlan failed to register rx_handler [ 640.828570][T11279] netlink: 'syz.3.2400': attribute type 8 has an invalid length. [ 640.841750][T11279] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2400'. [ 641.473099][T11316] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2413'. [ 641.700073][T11330] netlink: 'syz.4.2416': attribute type 10 has an invalid length. [ 641.708576][T11330] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2416'. [ 641.724326][T11330] device bond0 entered promiscuous mode [ 641.729955][T11330] device bond_slave_0 entered promiscuous mode [ 641.739313][T11330] device bond_slave_1 entered promiscuous mode [ 641.787641][T11330] device bridge0 entered promiscuous mode [ 641.794642][T11330] bridge0: port 3(bond0) entered blocking state [ 641.801188][T11330] bridge0: port 3(bond0) entered disabled state [ 641.813888][T11332] netlink: 192436 bytes leftover after parsing attributes in process `syz.3.2418'. [ 641.823803][T11332] net_ratelimit: 68 callbacks suppressed [ 641.823822][T11332] openvswitch: netlink: Duplicate key (type 0). [ 641.936425][T11338] FAULT_INJECTION: forcing a failure. [ 641.936425][T11338] name failslab, interval 1, probability 0, space 0, times 0 [ 642.004262][T11338] CPU: 1 PID: 11338 Comm: syz.1.2419 Not tainted syzkaller #0 [ 642.011797][T11338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 642.021892][T11338] Call Trace: [ 642.025208][T11338] [ 642.028161][T11338] dump_stack_lvl+0x188/0x250 [ 642.032870][T11338] ? show_regs_print_info+0x20/0x20 [ 642.038095][T11338] ? load_image+0x400/0x400 [ 642.042619][T11338] ? __might_sleep+0xf0/0xf0 [ 642.047223][T11338] ? __lock_acquire+0x7d10/0x7d10 [ 642.052282][T11338] ? trace_event_raw_event_lock+0x270/0x270 [ 642.058202][T11338] should_fail+0x38c/0x4c0 [ 642.062649][T11338] should_failslab+0x5/0x20 [ 642.067170][T11338] slab_pre_alloc_hook+0x51/0xc0 [ 642.072124][T11338] __kmalloc+0x6b/0x330 [ 642.076295][T11338] ? bpf_map_meta_alloc+0x1a4/0x7f0 [ 642.081507][T11338] ? __fdget+0x18b/0x210 [ 642.085772][T11338] bpf_map_meta_alloc+0x1a4/0x7f0 [ 642.090818][T11338] htab_of_map_alloc+0x34/0xc0 [ 642.095597][T11338] map_create+0x485/0x2350 [ 642.100035][T11338] __sys_bpf+0x30a/0x6f0 [ 642.104302][T11338] ? bpf_link_show_fdinfo+0x380/0x380 [ 642.109702][T11338] ? vtime_user_exit+0x2c8/0x3e0 [ 642.114665][T11338] __x64_sys_bpf+0x78/0x90 [ 642.119319][T11338] do_syscall_64+0x4c/0xa0 [ 642.123762][T11338] ? clear_bhb_loop+0x30/0x80 [ 642.128459][T11338] ? clear_bhb_loop+0x30/0x80 [ 642.133153][T11338] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 642.139170][T11338] RIP: 0033:0x7f307d9fbeb9 [ 642.143630][T11338] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 642.163298][T11338] RSP: 002b:00007f307bc57028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 642.171738][T11338] RAX: ffffffffffffffda RBX: 00007f307dc76fa0 RCX: 00007f307d9fbeb9 [ 642.179733][T11338] RDX: 0000000000000050 RSI: 0000200000000040 RDI: 0000000000000000 [ 642.187745][T11338] RBP: 00007f307bc57090 R08: 0000000000000000 R09: 0000000000000000 [ 642.195733][T11338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 642.203730][T11338] R13: 00007f307dc77038 R14: 00007f307dc76fa0 R15: 00007ffc80088ad8 [ 642.211737][T11338] [ 642.455469][T11366] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.2430'. [ 642.755457][T11381] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2433'. [ 643.196065][T11402] netlink: 'syz.3.2443': attribute type 10 has an invalid length. [ 643.752129][T11423] netlink: 'syz.3.2450': attribute type 21 has an invalid length. [ 643.921580][T11423] netlink: 14546 bytes leftover after parsing attributes in process `syz.3.2450'. [ 643.997336][T11428] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.2451'. [ 644.118477][T11431] netlink: 'syz.0.2452': attribute type 1 has an invalid length. [ 644.145143][T11431] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2452'. [ 644.529032][T11439] netlink: 'syz.4.2453': attribute type 4 has an invalid length. [ 644.542370][T11439] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2453'. [ 644.557035][T11439] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 645.420115][T11465] netlink: 'syz.2.2462': attribute type 8 has an invalid length. [ 645.518027][T11465] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2462'. [ 645.666081][T11469] netlink: 763 bytes leftover after parsing attributes in process `syz.3.2463'. [ 647.354162][T11505] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.2473'. [ 647.814942][T11501] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 647.851284][T11501] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 648.072163][T11522] sctp: [Deprecated]: syz.3.2481 (pid 11522) Use of struct sctp_assoc_value in delayed_ack socket option. [ 648.072163][T11522] Use struct sctp_sack_info instead [ 648.206806][T11526] netlink: 'syz.3.2483': attribute type 2 has an invalid length. [ 648.220786][T11526] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.2483'. [ 648.426154][T11528] netlink: 763 bytes leftover after parsing attributes in process `syz.4.2482'. [ 648.448336][T11532] FAULT_INJECTION: forcing a failure. [ 648.448336][T11532] name failslab, interval 1, probability 0, space 0, times 0 [ 648.531980][T11532] CPU: 0 PID: 11532 Comm: syz.0.2485 Not tainted syzkaller #0 [ 648.539502][T11532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 648.549595][T11532] Call Trace: [ 648.552915][T11532] [ 648.555866][T11532] dump_stack_lvl+0x188/0x250 [ 648.560580][T11532] ? show_regs_print_info+0x20/0x20 [ 648.565814][T11532] ? load_image+0x400/0x400 [ 648.570361][T11532] ? __might_sleep+0xf0/0xf0 [ 648.574989][T11532] ? __lock_acquire+0x7d10/0x7d10 [ 648.580138][T11532] should_fail+0x38c/0x4c0 [ 648.584613][T11532] should_failslab+0x5/0x20 [ 648.589144][T11532] slab_pre_alloc_hook+0x51/0xc0 [ 648.594135][T11532] kmem_cache_alloc_node_trace+0x4a/0x300 [ 648.599895][T11532] ? __get_vm_area_node+0x119/0x2d0 [ 648.605144][T11532] __get_vm_area_node+0x119/0x2d0 [ 648.610267][T11532] __vmalloc_node_range+0xef/0x8b0 [ 648.615421][T11532] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 648.621011][T11532] ? end_current_label_crit_section+0x170/0x170 [ 648.627297][T11532] ? lockdep_hardirqs_on+0x94/0x140 [ 648.632535][T11532] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 648.638120][T11532] __vmalloc+0x76/0x80 [ 648.642230][T11532] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 648.647822][T11532] bpf_prog_alloc_no_stats+0x36/0x2c0 [ 648.653232][T11532] bpf_prog_alloc+0x1a/0x1e0 [ 648.657874][T11532] bpf_prog_load+0x7c6/0x1510 [ 648.662613][T11532] ? map_freeze+0x350/0x350 [ 648.667154][T11532] ? __might_fault+0xb7/0x110 [ 648.671884][T11532] ? __might_fault+0xb3/0x110 [ 648.676593][T11532] ? bpf_lsm_bpf+0x5/0x10 [ 648.680950][T11532] ? security_bpf+0x7a/0xa0 [ 648.685486][T11532] __sys_bpf+0x532/0x6f0 [ 648.689758][T11532] ? bpf_link_show_fdinfo+0x380/0x380 [ 648.695213][T11532] __x64_sys_bpf+0x78/0x90 [ 648.699655][T11532] do_syscall_64+0x4c/0xa0 [ 648.704189][T11532] ? clear_bhb_loop+0x30/0x80 [ 648.708898][T11532] ? clear_bhb_loop+0x30/0x80 [ 648.713615][T11532] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 648.719546][T11532] RIP: 0033:0x7f30662dbeb9 [ 648.724003][T11532] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 648.743652][T11532] RSP: 002b:00007f3064537028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 648.752116][T11532] RAX: ffffffffffffffda RBX: 00007f3066556fa0 RCX: 00007f30662dbeb9 [ 648.760132][T11532] RDX: 0000000000000022 RSI: 0000200000000900 RDI: 0000000000000005 [ 648.768144][T11532] RBP: 00007f3064537090 R08: 0000000000000000 R09: 0000000000000000 [ 648.776154][T11532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 648.784168][T11532] R13: 00007f3066557038 R14: 00007f3066556fa0 R15: 00007fffb361f1e8 [ 648.792208][T11532] [ 649.255255][T11532] syz.0.2485: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 649.556557][T11532] CPU: 0 PID: 11532 Comm: syz.0.2485 Not tainted syzkaller #0 [ 649.564098][T11532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 649.574192][T11532] Call Trace: [ 649.577497][T11532] [ 649.580452][T11532] dump_stack_lvl+0x188/0x250 [ 649.585171][T11532] ? rcu_lock_release+0x5/0x20 [ 649.589969][T11532] ? show_regs_print_info+0x20/0x20 [ 649.595303][T11532] ? load_image+0x400/0x400 [ 649.599854][T11532] warn_alloc+0x243/0x320 [ 649.604223][T11532] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 649.610412][T11532] ? zone_watermark_ok_safe+0x240/0x240 [ 649.616003][T11532] ? __get_vm_area_node+0x11c/0x2d0 [ 649.621241][T11532] ? __get_vm_area_node+0x2b5/0x2d0 [ 649.626483][T11532] __vmalloc_node_range+0x2b1/0x8b0 [ 649.631725][T11532] ? end_current_label_crit_section+0x170/0x170 [ 649.638107][T11532] ? lockdep_hardirqs_on+0x94/0x140 [ 649.643339][T11532] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 649.648920][T11532] __vmalloc+0x76/0x80 [ 649.653022][T11532] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 649.658617][T11532] bpf_prog_alloc_no_stats+0x36/0x2c0 [ 649.664024][T11532] bpf_prog_alloc+0x1a/0x1e0 [ 649.668657][T11532] bpf_prog_load+0x7c6/0x1510 [ 649.673384][T11532] ? map_freeze+0x350/0x350 [ 649.677926][T11532] ? __might_fault+0xb7/0x110 [ 649.682646][T11532] ? __might_fault+0xb3/0x110 [ 649.687357][T11532] ? bpf_lsm_bpf+0x5/0x10 [ 649.691720][T11532] ? security_bpf+0x7a/0xa0 [ 649.696262][T11532] __sys_bpf+0x532/0x6f0 [ 649.700545][T11532] ? bpf_link_show_fdinfo+0x380/0x380 [ 649.705968][T11532] __x64_sys_bpf+0x78/0x90 [ 649.710417][T11532] do_syscall_64+0x4c/0xa0 [ 649.714863][T11532] ? clear_bhb_loop+0x30/0x80 [ 649.719573][T11532] ? clear_bhb_loop+0x30/0x80 [ 649.724281][T11532] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 649.730214][T11532] RIP: 0033:0x7f30662dbeb9 [ 649.734659][T11532] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 649.754391][T11532] RSP: 002b:00007f3064537028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 649.762848][T11532] RAX: ffffffffffffffda RBX: 00007f3066556fa0 RCX: 00007f30662dbeb9 [ 649.770856][T11532] RDX: 0000000000000022 RSI: 0000200000000900 RDI: 0000000000000005 [ 649.778886][T11532] RBP: 00007f3064537090 R08: 0000000000000000 R09: 0000000000000000 [ 649.786903][T11532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 649.794906][T11532] R13: 00007f3066557038 R14: 00007f3066556fa0 R15: 00007fffb361f1e8 [ 649.802925][T11532] [ 650.320856][T11532] Mem-Info: [ 650.324325][T11532] active_anon:273 inactive_anon:9436 isolated_anon:0 [ 650.324325][T11532] active_file:19203 inactive_file:36968 isolated_file:0 [ 650.324325][T11532] unevictable:768 dirty:113 writeback:0 [ 650.324325][T11532] slab_reclaimable:20436 slab_unreclaimable:104754 [ 650.324325][T11532] mapped:29959 shmem:1629 pagetables:635 bounce:0 [ 650.324325][T11532] kernel_misc_reclaimable:0 [ 650.324325][T11532] free:1367464 free_pcp:5833 free_cma:0 [ 650.499381][T11532] Node 0 active_anon:1060kB inactive_anon:37236kB active_file:76612kB inactive_file:147872kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:119836kB dirty:452kB writeback:0kB shmem:4440kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:11024kB pagetables:2540kB all_unreclaimable? no [ 650.623394][T11532] Node 1 active_anon:32kB inactive_anon:508kB active_file:200kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:2076kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no [ 650.732214][T11532] Node 0 DMA free:15360kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 650.810393][T11532] lowmem_reserve[]: 0 2539 2540 2540 2540 [ 650.817058][T11532] Node 0 DMA32 free:1540088kB min:34784kB low:43480kB high:52176kB reserved_highatomic:0KB active_anon:1060kB inactive_anon:37236kB active_file:76612kB inactive_file:147872kB unevictable:1536kB writepending:452kB present:3129332kB managed:2606560kB mlocked:0kB bounce:0kB free_pcp:27452kB local_pcp:16404kB free_cma:0kB [ 650.909012][T11532] lowmem_reserve[]: 0 0 0 0 0 [ 650.929304][T11532] Node 0 Normal free:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:660kB mlocked:0kB bounce:0kB free_pcp:20kB local_pcp:12kB free_cma:0kB [ 651.008131][T11532] lowmem_reserve[]: 0 0 0 0 0 [ 651.031640][T11532] Node 1 Normal free:3916216kB min:55108kB low:68884kB high:82660kB reserved_highatomic:0KB active_anon:32kB inactive_anon:508kB active_file:200kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:8448kB local_pcp:3652kB free_cma:0kB [ 651.125988][T11532] lowmem_reserve[]: 0 0 0 0 0 [ 651.132921][T11532] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 651.174364][T11532] Node 0 DMA32: 1092*4kB (UM) 553*8kB (UME) 607*16kB (UME) 2211*32kB (UME) 1303*64kB (UME) 271*128kB (UME) 207*256kB (UM) 164*512kB (UME) 97*1024kB (UME) 47*2048kB (UME) 246*4096kB (UM) = 1547496kB [ 651.233788][T11532] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 651.277528][T11532] Node 1 Normal: 120*4kB (UE) 35*8kB (UME) 22*16kB (UME) 117*32kB (UE) 49*64kB (UME) 19*128kB (UME) 7*256kB (UME) 3*512kB (U) 1*1024kB (U) 3*2048kB (UME) 951*4096kB (M) = 3916216kB [ 651.347085][T11532] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 651.380920][T11532] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 651.390550][T11532] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 651.426828][T11532] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 651.456857][T11532] 57800 total pagecache pages [ 651.468578][T11532] 0 pages in swap cache [ 651.486868][T11532] Swap cache stats: add 0, delete 0, find 0/0 [ 651.565794][T11532] Free swap = 124996kB [ 651.593226][T11548] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.2487'. [ 651.607807][T11548] netlink: 6324 bytes leftover after parsing attributes in process `syz.3.2487'. [ 651.633304][T11532] Total swap = 124996kB [ 651.675803][T11532] 2097051 pages RAM [ 651.679794][T11532] 0 pages HighMem/MovableOnly [ 651.702613][T11532] 411488 pages reserved [ 651.706953][T11532] 0 pages cma reserved [ 651.792677][T11551] netlink: 'syz.2.2489': attribute type 9 has an invalid length. [ 651.851545][T11551] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2489'. [ 652.826266][T11574] netlink: 'syz.2.2497': attribute type 1 has an invalid length. [ 652.863127][T11574] netlink: 'syz.2.2497': attribute type 4 has an invalid length. [ 652.896704][T11574] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.2497'. [ 653.400717][T11589] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2504'. [ 653.672095][T11603] netlink: 'syz.0.2507': attribute type 10 has an invalid length. [ 653.679971][T11603] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2507'. [ 653.840925][T11603] device team0 entered promiscuous mode [ 653.858985][T11603] device team_slave_0 entered promiscuous mode [ 653.872620][T11603] device team_slave_1 entered promiscuous mode [ 653.931196][T11603] device wlan1 entered promiscuous mode [ 653.966473][T11603] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 654.273216][T11624] netlink: 'syz.0.2516': attribute type 29 has an invalid length. [ 654.347510][T11624] netlink: 'syz.0.2516': attribute type 29 has an invalid length. [ 654.406984][T11625] netlink: 'syz.0.2516': attribute type 29 has an invalid length. [ 654.423120][T11626] netlink: 'syz.0.2516': attribute type 29 has an invalid length. [ 654.452565][T11624] netlink: 'syz.0.2516': attribute type 29 has an invalid length. [ 657.894774][T11654] netlink: 'syz.3.2527': attribute type 25 has an invalid length. [ 658.227765][T11673] FAULT_INJECTION: forcing a failure. [ 658.227765][T11673] name failslab, interval 1, probability 0, space 0, times 0 [ 658.280067][T11666] sctp: [Deprecated]: syz.0.2530 (pid 11666) Use of struct sctp_assoc_value in delayed_ack socket option. [ 658.280067][T11666] Use struct sctp_sack_info instead [ 658.301474][T11673] CPU: 1 PID: 11673 Comm: syz.2.2533 Not tainted syzkaller #0 [ 658.308997][T11673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 658.319093][T11673] Call Trace: [ 658.322398][T11673] [ 658.325360][T11673] dump_stack_lvl+0x188/0x250 [ 658.330100][T11673] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 658.336299][T11673] ? show_regs_print_info+0x20/0x20 [ 658.341543][T11673] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 658.347767][T11673] should_fail+0x38c/0x4c0 [ 658.352226][T11673] should_failslab+0x5/0x20 [ 658.356764][T11673] slab_pre_alloc_hook+0x51/0xc0 [ 658.361776][T11673] __kmalloc+0x6b/0x330 [ 658.365964][T11673] ? sock_kmalloc+0x92/0xf0 [ 658.370496][T11673] ? kasan_check_range+0x84/0x290 [ 658.375599][T11673] sock_kmalloc+0x92/0xf0 [ 658.379973][T11673] ____sys_sendmsg+0x1bb/0x8f0 [ 658.384783][T11673] ? __sys_sendmsg_sock+0x30/0x30 [ 658.389853][T11673] ? import_iovec+0x6f/0xa0 [ 658.394390][T11673] ___sys_sendmsg+0x236/0x2e0 [ 658.399142][T11673] ? __sys_sendmsg+0x2a0/0x2a0 [ 658.403966][T11673] ? rcu_is_watching+0x11/0xa0 [ 658.408791][T11673] __se_sys_sendmsg+0x1af/0x290 [ 658.413688][T11673] ? __x64_sys_sendmsg+0x80/0x80 [ 658.418683][T11673] ? syscall_enter_from_user_mode+0x2a/0x70 [ 658.424616][T11673] do_syscall_64+0x4c/0xa0 [ 658.429067][T11673] ? clear_bhb_loop+0x30/0x80 [ 658.433776][T11673] ? clear_bhb_loop+0x30/0x80 [ 658.438487][T11673] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 658.444417][T11673] RIP: 0033:0x7f2bef182eb9 [ 658.448869][T11673] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 658.468508][T11673] RSP: 002b:00007f2bed3de028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 658.476965][T11673] RAX: ffffffffffffffda RBX: 00007f2bef3fdfa0 RCX: 00007f2bef182eb9 [ 658.484979][T11673] RDX: 0000000002048810 RSI: 0000200000000180 RDI: 0000000000000004 [ 658.492985][T11673] RBP: 00007f2bed3de090 R08: 0000000000000000 R09: 0000000000000000 [ 658.500996][T11673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 658.509006][T11673] R13: 00007f2bef3fe038 R14: 00007f2bef3fdfa0 R15: 00007ffc8093ca68 [ 658.517038][T11673] [ 659.971007][ T1325] Bluetooth: hci5: command 0x0409 tx timeout [ 661.120755][T11676] netlink: 'syz.2.2535': attribute type 16 has an invalid length. [ 661.128949][T11676] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2535'. [ 661.143494][T11677] netlink: 'syz.2.2535': attribute type 39 has an invalid length. [ 661.357679][T11687] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2540'. [ 661.427685][T11687] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2540'. [ 661.531706][T11652] chnl_net:caif_netlink_parms(): no params data found [ 661.998714][T11652] bridge0: port 1(bridge_slave_0) entered blocking state [ 662.013646][T11652] bridge0: port 1(bridge_slave_0) entered disabled state [ 662.026712][T11652] device bridge_slave_0 entered promiscuous mode [ 662.050002][T11652] bridge0: port 2(bridge_slave_1) entered blocking state [ 662.060696][ T4230] Bluetooth: hci5: command 0x041b tx timeout [ 662.070429][T11652] bridge0: port 2(bridge_slave_1) entered disabled state [ 662.089526][T11652] device bridge_slave_1 entered promiscuous mode [ 662.130624][T11652] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 662.160625][T11652] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 662.219012][T11652] team0: Port device team_slave_0 added [ 664.131299][ T4251] Bluetooth: hci5: command 0x040f tx timeout [ 665.089359][T11652] team0: Port device team_slave_1 added [ 665.226500][ T155] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 665.560108][T11720] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2550'. [ 665.668440][ T155] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 665.710856][T11725] netlink: 'syz.0.2548': attribute type 16 has an invalid length. [ 665.719487][T11725] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2548'. [ 665.763402][T11741] netlink: 'syz.4.2555': attribute type 16 has an invalid length. [ 665.771713][T11732] netlink: 'syz.0.2548': attribute type 39 has an invalid length. [ 665.792537][T11741] netlink: 'syz.4.2555': attribute type 3 has an invalid length. [ 665.801305][T11741] netlink: 199824 bytes leftover after parsing attributes in process `syz.4.2555'. [ 665.853906][T11652] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 665.887304][T11652] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 665.934283][T11652] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 666.016969][ T155] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.102890][T11751] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.2559'. [ 666.221080][ T4230] Bluetooth: hci5: command 0x0419 tx timeout [ 669.026104][T11652] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 669.073128][T11652] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 669.191861][T11652] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 669.212815][T11761] netlink: 'syz.3.2563': attribute type 1 has an invalid length. [ 669.221097][T11761] netlink: 146340 bytes leftover after parsing attributes in process `syz.3.2563'. [ 669.271697][T11762] netlink: 'syz.0.2560': attribute type 10 has an invalid length. [ 669.322858][ T155] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 669.443190][T11773] netlink: 'syz.3.2567': attribute type 16 has an invalid length. [ 669.451995][T11773] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2567'. [ 669.483440][T11773] bridge0: port 1(bridge_slave_0) entered disabled state [ 669.526121][T11778] netlink: 'syz.3.2567': attribute type 39 has an invalid length. [ 669.629469][T11652] device hsr_slave_0 entered promiscuous mode [ 669.657608][T11652] device hsr_slave_1 entered promiscuous mode [ 669.674392][T11652] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 669.743718][T11652] Cannot create hsr debugfs directory [ 670.265044][T11801] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.2575'. [ 673.225513][T11820] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2577'. [ 673.731002][T11652] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 673.762334][T11652] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 673.816228][T11849] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.2587'. [ 674.081610][T11842] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2586'. [ 674.147366][T11842] netlink: 'syz.2.2586': attribute type 3 has an invalid length. [ 674.174389][T11842] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2586'. [ 676.804708][T11852] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2590'. [ 676.818547][T11856] IPv6: Can't replace route, no match found [ 676.862747][T11652] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 676.925713][T11860] mac80211_hwsim hwsim30 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 676.948851][T11652] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 677.052576][T11876] netlink: 'syz.3.2594': attribute type 46 has an invalid length. [ 677.060528][T11876] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2594'. [ 677.070434][T11877] netlink: 140 bytes leftover after parsing attributes in process `syz.0.2592'. [ 677.323979][T11886] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.2596'. [ 677.619855][T11900] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.2600'. [ 677.899625][ T155] syzkaller: port 1(erspan0) entered disabled state [ 678.062529][ T155] device erspan0 left promiscuous mode [ 678.081902][ T155] syzkaller: port 1(erspan0) entered disabled state [ 678.272315][T11925] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2603'. [ 678.284551][T11925] netlink: 'syz.3.2603': attribute type 3 has an invalid length. [ 678.295494][T11925] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2603'. [ 679.730976][ T4284] wlan1: Trigger new scan to find an IBSS to join [ 680.427378][T11938] netlink: 'syz.4.2607': attribute type 10 has an invalid length. [ 680.450557][T11938] device veth0_vlan left promiscuous mode [ 680.500972][T11938] device veth0_vlan entered promiscuous mode [ 680.538384][T11938] team0: Device veth0_vlan failed to register rx_handler [ 680.600613][T11652] 8021q: adding VLAN 0 to HW filter on device bond0 [ 680.646028][T11949] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.2611'. [ 680.691902][T11953] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2612'. [ 680.730412][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 680.778837][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 680.786764][T11953] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.2612'. [ 680.826581][T11652] 8021q: adding VLAN 0 to HW filter on device team0 [ 681.003498][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 681.019984][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 681.048452][ T4279] bridge0: port 1(bridge_slave_0) entered blocking state [ 681.055699][ T4279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 681.129166][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 681.149389][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 681.176724][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 681.200312][ T4279] bridge0: port 2(bridge_slave_1) entered blocking state [ 681.207549][ T4279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 681.246617][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 681.300366][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 681.406863][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 681.439712][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 681.485362][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 681.502236][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 681.555302][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 681.575335][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 681.585537][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 681.599400][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 681.617192][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 681.660602][T11652] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 681.955628][ T155] device hsr_slave_1 left promiscuous mode [ 681.967587][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 681.978923][ T155] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 682.231381][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 682.248856][ T155] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 682.263791][T12005] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.2624'. [ 682.447952][T12000] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2620'. [ 682.522390][T12000] netlink: 'syz.0.2620': attribute type 3 has an invalid length. [ 682.531193][T12000] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2620'. [ 684.523461][ T155] batman_adv: batadv0: Interface deactivated: hsr_slave_1 [ 684.531068][ T155] batman_adv: batadv0: Removing interface: hsr_slave_1 [ 684.550264][ T155] device bridge_slave_1 left promiscuous mode [ 684.557378][ T155] bridge0: port 2(bridge_slave_1) entered disabled state [ 684.588570][ T155] device bridge_slave_0 left promiscuous mode [ 684.595041][ T155] bridge0: port 1(bridge_slave_0) entered disabled state [ 684.624208][ T155] device veth1_macvtap left promiscuous mode [ 684.630482][ T155] device veth0_macvtap left promiscuous mode [ 684.637693][ T155] device veth1_vlan left promiscuous mode [ 684.646697][ T155] device veth0_vlan left promiscuous mode [ 684.691854][ T4284] wlan1: Trigger new scan to find an IBSS to join [ 685.065343][ T155] device geneve1 left promiscuous mode [ 685.075522][ T155] team0 (unregistering): Port device geneve1 removed [ 685.123718][ T155] device macvlan1 left promiscuous mode [ 685.133617][ T155] team0 (unregistering): Port device macvlan1 removed [ 685.208498][ T155] device team_slave_1 left promiscuous mode [ 685.216715][ T155] team0 (unregistering): Port device team_slave_1 removed [ 685.234114][ T155] device team_slave_0 left promiscuous mode [ 685.243421][ T155] team0 (unregistering): Port device team_slave_0 removed [ 685.259572][ T155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 685.269783][ T155] device bond_slave_1 left promiscuous mode [ 685.286447][ T155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 685.295894][ T155] device bond_slave_0 left promiscuous mode [ 685.356307][ T155] device bridge0 left promiscuous mode [ 685.365385][ T155] team0 (unregistering): Port device bridge0 removed [ 685.388792][ T155] bond0 (unregistering): Released all slaves [ 685.470777][T12016] netlink: 'syz.3.2629': attribute type 10 has an invalid length. [ 685.631543][ T4279] wlan1: Creating new IBSS network, BSSID c2:18:84:73:cf:fd [ 685.652901][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.659548][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.816197][T12032] netlink: 'syz.3.2634': attribute type 21 has an invalid length. [ 685.867553][T12032] device syzkaller0 entered promiscuous mode [ 685.880335][T12032] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2634'. [ 685.901840][T12032] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2634'. [ 685.916699][T12032] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2634'. [ 685.955838][T11652] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 685.963650][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 685.986445][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 686.243514][T12054] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2638'. [ 686.310998][T12054] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2638'. [ 686.320365][T12056] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2638'. [ 686.440953][T12061] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2641'. [ 689.570553][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 689.651505][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 689.949403][T11652] device veth0_vlan entered promiscuous mode [ 689.986588][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 690.021788][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 690.090874][T12109] netlink: 'syz.2.2649': attribute type 3 has an invalid length. [ 690.111067][T12109] __nla_validate_parse: 1 callbacks suppressed [ 690.111085][T12109] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2649'. [ 690.148982][T11652] device veth1_vlan entered promiscuous mode [ 690.248857][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 690.278461][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 690.302449][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 690.311988][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 690.357569][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 690.414947][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 690.449204][T11652] device veth0_macvtap entered promiscuous mode [ 690.509643][T11652] device veth1_macvtap entered promiscuous mode [ 690.558245][T12124] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.2652'. [ 690.630164][T10551] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 690.646132][T10551] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 690.735822][T11652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 690.818108][T11652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 690.879063][T11652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 690.920052][T11652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 690.954727][T11652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 690.986088][T11652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 691.018651][T11652] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 691.047332][T11652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 691.069558][T11652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 691.081858][T11652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 691.093106][T11652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 691.103042][T11652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 691.113866][T11652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 691.162542][T11652] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 691.183707][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 691.220987][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 691.231432][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 691.241230][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 691.262079][T11652] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 691.277874][T11652] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 691.310816][T11652] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 691.320833][T11652] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 691.350066][T10551] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 691.505319][T12157] netlink: 'syz.3.2661': attribute type 39 has an invalid length. [ 691.600060][T12157] device veth0_macvtap left promiscuous mode [ 692.483681][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 692.506639][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 692.564916][T12186] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.2671'. [ 692.628556][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 692.659871][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 692.700793][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 692.758763][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 693.024359][T12192] netlink: 'syz.2.2672': attribute type 9 has an invalid length. [ 693.103728][T12192] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2672'. [ 693.635506][T12222] netlink: 'syz.3.2679': attribute type 3 has an invalid length. [ 693.670547][T12220] netlink: 'syz.0.2677': attribute type 39 has an invalid length. [ 693.688387][T12222] netlink: 'syz.3.2679': attribute type 1 has an invalid length. [ 693.698716][T12222] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.2679'. [ 693.729693][T12220] device veth0_macvtap left promiscuous mode [ 694.399799][T12253] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2684'. [ 695.609793][T12287] netlink: 'syz.5.2697': attribute type 39 has an invalid length. [ 695.614081][T12301] netlink: 'syz.4.2704': attribute type 29 has an invalid length. [ 695.739246][T12287] device veth0_macvtap left promiscuous mode [ 696.363163][T12304] netlink: 'syz.3.2706': attribute type 39 has an invalid length. [ 696.418810][T12301] netlink: 'syz.4.2704': attribute type 29 has an invalid length. [ 696.667835][T12327] netlink: 'syz.3.2712': attribute type 25 has an invalid length. [ 696.899907][T12334] netlink: 'syz.2.2710': attribute type 10 has an invalid length. [ 696.981248][T12334] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2710'. [ 697.071314][T12330] netlink: 'syz.5.2711': attribute type 46 has an invalid length. [ 697.163442][T12334] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 697.317954][T12334] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 697.335390][T12330] netlink: 'syz.5.2711': attribute type 46 has an invalid length. [ 698.338297][T12381] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.2724'. [ 701.102716][T12421] netlink: 1042 bytes leftover after parsing attributes in process `syz.3.2737'. [ 701.222939][T12423] netlink: 'syz.0.2735': attribute type 21 has an invalid length. [ 701.319952][T12423] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2735'. [ 701.478798][T12430] netlink: 'syz.0.2735': attribute type 16 has an invalid length. [ 701.573391][T12436] netlink: 4595 bytes leftover after parsing attributes in process `syz.5.2740'. [ 701.585610][T12430] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2735'. [ 704.389664][T12466] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2744'. [ 704.778542][T12489] netlink: 'syz.5.2753': attribute type 6 has an invalid length. [ 704.974589][T12489] sctp: [Deprecated]: syz.5.2753 (pid 12489) Use of struct sctp_assoc_value in delayed_ack socket option. [ 704.974589][T12489] Use struct sctp_sack_info instead [ 705.166269][T12460] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 705.385979][T12501] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.2757'. [ 708.331077][T12550] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.2763'. [ 708.416775][T12550] netlink: 'syz.0.2763': attribute type 2 has an invalid length. [ 708.801666][T12567] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2771'. [ 708.891879][T12560] netlink: 'syz.4.2770': attribute type 3 has an invalid length. [ 708.899666][T12560] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2770'. [ 709.380494][T12589] netlink: 'syz.3.2775': attribute type 39 has an invalid length. [ 709.480179][T12597] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2777'. [ 709.552466][T12601] netlink: 'syz.3.2779': attribute type 9 has an invalid length. [ 709.569421][T12601] netlink: 154020 bytes leftover after parsing attributes in process `syz.3.2779'. [ 709.590234][T12601] netlink: 'syz.3.2779': attribute type 46 has an invalid length. [ 709.599009][T12601] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2779'. [ 710.494474][T12638] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.2787'. [ 712.589578][T12679] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2793'. [ 712.722451][T12686] netlink: 156 bytes leftover after parsing attributes in process `syz.5.2790'. [ 713.817523][T12723] netlink: 176 bytes leftover after parsing attributes in process `syz.4.2801'. [ 713.873318][T12723] netlink: 'syz.4.2801': attribute type 20 has an invalid length. [ 713.975881][T12732] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.2803'. [ 713.997598][T12727] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.2801'. [ 714.032034][T12723] netlink: 'syz.4.2801': attribute type 3 has an invalid length. [ 714.063324][T12723] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2801'. [ 716.374875][T12727] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 716.403276][T12727] CPU: 1 PID: 12727 Comm: syz.4.2801 Not tainted syzkaller #0 [ 716.410824][T12727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 716.420920][T12727] Call Trace: [ 716.424243][T12727] [ 716.427204][T12727] dump_stack_lvl+0x188/0x250 [ 716.431937][T12727] ? show_regs_print_info+0x20/0x20 [ 716.437180][T12727] ? load_image+0x400/0x400 [ 716.441747][T12727] sysfs_warn_dup+0x8a/0xa0 [ 716.446336][T12727] sysfs_do_create_link_sd+0xc0/0x110 [ 716.451754][T12727] device_add+0x7ed/0xfb0 [ 716.456140][T12727] wiphy_register+0x1e81/0x2c30 [ 716.461062][T12727] ? cfg80211_event_work+0x40/0x40 [ 716.466224][T12727] ? minstrel_ht_alloc+0x808/0x980 [ 716.471388][T12727] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 716.477514][T12727] ieee80211_register_hw+0x2aa1/0x3af0 [ 716.483044][T12727] ? ieee80211_tasklet_handler+0x20/0x20 [ 716.488733][T12727] ? rcu_is_watching+0x11/0xa0 [ 716.493543][T12727] ? memset+0x1e/0x40 [ 716.497573][T12727] ? hrtimer_init+0x10c/0x220 [ 716.502380][T12727] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 716.508171][T12727] hwsim_new_radio_nl+0xa6f/0xc40 [ 716.513265][T12727] genl_rcv_msg+0xcea/0xf90 [ 716.517831][T12727] ? genl_bind+0x380/0x380 [ 716.522301][T12727] ? vmacache_find+0x238/0x590 [ 716.527110][T12727] ? verify_lock_unused+0x140/0x140 [ 716.532370][T12727] ? verify_lock_unused+0x140/0x140 [ 716.537605][T12727] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 716.543629][T12727] ? lock_chain_count+0x20/0x20 [ 716.548538][T12727] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 716.555201][T12727] netlink_rcv_skb+0x1f5/0x440 [ 716.560012][T12727] ? genl_bind+0x380/0x380 [ 716.564476][T12727] ? netlink_ack+0xb50/0xb50 [ 716.569106][T12727] ? lockdep_hardirqs_on+0x94/0x140 [ 716.574376][T12727] ? down_read+0x1aa/0x2e0 [ 716.578858][T12727] genl_rcv+0x24/0x40 [ 716.582883][T12727] netlink_unicast+0x774/0x920 [ 716.587703][T12727] netlink_sendmsg+0x8ba/0xbe0 [ 716.592512][T12727] ? netlink_getsockopt+0x570/0x570 [ 716.597751][T12727] ? aa_sock_msg_perm+0x94/0x150 [ 716.602745][T12727] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 716.608074][T12727] ? security_socket_sendmsg+0x7c/0xa0 [ 716.613577][T12727] ? netlink_getsockopt+0x570/0x570 [ 716.618805][T12727] ____sys_sendmsg+0x5b7/0x8f0 [ 716.623619][T12727] ? __sys_sendmsg_sock+0x30/0x30 [ 716.628693][T12727] ? import_iovec+0x6f/0xa0 [ 716.633245][T12727] ___sys_sendmsg+0x236/0x2e0 [ 716.637986][T12727] ? __sys_sendmsg+0x2a0/0x2a0 [ 716.642801][T12727] ? rcu_is_watching+0x11/0xa0 [ 716.647641][T12727] __se_sys_sendmsg+0x1af/0x290 [ 716.652528][T12727] ? __x64_sys_sendmsg+0x80/0x80 [ 716.657519][T12727] ? syscall_enter_from_user_mode+0x2a/0x70 [ 716.663451][T12727] do_syscall_64+0x4c/0xa0 [ 716.667903][T12727] ? clear_bhb_loop+0x30/0x80 [ 716.672616][T12727] ? clear_bhb_loop+0x30/0x80 [ 716.677326][T12727] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 716.683246][T12727] RIP: 0033:0x7fe3ff12deb9 [ 716.687690][T12727] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 716.707324][T12727] RSP: 002b:00007fe3fd347028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 716.715776][T12727] RAX: ffffffffffffffda RBX: 00007fe3ff3a9180 RCX: 00007fe3ff12deb9 [ 716.723805][T12727] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 716.731800][T12727] RBP: 00007fe3ff19bc1f R08: 0000000000000000 R09: 0000000000000000 [ 716.739805][T12727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 716.747818][T12727] R13: 00007fe3ff3a9218 R14: 00007fe3ff3a9180 R15: 00007ffd3cdf2178 [ 716.755840][T12727] [ 716.896156][T12756] __nla_validate_parse: 1 callbacks suppressed [ 716.896176][T12756] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2809'. [ 716.922631][T12757] netlink: 'syz.3.2809': attribute type 3 has an invalid length. [ 716.935161][T12757] netlink: 13435 bytes leftover after parsing attributes in process `syz.3.2809'. [ 717.163519][T12764] netlink: 'syz.3.2813': attribute type 8 has an invalid length. [ 717.180736][T12764] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2813'. [ 717.246563][T12773] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2816'. [ 718.301941][ T144] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 718.878293][T12814] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2822'. [ 718.953225][T12816] netlink: 64967 bytes leftover after parsing attributes in process `syz.4.2822'. [ 719.132470][T12819] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.2823'. [ 719.666524][T12824] netlink: 'syz.2.2824': attribute type 41 has an invalid length. [ 719.677412][T12824] netlink: 'syz.2.2824': attribute type 4 has an invalid length. [ 719.692091][T12824] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2824'. [ 719.708670][T12824] batman_adv: batadv0: Interface deactivated: hsr_slave_1 [ 719.985893][T12824] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 720.227208][T12831] netlink: 197276 bytes leftover after parsing attributes in process `syz.3.2827'. [ 720.317103][T12834] FAULT_INJECTION: forcing a failure. [ 720.317103][T12834] name failslab, interval 1, probability 0, space 0, times 0 [ 720.333143][T12834] CPU: 1 PID: 12834 Comm: syz.3.2829 Not tainted syzkaller #0 [ 720.340674][T12834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 720.350768][T12834] Call Trace: [ 720.354094][T12834] [ 720.357061][T12834] dump_stack_lvl+0x188/0x250 [ 720.361797][T12834] ? show_regs_print_info+0x20/0x20 [ 720.367046][T12834] ? load_image+0x400/0x400 [ 720.371605][T12834] ? __might_sleep+0xf0/0xf0 [ 720.376252][T12834] ? __lock_acquire+0x7d10/0x7d10 [ 720.381330][T12834] should_fail+0x38c/0x4c0 [ 720.385803][T12834] should_failslab+0x5/0x20 [ 720.390353][T12834] slab_pre_alloc_hook+0x51/0xc0 [ 720.395361][T12834] kmem_cache_alloc_node_trace+0x4a/0x300 [ 720.401127][T12834] ? __get_vm_area_node+0x119/0x2d0 [ 720.406375][T12834] __get_vm_area_node+0x119/0x2d0 [ 720.411452][T12834] __vmalloc_node_range+0xef/0x8b0 [ 720.416603][T12834] ? htab_map_alloc+0x3c3/0x15a0 [ 720.421583][T12834] ? get_usage_chars+0x1b0/0x1b0 [ 720.426573][T12834] bpf_map_area_alloc+0xd4/0xe0 [ 720.431463][T12834] ? htab_map_alloc+0x3c3/0x15a0 [ 720.436446][T12834] htab_map_alloc+0x3c3/0x15a0 [ 720.441256][T12834] ? fput_many+0x155/0x1a0 [ 720.445725][T12834] htab_of_map_alloc+0x51/0xc0 [ 720.450529][T12834] map_create+0x485/0x2350 [ 720.455000][T12834] __sys_bpf+0x30a/0x6f0 [ 720.459293][T12834] ? bpf_link_show_fdinfo+0x380/0x380 [ 720.464721][T12834] ? vtime_user_exit+0x2c8/0x3e0 [ 720.469707][T12834] __x64_sys_bpf+0x78/0x90 [ 720.474168][T12834] do_syscall_64+0x4c/0xa0 [ 720.478621][T12834] ? clear_bhb_loop+0x30/0x80 [ 720.483425][T12834] ? clear_bhb_loop+0x30/0x80 [ 720.488182][T12834] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 720.494136][T12834] RIP: 0033:0x7fac901d8eb9 [ 720.498585][T12834] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 720.518226][T12834] RSP: 002b:00007fac8e434028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 720.526684][T12834] RAX: ffffffffffffffda RBX: 00007fac90453fa0 RCX: 00007fac901d8eb9 [ 720.534695][T12834] RDX: 0000000000000050 RSI: 0000200000000040 RDI: 0000000000000000 [ 720.542701][T12834] RBP: 00007fac8e434090 R08: 0000000000000000 R09: 0000000000000000 [ 720.550725][T12834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 720.558737][T12834] R13: 00007fac90454038 R14: 00007fac90453fa0 R15: 00007ffde7b2e908 [ 720.566773][T12834] [ 720.567868][T12837] netlink: 'syz.5.2828': attribute type 10 has an invalid length. [ 720.639165][T12837] netlink: 2 bytes leftover after parsing attributes in process `syz.5.2828'. [ 720.660182][T12837] device bond0 entered promiscuous mode [ 720.711565][T12837] device bond_slave_0 entered promiscuous mode [ 720.717959][T12837] device bond_slave_1 entered promiscuous mode [ 720.738717][T12837] bridge0: port 3(bond0) entered blocking state [ 720.754469][T12849] netlink: 'syz.4.2832': attribute type 6 has an invalid length. [ 720.769067][T12837] bridge0: port 3(bond0) entered disabled state [ 720.793683][T12837] bridge0: port 3(bond0) entered blocking state [ 720.800217][T12837] bridge0: port 3(bond0) entered forwarding state [ 721.225941][T12855] netlink: 'syz.5.2836': attribute type 39 has an invalid length. [ 723.580885][ T4230] Bluetooth: hci2: command 0x0406 tx timeout [ 723.720188][T12878] __nla_validate_parse: 1 callbacks suppressed [ 723.720222][T12878] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2843'. [ 724.929667][T12883] delete_channel: no stack [ 725.004203][T12896] netlink: 'syz.0.2850': attribute type 4 has an invalid length. [ 725.065684][T12896] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2850'. [ 726.166530][T12896] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 726.212391][T12908] netlink: 'syz.5.2851': attribute type 21 has an invalid length. [ 726.260767][T12902] netlink: 14546 bytes leftover after parsing attributes in process `syz.5.2851'. [ 728.359160][T12921] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.2860'. [ 728.553818][T12933] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2862'. [ 728.563413][T12933] openvswitch: netlink: Flow key attribute not present in set flow. [ 729.319061][T12947] netlink: 'syz.2.2868': attribute type 9 has an invalid length. [ 729.414093][T12947] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2868'. [ 729.838083][T12967] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2873'. [ 731.932813][T12978] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2876'. [ 731.968028][T12982] netlink: 192436 bytes leftover after parsing attributes in process `syz.3.2879'. [ 731.980733][T12982] openvswitch: netlink: Message has 20476 unknown bytes. [ 732.036041][T12984] netlink: 4595 bytes leftover after parsing attributes in process `syz.5.2878'. [ 732.059403][T12986] netlink: 'syz.3.2881': attribute type 10 has an invalid length. [ 732.094287][T12986] bridge0: port 2(bridge_slave_1) entered disabled state [ 732.155071][T12986] device bridge_slave_1 left promiscuous mode [ 732.161758][T12986] bridge0: port 2(bridge_slave_1) entered disabled state [ 732.368167][T12995] device syzkaller0 left promiscuous mode [ 732.784825][T13004] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.2886'. [ 733.115712][T13021] netlink: 'syz.0.2891': attribute type 13 has an invalid length. [ 733.130785][T13021] netlink: 160 bytes leftover after parsing attributes in process `syz.0.2891'. [ 734.892835][T13021] erspan0: refused to change device tx_queue_len [ 734.901571][T13021] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 735.184695][T13035] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.2895'. [ 735.344925][T13046] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.2899'. [ 738.772040][T13059] ªªªªªª: renamed from veth0_vlan [ 738.834268][T13066] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2906'. [ 738.873512][T13068] FAULT_INJECTION: forcing a failure. [ 738.873512][T13068] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 738.894338][T13068] CPU: 0 PID: 13068 Comm: syz.3.2907 Not tainted syzkaller #0 [ 738.901877][T13068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 738.911973][T13068] Call Trace: [ 738.915298][T13068] [ 738.918256][T13068] dump_stack_lvl+0x188/0x250 [ 738.922977][T13068] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 738.929178][T13068] ? show_regs_print_info+0x20/0x20 [ 738.934421][T13068] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 738.940625][T13068] ? dump_stack+0x5/0x20 [ 738.944921][T13068] should_fail+0x38c/0x4c0 [ 738.949392][T13068] _copy_to_user+0x2e/0x130 [ 738.953941][T13068] simple_read_from_buffer+0xe3/0x150 [ 738.959354][T13068] proc_fail_nth_read+0x1a6/0x220 [ 738.964433][T13068] ? proc_fault_inject_write+0x310/0x310 [ 738.970114][T13068] ? fsnotify_perm+0x254/0x560 [ 738.974921][T13068] ? proc_fault_inject_write+0x310/0x310 [ 738.980600][T13068] vfs_read+0x301/0xd60 [ 738.984800][T13068] ? kernel_read+0x1e0/0x1e0 [ 738.989421][T13068] ? __fget_files+0x40f/0x480 [ 738.994139][T13068] ? mutex_lock_nested+0x17/0x20 [ 738.999115][T13068] ? __fdget_pos+0x2bf/0x370 [ 739.003818][T13068] ? ksys_read+0x71/0x260 [ 739.008177][T13068] ksys_read+0x152/0x260 [ 739.012496][T13068] ? vfs_write+0xd60/0xd60 [ 739.016946][T13068] ? lockdep_hardirqs_on+0x94/0x140 [ 739.022172][T13068] do_syscall_64+0x4c/0xa0 [ 739.026612][T13068] ? clear_bhb_loop+0x30/0x80 [ 739.031309][T13068] ? clear_bhb_loop+0x30/0x80 [ 739.035998][T13068] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 739.041915][T13068] RIP: 0033:0x7fac9019978e [ 739.046349][T13068] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 739.065978][T13068] RSP: 002b:00007fac8e433fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 739.074434][T13068] RAX: ffffffffffffffda RBX: 00007fac8e4346c0 RCX: 00007fac9019978e [ 739.082469][T13068] RDX: 000000000000000f RSI: 00007fac8e4340a0 RDI: 0000000000000005 [ 739.090463][T13068] RBP: 00007fac8e434090 R08: 0000000000000000 R09: 0000000000000000 [ 739.098455][T13068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 739.106448][T13068] R13: 00007fac90454038 R14: 00007fac90453fa0 R15: 00007ffde7b2e908 [ 739.114454][T13068] [ 739.515072][T13081] netlink: 'syz.3.2910': attribute type 17 has an invalid length. [ 739.527908][T13081] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2910'. [ 742.152441][T13091] netlink: 4595 bytes leftover after parsing attributes in process `syz.5.2915'. [ 745.115434][T13117] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.2923'. [ 745.232986][T13121] netlink: 14 bytes leftover after parsing attributes in process `syz.5.2924'. [ 745.369470][T13129] netlink: 105120 bytes leftover after parsing attributes in process `syz.4.2927'. [ 745.450557][T13129] netlink: 'syz.4.2927': attribute type 2 has an invalid length. [ 747.094010][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.100360][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.261281][T13123] netlink: 'syz.5.2924': attribute type 21 has an invalid length. [ 748.304739][T13123] netlink: 156 bytes leftover after parsing attributes in process `syz.5.2924'. [ 748.656008][T13148] netlink: 10 bytes leftover after parsing attributes in process `syz.4.2932'. [ 750.941273][ T4306] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 751.935062][T13162] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.2938'. [ 752.262890][T13173] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2943'. [ 752.995046][T13207] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2956'. [ 753.998101][T13246] netlink: 'syz.0.2972': attribute type 10 has an invalid length. [ 754.020782][T13246] device veth0_vlan left promiscuous mode [ 754.028534][T13246] device veth0_vlan entered promiscuous mode [ 754.054295][T13246] team0: Device veth0_vlan failed to register rx_handler [ 754.205013][T13251] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.2977'. [ 754.597290][T13271] netlink: 'syz.3.2986': attribute type 27 has an invalid length. [ 754.606355][T13271] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2986'. [ 754.620556][T13271] netlink: 'syz.3.2986': attribute type 25 has an invalid length. [ 754.921996][T13289] FAULT_INJECTION: forcing a failure. [ 754.921996][T13289] name failslab, interval 1, probability 0, space 0, times 0 [ 754.976317][T13288] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2992'. [ 754.990886][T13289] CPU: 1 PID: 13289 Comm: syz.4.2993 Not tainted syzkaller #0 [ 754.998418][T13289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 755.008510][T13289] Call Trace: [ 755.011825][T13289] [ 755.014863][T13289] dump_stack_lvl+0x188/0x250 [ 755.019569][T13289] ? show_regs_print_info+0x20/0x20 [ 755.024924][T13289] ? load_image+0x400/0x400 [ 755.029478][T13289] ? __might_sleep+0xf0/0xf0 [ 755.034126][T13289] ? __lock_acquire+0x7d10/0x7d10 [ 755.039209][T13289] should_fail+0x38c/0x4c0 [ 755.043685][T13289] should_failslab+0x5/0x20 [ 755.048232][T13289] slab_pre_alloc_hook+0x51/0xc0 [ 755.053208][T13289] kmem_cache_alloc_node+0x47/0x2d0 [ 755.058440][T13289] ? alloc_vmap_area+0x1a2/0x1a10 [ 755.063533][T13289] alloc_vmap_area+0x1a2/0x1a10 [ 755.068454][T13289] ? vm_map_ram+0xba0/0xba0 [ 755.073015][T13289] __get_vm_area_node+0x14f/0x2d0 [ 755.078099][T13289] __vmalloc_node_range+0xef/0x8b0 [ 755.083253][T13289] ? htab_map_alloc+0x3c3/0x15a0 [ 755.088219][T13289] ? get_usage_chars+0x1b0/0x1b0 [ 755.093198][T13289] bpf_map_area_alloc+0xd4/0xe0 [ 755.098098][T13289] ? htab_map_alloc+0x3c3/0x15a0 [ 755.103064][T13289] htab_map_alloc+0x3c3/0x15a0 [ 755.107862][T13289] ? fput_many+0x155/0x1a0 [ 755.112299][T13289] htab_of_map_alloc+0x51/0xc0 [ 755.117079][T13289] map_create+0x485/0x2350 [ 755.121520][T13289] __sys_bpf+0x30a/0x6f0 [ 755.125785][T13289] ? bpf_link_show_fdinfo+0x380/0x380 [ 755.131240][T13289] ? vtime_user_exit+0x2c8/0x3e0 [ 755.136224][T13289] __x64_sys_bpf+0x78/0x90 [ 755.140693][T13289] do_syscall_64+0x4c/0xa0 [ 755.145147][T13289] ? clear_bhb_loop+0x30/0x80 [ 755.149849][T13289] ? clear_bhb_loop+0x30/0x80 [ 755.154554][T13289] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 755.160469][T13289] RIP: 0033:0x7fe3ff12deb9 [ 755.164907][T13289] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 755.184530][T13289] RSP: 002b:00007fe3fd389028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 755.192966][T13289] RAX: ffffffffffffffda RBX: 00007fe3ff3a8fa0 RCX: 00007fe3ff12deb9 [ 755.200955][T13289] RDX: 0000000000000050 RSI: 0000200000000040 RDI: 0000000000000000 [ 755.208946][T13289] RBP: 00007fe3fd389090 R08: 0000000000000000 R09: 0000000000000000 [ 755.216935][T13289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 755.224932][T13289] R13: 00007fe3ff3a9038 R14: 00007fe3ff3a8fa0 R15: 00007ffd3cdf2178 [ 755.232935][T13289] [ 755.496397][T13305] netlink: 14975 bytes leftover after parsing attributes in process `syz.4.2999'. [ 758.458977][T13334] netlink: 'syz.3.3008': attribute type 10 has an invalid length. [ 758.509416][T13336] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.3009'. [ 762.610496][T13395] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.3025'. [ 766.619152][T13431] netlink: 55631 bytes leftover after parsing attributes in process `syz.5.3037'. [ 771.189930][T13492] netlink: 'syz.5.3055': attribute type 21 has an invalid length. [ 771.535814][T13500] netlink: 1042 bytes leftover after parsing attributes in process `syz.0.3058'. [ 771.639391][T13502] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.3060'. [ 771.746925][T13510] bridge0: port 3(bond0) entered disabled state [ 774.797552][T13510] device bridge_slave_1 left promiscuous mode [ 774.805974][T13510] bridge0: port 2(bridge_slave_1) entered disabled state [ 774.839825][T13510] device bridge_slave_0 left promiscuous mode [ 774.846316][T13510] bridge0: port 1(bridge_slave_0) entered disabled state [ 775.169416][T13519] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.3064'. [ 775.181135][T13523] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3066'. [ 775.298882][T13523] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.3066'. [ 775.334395][T13528] FAULT_INJECTION: forcing a failure. [ 775.334395][T13528] name failslab, interval 1, probability 0, space 0, times 0 [ 775.401010][T13528] CPU: 0 PID: 13528 Comm: syz.2.3067 Not tainted syzkaller #0 [ 775.408638][T13528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 775.418731][T13528] Call Trace: [ 775.422054][T13528] [ 775.425012][T13528] dump_stack_lvl+0x188/0x250 [ 775.429724][T13528] ? show_regs_print_info+0x20/0x20 [ 775.434961][T13528] ? load_image+0x400/0x400 [ 775.439516][T13528] ? __might_sleep+0xf0/0xf0 [ 775.444166][T13528] ? __lock_acquire+0x7d10/0x7d10 [ 775.449238][T13528] should_fail+0x38c/0x4c0 [ 775.453701][T13528] should_failslab+0x5/0x20 [ 775.458231][T13528] slab_pre_alloc_hook+0x51/0xc0 [ 775.463200][T13528] __kmalloc_node_track_caller+0x68/0x3a0 [ 775.469044][T13528] ? alloc_skb_with_frags+0xa7/0x730 [ 775.474361][T13528] ? kmem_cache_alloc_node+0x162/0x2d0 [ 775.479851][T13528] ? __alloc_skb+0xf4/0x750 [ 775.484386][T13528] ? alloc_skb_with_frags+0xa7/0x730 [ 775.489706][T13528] __alloc_skb+0x22c/0x750 [ 775.494160][T13528] alloc_skb_with_frags+0xa7/0x730 [ 775.499300][T13528] ? trace_event_raw_event_lock+0x270/0x270 [ 775.505226][T13528] sock_alloc_send_pskb+0x87f/0x9a0 [ 775.510465][T13528] ? sock_kzfree_s+0x50/0x50 [ 775.515080][T13528] ? do_raw_spin_lock+0x128/0x2f0 [ 775.520163][T13528] ? __rwlock_init+0x140/0x140 [ 775.524963][T13528] ? do_raw_spin_unlock+0x11d/0x230 [ 775.530202][T13528] unix_dgram_sendmsg+0x5fc/0x18a0 [ 775.535368][T13528] ? aa_sk_perm+0x7dc/0x910 [ 775.539913][T13528] ? unix_dgram_poll+0x680/0x680 [ 775.544884][T13528] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 775.551338][T13528] ? aa_sock_msg_perm+0x94/0x150 [ 775.556306][T13528] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 775.561619][T13528] ? security_socket_sendmsg+0x7c/0xa0 [ 775.567141][T13528] ? unix_dgram_poll+0x680/0x680 [ 775.572113][T13528] ____sys_sendmsg+0x5b7/0x8f0 [ 775.576917][T13528] ? __sys_sendmsg_sock+0x30/0x30 [ 775.581976][T13528] ? import_iovec+0x6f/0xa0 [ 775.586514][T13528] ___sys_sendmsg+0x236/0x2e0 [ 775.591222][T13528] ? __sys_sendmsg+0x2a0/0x2a0 [ 775.596027][T13528] ? trace_event_raw_event_lock+0x270/0x270 [ 775.601949][T13528] ? vfs_write+0x8b2/0xd60 [ 775.606433][T13528] __se_sys_sendmsg+0x1af/0x290 [ 775.611317][T13528] ? __x64_sys_sendmsg+0x80/0x80 [ 775.616284][T13528] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 775.622305][T13528] ? lockdep_hardirqs_on+0x94/0x140 [ 775.627534][T13528] do_syscall_64+0x4c/0xa0 [ 775.631972][T13528] ? clear_bhb_loop+0x30/0x80 [ 775.636672][T13528] ? clear_bhb_loop+0x30/0x80 [ 775.641370][T13528] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 775.647284][T13528] RIP: 0033:0x7f2bef182eb9 [ 775.651726][T13528] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 775.671351][T13528] RSP: 002b:00007f2bed3bd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 775.679790][T13528] RAX: ffffffffffffffda RBX: 00007f2bef3fe090 RCX: 00007f2bef182eb9 [ 775.687781][T13528] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000008 [ 775.695778][T13528] RBP: 00007f2bed3bd090 R08: 0000000000000000 R09: 0000000000000000 [ 775.703773][T13528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 775.711760][T13528] R13: 00007f2bef3fe128 R14: 00007f2bef3fe090 R15: 00007ffc8093ca68 [ 775.719778][T13528] [ 775.981428][T13522] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 776.600313][T13556] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.3075'. [ 779.780848][T13579] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.3082'. [ 779.790260][T13579] netlink: 'syz.3.3082': attribute type 2 has an invalid length. [ 779.910778][T13578] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.3081'. [ 779.986116][T13587] netlink: 'syz.3.3084': attribute type 3 has an invalid length. [ 779.997942][T13587] netlink: 'syz.3.3084': attribute type 1 has an invalid length. [ 780.021182][T13587] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.3084'. [ 780.261632][T13584] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.3083'. [ 782.948120][ T144] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 783.725792][T13612] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3102'. [ 783.795759][T13616] netlink: 4595 bytes leftover after parsing attributes in process `syz.5.3092'. [ 785.021029][ T23] Bluetooth: hci5: command 0x0406 tx timeout [ 787.896641][T13677] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3114'. [ 788.001165][T13681] netlink: 'syz.5.3115': attribute type 46 has an invalid length. [ 788.011078][T13681] netlink: 55 bytes leftover after parsing attributes in process `syz.5.3115'. [ 791.186657][T13701] netlink: 'syz.3.3126': attribute type 10 has an invalid length. [ 791.204182][T13700] netlink: 'syz.5.3120': attribute type 5 has an invalid length. [ 791.549705][T13714] netlink: 176 bytes leftover after parsing attributes in process `syz.0.3129'. [ 791.654886][T13724] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3131'. [ 791.692912][T13723] netlink: 'syz.5.3132': attribute type 1 has an invalid length. [ 791.753083][T13729] sctp: [Deprecated]: syz.5.3132 (pid 13729) Use of struct sctp_assoc_value in delayed_ack socket option. [ 791.753083][T13729] Use struct sctp_sack_info instead [ 791.781608][T13723] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3132'. [ 791.957933][T13731] netlink: 'syz.0.3129': attribute type 3 has an invalid length. [ 791.986987][T13714] netlink: 'syz.0.3129': attribute type 20 has an invalid length. [ 792.133510][T13731] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3129'. [ 792.215895][T13719] netlink: 'syz.0.3129': attribute type 3 has an invalid length. [ 792.239892][T13719] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3129'. [ 794.969921][T13739] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.3140'. [ 795.145642][T13748] netlink: 'syz.2.3138': attribute type 29 has an invalid length. [ 795.160186][T13756] sctp: [Deprecated]: syz.4.3143 (pid 13756) Use of int in max_burst socket option deprecated. [ 795.160186][T13756] Use struct sctp_assoc_value instead [ 795.189482][T13752] netlink: 'syz.3.3142': attribute type 5 has an invalid length. [ 795.307568][T13754] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3138'. [ 795.329791][T13754] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 795.366450][T13748] netlink: 'syz.2.3138': attribute type 29 has an invalid length. [ 795.397767][T13766] device bridge_slave_0 left promiscuous mode [ 795.404777][T13766] bridge0: port 1(bridge_slave_0) entered disabled state [ 797.329641][T13757] netlink: 'syz.2.3138': attribute type 29 has an invalid length. [ 797.543682][T13776] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 797.583837][T13776] netlink: 'syz.3.3149': attribute type 21 has an invalid length. [ 797.656983][T13780] netlink: 'syz.5.3148': attribute type 4 has an invalid length. [ 797.667995][T13780] netlink: 'syz.5.3148': attribute type 7 has an invalid length. [ 797.676099][T13780] netlink: 198236 bytes leftover after parsing attributes in process `syz.5.3148'. [ 797.964871][T13798] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3158'. [ 798.357650][T13808] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.3161'. [ 798.560582][T13808] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 798.562960][T13812] netlink: 201392 bytes leftover after parsing attributes in process `syz.5.3161'. [ 798.724821][T13808] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 798.850561][T13816] netlink: 'syz.5.3161': attribute type 27 has an invalid length. [ 798.924599][T13816] netlink: 'syz.5.3161': attribute type 4 has an invalid length. [ 799.007384][T13816] netlink: 152 bytes leftover after parsing attributes in process `syz.5.3161'. [ 801.189751][T13812] netlink: 8454 bytes leftover after parsing attributes in process `syz.5.3161'. [ 801.380485][T13837] netlink: 'syz.3.3172': attribute type 9 has an invalid length. [ 801.388453][T13837] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.3172'. [ 802.062234][T13866] netlink: 9286 bytes leftover after parsing attributes in process `syz.5.3178'. [ 802.143723][T13859] netlink: 'syz.3.3176': attribute type 41 has an invalid length. [ 802.226616][T13870] FAULT_INJECTION: forcing a failure. [ 802.226616][T13870] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 802.260935][T13870] CPU: 0 PID: 13870 Comm: syz.3.3181 Not tainted syzkaller #0 [ 802.268477][T13870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 802.278596][T13870] Call Trace: [ 802.281956][T13870] [ 802.284929][T13870] dump_stack_lvl+0x188/0x250 [ 802.289676][T13870] ? show_regs_print_info+0x20/0x20 [ 802.294932][T13870] ? load_image+0x400/0x400 [ 802.299497][T13870] ? __lock_acquire+0x7d10/0x7d10 [ 802.304566][T13870] ? tomoyo_path_number_perm+0x5b4/0x660 [ 802.310267][T13870] should_fail+0x38c/0x4c0 [ 802.314754][T13870] _copy_from_user+0x2e/0x170 [ 802.319491][T13870] wext_handle_ioctl+0xc4/0x1d0 [ 802.324412][T13870] ? call_commit_handler+0xf0/0xf0 [ 802.329634][T13870] sock_ioctl+0x143/0x710 [ 802.334028][T13870] ? sock_poll+0x410/0x410 [ 802.338570][T13870] ? bpf_lsm_file_ioctl+0x5/0x10 [ 802.343552][T13870] ? security_file_ioctl+0x7c/0xa0 [ 802.348723][T13870] ? sock_poll+0x410/0x410 [ 802.353193][T13870] __se_sys_ioctl+0xfa/0x170 [ 802.357845][T13870] do_syscall_64+0x4c/0xa0 [ 802.362385][T13870] ? clear_bhb_loop+0x30/0x80 [ 802.367109][T13870] ? clear_bhb_loop+0x30/0x80 [ 802.371851][T13870] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 802.377788][T13870] RIP: 0033:0x7fac901d8eb9 [ 802.382247][T13870] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 802.401906][T13870] RSP: 002b:00007fac8e434028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 802.410384][T13870] RAX: ffffffffffffffda RBX: 00007fac90453fa0 RCX: 00007fac901d8eb9 [ 802.418434][T13870] RDX: 0000200000000000 RSI: 0000000000008b26 RDI: 0000000000000005 [ 802.426459][T13870] RBP: 00007fac8e434090 R08: 0000000000000000 R09: 0000000000000000 [ 802.434483][T13870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 802.442515][T13870] R13: 00007fac90454038 R14: 00007fac90453fa0 R15: 00007ffde7b2e908 [ 802.450599][T13870] [ 806.118979][T13907] netlink: 'syz.2.3192': attribute type 41 has an invalid length. [ 806.366274][T13914] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 806.624225][T13927] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.3201'. [ 806.645401][T13928] netlink: 'syz.4.3202': attribute type 21 has an invalid length. [ 806.661694][T13928] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3202'. [ 806.711005][T13927] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.3201'. [ 808.761356][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.767733][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.662513][T13946] netlink: 1042 bytes leftover after parsing attributes in process `syz.4.3206'. [ 810.016693][T13970] netlink: 'syz.5.3213': attribute type 41 has an invalid length. [ 810.083222][T13976] netlink: 'syz.3.3217': attribute type 10 has an invalid length. [ 810.167670][T13952] netlink: 'syz.0.3208': attribute type 29 has an invalid length. [ 810.204133][T13952] netlink: 'syz.0.3208': attribute type 29 has an invalid length. [ 810.216065][T13962] netlink: 'syz.0.3208': attribute type 29 has an invalid length. [ 810.253993][T13981] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 810.258627][ T4306] tipc: Subscription rejected, illegal request [ 810.311346][T13982] netlink: 'syz.0.3208': attribute type 29 has an invalid length. [ 810.453659][T13980] device wlan0 left promiscuous mode [ 810.551044][T13992] netlink: 'syz.4.3221': attribute type 10 has an invalid length. [ 811.462507][T13999] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 813.548875][T14003] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3223'. [ 814.691534][T14055] netlink: 'syz.2.3237': attribute type 7 has an invalid length. [ 814.940793][T13821] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 818.047073][T14097] netlink: 'syz.2.3253': attribute type 8 has an invalid length. [ 818.098296][T14103] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.3256'. [ 818.108307][T14097] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3253'. [ 821.366848][T14128] sctp: [Deprecated]: syz.5.3263 (pid 14128) Use of int in max_burst socket option deprecated. [ 821.366848][T14128] Use struct sctp_assoc_value instead [ 821.552982][T14135] raw_sendmsg: syz.3.3266 forgot to set AF_INET. Fix it! [ 822.238320][T14151] FAULT_INJECTION: forcing a failure. [ 822.238320][T14151] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 822.288042][T14151] CPU: 0 PID: 14151 Comm: syz.0.3273 Not tainted syzkaller #0 [ 822.295576][T14151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 822.305672][T14151] Call Trace: [ 822.308993][T14151] [ 822.311948][T14151] dump_stack_lvl+0x188/0x250 [ 822.316668][T14151] ? show_regs_print_info+0x20/0x20 [ 822.321904][T14151] ? load_image+0x400/0x400 [ 822.326583][T14151] ? __lock_acquire+0x7d10/0x7d10 [ 822.331664][T14151] should_fail+0x38c/0x4c0 [ 822.336127][T14151] prepare_alloc_pages+0x1e4/0x5f0 [ 822.341286][T14151] __alloc_pages+0x11b/0x480 [ 822.345929][T14151] ? zone_statistics+0x170/0x170 [ 822.350909][T14151] ? __rwlock_init+0x140/0x140 [ 822.355749][T14151] ? alloc_pages+0x438/0x550 [ 822.360388][T14151] __get_free_pages+0x8/0x30 [ 822.365020][T14151] kasan_populate_vmalloc_pte+0x21/0xc0 [ 822.370610][T14151] __apply_to_page_range+0x983/0xd10 [ 822.375957][T14151] ? kasan_populate_vmalloc+0x70/0x70 [ 822.381376][T14151] alloc_vmap_area+0x18d5/0x1a10 [ 822.386370][T14151] ? vm_map_ram+0xba0/0xba0 [ 822.390916][T14151] __get_vm_area_node+0x14f/0x2d0 [ 822.396016][T14151] __vmalloc_node_range+0xef/0x8b0 [ 822.401168][T14151] ? htab_map_alloc+0x3c3/0x15a0 [ 822.406203][T14151] ? get_usage_chars+0x1b0/0x1b0 [ 822.411197][T14151] bpf_map_area_alloc+0xd4/0xe0 [ 822.416097][T14151] ? htab_map_alloc+0x3c3/0x15a0 [ 822.421093][T14151] htab_map_alloc+0x3c3/0x15a0 [ 822.425913][T14151] ? fput_many+0x155/0x1a0 [ 822.430380][T14151] htab_of_map_alloc+0x51/0xc0 [ 822.435178][T14151] map_create+0x485/0x2350 [ 822.439641][T14151] __sys_bpf+0x30a/0x6f0 [ 822.443932][T14151] ? bpf_link_show_fdinfo+0x380/0x380 [ 822.449343][T14151] ? rcu_nmi_exit+0x6f/0xf0 [ 822.453898][T14151] ? vtime_user_exit+0x2c8/0x3e0 [ 822.458879][T14151] __x64_sys_bpf+0x78/0x90 [ 822.463337][T14151] do_syscall_64+0x4c/0xa0 [ 822.467784][T14151] ? clear_bhb_loop+0x30/0x80 [ 822.472601][T14151] ? clear_bhb_loop+0x30/0x80 [ 822.477324][T14151] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 822.483250][T14151] RIP: 0033:0x7f30662dbeb9 [ 822.487691][T14151] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 822.507324][T14151] RSP: 002b:00007f3064537028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 822.515787][T14151] RAX: ffffffffffffffda RBX: 00007f3066556fa0 RCX: 00007f30662dbeb9 [ 822.523794][T14151] RDX: 0000000000000050 RSI: 0000200000000040 RDI: 0000000000000000 [ 822.531804][T14151] RBP: 00007f3064537090 R08: 0000000000000000 R09: 0000000000000000 [ 822.539818][T14151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 822.547827][T14151] R13: 00007f3066557038 R14: 00007f3066556fa0 R15: 00007fffb361f1e8 [ 822.555858][T14151] [ 823.084798][T14183] netlink: 'syz.4.3285': attribute type 46 has an invalid length. [ 823.103356][T14183] netlink: 55 bytes leftover after parsing attributes in process `syz.4.3285'. [ 823.117760][T14178] netlink: 'syz.3.3284': attribute type 29 has an invalid length. [ 823.143872][T14178] netlink: 'syz.3.3284': attribute type 29 has an invalid length. [ 823.317189][T14194] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.3291'. [ 823.353957][T14190] netlink: 'syz.0.3289': attribute type 10 has an invalid length. [ 823.728442][T14218] netlink: 176 bytes leftover after parsing attributes in process `syz.3.3303'. [ 823.798956][T14218] netlink: 'syz.3.3303': attribute type 20 has an invalid length. [ 823.819334][T14221] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3303'. [ 823.850532][T14221] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 823.947755][T14218] netlink: 'syz.3.3303': attribute type 3 has an invalid length. [ 823.980853][T14218] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3303'. [ 824.367440][T14244] device syzkaller0 entered promiscuous mode [ 824.824338][T14260] netlink: 4595 bytes leftover after parsing attributes in process `syz.5.3314'. [ 828.562449][T14310] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.3335'. [ 828.611736][T14313] netlink: 'syz.3.3337': attribute type 4 has an invalid length. [ 828.619703][T14313] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3337'. [ 831.946510][T14329] netlink: 'syz.4.3342': attribute type 9 has an invalid length. [ 831.960489][T14329] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.3342'. [ 832.139321][ T155] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 832.275140][T14345] FAULT_INJECTION: forcing a failure. [ 832.275140][T14345] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 832.299078][T14345] CPU: 0 PID: 14345 Comm: syz.3.3348 Not tainted syzkaller #0 [ 832.306705][T14345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 832.316814][T14345] Call Trace: [ 832.320143][T14345] [ 832.323263][T14345] dump_stack_lvl+0x188/0x250 [ 832.328020][T14345] ? show_regs_print_info+0x20/0x20 [ 832.333290][T14345] ? load_image+0x400/0x400 [ 832.337884][T14345] ? __lock_acquire+0x7d10/0x7d10 [ 832.342993][T14345] should_fail+0x38c/0x4c0 [ 832.347487][T14345] _copy_to_user+0x2e/0x130 [ 832.352059][T14345] simple_read_from_buffer+0xe3/0x150 [ 832.357510][T14345] proc_fail_nth_read+0x1a6/0x220 [ 832.362605][T14345] ? proc_fault_inject_write+0x310/0x310 [ 832.368332][T14345] ? fsnotify_perm+0x254/0x560 [ 832.373169][T14345] ? proc_fault_inject_write+0x310/0x310 [ 832.378879][T14345] vfs_read+0x301/0xd60 [ 832.383126][T14345] ? kernel_read+0x1e0/0x1e0 [ 832.387805][T14345] ? __fget_files+0x40f/0x480 [ 832.392563][T14345] ? mutex_lock_nested+0x17/0x20 [ 832.397606][T14345] ? __fdget_pos+0x2bf/0x370 [ 832.402242][T14345] ? ksys_read+0x71/0x260 [ 832.406633][T14345] ksys_read+0x152/0x260 [ 832.410935][T14345] ? vfs_write+0xd60/0xd60 [ 832.415417][T14345] ? lockdep_hardirqs_on+0x94/0x140 [ 832.420686][T14345] do_syscall_64+0x4c/0xa0 [ 832.425151][T14345] ? clear_bhb_loop+0x30/0x80 [ 832.429873][T14345] ? clear_bhb_loop+0x30/0x80 [ 832.434605][T14345] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 832.440543][T14345] RIP: 0033:0x7fac9019978e [ 832.445036][T14345] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 832.464689][T14345] RSP: 002b:00007fac8e433fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 832.473168][T14345] RAX: ffffffffffffffda RBX: 00007fac8e4346c0 RCX: 00007fac9019978e [ 832.481201][T14345] RDX: 000000000000000f RSI: 00007fac8e4340a0 RDI: 0000000000000009 [ 832.489223][T14345] RBP: 00007fac8e434090 R08: 0000000000000000 R09: 0000000000000000 [ 832.497247][T14345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 832.505271][T14345] R13: 00007fac90454038 R14: 00007fac90453fa0 R15: 00007ffde7b2e908 [ 832.513346][T14345] [ 832.570129][ T155] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 832.650986][T14352] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.3350'. [ 832.748376][T14358] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3352'. [ 832.871368][ T155] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 833.033937][ T155] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 833.149889][T14371] device syzkaller0 left promiscuous mode [ 833.267313][T14323] chnl_net:caif_netlink_parms(): no params data found [ 833.821874][ T4237] Bluetooth: hci0: command 0x0409 tx timeout [ 836.016123][ T4237] Bluetooth: hci0: command 0x041b tx timeout [ 836.182329][T14393] netlink: 'syz.5.3363': attribute type 10 has an invalid length. [ 836.209980][T14393] device hsr_slave_0 left promiscuous mode [ 836.246027][T14400] netlink: 142652 bytes leftover after parsing attributes in process `syz.3.3366'. [ 836.264094][T14393] device hsr_slave_1 left promiscuous mode [ 836.443210][T14396] netlink: 'syz.5.3363': attribute type 10 has an invalid length. [ 836.492088][T14396] team0: Port device wlan1 added [ 836.498323][T14323] bridge0: port 1(bridge_slave_0) entered blocking state [ 836.514303][T14323] bridge0: port 1(bridge_slave_0) entered disabled state [ 836.531172][T14323] device bridge_slave_0 entered promiscuous mode [ 836.545399][T14400] netlink: 'syz.3.3366': attribute type 1 has an invalid length. [ 836.553522][T14400] netlink: 'syz.3.3366': attribute type 2 has an invalid length. [ 836.561460][T14400] netlink: 'syz.3.3366': attribute type 3 has an invalid length. [ 836.569442][T14400] netlink: 'syz.3.3366': attribute type 4 has an invalid length. [ 836.618706][T14323] bridge0: port 2(bridge_slave_1) entered blocking state [ 836.650441][T14323] bridge0: port 2(bridge_slave_1) entered disabled state [ 836.722284][T14323] device bridge_slave_1 entered promiscuous mode [ 836.884356][T14415] netlink: 4595 bytes leftover after parsing attributes in process `syz.5.3370'. [ 836.927775][T14422] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 836.986321][T14323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 837.145244][T14323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 837.492261][T14435] netlink: 'syz.3.3375': attribute type 9 has an invalid length. [ 837.503577][T14435] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.3375'. [ 837.569731][T14323] team0: Port device team_slave_0 added [ 837.597421][T14323] team0: Port device team_slave_1 added [ 837.858161][T14323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 837.889320][T14323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 838.002078][T14323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 838.050855][ T4506] Bluetooth: hci0: command 0x040f tx timeout [ 838.229858][T14453] netlink: 'syz.4.3379': attribute type 21 has an invalid length. [ 838.280872][T14323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 838.291104][T14323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 838.357320][T14323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 838.461415][T14453] netlink: 'syz.4.3379': attribute type 10 has an invalid length. [ 838.536458][T14453] device veth1_macvtap left promiscuous mode [ 838.616743][T14460] netlink: 1042 bytes leftover after parsing attributes in process `syz.3.3380'. [ 838.692333][T14467] netlink: 212168 bytes leftover after parsing attributes in process `syz.5.3383'. [ 838.726841][T14468] netlink: 1057 bytes leftover after parsing attributes in process `syz.5.3383'. [ 838.799544][T14323] device hsr_slave_0 entered promiscuous mode [ 838.875008][T14323] device hsr_slave_1 entered promiscuous mode [ 838.956431][T14477] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.3386'. [ 839.098388][T14476] device aaaaaaaaaaaaaaa entered promiscuous mode [ 839.312952][T14487] netlink: 'syz.3.3390': attribute type 1 has an invalid length. [ 839.328880][T14487] netlink: 146340 bytes leftover after parsing attributes in process `syz.3.3390'. [ 840.043124][T14520] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3399'. [ 840.131516][ T4237] Bluetooth: hci0: command 0x0419 tx timeout [ 840.253732][T14534] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.3402'. [ 840.790030][T14545] team0: Port device wlan1 added [ 840.818710][T14539] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 841.072897][T14531] device aaaaaaaaaaaaaaa entered promiscuous mode [ 841.191235][ T155] device wlan1 left promiscuous mode [ 841.224156][ T155] team0: Port device wlan1 removed [ 841.248588][T14575] validate_nla: 1 callbacks suppressed [ 841.248605][T14575] netlink: 'syz.4.3415': attribute type 2 has an invalid length. [ 841.285457][T14572] netlink: 'syz.3.3414': attribute type 2 has an invalid length. [ 841.299076][T14572] netlink: 'syz.3.3414': attribute type 9 has an invalid length. [ 841.320708][T14572] __nla_validate_parse: 6 callbacks suppressed [ 841.320725][T14572] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3414'. [ 841.405958][T14582] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 841.426211][T14582] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 841.498165][T14584] netlink: 4595 bytes leftover after parsing attributes in process `syz.5.3418'. [ 841.600370][T13821] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 841.700572][ T155] device hsr_slave_1 left promiscuous mode [ 841.708764][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 841.728526][ T155] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 841.773198][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 841.785221][ T155] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 841.796854][ T155] batman_adv: batadv0: Interface deactivated: hsr_slave_1 [ 841.804693][ T155] batman_adv: batadv0: Removing interface: hsr_slave_1 [ 841.816085][ T155] device veth1_macvtap left promiscuous mode [ 841.822786][ T155] device veth1_vlan left promiscuous mode [ 844.771491][ T4279] wlan1: Trigger new scan to find an IBSS to join [ 845.232555][ T155] device team_slave_1 left promiscuous mode [ 845.239745][ T155] team0 (unregistering): Port device team_slave_1 removed [ 845.256101][ T155] device team_slave_0 left promiscuous mode [ 845.263994][ T155] team0 (unregistering): Port device team_slave_0 removed [ 845.283497][ T155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 845.301340][ T155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 845.377362][ T155] bond0 (unregistering): Released all slaves [ 845.427335][T14608] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4 [ 845.439016][T14608] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4 [ 845.449389][T14608] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 845.478826][T14635] netlink: 'syz.4.3428': attribute type 8 has an invalid length. [ 845.506300][T14635] netlink: 'syz.4.3428': attribute type 28 has an invalid length. [ 845.515841][T14635] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3428'. [ 845.567515][T14323] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 845.618856][T14323] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 845.675982][T14645] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.3432'. [ 845.751018][T14323] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 845.828887][T14323] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 846.377176][T14323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 847.747319][ T9] wlan1: Trigger new scan to find an IBSS to join [ 848.912884][ T9] wlan1: Creating new IBSS network, BSSID 0e:e9:38:86:42:2c [ 848.927224][T13821] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 848.960315][T13821] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 849.055127][T13821] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 849.123543][T14323] 8021q: adding VLAN 0 to HW filter on device team0 [ 849.417600][T14718] FAULT_INJECTION: forcing a failure. [ 849.417600][T14718] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 849.460782][T14718] CPU: 0 PID: 14718 Comm: syz.5.3446 Not tainted syzkaller #0 [ 849.468310][T14718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 849.478403][T14718] Call Trace: [ 849.481811][T14718] [ 849.484774][T14718] dump_stack_lvl+0x188/0x250 [ 849.489493][T14718] ? show_regs_print_info+0x20/0x20 [ 849.494742][T14718] ? load_image+0x400/0x400 [ 849.499286][T14718] ? __lock_acquire+0x7d10/0x7d10 [ 849.504351][T14718] ? perf_trace_lock+0xe4/0x390 [ 849.509325][T14718] should_fail+0x38c/0x4c0 [ 849.513782][T14718] prepare_alloc_pages+0x1e4/0x5f0 [ 849.518946][T14718] __alloc_pages+0x11b/0x480 [ 849.523579][T14718] ? zone_statistics+0x170/0x170 [ 849.528557][T14718] ? __rwlock_init+0x140/0x140 [ 849.533352][T14718] ? alloc_pages+0x438/0x550 [ 849.537981][T14718] __get_free_pages+0x8/0x30 [ 849.542607][T14718] kasan_populate_vmalloc_pte+0x21/0xc0 [ 849.548192][T14718] __apply_to_page_range+0x983/0xd10 [ 849.553523][T14718] ? kasan_populate_vmalloc+0x70/0x70 [ 849.558941][T14718] alloc_vmap_area+0x18d5/0x1a10 [ 849.563932][T14718] ? vm_map_ram+0xba0/0xba0 [ 849.568479][T14718] __get_vm_area_node+0x14f/0x2d0 [ 849.573545][T14718] __vmalloc_node_range+0xef/0x8b0 [ 849.578699][T14718] ? htab_map_alloc+0x3c3/0x15a0 [ 849.583687][T14718] ? get_usage_chars+0x1b0/0x1b0 [ 849.588683][T14718] bpf_map_area_alloc+0xd4/0xe0 [ 849.593580][T14718] ? htab_map_alloc+0x3c3/0x15a0 [ 849.598559][T14718] htab_map_alloc+0x3c3/0x15a0 [ 849.603366][T14718] ? fput_many+0x155/0x1a0 [ 849.607822][T14718] htab_of_map_alloc+0x51/0xc0 [ 849.612620][T14718] map_create+0x485/0x2350 [ 849.617083][T14718] __sys_bpf+0x30a/0x6f0 [ 849.621354][T14718] ? perf_trace_preemptirq_template+0x2aa/0x360 [ 849.627637][T14718] ? bpf_link_show_fdinfo+0x380/0x380 [ 849.633059][T14718] ? rcu_nmi_exit+0x6f/0xf0 [ 849.637614][T14718] ? vtime_user_exit+0x2c8/0x3e0 [ 849.642602][T14718] __x64_sys_bpf+0x78/0x90 [ 849.647055][T14718] do_syscall_64+0x4c/0xa0 [ 849.651501][T14718] ? clear_bhb_loop+0x30/0x80 [ 849.656212][T14718] ? clear_bhb_loop+0x30/0x80 [ 849.660923][T14718] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 849.666850][T14718] RIP: 0033:0x7ff42fd87eb9 [ 849.671299][T14718] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 849.690932][T14718] RSP: 002b:00007ff42dfe3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 849.699381][T14718] RAX: ffffffffffffffda RBX: 00007ff430002fa0 RCX: 00007ff42fd87eb9 [ 849.707387][T14718] RDX: 0000000000000050 RSI: 0000200000000040 RDI: 0000000000000000 [ 849.715393][T14718] RBP: 00007ff42dfe3090 R08: 0000000000000000 R09: 0000000000000000 [ 849.723405][T14718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 849.731403][T14718] R13: 00007ff430003038 R14: 00007ff430002fa0 R15: 00007ffcd0447448 [ 849.739416][T14718] [ 849.751858][T14721] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.3447'. [ 849.785506][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 849.796234][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 849.830890][ T4279] bridge0: port 1(bridge_slave_0) entered blocking state [ 849.838010][ T4279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 849.867176][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 849.985155][T13821] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 850.013169][T13821] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 850.029990][T13821] bridge0: port 2(bridge_slave_1) entered blocking state [ 850.037332][T13821] bridge0: port 2(bridge_slave_1) entered forwarding state [ 850.140260][T13821] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 850.174105][T13821] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 850.228532][T13821] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 850.295707][T13821] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 850.306061][T14734] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.3451'. [ 850.339192][T13821] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 850.360250][T14735] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.3451'. [ 850.402210][T13821] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 850.456125][T13821] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 850.524164][T13821] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 850.578110][T13821] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 851.283378][T14734] team0: Port device team_slave_0 removed [ 851.302313][T14734] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 851.327406][T13821] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 851.346672][T13821] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 851.383472][T14323] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 851.510361][T14759] netlink: 'syz.4.3457': attribute type 46 has an invalid length. [ 851.552119][T14764] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.3460'. [ 851.571263][T14759] netlink: 55 bytes leftover after parsing attributes in process `syz.4.3457'. [ 852.060306][T14786] netlink: 'syz.4.3467': attribute type 11 has an invalid length. [ 852.209758][T13821] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 852.234306][T14795] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.3469'. [ 852.241639][T13821] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 852.268927][T14795] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.3469'. [ 852.407963][T14323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 854.958851][T14796] team0: Port device team_slave_0 removed [ 854.975055][T14796] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 855.102056][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 855.158110][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 855.367930][T14813] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.3475'. [ 855.416800][T13821] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 855.428881][T13821] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 855.446871][T13821] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 855.460133][T13821] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 855.471322][T14812] netlink: 176 bytes leftover after parsing attributes in process `syz.5.3474'. [ 855.515866][T14812] netlink: 'syz.5.3474': attribute type 20 has an invalid length. [ 855.560164][T14323] device veth0_vlan entered promiscuous mode [ 855.577126][T14323] device veth1_vlan entered promiscuous mode [ 855.590296][T14812] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.3474'. [ 855.676741][T14812] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 855.816528][T14816] netlink: 'syz.5.3474': attribute type 3 has an invalid length. [ 855.833618][T14827] netlink: 'syz.3.3479': attribute type 3 has an invalid length. [ 855.842019][T14827] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3479'. [ 855.852417][T14816] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.3474'. [ 855.883228][T14831] netlink: 'syz.2.3480': attribute type 8 has an invalid length. [ 855.894686][T14831] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3480'. [ 855.962542][T14826] netlink: 'syz.3.3479': attribute type 4 has an invalid length. [ 855.972247][T14826] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3479'. [ 855.989621][T14323] device veth0_macvtap entered promiscuous mode [ 855.999564][T14832] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.3481'. [ 856.030724][T13821] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 856.041871][T13821] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 856.053060][T13821] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 856.065486][T13821] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 856.099310][T14323] device veth1_macvtap entered promiscuous mode [ 856.144126][T13821] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 859.270378][T14323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 859.326817][T14323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 859.357972][T14839] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.3484'. [ 859.380674][T14323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 859.398568][T14839] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.3484'. [ 859.402520][T14323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 859.419157][T14323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 859.441866][T14323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 859.465346][T14323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 859.682119][T10551] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 859.716916][T10551] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 859.756055][T14323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 859.776632][T14323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 859.787791][T14323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 859.808758][T14323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 859.839283][T14323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 859.862648][T14323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 859.912488][T14323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 860.006224][T14854] team0: Port device team_slave_0 removed [ 860.029813][T14854] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 860.321976][T14323] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 860.366636][T14323] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 860.394878][T14323] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 860.430511][T14323] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 860.459905][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 860.483218][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 863.575064][ T4279] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 863.594713][ T4279] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 863.653022][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 863.689772][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 863.717237][T14902] __nla_validate_parse: 1 callbacks suppressed [ 863.717273][T14902] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.3507'. [ 863.719302][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 863.835665][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 863.966802][T14907] netlink: 209836 bytes leftover after parsing attributes in process `syz.5.3506'. [ 863.986889][T14910] netlink: 209836 bytes leftover after parsing attributes in process `syz.5.3506'. [ 867.090924][T14910] team0: Port device team_slave_0 removed [ 867.103266][T14910] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 867.412859][T14956] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.3520'. [ 867.583792][T14963] netlink: 182 bytes leftover after parsing attributes in process `syz.3.3522'. [ 869.973608][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.979966][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.132829][ T23] Bluetooth: hci1: command 0x0409 tx timeout [ 870.965311][ T155] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 871.048769][T14991] netlink: 'syz.4.3531': attribute type 1 has an invalid length. [ 871.088001][T14991] netlink: 146340 bytes leftover after parsing attributes in process `syz.4.3531'. [ 871.138246][T14998] netlink: 4595 bytes leftover after parsing attributes in process `syz.5.3532'. [ 871.234841][ T155] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 871.269272][T15002] device bond0 entered promiscuous mode [ 871.293483][T15002] device bond_slave_0 entered promiscuous mode [ 871.311249][T15002] device bond_slave_1 entered promiscuous mode [ 871.769932][ T155] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 871.880335][T15025] netlink: 105120 bytes leftover after parsing attributes in process `syz.5.3544'. [ 871.958263][T15025] netlink: 'syz.5.3544': attribute type 2 has an invalid length. [ 872.046249][ T155] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 872.117822][T15026] netlink: 'syz.4.3543': attribute type 10 has an invalid length. [ 872.139599][T15026] bridge0: port 2(bridge_slave_1) entered disabled state [ 872.147833][T15026] bridge0: port 1(bridge_slave_0) entered disabled state [ 872.211893][T14928] Bluetooth: hci1: command 0x041b tx timeout [ 872.221825][T15026] bond0: (slave bridge0): Releasing backup interface [ 872.254658][T15026] device bridge0 left promiscuous mode [ 872.283166][T15026] bridge0: port 2(bridge_slave_1) entered blocking state [ 872.290731][T15026] bridge0: port 2(bridge_slave_1) entered forwarding state [ 872.300004][T15026] bridge0: port 1(bridge_slave_0) entered blocking state [ 872.307381][T15026] bridge0: port 1(bridge_slave_0) entered forwarding state [ 872.355629][T15026] team0: Port device bridge0 added [ 872.368879][T15032] netlink: 'syz.3.3546': attribute type 21 has an invalid length. [ 872.528469][T15054] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.3553'. [ 872.702734][T14977] chnl_net:caif_netlink_parms(): no params data found [ 873.229200][T14977] bridge0: port 1(bridge_slave_0) entered blocking state [ 873.246638][T14977] bridge0: port 1(bridge_slave_0) entered disabled state [ 873.256305][T14977] device bridge_slave_0 entered promiscuous mode [ 873.271464][T15097] netlink: 'syz.3.3563': attribute type 2 has an invalid length. [ 873.279711][T15097] netlink: 'syz.3.3563': attribute type 1 has an invalid length. [ 873.301382][T14977] bridge0: port 2(bridge_slave_1) entered blocking state [ 873.341792][T14977] bridge0: port 2(bridge_slave_1) entered disabled state [ 873.368575][T14977] device bridge_slave_1 entered promiscuous mode [ 873.489952][T15108] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.3566'. [ 873.678610][T14977] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 873.747566][T14977] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 873.968806][T15129] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3574'. [ 874.001869][T15129] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3574'. [ 874.035536][T14977] team0: Port device team_slave_0 added [ 874.156984][T15129] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3574'. [ 874.179899][T15139] netlink: 130472 bytes leftover after parsing attributes in process `syz.3.3575'. [ 874.195583][T14977] team0: Port device team_slave_1 added [ 874.268950][T14977] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 874.296864][T14921] Bluetooth: hci1: command 0x040f tx timeout [ 874.350608][T14977] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 874.453869][T14977] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 874.692427][T15150] netlink: 'syz.5.3578': attribute type 21 has an invalid length. [ 874.706132][T14977] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 874.724787][T14977] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 874.765095][T14977] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 875.111234][T15176] netlink: 4595 bytes leftover after parsing attributes in process `syz.5.3585'. [ 875.226242][T14977] device hsr_slave_0 entered promiscuous mode [ 875.287408][T14977] device hsr_slave_1 entered promiscuous mode [ 875.390842][T14977] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 875.415543][T14977] Cannot create hsr debugfs directory [ 876.422342][T14921] Bluetooth: hci1: command 0x0419 tx timeout [ 877.239443][T15242] netlink: 'syz.4.3601': attribute type 21 has an invalid length. [ 877.900779][T14977] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 877.912502][T15275] netlink: 'syz.3.3614': attribute type 2 has an invalid length. [ 877.920368][T15275] netlink: 17267 bytes leftover after parsing attributes in process `syz.3.3614'. [ 877.957241][T14977] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 878.002903][T14977] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 878.047852][T14977] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 878.462471][T14977] 8021q: adding VLAN 0 to HW filter on device bond0 [ 878.528034][T15314] netlink: 'syz.3.3625': attribute type 21 has an invalid length. [ 878.536442][T15314] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3625'. [ 878.577727][T13821] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 878.611506][T13821] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 878.674526][T14977] 8021q: adding VLAN 0 to HW filter on device team0 [ 878.814387][T13821] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 878.862027][T13821] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 878.910294][T13821] bridge0: port 1(bridge_slave_0) entered blocking state [ 878.917570][T13821] bridge0: port 1(bridge_slave_0) entered forwarding state [ 878.936140][T15336] netlink: 130472 bytes leftover after parsing attributes in process `syz.3.3631'. [ 878.980080][T13821] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 879.017397][T13821] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 879.056585][T13821] bridge0: port 2(bridge_slave_1) entered blocking state [ 879.063788][T13821] bridge0: port 2(bridge_slave_1) entered forwarding state [ 879.191946][T13821] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 879.212087][T13821] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 879.288795][T15346] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3635'. [ 879.324926][T13821] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 879.341794][T13821] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 879.435561][T13821] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 879.505953][T13821] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 879.553510][T15356] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.3637'. [ 879.601160][T15359] netlink: 194488 bytes leftover after parsing attributes in process `syz.3.3638'. [ 879.613000][T13821] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 879.633098][T15356] openvswitch: netlink: Flow key attribute not present in set flow. [ 879.685707][T15346] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3635'. [ 879.717731][T15349] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3635'. [ 879.772247][T13821] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 879.806332][T13821] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 879.817181][T13821] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 879.891534][T14977] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 879.931826][T14977] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 879.939865][T13821] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 879.962837][T13821] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 880.336135][T15379] IPv6: Can't replace route, no match found [ 880.598422][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 880.620462][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 880.673006][T14977] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 881.058359][T14977] device veth0_vlan entered promiscuous mode [ 881.140476][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 881.157583][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 881.191923][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 881.205491][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 881.217673][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 881.231053][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 881.333208][T14977] device veth1_vlan entered promiscuous mode [ 881.383560][T15435] netlink: 130472 bytes leftover after parsing attributes in process `syz.0.3656'. [ 881.440239][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 881.492223][ T155] device hsr_slave_1 left promiscuous mode [ 881.562046][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 881.594015][ T155] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 881.719294][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 881.751908][ T155] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 881.801581][ T155] batman_adv: batadv0: Removing interface: hsr_slave_1 [ 881.829994][ T155] bridge0: port 3(bond0) entered disabled state [ 881.961701][ T155] device bridge_slave_1 left promiscuous mode [ 881.968358][ T155] bridge0: port 2(bridge_slave_1) entered disabled state [ 882.065482][ T155] device bridge_slave_0 left promiscuous mode [ 882.075748][T15470] netlink: 130472 bytes leftover after parsing attributes in process `syz.3.3667'. [ 882.087745][ T155] bridge0: port 1(bridge_slave_0) entered disabled state [ 882.187417][ T155] device veth1_macvtap left promiscuous mode [ 882.193975][ T155] device veth0_macvtap left promiscuous mode [ 882.200273][ T155] device veth1_vlan left promiscuous mode [ 882.206981][ T155] device veth0_vlan left promiscuous mode [ 883.144152][ T155] team0 (unregistering): Port device team_slave_1 removed [ 883.148260][T15511] netlink: 'syz.4.3677': attribute type 1 has an invalid length. [ 883.170880][T15511] netlink: 146340 bytes leftover after parsing attributes in process `syz.4.3677'. [ 883.223628][ T155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 883.254625][ T155] device bond_slave_1 left promiscuous mode [ 883.285949][ T155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 883.305767][ T155] device bond_slave_0 left promiscuous mode [ 883.429862][ T155] team0 (unregistering): Port device bridge0 removed [ 883.472988][ T155] bond0 (unregistering): Released all slaves [ 883.844133][T14977] device veth0_macvtap entered promiscuous mode [ 883.972586][T15531] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3682'. [ 883.993476][T15534] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.3684'. [ 884.013979][T10551] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 884.028461][T15534] netlink: zone id is out of range [ 884.052896][T10551] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 884.070828][T15534] netlink: del zone limit has 8 unknown bytes [ 884.105219][T14977] device veth1_macvtap entered promiscuous mode [ 884.149696][T15531] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3682'. [ 884.196134][T10551] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 884.219525][T15542] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.3686'. [ 884.229335][T15542] netlink: 'syz.3.3686': attribute type 2 has an invalid length. [ 884.255345][T10551] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 884.303129][T15534] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3684'. [ 884.454754][T15550] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.3689'. [ 884.479085][T15532] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3682'. [ 884.549701][T14977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 884.636117][T14977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 884.673572][T14977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 884.733841][T14977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 884.763245][T14977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 884.801492][T14977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 884.826939][T14977] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 884.845207][T15549] netlink: 'syz.4.3687': attribute type 3 has an invalid length. [ 884.875474][T15552] netlink: 'syz.4.3687': attribute type 7 has an invalid length. [ 884.906750][T15552] netlink: 140 bytes leftover after parsing attributes in process `syz.4.3687'. [ 884.931403][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 884.989696][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 885.027431][T15557] netlink: 130472 bytes leftover after parsing attributes in process `syz.5.3690'. [ 885.044422][T14977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 885.100600][T14977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 885.133186][T14977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 885.157345][T14977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 885.174397][T14977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 885.198859][T14977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 885.217432][T14977] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 885.280125][T14977] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 885.293631][T14977] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 885.304006][T14977] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 885.325555][T14977] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 885.346813][T15567] netlink: 'syz.4.3694': attribute type 2 has an invalid length. [ 885.361388][T10551] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 885.381833][T10551] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 885.396794][T15567] netlink: 'syz.4.3694': attribute type 1 has an invalid length. [ 885.927372][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 885.951474][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 887.196570][T10551] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 887.250152][T10551] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 887.281372][T10551] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 887.303549][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 887.572064][T15622] netlink: 'syz.2.3517': attribute type 46 has an invalid length. [ 887.942274][ C1] [ 887.942283][ C1] ================================ [ 887.942290][ C1] WARNING: inconsistent lock state [ 887.942307][ C1] syzkaller #0 Not tainted [ 887.942318][ C1] -------------------------------- [ 887.942322][ C1] inconsistent {INITIAL USE} -> {IN-NMI} usage. [ 887.942330][ C1] syz.5.3713/15628 [HC1[1]:SC0[0]:HE0:SE1] takes: [ 887.942351][ C1] ffff88807583bd20 (&htab->lockdep_key){....}-{2:2}, at: htab_map_delete_elem+0x1b2/0x520 [ 887.942407][ C1] {INITIAL USE} state was registered at: [ 887.942413][ C1] lock_acquire+0x19e/0x400 [ 887.942434][ C1] _raw_spin_lock_irqsave+0xb0/0x100 [ 887.942456][ C1] htab_map_delete_elem+0x1b2/0x520 [ 887.942475][ C1] bpf_prog_2c29ac5cdc6b1842+0x3a/0x280 [ 887.942491][ C1] bpf_overflow_handler+0x1c2/0x4a0 [ 887.942510][ C1] __perf_event_overflow+0x364/0x530 [ 887.942527][ C1] perf_bp_event+0x276/0x320 [ 887.942543][ C1] hw_breakpoint_exceptions_notify+0x152/0x470 [ 887.942560][ C1] atomic_notifier_call_chain+0x15d/0x280 [ 887.942579][ C1] notify_die+0x141/0x1a0 [ 887.942595][ C1] notify_debug+0x20/0x30 [ 887.942614][ C1] noist_exc_debug+0x73/0x120 [ 887.942630][ C1] asm_exc_debug+0x2f/0x40 [ 887.942645][ C1] irq event stamp: 912 [ 887.942650][ C1] hardirqs last enabled at (911): [] syscall_enter_from_user_mode+0x21/0x70 [ 887.942689][ C1] hardirqs last disabled at (912): [] exc_debug+0x6e/0x130 [ 887.942710][ C1] softirqs last enabled at (584): [] bpf_prog_load+0x10f9/0x1510 [ 887.942735][ C1] softirqs last disabled at (582): [] bpf_ksym_add+0x29/0x340 [ 887.942759][ C1] [ 887.942759][ C1] other info that might help us debug this: [ 887.942764][ C1] Possible unsafe locking scenario: [ 887.942764][ C1] [ 887.942768][ C1] CPU0 [ 887.942772][ C1] ---- [ 887.942774][ C1] lock(&htab->lockdep_key); [ 887.942785][ C1] [ 887.942788][ C1] lock(&htab->lockdep_key); [ 887.942799][ C1] [ 887.942799][ C1] *** DEADLOCK *** SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 887.942799][ C1] [ 887.942802][ C1] no locks held by syz.5.3713/15628. [ 887.942810][ C1] [ 887.942810][ C1] stack backtrace: [ 887.942815][ C1] CPU: 1 PID: 15628 Comm: syz.5.3713 Not tainted syzkaller #0 [ 887.942833][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 887.942844][ C1] Call Trace: [ 887.942849][ C1] <#DB> [ 887.942856][ C1] dump_stack_lvl+0x188/0x250 [ 887.942881][ C1] ? show_regs_print_info+0x20/0x20 [ 887.942907][ C1] ? print_usage_bug+0x42a/0x690 [ 887.942924][ C1] ? verify_lock_unused+0x18/0x140 [ 887.942949][ C1] lock_acquire+0x2c3/0x400 [ 887.942973][ C1] ? htab_map_delete_elem+0x1b2/0x520 [ 887.942996][ C1] ? read_lock_is_recursive+0x10/0x10 [ 887.943017][ C1] ? look_up_lock_class+0x71/0x110 [ 887.943038][ C1] ? verify_lock_unused+0x18/0x140 [ 887.943064][ C1] _raw_spin_lock_irqsave+0xb0/0x100 [ 887.943086][ C1] ? htab_map_delete_elem+0x1b2/0x520 [ 887.943107][ C1] ? _raw_spin_lock+0x40/0x40 [ 887.943131][ C1] ? htab_map_hash+0x269/0x6d0 [ 887.943149][ C1] htab_map_delete_elem+0x1b2/0x520 [ 887.943178][ C1] bpf_prog_2c29ac5cdc6b1842+0x3a/0x280 [ 887.943196][ C1] bpf_overflow_handler+0x1c2/0x4a0 [ 887.943222][ C1] ? perf_event_switch_output+0x730/0x730 [ 887.943248][ C1] ? __perf_event_account_interrupt+0x187/0x280 [ 887.943270][ C1] __perf_event_overflow+0x364/0x530 [ 887.943294][ C1] perf_bp_event+0x276/0x320 [ 887.943317][ C1] ? perf_event_free_bpf_prog+0x110/0x110 [ 887.943369][ C1] ? rcu_lock_acquire+0x9/0x30 [ 887.943389][ C1] ? read_lock_is_recursive+0x10/0x10 [ 887.943415][ C1] hw_breakpoint_exceptions_notify+0x152/0x470 [ 887.943437][ C1] atomic_notifier_call_chain+0x15d/0x280 [ 887.943461][ C1] notify_die+0x141/0x1a0 [ 887.943481][ C1] ? srcu_init_notifier_head+0x90/0x90 [ 887.943504][ C1] ? exc_debug+0x6e/0x130 [ 887.943521][ C1] ? trace_hardirqs_off_finish+0x57/0x1f0 [ 887.943544][ C1] notify_debug+0x20/0x30 [ 887.943563][ C1] exc_debug+0xcf/0x130 [ 887.943582][ C1] asm_exc_debug+0x1a/0x40 [ 887.943598][ C1] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x40 [ 887.943620][ C1] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 90 90 90 90 90 90 90 0f 01 cb 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 01 ca c3 90 90 90 90 90 90 90 90 90 90 89 d1 83 f8 [ 887.943636][ C1] RSP: 0018:ffffc90002ddfd08 EFLAGS: 00050202 [ 887.943650][ C1] RAX: ffffffff83e3bc01 RBX: 0000000000000080 RCX: 0000000000000030 [ 887.943663][ C1] RDX: 0000000000000080 RSI: 0000200000000310 RDI: ffffc90002ddfe70 [ 887.943681][ C1] RBP: 0000000000000000 R08: ffffc90002ddfe9f R09: 1ffff920005bbfd3 [ 887.943694][ C1] R10: dffffc0000000000 R11: fffff520005bbfd4 R12: 00007ffffffff000 [ 887.943707][ C1] R13: 0000200000000340 R14: ffffc90002ddfe20 R15: 00002000000002c0 [ 887.943726][ C1] ? _copy_from_user+0x11/0x170 [ 887.943749][ C1] [ 887.943754][ C1] [ 887.943759][ C1] _copy_from_user+0xfa/0x170 [ 887.943779][ C1] perf_copy_attr+0x167/0x840 [ 887.943803][ C1] __se_sys_perf_event_open+0xf5/0x1bb0 [ 887.943829][ C1] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 887.943859][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 887.943877][ C1] ? __x64_sys_perf_event_open+0x1c/0xc0 [ 887.943897][ C1] do_syscall_64+0x4c/0xa0 [ 887.943931][ C1] ? clear_bhb_loop+0x30/0x80 [ 887.943949][ C1] ? clear_bhb_loop+0x30/0x80 [ 887.943967][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 887.943986][ C1] RIP: 0033:0x7ff42fd87eb9 [ 887.944001][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 887.944016][ C1] RSP: 002b:00007ff42dfe3028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 887.944034][ C1] RAX: ffffffffffffffda RBX: 00007ff430002fa0 RCX: 00007ff42fd87eb9 [ 887.944048][ C1] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 00002000000002c0 [ 887.944060][ C1] RBP: 00007ff42fdf5c1f R08: 0000000000000000 R09: 0000000000000000 [ 887.944072][ C1] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 887.944084][ C1] R13: 00007ff430003038 R14: 00007ff430002fa0 R15: 00007ffcd0447448 [ 887.944109][ C1] [ 889.597323][ T9] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 889.638531][ T9] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 889.724862][ T9] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 889.774628][ T9] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 889.865286][ T9] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 889.905388][ T9] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 889.935539][ T9] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 889.996399][ T9] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 890.092172][ T9] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 890.147854][ T9] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 890.215884][ T9] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 890.275290][ T9] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 890.402282][ T9] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 890.465319][ T9] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 890.515383][ T9] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 890.572263][ T9] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 892.119044][ T9] team0: Port device wlan1 removed [ 892.439003][ T9] device hsr_slave_1 left promiscuous mode [ 892.447266][ T9] device bridge_slave_1 left promiscuous mode [ 892.453632][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 892.464685][ T9] device bridge_slave_0 left promiscuous mode [ 892.471945][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 892.485736][ T9] device hsr_slave_0 left promiscuous mode [ 892.492222][ T9] device hsr_slave_1 left promiscuous mode [ 892.498683][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 892.509527][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 892.517633][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 892.527315][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 892.535452][ T9] batman_adv: batadv0: Interface deactivated: hsr_slave_1 [ 892.544751][ T9] batman_adv: batadv0: Removing interface: hsr_slave_1 [ 892.555009][ T9] device hsr_slave_0 left promiscuous mode [ 892.563420][ T9] device hsr_slave_1 left promiscuous mode [ 892.569876][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 892.577683][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 892.588554][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 892.596593][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 892.606150][ T9] device bridge_slave_1 left promiscuous mode [ 892.613571][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 892.623949][ T9] device bridge_slave_0 left promiscuous mode [ 892.630190][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 892.644124][ T9] device hsr_slave_0 left promiscuous mode [ 892.652357][ T9] device hsr_slave_1 left promiscuous mode [ 892.658808][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 892.666778][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 892.674905][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 892.682669][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 892.690416][ T9] device bridge_slave_1 left promiscuous mode [ 892.697282][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 892.705969][ T9] device bridge_slave_0 left promiscuous mode [ 892.712592][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 892.730225][ T9] device veth0_macvtap left promiscuous mode [ 892.736521][ T9] device veth1_vlan left promiscuous mode [ 892.743490][ T9] device veth1_macvtap left promiscuous mode [ 892.749582][ T9] device veth1_vlan left promiscuous mode [ 892.756662][ T9] device veth1_macvtap left promiscuous mode [ 892.762945][ T9] device veth0_macvtap left promiscuous mode [ 892.769023][ T9] device veth1_vlan left promiscuous mode [ 892.775608][ T9] device veth0_vlan left promiscuous mode [ 892.783413][ T9] device veth1_macvtap left promiscuous mode [ 892.789477][ T9] device veth0_macvtap left promiscuous mode [ 892.796128][ T9] device veth1_vlan left promiscuous mode [ 892.802447][ T9] device veth0_vlan left promiscuous mode [ 893.134520][ T9] team0 (unregistering): Port device geneve1 removed [ 893.182591][ T9] team0 (unregistering): Port device team_slave_1 removed [ 893.196524][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 893.207807][ T9] device bond_slave_1 left promiscuous mode [ 893.217330][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 893.226551][ T9] device bond_slave_0 left promiscuous mode [ 893.257548][ T9] team0 (unregistering): Port device bridge0 removed [ 893.275728][ T9] bond0 (unregistering): Released all slaves [ 893.443014][ T9] team0 (unregistering): Port device geneve1 removed [ 893.496892][ T9] team0 (unregistering): Port device team_slave_1 removed [ 893.598284][ T9] team0 (unregistering): Port device team_slave_1 removed [ 893.609143][ T9] team0 (unregistering): Port device team_slave_0 removed [ 893.622928][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 893.636031][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 893.683513][ T9] bond0 (unregistering): Released all slaves [ 893.780614][ T9] team0 (unregistering): Port device team_slave_1 removed [ 893.793406][ T9] team0 (unregistering): Port device team_slave_0 removed [ 893.805102][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 893.814667][ T9] device bond_slave_1 left promiscuous mode [ 893.825632][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 893.834719][ T9] device bond_slave_0 left promiscuous mode [ 893.882619][ T9] bond0 (unregistering): Released all slaves [ 895.515352][ T9] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 895.574861][ T9] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 895.634491][ T9] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 895.683255][ T9] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 896.359841][ T9] team0: Port device wlan1 removed [ 896.467717][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 896.476243][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 896.484315][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 896.496027][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 896.505583][ T9] device veth1_macvtap left promiscuous mode [ 896.512595][ T9] device veth1_vlan left promiscuous mode [ 896.701143][ T9] team0 (unregistering): Port device team_slave_1 removed [ 896.714688][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 896.725384][ T9] device bond_slave_1 left promiscuous mode [ 896.735404][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 896.744399][ T9] device bond_slave_0 left promiscuous mode [ 896.786519][ T9] bond0 (unregistering): Released all slaves