last executing test programs: 34.174608481s ago: executing program 1 (id=6724): r0 = socket$kcm(0x10, 0x2, 0x10) socket$kcm(0xa, 0x2, 0x73) (async) r1 = socket$kcm(0xa, 0x2, 0x73) close(0x3) (async) close(0x3) socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0xfc00, @multicast2}, 0x3c, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x3e, 0xfc00}}, @ip_tos_u8={{0x18, 0x29, 0x4}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @remote}}}], 0x50}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) (async) r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket$kcm(0x11, 0x2, 0x300) (async) r3 = socket$kcm(0x11, 0x2, 0x300) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x1, 0x5, &(0x7f0000001540)=ANY=[], &(0x7f0000001140)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000000)=r4, 0x4) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)='\\\x00', 0x2}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) sendmsg$inet(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)='\\\x00', 0x2}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, 0x0) (async) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000180)=ANY=[], 0x0}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000010c0)={0xffffffffffffffff, 0xfffffffffffffd62, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0}}, 0x10) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000010c0)={0xffffffffffffffff, 0xfffffffffffffd62, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100)=r6, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300), 0x0, 0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8c, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="5400020029000b05d25a806f8c6394f90424fc602f0011002f2f2f00053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x5000000}, 0x0) recvmsg$kcm(r0, &(0x7f0000000240)={&(0x7f00000002c0)=@ax25={{}, [@bcast, @remote, @default, @rose, @default, @remote, @rose, @bcast]}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000100)=""/58, 0x3a}, {&(0x7f0000000340)=""/235, 0xeb}, {0x0}, {0x0}], 0x4, &(0x7f00000000c0)=""/47, 0x2f}, 0x2000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) recvmsg$unix(r7, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r10, &(0x7f0000000000)=ANY=[@ANYRES8=r8, @ANYBLOB="3eca", @ANYRES8=r9], 0x9a) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001240)={0x1, 0x58, &(0x7f00000011c0)}, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001240)={0x1, 0x58, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r10, @ANYBLOB="ca839cadbd2cfcbbe20000000000003500000000", @ANYRES32=r11, @ANYRES32, @ANYBLOB="03000000050000000200"/28], 0x50) r13 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002500)={0x1b, 0x0, 0x0, 0x7599114f, 0x0, r12, 0x8a, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x3}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002600)={0x6, 0xf, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000001000000000000000200000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bfade30900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b700000000000000950000000000"], &(0x7f0000001380)='syzkaller\x00', 0x80000001, 0x92, &(0x7f0000001400)=""/146, 0x40f00, 0x50, '\x00', 0x0, 0x25, r10, 0x8, &(0x7f00000014c0)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000001500)={0x5, 0x3, 0x8000, 0x9fe8}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000002580)=[0xffffffffffffffff, r12, r13], &(0x7f00000025c0)=[{0x5, 0x3, 0xe, 0xa}, {0x5, 0x4, 0x0, 0x5}, {0x3, 0x5, 0x9, 0xa}], 0x10, 0x259d}, 0x94) 33.88707287s ago: executing program 1 (id=6728): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @flow_dissector}, 0x94) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff8d}, 0x48) r1 = socket$kcm(0xa, 0x2, 0x73) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x4) setsockopt$sock_attach_bpf(r1, 0x29, 0x11, &(0x7f0000000140)=r0, 0x4) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.net/syz0\x00', 0x1ff) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d80000001e0081054e81f782db4cb9040a1d080006007c095dd2086518000a800d00000003600e1208000f0000000406a80016c0080009", 0x37}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020692500000000002020207b1af8ff00000000bfa10000000000000701000012ffffffb702000009000000b70300000000000085000000ca00000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f00000001c0)={r3}) 33.399290995s ago: executing program 4 (id=6732): r0 = socket$kcm(0x10, 0x2, 0x0) close(r0) r1 = perf_event_open$cgroup(&(0x7f0000001840)={0x2, 0x80, 0xf, 0x3, 0x7f, 0xc, 0x0, 0x6, 0x84008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0xb5aa, 0x0, @perf_config_ext={0x0, 0x8}, 0x1918, 0x7f, 0x7, 0x0, 0x2, 0x4, 0xb5, 0x0, 0x840, 0x0, 0x1}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x6) r2 = perf_event_open$cgroup(&(0x7f0000001480)={0x2, 0x80, 0x8, 0x6, 0x6, 0xf, 0x0, 0x91, 0x800, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x800, 0x1, @perf_bp={&(0x7f0000000040), 0x6}, 0xb989, 0x10, 0x3, 0x4, 0x7, 0x2, 0x1, 0x0, 0x2, 0x0, 0x1}, 0xffffffffffffffff, 0x8, r1, 0x1) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001780)={0x11, 0x19, &(0x7f0000001500)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc39, 0x0, 0x0, 0x0, 0x7}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x92}}, @map_fd={0x18, 0x7, 0x1, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x9}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}]}, &(0x7f0000001600)='syzkaller\x00', 0x8, 0x2b, &(0x7f0000001640)=""/43, 0x41000, 0x74, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001680)={0x6, 0x3}, 0x8, 0x10, &(0x7f00000016c0)={0x0, 0x10, 0x5, 0x8}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000001700)=[0x1, 0x1, 0x1], &(0x7f0000001740)=[{0x2, 0x4, 0xc, 0x1}, {0x0, 0x3, 0x6, 0x4}, {0x1, 0x3, 0xe, 0xb}], 0x10, 0x101}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r4, 0x4) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000018c0)=r4, 0x4) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="1800000015006b05c84e21000af32c6e021859cab5a49844", 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg(r0, &(0x7f0000001440)={&(0x7f0000000100)=@phonet={0x23, 0xfc, 0x83, 0x1}, 0x80, &(0x7f0000001300)=[{&(0x7f0000000180)="988abc3466b76bcf0173f7601655e4ed2bad44410788cb3760a52ac0e6ad5f57467d172e8be43bfb5d09aedf1122c153a3", 0x31}, {&(0x7f00000001c0)="c92cccb38623144fb3e64bd3eafd6bd6dd702042e4ed9b0f8d60e3ea698e287fb5ae928ad89767917681db542e3072aac8b4d5ea031e036469dc6d68a546b3e8169e6ded3da28149ac531b5000397219846756b1c80ed4453430a94ef07df03d433fc43bfc7c2842a158a2f93cfb37370b6f9b6cce9ae46d94bca0c86f359e430c00731d7ff86d7a9399ff856daf745a34e88b561e58763a3f60edfbb8526563be8115e3c7e71d262c62bd3beb105788581f4de9f0b4ad2856e6a24f77ac47d159f6c2696e76d746972f756245fa2629dd50242277ef49c5644f78d409451c0298e36106f4614b5a57d68e7a", 0xec}, {&(0x7f00000002c0)="bc5fac629f3683d4d31c67985ee7e55bdff444be7d89e7deced70adb510c46322a347a4812cd9bf6603212b745cfde90fcc4c9", 0x33}, {&(0x7f0000000300)="a265a20b90e68378b1010b2090a790ae0001b680c03401eda565918b15ac41d967344101abc64b4fcce639a96ed5bca60e7e87b16e4915e1045f042ea12b1c639022ba004104bbc7678a06f7b3239a539b9a7f5fa1d6daf52474aa53208c498a0611a23c4fceccd1db423d996e8667cca691a0fc38c87c574e9ee4375343af1f49badd1f95d3f5f91115a4537282a2e9cfaca35e1ebadaec7c7145264c410102e3515fed91724c1ef745ae4ea9ca58cb14962da911908815da50015c0407d877b605212ebd02f6eac032cac9f0377da0cd0661b16dab8125d0bcfd159b744a299d705ac06350f635231a886f62fcf7571ef5850dace2a3f63d0ca703f1d9ce9111bad11dea434fd08c13f7b33098609a1d027bf8f07e1230bcf30993ecc80836d9c0e764e0187b7e04d4f076c6110a4b87464563c3fe6a0862b9af6675225cdfba5e316dfd4234124ddb3d744ee4100afea0b01ae32c6d49f0e63fb58a3efc32ba2d11013af6040a67ce3d5e290b8f678d6a7a7eaab7731385c459db075bc3094ef03df41788c8b6c968234c8d040bbef38fee0dc8e3c473e94f59e417ad7e1e11124efb0017f7d623b47cb5c2b9109ce650e61c8d59e182bd3a51aec1c74a50398e2ac6a997fe37893585e9e75a2531eef045811cb9ba495024f04cdfd4ff65bdf433c46ea997917d59151d628565fed7c6c74063b3c7a27cf5747f32cb6b6e2f648cb5830f279e1c67eaf8271351bedbd61e2095be4c95ed8eabdb15368dc1e6775a52866bf445647952b5f68bfe8c0aacdc4ffd3fff61dae3c83434439bf129561e503f140ab03b8ced2aae88eff7d61b904425421213a349a006d3740ab370a1ab410167a41f4afb07cf5d1becfd3471add2353be3aa70f959530b6ae4f69cce6c2545f50740f9be6dc7b1c402d288d5a1ac3e2d69cd16ce96c478aa689be1ae8f301284ab2bfdef460c07b2011ab89172efd2da0d1c4acd079d410c4316ad888d36ea5a2bbdc4fad4c0342893f0e2d98b628f26ef4cd66e6dd82c977a6febcb0fda5511b2cc5ef57763ce81bece126053517e49951402c380615e6487495036b459b2afd1bfe82a431e498a9780045c0e9e450b2402ee1dc3eeffff8b07c4fc05dc228ba90dc7b7589c1393d65bc84828c8fe0791c501628eed2a40b59cfd656c409ff374237b63532b312c9bbae7ae64ca32e20b48bde38fdf047d1901b2a7387b8775139e269bfdd09f340f27b6ec999cc014986112538ff3976551c5be1cd68deab1bae77f606f206515b66c3ce2322f23affe69faa924e2ea0da4bc30ba429eee7240b7a95343e5a888b4663b91c9735d80cd9b123da4d14b04e5bb47c992ace5d7e575ea882c31a8d074d080270737ed5e6db1811dd6dc1cf832e1e01fcda3ea58dcb9b4f9bafadd37566dfedad9d8be1a849b1bb8d98f114d9fcfe1605c5369761fb8c87f78421a6e006e9a365341b394328ef939d905e594dbd00f2e22b7354342ae387407ab49253179f70a7e2196ddd5fa31b704377012f9944ffc0c977196990f1f167ff073903f8c62c5a6d0f36796f118f0e285f79d9aca1e7364e7da598027afa7dbb6f2553cf5d8d1c8ce39d40a002dd27713072df5f59e103e1f08b459fcda6509857f95f25c719b6bd3cce91295cb4795a4640107dfc35b3272442e6039f5e7d3d36bd9057ad8c1fe67e10085e3004a5a165ab23c2407e7d3cbda019f1897190c01ec3701192cf59bc8e8c981556f44db379b8dc7109fed4d4d2cf59f6770eee587a01ecbbab782cc0cd05426f3874bbd32a545d3371c8e0beb5c6a45828a62c5e1411268586153502e2e77926a86cf1cb94e5e84aef7276c3d9cdf51f789cefa0d2e7984bda99a91b1dd2490191ca54d3343c3951c4507e5d33348aa34efa81bd2b82ee10bf5a24d8be007aa9bd29f78dd54fad98fc3161e597fc4267e1c5c0e2c108e1d9e262c12aaf2ff5b6f457395dbb67e5c01f2ddaeeb59e3e1d1b8866e8aa6de88be3dc7d93d27997a5b5e695333c53431efc2dedb0ac7410c8ef81f73c7d0ffbbee8e272664544f771e1c84c6d85185dab822103c85dcf49fab7ffe1afa4a69d9f210a18493df7263b26c260da4673dfcbf3503828679a3b101b6df65414d51f904f3d21c71fd2b5e991195d0cf9544dafc74f920bb7e100ccf47ca3065bb59ac0fc9e501686b290558bf2f3310e526cdb022f400360514ec7df2b201c48ac22e05d6ff5f5a9c0a90d21560aa1605605b65dd773d7c0abade4512d6a02a6b993194f71edfa3edb7e3c5ecc8382c2058fec26b51f6b701ffbf721b4ae2934c556974c61658d1eeb2531fb7f562f3c0eb5e2ccd49e447ee35ad94e34c1fdf01e7f7540b70ff44c92edd1389bcbedf9d9f72d8ba495f4ad3c0a99971dd59c6c304c194b468aece715d33257edba56b646acad962f20e00bed47626c6f73bb92d8e7ab389eade765ae7f5cd7ef7112227405e78024fc08d48396f3e1775ab8c3a599a6e5aa1d74f6f8b387c494c83c9425431bd5f2544619f5d645481e5693ca99bbeb2bd726102bc04f40c19a1e18b18f77eb4f79cb1db690b429d72cc311f47e740faa5bebce9ff87695bc1cee99c5251d3cdf3234c8b4f3b7100c1fae84b34d01b12e7aa830ed030ad6590cf0945703ed04d22020a3b0d333a6e27b1a97a3e89b16016bc80252e946a4542370430f1d103609b3354f4b13fa9ddeeb203906d45a908c65efbc16c7e4ec939307f62a296033d5bf143328c7362ccbba48f760e7fab687b08d43f527e5c7b38e9bbaec09d9484abd3c12e9397dc4f828c07b5fa8109f006749c01ff1a44bc9a5cd3f1378a906c9038d6385a3bb8ad53ec81b800b0fe9b40dc8de827c294cea76ba971c16c495c4d35ab9e907c19319cbc1354c9fd42bfe4858a98b0167c81d847bdbbc18453e1c3faf83ef65bb0740b349c2cf4f2ea8f557c2f914ecdbdaec37f70985c44a675fd2844358cb089203b270f36ee4b55c6a0109449b7aed4829692ca7e8f0fcc8f0c0865021edcfff430c135c59f1d4e9933236a7665138bf99e5bc18fa10c39d45416f286391b125cf743fc8ff320d7d95ffa8ef0fe4112bf3d99c808f0c8aa878004da057b4ac361a0d95bebfcd32afb5c3a9431ea70394f95f4d0b0cf0d4117ba71bfd63f11f077c61b7c08032a115a9b03a5afe1e7b79445e47fc8a159add73aeabc8a37adae2708ba3bd4d82fde9cdc907da067374e416a11cb1f577388b9e5a02760a8d05b06ab01316d768300fec4fc041dfcc4a2980c412877bf93d7a5b2f386486d273d42791401eb493b37ddcba2715225eb292e6b1c56c46d526bedde160978cabd0bd5236f0caaf2f6b30116d577b4c1c52dd26cbff0528b2009b5ece47134a71b025568ffce73194ec28a026d0a210713e91996124c4ebc1dd14636e4ffd481a8b0fec5cf7a0876e107df9211fff10ea377d42be1e04ee0c7eecafdab86dd2b7042d4ba26e4fdd90cdb91310413ab3529b05430aa1fcc2acd204cfd6676a26524df60003e6e0f39816d58d33a97ee6aa95733afca4b6dd9078aad8deff756ef8bc4a6464875ec0d4a61743535ac29098676e757881ddd6adc6d398d20c20a13ca040ae6f988da9e03db03c1b9df79df044b94ef67b0f20a0a08abd1862b98b5d814242414f622f9c984de194ef58562b1e3d89e4c053975d9a8c816a2dacb8edd997c1bedd457746ceeacc96cfe303a5f8bb340cce0cd163b530037c2740830dbf6c98e8013ba50cde0ee3b767c224b239ddb9d25ba8ff86d2f8684fbac007db887f44d333e4140a7ad27c266754ea13f56747d3668d74d1d570507d7468ca297c3b2fb3b18cf9a368d8eda92f43d8c00f3d86684a4740da59be79996073188351de116666fbee97867547067dddcb6f01e7dbbc1ce0f1b7255c26ec5c1d00a7c064f76ab593f8eb0e1e9a81be0f698024a023f0f5165b5b7d2e279103b2774cde717c1b37319b094d7c9742252ad7a4c1999feb7a958e7e01a9575818f1f8acf7b11af6c6fb41c1c64a3ae77350c7f6c6c5909a4dc987ba7a0bec9d6d92c3210d8ec92d920de695375855893424203dc1f038ee70c2ccafc25d34cf0cda601956537b4723a5651173917fd3cdf70ccd373030bb7f8d34e287292e1c1bee94a886516ef9f1003cb2f4afb28f64dd1eca6e7f311a4f7ac93ab948c3dccde400cad157ae389e05ace001f6eda7f8b0851d0693071ec8da3efa3eb79724cc69b598e565bd734f8bdc2cf309e55a3b80e45724eb4f362b42cdcbbbe9d39703b5f8466efe44d36ca45f12252e8d36eb7d0748250313057fa3a067c7bdf952ff90b67dad60428230c2a72904903e68cbc7050252118c1e07f9de6d1e1d430ebc4b7d15aad1ad86dc6e2d95538edd00d70fac8e2032bdcfbda48bba6c9f293a6cd25984312b3a27e91eae2dd1bd6f475ffe2b2a9f83075afb78bbad68d02a61b9d560c08e706fc16c1aa30a600e68d2b69acab4c2a559f6564456159c20b9d29d49449e0f7971701d9f19cd3068ce1d747209b2e600463f5d885dd73f7609e03c1dcaf852302e0e6fb6b1882575df83cfc18a097605647c457f796210157314e88bce4489af8b085a6dd71cf9126efee6e11bff66af48092c3f02af256b59901a436c7cc679ce732a3f5d389e28103afbedd9fdbda6c1ab50d1763482759bf1afa5a6738354b6d49279570940a55718a6d850c5ab33c89cd971ad00d77e29aedbe44a66e06377e319f69164e26513c0ec87aa8f0d869dca77de2552e17a6b392de7a77ce3179d7353b68f99d90720e739d6528e24652c2f4e446a2b5bf94e62f9c73af99c1b9e4e8c9681f929f0224f8c818a326a1e6bda66fa98a4a3b76681d4bf37b275edac10f198161c5fd7182d3365301b63a013cf49955983d92cf62ba037a31731af3de84d341d953f850f3e045c4b8cf89b2e9ec13c6683d56a44dc5e3fdae05cf15c8811ba80ecf38fe9310bf558f574ca5b0a859f506e46273e8aed8b99a250d5a9391968e2075ed7eabe7d291dcaebf7840dede37a16716204de1efca8ab455bef6fa10db1882b702d94b224c2ad168a738faec16395c0e7ca23826c61463b68b71818a5aea00accc8652fc03b6f422fa9a335d7c24d5eb5fc1786d4ce197d4259fa7ec6e05a716ea146a6252fdc80062d1d17041e4747c26a1077f0440fee76f75cf1e56d7ebb8a620a2a0ed99d1b1839a6386af390167d0eee9af9a7250417a53848948fec3370c83d81813d67f523ad69b57d5282bb790184ff9ce971469dd80cddf7c32b4138645629db62429a48fa2950f8e1867569e6b913752cda0d585c8ab97436c6824e4d0b6718e4ad95a6f7a2dc67c02d1dbd62767a5083587ef64a7899af5c80d70434b2fcf73e7fb29704f6c16740218d68c816cc3821700b0a05f3c49f7baf9c50e5c4afa8f62eb0a9c824df2a6fd19d9e85062070695c4ca192cded85de6cb83fd6b114ae5bd7f57361d3471b54c40b546ce2b88c4d01d910a2c3e2931060757ef0e80550c28bc03eedbadbf4fb62d01d6050fc5ca8a32146dabf867e0d6eecaeeb00e8d8c5ff43b703c0ce9ee644ece5294dee7465b9f0930b43acd9dfe6053a3deb664588a4aba1d21d067df771569eb9e62538fe207f9297011035172b89dc504b6b521b1de662cd164148132f249f9b5e1d64d50e5e388786bfe2f20b86a7b9733a9da796f86932c3754228da8df8d011baaedb6a8b31c7e94ae2741ff435daa5dbba7bf70892b5840de33325adcd3", 0x1000}], 0x4, &(0x7f0000001340)=[{0xe0, 0x10a, 0x6, "6cc7317c51a0b29a8c7202b134119d12d43f48a9953100d31e9df6017636176df90fb7975ee1697ac286d3de41483f6bac43cae40acbd9ebc7b3c3922b3abe602da0bc65729096d1e80b76ca991c27a5d1fe4ae0c17d7afae9eb88d7d26d2fdb21275bef9cf3da4c68980fa03de46b6c26d6d5a2ef157facf1c766d3ef111b54a591e29d3b7e99a46412b6f172e9bf151b4b0246ef5e6f59c40e3e6c868d007e5601b45157e36acafbe053e8c5efde3fcd84baf620984ddcfbefbbeb6dea986a9c55cf6f1f02697eec"}], 0xe0}, 0x800) 33.208841031s ago: executing program 1 (id=6733): socket$kcm(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x24080, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc006, 0xac5d, 0xffffffff, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, r0, 0x0) bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000004440)=@base={0x14, 0x4, 0x4, 0x7, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x10, &(0x7f00000008c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0e00009bd029", @ANYRES16=r1], 0xfe33) socket$kcm(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) gettid() sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) close(r2) socket$kcm(0x2b, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) 32.815200893s ago: executing program 4 (id=6734): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x2005, 0x0, 0x50, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x36, 0xfffffeb2, &(0x7f0000000500)="b9ff03076804268cb89e14f086dd47e0ffff2000000000010000ac141416e000130129a130112b92121f9ae0dd972fa104edcce40d8d", 0x0, 0x2800, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x4c) 29.694894799s ago: executing program 1 (id=6740): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x4, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50622, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1}, 0x0, 0x10000000000, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f00000001c0)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5884, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x80000001, 0x7}, 0x0, 0x4, 0x6, 0x7, 0x20001ff, 0x0, 0x0, 0x0, 0x7fffbffe, 0x0, 0x4000000000000}, 0x0, 0x9, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/net\x00') r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) close(0x4) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r6 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r5, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r6, r4, 0x0, r3}, 0x10) r7 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f00000008c0), 0x43) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r8 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r8, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f00000004c0)=@tipc=@nameseq={0x1e, 0x1, 0x3, {0x2, 0x0, 0x1}}, 0x80, 0x0}, 0x0) socket$kcm(0x2, 0x3, 0x84) 29.500054144s ago: executing program 4 (id=6743): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000940)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x160b5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x10, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffff}, 0x0, 0xfffffffffffffff7, 0xffffffffffffffff, 0x0) (async) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000200)="1c0000001e0081054e81f782db020000071d080006007c09e8fe08a1", 0x1c}, {&(0x7f0000000a00)="3072e3e0b97adedcf71bbaf5557b8e25d4efb706c732c7525e9666923c21f2705c6f49d81c18f3f3617c20a70eb5b9a98d5ec5c3", 0x34}], 0x2}, 0x4104) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) perf_event_open(&(0x7f0000000b80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) (async) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)="1400000035000b45d30000000000000001d25a80", 0x14}], 0x1}, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) (async) sendmsg$inet(r3, &(0x7f0000000b40)={&(0x7f0000000440)={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f0000000a40)=[{&(0x7f0000000500)="51019609e0d36e5fdd67b84f58c3400662a48c8ce5ba395e3b7bfa6634c87ed5148e18abfd785d0d684541c592d78480904dc035ebfea8e93ac3d444cf51b05ac974d64aedfeef1c3950532d40d4751561c5a7299f34f87db968576e0db811fed7b9050fdbc1c4a8ef427fd027f1991e15f0af97e7f35735e678", 0x7a}, {&(0x7f00000006c0)="c4d4c175ada8e889530aa65a81d5cb17d3bf31f1a887f765ca8b5639549e5ae4af48806c058955a978e2ca8c6079d618377e1fa3827a8bea50479ca82d8f2d2b3d62d6ae069647033d52a9c3a636d3a2f1f2c222315b6a2b41f854fe1fab001e30667958a42a1c1d95e1b1d4c61eda612b6c292b037e5d4613d9a669b924d8bbd031e1ec1c53", 0x86}, {&(0x7f0000000840)="1adbe2c725622c00fff9efe1b23a2a2e3c61874739186c9a9743e0787ed05d3ac19fa2b0e38898029d6d48d83e5d7c9c4ca433115ca133075f9376dda8dc28456c8eb0f65d760636cbabf03080a90703c6f322a3024a055ee0cb8f80a86d4355a03f7017d4ca6a585267a59b7d69a3702c769295f2243fe08af1eac7d6618ffd5ebde69692b4a1a1c5b105dad09921a4e9617cdb4043dd64e79a2041ce0263b06959db744c4941178d38efd9e436b9c96ef226a73df62208dc36c7b75715988d37f41c74ebe4", 0xc6}, {&(0x7f0000000940)}, {&(0x7f0000000c40)="694d63af4b508dd59531b3d579d6b45ebdc99d5e27b5ac1e1836100358d4365721a426b60f4e978c1d5e88aad1d7ae8ce719a70dd127fcde40fe6cc66974825801621ad2c67db2d0ff451f8ff19ae6413f7bb131a733f69c0e414e55f6d40a4caacc94ce0535ccc7623e629fff2a8a1e3391cdefd7ec53943542b1f3c160cc114ee77cce20786223b5dbc808ccd58c0daa60d59d835b8dc69aa15dcedebaf0e4eb341694fd5c43bfe3c4630416dd04e8714721c6a5548f06c6389aacd3ad8e0e64c4a40158674b30fe5c408ce787e217e172ba66825b2f14031d508c0b1e30923282350972d7a9acb36fc72eb777e9c0fc9fb2adef913c19131154119d03d5c0f21594c279927611feb50c5287543829abdafb2b2787f32747b78643a0f1ff5e84262d288d9d1f90d7759a917ec377b8aa40aac11f56e831d9a7b6963071576baff392cccc088a652800"/347, 0x15b}], 0x5, &(0x7f0000000ac0)=[@ip_retopts={{0x10}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x11}}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x200}}], 0x48}, 0x804) (async) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000400)=ANY=[@ANYBLOB='-cpu'], 0x5) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000011c0)=ANY=[@ANYBLOB="1800000000000000000000000000200018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000007100"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x0, 0x8, 0x8, &(0x7f0000000580)="0000ffffffffa000", &(0x7f0000000340)=""/8, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006067c09e8fe55a10a0015400400142603600e120800067c00001001a8001600a400034003", 0x39}], 0x1}, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)=@rxrpc=@in4={0x21, 0x1, 0x2, 0xffffffffffffff7a, {0x2, 0x4e23, @multicast2}}, 0x80, 0x0}, 0x4004090) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="d800000010008104685fa3aa7143a0f8c81ded0b25000000e8fe09a118001500060014ea000000120800030043000040a8002b000a00", 0x36}], 0x1}, 0x20000880) (async, rerun: 64) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0xfe33) (async, rerun: 64) write$cgroup_subtree(r5, &(0x7f0000000040)={[{0x2b, 'cpu'}]}, 0x5) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r8, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r9, &(0x7f00000005c0)=ANY=[@ANYRESHEX=r0, @ANYRES64=r9, @ANYRESDEC=r2, @ANYRES8=r6], 0xfdef) (async, rerun: 32) write$cgroup_subtree(r9, &(0x7f00000004c0)=ANY=[], 0xfdef) (rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2008}, 0x94) 29.210837913s ago: executing program 4 (id=6746): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x100080, 0x0, 0x0, 0x1}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)=[{0x0}], 0x1}, 0x0) r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x11, 0x2, 0x0) r1 = syz_clone(0xc8200100, &(0x7f0000000500)="f5031a2f7a757b9daf7a430ec92975feb0184adb4ba3649dbc4d9529920762413b819be0b11a1148250ef5d53d8e30c0fe4474be8387dbb7c3f330b417e615d8453718a330967fd5860eca96db399f6da26427c788671a06af21767b61be85cdb415c82be9a7aae692b852a42dadfbdf58742e91e33fe23f0d14079acfbcddfb08a2a7c19108b0845e24152cc17d82a27004440905c068bb72f972a0e8a4cfca46241bc7113b958c44354767702cc2ed3cffd09f3af9bb332ef65da230305484f00f480d7de65bec0b6e539ffa355e38f19aaccf83074cb83878c9c63b70db3d36620ad162f78a09421574cc58d8a2819af52947250e224da9cfd31254980ba4d7b290d9f841cba13c6a3b5c3cad239e145a36ef96e54c7d62d563914d2f91af7ab4d1ab782b2af72d7fb71cf9fe1cf06e1e113f43499faf858a748af9a17f3792801e0747f048885cc3981230be9a83376dc28fc0dc3e9b819efce45672c0added12d7ac195c994364e0d2fc1bf2da9a569ae3b5af48fe7b88090f6c12158d4cc3652cb1a54fa45c3dc2577718553d2fe8a9b4fc1817febd10919af02b2aab16261f6131522c1411bab44da45745fb77df3259cbb3d460461a637f95af42be09cad2ff024eb61c3f4e528b1722f1b544695541b66181c38228dd699c700729b6eb3051d85a89eae3e032ca4c10384ea534d862336aeea34a351c0f47f989ff2abf5a1523b98087eae085fb5d2b28419f796f1e6e15893b26e3c9fab0013d1ffcbbc3cb8cfe588b46b38cdf17e27b5477744596b8f0a1fb53218df26a53ada199a864f37998785d00f8f7b9dd87e505f03ab8c236e36a670622d8fdf71f73e8f87519c3d053c7aed16c4adc60ecc7171c628ac781e253385e2cb77a0372301692a41495f556c3db5f5ae55ce84f1e2571840f4d653f50bbd38f3913c5d875e980a172dcce5415705f99b9ff4e8a2204d1589287e7b2f2970639127a598cb4114cc451e0e436524d9bcb44a65a755d38454ca3e1330072a6fd8fc7ff76d502b23f7ed57e623179c7a5c38b997164aa2e2a0b3bc0added6410a8b1a4144991ceca0e6e14985fcc3b2e69ebb831214286dcf27b95dc4bf7cb37740bab90e5273675293fa46fcd3c449f20c2dc9ae15f4bc29a778cbfc01b9dc02c34fe09615a64ecaa8216bb63191361cba7e537ff47bc750ec3cd7545bcd42e9fe3a1d035e42227129384856539d7e2da9e89cc8d949553e9be41322351b9dcc37a55fbf69f7ceb2698d424a4481d600599e8719e53146f873c808ca9f41bc23f6a384f6f032974d736483cc79b7d6881d005c1faf80b9505cca7eea924ddd8a4f680f667a94ffe1e4304ea1444c45fbf71c1e864c674e77d7a807902d34cdc594dab0b86002aa0baa79658682a4ced4bfd73f17dc0232aae923c1867a2026e8475e7bc4ac1fb054396c7d12d9f2f7fbcec8bea89a9484bbe330bd0d5a5d09dd5a0e413264d222389226cbac7adbbbf1c9cbc1ebf017b7c0a7e5a0a87ea75672cf75ba39b53faba759f9511685ecadcc459d9c00de644b73930a54d6a4e4eb7b38b9b65d09f3a676aaf15080d4d3b8237ff987482bafe19be047a65ddf9eb461f7a4a89df5e94611026761018ab052415916bd422ace7f3307f03632fc3fe4f79e4bf8dab796daef5d77319142ec42b51bb0710cdbf632d1f645ab6726d0be09510b077b9398792e7a20aac2a2312f39c51bd8fc2d81a1627cbbb221047caa62b3611f80c652f9f28c7d9d5e63f88428bae1b2ffd695843e1af7eea4d74e885e1dc3ad178db582d41dc5f225abfa8fc0a236ad05f6a0e118e6c154201560f9211e39224b5cbbe1491dd424f35f97e8d511f058c69fad177eec7369dc1f11c93bb9c942a6eea25736a61647e222465d1a0e58f72ed3d369a6d32aa73fecc6f738d686e2351dcb153264dc90419a57cb7a26bbcbda7577b2ce3008b6100d985af8ee28f7e9bb8302759627348a222980c08fb152ce82a212fd89ce6372cb56c3259149bcd2e87989175463b677d4325c9f65e1cbfd568ee7c71c24cb9d6e85d640ff38c3df4f0e675c1a4e9bff04950e67e1edc3d0c4f8c715028d52dfde300d56ef24cb32e3fc440aefbf05f6b2da8cf3f13a7af4c20d5b6dca85482ca0202c8acc3fd8b3326dd2f7929eb4585cbdc6956e79e35c983715efae8ca094737974cf38b19d179af692d5492572987c5b6cf03d2cbf7ea29b23c8f1257452282d6d7dbfc2b8c8d939a8c1f841f9ec70edf67912f8d11ea9215d305a67acb212493e94788a2d933e8427a313504d7122e4c2c601852f8cc99276f87311d9fa9ea425258877fe20bca7a044f4fba530ebb99a24c4b004f7f17353aa5b36dfb32178ac404649fb080e3e597cf6ead4e96f791308c32d4a8b3733fd1c21b93a5b5cbfad85492c3ed5e0fcf582b87cb5a07116b9464a7670ff7f20aa5793b0ac6b8dc907061c9a8bb9ca0b19c97c738edd803081567d9c66e601532f4bfb25e1f23697d21b4ffa15328b9ceca8d4fc268b18e2d5484b4d4cb4a9754fd94d4e05db391ac7279075e586e501658010495f42c592b349db01adca994c591f80fb56770516be20515cad85d19c9da0368e83d84abc46186f72c28f5e5d67c3b9d6e6d12af93c044cb0105ed43bf57af65c9d48bc9219e0db159014441fad1e64678052e22c15d0ff23d08c38aaeb94cc9815398287894715d13e8dcdc4268cb85ec7b442a4e553ee0756f3aa48a9f9c09328f1f97e92aaa93d68cedb67e52c979e1ac1a056a1f99fa55268464c6651f8b1fad4b32829c4411506b44d93cb259b7e8cb348cc1fa77f32603c7271a6307ed84ace851e8986b76f591e6bdd08a387dfe65a34536612a02a6f5f6f8a6a83afb1adb624832747fd0be76bb1735408dd90999510ef23c4710f1c9bb310d15a27d94d0a703782a9156446aa8fac26680d63192d82d2f9926e964491b6ed4738ce96f20951821abf5adc517f832cfa58357ebb23f877471258482604fd31550a526e3f438ef18eaa7e300ca895ea2ba40796e110c221515292683d2b0ad6f4e643e6fffcae5f1c430dbea273176c73dcba30ea3d56f0053919ceaa17c776961edeb24b48a2492df85cbf25f014f77904617d553b4b38131b34c6c0a753030af88cd51f4da6731ca38ecf222bfacd34d973d2ac9988e84da23c3f45b35bfde8b02130bf687cd2e0d467743a51afc62c01675e8b6c47215edfc0a267574cb549ff8e6cc945c3575c294ffab5a6835ca69c3cea1cfa75c20870743bd1c868b7061c7593410aabda356e4af1fe8bcc5d68750ac444dac3773d9f43911e00b5997592eb8c40a96e1439672ec58c45e4e629425eb08928a123ad6aa9701eed0c7fd5cf546c09c416cdbf825f94fcdf7a3d1a92586849686e46192f1063c6e1b9fb6a3bed56e9b6a3756b3c644032d66753e685d19a5e05135c7f7dafab34740fb51caa6b3e0934f9ad0864bbdc5df8753f3a4ff5c5836631ee4d7ab86d1dfa3c1a627f510eb601dd6518ee20c4eb04c6f0217f500d37f169bc441bd75f4b6ad6e6520171890c3f11122f63837abd0387827a910ef8f5021d6236deebbe77d49a49cffc94904084eae9dbf80d397142cf21e1e18da93e79ac6540fbdea252fbf2e9ae9f5e27cec0229f9649957ae02f5c23ec919af25689c6bb71a4a0ab2e710d728de74d5592c9e95d0df4fe9caf89edce3d0d72d1d674fcc426d9819e14ebd05f69d8f40c76bdabd86baa7680dbd0506078a36fedf11ab33a9230816c30afe04b87327b9572b9afe0ff3e83671e569dd06367af06746c899d07c9c2a8d1f9b3be9cb51cd3a3bf973e0bda59f11ac790fa1d4229166201ac30cf50acd1d14b39ca399cae25091267c088cbbab505a3e457be6a06421f78332eb7bb566defe5ebbbd665664ff9d640860f41ca79c262c74ac31c425bc6632f165b39322d92848a1d9159534a31974b4b5a839e11be9cdc134e2169f9cb9bbd0df500cecdd0d445ca1a6ec6ace6e4ecc908cfbaf0ce5dc937c322720ac157b87041d288db3e4c1d44d41dc24a6ac36cb79fd928eb0cde473973f535d8b1e9fb382cdea755e3fc4f37bdcb7a3c17a9cc58ed76c43744a83876fba6c31106ec8fb448efd648594497567cee46a0e8ace4e8a8ed228ff7fd0d58b091f6b0603630ed8032cfa177c3e013734ef3efafd270c2f4369f5efec6efdcf0fb65a5fc44d33498b54a68de273776c961be22ea78df5bc32ef599a15b78446c91f4f78d775880ff992f71a6cfaf4e83abc0eff8b2fd9e5b1bfb89345749c231b80fc4551d32cff3befd0eedc217d3f52e5a4b80c010378b0715802607b3b46d971ee6b0737598b602e0ac1beab74e82af20100ba8f0c5ec25c5a9d297c477497a7bfe9e50a130d4e01ef66b95342b3934bb8e39d269d7e3c54d45eec5ce97d5e306b74c782593968b9790cfa71807261885865dacc3c7303a0828a8a32e21194b64a8b5c40f0d44bc1927333791e71649de91d1298c160dee6ab677b56873e817e09d2abf68668d599850f1056f8b400de7998a59933ed27ecf7f2b55822d10e610da54aca6a79c85d4b44acf2659b5f4f7ec53a81d4edf0f4626492e87a01a295fbf4d9db3618c449b364991a70f76d82767a12d5857bf82f03dc8349002b632a2355c824ff5682dc4dd82f805e6875e8bb373ec4b4e9a4da017c68ecc35261e44bc5d3cf0df9827d8f6db5fc1fd411bbc27f91843fe6460c7e65ff04275b898f13f983ec7b8713283b59fbe53aaecbfca65d4eed6a072af59e16922e007377b9081e168f8b51115e2dfca68e36fe1392d484e97c38017249d563d9bba6628800251220aaab8d80ef7e8fcee7d489fdfe85b8d928d17dd0fbce774fc6f551988449fe989a9cde886b9990284fa4c81aa524b508776f84fb644952f483ed38085d6a9737591c00d89d4b37b6a8d4fe88b22387420f5842e60bd195c734611f07915fed8d36c662ea5579f6ad085048e50ca485c22766c5ebed4932346fa67917d9897ade21ae89a8f346801b8480341ba125217dd45443c078cc3a462c506d1ecf487f84720e3f3e4b68e3efdf58596e4413f352c98b40e9dc17a5253943e8f4603499f5199439783e26ea5ff3ec6117988e9e285dd22c47ccbc81cd9808562ec741f8307beca6f7fae37b38106d52591c7114201a083bc36a608e77e1d40f6f01fedbbb4207992f7c0a940e4ea4d1548a01dfa22d096eeadb8da70c165c6b30bde86ac2ec361f7fc06288cb9279899c5068e7243618d8335cc986ec11cd02f9861aec3762b0d83d747043c374f64ec061c2446474cd1fa15a27d66999ba68b5d23d7fc833e3a403787f040ee6a5c5bcf0ae72854e96a44896bcf54d3546d1c6eedf507b49903c5e70fd59892d23a65890712f14110ed676a0e6fcd93d568f9628476fece84e1ca00bbc792cabc7b0bd9d948301595ffe34a0affbcc69e1faef6938ecce89e250899c41b1bf9530b06b6adb476f7a958c697c1baa34601f4f8c3bee57c328b4550994a4eb022c007d3fe9fe80bce5649180f8764c67fb63cf37a4e144e42e148bb953d7158b97b6e6cb32809060fb284ea5aee2099835a92e60688485cc1db51d962534898d47c42767d71a37582df460141dd6f5b6cb06f142a46f7e77b0882a3761596f142310e095cd0a03687063222113d84aff6ad77e4fe673e3ef10024d0f1feaf6be3d23b7673a8b17a899b0b3a0d2f0cfcb04383e4a05ee470d212d1f10e226e544f1fe6176", 0x1000, &(0x7f0000001500), &(0x7f0000001540), &(0x7f0000001580)="e8c7ebcd8ba0a7c2f1dd77652c04c228a8883012e773c1d79da5ae3cdf41b9b0897f452a342872a084ad8ecbcf411c8a21b9c8bb4a54ad975d031cb2c70793effb14344ecd3ed2cf7620650f4889f5e5b9681d033d80b0fd372eb5943af1b25d6b2c186c75ced5ceeb1852991f4c886983f2cb24a3dce9dc652bc054d1134a97330d706efd68d1f8fc4fce7faa46ffcb76aaf434a18dcc9942fd8597c1c6ef07ade39f4a") perf_event_open(0x0, r1, 0xfffffc0000000002, r0, 0x9) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)="5c00000013006bcd9e3fe3dc6e48aa31086b8703040047887ea60264160af365040004", 0x23}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002f000b08d25a80648c7494f90424fc600b", 0x15}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="934300005a"], 0xfe33) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x51004400, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0x2, &(0x7f00000000c0), 0x10) 29.202508994s ago: executing program 1 (id=6747): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000001800)=ANY=[@ANYBLOB="0a00000016000000b30000007f"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000040000000800000002"], 0x50) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x84) socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x0, 0x2000000000}, 0x10c002, 0xac5d, 0x0, 0x0, 0x8001, 0x80000001, 0xfffe, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x5, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetlb.1GB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000100)=r2, 0x4) r3 = socket$kcm(0xa, 0x2, 0x88) r4 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x400, 0x4556, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x3, 0x3}, 0x18, 0x0, 0xfffffffe, 0x1, 0x5, 0x8, 0x103, 0x0, 0x2, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x1b) r5 = socket$kcm(0xa, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700400008"], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x890b, &(0x7f0000000000)={r6}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r3, &(0x7f0000000000)={&(0x7f0000001340)={0x2, 0x6, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x41}, @multicast1}}}], 0x20}, 0x8000) sendmsg$inet(r3, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x0) socket$kcm(0x15, 0x5, 0x0) syz_clone(0x630c0700, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$inet(r1, 0x0, 0x12cd) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000100f00000000000000"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b7040000000004008500000033"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xe, 0x0, &(0x7f0000000280)="432275e2065074ef2415f73227b2", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) close(0x3) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f0000000080)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xa, &(0x7f0000000080)=ANY=[@ANYBLOB="18030000000000000000000000000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="000000000000000025000000010000005800000000000100000000000000000095000000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) 26.559072415s ago: executing program 2 (id=6757): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x4, 0xc272}, 0x10c002, 0xac5d, 0x0, 0x7, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8, 0x4}, 0x24, 0x0, 0x3, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000000080000000000000000000850000001800000085000000a000000095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xc7, &(0x7f0000000140)=""/199, 0x8000000}, 0x94) 26.147385858s ago: executing program 2 (id=6760): socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x6, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x6}, 0x5000, 0x0, 0x0, 0x0, 0x0, 0xa}, 0xffffffffffffffff, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x23, &(0x7f0000000040), 0xcf) sendmsg$kcm(r1, &(0x7f0000001240)={&(0x7f0000000940)=@generic={0xa, "8ab77fa26849ff263ef30c98b353011a5990650042e2dacdc165ececece6be1862e2adacd2737d00ad6f9fa9f3d7145e15dd9fb1a7adc211220963ad5def53b911ba5b9da13641f982757012a7496de0b3a36f5849f260c603dbc317f54b901ee80ea6132ca6e88c776553e1833052ca376304313c5637786a36a4b83857"}, 0x80, 0x0}, 0xff97) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000003640)={0x10, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018edff00000000000c0000000c0000"], 0x0, 0x26, 0x0, 0x4}, 0x28) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a0, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, 0x0) socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x806, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) 25.872189996s ago: executing program 3 (id=6762): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x4, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, 0x0}, 0x0) syz_clone(0x111, 0x0, 0x9, 0x0, 0x0, 0x0) socket$kcm(0x21, 0x2, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x10, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000c000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000000f000000bf09000000000000550901000074f6967d00000000000000180100002020702500000000002020207baaf8ff00000000bda100000000000027010000f8ffffffb702000008000000b7030000000000002500000006000000be91000000000000b502ecffffff00008500000005000000b70000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 25.628260204s ago: executing program 2 (id=6763): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0xc2b6, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x19, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) socket$kcm(0xa, 0x2, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb9200a4831371400000069bd6efb2502eaf60d000300020400bf050005001201", 0x2e}], 0x1}, 0x0) 25.252496255s ago: executing program 0 (id=6764): bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={0xffffffffffffffff, 0x0}, 0x20) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x5d68}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa35f0"], 0xcfa4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 24.633489904s ago: executing program 0 (id=6765): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x9, 0x10, &(0x7f0000000b00)=ANY=[@ANYBLOB="1808000c6e8f00"/16], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x85, &(0x7f0000000ac0), 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000001, 0x1, @perf_bp={0x0}, 0x8061, 0x3, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) socket$kcm(0xa, 0x3, 0x11) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000f9ffffff0000000071121f00000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) perf_event_open(&(0x7f0000000000)={0x1, 0x3f, 0xc5, 0x4, 0x3, 0x7, 0x0, 0x80000001, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x201, 0x1, @perf_bp={0x0, 0x13}, 0x10424, 0x6, 0x9, 0x9, 0x3, 0x5, 0x9, 0x0, 0x7e, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1}, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) r3 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000002540)}, 0x0) recvmsg$kcm(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x22) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c0000000300000001000000000000"], 0x0, 0x37, 0x0, 0x1}, 0x28) r4 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e0007"], 0xfe33) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd56, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) sendmsg$inet(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)}, 0x40f0) 24.614178395s ago: executing program 3 (id=6766): bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000000)="fc297dee27dfc7b6a6e9da893d77e9b53c8e017b2177084911e9a674cf0c7704142a6f936bbc393931f0c32a7e6517b6b7bf4d29577cfc1275bfb81337cd81f730cd3507beee2e86a8850cc7c21eaea802104a948289c03406a705c9ee7391e5de4544bf5c99b005a60f0b072d20a2"}, 0x20) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, 0x0) socket$kcm(0x25, 0x4, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000000000875a65059ff57b00"/49], 0xcfa4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 24.304706554s ago: executing program 2 (id=6767): socket$kcm(0xa, 0x5, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x189703, 0x0) ioctl$TUNSETIFF(r0, 0x5452, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x0}, 0x94) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20f42, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'nr0\x00', 0x6132}) (async) write$cgroup_subtree(r1, &(0x7f0000000000), 0xfe3a) (async) ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f0000000000)=0x1) (async, rerun: 32) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) (async, rerun: 32) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3}, 0x0, 0x1d38, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async, rerun: 32) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (rerun: 32) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) (async) getpid() syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) 23.713604672s ago: executing program 2 (id=6768): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xdf, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x2, @perf_config_ext={0x408003, 0x1}, 0x14105, 0x32, 0xfffffbff, 0x0, 0x6, 0x0, 0xffda, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="1808000008000008000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000002f000000b70900000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000d00)=r3, 0x4) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="89000000120081ae08060c", 0xb}], 0x1}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x200000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x64ded63f) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, &(0x7f0000000080)) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000d00)={r4}, 0xc) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x4, 0x1, 0x4, 0x6d, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd3, 0x83}, 0x10134, 0x913d, 0xfffffffd, 0x0, 0x40001}, 0x0, 0x4000000000000200, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0xf6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x3}, 0x6000, 0x0, 0x4, 0x6, 0x0, 0x20000002, 0xfffc, 0x0, 0x5}, 0x0, 0x1, 0xffffffffffffffff, 0xd) r5 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r5, 0x29, 0x23, &(0x7f0000000040), 0xcf) 23.677689434s ago: executing program 0 (id=6769): r0 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @mcast2, 0x38}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x3f05000000000000) 23.631221595s ago: executing program 4 (id=6770): r0 = perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x9) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9c, 0x10}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400), 0x420c00, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@fallback=r1, 0xb, 0x1, 0x2, &(0x7f00000001c0), 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0]}, 0x40) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x15, 0xa, 0x0, 0x0, 0x60, 0x61, 0x11, 0x54}, [@initr0]}, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb0100180000000000008d34000000340000000600000004000000000000070000000000000000000000010500000140b9000000000000010000850200000000000000020000000000004300000000da"], &(0x7f0000000340)=""/142, 0x52, 0x8e, 0x1}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0x0, @local}, 0x10, &(0x7f0000000180)=[{0x0}], 0x1, 0x0, 0x0, 0x2044}, 0x60) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b0b, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00 \x00'}) 23.630253455s ago: executing program 3 (id=6771): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYRES16=r0, @ANYRES8=r0, @ANYRES8, @ANYRES32=r0, @ANYRES16, @ANYRESDEC, @ANYBLOB="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", @ANYRES16, @ANYRES16], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_devices(r1, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x100080, 0x0, 0x0, 0x1}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8916, &(0x7f0000000040)={'ipvlan1\x00', @random="0200ac7f7e00"}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100000000005d31, 0x80d80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) socket$kcm(0x29, 0x5, 0x0) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x826, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000000400000004000000090000000008"], 0x50) (async, rerun: 64) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (rerun: 64) r4 = openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000600)=ANY=[@ANYBLOB="660a0000000000006156a27fd4114c0000000600000000000000000000000000000000001500000018eabc87e82105d0202e015d62739386d296ebab328d12258e5d54da53a7a6f927016e31867d1904240184a3947594829a42c3cbaa8af70c3cb729e138fa2e6f52c6861d69dafdf933c11319a878fc5e04aaa2763f22b06d03a33d027994db3c5829d9c72f191afb3b5abeea62a4ef93bbbb95d81f73c89067a4d7d3a73ac34fd7010d0025f5548acc138f289f"], &(0x7f0000000000)='GPL\x00'}, 0x80) write$cgroup_pid(r4, &(0x7f00000001c0), 0x12) (async, rerun: 64) r5 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) mkdir(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) (async) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f00000005c0)=r5, 0x12) r8 = openat$cgroup_ro(r6, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000040)=0x1, 0x12) 23.508432018s ago: executing program 2 (id=6772): socket$kcm(0x2, 0x3, 0x106) r0 = socket$kcm(0x10, 0x3, 0x10) close(r0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x2000009, 0xd85aa, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000240)}, 0x100080, 0x0, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x29, 0x5, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x3, 0x300, 0x1, 0x0, 0x0, 0x0, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x12, 0x6, 0x4, 0x2}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x1c, 0x0, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000008500000029000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180800000000000000000000000000008500000023"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$unix(r4, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000004}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r1, &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x3d}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) socket$kcm(0x10, 0x2, 0x0) socketpair(0x1f, 0x1, 0x52, &(0x7f0000000040)) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001540)={&(0x7f0000000200)={0x2, 0x4e25, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x200008d0) 23.415355041s ago: executing program 0 (id=6773): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000003c0), 0x4}}, r0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f00000001c0), 0x7}, 0x411, 0x2000000, 0x0, 0x0, 0x400001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000001, 0x1, @perf_bp={0x0}, 0x8261, 0x3, 0x9, 0x5, 0x0, 0x204}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0xe, 0x8, 0x2, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r2}, &(0x7f0000001d80), &(0x7f0000001d40)=r1}, 0x20) 23.414995321s ago: executing program 4 (id=6774): socket$kcm(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x24080, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc006, 0xac5d, 0xffffffff, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, r0, 0x0) bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000004440)=@base={0x14, 0x4, 0x4, 0x7, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x10, &(0x7f00000008c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0e00009bd029ef8020ab07000400", @ANYRES16=r1], 0xfe33) socket$kcm(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) gettid() sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) close(r2) socket$kcm(0x2b, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) 23.393715292s ago: executing program 3 (id=6775): bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={0xffffffffffffffff, 0x0}, 0x20) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x5d68}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa35f0"], 0xcfa4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 23.271678196s ago: executing program 1 (id=6776): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d80)={r0, 0xe0, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x7, &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xdc, &(0x7f0000000b80)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000bc0), &(0x7f0000000c00), 0x8, 0xe0, 0x8, 0x8, &(0x7f0000000c40)}}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000dc0)=ANY=[@ANYRESOCT=r2, @ANYRES64=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xa5, 0x0, 0x0, 0x0, 0x0, 0x1b3, 0x10200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x8, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f0000000100)='cpu&\t0\x00+7') r6 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000009800000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300)=0xffffffffffffffff, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{r6, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)='%+9llu \x00'}, 0x20) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)={0x1b, 0x0, 0x0, 0xffffa377, 0x0, r6, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x4}, 0x50) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0xda, 0x0, 0x0, 0x84, r6, 0x800, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x5, 0xb}, 0x50) r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000980)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x3}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x11, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7}, [@map_idx={0x18, 0x0, 0x5, 0x0, 0x8}]}, &(0x7f00000000c0)='syzkaller\x00', 0x7, 0x7, &(0x7f00000002c0)=""/7, 0x41000, 0x40, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000340)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000380)={0x5, 0x9, 0x7, 0xff}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000a00)=[r9, r6, r10, r6, r6, r11, r12, r6, r6, r6], &(0x7f0000000a40)=[{0x0, 0x5, 0x5, 0x1}, {0x3, 0x1, 0x6, 0x4}, {0x2, 0x4, 0xd, 0x3}, {0x3, 0x2, 0x7, 0x7}]}, 0x94) r13 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="4c00000014006b03000000d86e6c1d00104c250002000f00000017d34460bc24feb556a705251e6182949a369f3d3b48dfd8cdbf9367b4fa51f60a64c9f4d4938037e786a6d0bdd700000000", 0x4c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r7, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="d22208d9c2978888ca8d8b0086dd", 0x0, 0xc000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 12.214455975s ago: executing program 3 (id=6777): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x4, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, 0x0}, 0x0) syz_clone(0x111, 0x0, 0x9, 0x0, 0x0, 0x0) socket$kcm(0x21, 0x2, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x10, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000c000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000000f000000bf09000000000000550901000074f6967d00000000000000180100002020702500000000002020207baaf8ff00000000bda100000000000027010000f8ffffffb702000008000000b7030000000000002500000006000000be91000000000000b502ecffffff00008500000005000000b70000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 12.214227535s ago: executing program 0 (id=6778): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d31, 0x10040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x800020000}, 0x0, 0x0, 0x0, 0x6, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) socket$kcm(0x10, 0x2, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000640)=[{0x0}], 0x1}, 0x4000040) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r2 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, 0x0, 0x0) socket$kcm(0x1e, 0x4, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) 7.697632754s ago: executing program 32 (id=6776): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d80)={r0, 0xe0, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x7, &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xdc, &(0x7f0000000b80)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000bc0), &(0x7f0000000c00), 0x8, 0xe0, 0x8, 0x8, &(0x7f0000000c40)}}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000dc0)=ANY=[@ANYRESOCT=r2, @ANYRES64=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xa5, 0x0, 0x0, 0x0, 0x0, 0x1b3, 0x10200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x8, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f0000000100)='cpu&\t0\x00+7') r6 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000009800000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300)=0xffffffffffffffff, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{r6, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)='%+9llu \x00'}, 0x20) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)={0x1b, 0x0, 0x0, 0xffffa377, 0x0, r6, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x4}, 0x50) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0xda, 0x0, 0x0, 0x84, r6, 0x800, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x5, 0xb}, 0x50) r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000980)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x3}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x11, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7}, [@map_idx={0x18, 0x0, 0x5, 0x0, 0x8}]}, &(0x7f00000000c0)='syzkaller\x00', 0x7, 0x7, &(0x7f00000002c0)=""/7, 0x41000, 0x40, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000340)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000380)={0x5, 0x9, 0x7, 0xff}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000a00)=[r9, r6, r10, r6, r6, r11, r12, r6, r6, r6], &(0x7f0000000a40)=[{0x0, 0x5, 0x5, 0x1}, {0x3, 0x1, 0x6, 0x4}, {0x2, 0x4, 0xd, 0x3}, {0x3, 0x2, 0x7, 0x7}]}, 0x94) r13 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="4c00000014006b03000000d86e6c1d00104c250002000f00000017d34460bc24feb556a705251e6182949a369f3d3b48dfd8cdbf9367b4fa51f60a64c9f4d4938037e786a6d0bdd700000000", 0x4c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r7, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="d22208d9c2978888ca8d8b0086dd", 0x0, 0xc000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 7.391677463s ago: executing program 33 (id=6772): socket$kcm(0x2, 0x3, 0x106) r0 = socket$kcm(0x10, 0x3, 0x10) close(r0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x2000009, 0xd85aa, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000240)}, 0x100080, 0x0, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x29, 0x5, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x3, 0x300, 0x1, 0x0, 0x0, 0x0, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x12, 0x6, 0x4, 0x2}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x1c, 0x0, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000008500000029000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180800000000000000000000000000008500000023"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$unix(r4, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000004}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r1, &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x3d}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) socket$kcm(0x10, 0x2, 0x0) socketpair(0x1f, 0x1, 0x52, &(0x7f0000000040)) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001540)={&(0x7f0000000200)={0x2, 0x4e25, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x200008d0) 7.391536213s ago: executing program 3 (id=6781): bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000000)="fc297dee27dfc7b6a6e9da893d77e9b53c8e017b2177084911e9a674cf0c7704142a6f936bbc393931f0c32a7e6517b6b7bf4d29577cfc1275bfb81337cd81f730cd3507beee2e86a8850cc7c21eaea802104a948289c03406a705c9ee7391e5de4544bf5c99b005a60f0b072d20a2"}, 0x20) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, 0x0) socket$kcm(0x25, 0x4, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000000000875a65059ff57b00"/49], 0xcfa4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 105.07µs ago: executing program 34 (id=6774): socket$kcm(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x24080, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc006, 0xac5d, 0xffffffff, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, r0, 0x0) bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000004440)=@base={0x14, 0x4, 0x4, 0x7, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x10, &(0x7f00000008c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0e00009bd029ef8020ab07000400", @ANYRES16=r1], 0xfe33) socket$kcm(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) gettid() sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) close(r2) socket$kcm(0x2b, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) 0s ago: executing program 0 (id=6783): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x6, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x806, 0x0, 0x8dc, 0x4, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_type(r0, &(0x7f0000000040), 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) kernel console output (not intermixed with test programs): leftover after parsing attributes in process `syz.3.4687'. [ 1059.595113][T18784] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.4689'. [ 1059.809993][T18787] Q±6ã`Ò˜: renamed from lo [ 1059.978295][T18793] FAULT_INJECTION: forcing a failure. [ 1059.978295][T18793] name failslab, interval 1, probability 0, space 0, times 0 [ 1060.003646][T18793] CPU: 0 PID: 18793 Comm: syz.1.4691 Not tainted syzkaller #0 [ 1060.011208][T18793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1060.021318][T18793] Call Trace: [ 1060.024643][T18793] [ 1060.027632][T18793] dump_stack_lvl+0x188/0x24e [ 1060.032375][T18793] ? show_regs_print_info+0x12/0x12 [ 1060.037672][T18793] ? load_image+0x400/0x400 [ 1060.042232][T18793] ? __might_sleep+0xd0/0xd0 [ 1060.046868][T18793] ? __lock_acquire+0x7d10/0x7d10 [ 1060.051954][T18793] should_fail_ex+0x399/0x4d0 [ 1060.056680][T18793] should_failslab+0x5/0x20 [ 1060.061226][T18793] slab_pre_alloc_hook+0x59/0x310 [ 1060.066309][T18793] ? bpf_prog_test_run_skb+0x234/0x12a0 [ 1060.071912][T18793] __kmem_cache_alloc_node+0x4f/0x260 [ 1060.077337][T18793] ? bpf_prog_test_run_skb+0x234/0x12a0 [ 1060.082935][T18793] __kmalloc+0xa0/0x240 [ 1060.087168][T18793] bpf_prog_test_run_skb+0x234/0x12a0 [ 1060.092592][T18793] ? __fget_files+0x28/0x4b0 [ 1060.097241][T18793] ? __fget_files+0x28/0x4b0 [ 1060.101894][T18793] ? __fget_files+0x43d/0x4b0 [ 1060.106650][T18793] ? cpu_online+0xa0/0xa0 [ 1060.111028][T18793] bpf_prog_test_run+0x31e/0x390 [ 1060.116023][T18793] __sys_bpf+0x62b/0x780 [ 1060.120305][T18793] ? bpf_link_show_fdinfo+0x380/0x380 [ 1060.125735][T18793] ? lock_chain_count+0x20/0x20 [ 1060.130621][T18793] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1060.136732][T18793] __x64_sys_bpf+0x78/0x90 [ 1060.141272][T18793] do_syscall_64+0x4c/0xa0 [ 1060.145739][T18793] ? clear_bhb_loop+0x60/0xb0 [ 1060.150459][T18793] ? clear_bhb_loop+0x60/0xb0 [ 1060.155178][T18793] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1060.161205][T18793] RIP: 0033:0x7ff7e079ce59 [ 1060.165649][T18793] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1060.185281][T18793] RSP: 002b:00007ff7e1592028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1060.193732][T18793] RAX: ffffffffffffffda RBX: 00007ff7e0a15fa0 RCX: 00007ff7e079ce59 [ 1060.201741][T18793] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 1060.209739][T18793] RBP: 00007ff7e1592090 R08: 0000000000000000 R09: 0000000000000000 [ 1060.217912][T18793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1060.226000][T18793] R13: 00007ff7e0a16038 R14: 00007ff7e0a15fa0 R15: 00007ffc4745a9e8 [ 1060.234110][T18793] [ 1060.444340][T18783] device syzkaller0 entered promiscuous mode [ 1060.464600][T18802] netlink: 164 bytes leftover after parsing attributes in process `syz.3.4696'. [ 1060.481419][T18806] netlink: 'syz.4.4697': attribute type 10 has an invalid length. [ 1060.518704][T18809] netlink: 'syz.1.4695': attribute type 1 has an invalid length. [ 1060.561385][T18809] netlink: 83992 bytes leftover after parsing attributes in process `syz.1.4695'. [ 1062.977850][T18827] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.4704'. [ 1063.715788][T18858] netlink: 'syz.4.4713': attribute type 10 has an invalid length. [ 1063.895064][T18858] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1064.279189][T18869] netlink: 'syz.4.4717': attribute type 2 has an invalid length. [ 1064.306028][T18868] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.4718'. [ 1064.342923][T18869] netlink: 198692 bytes leftover after parsing attributes in process `syz.4.4717'. [ 1064.814867][T18888] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4726'. [ 1065.295922][T18907] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4733'. [ 1065.333005][T18907] device hsr_slave_0 left promiscuous mode [ 1065.372110][T18907] device hsr_slave_1 left promiscuous mode [ 1065.497369][T18909] netlink: 'syz.0.4734': attribute type 21 has an invalid length. [ 1065.606693][T18914] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.4735'. [ 1065.788143][T18919] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4736'. [ 1066.267835][T18937] netlink: 164 bytes leftover after parsing attributes in process `syz.1.4743'. [ 1066.364352][T18941] netlink: 180900 bytes leftover after parsing attributes in process `syz.2.4746'. [ 1066.374362][T18941] openvswitch: netlink: Flow actions attr not present in new flow. [ 1066.532594][T18945] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.4748'. [ 1067.355847][T18969] netlink: 'syz.2.4754': attribute type 21 has an invalid length. [ 1067.381238][T18969] netlink: 'syz.2.4754': attribute type 6 has an invalid length. [ 1067.411583][T18969] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4754'. [ 1067.648237][T18979] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.4761'. [ 1068.328420][T18992] netlink: 'syz.2.4766': attribute type 2 has an invalid length. [ 1068.427540][T18992] netlink: 199848 bytes leftover after parsing attributes in process `syz.2.4766'. [ 1068.645371][T19001] ip6_tunnel: non-ECT from 0000:0000:0000:0080:fe00:0000:ac14:140a with DS=0x31 [ 1068.885827][T19005] netlink: 'syz.2.4771': attribute type 10 has an invalid length. [ 1068.934130][T19005] team0: Device veth1_vlan failed to register rx_handler [ 1069.132512][T19020] netlink: 'syz.1.4775': attribute type 2 has an invalid length. [ 1069.589859][T19019] netlink: 61211 bytes leftover after parsing attributes in process `syz.4.4776'. [ 1072.557493][T19077] netlink: 'syz.0.4794': attribute type 3 has an invalid length. [ 1072.568033][T19077] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.4794'. [ 1073.140257][T19083] netlink: 61211 bytes leftover after parsing attributes in process `syz.1.4793'. [ 1073.750957][T19101] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.4801'. [ 1074.070959][T19108] netlink: 'syz.2.4804': attribute type 10 has an invalid length. [ 1074.469421][T19126] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.4810'. [ 1074.734826][T19139] netlink: 'syz.2.4816': attribute type 10 has an invalid length. [ 1075.202337][T19156] netlink: 'syz.1.4821': attribute type 29 has an invalid length. [ 1075.231530][T19156] netlink: 'syz.1.4821': attribute type 29 has an invalid length. [ 1077.026292][T19214] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.4838'. [ 1077.135210][T19214] debugfs: Directory '.! 5‚Á7>7H€' with parent 'ieee80211' already present! [ 1077.250251][T19218] netlink: 'syz.4.4839': attribute type 10 has an invalid length. [ 1077.468079][T19218] 8021q: adding VLAN 0 to HW filter on device team0 [ 1077.517588][T19218] bond0: (slave team0): Enslaving as an active interface with an up link [ 1077.794188][T19238] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.4843'. [ 1077.877990][T19238] netlink: zone id is out of range [ 1077.910104][T19238] netlink: zone id is out of range [ 1078.028147][T19238] netlink: del zone limit has 4 unknown bytes [ 1078.629725][T19256] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4850'. [ 1078.771455][T19259] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4850'. [ 1079.272372][T19277] netlink: 'syz.4.4854': attribute type 10 has an invalid length. [ 1079.646440][T19280] netlink: 'syz.3.4857': attribute type 15 has an invalid length. [ 1081.249831][T19324] device pim6reg1 entered promiscuous mode [ 1083.975711][T19386] FAULT_INJECTION: forcing a failure. [ 1083.975711][T19386] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1084.021281][T19386] CPU: 0 PID: 19386 Comm: syz.4.4891 Not tainted syzkaller #0 [ 1084.028830][T19386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1084.038933][T19386] Call Trace: [ 1084.042268][T19386] [ 1084.045247][T19386] dump_stack_lvl+0x188/0x24e [ 1084.049987][T19386] ? show_regs_print_info+0x12/0x12 [ 1084.055240][T19386] ? load_image+0x400/0x400 [ 1084.059776][T19386] ? __lock_acquire+0x7d10/0x7d10 [ 1084.064849][T19386] should_fail_ex+0x399/0x4d0 [ 1084.069558][T19386] _copy_from_user+0x2c/0x170 [ 1084.074268][T19386] bpf_prog_test_run_skb+0x262/0x12a0 [ 1084.079668][T19386] ? lockdep_hardirqs_on+0x94/0x140 [ 1084.084910][T19386] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1084.091113][T19386] ? cpu_online+0xa0/0xa0 [ 1084.095479][T19386] ? cpu_online+0xa0/0xa0 [ 1084.099840][T19386] bpf_prog_test_run+0x31e/0x390 [ 1084.104822][T19386] __sys_bpf+0x62b/0x780 [ 1084.109109][T19386] ? bpf_link_show_fdinfo+0x380/0x380 [ 1084.114529][T19386] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1084.120745][T19386] __x64_sys_bpf+0x78/0x90 [ 1084.125203][T19386] do_syscall_64+0x4c/0xa0 [ 1084.129661][T19386] ? clear_bhb_loop+0x60/0xb0 [ 1084.134380][T19386] ? clear_bhb_loop+0x60/0xb0 [ 1084.139095][T19386] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1084.145021][T19386] RIP: 0033:0x7f295619ce59 [ 1084.149466][T19386] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1084.169103][T19386] RSP: 002b:00007f2956f83028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1084.177549][T19386] RAX: ffffffffffffffda RBX: 00007f2956415fa0 RCX: 00007f295619ce59 [ 1084.185548][T19386] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 1084.193550][T19386] RBP: 00007f2956f83090 R08: 0000000000000000 R09: 0000000000000000 [ 1084.201549][T19386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1084.209640][T19386] R13: 00007f2956416038 R14: 00007f2956415fa0 R15: 00007ffe19715278 [ 1084.217656][T19386] [ 1084.924197][T19398] netlink: 'syz.4.4897': attribute type 29 has an invalid length. [ 1084.983454][T19398] netlink: 'syz.4.4897': attribute type 29 has an invalid length. [ 1085.022710][T19401] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4897'. [ 1085.519915][T19401] team0: Port device team_slave_0 removed [ 1087.368500][T19460] netlink: 134056 bytes leftover after parsing attributes in process `syz.1.4917'. [ 1087.520241][T19464] netlink: 'syz.2.4922': attribute type 29 has an invalid length. [ 1087.563797][T19464] netlink: 'syz.2.4922': attribute type 29 has an invalid length. [ 1088.533651][T19480] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4927'. [ 1088.592597][T19480] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4927'. [ 1089.178008][T19510] netlink: 'syz.0.4936': attribute type 1 has an invalid length. [ 1089.223302][T19505] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4936'. [ 1089.429075][T19521] netlink: 'syz.4.4941': attribute type 21 has an invalid length. [ 1089.480267][T19523] netlink: 15743 bytes leftover after parsing attributes in process `syz.0.4942'. [ 1089.589392][T19523] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4942'. [ 1090.114036][T19539] netlink: 164 bytes leftover after parsing attributes in process `syz.1.4947'. [ 1090.172152][T19545] netlink: 'syz.0.4950': attribute type 21 has an invalid length. [ 1090.200793][T19545] netlink: 'syz.0.4950': attribute type 6 has an invalid length. [ 1090.216201][T19545] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4950'. [ 1090.260509][T19550] netlink: 'syz.3.4952': attribute type 10 has an invalid length. [ 1090.278953][T19550] device hsr0 entered promiscuous mode [ 1090.294782][T19550] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1090.323849][T19550] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 1090.348592][T19550] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1090.406528][T19550] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 1090.899858][T19572] netlink: 'syz.3.4961': attribute type 10 has an invalid length. [ 1092.338897][T19606] netlink: 'syz.0.4973': attribute type 3 has an invalid length. [ 1092.361508][T19606] netlink: 'syz.0.4973': attribute type 4 has an invalid length. [ 1092.441302][T19606] netlink: 9067 bytes leftover after parsing attributes in process `syz.0.4973'. [ 1092.484616][T19597] netlink: 'syz.3.4970': attribute type 21 has an invalid length. [ 1092.523489][T19597] netlink: 14548 bytes leftover after parsing attributes in process `syz.3.4970'. [ 1092.883147][T19615] netlink: 'syz.0.4976': attribute type 27 has an invalid length. [ 1092.938187][T19619] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4979'. [ 1092.960902][T19620] netlink: 'syz.2.4978': attribute type 10 has an invalid length. [ 1092.982926][T19619] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4979'. [ 1093.001433][T19619] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1093.185129][T19627] FAULT_INJECTION: forcing a failure. [ 1093.185129][T19627] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1093.222096][T19630] FAULT_INJECTION: forcing a failure. [ 1093.222096][T19630] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1093.247718][T19627] CPU: 1 PID: 19627 Comm: syz.4.4980 Not tainted syzkaller #0 [ 1093.255279][T19627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1093.265390][T19627] Call Trace: [ 1093.268711][T19627] [ 1093.271680][T19627] dump_stack_lvl+0x188/0x24e [ 1093.276421][T19627] ? show_regs_print_info+0x12/0x12 [ 1093.281684][T19627] ? load_image+0x400/0x400 [ 1093.286247][T19627] ? __lock_acquire+0x7d10/0x7d10 [ 1093.291339][T19627] should_fail_ex+0x399/0x4d0 [ 1093.296074][T19627] _copy_to_user+0x2c/0x130 [ 1093.300641][T19627] simple_read_from_buffer+0xe3/0x150 [ 1093.306076][T19627] proc_fail_nth_read+0x1a6/0x220 [ 1093.311162][T19627] ? proc_fault_inject_write+0x310/0x310 [ 1093.316861][T19627] ? fsnotify_perm+0x248/0x550 [ 1093.321682][T19627] ? proc_fault_inject_write+0x310/0x310 [ 1093.327365][T19627] vfs_read+0x2de/0xa00 [ 1093.331583][T19627] ? kernel_read+0x1e0/0x1e0 [ 1093.336230][T19627] ? __fget_files+0x28/0x4b0 [ 1093.340921][T19627] ? __fget_files+0x28/0x4b0 [ 1093.345572][T19627] ? __fget_files+0x43d/0x4b0 [ 1093.350314][T19627] ? __fdget_pos+0x2ae/0x360 [ 1093.354977][T19627] ? ksys_read+0x71/0x250 [ 1093.359366][T19627] ksys_read+0x14c/0x250 [ 1093.363666][T19627] ? vfs_write+0xa30/0xa30 [ 1093.368134][T19627] ? syscall_enter_from_user_mode+0x2a/0x80 [ 1093.374081][T19627] do_syscall_64+0x4c/0xa0 [ 1093.378551][T19627] ? clear_bhb_loop+0x60/0xb0 [ 1093.383296][T19627] ? clear_bhb_loop+0x60/0xb0 [ 1093.388026][T19627] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1093.393968][T19627] RIP: 0033:0x7f295615d68e [ 1093.398421][T19627] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1093.418077][T19627] RSP: 002b:00007f29543f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1093.426536][T19627] RAX: ffffffffffffffda RBX: 00007f29543f66c0 RCX: 00007f295615d68e [ 1093.434555][T19627] RDX: 000000000000000f RSI: 00007f29543f60a0 RDI: 0000000000000010 [ 1093.442572][T19627] RBP: 00007f29543f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1093.450584][T19627] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1093.458606][T19627] R13: 00007f2956416128 R14: 00007f2956416090 R15: 00007ffe19715278 [ 1093.466641][T19627] [ 1093.490762][T19630] CPU: 1 PID: 19630 Comm: syz.0.4982 Not tainted syzkaller #0 [ 1093.498317][T19630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1093.508423][T19630] Call Trace: [ 1093.511836][T19630] [ 1093.514815][T19630] dump_stack_lvl+0x188/0x24e [ 1093.519560][T19630] ? show_regs_print_info+0x12/0x12 [ 1093.524819][T19630] ? load_image+0x400/0x400 [ 1093.529378][T19630] ? __lock_acquire+0x7d10/0x7d10 [ 1093.534470][T19630] should_fail_ex+0x399/0x4d0 [ 1093.539211][T19630] _copy_from_user+0x2c/0x170 [ 1093.543943][T19630] ___sys_sendmsg+0x1c3/0x360 [ 1093.548685][T19630] ? __sys_sendmsg+0x290/0x290 [ 1093.553534][T19630] ? trace_call_bpf+0xbf/0x6b0 [ 1093.558376][T19630] __se_sys_sendmsg+0x1bb/0x2a0 [ 1093.563292][T19630] ? __x64_sys_sendmsg+0x80/0x80 [ 1093.568306][T19630] ? lockdep_hardirqs_on+0x94/0x140 [ 1093.573562][T19630] do_syscall_64+0x4c/0xa0 [ 1093.578041][T19630] ? clear_bhb_loop+0x60/0xb0 [ 1093.582769][T19630] ? clear_bhb_loop+0x60/0xb0 [ 1093.587495][T19630] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1093.593438][T19630] RIP: 0033:0x7f038619ce59 [ 1093.597907][T19630] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1093.617564][T19630] RSP: 002b:00007f0386fb5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1093.626035][T19630] RAX: ffffffffffffffda RBX: 00007f0386415fa0 RCX: 00007f038619ce59 [ 1093.634067][T19630] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 1093.642088][T19630] RBP: 00007f0386fb5090 R08: 0000000000000000 R09: 0000000000000000 [ 1093.650110][T19630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1093.658129][T19630] R13: 00007f0386416038 R14: 00007f0386415fa0 R15: 00007ffe920d8808 [ 1093.666174][T19630] [ 1093.706754][T19631] netlink: 65055 bytes leftover after parsing attributes in process `syz.2.4981'. [ 1095.285640][T19669] netlink: 65055 bytes leftover after parsing attributes in process `syz.1.4995'. [ 1095.633848][T19678] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4998'. [ 1095.743138][T19680] device syzkaller0 entered promiscuous mode [ 1095.863254][T19686] netlink: 'syz.3.5001': attribute type 8 has an invalid length. [ 1095.881607][T19686] netlink: 156 bytes leftover after parsing attributes in process `syz.3.5001'. [ 1095.969486][ T4332] Bluetooth: hci4: unexpected event 0x05 length: 15 > 4 [ 1096.310409][T19705] netlink: 65055 bytes leftover after parsing attributes in process `syz.2.5007'. [ 1096.362493][T19707] netlink: 'syz.0.5008': attribute type 3 has an invalid length. [ 1096.370771][T19707] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.5008'. [ 1097.138204][T19724] netlink: 176 bytes leftover after parsing attributes in process `syz.2.5014'. [ 1097.149263][ T4332] Bluetooth: hci2: unexpected event 0x05 length: 15 > 4 [ 1097.405226][T19737] netlink: 'syz.0.5019': attribute type 10 has an invalid length. [ 1097.445949][T19737] device geneve0 entered promiscuous mode [ 1097.736589][T19748] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.5024'. [ 1098.577823][ T4332] Bluetooth: hci0: unexpected event 0x05 length: 15 > 4 [ 1098.998378][T19776] netlink: 134056 bytes leftover after parsing attributes in process `syz.4.5036'. [ 1099.245867][T19787] netlink: 'syz.3.5039': attribute type 10 has an invalid length. [ 1099.349072][T19787] bond0: (slave bond_slave_0): Releasing backup interface [ 1099.690831][T19799] netlink: 65055 bytes leftover after parsing attributes in process `syz.2.5041'. [ 1099.742772][T19804] netlink: 'syz.0.5042': attribute type 10 has an invalid length. [ 1102.865205][T19831] netlink: 'syz.3.5050': attribute type 10 has an invalid length. [ 1102.892661][T19831] netlink: 55 bytes leftover after parsing attributes in process `syz.3.5050'. [ 1102.944156][T19833] netlink: 'syz.0.5052': attribute type 13 has an invalid length. [ 1102.966693][T19833] netlink: 172 bytes leftover after parsing attributes in process `syz.0.5052'. [ 1103.008341][T19833] erspan0: refused to change device tx_queue_len [ 1103.205855][T19841] netlink: 'syz.1.5056': attribute type 8 has an invalid length. [ 1103.240240][T19841] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5056'. [ 1103.719689][T19858] netlink: 65055 bytes leftover after parsing attributes in process `syz.1.5061'. [ 1104.263267][T19864] netlink: 'syz.1.5063': attribute type 2 has an invalid length. [ 1104.425475][T19866] netlink: 'syz.1.5063': attribute type 2 has an invalid length. [ 1104.482023][T19866] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5063'. [ 1105.078312][T19864] device 0 entered promiscuous mode [ 1105.094267][T19884] netlink: 'syz.3.5068': attribute type 10 has an invalid length. [ 1105.111122][T19884] device netdevsim0 entered promiscuous mode [ 1105.143812][T19884] netlink: 'syz.3.5068': attribute type 10 has an invalid length. [ 1105.260209][T19884] netlink: 'syz.3.5068': attribute type 10 has an invalid length. [ 1105.287209][T19884] netlink: 'syz.3.5068': attribute type 10 has an invalid length. [ 1105.300128][T19884] netlink: 'syz.3.5068': attribute type 10 has an invalid length. [ 1105.727211][T19895] netlink: 156 bytes leftover after parsing attributes in process `syz.4.5071'. [ 1105.829608][T19899] netlink: 65055 bytes leftover after parsing attributes in process `syz.2.5073'. [ 1106.168358][T19914] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5080'. [ 1108.117879][T19945] FAULT_INJECTION: forcing a failure. [ 1108.117879][T19945] name failslab, interval 1, probability 0, space 0, times 0 [ 1108.179755][T19945] CPU: 1 PID: 19945 Comm: syz.1.5090 Not tainted syzkaller #0 [ 1108.187308][T19945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1108.197408][T19945] Call Trace: [ 1108.200722][T19945] [ 1108.203696][T19945] dump_stack_lvl+0x188/0x24e [ 1108.208436][T19945] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1108.214642][T19945] ? show_regs_print_info+0x12/0x12 [ 1108.219982][T19945] ? load_image+0x400/0x400 [ 1108.224549][T19945] should_fail_ex+0x399/0x4d0 [ 1108.229283][T19945] should_failslab+0x5/0x20 [ 1108.233835][T19945] slab_pre_alloc_hook+0x59/0x310 [ 1108.238918][T19945] ? sk_prot_alloc+0xe7/0x210 [ 1108.243656][T19945] __kmem_cache_alloc_node+0x4f/0x260 [ 1108.249089][T19945] ? sk_prot_alloc+0xe7/0x210 [ 1108.253823][T19945] __kmalloc+0xa0/0x240 [ 1108.258090][T19945] ? __might_sleep+0x2a/0xd0 [ 1108.262738][T19945] sk_prot_alloc+0xe7/0x210 [ 1108.267287][T19945] ? sk_alloc+0x20/0x340 [ 1108.271578][T19945] sk_alloc+0x36/0x340 [ 1108.275695][T19945] ? bpf_ctx_init+0x163/0x1a0 [ 1108.280418][T19945] ? bpf_prog_test_run_skb+0x26f/0x12a0 [ 1108.286027][T19945] bpf_prog_test_run_skb+0x35e/0x12a0 [ 1108.291462][T19945] ? __fget_files+0x28/0x4b0 [ 1108.296124][T19945] ? __fget_files+0x43d/0x4b0 [ 1108.300872][T19945] ? cpu_online+0xa0/0xa0 [ 1108.305259][T19945] bpf_prog_test_run+0x31e/0x390 [ 1108.310253][T19945] __sys_bpf+0x62b/0x780 [ 1108.314552][T19945] ? bpf_link_show_fdinfo+0x380/0x380 [ 1108.320299][T19945] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1108.326520][T19945] __x64_sys_bpf+0x78/0x90 [ 1108.330993][T19945] do_syscall_64+0x4c/0xa0 [ 1108.335559][T19945] ? clear_bhb_loop+0x60/0xb0 [ 1108.340285][T19945] ? clear_bhb_loop+0x60/0xb0 [ 1108.345020][T19945] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1108.350971][T19945] RIP: 0033:0x7ff7e079ce59 [ 1108.355432][T19945] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1108.375178][T19945] RSP: 002b:00007ff7e1592028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1108.383646][T19945] RAX: ffffffffffffffda RBX: 00007ff7e0a15fa0 RCX: 00007ff7e079ce59 [ 1108.391666][T19945] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 1108.399684][T19945] RBP: 00007ff7e1592090 R08: 0000000000000000 R09: 0000000000000000 [ 1108.407704][T19945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1108.415725][T19945] R13: 00007ff7e0a16038 R14: 00007ff7e0a15fa0 R15: 00007ffc4745a9e8 [ 1108.423759][T19945] [ 1108.527693][T19944] netlink: 65055 bytes leftover after parsing attributes in process `syz.0.5091'. [ 1109.756289][T19988] netlink: 65055 bytes leftover after parsing attributes in process `syz.0.5105'. [ 1110.290564][T20008] validate_nla: 61 callbacks suppressed [ 1110.290626][T20008] netlink: 'syz.0.5113': attribute type 29 has an invalid length. [ 1110.679770][T20017] netlink: 134056 bytes leftover after parsing attributes in process `syz.4.5116'. [ 1111.507945][T20008] netlink: 'syz.0.5113': attribute type 29 has an invalid length. [ 1111.523671][T20017] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1111.542772][T20017] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1111.571184][T20017] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1111.898953][T20027] netlink: 65055 bytes leftover after parsing attributes in process `syz.1.5120'. [ 1113.665339][T20064] netlink: 'syz.2.5133': attribute type 1 has an invalid length. [ 1113.801440][T20064] netlink: 'syz.2.5133': attribute type 1 has an invalid length. [ 1113.827086][T20064] netlink: 'syz.2.5133': attribute type 1 has an invalid length. [ 1113.903535][T20064] netlink: 116376 bytes leftover after parsing attributes in process `syz.2.5133'. [ 1113.972867][T20073] netlink: 65055 bytes leftover after parsing attributes in process `syz.4.5136'. [ 1113.993949][T20075] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5135'. [ 1114.339385][T20081] netlink: 'syz.1.5137': attribute type 21 has an invalid length. [ 1114.419363][T20081] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.5137'. [ 1114.635144][T20091] netlink: 'syz.0.5143': attribute type 21 has an invalid length. [ 1114.671349][T20091] netlink: 'syz.0.5143': attribute type 6 has an invalid length. [ 1114.679187][T20091] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5143'. [ 1114.938477][T20089] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 1115.488562][T20108] netlink: 65055 bytes leftover after parsing attributes in process `syz.4.5151'. [ 1115.586763][T20111] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5150'. [ 1115.666964][T20116] netlink: 'syz.3.5153': attribute type 29 has an invalid length. [ 1115.711495][T20116] netlink: 'syz.3.5153': attribute type 29 has an invalid length. [ 1115.781312][T20119] netlink: 'syz.0.5155': attribute type 10 has an invalid length. [ 1115.816315][T20119] team0: Device veth1_vlan failed to register rx_handler [ 1115.926520][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.933236][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.163633][T20134] netlink: 'syz.0.5159': attribute type 2 has an invalid length. [ 1116.191438][T20134] netlink: 193088 bytes leftover after parsing attributes in process `syz.0.5159'. [ 1117.047496][T20159] netlink: 'syz.4.5168': attribute type 1 has an invalid length. [ 1117.226700][T20159] netlink: 'syz.4.5168': attribute type 1 has an invalid length. [ 1117.239659][T20159] netlink: 'syz.4.5168': attribute type 1 has an invalid length. [ 1117.254384][T20159] netlink: 116376 bytes leftover after parsing attributes in process `syz.4.5168'. [ 1117.321911][T20171] netlink: 'syz.2.5171': attribute type 21 has an invalid length. [ 1117.352267][T20171] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.5171'. [ 1117.366476][T20171] device bridge_slave_1 entered promiscuous mode [ 1117.620993][T20182] netlink: 'syz.2.5174': attribute type 10 has an invalid length. [ 1117.655046][T20182] bond0: (slave bond_slave_0): Releasing backup interface [ 1118.709673][T20205] netlink: 'syz.1.5181': attribute type 10 has an invalid length. [ 1122.990990][T20259] netlink: 'syz.0.5199': attribute type 3 has an invalid length. [ 1123.009425][T20259] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.5199'. [ 1123.246868][T20272] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5203'. [ 1123.707119][T20281] netlink: 'syz.3.5197': attribute type 12 has an invalid length. [ 1123.746606][T20281] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5197'. [ 1123.955648][T20284] netlink: 'syz.3.5197': attribute type 29 has an invalid length. [ 1124.134456][T20284] netlink: 'syz.3.5197': attribute type 29 has an invalid length. [ 1124.388347][T20293] netlink: 'syz.2.5209': attribute type 2 has an invalid length. [ 1124.397080][T20293] netlink: 193088 bytes leftover after parsing attributes in process `syz.2.5209'. [ 1124.814988][T20303] netlink: 'syz.1.5212': attribute type 10 has an invalid length. [ 1125.171401][T20307] netlink: 'syz.1.5215': attribute type 10 has an invalid length. [ 1128.596438][T20372] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.5234'. [ 1128.698268][T20374] netlink: 'syz.3.5233': attribute type 21 has an invalid length. [ 1128.730263][T20374] netlink: 164 bytes leftover after parsing attributes in process `syz.3.5233'. [ 1129.663252][T20408] netlink: 'syz.1.5248': attribute type 10 has an invalid length. [ 1129.741702][T20411] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.5250'. [ 1130.494561][T20437] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5259'. [ 1131.215214][T20450] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.5263'. [ 1131.308757][T20454] netlink: 'syz.2.5265': attribute type 3 has an invalid length. [ 1131.341203][T20454] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.5265'. [ 1131.353736][T20454] IPv6: Can't replace route, no match found [ 1131.380439][T20454] netlink: 'syz.2.5265': attribute type 29 has an invalid length. [ 1131.411754][T20454] netlink: 'syz.2.5265': attribute type 29 has an invalid length. [ 1133.768573][T20510] FAULT_INJECTION: forcing a failure. [ 1133.768573][T20510] name failslab, interval 1, probability 0, space 0, times 0 [ 1133.860679][T20510] CPU: 1 PID: 20510 Comm: syz.4.5285 Not tainted syzkaller #0 [ 1133.868247][T20510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1133.878397][T20510] Call Trace: [ 1133.881721][T20510] [ 1133.884694][T20510] dump_stack_lvl+0x188/0x24e [ 1133.889447][T20510] ? show_regs_print_info+0x12/0x12 [ 1133.894705][T20510] ? load_image+0x400/0x400 [ 1133.899268][T20510] ? __might_sleep+0xd0/0xd0 [ 1133.904039][T20510] ? __lock_acquire+0x7d10/0x7d10 [ 1133.909138][T20510] should_fail_ex+0x399/0x4d0 [ 1133.913909][T20510] should_failslab+0x5/0x20 [ 1133.918473][T20510] slab_pre_alloc_hook+0x59/0x310 [ 1133.923555][T20510] ? apparmor_sk_alloc_security+0x74/0x100 [ 1133.929412][T20510] __kmem_cache_alloc_node+0x4f/0x260 [ 1133.934848][T20510] ? apparmor_sk_alloc_security+0x74/0x100 [ 1133.940725][T20510] kmalloc_trace+0x26/0xe0 [ 1133.945217][T20510] apparmor_sk_alloc_security+0x74/0x100 [ 1133.950916][T20510] security_sk_alloc+0x6a/0xa0 [ 1133.955731][T20510] sk_prot_alloc+0x101/0x210 [ 1133.960376][T20510] ? sk_alloc+0x20/0x340 [ 1133.964682][T20510] sk_alloc+0x36/0x340 [ 1133.968812][T20510] ? bpf_ctx_init+0x163/0x1a0 [ 1133.973538][T20510] ? bpf_prog_test_run_skb+0x26f/0x12a0 [ 1133.979140][T20510] bpf_prog_test_run_skb+0x35e/0x12a0 [ 1133.984570][T20510] ? lockdep_hardirqs_on+0x94/0x140 [ 1133.989823][T20510] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1133.996046][T20510] ? cpu_online+0xa0/0xa0 [ 1134.000435][T20510] bpf_prog_test_run+0x31e/0x390 [ 1134.005432][T20510] __sys_bpf+0x62b/0x780 [ 1134.009734][T20510] ? bpf_link_show_fdinfo+0x380/0x380 [ 1134.015366][T20510] ? __sys_bpf+0x1/0x780 [ 1134.019665][T20510] __x64_sys_bpf+0x78/0x90 [ 1134.024142][T20510] do_syscall_64+0x4c/0xa0 [ 1134.028633][T20510] ? clear_bhb_loop+0x60/0xb0 [ 1134.033365][T20510] ? clear_bhb_loop+0x60/0xb0 [ 1134.038095][T20510] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1134.044053][T20510] RIP: 0033:0x7f295619ce59 [ 1134.048518][T20510] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1134.068187][T20510] RSP: 002b:00007f2956f83028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1134.076658][T20510] RAX: ffffffffffffffda RBX: 00007f2956415fa0 RCX: 00007f295619ce59 [ 1134.084668][T20510] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 1134.092673][T20510] RBP: 00007f2956f83090 R08: 0000000000000000 R09: 0000000000000000 [ 1134.100676][T20510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1134.108678][T20510] R13: 00007f2956416038 R14: 00007f2956415fa0 R15: 00007ffe19715278 [ 1134.116709][T20510] [ 1134.955329][T20527] netlink: 'syz.3.5289': attribute type 10 has an invalid length. [ 1134.986424][T20527] bridge0: port 1(bridge_slave_0) entered disabled state [ 1135.033117][T20527] bridge0: port 1(bridge_slave_0) entered blocking state [ 1135.040359][T20527] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1135.081485][T20527] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1135.200463][T20534] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.5292'. [ 1135.343624][T20534] device wg2 entered promiscuous mode [ 1135.744734][T20564] netlink: 'syz.0.5302': attribute type 29 has an invalid length. [ 1135.776284][T20564] netlink: 'syz.0.5302': attribute type 29 has an invalid length. [ 1135.891153][T20558] device syzkaller0 entered promiscuous mode [ 1136.484510][T20578] netlink: 134056 bytes leftover after parsing attributes in process `syz.4.5305'. [ 1140.462980][T20669] netlink: 'syz.3.5337': attribute type 21 has an invalid length. [ 1140.502568][T20669] netlink: 'syz.3.5337': attribute type 6 has an invalid length. [ 1140.522975][T20669] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5337'. [ 1141.308690][T20686] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.5341'. [ 1141.474798][T20686] device wg2 entered promiscuous mode [ 1142.035561][T20705] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5346'. [ 1142.529387][T20720] netlink: 'syz.3.5354': attribute type 10 has an invalid length. [ 1143.694270][T20759] netlink: 'syz.4.5367': attribute type 1 has an invalid length. [ 1143.733501][T20759] netlink: 'syz.4.5367': attribute type 3 has an invalid length. [ 1143.754259][T20759] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5367'. [ 1147.768324][T20854] netlink: 'syz.3.5398': attribute type 3 has an invalid length. [ 1147.791311][T20854] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.5398'. [ 1148.312992][T20868] tipc: Started in network mode [ 1148.318185][T20868] tipc: Node identity 9215a268, cluster identity 4711 [ 1148.346002][T20868] tipc: Node number set to 2450891368 [ 1148.397905][T20875] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5404'. [ 1148.788739][T20883] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.5408'. [ 1149.407913][T20909] netlink: 'syz.0.5416': attribute type 10 has an invalid length. [ 1149.457500][T20913] netlink: 134056 bytes leftover after parsing attributes in process `syz.3.5418'. [ 1151.062523][T20950] netlink: 'syz.0.5432': attribute type 21 has an invalid length. [ 1156.988293][T21000] netlink: 'syz.1.5447': attribute type 13 has an invalid length. [ 1156.996552][T21000] netlink: 172 bytes leftover after parsing attributes in process `syz.1.5447'. [ 1157.014484][T21000] erspan0: refused to change device tx_queue_len [ 1162.736789][T21137] FAULT_INJECTION: forcing a failure. [ 1162.736789][T21137] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1162.801866][T21137] CPU: 0 PID: 21137 Comm: syz.4.5491 Not tainted syzkaller #0 [ 1162.809859][T21137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1162.819963][T21137] Call Trace: [ 1162.823285][T21137] [ 1162.826251][T21137] dump_stack_lvl+0x188/0x24e [ 1162.830993][T21137] ? show_regs_print_info+0x12/0x12 [ 1162.836254][T21137] ? load_image+0x400/0x400 [ 1162.840826][T21137] ? __lock_acquire+0x7d10/0x7d10 [ 1162.845905][T21137] ? seqcount_lockdep_reader_access+0x177/0x1d0 [ 1162.852210][T21137] should_fail_ex+0x399/0x4d0 [ 1162.856947][T21137] _copy_from_user+0x2c/0x170 [ 1162.861678][T21137] __sys_bpf+0x2ea/0x780 [ 1162.865976][T21137] ? bpf_link_show_fdinfo+0x380/0x380 [ 1162.871414][T21137] ? lock_chain_count+0x20/0x20 [ 1162.876321][T21137] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1162.882373][T21137] __x64_sys_bpf+0x78/0x90 [ 1162.886851][T21137] do_syscall_64+0x4c/0xa0 [ 1162.891323][T21137] ? clear_bhb_loop+0x60/0xb0 [ 1162.896049][T21137] ? clear_bhb_loop+0x60/0xb0 [ 1162.900787][T21137] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1162.906731][T21137] RIP: 0033:0x7f295619ce59 [ 1162.911179][T21137] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1162.930814][T21137] RSP: 002b:00007f2956f83028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1162.939260][T21137] RAX: ffffffffffffffda RBX: 00007f2956415fa0 RCX: 00007f295619ce59 [ 1162.947267][T21137] RDX: 0000000000000050 RSI: 00002000000000c0 RDI: 000000000000000a [ 1162.955261][T21137] RBP: 00007f2956f83090 R08: 0000000000000000 R09: 0000000000000000 [ 1162.963254][T21137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1162.971256][T21137] R13: 00007f2956416038 R14: 00007f2956415fa0 R15: 00007ffe19715278 [ 1162.979270][T21137] [ 1163.589765][T21167] netlink: 'syz.3.5502': attribute type 3 has an invalid length. [ 1163.615782][T21167] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5502'. [ 1163.706430][T21172] netlink: 'syz.0.5504': attribute type 29 has an invalid length. [ 1163.817513][T21172] netlink: 'syz.0.5504': attribute type 29 has an invalid length. [ 1164.048420][T21183] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1164.715382][T21205] netlink: 134056 bytes leftover after parsing attributes in process `syz.2.5514'. [ 1165.099268][T21213] device syzkaller0 entered promiscuous mode [ 1165.167071][T21213] netlink: 'syz.4.5517': attribute type 10 has an invalid length. [ 1165.260071][T21213] bond0: (slave bond_slave_0): Releasing backup interface [ 1167.970381][T21259] netlink: 'syz.3.5530': attribute type 29 has an invalid length. [ 1167.993821][T21259] netlink: 'syz.3.5530': attribute type 29 has an invalid length. [ 1169.689055][T21308] netlink: 'syz.4.5550': attribute type 3 has an invalid length. [ 1169.709974][T21308] netlink: 114680 bytes leftover after parsing attributes in process `syz.4.5550'. [ 1174.737554][T21314] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5551'. [ 1174.844828][T21332] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5556'. [ 1174.915976][T21335] IPv6: NLM_F_CREATE should be specified when creating new route [ 1174.924388][T21335] netlink: 1 bytes leftover after parsing attributes in process `syz.3.5556'. [ 1174.985002][T21338] netlink: 'syz.4.5558': attribute type 21 has an invalid length. [ 1175.011280][T21338] netlink: 'syz.4.5558': attribute type 6 has an invalid length. [ 1175.019113][T21338] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5558'. [ 1175.241425][T21347] netlink: 'syz.0.5562': attribute type 2 has an invalid length. [ 1175.285607][T21347] netlink: 'syz.0.5562': attribute type 8 has an invalid length. [ 1175.302742][T21347] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5562'. [ 1175.517074][T21355] netlink: 'syz.0.5565': attribute type 10 has an invalid length. [ 1176.623747][T21378] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5572'. [ 1177.364325][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.371669][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.704710][T21400] netlink: 'syz.3.5582': attribute type 27 has an invalid length. [ 1179.814890][T21455] syz.0.5600[21455] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1180.377184][T21475] netlink: 'syz.1.5606': attribute type 3 has an invalid length. [ 1180.431672][T21475] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.5606'. [ 1180.548323][T21481] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5608'. [ 1180.833278][T21493] netlink: 'syz.4.5613': attribute type 10 has an invalid length. [ 1181.919890][T21521] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.5621'. [ 1182.010802][T21521] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.5621'. [ 1182.052999][T21521] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.5621'. [ 1182.063241][T21521] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.5621'. [ 1182.082032][T21521] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.5621'. [ 1182.148849][T21521] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.5621'. [ 1182.172034][T21521] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.5621'. [ 1182.213687][T21529] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.5624'. [ 1182.243629][T21529] bridge_slave_1: default FDB implementation only supports local addresses [ 1182.261303][T21531] netlink: 'syz.0.5625': attribute type 10 has an invalid length. [ 1184.140454][T21587] delete_channel: no stack [ 1184.191973][T21583] netlink: 'syz.2.5642': attribute type 11 has an invalid length. [ 1184.249970][T21594] netlink: 'syz.3.5644': attribute type 21 has an invalid length. [ 1184.435555][T21596] netlink: 'syz.3.5644': attribute type 21 has an invalid length. [ 1185.324125][T21629] netlink: 'syz.0.5655': attribute type 2 has an invalid length. [ 1186.429293][T21655] __nla_validate_parse: 63 callbacks suppressed [ 1186.429339][T21655] netlink: 111 bytes leftover after parsing attributes in process `syz.4.5662'. [ 1186.813446][T21667] netlink: 'syz.1.5668': attribute type 21 has an invalid length. [ 1186.842499][T21667] netlink: 'syz.1.5668': attribute type 20 has an invalid length. [ 1187.059609][T21671] netlink: 'syz.0.5669': attribute type 13 has an invalid length. [ 1187.102030][T21671] netlink: 172 bytes leftover after parsing attributes in process `syz.0.5669'. [ 1187.133661][T21671] erspan0: refused to change device tx_queue_len [ 1187.852294][T21689] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5675'. [ 1189.105883][T21707] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.5677'. [ 1189.139989][T21707] netlink: zone id is out of range [ 1189.191591][T21707] netlink: zone id is out of range [ 1189.226773][T21707] netlink: zone id is out of range [ 1189.288889][T21707] netlink: zone id is out of range [ 1189.341537][T21707] netlink: zone id is out of range [ 1189.346777][T21707] netlink: zone id is out of range [ 1189.511670][T21707] netlink: zone id is out of range [ 1189.516896][T21707] netlink: zone id is out of range [ 1189.534918][T21707] netlink: zone id is out of range [ 1189.540696][T21707] netlink: zone id is out of range [ 1191.833260][T21726] device syzkaller0 entered promiscuous mode [ 1195.898303][T21768] net_ratelimit: 141 callbacks suppressed [ 1195.898327][T21768] A link change request failed with some changes committed already. Interface Q±6ã`Ò˜ may have been left with an inconsistent configuration, please check. [ 1196.159714][T21781] FAULT_INJECTION: forcing a failure. [ 1196.159714][T21781] name failslab, interval 1, probability 0, space 0, times 0 [ 1196.197140][T21781] CPU: 1 PID: 21781 Comm: syz.3.5706 Not tainted syzkaller #0 [ 1196.204784][T21781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1196.214872][T21781] Call Trace: [ 1196.218222][T21781] [ 1196.221181][T21781] dump_stack_lvl+0x188/0x24e [ 1196.225902][T21781] ? show_regs_print_info+0x12/0x12 [ 1196.231139][T21781] ? load_image+0x400/0x400 [ 1196.235675][T21781] ? __lock_acquire+0x7d10/0x7d10 [ 1196.240737][T21781] ? ct_irq_exit_irqson+0x113/0x170 [ 1196.245965][T21781] should_fail_ex+0x399/0x4d0 [ 1196.250674][T21781] should_failslab+0x5/0x20 [ 1196.255219][T21781] slab_pre_alloc_hook+0x59/0x310 [ 1196.260285][T21781] ? bpf_test_init+0x9f/0x140 [ 1196.264993][T21781] __kmem_cache_alloc_node+0x4f/0x260 [ 1196.270411][T21781] ? bpf_test_init+0x9f/0x140 [ 1196.275120][T21781] __kmalloc+0xa0/0x240 [ 1196.279323][T21781] bpf_test_init+0x9f/0x140 [ 1196.283863][T21781] bpf_prog_test_run_xdp+0x484/0xf10 [ 1196.289195][T21781] ? dev_put+0x80/0x80 [ 1196.293303][T21781] ? dev_put+0x80/0x80 [ 1196.297412][T21781] bpf_prog_test_run+0x31e/0x390 [ 1196.302444][T21781] __sys_bpf+0x62b/0x780 [ 1196.306724][T21781] ? bpf_link_show_fdinfo+0x380/0x380 [ 1196.312144][T21781] ? lock_chain_count+0x20/0x20 [ 1196.317414][T21781] __x64_sys_bpf+0x78/0x90 [ 1196.321869][T21781] do_syscall_64+0x4c/0xa0 [ 1196.326323][T21781] ? clear_bhb_loop+0x60/0xb0 [ 1196.331042][T21781] ? clear_bhb_loop+0x60/0xb0 [ 1196.335760][T21781] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1196.341731][T21781] RIP: 0033:0x7fe348f9ce59 [ 1196.346176][T21781] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1196.365980][T21781] RSP: 002b:00007fe349d87028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1196.374429][T21781] RAX: ffffffffffffffda RBX: 00007fe349215fa0 RCX: 00007fe348f9ce59 [ 1196.382433][T21781] RDX: 0000000000000050 RSI: 00002000000000c0 RDI: 000000000000000a [ 1196.390440][T21781] RBP: 00007fe349d87090 R08: 0000000000000000 R09: 0000000000000000 [ 1196.398453][T21781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1196.406457][T21781] R13: 00007fe349216038 R14: 00007fe349215fa0 R15: 00007ffe92acc688 [ 1196.414474][T21781] [ 1196.510805][T21785] FAULT_INJECTION: forcing a failure. [ 1196.510805][T21785] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1196.592363][T21785] CPU: 0 PID: 21785 Comm: syz.4.5708 Not tainted syzkaller #0 [ 1196.599935][T21785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1196.610054][T21785] Call Trace: [ 1196.613389][T21785] [ 1196.616375][T21785] dump_stack_lvl+0x188/0x24e [ 1196.621129][T21785] ? show_regs_print_info+0x12/0x12 [ 1196.626455][T21785] ? load_image+0x400/0x400 [ 1196.631031][T21785] ? __lock_acquire+0x7d10/0x7d10 [ 1196.636132][T21785] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 1196.641937][T21785] should_fail_ex+0x399/0x4d0 [ 1196.646684][T21785] _copy_from_user+0x2c/0x170 [ 1196.651469][T21785] ___sys_sendmsg+0x1c3/0x360 [ 1196.656326][T21785] ? __sys_sendmsg+0x290/0x290 [ 1196.661206][T21785] ? __lock_acquire+0x7d10/0x7d10 [ 1196.666373][T21785] __se_sys_sendmsg+0x1bb/0x2a0 [ 1196.671307][T21785] ? __x64_sys_sendmsg+0x80/0x80 [ 1196.676362][T21785] ? lockdep_hardirqs_on+0x94/0x140 [ 1196.681639][T21785] do_syscall_64+0x4c/0xa0 [ 1196.686127][T21785] ? clear_bhb_loop+0x60/0xb0 [ 1196.690867][T21785] ? clear_bhb_loop+0x60/0xb0 [ 1196.695621][T21785] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1196.701576][T21785] RIP: 0033:0x7f295619ce59 [ 1196.706051][T21785] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1196.725733][T21785] RSP: 002b:00007f2956f83028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1196.734217][T21785] RAX: ffffffffffffffda RBX: 00007f2956415fa0 RCX: 00007f295619ce59 [ 1196.742254][T21785] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000008 [ 1196.750299][T21785] RBP: 00007f2956f83090 R08: 0000000000000000 R09: 0000000000000000 [ 1196.758330][T21785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1196.766363][T21785] R13: 00007f2956416038 R14: 00007f2956415fa0 R15: 00007ffe19715278 [ 1196.774439][T21785] [ 1197.758642][T21804] netlink: 'syz.0.5713': attribute type 29 has an invalid length. [ 1197.812925][T21804] netlink: 'syz.0.5713': attribute type 29 has an invalid length. [ 1198.138314][T21817] netlink: 134056 bytes leftover after parsing attributes in process `syz.0.5718'. [ 1199.606621][T21847] netlink: 'syz.2.5730': attribute type 10 has an invalid length. [ 1199.779338][T21851] netlink: 'syz.0.5732': attribute type 29 has an invalid length. [ 1199.806208][T21851] netlink: 'syz.0.5732': attribute type 29 has an invalid length. [ 1200.270007][T21868] netlink: 'syz.1.5736': attribute type 1 has an invalid length. [ 1201.535913][T21893] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.5747'. [ 1201.554844][T21894] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.5747'. [ 1201.572082][T21893] netlink: 1034 bytes leftover after parsing attributes in process `syz.0.5747'. [ 1201.612354][T21894] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.5747'. [ 1201.667964][T21894] netlink: zone id is out of range [ 1201.684009][T21894] netlink: zone id is out of range [ 1201.702266][T21894] netlink: zone id is out of range [ 1201.707881][T21894] netlink: zone id is out of range [ 1201.716665][T21894] netlink: zone id is out of range [ 1201.722493][T21894] netlink: zone id is out of range [ 1201.728191][T21894] netlink: zone id is out of range [ 1201.734744][T21894] netlink: zone id is out of range [ 1201.741968][T21894] netlink: zone id is out of range [ 1201.748215][T21894] netlink: zone id is out of range [ 1202.193654][T21906] netlink: 'syz.1.5753': attribute type 21 has an invalid length. [ 1202.217154][T21904] netlink: 'syz.2.5750': attribute type 3 has an invalid length. [ 1202.331217][T21904] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.5750'. [ 1202.798141][T21918] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5755'. [ 1206.781926][T21940] net_ratelimit: 348 callbacks suppressed [ 1206.781948][T21940] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0080:fe00:ac14:140a with DS=0x31 [ 1210.562398][T21931] netlink: 'syz.4.5759': attribute type 10 has an invalid length. [ 1210.572074][T21931] team0: Device veth1_vlan failed to register rx_handler [ 1210.590239][T21950] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5763'. [ 1210.661179][T21950] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1210.683198][T21950] bond0 (unregistering): (slave team0): Releasing backup interface [ 1210.709819][T21950] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1210.737234][T21950] bridge0: port 1(bridge_slave_0) entered disabled state [ 1210.756911][T21950] bond0 (unregistering): Released all slaves [ 1210.766675][T21952] netlink: 1010 bytes leftover after parsing attributes in process `syz.2.5766'. [ 1211.074373][T21972] netlink: 'syz.1.5773': attribute type 10 has an invalid length. [ 1213.103226][T21972] bond0: (slave bond_slave_0): Releasing backup interface [ 1213.525709][T22001] netlink: 'syz.2.5780': attribute type 3 has an invalid length. [ 1213.605849][T22001] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.5780'. [ 1213.904110][T22013] delete_channel: no stack [ 1214.329179][T22021] netlink: 'syz.3.5786': attribute type 3 has an invalid length. [ 1214.426525][T22021] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.5786'. [ 1214.506405][T13334] cgroup: fork rejected by pids controller in /syz0 [ 1214.557542][T22029] netlink: 'syz.4.5788': attribute type 21 has an invalid length. [ 1214.605468][T22029] netlink: 152 bytes leftover after parsing attributes in process `syz.4.5788'. [ 1215.655022][T16040] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1215.735090][T22041] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1215.754401][T22041] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1215.763649][T22041] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1215.777211][T22041] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1215.789869][T22041] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1215.797557][T22041] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1215.932752][T16040] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1216.012450][T22053] netlink: 'syz.4.5792': attribute type 10 has an invalid length. [ 1216.197014][T16040] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1216.261769][T22062] netlink: 'syz.2.5800': attribute type 10 has an invalid length. [ 1216.314393][T22062] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.5800'. [ 1216.365636][T22067] netlink: 'syz.4.5798': attribute type 3 has an invalid length. [ 1216.392731][T16040] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1216.451366][T22067] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.5798'. [ 1216.748688][T22075] netlink: 'syz.3.5803': attribute type 21 has an invalid length. [ 1217.161445][T16040] tipc: Left network mode [ 1217.180516][T22040] chnl_net:caif_netlink_parms(): no params data found [ 1217.790656][T22105] netlink: 'syz.3.5808': attribute type 10 has an invalid length. [ 1217.851202][ T4332] Bluetooth: hci2: command 0x0409 tx timeout [ 1217.913499][T22040] bridge0: port 1(bridge_slave_0) entered blocking state [ 1217.949045][T22040] bridge0: port 1(bridge_slave_0) entered disabled state [ 1217.994974][T22040] device bridge_slave_0 entered promiscuous mode [ 1218.066240][T22040] bridge0: port 2(bridge_slave_1) entered blocking state [ 1218.094342][T22040] bridge0: port 2(bridge_slave_1) entered disabled state [ 1218.132483][T22040] device bridge_slave_1 entered promiscuous mode [ 1218.285272][T22118] netlink: 17279 bytes leftover after parsing attributes in process `syz.3.5811'. [ 1218.333811][T22040] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1218.437945][T22040] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1218.637545][T22127] netlink: 'syz.4.5812': attribute type 10 has an invalid length. [ 1218.696107][T22040] team0: Port device team_slave_0 added [ 1218.809908][T22040] team0: Port device team_slave_1 added [ 1218.947757][T22040] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1218.980812][T22040] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1219.053467][T22040] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1219.134842][T22040] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1219.147637][T22040] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1219.271076][T22040] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1219.321353][T22144] netlink: 'syz.4.5819': attribute type 10 has an invalid length. [ 1219.921288][ T4332] Bluetooth: hci2: command 0x041b tx timeout [ 1220.460127][T22040] device hsr_slave_0 entered promiscuous mode [ 1220.485166][T22040] device hsr_slave_1 entered promiscuous mode [ 1220.518949][T22040] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1220.536584][T22040] Cannot create hsr debugfs directory [ 1220.976301][T22179] netlink: 17279 bytes leftover after parsing attributes in process `syz.2.5825'. [ 1221.325959][T22186] netlink: 56 bytes leftover after parsing attributes in process `syz.4.5826'. [ 1222.001265][ T4332] Bluetooth: hci2: command 0x040f tx timeout [ 1222.248430][T22199] netlink: 134056 bytes leftover after parsing attributes in process `syz.4.5834'. [ 1222.444675][T22040] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1222.525380][T22040] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1222.571863][T22040] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1222.749812][T22040] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1222.825013][T16040] device hsr_slave_0 left promiscuous mode [ 1222.942403][T16040] device hsr_slave_1 left promiscuous mode [ 1222.992617][T16040] device veth0_vlan left promiscuous mode [ 1224.082821][ T4332] Bluetooth: hci2: command 0x0419 tx timeout [ 1224.683704][T16040] team0 (unregistering): Port device team_slave_1 removed [ 1224.805321][T16040] team0 (unregistering): Port device team_slave_0 removed [ 1225.053623][T16040] team0 (unregistering): Port device bridge_slave_1 removed [ 1226.590683][T22040] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1226.660049][T16024] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1226.683676][T16024] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1226.705986][T22040] 8021q: adding VLAN 0 to HW filter on device team0 [ 1226.767520][T16043] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1226.802229][T16043] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1226.850026][T16043] bridge0: port 1(bridge_slave_0) entered blocking state [ 1226.857280][T16043] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1226.959833][T16043] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1227.023763][T16038] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1227.054372][T16038] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1227.071818][T16038] bridge0: port 2(bridge_slave_1) entered blocking state [ 1227.079065][T16038] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1227.118406][T16038] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1227.152792][T16038] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1227.180242][T16038] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1227.209878][T16038] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1227.254362][T22277] netlink: 17279 bytes leftover after parsing attributes in process `syz.4.5851'. [ 1227.695449][T16038] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1227.766819][T16038] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1227.806707][T16038] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1227.824735][T16038] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1227.837435][T16038] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1227.881317][T16038] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1227.897147][T16038] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1227.937027][T22296] netlink: 'syz.3.5852': attribute type 1 has an invalid length. [ 1227.947225][T22040] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1228.037788][T22296] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.5852'. [ 1228.924227][T22324] netlink: 'syz.2.5859': attribute type 10 has an invalid length. [ 1228.950549][T22324] device hsr0 left promiscuous mode [ 1229.084657][T16038] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1229.103104][T16038] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1229.125419][T22040] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1229.351458][T16031] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1229.384050][T16031] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1229.565478][T16031] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1229.642352][T16031] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1229.671787][T16031] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1229.734942][T16031] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1229.793002][T22040] device veth0_vlan entered promiscuous mode [ 1230.353820][T22040] device veth1_vlan entered promiscuous mode [ 1230.444974][T16024] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1230.460776][T16024] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1230.513829][T22040] device veth0_macvtap entered promiscuous mode [ 1230.532003][T22354] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5868'. [ 1230.563730][T22040] device veth1_macvtap entered promiscuous mode [ 1230.655169][T22040] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1230.709030][T16038] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1230.745664][T16038] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1230.772945][T16038] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1230.807905][T16038] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1230.852716][T22040] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1230.874885][T16038] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1230.892473][T16038] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1230.942653][T22040] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1230.983808][T22040] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1231.001097][T22040] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1231.009898][T22040] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1231.345464][T16038] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1231.361064][T16038] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1231.384981][T16040] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1231.480760][T16038] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1231.492713][T16038] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1231.526524][T16040] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1231.960596][T22375] netlink: 144 bytes leftover after parsing attributes in process `syz.4.5876'. [ 1232.241294][T22376] netlink: 'syz.4.5876': attribute type 46 has an invalid length. [ 1232.253426][T22376] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5876'. [ 1232.569890][T22384] netlink: 'syz.1.5879': attribute type 21 has an invalid length. [ 1232.610661][T22384] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5879'. [ 1232.663260][T22384] netlink: 3 bytes leftover after parsing attributes in process `syz.1.5879'. [ 1233.192985][T22402] netlink: 'syz.1.5886': attribute type 21 has an invalid length. [ 1233.217027][T22402] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5886'. [ 1236.174561][T22420] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.5893'. [ 1236.244341][T22420] netlink: 6955 bytes leftover after parsing attributes in process `syz.1.5893'. [ 1236.511348][T22431] netlink: 'syz.2.5895': attribute type 10 has an invalid length. [ 1238.471884][T22431] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1238.805531][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.812026][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.563584][T22451] netlink: 'syz.1.5900': attribute type 10 has an invalid length. [ 1243.793740][T22507] netlink: 'syz.1.5916': attribute type 29 has an invalid length. [ 1243.815665][T22513] netlink: 'syz.3.5918': attribute type 2 has an invalid length. [ 1243.827024][T22507] netlink: 'syz.1.5916': attribute type 29 has an invalid length. [ 1246.298294][T22561] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.5941'. [ 1246.341853][T22561] bridge_slave_1: default FDB implementation only supports local addresses [ 1247.264459][T22572] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5934'. [ 1247.559327][T22591] FAULT_INJECTION: forcing a failure. [ 1247.559327][T22591] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1247.586589][T22591] CPU: 1 PID: 22591 Comm: syz.1.5938 Not tainted syzkaller #0 [ 1247.594153][T22591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1247.604267][T22591] Call Trace: [ 1247.607600][T22591] [ 1247.610586][T22591] dump_stack_lvl+0x188/0x24e [ 1247.615335][T22591] ? show_regs_print_info+0x12/0x12 [ 1247.620603][T22591] ? load_image+0x400/0x400 [ 1247.625345][T22591] ? __lock_acquire+0x7d10/0x7d10 [ 1247.630453][T22591] ? trace_call_bpf+0x5d6/0x6b0 [ 1247.635372][T22591] should_fail_ex+0x399/0x4d0 [ 1247.640109][T22591] _copy_from_user+0x2c/0x170 [ 1247.644854][T22591] __sys_bpf+0x2ea/0x780 [ 1247.649165][T22591] ? bpf_link_show_fdinfo+0x380/0x380 [ 1247.654702][T22591] ? lock_chain_count+0x20/0x20 [ 1247.659625][T22591] __x64_sys_bpf+0x78/0x90 [ 1247.664105][T22591] do_syscall_64+0x4c/0xa0 [ 1247.668578][T22591] ? clear_bhb_loop+0x60/0xb0 [ 1247.673326][T22591] ? clear_bhb_loop+0x60/0xb0 [ 1247.678072][T22591] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1247.684028][T22591] RIP: 0033:0x7ff7e079ce59 [ 1247.688495][T22591] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1247.708156][T22591] RSP: 002b:00007ff7e1571028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1247.716636][T22591] RAX: ffffffffffffffda RBX: 00007ff7e0a16090 RCX: 00007ff7e079ce59 [ 1247.724674][T22591] RDX: 0000000000000048 RSI: 0000200000000500 RDI: 000000000000000a [ 1247.732703][T22591] RBP: 00007ff7e1571090 R08: 0000000000000000 R09: 0000000000000000 [ 1247.740828][T22591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1247.748855][T22591] R13: 00007ff7e0a16128 R14: 00007ff7e0a16090 R15: 00007ffc4745a9e8 [ 1247.757436][T22591] [ 1250.586150][T22603] netlink: 'syz.0.5942': attribute type 10 has an invalid length. [ 1250.743710][T22596] netlink: 'syz.3.5939': attribute type 10 has an invalid length. [ 1250.895324][T22610] netlink: 'syz.0.5945': attribute type 21 has an invalid length. [ 1251.429869][T22622] netlink: 'syz.1.5949': attribute type 1 has an invalid length. [ 1251.894159][T22625] device wg2 left promiscuous mode [ 1252.035837][T22631] device wg2 entered promiscuous mode [ 1256.050931][T22649] netlink: 'syz.4.5960': attribute type 21 has an invalid length. [ 1256.059736][T22649] netlink: 'syz.4.5960': attribute type 1 has an invalid length. [ 1256.067680][T22649] netlink: 16098 bytes leftover after parsing attributes in process `syz.4.5960'. [ 1256.119402][T22668] netlink: 'syz.1.5962': attribute type 27 has an invalid length. [ 1256.140251][T22667] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1256.149052][T22667] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1256.171940][T22667] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1256.179440][T22667] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1261.589761][T22748] netlink: 'syz.3.5988': attribute type 3 has an invalid length. [ 1261.598186][T22748] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.5988'. [ 1263.193900][T22739] device veth1_macvtap left promiscuous mode [ 1263.209347][T22743] device veth1_macvtap entered promiscuous mode [ 1263.215966][T22743] device macsec0 entered promiscuous mode [ 1263.625351][T22759] netlink: 'syz.0.5992': attribute type 10 has an invalid length. [ 1269.413998][T22844] netlink: 'syz.1.6021': attribute type 1 has an invalid length. [ 1269.436526][T22844] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.6021'. [ 1274.621192][T22898] netlink: 'syz.0.6032': attribute type 13 has an invalid length. [ 1274.629201][T22898] netlink: 172 bytes leftover after parsing attributes in process `syz.0.6032'. [ 1274.645253][T22898] erspan0: refused to change device tx_queue_len [ 1282.615370][T22973] netlink: 168 bytes leftover after parsing attributes in process `syz.0.6051'. [ 1283.087287][T22984] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.6056'. [ 1287.961196][T23034] netlink: 'syz.4.6068': attribute type 10 has an invalid length. [ 1288.016060][T23034] team0: Port device wlan1 added [ 1291.845554][T23082] netlink: 'syz.3.6085': attribute type 21 has an invalid length. [ 1291.873027][T23082] netlink: 'syz.3.6085': attribute type 6 has an invalid length. [ 1291.895348][T23082] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6085'. [ 1296.256315][T23121] bond0: (slave dummy0): Error: Slave device does not support XDP [ 1300.172424][T23153] netlink: 10 bytes leftover after parsing attributes in process `syz.2.6106'. [ 1300.244370][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.250834][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.488925][T23171] netlink: 'syz.3.6111': attribute type 3 has an invalid length. [ 1300.521511][T23171] netlink: 13435 bytes leftover after parsing attributes in process `syz.3.6111'. [ 1301.483369][T23189] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.6117'. [ 1302.280679][T23212] netlink: 10 bytes leftover after parsing attributes in process `syz.3.6124'. [ 1303.103575][T23229] netlink: 'syz.1.6133': attribute type 10 has an invalid length. [ 1303.649196][T23244] netlink: 'syz.1.6138': attribute type 2 has an invalid length. [ 1304.128779][T23251] netlink: 134056 bytes leftover after parsing attributes in process `syz.3.6141'. [ 1305.839994][T23298] netlink: 'syz.1.6158': attribute type 11 has an invalid length. [ 1305.852444][T23298] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.6158'. [ 1305.907140][T23296] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1306.530138][T23329] netlink: 'syz.3.6169': attribute type 3 has an invalid length. [ 1306.549117][T23329] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.6169'. [ 1306.833838][T23339] device syzkaller0 entered promiscuous mode [ 1307.321421][T23352] netlink: 'syz.3.6178': attribute type 10 has an invalid length. [ 1307.399598][T23348] netlink: 'syz.2.6177': attribute type 2 has an invalid length. [ 1307.424692][T23348] netlink: 14 bytes leftover after parsing attributes in process `syz.2.6177'. [ 1307.572527][T23348] bond0: (slave dummy0): Releasing backup interface [ 1307.723226][T23349] netlink: 'syz.2.6177': attribute type 10 has an invalid length. [ 1308.011441][T23349] team0: Port device bridge_slave_1 added [ 1308.605392][T23389] netlink: 'syz.2.6187': attribute type 11 has an invalid length. [ 1308.651215][T23389] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.6187'. [ 1309.838793][T23422] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.6200'. [ 1309.879782][T23423] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.6200'. [ 1309.919964][T23426] netlink: 'syz.3.6200': attribute type 1 has an invalid length. [ 1309.981274][T23426] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.6200'. [ 1310.173331][T23429] netlink: 'syz.2.6203': attribute type 10 has an invalid length. [ 1310.216331][T23429] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1311.136988][T23458] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6212'. [ 1311.502870][ T4332] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1311.514006][ T4332] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1311.551528][ T4332] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1311.559636][ T4332] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1311.568186][ T4332] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1311.576956][ T4332] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1311.885228][T23467] chnl_net:caif_netlink_parms(): no params data found [ 1312.210148][T23467] bridge0: port 1(bridge_slave_0) entered blocking state [ 1312.240086][T23467] bridge0: port 1(bridge_slave_0) entered disabled state [ 1312.323177][T23467] device bridge_slave_0 entered promiscuous mode [ 1312.408264][T16034] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1312.447375][T23467] bridge0: port 2(bridge_slave_1) entered blocking state [ 1312.456757][T23467] bridge0: port 2(bridge_slave_1) entered disabled state [ 1312.467673][T23467] device bridge_slave_1 entered promiscuous mode [ 1312.560473][T16034] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1312.612292][T23505] netlink: 'syz.2.6227': attribute type 21 has an invalid length. [ 1312.620260][T23505] netlink: 'syz.2.6227': attribute type 2 has an invalid length. [ 1312.772864][T16034] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1312.875042][T23467] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1313.502522][T23518] can: request_module (can-proto-0) failed. [ 1313.907940][T16034] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1313.933324][T23467] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1314.000204][T23467] team0: Port device team_slave_0 added [ 1314.011293][T22041] Bluetooth: hci5: command 0x0409 tx timeout [ 1314.054241][T23467] team0: Port device team_slave_1 added [ 1314.085607][T23467] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1314.093353][T23467] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1314.119703][T23467] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1314.180649][T23467] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1314.200314][T23467] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1314.256840][T23467] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1314.292178][T23529] netlink: 'syz.2.6236': attribute type 13 has an invalid length. [ 1314.300339][T23529] netlink: 172 bytes leftover after parsing attributes in process `syz.2.6236'. [ 1314.315171][T23529] erspan0: refused to change device tx_queue_len [ 1314.403610][T23467] device hsr_slave_0 entered promiscuous mode [ 1314.422007][T23467] device hsr_slave_1 entered promiscuous mode [ 1314.431534][T16034] device 0 left promiscuous mode [ 1314.736435][T23545] sctp: [Deprecated]: syz.3.6241 (pid 23545) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1314.736435][T23545] Use struct sctp_sack_info instead [ 1316.081182][T22041] Bluetooth: hci5: command 0x041b tx timeout [ 1316.570885][T23573] netlink: 10 bytes leftover after parsing attributes in process `syz.0.6244'. [ 1318.161292][T22041] Bluetooth: hci5: command 0x040f tx timeout [ 1318.769700][T22041] Bluetooth: hci4: Dropping invalid advertising data [ 1318.787929][T23602] bond0: (slave team0): Error: Slave device does not support XDP [ 1318.914875][T23467] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1318.965808][T23467] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1319.034189][T23467] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1319.102338][T23467] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1319.540708][T23467] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1319.731773][T16022] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1319.748720][T16022] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1319.940176][T23467] 8021q: adding VLAN 0 to HW filter on device team0 [ 1320.241587][T22041] Bluetooth: hci5: command 0x0419 tx timeout [ 1320.348537][T16022] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1320.384444][T16022] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1320.403527][T16022] bridge0: port 1(bridge_slave_0) entered blocking state [ 1320.410729][T16022] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1320.485783][T16022] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1320.501839][T16022] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1320.525916][T16022] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1320.536616][T16022] bridge0: port 2(bridge_slave_1) entered blocking state [ 1320.543844][T16022] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1321.654526][T16022] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1321.706349][T16022] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1321.716004][T16022] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1321.726585][T16022] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1321.749704][T23467] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1321.802526][T23467] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1321.828097][T16022] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1321.837577][T16022] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1321.846624][T16022] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1321.858598][T16022] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1321.867394][T16022] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1321.878775][T16022] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1321.888707][T16022] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1321.979027][T16022] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1322.045646][T16034] device hsr_slave_0 left promiscuous mode [ 1322.052505][T16034] device hsr_slave_1 left promiscuous mode [ 1322.059262][T16034] bridge0: port 2(bridge_slave_1) entered disabled state [ 1322.069693][T16034] device bridge_slave_0 left promiscuous mode [ 1322.076357][T16034] bridge0: port 1(bridge_slave_0) entered disabled state [ 1322.104804][T16034] device veth1_vlan left promiscuous mode [ 1322.110707][T16034] device veth0_vlan left promiscuous mode [ 1322.659950][T16034] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1322.965359][T16034] bond0 (unregistering): Released all slaves [ 1323.079546][T16038] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1323.087174][T16038] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1323.100040][T23467] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1323.162266][T16038] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1323.175423][T16038] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1323.202535][T16024] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1323.221870][T16024] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1323.233775][T23467] device veth0_vlan entered promiscuous mode [ 1323.240878][T16024] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1323.249884][T16024] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1323.268041][T23467] device veth1_vlan entered promiscuous mode [ 1323.288470][T16024] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1323.296935][T16024] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1323.305998][T16024] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1323.314897][T16024] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1323.330094][T23467] device veth0_macvtap entered promiscuous mode [ 1323.340651][T23467] device veth1_macvtap entered promiscuous mode [ 1323.379444][T23467] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1323.387478][T16043] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1323.396571][T16043] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1323.405245][T16043] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1323.414461][T16043] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1323.430732][T23467] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1323.438360][T16043] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1323.448033][T16043] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1323.460480][T23467] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1323.470566][T23467] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1323.482944][T23467] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1323.493017][T23467] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1323.582921][T16043] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1323.590815][T16043] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1323.624553][T16024] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1323.648587][T16024] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1323.657281][T16024] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1323.665987][T16043] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1324.417886][ T4332] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1324.429570][ T4334] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1324.438571][ T4334] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1324.465922][ T4334] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1324.491103][ T4334] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1324.498829][ T4334] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1324.684730][T23667] netlink: 'syz.1.6267': attribute type 10 has an invalid length. [ 1324.701801][T23667] team0: Device veth1_vlan is up. Set it down before adding it as a team port [ 1325.069901][T23681] netlink: 'syz.3.6271': attribute type 29 has an invalid length. [ 1325.160877][T23681] netlink: 'syz.3.6271': attribute type 29 has an invalid length. [ 1326.466651][T23697] netlink: 134056 bytes leftover after parsing attributes in process `syz.0.6278'. [ 1326.561916][T22041] Bluetooth: hci1: command 0x0409 tx timeout [ 1328.646119][T22041] Bluetooth: hci1: command 0x041b tx timeout [ 1328.903704][T23697] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1328.924338][T23697] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1328.931904][T23672] chnl_net:caif_netlink_parms(): no params data found [ 1328.943832][T23697] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1329.233267][T23672] bridge0: port 1(bridge_slave_0) entered blocking state [ 1329.240528][T23672] bridge0: port 1(bridge_slave_0) entered disabled state [ 1329.272523][T23672] device bridge_slave_0 entered promiscuous mode [ 1329.286519][T23672] bridge0: port 2(bridge_slave_1) entered blocking state [ 1329.294224][T23672] bridge0: port 2(bridge_slave_1) entered disabled state [ 1329.303833][T23672] device bridge_slave_1 entered promiscuous mode [ 1329.334555][T23672] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1329.347524][T23672] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1329.433143][T23672] team0: Port device team_slave_0 added [ 1329.449581][T23672] team0: Port device team_slave_1 added [ 1329.510183][T23672] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1329.519280][T23672] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1329.553856][T23672] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1329.584430][T23672] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1329.598986][T23672] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1329.629827][T23672] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1330.094474][T23672] device hsr_slave_0 entered promiscuous mode [ 1330.171374][T23672] device hsr_slave_1 entered promiscuous mode [ 1330.181091][T23672] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1330.189132][T23672] Cannot create hsr debugfs directory [ 1330.349592][T16034] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1330.722273][T22041] Bluetooth: hci1: command 0x040f tx timeout [ 1332.834206][T22041] Bluetooth: hci1: command 0x0419 tx timeout [ 1332.897791][T16034] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1334.363754][T16034] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1334.518843][T16034] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1338.169185][T22041] Bluetooth: hci2: command 0x0406 tx timeout [ 1340.848588][T23672] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1340.980223][T23874] netlink: 'syz.0.6322': attribute type 25 has an invalid length. [ 1340.988525][T23874] netlink: 2418 bytes leftover after parsing attributes in process `syz.0.6322'. [ 1341.841885][T23672] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1341.856362][T23672] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1341.924832][T23672] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1342.137194][T23672] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1342.187868][T16031] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1342.197964][T16031] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1342.219169][T23672] 8021q: adding VLAN 0 to HW filter on device team0 [ 1342.259370][T16043] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1342.275301][T16043] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1342.300827][T16043] bridge0: port 1(bridge_slave_0) entered blocking state [ 1342.308136][T16043] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1342.365819][T16043] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1342.395181][T16043] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1342.410310][T16043] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1342.453635][T16043] bridge0: port 2(bridge_slave_1) entered blocking state [ 1342.460936][T16043] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1342.501991][T16031] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1342.514481][T16031] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1342.577005][T16043] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1342.590670][T16043] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1342.604474][T16043] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1342.617151][T16040] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1342.643363][T16040] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1342.685361][T16040] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1342.699780][T16040] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1342.730422][T16040] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1342.763245][T16040] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1342.794187][T23672] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1348.111574][T16024] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1348.123696][T16024] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1348.340674][T16034] team0: Port device wlan1 removed [ 1349.144366][T23672] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1350.391770][T23964] netlink: 14568 bytes leftover after parsing attributes in process `syz.3.6348'. [ 1350.504889][T16034] device veth0_vlan left promiscuous mode [ 1350.621300][T23975] netlink: 'syz.3.6350': attribute type 29 has an invalid length. [ 1350.753412][T16034] team0 (unregistering): Port device geneve1 removed [ 1351.173849][T16034] team0 (unregistering): Port device team_slave_1 removed [ 1351.228784][T16034] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1351.565136][T16034] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 1351.594541][T16034] bond0 (unregistering): (slave team0): Releasing backup interface [ 1351.630311][T16034] bond0 (unregistering): Released all slaves [ 1351.668443][T23975] netlink: 'syz.3.6350': attribute type 29 has an invalid length. [ 1351.944314][T23989] FAULT_INJECTION: forcing a failure. [ 1351.944314][T23989] name failslab, interval 1, probability 0, space 0, times 0 [ 1351.996077][T23989] CPU: 0 PID: 23989 Comm: syz.1.6355 Not tainted syzkaller #0 [ 1352.003641][T23989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1352.013740][T23989] Call Trace: [ 1352.017070][T23989] [ 1352.020037][T23989] dump_stack_lvl+0x188/0x24e [ 1352.024776][T23989] ? show_regs_print_info+0x12/0x12 [ 1352.030031][T23989] ? load_image+0x400/0x400 [ 1352.034589][T23989] ? __might_sleep+0xd0/0xd0 [ 1352.039231][T23989] ? __lock_acquire+0x7d10/0x7d10 [ 1352.044311][T23989] ? ct_irq_exit_irqson+0x113/0x170 [ 1352.049574][T23989] should_fail_ex+0x399/0x4d0 [ 1352.054309][T23989] should_failslab+0x5/0x20 [ 1352.058849][T23989] slab_pre_alloc_hook+0x59/0x310 [ 1352.063918][T23989] ? bpf_prog_test_run_skb+0x234/0x12a0 [ 1352.069517][T23989] __kmem_cache_alloc_node+0x4f/0x260 [ 1352.074940][T23989] ? bpf_prog_test_run_skb+0x234/0x12a0 [ 1352.080535][T23989] __kmalloc+0xa0/0x240 [ 1352.084794][T23989] bpf_prog_test_run_skb+0x234/0x12a0 [ 1352.090214][T23989] ? __fget_files+0x28/0x4b0 [ 1352.094871][T23989] ? __fget_files+0x28/0x4b0 [ 1352.099519][T23989] ? __fget_files+0x43d/0x4b0 [ 1352.104259][T23989] ? cpu_online+0xa0/0xa0 [ 1352.108646][T23989] bpf_prog_test_run+0x31e/0x390 [ 1352.113645][T23989] __sys_bpf+0x62b/0x780 [ 1352.117946][T23989] ? bpf_link_show_fdinfo+0x380/0x380 [ 1352.123404][T23989] ? lock_chain_count+0x20/0x20 [ 1352.128312][T23989] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1352.134369][T23989] __x64_sys_bpf+0x78/0x90 [ 1352.138850][T23989] do_syscall_64+0x4c/0xa0 [ 1352.143327][T23989] ? clear_bhb_loop+0x60/0xb0 [ 1352.148044][T23989] ? clear_bhb_loop+0x60/0xb0 [ 1352.152751][T23989] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1352.158687][T23989] RIP: 0033:0x7f03a2f9ce59 [ 1352.163158][T23989] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1352.182797][T23989] RSP: 002b:00007f03a3e17028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1352.191237][T23989] RAX: ffffffffffffffda RBX: 00007f03a3215fa0 RCX: 00007f03a2f9ce59 [ 1352.199233][T23989] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 1352.207234][T23989] RBP: 00007f03a3e17090 R08: 0000000000000000 R09: 0000000000000000 [ 1352.215230][T23989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1352.223228][T23989] R13: 00007f03a3216038 R14: 00007f03a3215fa0 R15: 00007ffd11c42118 [ 1352.231243][T23989] [ 1352.531672][T16022] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1352.563734][T16022] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1356.441341][T16022] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1356.449884][T16022] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1356.534872][T16022] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1356.556548][T16022] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1356.591331][T23672] device veth0_vlan entered promiscuous mode [ 1356.623146][T23672] device veth1_vlan entered promiscuous mode [ 1356.650443][T24023] netlink: 'syz.2.6365': attribute type 16 has an invalid length. [ 1356.660820][T24023] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6365'. [ 1356.719473][T16022] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1356.754508][T16022] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1356.786702][T23672] device veth0_macvtap entered promiscuous mode [ 1356.823221][T23672] device veth1_macvtap entered promiscuous mode [ 1356.930896][T23672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1356.965261][T23672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1357.006100][T23672] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1357.038523][T16043] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1357.056280][T16043] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1357.074649][T16043] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1357.097439][T16043] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1357.687045][T23672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1357.701502][T23672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1357.717799][T23672] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1357.729973][T24033] netlink: 'syz.0.6370': attribute type 10 has an invalid length. [ 1357.744690][T24033] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6370'. [ 1357.763607][T24033] device ipvlan1 entered promiscuous mode [ 1357.838122][T24033] bridge0: port 3(ipvlan1) entered blocking state [ 1357.853686][T24033] bridge0: port 3(ipvlan1) entered disabled state [ 1357.868836][T24033] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1357.893408][T24038] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6371'. [ 1357.976611][T16043] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1357.992059][T16043] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1358.731324][T23672] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1358.761038][T23672] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1358.771618][T23672] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1358.781702][T23672] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1360.349119][T24067] tun0: tun_chr_ioctl cmd 2147767507 [ 1361.734289][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.740683][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1365.218027][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1365.249748][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1365.298697][T16022] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1365.367442][T16022] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1365.378723][T16022] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1365.389723][T16024] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1365.606633][T24106] netlink: 'syz.1.6391': attribute type 21 has an invalid length. [ 1365.617386][T24106] netlink: 'syz.1.6391': attribute type 6 has an invalid length. [ 1365.628901][T24106] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6391'. [ 1367.665338][T22041] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1367.684332][T22041] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1367.698936][T22041] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1367.721753][T22041] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1367.730193][T22041] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1367.737601][T22041] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1368.264715][T24145] netlink: 172 bytes leftover after parsing attributes in process `syz.3.6403'. [ 1368.364001][T24132] chnl_net:caif_netlink_parms(): no params data found [ 1368.668148][T24132] bridge0: port 1(bridge_slave_0) entered blocking state [ 1368.696519][T24132] bridge0: port 1(bridge_slave_0) entered disabled state [ 1368.705805][T24132] device bridge_slave_0 entered promiscuous mode [ 1369.454073][T24132] bridge0: port 2(bridge_slave_1) entered blocking state [ 1369.471227][T24132] bridge0: port 2(bridge_slave_1) entered disabled state [ 1369.484052][T24132] device bridge_slave_1 entered promiscuous mode [ 1369.761151][T22041] Bluetooth: hci4: command 0x0409 tx timeout [ 1371.843308][T22041] Bluetooth: hci4: command 0x041b tx timeout [ 1372.398226][T24132] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1372.487945][T16022] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1372.519298][T24132] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1372.595108][T16022] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1372.654652][T24132] team0: Port device team_slave_0 added [ 1372.692285][T16022] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1372.732880][T24132] team0: Port device team_slave_1 added [ 1372.806735][T24132] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1372.816413][T24132] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1372.842579][T24132] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1372.856361][T24132] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1372.863731][T24132] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1372.891320][T24132] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1372.995122][T16022] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1373.103993][T24132] device hsr_slave_0 entered promiscuous mode [ 1373.124770][T24132] device hsr_slave_1 entered promiscuous mode [ 1373.142961][T24132] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1373.150617][T24132] Cannot create hsr debugfs directory [ 1373.932801][T22041] Bluetooth: hci4: command 0x040f tx timeout [ 1375.497945][T24235] netlink: 'syz.3.6427': attribute type 10 has an invalid length. [ 1375.860382][T24132] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1375.958537][T24132] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1376.001568][T22041] Bluetooth: hci4: command 0x0419 tx timeout [ 1376.103792][T24132] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1376.132651][T24132] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1377.318347][T24132] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1377.394555][T16038] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1377.460049][T16038] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1377.493766][T24132] 8021q: adding VLAN 0 to HW filter on device team0 [ 1377.595535][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1377.613883][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1377.622961][ T4346] bridge0: port 1(bridge_slave_0) entered blocking state [ 1377.630105][ T4346] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1377.810475][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1377.834677][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1377.854521][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1377.896483][ T4346] bridge0: port 2(bridge_slave_1) entered blocking state [ 1377.903827][ T4346] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1377.942494][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1378.003490][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1378.033899][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1378.071313][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1378.302971][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1378.323226][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1378.368396][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1378.404792][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1378.444453][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1378.593712][T24291] delete_channel: no stack [ 1378.612352][T16038] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1378.642724][T16038] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1378.974344][T24132] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1380.212652][T16022] device hsr_slave_0 left promiscuous mode [ 1380.221314][T16022] device hsr_slave_1 left promiscuous mode [ 1380.262129][T16022] device veth0_vlan left promiscuous mode [ 1380.874953][T16022] team0 (unregistering): Port device team_slave_1 removed [ 1380.927587][T16022] team0 (unregistering): Port device team_slave_0 removed [ 1380.977840][T16022] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1381.067577][T16022] team0 (unregistering): Port device bridge_slave_1 removed [ 1381.296795][T16022] bond0 (unregistering): (slave team0): Releasing backup interface [ 1381.332741][T16022] bond0 (unregistering): Released all slaves [ 1381.412715][T16024] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1381.436553][T16024] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1381.459347][T24132] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1381.529362][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1381.560722][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1381.598471][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1381.626521][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1381.637702][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1381.649242][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1381.661745][T24132] device veth0_vlan entered promiscuous mode [ 1381.700225][T24132] device veth1_vlan entered promiscuous mode [ 1381.837296][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1381.864935][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1381.923903][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1381.945974][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1381.959259][T24132] device veth0_macvtap entered promiscuous mode [ 1381.987708][T24335] netlink: 'syz.4.6455': attribute type 10 has an invalid length. [ 1382.580790][T24132] device veth1_macvtap entered promiscuous mode [ 1382.598732][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1382.617401][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1382.773963][T24132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1382.820663][T24132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1382.879825][T24132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1382.908255][T24132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1382.939963][T24132] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1383.050596][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1383.067470][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1383.084513][T24132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1383.103243][T24132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1383.117377][T24132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1383.136904][T24132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1383.156166][T24132] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1383.187812][T16024] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1383.209653][T16024] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1383.246585][T24132] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1383.270807][T24132] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1383.295394][T24132] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1383.308988][T24132] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1383.549911][T16024] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1383.577341][T16024] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1383.659254][T16038] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1383.703366][T16043] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1383.713841][T16043] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1383.729789][T16034] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1386.145862][T24411] netlink: 'syz.2.6481': attribute type 10 has an invalid length. [ 1386.172628][T24411] team0: Device geneve1 is up. Set it down before adding it as a team port [ 1386.439542][T24419] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6484'. [ 1387.426970][T24453] netlink: 40227 bytes leftover after parsing attributes in process `syz.2.6496'. [ 1388.011160][T24474] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1391.685139][T24569] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6538'. [ 1392.374695][T24570] netlink: 'syz.2.6536': attribute type 27 has an invalid length. [ 1392.433293][T24579] netlink: 'syz.4.6539': attribute type 14 has an invalid length. [ 1392.451080][T24579] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.6539'. [ 1393.289348][T22041] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1393.308753][T22041] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1393.320500][T22041] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1393.337062][T22041] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1393.345397][T22041] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1393.353780][T22041] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1393.488236][T24598] raw_sendmsg: syz.2.6545 forgot to set AF_INET. Fix it! [ 1393.618691][T16022] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1393.770184][T16022] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1393.808638][T24605] netlink: 'syz.1.6547': attribute type 10 has an invalid length. [ 1393.886394][T16022] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1394.063308][T16022] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1395.053710][T24617] mac80211_hwsim hwsim141 ªªªªªª: renamed from wlan0 [ 1395.148924][T24590] chnl_net:caif_netlink_parms(): no params data found [ 1395.443320][ T4332] Bluetooth: hci0: command 0x0409 tx timeout [ 1395.582470][T24590] bridge0: port 1(bridge_slave_0) entered blocking state [ 1395.651105][T24590] bridge0: port 1(bridge_slave_0) entered disabled state [ 1395.659347][T24590] device bridge_slave_0 entered promiscuous mode [ 1395.724826][T24590] bridge0: port 2(bridge_slave_1) entered blocking state [ 1395.745531][T24590] bridge0: port 2(bridge_slave_1) entered disabled state [ 1395.762454][T24590] device bridge_slave_1 entered promiscuous mode [ 1396.008749][T24590] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1396.190591][T24590] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1396.438081][T24590] team0: Port device team_slave_0 added [ 1396.449722][T24660] netlink: 134056 bytes leftover after parsing attributes in process `syz.0.6565'. [ 1396.483277][T24590] team0: Port device team_slave_1 added [ 1396.609339][T24590] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1396.661698][T24590] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1396.774500][T24590] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1396.856598][T24590] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1396.874188][T24590] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1396.975989][T24590] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1397.201535][T24590] device hsr_slave_0 entered promiscuous mode [ 1397.239370][T24590] device hsr_slave_1 entered promiscuous mode [ 1397.271615][T24590] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1397.318169][T24590] Cannot create hsr debugfs directory [ 1397.522128][ T4332] Bluetooth: hci0: command 0x041b tx timeout [ 1397.804057][ T4332] Bluetooth: hci5: unexpected event 0x3b length: 15 > 10 [ 1398.469023][T24711] netlink: 4091 bytes leftover after parsing attributes in process `syz.0.6578'. [ 1398.967866][T24590] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1399.601484][ T4332] Bluetooth: hci0: command 0x040f tx timeout [ 1399.727618][T24590] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1399.772079][T24590] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1399.846112][T24590] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1401.681109][ T4332] Bluetooth: hci0: command 0x0419 tx timeout [ 1402.090219][T16022] device hsr_slave_0 left promiscuous mode [ 1402.100181][T16022] device hsr_slave_1 left promiscuous mode [ 1402.116276][T16022] device bridge_slave_0 left promiscuous mode [ 1402.124221][T16022] bridge0: port 1(bridge_slave_0) entered disabled state [ 1402.212532][T24786] netlink: 'syz.1.6599': attribute type 3 has an invalid length. [ 1402.226754][T24786] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.6599'. [ 1403.520640][T16022] team0 (unregistering): Port device team_slave_1 removed [ 1403.573904][T16022] team0 (unregistering): Port device team_slave_0 removed [ 1403.697312][T16022] team0 (unregistering): Port device bridge_slave_1 removed [ 1404.062445][T24801] device veth1_macvtap left promiscuous mode [ 1404.101131][T24803] device veth1_macvtap entered promiscuous mode [ 1404.118619][T24803] device macsec0 entered promiscuous mode [ 1404.186150][T24590] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1404.243810][T24590] 8021q: adding VLAN 0 to HW filter on device team0 [ 1404.260064][T16031] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1404.269045][T16031] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1404.302311][T24807] netlink: 'syz.0.6605': attribute type 10 has an invalid length. [ 1404.360110][T16038] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1404.382879][T16038] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1404.418545][T16038] bridge0: port 1(bridge_slave_0) entered blocking state [ 1404.425783][T16038] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1404.461447][T16038] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1404.506715][T16038] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1404.536046][T16038] bridge0: port 2(bridge_slave_1) entered blocking state [ 1404.543274][T16038] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1404.577876][T16038] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1405.028369][T16043] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1405.093411][T16034] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1405.166674][T16038] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1405.207735][T16038] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1405.233366][T16038] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1405.269097][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1405.289612][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1405.317840][T24590] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1405.351169][T24590] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1405.391103][T16043] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1405.406143][T16043] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1405.474114][T16043] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1405.502148][T16043] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1405.528085][T16043] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1406.493171][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1406.508919][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1406.530873][T24590] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1406.569977][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1406.580246][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1406.621196][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1406.638105][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1406.649930][T24590] device veth0_vlan entered promiscuous mode [ 1406.660146][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1406.670341][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1406.689743][T24590] device veth1_vlan entered promiscuous mode [ 1406.736292][T24590] device veth0_macvtap entered promiscuous mode [ 1406.754196][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1406.763104][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1406.772688][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1406.782788][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1406.796543][T24590] device veth1_macvtap entered promiscuous mode [ 1406.810220][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1406.832278][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1406.859415][T24590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1406.877415][T24590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1406.890173][T24590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1406.902372][T24590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1406.912849][T24590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1406.924247][T24590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1406.937024][T24590] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1406.947390][T16038] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1406.967426][T16038] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1406.987226][T24590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1407.005071][T24590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1407.016043][T24590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1407.031721][T24590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1407.046233][T24590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1407.067304][T24590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1407.122259][T24590] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1407.174259][T16043] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1407.202016][T16043] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1407.229631][T24590] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1407.245512][T24590] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1407.287676][T24590] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1407.346700][T24590] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1407.642461][T16043] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1407.650373][T16043] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1407.687223][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1407.759105][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1407.798676][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1407.839414][T16038] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1412.705128][T24931] netlink: 'syz.3.6644': attribute type 10 has an invalid length. [ 1414.463640][T24970] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6658'. [ 1417.228651][T25031] pimreg0: tun_chr_ioctl cmd 35111 [ 1419.557305][T25089] netlink: 'syz.2.6696': attribute type 13 has an invalid length. [ 1419.623523][T25089] netlink: 172 bytes leftover after parsing attributes in process `syz.2.6696'. [ 1419.783853][T25089] erspan0: refused to change device tx_queue_len [ 1421.713322][T25145] FAULT_INJECTION: forcing a failure. [ 1421.713322][T25145] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1421.772195][T25145] CPU: 0 PID: 25145 Comm: syz.2.6714 Not tainted syzkaller #0 [ 1421.779760][T25145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1421.789888][T25145] Call Trace: [ 1421.793233][T25145] [ 1421.796217][T25145] dump_stack_lvl+0x188/0x24e [ 1421.800972][T25145] ? show_regs_print_info+0x12/0x12 [ 1421.806257][T25145] ? load_image+0x400/0x400 [ 1421.810833][T25145] ? __might_fault+0xa6/0x120 [ 1421.815589][T25145] should_fail_ex+0x399/0x4d0 [ 1421.820350][T25145] copyin+0x1b/0x120 [ 1421.824314][T25145] _copy_from_iter+0x447/0x1130 [ 1421.829246][T25145] ? copyout_mc+0x110/0x110 [ 1421.833820][T25145] ? __virt_addr_valid+0x188/0x540 [ 1421.839005][T25145] ? __virt_addr_valid+0x188/0x540 [ 1421.844193][T25145] ? __virt_addr_valid+0x465/0x540 [ 1421.849389][T25145] ? __check_object_size+0x500/0xa40 [ 1421.854759][T25145] netlink_sendmsg+0x755/0xbd0 [ 1421.859622][T25145] ? netlink_getsockopt+0x550/0x550 [ 1421.864903][T25145] ? aa_sock_msg_perm+0x94/0x150 [ 1421.869914][T25145] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1421.875274][T25145] ? security_socket_sendmsg+0x7c/0xa0 [ 1421.880828][T25145] ? netlink_getsockopt+0x550/0x550 [ 1421.886107][T25145] ____sys_sendmsg+0x5be/0x970 [ 1421.890959][T25145] ? __sys_sendmsg_sock+0x30/0x30 [ 1421.896049][T25145] ? __import_iovec+0x315/0x500 [ 1421.900977][T25145] ? import_iovec+0x6f/0xa0 [ 1421.905561][T25145] ___sys_sendmsg+0x2a2/0x360 [ 1421.910322][T25145] ? __sys_sendmsg+0x290/0x290 [ 1421.915203][T25145] ? __lock_acquire+0x7d10/0x7d10 [ 1421.920349][T25145] __se_sys_sendmsg+0x1bb/0x2a0 [ 1421.925292][T25145] ? ct_nmi_exit+0x145/0x1c0 [ 1421.929945][T25145] ? __x64_sys_sendmsg+0x80/0x80 [ 1421.934998][T25145] ? lockdep_hardirqs_on+0x94/0x140 [ 1421.940265][T25145] do_syscall_64+0x4c/0xa0 [ 1421.944744][T25145] ? clear_bhb_loop+0x60/0xb0 [ 1421.949481][T25145] ? clear_bhb_loop+0x60/0xb0 [ 1421.954241][T25145] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1421.960190][T25145] RIP: 0033:0x7f96ab39ce59 [ 1421.964635][T25145] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1421.984293][T25145] RSP: 002b:00007f96ac176028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1421.992804][T25145] RAX: ffffffffffffffda RBX: 00007f96ab615fa0 RCX: 00007f96ab39ce59 [ 1422.000842][T25145] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000008 [ 1422.008877][T25145] RBP: 00007f96ac176090 R08: 0000000000000000 R09: 0000000000000000 [ 1422.016961][T25145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1422.024998][T25145] R13: 00007f96ab616038 R14: 00007f96ab615fa0 R15: 00007fff2da90748 [ 1422.033074][T25145] [ 1422.462343][T25150] netlink: 'syz.0.6716': attribute type 3 has an invalid length. [ 1422.476955][T25150] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.6716'. [ 1422.681423][T25160] netlink: 'syz.1.6719': attribute type 29 has an invalid length. [ 1423.129450][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.136048][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.396717][T25160] netlink: 'syz.1.6719': attribute type 29 has an invalid length. [ 1423.726286][T25176] netlink: 134056 bytes leftover after parsing attributes in process `syz.2.6725'. [ 1423.970322][T25185] netlink: 'syz.1.6728': attribute type 10 has an invalid length. [ 1424.009958][T25185] netlink: 9279 bytes leftover after parsing attributes in process `syz.1.6728'. [ 1428.737089][T25243] netlink: 'syz.4.6746': attribute type 4 has an invalid length. [ 1431.953929][T25286] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.6761'. [ 1432.256423][T25291] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1432.324808][T25291] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1432.485432][T25291] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1432.511832][T25291] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1434.477033][T25324] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.6774'. [ 1438.034048][ T4334] Bluetooth: hci5: command 0x0406 tx timeout [ 1450.801433][ T4332] Bluetooth: hci1: command 0x0406 tx timeout [ 1451.710585][ T4334] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1451.720506][ T4334] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1451.730074][ T4334] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1451.738195][ T4334] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1451.746300][T22041] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1451.754814][ T4334] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1451.890075][T22041] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1451.899929][T22041] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1451.908768][ T4334] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1451.916941][T22041] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1451.926460][ T4334] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1451.934629][ T4334] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1452.078731][T22041] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1452.108124][T22041] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1452.120290][T22041] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1452.128891][ T4334] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1452.138886][ T4334] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 1452.146653][T22041] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1452.690686][T25341] chnl_net:caif_netlink_parms(): no params data found [ 1452.805174][T25345] chnl_net:caif_netlink_parms(): no params data found [ 1452.883398][T25348] chnl_net:caif_netlink_parms(): no params data found [ 1453.041250][T25341] bridge0: port 1(bridge_slave_0) entered blocking state [ 1453.048435][T25341] bridge0: port 1(bridge_slave_0) entered disabled state [ 1453.066541][T25341] device bridge_slave_0 entered promiscuous mode [ 1453.125414][T25341] bridge0: port 2(bridge_slave_1) entered blocking state [ 1453.136710][T25341] bridge0: port 2(bridge_slave_1) entered disabled state [ 1453.149252][T25341] device bridge_slave_1 entered promiscuous mode [ 1453.238003][T25348] bridge0: port 1(bridge_slave_0) entered blocking state [ 1453.249115][T25348] bridge0: port 1(bridge_slave_0) entered disabled state [ 1453.266904][T25348] device bridge_slave_0 entered promiscuous mode [ 1453.307087][T25345] bridge0: port 1(bridge_slave_0) entered blocking state [ 1453.317987][T25345] bridge0: port 1(bridge_slave_0) entered disabled state [ 1453.335440][T25345] device bridge_slave_0 entered promiscuous mode [ 1453.349353][T25348] bridge0: port 2(bridge_slave_1) entered blocking state [ 1453.365011][T25348] bridge0: port 2(bridge_slave_1) entered disabled state [ 1453.382790][T25348] device bridge_slave_1 entered promiscuous mode [ 1453.400288][T25341] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1453.423782][T25345] bridge0: port 2(bridge_slave_1) entered blocking state [ 1453.435885][T25345] bridge0: port 2(bridge_slave_1) entered disabled state [ 1453.452873][T25345] device bridge_slave_1 entered promiscuous mode [ 1453.480636][T25341] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1453.842624][ T4332] Bluetooth: hci3: command 0x0409 tx timeout [ 1454.001367][ T4332] Bluetooth: hci6: command 0x0409 tx timeout [ 1454.161149][ T4332] Bluetooth: hci7: command 0x0409 tx timeout [ 1455.921638][ T4332] Bluetooth: hci3: command 0x041b tx timeout [ 1456.081215][ T4332] Bluetooth: hci6: command 0x041b tx timeout [ 1456.241121][ T4332] Bluetooth: hci7: command 0x041b tx timeout [ 1458.001246][ T4332] Bluetooth: hci3: command 0x040f tx timeout [ 1458.161193][ T4332] Bluetooth: hci6: command 0x040f tx timeout [ 1458.321191][ T4332] Bluetooth: hci7: command 0x040f tx timeout [ 1460.081138][ T4332] Bluetooth: hci3: command 0x0419 tx timeout [ 1460.241250][ T4332] Bluetooth: hci6: command 0x0419 tx timeout [ 1460.401059][ T4332] Bluetooth: hci7: command 0x0419 tx timeout [ 1464.721576][T21206] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 1-.... } 2631 jiffies s: 129821 root: 0x2/. [ 1464.743975][T21206] rcu: blocking rcu_node structures (internal RCU debug): [ 1464.755368][T21206] Sending NMI from CPU 0 to CPUs 1: [ 1464.760727][ C1] NMI backtrace for cpu 1 [ 1464.760740][ C1] CPU: 1 PID: 25317 Comm: syz.2.6772 Not tainted syzkaller #0 [ 1464.760759][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1464.760770][ C1] RIP: 0010:unwind_next_frame+0x125/0x20b0 [ 1464.760799][ C1] Code: f7 e8 5f 66 9a 00 41 f6 06 03 0f 85 bb 17 00 00 4c 8d 73 35 4c 89 f0 48 c1 e8 03 49 bd 00 00 00 00 00 fc ff df 48 89 44 24 78 <42> 0f b6 04 28 84 c0 0f 85 25 19 00 00 4c 89 b4 24 80 00 00 00 45 [ 1464.760816][ C1] RSP: 0018:ffffc900001dec68 EFLAGS: 00000803 [ 1464.760832][ C1] RAX: 1ffff9200003bdba RBX: ffffc900001deda0 RCX: ffffffff96c00103 [ 1464.760847][ C1] RDX: 000000000000000a RSI: dffffc0000000000 RDI: 0000000000000001 [ 1464.760859][ C1] RBP: ffffc900001dede8 R08: ffffc900001df9c0 R09: ffffc900001dedf0 [ 1464.760873][ C1] R10: dffffc0000000000 R11: fffff5200003bdc0 R12: ffffffff81d3583b [ 1464.760889][ C1] R13: dffffc0000000000 R14: ffffc900001dedd5 R15: ffffc900001dedf0 [ 1464.760903][ C1] FS: 00007f96ac1766c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1464.760921][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1464.760935][ C1] CR2: 0000000100000000 CR3: 00000000270ee000 CR4: 00000000003506e0 [ 1464.760953][ C1] DR0: 0000000000000000 DR1: 0000200000000300 DR2: 0000000000000000 [ 1464.760966][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1464.760980][ C1] Call Trace: [ 1464.760986][ C1] [ 1464.760999][ C1] ? kasan_set_track+0x4b/0x70 [ 1464.761031][ C1] ? kasan_set_track+0x4b/0x70 [ 1464.761056][ C1] perf_callchain_kernel+0x42a/0x680 [ 1464.761088][ C1] ? arch_perf_update_userpage+0x3c0/0x3c0 [ 1464.761121][ C1] ? kasan_set_track+0x4b/0x70 [ 1464.761148][ C1] ? get_callchain_entry+0x181/0x3b0 [ 1464.761177][ C1] get_perf_callchain+0x236/0x490 [ 1464.761204][ C1] ? put_callchain_entry+0xb0/0xb0 [ 1464.761232][ C1] ? __perf_event_header__init_id+0x42c/0x530 [ 1464.761262][ C1] perf_prepare_sample+0x399/0x2020 [ 1464.761293][ C1] ? read_lock_is_recursive+0x10/0x10 [ 1464.761320][ C1] ? perf_callchain+0x190/0x190 [ 1464.761346][ C1] ? perf_event_output_forward+0x282/0x2f0 [ 1464.761376][ C1] perf_event_output_forward+0x197/0x2f0 [ 1464.761410][ C1] ? perf_event_output_forward+0xbe/0x2f0 [ 1464.761438][ C1] ? perf_get_page_size+0x430/0x430 [ 1464.761466][ C1] ? __perf_event_account_interrupt+0x187/0x280 [ 1464.761497][ C1] ? __perf_event_account_interrupt+0x187/0x280 [ 1464.761527][ C1] __perf_event_overflow+0x448/0x610 [ 1464.761559][ C1] perf_swevent_event+0x315/0x570 [ 1464.761588][ C1] ? perf_tp_event+0xc30/0xc30 [ 1464.761615][ C1] ? perf_trace_buf_alloc+0x300/0x300 [ 1464.761642][ C1] perf_tp_event+0x3e7/0xc30 [ 1464.761672][ C1] ? perf_trace_run_bpf_submit+0x1c0/0x1c0 [ 1464.761700][ C1] ? ktime_get+0x7b/0x270 [ 1464.761742][ C1] ? kvm_sched_clock_read+0x14/0x40 [ 1464.761759][ C1] ? sched_clock_cpu+0x6e/0x260 [ 1464.761784][ C1] perf_trace_run_bpf_submit+0xf3/0x1c0 [ 1464.761815][ C1] perf_trace_preemptirq_template+0x268/0x320 [ 1464.761842][ C1] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1464.761868][ C1] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 1464.761896][ C1] ? __irq_exit_rcu+0x147/0x230 [ 1464.761914][ C1] ? irq_exit_rcu+0x20/0x20 [ 1464.761935][ C1] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1464.761959][ C1] trace_irq_enable_rcuidle+0xd3/0x140 [ 1464.761986][ C1] trace_hardirqs_on+0x24/0x40 [ 1464.762009][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1464.762034][ C1] RIP: 0010:kasan_check_range+0x1b2/0x290 [ 1464.762063][ C1] Code: 01 f3 49 89 df 49 8d 5f 07 4d 85 ff 49 0f 49 df 48 83 e3 f8 49 29 df 74 0e 41 80 3b 00 75 69 49 ff c3 49 ff cf 75 f2 5b 41 5c <41> 5e 41 5f 5d c3 45 84 ff 0f 85 91 00 00 00 41 f7 c7 00 ff 00 00 [ 1464.762078][ C1] RSP: 0018:ffffc900001df770 EFLAGS: 00000256 [ 1464.762093][ C1] RAX: 0000000000000001 RBX: 0000000000000010 RCX: ffffffff813925ba [ 1464.762106][ C1] RDX: 0000000000000001 RSI: 0000000000000010 RDI: ffffc900001df8d8 [ 1464.762118][ C1] RBP: 0000000000000000 R08: ffffc900001df8e7 R09: 1ffff9200003bf1c [ 1464.762131][ C1] R10: dffffc0000000000 R11: fffff5200003bf1d R12: 1ffff9200003bf12 [ 1464.762145][ C1] R13: dffffc0000000000 R14: 1ffff9200003bf1b R15: 0000000000000002 [ 1464.762164][ C1] ? unwind_next_frame+0xb8a/0x20b0 [ 1464.762189][ C1] memset+0x1e/0x40 [ 1464.762206][ C1] unwind_next_frame+0xb8a/0x20b0 [ 1464.762232][ C1] ? arp_process+0x1405/0x1880 [ 1464.762258][ C1] ? stack_trace_save+0xf0/0xf0 [ 1464.762282][ C1] arch_stack_walk+0x10c/0x140 [ 1464.762306][ C1] ? NF_HOOK+0x32d/0x3b0 [ 1464.762331][ C1] stack_trace_save+0xa6/0xf0 [ 1464.762354][ C1] ? stack_trace_snprint+0xf0/0xf0 [ 1464.762376][ C1] ? mark_lock+0x94/0x320 [ 1464.762411][ C1] ? __lock_acquire+0x12f4/0x7d10 [ 1464.762438][ C1] ? memset+0x1e/0x40 [ 1464.762456][ C1] kasan_set_track+0x4b/0x70 [ 1464.762480][ C1] ? kasan_set_track+0x4b/0x70 [ 1464.762504][ C1] ? __kasan_slab_alloc+0x6b/0x80 [ 1464.762529][ C1] ? slab_post_alloc_hook+0x4b/0x480 [ 1464.762549][ C1] ? kmem_cache_alloc+0x123/0x2f0 [ 1464.762568][ C1] ? skb_clone+0x1e7/0x370 [ 1464.762596][ C1] ? dev_queue_xmit_nit+0x249/0xbb0 [ 1464.762631][ C1] ? dev_hard_start_xmit+0x154/0x870 [ 1464.762651][ C1] ? sch_direct_xmit+0x25a/0x4b0 [ 1464.762672][ C1] ? __dev_queue_xmit+0x1771/0x37c0 [ 1464.762692][ C1] ? NF_HOOK+0x32d/0x3b0 [ 1464.762714][ C1] ? arp_xmit+0x168/0x260 [ 1464.762735][ C1] ? arp_process+0x1405/0x1880 [ 1464.762780][ C1] __kasan_slab_alloc+0x6b/0x80 [ 1464.762807][ C1] slab_post_alloc_hook+0x4b/0x480 [ 1464.762827][ C1] ? slab_pre_alloc_hook+0x59/0x310 [ 1464.762847][ C1] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1464.762874][ C1] kmem_cache_alloc+0x123/0x2f0 [ 1464.762893][ C1] ? skb_clone+0x1e7/0x370 [ 1464.762923][ C1] skb_clone+0x1e7/0x370 [ 1464.762949][ C1] ? dev_queue_xmit_nit+0x20e/0xbb0 [ 1464.762970][ C1] dev_queue_xmit_nit+0x249/0xbb0 [ 1464.762989][ C1] ? dev_queue_xmit_nit+0x29/0xbb0 [ 1464.763013][ C1] dev_hard_start_xmit+0x154/0x870 [ 1464.763042][ C1] sch_direct_xmit+0x25a/0x4b0 [ 1464.763067][ C1] ? mrp_pdu_parse_vecattr_event+0x230/0x230 [ 1464.763096][ C1] __dev_queue_xmit+0x1771/0x37c0 [ 1464.763122][ C1] ? __dev_queue_xmit+0x26b/0x37c0 [ 1464.763146][ C1] ? netdev_core_pick_tx+0x340/0x340 [ 1464.763173][ C1] ? NF_HOOK+0x9f/0x3b0 [ 1464.763197][ C1] ? __lock_acquire+0x7d10/0x7d10 [ 1464.763223][ C1] ? arp_create+0x12d/0x950 [ 1464.763250][ C1] NF_HOOK+0x32d/0x3b0 [ 1464.763271][ C1] ? arp_create+0x5c1/0x950 [ 1464.763293][ C1] ? NF_HOOK+0x3b0/0x3b0 [ 1464.763315][ C1] ? NF_HOOK+0x9f/0x3b0 [ 1464.763336][ C1] ? arp_xmit+0x260/0x260 [ 1464.763359][ C1] ? read_lock_is_recursive+0x10/0x10 [ 1464.763392][ C1] arp_xmit+0x168/0x260 [ 1464.763418][ C1] ? arp_xmit+0x1f/0x260 [ 1464.763441][ C1] arp_process+0x1405/0x1880 [ 1464.763470][ C1] ? arp_error_report+0x160/0x160 [ 1464.763498][ C1] NF_HOOK+0x32d/0x3b0 [ 1464.763521][ C1] ? arp_error_report+0x160/0x160 [ 1464.763544][ C1] ? NF_HOOK+0x9f/0x3b0 [ 1464.763566][ C1] ? arp_xmit+0x260/0x260 [ 1464.763588][ C1] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1464.763615][ C1] ? memset+0x1e/0x40 [ 1464.763633][ C1] ? arp_rcv+0x2ec/0x4e0 [ 1464.763656][ C1] ? arp_req_set_proxy+0x230/0x230 [ 1464.763681][ C1] __netif_receive_skb_list_core+0x6e6/0x750 [ 1464.763716][ C1] ? set_rps_cpu+0x670/0x670 [ 1464.763748][ C1] netif_receive_skb_list_internal+0x93f/0xca0 [ 1464.763775][ C1] ? netif_receive_skb_list_internal+0x4ad/0xca0 [ 1464.763799][ C1] ? netif_receive_skb_core+0x230/0x230 [ 1464.763821][ C1] ? eth_type_trans+0x37e/0x740 [ 1464.763848][ C1] napi_gro_receive+0x4f3/0xb60 [ 1464.763875][ C1] receive_buf+0x211b/0x4ed0 [ 1464.763900][ C1] ? verify_lock_unused+0x140/0x140 [ 1464.763934][ C1] ? virtnet_poll_tx+0x520/0x520 [ 1464.763957][ C1] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1464.763982][ C1] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1464.764010][ C1] ? detach_buf_split+0x8ac/0xab0 [ 1464.764041][ C1] ? __lock_acquire+0x7d10/0x7d10 [ 1464.764066][ C1] ? free_old_xmit_skbs+0x252/0x2b0 [ 1464.764091][ C1] ? virtqueue_get_buf_ctx+0x699/0xd10 [ 1464.764121][ C1] virtnet_poll+0x5d3/0x1180 [ 1464.764154][ C1] ? refill_work+0x220/0x220 [ 1464.764181][ C1] ? rcu_is_watching+0x11/0xa0 [ 1464.764208][ C1] ? trace_napi_poll+0xa6/0x250 [ 1464.764231][ C1] __napi_poll+0xc0/0x460 [ 1464.764260][ C1] net_rx_action+0x5dd/0xb20 [ 1464.764277][ C1] ? _raw_spin_unlock_irq+0x2a/0x40 [ 1464.764303][ C1] ? net_tx_action+0x930/0x930 [ 1464.764320][ C1] ? detach_timer+0x350/0x350 [ 1464.764347][ C1] handle_softirqs+0x2a1/0x930 [ 1464.764368][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 1464.764388][ C1] ? do_softirq+0x210/0x210 [ 1464.764412][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 1464.764432][ C1] __irq_exit_rcu+0x13b/0x230 [ 1464.764449][ C1] ? irq_exit_rcu+0x20/0x20 [ 1464.764473][ C1] irq_exit_rcu+0x5/0x20 [ 1464.764488][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 1464.764509][ C1] [ 1464.764514][ C1] [ 1464.764521][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1464.764545][ C1] RIP: 0010:preempt_schedule_irq+0xb6/0x160 [ 1464.764573][ C1] Code: 00 00 43 c6 44 37 04 f8 74 0b 0f 0b 48 f7 03 08 00 00 00 74 7f bf 01 00 00 00 e8 15 64 22 f7 e8 10 58 52 f7 fb bf 01 00 00 00 75 b9 ff ff 43 c6 44 37 08 00 48 c7 44 24 40 00 00 00 00 9c 8f [ 1464.764588][ C1] RSP: 0018:ffffc9000c79faa0 EFLAGS: 00000286 [ 1464.764603][ C1] RAX: e9223e460f864000 RBX: 0000000000000000 RCX: e9223e460f864000 [ 1464.764616][ C1] RDX: dffffc0000000000 RSI: ffffffff8a8c1120 RDI: 0000000000000001 [ 1464.764629][ C1] RBP: ffffc9000c79fb40 R08: ffff8880b8f3580b R09: 1ffff110171e6b01 [ 1464.764644][ C1] R10: dffffc0000000000 R11: ffffed10171e6b02 R12: 0000000000000000 [ 1464.764657][ C1] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff920018f3f54 [ 1464.764679][ C1] ? preempt_schedule_notrace+0x120/0x120 [ 1464.764707][ C1] ? rcu_is_watching+0x11/0xa0 [ 1464.764736][ C1] ? rcu_irq_exit_check_preempt+0xdb/0x210 [ 1464.764765][ C1] irqentry_exit+0x63/0x70 [ 1464.764783][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1464.764808][ C1] RIP: 0010:lock_acquire+0x225/0x4a0 [ 1464.764833][ C1] Code: f7 84 24 80 00 00 00 00 02 00 00 43 c6 44 3d 04 f8 0f 85 f0 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 44 3d 00 00 00 00 00 43 c7 44 3d 08 00 00 00 00 65 48 8b 04 [ 1464.764848][ C1] RSP: 0018:ffffc9000c79fc00 EFLAGS: 00000206 [ 1464.764862][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: e9223e460f864000 [ 1464.764875][ C1] RDX: 0000000000000000 RSI: ffffffff8a8c22a0 RDI: ffffffff8adf1320 [ 1464.764888][ C1] RBP: ffffc9000c79fd18 R08: dffffc0000000000 R09: 1ffffffff215f248 [ 1464.764902][ C1] R10: dffffc0000000000 R11: fffffbfff215f249 R12: 0000000000000001 [ 1464.764915][ C1] R13: 1ffff920018f3f8c R14: 0000000000000246 R15: dffffc0000000000 [ 1464.764941][ C1] ? slab_pre_alloc_hook+0x31/0x310 [ 1464.764962][ C1] ? read_lock_is_recursive+0x10/0x10 [ 1464.764988][ C1] ? __lock_acquire+0x7d10/0x7d10 [ 1464.765013][ C1] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1464.765039][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 1464.765059][ C1] ? get_obj_cgroup_from_current+0xd0/0x280 [ 1464.765085][ C1] get_obj_cgroup_from_current+0xec/0x280 [ 1464.765109][ C1] ? get_obj_cgroup_from_current+0xd0/0x280 [ 1464.765133][ C1] slab_pre_alloc_hook+0x91/0x310 [ 1464.765156][ C1] kmem_cache_alloc_lru+0x49/0x2e0 [ 1464.765177][ C1] ? sock_alloc_inode+0x24/0xc0 [ 1464.765198][ C1] sock_alloc_inode+0x24/0xc0 [ 1464.765215][ C1] ? sockfs_init_fs_context+0xa0/0xa0 [ 1464.765234][ C1] new_inode_pseudo+0x5f/0x1c0 [ 1464.765257][ C1] __sock_create+0x129/0x940 [ 1464.765280][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 1464.765301][ C1] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1464.765328][ C1] __sys_socket+0xc4/0x190 [ 1464.765355][ C1] __x64_sys_socket+0x76/0x80 [ 1464.765380][ C1] do_syscall_64+0x4c/0xa0 [ 1464.765412][ C1] ? clear_bhb_loop+0x60/0xb0 [ 1464.765435][ C1] ? clear_bhb_loop+0x60/0xb0 [ 1464.765460][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1464.765483][ C1] RIP: 0033:0x7f96ab39ce59 [ 1464.765498][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1464.765514][ C1] RSP: 002b:00007f96ac176028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1464.765532][ C1] RAX: ffffffffffffffda RBX: 00007f96ab615fa0 RCX: 00007f96ab39ce59 [ 1464.765545][ C1] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 000000000000000a [ 1464.765557][ C1] RBP: 00007f96ab432d6f R08: 0000000000000000 R09: 0000000000000000 [ 1464.765568][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1464.765580][ C1] R13: 00007f96ab616038 R14: 00007f96ab615fa0 R15: 00007fff2da90748 [ 1464.765601][ C1] [ 1467.098558][ T4334] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1467.109834][ T4334] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1467.121400][T22041] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1467.130473][ T4334] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1467.138753][T22041] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 1467.149458][T22041] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1467.251647][ T4334] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1467.272930][ T4334] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1467.282591][ T4334] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1467.292375][ T4334] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1467.300020][ T4334] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 1467.308806][ T4334] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1469.203151][ T4332] Bluetooth: hci8: command 0x0409 tx timeout [ 1469.361275][ T4332] Bluetooth: hci9: command 0x0409 tx timeout [ 1471.281361][ T4332] Bluetooth: hci8: command 0x041b tx timeout [ 1471.441078][ T4332] Bluetooth: hci9: command 0x041b tx timeout [ 1473.361107][ T4332] Bluetooth: hci8: command 0x040f tx timeout [ 1473.521093][ T4332] Bluetooth: hci9: command 0x040f tx timeout