last executing test programs: 17m59.314965297s ago: executing program 1 (id=4125): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="89000000170081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e281ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014006040400060404009bbc7a46e3988285dcdf12f213e6f768fec601955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 17m59.075625401s ago: executing program 1 (id=4126): r0 = socket$kcm(0x21, 0x2, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x8, 0x2}, 0x80, 0x0}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000c40)=ANY=[@ANYBLOB="180200000100000000000000010000008500000041000e9e7771c9780000850000007d00005b774f009500"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x3100, 0x0, &(0x7f0000000140), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f2, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x4, &(0x7f0000000cc0)=ANY=[@ANYBLOB="18000000000000000000000000008e94eb4c508a000085008600cb0000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) recvmsg(0xffffffffffffffff, 0x0, 0x1f00) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000022003505d25a806f8c6394f97e24fc60", 0x14}], 0x1, 0x0, 0x0, 0x74000000}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001180)=ANY=[@ANYRES32, @ANYRES32=r0, @ANYBLOB="0400000077f8ad0100000000", @ANYRES32=0x0, @ANYBLOB="82ceaa71d357ffe85749751dd54b4749d5ef77ce231e700e0047fb201b7f8083b7c7170b62664eec74fbf92c16c6d9f44b59", @ANYRES64=0x0], 0x20) recvmsg(r0, &(0x7f0000000740)={&(0x7f0000000240)=@l2tp, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000340)=""/161, 0xa1}, {&(0x7f0000000540)=""/220, 0xdc}, {&(0x7f0000000640)=""/190, 0xbe}, {&(0x7f00000008c0)=""/243, 0xf3}, {&(0x7f0000000100)=""/47, 0x2f}, {&(0x7f00000009c0)=""/195, 0xc3}, {&(0x7f0000000400)=""/74, 0x4a}, {&(0x7f0000000700)=""/36, 0x24}], 0x8, &(0x7f0000000b40)=""/145, 0x91}, 0x141) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000140)="060003076844babeb89e14f086dd", 0x0, 0xfe, 0x60000000, 0x27, 0x0, 0x0, 0x0}, 0x50) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000011008188040f46ec0800b9cca7480ef421000000e3bd6efb440013030e001b000d000008ba8000001201", 0x2e}], 0x1}, 0x4044) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000d00)={0x0, 0x2, 0x8}, 0xc) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000f40)={0x1, 0x58, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000f80)=0xffffffffffffffff, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001000)={0x1, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x14, 0x21, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000200000000000000f4ffffff18110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000a559fffffcffffff18270000", @ANYRES32=r6, @ANYBLOB="000000000d000000185000000d000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000180100002020692500800000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000060000008500000006000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000e80)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x4, '\x00', r7, @fallback=0xa, r8, 0x8, &(0x7f0000000fc0)={0xa, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, r3, 0x4, &(0x7f0000001040)=[r1, 0x1, r5, r9], &(0x7f0000001080)=[{0x4, 0x2, 0xa, 0x8}, {0x0, 0x2, 0x6, 0x9}, {0x5, 0x3, 0xb, 0xc}, {0x3, 0x3, 0xc, 0xc}], 0x10, 0xe}, 0x94) 17m56.251341738s ago: executing program 1 (id=4134): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x4, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0xb}, 0x48) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) socketpair(0x22, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x9, 0x3, 0x9, 0x1, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x4, 0xc}, 0x48) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) close(r2) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x127) socketpair(0x1e, 0x1, 0x0, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) socketpair$unix(0x1, 0x2, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000040), 0x4) sendmsg$unix(0xffffffffffffffff, 0x0, 0x24004044) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 17m55.837472212s ago: executing program 1 (id=4139): bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x15, 0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2bcc99a8c22d2c02, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000000c0)={0x0, 0xc, 0x40}, 0x10}, 0x94) socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000008c0), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="b7020000f53f6314bfa300000000000024020000fffeff7f7a03f0fff0ffffff79a4f0ff00000000b7060000ffffffff2e64050000000000750afaff07cd02020404000000247d60b7030000030a00006a0a00fe0000000c8500000011000000b70000000000002995000000000000001da5ad3548ebb63d18c5071c7e821c9b767ac8308fbcd5c5e4a5ad1065b572c2c9ff215ac60c2ceaea4c0ec908abb6e7325ec1956bd8660bf3664148a2c96752fe2bb328dff1a15750ab9a780001000000000000d4bf20c2bd152d814f01f2cd519e078d4ffab418e4682b2aec5e4a35629e8ef040c50287c37a7f4182f32333b08c6e497687e10a4daea5cac0ceafdbb126eb02a1f5104d16ddb64963d84d91814cd5817e0b8f6f5e6ee7a39e180b5a18ed786b782ab1321ea5e82ae5ba2c42a5e23ea6253d5df768d0cb9f35e4f41a6211e52bb3598e9b5d4f22d8c19f958e8b34de35949a7a48ce18799ee53da177a81ea65e652c1d71b7ee86a75b0100000042127a8f84538a9a311c757f7169f006f3f5c95177fbd0b14b36259e2905ef911785c88a16aae46084d676d8ef8aa6ecc2d32e3f4ee367c5a769c0a606636c9f4a4413c098f4fcc96623b7c373b0ef04d55b846b094bf97e2ef5987b6e09a6a7cab79bffda141f65e7d9ebe3be70c436432b70a80cce69df30d3d67d84ccf3f9db9b690111de2ddc4b153c989ef100bbf76063d3f6ffffb73d70e9c3d7b90aecf48e7565efff2dbbb512218c98442406333c890923a797e00b75481739952fe87fde27ce81893f54ec0ea8e792414f639bc9ce1fea3f6ac0d7025759d4b45576c205c70631e8ad585951950e521f4e210b6494e3c52d927195737945cc03d5668483151710de246420a1b6c55b73876a6ed7fd0d9338923789a1edcd8043fe83919088383268324a25df14010c8ed6b8d43400eaa00ff9bc46e1cfecbdc0e451ac53b409d04544d3a7edd4d447d2fb431e226ae182b8dcc86fe09b404e0b7c723d3b19c3dc382fa91fb0fb8f9f3f13296bb1758b24aad0922091d49e2bc408a5a37deee7a60b903d2d9fe9d451cafcc8dc389671c2d08b6e264150a6b9445b00cee4585af04fa69e0380be0d66649dcf3bf8a906b029faca75ce34c41aec7aa86e596119109ea8b3f7c65c902499227c087301643baab1c95bb22cedd913b22dcaa197ccc34586dc50bd9f4628e3e77a0de32e356521df06f995cb57f97052fc4158250ccecfb67ea8faf509593fadc7eafb613327b052397af1ede94d87590ce90a0a7579766f0e5eb09d38ac46e99e7ec4fcd3cb0b1a8c531724d5ef6b334803cedaa9cedf16dc3af6e0b67f62a83a256474c97c925d9d447175b535c87dbdeb0dcca5303eed6689ea91e1665c691df736368dde47e6672e93a314c5f60e7b68c2242bd0f0d8c66449d8687dcf2d0f76668b2b9bf8b32b99b7daf34b2d825d192ade90a1162acfe9749d516d014cef5f99126324ea02baea5808c430985749901b09e4902a6f5addc0103756b894418e4591c624a9b206abbfb888d413d923b0d7c9d997d6d8e64787c4d397f57a15b6e0b4212b6cb55b9c207bbe08f483b1bea05f41b9a1d3af087047c568ae6ebfc0bb5ec10b6290dc757a4903a88fb2c035b2349b6d2f0c051b8b7718384eebd5fc19928cea713ff09e179c308fbe9bd64374d96ef2447a2a4af5ca0c39e7ca2e801e57560a55e9cfa095cf3f74398219ad1030a79517a88de7596429a20793e12616aa32b3e720c6521fbe93963e9536d16f3db211fca7dd99c0a0125ff8ef534b93dcb34e1da2c008a9f2a29e30823bf0ec3639cadaf9be9608358e1e5ab17eea477b1754f78f45468c9568471667f82f5e250b979b9f2bd0d1b6bc03d11811ac6eec9a3ecd9e3c3299ee5eb3c6cac8fbd06514b7ee743ece79c04566d02a08fd5fcabbab3d129c0cced3ce11dafa380700000000000000c114d0b423e64c6157fac5e4e2168f33541daeff9983d0e488a78bef538f870b84798272b2101e0abf1cd64500b79e01e11d727389653bd80a39d5bbe2e23d2f5ff10047423429981bd9b4ce680e174c266391e3e7689452654e5cd5ada6e025327a1942b5a068f15fa58eaa267d4e0881783dddbdd777f8be0824ffdf6d06c621880dbbe9534f15e8c2e364d3ec67deb6ab9f2a0f03212972dbd38500000008173553a67be48633103809eee0be51d67d7ce230b389607b4c3b18da1c48f3180f2e0d79e54565fdd9a099b5b5ba2761905b88b7cbfc39c35dd153609da3da263438f12769602c2195245ff83e249119d4f6cabfbdef84ada19ef4a67ed66d7043036515d0be5a231f99e71aba5d5ae04676eff3e85f0844c41bbcfde7a931d1ec55c01f703bfd1b97756bfe55a91f6b379f34a018906339771157c66dbd7471d1beec7f029ef552cf5e92a1a0db21b59355763967ce26a577bc514b6d22a09c385c5ba6caf524e1688fc0f29f8bb35ae7bc8eb5ba51aebdf7d972c3267cedbe77ed70d9c539bc455a6f88b39196c8a224b0acf4d796fea59a07baa34cc270fb096ef330fbebdf872d7d0bc4f9a963355c554abc5cdb91464faabcd09cd9a53f5d1b2ea7e96f428f7cd6735c19c61dc9942d30bf29ef85ed01c2fcd6060aa40eeff971477b4fde48507b7bad95a496540adff7e4a72fd1f94d7c703ab1525c946c54e0da3d7ebfcc8cea2e84c3b310aaea5a1627df898c00a9aaf2d88a36afa4c5b1816384310600001c33125ad7f7970beeb256aec06e39fc6c66544e1d1dc5fea4b68a82e3568ca30aea9a1d097f06f11dc362f4bae5ef57c67686a15855cd351bf26f40fb1348cfce79897682228e6d9643530c81bab27bf7b1c4a76a5be180bb830cf06827c3f38a9c9c580c732c30aaceda78b0297de35a922b1375b129655beb31899e26052cc216f832fdb0a0015f93c9cff77f59cda1ec5f3e358848756cebb074266a47e39ae26e80e8c65aaf73c24925458520a9ca98760d1005c9f81846459ae6d5baa4f02807939ddc29c3520f7c58ed9bc5a569c7a1bc33cf4f330a18276ffb4550b9166c3939e8041094bec034aa0ec6638b74fe34f0f1ec6903a1135808d5d8d26c9203c3f87e66c407b7c5c0888d4558dd657cc0213efad68e76fdd7b23e68064fd4b271ed79c50abacdd2871b0c1f8c971df59a5a1901ddf804bed43e391f882d2a45c51cdbba86b2a1b7c0c4923642a731ea4dcbad2b6ebbebe787a8e28e781d75beee924b3b1e390750f316648133922c021f98fd2d5d71a7a3679397ef6cf432837b7e264831ec01c4c3146ba0caac3b13d55945ec00e978a1c1712cd51187936200606c9cd6877b2f72125295c54721f8e15df2ae282a8becb99a726fd92acc92141e1f574b4b0b3c992a61af3372d0d9217776b1a42cd2cee816a70bf1ddd69b590d53e28ba356e74b38e23e50d898e95cdc7cc809e462c884b53f672aab1411ecfd4c91e7a9782fc6763f0efd4bcbaf1fc3a00000000000000000000000000000000500000000000000000000000048e510340087caf22439d5304bd704a6a78a512269a9b1cbd13bea78c807bbc73853ae187cbb768673e9d1bf74a3b0a6c234accd8506adf314f4c5e08174540b69d3c0da660052b43b86baf49e7ac64d9c21598b1e01dc1e1b5a53626b090496dbf7af441e397016c3c094d5c91ffe0a7ceacfd225ed9a6c905f79ad7052747dd6cceef4c310e0e935311118bc6bf0e5ca6c7cca7d5c03be570308da8a40578b4db14961fbccf6e2f2d56e9509c434126515b56d032e20c12e830d1bc64826fc9b318da5911e466878dbb81edeff69363fb75af5cd80536f14d2eaa7764db23acdbd394bbbbccfd8b129258bb0a93cee1d44f8665172c06933d20f184b78b435462c52a85149451ffd564c56a7cbf11a1127c77242915e43b2bc"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) 17m54.668478921s ago: executing program 1 (id=4146): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socketpair(0x1d, 0x2, 0x2, &(0x7f0000000300)={0x0, 0x0}) (fail_nth: 3) 17m54.00547193s ago: executing program 1 (id=4150): bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000ffffffff00000000000000001801000020646c2500000000002020207b1ad8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000300)=r4) write$cgroup_devices(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 17m38.747297328s ago: executing program 32 (id=4150): bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000ffffffff00000000000000001801000020646c2500000000002020207b1ad8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000300)=r4) write$cgroup_devices(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 34.832450187s ago: executing program 2 (id=9636): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 34.712287034s ago: executing program 2 (id=9637): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="b7020000f53f6314bfa300000000000024020000fffeff7f7a03f0fff0ffffff79a4f0ff00000000b7060000fffffff02e64050000000000750afaff07cd02020404000000247d60b7030000030a00006a0a00fe0000000c8500000011000000b70000000000002995000000000000001da5ad3548ebb63d18c5071c7e821c9b767ac8308fbcd5c5e4a5ad1065b572c2c9ff215ac60c2ceaea4c0ec908abb6e7325ec1956bd8660bf3664148a2c96752fe2bb328dff1a15750ab9a780001000000000000d4bf20c2bd152d814f01f2cd519e078d4ffab418e4682b2aec5e4a35629e8ef040c50287c37a7f4182f32333b08c6e497687e10a4daea5cac0ceafdbb126eb02a1f5104d16ddb64963d84d91814cd5817e0b8f6f5e6ee7a39e180b5a18ed786b782ab1321ea5e82ae5ba2c42a5e23ea6253d5df768d0cb9f35e4f41a6211e52bb3598e9b5d4f22d8c19f958e8b34de35949a7a48ce18799ee53da177a81ea65e652c1d71b7ee86a75b0100000042127a8f84538a9a311c757f7169f006f3f5c95177fbd0b14b36259e2905ef911785c88a16aae46084d676d8ef8aa6ecc2d32e3f4ee367c5a769c0a606636c9f4a4413c098f4fcc96623b7c373b0ef04d55b846b094bf97e2ef5987b6e09a6a7cab79bffda141f65e7d9ebe3be70c436432b70a80cce69df30d3d67d84ccf3f9db9b690111de2ddc4b153c989ef100bbf76063d3f6ffffb73d70e9c3d7b90aecf48e7565efff2dbbb512218c98442406333c890923a797e00b75481739952fe87fde27ce81893f54ec0ea8e792414f639bc9ce1fea3f6ac0d7025759d4b45576c205c70631e8ad585951950e521f4e210b6494e3c52d927195737945cc03d5668483151710de246420a1b6c55b73876a6ed7fd0d9338923789a1edcd8043fe83919088383268324a25df14010c8ed6b8d43400eaa00ff9bc46e1cfecbdc0e451ac53b409d04544d3a7edd4d447d2fb431e226ae182b8dcc86fe09b404e0b7c723d3b19c3dc382fa91fb0fb8f9f3f13296bb1758b24aad0922091d49e2bc408a5a37deee7a60b903d2d9fe9d451cafcc8dc389671c2d08b6e264150a6b9445b00cee4585af04fa69e0380be0d66649dcf3bf8a906b029faca75ce34c41aec7aa86e596119109ea8b3f7c65c902499227c087301643baab1c95bb22cedd913b22dcaa197ccc34586dc50bd9f4628e3e77a0de32e356521df06f995cb57f97052fc4158250ccecfb67ea8faf509593fadc7eafb613327b052397af1ede94d87590ce90a0a7579766f0e5eb09d38ac46e99e7ec4fcd3cb0b1a8c531724d5ef6b334803cedaa9cedf16dc3af6e0b67f62a83a256474c97c925d9d447175b535c87dbdeb0dcca5303eed6689ea91e1665c691df736368dde47e6672e93a314c5f60e7b68c2242bd0f0d8c66449d8687dcf2d0f76668b2b9bf8b32b99b7daf34b2d825d192ade90a1162acfe9749d516d014cef5f99126324ea02baea5808c430985749901b09e4902a6f5addc0103756b894418e4591c624a9b206abbfb888d413d923b0d7c9d997d6d8e64787c4d397f57a15b6e0b4212b6cb55b9c207bbe08f483b1bea05f41b9a1d3af087047c568ae6ebfc0bb5ec10b6290dc757a4903a88fb2c035b2349b6d2f0c051b8b7718384eebd5fc19928cea713ff09e179c308fbe9bd64374d96ef2447a2a4af5ca0c39e7ca2e801e57560a55e9cfa095cf3f74398219ad1030a79517a88de7596429a20793e12616aa32b3e720c6521fbe93963e9536d16f3db211fca7dd99c0a0125ff8ef534b93dcb34e1da2c008a9f2a29e30823bf0ec3639cadaf9be9608358e1e5ab17eea477b1754f78f45468c9568471667f82f5e250b979b9f2bd0d1b6bc03d11811ac6eec9a3ecd9e3c3299ee5eb3c6cac8fbd06514b7ee743ece79c04566d02a08fd5fcabbab3d129c0cced3ce11dafa380700000000000000c114d0b423e64c6157fac5e4e2168f33541daeff9983d0e488a78bef538f870b84798272b2101e0abf1cd64500b79e01e11d727389653bd80a39d5bbe2e23d2f5ff10047423429981bd9b4ce680e174c266391e3e7689452654e5cd5ada6e025327a1942b5a068f15fa58eaa267d4e0881783dddbdd777f8be0824ffdf6d06c621880dbbe9534f15e8c2e364d3ec67deb6ab9f2a0f03212972dbd38500000008173553a67be48633103809eee0be51d67d7ce230b389607b4c3b18da1c48f3180f2e0d79e54565fdd9a099b5b5ba2761905b88b7cbfc39c35dd153609da3da263438f12769602c2195245ff83e249119d4f6cabfbdef84ada19ef4a67ed66d7043036515d0be5a231f99e71aba5d5ae04676eff3e85f0844c41bbcfde7a931d1ec55c01f703bfd1b97756bfe55a91f6b379f34a018906339771157c66dbd7471d1beec7f029ef552cf5e92a1a0db21b59355763967ce26a577bc514b6d22a09c385c5ba6caf524e1688fc0f29f8bb35ae7bc8eb5ba51aebdf7d972c3267cedbe77ed70d9c539bc455a6f88b39196c8a224b0acf4d796fea59a07baa34cc270fb096ef330fbebdf872d7d0bc4f9a963355c554abc5cdb91464faabcd09cd9a53f5d1b2ea7e96f428f7cd6735c19c61dc9942d30bf29ef85ed01c2fcd6060aa40eeff971477b4fde48507b7bad95a496540adff7e4a72fd1f94d7c703ab1525c946c54e0da3d7ebfcc8cea2e84c3b310aaea5a1627df898c00a9aaf2d88a36afa4c5b1816384310600001c33125ad7f7970beeb256aec06e39fc6c66544e1d1dc5fea4b68a82e3568ca30aea9a1d097f06f11dc362f4bae5ef57c67686a15855cd351bf26f40fb1348cfce79897682228e6d9643530c81bab27bf7b1c4a76a5be180bb830cf06827c3f38a9c9c580c732c30aaceda78b0297de35a922b1375b129655beb31899e26052cc216f832fdb0a0015f93c9cff77f59cda1ec5f3e358848756cebb074266a47e39ae26e80e8c65aaf73c24925458520a9ca98760d1005c9f81846459ae6d5baa4f02807939ddc29c3520f7c58ed9bc5a569c7a1bc33cf4f330a18276ffb4550b9166c3939e8041094bec034aa0ec6638b74fe34f0f1ec6903a1135808d5d8d26c9203c3f87e66c407b7c5c0888d4558dd657cc0213efad68e76fdd7b23e68064fd4b271ed79c50abacdd2871b0c1f8c971df59a5a1901ddf804bed43e391f882d2a45c51cdbba86b2a1b7c0c4923642a731ea4dcbad2b6ebbebe787a8e28e781d75beee924b3b1e390750f316648133922c021f98fd2d5d71a7a3679397ef6cf432837b7e264831ec01c4c3146ba0caac3b13d55945ec00e978a1c1712cd51187936200606c9cd6877b2f72125295c54721f8e15df2ae282a8becb99a726fd92acc92141e1f574b4b0b3c992a61af3372d0d9217776b1a42cd2cee816a70bf1ddd69b590d53e28ba356e74b38e23e50d898e95cdc7cc809e462c884b53f672aab1411ecfd4c91e7a9782fc6763f0efd4bcbaf1fc3a00000000000000000000000000000000500000000000000000000000048e510340087caf22439d5304bd704a6a78a512269a9b1cbd13bea78c807bbc73853ae187cbb768673e9d1bf74a3b0a6c234accd8506adf314f4c5e08174540b69d3c0da660052b43b86baf49e7ac64d9c21598b1e01dc1e1b5a53626b090496dbf7af441e397016c3c094d5c91ffe0a7ceacfd225ed9a6c905f79ad7052747dd6cceef4c310e0e935311118bc6bf0e5ca6c7cca7d5c03be570308da8a40578b4db14961fbccf6e2f2d56e9509c434126515b56d032e20c12e830d1bc64826fc9b318da5911e466878dbb81edeff69363fb75af5cd80536f14d2eaa7764db23acdbd394bbbbccfd8b129258bb0a93cee1d44f8665172c06933d20f184b78b435462c52a85149451ffd564c56a7cbf11a1127c77242915e43b2bc"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) 34.384947053s ago: executing program 2 (id=9639): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=r0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x19, 0xf, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000028000000280000000200000000000000000000030000000000000000000000000000000000000000000000010502"], 0x0, 0x42}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000540)={r0, 0x58, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x1d, 0x8, 0x3, 0x4f0, 0x68, r0, 0xfffffff7, '\x00', r4, r3, 0x0, 0x2, 0x3}, 0x50) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000"], 0xfdef) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r6 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x12, 0x10, 0x0, &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f00000005c0)=r6, 0x12) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x10020, 0x0, 0xc2ba}, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x8, 0x9, 0x6, 0xfd, 0x0, 0x400, 0x4000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x2, @perf_bp={&(0x7f0000000300), 0xd}, 0x10a030, 0xb446, 0xd97, 0x7, 0x5, 0x9, 0x5, 0x0, 0x1, 0x0, 0x53}, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) 31.164999062s ago: executing program 2 (id=9645): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$kcm(0x2, 0x3, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x104007, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) r2 = socket$kcm(0x21, 0x2, 0x2) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0x602f, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff200000002121000aac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYRESOCT, @ANYRES8=r0, @ANYRES16=r2], 0x48) socket$kcm(0x11, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100"], 0x128}, 0x0) recvmsg$unix(r3, 0x0, 0x0) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r6, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 30.759021986s ago: executing program 2 (id=9652): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x5}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x5, 0x4, 0x400, 0xf}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0xfd, 0x0, 0x0, 0xd2, 0x0, 0x0, 0x60300, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x8000, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x10}}], 0x10}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000010100000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000900)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf00d7815e381ad6e706033a0093b837dc6cc01e32efaec8c7a6ec08123d000200354001060400446b9bbc7a46e3988285dcdf12f21308f868fece01951fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff2", 0x87}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r3, 0x0, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r5 = socket$kcm(0x29, 0x0, 0x0) sendmsg$kcm(r5, &(0x7f0000000740)={&(0x7f00000006c0)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha512\x00'}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000007c0)="d18fcd2b30ae44ff426995584db5fd758d838863ef9f511106ff329543e4e6a40a597ca333f0876a62ff85068e9420a1562da092728ebdbca23e53dcbb483e130f1b44be2065b71be23f9ce7b3f43d7b9e9d0b1a3377b06a4b1a1baff2bb171f73eff8fa7076fd4a9fd194cf9dc3a6df6a8867b85eca6f489c2d05a3c39c0979", 0x80}], 0x1, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x2d8}, 0x8000) openat$cgroup_ro(r4, &(0x7f0000000580)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r1, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000040)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x3, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x0, 0x1e, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0x2a, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0x0, 0x8, &(0x7f00000002c0), &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x7d, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x1b}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) 26.009214724s ago: executing program 3 (id=9691): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000008b000000050010000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000040), 0x0}, 0x20) r1 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r1, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x14, 0x0, 0x7, {[@noop, @ssrr={0x89, 0x2}]}}}], 0x18}, 0x0) socket$kcm(0xa, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x2, 0x0, 0x9, 0x0, 0x0, 0x7fffffffe, 0x1009, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x3}, 0x2842, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xffffbffe, 0x0, 0x8}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000000000071107b000000000066710000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0x8, 0x10, &(0x7f0000000040), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='memory.events\x00', 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(r5, 0x800454e0, &(0x7f0000000200)=r3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="168e43acc18169514039c5bcdb7a", 0x0, 0xc699, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 25.136933975s ago: executing program 3 (id=9697): perf_event_open(0x0, 0x0, 0x6, 0xffffffffffffffff, 0x3) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x1}, 0x50) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe2, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400001, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x0, 0x4}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) 24.783859216s ago: executing program 3 (id=9700): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff0000}, 0x48) 24.174756052s ago: executing program 3 (id=9703): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) (async) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000008c0)="1800000068006bcd0200"/24, 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4000024) (async) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000002b00)={r2, 0x20, &(0x7f0000002ac0)={0x0, 0x0, 0x0, &(0x7f0000002a00)=""/181, 0xb5}}, 0x10) (async) socketpair(0xf, 0x6, 0x80000006, &(0x7f0000000040)={0x0, 0x0}) 23.920440627s ago: executing program 3 (id=9707): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xd, 0x6}, 0x1101, 0x0, 0x0, 0x8, 0x6, 0x4080000, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffdfffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)}, 0x0) r2 = socket$kcm(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1dc}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0xf, &(0x7f00000002c0), 0x161) sendmsg$inet(r2, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x4000000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000001c0)=r3, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb8100180000000000000024000000040000000a00000008000000000000060400000008000000010000840000000004000000010000000000ffffff2f615f5f002e2e5f00"], &(0x7f0000000700)=""/149, 0x46, 0x95, 0x1}, 0x28) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8916, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000800)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0xa, 0x6, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r4, &(0x7f0000000100)={&(0x7f00000004c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)}, 0x4008804) sendmsg$inet(r4, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, 0x0}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYRESHEX], 0xfe33) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0xff, 0x0, 0x0, 0x5, 0xe0202, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x100c1, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x400000002, 0x0) 23.482458662s ago: executing program 3 (id=9710): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)="5c0000002e006bfb9e3be35c6e17aa31076b876c1d0020007ea608640400000000000c00040000001fffffff300017d34460bc24eab556a705251e618294ff0051f60a84c9f4d4e786a6d0001000000e4509c5bb5b64f69853000009", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f0000000100)=r4, 0x4) perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc002, 0xac5d, 0x0, 0x7}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a40)={r4, 0xe0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540), ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f00000001c0)=[0x0], &(0x7f00000007c0)=[0x0, 0x0], 0x0, 0xc1, &(0x7f0000000800), 0x0, 0x10, &(0x7f0000000880), 0x0, 0x0, 0xc6, 0x8, 0x8, &(0x7f0000000900)}}, 0x10) ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f0000000b40)=r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) sendmsg(r6, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x20009000) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac0090000008684e08b04000200000000000064bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd", 0x5c}], 0x1, 0x0, 0x64, 0x1f00c00e}, 0x4000000) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x7, 0x8, 0x4, 0x0, 0x80008000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000400)=@ethernet={0x307, @remote}, 0x80, 0x0}, 0x0) r9 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r9, 0x84, 0x9, &(0x7f0000000380), 0x98) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x16, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18040000000000000000000000000000180000002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], &(0x7f00000005c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 8.044518699s ago: executing program 33 (id=9710): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)="5c0000002e006bfb9e3be35c6e17aa31076b876c1d0020007ea608640400000000000c00040000001fffffff300017d34460bc24eab556a705251e618294ff0051f60a84c9f4d4e786a6d0001000000e4509c5bb5b64f69853000009", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f0000000100)=r4, 0x4) perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc002, 0xac5d, 0x0, 0x7}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a40)={r4, 0xe0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540), ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f00000001c0)=[0x0], &(0x7f00000007c0)=[0x0, 0x0], 0x0, 0xc1, &(0x7f0000000800), 0x0, 0x10, &(0x7f0000000880), 0x0, 0x0, 0xc6, 0x8, 0x8, &(0x7f0000000900)}}, 0x10) ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f0000000b40)=r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) sendmsg(r6, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x20009000) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac0090000008684e08b04000200000000000064bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd", 0x5c}], 0x1, 0x0, 0x64, 0x1f00c00e}, 0x4000000) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x7, 0x8, 0x4, 0x0, 0x80008000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000400)=@ethernet={0x307, @remote}, 0x80, 0x0}, 0x0) r9 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r9, 0x84, 0x9, &(0x7f0000000380), 0x98) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x16, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18040000000000000000000000000000180000002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], &(0x7f00000005c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 3.667657575s ago: executing program 5 (id=9777): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015000200142603600e1208000f", 0x2b}], 0x1}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000000, 0x1}, 0x0, 0x0, 0x8, 0x1, 0x4000003}, 0x0, 0x1, 0xffffffffffffffff, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) close(r3) socket$kcm(0xa, 0x3, 0x87) ioctl$PERF_EVENT_IOC_QUERY_BPF(r3, 0xc008240a, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="14000000", 0x4}], 0x1}, 0x4000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r5) r6 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r6, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0xd, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r7}, &(0x7f0000000040), &(0x7f0000000140)=r5}, 0x20) recvmsg$kcm(r6, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x2000) r8 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d80000001c0081044e81f782db44b9040a1d08020a000000401296a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r9, 0x1, 0xf, &(0x7f00000002c0), 0x4) r10 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r3, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa, &(0x7f0000000540)=[0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x54, &(0x7f0000000600)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0xba, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000004c0)={@ifindex=r11, 0x39, 0x0, 0x8, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) write$cgroup_subtree(r10, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001a00599c6d0e000091d028ef80"], 0xfe33) 2.476813235s ago: executing program 0 (id=9779): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x40000, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x840) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x55, 0x1, 0x2, 0x0, 0x0, 0x3ff2, 0xa892, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b73, 0x1, @perf_config_ext={0x1, 0x4}, 0x14105, 0x32, 0x6, 0x8, 0x2, 0x8, 0x3, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) recvmsg$unix(r2, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r5 = socket$kcm(0xa, 0x2, 0x88) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000280)=@o_path={&(0x7f0000000000)='./file0\x00', r4}, 0x18) setsockopt$sock_attach_bpf(r5, 0x1, 0x41, &(0x7f0000000040)=r4, 0x4) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0xa9028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0xa, 0x2, 0x3a) r7 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e3e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x1, @perf_config_ext={0x2, 0x7fff}, 0x11400, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, r7, 0x8) perf_event_open(0x0, 0xffffffffffffffff, 0x40000000009, r7, 0x0) socket$kcm(0xa, 0x6, 0x0) sendmsg$kcm(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000780)="80005b020eaa4da2", 0x8}, {0x0}], 0x2, 0x0, 0x0, 0x900}, 0x0) sendmsg$kcm(r5, &(0x7f0000000580)={&(0x7f00000001c0)=@in={0x2, 0x4e22, @local}, 0x80, 0x0}, 0xc0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e00000000eb15000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002060207b1a"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x3, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r8) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2420, 0x3, 0x0, 0x3, 0x3, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) 2.474313575s ago: executing program 5 (id=9780): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x10001) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0xd) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x1ff}, 0x100c, 0x7, 0x0, 0x2, 0x0, 0x7, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x10000000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001780)="95980abc48b9451136833b9919f470abd42e036e59e122ed02be6a9423f0dcf1973e3b17dbb261d9b68b8ebfa6aa79ebc9a4d78d52163605aebf2e1a21e5dc302eaba6756038847e562e22e6f85663a31596ed6db4852f7c93ea9efdd0424f77f6cd1ae226574e88f4ccedc93a1163858c99dde15161341afb6247aa87ab8051ef65b1c25473682560df7d53797395d2bda0aa65dbfd126ce3662d2fa76820b163e2facfc7a69057e334c7ea3c09e0dd1e97a91c75034987095ec9a59b31927097183caee2a86a67fcc0077dbe2a4b7076fb577d510d8d82c58a648a5f5e6ce3ba6eb0576047e2cba517f63c88a1e01ce36a03e8c62f6125c0858c1e72c92d91102c8d9bda23e9c71824c7e3f8425155ab76ce730f27a20e52eff4ae5151e32477fb1f76485a5cc3ec2ca1a8498398cfef078de68178f51adc381dba2338ba8cc91714d3bdc35e50bbba2a0bf39a02d72a976c5bc0bb6d7b56db10503757b7769d595615e9c81011313c5fc3600f6de0943041bc2286eda921de9e617f9f4080df2a649edf220b1c570d11f747a595f1234e566b8ddd22c9e4c5cd87dc004958dc06864980a215ae70d662272876242397e2ad3686917ddd7eb16f76c8d9a68987ecdc454eb4fc533b75a0c6829aa04460b4c58d23e0dc62cf58d9b9d62fde2f0a8ec7eb5a4133a2ca473c0ef41fff1d6e1adc59bedd6478df0f04c17d71188d43edd5d96ace9ba12573b46a306e41c4d75c489aa62144c3a036b2ed1815012a7e650507a60a7079a46836c8188218dcd5320aed95f4cc9ce9b4c3a1c68120491eb53d1fa62489257657770b36042f59e8f2db49281f87e8a8e6907429428198703554b51506cca4ff91752944a8028ba5a1c7b0f70bb512d09cd082b33d01041ed0481c6f8460a335af9d440bf88a0a25b6b7b6b41628badb852832dd24d6c39dcac4b6a4115b79f807abc5de3fa45eefca733bcfb01ea8990fd4336977ed1af0b1c4d38dd41a72a96c7aa9882c5f332365ce2ea782cff8b68320277203ec90aa127619008c053c424cab522c6b029bcfb5f4a3e86cad1708f776e47614d0630069eaa3004f3448ada6fa40ca5d4f3624ec094bddb456a4ffee184f9bc2dfd9dc130b2b4311894084a8b4701864867826d6e35714338d360408f295268565d24b85896a3578c072b4e0f04c42a69d03b4229d034f074a49aa0276ead564963f86768db56d12e7a00c6fc988b67b982c0e3ea863dcb7141f93f440c77b28cc7a87c4170f0b53cea23f724519064c0cf00cacb6c995649e3ddb536ac07dc58553213a8a757a1366e47506911bcde0fb005b09268471128db2550857e31c95b641b846df5d03dfc14fe4f8d33442d657824b326ee75a7b7e3c5048cdf949c8ad3e5e8703ae51b29e2605c77b67cd08f40fdf007e04f62355ea010fd4875376c4dfa256fe7445fd1b1eee6b1f9f5a9a386745ad9f71357e2cb3f91c1dc31a71e7d623013158ffd9089119a0b59bea3c07408da1a12e0b1f7358985d618aa0f7939006edc23e9848d6587d4116e7b425a2d4ed27df484899f19f81b8a16ebe5a34e0f08afb08d2eaa96fbc5f6da75816286d9cce1034d6b1d688d7be5de29eb8a6179213464f6e4c31b887c9bc58499305a1ac91b2ad04d7efb85603130b9a26962ba649cb5ced1e891494535ea1c5ad1f6d45fc84b39502fb0fca057aba5e4e786b35afbe3c8b3eb68d43ca329b8b1f215be27ff6d668b9f291ecb57b867244db7652934edd6cba1fb4ebed8cd9f2d3d2d3f5153eb8c4796c7aab2ef9588ba3cb91daa3b72215529c4ef1add5b3c7f7d4b3a91691cd2564a6b42ec29f891648b529190a802d4650f0d61f73c6a5ef79a40b3bf12fd9daced1be1539c8279ed6ccb25204bba2ba115bb5a544b08ef5a2926346fb91aaab465fdf4ff4258dfc8589a23dd8cbdf977ce19e467bf86bcb0d9159cdfad5d8bc288fa95ed5af086a38f00581a7fa544560f25b318b2e76472430ccee756b5a83fb8336c07a5fe3deae66502736fce726c44aa398475055b2382a4a4d434d1a64386834170b3e33055beca5e4d3b1f1c57da2087f948e3136f77a86aade129af39f5d4a818491adc45899a820fa8f022a375b320331ce82d37e34e822095ce4420bf7fa0755ae0a9f7827f30d7f8bb8cb2b5de1803d4ac73887a3269b01282934a304f1564990f2487d398cfa887395ade6b48aad01f7e2606ecb005b87f2daa8c48c401eed6d0f6d9db802923fa0808b79f5d78690a1952f92e6abb2d008b2c610fc5dc57acc0404ba8235ba446fd6a8c6644e4b6e93802835edce4fdd49005ec430dbba643e13ddb3e4b45aff52d4b2c4baa8491370994572787da723d60573b9b88bb99316cf6ddab537b9b0b304a359530077d762140980825478067f44811764cb5c39b50eb0e6191bd4484b1f050da7259484b2964a2ec98974f40788a39b057ac6dc772ce9dc0e0c9af12d80e72558e5143edcdb41c9f9463ad2a794da1aefb235173c69a869a9db31ee664a03cc208c4e66f673b7bfe66df0923321bac73a28e7faf7a815b1f3d9d6593db367eb3048bc89e51c116ad91c0cf05fdc4ea078a03f288869263be51e93aa655e95c778772eabc660e33f70ad18d0f764faf8f3a10580e92d38fb24c14e6af31e04635eed0a9b2d94fcd96d2b4b4b12943a4e7b9210eaf8aac8dd5e06d8d00b8f514e9a4f4e81092e8c82be20a68ad82da38382d0e2123b0e701124ca8162c59017cf6f5ecf69220b71003efb324b5b5f4a0338a3f59d655e9a9223c02c43e617c163b6ab4754a5811c423fe615a921074894b705fa438d1dcf3b344b306e494de896f63705f552be501aa8fc82054bb17c6a5b195f7322bb89a71a217d36bace5924be87f9856cefa1d3b4f61e7e09ca826b0037978c9afccfa464ca41a284f99e5ccfb9bc752b2ea090379db8e8f43053c435b2cc4e36a974ab13f9179cf38913aad27cd10eab5be85b230827ef8ea7698dc280cddcb565d80b337d2da489c38f58da74de4f4722b4dc22bfc2779327c10955b5379b8d7612356668b4bfe0bf7befd9289408cc581993ddba8ecbabb354dd8eb93dbc9076cb44845160460b64a6985b096084a76ba157bdd79b8a158ca1132d34d99c6d26c6f335f83fa2210425af518312891d8e938761729e764444dcf13e710f8668823401f699e6677ed4cc033d00196bddd28f47b8db6e0674bc06a121afca1cc4c098055162ad3609ef0acf6bd3f0c1882b3b0cfb9227fc7b3ce6bdf01ac1ae941dd5baee883f699e0ed72a9095bc4a23e52b992dd9bf482a2794a4d7969633a1150aae9cd18ee669dc") r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) sendmsg$inet(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="1800000072006bcd9e3fe3dc6e080000070900a6ff000000", 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 2.133102285s ago: executing program 5 (id=9782): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x4, 0x7fe2, 0x2}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000006c0)={r0, &(0x7f0000000500), &(0x7f0000000600)=""/155}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000dc0)={r0, &(0x7f0000000d00)="ca05d3ac9fffff5372e48d964f753733971c76e8ed8fb3782303d4102602ce32eecd9d1ed557f29531442a07067428155b4e0a773fcc8e211cd0773c95e60b41d141837fe5f524c175696f3f18e1db2269179f80791e5e5b48f8c1ea800e81", &(0x7f0000000000)=""/3, 0x2}, 0x20) 2.113318866s ago: executing program 4 (id=9783): socket$kcm(0x28, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f00000007c0)={&(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f00000006c0)}, 0x10001) perf_event_open$cgroup(&(0x7f0000000040)={0x4, 0x80, 0xb2, 0x7, 0x3, 0xa, 0x0, 0x9, 0x1c440, 0x9, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x405, 0x2, @perf_config_ext={0xffffffff7fffffff, 0x2}, 0x100608, 0xffffffffffffffff, 0x2, 0x8, 0x10001, 0x80000003, 0xdb7d, 0x0, 0x7, 0x0, 0x1}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0xd) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x1ff}, 0x100c, 0x7, 0x0, 0x2, 0x0, 0x7, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x4) r2 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000001200)={&(0x7f00000002c0)=@abs={0x1}, 0x6e, 0x0}, 0x0) sendmsg$inet(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="1800000072006bcd9e3fe3dc6e0800000709000000000060", 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 1.904369889s ago: executing program 5 (id=9784): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000180)="b90103606908068c3c270040e700009e0ff008001ffff2e1ffff8100632f4305", 0x0, 0x8104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.733163768s ago: executing program 4 (id=9786): syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/mnt\x00') bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)=@generic={&(0x7f0000000140)='./file0\x00', 0x0, 0x10}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0], 0x0, 0x27, 0x0, 0x0, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0xda, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000040)=r0, 0x4) syz_open_procfs$namespace(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x10, 0x1c, &(0x7f0000000500)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1c000000, 0x0, 0x0, 0x0, 0xfffffffe}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1000000}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x0, 0x7ff}, {0x3, 0x3, 0x3, 0xa, 0xa, 0xfff0, 0x1fffffff}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {0x4, 0x0, 0x6}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.732830618s ago: executing program 5 (id=9787): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x700000000000000}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000480), 0x2, 0x0) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10812, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[], 0x50) r1 = syz_clone(0x1004800, &(0x7f00000002c0)="a8fd94df48700a3bc9584a5a5e5e5cca5e59a5d299a5e3ba2c4ba40c133ac4f4cff8bfd6cdb124dc6963906e794f0def774264420df88904ccce24a4395e06e1fbf2a161d266aa464135b16f4aa8a88459c1f8633a4ded0df8baf8fba7a4f0b2ed14e6840565281ae6044686c087d6afbfae3cc2be62216a66f88910185ca88519634304c8692bffce301e1380", 0x8d, &(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400)="4cebbeb8fb0f08d996acee7b00405ecb0058d8ba935d5bc97ae6f7e4cb792fc4801b017e9991aafed3a4c55b5925fa") syz_open_procfs$namespace(r1, &(0x7f00000004c0)='ns/user\x00') r2 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000001f80)={&(0x7f0000001d00)=@l2={0x1f, 0x6}, 0x80, 0x0}, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x4000000) socketpair$unix(0x1, 0x5, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/time\x00') r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b40)={0xffffffffffffffff, 0x0, 0x9af, 0x0, &(0x7f0000001980)="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", 0x0, 0x0, 0x0, 0x72, 0x0, &(0x7f0000000a80)="3cd7c718e87733a4a04ff9924629e592af9a06b6515ed956f133696f5e1f25f28b5f699b5a48974f00c66cb9c88687910e8038db3dfd762bd648e2728303d061b3e1491f03caf7020afe669e12ed5ba3f3190ffd80d690fba1dcb7aa8d5d977703b3358612e7e0f0d397e9f4069ff6a9b7d2", 0x0, 0x2, 0x0, 0x44b}, 0x50) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) 1.529224371s ago: executing program 4 (id=9788): socket$kcm(0x10, 0x3, 0x10) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x45a1, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61cd, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'batadv_slave_0\x00', 0x1}) socketpair(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8924, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x402000, 0x0) ioctl$TUNGETDEVNETNS(r2, 0x54e3, 0x0) socket$kcm(0x2c, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000028000000280000000200000000000000000000010500000008000000000000000100008500010000000000000100000000000001"], 0x0, 0x42}, 0x28) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x1, 0x2, 0x2}, 0x50) close(r3) 1.318678203s ago: executing program 0 (id=9789): r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)=@generic={&(0x7f0000000140)='./file0\x00', 0x0, 0x10}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0], 0x0, 0x27, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f00000003c0), 0x0, 0x0, 0xda, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r2, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x41, &(0x7f0000000040)=r4, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@bloom_filter={0x1e, 0x5, 0x400, 0x3, 0x1104, r0, 0x10, '\x00', r1, r4, 0x5, 0x2, 0x2, 0xd}, 0x50) socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x10, 0x1c, &(0x7f0000000500)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1c000000, 0x0, 0x0, 0x0, 0xfffffffe}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1000000}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x0, 0x7ff}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {0x4, 0x0, 0x6}, {0x18, 0x2, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x5}}, {0x95, 0x0, 0x0, 0x1000000}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.217011279s ago: executing program 5 (id=9790): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)="5c0000002e006bfb9e3be35c6e17aa31076b876c1d0020007ea608640400000000000c00040000001fffffff300017d34460bc24eab556a705251e618294ff0051f60a84c9f4d4e786a6d0001000000e4509c5bb5b64f69853000009", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f0000000100)=r3, 0x4) perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc002, 0xac5d, 0x0, 0x7}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a40)={r3, 0xe0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540), ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f00000001c0)=[0x0], &(0x7f00000007c0)=[0x0, 0x0], 0x0, 0xc1, &(0x7f0000000800), 0x0, 0x10, &(0x7f0000000880), 0x0, 0x0, 0xc6, 0x8, 0x8, &(0x7f0000000900)}}, 0x10) ioctl$TUNSETIFINDEX(r3, 0x400454da, &(0x7f0000000b40)=r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) sendmsg(r5, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x20009000) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac0090000008684e08b04000200000000000064bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd", 0x5c}], 0x1, 0x0, 0x64, 0x1f00c00e}, 0x4000000) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x7, 0x8, 0x4, 0x0, 0x80008000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000400)=@ethernet={0x307, @remote}, 0x80, 0x0}, 0x0) r8 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r8, 0x84, 0x9, &(0x7f0000000380), 0x98) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x16, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18040000000000000000000000000000180000002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], &(0x7f00000005c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 1.20337665s ago: executing program 4 (id=9791): socketpair(0xa, 0x2, 0x5, &(0x7f0000000000)) 1.014884101s ago: executing program 0 (id=9792): r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg$unix(r0, 0x0, 0x240000d0) 712.857389ms ago: executing program 0 (id=9793): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x4, 0x7fe2, 0x2}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000006c0)={r0, &(0x7f0000000500), &(0x7f0000000600)=""/155}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000dc0)={r0, &(0x7f0000000d00)="ca05d3ac9fffff5372e48d964f753733971c76e8ed8fb3782303d4102602ce32eecd9d1ed557f29531442a07067428155b4e0a773fcc8e211cd0773c95e60b41d141837fe5f524c175696f3f18e1db2269179f80791e5e5b48f8c1ea80", &(0x7f0000000000)=""/3, 0x2}, 0x20) 604.817905ms ago: executing program 2 (id=9658): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="14000000040000000400000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r1 = socket$kcm(0x25, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)}], 0x1}, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000080), &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x10, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000000f000000bf09000000000000550901000074f6967d00000000000000180100002020702500000000002020207baaf8ff00000000bda100000000000027010000f8ffffffb702000008000000b7030000000000002500000006000000be91000000000000b502ecffffff00008500000005000000b70000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = socket$kcm(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(r4, 0x88, 0xa, &(0x7f0000000000), 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0x3100, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 456.724533ms ago: executing program 0 (id=9794): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r0}, 0x8) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r3, 0x4) sendmsg$inet(r2, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) 241.121966ms ago: executing program 4 (id=9795): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000800)=@bpf_lsm={0x1d, 0x10, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x53}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}]}, &(0x7f0000000040)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000780)={0x1, 0x5, 0x3, 0x11c}, 0x10, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000007c0)=[0x1, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff]}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000009c0)={@fallback, 0xe, 0x0, 0x6, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, &(0x7f0000000980)}, 0x40) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="b7020000b02300ffbfa30000000000000703000000feffff7a0af0ff2300000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001010404000011000000b7030000000000006a0a00fe000000008500000032000000b700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000cb450063dedba767ade51f7f1f66acd19100002000000000000000ff7f0000b52f17cee19d0001000000000000000000cb04fcbb4e4d0b9bafe3ba431351a58a885ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e85cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fc4051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5df11cc2afb53611cc32a790bc0b80e80eae8f5e64be2c9d2d29db3d36dd0cf8f79a015c7bd3f15aa6aadbeab2a01685108e61aa00000000000000000000000000c67c6c6a06e828e5216f601b19db1af1b5d356d0f062137d866d11be4ba3f0151fdbbd4e97d62ecc645e143a60f10800000000000000826151e3b42bcae95239ef5ca2a730a00c87c493db0300e63fda97a296820000000001000000eecc952a3fd2c46f3c1cde71a19d1a2982492a210e00d2bfea3b8d188df2eff8d56aaae7d32a2e180022537395019f02ec4b85f6aad7faca088de9b26797a8446b16c28d85f225992dbdd5bb01ba51508951c7a7d6ca0916c3a12912715649c2b1c7192a4251b59d378d3f00000000000000665c8b7e89eddfc3783f6c9129a7c5f8ee5f50579e2f638f7eb12f63be72a3d81ab324d6e417b1c2cbfdcada0a16e31790e26cf19588a7e0496ee2782224cf30f810da86cf1a3204f4c9404f5d7321a4fefc4d1c9139ca4b65b99909950000006b42077ca60fdecb2717e21f8f187b1866108b6e8c71e2603217606637ece1fa89917e131f4034a8383e99c3568fd04201b37cd92ca6ebf94a2d8310f7032775cfd75652f87b039d5430b3c6643e9146d2478ce31344b554aca7670000000000000010c65608fda6ed5d08e7a796042aa127d874105787d0347aa37801faff5b9050803a19ff6205aa5c263e407a2f7de56f7a0000e094fa4e3f05528caab5a430c08dd810bc97204b767dd969721a26aa740000000000bc433fe2d0a6ef2a8a91cd3cb305aa80dadef8b0caca780000000000000000863e21db415a222bb1a7ab94bfe4a74157d794f9d0430c2c0eb563350559829865a3dd08fb31bd0801e09aa3ee45e61a56fc83076451cff7632e49a41eadb5044a0d5f73d6932161ae5e9ce218a35cd8e7b747887b1a74798982d0b492c3f0ff53189d80733eb04f8124877b648ff438f7d66c7efcc09a8f3330b6c22d14e80db8e5608bdeab9388b758a15f4ce70390c214bc6838798f5b9b0b500d4e8b5174f329b8501c6feb7a6982bcea74a0f2ced7fa2059234a8d10b7f0597151d5c9067d57d85f4ae933eaf5174ba122f3f702ef8695578d3c08562c9fc185f0f65d11b4c58ae52500cbe99cde3758a5cbe6093dd328ac820e2de309d25a324647aadffcecf0f3bbaeda7af4436d9ffbce1b240a2f5e346eba8812e6329e01b087bde7da4a6448f478102e90c8134f531de08d4cf4f6f35b15a202544c0ced0c1715fd3a90099f785a13a2412bedba2981dd22bd9d736c00000000000000000000000000000000eb6fec8d7d2f77f4d470a9caa5b1bfc00cd1d40830ac35f229f8ffe1c02a63d3c2d9"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r1, 0x702, 0xe, 0x0, &(0x7f0000000580)="e460334470d8d400eb00c15286dd", 0x0, 0x8001, 0x0, 0x27, 0x0, 0x0, 0x0}, 0x50) 235.560556ms ago: executing program 0 (id=9796): syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r0, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x88, 0x67, &(0x7f00000002c0)=r3, 0x4) r4 = socket$kcm(0x11, 0xa, 0x300) sendmsg$inet(r2, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e1f, @multicast2}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000040)='\x00', 0x1}], 0x1, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast2}}}], 0x20}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, r5, 0xc, 0xffffffffffffffff, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r6, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb0, 0x0, 0xc, 0xfffffffffffffcb3, 0x0, 0x0, 0x0, 0xffffdfff, 0x8, 0x0, 0x0}}, 0x10) recvmsg$kcm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000017c0)=""/4096, 0x1000}], 0x1}, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="d80000001c0081064e81f782db44b9040a1d080404000000970081a1180002000600142603600e1208000f0000810401a8001605200001400200000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x1, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0}, 0x10446, 0xc8}, 0x0, 0x9, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) recvmsg$unix(r7, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x10}}], 0x10}, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)='io.weight\x00', 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xe) 0s ago: executing program 4 (id=9797): ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000001c0)={0xffffffffffffffff}) sendmsg$sock(r0, &(0x7f0000000500)={&(0x7f00000003c0)=@llc={0x1a, 0x339, 0xea, 0x5, 0x4, 0x7, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x80, &(0x7f0000000440)=[{&(0x7f00000002c0)="651f2777d239c5a55a8d490f872c15dc1d80685f5b4026e6a434fac7d72b3585f2ffc62cf0da1a6bc4f003", 0x2b}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x30e8}}, @txtime={{0x18, 0x1, 0x3d, 0x1ceb552b}}, @mark={{0x14, 0x1, 0x24, 0xaa}}, @mark={{0x14, 0x1, 0x24, 0xfffffffa}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}], 0x78}, 0x20044050) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x17, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9}, 0x103005, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x60}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="6079a600000000000000", 0xa}], 0x1}, 0x0) close(r1) recvmsg(0xffffffffffffffff, &(0x7f0000002440)={0x0, 0x0, 0x0}, 0x0) r2 = socket$kcm(0x2c, 0x3, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x20000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r2, 0x11b, 0x6, &(0x7f0000000000)=r3, 0x4) kernel console output (not intermixed with test programs): fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1860.386569][T28435] CPU: 0 PID: 28435 Comm: syz.5.7954 Not tainted syzkaller #0 [ 1860.394114][T28435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1860.404229][T28435] Call Trace: [ 1860.407638][T28435] [ 1860.410595][T28435] dump_stack_lvl+0x188/0x24e [ 1860.415331][T28435] ? show_regs_print_info+0x12/0x12 [ 1860.420586][T28435] ? load_image+0x400/0x400 [ 1860.425111][T28435] ? __lock_acquire+0x7d10/0x7d10 [ 1860.430175][T28435] ? snprintf+0xe5/0x140 [ 1860.434576][T28435] should_fail_ex+0x399/0x4d0 [ 1860.439321][T28435] _copy_to_user+0x2c/0x130 [ 1860.443887][T28435] simple_read_from_buffer+0xe3/0x150 [ 1860.449343][T28435] proc_fail_nth_read+0x1a6/0x220 [ 1860.454428][T28435] ? proc_fault_inject_write+0x310/0x310 [ 1860.460126][T28435] ? fsnotify_perm+0x248/0x550 [ 1860.465035][T28435] ? proc_fault_inject_write+0x310/0x310 [ 1860.470741][T28435] vfs_read+0x2de/0xa00 [ 1860.474964][T28435] ? kernel_read+0x1e0/0x1e0 [ 1860.479607][T28435] ? __fget_files+0x28/0x4b0 [ 1860.484263][T28435] ? __fget_files+0x28/0x4b0 [ 1860.488912][T28435] ? __fget_files+0x43d/0x4b0 [ 1860.493661][T28435] ? __fdget_pos+0x2ae/0x360 [ 1860.498305][T28435] ? ksys_read+0x71/0x250 [ 1860.502693][T28435] ksys_read+0x14c/0x250 [ 1860.507025][T28435] ? vfs_write+0xa30/0xa30 [ 1860.511487][T28435] ? lockdep_hardirqs_on+0x94/0x140 [ 1860.516722][T28435] do_syscall_64+0x4c/0xa0 [ 1860.521186][T28435] ? clear_bhb_loop+0x60/0xb0 [ 1860.525903][T28435] ? clear_bhb_loop+0x60/0xb0 [ 1860.530616][T28435] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1860.536544][T28435] RIP: 0033:0x7f0f2955c84e [ 1860.540991][T28435] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1860.560641][T28435] RSP: 002b:00007f0f277f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1860.569089][T28435] RAX: ffffffffffffffda RBX: 00007f0f277f66c0 RCX: 00007f0f2955c84e [ 1860.577104][T28435] RDX: 000000000000000f RSI: 00007f0f277f60a0 RDI: 0000000000000005 [ 1860.585105][T28435] RBP: 00007f0f277f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1860.593109][T28435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1860.601109][T28435] R13: 00007f0f29816038 R14: 00007f0f29815fa0 R15: 00007ffce997dec8 [ 1860.609134][T28435] [ 1862.422608][T28412] pimreg1: tun_chr_ioctl cmd 1074025677 [ 1862.428374][T28412] pimreg1: linktype set to 769 [ 1862.439627][T28426] netlink: 'syz.0.7951': attribute type 10 has an invalid length. [ 1862.477754][T28426] bond0: (slave team0): Releasing backup interface [ 1862.496380][T28426] team0 (unregistering): Port device team_slave_1 removed [ 1862.508967][T28426] team0 (unregistering): Port device macvlan1 removed [ 1862.573140][T28443] netlink: 37407 bytes leftover after parsing attributes in process `syz.5.7957'. [ 1862.718980][T28449] netlink: 'syz.4.7959': attribute type 16 has an invalid length. [ 1862.738579][T28449] netlink: 48 bytes leftover after parsing attributes in process `syz.4.7959'. [ 1862.753100][T28451] netlink: 'syz.2.7960': attribute type 3 has an invalid length. [ 1862.761777][T28451] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.7960'. [ 1862.911854][T28458] FAULT_INJECTION: forcing a failure. [ 1862.911854][T28458] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 1862.947164][T28455] pimreg1: tun_chr_ioctl cmd 1074025677 [ 1862.981774][T28458] CPU: 0 PID: 28458 Comm: syz.3.7963 Not tainted syzkaller #0 [ 1862.989316][T28458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1862.999430][T28458] Call Trace: [ 1863.002761][T28458] [ 1863.005738][T28458] dump_stack_lvl+0x188/0x24e [ 1863.010578][T28458] ? show_regs_print_info+0x12/0x12 [ 1863.015844][T28458] ? load_image+0x400/0x400 [ 1863.020495][T28458] ? __lock_acquire+0x7d10/0x7d10 [ 1863.025575][T28458] should_fail_ex+0x399/0x4d0 [ 1863.030321][T28458] prepare_alloc_pages+0x1e2/0x5f0 [ 1863.035594][T28458] __alloc_pages+0x130/0x4f0 [ 1863.039449][T28455] pimreg1: linktype set to 769 [ 1863.040230][T28458] ? zone_statistics+0x170/0x170 [ 1863.040279][T28458] ? xdp_convert_md_to_buff+0x5b/0x330 [ 1863.055611][T28458] bpf_prog_test_run_xdp+0xaf7/0xf10 [ 1863.060975][T28458] ? dev_put+0x80/0x80 [ 1863.065102][T28458] ? dev_put+0x80/0x80 [ 1863.069238][T28458] bpf_prog_test_run+0x31e/0x390 [ 1863.074276][T28458] __sys_bpf+0x62b/0x780 [ 1863.078588][T28458] ? bpf_link_show_fdinfo+0x380/0x380 [ 1863.084139][T28458] ? lock_chain_count+0x20/0x20 [ 1863.089062][T28458] __x64_sys_bpf+0x78/0x90 [ 1863.093547][T28458] do_syscall_64+0x4c/0xa0 [ 1863.098033][T28458] ? clear_bhb_loop+0x60/0xb0 [ 1863.102821][T28458] ? clear_bhb_loop+0x60/0xb0 [ 1863.107562][T28458] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1863.113509][T28458] RIP: 0033:0x7fa6a059bf79 [ 1863.117979][T28458] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1863.137933][T28458] RSP: 002b:00007fa6a1542028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1863.146413][T28458] RAX: ffffffffffffffda RBX: 00007fa6a0815fa0 RCX: 00007fa6a059bf79 [ 1863.154451][T28458] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 1863.162481][T28458] RBP: 00007fa6a1542090 R08: 0000000000000000 R09: 0000000000000000 [ 1863.170558][T28458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1863.178586][T28458] R13: 00007fa6a0816038 R14: 00007fa6a0815fa0 R15: 00007ffce6fcf868 [ 1863.186633][T28458] [ 1863.219807][T28461] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7964'. [ 1863.228892][T28461] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7964'. [ 1863.245997][T28461] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7964'. [ 1863.266099][T28461] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7964'. [ 1864.092482][T28473] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7968'. [ 1864.243601][T28492] pimreg1: tun_chr_ioctl cmd 1074025677 [ 1864.264011][T28492] pimreg1: linktype set to 769 [ 1864.815100][T28499] netlink: 'syz.5.7973': attribute type 10 has an invalid length. [ 1865.534494][T28499] team0 (unregistering): Port device team_slave_1 removed [ 1865.788656][T28521] netlink: 'syz.3.7985': attribute type 7 has an invalid length. [ 1865.821984][T28521] netlink: 176 bytes leftover after parsing attributes in process `syz.3.7985'. [ 1865.907774][T28522] netlink: 'syz.3.7985': attribute type 7 has an invalid length. [ 1865.986470][T28522] netlink: 176 bytes leftover after parsing attributes in process `syz.3.7985'. [ 1866.346379][T28536] FAULT_INJECTION: forcing a failure. [ 1866.346379][T28536] name failslab, interval 1, probability 0, space 0, times 0 [ 1866.399640][T28536] CPU: 1 PID: 28536 Comm: syz.3.7989 Not tainted syzkaller #0 [ 1866.407202][T28536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1866.417314][T28536] Call Trace: [ 1866.420643][T28536] [ 1866.423622][T28536] dump_stack_lvl+0x188/0x24e [ 1866.428375][T28536] ? show_regs_print_info+0x12/0x12 [ 1866.433630][T28536] ? load_image+0x400/0x400 [ 1866.438175][T28536] ? __might_sleep+0xd0/0xd0 [ 1866.442812][T28536] ? __lock_acquire+0x7d10/0x7d10 [ 1866.447880][T28536] should_fail_ex+0x399/0x4d0 [ 1866.452625][T28536] should_failslab+0x5/0x20 [ 1866.457181][T28536] slab_pre_alloc_hook+0x59/0x310 [ 1866.462251][T28536] ? bpf_prog_test_run_skb+0x234/0x12a0 [ 1866.467841][T28536] __kmem_cache_alloc_node+0x4f/0x260 [ 1866.473252][T28536] ? bpf_prog_test_run_skb+0x234/0x12a0 [ 1866.478840][T28536] __kmalloc+0xa0/0x240 [ 1866.483050][T28536] bpf_prog_test_run_skb+0x234/0x12a0 [ 1866.488468][T28536] ? __fget_files+0x28/0x4b0 [ 1866.493116][T28536] ? __fget_files+0x28/0x4b0 [ 1866.497872][T28536] ? __fget_files+0x43d/0x4b0 [ 1866.502607][T28536] ? cpu_online+0xa0/0xa0 [ 1866.506969][T28536] bpf_prog_test_run+0x31e/0x390 [ 1866.511961][T28536] __sys_bpf+0x62b/0x780 [ 1866.516249][T28536] ? bpf_link_show_fdinfo+0x380/0x380 [ 1866.521673][T28536] ? lock_chain_count+0x20/0x20 [ 1866.526571][T28536] __x64_sys_bpf+0x78/0x90 [ 1866.531031][T28536] do_syscall_64+0x4c/0xa0 [ 1866.535491][T28536] ? clear_bhb_loop+0x60/0xb0 [ 1866.540252][T28536] ? clear_bhb_loop+0x60/0xb0 [ 1866.544967][T28536] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1866.550906][T28536] RIP: 0033:0x7fa6a059bf79 [ 1866.555358][T28536] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1866.575008][T28536] RSP: 002b:00007fa6a1542028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1866.583461][T28536] RAX: ffffffffffffffda RBX: 00007fa6a0815fa0 RCX: 00007fa6a059bf79 [ 1866.591472][T28536] RDX: 0000000000000050 RSI: 0000200000000140 RDI: 000000000000000a [ 1866.599475][T28536] RBP: 00007fa6a1542090 R08: 0000000000000000 R09: 0000000000000000 [ 1866.607480][T28536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1866.615483][T28536] R13: 00007fa6a0816038 R14: 00007fa6a0815fa0 R15: 00007ffce6fcf868 [ 1866.623554][T28536] [ 1867.020365][T28549] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1867.048494][T28549] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1867.097420][T28551] netlink: 'syz.2.7994': attribute type 11 has an invalid length. [ 1867.135670][T28554] netlink: 'syz.2.7994': attribute type 10 has an invalid length. [ 1867.162227][T28554] team0: Port device wlan1 added [ 1867.300892][T28554] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1867.386093][T28566] FAULT_INJECTION: forcing a failure. [ 1867.386093][T28566] name failslab, interval 1, probability 0, space 0, times 0 [ 1867.405108][T28566] CPU: 1 PID: 28566 Comm: syz.4.7998 Not tainted syzkaller #0 [ 1867.412659][T28566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1867.422773][T28566] Call Trace: [ 1867.426098][T28566] [ 1867.429072][T28566] dump_stack_lvl+0x188/0x24e [ 1867.433820][T28566] ? show_regs_print_info+0x12/0x12 [ 1867.439091][T28566] ? load_image+0x400/0x400 [ 1867.443658][T28566] ? __might_sleep+0xd0/0xd0 [ 1867.448296][T28566] ? __lock_acquire+0x7d10/0x7d10 [ 1867.453399][T28566] should_fail_ex+0x399/0x4d0 [ 1867.458154][T28566] should_failslab+0x5/0x20 [ 1867.462727][T28566] slab_pre_alloc_hook+0x59/0x310 [ 1867.467820][T28566] ? bpf_prog_test_run_skb+0x234/0x12a0 [ 1867.473432][T28566] __kmem_cache_alloc_node+0x4f/0x260 [ 1867.478896][T28566] ? bpf_prog_test_run_skb+0x234/0x12a0 [ 1867.484516][T28566] __kmalloc+0xa0/0x240 [ 1867.488753][T28566] bpf_prog_test_run_skb+0x234/0x12a0 [ 1867.494193][T28566] ? __fget_files+0x28/0x4b0 [ 1867.498853][T28566] ? __fget_files+0x28/0x4b0 [ 1867.503505][T28566] ? __fget_files+0x43d/0x4b0 [ 1867.508257][T28566] ? cpu_online+0xa0/0xa0 [ 1867.512671][T28566] bpf_prog_test_run+0x31e/0x390 [ 1867.517681][T28566] __sys_bpf+0x62b/0x780 [ 1867.522005][T28566] ? bpf_link_show_fdinfo+0x380/0x380 [ 1867.527468][T28566] ? lock_chain_count+0x20/0x20 [ 1867.532412][T28566] __x64_sys_bpf+0x78/0x90 [ 1867.536896][T28566] do_syscall_64+0x4c/0xa0 [ 1867.541375][T28566] ? clear_bhb_loop+0x60/0xb0 [ 1867.546101][T28566] ? clear_bhb_loop+0x60/0xb0 [ 1867.550838][T28566] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1867.556799][T28566] RIP: 0033:0x7ff61279bf79 [ 1867.561308][T28566] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1867.579080][T28561] netlink: 'syz.5.7996': attribute type 27 has an invalid length. [ 1867.580944][T28566] RSP: 002b:00007ff61367b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1867.580975][T28566] RAX: ffffffffffffffda RBX: 00007ff612a15fa0 RCX: 00007ff61279bf79 [ 1867.580993][T28566] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 1867.581009][T28566] RBP: 00007ff61367b090 R08: 0000000000000000 R09: 0000000000000000 [ 1867.581024][T28566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1867.581039][T28566] R13: 00007ff612a16038 R14: 00007ff612a15fa0 R15: 00007ffc2a1427f8 [ 1867.581072][T28566] [ 1867.680063][T28561] __nla_validate_parse: 1 callbacks suppressed [ 1867.680086][T28561] netlink: 164 bytes leftover after parsing attributes in process `syz.5.7996'. [ 1868.129162][T28570] netlink: 'syz.2.7999': attribute type 10 has an invalid length. [ 1868.521628][T28570] team0 (unregistering): Port device team_slave_1 removed [ 1868.557131][T28584] netlink: 161700 bytes leftover after parsing attributes in process `syz.0.8000'. [ 1868.579794][T28570] team0 (unregistering): Port device macvlan1 removed [ 1868.661170][T28584] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 1868.734527][T28570] team0 (unregistering): Port device wlan1 removed [ 1869.121497][T28563] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.7997'. [ 1869.298062][T28604] netlink: 'syz.4.8008': attribute type 21 has an invalid length. [ 1869.359514][T28604] netlink: 'syz.4.8008': attribute type 3 has an invalid length. [ 1869.367337][T28604] netlink: 144 bytes leftover after parsing attributes in process `syz.4.8008'. [ 1869.669763][T28612] netlink: 'syz.0.8009': attribute type 10 has an invalid length. [ 1869.677721][T28612] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8009'. [ 1869.837579][T28612] device ipvlan1 entered promiscuous mode [ 1869.906655][T28612] bridge0: port 3(ipvlan1) entered blocking state [ 1869.929935][T28612] bridge0: port 3(ipvlan1) entered disabled state [ 1869.995339][T28612] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1870.580480][T28633] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.8016'. [ 1870.777718][T28623] device syzkaller0 entered promiscuous mode [ 1871.213999][T28645] netlink: 'syz.5.8017': attribute type 2 has an invalid length. [ 1871.257555][T28645] netlink: 17267 bytes leftover after parsing attributes in process `syz.5.8017'. [ 1873.938178][T28647] netlink: 184 bytes leftover after parsing attributes in process `syz.2.8020'. [ 1874.388314][T28665] netlink: 'syz.2.8027': attribute type 39 has an invalid length. [ 1874.945555][T28670] pimreg1: tun_chr_ioctl cmd 1074025677 [ 1874.978753][T28670] pimreg1: linktype set to 769 [ 1875.371331][T28680] pimreg1: tun_chr_ioctl cmd 1074025677 [ 1875.463493][T28680] pimreg1: linktype set to 769 [ 1875.909772][ T4318] Bluetooth: hci1: command 0x0406 tx timeout [ 1875.938153][T28686] device syzkaller0 entered promiscuous mode [ 1878.131688][T28746] netlink: 17279 bytes leftover after parsing attributes in process `syz.4.8056'. [ 1879.515415][T28707] pimreg1: tun_chr_ioctl cmd 1074025677 [ 1879.521656][T28707] pimreg1: linktype set to 769 [ 1879.797561][T28752] netlink: 144 bytes leftover after parsing attributes in process `syz.2.8058'. [ 1879.950545][T28752] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1880.757450][T28776] netlink: 'syz.3.8064': attribute type 1 has an invalid length. [ 1880.810025][T28776] netlink: 83992 bytes leftover after parsing attributes in process `syz.3.8064'. [ 1880.895850][T28781] netlink: 52 bytes leftover after parsing attributes in process `syz.5.8065'. [ 1881.003997][T28783] pimreg1: tun_chr_ioctl cmd 1074025677 [ 1881.018761][T28783] pimreg1: linktype set to 769 [ 1881.744236][T28809] pimreg1: tun_chr_ioctl cmd 1074025677 [ 1881.752046][T28809] pimreg1: linktype set to 769 [ 1881.781132][T28808] netlink: 'syz.2.8075': attribute type 2 has an invalid length. [ 1881.809541][T28808] netlink: 'syz.2.8075': attribute type 1 has an invalid length. [ 1881.831896][T28808] netlink: 'syz.2.8075': attribute type 8 has an invalid length. [ 1881.869642][T28808] netlink: 44 bytes leftover after parsing attributes in process `syz.2.8075'. [ 1882.051120][T28817] netlink: 'syz.0.8078': attribute type 10 has an invalid length. [ 1882.076198][T28817] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8078'. [ 1882.111308][T28824] netlink: 144 bytes leftover after parsing attributes in process `syz.4.8081'. [ 1882.177087][T28824] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1882.388305][T28821] device syzkaller0 entered promiscuous mode [ 1884.415074][T28856] netlink: 'syz.3.8090': attribute type 3 has an invalid length. [ 1884.428103][T28856] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.8090'. [ 1884.608365][T28859] netlink: 'syz.4.8092': attribute type 1 has an invalid length. [ 1884.617179][T28859] netlink: 105120 bytes leftover after parsing attributes in process `syz.4.8092'. [ 1886.101560][T28835] pimreg1: tun_chr_ioctl cmd 1074025677 [ 1886.107315][T28835] pimreg1: linktype set to 769 [ 1886.120067][T28861] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8093'. [ 1886.135588][T28862] netlink: 'syz.4.8093': attribute type 12 has an invalid length. [ 1886.143580][T28862] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8093'. [ 1886.632279][T28874] pimreg1: tun_chr_ioctl cmd 1074025677 [ 1886.666323][T28874] pimreg1: linktype set to 769 [ 1887.258652][T28893] netlink: 'syz.4.8105': attribute type 28 has an invalid length. [ 1887.924055][T28913] pimreg1: tun_chr_ioctl cmd 1074025677 [ 1887.999827][T28913] pimreg1: linktype set to 769 [ 1888.693473][T28929] netlink: 184 bytes leftover after parsing attributes in process `syz.5.8119'. [ 1888.718566][T28934] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.8121'. [ 1889.148669][T28943] netlink: 'syz.5.8123': attribute type 1 has an invalid length. [ 1889.177798][T28943] netlink: 105120 bytes leftover after parsing attributes in process `syz.5.8123'. [ 1889.893601][T28954] device bond0 entered promiscuous mode [ 1889.912276][T28954] device bond_slave_0 entered promiscuous mode [ 1889.942845][T28954] device bond_slave_1 entered promiscuous mode [ 1890.191676][T28964] pimreg1: tun_chr_ioctl cmd 1074025677 [ 1890.199085][T28964] pimreg1: linktype set to 769 [ 1890.431625][T28975] pimreg1: tun_chr_ioctl cmd 1074025677 [ 1890.449976][T28975] pimreg1: linktype set to 769 [ 1890.455450][T28971] netlink: 184 bytes leftover after parsing attributes in process `syz.0.8134'. [ 1891.093846][T28997] netlink: 52 bytes leftover after parsing attributes in process `syz.0.8143'. [ 1891.753345][T29010] netlink: 184 bytes leftover after parsing attributes in process `syz.4.8147'. [ 1891.845248][T29007] pimreg1: tun_chr_ioctl cmd 1074025677 [ 1891.872711][T29007] pimreg1: linktype set to 769 [ 1893.193810][T29025] pimreg1: tun_chr_ioctl cmd 1074025677 [ 1893.209635][T29025] pimreg1: linktype set to 769 [ 1893.527638][T29028] netlink: 'syz.5.8151': attribute type 1 has an invalid length. [ 1893.564250][T29028] netlink: 'syz.5.8151': attribute type 3 has an invalid length. [ 1893.590356][T29028] netlink: 132 bytes leftover after parsing attributes in process `syz.5.8151'. [ 1893.921910][T29041] device syzkaller0 entered promiscuous mode [ 1894.029531][T29043] netlink: 'syz.2.8156': attribute type 39 has an invalid length. [ 1896.277099][T29055] netlink: 184 bytes leftover after parsing attributes in process `syz.4.8159'. [ 1898.283855][T29065] netlink: 'syz.5.8160': attribute type 10 has an invalid length. [ 1898.314774][T29078] netlink: 'syz.4.8164': attribute type 16 has an invalid length. [ 1898.322938][T29078] netlink: 48 bytes leftover after parsing attributes in process `syz.4.8164'. [ 1898.334584][T29069] device bridge_slave_1 left promiscuous mode [ 1898.344715][T29069] bridge0: port 2(bridge_slave_1) entered disabled state [ 1898.387940][T29069] device bridge_slave_0 left promiscuous mode [ 1898.402876][T29069] bridge0: port 1(bridge_slave_0) entered disabled state [ 1898.514853][T29069] bond0: (slave bridge0): Releasing backup interface [ 1898.568252][T29073] pimreg1: tun_chr_ioctl cmd 1074025677 [ 1898.575113][T29073] pimreg1: linktype set to 769 [ 1898.681414][T29089] pimreg1: tun_chr_ioctl cmd 1074025677 [ 1898.710333][T29089] pimreg1: linktype set to 769 [ 1899.429622][T29106] netlink: 184 bytes leftover after parsing attributes in process `syz.5.8172'. [ 1900.033388][T29114] netlink: 164 bytes leftover after parsing attributes in process `syz.3.8176'. [ 1900.053764][T29114] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.8176'. [ 1900.065887][T29114] netlink: zone id is out of range [ 1900.073331][T29114] netlink: zone id is out of range [ 1900.078863][T29114] netlink: zone id is out of range [ 1900.084619][T29114] netlink: zone id is out of range [ 1900.090584][T29114] netlink: zone id is out of range [ 1900.095912][T29114] netlink: zone id is out of range [ 1900.101934][T29114] netlink: zone id is out of range [ 1900.112795][T29114] netlink: zone id is out of range [ 1900.120162][T29114] netlink: zone id is out of range [ 1900.132402][T29114] netlink: zone id is out of range [ 1902.842452][T29125] device sit0 entered promiscuous mode [ 1902.967510][T29124] device bridge_slave_1 left promiscuous mode [ 1902.996740][T29124] bridge0: port 2(bridge_slave_1) entered disabled state [ 1903.073144][T29124] device bridge_slave_0 left promiscuous mode [ 1903.081050][T29124] bridge0: port 1(bridge_slave_0) entered disabled state [ 1903.228026][T29132] pimreg1: tun_chr_ioctl cmd 1074025677 [ 1903.241124][T29132] pimreg1: linktype set to 769 [ 1903.291720][T29133] netlink: 52 bytes leftover after parsing attributes in process `syz.2.8182'. [ 1903.321773][T29137] pimreg1: tun_chr_ioctl cmd 1074025677 [ 1903.329026][T29137] pimreg1: linktype set to 769 [ 1903.338680][T29140] netlink: 184 bytes leftover after parsing attributes in process `syz.4.8183'. [ 1904.220031][T29162] FAULT_INJECTION: forcing a failure. [ 1904.220031][T29162] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1904.323239][T29162] CPU: 1 PID: 29162 Comm: syz.5.8190 Not tainted syzkaller #0 [ 1904.330791][T29162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1904.340901][T29162] Call Trace: [ 1904.344236][T29162] [ 1904.347227][T29162] dump_stack_lvl+0x188/0x24e [ 1904.351989][T29162] ? show_regs_print_info+0x12/0x12 [ 1904.357253][T29162] ? load_image+0x400/0x400 [ 1904.361822][T29162] ? __lock_acquire+0x7d10/0x7d10 [ 1904.366915][T29162] should_fail_ex+0x399/0x4d0 [ 1904.371668][T29162] _copy_from_user+0x2c/0x170 [ 1904.376422][T29162] bpf_prog_test_run_skb+0x262/0x12a0 [ 1904.382007][T29162] ? __fget_files+0x28/0x4b0 [ 1904.386676][T29162] ? __fget_files+0x28/0x4b0 [ 1904.391377][T29162] ? __fget_files+0x43d/0x4b0 [ 1904.396122][T29162] ? cpu_online+0xa0/0xa0 [ 1904.400504][T29162] bpf_prog_test_run+0x31e/0x390 [ 1904.405502][T29162] __sys_bpf+0x62b/0x780 [ 1904.409809][T29162] ? bpf_link_show_fdinfo+0x380/0x380 [ 1904.415276][T29162] ? lock_chain_count+0x20/0x20 [ 1904.420198][T29162] __x64_sys_bpf+0x78/0x90 [ 1904.424675][T29162] do_syscall_64+0x4c/0xa0 [ 1904.429147][T29162] ? clear_bhb_loop+0x60/0xb0 [ 1904.433888][T29162] ? clear_bhb_loop+0x60/0xb0 [ 1904.438610][T29162] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1904.444540][T29162] RIP: 0033:0x7f0f2959bf79 [ 1904.448984][T29162] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1904.468619][T29162] RSP: 002b:00007f0f277f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1904.477064][T29162] RAX: ffffffffffffffda RBX: 00007f0f29815fa0 RCX: 00007f0f2959bf79 [ 1904.485072][T29162] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 1904.493074][T29162] RBP: 00007f0f277f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1904.501080][T29162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1904.509079][T29162] R13: 00007f0f29816038 R14: 00007f0f29815fa0 R15: 00007ffce997dec8 [ 1904.517093][T29162] [ 1904.869340][T29174] netlink: 'syz.4.8192': attribute type 10 has an invalid length. [ 1904.884759][T29174] netlink: 55 bytes leftover after parsing attributes in process `syz.4.8192'. [ 1905.131181][T29171] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.8192'. [ 1905.944174][T29177] pimreg1: tun_chr_ioctl cmd 1074025677 [ 1905.955571][T29177] pimreg1: linktype set to 769 [ 1905.993371][T29171] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 1906.009669][T29171] CPU: 0 PID: 29171 Comm: syz.4.8192 Not tainted syzkaller #0 [ 1906.017221][T29171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1906.027331][T29171] Call Trace: [ 1906.030660][T29171] [ 1906.033645][T29171] dump_stack_lvl+0x188/0x24e [ 1906.038393][T29171] ? show_regs_print_info+0x12/0x12 [ 1906.043651][T29171] ? load_image+0x400/0x400 [ 1906.048207][T29171] sysfs_warn_dup+0x8a/0xa0 [ 1906.052755][T29171] sysfs_do_create_link_sd+0xc0/0x110 [ 1906.058169][T29171] device_add+0x7ed/0xfb0 [ 1906.062561][T29171] wiphy_register+0x1d9f/0x2ac0 [ 1906.067473][T29171] ? cfg80211_event_work+0x40/0x40 [ 1906.072624][T29171] ? minstrel_ht_alloc+0x894/0xa20 [ 1906.077825][T29171] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1906.083936][T29171] ieee80211_register_hw+0x2d00/0x39f0 [ 1906.089479][T29171] ? ieee80211_register_hw+0xeb1/0x39f0 [ 1906.095086][T29171] ? ieee80211_register_hw+0xeb1/0x39f0 [ 1906.100679][T29171] ? ieee80211_tasklet_handler+0x20/0x20 [ 1906.106392][T29171] ? memset+0x1e/0x40 [ 1906.110412][T29171] ? __hrtimer_init+0x186/0x270 [ 1906.115307][T29171] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 1906.121099][T29171] hwsim_new_radio_nl+0xafa/0xce0 [ 1906.126184][T29171] genl_family_rcv_msg_doit+0x22a/0x330 [ 1906.131779][T29171] ? end_current_label_crit_section+0x170/0x170 [ 1906.138063][T29171] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1906.144042][T29171] ? bpf_lsm_capable+0x5/0x10 [ 1906.148819][T29171] ? security_capable+0x85/0xb0 [ 1906.153731][T29171] genl_rcv_msg+0x604/0x790 [ 1906.158299][T29171] ? genl_bind+0x360/0x360 [ 1906.162757][T29171] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 1906.169177][T29171] netlink_rcv_skb+0x1fb/0x450 [ 1906.173992][T29171] ? genl_bind+0x360/0x360 [ 1906.178493][T29171] ? netlink_ack+0x1170/0x1170 [ 1906.183311][T29171] ? down_read+0x1a8/0x2d0 [ 1906.187780][T29171] genl_rcv+0x24/0x40 [ 1906.191806][T29171] netlink_unicast+0x74d/0x8d0 [ 1906.196627][T29171] netlink_sendmsg+0x8ad/0xbd0 [ 1906.201494][T29171] ? netlink_getsockopt+0x550/0x550 [ 1906.206739][T29171] ? aa_sock_msg_perm+0x94/0x150 [ 1906.211713][T29171] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1906.217116][T29171] ? security_socket_sendmsg+0x7c/0xa0 [ 1906.222624][T29171] ? netlink_getsockopt+0x550/0x550 [ 1906.227863][T29171] ____sys_sendmsg+0x5be/0x970 [ 1906.232711][T29171] ? __sys_sendmsg_sock+0x30/0x30 [ 1906.237780][T29171] ? __import_iovec+0x315/0x500 [ 1906.242674][T29171] ? import_iovec+0x6f/0xa0 [ 1906.247219][T29171] ___sys_sendmsg+0x2a2/0x360 [ 1906.251942][T29171] ? __sys_sendmsg+0x290/0x290 [ 1906.256791][T29171] __se_sys_sendmsg+0x1bb/0x2a0 [ 1906.261687][T29171] ? ct_nmi_exit+0x145/0x1c0 [ 1906.266317][T29171] ? __x64_sys_sendmsg+0x80/0x80 [ 1906.271327][T29171] ? lockdep_hardirqs_on+0x94/0x140 [ 1906.276578][T29171] do_syscall_64+0x4c/0xa0 [ 1906.281037][T29171] ? clear_bhb_loop+0x60/0xb0 [ 1906.285748][T29171] ? clear_bhb_loop+0x60/0xb0 [ 1906.290471][T29171] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1906.296407][T29171] RIP: 0033:0x7ff61279bf79 [ 1906.300864][T29171] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1906.320524][T29171] RSP: 002b:00007ff61365a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1906.329010][T29171] RAX: ffffffffffffffda RBX: 00007ff612a16090 RCX: 00007ff61279bf79 [ 1906.337209][T29171] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1906.345242][T29171] RBP: 00007ff6128327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1906.353254][T29171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1906.361254][T29171] R13: 00007ff612a16128 R14: 00007ff612a16090 R15: 00007ffc2a1427f8 [ 1906.369283][T29171] [ 1906.385446][T29191] pimreg1: tun_chr_ioctl cmd 1074025677 [ 1906.398957][T29191] pimreg1: linktype set to 769 [ 1906.413508][T29188] device bridge_slave_1 left promiscuous mode [ 1906.430588][T29188] bridge0: port 2(bridge_slave_1) entered disabled state [ 1906.613571][ T4316] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 1906.621655][ T4316] Bluetooth: hci3: Invalid handle: 0xffff > 0x0eff [ 1906.635705][T29194] netlink: 'syz.2.8199': attribute type 39 has an invalid length. [ 1907.879000][T29229] pimreg1: tun_chr_ioctl cmd 1074025677 [ 1907.919809][T29229] pimreg1: linktype set to 769 [ 1908.387893][T29237] netlink: 'syz.4.8213': attribute type 11 has an invalid length. [ 1908.462082][T29237] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.8213'. [ 1908.521464][T29237] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1908.828386][T29244] pimreg1: tun_chr_ioctl cmd 1074025677 [ 1908.842058][T29244] pimreg1: linktype set to 769 [ 1911.543874][T29259] netlink: 184 bytes leftover after parsing attributes in process `syz.2.8219'. [ 1911.786358][T29272] netlink: 184 bytes leftover after parsing attributes in process `syz.5.8222'. [ 1911.895260][T29276] netlink: 1057 bytes leftover after parsing attributes in process `syz.0.8226'. [ 1914.793532][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.799941][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 1914.943943][T29298] netlink: 'syz.5.8233': attribute type 2 has an invalid length. [ 1914.969638][T29298] netlink: 'syz.5.8233': attribute type 4 has an invalid length. [ 1914.988162][T29298] netlink: 132 bytes leftover after parsing attributes in process `syz.5.8233'. [ 1915.113724][T29304] netlink: 184 bytes leftover after parsing attributes in process `syz.0.8244'. [ 1917.165724][T29315] pimreg1: tun_chr_ioctl cmd 1074025677 [ 1917.178295][T29315] pimreg1: linktype set to 769 [ 1917.221725][T29322] netlink: 184 bytes leftover after parsing attributes in process `syz.3.8237'. [ 1917.423349][T29331] netlink: 'syz.4.8238': attribute type 10 has an invalid length. [ 1917.438243][T29331] netlink: 65015 bytes leftover after parsing attributes in process `syz.4.8238'. [ 1920.165922][T29365] netlink: 'syz.4.8251': attribute type 10 has an invalid length. [ 1920.199318][T29365] netlink: 55 bytes leftover after parsing attributes in process `syz.4.8251'. [ 1920.219482][T29367] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8251'. [ 1920.404137][T29371] netlink: 184 bytes leftover after parsing attributes in process `syz.5.8252'. [ 1920.754800][T29379] device syzkaller0 entered promiscuous mode [ 1921.208397][T29402] syz.3.8262[29402] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1921.208526][T29402] syz.3.8262[29402] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1928.440667][T29400] netlink: 'syz.2.8260': attribute type 10 has an invalid length. [ 1928.460333][T29400] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.8260'. [ 1928.473546][T29413] netlink: 'syz.3.8266': attribute type 10 has an invalid length. [ 1928.487873][T29413] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8266'. [ 1928.499224][T29424] netlink: 184 bytes leftover after parsing attributes in process `syz.0.8269'. [ 1928.521478][T29434] netlink: 52 bytes leftover after parsing attributes in process `syz.5.8273'. [ 1928.716999][T29442] netlink: 'syz.3.8275': attribute type 30 has an invalid length. [ 1928.770167][T29448] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.8277'. [ 1930.287443][T29471] netlink: 52 bytes leftover after parsing attributes in process `syz.0.8283'. [ 1930.658939][T29485] netlink: 184 bytes leftover after parsing attributes in process `syz.5.8287'. [ 1930.957531][T29492] netlink: 52 bytes leftover after parsing attributes in process `syz.4.8289'. [ 1930.995161][T29490] netlink: 'syz.3.8288': attribute type 10 has an invalid length. [ 1931.031609][T29490] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.8288'. [ 1931.748618][T29506] netlink: 14 bytes leftover after parsing attributes in process `syz.3.8294'. [ 1933.961432][T29515] netlink: 'syz.5.8298': attribute type 21 has an invalid length. [ 1933.973182][T29515] netlink: 164 bytes leftover after parsing attributes in process `syz.5.8298'. [ 1933.983665][T29516] netlink: 'syz.5.8298': attribute type 21 has an invalid length. [ 1933.999001][T29516] netlink: 164 bytes leftover after parsing attributes in process `syz.5.8298'. [ 1934.010678][T29522] netlink: 52 bytes leftover after parsing attributes in process `syz.3.8300'. [ 1934.055416][T29528] netlink: 52 bytes leftover after parsing attributes in process `syz.2.8301'. [ 1934.445791][T29535] netlink: 184 bytes leftover after parsing attributes in process `syz.3.8303'. [ 1939.833559][T29581] netlink: 52 bytes leftover after parsing attributes in process `syz.0.8319'. [ 1939.864383][T29590] netlink: 52 bytes leftover after parsing attributes in process `syz.5.8321'. [ 1940.210328][T29600] FAULT_INJECTION: forcing a failure. [ 1940.210328][T29600] name failslab, interval 1, probability 0, space 0, times 0 [ 1940.236813][T29598] pimreg1: tun_chr_ioctl cmd 1074025677 [ 1940.246694][T29598] pimreg1: linktype set to 769 [ 1940.264449][T29600] CPU: 1 PID: 29600 Comm: syz.2.8324 Not tainted syzkaller #0 [ 1940.272035][T29600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1940.282178][T29600] Call Trace: [ 1940.285513][T29600] [ 1940.288494][T29600] dump_stack_lvl+0x188/0x24e [ 1940.293238][T29600] ? show_regs_print_info+0x12/0x12 [ 1940.298509][T29600] ? load_image+0x400/0x400 [ 1940.303069][T29600] ? __might_sleep+0xd0/0xd0 [ 1940.307715][T29600] ? __lock_acquire+0x7d10/0x7d10 [ 1940.312813][T29600] should_fail_ex+0x399/0x4d0 [ 1940.317564][T29600] should_failslab+0x5/0x20 [ 1940.322131][T29600] slab_pre_alloc_hook+0x59/0x310 [ 1940.327210][T29600] ? apparmor_sk_alloc_security+0x74/0x100 [ 1940.333085][T29600] __kmem_cache_alloc_node+0x4f/0x260 [ 1940.338554][T29600] ? apparmor_sk_alloc_security+0x74/0x100 [ 1940.344433][T29600] kmalloc_trace+0x26/0xe0 [ 1940.348917][T29600] apparmor_sk_alloc_security+0x74/0x100 [ 1940.354623][T29600] security_sk_alloc+0x6a/0xa0 [ 1940.359461][T29600] sk_prot_alloc+0x101/0x210 [ 1940.364103][T29600] ? sk_alloc+0x20/0x340 [ 1940.368416][T29600] sk_alloc+0x36/0x340 [ 1940.372546][T29600] ? bpf_ctx_init+0x163/0x1a0 [ 1940.377281][T29600] ? bpf_prog_test_run_skb+0x26f/0x12a0 [ 1940.382898][T29600] bpf_prog_test_run_skb+0x35e/0x12a0 [ 1940.388332][T29600] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1940.394559][T29600] ? cpu_online+0xa0/0xa0 [ 1940.398958][T29600] ? cpu_online+0xa0/0xa0 [ 1940.403348][T29600] bpf_prog_test_run+0x31e/0x390 [ 1940.408360][T29600] __sys_bpf+0x62b/0x780 [ 1940.412665][T29600] ? bpf_link_show_fdinfo+0x380/0x380 [ 1940.418110][T29600] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1940.424343][T29600] __x64_sys_bpf+0x78/0x90 [ 1940.428833][T29600] do_syscall_64+0x4c/0xa0 [ 1940.433321][T29600] ? clear_bhb_loop+0x60/0xb0 [ 1940.438145][T29600] ? clear_bhb_loop+0x60/0xb0 [ 1940.442892][T29600] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1940.448856][T29600] RIP: 0033:0x7fcdde59bf79 [ 1940.453344][T29600] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1940.473104][T29600] RSP: 002b:00007fcddc7f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1940.481584][T29600] RAX: ffffffffffffffda RBX: 00007fcdde815fa0 RCX: 00007fcdde59bf79 [ 1940.489625][T29600] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 1940.497656][T29600] RBP: 00007fcddc7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1940.505684][T29600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1940.513709][T29600] R13: 00007fcdde816038 R14: 00007fcdde815fa0 R15: 00007ffd1ee8f1b8 [ 1940.521760][T29600] [ 1940.943123][T29624] netlink: 'syz.3.8331': attribute type 1 has an invalid length. [ 1941.497443][T29628] device wg2 left promiscuous mode [ 1941.538540][T29629] device wg2 entered promiscuous mode [ 1941.915069][T29644] FAULT_INJECTION: forcing a failure. [ 1941.915069][T29644] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1941.946178][T29644] CPU: 1 PID: 29644 Comm: syz.0.8339 Not tainted syzkaller #0 [ 1941.953742][T29644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1941.963887][T29644] Call Trace: [ 1941.967226][T29644] [ 1941.970207][T29644] dump_stack_lvl+0x188/0x24e [ 1941.974957][T29644] ? show_regs_print_info+0x12/0x12 [ 1941.980225][T29644] ? load_image+0x400/0x400 [ 1941.984787][T29644] ? __lock_acquire+0x7d10/0x7d10 [ 1941.989889][T29644] ? ct_irq_exit_irqson+0x113/0x170 [ 1941.995148][T29644] should_fail_ex+0x399/0x4d0 [ 1941.999906][T29644] prepare_alloc_pages+0x1e2/0x5f0 [ 1942.005089][T29644] __alloc_pages+0x130/0x4f0 [ 1942.009755][T29644] ? asm_exc_page_fault+0x22/0x30 [ 1942.014829][T29644] ? zone_statistics+0x170/0x170 [ 1942.019834][T29644] ? _copy_from_user+0xa1/0x170 [ 1942.024762][T29644] bpf_prog_test_run_xdp+0xaf7/0xf10 [ 1942.030115][T29644] ? dev_put+0x80/0x80 [ 1942.034254][T29644] ? dev_put+0x80/0x80 [ 1942.038385][T29644] bpf_prog_test_run+0x31e/0x390 [ 1942.043381][T29644] __sys_bpf+0x62b/0x780 [ 1942.047667][T29644] ? bpf_link_show_fdinfo+0x380/0x380 [ 1942.053097][T29644] ? lock_chain_count+0x20/0x20 [ 1942.058004][T29644] __x64_sys_bpf+0x78/0x90 [ 1942.062463][T29644] do_syscall_64+0x4c/0xa0 [ 1942.066916][T29644] ? clear_bhb_loop+0x60/0xb0 [ 1942.071632][T29644] ? clear_bhb_loop+0x60/0xb0 [ 1942.076354][T29644] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1942.082297][T29644] RIP: 0033:0x7f83fb19bf79 [ 1942.086746][T29644] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1942.106389][T29644] RSP: 002b:00007f83fc021028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1942.114844][T29644] RAX: ffffffffffffffda RBX: 00007f83fb415fa0 RCX: 00007f83fb19bf79 [ 1942.122858][T29644] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 1942.130960][T29644] RBP: 00007f83fc021090 R08: 0000000000000000 R09: 0000000000000000 [ 1942.138968][T29644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1942.146970][T29644] R13: 00007f83fb416038 R14: 00007f83fb415fa0 R15: 00007ffd81ef7858 [ 1942.154984][T29644] [ 1942.620815][T29658] netlink: 52 bytes leftover after parsing attributes in process `syz.5.8342'. [ 1942.783368][T29659] pimreg1: tun_chr_ioctl cmd 1074025677 [ 1942.804181][T29659] pimreg1: linktype set to 769 [ 1945.325893][T29664] netlink: 10 bytes leftover after parsing attributes in process `syz.4.8345'. [ 1946.973633][T29673] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8347'. [ 1947.028971][T29681] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.8349'. [ 1947.041203][T29681] netlink: 6324 bytes leftover after parsing attributes in process `syz.0.8349'. [ 1947.051892][T29681] netlink: 2 bytes leftover after parsing attributes in process `syz.0.8349'. [ 1947.386082][T29694] netlink: 'syz.3.8354': attribute type 16 has an invalid length. [ 1947.394308][T29694] netlink: 48 bytes leftover after parsing attributes in process `syz.3.8354'. [ 1947.926935][T29704] netlink: 52 bytes leftover after parsing attributes in process `syz.2.8359'. [ 1948.025680][T29703] pimreg1: tun_chr_ioctl cmd 1074025677 [ 1948.038674][T29703] pimreg1: linktype set to 769 [ 1948.436252][T29711] netlink: 'syz.0.8361': attribute type 1 has an invalid length. [ 1949.312500][T29729] netlink: 'syz.0.8366': attribute type 12 has an invalid length. [ 1949.342217][T29729] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8366'. [ 1949.389599][T29715] device veth0_to_team entered promiscuous mode [ 1949.408875][T29733] sctp: [Deprecated]: syz.3.8368 (pid 29733) Use of int in max_burst socket option deprecated. [ 1949.408875][T29733] Use struct sctp_assoc_value instead [ 1949.486152][T29734] syz.0.8366[29734] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1949.486280][T29734] syz.0.8366[29734] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1949.610783][T29737] netlink: 52 bytes leftover after parsing attributes in process `syz.2.8369'. [ 1949.691410][T29739] netlink: 184 bytes leftover after parsing attributes in process `syz.3.8371'. [ 1950.283438][T29751] netlink: 'syz.5.8373': attribute type 27 has an invalid length. [ 1950.329455][T29751] __nla_validate_parse: 1 callbacks suppressed [ 1950.329475][T29751] netlink: 164 bytes leftover after parsing attributes in process `syz.5.8373'. [ 1951.542326][T29758] netlink: 'syz.4.8375': attribute type 1 has an invalid length. [ 1951.935560][T29766] pimreg1: tun_chr_ioctl cmd 1074025677 [ 1951.949704][T29766] pimreg1: linktype set to 769 [ 1952.095793][T29774] netlink: 52 bytes leftover after parsing attributes in process `syz.5.8378'. [ 1953.613327][T29801] netlink: 184 bytes leftover after parsing attributes in process `syz.0.8386'. [ 1953.660176][T29805] netlink: 52 bytes leftover after parsing attributes in process `syz.2.8388'. [ 1953.988474][T29806] netlink: 184 bytes leftover after parsing attributes in process `syz.4.8384'. [ 1954.632244][T29818] netlink: 'syz.0.8391': attribute type 3 has an invalid length. [ 1954.649388][T29818] netlink: 114680 bytes leftover after parsing attributes in process `syz.0.8391'. [ 1954.670625][T29821] pimreg1: tun_chr_ioctl cmd 1074025677 [ 1954.677015][T29821] pimreg1: linktype set to 769 [ 1954.832714][T29825] netlink: 'syz.3.8395': attribute type 21 has an invalid length. [ 1954.867000][T29825] netlink: 'syz.3.8395': attribute type 3 has an invalid length. [ 1954.912986][T29825] netlink: 144 bytes leftover after parsing attributes in process `syz.3.8395'. [ 1955.135704][T29831] netlink: 'syz.5.8397': attribute type 11 has an invalid length. [ 1955.180546][T29831] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.8397'. [ 1955.201900][T29831] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1955.265133][T29838] netlink: 52 bytes leftover after parsing attributes in process `syz.0.8398'. [ 1955.518115][T29847] netlink: 52 bytes leftover after parsing attributes in process `syz.3.8401'. [ 1956.106354][T29860] netlink: 184 bytes leftover after parsing attributes in process `syz.5.8404'. [ 1956.479564][T29869] pimreg1: tun_chr_ioctl cmd 1074025677 [ 1956.527547][T29869] pimreg1: linktype set to 769 [ 1956.786452][T29877] netlink: 188 bytes leftover after parsing attributes in process `syz.5.8409'. [ 1957.839706][T29889] netlink: 'syz.2.8411': attribute type 10 has an invalid length. [ 1958.662858][T29905] netlink: 184 bytes leftover after parsing attributes in process `syz.0.8419'. [ 1958.724613][T29904] mac80211_hwsim hwsim69 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1959.292326][T29917] device syzkaller0 entered promiscuous mode [ 1959.315183][T29924] pimreg1: tun_chr_ioctl cmd 1074025677 [ 1959.335462][T29924] pimreg1: linktype set to 769 [ 1964.038169][T29930] netlink: 52 bytes leftover after parsing attributes in process `syz.0.8426'. [ 1964.052883][T29951] netlink: 184 bytes leftover after parsing attributes in process `syz.2.8436'. [ 1964.062882][T29963] netlink: 52 bytes leftover after parsing attributes in process `syz.5.8439'. [ 1964.302848][T29976] netlink: 'syz.4.8442': attribute type 21 has an invalid length. [ 1964.342418][T29976] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8442'. [ 1965.016957][T30000] netlink: 52 bytes leftover after parsing attributes in process `syz.3.8451'. [ 1965.262324][T30011] netlink: 52 bytes leftover after parsing attributes in process `syz.0.8455'. [ 1965.413424][T30009] netlink: 184 bytes leftover after parsing attributes in process `syz.2.8452'. [ 1965.986464][T30019] pimreg1: tun_chr_ioctl cmd 1074025677 [ 1966.031912][T30019] pimreg1: linktype set to 769 [ 1966.977168][T30037] netlink: 144 bytes leftover after parsing attributes in process `syz.3.8462'. [ 1966.998033][T30037] net_ratelimit: 14 callbacks suppressed [ 1966.998075][T30037] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1967.680216][T30050] netlink: 'syz.2.8466': attribute type 4 has an invalid length. [ 1967.688072][T30050] netlink: 'syz.2.8466': attribute type 8 has an invalid length. [ 1967.705090][T30050] netlink: 193092 bytes leftover after parsing attributes in process `syz.2.8466'. [ 1971.094732][T30056] netlink: 'syz.3.8467': attribute type 10 has an invalid length. [ 1971.103189][T30062] netlink: 'syz.4.8468': attribute type 10 has an invalid length. [ 1971.144631][T30062] device geneve1 entered promiscuous mode [ 1971.187070][T30062] team0: Port device geneve1 added [ 1971.207516][T30068] pimreg1: tun_chr_ioctl cmd 1074025677 [ 1971.232302][T30068] pimreg1: linktype set to 769 [ 1971.255223][T30073] netlink: 52 bytes leftover after parsing attributes in process `syz.3.8471'. [ 1971.385661][T30076] netlink: 52 bytes leftover after parsing attributes in process `syz.5.8472'. [ 1971.807213][T30089] netlink: 'syz.4.8477': attribute type 10 has an invalid length. [ 1971.819436][T30089] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8477'. [ 1971.839440][T30088] netlink: 'syz.0.8478': attribute type 21 has an invalid length. [ 1972.060243][T30094] netlink: 52 bytes leftover after parsing attributes in process `syz.4.8480'. [ 1972.160908][T30100] netlink: 'syz.0.8481': attribute type 4 has an invalid length. [ 1972.209697][T30100] netlink: 'syz.0.8481': attribute type 8 has an invalid length. [ 1972.260140][T30100] netlink: 193092 bytes leftover after parsing attributes in process `syz.0.8481'. [ 1972.833601][T30114] pimreg1: tun_chr_ioctl cmd 1074025677 [ 1972.847683][T30114] pimreg1: linktype set to 769 [ 1973.525553][T30139] netlink: 'syz.4.8495': attribute type 4 has an invalid length. [ 1973.549737][T30139] netlink: 'syz.4.8495': attribute type 8 has an invalid length. [ 1973.557555][T30139] netlink: 193092 bytes leftover after parsing attributes in process `syz.4.8495'. [ 1974.235205][T30151] pimreg1: tun_chr_ioctl cmd 1074025677 [ 1974.291367][T30151] pimreg1: linktype set to 769 [ 1974.297884][T30156] netlink: 52 bytes leftover after parsing attributes in process `syz.5.8502'. [ 1975.654686][T30184] FAULT_INJECTION: forcing a failure. [ 1975.654686][T30184] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1975.739334][T30184] CPU: 1 PID: 30184 Comm: syz.2.8512 Not tainted syzkaller #0 [ 1975.746990][T30184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1975.757108][T30184] Call Trace: [ 1975.760435][T30184] [ 1975.763407][T30184] dump_stack_lvl+0x188/0x24e [ 1975.768156][T30184] ? show_regs_print_info+0x12/0x12 [ 1975.773424][T30184] ? load_image+0x400/0x400 [ 1975.778000][T30184] ? __lock_acquire+0x7d10/0x7d10 [ 1975.783091][T30184] should_fail_ex+0x399/0x4d0 [ 1975.787841][T30184] _copy_from_user+0x2c/0x170 [ 1975.792585][T30184] __sys_bpf+0x2ea/0x780 [ 1975.796892][T30184] ? bpf_link_show_fdinfo+0x380/0x380 [ 1975.802469][T30184] ? lock_chain_count+0x20/0x20 [ 1975.807390][T30184] __x64_sys_bpf+0x78/0x90 [ 1975.811868][T30184] do_syscall_64+0x4c/0xa0 [ 1975.816345][T30184] ? clear_bhb_loop+0x60/0xb0 [ 1975.821071][T30184] ? clear_bhb_loop+0x60/0xb0 [ 1975.825794][T30184] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1975.831726][T30184] RIP: 0033:0x7fcdde59bf79 [ 1975.836173][T30184] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1975.855821][T30184] RSP: 002b:00007fcddc7d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1975.864272][T30184] RAX: ffffffffffffffda RBX: 00007fcdde816090 RCX: 00007fcdde59bf79 [ 1975.872279][T30184] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 1975.880286][T30184] RBP: 00007fcddc7d5090 R08: 0000000000000000 R09: 0000000000000000 [ 1975.888283][T30184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1975.896289][T30184] R13: 00007fcdde816128 R14: 00007fcdde816090 R15: 00007ffd1ee8f1b8 [ 1975.904312][T30184] [ 1976.239073][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 1976.245537][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 1976.626709][T30197] pimreg1: tun_chr_ioctl cmd 1074025677 [ 1976.667674][T30197] pimreg1: linktype set to 769 [ 1976.712116][T30207] netlink: 52 bytes leftover after parsing attributes in process `syz.3.8521'. [ 1977.110682][T30213] netlink: 'syz.5.8523': attribute type 3 has an invalid length. [ 1977.165369][T30213] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.8523'. [ 1977.224177][T30216] netlink: 36 bytes leftover after parsing attributes in process `syz.5.8523'. [ 1977.259019][T30216] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1977.677353][T30222] netlink: 144 bytes leftover after parsing attributes in process `syz.2.8527'. [ 1977.738760][T30222] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1978.916570][T30250] pimreg1: tun_chr_ioctl cmd 1074025677 [ 1978.985261][T30250] pimreg1: linktype set to 769 [ 1979.675838][ T4316] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 1979.860656][T30284] netlink: 'syz.0.8548': attribute type 10 has an invalid length. [ 1979.868573][T30284] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.8548'. [ 1981.749593][ T4316] Bluetooth: hci2: command 0x2016 tx timeout [ 1985.769927][T30301] netlink: 52 bytes leftover after parsing attributes in process `syz.3.8551'. [ 1985.783115][T30312] pimreg1: tun_chr_ioctl cmd 1074025677 [ 1985.789742][T30312] pimreg1: linktype set to 769 [ 1986.348101][T30331] pimreg1: tun_chr_ioctl cmd 1074025677 [ 1986.366913][T30331] pimreg1: linktype set to 769 [ 1986.426340][T30338] FAULT_INJECTION: forcing a failure. [ 1986.426340][T30338] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1986.454011][T30338] CPU: 0 PID: 30338 Comm: syz.5.8562 Not tainted syzkaller #0 [ 1986.461573][T30338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1986.471753][T30338] Call Trace: [ 1986.475080][T30338] [ 1986.478057][T30338] dump_stack_lvl+0x188/0x24e [ 1986.482802][T30338] ? show_regs_print_info+0x12/0x12 [ 1986.488161][T30338] ? load_image+0x400/0x400 [ 1986.492741][T30338] ? __lock_acquire+0x7d10/0x7d10 [ 1986.497845][T30338] should_fail_ex+0x399/0x4d0 [ 1986.502605][T30338] _copy_from_user+0x2c/0x170 [ 1986.507347][T30338] ___sys_sendmsg+0x1c3/0x360 [ 1986.512105][T30338] ? __sys_sendmsg+0x290/0x290 [ 1986.517009][T30338] __se_sys_sendmsg+0x1bb/0x2a0 [ 1986.521929][T30338] ? ct_nmi_exit+0x145/0x1c0 [ 1986.526581][T30338] ? __x64_sys_sendmsg+0x80/0x80 [ 1986.531604][T30338] ? lockdep_hardirqs_on+0x94/0x140 [ 1986.536864][T30338] do_syscall_64+0x4c/0xa0 [ 1986.541862][T30338] ? clear_bhb_loop+0x60/0xb0 [ 1986.546611][T30338] ? clear_bhb_loop+0x60/0xb0 [ 1986.551351][T30338] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1986.557307][T30338] RIP: 0033:0x7f0f2959bf79 [ 1986.561778][T30338] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1986.581454][T30338] RSP: 002b:00007f0f277f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1986.589936][T30338] RAX: ffffffffffffffda RBX: 00007f0f29815fa0 RCX: 00007f0f2959bf79 [ 1986.597962][T30338] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000005 [ 1986.605991][T30338] RBP: 00007f0f277f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1986.614022][T30338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1986.622050][T30338] R13: 00007f0f29816038 R14: 00007f0f29815fa0 R15: 00007ffce997dec8 [ 1986.630103][T30338] [ 1986.707920][T30342] netlink: 'syz.2.8563': attribute type 21 has an invalid length. [ 1987.156906][T30350] netlink: 184 bytes leftover after parsing attributes in process `syz.2.8566'. [ 1987.356012][T30347] pimreg1: tun_chr_ioctl cmd 1074025677 [ 1987.386420][T30347] pimreg1: linktype set to 769 [ 1987.548327][T30357] netlink: 184 bytes leftover after parsing attributes in process `syz.5.8568'. [ 1987.617229][T30364] netlink: 'syz.2.8571': attribute type 13 has an invalid length. [ 1987.639337][T30364] netlink: 152 bytes leftover after parsing attributes in process `syz.2.8571'. [ 1987.826572][T30364] erspan0: refused to change device tx_queue_len [ 1987.845387][T30364] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 1987.896460][T30371] netlink: 10 bytes leftover after parsing attributes in process `syz.5.8573'. [ 1989.087693][T30370] netlink: 763 bytes leftover after parsing attributes in process `syz.5.8573'. [ 1989.125330][T30377] netlink: 52 bytes leftover after parsing attributes in process `syz.3.8576'. [ 1989.172215][T30380] pimreg1: tun_chr_ioctl cmd 1074025677 [ 1989.178166][T30380] pimreg1: linktype set to 769 [ 1989.377486][T30393] netlink: 52 bytes leftover after parsing attributes in process `syz.2.8580'. [ 1989.636027][T30396] netlink: 184 bytes leftover after parsing attributes in process `syz.0.8581'. [ 1992.957436][ T4318] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 1993.023452][T30413] netlink: 184 bytes leftover after parsing attributes in process `syz.3.8585'. [ 1993.535381][T30428] pimreg1: tun_chr_ioctl cmd 1074025677 [ 1993.571437][T30428] pimreg1: linktype set to 769 [ 1993.698619][T30431] netlink: 16255 bytes leftover after parsing attributes in process `syz.3.8594'. [ 1993.927598][T30439] netlink: 'syz.4.8595': attribute type 39 has an invalid length. [ 1994.035857][T30427] pimreg1: tun_chr_ioctl cmd 1074025677 [ 1994.112927][T30427] pimreg1: linktype set to 769 [ 1994.149025][T30441] device wg2 left promiscuous mode [ 1994.299024][T30453] FAULT_INJECTION: forcing a failure. [ 1994.299024][T30453] name failslab, interval 1, probability 0, space 0, times 0 [ 1994.331175][T30453] CPU: 1 PID: 30453 Comm: syz.4.8599 Not tainted syzkaller #0 [ 1994.338823][T30453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1994.348947][T30453] Call Trace: [ 1994.352276][T30453] [ 1994.355263][T30453] dump_stack_lvl+0x188/0x24e [ 1994.360017][T30453] ? show_regs_print_info+0x12/0x12 [ 1994.365283][T30453] ? load_image+0x400/0x400 [ 1994.369859][T30453] ? __might_sleep+0xd0/0xd0 [ 1994.374506][T30453] ? __lock_acquire+0x7d10/0x7d10 [ 1994.379599][T30453] should_fail_ex+0x399/0x4d0 [ 1994.384351][T30453] should_failslab+0x5/0x20 [ 1994.388922][T30453] slab_pre_alloc_hook+0x59/0x310 [ 1994.394007][T30453] ? apparmor_sk_alloc_security+0x74/0x100 [ 1994.399892][T30453] __kmem_cache_alloc_node+0x4f/0x260 [ 1994.405318][T30453] ? apparmor_sk_alloc_security+0x74/0x100 [ 1994.411172][T30453] kmalloc_trace+0x26/0xe0 [ 1994.415634][T30453] apparmor_sk_alloc_security+0x74/0x100 [ 1994.421316][T30453] security_sk_alloc+0x6a/0xa0 [ 1994.426130][T30453] sk_prot_alloc+0x101/0x210 [ 1994.430752][T30453] ? sk_alloc+0x20/0x340 [ 1994.435036][T30453] sk_alloc+0x36/0x340 [ 1994.439150][T30453] ? bpf_ctx_init+0x163/0x1a0 [ 1994.443900][T30453] ? bpf_prog_test_run_skb+0x26f/0x12a0 [ 1994.449495][T30453] bpf_prog_test_run_skb+0x35e/0x12a0 [ 1994.454928][T30453] ? __fget_files+0x28/0x4b0 [ 1994.459567][T30453] ? __fget_files+0x43d/0x4b0 [ 1994.464472][T30453] ? cpu_online+0xa0/0xa0 [ 1994.468843][T30453] bpf_prog_test_run+0x31e/0x390 [ 1994.473851][T30453] __sys_bpf+0x62b/0x780 [ 1994.478144][T30453] ? bpf_link_show_fdinfo+0x380/0x380 [ 1994.483575][T30453] ? lock_chain_count+0x20/0x20 [ 1994.488475][T30453] __x64_sys_bpf+0x78/0x90 [ 1994.492940][T30453] do_syscall_64+0x4c/0xa0 [ 1994.497400][T30453] ? clear_bhb_loop+0x60/0xb0 [ 1994.502140][T30453] ? clear_bhb_loop+0x60/0xb0 [ 1994.506878][T30453] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1994.512827][T30453] RIP: 0033:0x7ff61279bf79 [ 1994.517310][T30453] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1994.537008][T30453] RSP: 002b:00007ff61367b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1994.545459][T30453] RAX: ffffffffffffffda RBX: 00007ff612a15fa0 RCX: 00007ff61279bf79 [ 1994.553469][T30453] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 1994.561475][T30453] RBP: 00007ff61367b090 R08: 0000000000000000 R09: 0000000000000000 [ 1994.569488][T30453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1994.577507][T30453] R13: 00007ff612a16038 R14: 00007ff612a15fa0 R15: 00007ffc2a1427f8 [ 1994.585671][T30453] [ 1995.030219][ T4318] Bluetooth: hci3: command 0x2016 tx timeout [ 1995.882511][T30483] netlink: 52 bytes leftover after parsing attributes in process `syz.5.8608'. [ 1995.952629][T30484] pimreg1: tun_chr_ioctl cmd 1074025677 [ 1995.989614][T30484] pimreg1: linktype set to 769 [ 2000.007717][T30523] device bond0 entered promiscuous mode [ 2000.016209][T30523] device bond_slave_0 entered promiscuous mode [ 2000.034715][T30523] device bond_slave_1 entered promiscuous mode [ 2000.077711][T30529] pimreg1: tun_chr_ioctl cmd 1074025677 [ 2000.088991][T30529] pimreg1: linktype set to 769 [ 2000.110714][T30527] netlink: 184 bytes leftover after parsing attributes in process `syz.2.8621'. [ 2000.277828][T30537] netlink: 52 bytes leftover after parsing attributes in process `syz.3.8623'. [ 2000.322501][T30534] netlink: 184 bytes leftover after parsing attributes in process `syz.0.8622'. [ 2000.807107][T30551] netlink: 'syz.2.8626': attribute type 21 has an invalid length. [ 2001.003680][T30559] netlink: 'syz.0.8632': attribute type 12 has an invalid length. [ 2001.049690][T30559] netlink: 'syz.0.8632': attribute type 10 has an invalid length. [ 2001.082308][T30559] device veth1_vlan left promiscuous mode [ 2001.535595][T30571] netlink: 184 bytes leftover after parsing attributes in process `syz.3.8636'. [ 2002.572208][T30588] netlink: 52 bytes leftover after parsing attributes in process `syz.0.8644'. [ 2002.804032][T30599] netlink: 'syz.5.8647': attribute type 10 has an invalid length. [ 2002.819339][T30599] netlink: 55 bytes leftover after parsing attributes in process `syz.5.8647'. [ 2002.865207][T30599] netlink: 132 bytes leftover after parsing attributes in process `syz.5.8647'. [ 2003.813289][T30623] netlink: 184 bytes leftover after parsing attributes in process `syz.4.8657'. [ 2003.952048][T30631] netlink: 52 bytes leftover after parsing attributes in process `syz.0.8660'. [ 2004.711681][T30646] netlink: 144 bytes leftover after parsing attributes in process `syz.3.8665'. [ 2004.768651][T30646] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 2005.345879][T30661] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8671'. [ 2005.690631][T30667] netlink: 184 bytes leftover after parsing attributes in process `syz.2.8673'. [ 2005.728935][T30672] netlink: 140 bytes leftover after parsing attributes in process `syz.5.8672'. [ 2005.826721][T30670] netlink: 184 bytes leftover after parsing attributes in process `syz.4.8674'. [ 2006.114021][T30683] netlink: 52 bytes leftover after parsing attributes in process `syz.3.8678'. [ 2007.735740][T30698] netlink: 'syz.2.8683': attribute type 1 has an invalid length. [ 2007.784552][T30698] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.8683'. [ 2008.062897][T30708] netlink: 184 bytes leftover after parsing attributes in process `syz.3.8687'. [ 2008.886339][T30737] netlink: 52 bytes leftover after parsing attributes in process `syz.2.8697'. [ 2008.932779][T30738] netlink: 140 bytes leftover after parsing attributes in process `syz.4.8695'. [ 2009.858956][T30751] syz.3.8699[30751] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2009.859128][T30751] syz.3.8699[30751] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2010.355478][T30763] netlink: 184 bytes leftover after parsing attributes in process `syz.3.8704'. [ 2010.982465][T30774] device syzkaller0 entered promiscuous mode [ 2010.997328][T30779] netlink: 52 bytes leftover after parsing attributes in process `syz.5.8713'. [ 2016.924835][T30809] netlink: 184 bytes leftover after parsing attributes in process `syz.0.8721'. [ 2017.367015][T30866] netlink: 'syz.5.8742': attribute type 1 has an invalid length. [ 2017.383814][T30866] netlink: 'syz.5.8742': attribute type 1 has an invalid length. [ 2017.396195][T30866] netlink: 116376 bytes leftover after parsing attributes in process `syz.5.8742'. [ 2017.929122][T30874] netlink: 'syz.5.8744': attribute type 10 has an invalid length. [ 2020.511000][T30883] netlink: 184 bytes leftover after parsing attributes in process `syz.0.8747'. [ 2020.654958][T30891] netlink: 52 bytes leftover after parsing attributes in process `syz.5.8752'. [ 2020.735100][T30893] netlink: 52 bytes leftover after parsing attributes in process `syz.2.8753'. [ 2020.767881][T30889] netlink: 'syz.4.8751': attribute type 41 has an invalid length. [ 2021.776687][T30906] pimreg1: tun_chr_ioctl cmd 1074025677 [ 2021.784229][T30906] pimreg1: linktype set to 769 [ 2021.798124][T30907] pimreg1: tun_chr_ioctl cmd 1074025677 [ 2021.806374][T30907] pimreg1: linktype set to 769 [ 2021.914191][T30910] netlink: 'syz.4.8757': attribute type 10 has an invalid length. [ 2022.034560][T30910] batman_adv: batadv0: Adding interface: netdevsim0 [ 2022.043870][T30910] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2022.072135][T30910] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 2022.152848][T30913] netlink: 140 bytes leftover after parsing attributes in process `syz.0.8758'. [ 2023.299119][T30933] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8765'. [ 2023.616457][T30939] netlink: 184 bytes leftover after parsing attributes in process `syz.2.8767'. [ 2024.015329][T30951] netlink: 'syz.0.8771': attribute type 16 has an invalid length. [ 2024.039337][T30951] netlink: 48 bytes leftover after parsing attributes in process `syz.0.8771'. [ 2024.121971][T30954] netlink: 52 bytes leftover after parsing attributes in process `syz.4.8773'. [ 2024.167337][T30956] dvmrp1: tun_chr_ioctl cmd 1074025672 [ 2024.175915][T30956] dvmrp1: ignored: set checksum disabled [ 2025.350051][T30986] netlink: 140 bytes leftover after parsing attributes in process `syz.4.8781'. [ 2027.599659][T30990] netlink: 184 bytes leftover after parsing attributes in process `syz.5.8783'. [ 2028.707723][T31013] netlink: 52 bytes leftover after parsing attributes in process `syz.3.8791'. [ 2029.086153][T31016] netlink: 'syz.0.8792': attribute type 39 has an invalid length. [ 2029.451682][T31027] FAULT_INJECTION: forcing a failure. [ 2029.451682][T31027] name failslab, interval 1, probability 0, space 0, times 0 [ 2029.499982][T31027] CPU: 1 PID: 31027 Comm: syz.5.8795 Not tainted syzkaller #0 [ 2029.507545][T31027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 2029.517651][T31027] Call Trace: [ 2029.520986][T31027] [ 2029.523968][T31027] dump_stack_lvl+0x188/0x24e [ 2029.528721][T31027] ? show_regs_print_info+0x12/0x12 [ 2029.533990][T31027] ? load_image+0x400/0x400 [ 2029.538547][T31027] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2029.544599][T31027] should_fail_ex+0x399/0x4d0 [ 2029.549343][T31027] should_failslab+0x5/0x20 [ 2029.553952][T31027] slab_pre_alloc_hook+0x59/0x310 [ 2029.559107][T31027] kmem_cache_alloc+0x56/0x2f0 [ 2029.563904][T31027] ? __build_skb+0x2a/0x3c0 [ 2029.568452][T31027] __build_skb+0x2a/0x3c0 [ 2029.572832][T31027] build_skb+0x1e/0x230 [ 2029.577045][T31027] bpf_prog_test_run_skb+0x37e/0x12a0 [ 2029.582460][T31027] ? __fget_files+0x28/0x4b0 [ 2029.587093][T31027] ? __fget_files+0x43d/0x4b0 [ 2029.591814][T31027] ? cpu_online+0xa0/0xa0 [ 2029.596171][T31027] bpf_prog_test_run+0x31e/0x390 [ 2029.601163][T31027] __sys_bpf+0x62b/0x780 [ 2029.605441][T31027] ? bpf_link_show_fdinfo+0x380/0x380 [ 2029.610891][T31027] ? lock_chain_count+0x20/0x20 [ 2029.615784][T31027] __x64_sys_bpf+0x78/0x90 [ 2029.620237][T31027] do_syscall_64+0x4c/0xa0 [ 2029.624687][T31027] ? clear_bhb_loop+0x60/0xb0 [ 2029.629401][T31027] ? clear_bhb_loop+0x60/0xb0 [ 2029.634114][T31027] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2029.640041][T31027] RIP: 0033:0x7f0f2959bf79 [ 2029.644624][T31027] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2029.664283][T31027] RSP: 002b:00007f0f277f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2029.672737][T31027] RAX: ffffffffffffffda RBX: 00007f0f29815fa0 RCX: 00007f0f2959bf79 [ 2029.680761][T31027] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 2029.688795][T31027] RBP: 00007f0f277f6090 R08: 0000000000000000 R09: 0000000000000000 [ 2029.696802][T31027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2029.704812][T31027] R13: 00007f0f29816038 R14: 00007f0f29815fa0 R15: 00007ffce997dec8 [ 2029.712831][T31027] [ 2030.113404][T31043] netlink: 184 bytes leftover after parsing attributes in process `syz.4.8799'. [ 2030.757320][T31060] netlink: 140 bytes leftover after parsing attributes in process `syz.3.8803'. [ 2031.091064][T31071] netlink: 52 bytes leftover after parsing attributes in process `syz.2.8809'. [ 2031.141027][T31065] netlink: 'syz.5.8806': attribute type 10 has an invalid length. [ 2031.465204][T31065] batman_adv: batadv0: Adding interface: netdevsim0 [ 2031.503049][T31065] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2031.572883][T31065] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 2031.793472][T31069] netlink: 'syz.0.8807': attribute type 10 has an invalid length. [ 2032.207993][T31092] netlink: 52 bytes leftover after parsing attributes in process `syz.4.8816'. [ 2032.268171][T31094] netlink: 184 bytes leftover after parsing attributes in process `syz.5.8815'. [ 2032.315906][T31090] netlink: 14 bytes leftover after parsing attributes in process `syz.2.8814'. [ 2032.334880][T31090] device hsr_slave_0 left promiscuous mode [ 2032.380360][T31090] device hsr_slave_1 left promiscuous mode [ 2032.477654][T31097] netlink: 2639 bytes leftover after parsing attributes in process `syz.0.8817'. [ 2033.175784][T31113] netlink: 52 bytes leftover after parsing attributes in process `syz.3.8824'. [ 2033.575499][T31128] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8827'. [ 2033.843002][T31128] netlink: 13602 bytes leftover after parsing attributes in process `syz.0.8827'. [ 2033.858853][T31132] netlink: 'syz.5.8828': attribute type 12 has an invalid length. [ 2033.870333][T31132] netlink: 132 bytes leftover after parsing attributes in process `syz.5.8828'. [ 2034.087007][T31138] netlink: 52 bytes leftover after parsing attributes in process `syz.0.8830'. [ 2034.502803][T31149] netlink: 126632 bytes leftover after parsing attributes in process `syz.5.8834'. [ 2035.284790][T31166] netlink: 52 bytes leftover after parsing attributes in process `syz.2.8841'. [ 2035.700821][T31185] netlink: 1010 bytes leftover after parsing attributes in process `syz.4.8848'. [ 2035.764535][T31187] netlink: 52 bytes leftover after parsing attributes in process `syz.3.8849'. [ 2036.795214][T31204] netlink: 'syz.4.8855': attribute type 10 has an invalid length. [ 2036.819609][T31204] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 2036.889835][T31204] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 2036.937520][T31204] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 2036.970059][T31204] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 2037.259092][T31220] netlink: 184 bytes leftover after parsing attributes in process `syz.0.8862'. [ 2037.337020][T31222] netlink: 'syz.4.8861': attribute type 3 has an invalid length. [ 2037.346441][T31222] netlink: 'syz.4.8861': attribute type 1 has an invalid length. [ 2037.734015][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 2037.740466][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 2039.199758][T31255] __nla_validate_parse: 2 callbacks suppressed [ 2039.199777][T31255] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.8873'. [ 2039.290648][T31261] netlink: 111 bytes leftover after parsing attributes in process `syz.0.8876'. [ 2039.996042][T31271] netlink: 52 bytes leftover after parsing attributes in process `syz.3.8879'. [ 2040.488177][T31279] netlink: 52 bytes leftover after parsing attributes in process `syz.0.8880'. [ 2040.673234][T31281] netlink: 52 bytes leftover after parsing attributes in process `syz.4.8881'. [ 2040.781892][T31286] netlink: 144 bytes leftover after parsing attributes in process `syz.2.8882'. [ 2040.855606][T31286] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 2042.024238][T31300] netlink: 'syz.2.8885': attribute type 2 has an invalid length. [ 2042.061729][T31300] netlink: 'syz.2.8885': attribute type 8 has an invalid length. [ 2042.091976][T31300] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8885'. [ 2042.425548][T31311] netlink: 'syz.5.8889': attribute type 1 has an invalid length. [ 2042.690658][T31316] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.8891'. [ 2043.037839][T31320] netlink: 'syz.5.8892': attribute type 1 has an invalid length. [ 2043.067219][T31320] netlink: 105120 bytes leftover after parsing attributes in process `syz.5.8892'. [ 2043.421904][T31327] device syzkaller0 entered promiscuous mode [ 2046.515245][T31345] netlink: 184 bytes leftover after parsing attributes in process `syz.2.8899'. [ 2046.767746][T31361] netlink: 52 bytes leftover after parsing attributes in process `syz.2.8903'. [ 2046.806088][T31359] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.8904'. [ 2046.821577][T31364] netlink: 52 bytes leftover after parsing attributes in process `syz.5.8902'. [ 2047.790804][T31386] netlink: 'syz.0.8909': attribute type 10 has an invalid length. [ 2047.821160][T31386] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8909'. [ 2047.983824][T31390] netlink: 144 bytes leftover after parsing attributes in process `syz.5.8911'. [ 2048.022585][T31390] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 2048.298698][T31397] netlink: 184 bytes leftover after parsing attributes in process `syz.2.8913'. [ 2048.937560][T31414] netlink: 'syz.0.8919': attribute type 4 has an invalid length. [ 2048.974272][T31422] netlink: 'syz.3.8916': attribute type 2 has an invalid length. [ 2048.987843][T31414] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.8919'. [ 2049.006754][T31422] netlink: 'syz.3.8916': attribute type 8 has an invalid length. [ 2049.021689][T31422] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8916'. [ 2049.048115][T31414] netlink: 'syz.0.8919': attribute type 4 has an invalid length. [ 2049.084737][T31414] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.8919'. [ 2049.109831][T31414] netlink: 'syz.0.8919': attribute type 4 has an invalid length. [ 2049.152538][T31414] netlink: 'syz.0.8919': attribute type 4 has an invalid length. [ 2049.211151][T31414] netlink: 'syz.0.8919': attribute type 4 has an invalid length. [ 2049.248948][T31414] netlink: 'syz.0.8919': attribute type 4 has an invalid length. [ 2049.286964][T31414] netlink: 'syz.0.8919': attribute type 4 has an invalid length. [ 2049.943631][T31433] device syzkaller0 entered promiscuous mode [ 2052.605056][T31440] __nla_validate_parse: 64 callbacks suppressed [ 2052.605073][T31440] netlink: 184 bytes leftover after parsing attributes in process `syz.0.8927'. [ 2052.636251][T31449] netlink: 14 bytes leftover after parsing attributes in process `syz.2.8929'. [ 2053.183624][T31460] device syzkaller0 entered promiscuous mode [ 2056.862844][T31484] netlink: 184 bytes leftover after parsing attributes in process `syz.2.8940'. [ 2057.040619][T31501] netlink: 52 bytes leftover after parsing attributes in process `syz.5.8947'. [ 2057.346850][T31514] validate_nla: 58 callbacks suppressed [ 2057.346891][T31514] netlink: 'syz.0.8951': attribute type 11 has an invalid length. [ 2057.401181][T31514] netlink: 168 bytes leftover after parsing attributes in process `syz.0.8951'. [ 2057.693708][T31524] netlink: 52 bytes leftover after parsing attributes in process `syz.2.8953'. [ 2058.338997][T31544] pimreg1: tun_chr_ioctl cmd 1074025677 [ 2058.359533][T31544] pimreg1: linktype set to 769 [ 2058.463703][T31546] netlink: 184 bytes leftover after parsing attributes in process `syz.5.8959'. [ 2058.746217][T31554] pimreg1: tun_chr_ioctl cmd 1074025677 [ 2058.764031][T31554] pimreg1: linktype set to 769 [ 2060.015910][T31575] netlink: 'syz.3.8968': attribute type 11 has an invalid length. [ 2060.046309][T31575] netlink: 168 bytes leftover after parsing attributes in process `syz.3.8968'. [ 2060.350014][T31592] netlink: 184 bytes leftover after parsing attributes in process `syz.2.8973'. [ 2061.103815][T31610] netlink: 152 bytes leftover after parsing attributes in process `syz.2.8980'. [ 2062.005948][T31621] netlink: 'syz.3.8983': attribute type 16 has an invalid length. [ 2062.018635][T31621] netlink: 48 bytes leftover after parsing attributes in process `syz.3.8983'. [ 2062.063101][T31620] netlink: 52 bytes leftover after parsing attributes in process `syz.0.8982'. [ 2062.927403][T31629] netlink: 'syz.4.8985': attribute type 11 has an invalid length. [ 2062.952441][T31629] netlink: 168 bytes leftover after parsing attributes in process `syz.4.8985'. [ 2063.363951][T31637] netlink: 184 bytes leftover after parsing attributes in process `syz.5.8988'. [ 2064.690183][T31652] netlink: 'syz.3.8993': attribute type 3 has an invalid length. [ 2064.813438][T31652] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8993'. [ 2065.229537][T31660] netlink: 52 bytes leftover after parsing attributes in process `syz.4.8997'. [ 2065.446063][T31671] netlink: 14 bytes leftover after parsing attributes in process `syz.3.8999'. [ 2065.606824][T31671] device hsr_slave_0 left promiscuous mode [ 2065.643648][T31671] device hsr_slave_1 left promiscuous mode [ 2066.034667][T31681] netlink: 184 bytes leftover after parsing attributes in process `syz.2.9002'. [ 2066.588273][T31694] FAULT_INJECTION: forcing a failure. [ 2066.588273][T31694] name failslab, interval 1, probability 0, space 0, times 0 [ 2066.629173][T31694] CPU: 0 PID: 31694 Comm: syz.3.9006 Not tainted syzkaller #0 [ 2066.636735][T31694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 2066.646855][T31694] Call Trace: [ 2066.650184][T31694] [ 2066.653157][T31694] dump_stack_lvl+0x188/0x24e [ 2066.657903][T31694] ? show_regs_print_info+0x12/0x12 [ 2066.663164][T31694] ? load_image+0x400/0x400 [ 2066.667745][T31694] should_fail_ex+0x399/0x4d0 [ 2066.672520][T31694] should_failslab+0x5/0x20 [ 2066.677104][T31694] slab_pre_alloc_hook+0x59/0x310 [ 2066.682194][T31694] ? verify_lock_unused+0x140/0x140 [ 2066.687465][T31694] kmem_cache_alloc+0x56/0x2f0 [ 2066.692288][T31694] ? skb_clone+0x1e7/0x370 [ 2066.696782][T31694] skb_clone+0x1e7/0x370 [ 2066.701097][T31694] bpf_clone_redirect+0x163/0x4a0 [ 2066.706193][T31694] bpf_prog_e97454e6a39c6b06+0x59/0x5e [ 2066.711716][T31694] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2066.717774][T31694] ? lock_chain_count+0x20/0x20 [ 2066.722697][T31694] ? seqcount_lockdep_reader_access+0x127/0x1d0 [ 2066.728998][T31694] ? lockdep_hardirqs_on+0x94/0x140 [ 2066.734293][T31694] ? ktime_get+0x7b/0x270 [ 2066.738688][T31694] ? seqcount_lockdep_reader_access+0x18d/0x1d0 [ 2066.745004][T31694] ? ktime_get_real_ts64+0x440/0x440 [ 2066.750364][T31694] ? read_lock_is_recursive+0x10/0x10 [ 2066.755813][T31694] ? __cant_sleep+0x220/0x220 [ 2066.760554][T31694] ? ktime_get+0x247/0x270 [ 2066.765042][T31694] bpf_test_run+0x2b6/0x830 [ 2066.769624][T31694] ? convert___skb_to_skb+0x580/0x580 [ 2066.775056][T31694] ? eth_get_headlen+0x200/0x200 [ 2066.780061][T31694] ? __build_skb+0x257/0x3c0 [ 2066.784726][T31694] ? convert___skb_to_skb+0x3d/0x580 [ 2066.790073][T31694] bpf_prog_test_run_skb+0xaa6/0x12a0 [ 2066.795522][T31694] ? cpu_online+0xa0/0xa0 [ 2066.799920][T31694] bpf_prog_test_run+0x31e/0x390 [ 2066.804932][T31694] __sys_bpf+0x62b/0x780 [ 2066.809332][T31694] ? bpf_link_show_fdinfo+0x380/0x380 [ 2066.814796][T31694] ? lock_chain_count+0x20/0x20 [ 2066.819738][T31694] __x64_sys_bpf+0x78/0x90 [ 2066.824302][T31694] do_syscall_64+0x4c/0xa0 [ 2066.828792][T31694] ? clear_bhb_loop+0x60/0xb0 [ 2066.833536][T31694] ? clear_bhb_loop+0x60/0xb0 [ 2066.838286][T31694] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2066.844253][T31694] RIP: 0033:0x7fa6a059bf79 [ 2066.848728][T31694] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2066.868397][T31694] RSP: 002b:00007fa6a1542028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2066.876888][T31694] RAX: ffffffffffffffda RBX: 00007fa6a0815fa0 RCX: 00007fa6a059bf79 [ 2066.884914][T31694] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 2066.892952][T31694] RBP: 00007fa6a1542090 R08: 0000000000000000 R09: 0000000000000000 [ 2066.901327][T31694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2066.909372][T31694] R13: 00007fa6a0816038 R14: 00007fa6a0815fa0 R15: 00007ffce6fcf868 [ 2066.917425][T31694] [ 2070.022185][T31722] netlink: 52 bytes leftover after parsing attributes in process `syz.0.9016'. [ 2070.171813][T31727] netlink: 'syz.2.9019': attribute type 21 has an invalid length. [ 2070.245926][T31727] netlink: 'syz.2.9019': attribute type 3 has an invalid length. [ 2070.301354][T31727] netlink: 144 bytes leftover after parsing attributes in process `syz.2.9019'. [ 2070.337499][T31724] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2070.345053][T31724] IPv6: NLM_F_CREATE should be set when creating new route [ 2070.352755][T31724] IPv6: NLM_F_CREATE should be set when creating new route [ 2070.360177][T31724] IPv6: NLM_F_CREATE should be set when creating new route [ 2070.373752][T31728] netlink: 184 bytes leftover after parsing attributes in process `syz.3.9018'. [ 2071.755996][T31759] netlink: 52 bytes leftover after parsing attributes in process `syz.2.9027'. [ 2074.395078][T31779] netlink: 188 bytes leftover after parsing attributes in process `syz.0.9033'. [ 2074.443056][T31772] netlink: 'syz.5.9031': attribute type 41 has an invalid length. [ 2074.759101][T31790] netlink: 52 bytes leftover after parsing attributes in process `syz.2.9037'. [ 2076.281569][T31820] netlink: 52 bytes leftover after parsing attributes in process `syz.5.9048'. [ 2077.863709][T31862] netlink: 14 bytes leftover after parsing attributes in process `syz.5.9060'. [ 2078.084606][T31862] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2078.123913][T31862] device bond_slave_0 left promiscuous mode [ 2078.187638][T31862] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2078.214822][T31862] device bond_slave_1 left promiscuous mode [ 2078.268017][T31862] bond0 (unregistering): Released all slaves [ 2078.488246][T31863] netlink: 16255 bytes leftover after parsing attributes in process `syz.5.9060'. [ 2078.529880][T31865] netlink: 'syz.2.9063': attribute type 10 has an invalid length. [ 2078.537798][T31865] netlink: 55 bytes leftover after parsing attributes in process `syz.2.9063'. [ 2078.566200][T31869] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9063'. [ 2078.888752][T31885] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.9071'. [ 2078.996933][T31888] netlink: 52 bytes leftover after parsing attributes in process `syz.5.9072'. [ 2082.068272][T31899] netlink: 152 bytes leftover after parsing attributes in process `syz.3.9075'. [ 2082.728522][T31925] netlink: 10 bytes leftover after parsing attributes in process `syz.3.9083'. [ 2083.049858][T31921] netlink: 'syz.2.9080': attribute type 41 has an invalid length. [ 2083.385273][T31937] netlink: 184 bytes leftover after parsing attributes in process `syz.3.9085'. [ 2083.972428][T31951] netlink: 144 bytes leftover after parsing attributes in process `syz.0.9091'. [ 2084.960343][T31969] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2085.005709][T31969] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2085.017233][T31969] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2085.027020][T31969] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2085.040752][T31969] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 2085.059778][T31969] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2085.252856][ T4394] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2085.466083][ T4394] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2085.705505][ T4394] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2086.171445][ T4394] batman_adv: batadv0: Removing interface: netdevsim0 [ 2086.180790][ T4394] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2086.480130][T32004] netlink: 52 bytes leftover after parsing attributes in process `syz.0.9108'. [ 2086.794083][T32007] netlink: 52 bytes leftover after parsing attributes in process `syz.3.9109'. [ 2086.844649][T32010] netlink: 'syz.5.9110': attribute type 10 has an invalid length. [ 2087.026024][T32010] netlink: 'syz.5.9110': attribute type 17 has an invalid length. [ 2087.051216][T32010] netlink: 'syz.5.9110': attribute type 41 has an invalid length. [ 2087.073780][T32010] netlink: 152 bytes leftover after parsing attributes in process `syz.5.9110'. [ 2087.088548][T32011] netlink: 'syz.5.9110': attribute type 33 has an invalid length. [ 2087.097423][T32011] netlink: 152 bytes leftover after parsing attributes in process `syz.5.9110'. [ 2087.109409][T31969] Bluetooth: hci0: command 0x0409 tx timeout [ 2087.278048][ T4394] device .*! left promiscuous mode [ 2087.562257][ T4394] device 0 left promiscuous mode [ 2087.625854][T31968] chnl_net:caif_netlink_parms(): no params data found [ 2087.962920][T32031] FAULT_INJECTION: forcing a failure. [ 2087.962920][T32031] name failslab, interval 1, probability 0, space 0, times 0 [ 2087.979440][T32031] CPU: 0 PID: 32031 Comm: syz.5.9113 Not tainted syzkaller #0 [ 2087.986986][T32031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 2087.997118][T32031] Call Trace: [ 2088.000439][T32031] [ 2088.003414][T32031] dump_stack_lvl+0x188/0x24e [ 2088.008151][T32031] ? show_regs_print_info+0x12/0x12 [ 2088.013405][T32031] ? load_image+0x400/0x400 [ 2088.017966][T32031] ? __might_sleep+0xd0/0xd0 [ 2088.022611][T32031] ? __lock_acquire+0x7d10/0x7d10 [ 2088.027709][T32031] should_fail_ex+0x399/0x4d0 [ 2088.032458][T32031] should_failslab+0x5/0x20 [ 2088.037023][T32031] slab_pre_alloc_hook+0x59/0x310 [ 2088.042106][T32031] ? sk_prot_alloc+0xe7/0x210 [ 2088.046838][T32031] __kmem_cache_alloc_node+0x4f/0x260 [ 2088.052302][T32031] ? sk_prot_alloc+0xe7/0x210 [ 2088.057032][T32031] __kmalloc+0xa0/0x240 [ 2088.061249][T32031] sk_prot_alloc+0xe7/0x210 [ 2088.065806][T32031] ? sk_alloc+0x20/0x340 [ 2088.070099][T32031] sk_alloc+0x36/0x340 [ 2088.074221][T32031] ? bpf_ctx_init+0x163/0x1a0 [ 2088.078961][T32031] ? bpf_prog_test_run_skb+0x26f/0x12a0 [ 2088.084570][T32031] bpf_prog_test_run_skb+0x35e/0x12a0 [ 2088.089987][T32031] ? __fget_files+0x28/0x4b0 [ 2088.094620][T32031] ? __fget_files+0x43d/0x4b0 [ 2088.099417][T32031] ? cpu_online+0xa0/0xa0 [ 2088.103781][T32031] bpf_prog_test_run+0x31e/0x390 [ 2088.108764][T32031] __sys_bpf+0x62b/0x780 [ 2088.113041][T32031] ? bpf_link_show_fdinfo+0x380/0x380 [ 2088.118462][T32031] ? lock_chain_count+0x20/0x20 [ 2088.123340][T32031] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2088.129367][T32031] __x64_sys_bpf+0x78/0x90 [ 2088.133822][T32031] do_syscall_64+0x4c/0xa0 [ 2088.138273][T32031] ? clear_bhb_loop+0x60/0xb0 [ 2088.142992][T32031] ? clear_bhb_loop+0x60/0xb0 [ 2088.147697][T32031] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2088.153619][T32031] RIP: 0033:0x7f0f2959bf79 [ 2088.158071][T32031] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2088.177821][T32031] RSP: 002b:00007f0f277f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2088.186270][T32031] RAX: ffffffffffffffda RBX: 00007f0f29815fa0 RCX: 00007f0f2959bf79 [ 2088.194280][T32031] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 2088.202294][T32031] RBP: 00007f0f277f6090 R08: 0000000000000000 R09: 0000000000000000 [ 2088.210320][T32031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2088.218327][T32031] R13: 00007f0f29816038 R14: 00007f0f29815fa0 R15: 00007ffce997dec8 [ 2088.226351][T32031] [ 2088.539056][T31968] bridge0: port 1(bridge_slave_0) entered blocking state [ 2088.579527][T31968] bridge0: port 1(bridge_slave_0) entered disabled state [ 2088.604980][T31968] device bridge_slave_0 entered promiscuous mode [ 2088.708823][T31968] bridge0: port 2(bridge_slave_1) entered blocking state [ 2088.720108][T31968] bridge0: port 2(bridge_slave_1) entered disabled state [ 2088.728434][T31968] device bridge_slave_1 entered promiscuous mode [ 2088.888739][T31968] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2088.928343][T31968] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2089.125439][T31968] team0: Port device team_slave_0 added [ 2089.199328][T31969] Bluetooth: hci0: command 0x041b tx timeout [ 2089.236755][T31968] team0: Port device team_slave_1 added [ 2089.465427][T31968] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2089.495121][T31968] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2089.597293][T31968] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2089.697725][T31968] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2089.709557][T31968] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2089.777606][T31968] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2090.122714][T31968] device hsr_slave_0 entered promiscuous mode [ 2090.142837][T31968] device hsr_slave_1 entered promiscuous mode [ 2090.825878][ T4394] team0: Port device wlan1 removed [ 2090.864102][T32074] netlink: 14 bytes leftover after parsing attributes in process `syz.0.9121'. [ 2091.069117][T32088] netlink: 52 bytes leftover after parsing attributes in process `syz.5.9126'. [ 2091.276461][T31969] Bluetooth: hci0: command 0x040f tx timeout [ 2091.471964][T32095] device syzkaller0 entered promiscuous mode [ 2091.645240][ T4394] device hsr_slave_0 left promiscuous mode [ 2091.668144][ T4394] device hsr_slave_1 left promiscuous mode [ 2091.699096][ T4394] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2091.725427][ T4394] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2091.748401][ T4394] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2091.772854][ T4394] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2091.802535][ T4394] bridge0: port 3(team0) entered disabled state [ 2091.844823][ T4394] device bridge_slave_1 left promiscuous mode [ 2091.851323][ T4394] bridge0: port 2(bridge_slave_1) entered disabled state [ 2091.875640][ T4394] device bridge_slave_0 left promiscuous mode [ 2091.888279][ T4394] bridge0: port 1(bridge_slave_0) entered disabled state [ 2091.964790][ T4394] device veth0_macvtap left promiscuous mode [ 2091.977790][ T4394] device veth1_vlan left promiscuous mode [ 2091.985925][ T4394] device veth0_vlan left promiscuous mode [ 2092.265414][ T4394] device geneve1 left promiscuous mode [ 2092.291333][ T4394] team0 (unregistering): Port device geneve1 removed [ 2092.602415][ T4394] device macvlan1 left promiscuous mode [ 2092.614872][ T4394] team0 (unregistering): Port device macvlan1 removed [ 2092.981979][ T4394] device team_slave_1 left promiscuous mode [ 2092.988748][ T4394] team0 (unregistering): Port device team_slave_1 removed [ 2093.082710][ T4394] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2093.134747][ T4394] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2093.360288][ T4316] Bluetooth: hci0: command 0x0419 tx timeout [ 2093.524544][ T4394] bond0 (unregistering): Released all slaves [ 2093.647291][T32107] netlink: 184 bytes leftover after parsing attributes in process `syz.3.9132'. [ 2094.486715][T32145] netlink: 'syz.2.9142': attribute type 21 has an invalid length. [ 2094.560831][T32145] netlink: 'syz.2.9142': attribute type 27 has an invalid length. [ 2094.604182][T32145] netlink: 2418 bytes leftover after parsing attributes in process `syz.2.9142'. [ 2094.723131][T31968] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2094.785635][T31968] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2094.804003][T31968] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2094.834583][T31968] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2094.978425][T32161] netlink: 184 bytes leftover after parsing attributes in process `syz.2.9145'. [ 2095.153810][T32167] netlink: 184 bytes leftover after parsing attributes in process `syz.0.9146'. [ 2095.363240][T31968] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2095.388761][T13386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2095.443252][T13386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2095.483006][T31968] 8021q: adding VLAN 0 to HW filter on device team0 [ 2095.623015][T17378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2095.640329][T17378] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2095.743125][T17378] bridge0: port 1(bridge_slave_0) entered blocking state [ 2095.750436][T17378] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2095.786539][T17378] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2095.899432][T13386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2095.926606][T13386] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2095.949932][T13386] bridge0: port 2(bridge_slave_1) entered blocking state [ 2095.957178][T13386] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2096.076668][T13386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2096.097711][T13386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2096.168000][T31968] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2096.219558][T31968] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2096.322602][T13386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2096.343368][T13386] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2096.358409][T13386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2096.375800][T13386] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2096.387349][T13386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2096.403707][T13386] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2096.418587][T13386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2096.436879][T13386] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2097.401691][T13386] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2097.436424][T13386] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2097.584218][T32199] netlink: 52 bytes leftover after parsing attributes in process `syz.2.9155'. [ 2097.696957][T32201] netlink: 'syz.5.9156': attribute type 16 has an invalid length. [ 2097.762987][T32201] netlink: 48 bytes leftover after parsing attributes in process `syz.5.9156'. [ 2098.108248][T31968] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2098.160709][T13386] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2098.182646][T13386] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2098.313421][T32206] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9157'. [ 2098.343515][T32216] netlink: 52 bytes leftover after parsing attributes in process `syz.0.9159'. [ 2099.160068][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 2099.166442][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 2099.312450][T32234] netlink: 'syz.3.9163': attribute type 1 has an invalid length. [ 2100.695180][T32251] netlink: 184 bytes leftover after parsing attributes in process `syz.3.9167'. [ 2100.706206][T32262] netlink: 'syz.2.9171': attribute type 10 has an invalid length. [ 2100.744591][T32262] netlink: 55 bytes leftover after parsing attributes in process `syz.2.9171'. [ 2102.347157][T30827] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2102.383404][T30827] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2102.571056][T32274] netlink: 52 bytes leftover after parsing attributes in process `syz.2.9175'. [ 2102.632979][T32276] netlink: 184 bytes leftover after parsing attributes in process `syz.3.9176'. [ 2103.001648][T32287] FAULT_INJECTION: forcing a failure. [ 2103.001648][T32287] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2103.021717][T13386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2103.049547][T32287] CPU: 0 PID: 32287 Comm: syz.0.9178 Not tainted syzkaller #0 [ 2103.052290][T13386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2103.057110][T32287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 2103.057127][T32287] Call Trace: [ 2103.078222][T32287] [ 2103.081206][T32287] dump_stack_lvl+0x188/0x24e [ 2103.085950][T32287] ? show_regs_print_info+0x12/0x12 [ 2103.091215][T32287] ? load_image+0x400/0x400 [ 2103.095785][T32287] ? __lock_acquire+0x7d10/0x7d10 [ 2103.100869][T32287] ? __rcu_read_unlock+0x78/0xd0 [ 2103.105874][T32287] should_fail_ex+0x399/0x4d0 [ 2103.110625][T32287] _copy_to_user+0x2c/0x130 [ 2103.115193][T32287] bpf_test_finish+0x266/0x600 [ 2103.120021][T32287] ? convert___skb_to_skb+0x580/0x580 [ 2103.125456][T32287] ? convert_skb_to___skb+0x420/0x420 [ 2103.130891][T32287] ? __build_skb+0x257/0x3c0 [ 2103.135556][T32287] bpf_prog_test_run_skb+0xc99/0x12a0 [ 2103.141004][T32287] ? cpu_online+0xa0/0xa0 [ 2103.145389][T32287] bpf_prog_test_run+0x31e/0x390 [ 2103.150394][T32287] __sys_bpf+0x62b/0x780 [ 2103.154694][T32287] ? bpf_link_show_fdinfo+0x380/0x380 [ 2103.160578][T32287] ? lock_chain_count+0x20/0x20 [ 2103.165498][T32287] __x64_sys_bpf+0x78/0x90 [ 2103.169988][T32287] do_syscall_64+0x4c/0xa0 [ 2103.174459][T32287] ? clear_bhb_loop+0x60/0xb0 [ 2103.179209][T32287] ? clear_bhb_loop+0x60/0xb0 [ 2103.184035][T32287] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2103.190086][T32287] RIP: 0033:0x7f83fb19bf79 [ 2103.194551][T32287] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2103.214220][T32287] RSP: 002b:00007f83fc021028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2103.220396][T31968] device veth0_vlan entered promiscuous mode [ 2103.222696][T32287] RAX: ffffffffffffffda RBX: 00007f83fb415fa0 RCX: 00007f83fb19bf79 [ 2103.222716][T32287] RDX: 0000000000000050 RSI: 0000200000000140 RDI: 000000000000000a [ 2103.222732][T32287] RBP: 00007f83fc021090 R08: 0000000000000000 R09: 0000000000000000 [ 2103.222747][T32287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2103.260894][T32287] R13: 00007f83fb416038 R14: 00007f83fb415fa0 R15: 00007ffd81ef7858 [ 2103.268939][T32287] [ 2103.286071][T13386] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2103.316239][T13386] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2103.476499][T31968] device veth1_vlan entered promiscuous mode [ 2103.690228][T13399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2103.730077][T13399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2103.811912][T31968] device veth0_macvtap entered promiscuous mode [ 2103.868742][T31968] device veth1_macvtap entered promiscuous mode [ 2103.870548][T32301] netlink: 'syz.3.9182': attribute type 11 has an invalid length. [ 2103.885199][T32301] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.9182'. [ 2103.898390][T32301] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2104.200320][T32307] netlink: 'syz.3.9183': attribute type 11 has an invalid length. [ 2104.239688][T32307] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.9183'. [ 2104.267818][T31968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2104.299494][T32306] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2104.309656][T31968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2104.319966][T31968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2104.332968][T31968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2104.353595][T31968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2104.372520][T31968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2104.382842][T31968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2104.394194][T31968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2104.416153][T31968] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2104.435051][T13379] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2104.444580][T13379] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2104.461216][T13379] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2104.471164][T13379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2104.652864][T31968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2104.682964][T31968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2104.717083][T31968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2104.728879][T31968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2104.744247][T31968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2104.756042][T31968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2104.774722][T31968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2104.788653][T32317] netlink: 'syz.3.9185': attribute type 2 has an invalid length. [ 2104.795788][T31968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2104.833888][T31968] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2104.873087][T32317] device 1 entered promiscuous mode [ 2104.889086][T13399] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2104.908464][T13399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2105.012136][T31968] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2105.045643][T31968] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2105.069724][T31968] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2105.098869][T31968] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2105.583601][T13399] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2105.647217][T13399] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2105.736347][T17378] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2105.860204][T30827] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2105.868280][T30827] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2106.002943][T30827] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2106.412517][T32335] netlink: 184 bytes leftover after parsing attributes in process `syz.2.9188'. [ 2107.059562][T32347] netlink: 52 bytes leftover after parsing attributes in process `syz.4.9193'. [ 2107.613654][T32362] netlink: 52 bytes leftover after parsing attributes in process `syz.0.9197'. [ 2108.528214][ T4316] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2108.547041][ T4316] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2108.556833][ T4316] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2108.579787][ T4316] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2108.588992][ T4316] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 2108.596820][ T4316] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2108.728083][T17378] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2108.969706][T17378] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2109.204942][T17378] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2109.349979][T17378] bond0: (slave netdevsim0): Releasing backup interface [ 2109.393614][T17378] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2109.489422][T32394] netlink: 184 bytes leftover after parsing attributes in process `syz.5.9203'. [ 2109.551788][T32374] chnl_net:caif_netlink_parms(): no params data found [ 2109.953887][T32374] bridge0: port 1(bridge_slave_0) entered blocking state [ 2110.019086][T32374] bridge0: port 1(bridge_slave_0) entered disabled state [ 2110.050685][T32374] device bridge_slave_0 entered promiscuous mode [ 2110.125724][T32417] netlink: 52 bytes leftover after parsing attributes in process `syz.5.9210'. [ 2110.157427][T32374] bridge0: port 2(bridge_slave_1) entered blocking state [ 2110.170822][T32374] bridge0: port 2(bridge_slave_1) entered disabled state [ 2110.199648][T32374] device bridge_slave_1 entered promiscuous mode [ 2110.250104][T17378] device 0 left promiscuous mode [ 2110.297760][T32374] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2110.339671][T17378] device 1 left promiscuous mode [ 2110.395920][T32374] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2110.532063][T32374] team0: Port device team_slave_0 added [ 2110.568780][T32374] team0: Port device team_slave_1 added [ 2110.629803][T31969] Bluetooth: hci2: command 0x0409 tx timeout [ 2111.113924][T32374] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2111.139256][T32374] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2111.236650][T32374] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2111.460348][T32374] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2111.467381][T32374] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2111.627324][T32374] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2111.973916][T32374] device hsr_slave_0 entered promiscuous mode [ 2111.992494][T32374] device hsr_slave_1 entered promiscuous mode [ 2112.005106][T32374] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2112.024560][T32374] Cannot create hsr debugfs directory [ 2112.045820][T32460] netlink: 144 bytes leftover after parsing attributes in process `syz.0.9222'. [ 2112.070227][T32460] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 2112.504434][T32473] netlink: 52 bytes leftover after parsing attributes in process `syz.2.9225'. [ 2112.719673][T31969] Bluetooth: hci2: command 0x041b tx timeout [ 2113.574779][T17378] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2113.588103][T17378] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2113.632861][T17378] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2113.645241][T17378] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2113.674195][T17378] device bridge_slave_1 left promiscuous mode [ 2113.692233][T17378] bridge0: port 2(bridge_slave_1) entered disabled state [ 2113.723379][T17378] device bridge_slave_0 left promiscuous mode [ 2113.743428][T17378] bridge0: port 1(bridge_slave_0) entered disabled state [ 2113.840968][T17378] device veth1_macvtap left promiscuous mode [ 2113.863034][T17378] device veth0_macvtap left promiscuous mode [ 2114.789258][T31969] Bluetooth: hci2: command 0x040f tx timeout [ 2115.115700][T32516] netlink: 'syz.5.9237': attribute type 1 has an invalid length. [ 2115.143699][T32516] netlink: 105120 bytes leftover after parsing attributes in process `syz.5.9237'. [ 2116.058064][T17378] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2116.142567][T17378] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2116.575453][T17378] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 2116.641684][T17378] bond0 (unregistering): Released all slaves [ 2116.835103][T32529] netlink: 'syz.5.9242': attribute type 39 has an invalid length. [ 2116.869596][T31969] Bluetooth: hci2: command 0x0419 tx timeout [ 2116.904330][T32545] netlink: 'syz.0.9249': attribute type 21 has an invalid length. [ 2116.912958][T32545] netlink: 'syz.0.9249': attribute type 22 has an invalid length. [ 2116.921070][T32545] netlink: 14380 bytes leftover after parsing attributes in process `syz.0.9249'. [ 2117.273683][T32374] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2117.350049][T32374] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2117.366366][T32374] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2117.401720][T32553] netlink: 184 bytes leftover after parsing attributes in process `syz.5.9252'. [ 2117.444087][T32374] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2117.954496][T32374] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2118.049438][T13386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2118.070088][T13386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2118.090279][T32574] device syz_tun entered promiscuous mode [ 2118.101250][T32374] 8021q: adding VLAN 0 to HW filter on device team0 [ 2118.116056][T32574] device syz_tun left promiscuous mode [ 2118.165013][T13386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2118.178699][T13386] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2118.242496][T13386] bridge0: port 1(bridge_slave_0) entered blocking state [ 2118.249746][T13386] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2118.356300][T13386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2118.390295][T13386] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2118.430305][T13386] bridge0: port 2(bridge_slave_1) entered blocking state [ 2118.437606][T13386] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2118.527444][T13386] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2118.561306][T13386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2118.598507][T13386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2118.698311][T32582] netlink: 'syz.2.9256': attribute type 10 has an invalid length. [ 2118.729643][T32582] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9256'. [ 2118.791329][T30828] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2118.827142][T30828] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2118.866124][T30828] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2118.991534][T13399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2119.014076][T13399] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2119.037892][T13399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2119.068553][T13399] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2119.121079][T13399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2119.140766][T13399] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2119.184212][T32374] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2119.442875][T32607] netlink: 184 bytes leftover after parsing attributes in process `syz.2.9264'. [ 2119.848156][T32618] netlink: 52 bytes leftover after parsing attributes in process `syz.4.9266'. [ 2120.027260][T13399] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2120.045912][T13399] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2120.089614][T32374] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2120.151951][T13379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2120.178061][T13379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2120.267884][T13399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2120.287012][T13399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2120.304661][T13399] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2120.318055][T13399] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2120.423640][T32374] device veth0_vlan entered promiscuous mode [ 2120.466620][T32629] FAULT_INJECTION: forcing a failure. [ 2120.466620][T32629] name failslab, interval 1, probability 0, space 0, times 0 [ 2120.491712][T32374] device veth1_vlan entered promiscuous mode [ 2120.499923][T32629] CPU: 1 PID: 32629 Comm: syz.5.9269 Not tainted syzkaller #0 [ 2120.507544][T32629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 2120.517695][T32629] Call Trace: [ 2120.521015][T32629] [ 2120.523997][T32629] dump_stack_lvl+0x188/0x24e [ 2120.528869][T32629] ? show_regs_print_info+0x12/0x12 [ 2120.534261][T32629] ? load_image+0x400/0x400 [ 2120.538825][T32629] ? __might_sleep+0xd0/0xd0 [ 2120.543479][T32629] ? __lock_acquire+0x7d10/0x7d10 [ 2120.548571][T32629] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2120.554621][T32629] should_fail_ex+0x399/0x4d0 [ 2120.559375][T32629] should_failslab+0x5/0x20 [ 2120.563937][T32629] slab_pre_alloc_hook+0x59/0x310 [ 2120.569032][T32629] ? lockdep_hardirqs_on+0x94/0x140 [ 2120.574304][T32629] ? apparmor_sk_alloc_security+0x74/0x100 [ 2120.580164][T32629] __kmem_cache_alloc_node+0x4f/0x260 [ 2120.585574][T32629] ? apparmor_sk_alloc_security+0x74/0x100 [ 2120.591454][T32629] kmalloc_trace+0x26/0xe0 [ 2120.595915][T32629] apparmor_sk_alloc_security+0x74/0x100 [ 2120.601586][T32629] security_sk_alloc+0x6a/0xa0 [ 2120.606415][T32629] sk_prot_alloc+0x101/0x210 [ 2120.611037][T32629] ? sk_alloc+0x20/0x340 [ 2120.615318][T32629] sk_alloc+0x36/0x340 [ 2120.619415][T32629] ? bpf_ctx_init+0x163/0x1a0 [ 2120.624117][T32629] ? bpf_prog_test_run_skb+0x26f/0x12a0 [ 2120.629697][T32629] bpf_prog_test_run_skb+0x35e/0x12a0 [ 2120.635103][T32629] ? lockdep_hardirqs_on+0x94/0x140 [ 2120.640329][T32629] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2120.646532][T32629] ? cpu_online+0xa0/0xa0 [ 2120.650897][T32629] bpf_prog_test_run+0x31e/0x390 [ 2120.655874][T32629] __sys_bpf+0x62b/0x780 [ 2120.660154][T32629] ? bpf_link_show_fdinfo+0x380/0x380 [ 2120.665572][T32629] ? lock_chain_count+0x20/0x20 [ 2120.670472][T32629] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2120.676493][T32629] __x64_sys_bpf+0x78/0x90 [ 2120.680942][T32629] do_syscall_64+0x4c/0xa0 [ 2120.685392][T32629] ? clear_bhb_loop+0x60/0xb0 [ 2120.690103][T32629] ? clear_bhb_loop+0x60/0xb0 [ 2120.694821][T32629] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2120.700770][T32629] RIP: 0033:0x7f0f2959bf79 [ 2120.705239][T32629] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2120.724885][T32629] RSP: 002b:00007f0f277f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2120.733326][T32629] RAX: ffffffffffffffda RBX: 00007f0f29815fa0 RCX: 00007f0f2959bf79 [ 2120.741331][T32629] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 2120.749330][T32629] RBP: 00007f0f277f6090 R08: 0000000000000000 R09: 0000000000000000 [ 2120.757361][T32629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2120.765355][T32629] R13: 00007f0f29816038 R14: 00007f0f29815fa0 R15: 00007ffce997dec8 [ 2120.773370][T32629] [ 2120.871369][T32374] device veth0_macvtap entered promiscuous mode [ 2120.894649][T13399] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2120.930708][T13399] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2120.957847][T13399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2120.979089][T13399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2120.995968][T13399] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2121.016986][T32374] device veth1_macvtap entered promiscuous mode [ 2121.087547][T32374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2121.108977][T32374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2121.125579][T32374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2121.147534][T32374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2121.157907][T32374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2121.174741][T32374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2121.185371][T32374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2121.203398][T32374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2121.226389][T32374] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2121.241522][T17378] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2121.254967][T17378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2122.101251][T32374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2122.126114][T32374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2122.136465][T32374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2122.147303][T32374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2122.159092][T32374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2122.172769][T32374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2122.185366][T32374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2122.201360][T32374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2122.216955][T32374] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2122.314113][T32643] device syzkaller0 entered promiscuous mode [ 2122.322305][T13379] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2122.332121][T13379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2124.621277][T32374] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2124.630198][T32374] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2124.638903][T32374] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2124.648064][T32374] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2124.669234][T32654] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9278'. [ 2124.881340][T32663] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.9281'. [ 2124.904262][T32663] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 2125.589151][T30828] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2125.649378][T30828] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2125.685388][T13386] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2125.720208][T32667] netlink: 'syz.0.9282': attribute type 2 has an invalid length. [ 2125.746819][T13399] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2125.776508][T13399] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2125.784712][T32669] netlink: 'syz.2.9283': attribute type 39 has an invalid length. [ 2125.819920][T13386] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2126.874309][T13379] tipc: Subscription rejected, illegal request [ 2127.536390][T32719] netlink: 'syz.0.9299': attribute type 39 has an invalid length. [ 2127.717707][T32720] netlink: 52 bytes leftover after parsing attributes in process `syz.5.9298'. [ 2127.938914][T32730] netlink: 52 bytes leftover after parsing attributes in process `syz.4.9303'. [ 2127.968704][T32732] pimreg1: tun_chr_ioctl cmd 1074025677 [ 2127.997681][T32732] pimreg1: linktype set to 769 [ 2128.537526][T32744] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.9306'. [ 2131.512584][T32763] pimreg1: tun_chr_ioctl cmd 1074025677 [ 2131.539000][T32763] pimreg1: linktype set to 769 [ 2131.596279][ T300] netlink: 'syz.4.9314': attribute type 16 has an invalid length. [ 2131.609759][ T300] netlink: 48 bytes leftover after parsing attributes in process `syz.4.9314'. [ 2131.644706][ T303] FAULT_INJECTION: forcing a failure. [ 2131.644706][ T303] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2131.661483][ T303] CPU: 0 PID: 303 Comm: syz.0.9317 Not tainted syzkaller #0 [ 2131.668840][ T303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 2131.678950][ T303] Call Trace: [ 2131.682270][ T303] [ 2131.685253][ T303] dump_stack_lvl+0x188/0x24e [ 2131.690003][ T303] ? show_regs_print_info+0x12/0x12 [ 2131.695348][ T303] ? load_image+0x400/0x400 [ 2131.699955][ T303] ? __lock_acquire+0x7d10/0x7d10 [ 2131.705073][ T303] ? lockdep_hardirqs_on+0x94/0x140 [ 2131.710357][ T303] should_fail_ex+0x399/0x4d0 [ 2131.715091][ T303] _copy_from_user+0x2c/0x170 [ 2131.719816][ T303] ____sys_sendmsg+0x30a/0x970 [ 2131.724626][ T303] ? __sys_sendmsg_sock+0x30/0x30 [ 2131.729686][ T303] ? __import_iovec+0x315/0x500 [ 2131.734569][ T303] ? import_iovec+0x6f/0xa0 [ 2131.739103][ T303] ___sys_sendmsg+0x2a2/0x360 [ 2131.743821][ T303] ? __sys_sendmsg+0x290/0x290 [ 2131.748656][ T303] __se_sys_sendmsg+0x1bb/0x2a0 [ 2131.753545][ T303] ? __x64_sys_sendmsg+0x80/0x80 [ 2131.758529][ T303] ? syscall_enter_from_user_mode+0x2a/0x80 [ 2131.764462][ T303] do_syscall_64+0x4c/0xa0 [ 2131.768925][ T303] ? clear_bhb_loop+0x60/0xb0 [ 2131.773719][ T303] ? clear_bhb_loop+0x60/0xb0 [ 2131.778434][ T303] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2131.784357][ T303] RIP: 0033:0x7f83fb19bf79 [ 2131.788798][ T303] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2131.808433][ T303] RSP: 002b:00007f83fc021028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2131.816873][ T303] RAX: ffffffffffffffda RBX: 00007f83fb415fa0 RCX: 00007f83fb19bf79 [ 2131.824877][ T303] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000005 [ 2131.832876][ T303] RBP: 00007f83fc021090 R08: 0000000000000000 R09: 0000000000000000 [ 2131.840877][ T303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2131.848875][ T303] R13: 00007f83fb416038 R14: 00007f83fb415fa0 R15: 00007ffd81ef7858 [ 2131.856891][ T303] [ 2132.042057][ T303] pimreg1: tun_chr_ioctl cmd 1074025677 [ 2132.048876][ T303] pimreg1: linktype set to 769 [ 2132.729555][ T318] sctp: [Deprecated]: syz.5.9321 (pid 318) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2132.729555][ T318] Use struct sctp_sack_info instead [ 2132.978739][ T320] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9320'. [ 2133.101284][ T324] netlink: 52 bytes leftover after parsing attributes in process `syz.3.9322'. [ 2133.236738][ T333] sctp: [Deprecated]: syz.5.9325 (pid 333) Use of int in max_burst socket option deprecated. [ 2133.236738][ T333] Use struct sctp_assoc_value instead [ 2133.535630][ T342] netlink: 184 bytes leftover after parsing attributes in process `syz.4.9329'. [ 2134.094626][ T352] netlink: 184 bytes leftover after parsing attributes in process `syz.2.9331'. [ 2134.764159][ T362] netlink: 'syz.3.9336': attribute type 39 has an invalid length. [ 2134.965660][ T374] netlink: 'syz.2.9339': attribute type 27 has an invalid length. [ 2134.994611][ T374] netlink: 164 bytes leftover after parsing attributes in process `syz.2.9339'. [ 2135.940666][ T385] netlink: 52 bytes leftover after parsing attributes in process `syz.2.9343'. [ 2136.995614][ T403] netlink: 'syz.4.9350': attribute type 2 has an invalid length. [ 2137.013486][ T403] netlink: 119 bytes leftover after parsing attributes in process `syz.4.9350'. [ 2137.150854][ T405] netlink: 'syz.3.9352': attribute type 21 has an invalid length. [ 2137.180748][ T405] netlink: 'syz.3.9352': attribute type 3 has an invalid length. [ 2137.188604][ T405] netlink: 144 bytes leftover after parsing attributes in process `syz.3.9352'. [ 2137.472081][ T416] netlink: 184 bytes leftover after parsing attributes in process `syz.3.9355'. [ 2137.680383][ T420] netlink: 184 bytes leftover after parsing attributes in process `syz.0.9357'. [ 2138.247180][ T426] netlink: 'syz.0.9359': attribute type 11 has an invalid length. [ 2138.269672][ T426] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.9359'. [ 2138.312663][ T429] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2138.532283][ T436] netlink: 'syz.3.9363': attribute type 13 has an invalid length. [ 2138.569323][ T436] netlink: 152 bytes leftover after parsing attributes in process `syz.3.9363'. [ 2138.610029][ T436] erspan0: refused to change device tx_queue_len [ 2138.622619][ T436] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 2138.990124][ T450] netlink: 184 bytes leftover after parsing attributes in process `syz.3.9369'. [ 2139.083788][ T456] netlink: 52 bytes leftover after parsing attributes in process `syz.2.9370'. [ 2140.082228][ T474] netlink: 'syz.3.9379': attribute type 21 has an invalid length. [ 2141.145302][ T484] netlink: 130181 bytes leftover after parsing attributes in process `syz.2.9381'. [ 2141.986936][ T505] netlink: 52 bytes leftover after parsing attributes in process `syz.0.9390'. [ 2142.752869][ T525] netlink: 16083 bytes leftover after parsing attributes in process `syz.3.9398'. [ 2143.193041][ T532] netlink: 'syz.3.9399': attribute type 21 has an invalid length. [ 2144.500760][ T562] netlink: 168 bytes leftover after parsing attributes in process `syz.0.9408'. [ 2145.508290][ T564] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.9409'. [ 2145.510065][ T583] netlink: 52 bytes leftover after parsing attributes in process `syz.3.9414'. [ 2145.640286][ T564] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 2147.388989][ T4318] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2147.406543][ T4318] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2147.415730][ T4318] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2147.431075][ T4316] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2147.440259][ T4316] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 2147.447655][ T4316] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2147.980646][ T614] netlink: 184 bytes leftover after parsing attributes in process `syz.4.9426'. [ 2148.028156][ T620] netlink: 184 bytes leftover after parsing attributes in process `syz.3.9428'. [ 2148.394563][ T625] netlink: 'syz.2.9430': attribute type 10 has an invalid length. [ 2148.437774][ T625] netlink: 55 bytes leftover after parsing attributes in process `syz.2.9430'. [ 2148.743739][ T629] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9430'. [ 2149.048661][ T609] chnl_net:caif_netlink_parms(): no params data found [ 2149.509413][ T4316] Bluetooth: hci4: command 0x0409 tx timeout [ 2149.869997][ T609] bridge0: port 1(bridge_slave_0) entered blocking state [ 2149.879898][ T609] bridge0: port 1(bridge_slave_0) entered disabled state [ 2149.950208][ T609] device bridge_slave_0 entered promiscuous mode [ 2150.000192][ T609] bridge0: port 2(bridge_slave_1) entered blocking state [ 2150.078081][ T609] bridge0: port 2(bridge_slave_1) entered disabled state [ 2150.110778][ T609] device bridge_slave_1 entered promiscuous mode [ 2150.336078][ T609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2150.494131][ T662] netlink: 144 bytes leftover after parsing attributes in process `syz.5.9439'. [ 2150.562067][ T662] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 2150.679625][ T609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2150.857327][ T609] team0: Port device team_slave_0 added [ 2150.919721][ T671] netlink: 184 bytes leftover after parsing attributes in process `syz.4.9441'. [ 2151.233574][T13379] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2151.309778][ T609] team0: Port device team_slave_1 added [ 2151.387568][ T609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2151.419318][ T609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2151.486664][ T609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2151.593921][T31969] Bluetooth: hci4: command 0x041b tx timeout [ 2152.467305][ T609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2152.484537][ T609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2152.599319][ T609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2152.746248][ T691] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9448'. [ 2152.822789][T13379] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2152.896900][ T691] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9448'. [ 2152.925957][ T692] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9448'. [ 2152.949997][ T693] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9448'. [ 2153.030810][ T609] device hsr_slave_0 entered promiscuous mode [ 2153.075954][ T609] device hsr_slave_1 entered promiscuous mode [ 2153.093129][ T609] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2153.112722][ T609] Cannot create hsr debugfs directory [ 2153.283673][T13379] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2153.506680][T13379] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2153.669459][T31969] Bluetooth: hci4: command 0x040f tx timeout [ 2154.558581][T13379] device 0 left promiscuous mode [ 2155.749969][T31969] Bluetooth: hci4: command 0x0419 tx timeout [ 2159.584281][ T740] netlink: 144 bytes leftover after parsing attributes in process `syz.3.9462'. [ 2159.657144][ T740] team0: Port device team_slave_0 removed [ 2159.904748][ T795] netlink: 'syz.4.9479': attribute type 10 has an invalid length. [ 2159.939730][ T795] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9479'. [ 2160.554211][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 2160.560661][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 2160.740674][ T814] device syzkaller0 entered promiscuous mode [ 2160.756428][ T609] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2165.819277][ T609] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2165.868376][ T836] netlink: 52 bytes leftover after parsing attributes in process `syz.2.9494'. [ 2165.892143][ T862] netlink: 55631 bytes leftover after parsing attributes in process `syz.5.9502'. [ 2165.932000][ T609] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2165.960405][ T609] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2166.922664][ T890] netlink: 'syz.5.9508': attribute type 10 has an invalid length. [ 2167.124401][ T896] netlink: 184 bytes leftover after parsing attributes in process `syz.3.9509'. [ 2167.202158][T13379] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2167.249338][T13379] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2167.281498][T13379] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2167.320373][T13379] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2167.504139][T13379] device veth1_macvtap left promiscuous mode [ 2167.529306][T13379] device veth0_macvtap left promiscuous mode [ 2172.013572][T13379] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2172.024012][T13379] device bond_slave_1 left promiscuous mode [ 2172.074871][T13379] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2172.084702][T13379] device bond_slave_0 left promiscuous mode [ 2172.403674][T13379] bond0 (unregistering): Released all slaves [ 2172.460138][ T946] netlink: 184 bytes leftover after parsing attributes in process `syz.5.9520'. [ 2172.500345][ T609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2172.583183][T13386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2172.593171][T13386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2172.628185][ T609] 8021q: adding VLAN 0 to HW filter on device team0 [ 2172.705860][T13386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2172.727974][T13386] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2172.772896][T13386] bridge0: port 1(bridge_slave_0) entered blocking state [ 2172.780138][T13386] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2172.822746][T13386] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2173.083436][T30828] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2173.103570][T30828] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2173.129870][T30828] bridge0: port 2(bridge_slave_1) entered blocking state [ 2173.137149][T30828] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2173.175752][T30828] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2173.554939][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2173.605567][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2173.646947][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2173.684962][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2173.702128][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2173.754147][ T609] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2173.820207][ T609] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2173.865525][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2173.875545][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2173.946413][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2174.030001][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2174.076647][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2174.132960][ T973] netlink: 'syz.4.9525': attribute type 10 has an invalid length. [ 2174.341797][ T973] team0: Device vxcan1 is of different type [ 2174.542780][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2175.021586][T27657] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 2175.034874][ T998] netlink: 'syz.4.9530': attribute type 16 has an invalid length. [ 2175.044432][ T998] netlink: 48 bytes leftover after parsing attributes in process `syz.4.9530'. [ 2175.848823][ T1010] netlink: 184 bytes leftover after parsing attributes in process `syz.4.9534'. [ 2175.924205][ T1024] FAULT_INJECTION: forcing a failure. [ 2175.924205][ T1024] name failslab, interval 1, probability 0, space 0, times 0 [ 2175.983318][ T1003] netlink: 152 bytes leftover after parsing attributes in process `syz.3.9533'. [ 2175.995706][ T1024] CPU: 1 PID: 1024 Comm: syz.5.9535 Not tainted syzkaller #0 [ 2176.003202][ T1024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 2176.013333][ T1024] Call Trace: [ 2176.016705][ T1024] [ 2176.020078][ T1024] dump_stack_lvl+0x188/0x24e [ 2176.024862][ T1024] ? show_regs_print_info+0x12/0x12 [ 2176.030153][ T1024] ? load_image+0x400/0x400 [ 2176.034751][ T1024] ? __might_sleep+0xd0/0xd0 [ 2176.039438][ T1024] ? __lock_acquire+0x7d10/0x7d10 [ 2176.044584][ T1024] should_fail_ex+0x399/0x4d0 [ 2176.049374][ T1024] should_failslab+0x5/0x20 [ 2176.053960][ T1024] slab_pre_alloc_hook+0x59/0x310 [ 2176.059076][ T1024] ? mutex_lock_nested+0x10/0x10 [ 2176.064105][ T1024] ? rxrpc_lookup_local+0x760/0x1530 [ 2176.069480][ T1024] __kmem_cache_alloc_node+0x4f/0x260 [ 2176.074951][ T1024] ? rxrpc_lookup_local+0x760/0x1530 [ 2176.080329][ T1024] kmalloc_trace+0x26/0xe0 [ 2176.084927][ T1024] rxrpc_lookup_local+0x760/0x1530 [ 2176.090172][ T1024] ? rxrpc_process_local_events+0xa50/0xa50 [ 2176.096162][ T1024] ? __local_bh_enable_ip+0x136/0x1c0 [ 2176.101636][ T1024] ? lockdep_hardirqs_on+0x94/0x140 [ 2176.106918][ T1024] ? __local_bh_enable_ip+0x136/0x1c0 [ 2176.112374][ T1024] ? _local_bh_enable+0xa0/0xa0 [ 2176.117337][ T1024] rxrpc_sendmsg+0x3f1/0x890 [ 2176.122045][ T1024] ? rxrpc_getsockopt+0x150/0x150 [ 2176.127149][ T1024] ____sys_sendmsg+0x5be/0x970 [ 2176.132041][ T1024] ? __sys_sendmsg_sock+0x30/0x30 [ 2176.137157][ T1024] ? __import_iovec+0x315/0x500 [ 2176.142144][ T1024] ? import_iovec+0x6f/0xa0 [ 2176.146761][ T1024] ___sys_sendmsg+0x2a2/0x360 [ 2176.151548][ T1024] ? __sys_sendmsg+0x290/0x290 [ 2176.156433][ T1024] ? __lock_acquire+0x7d10/0x7d10 [ 2176.161627][ T1024] __se_sys_sendmsg+0x1bb/0x2a0 [ 2176.166582][ T1024] ? __x64_sys_sendmsg+0x80/0x80 [ 2176.171664][ T1024] ? lockdep_hardirqs_on+0x94/0x140 [ 2176.176936][ T1024] do_syscall_64+0x4c/0xa0 [ 2176.181408][ T1024] ? clear_bhb_loop+0x60/0xb0 [ 2176.186240][ T1024] ? clear_bhb_loop+0x60/0xb0 [ 2176.190987][ T1024] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2176.196937][ T1024] RIP: 0033:0x7f0f2959bf79 [ 2176.201424][ T1024] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2176.221109][ T1024] RSP: 002b:00007f0f277d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2176.229624][ T1024] RAX: ffffffffffffffda RBX: 00007f0f29816090 RCX: 00007f0f2959bf79 [ 2176.237662][ T1024] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000005 [ 2176.245688][ T1024] RBP: 00007f0f277d5090 R08: 0000000000000000 R09: 0000000000000000 [ 2176.253731][ T1024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2176.261765][ T1024] R13: 00007f0f29816128 R14: 00007f0f29816090 R15: 00007ffce997dec8 [ 2176.269910][ T1024] [ 2176.959803][ T1044] netlink: 52 bytes leftover after parsing attributes in process `syz.3.9539'. [ 2177.077557][ T609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2177.150908][T13386] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2177.179018][T13386] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2177.272881][T13379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2177.308724][T13379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2177.419278][T30827] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2177.427847][T30827] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2177.476057][ T609] device veth0_vlan entered promiscuous mode [ 2177.523600][T30827] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2177.544701][T30827] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2177.645858][ T609] device veth1_vlan entered promiscuous mode [ 2177.769331][T30827] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2177.778168][T30827] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2177.842867][ T609] device veth0_macvtap entered promiscuous mode [ 2177.916766][ T609] device veth1_macvtap entered promiscuous mode [ 2178.012863][ T609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2178.065205][ T609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2178.084373][ T609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2178.169243][ T609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2178.236896][ T609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2178.313250][ T609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2178.349991][ T609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2178.373480][ T609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2178.413401][ T609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2178.457488][T13379] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2178.495418][T13379] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2178.541863][T13379] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2178.588935][T13379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2178.625317][ T609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2178.666980][ T609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2178.709339][ T609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2178.739295][ T609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2178.769752][ T609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2178.786844][ T609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2178.807907][ T609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2178.851867][ T609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2178.900561][ T609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2178.911032][T13379] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2178.948315][T13379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2178.997496][ T609] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2179.019285][ T609] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2179.028090][ T609] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2179.063471][ T609] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2179.156751][ T1088] netlink: 'syz.3.9550': attribute type 10 has an invalid length. [ 2179.388675][ T1088] team0: Device vxcan1 is of different type [ 2179.591046][ T1100] netlink: 'syz.2.9554': attribute type 39 has an invalid length. [ 2179.740582][T13386] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2179.756906][T13386] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2179.805449][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2179.882299][ T4394] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2179.915838][ T4394] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2179.947799][T30827] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2180.816523][ T1124] netlink: 177 bytes leftover after parsing attributes in process `syz.5.9563'. [ 2180.849939][ T1127] netlink: 'syz.3.9564': attribute type 21 has an invalid length. [ 2180.857888][ T1127] netlink: 'syz.3.9564': attribute type 3 has an invalid length. [ 2180.974136][ T1127] netlink: 144 bytes leftover after parsing attributes in process `syz.3.9564'. [ 2181.010191][ T1131] netlink: 52 bytes leftover after parsing attributes in process `syz.2.9566'. [ 2181.085777][ T1124] netlink: 'syz.5.9563': attribute type 10 has an invalid length. [ 2181.346560][ T1139] netlink: 'syz.3.9569': attribute type 11 has an invalid length. [ 2181.406432][ T1139] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.9569'. [ 2181.490246][ T1139] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2182.515880][ T1174] netlink: 14 bytes leftover after parsing attributes in process `syz.2.9580'. [ 2187.038676][ T1251] netlink: 52 bytes leftover after parsing attributes in process `syz.3.9605'. [ 2187.127023][ T1252] netlink: 52 bytes leftover after parsing attributes in process `syz.5.9606'. [ 2187.206529][ T1243] sock: sock_timestamping_bind_phc: sock not bind to device [ 2189.921430][ T1313] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.9630'. [ 2189.972596][ T1313] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 2190.833515][ T1351] netlink: 52 bytes leftover after parsing attributes in process `syz.0.9635'. [ 2194.518720][ T1382] netlink: 'syz.0.9646': attribute type 10 has an invalid length. [ 2194.527335][ T1382] netlink: 55 bytes leftover after parsing attributes in process `syz.0.9646'. [ 2194.579620][ T1382] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9646'. [ 2195.105660][ T1396] netlink: 52 bytes leftover after parsing attributes in process `syz.3.9651'. [ 2196.192492][ T1425] netlink: 144 bytes leftover after parsing attributes in process `syz.0.9661'. [ 2196.774791][ T1425] team0: Port device team_slave_0 removed [ 2196.837987][ T1425] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 2196.947989][ T1436] netlink: 'syz.4.9662': attribute type 7 has an invalid length. [ 2197.050740][T31969] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2197.061472][T31969] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2197.071067][T31969] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2197.090636][T31969] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2197.101070][T31969] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 2197.108939][T31969] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2197.553257][ T1452] netlink: 52 bytes leftover after parsing attributes in process `syz.0.9669'. [ 2197.737631][ T1462] netlink: 'syz.4.9672': attribute type 1 has an invalid length. [ 2197.748849][ T1462] netlink: 105120 bytes leftover after parsing attributes in process `syz.4.9672'. [ 2197.956803][ T1442] chnl_net:caif_netlink_parms(): no params data found [ 2198.066595][T13379] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2198.241833][T13379] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2198.411440][T13379] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2198.446558][ T1442] bridge0: port 1(bridge_slave_0) entered blocking state [ 2198.455203][ T1442] bridge0: port 1(bridge_slave_0) entered disabled state [ 2198.472827][ T1442] device bridge_slave_0 entered promiscuous mode [ 2198.485612][ T1442] bridge0: port 2(bridge_slave_1) entered blocking state [ 2198.493504][ T1442] bridge0: port 2(bridge_slave_1) entered disabled state [ 2198.513313][ T1442] device bridge_slave_1 entered promiscuous mode [ 2198.615068][T13379] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2198.776175][ T1442] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2198.814267][ T1442] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2199.022141][ T1442] team0: Port device team_slave_0 added [ 2199.168208][ T1442] team0: Port device team_slave_1 added [ 2199.190676][ T4316] Bluetooth: hci3: command 0x0409 tx timeout [ 2199.232971][T13379] tipc: Left network mode [ 2199.388566][ T1442] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2199.403650][ T1442] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2199.482789][ T1442] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2199.758472][ T1523] FAULT_INJECTION: forcing a failure. [ 2199.758472][ T1523] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2199.847154][ T1523] CPU: 1 PID: 1523 Comm: syz.4.9693 Not tainted syzkaller #0 [ 2199.854627][ T1523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 2199.864746][ T1523] Call Trace: [ 2199.868073][ T1523] [ 2199.871061][ T1523] dump_stack_lvl+0x188/0x24e [ 2199.875814][ T1523] ? show_regs_print_info+0x12/0x12 [ 2199.881081][ T1523] ? load_image+0x400/0x400 [ 2199.885660][ T1523] ? __lock_acquire+0x7d10/0x7d10 [ 2199.890847][ T1523] should_fail_ex+0x399/0x4d0 [ 2199.895611][ T1523] _copy_from_user+0x2c/0x170 [ 2199.900411][ T1523] __sys_bpf+0x2ea/0x780 [ 2199.904733][ T1523] ? bpf_link_show_fdinfo+0x380/0x380 [ 2199.910224][ T1523] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2199.916468][ T1523] __x64_sys_bpf+0x78/0x90 [ 2199.920953][ T1523] do_syscall_64+0x4c/0xa0 [ 2199.925434][ T1523] ? clear_bhb_loop+0x60/0xb0 [ 2199.930360][ T1523] ? clear_bhb_loop+0x60/0xb0 [ 2199.935097][ T1523] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2199.941059][ T1523] RIP: 0033:0x7f5f2ff9bf79 [ 2199.945539][ T1523] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2199.965215][ T1523] RSP: 002b:00007f5f30e81028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2199.973698][ T1523] RAX: ffffffffffffffda RBX: 00007f5f30215fa0 RCX: 00007f5f2ff9bf79 [ 2199.981734][ T1523] RDX: 0000000000000050 RSI: 0000200000000540 RDI: 000000000000000a [ 2199.989763][ T1523] RBP: 00007f5f30e81090 R08: 0000000000000000 R09: 0000000000000000 [ 2199.997799][ T1523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2200.005841][ T1523] R13: 00007f5f30216038 R14: 00007f5f30215fa0 R15: 00007ffe517fe158 [ 2200.013905][ T1523] [ 2200.025082][ T1527] netlink: 196 bytes leftover after parsing attributes in process `syz.0.9694'. [ 2200.117045][ T1442] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2200.127887][ T1442] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2200.184906][ T1442] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2200.396575][ T1526] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.9694'. [ 2200.956140][ T1442] device hsr_slave_0 entered promiscuous mode [ 2201.278220][ T4316] Bluetooth: hci3: command 0x041b tx timeout [ 2201.328637][ T1442] device hsr_slave_1 entered promiscuous mode [ 2201.353125][ T1442] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2201.376294][ T1442] Cannot create hsr debugfs directory [ 2202.333127][ T1582] netlink: 52 bytes leftover after parsing attributes in process `syz.3.9710'. [ 2203.364829][T31969] Bluetooth: hci3: command 0x040f tx timeout [ 2203.383389][ T1613] FAULT_INJECTION: forcing a failure. [ 2203.383389][ T1613] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2203.407180][ T1613] CPU: 0 PID: 1613 Comm: syz.4.9720 Not tainted syzkaller #0 [ 2203.414645][ T1613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 2203.424757][ T1613] Call Trace: [ 2203.428093][ T1613] [ 2203.431069][ T1613] dump_stack_lvl+0x188/0x24e [ 2203.435815][ T1613] ? show_regs_print_info+0x12/0x12 [ 2203.441108][ T1613] ? load_image+0x400/0x400 [ 2203.445669][ T1613] ? __lock_acquire+0x7d10/0x7d10 [ 2203.450767][ T1613] should_fail_ex+0x399/0x4d0 [ 2203.455517][ T1613] _copy_from_user+0x2c/0x170 [ 2203.460264][ T1613] bpf_prog_test_run_skb+0x262/0x12a0 [ 2203.465694][ T1613] ? __fget_files+0x28/0x4b0 [ 2203.470350][ T1613] ? __fget_files+0x28/0x4b0 [ 2203.475022][ T1613] ? __fget_files+0x43d/0x4b0 [ 2203.479769][ T1613] ? cpu_online+0xa0/0xa0 [ 2203.484159][ T1613] bpf_prog_test_run+0x31e/0x390 [ 2203.489171][ T1613] __sys_bpf+0x62b/0x780 [ 2203.493540][ T1613] ? bpf_link_show_fdinfo+0x380/0x380 [ 2203.498994][ T1613] ? lock_chain_count+0x20/0x20 [ 2203.503922][ T1613] __x64_sys_bpf+0x78/0x90 [ 2203.508411][ T1613] do_syscall_64+0x4c/0xa0 [ 2203.512897][ T1613] ? clear_bhb_loop+0x60/0xb0 [ 2203.517633][ T1613] ? clear_bhb_loop+0x60/0xb0 [ 2203.522381][ T1613] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2203.528331][ T1613] RIP: 0033:0x7f5f2ff9bf79 [ 2203.532865][ T1613] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2203.552532][ T1613] RSP: 002b:00007f5f30e81028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2203.561008][ T1613] RAX: ffffffffffffffda RBX: 00007f5f30215fa0 RCX: 00007f5f2ff9bf79 [ 2203.569034][ T1613] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 2203.577060][ T1613] RBP: 00007f5f30e81090 R08: 0000000000000000 R09: 0000000000000000 [ 2203.585069][ T1613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2203.593059][ T1613] R13: 00007f5f30216038 R14: 00007f5f30215fa0 R15: 00007ffe517fe158 [ 2203.601085][ T1613] [ 2203.727163][T13379] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2203.743214][T13379] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2203.760639][T13379] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2203.788194][T13379] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2204.009842][T13379] device veth1_macvtap left promiscuous mode [ 2204.015988][T13379] device veth0_macvtap left promiscuous mode [ 2204.039275][T13379] device veth1_vlan left promiscuous mode [ 2205.429299][T31969] Bluetooth: hci3: command 0x0419 tx timeout [ 2208.714516][ T4316] Bluetooth: hci0: command 0x0406 tx timeout [ 2209.728167][T13379] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2209.787412][T13379] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2210.114272][T13379] bond0 (unregistering): Released all slaves [ 2210.250229][ T1672] device syzkaller0 entered promiscuous mode [ 2213.187838][ T1701] netlink: 64859 bytes leftover after parsing attributes in process `syz.5.9752'. [ 2217.927027][ T4316] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2217.950300][ T4316] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2217.966444][ T4316] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2217.986232][ T4316] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2218.001740][ T4316] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 2218.009083][ T4316] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2218.183231][ T1690] netlink: 52 bytes leftover after parsing attributes in process `syz.4.9748'. [ 2218.212023][ T1710] pimreg1: tun_chr_ioctl cmd 1074025677 [ 2218.217821][ T1710] pimreg1: linktype set to 769 [ 2218.228902][ T1442] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2218.290694][ T1442] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2218.327940][ T1442] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2218.378862][ T1442] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2218.782167][ T1442] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2219.009859][T17378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2219.019043][T17378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2219.076781][ T1442] 8021q: adding VLAN 0 to HW filter on device team0 [ 2219.156735][T17378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2219.211346][T17378] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2219.278714][T17378] bridge0: port 1(bridge_slave_0) entered blocking state [ 2219.285965][T17378] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2219.353810][T17378] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2219.483492][T17378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2219.521926][T17378] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2219.552204][T17378] bridge0: port 2(bridge_slave_1) entered blocking state [ 2219.559530][T17378] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2219.726615][ T1754] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9765'. [ 2219.849666][ T1755] netlink: 52 bytes leftover after parsing attributes in process `syz.4.9766'. [ 2219.859053][ T1714] chnl_net:caif_netlink_parms(): no params data found [ 2220.069559][ T4316] Bluetooth: hci5: command 0x0409 tx timeout [ 2220.191804][ T1758] netlink: 'syz.0.9765': attribute type 21 has an invalid length. [ 2220.199972][ T1758] netlink: 16166 bytes leftover after parsing attributes in process `syz.0.9765'. [ 2220.210326][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2220.220352][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2220.249062][T13386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2220.310886][T13386] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2220.387226][T13386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2220.418548][T13386] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2220.456369][T13386] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2220.529336][ T1766] pimreg1: tun_chr_ioctl cmd 1074025677 [ 2220.535134][ T1766] pimreg1: linktype set to 769 [ 2220.697924][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2220.720466][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2220.757857][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2220.812152][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2220.841460][ T1442] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2220.905213][ T1714] bridge0: port 1(bridge_slave_0) entered blocking state [ 2220.939524][ T1714] bridge0: port 1(bridge_slave_0) entered disabled state [ 2220.976752][ T1714] device bridge_slave_0 entered promiscuous mode [ 2221.015888][ T1714] bridge0: port 2(bridge_slave_1) entered blocking state [ 2221.034574][ T1714] bridge0: port 2(bridge_slave_1) entered disabled state [ 2221.056044][ T1714] device bridge_slave_1 entered promiscuous mode [ 2221.147073][ T1714] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2221.233212][ T1714] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2221.359699][ T1714] team0: Port device team_slave_0 added [ 2221.395834][ T1793] delete_channel: no stack [ 2221.414129][ T1714] team0: Port device team_slave_1 added [ 2221.423986][ T1793] delete_channel: no stack [ 2221.546261][ T1714] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2221.596513][ T1714] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2221.653660][ T1714] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2221.731434][ T1714] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2221.749356][ T1714] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2221.823551][ T1714] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2221.835956][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2221.849835][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2221.874622][ T1442] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2221.997021][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 2222.003449][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 2222.025158][ T1714] device hsr_slave_0 entered promiscuous mode [ 2222.054012][ T1714] device hsr_slave_1 entered promiscuous mode [ 2222.115181][ T1714] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2222.126822][ T1714] Cannot create hsr debugfs directory [ 2222.161242][T31969] Bluetooth: hci5: command 0x041b tx timeout [ 2222.311748][ T1815] netlink: 132 bytes leftover after parsing attributes in process `syz.5.9777'. [ 2222.424781][ T1815] netlink: 'syz.5.9777': attribute type 21 has an invalid length. [ 2222.453631][ T1815] netlink: 16166 bytes leftover after parsing attributes in process `syz.5.9777'. [ 2222.537482][T27657] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2222.592291][T27657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2222.717196][T27657] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2222.731910][T27657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2222.783565][ T1442] device veth0_vlan entered promiscuous mode [ 2222.830454][T27657] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2222.842564][T27657] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2222.895062][ T1819] netlink: 'syz.0.9778': attribute type 10 has an invalid length. [ 2222.962632][ T1819] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 2222.986609][ T1442] device veth1_vlan entered promiscuous mode [ 2223.171576][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2223.194396][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2223.211005][ T1442] device veth0_macvtap entered promiscuous mode [ 2223.269068][ T1442] device veth1_macvtap entered promiscuous mode [ 2223.374511][ T1442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2223.388528][ T1828] syz.0.9779[1828] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2223.390810][ T1828] syz.0.9779[1828] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2223.419417][ T1442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2223.484511][ T1442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2223.516296][ T1442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2223.566628][ T1442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2223.595946][ T1442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2223.613146][ T1442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2223.626590][ T1442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2223.645749][ T1442] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2223.661095][ T1714] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 2223.685595][T13379] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2223.709647][T13379] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2223.740462][T13379] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2223.766235][T13379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2223.787919][ T1442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2223.809589][ T1442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2223.829852][ T1442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2223.883862][ T1442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2223.922569][ T1442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2223.951589][ T1442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2224.021072][ T1442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2224.060144][ T1442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2224.094092][ T1442] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2224.108736][ T1442] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2224.117975][ T1442] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2224.132177][ T1442] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2224.148150][ T1442] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2224.168500][ T1714] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 2224.194853][T17378] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2224.214682][T17378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2224.229295][T31969] Bluetooth: hci5: command 0x040f tx timeout [ 2224.253560][ T1714] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 2224.311667][ T1714] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 2224.486074][ T1859] netlink: 52 bytes leftover after parsing attributes in process `syz.5.9790'. [ 2224.674883][T13379] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2224.694605][T13379] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2224.770442][T30827] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2224.831302][T13379] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2224.866520][T13379] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2224.902377][T17378] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2224.940906][ T1714] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2225.199048][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2225.227462][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2225.327385][ T1714] 8021q: adding VLAN 0 to HW filter on device team0 [ 2225.367256][T13386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2225.383840][T13386] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2225.417902][T13386] bridge0: port 1(bridge_slave_0) entered blocking state [ 2225.425174][T13386] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2225.446771][T13386] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2225.472677][T13386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2225.488628][T13386] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2225.513100][T13386] bridge0: port 2(bridge_slave_1) entered blocking state [ 2225.520391][T13386] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2225.565059][T30827] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2225.594196][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2225.657286][T30827] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2225.684042][T30827] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2225.731596][T30827] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2225.771857][T27657] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2225.800901][T27657] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2225.875779][T13386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2225.910386][T13386] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2225.945595][T13386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2225.975117][T13386] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2226.042900][ T1714] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2226.075778][ T1886] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9796'. [ 2226.309595][T31969] Bluetooth: hci5: command 0x0419 tx timeout [ 2226.818848][ T1915] netlink: 'syz.5.9806': attribute type 39 has an invalid length. [ 2226.835827][T27657] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2226.853806][T27657] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2226.895618][ T1714] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2227.216408][T30828] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2227.227650][T30828] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2227.252585][T27657] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2227.263725][T27657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2227.273098][T27657] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2227.281441][T27657] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2227.292076][ T1714] device veth0_vlan entered promiscuous mode [ 2227.308411][ T1714] device veth1_vlan entered promiscuous mode [ 2227.334838][T27657] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2227.347100][T27657] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2227.356125][T27657] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2227.365177][T27657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2227.377292][ T1714] device veth0_macvtap entered promiscuous mode [ 2227.389363][ T1714] device veth1_macvtap entered promiscuous mode [ 2227.406494][ T1714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2227.417779][ T1714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2227.429738][ T1714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2227.442104][ T1714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2227.452227][ T1714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2227.463022][ T1714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2227.473411][ T1714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2227.484149][ T1714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2227.494349][ T1714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2227.505001][ T1714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2227.517220][ T1714] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2227.528696][ T1714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2227.539434][ T1714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2227.549487][ T1714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2227.560018][ T1714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2227.570002][ T1714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2227.580556][ T1714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2227.591134][ T1714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2227.602341][ T1714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2227.614279][ T1714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2227.625956][ T1714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2227.637542][ T1714] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2227.645269][T30828] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2227.654063][T30828] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2227.662604][T30828] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2227.672031][T30828] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2227.682429][T30828] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2227.691820][T30828] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2227.706206][ T1714] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2227.715369][ T1714] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2227.724904][ T1714] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2227.735281][ T1714] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2227.812785][T27657] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2227.826954][T27657] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2227.845784][T30828] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2227.860963][T30827] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2227.868840][T30827] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2227.877023][T27657] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2257.900344][T30828] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2257.982054][T30828] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2258.028228][T30828] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2258.096672][T30828] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2259.361174][T30828] device hsr_slave_0 left promiscuous mode [ 2259.368344][T30828] device hsr_slave_1 left promiscuous mode [ 2259.376091][T30828] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2259.384681][T30828] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2259.393153][T30828] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2259.401013][T30828] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2259.408949][T30828] device bridge_slave_1 left promiscuous mode [ 2259.418493][T30828] bridge0: port 2(bridge_slave_1) entered disabled state [ 2259.427906][T30828] device bridge_slave_0 left promiscuous mode [ 2259.434803][T30828] bridge0: port 1(bridge_slave_0) entered disabled state [ 2259.466110][T30828] device veth1_macvtap left promiscuous mode [ 2259.472318][T30828] device veth0_macvtap left promiscuous mode [ 2259.478488][T30828] device veth1_vlan left promiscuous mode [ 2259.488968][T30828] device veth0_vlan left promiscuous mode [ 2260.168552][T30828] team0 (unregistering): Port device team_slave_1 removed [ 2260.262312][T30828] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2260.311948][T30828] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2260.678344][T30828] bond0 (unregistering): Released all slaves [ 2270.149683][ T4316] Bluetooth: hci4: command 0x0406 tx timeout [ 2283.441595][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 2283.447965][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 2321.359450][T31969] Bluetooth: hci3: command 0x0406 tx timeout [ 2341.829247][T31969] Bluetooth: hci5: command 0x0406 tx timeout [ 2344.874465][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 2344.880916][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 2406.311807][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 2406.318182][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 2467.751611][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 2467.758014][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 2529.192217][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 2529.198582][ T1266] ieee802154 phy1 wpan1: encryption failed: -22