last executing test programs: 15.891872696s ago: executing program 2 (id=2331): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="020000000400000008"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000000)={{r1, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000580)='%-010d \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2, r1}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x16, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000341218007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x0, 0xe, 0x0, &(0x7f0000000040)="f4b84de4115d64244a0e839e8971", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 15.677309843s ago: executing program 2 (id=2333): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904, 0x81, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x14, 0x2, 0x3, 0x400, 0x800, 0xffffffffffffffff, 0xd, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x5}, 0x50) write$cgroup_subtree(r0, &(0x7f00000004c0)=ANY=[], 0xfe33) 15.338785922s ago: executing program 2 (id=2334): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1ff, 0x200}, 0x8000, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x7ff, 0x72}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000001c0)}, {0x0}, {0x0}], 0x3, 0x0, 0x0, 0x1f00c00e}, 0x4) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="5c00000015006b0300224ed86e6c1d0002117ea6e070d6065e22000300000000250002000f00000017d34460bc24eab556a705251e6182949a00003d3b48dfd8cdbf9767b4fa51f62a64c9f4060046d88037e786a6d0a5d700000017", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f0000002940)=""/4082, 0xff2}, {&(0x7f0000000240)=""/155, 0x9b}, {&(0x7f0000000000)=""/52, 0x34}], 0x3}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x40, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x2}, 0x8000, 0x0, 0x465e, 0x4, 0x3fe, 0x80000000, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0xa, 0x1, 0x106) close(0xffffffffffffffff) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x86dd, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x1b, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0xff0e}], 0x4, 0x0, 0x0, 0xa6820000}, 0x0) 12.919238275s ago: executing program 2 (id=2339): r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, &(0x7f0000000600), 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x10006, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x4, 0x2, 0x0, 0x80, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x3) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000000)=r5, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000007c0)=@bpf_tracing={0x1a, 0x15, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5c7e, 0x0, 0x0, 0x0, 0x9}, [@jmp={0x5, 0x1, 0x9, 0xb, 0x5, 0xfffffffffffffffc, 0x4}, @ldst={0x1, 0x1, 0x3, 0x0, 0x1, 0xfffffffffffffffc, 0x10}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @alu={0x7, 0x0, 0x1, 0xa, 0x5, 0xffffffffffffffc0, 0x10}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @tail_call]}, &(0x7f00000001c0)='GPL\x00', 0x9, 0x1000, &(0x7f0000002440)=""/4096, 0x41100, 0x1, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x7, 0x3}, 0x8, 0x10, &(0x7f00000003c0)={0x2, 0xa, 0x3, 0x1}, 0x10, 0x25a7e, r3, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f0000000040)=0x7) sendmsg$kcm(r1, &(0x7f00000001c0)={&(0x7f00000000c0)=@tipc=@name={0x1e, 0x2, 0x3, {{0x41}, 0x5}}, 0x80, 0x0, 0x0, &(0x7f0000000900)=ANY=[], 0x1458}, 0x48800) r6 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000540)={r7, &(0x7f0000000400), &(0x7f0000000440)=""/203}, 0x20) close(0x3) 12.681876652s ago: executing program 2 (id=2341): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="020000000400000008"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000000)={{r1, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000580)='%-010d \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2, r1}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x16, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000341218007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x0, 0xe, 0x0, &(0x7f0000000040)="f4b84de4115d64244a0e839e8971", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 7.524877556s ago: executing program 1 (id=2367): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1ff, 0x200}, 0x8000, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x7ff, 0x72}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e16aa0a046b876c1d0048007ea60864160af36504001a0038001d00", 0x28}, {0x0}, {0x0}], 0x3, 0x0, 0x0, 0x1f00c00e}, 0x4) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="5c00000015006b0300224ed86e6c1d0002117ea6e070d6065e22000300000000250002000f00000017d34460bc24eab556a705251e6182949a00003d3b48dfd8cdbf9767b4fa51f62a64c9f4060046d88037e786a6d0a5d700000017", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f0000002940)=""/4082, 0xff2}, {&(0x7f0000000240)=""/155, 0x9b}, {&(0x7f0000000000)=""/52, 0x34}], 0x3}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x40, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x2}, 0x8000, 0x0, 0x465e, 0x4, 0x3fe, 0x80000000, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0xa, 0x1, 0x106) close(0xffffffffffffffff) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x86dd, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x1b, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0xff0e}], 0x4, 0x0, 0x0, 0xa6820000}, 0x0) 6.324250011s ago: executing program 1 (id=2373): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x3500, 0x0, 0x0, 0x0, 0x100, 0x60000000, 0x6, 0x0, &(0x7f0000000380)="b10100000035", 0x0, 0x0, 0x700}, 0x50) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200400, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000040)={'geneve1\x00', 0xd7ad1c1a0787d8a9}) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000240)="1c00000014006b", 0x7}, {&(0x7f00000017c0)="00000000ffffffff1f01a0c9a1171aa56a7f9138a6", 0x15}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) 6.04581383s ago: executing program 1 (id=2374): syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0xc0126080, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) syz_clone(0x80200, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x200, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0xa00000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r0, &(0x7f0000000180), 0x40001) (async) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) 5.212362915s ago: executing program 0 (id=2380): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1ff, 0x200}, 0x8000, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x7ff, 0x72}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e16aa0a046b876c1d0048007ea60864160af36504001a0038001d00", 0x28}, {0x0}, {0x0}], 0x3, 0x0, 0x0, 0x1f00c00e}, 0x4) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="5c00000015006b0300224ed86e6c1d0002117ea6e070d6065e22000300000000250002000f00000017d34460bc24eab556a705251e6182949a00003d3b48dfd8cdbf9767b4fa51f62a64c9f4060046d88037e786a6d0a5d700000017", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f0000002940)=""/4082, 0xff2}, {&(0x7f0000000240)=""/155, 0x9b}, {&(0x7f0000000000)=""/52, 0x34}], 0x3}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x40, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x2}, 0x8000, 0x0, 0x465e, 0x4, 0x3fe, 0x80000000, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0xa, 0x1, 0x106) close(0xffffffffffffffff) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x86dd, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x1b, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0xff0e}], 0x4, 0x0, 0x0, 0xa6820000}, 0x0) 4.265928373s ago: executing program 0 (id=2385): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x21, 0x2, 0x2) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)=@o_path={&(0x7f0000000100)='./file0\x00', 0x0, 0x8, r1}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r2, 0x0, 0x41, 0x31, &(0x7f00000001c0)="ea4ce601b60b387002b676b95f361f63f91ae0e70636d9ef0718eb4df48c62a36c150c826e54e133b03ac19b0287ddc853ccdf1ae2371e6deb7eb22b42e7faa6ff", &(0x7f0000000240)=""/49, 0x5, 0x0, 0x59, 0xee, &(0x7f0000000280)="012ad4bd2c395819c6c9094b9a384935c789ce1eaddeb051604cea791c09f1ff62ce21f45cfa11b549c711a08a004bab37fd56ed85af4e272c50eee18523c0ae32fb8087f301fda5e806b1ce5725fd845fc19305c8b62cbbfd", &(0x7f0000000300)="f0bf30f7ee482f2a4c167d1ab485b7c81d12d22f637e281066db36ab35c7c7e10b11eb40ea7cb3bccf155caa52aab8f34103498985fb8c409d306d367f77a88a7f16cd1adfac88c79b1b62f7badcf6ad83931b1a7c11c6ceb10810f8142e89bb78e4f759364682275c5cb4bfcc1d338d7c1b17bf3df0f3520ef228997548a46187f5302731c317a74ff0a28a0ad0a7922fa5bbbe820f3c54f883b1a38e478ce533148febb39eada246de70bdcabb068ec13a89fffb6ce706957ef63e9a5a2012a47c9f00f9bb2812e2d2dac9279ba48cdc09710d105dc5304eb91c71377e7313189ce7fa975f56cdc6e04c4c7602", 0x4, 0x0, 0x9}, 0x50) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040), 0x4) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r5, 0x0, 0xd6, 0xf9, &(0x7f0000000580)="412919f91105e4ab8e53f7eb43fe0a2beefc269a72d1f5c8aa951412ce8584058f01c5708df5fa6b6ace0a893fe977da6f8a750b44e1830c79ef9a6a66793b7d5cc6bc05998836baaee8a548c9c5e2d02f9c70a6b7269b332ed8ba08d94e73b6dd71022d97145386ed2dab0f83aa1f7cb94d27476989c9dd9f1547e6de507fd8163ee7ee165a360fd8ed117f7103e00c5ea21e9bd8d9d6a17f0d1334a85fc3b2ffd353597c84636ceb49ee3fef3746ffaf9299d0ae9586715be2445fb1b625e3c1a799da3f2d9e7541f72f1cf52c3ccb5efa5db18a2d", &(0x7f0000000680)=""/249, 0x40ee3f6b, 0x0, 0x49, 0xb1, &(0x7f0000000780)="e1e9c928a337e67f2bff1f17ae15534991322cd82f3e22a5864038ffcb777811b0db48293273cf176a6742ab454f8b4c0cbbbab6cee2e77274f892214bd7d2095c0b325fca578f3fdd", &(0x7f0000000800)="a623ccd50bd5c9e0d0423294ebfbf0933e8dda207ebebe4fa00173edcca5e7487bbb19556554055386c5a342a8bf4595228b308233c61fe4af6d4997b51eb409cfc62b622d110ba8a05d99cc9eb864b2e635ebd0af28687af90658ec0317f44fd6fa85b83865240a499e1894b303d5882fd864b82095b29c1cd1aef51e7e408aae0a67a645de35ca944e744afbf598e2c5394b8b6411ba75c056d8650d59ea22f724fa7607e3d59023f8ae0c16372f62dc", 0x1, 0x0, 0x8cc}, 0x50) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3) socketpair(0x22, 0x2, 0x3, &(0x7f0000000000)) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) 3.69105727s ago: executing program 3 (id=2386): r0 = socket$kcm(0x2c, 0x3, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000380)={0x0, r0}, 0x8) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000380)={0x0, r0}, 0x8) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x208, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x3, 0x0, 0x0, 0x0, 0xc000000, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89ed, 0x0) r1 = socket$kcm(0x2c, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) recvmsg$kcm(r1, &(0x7f0000000800)={&(0x7f00000000c0)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000140)=""/26, 0x1a}, {&(0x7f0000000180)=""/86, 0x56}, {&(0x7f00000002c0)=""/129, 0x81}, {&(0x7f00000003c0)=""/188, 0xbc}, {&(0x7f0000000480)=""/232, 0xe8}, {&(0x7f0000000580)=""/79, 0x4f}, {&(0x7f0000000600)=""/88, 0x58}], 0x7, &(0x7f0000000780)=""/93, 0x5d}, 0x0) (async) recvmsg$kcm(r1, &(0x7f0000000800)={&(0x7f00000000c0)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000140)=""/26, 0x1a}, {&(0x7f0000000180)=""/86, 0x56}, {&(0x7f00000002c0)=""/129, 0x81}, {&(0x7f00000003c0)=""/188, 0xbc}, {&(0x7f0000000480)=""/232, 0xe8}, {&(0x7f0000000580)=""/79, 0x4f}, {&(0x7f0000000600)=""/88, 0x58}], 0x7, &(0x7f0000000780)=""/93, 0x5d}, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1d, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) close(0x3) (async) close(0x3) socket$kcm(0x10, 0x2, 0x4) socket$kcm(0xa, 0x1, 0x106) (async) r5 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r5, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4e23, 0x0, @loopback, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) bpf$MAP_CREATE(0x0, 0x0, 0x50) (async) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(r5, 0x0, 0x840) (async) sendmsg$kcm(r5, 0x0, 0x840) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r6) (async) close(r6) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) socketpair(0x26, 0x6, 0x3, &(0x7f0000000740)) socket$kcm(0x2, 0x200000000000001, 0x106) socket$kcm(0x10, 0x2, 0x0) 3.505740795s ago: executing program 1 (id=2387): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) recvmsg$kcm(r0, 0x0, 0x40002000) socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x8902, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf2000000000000007000000180000003d030100000000009500f000000000007126000000000000bf67000000000000360602000fff07106706000020000000170200000ee60000bf250000000000002d350000000000006507000002080000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad03000000000000720400000000000014000000000000009500000000000000db13d5d8b741f2cdaabc8383c8f56b8c2b84a800ea6553f304000000815dcf00c3eebc52267b042d19"], &(0x7f0000000100)='GPL\x00'}, 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x4000040) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfe33) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r4 = socket$kcm(0x11, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000f6ffffff00000000fcffffff8500000030000000180100002020642500000000002020207b1af8ff00000000bfa110000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f00000001c0)=r2}, 0x20) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000380)=r5, 0x4) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, 0x0, 0x0) sendmsg$kcm(r4, 0x0, 0x40000) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_service_bytes_recursive\x00', 0x26e1, 0x0) socketpair(0x3, 0xa, 0x2, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) close(r6) bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x94) r8 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000190091c8b14a0778a8123d181d"], 0xfe33) 3.193950055s ago: executing program 0 (id=2388): r0 = perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x8, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000003}, 0x2, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open$cgroup(&(0x7f0000000000)={0x2, 0x80, 0x10, 0x3, 0x8, 0x9, 0x0, 0x949, 0x8800, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x3, 0x5}, 0x200, 0x64, 0x8, 0x3, 0x8, 0x9, 0x6, 0x0, 0x779, 0x0, 0x7}, 0xffffffffffffffff, 0x7, r0, 0x5) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00'}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8931, &(0x7f0000000080)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8932, &(0x7f0000000080)) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x40086602, 0x110e22fff2) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={0xffffffffffffffff, &(0x7f0000000600), 0x0}, 0x20) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffffffffffff49, &(0x7f0000000380)=[{&(0x7f0000000040)="c01803002e000b12d25a80648c2594f90124fc60100c044002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r6, 0x84, 0x23, 0x0, 0x0) sendmsg$inet(r6, &(0x7f0000000680)={&(0x7f0000000280)={0x2, 0x4e20, @empty}, 0x10, &(0x7f0000000380)=[{&(0x7f00000002c0)="be995537a0c40fd14bf372c84bd81119537c138e0d700733ba0b1333a28d28e443332babfdc57f64b58472a74ce68294181274a4c5e49385f6808a5d3c0bf2749b4c646d762ebb774cdc556daa02637536c75b5d891e0381e0375db0f9bfc82073d503c498944f15b4597b792f7b26d3cf84df82a99b66d9a9eebda3c9147d6f4fd89f5505895139de08ea88c957f2f82755dfbc", 0x94}], 0x1, &(0x7f00000005c0)=[@ip_retopts={{0x80, 0x0, 0x7, {[@generic={0x40, 0x11, "407f686761efe3fa428197e3bfd4fe"}, @timestamp={0x44, 0xc, 0xc6, 0x0, 0x4, [0x8001, 0x9d88]}, @cipso={0x86, 0x6, 0x2}, @timestamp_addr={0x44, 0x34, 0x5, 0x1, 0xe, [{@rand_addr=0x64010101, 0x8}, {@dev={0xac, 0x14, 0x14, 0x10}, 0x3}, {@local, 0x101}, {@rand_addr=0x64010102, 0x7}, {@local, 0x36}, {@private=0xa010101, 0xc}]}, @timestamp={0x44, 0x18, 0xc5, 0x0, 0x3, [0x9, 0x101, 0x0, 0x4, 0x5]}]}}}, @ip_retopts={{0x24, 0x0, 0x7, {[@timestamp={0x44, 0x14, 0x52, 0x0, 0x7, [0x5, 0x8, 0x8, 0x5]}]}}}], 0xa8}, 0x4008024) socket$kcm(0xa, 0x3, 0x3a) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xc, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x420, 0xe52, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x7, 0x4, 0x2}, 0x50) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r8, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r7}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xfb1585202ff31891}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x10000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.149441316s ago: executing program 1 (id=2389): perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0}, 0x94) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r0, 0x4) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) socket$kcm(0x2a, 0x2, 0x0) (async) gettid() r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, 0x0, 0x5}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r3, &(0x7f0000000000), 0x2a979d) (async) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0xc280, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@base={0x10, 0x4, 0x4, 0x2}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x89, 0x1, 0x0, 0x0, 0x0, 0x34, 0x2, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x2}, 0x8002, 0x2, 0xfffffffe, 0x0, 0x200, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) close(0xffffffffffffffff) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x1) (async) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.093791948s ago: executing program 3 (id=2390): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x2014, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) setsockopt$sock_attach_bpf(r1, 0x29, 0x11, 0x0, 0x0) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8918, &(0x7f0000000000)={'veth1_to_bridge\x00', @random="02000400ff14"}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x10, 0x1c, &(0x7f0000000500)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1c00ffb0, 0x0, 0x0, 0x0, 0xfffffffe}, {{0x18, 0x1, 0x1, 0x0, 0x1}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1000000}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x0, 0x7ff}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {0x4, 0x0, 0x6}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.992541871s ago: executing program 1 (id=2391): bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) recvmsg$kcm(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open$cgroup(&(0x7f0000000140)={0x5, 0x80, 0x9, 0x5, 0x8, 0x2, 0x0, 0x1fe2, 0x804, 0x7, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2c7, 0x6, @perf_bp={0x0, 0x1}, 0x200c, 0x7, 0x999, 0x3, 0x6, 0xe, 0x5, 0x0, 0x2, 0x0, 0x9f}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000026000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, &(0x7f0000000340), &(0x7f0000000380)=r1}, 0x20) sendmsg$unix(r1, &(0x7f0000000280)={&(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000001c0)=[{&(0x7f00000000c0)="d299e76ed342076dda8a255ca67f1660893f9410fbe163a8cd4770f98510ea7819186cb1ba92f18fb409f49411548add05", 0x31}], 0x1, &(0x7f0000000240)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xffffffffffffffff}}}], 0x20, 0x4}, 0x20000040) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="5c00000014006b04000000d86e6c1d000a847ea6ea6567e75110623400cdd46b44dacff32c6e020075e300250002000f00000017d34460bc24eab55600000000000000bf9367b4fa51f60a64c9f4d4938037e786a6d0bdd700000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b700000001000000bfa30000000000000703000030feffff620af0fff8ffffff71a4f0ff000000002d040300000000003d030000000000006504000001ed000079102800000000006c440000000000007b0ab0fe000000007913000000000000b5000000000000009500000000000000023bc065b7a379d17cf9333379fc9e94af05000000f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a715bc5181554a090f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128c4e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c26f71b29ee35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d0800af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8ea8fcb913466aaa7f6d150352e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d390dd65be2467b373eafd9aa58f2077184b6a89adaf17b0a6041bdef728d236619074d6ebdf098bc908f523d228a40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c5da18ec0ae563f721c5363092adaa1d8964162a27afea62d84f3a10746443d64364f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b93d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d710b651f898ba749e40bc6980fe78683ac5c0c31030699ddd71063be9261b2e1aab1675b34a220488c126aeef5f510a8f1aded94a129e4aec6ffc3a15d96c2ea3e2e04cfe0e669e51731b2875353193f82ade69d0540059fe6c7fe7cd86975023cb08cc7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed82641687f3b3a70bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c5538a294270a1ad10c80fef7c24c87afce829ba0f85da6d888f18ea40ab959f6074ab2a4009b9e5f07ab513cdc6c0e57fb1c1ca571380d7b4ead35a655e0b4a26b702396df7e0cbe02b6e4114f244a9bf93f05beb72f0861f75c345edcb84ac7eeedcf2ba1a9508f9d6aba5823a34a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a9b702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b728fe26e37037f27f277b8a8346962a350845ffa0d829e4f79adc287906943408e6df3adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d0a874c74b777df005c55fc30511d00000000c85265b2bd83d64a532869d708000000000000007baa5b6a682b50f0937f778af083e055f6138a757ebd0ed91114a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a9037d2283c42efc54fa84323a56edbd287eba0af35c35d91f3c62a0ca74836a640224de85f2b4a5fee500bbc584328a6a7a4628c4378c9b71dff64075b74a6520adb187b40d2cccbcb08c0634ee74658d3e23bf511c8b0bf1b69d2b3782b3f481c320e7bd4615dbbf24c06ac95bd639e68d0e6aa7f0d07bf69a93365f803f0144af37236ea133c2255b0613bf8ba1d538e06c2411e8d70053b712084fd0e313de9bb19266e49a3a2190cb039c6f89610acd896319b9c8d1b8aac2eaa5a4f8be7419a09e3fb5be3be2fcdadd2299839cc40e684e6e2b4e1385fde7a0bad3b0be672110268a34dad364fddee69e564119cebb6940c6356ff83ca527c573d700000000000000c6299263e6d9097f225de969485bce3d7dc471c0669bb6a467cf0de54dfcc1857048fe22a19dbb1b3cb9babaa839f1f6e817a62d95a5b971ff96a5c66c338c6f2a2da4644519f40761402e9c81013d76c7152c95ba5efa24ce1930f23a2277f057ffb6b0144f3b434a2adc456ef4d2fbdf7c6238c2bb00ffcf2d23d68cb9b027f3b225ec4e09b089f7956b66c5692b46ea03abb6a404c8ccceaa4ba4161409fcb54b86eaca26b2a0c4b81f7b71cbfcef"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r4, 0x29, 0x3c, &(0x7f0000000040), 0xcf) recvmsg$unix(r4, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x41) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000300)=ANY=[@ANYBLOB="0000000001000000"]) unlink(0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x89b1, &(0x7f0000000000)={'vlan0\x00', @local}) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000180)=[{&(0x7f0000000300)="d80000001a0081044e81f782db4cb904021d0800fe007c05e8fe55a115001c000200142603600e12080005007a010401a8001600200004400400e000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0x12b}], 0x1}, 0x0) syz_clone(0x6922e500, 0x0, 0x0, 0x0, 0x0, 0x0) 1.884127754s ago: executing program 3 (id=2392): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1ff, 0x200}, 0x8000, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x7ff, 0x72}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e16aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e61", 0x3c}, {0x0}, {0x0}], 0x3, 0x0, 0x0, 0x1f00c00e}, 0x4) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="5c00000015006b0300224ed86e6c1d0002117ea6e070d6065e22000300000000250002000f00000017d34460bc24eab556a705251e6182949a00003d3b48dfd8cdbf9767b4fa51f62a64c9f4060046d88037e786a6d0a5d700000017", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f0000002940)=""/4082, 0xff2}, {&(0x7f0000000240)=""/155, 0x9b}, {&(0x7f0000000000)=""/52, 0x34}], 0x3}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x40, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x2}, 0x8000, 0x0, 0x465e, 0x4, 0x3fe, 0x80000000, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0xa, 0x1, 0x106) close(0xffffffffffffffff) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x86dd, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x1b, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0xff0e}], 0x4, 0x0, 0x0, 0xa6820000}, 0x0) 1.078844498s ago: executing program 3 (id=2393): socket$kcm(0x2, 0x200000000000001, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100808, 0x0, 0x8000, 0x0, 0x0, 0x3, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8937, &(0x7f0000000000)={'bridge_slave_1\x00', @random="010000201000"}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x74, 0x0, &(0x7f0000001b00)="c8ea2f8a5e2f0338051bd60db11da78ee0a0ff8a0a78c91a0657cf0ac85d7b9740796a35a8a1630d37644522ad5579cf79c38e1e695d780dfd5856a80d218cc4c10096f3fc3594f1fc95934fb6866d67089ef21cf2c6db8ca265e50f126e9a964fb6c2ceb3cc76dacc9f16312b4ffcc52f53cf8b", 0x0, 0x2f, 0xe8034000, 0x0, 0x0, 0x0, 0x0, 0x5dc, 0x0, 0x9}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x0, 0x25, 0x0, 0xf1) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x24142, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x71ab}, 0x0, 0x6, 0x0, 0x0, 0xfffffffffff7bbfe, 0x0, 0x0, 0x0, 0xffffffff}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="240000002d008188042f8eeae0b8402e7b6e67d83c000000200000000000000100000020", 0x24}], 0x1}, 0x0) r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@o_path={&(0x7f00000000c0)='./file0\x00', 0x0, 0x4010, r3}, 0x18) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e00000000000000fe08000007"], 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r5, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r5, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000040)=ANY=[@ANYRES8=r3, @ANYRES32, @ANYRES16=r3, @ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffd84) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) r7 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x891c, &(0x7f0000000040)={'pim6reg0\x00', @broadcast}) socket$kcm(0x2, 0x4, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a9b80"], 0xfe33) 1.077739108s ago: executing program 0 (id=2400): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1ff, 0x200}, 0x8000, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x7ff, 0x72}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e16aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e61", 0x3c}, {0x0}, {0x0}], 0x3, 0x0, 0x0, 0x1f00c00e}, 0x4) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="5c00000015006b0300224ed86e6c1d0002117ea6e070d6065e22000300000000250002000f00000017d34460bc24eab556a705251e6182949a00003d3b48dfd8cdbf9767b4fa51f62a64c9f4060046d88037e786a6d0a5d700000017", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f0000002940)=""/4082, 0xff2}, {&(0x7f0000000240)=""/155, 0x9b}, {&(0x7f0000000000)=""/52, 0x34}], 0x3}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x40, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x2}, 0x8000, 0x0, 0x465e, 0x4, 0x3fe, 0x80000000, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0xa, 0x1, 0x106) close(0xffffffffffffffff) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x86dd, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x1b, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0xff0e}], 0x4, 0x0, 0x0, 0xa6820000}, 0x0) 331.26269ms ago: executing program 3 (id=2394): socket$kcm(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x8000, 0x4, 0x3, 0xaaf04684de878bda, 0x9, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000800), 0x100, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x3, 0x3, 0x6e, 0xee, 0x0, 0xfa4, 0x20, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8, 0x2, @perf_bp={&(0x7f0000000100), 0x9}, 0x86a8, 0x2, 0x9, 0x0, 0x6, 0x3, 0x4, 0x0, 0x7, 0x0, 0x5}, 0xffffffffffffffff, 0xd, r0, 0x5) r1 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) sendmsg$inet(r1, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1}, 0x3e8) 259.102263ms ago: executing program 0 (id=2395): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc///\x00\x82q\xee\x00!\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'nicvf0\x00', 0x400}) ioctl$TUNSETTXFILTER(r1, 0x401054d5, &(0x7f00000003c0)=ANY=[]) r2 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x20}) mkdirat$cgroup(r0, &(0x7f0000000440)='syz0\x00', 0x1ff) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc///\x00\x82q\xee\x00!\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102}) (async) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'nicvf0\x00', 0x400}) (async) ioctl$TUNSETTXFILTER(r1, 0x401054d5, &(0x7f00000003c0)=ANY=[]) (async) openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x20}) (async) mkdirat$cgroup(r0, &(0x7f0000000440)='syz0\x00', 0x1ff) (async) 117.547487ms ago: executing program 3 (id=2396): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)="7beccb7ac649df759dfcc46d1aa742becd3e679b2956f06c9e7ca58890097ebdc5cb5f6e0bc34bedd2ba8f0f65d9d3e269f4941dff066c33148b9d7da7de02bd9e6d73a13156a80544292e96c0b50dea768fbed4e9a7ecf7b968f73861f8d6869b43854f4c850ba1876f6518787e02c61c59c361c12efed4a46e483579f3c3116094abcab0f682229756ffff5b0a04f553629cd071bba8dfba3828eebd5b7b8f43969b663f19b754b273235823dd054c107354be91838a848440188de9f1460b9d2da82fbf57e2") bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, 0x0, &(0x7f00000002c0)}, 0x20) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000001300)=ANY=[@ANYBLOB="0a000000160200000c0000007f00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000039c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffffe8}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x18000000000002a0, 0x38, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e14f086dd", 0x0, 0x63, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000cc0)={0x80}, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001000)={r2, 0xe0, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000d00)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, &(0x7f0000000d80)=[0x0], &(0x7f0000000dc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5e, &(0x7f0000000e00)=[{}, {}], 0x10, 0x10, &(0x7f0000000e40), &(0x7f0000000e80), 0x8, 0x7c, 0x8, 0x8, &(0x7f0000000ec0)}}, 0x10) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000014c0)={0x4, 0x80, 0xf, 0x9, 0x0, 0x2, 0x0, 0x74c, 0x80000, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfffffffd, 0x2, @perf_config_ext={0x8265, 0x1}, 0x10104, 0x0, 0x8, 0x4, 0x3, 0xc, 0x6, 0x0, 0x6, 0x0, 0x63c0ec08}, 0x0, 0x10, r4, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r6 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xc, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="660a0000000000006111830000000000950b000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000011c0)=ANY=[@ANYRES32=r3, @ANYRES32, @ANYBLOB='\n\x00'/12, @ANYRES32, @ANYBLOB="6717acd474fcef0cb2e2c88619bcf5710202840997409d562b3f9fa56e49276d85793f92d812c05e54e43c05db75a667d0e6e8f2d3db129d5c02d909dcbb5acc90c94c78424a63501380d634c0233fbd2ba47efe40fe6f7f9af42e86c6cd6fb529521b21fe649777e43cc76530dc5d9aaca3e6549267d83fb41ce01440612ba43870b72456d8c65c778609978d03805f16baa11eee61b4", @ANYRES64=0x0], 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001040)={r5, 0xe0, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000014a, &(0x7f0000001080)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc8, 0x8, 0x0, 0x0}}, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x400}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={0xffffffffffffffff, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, &(0x7f00000006c0)=[0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x31, &(0x7f0000000740)=[{}, {}], 0x10, 0x10, &(0x7f0000000780), &(0x7f00000007c0), 0x8, 0x12, 0x8, 0x8, &(0x7f0000000800)}}, 0x10) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x10, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xa19}, {{0x18, 0x1, 0x1, 0x0, r11}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2000000}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffff5}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x1, 0xe1, &(0x7f0000000140)=""/225, 0x41000}, 0x94) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x1ff, 0x18}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x1a, 0x7, &(0x7f0000001280)=ANY=[@ANYBLOB="180000000e7351da8c08378d6b0b000018000000050000000000000004000000950000000000000085200000020000009500000000000000486aa5abb79d405de304538b0e856d703cbe5990c0bc41ed853ad5f21744531ae1439707ca7b96be9ff6e3f2b34a8a150000000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0x50, &(0x7f0000000180)=""/80, 0x41000, 0x2, '\x00', r7, @tracing=0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000580)={0x5, 0x4, 0xffff, 0xffff}, 0x10, r9, r10, 0x0, &(0x7f00000009c0)=[r1, r1], 0x0, 0x10, 0x93b}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000080)) r12 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x402100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x7, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0xab02}, 0x0, 0xfffffffffffffffc, r6, 0x0) r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0xf, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000009000000000000000500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014006500b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2a}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r12, 0x40042408, r13) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') 46.009339ms ago: executing program 2 (id=2342): r0 = perf_event_open(&(0x7f0000000600)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x235fd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x20085, 0x4, 0x0, 0xf, 0x4000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000002c0)=""/71, 0x47}, {&(0x7f0000000400)=""/15, 0xf}], 0x2, &(0x7f00000009c0)=""/219, 0xdb}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb7"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000380)="ec1f9d295dad87ab819face00e02c83aaffc632091d6904fac7a2714c31160da7559c01bd8788109f1addf78836b413ea5a5ea4a45ddf82cfdb344725d9d6ddf0c35706d62a581280f8e00ed2a78fbca906e2c3748d514a886e5d920a4260807e1ad4cd3ccfa6ad58e187fc4526db6234f7fa8ffa18dacce30d11b87589c0e65", 0x80}, {&(0x7f0000000840)="d0fcbc09fc70ffb29285f8af67a1dcc2fd2b2d9d6583ae18bbed2f8ffdb629e880c2740e3bb7d9d3881784ae5d11bad9d1d7fa3bbdcaaa5802e8df760d4ad40254d20132d84a61a4f50f5669e0e6c66a3b23d90d3ba10a97d9531ede087fc9563db6ea619718c45f614073b68b29c197161882894079b7", 0x77}], 0x2, 0x0, 0x0, 0x400c005}, 0x10) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xa3, 0xe, 0x0, 0x0, 0x0, 0x5, 0x200, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xe, 0x10}, 0x226, 0xb, 0x1, 0x8, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x89e1, &(0x7f0000000180)={r3}) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000000c0)='cpu\t>0&&\t') r6 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x9, 0x1, 0x7fe2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r8) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') mkdirat$cgroup(r4, &(0x7f00000001c0)='syz0\x00', 0x1ff) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@fallback=r9, r9, 0x2f}, 0x20) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000280)='}[.$#:,$$\xc2\x00') bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000140)={@cgroup, 0xffffffffffffffff, 0x2f, 0x2010, 0x4}, 0x20) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000500)=r4, 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='\x00') socket$kcm(0x10, 0x2, 0x4) 0s ago: executing program 0 (id=2397): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) recvmsg$kcm(r0, 0x0, 0x40002000) socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x8902, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf2000000000000007000000180000003d030100000000009500f000000000007126000000000000bf67000000000000360602000fff07106706000020000000170200000ee60000bf250000000000002d350000000000006507000002080000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad03000000000000720400000000000014000000000000009500000000000000db13d5d8b741f2cdaabc8383c8f56b8c2b84a800ea6553f304000000815dcf00c3eebc52267b042d19"], &(0x7f0000000100)='GPL\x00'}, 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x4000040) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfe33) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r4 = socket$kcm(0x11, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000f6ffffff00000000fcffffff8500000030000000180100002020642500000000002020207b1af8ff00000000bfa110000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f00000001c0)=r2}, 0x20) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000380)=r5, 0x4) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, 0x0, 0x0) sendmsg$kcm(r4, 0x0, 0x40000) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_service_bytes_recursive\x00', 0x26e1, 0x0) socketpair(0x3, 0xa, 0x2, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) close(r6) bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x94) r8 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000190091c8b14a0778a8123d181d"], 0xfe33) kernel console output (not intermixed with test programs): : entered allmulticast mode [ 201.835447][ T7887] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 201.937405][ T7889] netlink: 10 bytes leftover after parsing attributes in process `syz.3.594'. [ 202.329776][ T7894] veth0_to_hsr: entered promiscuous mode [ 203.233845][ T7912] netlink: 132 bytes leftover after parsing attributes in process `syz.2.599'. [ 203.406290][ T7920] netlink: 'syz.2.602': attribute type 10 has an invalid length. [ 203.419132][ T7920] netlink: 210880 bytes leftover after parsing attributes in process `syz.2.602'. [ 203.446227][ T7918] netlink: 'syz.3.601': attribute type 3 has an invalid length. [ 203.469340][ T7918] netlink: 170752 bytes leftover after parsing attributes in process `syz.3.601'. [ 203.550374][ T7918] netlink: 132 bytes leftover after parsing attributes in process `syz.3.601'. [ 203.802867][ T7926] netlink: 'syz.2.604': attribute type 5 has an invalid length. [ 203.818683][ T7926] netlink: 176 bytes leftover after parsing attributes in process `syz.2.604'. [ 204.371978][ T7945] netlink: 'syz.2.611': attribute type 29 has an invalid length. [ 204.384676][ T7945] netlink: 'syz.2.611': attribute type 29 has an invalid length. [ 204.484967][ T7945] netlink: 'syz.2.611': attribute type 29 has an invalid length. [ 204.704828][ T7952] netlink: 'syz.0.610': attribute type 3 has an invalid length. [ 204.766879][ T7952] netlink: 132 bytes leftover after parsing attributes in process `syz.0.610'. [ 206.890369][ T7632] syz.1.521 (7632) used greatest stack depth: 17896 bytes left [ 208.871950][ T7981] netlink: 'syz.1.621': attribute type 29 has an invalid length. [ 208.893916][ T7979] netlink: zone id is out of range [ 208.909755][ T7979] netlink: set zone limit has 8 unknown bytes [ 208.929767][ T7981] netlink: 'syz.1.621': attribute type 29 has an invalid length. [ 209.265076][ T7986] netlink: 132 bytes leftover after parsing attributes in process `syz.0.623'. [ 209.734650][ T7991] netlink: 'syz.0.624': attribute type 13 has an invalid length. [ 209.772119][ T7991] netlink: 172 bytes leftover after parsing attributes in process `syz.0.624'. [ 209.903645][ T7991] erspan0: refused to change device tx_queue_len [ 210.656983][ T8010] netlink: 'syz.3.628': attribute type 3 has an invalid length. [ 210.664938][ T8010] netlink: 132 bytes leftover after parsing attributes in process `syz.3.628'. [ 211.098411][ T8016] netlink: 132 bytes leftover after parsing attributes in process `syz.2.631'. [ 211.108090][ T8017] netlink: 132 bytes leftover after parsing attributes in process `syz.2.631'. [ 211.652361][ T8036] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.637'. [ 211.715071][ T8036] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 211.723190][ T8036] IPv6: NLM_F_CREATE should be set when creating new route [ 211.731279][ T8036] IPv6: NLM_F_CREATE should be set when creating new route [ 211.739006][ T8036] IPv6: NLM_F_CREATE should be set when creating new route [ 211.757245][ T8039] netlink: 'syz.2.637': attribute type 9 has an invalid length. [ 211.779416][ T8039] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.637'. [ 212.103658][ T8050] FAULT_INJECTION: forcing a failure. [ 212.103658][ T8050] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 212.137805][ T8050] CPU: 0 PID: 8050 Comm: syz.1.640 Not tainted syzkaller #0 [ 212.145153][ T8050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 212.155239][ T8050] Call Trace: [ 212.158537][ T8050] [ 212.161481][ T8050] dump_stack_lvl+0x18c/0x250 [ 212.166189][ T8050] ? show_regs_print_info+0x20/0x20 [ 212.171418][ T8050] ? load_image+0x420/0x420 [ 212.175949][ T8050] ? __might_fault+0xaa/0x120 [ 212.180654][ T8050] ? __lock_acquire+0x7d80/0x7d80 [ 212.185715][ T8050] should_fail_ex+0x394/0x4c0 [ 212.190950][ T8050] _copy_from_user+0x2f/0xe0 [ 212.195571][ T8050] do_tcp_setsockopt+0x58d/0x1c50 [ 212.200617][ T8050] ? tcp_set_window_clamp+0x4e0/0x4e0 [ 212.206003][ T8050] ? aa_af_perm+0x330/0x330 [ 212.210502][ T8050] ? __fget_files+0x28/0x460 [ 212.215090][ T8050] ? aa_sock_opt_perm+0x74/0x100 [ 212.220024][ T8050] ? sock_common_setsockopt+0x36/0xc0 [ 212.225393][ T8050] ? tcp_setsockopt+0x3d/0xe0 [ 212.230063][ T8050] ? tcp_enable_tx_delay+0x70/0x70 [ 212.235169][ T8050] ? sock_common_recvmsg+0x190/0x190 [ 212.240452][ T8050] do_sock_setsockopt+0x175/0x1a0 [ 212.245480][ T8050] ? __fdget+0x180/0x210 [ 212.249726][ T8050] __x64_sys_setsockopt+0x182/0x200 [ 212.254929][ T8050] do_syscall_64+0x55/0xb0 [ 212.259350][ T8050] ? clear_bhb_loop+0x40/0x90 [ 212.264026][ T8050] ? clear_bhb_loop+0x40/0x90 [ 212.268705][ T8050] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 212.274600][ T8050] RIP: 0033:0x7f2a2359ce59 [ 212.279015][ T8050] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 212.298619][ T8050] RSP: 002b:00007f2a24418028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 212.307036][ T8050] RAX: ffffffffffffffda RBX: 00007f2a23816090 RCX: 00007f2a2359ce59 [ 212.315004][ T8050] RDX: 0000000000000015 RSI: 0000000000000006 RDI: 0000000000000004 [ 212.322998][ T8050] RBP: 00007f2a24418090 R08: 0000000000000004 R09: 0000000000000000 [ 212.330964][ T8050] R10: 0000200000000500 R11: 0000000000000246 R12: 0000000000000001 [ 212.338948][ T8050] R13: 00007f2a23816128 R14: 00007f2a23816090 R15: 00007ffcd64a0568 [ 212.346929][ T8050] [ 212.687410][ T8059] netlink: 'syz.2.642': attribute type 3 has an invalid length. [ 212.695132][ T8059] netlink: 132 bytes leftover after parsing attributes in process `syz.2.642'. [ 213.313293][ T8080] netlink: 'syz.1.651': attribute type 9 has an invalid length. [ 213.341315][ T8080] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.651'. [ 213.405229][ T8084] netlink: 4079 bytes leftover after parsing attributes in process `syz.2.652'. [ 213.487641][ T8085] netlink: 'syz.1.651': attribute type 9 has an invalid length. [ 213.673104][ T8094] FAULT_INJECTION: forcing a failure. [ 213.673104][ T8094] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 213.779556][ T8094] CPU: 1 PID: 8094 Comm: syz.3.655 Not tainted syzkaller #0 [ 213.786935][ T8094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 213.797026][ T8094] Call Trace: [ 213.800321][ T8094] [ 213.803268][ T8094] dump_stack_lvl+0x18c/0x250 [ 213.807978][ T8094] ? show_regs_print_info+0x20/0x20 [ 213.813210][ T8094] ? load_image+0x420/0x420 [ 213.817746][ T8094] ? __lock_acquire+0x7d80/0x7d80 [ 213.822793][ T8094] ? snprintf+0xe9/0x140 [ 213.827057][ T8094] should_fail_ex+0x394/0x4c0 [ 213.831760][ T8094] _copy_to_user+0x2f/0xa0 [ 213.836203][ T8094] simple_read_from_buffer+0xe7/0x150 [ 213.841609][ T8094] proc_fail_nth_read+0x1e8/0x260 [ 213.846664][ T8094] ? proc_fault_inject_write+0x360/0x360 [ 213.852323][ T8094] ? fsnotify_perm+0x271/0x5e0 [ 213.857106][ T8094] ? proc_fault_inject_write+0x360/0x360 [ 213.862764][ T8094] vfs_read+0x298/0x990 [ 213.866952][ T8094] ? kernel_read+0x1e0/0x1e0 [ 213.871571][ T8094] ? __fget_files+0x28/0x460 [ 213.876181][ T8094] ? __fget_files+0x3fc/0x460 [ 213.880884][ T8094] ? __fdget_pos+0x2a3/0x330 [ 213.885492][ T8094] ? ksys_read+0x74/0x260 [ 213.889857][ T8094] ksys_read+0x151/0x260 [ 213.894126][ T8094] ? vfs_write+0x9a0/0x9a0 [ 213.898573][ T8094] ? lockdep_hardirqs_on+0x98/0x150 [ 213.903801][ T8094] do_syscall_64+0x55/0xb0 [ 213.908238][ T8094] ? clear_bhb_loop+0x40/0x90 [ 213.912931][ T8094] ? clear_bhb_loop+0x40/0x90 [ 213.917670][ T8094] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 213.923603][ T8094] RIP: 0033:0x7fda4d75d68e [ 213.928039][ T8094] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 213.947675][ T8094] RSP: 002b:00007fda4e6fffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 213.956113][ T8094] RAX: ffffffffffffffda RBX: 00007fda4e7006c0 RCX: 00007fda4d75d68e [ 213.964103][ T8094] RDX: 000000000000000f RSI: 00007fda4e7000a0 RDI: 0000000000000005 [ 213.972094][ T8094] RBP: 00007fda4e700090 R08: 0000000000000000 R09: 0000000000000000 [ 213.980091][ T8094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 213.988090][ T8094] R13: 00007fda4da16128 R14: 00007fda4da16090 R15: 00007ffe2e0212f8 [ 213.996102][ T8094] [ 214.226848][ T8101] netlink: 'syz.1.653': attribute type 3 has an invalid length. [ 214.961749][ T8119] netlink: 'syz.0.661': attribute type 4 has an invalid length. [ 215.049732][ T8119] __nla_validate_parse: 2 callbacks suppressed [ 215.049768][ T8119] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.661'. [ 215.384203][ T8136] netlink: 'syz.0.666': attribute type 41 has an invalid length. [ 215.689371][ T8144] netlink: 'syz.3.669': attribute type 29 has an invalid length. [ 215.807981][ T8148] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.671'. [ 215.823767][ T8148] netlink: 4 bytes leftover after parsing attributes in process `syz.1.671'. [ 215.985138][ T8153] netlink: 'syz.0.672': attribute type 2 has an invalid length. [ 216.002784][ T8153] netlink: 1045 bytes leftover after parsing attributes in process `syz.0.672'. [ 216.135760][ T8153] netlink: 'syz.0.672': attribute type 4 has an invalid length. [ 216.144161][ T8153] netlink: 143044 bytes leftover after parsing attributes in process `syz.0.672'. [ 216.172189][ T8153] netlink: 14 bytes leftover after parsing attributes in process `syz.0.672'. [ 216.956199][ T8174] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.678'. [ 216.998800][ T8174] netlink: 6320 bytes leftover after parsing attributes in process `syz.2.678'. [ 217.067218][ T8174] tc_dump_action: action bad kind [ 218.407471][ T8196] netlink: 'syz.3.684': attribute type 19 has an invalid length. [ 218.797990][ T8205] netlink: 'syz.3.688': attribute type 26 has an invalid length. [ 218.805794][ T8205] netlink: 62827 bytes leftover after parsing attributes in process `syz.3.688'. [ 218.841278][ T8206] netlink: 'syz.2.689': attribute type 2 has an invalid length. [ 218.899261][ T8206] netlink: 'syz.2.689': attribute type 3 has an invalid length. [ 218.951861][ T8206] netlink: 132 bytes leftover after parsing attributes in process `syz.2.689'. [ 219.310543][ T8221] netlink: 'syz.0.693': attribute type 29 has an invalid length. [ 219.421226][ T8221] netlink: 'syz.0.693': attribute type 29 has an invalid length. [ 219.501570][ T8221] netlink: 'syz.0.693': attribute type 29 has an invalid length. [ 222.543965][ T8244] netlink: 60 bytes leftover after parsing attributes in process `syz.2.702'. [ 223.673228][ T8272] netlink: 'syz.3.708': attribute type 1 has an invalid length. [ 223.693507][ T8272] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.708'. [ 224.896671][ T8278] netlink: 'syz.3.710': attribute type 29 has an invalid length. [ 224.916406][ T8278] netlink: 'syz.3.710': attribute type 29 has an invalid length. [ 225.002725][ T8278] netlink: 'syz.3.710': attribute type 29 has an invalid length. [ 225.188123][ T8284] netlink: 'syz.0.711': attribute type 41 has an invalid length. [ 225.224181][ T8284] netlink: 'syz.0.711': attribute type 22 has an invalid length. [ 225.245846][ T8284] netlink: 4 bytes leftover after parsing attributes in process `syz.0.711'. [ 228.574206][ T8309] netlink: 'syz.3.716': attribute type 4 has an invalid length. [ 228.607240][ T8309] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.716'. [ 228.697177][ T8316] delete_channel: no stack [ 228.787118][ T8316] delete_channel: no stack [ 229.086706][ T8322] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.729'. [ 229.225737][ T8322] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 229.286179][ T8322] CPU: 1 PID: 8322 Comm: syz.3.729 Not tainted syzkaller #0 [ 229.293549][ T8322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 229.303652][ T8322] Call Trace: [ 229.306963][ T8322] [ 229.309928][ T8322] dump_stack_lvl+0x18c/0x250 [ 229.314661][ T8322] ? show_regs_print_info+0x20/0x20 [ 229.319905][ T8322] ? load_image+0x420/0x420 [ 229.324480][ T8322] sysfs_warn_dup+0x8e/0xa0 [ 229.329029][ T8322] sysfs_do_create_link_sd+0xc0/0x110 [ 229.334457][ T8322] device_add_class_symlinks+0x1cf/0x240 [ 229.340158][ T8322] device_add+0x4f9/0xc40 [ 229.344551][ T8322] wiphy_register+0x1d99/0x2ac0 [ 229.349503][ T8322] ? cfg80211_event_work+0x40/0x40 [ 229.354665][ T8322] ? minstrel_ht_alloc+0x88a/0x990 [ 229.359855][ T8322] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 229.366004][ T8322] ieee80211_register_hw+0x2dd8/0x3b30 [ 229.371546][ T8322] ? ieee80211_register_hw+0xfc1/0x3b30 [ 229.377167][ T8322] ? ieee80211_tasklet_handler+0x20/0x20 [ 229.382852][ T8322] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 229.388812][ T8322] ? __debug_object_init+0xec/0x450 [ 229.394086][ T8322] ? __asan_memset+0x22/0x40 [ 229.398738][ T8322] ? __hrtimer_init+0x189/0x270 [ 229.403650][ T8322] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 229.409475][ T8322] ? mac80211_hwsim_free+0x220/0x220 [ 229.414811][ T8322] ? rcu_is_watching+0x15/0xb0 [ 229.419632][ T8322] ? kstrndup+0xbd/0x140 [ 229.423955][ T8322] hwsim_new_radio_nl+0xdad/0x1a70 [ 229.429139][ T8322] ? __nla_validate+0x50/0x50 [ 229.433910][ T8322] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 229.440333][ T8322] ? __nla_parse+0x40/0x50 [ 229.444808][ T8322] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 229.451204][ T8322] genl_family_rcv_msg_doit+0x21a/0x310 [ 229.456804][ T8322] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 229.462762][ T8322] ? bpf_lsm_capable+0x9/0x10 [ 229.467489][ T8322] ? security_capable+0x89/0xb0 [ 229.472410][ T8322] genl_rcv_msg+0x611/0x7a0 [ 229.476980][ T8322] ? genl_bind+0x360/0x360 [ 229.481443][ T8322] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 229.487822][ T8322] ? perf_trace_lock+0x303/0x3b0 [ 229.492802][ T8322] ? __kasan_kmalloc_large+0x8b/0xa0 [ 229.498150][ T8322] netlink_rcv_skb+0x235/0x4c0 [ 229.502964][ T8322] ? genl_bind+0x360/0x360 [ 229.507431][ T8322] ? netlink_ack+0x1160/0x1160 [ 229.512271][ T8322] ? __lock_acquire+0x7d80/0x7d80 [ 229.517449][ T8322] ? down_read+0x1ac/0x2e0 [ 229.521920][ T8322] genl_rcv+0x28/0x40 [ 229.525951][ T8322] netlink_unicast+0x7b1/0x930 [ 229.530792][ T8322] netlink_sendmsg+0x8d0/0xbf0 [ 229.535614][ T8322] ? perf_trace_lock+0x303/0x3b0 [ 229.540613][ T8322] ? netlink_getsockopt+0x590/0x590 [ 229.545861][ T8322] ? aa_sock_msg_perm+0x94/0x150 [ 229.550854][ T8322] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 229.556189][ T8322] ? security_socket_sendmsg+0x80/0xa0 [ 229.561692][ T8322] ? netlink_getsockopt+0x590/0x590 [ 229.566940][ T8322] ____sys_sendmsg+0x61b/0x980 [ 229.571765][ T8322] ? __asan_memset+0x22/0x40 [ 229.576406][ T8322] ? __sys_sendmsg_sock+0x30/0x30 [ 229.581471][ T8322] ? __import_iovec+0x5f2/0x850 [ 229.586390][ T8322] ? import_iovec+0x73/0xa0 [ 229.590945][ T8322] ___sys_sendmsg+0x2a6/0x360 [ 229.595676][ T8322] ? __sys_sendmsg+0x2b0/0x2b0 [ 229.600598][ T8322] __se_sys_sendmsg+0x1d0/0x2c0 [ 229.605488][ T8322] ? perf_trace_preemptirq_template+0x269/0x330 [ 229.611806][ T8322] ? __x64_sys_sendmsg+0x80/0x80 [ 229.616821][ T8322] ? lockdep_hardirqs_on+0x98/0x150 [ 229.622082][ T8322] do_syscall_64+0x55/0xb0 [ 229.626533][ T8322] ? clear_bhb_loop+0x40/0x90 [ 229.631247][ T8322] ? clear_bhb_loop+0x40/0x90 [ 229.635965][ T8322] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 229.641916][ T8322] RIP: 0033:0x7fda4d79ce59 [ 229.646375][ T8322] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 229.666030][ T8322] RSP: 002b:00007fda4e721028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 229.674509][ T8322] RAX: ffffffffffffffda RBX: 00007fda4da15fa0 RCX: 00007fda4d79ce59 [ 229.682525][ T8322] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 229.690533][ T8322] RBP: 00007fda4d832e6f R08: 0000000000000000 R09: 0000000000000000 [ 229.698545][ T8322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 229.706554][ T8322] R13: 00007fda4da16038 R14: 00007fda4da15fa0 R15: 00007ffe2e0212f8 [ 229.714602][ T8322] [ 229.891953][ T8330] netlink: 'syz.1.723': attribute type 8 has an invalid length. [ 229.900298][ T8330] netlink: 'syz.1.723': attribute type 6 has an invalid length. [ 229.937266][ T8330] netlink: 144448 bytes leftover after parsing attributes in process `syz.1.723'. [ 230.597760][ T8343] netlink: 'syz.1.726': attribute type 29 has an invalid length. [ 230.621435][ T8343] netlink: 'syz.1.726': attribute type 29 has an invalid length. [ 230.816441][ T8345] netlink: 'syz.3.727': attribute type 10 has an invalid length. [ 230.851047][ T8345] netlink: 40 bytes leftover after parsing attributes in process `syz.3.727'. [ 230.911500][ T8345] batman_adv: batadv0: Adding interface: virt_wifi0 [ 230.938008][ T8345] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 230.967007][ T8345] batman_adv: batadv0: Interface activated: virt_wifi0 [ 231.541031][ T8351] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.728'. [ 231.623949][ T8351] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 232.361282][ T8373] netlink: 168 bytes leftover after parsing attributes in process `syz.1.736'. [ 232.510881][ T8361] netlink: 'syz.2.731': attribute type 4 has an invalid length. [ 232.595999][ T8361] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.731'. [ 232.701934][ T8379] netlink: 'syz.1.738': attribute type 29 has an invalid length. [ 232.747099][ T8379] netlink: 'syz.1.738': attribute type 29 has an invalid length. [ 232.876883][ T8391] netlink: 184 bytes leftover after parsing attributes in process `syz.3.741'. [ 233.091426][ T8397] mac80211_hwsim hwsim3 ..ãc¤±: renamed from wlan1 [ 233.354176][ T8408] netlink: 'syz.0.748': attribute type 11 has an invalid length. [ 233.407073][ T8408] netlink: 212832 bytes leftover after parsing attributes in process `syz.0.748'. [ 233.668183][ T8419] netlink: 'syz.3.751': attribute type 29 has an invalid length. [ 233.696101][ T8419] netlink: 'syz.3.751': attribute type 29 has an invalid length. [ 233.983150][ T8428] ±ÿÿÿÿa–ïD: renamed from lo (while UP) [ 234.314224][ T8442] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 234.723850][ T8456] can: request_module (can-proto-3) failed. [ 234.770768][ T8461] netlink: 'syz.0.762': attribute type 1 has an invalid length. [ 234.786988][ T8461] netlink: 191376 bytes leftover after parsing attributes in process `syz.0.762'. [ 234.994990][ T8468] tun0: tun_chr_ioctl cmd 2147767507 [ 235.265230][ T8474] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 235.270144][ T8458] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.758'. [ 235.315039][ T8474] netlink: 'syz.0.765': attribute type 3 has an invalid length. [ 235.336239][ T8474] netlink: 16066 bytes leftover after parsing attributes in process `syz.0.765'. [ 236.101977][ T8488] netlink: 'syz.0.770': attribute type 2 has an invalid length. [ 236.140372][ T8488] netlink: 'syz.0.770': attribute type 3 has an invalid length. [ 236.163194][ T8488] netlink: 132 bytes leftover after parsing attributes in process `syz.0.770'. [ 237.144083][ T8518] netlink: 68 bytes leftover after parsing attributes in process `syz.1.779'. [ 237.661619][ T8527] netlink: 'syz.1.782': attribute type 2 has an invalid length. [ 237.712071][ T8527] netlink: 'syz.1.782': attribute type 3 has an invalid length. [ 237.776249][ T8527] netlink: 132 bytes leftover after parsing attributes in process `syz.1.782'. [ 238.143089][ T8537] netlink: 'syz.3.784': attribute type 10 has an invalid length. [ 238.162622][ T8537] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.784'. [ 238.173319][ T8537] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 238.219549][ T8536] netlink: 14 bytes leftover after parsing attributes in process `syz.1.785'. [ 238.593546][ T8546] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.786'. [ 238.620373][ T8541] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.786'. [ 238.774275][ T8551] netlink: 'syz.1.791': attribute type 4 has an invalid length. [ 238.834959][ T8551] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 239.198396][ T8567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 239.209621][ T8567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.222303][ T8567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 239.234043][ T8567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.244591][ T8567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 239.255786][ T8567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.277936][ T8567] batadv_slave_1: entered promiscuous mode [ 239.773616][ T8580] netlink: 'syz.0.801': attribute type 29 has an invalid length. [ 239.795008][ T8580] netlink: 'syz.0.801': attribute type 29 has an invalid length. [ 239.877966][ T8582] syzkaller0: entered promiscuous mode [ 239.885327][ T8582] syzkaller0: entered allmulticast mode [ 239.904231][ T8580] netlink: 'syz.0.801': attribute type 29 has an invalid length. [ 244.386896][ T8599] netlink: 'syz.1.806': attribute type 10 has an invalid length. [ 244.397824][ T8599] veth1_macvtap: left promiscuous mode [ 244.470646][ T8606] __nla_validate_parse: 2 callbacks suppressed [ 244.470661][ T8606] netlink: 763 bytes leftover after parsing attributes in process `syz.0.808'. [ 244.733422][ T8619] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.813'. [ 244.736925][ T8615] netlink: 'syz.1.812': attribute type 1 has an invalid length. [ 244.770413][ T8615] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.812'. [ 244.862970][ T8626] netlink: 'syz.2.815': attribute type 29 has an invalid length. [ 244.883996][ T8626] netlink: 'syz.2.815': attribute type 29 has an invalid length. [ 244.943286][ T8626] netlink: 'syz.2.815': attribute type 29 has an invalid length. [ 245.914746][ T8640] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.818'. [ 248.053691][ T8644] batadv0: left allmulticast mode [ 248.067204][ T8644] batadv0: left promiscuous mode [ 248.079199][ T8644] bridge0: port 3(batadv0) entered disabled state [ 248.097779][ T8644] bridge_slave_0: left allmulticast mode [ 248.103509][ T8644] bridge_slave_0: left promiscuous mode [ 248.110628][ T8644] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.048664][ T8666] netlink: 'syz.3.828': attribute type 29 has an invalid length. [ 249.063544][ T8666] netlink: 'syz.3.828': attribute type 29 has an invalid length. [ 249.134878][ T8666] netlink: 'syz.3.828': attribute type 29 has an invalid length. [ 252.725333][ T8693] netlink: 14 bytes leftover after parsing attributes in process `syz.0.836'. [ 252.758653][ T8696] netlink: 15999 bytes leftover after parsing attributes in process `syz.1.838'. [ 252.827124][ T8696] netlink: 'syz.1.838': attribute type 21 has an invalid length. [ 252.871508][ T8696] netlink: 152 bytes leftover after parsing attributes in process `syz.1.838'. [ 253.236029][ T8704] netlink: 'syz.2.840': attribute type 9 has an invalid length. [ 253.245199][ T8704] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.840'. [ 253.338688][ T8708] netlink: 'syz.1.842': attribute type 29 has an invalid length. [ 253.394683][ T8708] netlink: 'syz.1.842': attribute type 29 has an invalid length. [ 253.514676][ T8708] netlink: 'syz.1.842': attribute type 29 has an invalid length. [ 255.948376][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.954751][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.395369][ T8755] netlink: 'syz.2.857': attribute type 29 has an invalid length. [ 257.427818][ T8755] netlink: 'syz.2.857': attribute type 29 has an invalid length. [ 257.491667][ T8755] netlink: 'syz.2.857': attribute type 29 has an invalid length. [ 257.961314][ T8766] netlink: 'syz.3.859': attribute type 40 has an invalid length. [ 260.835504][ T8787] netlink: 128 bytes leftover after parsing attributes in process `syz.3.866'. [ 260.845126][ T8787] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 260.857687][ T8782] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.864'. [ 260.874395][ T8790] netlink: 'syz.2.867': attribute type 3 has an invalid length. [ 260.882606][ T8790] netlink: 'syz.2.867': attribute type 16 has an invalid length. [ 260.883698][ T8782] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.864'. [ 260.899935][ T8790] netlink: 132 bytes leftover after parsing attributes in process `syz.2.867'. [ 261.180885][ T8799] netlink: 60 bytes leftover after parsing attributes in process `syz.0.871'. [ 261.367619][ T8808] netlink: 'syz.2.873': attribute type 29 has an invalid length. [ 261.408243][ T8808] netlink: 'syz.2.873': attribute type 29 has an invalid length. [ 261.468067][ T8808] netlink: 'syz.2.873': attribute type 29 has an invalid length. [ 261.728696][ T8821] netlink: 22 bytes leftover after parsing attributes in process `syz.0.877'. [ 264.616981][ T8830] netlink: 'syz.2.879': attribute type 39 has an invalid length. [ 264.897083][ T8828] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.878'. [ 265.354518][ T8851] netlink: 'syz.2.885': attribute type 10 has an invalid length. [ 265.394955][ T8851] netlink: 55 bytes leftover after parsing attributes in process `syz.2.885'. [ 265.498939][ T8858] netlink: 'syz.1.888': attribute type 29 has an invalid length. [ 266.011559][ T8858] netlink: 'syz.1.888': attribute type 29 has an invalid length. [ 266.025996][ T8861] netlink: 'syz.1.888': attribute type 29 has an invalid length. [ 266.301801][ T8868] netlink: 188 bytes leftover after parsing attributes in process `syz.0.890'. [ 266.339432][ T8870] netlink: 'syz.3.892': attribute type 28 has an invalid length. [ 266.473461][ T8873] C: renamed from team_slave_0 (while UP) [ 266.563515][ T8873] netlink: 'syz.1.893': attribute type 4 has an invalid length. [ 266.597914][ T8873] netlink: 116 bytes leftover after parsing attributes in process `syz.1.893'. [ 266.632420][ T8873] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 267.164584][ T8897] netlink: 'syz.1.899': attribute type 7 has an invalid length. [ 267.260052][ T8903] netlink: 132 bytes leftover after parsing attributes in process `syz.0.901'. [ 267.340616][ T8903] netlink: 'syz.0.901': attribute type 12 has an invalid length. [ 267.356450][ T8903] netlink: 132 bytes leftover after parsing attributes in process `syz.0.901'. [ 267.458115][ T8906] netlink: 'syz.2.902': attribute type 29 has an invalid length. [ 267.659747][ T8908] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.903'. [ 267.673482][ T8908] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 267.852753][ T8914] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.905'. [ 268.306359][ T8934] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.913'. [ 270.126126][ T8963] netlink: 132 bytes leftover after parsing attributes in process `syz.1.924'. [ 270.204823][ T8962] validate_nla: 8 callbacks suppressed [ 270.204869][ T8962] netlink: 'syz.2.923': attribute type 4 has an invalid length. [ 270.344096][ T8962] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.923'. [ 270.545899][ T8972] netlink: 'syz.2.928': attribute type 29 has an invalid length. [ 270.574926][ T8972] netlink: 'syz.2.928': attribute type 29 has an invalid length. [ 270.615213][ T8974] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.927'. [ 270.621563][ T8972] netlink: 'syz.2.928': attribute type 29 has an invalid length. [ 272.020350][ T8996] netlink: 'syz.3.936': attribute type 29 has an invalid length. [ 272.032276][ T8996] netlink: 'syz.3.936': attribute type 29 has an invalid length. [ 272.041947][ T8996] netlink: 'syz.3.936': attribute type 29 has an invalid length. [ 272.056012][ T8996] netlink: 'syz.3.936': attribute type 29 has an invalid length. [ 272.210085][ T9000] netlink: 132 bytes leftover after parsing attributes in process `syz.1.937'. [ 272.320320][ T9005] netlink: 209796 bytes leftover after parsing attributes in process `syz.3.938'. [ 272.337305][ T9005] openvswitch: netlink: Tunnel attr 0 has unexpected len 1788 expected 8 [ 272.388207][ T9007] netlink: 'syz.0.940': attribute type 21 has an invalid length. [ 272.396270][ T9007] netlink: 14548 bytes leftover after parsing attributes in process `syz.0.940'. [ 272.511258][ T9013] netlink: 'syz.2.941': attribute type 29 has an invalid length. [ 272.928116][ T9019] C: renamed from team_slave_0 (while UP) [ 273.101362][ T9019] netlink: 116 bytes leftover after parsing attributes in process `syz.0.943'. [ 273.243098][ T9029] netlink: 144056 bytes leftover after parsing attributes in process `syz.3.946'. [ 273.253170][ T9029] netlink: 12 bytes leftover after parsing attributes in process `syz.3.946'. [ 273.270932][ T9029] netlink: 152 bytes leftover after parsing attributes in process `syz.3.946'. [ 273.280655][ T9029] netlink: 6 bytes leftover after parsing attributes in process `syz.3.946'. [ 273.305226][ T9029] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.946'. [ 273.319564][ T9029] netlink: 40 bytes leftover after parsing attributes in process `syz.3.946'. [ 273.349219][ T9029] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 275.320471][ T9086] €Â0: renamed from batadv_slave_1 (while UP) [ 276.344457][ T9104] netlink: zone id is out of range [ 276.354915][ T9104] netlink: set zone limit has 8 unknown bytes [ 277.499060][ T9133] validate_nla: 11 callbacks suppressed [ 277.499096][ T9133] netlink: 'syz.2.980': attribute type 29 has an invalid length. [ 277.538158][ T9133] netlink: 'syz.2.980': attribute type 29 has an invalid length. [ 277.608146][ T9133] netlink: 'syz.2.980': attribute type 29 has an invalid length. [ 277.732334][ T9143] __nla_validate_parse: 3 callbacks suppressed [ 277.732374][ T9143] netlink: 140 bytes leftover after parsing attributes in process `syz.0.983'. [ 278.118012][ T9155] netlink: 'syz.3.986': attribute type 1 has an invalid length. [ 278.125718][ T9155] netlink: 194236 bytes leftover after parsing attributes in process `syz.3.986'. [ 279.019236][ T9192] netlink: 4 bytes leftover after parsing attributes in process `syz.0.995'. [ 279.198656][ T9208] netlink: 'syz.1.1001': attribute type 29 has an invalid length. [ 279.238234][ T9208] netlink: 'syz.1.1001': attribute type 29 has an invalid length. [ 279.263874][ T9208] netlink: 'syz.1.1001': attribute type 29 has an invalid length. [ 279.999327][ T5782] Bluetooth: hci2: ISO packet for unknown connection handle 1854 [ 280.490889][ T9248] netlink: 'syz.1.1016': attribute type 21 has an invalid length. [ 280.765649][ T9263] netlink: 'syz.1.1019': attribute type 29 has an invalid length. [ 280.789026][ T9263] netlink: 'syz.1.1019': attribute type 29 has an invalid length. [ 281.237683][ T9270] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1021'. [ 281.481891][ T9276] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1024'. [ 281.545606][ T9280] Dead loop on virtual device ip6_vti0, fix it urgently! [ 282.927941][ T9325] validate_nla: 9 callbacks suppressed [ 282.927960][ T9325] netlink: 'syz.0.1038': attribute type 21 has an invalid length. [ 282.957026][ T9325] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1038'. [ 283.333896][ T9328] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1039'. [ 284.208197][ T9338] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1042'. [ 284.227548][ T9338] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1042'. [ 284.259996][ T9337] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1042'. [ 284.271966][ T9339] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1042'. [ 284.282114][ T9342] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1044'. [ 284.689294][ T9350] tap0: tun_chr_ioctl cmd 1074025675 [ 284.695397][ T9350] tap0: persist enabled [ 284.706362][ T9350] tap0: tun_chr_ioctl cmd 21731 [ 284.714945][ T9350] tap0: tun_chr_ioctl cmd 1074025675 [ 284.723807][ T9350] tap0: persist enabled [ 284.974031][ T9364] netlink: 'syz.1.1051': attribute type 29 has an invalid length. [ 285.001329][ T9364] netlink: 'syz.1.1051': attribute type 29 has an invalid length. [ 285.049253][ T9364] netlink: 'syz.1.1051': attribute type 29 has an invalid length. [ 286.770085][ T9403] syzkaller0: entered promiscuous mode [ 286.786892][ T9403] syzkaller0: entered allmulticast mode [ 286.838069][ T9408] netlink: 'syz.0.1065': attribute type 29 has an invalid length. [ 286.854225][ T9408] netlink: 'syz.0.1065': attribute type 29 has an invalid length. [ 286.927839][ T9408] netlink: 'syz.0.1065': attribute type 29 has an invalid length. [ 290.299811][ T9446] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1075'. [ 290.340812][ T9446] openvswitch: netlink: Tunnel attr 2548 out of range max 16 [ 290.380704][ T5782] Bluetooth: hci1: unexpected event 0x20 length: 15 > 7 [ 290.575843][ T9460] netlink: 'syz.1.1081': attribute type 29 has an invalid length. [ 290.605653][ T9460] netlink: 'syz.1.1081': attribute type 29 has an invalid length. [ 290.653138][ T9460] netlink: 'syz.1.1081': attribute type 29 has an invalid length. [ 291.698728][ T9478] ref_ctr_offset mismatch. inode: 0x58e offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x0 [ 292.186258][ T9495] sit0: entered promiscuous mode [ 292.196951][ T9495] sit0: entered allmulticast mode [ 292.225849][ T9494] sit0: left promiscuous mode [ 292.506133][ T9508] netlink: 'syz.3.1097': attribute type 29 has an invalid length. [ 292.528471][ T9508] netlink: 'syz.3.1097': attribute type 29 has an invalid length. [ 292.615911][ T9508] netlink: 'syz.3.1097': attribute type 29 has an invalid length. [ 293.949363][ T9548] netlink: 'syz.1.1108': attribute type 10 has an invalid length. [ 293.958706][ T9548] macvlan0: entered promiscuous mode [ 293.964022][ T9548] macvlan0: entered allmulticast mode [ 293.972393][ T9548] veth1_vlan: entered allmulticast mode [ 293.992455][ T9548] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 294.273538][ T9559] netlink: 'syz.1.1113': attribute type 29 has an invalid length. [ 294.282765][ T9559] netlink: 'syz.1.1113': attribute type 29 has an invalid length. [ 294.309544][ T9559] netlink: 'syz.1.1113': attribute type 29 has an invalid length. [ 295.315832][ T9567] syzkaller0: entered promiscuous mode [ 295.332468][ T9567] syzkaller0: entered allmulticast mode [ 295.834504][ T9588] netlink: 'syz.3.1123': attribute type 1 has an invalid length. [ 295.850718][ T9588] netlink: 14463 bytes leftover after parsing attributes in process `syz.3.1123'. [ 298.997662][ T9601] netlink: 'syz.2.1126': attribute type 29 has an invalid length. [ 299.749805][ T9601] netlink: 'syz.2.1126': attribute type 29 has an invalid length. [ 299.761149][ T9595] netlink: 'syz.0.1124': attribute type 5 has an invalid length. [ 299.779331][ T9605] netlink: 'syz.2.1126': attribute type 29 has an invalid length. [ 300.256486][ T9625] sit0: entered allmulticast mode [ 300.355126][ T9631] netlink: 'syz.2.1136': attribute type 3 has an invalid length. [ 300.363910][ T9627] netlink: 'syz.1.1135': attribute type 2 has an invalid length. [ 300.374026][ T9631] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1136'. [ 300.426893][ T9627] netlink: 'syz.1.1135': attribute type 8 has an invalid length. [ 300.455378][ T9627] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1135'. [ 300.548588][ T9629] sit0: entered promiscuous mode [ 300.768032][ T9644] netlink: 'syz.3.1138': attribute type 3 has an invalid length. [ 300.788815][ T9644] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1138'. [ 301.021069][ T5782] Bluetooth: hci2: ISO packet for unknown connection handle 2622 [ 301.179841][ T9653] netlink: 'syz.0.1141': attribute type 29 has an invalid length. [ 301.207074][ T9653] netlink: 'syz.0.1141': attribute type 29 has an invalid length. [ 301.299035][ T9656] netlink: 'syz.0.1141': attribute type 29 has an invalid length. [ 302.131540][ T9680] netlink: 711 bytes leftover after parsing attributes in process `syz.2.1149'. [ 302.915847][ T9707] netlink: 'syz.0.1158': attribute type 3 has an invalid length. [ 302.963933][ T9707] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.1158'. [ 303.033290][ T9714] netlink: 'syz.2.1162': attribute type 29 has an invalid length. [ 303.062310][ T9714] netlink: 'syz.2.1162': attribute type 29 has an invalid length. [ 303.144050][ T9714] netlink: 'syz.2.1162': attribute type 29 has an invalid length. [ 303.887258][ T9725] syzkaller0: entered promiscuous mode [ 303.892796][ T9725] syzkaller0: entered allmulticast mode [ 305.924493][ T9739] lo: entered promiscuous mode [ 306.088626][ T9768] netlink: 'syz.1.1176': attribute type 29 has an invalid length. [ 306.092898][ T9766] netlink: 'syz.0.1173': attribute type 29 has an invalid length. [ 306.108420][ T9768] netlink: 'syz.1.1176': attribute type 29 has an invalid length. [ 306.814793][ T9790] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1183'. [ 306.992947][ T9793] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1182'. [ 307.102813][ T9798] validate_nla: 4 callbacks suppressed [ 307.102830][ T9798] netlink: 'syz.0.1185': attribute type 15 has an invalid length. [ 307.123149][ T9798] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1185'. [ 307.371547][ T9814] netlink: 'syz.2.1191': attribute type 21 has an invalid length. [ 307.395995][ T9814] netlink: 'syz.2.1191': attribute type 11 has an invalid length. [ 307.609641][ T9828] netlink: 'syz.3.1194': attribute type 29 has an invalid length. [ 307.648357][ T9828] netlink: 'syz.3.1194': attribute type 29 has an invalid length. [ 307.722216][ T9828] netlink: 'syz.3.1194': attribute type 29 has an invalid length. [ 308.677815][ T9846] netlink: 3752 bytes leftover after parsing attributes in process `syz.1.1199'. [ 309.032306][ T9855] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 309.069538][ T9855] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 309.085093][ T9855] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 309.095087][ T9855] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 309.105190][ T9855] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 309.121343][ T9855] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 309.132650][ T9855] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 309.151497][ T9855] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 309.162647][ T9855] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 309.176079][ T9855] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 310.104207][ T9880] netlink: 'syz.1.1210': attribute type 29 has an invalid length. [ 310.121497][ T9880] netlink: 'syz.1.1210': attribute type 29 has an invalid length. [ 310.210344][ T9888] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.1213'. [ 310.239357][ T9880] netlink: 'syz.1.1210': attribute type 29 has an invalid length. [ 310.997099][ T9897] netlink: 6 bytes leftover after parsing attributes in process `syz.0.1215'. [ 311.298779][ T9911] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.1218'. [ 311.493639][ T9915] delete_channel: no stack [ 311.499473][ T9914] delete_channel: no stack [ 311.616296][ T9922] netlink: 'syz.2.1224': attribute type 22 has an invalid length. [ 311.644466][ T9922] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1224'. [ 312.500422][ T9937] validate_nla: 3 callbacks suppressed [ 312.500438][ T9937] netlink: 'syz.3.1230': attribute type 2 has an invalid length. [ 312.519116][ T9937] netlink: 'syz.3.1230': attribute type 1 has an invalid length. [ 312.527406][ T9937] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1230'. [ 312.600001][ T9941] netlink: 'syz.2.1231': attribute type 10 has an invalid length. [ 312.610453][ T9941] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1231'. [ 312.630714][ T9941] batman_adv: batadv0: Adding interface: virt_wifi0 [ 312.642950][ T9941] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 312.674942][ T9941] batman_adv: batadv0: Interface activated: virt_wifi0 [ 312.686397][ T9940] netlink: 'syz.2.1231': attribute type 10 has an invalid length. [ 312.707868][ T9940] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1231'. [ 312.785304][ T9953] netlink: 'syz.3.1235': attribute type 9 has an invalid length. [ 312.793345][ T9953] netlink: 154020 bytes leftover after parsing attributes in process `syz.3.1235'. [ 313.248300][ T9974] netlink: 'syz.3.1242': attribute type 29 has an invalid length. [ 313.256529][ T9974] netlink: 'syz.3.1242': attribute type 29 has an invalid length. [ 313.325021][ T9975] netlink: 'syz.3.1242': attribute type 29 has an invalid length. [ 313.679982][ T9982] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.1243'. [ 315.020486][ T9988] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.1246'. [ 315.556517][T10012] netlink: 'syz.0.1255': attribute type 29 has an invalid length. [ 315.569705][T10012] netlink: 'syz.0.1255': attribute type 29 has an invalid length. [ 316.561539][T10040] netlink: 209820 bytes leftover after parsing attributes in process `syz.3.1262'. [ 316.621152][T10039] net_ratelimit: 7692 callbacks suppressed [ 316.621169][T10039] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 316.671410][T10042] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1263'. [ 316.680897][T10042] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1263'. [ 316.693778][T10039] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1262'. [ 316.787900][T10044] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1261'. [ 316.808099][T10044] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1261'. [ 316.857788][T10037] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1261'. [ 316.894005][T10046] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.1264'. [ 317.427893][T10055] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1268'. [ 317.450952][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.458514][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.748639][T10068] validate_nla: 6 callbacks suppressed [ 317.748700][T10068] netlink: 'syz.0.1271': attribute type 29 has an invalid length. [ 317.848095][T10068] netlink: 'syz.0.1271': attribute type 29 has an invalid length. [ 318.033042][T10068] netlink: 'syz.0.1271': attribute type 29 has an invalid length. [ 319.762636][T10084] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 320.193300][T10102] __nla_validate_parse: 4 callbacks suppressed [ 320.193340][T10102] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1281'. [ 320.485841][T10117] netlink: 'syz.3.1285': attribute type 29 has an invalid length. [ 320.498087][T10117] netlink: 'syz.3.1285': attribute type 29 has an invalid length. [ 320.579710][T10121] netlink: 'syz.0.1287': attribute type 10 has an invalid length. [ 320.607539][T10121] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 320.666636][T10117] netlink: 'syz.3.1285': attribute type 29 has an invalid length. [ 320.857772][T10131] delete_channel: no stack [ 321.166430][T10144] netlink: 'syz.1.1295': attribute type 2 has an invalid length. [ 321.191015][T10141] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1293'. [ 321.204565][T10144] netlink: 'syz.1.1295': attribute type 11 has an invalid length. [ 321.232576][T10144] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1295'. [ 321.792979][T10180] netlink: 'syz.1.1306': attribute type 29 has an invalid length. [ 322.263299][T10201] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1311'. [ 322.312982][T10201] debugfs: Directory '!!ô!' with parent 'ieee80211' already present! [ 322.956710][T10205] validate_nla: 2 callbacks suppressed [ 322.956728][T10205] netlink: 'syz.3.1313': attribute type 10 has an invalid length. [ 323.015750][T10205] netlink: 212412 bytes leftover after parsing attributes in process `syz.3.1313'. [ 323.068550][T10205] openvswitch: netlink: Flow key attr not present in new flow. [ 323.115647][T10212] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1313'. [ 323.637844][T10218] FAULT_INJECTION: forcing a failure. [ 323.637844][T10218] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 323.666071][T10218] CPU: 0 PID: 10218 Comm: syz.2.1317 Not tainted syzkaller #0 [ 323.673612][T10218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 323.683706][T10218] Call Trace: [ 323.687000][T10218] [ 323.689939][T10218] dump_stack_lvl+0x18c/0x250 [ 323.694646][T10218] ? show_regs_print_info+0x20/0x20 [ 323.699863][T10218] ? load_image+0x420/0x420 [ 323.704371][T10218] ? __might_fault+0xaa/0x120 [ 323.709048][T10218] ? __lock_acquire+0x7d80/0x7d80 [ 323.714098][T10218] should_fail_ex+0x394/0x4c0 [ 323.718782][T10218] _copy_from_user+0x2f/0xe0 [ 323.723381][T10218] __sys_bpf+0x23e/0x890 [ 323.727665][T10218] ? bpf_link_show_fdinfo+0x390/0x390 [ 323.733063][T10218] ? lock_chain_count+0x20/0x20 [ 323.737918][T10218] __x64_sys_bpf+0x7c/0x90 [ 323.742329][T10218] do_syscall_64+0x55/0xb0 [ 323.746747][T10218] ? clear_bhb_loop+0x40/0x90 [ 323.751417][T10218] ? clear_bhb_loop+0x40/0x90 [ 323.756097][T10218] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 323.761993][T10218] RIP: 0033:0x7f1111d9ce59 [ 323.766403][T10218] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 323.786028][T10218] RSP: 002b:00007f1112cf9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 323.794464][T10218] RAX: ffffffffffffffda RBX: 00007f1112015fa0 RCX: 00007f1111d9ce59 [ 323.802428][T10218] RDX: 0000000000000048 RSI: 0000200000000500 RDI: 000000000000000a [ 323.810396][T10218] RBP: 00007f1112cf9090 R08: 0000000000000000 R09: 0000000000000000 [ 323.818362][T10218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 323.826326][T10218] R13: 00007f1112016038 R14: 00007f1112015fa0 R15: 00007ffd072de558 [ 323.834305][T10218] [ 324.223228][T10232] netlink: 'syz.1.1323': attribute type 29 has an invalid length. [ 324.257390][T10232] netlink: 'syz.1.1323': attribute type 29 has an invalid length. [ 324.274802][T10232] netlink: 'syz.1.1323': attribute type 29 has an invalid length. [ 324.296157][T10234] ƒ: renamed from tunl0 (while UP) [ 324.348676][T10238] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1325'. [ 324.367334][T10239] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1325'. [ 324.534930][T10247] : renamed from bond_slave_0 (while UP) [ 324.868435][T10253] FAULT_INJECTION: forcing a failure. [ 324.868435][T10253] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 324.899883][T10253] CPU: 0 PID: 10253 Comm: syz.0.1330 Not tainted syzkaller #0 [ 324.907410][T10253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 324.917492][T10253] Call Trace: [ 324.920810][T10253] [ 324.923758][T10253] dump_stack_lvl+0x18c/0x250 [ 324.928472][T10253] ? show_regs_print_info+0x20/0x20 [ 324.933706][T10253] ? load_image+0x420/0x420 [ 324.938237][T10253] ? __might_fault+0xaa/0x120 [ 324.942949][T10253] ? __lock_acquire+0x7d80/0x7d80 [ 324.948008][T10253] ? bpf_get_current_cgroup_id+0x1d/0x340 [ 324.953861][T10253] should_fail_ex+0x394/0x4c0 [ 324.958575][T10253] _copy_to_user+0x2f/0xa0 [ 324.963026][T10253] bpf_prog_test_run_syscall+0x33f/0x4b0 [ 324.968701][T10253] ? sock_gen_cookie+0x60/0x60 [ 324.973504][T10253] ? sock_gen_cookie+0x60/0x60 [ 324.978284][T10253] bpf_prog_test_run+0x31f/0x390 [ 324.983234][T10253] __sys_bpf+0x49d/0x890 [ 324.987475][T10253] ? bpf_link_show_fdinfo+0x390/0x390 [ 324.992858][T10253] ? lock_chain_count+0x20/0x20 [ 324.997713][T10253] __x64_sys_bpf+0x7c/0x90 [ 325.002127][T10253] do_syscall_64+0x55/0xb0 [ 325.006540][T10253] ? clear_bhb_loop+0x40/0x90 [ 325.011215][T10253] ? clear_bhb_loop+0x40/0x90 [ 325.015915][T10253] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 325.021834][T10253] RIP: 0033:0x7f5bddf9ce59 [ 325.026253][T10253] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 325.045858][T10253] RSP: 002b:00007f5bdedde028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 325.054273][T10253] RAX: ffffffffffffffda RBX: 00007f5bde215fa0 RCX: 00007f5bddf9ce59 [ 325.062247][T10253] RDX: 0000000000000048 RSI: 0000200000000500 RDI: 000000000000000a [ 325.070224][T10253] RBP: 00007f5bdedde090 R08: 0000000000000000 R09: 0000000000000000 [ 325.078196][T10253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 325.086163][T10253] R13: 00007f5bde216038 R14: 00007f5bde215fa0 R15: 00007ffefb28acd8 [ 325.094148][T10253] [ 325.379910][T10268] netlink: 199816 bytes leftover after parsing attributes in process `syz.0.1334'. [ 325.883196][T10289] netlink: 'syz.0.1341': attribute type 29 has an invalid length. [ 325.893062][T10289] netlink: 'syz.0.1341': attribute type 29 has an invalid length. [ 325.959023][T10289] netlink: 'syz.0.1341': attribute type 29 has an invalid length. [ 326.335347][T10296] FAULT_INJECTION: forcing a failure. [ 326.335347][T10296] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 326.389962][T10296] CPU: 1 PID: 10296 Comm: syz.1.1343 Not tainted syzkaller #0 [ 326.397497][T10296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 326.407573][T10296] Call Trace: [ 326.410866][T10296] [ 326.413813][T10296] dump_stack_lvl+0x18c/0x250 [ 326.418547][T10296] ? show_regs_print_info+0x20/0x20 [ 326.423767][T10296] ? load_image+0x420/0x420 [ 326.428299][T10296] ? __lock_acquire+0x7d80/0x7d80 [ 326.433350][T10296] ? snprintf+0xe9/0x140 [ 326.437621][T10296] should_fail_ex+0x394/0x4c0 [ 326.442332][T10296] _copy_to_user+0x2f/0xa0 [ 326.446772][T10296] simple_read_from_buffer+0xe7/0x150 [ 326.452176][T10296] proc_fail_nth_read+0x1e8/0x260 [ 326.457239][T10296] ? proc_fault_inject_write+0x360/0x360 [ 326.462907][T10296] ? fsnotify_perm+0x271/0x5e0 [ 326.467695][T10296] ? proc_fault_inject_write+0x360/0x360 [ 326.473356][T10296] vfs_read+0x298/0x990 [ 326.477558][T10296] ? kernel_read+0x1e0/0x1e0 [ 326.482179][T10296] ? __fget_files+0x28/0x460 [ 326.486792][T10296] ? __fget_files+0x3fc/0x460 [ 326.491513][T10296] ? __fdget_pos+0x2a3/0x330 [ 326.496135][T10296] ? ksys_read+0x74/0x260 [ 326.500494][T10296] ksys_read+0x151/0x260 [ 326.504768][T10296] ? vfs_write+0x9a0/0x9a0 [ 326.509214][T10296] ? lockdep_hardirqs_on+0x98/0x150 [ 326.514450][T10296] do_syscall_64+0x55/0xb0 [ 326.518893][T10296] ? clear_bhb_loop+0x40/0x90 [ 326.523590][T10296] ? clear_bhb_loop+0x40/0x90 [ 326.528295][T10296] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 326.534222][T10296] RIP: 0033:0x7f2a2355d68e [ 326.538658][T10296] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 326.558290][T10296] RSP: 002b:00007f2a24438fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 326.566742][T10296] RAX: ffffffffffffffda RBX: 00007f2a244396c0 RCX: 00007f2a2355d68e [ 326.574734][T10296] RDX: 000000000000000f RSI: 00007f2a244390a0 RDI: 000000000000001e [ 326.582727][T10296] RBP: 00007f2a24439090 R08: 0000000000000000 R09: 0000000000000000 [ 326.590723][T10296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 326.598720][T10296] R13: 00007f2a23816038 R14: 00007f2a23815fa0 R15: 00007ffcd64a0568 [ 326.606737][T10296] [ 326.672295][T10298] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1344'. [ 327.803989][T10337] netlink: 'syz.0.1355': attribute type 10 has an invalid length. [ 327.820809][T10337] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1355'. [ 327.875238][T10337] batman_adv: batadv0: Adding interface: virt_wifi0 [ 327.905213][T10337] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.945721][T10337] batman_adv: batadv0: Interface activated: virt_wifi0 [ 328.293036][T10346] netlink: 'syz.2.1357': attribute type 29 has an invalid length. [ 328.349842][T10346] netlink: 'syz.2.1357': attribute type 29 has an invalid length. [ 328.431867][T10346] netlink: 'syz.2.1357': attribute type 29 has an invalid length. [ 329.524831][T10374] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1365'. [ 329.556682][T10374] netlink: 'syz.2.1365': attribute type 3 has an invalid length. [ 329.586138][T10374] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.1365'. [ 329.597368][T10368] delete_channel: no stack [ 329.758279][T10382] tap0: tun_chr_ioctl cmd 35108 [ 329.864863][T10388] netlink: 'syz.0.1373': attribute type 29 has an invalid length. [ 329.874392][T10388] netlink: 'syz.0.1373': attribute type 29 has an invalid length. [ 329.932030][T10388] netlink: 'syz.0.1373': attribute type 29 has an invalid length. [ 330.356217][T10399] netlink: 208064 bytes leftover after parsing attributes in process `syz.2.1376'. [ 330.366197][T10399] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1376'. [ 330.844596][T10411] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.1378'. [ 331.298750][T10417] netlink: 'syz.1.1383': attribute type 13 has an invalid length. [ 331.306671][T10417] netlink: 160 bytes leftover after parsing attributes in process `syz.1.1383'. [ 331.341518][T10421] sctp: [Deprecated]: syz.2.1384 (pid 10421) Use of int in maxseg socket option. [ 331.341518][T10421] Use struct sctp_assoc_value instead [ 331.376362][T10417] erspan0: refused to change device tx_queue_len [ 331.393396][T10417] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 331.598153][T10429] netlink: 'syz.2.1388': attribute type 29 has an invalid length. [ 331.631845][T10429] netlink: 'syz.2.1388': attribute type 29 has an invalid length. [ 332.453006][T10438] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1391'. [ 335.748032][T10462] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1399'. [ 335.984818][T10462] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 336.050229][T10472] netlink: 209820 bytes leftover after parsing attributes in process `syz.2.1401'. [ 336.097556][T10462] bond0 (unregistering): (slave 4@0Ù): Releasing backup interface [ 336.117011][T10462] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 336.140580][T10462] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.148094][T10462] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.177512][T10462] bond0 (unregistering): (slave team0): Releasing backup interface [ 336.201209][T10462] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 336.216476][T10462] veth1_vlan: left allmulticast mode [ 336.237183][T10462] bond0 (unregistering): Released all slaves [ 336.253506][T10477] validate_nla: 1 callbacks suppressed [ 336.253553][T10477] netlink: 'syz.0.1403': attribute type 29 has an invalid length. [ 336.273053][T10469] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.1399'. [ 336.305116][T10477] netlink: 'syz.0.1403': attribute type 29 has an invalid length. [ 336.360148][T10477] netlink: 'syz.0.1403': attribute type 29 has an invalid length. [ 336.965450][T10500] tap0: tun_chr_ioctl cmd 1074025677 [ 336.972205][T10500] tap0: linktype set to 778 [ 336.996102][T10500] tap0: tun_chr_ioctl cmd 2147767511 [ 337.077078][T10500] netlink: 'syz.1.1409': attribute type 3 has an invalid length. [ 337.085142][T10500] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.1409'. [ 337.972413][T10535] netlink: 'syz.0.1419': attribute type 33 has an invalid length. [ 337.982011][T10535] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1419'. [ 338.230363][T10537] netlink: 'syz.2.1420': attribute type 29 has an invalid length. [ 338.269944][T10537] netlink: 'syz.2.1420': attribute type 29 has an invalid length. [ 338.303633][T10537] netlink: 'syz.2.1420': attribute type 29 has an invalid length. [ 338.341826][T10544] netlink: 196 bytes leftover after parsing attributes in process `syz.1.1422'. [ 338.463542][T10539] syzkaller0: entered promiscuous mode [ 338.486214][T10539] syzkaller0: entered allmulticast mode [ 339.161135][T10550] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.1424'. [ 341.865628][T10576] netlink: 'syz.2.1433': attribute type 29 has an invalid length. [ 341.882722][T10575] sit0: left promiscuous mode [ 342.017948][T10576] netlink: 'syz.2.1433': attribute type 29 has an invalid length. [ 343.066444][T10569] sit0: entered promiscuous mode [ 343.271341][T10578] netlink: 'syz.2.1433': attribute type 29 has an invalid length. [ 343.297105][T10573] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1432'. [ 343.476541][T10599] netlink: 15743 bytes leftover after parsing attributes in process `syz.2.1439'. [ 343.665073][T10610] netlink: 'syz.1.1442': attribute type 17 has an invalid length. [ 344.162792][T10624] netlink: 'syz.3.1447': attribute type 29 has an invalid length. [ 344.190984][T10624] netlink: 'syz.3.1447': attribute type 29 has an invalid length. [ 344.207613][T10620] sit0: entered allmulticast mode [ 344.277466][T10624] netlink: 'syz.3.1447': attribute type 29 has an invalid length. [ 344.300690][T10625] sit0: entered promiscuous mode [ 344.442065][T10633] netlink: 'syz.2.1449': attribute type 8 has an invalid length. [ 344.491648][T10633] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1449'. [ 344.662328][T10631] netlink: 'syz.0.1448': attribute type 10 has an invalid length. [ 345.156109][T10631] team0: Device vxcan1 is of different type [ 345.633680][T10669] netlink: 'syz.3.1460': attribute type 29 has an invalid length. [ 345.831572][ T6211] tipc: Subscription rejected, illegal request [ 346.697927][T10673] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1462'. [ 346.817976][T10682] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1462'. [ 347.026350][T10691] validate_nla: 1 callbacks suppressed [ 347.026373][T10691] netlink: 'syz.0.1466': attribute type 21 has an invalid length. [ 347.065928][T10691] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1466'. [ 347.547023][T10709] netlink: 'syz.3.1473': attribute type 29 has an invalid length. [ 347.603644][T10709] netlink: 'syz.3.1473': attribute type 29 has an invalid length. [ 348.452572][T10718] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.1475'. [ 348.476882][T10718] netlink: 8442 bytes leftover after parsing attributes in process `syz.3.1475'. [ 349.116101][T10745] netlink: 'syz.3.1483': attribute type 29 has an invalid length. [ 349.155970][T10745] netlink: 'syz.3.1483': attribute type 29 has an invalid length. [ 349.176526][T10748] netlink: 'syz.1.1482': attribute type 1 has an invalid length. [ 351.777878][T10797] netlink: 'syz.2.1498': attribute type 29 has an invalid length. [ 351.805223][T10797] netlink: 'syz.2.1498': attribute type 29 has an invalid length. [ 352.267029][T10799] netlink: 'syz.2.1498': attribute type 29 has an invalid length. [ 353.084183][T10807] netlink: 209820 bytes leftover after parsing attributes in process `syz.3.1501'. [ 353.196685][T10819] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1504'. [ 354.504998][T10836] netlink: 'syz.2.1509': attribute type 33 has an invalid length. [ 354.563490][T10836] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1509'. [ 354.596277][T10839] netlink: 'syz.3.1510': attribute type 15 has an invalid length. [ 354.608925][T10842] netlink: 'syz.1.1511': attribute type 29 has an invalid length. [ 354.622276][T10839] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1510'. [ 354.784119][T10842] netlink: 'syz.1.1511': attribute type 29 has an invalid length. [ 354.802097][T10845] netlink: 'syz.1.1511': attribute type 29 has an invalid length. [ 355.600548][T10850] netlink: 'syz.3.1514': attribute type 29 has an invalid length. [ 355.635098][T10850] netlink: 'syz.3.1514': attribute type 29 has an invalid length. [ 355.664179][T10852] netlink: 'syz.1.1513': attribute type 10 has an invalid length. [ 355.679207][T10852] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1513'. [ 355.695154][T10852] batman_adv: batadv0: Adding interface: virt_wifi0 [ 355.702540][T10852] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 355.728759][T10852] batman_adv: batadv0: Interface activated: virt_wifi0 [ 355.748963][T10850] netlink: 'syz.3.1514': attribute type 29 has an invalid length. [ 356.072212][T10863] netlink: 209820 bytes leftover after parsing attributes in process `syz.1.1516'. [ 356.812461][T10882] netlink: 14207 bytes leftover after parsing attributes in process `syz.0.1525'. [ 357.236277][T10889] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1528'. [ 357.297600][T10887] validate_nla: 10 callbacks suppressed [ 357.297646][T10887] netlink: 'syz.2.1527': attribute type 15 has an invalid length. [ 357.318300][T10887] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1527'. [ 357.909932][T10902] netlink: 'syz.1.1530': attribute type 33 has an invalid length. [ 358.018748][T10902] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1530'. [ 358.563899][T10904] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 358.633796][T10907] netlink: 'syz.2.1541': attribute type 3 has an invalid length. [ 358.657126][T10907] netlink: 16066 bytes leftover after parsing attributes in process `syz.2.1541'. [ 359.782640][T10921] netlink: 'syz.2.1537': attribute type 29 has an invalid length. [ 359.792898][T10921] netlink: 'syz.2.1537': attribute type 29 has an invalid length. [ 359.810561][T10921] netlink: 'syz.2.1537': attribute type 29 has an invalid length. [ 359.904633][T10923] netlink: 'syz.3.1546': attribute type 2 has an invalid length. [ 359.956350][T10920] tun0: tun_chr_ioctl cmd 2147767507 [ 359.978060][T10920] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.1536'. [ 360.670399][T10929] netlink: 'syz.0.1549': attribute type 29 has an invalid length. [ 360.731977][T10929] netlink: 'syz.0.1549': attribute type 29 has an invalid length. [ 360.780408][T10935] netlink: 'syz.0.1549': attribute type 29 has an invalid length. [ 360.858399][T10933] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1539'. [ 360.908286][T10937] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1540'. [ 360.938471][T10931] netlink: 14207 bytes leftover after parsing attributes in process `syz.2.1538'. [ 362.241799][T10964] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1550'. [ 362.869127][T10969] syzkaller0: entered promiscuous mode [ 362.874782][T10969] syzkaller0: entered allmulticast mode [ 363.027648][T10973] tun0: tun_chr_ioctl cmd 2147767507 [ 363.065636][T10973] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.1552'. [ 363.908412][T10995] validate_nla: 3 callbacks suppressed [ 363.908451][T10995] netlink: 'syz.2.1564': attribute type 10 has an invalid length. [ 363.923583][T10995] netlink: 'syz.2.1564': attribute type 10 has an invalid length. [ 363.933199][T10995] netlink: 209216 bytes leftover after parsing attributes in process `syz.2.1564'. [ 363.945205][T10995] openvswitch: netlink: Message has 4 unknown bytes. [ 363.991520][T10993] delete_channel: no stack [ 364.048646][T10998] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 364.075905][T10998] netlink: 'syz.1.1563': attribute type 3 has an invalid length. [ 364.094897][T10998] netlink: 16066 bytes leftover after parsing attributes in process `syz.1.1563'. [ 364.437562][T11017] netlink: 'syz.1.1571': attribute type 11 has an invalid length. [ 364.445520][T11017] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1571'. [ 364.640408][T11014] syzkaller0: entered promiscuous mode [ 364.648901][T11014] syzkaller0: entered allmulticast mode [ 365.040815][T11024] netlink: 'syz.1.1573': attribute type 2 has an invalid length. [ 365.061245][T11024] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1573'. [ 365.313009][T11035] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1573'. [ 367.593929][T11048] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1580'. [ 367.786097][T11062] netlink: 703 bytes leftover after parsing attributes in process `syz.3.1583'. [ 367.805079][T11062] netlink: 964 bytes leftover after parsing attributes in process `syz.3.1583'. [ 367.967489][T11071] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1587'. [ 368.397423][T11070] syzkaller0: entered promiscuous mode [ 368.403195][T11070] syzkaller0: entered allmulticast mode [ 368.425833][T11088] netlink: 'syz.3.1591': attribute type 10 has an invalid length. [ 368.441614][T11088] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1591'. [ 373.532770][T11109] netlink: 'syz.1.1595': attribute type 21 has an invalid length. [ 373.936437][T11135] netlink: 'syz.3.1603': attribute type 10 has an invalid length. [ 373.958719][T11135] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.1603'. [ 374.297649][T11144] netlink: 'syz.3.1606': attribute type 2 has an invalid length. [ 374.306360][T11144] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.1606'. [ 375.287947][T11183] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 375.389051][T11183] syzkaller0: entered promiscuous mode [ 375.394818][T11183] syzkaller0: entered allmulticast mode [ 378.458418][T11208] netlink: 'syz.1.1628': attribute type 2 has an invalid length. [ 378.476486][T11210] netlink: 'syz.0.1629': attribute type 10 has an invalid length. [ 378.487115][T11210] mac80211_hwsim hwsim7 wlan1: left allmulticast mode [ 378.564446][T11216] FAULT_INJECTION: forcing a failure. [ 378.564446][T11216] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 378.587274][T11216] CPU: 0 PID: 11216 Comm: syz.1.1630 Not tainted syzkaller #0 [ 378.594795][T11216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 378.604866][T11216] Call Trace: [ 378.608231][T11216] [ 378.611232][T11216] dump_stack_lvl+0x18c/0x250 [ 378.616007][T11216] ? show_regs_print_info+0x20/0x20 [ 378.621268][T11216] ? load_image+0x420/0x420 [ 378.625788][T11216] ? __might_fault+0xaa/0x120 [ 378.630498][T11216] ? __lock_acquire+0x7d80/0x7d80 [ 378.635545][T11216] should_fail_ex+0x394/0x4c0 [ 378.640272][T11216] _copy_from_user+0x2f/0xe0 [ 378.644875][T11216] __sys_bpf+0x23e/0x890 [ 378.649136][T11216] ? bpf_link_show_fdinfo+0x390/0x390 [ 378.654522][T11216] ? lock_chain_count+0x20/0x20 [ 378.659376][T11216] __x64_sys_bpf+0x7c/0x90 [ 378.663785][T11216] do_syscall_64+0x55/0xb0 [ 378.668197][T11216] ? clear_bhb_loop+0x40/0x90 [ 378.672942][T11216] ? clear_bhb_loop+0x40/0x90 [ 378.677614][T11216] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 378.683562][T11216] RIP: 0033:0x7f2a2359ce59 [ 378.688036][T11216] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 378.707737][T11216] RSP: 002b:00007f2a24439028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 378.716220][T11216] RAX: ffffffffffffffda RBX: 00007f2a23815fa0 RCX: 00007f2a2359ce59 [ 378.724189][T11216] RDX: 0000000000000048 RSI: 0000200000000500 RDI: 000000000000000a [ 378.732157][T11216] RBP: 00007f2a24439090 R08: 0000000000000000 R09: 0000000000000000 [ 378.740128][T11216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 378.748123][T11216] R13: 00007f2a23816038 R14: 00007f2a23815fa0 R15: 00007ffcd64a0568 [ 378.756107][T11216] [ 378.822902][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.830352][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.856752][T11221] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1633'. [ 378.948916][T11224] delete_channel: no stack [ 378.987745][T11224] delete_channel: no stack [ 379.071943][T11229] netlink: 'syz.0.1634': attribute type 21 has an invalid length. [ 379.084968][T11229] netlink: 'syz.0.1634': attribute type 10 has an invalid length. [ 379.094251][T11229] netlink: 'syz.0.1634': attribute type 12 has an invalid length. [ 379.103135][T11229] netlink: 'syz.0.1634': attribute type 13 has an invalid length. [ 379.111541][T11229] netlink: 'syz.0.1634': attribute type 14 has an invalid length. [ 379.123638][T11229] netlink: 'syz.0.1634': attribute type 15 has an invalid length. [ 379.137396][T11229] netlink: 'syz.0.1634': attribute type 16 has an invalid length. [ 379.150779][T11229] netlink: 'syz.0.1634': attribute type 19 has an invalid length. [ 379.162798][T11229] netlink: 'syz.0.1634': attribute type 21 has an invalid length. [ 379.175697][T11229] netlink: 'syz.0.1634': attribute type 22 has an invalid length. [ 379.184424][T11229] netlink: 12226 bytes leftover after parsing attributes in process `syz.0.1634'. [ 379.230436][T11237] netlink: 13846 bytes leftover after parsing attributes in process `syz.0.1634'. [ 380.201597][T11256] FAULT_INJECTION: forcing a failure. [ 380.201597][T11256] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 380.230979][T11256] CPU: 0 PID: 11256 Comm: syz.3.1643 Not tainted syzkaller #0 [ 380.238683][T11256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 380.249117][T11256] Call Trace: [ 380.252416][T11256] [ 380.255371][T11256] dump_stack_lvl+0x18c/0x250 [ 380.261565][T11256] ? show_regs_print_info+0x20/0x20 [ 380.266810][T11256] ? load_image+0x420/0x420 [ 380.271354][T11256] ? __might_fault+0xaa/0x120 [ 380.276155][T11256] ? __lock_acquire+0x7d80/0x7d80 [ 380.281225][T11256] should_fail_ex+0x394/0x4c0 [ 380.285963][T11256] _copy_to_user+0x2f/0xa0 [ 380.290398][T11256] bpf_prog_test_run_syscall+0x33f/0x4b0 [ 380.296148][T11256] ? sock_gen_cookie+0x60/0x60 [ 380.301015][T11256] ? sock_gen_cookie+0x60/0x60 [ 380.305964][T11256] bpf_prog_test_run+0x31f/0x390 [ 380.310915][T11256] __sys_bpf+0x49d/0x890 [ 380.315170][T11256] ? bpf_link_show_fdinfo+0x390/0x390 [ 380.320552][T11256] ? lock_chain_count+0x20/0x20 [ 380.325417][T11256] __x64_sys_bpf+0x7c/0x90 [ 380.329836][T11256] do_syscall_64+0x55/0xb0 [ 380.334256][T11256] ? clear_bhb_loop+0x40/0x90 [ 380.338935][T11256] ? clear_bhb_loop+0x40/0x90 [ 380.343612][T11256] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 380.349510][T11256] RIP: 0033:0x7fda4d79ce59 [ 380.353962][T11256] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 380.373574][T11256] RSP: 002b:00007fda4e721028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 380.381988][T11256] RAX: ffffffffffffffda RBX: 00007fda4da15fa0 RCX: 00007fda4d79ce59 [ 380.390049][T11256] RDX: 0000000000000048 RSI: 0000200000000500 RDI: 000000000000000a [ 380.398025][T11256] RBP: 00007fda4e721090 R08: 0000000000000000 R09: 0000000000000000 [ 380.405996][T11256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 380.413967][T11256] R13: 00007fda4da16038 R14: 00007fda4da15fa0 R15: 00007ffe2e0212f8 [ 380.421962][T11256] [ 380.644443][T11265] tun0: tun_chr_ioctl cmd 1074025678 [ 380.650275][T11265] tun0: group set to 0 [ 380.960033][T11278] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1650'. [ 380.977667][T11278] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1650'. [ 381.333617][T11287] FAULT_INJECTION: forcing a failure. [ 381.333617][T11287] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 381.387905][T11287] CPU: 0 PID: 11287 Comm: syz.3.1654 Not tainted syzkaller #0 [ 381.395435][T11287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 381.405513][T11287] Call Trace: [ 381.408798][T11287] [ 381.411737][T11287] dump_stack_lvl+0x18c/0x250 [ 381.416431][T11287] ? show_regs_print_info+0x20/0x20 [ 381.421635][T11287] ? load_image+0x420/0x420 [ 381.426146][T11287] ? __lock_acquire+0x7d80/0x7d80 [ 381.431176][T11287] ? snprintf+0xe9/0x140 [ 381.435447][T11287] should_fail_ex+0x394/0x4c0 [ 381.440140][T11287] _copy_to_user+0x2f/0xa0 [ 381.444564][T11287] simple_read_from_buffer+0xe7/0x150 [ 381.449984][T11287] proc_fail_nth_read+0x1e8/0x260 [ 381.455042][T11287] ? proc_fault_inject_write+0x360/0x360 [ 381.460684][T11287] ? fsnotify_perm+0x271/0x5e0 [ 381.465476][T11287] ? proc_fault_inject_write+0x360/0x360 [ 381.471117][T11287] vfs_read+0x298/0x990 [ 381.475403][T11287] ? kernel_read+0x1e0/0x1e0 [ 381.479999][T11287] ? __fget_files+0x28/0x460 [ 381.484596][T11287] ? __fget_files+0x3fc/0x460 [ 381.489283][T11287] ? __fdget_pos+0x2a3/0x330 [ 381.493882][T11287] ? ksys_read+0x74/0x260 [ 381.498223][T11287] ksys_read+0x151/0x260 [ 381.502478][T11287] ? vfs_write+0x9a0/0x9a0 [ 381.506910][T11287] ? lockdep_hardirqs_on+0x98/0x150 [ 381.512122][T11287] do_syscall_64+0x55/0xb0 [ 381.516542][T11287] ? clear_bhb_loop+0x40/0x90 [ 381.521245][T11287] ? clear_bhb_loop+0x40/0x90 [ 381.525948][T11287] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 381.531859][T11287] RIP: 0033:0x7fda4d75d68e [ 381.536282][T11287] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 381.555899][T11287] RSP: 002b:00007fda4e720fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 381.564319][T11287] RAX: ffffffffffffffda RBX: 00007fda4e7216c0 RCX: 00007fda4d75d68e [ 381.572295][T11287] RDX: 000000000000000f RSI: 00007fda4e7210a0 RDI: 0000000000000007 [ 381.580272][T11287] RBP: 00007fda4e721090 R08: 0000000000000000 R09: 0000000000000000 [ 381.588245][T11287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 381.596238][T11287] R13: 00007fda4da16038 R14: 00007fda4da15fa0 R15: 00007ffe2e0212f8 [ 381.604240][T11287] [ 382.212881][T11293] veth0_vlan: left promiscuous mode [ 382.237384][T11293] veth0_vlan: entered promiscuous mode [ 382.265391][T11293] team0: Device veth0_vlan failed to register rx_handler [ 382.414332][T11297] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1656'. [ 382.448860][T11297] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 382.482735][T11280] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1651'. [ 382.558289][T11303] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1658'. [ 382.765558][T11310] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 383.022861][T11317] netlink: 13383 bytes leftover after parsing attributes in process `syz.0.1664'. [ 383.890587][T11335] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.1670'. [ 384.392139][T11348] validate_nla: 8 callbacks suppressed [ 384.392159][T11348] netlink: 'syz.2.1674': attribute type 4 has an invalid length. [ 384.503851][T11348] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1674'. [ 385.253315][T11365] netlink: 'syz.2.1679': attribute type 9 has an invalid length. [ 385.284737][T11357] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 385.305008][T11365] netlink: 154020 bytes leftover after parsing attributes in process `syz.2.1679'. [ 385.489574][T11375] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1682'. [ 387.220709][T11396] netlink: 'syz.1.1690': attribute type 29 has an invalid length. [ 387.314168][T11396] netlink: 'syz.1.1690': attribute type 29 has an invalid length. [ 387.404214][T11398] netlink: 'syz.1.1690': attribute type 29 has an invalid length. [ 387.467342][T11396] netlink: 'syz.1.1690': attribute type 29 has an invalid length. [ 389.299696][T11413] netlink: 1057 bytes leftover after parsing attributes in process `syz.1.1694'. [ 394.975549][T11491] netlink: 'syz.1.1719': attribute type 9 has an invalid length. [ 394.989191][T11491] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.1719'. [ 395.005839][T11491] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1719'. [ 395.030175][T11491] netlink: 'syz.1.1719': attribute type 10 has an invalid length. [ 395.054954][T11491] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 395.229468][T11499] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1721'. [ 395.504453][T11507] netlink: 'syz.1.1724': attribute type 16 has an invalid length. [ 395.512719][T11507] netlink: 'syz.1.1724': attribute type 3 has an invalid length. [ 395.527396][T11507] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1724'. [ 395.628907][T11511] netlink: 'syz.3.1727': attribute type 13 has an invalid length. [ 395.651002][T11511] netlink: 172 bytes leftover after parsing attributes in process `syz.3.1727'. [ 395.702304][T11511] mac80211_hwsim hwsim24 wlan1: entered allmulticast mode [ 395.902267][T11519] netlink: 'syz.0.1728': attribute type 21 has an invalid length. [ 396.070810][T11523] netlink: 'syz.1.1730': attribute type 27 has an invalid length. [ 396.106924][T11523] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1730'. [ 396.260055][T11521] netlink: 'syz.3.1729': attribute type 21 has an invalid length. [ 396.268929][T11521] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1729'. [ 396.287155][T11521] netlink: 'syz.3.1729': attribute type 4 has an invalid length. [ 396.295332][T11521] netlink: 'syz.3.1729': attribute type 3 has an invalid length. [ 396.332195][T11521] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1729'. [ 396.528994][T11537] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1733'. [ 396.783558][T11542] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.1734'. [ 397.154400][T11559] syzkaller0: entered promiscuous mode [ 397.160130][T11559] syzkaller0: entered allmulticast mode [ 397.198003][T11566] sit0: entered promiscuous mode [ 397.470389][T11574] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 399.313520][T11577] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 399.320915][T11577] IPv6: NLM_F_CREATE should be set when creating new route [ 399.328250][T11577] IPv6: NLM_F_CREATE should be set when creating new route [ 399.335489][T11577] IPv6: NLM_F_CREATE should be set when creating new route [ 399.918071][T11603] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 399.931606][T11603] syzkaller1: linktype set to 6 [ 400.646627][T11622] validate_nla: 7 callbacks suppressed [ 400.646675][T11622] netlink: 'syz.1.1756': attribute type 21 has an invalid length. [ 400.677617][T11622] __nla_validate_parse: 8 callbacks suppressed [ 400.677695][T11622] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1756'. [ 400.718276][T11622] netlink: 'syz.1.1756': attribute type 4 has an invalid length. [ 400.729386][T11622] netlink: 'syz.1.1756': attribute type 3 has an invalid length. [ 400.749509][T11622] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1756'. [ 400.760301][T11633] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.1760'. [ 400.784417][T11633] netlink: 22856 bytes leftover after parsing attributes in process `syz.2.1760'. [ 400.794833][T11629] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1759'. [ 400.806122][T11635] netlink: 'syz.0.1768': attribute type 2 has an invalid length. [ 401.028346][T11644] netlink: 'syz.2.1763': attribute type 21 has an invalid length. [ 401.036468][T11644] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1763'. [ 401.152099][T11645] netlink: 'syz.1.1762': attribute type 1 has an invalid length. [ 401.206971][T11645] netlink: 146340 bytes leftover after parsing attributes in process `syz.1.1762'. [ 401.256536][T11648] netlink: 'syz.2.1765': attribute type 21 has an invalid length. [ 401.270123][T11648] netlink: 14548 bytes leftover after parsing attributes in process `syz.2.1765'. [ 401.957523][T11660] netlink: 'syz.0.1770': attribute type 10 has an invalid length. [ 401.989994][T11660] bridge0: port 3(batadv0) entered disabled state [ 401.997502][T11660] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.004953][T11660] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.138904][T11665] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1772'. [ 402.156467][T11665] netlink: get zone limit has 4 unknown bytes [ 402.272500][T11670] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1775'. [ 402.308813][T11672] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 402.326418][T11672] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 402.351650][T11672] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 402.364263][T11672] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 402.380149][T11672] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 402.391124][T11672] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 402.403856][T11672] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 402.435617][T11672] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 402.446829][T11672] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 405.952990][T11731] netlink: 'syz.1.1792': attribute type 3 has an invalid length. [ 405.967081][T11731] netlink: 'syz.1.1792': attribute type 275 has an invalid length. [ 405.986440][T11733] netlink: 'syz.3.1793': attribute type 21 has an invalid length. [ 405.995157][T11733] __nla_validate_parse: 2 callbacks suppressed [ 405.995198][T11733] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1793'. [ 406.359816][T11744] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1796'. [ 406.793084][T11749] sctp: [Deprecated]: syz.3.1798 (pid 11749) Use of struct sctp_assoc_value in delayed_ack socket option. [ 406.793084][T11749] Use struct sctp_sack_info instead [ 406.820809][T11749] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1798'. [ 406.839924][T11751] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1799'. [ 406.850230][T11751] bridge_slave_0: entered allmulticast mode [ 406.856680][T11751] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1799'. [ 406.866668][T11751] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1799'. [ 406.876810][T11751] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1799'. [ 406.887830][T11751] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1799'. [ 406.902997][T11751] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1799'. [ 406.913186][T11751] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1799'. [ 407.111140][ T5782] Bluetooth: hci3: Malformed LE Event: 0x02 [ 408.900666][T11818] netlink: 'syz.2.1824': attribute type 1 has an invalid length. [ 409.827013][T11848] netlink: 'syz.1.1833': attribute type 7 has an invalid length. [ 411.593749][T11873] netlink: 'syz.2.1841': attribute type 10 has an invalid length. [ 411.652630][T11873] geneve0: entered promiscuous mode [ 412.090544][T11873] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 412.494216][T11892] netlink: 'syz.1.1848': attribute type 1 has an invalid length. [ 412.512861][T11892] netlink: 'syz.1.1848': attribute type 4 has an invalid length. [ 412.524124][T11892] __nla_validate_parse: 61 callbacks suppressed [ 412.524138][T11892] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.1848'. [ 413.739821][T11948] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.1866'. [ 413.980357][T11954] tap0: tun_chr_ioctl cmd 1074025677 [ 413.986598][T11954] tap0: linktype set to 270 [ 414.172747][T11962] bridge0: port 3(team0) entered blocking state [ 414.190435][T11962] bridge0: port 3(team0) entered disabled state [ 414.201226][T11962] team0: entered allmulticast mode [ 414.206575][T11962] C: entered allmulticast mode [ 414.212618][T11962] team_slave_1: entered allmulticast mode [ 414.225593][T11962] team0: entered promiscuous mode [ 414.231271][T11962] C: entered promiscuous mode [ 414.242932][T11962] team_slave_1: entered promiscuous mode [ 414.249466][T11962] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 414.470581][T11966] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1870'. [ 414.517142][T11969] netlink: 'syz.1.1871': attribute type 3 has an invalid length. [ 414.538034][T11969] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1871'. [ 415.190174][T11995] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1878'. [ 415.686044][T12020] delete_channel: no stack [ 415.718189][T12020] delete_channel: no stack [ 415.961463][T12026] netlink: 'syz.3.1886': attribute type 1 has an invalid length. [ 415.983512][T12026] netlink: 'syz.3.1886': attribute type 4 has an invalid length. [ 416.052640][T12026] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.1886'. [ 418.623532][T12057] TCP: TCP_TX_DELAY enabled [ 418.718800][T12065] syzkaller0: entered promiscuous mode [ 418.724509][T12065] syzkaller0: entered allmulticast mode [ 421.868123][T12091] batadv0: entered promiscuous mode [ 422.925212][T12114] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1914'. [ 422.946005][T12120] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1916'. [ 423.018665][T12121] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1916'. [ 424.057110][T12128] virt_wifi0: entered promiscuous mode [ 424.062673][T12128] virt_wifi0: entered allmulticast mode [ 424.379813][T12157] netlink: 'syz.3.1926': attribute type 10 has an invalid length. [ 424.389814][T12157] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1926'. [ 424.422375][T12157] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1926'. [ 424.764471][T12169] €Â0: renamed from batadv_slave_1 (while UP) [ 425.300077][T12180] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1932'. [ 425.326317][T12180] netlink: 'syz.2.1932': attribute type 10 has an invalid length. [ 425.357241][T12180] hsr_slave_0: left promiscuous mode [ 425.371176][T12180] hsr_slave_1: left promiscuous mode [ 426.168792][T12196] netlink: 'syz.3.1936': attribute type 9 has an invalid length. [ 426.212572][T12196] netlink: 117700 bytes leftover after parsing attributes in process `syz.3.1936'. [ 429.042273][T12207] netlink: 'syz.2.1940': attribute type 29 has an invalid length. [ 429.073530][T12207] netlink: 'syz.2.1940': attribute type 29 has an invalid length. [ 429.108042][T12213] netlink: 'syz.2.1940': attribute type 29 has an invalid length. [ 429.138076][T12207] netlink: 'syz.2.1940': attribute type 29 has an invalid length. [ 429.181261][T12207] netlink: 'syz.2.1940': attribute type 29 has an invalid length. [ 429.421051][T12213] netlink: 'syz.2.1940': attribute type 29 has an invalid length. [ 429.474096][T12227] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1945'. [ 429.492967][T12227] netlink: 'syz.0.1945': attribute type 28 has an invalid length. [ 429.501674][T12227] netlink: 'syz.0.1945': attribute type 29 has an invalid length. [ 429.552605][T12227] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1945'. [ 429.616753][T12230] netlink: 'syz.1.1946': attribute type 9 has an invalid length. [ 429.632612][T12230] netlink: 160016 bytes leftover after parsing attributes in process `syz.1.1946'. [ 430.052854][T12227] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1945'. [ 430.112609][T12227] net_ratelimit: 30910 callbacks suppressed [ 430.112750][T12227] A link change request failed with some changes committed already. Interface 26±ÿÿÿÿa–ïD may have been left with an inconsistent configuration, please check. [ 430.302715][T12243] netlink: 16162 bytes leftover after parsing attributes in process `syz.3.1950'. [ 430.318515][T12246] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1950'. [ 430.494965][T12252] netlink: 'syz.2.1954': attribute type 1 has an invalid length. [ 430.504191][T12252] netlink: 'syz.2.1954': attribute type 2 has an invalid length. [ 430.514076][T12252] netlink: 'syz.2.1954': attribute type 2 has an invalid length. [ 430.523235][T12252] netlink: 'syz.2.1954': attribute type 3 has an invalid length. [ 430.531726][T12252] netlink: 'syz.2.1954': attribute type 4 has an invalid length. [ 430.542223][T12252] netlink: 'syz.2.1954': attribute type 5 has an invalid length. [ 430.562533][T12252] netlink: 126304 bytes leftover after parsing attributes in process `syz.2.1954'. [ 430.695562][T12257] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1955'. [ 430.697995][T12259] delete_channel: no stack [ 430.740653][T12259] delete_channel: no stack [ 430.980115][T12270] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1959'. [ 431.086284][T12267] netlink: 160016 bytes leftover after parsing attributes in process `syz.2.1960'. [ 431.616423][T12286] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 434.335674][ T5782] Bluetooth: hci2: unexpected event 0x04 length: 151 > 10 [ 435.683732][T12402] __nla_validate_parse: 4 callbacks suppressed [ 435.683752][T12402] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2001'. [ 435.794875][T12402] validate_nla: 11 callbacks suppressed [ 435.794892][T12402] netlink: 'syz.0.2001': attribute type 9 has an invalid length. [ 435.822672][T12402] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2001'. [ 435.986235][T12410] netlink: 'syz.2.2004': attribute type 3 has an invalid length. [ 436.001749][T12410] netlink: 13435 bytes leftover after parsing attributes in process `syz.2.2004'. [ 436.337182][ T5782] Bluetooth: hci2: command 0x0406 tx timeout [ 436.427422][T12412] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.2005'. [ 436.570230][T12412] netlink: 'syz.0.2005': attribute type 1 has an invalid length. [ 436.596397][T12412] netlink: 16520 bytes leftover after parsing attributes in process `syz.0.2005'. [ 436.812260][T12425] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2007'. [ 436.860330][T12427] netlink: 'syz.1.2008': attribute type 9 has an invalid length. [ 436.868972][T12427] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.2008'. [ 437.443669][T12448] netlink: 'syz.2.2016': attribute type 10 has an invalid length. [ 437.572294][T12448] team0: Port device hsr_slave_0 added [ 437.688048][T12455] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.2017'. [ 437.967723][T12462] bridge_slave_0: left allmulticast mode [ 438.121932][T12476] netlink: 'syz.1.2024': attribute type 4 has an invalid length. [ 438.143784][T12476] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2024'. [ 438.204809][T12482] netlink: 196 bytes leftover after parsing attributes in process `syz.3.2026'. [ 439.659927][T12536] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 439.886860][T12547] netlink: 'syz.2.2046': attribute type 9 has an invalid length. [ 440.265911][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.272594][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.861518][T12576] netlink: 'syz.3.2050': attribute type 10 has an invalid length. [ 441.000025][T12576] team0: Device hsr_slave_0 failed to register rx_handler [ 441.103922][T12582] __nla_validate_parse: 2 callbacks suppressed [ 441.103939][T12582] netlink: 11562 bytes leftover after parsing attributes in process `syz.2.2056'. [ 441.611110][T12594] netlink: 'syz.0.2059': attribute type 1 has an invalid length. [ 441.638296][T12594] netlink: 63743 bytes leftover after parsing attributes in process `syz.0.2059'. [ 441.749714][T12608] netlink: 'syz.1.2064': attribute type 9 has an invalid length. [ 441.758161][T12608] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2064'. [ 442.134080][T12607] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 442.158127][T12607] syzkaller1: linktype set to 6 [ 442.337175][T12629] netlink: 'syz.3.2068': attribute type 11 has an invalid length. [ 442.345493][T12629] netlink: 'syz.3.2068': attribute type 1 has an invalid length. [ 442.356386][T12629] netlink: 'syz.3.2068': attribute type 1 has an invalid length. [ 442.379801][T12629] netlink: 'syz.3.2068': attribute type 2 has an invalid length. [ 442.413181][T12629] netlink: 198100 bytes leftover after parsing attributes in process `syz.3.2068'. [ 442.456282][T12633] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2071'. [ 442.508671][T12636] netlink: 'syz.2.2073': attribute type 3 has an invalid length. [ 442.532224][T12636] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2073'. [ 442.951872][T12653] sit0: left promiscuous mode [ 443.501908][T12654] sit0: entered promiscuous mode [ 444.110860][T12675] syzkaller0: entered promiscuous mode [ 444.126981][T12675] syzkaller0: entered allmulticast mode [ 444.214932][T12675] ±ÿÿÿÿa–ïD: renamed from lo (while UP) [ 444.283515][T12687] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2085'. [ 444.344131][T12685] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 444.354852][T12685] syzkaller1: linktype set to 6 [ 444.363737][T12685] FAULT_INJECTION: forcing a failure. [ 444.363737][T12685] name failslab, interval 1, probability 0, space 0, times 0 [ 444.406969][T12685] CPU: 1 PID: 12685 Comm: syz.0.2084 Not tainted syzkaller #0 [ 444.414516][T12685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 444.424602][T12685] Call Trace: [ 444.427926][T12685] [ 444.430883][T12685] dump_stack_lvl+0x18c/0x250 [ 444.435607][T12685] ? show_regs_print_info+0x20/0x20 [ 444.440942][T12685] ? load_image+0x420/0x420 [ 444.445491][T12685] ? __lock_acquire+0x7d80/0x7d80 [ 444.450568][T12685] should_fail_ex+0x394/0x4c0 [ 444.455307][T12685] should_failslab+0x9/0x20 [ 444.459842][T12685] slab_pre_alloc_hook+0x59/0x300 [ 444.464893][T12685] ? br_netlink_fini+0x30/0x30 [ 444.469811][T12685] kmem_cache_alloc_node+0x5e/0x310 [ 444.475048][T12685] ? __alloc_skb+0x103/0x2c0 [ 444.479792][T12685] __alloc_skb+0x103/0x2c0 [ 444.484514][T12685] rtmsg_ifinfo_build_skb+0x83/0x260 [ 444.491071][T12685] rtnetlink_event+0x1b7/0x260 [ 444.496402][T12685] notifier_call_chain+0x18f/0x380 [ 444.502307][T12685] call_netdevice_notifiers+0x91/0xd0 [ 444.508251][T12685] ? netdev_adjacent_rename_links+0x500/0x500 [ 444.514365][T12685] ? tun_get+0x1c/0x2e0 [ 444.518612][T12685] ? tun_chr_poll+0x630/0x630 [ 444.523330][T12685] __tun_chr_ioctl+0x197a/0x2070 [ 444.528304][T12685] ? tun_flow_create+0x310/0x310 [ 444.533293][T12685] ? bpf_lsm_file_ioctl+0x9/0x10 [ 444.538287][T12685] ? security_file_ioctl+0x80/0xa0 [ 444.543446][T12685] ? tun_chr_poll+0x630/0x630 [ 444.548166][T12685] __se_sys_ioctl+0xfd/0x170 [ 444.552794][T12685] do_syscall_64+0x55/0xb0 [ 444.557256][T12685] ? clear_bhb_loop+0x40/0x90 [ 444.561965][T12685] ? clear_bhb_loop+0x40/0x90 [ 444.566685][T12685] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 444.572633][T12685] RIP: 0033:0x7f5bddf9ce59 [ 444.577089][T12685] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 444.597599][T12685] RSP: 002b:00007f5bdedde028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 444.606049][T12685] RAX: ffffffffffffffda RBX: 00007f5bde215fa0 RCX: 00007f5bddf9ce59 [ 444.614069][T12685] RDX: 0000000000000006 RSI: 00000000400454cd RDI: 0000000000000003 [ 444.622079][T12685] RBP: 00007f5bdedde090 R08: 0000000000000000 R09: 0000000000000000 [ 444.630095][T12685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 444.640636][T12685] R13: 00007f5bde216038 R14: 00007f5bde215fa0 R15: 00007ffefb28acd8 [ 444.650692][T12685] [ 444.980152][T12699] netlink: 212912 bytes leftover after parsing attributes in process `syz.0.2089'. [ 444.997186][T12699] openvswitch: netlink: IP tunnel dst address not specified [ 445.211504][T12705] netpci0: tun_chr_ioctl cmd 1074025677 [ 445.231807][T12705] netpci0: linktype set to 6 [ 446.036173][T12722] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 446.067047][T12722] syzkaller1: linktype set to 6 [ 447.097218][T12738] netlink: 'syz.1.2099': attribute type 10 has an invalid length. [ 447.124580][T12738] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2099'. [ 447.368992][T12752] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 447.375707][T12752] syzkaller1: linktype set to 6 [ 447.580963][T12759] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 447.606205][T12759] syzkaller1: linktype set to 6 [ 448.654032][T12778] bridge0: port 4(syz_tun) entered blocking state [ 448.667439][T12778] bridge0: port 4(syz_tun) entered disabled state [ 448.676353][T12778] syz_tun: entered allmulticast mode [ 448.709044][T12778] syz_tun: entered promiscuous mode [ 449.041247][T12782] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 449.049078][T12782] syzkaller1: linktype set to 6 [ 449.194425][T12786] netlink: 'syz.2.2114': attribute type 11 has an invalid length. [ 449.217561][T12786] netlink: 'syz.2.2114': attribute type 1 has an invalid length. [ 449.225792][T12786] netlink: 'syz.2.2114': attribute type 1 has an invalid length. [ 449.246274][T12786] netlink: 'syz.2.2114': attribute type 2 has an invalid length. [ 449.264716][T12786] netlink: 198100 bytes leftover after parsing attributes in process `syz.2.2114'. [ 449.331427][T12791] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 449.339643][T12791] syzkaller1: linktype set to 6 [ 449.344861][T12791] FAULT_INJECTION: forcing a failure. [ 449.344861][T12791] name failslab, interval 1, probability 0, space 0, times 0 [ 449.358031][T12791] CPU: 0 PID: 12791 Comm: syz.0.2118 Not tainted syzkaller #0 [ 449.365526][T12791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 449.375698][T12791] Call Trace: [ 449.378999][T12791] [ 449.381954][T12791] dump_stack_lvl+0x18c/0x250 [ 449.386660][T12791] ? verify_lock_unused+0x140/0x140 [ 449.391894][T12791] ? show_regs_print_info+0x20/0x20 [ 449.397116][T12791] ? load_image+0x420/0x420 [ 449.401668][T12791] should_fail_ex+0x394/0x4c0 [ 449.406379][T12791] should_failslab+0x9/0x20 [ 449.410920][T12791] slab_pre_alloc_hook+0x59/0x300 [ 449.415988][T12791] ? __hw_addr_add_ex+0x1f4/0x700 [ 449.421137][T12791] __kmem_cache_alloc_node+0x53/0x250 [ 449.426636][T12791] ? __hw_addr_add_ex+0x1f4/0x700 [ 449.431693][T12791] kmalloc_trace+0x2a/0xe0 [ 449.436575][T12791] __hw_addr_add_ex+0x1f4/0x700 [ 449.441470][T12791] dev_mc_add+0xa1/0x120 [ 449.445750][T12791] igmp6_group_added+0x1bc/0x720 [ 449.450828][T12791] ? mld_del_delrec+0xbf0/0xbf0 [ 449.455706][T12791] ? mld_del_delrec+0x154/0xbf0 [ 449.460587][T12791] ipv6_mc_up+0x314/0x580 [ 449.464948][T12791] addrconf_notify+0x618/0x1010 [ 449.469927][T12791] notifier_call_chain+0x18f/0x380 [ 449.475079][T12791] call_netdevice_notifiers+0x91/0xd0 [ 449.480484][T12791] ? netdev_adjacent_rename_links+0x500/0x500 [ 449.486588][T12791] ? tun_get+0x1c/0x2e0 [ 449.490855][T12791] ? tun_chr_poll+0x630/0x630 [ 449.495564][T12791] __tun_chr_ioctl+0x197a/0x2070 [ 449.500534][T12791] ? tun_flow_create+0x310/0x310 [ 449.505515][T12791] ? bpf_lsm_file_ioctl+0x9/0x10 [ 449.510479][T12791] ? security_file_ioctl+0x80/0xa0 [ 449.515612][T12791] ? tun_chr_poll+0x630/0x630 [ 449.520320][T12791] __se_sys_ioctl+0xfd/0x170 [ 449.524947][T12791] do_syscall_64+0x55/0xb0 [ 449.530211][T12791] ? clear_bhb_loop+0x40/0x90 [ 449.536966][T12791] ? clear_bhb_loop+0x40/0x90 [ 449.542728][T12791] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 449.549296][T12791] RIP: 0033:0x7f5bddf9ce59 [ 449.555662][T12791] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 449.582859][T12791] RSP: 002b:00007f5bdedde028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 449.591388][T12791] RAX: ffffffffffffffda RBX: 00007f5bde215fa0 RCX: 00007f5bddf9ce59 [ 449.599381][T12791] RDX: 0000000000000006 RSI: 00000000400454cd RDI: 0000000000000003 [ 449.607373][T12791] RBP: 00007f5bdedde090 R08: 0000000000000000 R09: 0000000000000000 [ 449.615381][T12791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 449.623426][T12791] R13: 00007f5bde216038 R14: 00007f5bde215fa0 R15: 00007ffefb28acd8 [ 449.631477][T12791] [ 450.033166][T12799] sctp: [Deprecated]: syz.2.2122 (pid 12799) Use of struct sctp_assoc_value in delayed_ack socket option. [ 450.033166][T12799] Use struct sctp_sack_info instead [ 450.178180][T12803] netlink: 'syz.3.2123': attribute type 27 has an invalid length. [ 451.723720][T12819] netlink: 3752 bytes leftover after parsing attributes in process `syz.3.2128'. [ 453.697087][T12858] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 453.718745][T12858] syzkaller1: linktype set to 6 [ 454.172170][T12860] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2142'. [ 454.306629][T12863] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.2143'. [ 454.343629][T12863] bridge_slave_1: entered promiscuous mode [ 454.448381][T12869] netlink: 'syz.0.2144': attribute type 2 has an invalid length. [ 454.456177][T12869] netlink: 'syz.0.2144': attribute type 1 has an invalid length. [ 454.505088][T12869] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2144'. [ 456.328445][T12887] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2150'. [ 456.353621][T12887] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 456.388053][T12891] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 456.396099][T12891] syzkaller1: linktype set to 6 [ 456.931103][T12927] netlink: 'syz.2.2164': attribute type 3 has an invalid length. [ 456.939689][T12927] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2164'. [ 457.105037][T12933] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.2166'. [ 457.574431][T12938] syzkaller0: entered promiscuous mode [ 457.581484][T12938] syzkaller0: entered allmulticast mode [ 457.599589][T12938] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 457.607074][T12938] syzkaller1: linktype set to 6 [ 457.877757][T12951] netlink: 33975 bytes leftover after parsing attributes in process `syz.0.2170'. [ 457.891453][T12951] netlink: 33975 bytes leftover after parsing attributes in process `syz.0.2170'. [ 459.433606][T12965] netlink: 'syz.2.2175': attribute type 1 has an invalid length. [ 459.476100][T12965] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.2175'. [ 461.652777][T12992] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2182'. [ 461.769959][T12998] netlink: 'syz.2.2185': attribute type 21 has an invalid length. [ 462.629825][T13019] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 462.635866][T13019] syzkaller1: linktype set to 6 [ 462.723153][T13023] netlink: 'syz.2.2192': attribute type 3 has an invalid length. [ 462.731332][T13023] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2192'. [ 462.821254][T13023] netlink: 'syz.2.2192': attribute type 1 has an invalid length. [ 462.842871][T13023] netlink: 'syz.2.2192': attribute type 2 has an invalid length. [ 462.921674][T13023] netlink: 'syz.2.2192': attribute type 2 has an invalid length. [ 462.955814][T13023] netlink: 'syz.2.2192': attribute type 3 has an invalid length. [ 463.070550][T13027] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.2192'. [ 463.110523][T13023] netlink: 'syz.2.2192': attribute type 4 has an invalid length. [ 463.154904][T13023] netlink: 'syz.2.2192': attribute type 5 has an invalid length. [ 463.177241][T13023] netlink: 'syz.2.2192': attribute type 6 has an invalid length. [ 463.201501][T13023] netlink: 'syz.2.2192': attribute type 7 has an invalid length. [ 463.214920][T13023] netlink: 126304 bytes leftover after parsing attributes in process `syz.2.2192'. [ 463.362282][T13036] sctp: [Deprecated]: syz.3.2195 (pid 13036) Use of int in max_burst socket option deprecated. [ 463.362282][T13036] Use struct sctp_assoc_value instead [ 463.469458][T13038] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2195'. [ 464.835571][T13076] sit0: left promiscuous mode [ 465.130979][T13079] sit0: entered promiscuous mode [ 465.210903][T13086] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2211'. [ 465.224591][T13086] A link change request failed with some changes committed already. Interface 26±ÿÿÿÿa–ïD may have been left with an inconsistent configuration, please check. [ 465.538441][T13093] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 465.544508][T13093] syzkaller1: linktype set to 6 [ 466.541469][T13122] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.2222'. [ 466.593101][T13123] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2221'. [ 466.606933][T13123] netlink: 6 bytes leftover after parsing attributes in process `syz.2.2221'. [ 466.756379][T13125] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2221'. [ 466.945959][T13127] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.2223'. [ 470.463184][T13155] validate_nla: 7 callbacks suppressed [ 470.463256][T13155] netlink: 'syz.0.2232': attribute type 9 has an invalid length. [ 470.506142][T13155] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2232'. [ 470.980398][T13161] netlink: 'syz.2.2234': attribute type 46 has an invalid length. [ 471.466665][T13173] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.2238'. [ 471.777223][T13180] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.2241'. [ 472.092434][T13188] sit0: left promiscuous mode [ 472.407325][T13195] sit0: entered promiscuous mode [ 473.284083][T13218] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2252'. [ 473.309076][T13218] netlink: 65055 bytes leftover after parsing attributes in process `syz.1.2252'. [ 473.374707][T13218] netlink: 'syz.1.2252': attribute type 21 has an invalid length. [ 473.536666][T13231] netlink: 'syz.1.2255': attribute type 4 has an invalid length. [ 473.545532][T13231] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2255'. [ 474.084097][T13235] netlink: 1772 bytes leftover after parsing attributes in process `syz.0.2257'. [ 474.382962][T13239] sit0: entered promiscuous mode [ 474.731878][T13247] netlink: 'syz.1.2260': attribute type 19 has an invalid length. [ 474.740941][T13247] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2260'. [ 475.577669][T13276] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2270'. [ 475.610393][T13276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 475.637454][T13276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 475.655826][T13276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: €Â0 [ 475.670918][T13276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 475.682263][T13276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 475.693760][T13276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 475.767900][T13276] netlink: 'syz.2.2270': attribute type 21 has an invalid length. [ 475.776178][T13276] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2270'. [ 475.788530][T13276] netlink: 'syz.2.2270': attribute type 5 has an invalid length. [ 475.796522][T13276] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2270'. [ 476.369026][T13305] netlink: 'syz.0.2277': attribute type 19 has an invalid length. [ 476.707103][T13309] netlink: 'syz.2.2278': attribute type 2 has an invalid length. [ 479.185787][T13331] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2283'. [ 479.208796][T13331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: €Â0 [ 479.223054][T13331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.233806][T13331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 479.245019][T13331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.255620][T13331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: €Â0 [ 479.271971][T13331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.285122][T13331] batadv_slave_1: entered promiscuous mode [ 479.292432][T13336] netlink: 'syz.2.2284': attribute type 10 has an invalid length. [ 479.301000][T13336] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2284'. [ 479.311100][T13336] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 479.327656][T13338] netlink: 'syz.1.2283': attribute type 21 has an invalid length. [ 479.348125][T13338] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2283'. [ 479.360914][T13338] netlink: 'syz.1.2283': attribute type 5 has an invalid length. [ 479.374101][T13338] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2283'. [ 479.431259][T13341] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 479.440684][T13341] syzkaller1: linktype set to 6 [ 481.119499][T13379] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2296'. [ 481.135267][T13379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: €Â0 [ 481.156941][T13379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.168561][T13379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: €Â0 [ 481.179810][T13379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.192219][T13379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 481.214487][T13379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.239855][T13379] batadv_slave_1: entered promiscuous mode [ 481.290128][T13380] netlink: 'syz.0.2296': attribute type 21 has an invalid length. [ 481.300654][T13380] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2296'. [ 481.315833][T13380] netlink: 'syz.0.2296': attribute type 5 has an invalid length. [ 481.323877][T13380] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2296'. [ 481.334762][T13386] netlink: 'syz.3.2298': attribute type 2 has an invalid length. [ 481.346548][T13386] netlink: 'syz.3.2298': attribute type 4 has an invalid length. [ 481.356032][T13386] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2298'. [ 481.448059][T13382] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 481.454058][T13382] syzkaller1: linktype set to 770 [ 481.459884][T13385] syzkaller1: tun_chr_ioctl cmd 1074025694 [ 481.547450][T13390] netlink: 'syz.1.2299': attribute type 3 has an invalid length. [ 482.638255][ T5782] Bluetooth: hci3: unexpected event 0x08 length: 15 > 4 [ 482.660870][T13422] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 482.697183][T13422] syzkaller1: linktype set to 6 [ 484.629275][T13456] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2323'. [ 484.658717][ T5085] Bluetooth: hci3: command 0x0406 tx timeout [ 484.902457][T13464] netlink: 'syz.3.2325': attribute type 3 has an invalid length. [ 484.947748][T13464] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2325'. [ 484.976252][T13462] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.2325'. [ 485.374766][T13476] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2329'. [ 485.393174][T13476] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2329'. [ 485.427716][T13476] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2329'. [ 488.461400][T13497] __nla_validate_parse: 1 callbacks suppressed [ 488.461418][T13497] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2336'. [ 488.492911][T13497] : renamed from caif0 [ 488.514856][T13497] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 488.538253][T13501] netlink: 'syz.0.2337': attribute type 10 has an invalid length. [ 488.622308][T13501] team0: Device wg1 is of different type [ 489.200528][ T5085] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 489.216963][ T5085] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 489.226296][ T5085] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 489.235821][ T5085] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 489.246885][ T5085] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 489.254624][ T5085] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 489.472169][T13512] chnl_net:caif_netlink_parms(): no params data found [ 489.867537][T13521] vcan0: entered allmulticast mode [ 489.894359][T13530] netlink: 'syz.3.2343': attribute type 10 has an invalid length. [ 489.937324][T13512] bridge0: port 1(bridge_slave_0) entered blocking state [ 489.941508][T13529] netlink: 'syz.0.2345': attribute type 3 has an invalid length. [ 489.944522][T13512] bridge0: port 1(bridge_slave_0) entered disabled state [ 489.972913][T13529] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2345'. [ 489.999056][T13512] bridge_slave_0: entered allmulticast mode [ 490.022968][T13512] bridge_slave_0: entered promiscuous mode [ 490.043443][T13512] bridge0: port 2(bridge_slave_1) entered blocking state [ 490.068063][T13512] bridge0: port 2(bridge_slave_1) entered disabled state [ 490.075367][T13512] bridge_slave_1: entered allmulticast mode [ 490.102721][T13512] bridge_slave_1: entered promiscuous mode [ 490.123434][T13532] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.2345'. [ 490.206401][T13512] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 490.208488][T13533] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2346'. [ 490.270179][T13512] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 490.935760][T13512] team0: Port device team_slave_0 added [ 491.062764][ T6210] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.098052][T13512] team0: Port device team_slave_1 added [ 491.105241][T13533] debugfs: Directory '!!ô!' with parent 'ieee80211' already present! [ 491.214505][ T6210] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.277154][T13512] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 491.284153][T13512] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 491.301158][ T5085] Bluetooth: hci4: command tx timeout [ 491.381772][T13512] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 491.620951][ T6210] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.648342][T13512] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 491.668675][T13512] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 491.726983][T13512] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 491.763024][T13549] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 491.778456][T13551] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.2352'. [ 491.909387][ T6210] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.004929][T13557] netlink: 'syz.1.2353': attribute type 33 has an invalid length. [ 492.013479][T13557] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2353'. [ 492.023425][T13557] `: renamed from syz_tun (while UP) [ 492.153901][T13512] hsr_slave_0: entered promiscuous mode [ 492.178607][T13512] hsr_slave_1: entered promiscuous mode [ 492.253327][T13512] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 492.261402][T13512] Cannot create hsr debugfs directory [ 493.179662][T13586] netlink: 'syz.3.2360': attribute type 4 has an invalid length. [ 493.193624][ T5085] Bluetooth: hci0: unexpected event 0x2c length: 151 > 17 [ 493.218701][T13586] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2360'. [ 493.261965][T13584] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2362'. [ 493.376902][ T5085] Bluetooth: hci4: command tx timeout [ 495.030101][T13622] netlink: 'syz.3.2371': attribute type 8 has an invalid length. [ 495.052611][T13622] netlink: 199848 bytes leftover after parsing attributes in process `syz.3.2371'. [ 495.457152][ T5085] Bluetooth: hci4: command tx timeout [ 495.892450][T13656] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.2377'. [ 495.927034][T13512] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 496.063526][T13512] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 496.185128][T13512] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 496.241462][T13512] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 496.441106][T13672] netlink: 'syz.3.2381': attribute type 5 has an invalid length. [ 496.451528][T13673] netlink: 'syz.3.2381': attribute type 5 has an invalid length. [ 496.991862][T13686] IPv6: NLM_F_CREATE should be specified when creating new route [ 497.291858][T13692] tap0: tun_chr_ioctl cmd 1074025694 [ 497.326042][T13512] 8021q: adding VLAN 0 to HW filter on device bond0 [ 497.504209][T13512] 8021q: adding VLAN 0 to HW filter on device team0 [ 497.546834][ T5085] Bluetooth: hci4: command tx timeout [ 497.603543][ T6203] bridge0: port 1(bridge_slave_0) entered blocking state [ 497.611727][ T6203] bridge0: port 1(bridge_slave_0) entered forwarding state [ 497.689879][ T6203] bridge0: port 2(bridge_slave_1) entered blocking state [ 497.697189][ T6203] bridge0: port 2(bridge_slave_1) entered forwarding state [ 498.278235][ T6210] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 498.316207][ T6210] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 498.354034][ T6210] batman_adv: batadv0: Interface deactivated: €Â0 [ 498.365338][ T6210] batman_adv: batadv0: Removing interface: €Â0 [ 498.373667][ T6210] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 498.386154][ T6210] batman_adv: batadv0: Removing interface: virt_wifi0 [ 498.472227][T13729] netlink: 'syz.0.2388': attribute type 4 has an invalid length. [ 498.490853][T13729] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2388'. [ 498.606107][T13733] netlink: 'syz.1.2391': attribute type 28 has an invalid length. [ 498.614117][T13733] netlink: 'syz.1.2391': attribute type 4 has an invalid length. [ 498.621998][T13733] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2391'. [ 498.679730][ T6210] team0 (unregistering): Port device geneve1 removed [ 498.708050][ T6210] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 498.841797][ T6210] team0 (unregistering): Port device hsr_slave_0 removed [ 498.984773][ T6210] team0 (unregistering): Port device team_slave_1 removed [ 499.035405][ T6210] team0 (unregistering): Port device C removed [ 499.082710][ T6210] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 499.150406][ T6210] bond0 (unregistering): (slave 32): Releasing backup interface [ 499.449902][ T6210] bond0 (unregistering): Released all slaves [ 499.736436][T13512] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 500.234293][T13512] veth0_vlan: entered promiscuous mode [ 500.259409][T13512] veth1_vlan: entered promiscuous mode [ 500.317541][T13512] veth0_macvtap: entered promiscuous mode [ 500.335245][T13512] veth1_macvtap: entered promiscuous mode [ 500.389694][T13512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 500.423367][T13512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.434561][T13512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 500.453971][T13512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.464933][T13512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 500.475794][T13512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.489187][T13512] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 500.501539][T13512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 500.522711][T13512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.535936][T13512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: €Â0 [ 500.551211][T13512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.563135][T13512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 500.583119][T13512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.597232][T13512] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 500.780277][T13747] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.2393'. [ 501.001606][T13512] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.012877][T13512] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.022000][T13512] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.032916][T13512] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.208275][ T6203] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 501.216156][ T6203] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 501.301087][ T6199] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 501.314967][ T6199] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 501.607526][ C0] [ 501.607536][ C0] ================================ [ 501.607544][ C0] WARNING: inconsistent lock state [ 501.607566][ C0] syzkaller #0 Not tainted [ 501.607575][ C0] -------------------------------- [ 501.607579][ C0] inconsistent {INITIAL USE} -> {IN-NMI} usage. [ 501.607587][ C0] syz.2.2342/13762 [HC2[2]:SC0[0]:HE0:SE1] takes: [ 501.607602][ C0] ffff88804f2d3220 (&htab->lockdep_key){....}-{2:2}, at: htab_lock_bucket+0x17d/0x300 [ 501.607648][ C0] {INITIAL USE} state was registered at: [ 501.607654][ C0] lock_acquire+0x19e/0x420 [ 501.607671][ C0] _raw_spin_lock+0x2e/0x40 [ 501.607779][ C0] htab_lock_bucket+0x17d/0x300 [ 501.607793][ C0] htab_lru_map_delete_elem+0x19f/0x640 [ 501.607806][ C0] bpf_prog_2c29ac5cdc6b1842+0x42/0x46 [ 501.607824][ C0] bpf_overflow_handler+0x1fc/0x510 [ 501.607843][ C0] __perf_event_overflow+0x461/0x660 [ 501.607858][ C0] perf_swevent_event+0x319/0x570 [ 501.607872][ C0] perf_bp_event+0x319/0x430 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 501.607884][ C0] hw_breakpoint_exceptions_notify+0x23e/0x670 [ 501.607918][ C0] notifier_call_chain+0x18f/0x380 [ 501.607934][ C0] atomic_notifier_call_chain+0xda/0x180 [ 501.607951][ C0] notify_die+0x145/0x1a0 [ 501.607965][ C0] notify_debug+0x2e/0x50 [ 501.607986][ C0] noist_exc_debug+0x77/0x120 [ 501.608003][ C0] asm_exc_debug+0x33/0x40 [ 501.608027][ C0] irq event stamp: 4660 [ 501.608032][ C0] hardirqs last enabled at (4659): [] noist_exc_debug+0xf2/0x120 [ 501.608055][ C0] hardirqs last disabled at (4660): [] irqentry_enter+0x13/0x50 [ 501.608078][ C0] softirqs last enabled at (4462): [] __irq_exit_rcu+0xd3/0x190 [ 501.608099][ C0] softirqs last disabled at (4457): [] __irq_exit_rcu+0xd3/0x190 [ 501.608117][ C0] [ 501.608117][ C0] other info that might help us debug this: [ 501.608122][ C0] Possible unsafe locking scenario: [ 501.608122][ C0] [ 501.608125][ C0] CPU0 [ 501.608127][ C0] ---- [ 501.608130][ C0] lock(&htab->lockdep_key); [ 501.608140][ C0] [ 501.608142][ C0] lock(&htab->lockdep_key); [ 501.608151][ C0] [ 501.608151][ C0] *** DEADLOCK *** [ 501.608151][ C0] [ 501.608154][ C0] 1 lock held by syz.2.2342/13762: [ 501.608162][ C0] #0: ffffffff8d131da0 (rcu_read_lock){....}-{1:2}, at: perf_event_output_forward+0xb9/0x3e0 [ 501.608199][ C0] [ 501.608199][ C0] stack backtrace: [ 501.608204][ C0] CPU: 0 PID: 13762 Comm: syz.2.2342 Not tainted syzkaller #0 [ 501.608218][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 501.608227][ C0] Call Trace: [ 501.608233][ C0] <#DB> [ 501.608283][ C0] dump_stack_lvl+0x18c/0x250 [ 501.608310][ C0] ? show_regs_print_info+0x20/0x20 [ 501.608341][ C0] ? print_usage_bug+0x43d/0x6a0 [ 501.608361][ C0] ? verify_lock_unused+0x15/0x140 [ 501.608385][ C0] lock_acquire+0x2c2/0x420 [ 501.608409][ C0] ? htab_lock_bucket+0x17d/0x300 [ 501.608431][ C0] ? read_lock_is_recursive+0x20/0x20 [ 501.608473][ C0] _raw_spin_lock+0x2e/0x40 [ 501.608494][ C0] ? htab_lock_bucket+0x17d/0x300 [ 501.608510][ C0] htab_lock_bucket+0x17d/0x300 [ 501.608532][ C0] ? htab_lru_map_delete_node+0x770/0x770 [ 501.608555][ C0] ? look_up_lock_class+0x75/0x140 [ 501.608581][ C0] ? verify_lock_unused+0x15/0x140 [ 501.608600][ C0] ? jhash+0x34e/0x740 [ 501.608622][ C0] htab_lru_map_delete_elem+0x19f/0x640 [ 501.608651][ C0] ? htab_lru_map_update_elem+0x990/0x990 [ 501.608671][ C0] ? perf_callchain+0x220/0x220 [ 501.608701][ C0] bpf_prog_2c29ac5cdc6b1842+0x42/0x46 [ 501.608723][ C0] bpf_overflow_handler+0x1fc/0x510 [ 501.608756][ C0] ? bpf_overflow_handler+0xde/0x510 [ 501.608778][ C0] ? tp_perf_event_destroy+0x20/0x20 [ 501.608813][ C0] ? __perf_event_account_interrupt+0x187/0x280 [ 501.608836][ C0] __perf_event_overflow+0x461/0x660 [ 501.608867][ C0] perf_swevent_event+0x319/0x570 [ 501.608891][ C0] ? perf_tp_event+0x1550/0x1550 [ 501.608918][ C0] ? perf_trace_buf_alloc+0x290/0x290 [ 501.608965][ C0] perf_bp_event+0x319/0x430 [ 501.608993][ C0] ? perf_event_free_bpf_prog+0x120/0x120 [ 501.609059][ C0] ? lock_acquire+0x2c2/0x420 [ 501.609091][ C0] hw_breakpoint_exceptions_notify+0x23e/0x670 [ 501.609120][ C0] notifier_call_chain+0x18f/0x380 [ 501.609146][ C0] ? atomic_notifier_call_chain+0x26/0x180 [ 501.609171][ C0] atomic_notifier_call_chain+0xda/0x180 [ 501.609196][ C0] notify_die+0x145/0x1a0 [ 501.609219][ C0] ? srcu_init_notifier_head+0x90/0x90 [ 501.609256][ C0] notify_debug+0x2e/0x50 [ 501.609272][ C0] exc_debug+0xde/0x140 [ 501.609297][ C0] asm_exc_debug+0x1e/0x40 [ 501.609319][ C0] RIP: 0010:__get_user_nocheck_8+0xd/0x20 [ 501.609342][ C0] Code: fa 0f 01 cb 0f ae e8 8b 10 31 c0 0f 01 ca c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 0f 01 cb 0f ae e8 48 8b 10 <31> c0 0f 01 ca c3 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 01 ca [ 501.609356][ C0] RSP: 0000:ffffc900042ff640 EFLAGS: 00040806 [ 501.609370][ C0] RAX: 0000200000000300 RBX: 00000000ffffffff RCX: 1ffff9200085fee6 [ 501.609383][ C0] RDX: 00006370692f736e RSI: 0000200000000300 RDI: 0000000000000000 [ 501.609394][ C0] RBP: 0000200000000300 R08: 000000000000007f R09: 0000000000000000 [ 501.609404][ C0] R10: dffffc0000000000 R11: fffffbfff22378a1 R12: 0000000000000001 [ 501.609415][ C0] R13: 1ffff9200085fee4 R14: 000000000000007f R15: dffffc0000000000 [ 501.609452][ C0] [ 501.609456][ C0] [ 501.609462][ C0] perf_callchain_user+0xbdd/0x15d0 [ 501.609506][ C0] ? get_callchain_entry+0x185/0x3c0 [ 501.609530][ C0] get_perf_callchain+0x394/0x510 [ 501.609552][ C0] ? put_callchain_entry+0xb0/0xb0 [ 501.609582][ C0] ? __perf_event_header__init_id+0x3b0/0x470 [ 501.609606][ C0] perf_prepare_sample+0x3c7/0x1db0 [ 501.609635][ C0] ? read_lock_is_recursive+0x20/0x20 [ 501.609655][ C0] ? perf_callchain+0x220/0x220 [ 501.609690][ C0] perf_event_output_forward+0x187/0x3e0 [ 501.609710][ C0] ? perf_event_output_forward+0xb9/0x3e0 [ 501.609729][ C0] ? perf_prepare_header+0x1e0/0x1e0 [ 501.609753][ C0] ? verify_lock_unused+0x140/0x140 [ 501.609772][ C0] ? perf_trace_lock_acquire+0x342/0x400 [ 501.609806][ C0] ? __perf_event_account_interrupt+0x187/0x280 [ 501.609831][ C0] __perf_event_overflow+0x461/0x660 [ 501.609861][ C0] perf_swevent_hrtimer+0x437/0x610 [ 501.609889][ C0] ? cpu_clock_event_read+0x40/0x40 [ 501.609951][ C0] ? do_raw_spin_unlock+0x121/0x230 [ 501.609978][ C0] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 501.610002][ C0] ? _raw_spin_unlock+0x40/0x40 [ 501.610035][ C0] ? cpu_clock_event_read+0x40/0x40 [ 501.610054][ C0] __hrtimer_run_queues+0x4e8/0xc10 [ 501.610072][ C0] ? ktime_get_update_offsets_now+0x99/0x3f0 [ 501.610091][ C0] ? ktime_get_update_offsets_now+0x99/0x3f0 [ 501.610139][ C0] ? hrtimer_interrupt+0x980/0x980 [ 501.610158][ C0] ? read_tsc+0x9/0x20 [ 501.610174][ C0] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 501.610208][ C0] hrtimer_interrupt+0x39d/0x980 [ 501.610262][ C0] __sysvec_apic_timer_interrupt+0xfb/0x3b0 [ 501.610287][ C0] sysvec_apic_timer_interrupt+0x51/0xc0 [ 501.610311][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 501.610333][ C0] RIP: 0033:0x7f3c3477bbfd [ 501.610347][ C0] Code: 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 89 f8 48 89 fa c5 f9 ef c0 25 ff 0f 00 00 3d e0 0f 00 00 0f 87 27 01 00 00 c5 fd 74 0f fd d7 c1 85 c0 74 5b f3 0f bc c0 e9 30 01 00 00 66 90 f3 0f bc [ 501.610359][ C0] RSP: 002b:00007f3c356798a8 EFLAGS: 00000283 [ 501.610371][ C0] RAX: 0000000000000300 RBX: 00007f3c35679de0 RCX: 2f666c65732f636f [ 501.610380][ C0] RDX: 0000200000000300 RSI: 00007f3c3485d260 RDI: 0000200000000300 [ 501.610391][ C0] RBP: 0000200000000300 R08: 00007f3c3567a010 R09: 00000000ffffffff [ 501.610400][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 501.610408][ C0] R13: 0000000000000073 R14: 00007f3c348321dd R15: 00007f3c35679ea0 [ 501.610442][ C0] [ 502.421735][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.428079][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.948110][T13757] bond0: (slave `): Releasing backup interface [ 502.992987][T13763] syz_tun (unregistering): left allmulticast mode [ 503.002077][T13763] syz_tun (unregistering): left promiscuous mode [ 503.009580][T13763] bridge0: port 4(syz_tun) entered disabled state [ 503.033825][ T6219] netdevsim netdevsim3 netdevsim3 (unregistering): left allmulticast mode [ 503.044234][ T6219] netdevsim netdevsim3 netdevsim3 (unregistering): left promiscuous mode [ 503.053383][ T6219] @: port 1(netdevsim3) entered disabled state [ 503.068688][ T6219] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.102868][ T6219] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.193174][ T6219] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.272180][ T6219] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.453600][ T6219] hsr_slave_0: left promiscuous mode [ 504.465238][ T6219] hsr_slave_1: left promiscuous mode [ 504.471618][ T6219] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 504.483295][ T6219] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 504.494260][ T6219] batman_adv: batadv0: Interface deactivated: €Â0 [ 504.501476][ T6219] batman_adv: batadv0: Removing interface: €Â0 [ 504.508909][ T6219] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 504.515987][ T6219] batman_adv: batadv0: Removing interface: virt_wifi0 [ 504.782813][ T6219] team0 (unregistering): Port device team_slave_1 removed [ 504.842539][ T6219] bond0 (unregistering): (slave 4@0Ù): Releasing backup interface [ 504.872859][ T6219] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 504.899590][ T6219] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 504.950587][ T6219] bond0 (unregistering): Released all slaves [ 505.263218][ T6219] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.354815][ T6219] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.412312][ T6219] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.462083][ T6219] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.564398][ T6219] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.622120][ T6219] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.662448][ T6219] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.713891][ T6219] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.836637][ T6219] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.892814][ T6219] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.959089][ T6219] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.021903][ T6219] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.880431][ T6219] mac80211_hwsim hwsim5 wlan1 (unregistering): left promiscuous mode [ 507.889816][ T6219] team0: Port device wlan1 removed [ 508.022614][ T6219] hsr_slave_0: left promiscuous mode [ 508.032058][ T6219] hsr_slave_1: left promiscuous mode [ 508.040551][ T6219] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 508.048255][ T6219] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 508.055809][ T6219] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 508.063303][ T6219] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 508.071263][ T6219] bridge_slave_1: left allmulticast mode [ 508.076973][ T6219] bridge_slave_1: left promiscuous mode [ 508.082686][ T6219] bridge0: port 2(bridge_slave_1) entered disabled state [ 508.095719][ T6219] bridge_slave_0: left allmulticast mode [ 508.101623][ T6219] bridge_slave_0: left promiscuous mode [ 508.107499][ T6219] bridge0: port 1(bridge_slave_0) entered disabled state [ 508.118498][ T6219] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 508.125908][ T6219] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 508.134906][ T6219] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 508.143062][ T6219] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 508.150666][ T6219] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 508.157758][ T6219] batman_adv: batadv0: Removing interface: virt_wifi0 [ 508.164913][ T6219] batadv0: left allmulticast mode [ 508.170089][ T6219] batadv0: left promiscuous mode [ 508.175153][ T6219] bridge0: port 3(batadv0) entered disabled state [ 508.182513][ T6219] bridge_slave_1: left allmulticast mode [ 508.188203][ T6219] bridge_slave_1: left promiscuous mode [ 508.193845][ T6219] bridge0: port 2(bridge_slave_1) entered disabled state [ 508.202018][ T6219] bridge_slave_0: left allmulticast mode [ 508.207837][ T6219] bridge_slave_0: left promiscuous mode [ 508.213601][ T6219] bridge0: port 1(bridge_slave_0) entered disabled state [ 508.224614][ T6219] hsr_slave_0: left promiscuous mode [ 508.230426][ T6219] hsr_slave_1: left promiscuous mode [ 508.236158][ T6219] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 508.243607][ T6219] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 508.251186][ T6219] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 508.258653][ T6219] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 508.266219][ T6219] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 508.274808][ T6219] batman_adv: batadv0: Removing interface: virt_wifi0 [ 508.282207][ T6219] team0: left allmulticast mode [ 508.287109][ T6219] C: left allmulticast mode [ 508.291613][ T6219] team_slave_1: left allmulticast mode [ 508.297115][ T6219] team0: left promiscuous mode [ 508.301878][ T6219] C: left promiscuous mode [ 508.306365][ T6219] team_slave_1: left promiscuous mode [ 508.311990][ T6219] bridge0: port 3(team0) entered disabled state [ 508.319164][ T6219] bridge_slave_1: left allmulticast mode [ 508.324885][ T6219] bridge0: port 2(bridge_slave_1) entered disabled state [ 508.333371][ T6219] bridge_slave_0: left allmulticast mode [ 508.340304][ T6219] bridge_slave_0: left promiscuous mode [ 508.346040][ T6219] bridge0: port 1(bridge_slave_0) entered disabled state [ 508.358162][ T6219] veth1_macvtap: left promiscuous mode [ 508.363674][ T6219] veth0_macvtap: left promiscuous mode [ 508.369317][ T6219] veth1_vlan: left promiscuous mode [ 508.374607][ T6219] veth0_vlan: left promiscuous mode [ 508.381378][ T6219] veth1_vlan: left promiscuous mode [ 508.386638][ T6219] veth0_vlan: left promiscuous mode [ 508.392633][ T6219] veth0_macvtap: left promiscuous mode [ 508.399082][ T6219] veth1_vlan: left promiscuous mode [ 508.590383][ T6219] team0 (unregistering): Port device team_slave_1 removed [ 508.623575][ T6219] team0 (unregistering): Port device team_slave_0 removed [ 508.650831][ T6219] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 508.678818][ T6219] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 508.748134][ T6219] bond0 (unregistering): Released all slaves [ 509.008673][ T6219] team0 (unregistering): Port device team_slave_1 removed [ 509.042075][ T6219] team0 (unregistering): Port device C removed [ 509.519785][ T6219] team0 (unregistering): Port device team_slave_1 removed [ 509.543654][ T6219] team0 (unregistering): Port device C removed