last executing test programs: 11.626222562s ago: executing program 1 (id=2707): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0900000008000000dd00000040"], 0x50) r1 = socket$kcm(0x10, 0x2, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000900)={r2, 0x58, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$inet(r1, &(0x7f0000000940)={&(0x7f0000000300)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000bc0)="5ff36b19ab12234b491b58e14ae737312377a57c86d8bc35d06429c15908bacc101625c5df7d449c5257dabca96c364963885ee0d5936f3ed239530c15c5a673fe9983cd14ab4bf6628080b8acaef9f95d40ef4fe55b3289124227ebfdea32ffdc752decb8f8d73afc05470a53e9c3a09b5491999a496ca785df6d768201cba1fb37b3514442d4590fb8b8eccf8acedaf5d07df4b17e0ebf72c8a9072534b202ffca375f8d1581c53cb978b37d28c89335c92675725f7bbaeb27e1be2a200c9f1ca4825a306d02fd", 0xc8}, {&(0x7f0000000380)="3c28eab5ae0ef2ca7ee99fb1d917bdaf8360900b8724d53164", 0x19}, {&(0x7f0000000cc0)="f192baf6a97ef02d1cd03ee9c58466c06ec4361678f9773896c21257e1da015a018cb769dd3d025618e43a64b938e525fa7236ee9735475f0c4818511fc2a39e6a217ba618619e2cc09f77829913714e2d13d60e5be7e912beb11bb2912a5a4738105e80c86120277b9088fbdcf57c7abe448658d22bed13a42c68f58bc81f2d13aa8e31bc330d253964586bcb4e5f18056f1f86c055963911772c539b1dc167c17e142f787fcc5274f0b3167e347938cf5fbd89c6f54a0530d69ed6835a64c60d", 0xc1}], 0x3, &(0x7f0000000dc0)=[@ip_retopts={{0x70, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x36, 0x0, 0xa, [0x1, 0x4]}, @timestamp={0x44, 0x10, 0xe8, 0x0, 0x4, [0x7ff, 0x1, 0x67f]}, @ra={0x94, 0x4}, @lsrr={0x83, 0xf, 0x6f, [@private=0xa010101, @broadcast, @private=0xa010100]}, @noop, @noop, @timestamp={0x44, 0x4, 0x52, 0x0, 0x4}, @ssrr={0x89, 0x27, 0xbf, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0xa}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @dev={0xac, 0x14, 0x14, 0x3f}, @private=0xa010102, @local, @multicast1]}, @end]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @local}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @remote, @multicast1}}}, @ip_retopts={{0x48, 0x0, 0x7, {[@cipso={0x86, 0x32, 0xffffffffffffffff, [{0x6, 0xf, "2f8d0039fad220443d263f510e"}, {0x1, 0xc, "4fdf763674ef436270c6"}, {0x7, 0xd, "ce58f9288a6855eb18fff3"}, {0x7, 0x4, "2e88"}]}, @generic={0x94, 0x2}, @timestamp={0x44, 0x4, 0xcf, 0x0, 0x9}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x10000}}, @ip_tos_u8={{0x11}}], 0x128}, 0x40) r4 = bpf$ITER_CREATE(0x21, &(0x7f00000004c0), 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x6, 0x2, &(0x7f00000002c0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0xfffffffd}], &(0x7f00000003c0)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0xc, '\x00', r3, 0x25, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000500)={0x0, 0x3, 0x8, 0x7}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000540)=[r0, r0, r0, r0, r0], &(0x7f0000000740)=[{0x5, 0x4, 0xe, 0x9}, {0x2, 0x2, 0x4, 0xc}, {0x1, 0x5, 0x6, 0xb}, {0x4, 0x1, 0x4, 0x7}, {0x0, 0x2, 0xe, 0x8}, {0x5, 0x5, 0xb, 0xb}, {0x0, 0x4, 0x5, 0x8}, {0x1, 0x3, 0x4}], 0x10, 0xfff}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x2}, @func={0x3, 0x0, 0x0, 0xc, 0x1}]}, {0x0, [0x0, 0x0, 0x2e]}}, 0x0, 0x35}, 0x20) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f5c4e59f8500000001"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r5}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, 0x0, 0x0}, 0x94) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="1800000072006bcd9e3fe3dc4e08000007094f2927ea6c1f", 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40000) r10 = socket$kcm(0x2, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000007a000000760000000000000f73cc9b00000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x4, 0xef, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x23) sendmsg$inet(r10, &(0x7f0000000ac0)={&(0x7f00000005c0)={0x2, 0x4e24, @local}, 0x10, &(0x7f00000007c0)=[{&(0x7f0000000840)="9c", 0x1}], 0x1}, 0x10) close(0x3) 10.194389165s ago: executing program 1 (id=2717): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x9, 0x2, 0x2, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207baaf8ff00000000bda107000000000007010000f8ffffffb702000008000000b703000000000000010000202070250000000000202020c31af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095000000000000009e27b4b5d900faebce713f66597430b62cdfb58b9f869c99a4a474a7fb3e8017da45c9022a96646910bc6c1ec86dce40060f71ce10389104cfd4f3e1746be9f882000000000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 9.326851816s ago: executing program 1 (id=2720): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd75, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x40000000001, 0xffffffffffffffff, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800"/15], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socketpair(0x29, 0x5, 0x8, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000061192c00"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYRES32, @ANYRES32], 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f00000013c0)={0x0, 0x0, 0x0}, 0x1c0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000780)={'bond_slave_1\x00', 0x200}) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x45, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xdf}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x30004001) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x6, &(0x7f0000000740)=r4, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x100) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0xfffc, 0x4, @dev, 0xf5}}, 0x80, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000100100000100007200f90000"], 0x18}, 0xfc00) sendmsg$unix(r2, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000010}, 0x8000) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000a9000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000500)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0xa, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r6}, 0x10) 8.868786383s ago: executing program 1 (id=2725): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x0, 0x40}, 0x114905, 0x4, 0x6, 0x1, 0x101, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r2, 0x29, 0x24, &(0x7f0000000080), 0x4) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x8, @mcast1, 0x7, 0xffffffff}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000780)="f4000900062b3b25fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x20000000) (fail_nth: 15) 8.488425765s ago: executing program 1 (id=2728): r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, 0x0, 0xfe33) recvmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/111, 0x6f}], 0x1}, 0x0) close(0xffffffffffffffff) socketpair(0x1e, 0x1, 0x0, 0x0) socket$kcm(0x10, 0x400000002, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10e, 0xb, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x3, 0x0, 0x1, 0x2, '\x00', 0x0, r3, 0x3, 0x1, 0x3}, 0x50) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) socketpair(0x27, 0xa, 0xdeb3, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000002c0)="736a8266a8a61b28fb0836d041ba84a3cf01417ea835f1e2dcd6555b5005982981f96cc7489aa22f064436de39a39365c15608f2186318097b5f70810b38ce0afd1c3f2cbe6dbeb0d93b439716790c68bc3cee7aff8cf4b93e15904f4fc34a8b17ecedc0a03a6d2079adf784f5ee07bcd4934b460c6ef9bb4a4371ac4ccd050baf388a4f4ec5b8a127139b7870e5c2462713b668ff7cf5fbaffad7ef7b29c5fab9590d531819389a08cfe9dc9ff1f97e05dd3e2b1278334248eb9a2d29c07b13bd82f031d5643232c07915b4cebaf4a7ab52d8552e8375734c7d8cc1ff86042fd1c7", 0xe2}, {&(0x7f00000003c0)="dad200f0cee88edee9b69118fbbe2bc47a968fc8a505688b987b64bf43db0f4b24f47553f52a", 0x26}, {&(0x7f0000000580)="9e57e50039b65622f5dff20c4afea8fb039981522dfce043ae3be746e1a9a9e0d2a37b94a23e100b3fb6a5cb015378da88796bd6214f085045213ceed60c874bd904a30f2fca4e65721e9c27d3c9", 0x4e}, {&(0x7f0000000680)="9bb8d7a63eb6fec0d2958a6d17cab8b993c2a123bc3d180a5c22ede77deae22ebf907ad5128f7cfeedf72510d6176149f33feb592c8b6e50bd458ab589a1600e34edd220ab733a84dbd5a6ae1179817e0b0ee027847ef6e3e8063db0979b056743d98f790aa2343fd8b19427bd0157a734e1b724effbb92fd423ce4bf1cf8d560de9d6b114a0a7976dcefba2489463fafd1a0e48a50607f8822e78b35548a115c941874384f04316e1be770e42d59cce8fac2dc9d34d0d15f63293f08d1ae0dea204a0a2246a73df621093ead344c978bf149b30e27167fe34b14ec39bf14549af5c8b582ed8b3aa35dff35cec225ef7adace1a2bc9e6de634b2f2", 0xfb}], 0x4, &(0x7f0000000980)=[{0x38, 0x117, 0xb2, "d3f715843fcbcb9df9564e74a7e09da8eae5bd1d62e23a8d2f696c56df4710a058cc20207e48"}, {0xb8, 0x1, 0x3000, "1b0fe56b46107f181899491f2af88822cb03aec9cb70db4c1f3868f4c3f066f6fed4c30c96f7fca0c8bfec175c95fdc2a685a2c23cd625d586789cef8a1c2241738b0663566c6c0672b4b45b57e8bf46bcd792d37d20a03eb19196a34768a6ea1d715a5eb456276160bf3fa1015218545347411f1aa680b255fd23855fcd59a5370350b08c119d5e9f387f3fd66f4747bf480e878af4ddf5d0a7dfe62be09d55e95948f94987a3"}, {0xb8, 0x10b, 0x1, "d662aa1bb61ca96f4272dae45ce7849dc3b6f088f0ede092e33a29dcbe5271c637134ca8dbccfb6648817a70d1a01087d94d1ecaf6369122e3c8e48a948f9ef0065dcf2f6e79779596eddba1ac44fba9f7b3c537e7763ebbc9c36823752e67e8e90f564049667d0b68bb51cb52ddf3ff4981a3171a021ef93a8a4e5d7ec1b78d56cf371bb8dde0c9483a4a7d7aac88b46252b7ab3764037789e7af2cf958d4d4f9a242c59892e105"}], 0x1a8}, 0x8004) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x10049014) r6 = socket$kcm(0x10, 0x2, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080010000000e8fe55a1180015000600142603600e120500211581000401a8001600a400014020000300036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10) write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) r8 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r8, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0xbf9d5a5a4c2f3718) sendmsg$inet(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x20000000) 7.090581696s ago: executing program 1 (id=2736): perf_event_open(&(0x7f0000000a00)={0x4, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x401, 0x200, 0x5, 0x7, 0x0, 0x100}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x10) r0 = socket$kcm(0x21, 0x2, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000e00)={&(0x7f0000000980)='sys_exit\x00', r1}, 0x10) r2 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r3 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[], 0x101d0) sendmsg$kcm(r3, &(0x7f00000001c0)={&(0x7f00000000c0)=@tipc=@name={0x1e, 0x2, 0x3, {{0x41}, 0x5}}, 0x80, 0x0, 0x0, &(0x7f0000000900)=ANY=[], 0x1458}, 0x48800) close(0x3) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x2405, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0xd) setsockopt$sock_attach_bpf(r0, 0x107, 0x17, 0x0, 0xb) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0xc8, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x80, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x3}, 0x0, 0x3, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x18, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70200001400000fb7030000080000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000f40)='neigh_create\x00', r5}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000060000000000001000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r8}, 0x10) 5.157004559s ago: executing program 2 (id=2751): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r0, 0x107, 0x8, &(0x7f00000000c0), 0x8) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000611924010000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{r4, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f00000000c0)='%pi6 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r5}, 0x4) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000340)={r4}, 0x4) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000280)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000580)="02042700ea0e0000000000001eafbcf706e105000000000000001104ee1606d4b8bf4a828bda305775c43824cee8440000", 0x31}, {&(0x7f0000000100)="126873159fca3fa38fb198e9a6b363ceb3e6d803ab766b7a38e451d14e0b3457474fe6a51671e4124fcea96a873b10996816e100ed8a93b0a9053db57d60973369f58551c3091cb88d3b", 0x4a}, {&(0x7f0000000080)="088d85d1f4f8220aee8de7932b326f8a3164ae439862807a1589836c736d2341f7", 0x21}, {&(0x7f0000000240)="df3b46a1330000000000000000000000000000f1", 0x14}, {&(0x7f00000005c0)="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", 0xe8f}, {&(0x7f0000000300)="d608000000fbff0000fa6bd53d5fbf8f968178124964b4b0", 0x18}], 0x6}, 0x40000) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000006c0)={@map=0x1, 0xffffffffffffffff, 0xf, 0x2000}, 0x20) sendmsg$inet(r6, &(0x7f0000000400)={0x0, 0x50, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703340000001f03000000000000040014000d000a000d0000009ee517d3334abc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20004002) 4.754085303s ago: executing program 2 (id=2754): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0xc, 0x0, 0x0, 0xfffffffffffffffe, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = socket$kcm(0x25, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x88) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x1, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$kcm(0x10, 0x3, 0x10) socket$kcm(0x2, 0x1000000000000002, 0x0) r1 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0x2}], 0x1, 0x0, 0x0, 0x900}, 0x60) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021c080406037c09e8fe55a10a0015400200142603600e122f00160004000400a8000600200005400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ed50c", 0xbd}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x20000000) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) sendmsg$sock(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0x102}}], 0x18}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) r4 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000000)='cpu\t&-&&\t') ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x30a) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00', 0x1000}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f0, &(0x7f0000000080)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @multicast}) sendmsg$kcm(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000006000)=[{0x0}], 0x1}, 0x4) socket$kcm(0x15, 0x5, 0x0) socket$kcm(0x10, 0x3, 0x10) socket$kcm(0x2, 0x2, 0x73) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x21, 0x5, 0x2) 1.906669239s ago: executing program 3 (id=2762): socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r0, 0x0, 0xafe6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [], {0x95, 0x0, 0x0, 0x20000000}}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) 1.849846062s ago: executing program 2 (id=2764): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001ec0)=ANY=[@ANYBLOB="004000003a00913a74067388481f9c0e0a"], 0xfe33) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/111, 0x6f}], 0x1}, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000380)={0x0, 0x0}) socket$kcm(0x10, 0x400000002, 0x0) setsockopt$sock_attach_bpf(r0, 0x10e, 0xb, &(0x7f0000000180), 0x4) r1 = perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b81, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x9, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x5c31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x20000000000005, 0x7ff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff0000, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0x1ffffffffffffdf4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000600)='cgroup.threads\x00', 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000440)=""/183}, 0x20) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f2, &(0x7f0000000080)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="b9ff03316844268cb89e14f0080047e0ffff00124000632f77fbac14fe16e000030a07080403fe80000020006558845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0x24, 0x60000000}, 0x2c) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="6000000068007f089e", 0x9}, {&(0x7f0000000640)="68cabf2dfb58fc021d6b689866f05d480004fbffffffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e8", 0x2c}], 0x2}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b11d25a806f8c6394f90524fc60040f030047000000053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="97d9deabea352018000000000000006761110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x754}, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x4, 0x0, 0x9, 0x640b9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x0, 0x3fff8000}, 0xcb10, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000800)=ANY=[], 0x50) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000900)=@generic={&(0x7f00000002c0)='./file0\x00', r6}, 0xfffffffffffffea2) 1.71813816s ago: executing program 0 (id=2765): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)=ANY=[], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0500000004000000080000000a"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000002000000000000800000000850000000f00000095"], 0x0}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="120000000d000000040000000200000000000000", @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000042fb1295d91fd4d5edaa716379a5601e52dcd87189a13f42a1865b145d3bb9b94f142d463af31cae19865ea678cafccb921843e715edd7c6e64450f7c1cbeae12033b1043e721bc397caa686ceb9ff6c8cccd13f0d956520a50dd566470eebb271fe064c0e24", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r4, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000400)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f5c4e59f8500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r6}, 0x10) socket$kcm(0x11, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={r5, 0x58, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg(r2, &(0x7f00000003c0)={&(0x7f0000000640)=@ll={0x11, 0x2, r8, 0x1, 0xad, 0x6, @random="50804f7a963c"}, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000800)="e3022752de97e3d15c3b2d1aa55c3e3290129a3ca1828990bff54f6913e4d825ff468a1dd29e3bf6c53e39f8e850359082dc8b753532c07162bc1afec16553aaeb00637aa47eb4ec8a169cc350a33315a2d51d2b1ff4a9edbac65fa364eec8c4f8bd39ed57720aaf9b8ed3dcada75ac6d78a4444a75effdc9b3ac28be137ce4c9d134d3eb7d240c0ccd595ddd14b6bc5f7349a7a2ab4d016fa982326a97d7d7afc0ea31e5a76085e70e34ed469b884b88726c7ae18e34c3f4ad57205e200e88bfa4672aa46a4720bead9d4493c37fa4d25fad97b853de88feb0050891258748668fa9a5834215904664e47cd6b72afebbbe491648e", 0xf5}, {&(0x7f00000006c0)="9bb1b0f295e9c83d4bd5387b261373918d5104a77e197bf70d0aadf84853f0ece5ff2078aa5255935a90880e35271f4badb37abfc64e9c899582a2d13675007e0f1604a63e0e35c5686b", 0x4a}, {&(0x7f0000000980)="78073674c1f1d1d9c210ff117a212aa22d580dfea76f99b9c6f876ec71b4db7797086aa0997e0ba74635a072800e07288d7bff0a6bea613116f2f4c0a0a5608b1d71984fb0690e76079772c8a11688e1c1d14c17dbe79c98611f40dd0d2478fe9e6cbf6edb6f7569cb56dee457d7dd4d66b4582560fc38ed182566c5ecf96a380ee91c7bde2c9de0e7339c03916278e174bd196fee7a83d07b7e752df5bc9e99d32262bd86de817f9e07066aa155c9dc011ed5a8fa752aa3477d17556b0ac36f5570361d49197f8c80cd3059f642da70a6f01cc565ba3078e50e36414b6f8f8c30471b", 0xe3}, {&(0x7f0000000a80)="6208a6b79512255d31662e175cd3fe5812fba783ed9b5f65c80e041ae2bfacea5f9bb732750fabd9672433f29e721918d34bd7b8f30138cdffc285feb5492bc214f6f8", 0x43}, {&(0x7f0000000b00)="86ad555d0028c85fef0392f07f6b35e7fd9de1a66383413e4464d3b266a674d14b15da934b8ed45469ae2b74c9b283722b1cbb0696ad5b62b49f3740cc76c216fa39446da88c2686ce7ed463328f4f9c1d452e4f58154fe7f93da9e048dffcf10a30a0c837ea85563e6a0ed4af34d1af50d0194a21348aef05cb4bcf3c4076a9c76fe6536aea1dfb", 0x88}, {&(0x7f0000000c00)="fefc1903140dc0b040e5608fb8f7cedee22700043e1c1922a7bc94ba0c8f4ffb80740bc777cba1897fe3b1dbf69aaef767723234301ac7f5cd74bf321cd04a56bb7c2d1f8fac7d9253bf327dab1accc385ab933ed22dc3f48aaa4fb693709f804864f47e4a4726007b98c480f077c097ecc6cec5feaf301553b272e4b569a46d674b8b53191195", 0x87}], 0x6, &(0x7f0000000d40)=[{0x18, 0x101, 0x2, "b8"}, {0x100, 0x10b, 0x7, "a3e2e82b0edfe8eff9539b810296453b87ee84c9c3fe9356bee85fa4ab03d14e58fe38426333cad6b1db75122cc005da261a99d202cfab256dbbcb5720bbd15a6ebfd23c9f9d966bbbbd3ad03935c04de0166c21fc72c6d9b1da1c6e4c66d7a264acee7c1d84ce406d85bf2958f96b56175255dbfd5bebeb0d17f43d85efb52fbcf7088dc6f03787513090d81099392c30e3b3100e59d94482fd3dfd21ca701d7f72e6e76029ecb860c9efd77db9fa52caf4c28297c1e57559947194db7821446f0b02c2e8aadcf0334afae06d00adef2b0015944e748d2297a66cb48ae5aaa7397cfafc0f116e3ebd459a"}], 0x118}, 0x80) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r9}, 0x10) r10 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r11 = socket$kcm(0x2b, 0x1, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x83, 0x0, 0x8, 0x4, 0x0, 0x3, 0x8, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x4, 0x6}, 0x7, 0x102000000000, 0xf8, 0x7, 0x81, 0x6, 0xed4e, 0x0, 0x1, 0x0, 0x1}, 0xffffffffffffffff, 0x7, r10, 0x2) setsockopt$sock_attach_bpf(r11, 0x6, 0x10, &(0x7f0000000200), 0x4) 1.71765485s ago: executing program 3 (id=2766): r0 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="02", 0x1}, {0x0, 0x500}], 0x2}, 0x400c090) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e000000240000000400006e5c000000af4630", @ANYRES32=0x1, @ANYBLOB="fcffffff00"/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x7fffffffffffffff}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x9, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r1, r2, 0x0, 0x0, 0x0}, 0x30) 1.621749675s ago: executing program 2 (id=2767): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8916, &(0x7f0000000000)={'syz_tun\x00', @random="0200fede0401"}) 1.556128359s ago: executing program 0 (id=2768): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r0, 0x107, 0x8, &(0x7f00000000c0), 0x8) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000611924010000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{r4, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f00000000c0)='%pi6 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r5}, 0x4) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000340)={r4}, 0x4) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000280)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000580)="02042700ea0e0000000000001eafbcf706e105000000000000001104ee1606d4b8bf4a828bda305775c43824cee8440000", 0x31}, {&(0x7f0000000100)="126873159fca3fa38fb198e9a6b363ceb3e6d803ab766b7a38e451d14e0b3457474fe6a51671e4124fcea96a873b10996816e100ed8a93b0a9053db57d60973369f58551c3091cb88d3b", 0x4a}, {&(0x7f0000000080)="088d85d1f4f8220aee8de7932b326f8a3164ae439862807a1589836c736d2341f7", 0x21}, {&(0x7f0000000240)="df3b46a1330000000000000000000000000000f1", 0x14}, {&(0x7f00000005c0)="b72abab9439ca41f5cf14d6435575ba774ee5f5c23ff2f5176f5773d08a15668ec280cfe4ea416cf769dbf978a8191bbe006e0da50029176c0f24e3ff4d3e895a2afbf52cef2fe1ca31edd842b126ec4be67e6e3624b9ddf806fc146c645ec1d37fe7e3b025c156d5d520104b53f7fb2af436201cfd5dca170edea5a190e4786bfaac544b60f514d7ef420526c467f14790dcfa5ab915d7dbcdf2765bbcad014c991f8b829c79f53586de79f0b987ad796f9de4a6e53136a07a39ab1f5a2ce30aded70a9b72d1beff7e8b6405fd6331e5635ee71e809be2d58f412dcd7b2e856d692dbfed19045ff13244acce351b6e450395568063569c71ea80a04f83fbe6ad1d0862fb97f816576c4844da65d751ee1fdc522ae1158670de297cdb2117bc0adc1486e016a6bcc922a162fce6a9ecc8c42b0c44c566004eda037864e5f339bbb0998cdaf2b8e49ae003659bc033668f7c8e550197ed95c420461254ba1883dbd9403672d579cee85c37f103ee9a350a768286017158784baeb063c8c684b91b022b0db2238b679092a1f6909f0cd9228500e088f5cc7bac4c0dc56e80fedac93554aec79715ce02e8bf3fcbd70382f619bfe3dcf06890d8542022ee58bdfb075d319c9fc8474cadc8de5c3dd3f682d3f68324d0af7a727064053ad84c94643eef190783c616467628f84620044c084b80e3e57bfcdf293c9c36b4474a52398b35e49e2ad4a4ac090bffc5cd27d3c69b4ae5f841d5b0766ccd36d25eb58d8f01621a05744b79ede39019ab9d7a1946353d8f3b7f833ce1a102a8c97a9e3f32138ffafd305448f2518ccdb7eef594a890eaeaff3f876f742fec22669a97085ed93b18228ecbe9e354e8f69967ca749fd2b1cf026665ca912e3fc0188b294519078b46676052de4fe22798290bd1e232c9791fc01ddb4ae776b5769143df2867042e8a3ddfa8e786bd8a244076956d4ab137939ad381650dd4fefd2b942a98d6f2edfd7019ae473e7608647b86d643e8ff3d7d4e89ed826e4b8c6e8fed224c528d805ade85c5b45261b2692c0f403dec050bd973b0999df214689f4402dd1598a16b0c7671e5e204a00b06376ddee7cb99292a8b835c0b451642b71f2ffa1aeea56255817b2384bfe4f8213ccfc1f762f250592896102e5f6d34cdd726bc0f86af52fd7c4483d32e23e5af770e960c7445b8e67b6086f0cadcd22d0d4bdadc31b5a94dd687379dc6e078210ccc71f8e67eb58d330394425ab17e55d1ca8f868f6bf738af291d2293c3dfa2ccff25061ded22878b3cc6532d19e5a00d1f0f1b9de35305fac2c6cfd5d77a2b02618735b7d392738bd5cd3eabb7039c790a9f193913f16e06605d405d6a0cf0011a2e5f935d8563fef1722692dd266c3d320b9f5eeb2a4b2f72155522f0ed72ff1efa0b6ee78e70d3d45241609e7f87d7bcfe1af71159baa11ad667a0ead3986b2b06500ba2615ee966ea86ca68d02de4802bd9ef18dac5ba53ca98b90df49ef4e3268ceee538973620e5a60513ea330989642626420b67dceebc569478657aedeb62c45b079348796923ad1fba5a99e6b150cf97ba2a570150053309c6dca7fa352fa1678c9b919fbc47ae0a84175a7fc25a00fa5888cb017e8d8225fadb29e34bd3c5bbccfb22a83255fec3967c991d5b3e6719ade82fb7ef85c8a4b9e7ad8ef2a3a7bc78de424572224affb1f9e0c5a969e61ee2ebb4f247bfa09384bdad04438f2efbfae303d47c3afe7e8d3a157b2a6f37572ea3ecc441dfb208ba755f781f144e58d80aea590abcfccbe8678ec6de47511f9d61cc408cbbe90eeab2cffe6d1a48dc3eb4e48e228fd43cafd7ff2c85c3ed52e99fe16887be28fcd2cd4ba4cac414c92c96294fa7d628e4356c748c173f790a7f30071d0bd53817c78d163249c7402b222b8f28668cae7afd17b97dbaf10b75b61409ca6f5b285d1ab09207c5a91c68b0d4b5da6d6b5a495c8debd7f4400e56d9e22d1cc330f782f2b5441a31b9ccf35aa1a151219cdcff5ab8b240af5b5a751eca67773c057412a935e3a7a367b2bcd28463904ee040a586d6f4f969cee56d55b6b4d97d1fe93b67e2f6bd47925054c4702ec8969a1a6211ea8f6783ca0e8ae333922ce19eceb24e2ff714a0208d2489a62f299aa50cdbfe5a826e872ab231bbddf5bd2fca92d4460379e05e13ff34a200fd921dcb67a002873bda8d86536cddaccb54eb72dd4e399fe9195ad5574ad85d9ed2eaae4106234f0a8db05a230ff377b59b54fd0919d1b86b938622ae6098f003db7f4d45d6874f54c33064ce6184dccc99fece2d994e9572d4840b0cbdd704fd70b4f625912d48a512339f883533768f09a4f614583dfb72defe713ee38f61184df279461b7d35becd8e67d01f0ec27e901d88215554d5a69db373a662085733d09ad9153e7d432c94f872ff7cd72995b3a581ea17722ed13a191b366208f75661112b1a7d42c252c907488ca8dd8f819d4618b0053d4bcddb3b5975cb8615ebc472e052552ee74d5253174a2b0cb96e1eaf6349b6c39be975123ee72b0ffe1367df7aba54de26c9135a3422d21067034551be5efc5daf8b8f59bc725e4fd171378fd9f16a785f1b0378823c85eec521e0b2aca70b7b72b719a20eb2fb0addc0b05851c8e181607f49dad7323bc255309097584c2099574db1ed7940fd16796aef19d30acd714dc1f898716df64db87d852eddf2f86e78fd7fd64868b4cb6cc626efcdea49c4a2779a0e777bbe23968e14233a810d9883680894de93023a8deae51ccbf32e6d1e53618ebee95c761221a33bc3263fff0f5ae23e14dba0418cf3f31effcb36956e06c57a17620044260419a208ae1d2296ec9472d44be74a8ed0a33a23181acdef8c7d2695ce9485ed8d17d9f6f30b9b128ee0ba15c42cbf6059bcfef008c09db8855343f79c3ce1c4d79077c8a62237d4e400a5aa88e7424f2f99df6c2070d6ed071f4968376581e20e52d64e9c4f8a6f73bb33f5b6b62c1deecc85bf789565fde14e4454306ed8f09af08afb360ee4fb40dd5dca0be43ccff75e5c0ef85ea7c521cb4840d61e99e1ce4661e721446d5a571cddffbc3643ec9b58237fd416376906bdca09485c2c80f82b23e8e7bbf22035fdbcacd804ae3771fd616901184ced46987d533017eef717e9b34a5531c3efe2d77c9b6cb0617382d69951545378a4118e71c64a1f16d096a8f933580922083d0536b90ae1715c63f682e8241b42e1646b0c52e34aa9c91efe2b6b787ce0747d4ff0dd07d6ebc9ce27e0ef35705eb7b78763a9829b464523ff3ed9078aff6ee29e6e7a59a5243825e8bb9235f8e49a9dfb5932536666c3dc75b29e515dbca4c84268cf23cd7b6da6814328a3cb26d7b1d6c28e20b36f9a2c9e2fcf663c314f72f37d2b8f405cfc686a6b35400435be0eab01709c2c4b3005491cbb0b560e33547b77ba9f25f01b194e20534199a3786ddfaf0a75aafb65cd4df4da7b5f98fe72a8bc7d045339fd41508cecca791c717a10d4fed8aa69eec80955bd899a6f8aaf3411be40568149e631ccbe17c68f85e87b58da81ba78def8b1a48c49b2dc7613f7d6ea8b158bed077666d37d1caba9a23b7cb2772e780f70872113e5bcaebaf9f9499f651dc894be3bba1e99d58b33d60c0eda397df91d7cf9fb072f247fa9a9f59c4f59c4284a3832ff0a1f9ce8f6346cb5c08a9dcb2851c7f169af688fc13f00cf9519ade547671698caaa3f4d4921fee83753b9ab0875707836343eddb5b87bec86aae023c9571b8e389ff3f4c692b6fb19686105249ce033116777d919ceb4559a67ee6b6ad9d4b53d2be24315429de3bf201107fe7dff9cbc92dbf9173391d555b0a1b8ea3252fd7d7fd15d8a3cc70cecdbdd43c4edcc4bb2fbbf646d5ec7dad0d3156a513d14184e0c316f8155e774f7dcea485f904828edf28510d692b66b1500c5a704371c2188a2812bd323de012f36a79674082b5f5e9f7f4ce1a75ed854b71555e9fcd1f0322c22a9e543674c79a74404e08e61860f505dc56e1b52977b9a9af18be4064b5f6aa7c891382bbbe65e70a4cee33176570341a525fb6b25c0b20bfa3f2ee4a01584f259f43c3b63a2dfc376f435827211379ab3ca8912cbe01e4f837920666fbda682f6954d1c156f21e12547b885f485c38f62e765013144be8ca92b1d4872790a5c02671517f6a8f0ceb247e08c64268ad8970b57bb6d077c9b8ebe7fb1183087c9a3baee06100609204be588621253b9b120c08db9f28c2d38c9bc3f59018bb7216d73186048770d1e556faa49df23a40a64b40cdda2041dccf5619db09b7a7795fd7eb631c0e0bffc3b64422bf6acd84b7fae8bd05b057260a4d7c4851829c7bbf0b6f27c5db0ff10f42df3528f79dc9bbd591965259cd0389deb124b1fadc5dfd3ade9742d29261379ea3d98929512371dec991f0636fbda5dac355a04e363beeb4751781d9cef3a0b6ac6500895d223ad43ed75cac8b0a868253fffa10bf6c2de99c687fd056e075cf0632b6d8ed2263ca08ad95b6f335a3b6d8ab7801422ac8597441ac1bbe289b50af31eb221d19a2d3177d4ad1056d616295e89471e65d811b8fa4fe2c0c12793f43ef7e75c7f657f6c26ca9cbae63ce99301069ab257ae77c38778d35afd326d569c626a68f3904b2c376dfaa05568892f346f86fb05e71fb751e09cd22525cb63512a7d2e4670bd31109b87818278e66dc73fa9667e35c5bc6588cd36d2b62592a4103803d93c194f8edd5d20c6597231321b909bbb3c1d13408e5cf27728883e333b391222e6b6665454892dfedd17a1066f1145163e1a31ba9a3e3cee925e55d794b89462a0a092a639ccd4a24514083cb68224c87c18f0bb39ff721cc598e686b5fef169bc30f9ec6df397905f8340f6ae7ad826aac774cc46bfb9dfe8192e9ef10e8355d7c2810269eb73c7ecb8d3ffa33437142b8e596cdb778cd3cdda5bbbd09a8ea919929adbc63ff1004490c45a9ea59def65fabc884c39beac1b74a218f59c5e31ba85dcc4b8bd81d7a66d8aaf0edb64b505f760442e16fb7f07a069aba88601c3ace27762cef8196da3d44b14796b04e7fa3bab37209190a1de6e6ecfd99353279ef643766814fa7fac7254eba59bff3546bf21afc7445a4f1bc92c7b013f34962ff029e0f2926acf6c8a25fecea5b0b810656c981535492a2a4159dcfd0bf98085dc9612159fa0ad837a22eaffce80405367931ef3eacbf5a663175acc306eb075c52265d0c6dfaab", 0xe8f}, {&(0x7f0000000300)="d608000000fbff0000fa6bd53d5fbf8f968178124964b4b012f80442", 0x1c}], 0x6}, 0x40000) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000006c0)={@map=0x1, 0xffffffffffffffff, 0xf, 0x2000}, 0x20) sendmsg$inet(r6, &(0x7f0000000400)={0x0, 0x50, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703340000001f03000000000000040014000d000a000d0000009ee517d3334abc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20004002) 1.289337495s ago: executing program 2 (id=2769): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x0, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x2, 0xa, 0x9, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$kcm(0xa, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x1, 0x2b4}, 0x0, 0x10000, 0x0, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000740)="2e00000010008188e6b62aa73f72cc9f0ba1f8483d0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xa, 0x7, 0x6, 0x8c}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r3}, &(0x7f0000000080), &(0x7f0000000200)=r3}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xc, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r2, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f0000000080)=[0x0], &(0x7f0000000100)=[0x0, 0x0], 0x0, 0xef, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0x97, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)={0x1b, 0x0, 0x0, 0x9, 0x0, r3, 0x10, '\x00', r4, r5, 0x0, 0x0, 0x5}, 0x50) setsockopt$sock_attach_bpf(r0, 0x29, 0x14, &(0x7f0000000100), 0x120) setsockopt$sock_attach_bpf(r0, 0x29, 0x15, &(0x7f0000000580), 0x4) 1.288936295s ago: executing program 3 (id=2770): r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000040)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f0000000500)=[{0x0}], 0x1}, 0xc4) r1 = socket$kcm(0x2a, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x94) socketpair$unix(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89ef, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$kcm(r1, &(0x7f0000001f80)={&(0x7f0000001d00)=@ll={0x11, 0x3, r3, 0x1, 0x7}, 0x80, 0x0}, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000200), 0xc) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x800, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x3}, 0x50) r4 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8, 0x0, 0xd}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x9) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r6) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) socket$kcm(0x10, 0x2, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x7400}, 0x0) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r8, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x40) 1.187085531s ago: executing program 0 (id=2771): r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0xdd86, 0x2c}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000180)="6bb8016d3d444797e0", 0x9}], 0x1, 0x0, 0x0, 0xffff0000}, 0x0) 1.016523541s ago: executing program 3 (id=2772): perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0xef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x110901, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r0}, 0x10) close(0x3) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000050000000200000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb7000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r2, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x16, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}, [@call={0x85, 0x0, 0x0, 0xd0}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xa, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x401}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x6, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000010000000000000000000000180100002020702500000000002020207baaf8ff00000000bda106000000000047010000f8ffffffb702000008000000b70300000100000005000000050000001801000020786c250000000000202020db1af8ff51000000bda100000000000007010000f8ffffffb702000008000000b7030000000000e385000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0xc3200, 0xc, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r6) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1}, 0x1090da, 0x0, 0x0, 0x0, 0x0, 0x4, 0x749}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1d, 0x2, 0x7, &(0x7f0000000480)) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000440)=@base={0x20, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x50) write$cgroup_subtree(r7, &(0x7f0000000200)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce8100036c00fe0800ea00200200875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r3, 0x0, 0xe, 0x0, &(0x7f0000000640)="0cffffdf71c8afefeba000dee560", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 950.936175ms ago: executing program 0 (id=2773): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd75, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x40000000001, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800"/15], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x29, 0x4, 0xa, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000061192c00"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYRES32, @ANYRES32], 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f00000013c0)={0x0, 0x0, 0x0}, 0x1c0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000780)={'bond_slave_1\x00', 0x200}) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x45, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x74}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x30004001) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x6, &(0x7f0000000740)=r2, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x100) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETVNETBE(r3, 0x400454de, &(0x7f0000000240)) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0xfffc, 0x4, @dev, 0xf5}}, 0x80, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000100100000100007200f90000"], 0x18}, 0xfc00) sendmsg$unix(r0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000010}, 0x8000) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000a9000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000500)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0xa, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r5, 0x0, 0xfffffffffffffffc}, 0x18) 768.688315ms ago: executing program 3 (id=2774): r0 = socket$kcm(0x2, 0x2, 0x73) sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000300)={0x2, 0x0, @empty}, 0x8, &(0x7f0000000400)=[{&(0x7f0000000340)='+', 0x34000}], 0x1}, 0x900000000000000) 659.539721ms ago: executing program 3 (id=2775): syz_clone(0x1430a000, &(0x7f0000000080)="b0378052043fbae30b7eebd93a27ff12f0d427498c8c0604100d274653b9838a5b5ef6c53845bc32594d2c58b9478d424819196c58f51afe69f20f8925d68f8d43860cda46f281d0fb74d6", 0x4b, &(0x7f0000000540), &(0x7f0000000240), &(0x7f0000000580)="063362b265f1799b388dfd5784cefcbe94567dc1420ba4cb31e9994420f57a8cea0f0728bcd6b1bcab1d23d9778f62dfcd98aaa86b5be9b505b0da68ef7a8836d6a0cde264c33ced273b16a116081bf397ab4c429c09ac6c8a5bbc6ece780022d55ff5f2d5b0b195559512fa780357daa5b2646ac646c9480dbbe853916f028ec2cbb845d3ebe1a0a0eed07b0262c30c4a37b5156d928105ccca8e7fb43e9c6475f054373939ed8d8c704623c07e3804ac4fb11f133113e608b830d6afdbd474a27b7b0becd82c6513add62b44441733a2dade751d1bdec6b96315d0efba0d0909409c59697807bef6535f") r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r2}, 0x18) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x9) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="04000000000100000300000000ac000000080000", @ANYRES32=0x1, @ANYBLOB="010000800000000000f055000000d004000000060000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000020000000100"/28], 0x50) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000003680)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="866c6e4773cfc904000000050000000200"/28], 0x50) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000038c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000001000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000037c0)={0x18, 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="bc4b40000a000000c961a4f6aace34b5c6f31951e82ae9bae0374e61"], &(0x7f00000034c0)='GPL\x00', 0x7, 0x7b, &(0x7f0000003500)=""/123, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000003580)={0x1, 0x1}, 0x8, 0x10, &(0x7f00000035c0)={0x5, 0x7, 0x7, 0x32}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000003740)=[r3, r4, r5, 0xffffffffffffffff], &(0x7f0000003780)=[{0x0, 0x1, 0x1, 0x1}, {0x1, 0x4, 0x7}]}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r7 = syz_clone(0x28000000, &(0x7f0000000440)="96814cf65e7de62dac0fd04c2627336af551ece0ebfb982a0bbade8ba3ebc69bb80d0b9bf890208dbc2509e78c24334c3f194a5cd4dafa17c3ec1af5944a173c322908f8dab589fb2711bf7e5e028807718dbac06bfd418f4917cd7198a3de388667df8e2b12b939d4ef5afbf26c773688617d9000a2d51a42286c83d7e8a862dcb86dd47c1ee32240d6b83f2b1d7f726a22b433f97a11c29b7568d895", 0x9d, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000f80)="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") r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="110000002000ff07090f9becdb4cb96b0a", 0x11}], 0x1, 0x0, 0x0, 0x81000000}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000f40)={r7, 0xffffffffffffffff, 0x0, 0x32, &(0x7f0000000000)='/proc/\x00\x00\x10\x04\xba?\xf9\xff\xff\xff\xff\xff\xff\xff\xa8s\xa8\xab%\xdd\x15\xcc\x00'/50}, 0xfffffffffffffd68) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180), 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000003100)={r6, 0xe0, &(0x7f0000003000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, &(0x7f0000000a80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000e00), &(0x7f0000000e40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x29, &(0x7f0000000b40)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000ec0), &(0x7f0000002f80), 0x8, 0xe8, 0x8, 0x8, &(0x7f0000002fc0)}}, 0x10) sendmsg$inet(r8, &(0x7f00000031c0)={&(0x7f0000000a40)={0x2, 0x4e23, @broadcast}, 0x10, &(0x7f0000000d40)=[{&(0x7f0000003400)="338315ac8eee7e700f2dff945131fc8fec76376c366518c6269386169dfb8572b92ea5102fb46b5520cb4c0771856d2a2f87db870e786ad3b0dca49bc0b3f3f34205d98e72b4b42c43813c29b3f92f088f2889b6fcc5c6f4bc8c53c7ac408bb44eba3fbbfaf10efedd340e3b07288e2abd1744f07e5fb6b1e2dbfba13a0289fb3eabbd20cf5da5703245c25518ec98c54557e7e912f842778da39e97b5cedd7340ce567d56c577e57f63e6834b7a6383ea56f622cae4651c7b02a7", 0xbb}, {&(0x7f0000000900)="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", 0x101}, {&(0x7f0000003140)="82bc0060fee8479eca0251b205e2ad1656999bca12bb4b2f8b7d576d82717255c1cada3035f20a0e0f13b3f890921de9953dd9f80ec81748832b197938a231b064828cfce6c20233cee79e12a38cec8d53ea9de044e320", 0x57}, {&(0x7f0000000b80)="0634a23c5dddce5e33e4352ef5279935f3a786065fc16e2c6149229f2d3a36ebd09184a5cc998c9a8d9f324113ebff1deb0f607a37ea15ed3b95a65e22c33b652d017c25f0fa658d9edd14c871fc763369b6540c22155f3051fe7209fc912380ab3148a1bb59130a5efcb3c83051477be66df5e90107db6d81f5314b7aea7f97504320fe44530c95dc9244daa0f9ecdc91d23274", 0x94}, {&(0x7f0000000800)="b5d5daa8adf650532a6907c80846483af6e373957e09787a31a9a3ee30c042982d97c05bf8be8da862459cb38fc1ada4e18dcc69139ecb8943128e269bf2258fde145a4386c4e0ed1b7267b025dbc8de273c3077b9554deb50cfd6168328e9891fd891e6e0505285c12457a67ef51487c2f7e3a2d7f48171369865a98d19d84b0d58e7b9e9080936f50d4dcc136bacbf4fc2adc75119ca53c76413c44a2d57c15c4b4d32ce1c1e27d359a986055f86a49b01f9be4cc523b9fb974473e230e9fdcec3f79bb5404a8a91d1e1ab3434425aa7081b18dd2d01f1c144fdb1e2b0c8034b94cd8e0f81cbcbeb3c47e8642913a8", 0xf0}], 0x5, &(0x7f0000000780)=[@ip_ttl={{0x14, 0x0, 0x2, 0x10001}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xffff7150}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}}}], 0x70}, 0x80) r10 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0xc001, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001080)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfe7d}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r11, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000040)="b907ef19edfff007049e0ff0888e", 0x0, 0x6500, 0x18000000, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000450f0000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x3d, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r13, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r12, 0x84, 0x64, &(0x7f0000000000)=r14, 0x10) 622.145084ms ago: executing program 2 (id=2776): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="d80000001a0081044e81f782db4cb904021d0800fe007c05e8fe55a11500", 0x1e}], 0x1}, 0x4000080) socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000010000000000000000000000850000002c000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008eeff00b7030000feffffff850000007b00000095"], 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000009c0)={r1, 0x5, 0xf, 0x0, &(0x7f0000000900)="0101000071a78326c799dbe888a8ea", 0x0, 0xd00, 0x2a0, 0x0, 0x0, 0x0, 0x0}, 0x50) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x1c0) r2 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0xfdef) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180200000800000000000000000000008500000041000000850000000500000095000000000000008f3b144af53b266d003ba652cabd12f0ef249852"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xe, 0x0, &(0x7f0000000b40)="613b8b36b4d6b96b31099c4887c0", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='cpu>\t\t') r4 = socket$kcm(0x10, 0x400000002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001d40)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6493790710000000000080000b2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9924be41a9169bdfaf16da915b2e249f21c6eee84309e7a23c19a39484809539fcb4e0b6eab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bfb1c0e6b1244d35b213bda84cc172afcc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbb888b0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab2e4b380a00d72bc0480f94479757306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b844139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a662d8bc9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e558d17879570c8ad943e392955f4f979ea13201bafe4f0f6ea508000000a0c548552b571bed5647323478a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151fcda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b304723177d356c4604bca492ecec37e83efceefd78a2533659edc8bef9cb85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d350000000000000000e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e5a61561a9845e4ff29e2bd43b5b923b272341c5e093fd66a2946501559335781092cf8ce987c56cd31121624d7455f2a3666276c3c0b812b28e2f30d035cee5d0e77a3c72208ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f030b8d3ebcef5af469abe753314fae7e0e306fdb4bab0a4331a09c3a041a1e7b55c4e81dba1e12289ee34463aaf28345bde0c195bc9f022ca8ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262d0af3246eb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a0600adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa7000008000000000000117ca65fc86c15d4441f412e134809c1ea2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07464d1ef0056b5af553d18a6cd50feeb7bfad9b7be3283b6450d264e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5a71e0d7696caba172745c7dd919ffb631820420b75b6522c0e21c882c60900000000000000e068000000000000eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff201000000000000002e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa66237e0dacc107f532348cc2116473381e961f3d9c8c21578fe3245097c280abe51427b9f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6f0100000000000000f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d174b0000000000000000000000fa08ad0731ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282b6caa2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae0533496b6d58da50ee80a6b9a7438978c5465113f668eb4484350048289d07dbef325d3221a7cb35f812f257941a9781e3214c2a3dcf89d99844b762a9cf17548c54fccad2c7ae8072b82e0880815daf966bd5343c1635e123f868a7167cfcff33320253af570f4ef9c0254afdd89ac3943562b530dd88da8a94013bbaf204bebc38055adc39f07f7c22711f4d1f6dcc928d1578a093c072e0b92babc76f47ee367e745a024a2278319d9a4d1378482b74c516647652bfb6e93002494a5cd74e2a9a4734487062437da23e1efa6ef7674108aaa3ffac859c3577c2637bb3bdc69bc365b1f20dba96b8acca62f3f80045318de0facf2ed44b814e842c2a520159bb6c320cec0910c0b8bd3d547bdfba2e09d24d117ed0388afd37affbad2f9c77c9c1314a16ffe64f5e3744a2fffd7039670f5706e589a4c3868db06fd892d68a547477f8ef686ff0dba7b8c18c94d5a89b0567a851750a35d9cc2217db890d89385fcaa00f0f2e524672e6f4c8bedfd5da5b157709b8265cf511dc5846ab1d85916c4a6b2d1b408575982e11230cbac0a9c6eaa03c945645581f678403c2a936c53ae72940aa92bcf22b82c6bc028e0acdddf9fef595f0f7a9f80c0e4c659ced769ec463d26a81e468846761a8e1efd6a031ab7adc8665e267be0065cc315aa23012423ec8b8492d9b50fa4d8c5891959b761eec6dc988532782fda13239c63737039350db59e25c796b7ee6c76f75dcd63809b03b2fbb0e3449c546835d1680b7ea28389898a39d63079906bcb011cfab4d68eaa57b87f80e27154fdf8f0f672f064d3b5f877f0c680b9b86bb4c6e1adeb237d6466685105f6a960a3800a0728815d4f0a25e865f0b4543c3af317a49c72b3d62e9ee12db4ed573692b31259b6430e1e02afc14696aabf8d98bc417e74c91e86eb8b43d6693f12f5f609bd24ed1fb10f7b70794a7aba2ab321a7743ca93d64af001aad4a48cf3fc02ea0115f19d8886c9451ce876b66a1fc09705148e0c6b00d4d79bb9db9f8ef3fa5065b7eb78c7f432eced38777ed438e296a62b5d5252577a1e96879d21d4caac371f0ee30ac7207faa4cd4dcfc091407be0d4aafca6bbdb"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) r6 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000, 0x0, 0x0, 0x3, 0x1000000, 0x0, 0x3}, 0x0, 0x1000000000000, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) syz_clone(0x8020440, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d487277b9b100b4ab50a", @ANYRES32, @ANYRES8=r4], 0xfe33) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES8=0x0], 0x9a) r7 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r7, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000100100000100000000"], 0x18}, 0x404f444) r8 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1ff}, 0x114905, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5}, 0x0, 0x1, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, 0xffffffffffffffff) r9 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r9, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @local}}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000100100008ae4186e0000000000000000100000ef9ca6c42655e1600000", @ANYRESDEC=r7, @ANYRESDEC=r0], 0x28}, 0xfc40) 598.751246ms ago: executing program 0 (id=2777): r0 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="02", 0x1}, {0x0, 0x500}], 0x2}, 0x400c090) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x7fffffffffffffff}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x9, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r1, r2, 0x0, 0x0, 0x0}, 0x30) 0s ago: executing program 0 (id=2778): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffff9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x50) (fail_nth: 4) kernel console output (not intermixed with test programs): c RSI: 0000200000000080 RDI: 000000000000000a [ 354.435070][T11146] RBP: 00007fa9397bf090 R08: 0000000000000000 R09: 0000000000000000 [ 354.443061][T11146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 354.451056][T11146] R13: 00007fa938c16038 R14: 00007fa938c15fa0 R15: 00007fff92f4dbc8 [ 354.459055][T11146] [ 355.132922][T11153] netlink: 'syz.0.1863': attribute type 10 has an invalid length. [ 355.234023][T11152] delete_channel: no stack [ 355.409990][T11164] netlink: 'syz.2.1865': attribute type 10 has an invalid length. [ 355.426211][T11164] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1865'. [ 355.447309][T11164] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 355.960824][T11181] FAULT_INJECTION: forcing a failure. [ 355.960824][T11181] name failslab, interval 1, probability 0, space 0, times 0 [ 355.976632][T11181] CPU: 0 PID: 11181 Comm: syz.3.1875 Not tainted syzkaller #0 [ 355.984166][T11181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 355.994271][T11181] Call Trace: [ 355.997584][T11181] [ 356.000634][T11181] dump_stack_lvl+0x18c/0x250 [ 356.005354][T11181] ? sctp_sendmsg+0x1575/0x28c0 [ 356.010251][T11181] ? ___sys_sendmsg+0x2a6/0x360 [ 356.015186][T11181] ? show_regs_print_info+0x20/0x20 [ 356.020427][T11181] ? load_image+0x400/0x400 [ 356.025001][T11181] should_fail_ex+0x39d/0x4d0 [ 356.029729][T11181] should_failslab+0x9/0x20 [ 356.034247][T11181] slab_pre_alloc_hook+0x59/0x310 [ 356.039288][T11181] ? sctp_add_bind_addr+0x8c/0x360 [ 356.044417][T11181] __kmem_cache_alloc_node+0x53/0x250 [ 356.049891][T11181] ? sctp_add_bind_addr+0x8c/0x360 [ 356.055013][T11181] kmalloc_trace+0x2a/0xe0 [ 356.059462][T11181] sctp_add_bind_addr+0x8c/0x360 [ 356.064455][T11181] sctp_copy_local_addr_list+0x315/0x4f0 [ 356.070135][T11181] ? sctp_copy_local_addr_list+0xa5/0x4f0 [ 356.075932][T11181] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 356.082046][T11181] ? sctp_v6_is_any+0x64/0x70 [ 356.086776][T11181] ? sctp_copy_one_addr+0x8c/0x350 [ 356.091928][T11181] sctp_bind_addr_copy+0xb3/0x3c0 [ 356.097000][T11181] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 356.103361][T11181] sctp_connect_new_asoc+0x2f9/0x6a0 [ 356.108683][T11181] ? __sctp_connect+0xd80/0xd80 [ 356.113564][T11181] ? __local_bh_enable_ip+0x13a/0x1c0 [ 356.118986][T11181] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 356.124562][T11181] ? security_sctp_bind_connect+0x89/0xb0 [ 356.130319][T11181] sctp_sendmsg+0x1575/0x28c0 [ 356.135032][T11181] ? sctp_getsockopt+0xb60/0xb60 [ 356.139994][T11181] ? aa_sk_perm+0x83c/0x970 [ 356.144526][T11181] ? aa_af_perm+0x330/0x330 [ 356.149058][T11181] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 356.155499][T11181] ? sock_rps_record_flow+0x19/0x3f0 [ 356.160821][T11181] ? inet_sendmsg+0xe9/0x2f0 [ 356.165437][T11181] ? inet_send_prepare+0x260/0x260 [ 356.170611][T11181] ____sys_sendmsg+0x5ba/0x960 [ 356.175402][T11181] ? __lock_acquire+0x7d40/0x7d40 [ 356.180459][T11181] ? __asan_memset+0x22/0x40 [ 356.185081][T11181] ? __sys_sendmsg_sock+0x30/0x30 [ 356.190175][T11181] ? __import_iovec+0x5f2/0x850 [ 356.195064][T11181] ? import_iovec+0x73/0xa0 [ 356.199610][T11181] ___sys_sendmsg+0x2a6/0x360 [ 356.204307][T11181] ? get_pid_task+0x20/0x1e0 [ 356.208927][T11181] ? __sys_sendmsg+0x2a0/0x2a0 [ 356.213734][T11181] ? __lock_acquire+0x7d40/0x7d40 [ 356.218798][T11181] __se_sys_sendmsg+0x1c2/0x2b0 [ 356.223683][T11181] ? __x64_sys_sendmsg+0x80/0x80 [ 356.228661][T11181] ? lockdep_hardirqs_on+0x98/0x150 [ 356.233892][T11181] do_syscall_64+0x55/0xa0 [ 356.238329][T11181] ? clear_bhb_loop+0x40/0x90 [ 356.243030][T11181] ? clear_bhb_loop+0x40/0x90 [ 356.247736][T11181] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 356.253658][T11181] RIP: 0033:0x7fa93899acb9 [ 356.258095][T11181] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 356.277722][T11181] RSP: 002b:00007fa9397bf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 356.286166][T11181] RAX: ffffffffffffffda RBX: 00007fa938c15fa0 RCX: 00007fa93899acb9 [ 356.294159][T11181] RDX: 0000000004008045 RSI: 0000200000002dc0 RDI: 0000000000000003 [ 356.302151][T11181] RBP: 00007fa9397bf090 R08: 0000000000000000 R09: 0000000000000000 [ 356.310157][T11181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 356.318149][T11181] R13: 00007fa938c16038 R14: 00007fa938c15fa0 R15: 00007fff92f4dbc8 [ 356.326166][T11181] [ 356.623811][T11195] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1880'. [ 356.743947][T11202] netlink: 'syz.0.1881': attribute type 10 has an invalid length. [ 356.753707][T11202] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1881'. [ 356.764697][T11202] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 357.433555][T11233] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 357.441298][T11233] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 357.451742][T11233] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 357.459366][T11233] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 357.527996][T11234] netlink: 'syz.1.1895': attribute type 10 has an invalid length. [ 357.536684][T11234] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1895'. [ 357.549996][T11234] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 357.993653][T11251] netlink: 'syz.1.1910': attribute type 10 has an invalid length. [ 358.001745][T11251] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.1910'. [ 359.522984][T11261] netlink: 'syz.3.1905': attribute type 10 has an invalid length. [ 359.533330][T11261] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1905'. [ 359.545828][T11261] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 359.724235][ T5774] Bluetooth: hci1: unexpected event 0x20 length: 15 > 7 [ 359.853183][T11274] netlink: 'syz.2.1909': attribute type 4 has an invalid length. [ 360.443044][T11294] netlink: 'syz.3.1920': attribute type 10 has an invalid length. [ 360.455119][T11294] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.1920'. [ 360.469129][T11297] netlink: 6 bytes leftover after parsing attributes in process `syz.1.1921'. [ 360.480042][T11297] openvswitch: netlink: Flow actions attr not present in new flow. [ 360.489678][T11295] netlink: 'syz.2.1919': attribute type 10 has an invalid length. [ 360.500116][T11295] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1919'. [ 360.510746][T11295] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 361.660267][T11316] netlink: 'syz.1.1924': attribute type 4 has an invalid length. [ 362.157074][T11340] netlink: 'syz.2.1934': attribute type 10 has an invalid length. [ 362.173793][T11340] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1934'. [ 362.199593][T11340] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 362.326527][T11344] netlink: 'syz.0.1936': attribute type 10 has an invalid length. [ 362.334670][T11344] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.1936'. [ 364.744317][T11361] netlink: 'syz.0.1942': attribute type 4 has an invalid length. [ 364.773094][T11372] netlink: 'syz.3.1948': attribute type 10 has an invalid length. [ 364.790158][T11372] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1948'. [ 364.801035][T11372] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 365.186773][T11381] netlink: 'syz.2.1953': attribute type 10 has an invalid length. [ 365.194684][T11381] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.1953'. [ 367.505755][T11405] netlink: 'syz.3.1958': attribute type 10 has an invalid length. [ 367.530176][T11405] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1958'. [ 367.578994][T11405] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 367.615579][T11403] netlink: 'syz.2.1960': attribute type 10 has an invalid length. [ 367.634323][T11403] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1960'. [ 367.648408][T11403] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 367.869473][T11410] netlink: 'syz.0.1970': attribute type 10 has an invalid length. [ 367.898640][T11410] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.1970'. [ 367.980377][T11414] netlink: 'syz.3.1962': attribute type 4 has an invalid length. [ 369.483456][T11441] netlink: 'syz.3.1972': attribute type 10 has an invalid length. [ 369.502122][T11441] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1972'. [ 369.527521][T11441] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 369.678549][T11440] netlink: 'syz.2.1981': attribute type 4 has an invalid length. [ 369.696431][T11445] netlink: 'syz.0.1974': attribute type 10 has an invalid length. [ 369.715260][T11445] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1974'. [ 369.726979][T11448] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1975'. [ 369.744441][T11445] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 369.767141][T11448] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1975'. [ 369.793784][T11447] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1975'. [ 369.806360][T11450] netlink: 'syz.3.1976': attribute type 9 has an invalid length. [ 369.814385][T11450] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1976'. [ 369.883941][T11452] netlink: 'syz.3.1976': attribute type 9 has an invalid length. [ 369.893584][T11452] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1976'. [ 370.809335][T11464] netlink: 'syz.0.1986': attribute type 10 has an invalid length. [ 370.827801][T11464] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 371.488537][T11486] Dead loop on virtual device ip6_vti0, fix it urgently! [ 371.518322][T11487] netlink: 'syz.1.1988': attribute type 17 has an invalid length. [ 371.543287][T11487] netlink: 'syz.1.1988': attribute type 16 has an invalid length. [ 371.576408][T11490] netlink: 'syz.3.1987': attribute type 10 has an invalid length. [ 371.602182][T11490] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 371.943434][T11504] netlink: 'syz.1.1994': attribute type 10 has an invalid length. [ 371.969615][T11504] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 372.245122][T11517] netlink: 'syz.2.2007': attribute type 10 has an invalid length. [ 372.273078][T11517] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 372.521191][T11524] netlink: 'syz.3.2003': attribute type 10 has an invalid length. [ 372.559377][T11524] __nla_validate_parse: 7 callbacks suppressed [ 372.559426][T11524] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2003'. [ 372.583370][T11524] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 372.603027][T11527] netlink: 'syz.1.2011': attribute type 10 has an invalid length. [ 372.611441][T11527] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2011'. [ 372.631758][T11527] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 373.979546][T11555] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2018'. [ 374.722940][T11572] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2019'. [ 374.746710][T11572] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 375.488047][T11590] validate_nla: 1 callbacks suppressed [ 375.488065][T11590] netlink: 'syz.2.2027': attribute type 19 has an invalid length. [ 375.724732][T11600] netlink: 'syz.1.2030': attribute type 10 has an invalid length. [ 375.733806][T11600] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2030'. [ 375.755484][T11600] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 376.213229][T11615] netlink: 'syz.1.2036': attribute type 29 has an invalid length. [ 376.261151][T11615] netlink: 'syz.1.2036': attribute type 29 has an invalid length. [ 376.292353][T11615] netlink: 'syz.1.2036': attribute type 29 has an invalid length. [ 376.316485][T11615] netlink: 'syz.1.2036': attribute type 29 has an invalid length. [ 376.325008][T11615] netlink: 'syz.1.2036': attribute type 29 has an invalid length. [ 376.509195][T11622] netlink: 'syz.1.2042': attribute type 10 has an invalid length. [ 376.538942][T11622] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2042'. [ 376.636817][T11622] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 377.491229][T11655] netlink: 'syz.0.2057': attribute type 10 has an invalid length. [ 377.505341][T11655] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2057'. [ 377.524461][T11655] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 378.536977][T11665] netlink: 'syz.0.2061': attribute type 10 has an invalid length. [ 378.555592][T11665] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2061'. [ 378.566159][T11665] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 378.664829][T11673] syzkaller0: entered promiscuous mode [ 378.680669][T11673] syzkaller0: entered allmulticast mode [ 381.271244][T11699] netlink: 'syz.3.2069': attribute type 10 has an invalid length. [ 381.280515][T11699] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2069'. [ 381.291985][T11699] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 381.500477][T11705] netlink: 'syz.2.2074': attribute type 10 has an invalid length. [ 381.528745][T11705] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2074'. [ 381.569989][T11705] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 381.640727][T11716] netlink: 'syz.1.2081': attribute type 2 has an invalid length. [ 381.648740][T11716] netlink: 'syz.1.2081': attribute type 8 has an invalid length. [ 381.657014][T11716] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2081'. [ 381.708919][T11716] netlink: 'syz.1.2081': attribute type 16 has an invalid length. [ 381.716945][T11716] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2081'. [ 381.726799][T11716] bridge_slave_0: entered allmulticast mode [ 381.739076][T11719] netlink: 'syz.1.2081': attribute type 2 has an invalid length. [ 381.750753][T11719] netlink: 'syz.1.2081': attribute type 8 has an invalid length. [ 381.760538][T11719] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2081'. [ 382.127320][T11730] netlink: 56287 bytes leftover after parsing attributes in process `syz.1.2085'. [ 382.210832][T11739] netlink: 'syz.3.2087': attribute type 10 has an invalid length. [ 382.224650][T11739] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2087'. [ 382.236587][T11739] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 382.256909][T11738] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.2085'. [ 382.267063][T11738] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.2085'. [ 382.453528][T11746] netlink: 'syz.3.2092': attribute type 10 has an invalid length. [ 382.472841][T11746] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 383.229896][T11771] netlink: 'syz.1.2101': attribute type 10 has an invalid length. [ 383.255961][T11771] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 383.568738][T11779] can: request_module (can-proto-5) failed. [ 384.418237][T11809] __nla_validate_parse: 7 callbacks suppressed [ 384.418255][T11809] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2115'. [ 384.466076][T11809] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 384.765655][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.773622][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.892224][T11812] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.2117'. [ 384.902553][T11821] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.2120'. [ 384.927482][T11812] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.2117'. [ 384.945353][T11815] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.2117'. [ 385.411444][T11841] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2129'. [ 385.426397][T11841] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 385.509864][T11844] FAULT_INJECTION: forcing a failure. [ 385.509864][T11844] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 385.525453][T11844] CPU: 1 PID: 11844 Comm: syz.2.2131 Not tainted syzkaller #0 [ 385.532994][T11844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 385.543079][T11844] Call Trace: [ 385.546414][T11844] [ 385.549377][T11844] dump_stack_lvl+0x18c/0x250 [ 385.554098][T11844] ? show_regs_print_info+0x20/0x20 [ 385.559323][T11844] ? load_image+0x400/0x400 [ 385.563883][T11844] ? __might_fault+0xaa/0x120 [ 385.568605][T11844] ? __lock_acquire+0x7d40/0x7d40 [ 385.573681][T11844] should_fail_ex+0x39d/0x4d0 [ 385.578423][T11844] _copy_to_user+0x2f/0xa0 [ 385.582886][T11844] bpf_test_finish+0x4e7/0x650 [ 385.587709][T11844] ? convert___skb_to_skb+0x590/0x590 [ 385.593123][T11844] ? convert_skb_to___skb+0x420/0x420 [ 385.598554][T11844] ? slab_build_skb+0x25f/0x3f0 [ 385.603451][T11844] bpf_prog_test_run_skb+0xcc3/0x12b0 [ 385.608873][T11844] ? cpu_online+0x60/0x60 [ 385.613238][T11844] bpf_prog_test_run+0x321/0x390 [ 385.618219][T11844] __sys_bpf+0x49d/0x890 [ 385.622521][T11844] ? bpf_link_show_fdinfo+0x390/0x390 [ 385.627945][T11844] ? lock_chain_count+0x20/0x20 [ 385.632841][T11844] __x64_sys_bpf+0x7c/0x90 [ 385.637328][T11844] do_syscall_64+0x55/0xa0 [ 385.641788][T11844] ? clear_bhb_loop+0x40/0x90 [ 385.646513][T11844] ? clear_bhb_loop+0x40/0x90 [ 385.651238][T11844] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 385.657173][T11844] RIP: 0033:0x7f23bad9acb9 [ 385.661622][T11844] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 385.681263][T11844] RSP: 002b:00007f23bbbd1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 385.689720][T11844] RAX: ffffffffffffffda RBX: 00007f23bb015fa0 RCX: 00007f23bad9acb9 [ 385.697728][T11844] RDX: 0000000000000050 RSI: 0000200000000640 RDI: 000000000000000a [ 385.705746][T11844] RBP: 00007f23bbbd1090 R08: 0000000000000000 R09: 0000000000000000 [ 385.713756][T11844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 385.721774][T11844] R13: 00007f23bb016038 R14: 00007f23bb015fa0 R15: 00007ffe483ec708 [ 385.729800][T11844] [ 385.879446][T11854] FAULT_INJECTION: forcing a failure. [ 385.879446][T11854] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 385.898063][T11854] CPU: 1 PID: 11854 Comm: syz.2.2136 Not tainted syzkaller #0 [ 385.905599][T11854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 385.915702][T11854] Call Trace: [ 385.919029][T11854] [ 385.922009][T11854] dump_stack_lvl+0x18c/0x250 [ 385.926748][T11854] ? show_regs_print_info+0x20/0x20 [ 385.932011][T11854] ? load_image+0x400/0x400 [ 385.936577][T11854] ? __lock_acquire+0x7d40/0x7d40 [ 385.941660][T11854] ? snprintf+0xe9/0x140 [ 385.945954][T11854] should_fail_ex+0x39d/0x4d0 [ 385.950695][T11854] _copy_to_user+0x2f/0xa0 [ 385.955159][T11854] simple_read_from_buffer+0xe7/0x150 [ 385.960593][T11854] proc_fail_nth_read+0x1e8/0x260 [ 385.965668][T11854] ? proc_fault_inject_write+0x360/0x360 [ 385.971357][T11854] ? fsnotify_perm+0x271/0x5e0 [ 385.976175][T11854] ? proc_fault_inject_write+0x360/0x360 [ 385.981864][T11854] vfs_read+0x28b/0x970 [ 385.986075][T11854] ? kernel_read+0x1e0/0x1e0 [ 385.990824][T11854] ? __fget_files+0x28/0x4b0 [ 385.995457][T11854] ? __fget_files+0x28/0x4b0 [ 386.000115][T11854] ? __fget_files+0x43d/0x4b0 [ 386.004847][T11854] ? __fdget_pos+0x2a3/0x330 [ 386.009495][T11854] ? ksys_read+0x75/0x260 [ 386.013897][T11854] ksys_read+0x150/0x260 [ 386.018202][T11854] ? vfs_write+0x990/0x990 [ 386.022665][T11854] ? lockdep_hardirqs_on+0x98/0x150 [ 386.027910][T11854] do_syscall_64+0x55/0xa0 [ 386.032372][T11854] ? clear_bhb_loop+0x40/0x90 [ 386.037109][T11854] ? clear_bhb_loop+0x40/0x90 [ 386.041957][T11854] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 386.047899][T11854] RIP: 0033:0x7f23bad5b58e [ 386.052350][T11854] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 386.071994][T11854] RSP: 002b:00007f23bbbd0fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 386.080458][T11854] RAX: ffffffffffffffda RBX: 00007f23bbbd16c0 RCX: 00007f23bad5b58e [ 386.088483][T11854] RDX: 000000000000000f RSI: 00007f23bbbd10a0 RDI: 0000000000000006 [ 386.096520][T11854] RBP: 00007f23bbbd1090 R08: 0000000000000000 R09: 0000000000000000 [ 386.104532][T11854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 386.112547][T11854] R13: 00007f23bb016038 R14: 00007f23bb015fa0 R15: 00007ffe483ec708 [ 386.120574][T11854] [ 386.393833][T11871] validate_nla: 2 callbacks suppressed [ 386.393851][T11871] netlink: 'syz.2.2142': attribute type 10 has an invalid length. [ 386.422686][T11871] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2142'. [ 386.433452][T11871] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 386.560043][T11876] netlink: 'syz.0.2145': attribute type 10 has an invalid length. [ 386.587496][T11876] veth1_macvtap: left promiscuous mode [ 387.633571][T11904] netlink: 'syz.2.2154': attribute type 10 has an invalid length. [ 387.651973][T11904] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2154'. [ 387.673335][T11904] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 387.866970][T11914] netlink: 'syz.3.2158': attribute type 19 has an invalid length. [ 387.887433][T11909] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2156'. [ 388.507011][T11937] netlink: 'syz.1.2165': attribute type 10 has an invalid length. [ 388.531246][T11937] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2165'. [ 388.541993][T11937] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 389.079886][T11959] IPv6: pim6reg1: Disabled Multicast RS [ 389.208924][T11967] netlink: 'syz.3.2180': attribute type 10 has an invalid length. [ 389.218207][T11967] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 389.486963][T11975] __nla_validate_parse: 1 callbacks suppressed [ 389.486979][T11975] netlink: 207848 bytes leftover after parsing attributes in process `syz.0.2184'. [ 389.577557][T11983] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2187'. [ 389.650462][T11985] netlink: 'syz.0.2188': attribute type 7 has an invalid length. [ 389.678370][T11987] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.2189'. [ 389.731021][T11989] netlink: 6 bytes leftover after parsing attributes in process `syz.0.2190'. [ 389.741325][T11989] openvswitch: netlink: Flow actions attr not present in new flow. [ 389.776977][T11991] netlink: 'syz.3.2191': attribute type 3 has an invalid length. [ 389.784824][T11991] netlink: 13435 bytes leftover after parsing attributes in process `syz.3.2191'. [ 389.964023][T11993] netlink: 'syz.1.2192': attribute type 10 has an invalid length. [ 389.989614][T11993] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2192'. [ 390.028922][T11993] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 390.333765][T12016] FAULT_INJECTION: forcing a failure. [ 390.333765][T12016] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 390.348865][T12016] CPU: 1 PID: 12016 Comm: syz.2.2202 Not tainted syzkaller #0 [ 390.356394][T12016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 390.366482][T12016] Call Trace: [ 390.369805][T12016] [ 390.372771][T12016] dump_stack_lvl+0x18c/0x250 [ 390.377515][T12016] ? show_regs_print_info+0x20/0x20 [ 390.382744][T12016] ? load_image+0x400/0x400 [ 390.387287][T12016] ? __might_fault+0xaa/0x120 [ 390.392009][T12016] ? __lock_acquire+0x7d40/0x7d40 [ 390.397125][T12016] should_fail_ex+0x39d/0x4d0 [ 390.401850][T12016] _copy_to_user+0x2f/0xa0 [ 390.406304][T12016] bpf_test_finish+0x4e7/0x650 [ 390.411123][T12016] ? convert___skb_to_skb+0x590/0x590 [ 390.416547][T12016] ? convert_skb_to___skb+0x420/0x420 [ 390.421976][T12016] ? slab_build_skb+0x25f/0x3f0 [ 390.426856][T12016] bpf_prog_test_run_skb+0xcc3/0x12b0 [ 390.432247][T12016] ? cpu_online+0x60/0x60 [ 390.436588][T12016] bpf_prog_test_run+0x321/0x390 [ 390.441555][T12016] __sys_bpf+0x49d/0x890 [ 390.445825][T12016] ? bpf_link_show_fdinfo+0x390/0x390 [ 390.451262][T12016] ? lock_chain_count+0x20/0x20 [ 390.456168][T12016] __x64_sys_bpf+0x7c/0x90 [ 390.460631][T12016] do_syscall_64+0x55/0xa0 [ 390.465115][T12016] ? clear_bhb_loop+0x40/0x90 [ 390.469865][T12016] ? clear_bhb_loop+0x40/0x90 [ 390.474589][T12016] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 390.480550][T12016] RIP: 0033:0x7f23bad9acb9 [ 390.485024][T12016] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 390.504675][T12016] RSP: 002b:00007f23bbbd1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 390.513133][T12016] RAX: ffffffffffffffda RBX: 00007f23bb015fa0 RCX: 00007f23bad9acb9 [ 390.521138][T12016] RDX: 0000000000000048 RSI: 00002000000002c0 RDI: 000000000000000a [ 390.529158][T12016] RBP: 00007f23bbbd1090 R08: 0000000000000000 R09: 0000000000000000 [ 390.537163][T12016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 390.545177][T12016] R13: 00007f23bb016038 R14: 00007f23bb015fa0 R15: 00007ffe483ec708 [ 390.553207][T12016] [ 390.886994][T12032] netlink: 'syz.3.2207': attribute type 10 has an invalid length. [ 390.897362][T12032] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2207'. [ 390.912659][T12032] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 392.088178][T12048] netlink: 'syz.3.2215': attribute type 10 has an invalid length. [ 392.098151][T12048] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2215'. [ 392.123804][T12048] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 392.362997][T12055] netlink: 'syz.3.2218': attribute type 10 has an invalid length. [ 392.386341][T12055] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2218'. [ 392.412535][T12055] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 392.918821][T12080] netlink: 'syz.2.2228': attribute type 10 has an invalid length. [ 392.926955][T12080] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2228'. [ 393.225030][T12090] netlink: 'syz.3.2232': attribute type 10 has an invalid length. [ 393.234389][T12090] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 393.928903][T12108] netlink: 'syz.0.2240': attribute type 10 has an invalid length. [ 394.217599][T12108] netlink: 'syz.0.2240': attribute type 2 has an invalid length. [ 394.367667][T12120] bridge0: entered allmulticast mode [ 394.478642][T12120] bond0: (slave bridge0): Releasing backup interface [ 394.586283][T12123] netlink: 'syz.3.2246': attribute type 10 has an invalid length. [ 394.609521][T12123] __nla_validate_parse: 2 callbacks suppressed [ 394.609559][T12123] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2246'. [ 394.640060][T12123] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 394.859468][T12137] netlink: 'syz.3.2249': attribute type 10 has an invalid length. [ 394.867997][T12137] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2249'. [ 394.878849][T12137] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 395.581550][T12140] netlink: 'syz.1.2251': attribute type 1 has an invalid length. [ 395.590703][T12140] netlink: 154788 bytes leftover after parsing attributes in process `syz.1.2251'. [ 396.158479][T12159] netlink: 'syz.2.2257': attribute type 10 has an invalid length. [ 396.560669][T12163] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2257'. [ 396.630995][T12156] 8021q: adding VLAN 0 to HW filter on device bond0 [ 396.761993][T12156] team0: Port device bond0 added [ 396.798593][T12168] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2258'. [ 396.890321][T12168] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 397.150889][T12180] validate_nla: 3 callbacks suppressed [ 397.150905][T12180] netlink: 'syz.2.2261': attribute type 10 has an invalid length. [ 397.166214][T12180] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2261'. [ 397.175942][T12180] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 397.192355][T12181] netlink: 'syz.0.2272': attribute type 10 has an invalid length. [ 397.200720][T12181] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2272'. [ 397.211119][T12181] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 397.931690][T12209] sit0: entered allmulticast mode [ 397.967787][T12209] sit0: entered promiscuous mode [ 398.383460][T12223] netlink: 'syz.2.2278': attribute type 10 has an invalid length. [ 398.392872][T12223] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2278'. [ 398.405803][T12223] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 398.870634][T12240] netlink: 'syz.2.2288': attribute type 10 has an invalid length. [ 398.882143][T12240] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2288'. [ 398.893547][T12240] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 398.910396][T12243] netlink: 'syz.3.2287': attribute type 10 has an invalid length. [ 398.926537][T12243] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2287'. [ 398.951889][T12243] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 399.138153][T12252] netlink: 'syz.0.2291': attribute type 10 has an invalid length. [ 399.166159][T12252] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 399.392234][T12264] netlink: 'syz.1.2299': attribute type 10 has an invalid length. [ 399.420014][T12264] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 399.686110][T12275] netlink: 'syz.0.2302': attribute type 10 has an invalid length. [ 399.694617][T12275] __nla_validate_parse: 2 callbacks suppressed [ 399.694632][T12275] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2302'. [ 399.739927][T12275] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 399.770073][T12281] netlink: 'syz.2.2305': attribute type 10 has an invalid length. [ 399.787493][T12281] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2305'. [ 399.800495][T12281] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 400.390601][T12296] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.2311'. [ 400.512563][T12296] netlink: 'syz.0.2311': attribute type 29 has an invalid length. [ 400.631021][T12292] netlink: 154788 bytes leftover after parsing attributes in process `syz.2.2310'. [ 400.978828][T12308] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2314'. [ 400.994118][T12308] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 402.134482][T12326] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2319'. [ 402.144459][T12326] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 402.479860][T12337] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.2322'. [ 402.510358][T12337] validate_nla: 7 callbacks suppressed [ 402.510392][T12337] netlink: 'syz.3.2322': attribute type 29 has an invalid length. [ 402.548569][T12337] netlink: 'syz.3.2322': attribute type 29 has an invalid length. [ 402.561529][T12338] netlink: 'syz.0.2330': attribute type 10 has an invalid length. [ 402.608190][T12341] netlink: 'syz.3.2322': attribute type 29 has an invalid length. [ 402.651338][T12337] netlink: 'syz.3.2322': attribute type 29 has an invalid length. [ 403.005488][T12355] netlink: 'syz.3.2327': attribute type 1 has an invalid length. [ 403.026704][T12355] netlink: 154788 bytes leftover after parsing attributes in process `syz.3.2327'. [ 403.067898][T12353] netlink: 'syz.0.2329': attribute type 10 has an invalid length. [ 403.150081][T12353] 8021q: adding VLAN 0 to HW filter on device bond0 [ 403.174408][T12353] team0: Port device bond0 added [ 403.187628][T12356] netlink: 'syz.2.2331': attribute type 10 has an invalid length. [ 403.195990][T12356] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2331'. [ 403.205667][T12356] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 403.980239][ T5776] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 403.996718][ T5776] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 404.008137][ T5776] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 404.026839][T12368] sit0: entered allmulticast mode [ 404.050494][ T5776] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 404.058820][ T5776] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 404.079638][T12372] sit0: entered promiscuous mode [ 404.085588][ T5776] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 404.318451][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.358032][T12376] netlink: 'syz.2.2335': attribute type 39 has an invalid length. [ 404.488495][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.657605][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.784824][ T11] bond0: (slave netdevsim0): Releasing backup interface [ 404.795397][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.110652][T12396] netlink: 'syz.0.2345': attribute type 10 has an invalid length. [ 405.146185][T12396] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2345'. [ 405.181726][T12396] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 405.244508][T12369] chnl_net:caif_netlink_parms(): no params data found [ 405.950910][T12369] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.958362][T12369] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.966431][T12369] bridge_slave_0: entered allmulticast mode [ 405.973542][T12369] bridge_slave_0: entered promiscuous mode [ 406.028472][T12369] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.036195][T12369] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.043565][T12369] bridge_slave_1: entered allmulticast mode [ 406.052005][T12369] bridge_slave_1: entered promiscuous mode [ 406.115949][ T5776] Bluetooth: hci4: command tx timeout [ 406.222941][T12369] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 406.310875][T12369] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 406.429127][T12369] team0: Port device team_slave_0 added [ 406.514619][T12369] team0: Port device team_slave_1 added [ 406.806027][T12369] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 406.850039][T12369] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 406.889265][T12369] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 407.075653][T12369] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 407.082675][T12369] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 407.114661][T12369] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 407.361300][T12369] hsr_slave_0: entered promiscuous mode [ 407.369996][T12369] hsr_slave_1: entered promiscuous mode [ 407.376955][T12369] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 407.384560][T12369] Cannot create hsr debugfs directory [ 407.711798][ T11] hsr_slave_0: left promiscuous mode [ 407.720116][ T11] hsr_slave_1: left promiscuous mode [ 407.744289][ T11] veth0_macvtap: left promiscuous mode [ 407.750573][ T11] veth1_vlan: left promiscuous mode [ 407.757120][ T11] veth0_vlan: left promiscuous mode [ 408.034290][ T11] team0 (unregistering): Port device veth1_macvtap removed [ 408.127128][ T11] team0 (unregistering): Port device vlan0 removed [ 408.195653][ T5776] Bluetooth: hci4: command tx timeout [ 408.389469][ T11] team0 (unregistering): Port device team_slave_1 removed [ 408.432363][ T11] team0 (unregistering): Port device C removed [ 408.476259][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 408.786641][ T11] team0 (unregistering): Port device bond0 removed [ 408.814452][ T11] bond0 (unregistering): Released all slaves [ 409.316785][T12369] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 409.326829][T12369] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 409.337571][T12369] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 409.347432][T12369] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 409.440147][T12369] 8021q: adding VLAN 0 to HW filter on device bond0 [ 409.461961][T12369] 8021q: adding VLAN 0 to HW filter on device team0 [ 409.476936][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.484152][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 409.502499][T10465] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.510023][T10465] bridge0: port 2(bridge_slave_1) entered forwarding state [ 409.733147][T12369] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 409.780159][T12369] veth0_vlan: entered promiscuous mode [ 409.793022][T12369] veth1_vlan: entered promiscuous mode [ 409.820505][T12369] veth0_macvtap: entered promiscuous mode [ 409.830185][T12369] veth1_macvtap: entered promiscuous mode [ 409.850964][T12369] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 409.869905][T12369] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 409.882522][T12369] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.892161][T12369] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.901532][T12369] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.910459][T12369] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.977271][ T146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 409.986388][ T146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 410.015397][ T146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 410.023342][ T146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 410.114137][T12440] validate_nla: 1 callbacks suppressed [ 410.114174][T12440] netlink: 'syz.1.2341': attribute type 10 has an invalid length. [ 410.131764][T12440] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2341'. [ 410.186732][T12440] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 410.197461][T12440] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 410.300585][ T5776] Bluetooth: hci4: command tx timeout [ 410.313967][T12440] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 410.763845][T12452] netlink: 'syz.1.2354': attribute type 10 has an invalid length. [ 410.796392][T12452] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2354'. [ 410.839177][T12452] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 410.928980][T12454] netlink: 'syz.0.2365': attribute type 21 has an invalid length. [ 410.957474][T12454] netlink: 176 bytes leftover after parsing attributes in process `syz.0.2365'. [ 411.695937][T12461] bridge0: entered allmulticast mode [ 411.758876][T12461] bridge_slave_1: left allmulticast mode [ 411.771117][T12461] bridge_slave_1: left promiscuous mode [ 411.779810][T12461] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.847715][T12461] bond0: (slave bridge0): Releasing backup interface [ 411.869614][T12468] netlink: 'syz.0.2367': attribute type 27 has an invalid length. [ 411.881713][T12468] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2367'. [ 412.293883][T12478] netlink: 'syz.1.2372': attribute type 27 has an invalid length. [ 412.305489][T12478] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2372'. [ 412.365493][ T5776] Bluetooth: hci4: command tx timeout [ 412.621674][T12490] netlink: 'syz.2.2366': attribute type 10 has an invalid length. [ 412.636367][T12490] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2366'. [ 412.660780][T12490] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 413.056129][T12499] netlink: 'syz.2.2373': attribute type 10 has an invalid length. [ 413.633316][T12505] netlink: 'syz.1.2385': attribute type 10 has an invalid length. [ 413.709079][T12505] veth1_macvtap: left promiscuous mode [ 413.742113][ T5774] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 413.753435][ T5774] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 413.761922][ T5774] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 413.773566][ T5774] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 413.782254][ T5774] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 413.791162][ T5774] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 414.152246][T12509] chnl_net:caif_netlink_parms(): no params data found [ 414.291494][T12509] bridge0: port 1(bridge_slave_0) entered blocking state [ 414.299641][T12509] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.307414][T12509] bridge_slave_0: entered allmulticast mode [ 414.317038][T12509] bridge_slave_0: entered promiscuous mode [ 414.328605][T12509] bridge0: port 2(bridge_slave_1) entered blocking state [ 414.336456][T12509] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.343828][T12509] bridge_slave_1: entered allmulticast mode [ 414.352664][T12509] bridge_slave_1: entered promiscuous mode [ 414.404364][T12509] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 414.419809][T12509] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 414.486893][T12509] team0: Port device team_slave_0 added [ 414.515637][T12509] team0: Port device team_slave_1 added [ 414.572548][T12509] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 414.585992][T12509] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 414.620365][T12509] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 414.636228][T12509] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 414.643498][T12509] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 414.671032][T12509] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 414.734130][T12509] hsr_slave_0: entered promiscuous mode [ 414.757985][T12509] hsr_slave_1: entered promiscuous mode [ 415.090416][T12509] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.157386][T12532] netlink: 'syz.0.2391': attribute type 10 has an invalid length. [ 415.268208][T12509] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.295782][T12537] netlink: 'syz.2.2386': attribute type 10 has an invalid length. [ 415.390198][T12509] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.527654][T12509] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.888458][ T5776] Bluetooth: hci1: command tx timeout [ 417.966039][ T5776] Bluetooth: hci1: command tx timeout [ 418.633475][T12509] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 418.659640][T12554] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2393'. [ 418.676850][T12509] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 418.698454][T12509] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 418.723337][T12509] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 418.920115][T12509] 8021q: adding VLAN 0 to HW filter on device bond0 [ 418.953880][T12509] 8021q: adding VLAN 0 to HW filter on device team0 [ 418.998016][T10466] bridge0: port 1(bridge_slave_0) entered blocking state [ 419.005254][T10466] bridge0: port 1(bridge_slave_0) entered forwarding state [ 419.027627][T10466] bridge0: port 2(bridge_slave_1) entered blocking state [ 419.034833][T10466] bridge0: port 2(bridge_slave_1) entered forwarding state [ 419.160027][T12570] netlink: 'syz.0.2396': attribute type 10 has an invalid length. [ 419.459731][T12582] netlink: 'syz.2.2401': attribute type 2 has an invalid length. [ 419.492263][T12582] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2401'. [ 419.539666][T12509] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 419.663925][T12509] veth0_vlan: entered promiscuous mode [ 419.691085][T12509] veth1_vlan: entered promiscuous mode [ 419.770287][T12509] veth0_macvtap: entered promiscuous mode [ 419.807864][T12595] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2407'. [ 419.817964][T12595] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 419.846421][T12595] FAULT_INJECTION: forcing a failure. [ 419.846421][T12595] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 419.867614][T12509] veth1_macvtap: entered promiscuous mode [ 419.908897][T12595] CPU: 0 PID: 12595 Comm: syz.2.2407 Not tainted syzkaller #0 [ 419.916459][T12595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 419.923498][T12509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 419.926546][T12595] Call Trace: [ 419.926584][T12595] [ 419.926594][T12595] dump_stack_lvl+0x18c/0x250 [ 419.945397][T12509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.947954][T12595] ? show_regs_print_info+0x20/0x20 [ 419.947985][T12595] ? load_image+0x400/0x400 [ 419.967573][T12595] ? __might_fault+0xaa/0x120 [ 419.972315][T12595] ? __lock_acquire+0x7d40/0x7d40 [ 419.977390][T12595] should_fail_ex+0x39d/0x4d0 [ 419.982135][T12595] _copy_from_user+0x2f/0xe0 [ 419.986769][T12595] kstrtouint_from_user+0xde/0x170 [ 419.991929][T12595] ? kstrtol_from_user+0x190/0x190 [ 419.997017][T12509] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 419.997100][T12595] proc_fail_nth_write+0x8f/0x250 [ 420.009346][T12595] ? proc_fail_nth_read+0x260/0x260 [ 420.014626][T12595] ? proc_fail_nth_read+0x260/0x260 [ 420.019892][T12595] vfs_write+0x296/0x990 [ 420.024206][T12595] ? file_end_write+0x250/0x250 [ 420.029109][T12595] ? __fget_files+0x28/0x4b0 [ 420.033739][T12595] ? __fget_files+0x28/0x4b0 [ 420.038369][T12595] ? __fget_files+0x43d/0x4b0 [ 420.043109][T12595] ? __fdget_pos+0x2a3/0x330 [ 420.047763][T12595] ? ksys_write+0x75/0x260 [ 420.052230][T12595] ksys_write+0x150/0x260 [ 420.056630][T12595] ? __ia32_sys_read+0x90/0x90 [ 420.061458][T12595] ? lockdep_hardirqs_on+0x98/0x150 [ 420.066705][T12595] do_syscall_64+0x55/0xa0 [ 420.071182][T12595] ? clear_bhb_loop+0x40/0x90 [ 420.075913][T12595] ? clear_bhb_loop+0x40/0x90 [ 420.080648][T12595] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 420.086603][T12595] RIP: 0033:0x7f23bad5b58e [ 420.086630][T12509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 420.091070][T12595] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 420.091096][T12595] RSP: 002b:00007f23bbbd0fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 420.091124][T12595] RAX: ffffffffffffffda RBX: 00007f23bbbd16c0 RCX: 00007f23bad5b58e [ 420.114843][T12509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.121158][T12595] RDX: 0000000000000001 RSI: 00007f23bbbd10a0 RDI: 0000000000000007 [ 420.121177][T12595] RBP: 00007f23bbbd1090 R08: 0000000000000000 R09: 0000000000000000 [ 420.121190][T12595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 420.121201][T12595] R13: 00007f23bb016038 R14: 00007f23bb015fa0 R15: 00007ffe483ec708 [ 420.121236][T12595] [ 420.188086][T12509] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 420.195590][ T5776] Bluetooth: hci1: command tx timeout [ 420.204085][T12509] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.213435][T12509] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.226549][T12509] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.237431][T12509] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.369084][T12605] netlink: 'syz.2.2410': attribute type 10 has an invalid length. [ 420.384382][T10466] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 420.415179][T10466] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 420.452183][T10466] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 420.461428][T10466] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 420.967487][T12622] netlink: 'syz.2.2413': attribute type 10 has an invalid length. [ 421.479613][T12622] bond0: (slave bond_slave_0): Releasing backup interface [ 421.595403][T12627] netlink: 'syz.0.2418': attribute type 10 has an invalid length. [ 421.603948][T12612] delete_channel: no stack [ 421.723899][T12631] netlink: 'syz.0.2421': attribute type 10 has an invalid length. [ 421.753355][T12631] team0: Device ipvlan1 failed to register rx_handler [ 422.009266][T12646] FAULT_INJECTION: forcing a failure. [ 422.009266][T12646] name failslab, interval 1, probability 0, space 0, times 0 [ 422.035054][T12646] CPU: 1 PID: 12646 Comm: syz.0.2428 Not tainted syzkaller #0 [ 422.042589][T12646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 422.052684][T12646] Call Trace: [ 422.056045][T12646] [ 422.059054][T12646] dump_stack_lvl+0x18c/0x250 [ 422.063775][T12646] ? show_regs_print_info+0x20/0x20 [ 422.069029][T12646] ? load_image+0x400/0x400 [ 422.073598][T12646] ? __might_sleep+0xe0/0xe0 [ 422.078246][T12646] ? __lock_acquire+0x7d40/0x7d40 [ 422.083419][T12646] should_fail_ex+0x39d/0x4d0 [ 422.088182][T12646] should_failslab+0x9/0x20 [ 422.092750][T12646] slab_pre_alloc_hook+0x59/0x310 [ 422.097826][T12646] kmem_cache_alloc_node+0x60/0x320 [ 422.103077][T12646] ? __alloc_skb+0x103/0x2c0 [ 422.107723][T12646] __alloc_skb+0x103/0x2c0 [ 422.112203][T12646] __ip6_append_data+0x2abc/0x3c50 [ 422.117417][T12646] ? udpv6_sendmsg+0x2390/0x2390 [ 422.122413][T12646] ? mark_lock+0x94/0x320 [ 422.126790][T12646] ? ip6_setup_cork+0xfe0/0xfe0 [ 422.131699][T12646] ? __local_bh_enable_ip+0x13a/0x1c0 [ 422.137124][T12646] ip6_append_data+0x1b0/0x350 [ 422.141972][T12646] ? udpv6_sendmsg+0x2390/0x2390 [ 422.146955][T12646] udpv6_sendmsg+0xc37/0x2390 [ 422.151701][T12646] ? udpv6_sendmsg+0x2390/0x2390 [ 422.156706][T12646] ? udp_v6_early_demux+0xf80/0xf80 [ 422.161971][T12646] ? __lock_acquire+0x1273/0x7d40 [ 422.167090][T12646] ? inet_send_prepare+0x5c/0x260 [ 422.172171][T12646] ? inet6_sendmsg+0x5f/0xd0 [ 422.176807][T12646] ? inet6_compat_ioctl+0x3c0/0x3c0 [ 422.182061][T12646] ____sys_sendmsg+0x5ba/0x960 [ 422.186870][T12646] ? __asan_memset+0x22/0x40 [ 422.191504][T12646] ? __sys_sendmsg_sock+0x30/0x30 [ 422.196560][T12646] ? __import_iovec+0x5f2/0x850 [ 422.201491][T12646] ? import_iovec+0x73/0xa0 [ 422.206062][T12646] ___sys_sendmsg+0x2a6/0x360 [ 422.210793][T12646] ? get_pid_task+0x20/0x1e0 [ 422.215429][T12646] ? __sys_sendmsg+0x2a0/0x2a0 [ 422.220252][T12646] ? __lock_acquire+0x7d40/0x7d40 [ 422.225338][T12646] __se_sys_sendmsg+0x1c2/0x2b0 [ 422.230240][T12646] ? __x64_sys_sendmsg+0x80/0x80 [ 422.235246][T12646] ? lockdep_hardirqs_on+0x98/0x150 [ 422.240521][T12646] do_syscall_64+0x55/0xa0 [ 422.244980][T12646] ? clear_bhb_loop+0x40/0x90 [ 422.249711][T12646] ? clear_bhb_loop+0x40/0x90 [ 422.254450][T12646] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 422.260418][T12646] RIP: 0033:0x7ff69999acb9 [ 422.264902][T12646] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 422.275726][ T5776] Bluetooth: hci1: command tx timeout [ 422.284537][T12646] RSP: 002b:00007ff69a7e1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 422.298443][T12646] RAX: ffffffffffffffda RBX: 00007ff699c15fa0 RCX: 00007ff69999acb9 [ 422.306447][T12646] RDX: 0000000000040801 RSI: 0000200000000080 RDI: 0000000000000003 [ 422.314522][T12646] RBP: 00007ff69a7e1090 R08: 0000000000000000 R09: 0000000000000000 [ 422.322540][T12646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 422.330552][T12646] R13: 00007ff699c16038 R14: 00007ff699c15fa0 R15: 00007ffcbc7bc228 [ 422.338589][T12646] [ 423.173942][T12669] netlink: 'syz.2.2436': attribute type 27 has an invalid length. [ 423.239012][T12659] delete_channel: no stack [ 423.251424][T12659] delete_channel: no stack [ 423.256804][ T5774] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 423.276892][ T5774] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 423.299525][ T5774] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 423.310630][ T5774] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 423.320704][ T5774] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 423.335748][ T5774] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 423.503184][ T66] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.553951][T12683] netlink: 'syz.3.2440': attribute type 29 has an invalid length. [ 423.567446][T12683] netlink: 'syz.3.2440': attribute type 29 has an invalid length. [ 423.589351][T12685] netlink: 'syz.3.2440': attribute type 29 has an invalid length. [ 423.602126][T12683] netlink: 'syz.3.2440': attribute type 29 has an invalid length. [ 423.624833][T12683] netlink: 'syz.3.2440': attribute type 29 has an invalid length. [ 423.662448][ T66] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.722277][T12687] FAULT_INJECTION: forcing a failure. [ 423.722277][T12687] name failslab, interval 1, probability 0, space 0, times 0 [ 423.739055][T12687] CPU: 0 PID: 12687 Comm: syz.2.2441 Not tainted syzkaller #0 [ 423.746742][T12687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 423.756841][T12687] Call Trace: [ 423.760153][T12687] [ 423.763133][T12687] dump_stack_lvl+0x18c/0x250 [ 423.767867][T12687] ? show_regs_print_info+0x20/0x20 [ 423.773112][T12687] ? load_image+0x400/0x400 [ 423.777678][T12687] ? __might_sleep+0xe0/0xe0 [ 423.782312][T12687] ? __lock_acquire+0x7d40/0x7d40 [ 423.787381][T12687] should_fail_ex+0x39d/0x4d0 [ 423.792107][T12687] should_failslab+0x9/0x20 [ 423.796659][T12687] slab_pre_alloc_hook+0x59/0x310 [ 423.801742][T12687] ? genl_start+0x1c9/0x6b0 [ 423.806299][T12687] __kmem_cache_alloc_node+0x53/0x250 [ 423.811748][T12687] ? genl_start+0x1c9/0x6b0 [ 423.816298][T12687] kmalloc_trace+0x2a/0xe0 [ 423.820784][T12687] genl_start+0x1c9/0x6b0 [ 423.825169][T12687] ? netlink_lookup+0x30/0x200 [ 423.829985][T12687] __netlink_dump_start+0x4a9/0x810 [ 423.835240][T12687] genl_family_rcv_msg_dumpit+0x214/0x310 [ 423.841023][T12687] ? genl_rcv_msg+0x7a0/0x7a0 [ 423.845749][T12687] ? genl_get_cmd+0x692/0x920 [ 423.850468][T12687] ? genl_family_rcv_msg_doit+0x310/0x310 [ 423.856215][T12687] ? genl_start+0x6b0/0x6b0 [ 423.860745][T12687] ? genl_dumpit+0x1a0/0x1a0 [ 423.865391][T12687] genl_rcv_msg+0x5e5/0x7a0 [ 423.869937][T12687] ? genl_bind+0x360/0x360 [ 423.874379][T12687] ? ethnl_default_doit+0xb80/0xb80 [ 423.879599][T12687] ? ethnl_default_start+0x560/0x560 [ 423.884910][T12687] ? ethnl_default_dumpit+0x8a0/0x8a0 [ 423.890314][T12687] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 423.896955][T12687] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 423.903575][T12687] netlink_rcv_skb+0x241/0x4d0 [ 423.908373][T12687] ? genl_bind+0x360/0x360 [ 423.912812][T12687] ? netlink_ack+0x1180/0x1180 [ 423.917610][T12687] ? __lock_acquire+0x7d40/0x7d40 [ 423.922661][T12687] ? net_generic+0x1e/0x240 [ 423.927220][T12687] ? down_read+0x1ac/0x2e0 [ 423.931667][T12687] genl_rcv+0x28/0x40 [ 423.935678][T12687] netlink_unicast+0x751/0x8d0 [ 423.940490][T12687] netlink_sendmsg+0x8d0/0xbf0 [ 423.945296][T12687] ? netlink_getsockopt+0x590/0x590 [ 423.950546][T12687] ? aa_sock_msg_perm+0x94/0x150 [ 423.955517][T12687] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 423.960826][T12687] ? security_socket_sendmsg+0x80/0xa0 [ 423.966303][T12687] ? netlink_getsockopt+0x590/0x590 [ 423.971539][T12687] ____sys_sendmsg+0x5ba/0x960 [ 423.976334][T12687] ? __asan_memset+0x22/0x40 [ 423.981019][T12687] ? __sys_sendmsg_sock+0x30/0x30 [ 423.986073][T12687] ? __import_iovec+0x5f2/0x850 [ 423.990960][T12687] ? import_iovec+0x73/0xa0 [ 423.995497][T12687] ___sys_sendmsg+0x2a6/0x360 [ 424.000212][T12687] ? get_pid_task+0x20/0x1e0 [ 424.004827][T12687] ? __sys_sendmsg+0x2a0/0x2a0 [ 424.009633][T12687] ? __lock_acquire+0x7d40/0x7d40 [ 424.014709][T12687] __se_sys_sendmsg+0x1c2/0x2b0 [ 424.019595][T12687] ? __x64_sys_sendmsg+0x80/0x80 [ 424.024570][T12687] ? lockdep_hardirqs_on+0x98/0x150 [ 424.029797][T12687] do_syscall_64+0x55/0xa0 [ 424.034248][T12687] ? clear_bhb_loop+0x40/0x90 [ 424.038952][T12687] ? clear_bhb_loop+0x40/0x90 [ 424.043653][T12687] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 424.049573][T12687] RIP: 0033:0x7f23bad9acb9 [ 424.054030][T12687] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 424.073714][T12687] RSP: 002b:00007f23bbbd1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 424.082171][T12687] RAX: ffffffffffffffda RBX: 00007f23bb015fa0 RCX: 00007f23bad9acb9 [ 424.090169][T12687] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 424.098165][T12687] RBP: 00007f23bbbd1090 R08: 0000000000000000 R09: 0000000000000000 [ 424.106157][T12687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 424.114153][T12687] R13: 00007f23bb016038 R14: 00007f23bb015fa0 R15: 00007ffe483ec708 [ 424.122161][T12687] [ 424.149871][ T66] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.180834][T12689] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2442'. [ 424.190837][T12689] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 424.198680][T12689] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 424.209381][T12689] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 424.293792][ T66] bond0: (slave netdevsim0): Releasing backup interface [ 424.304871][ T66] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.690174][T12675] chnl_net:caif_netlink_parms(): no params data found [ 425.401259][ T5774] Bluetooth: hci0: command tx timeout [ 426.237463][T12718] delete_channel: no stack [ 427.393722][T12675] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.401329][T12675] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.408723][T12675] bridge_slave_0: entered allmulticast mode [ 427.416550][T12675] bridge_slave_0: entered promiscuous mode [ 427.432529][T12725] validate_nla: 1 callbacks suppressed [ 427.432542][T12725] netlink: 'syz.3.2450': attribute type 10 has an invalid length. [ 427.451419][T12725] bond0: (slave bond_slave_0): Releasing backup interface [ 427.475360][ T5774] Bluetooth: hci0: command tx timeout [ 427.518746][T12675] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.530409][T12675] bridge0: port 2(bridge_slave_1) entered disabled state [ 427.543825][T12675] bridge_slave_1: entered allmulticast mode [ 427.553863][T12675] bridge_slave_1: entered promiscuous mode [ 427.614978][T12675] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 427.629387][T12675] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 427.847542][T12675] team0: Port device team_slave_0 added [ 427.867205][T12675] team0: Port device team_slave_1 added [ 427.931781][T12735] netlink: 'syz.3.2453': attribute type 10 has an invalid length. [ 427.941499][T12735] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2453'. [ 427.953236][T12735] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 428.044219][T12675] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 428.053051][T12675] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 428.079499][T12675] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 428.104341][T12675] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 428.112544][T12675] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 428.139161][T12675] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 428.185235][ T66] bond0: (slave wlan1): Releasing backup interface [ 428.246246][T12675] hsr_slave_0: entered promiscuous mode [ 428.256443][T12675] hsr_slave_1: entered promiscuous mode [ 428.262804][T12675] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 428.270537][T12675] Cannot create hsr debugfs directory [ 428.454585][ T66] hsr_slave_0: left promiscuous mode [ 428.465852][ T66] hsr_slave_1: left promiscuous mode [ 428.510297][ T66] veth0_macvtap: left promiscuous mode [ 428.516423][ T66] veth1_vlan: left promiscuous mode [ 428.521829][ T66] veth0_vlan: left promiscuous mode [ 429.557201][ T5774] Bluetooth: hci0: command tx timeout [ 430.628809][ T66] team0 (unregistering): Port device team_slave_1 removed [ 430.669098][ T66] team0 (unregistering): Port device C removed [ 430.711917][ T66] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 430.953291][ T66] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 430.984758][ T66] team0 (unregistering): Port device bond0 removed [ 431.017075][ T66] bond0 (unregistering): Released all slaves [ 431.542334][T12743] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.552265][T12743] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.574333][T12743] bridge0: entered promiscuous mode [ 431.636109][ T5774] Bluetooth: hci0: command tx timeout [ 431.830588][T12675] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 431.888087][T12675] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 431.925892][T12675] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 431.956221][T12675] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 431.974020][T12749] netlink: 149044 bytes leftover after parsing attributes in process `syz.2.2457'. [ 432.680783][T12675] 8021q: adding VLAN 0 to HW filter on device bond0 [ 432.725090][T12675] 8021q: adding VLAN 0 to HW filter on device team0 [ 432.758518][ T146] bridge0: port 1(bridge_slave_0) entered blocking state [ 432.765810][ T146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 432.805347][T12770] netlink: 'syz.1.2461': attribute type 10 has an invalid length. [ 432.863074][T12770] bond0: (slave bond_slave_0): Releasing backup interface [ 432.972735][T10465] bridge0: port 2(bridge_slave_1) entered blocking state [ 432.980178][T10465] bridge0: port 2(bridge_slave_1) entered forwarding state [ 433.306167][T12675] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 433.357002][T12778] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.2465'. [ 433.387384][T12777] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.2465'. [ 433.428650][T12768] delete_channel: no stack [ 433.892925][T12675] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 434.072118][T12793] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.097604][T12793] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.190877][T12793] bridge0: entered promiscuous mode [ 434.518516][T12675] veth0_vlan: entered promiscuous mode [ 434.559818][T12675] veth1_vlan: entered promiscuous mode [ 434.641203][T12675] veth0_macvtap: entered promiscuous mode [ 434.658083][T12675] veth1_macvtap: entered promiscuous mode [ 434.729361][T12675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 434.754746][T12675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.776947][T12675] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 434.800589][T12675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 434.845218][T12675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.885207][T12675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 434.912128][T12675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.930097][T12675] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 434.968142][T12809] netlink: 'syz.3.2473': attribute type 10 has an invalid length. [ 434.990238][T12809] veth1_macvtap: left promiscuous mode [ 435.191772][T12675] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.215532][T12675] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.236735][T12675] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.255759][T12675] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.471370][T10465] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 435.505337][T10465] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 435.559729][T10465] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 435.645392][T10465] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 437.187017][T12839] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x31 [ 437.513224][ T5776] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 437.524729][T12853] netlink: 'syz.3.2488': attribute type 10 has an invalid length. [ 437.528150][ T5776] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 437.554648][ T5776] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 437.578902][T12853] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2488'. [ 437.590995][ T5776] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 437.606790][ T5776] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 437.616714][ T5776] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 437.641678][T12853] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 437.800831][T12858] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2490'. [ 437.839163][T12859] netlink: 'syz.1.2489': attribute type 29 has an invalid length. [ 437.947597][T12859] netlink: 'syz.1.2489': attribute type 29 has an invalid length. [ 438.327815][T12867] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2493'. [ 438.422309][T12871] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2494'. [ 438.584432][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.667814][T12869] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2493'. [ 438.713395][T12875] netlink: 'syz.0.2495': attribute type 10 has an invalid length. [ 438.765860][T12875] team0: Device hsr_slave_0 failed to register rx_handler [ 439.041871][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.209160][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.312666][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.355009][T12851] chnl_net:caif_netlink_parms(): no params data found [ 439.414260][T12886] netlink: 'syz.0.2497': attribute type 3 has an invalid length. [ 439.431526][T12886] netlink: 201372 bytes leftover after parsing attributes in process `syz.0.2497'. [ 439.526462][T12888] netlink: 'syz.3.2498': attribute type 10 has an invalid length. [ 439.716781][ T5776] Bluetooth: hci3: command tx timeout [ 439.911804][T12851] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.921429][T12851] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.929154][T12851] bridge_slave_0: entered allmulticast mode [ 439.936836][T12851] bridge_slave_0: entered promiscuous mode [ 439.965200][T12851] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.972457][T12851] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.982173][T12851] bridge_slave_1: entered allmulticast mode [ 440.005326][T12851] bridge_slave_1: entered promiscuous mode [ 440.034920][T12909] syz.1.2503[12909] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 440.043053][T12909] syz.1.2503[12909] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 440.090666][T12851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 440.262722][T12851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 440.491428][T12851] team0: Port device team_slave_0 added [ 440.555836][T12851] team0: Port device team_slave_1 added [ 440.560985][T12919] netlink: 'syz.1.2507': attribute type 1 has an invalid length. [ 440.576927][T12919] netlink: 'syz.1.2507': attribute type 2 has an invalid length. [ 440.585599][T12919] netlink: 'syz.1.2507': attribute type 2 has an invalid length. [ 440.593579][T12919] netlink: 'syz.1.2507': attribute type 3 has an invalid length. [ 440.613991][T12919] netlink: 'syz.1.2507': attribute type 4 has an invalid length. [ 440.622024][T12918] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2506'. [ 440.633490][T12919] netlink: 126304 bytes leftover after parsing attributes in process `syz.1.2507'. [ 440.648778][T12918] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 440.714596][T12922] bond0: entered promiscuous mode [ 440.719819][T12922] bond_slave_1: entered promiscuous mode [ 440.830053][T12851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 440.845814][T12851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 440.882114][T12851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 440.930231][T12851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 440.937426][T12851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 440.971831][T12851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 441.124382][T12851] hsr_slave_0: entered promiscuous mode [ 441.132517][T12851] hsr_slave_1: entered promiscuous mode [ 441.141178][T12851] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 441.148899][T12851] Cannot create hsr debugfs directory [ 441.562119][T12936] netlink: 201372 bytes leftover after parsing attributes in process `syz.3.2513'. [ 441.796415][ T5776] Bluetooth: hci3: command tx timeout [ 441.844033][T12943] team0: Device hsr_slave_0 failed to register rx_handler [ 441.885969][ T11] hsr_slave_0: left promiscuous mode [ 441.905525][ T11] hsr_slave_1: left promiscuous mode [ 441.922831][ T11] veth0_macvtap: left promiscuous mode [ 442.114305][T12950] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2519'. [ 442.585491][ T11] ` (unregistering): Port device team_slave_1 removed [ 442.633632][ T11] ` (unregistering): Port device team_slave_0 removed [ 442.683069][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 442.769060][ T11] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 442.949173][ T11] bond0 (unregistering): (slave `): Releasing backup interface [ 442.986078][ T11] bond0 (unregistering): Released all slaves [ 443.040063][T12946] validate_nla: 10 callbacks suppressed [ 443.040080][T12946] netlink: 'syz.0.2517': attribute type 10 has an invalid length. [ 443.054175][T12946] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2517'. [ 443.070044][T12946] net veth1_virt_wifi virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 443.080534][T12946] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 443.089022][T12946] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 443.099151][T12946] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 443.154517][T12950] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 443.490723][T12851] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 443.528039][T12851] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 443.548924][T12851] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 443.564519][T12851] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 443.749308][T12969] netlink: 'syz.1.2524': attribute type 10 has an invalid length. [ 443.810594][T12851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 443.876044][ T5776] Bluetooth: hci3: command tx timeout [ 443.892001][T12851] 8021q: adding VLAN 0 to HW filter on device team0 [ 443.906876][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.914031][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 443.988676][T10466] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.995914][T10466] bridge0: port 2(bridge_slave_1) entered forwarding state [ 444.103741][T12851] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 444.117926][T12851] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 444.206094][T12978] netlink: 'syz.0.2528': attribute type 10 has an invalid length. [ 444.224931][T12978] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2528'. [ 444.279698][T12978] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 444.544395][T12992] netlink: 'syz.3.2533': attribute type 17 has an invalid length. [ 444.552487][T12992] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2533'. [ 444.599493][T12994] netlink: 'syz.3.2533': attribute type 17 has an invalid length. [ 444.615462][T12994] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2533'. [ 444.682191][T12851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 444.778248][T12851] veth0_vlan: entered promiscuous mode [ 444.812689][T12996] netlink: 'syz.1.2534': attribute type 10 has an invalid length. [ 444.840168][T12851] veth1_vlan: entered promiscuous mode [ 444.937625][T12851] veth0_macvtap: entered promiscuous mode [ 444.950115][T12851] veth1_macvtap: entered promiscuous mode [ 444.979585][T12851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 444.990902][T12851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 445.003437][T12851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 445.016371][T12851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 445.038927][T12851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 445.058163][T12851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 445.071066][T12851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 445.091624][T12851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 445.112962][T12851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 445.139206][T12851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 445.163784][T12851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 445.177504][T12851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 445.207816][T13002] mac80211_hwsim hwsim20 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 445.233782][T12851] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.244713][T12851] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.254586][T12851] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.263772][T12851] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.390206][T13008] netlink: 'syz.1.2538': attribute type 3 has an invalid length. [ 445.419901][T13008] netlink: 201372 bytes leftover after parsing attributes in process `syz.1.2538'. [ 445.552685][T13013] netlink: 'syz.3.2540': attribute type 10 has an invalid length. [ 445.562319][T13013] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2540'. [ 445.572697][T13013] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 445.608583][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 445.633572][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 445.723274][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 445.749148][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 445.831595][T13020] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2543'. [ 445.955931][ T5776] Bluetooth: hci3: command tx timeout [ 445.995967][ T5776] Bluetooth: hci0: unexpected event 0x17 length: 15 > 6 [ 446.125523][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 446.145876][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 446.829139][T13034] netlink: 'syz.2.2546': attribute type 10 has an invalid length. [ 446.896604][T13034] veth1_macvtap: left promiscuous mode [ 447.383486][T13044] netlink: 'syz.3.2550': attribute type 10 has an invalid length. [ 447.436412][T13044] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2550'. [ 447.497155][T13044] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 447.724734][T13046] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2551'. [ 447.795646][ T66] wlan1: Trigger new scan to find an IBSS to join [ 448.186199][T13059] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2555'. [ 448.217232][T13059] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.2555'. [ 451.520644][T10466] GPL: port 1(erspan0) entered disabled state [ 451.700409][T10466] erspan0 (unregistering): left allmulticast mode [ 451.744660][T10466] erspan0 (unregistering): left promiscuous mode [ 451.766046][T10466] GPL: port 1(erspan0) entered disabled state [ 452.040845][T13090] netlink: 'syz.3.2564': attribute type 10 has an invalid length. [ 452.070099][T13090] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2564'. [ 452.116205][T13090] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 453.875815][ T146] wlan1: Trigger new scan to find an IBSS to join [ 453.976165][T13102] mac80211_hwsim hwsim18 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 454.105724][T13120] netlink: 'syz.3.2574': attribute type 10 has an invalid length. [ 454.338162][T10466] bond0: (slave O3ãc¤±): Releasing backup interface [ 454.381901][T13124] netlink: 'syz.2.2576': attribute type 10 has an invalid length. [ 454.660041][T13133] netlink: 'syz.3.2578': attribute type 10 has an invalid length. [ 454.686810][T13133] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2578'. [ 454.706922][T13133] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 454.784838][ T1097] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 454.793451][T10466] hsr_slave_0: left promiscuous mode [ 454.802177][T10466] hsr_slave_1: left promiscuous mode [ 454.859983][T10466] veth1_macvtap: left promiscuous mode [ 454.869294][T10466] veth0_macvtap: left promiscuous mode [ 454.882360][T10466] veth1_vlan: left promiscuous mode [ 454.896763][T10466] veth0_vlan: left promiscuous mode [ 454.910859][T13144] FAULT_INJECTION: forcing a failure. [ 454.910859][T13144] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 454.938886][T13144] CPU: 1 PID: 13144 Comm: syz.0.2583 Not tainted syzkaller #0 [ 454.946411][T13144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 454.956511][T13144] Call Trace: [ 454.959815][T13144] [ 454.962768][T13144] dump_stack_lvl+0x18c/0x250 [ 454.967485][T13144] ? show_regs_print_info+0x20/0x20 [ 454.972705][T13144] ? load_image+0x400/0x400 [ 454.977240][T13144] ? __lock_acquire+0x7d40/0x7d40 [ 454.982302][T13144] should_fail_ex+0x39d/0x4d0 [ 454.987026][T13144] prepare_alloc_pages+0x1e2/0x5f0 [ 454.992182][T13144] __alloc_pages+0x134/0x460 [ 454.996817][T13144] ? zone_statistics+0x170/0x170 [ 455.001838][T13144] ? lockdep_hardirqs_on+0x98/0x150 [ 455.007083][T13144] ? vma_alloc_folio+0x1ce/0x8f0 [ 455.012227][T13144] __folio_alloc+0x10/0x20 [ 455.016691][T13144] vma_alloc_folio+0x47a/0x8f0 [ 455.021505][T13144] ? mpol_shared_policy_lookup+0x14b/0x1e0 [ 455.027350][T13144] shmem_alloc_folio+0x1a9/0x2a0 [ 455.032330][T13144] ? folio_put+0xd0/0xd0 [ 455.036635][T13144] ? __vm_enough_memory+0x11b/0x370 [ 455.041902][T13144] ? shmem_inode_acct_block+0x35e/0x460 [ 455.047491][T13144] shmem_alloc_and_acct_folio+0x1e6/0x6d0 [ 455.053245][T13144] ? put_swap_device+0x230/0x230 [ 455.058217][T13144] ? xas_load+0x12b/0x140 [ 455.062589][T13144] ? filemap_get_entry+0xce/0x3f0 [ 455.067650][T13144] ? filemap_get_entry+0xce/0x3f0 [ 455.072707][T13144] ? filemap_get_entry+0x379/0x3f0 [ 455.077855][T13144] ? page_cache_prev_miss+0x390/0x390 [ 455.083246][T13144] ? mark_lock+0x94/0x320 [ 455.087616][T13144] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 455.093645][T13144] ? lock_chain_count+0x20/0x20 [ 455.098536][T13144] shmem_get_folio_gfp+0xcde/0x2aa0 [ 455.103783][T13144] shmem_write_begin+0xf2/0x420 [ 455.108667][T13144] generic_perform_write+0x2fe/0x5c0 [ 455.113995][T13144] ? generic_file_direct_write+0x3e0/0x3e0 [ 455.119837][T13144] ? file_update_time+0x192/0x1a0 [ 455.124892][T13144] shmem_file_write_iter+0xfb/0x120 [ 455.130118][T13144] vfs_write+0x46c/0x990 [ 455.134458][T13144] ? file_end_write+0x250/0x250 [ 455.139367][T13144] ? __fget_files+0x43d/0x4b0 [ 455.144084][T13144] ? __fdget_pos+0x2a3/0x330 [ 455.148697][T13144] ? ksys_write+0x75/0x260 [ 455.153148][T13144] ksys_write+0x150/0x260 [ 455.157507][T13144] ? __ia32_sys_read+0x90/0x90 [ 455.162297][T13144] ? syscall_enter_from_user_mode+0x2e/0x80 [ 455.168220][T13144] do_syscall_64+0x55/0xa0 [ 455.172656][T13144] ? clear_bhb_loop+0x40/0x90 [ 455.177378][T13144] ? clear_bhb_loop+0x40/0x90 [ 455.182085][T13144] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 455.188008][T13144] RIP: 0033:0x7f238a59acb9 [ 455.192441][T13144] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 455.212092][T13144] RSP: 002b:00007f238b538028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 455.220535][T13144] RAX: ffffffffffffffda RBX: 00007f238a815fa0 RCX: 00007f238a59acb9 [ 455.228530][T13144] RDX: 0000000000040010 RSI: 0000200000000180 RDI: 0000000000000008 [ 455.236523][T13144] RBP: 00007f238b538090 R08: 0000000000000000 R09: 0000000000000000 [ 455.244521][T13144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 455.252519][T13144] R13: 00007f238a816038 R14: 00007f238a815fa0 R15: 00007ffd7e9fa238 [ 455.260564][T13144] [ 455.847995][T10466] team0 (unregistering): Port device macvlan0 removed [ 455.910599][T10466] team0 (unregistering): Port device vlan0 removed [ 456.392437][T10466] team0 (unregistering): Port device team_slave_1 removed [ 456.454670][T10466] team0 (unregistering): Port device team_slave_0 removed [ 456.507433][T10466] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 456.554874][T10466] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 456.733188][T10466] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 456.790674][T10466] bond0 (unregistering): Released all slaves [ 456.829438][T13142] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2582'. [ 456.907838][T13157] lo: entered allmulticast mode [ 456.930667][T13158] netlink: 'syz.1.2582': attribute type 10 has an invalid length. [ 456.947341][T13158] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2582'. [ 456.958606][T13158] dummy0: entered promiscuous mode [ 456.964638][T13158] bridge0: port 3(dummy0) entered blocking state [ 456.971551][T13158] bridge0: port 3(dummy0) entered disabled state [ 456.978579][T13158] dummy0: entered allmulticast mode [ 456.991814][T13160] lo: entered promiscuous mode [ 457.004262][T13160] lo: left allmulticast mode [ 457.014115][T13161] netlink: 211 bytes leftover after parsing attributes in process `syz.3.2585'. [ 457.040133][T13162] sit0: entered allmulticast mode [ 457.199829][T13168] netlink: 'syz.0.2589': attribute type 2 has an invalid length. [ 457.215276][T13168] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2589'. [ 457.886657][ T146] wlan1: Trigger new scan to find an IBSS to join [ 457.937359][T13194] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2596'. [ 458.078802][T13197] netlink: 'syz.0.2598': attribute type 46 has an invalid length. [ 459.600728][T13218] netlink: 211 bytes leftover after parsing attributes in process `syz.0.2600'. [ 461.788308][ T66] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 461.798057][T13219] sit0: entered allmulticast mode [ 462.258429][T13229] netlink: 'syz.1.2607': attribute type 4 has an invalid length. [ 462.275490][T13229] netlink: 140 bytes leftover after parsing attributes in process `syz.1.2607'. [ 466.555259][T13275] netlink: 'syz.0.2625': attribute type 21 has an invalid length. [ 466.723685][T13278] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2627'. [ 466.767355][T13279] netlink: 'syz.3.2626': attribute type 10 has an invalid length. [ 467.028088][T13297] FAULT_INJECTION: forcing a failure. [ 467.028088][T13297] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 467.043915][T13297] CPU: 1 PID: 13297 Comm: syz.2.2632 Not tainted syzkaller #0 [ 467.051433][T13297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 467.061546][T13297] Call Trace: [ 467.064866][T13297] [ 467.067857][T13297] dump_stack_lvl+0x18c/0x250 [ 467.072582][T13297] ? show_regs_print_info+0x20/0x20 [ 467.077836][T13297] ? load_image+0x400/0x400 [ 467.082402][T13297] ? __might_fault+0xaa/0x120 [ 467.087126][T13297] ? __lock_acquire+0x7d40/0x7d40 [ 467.092196][T13297] should_fail_ex+0x39d/0x4d0 [ 467.096935][T13297] _copy_from_user+0x2f/0xe0 [ 467.101570][T13297] ___sys_sendmsg+0x1c7/0x360 [ 467.106304][T13297] ? __sys_sendmsg+0x2a0/0x2a0 [ 467.111139][T13297] ? __lock_acquire+0x7d40/0x7d40 [ 467.116255][T13297] __se_sys_sendmsg+0x1c2/0x2b0 [ 467.121151][T13297] ? __x64_sys_sendmsg+0x80/0x80 [ 467.126154][T13297] ? lockdep_hardirqs_on+0x98/0x150 [ 467.131415][T13297] do_syscall_64+0x55/0xa0 [ 467.135871][T13297] ? clear_bhb_loop+0x40/0x90 [ 467.140595][T13297] ? clear_bhb_loop+0x40/0x90 [ 467.145318][T13297] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 467.151272][T13297] RIP: 0033:0x7f21f119acb9 [ 467.155723][T13297] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 467.175379][T13297] RSP: 002b:00007f21f20d4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 467.183818][T13297] RAX: ffffffffffffffda RBX: 00007f21f1415fa0 RCX: 00007f21f119acb9 [ 467.191813][T13297] RDX: 0000000030008850 RSI: 0000200000000940 RDI: 0000000000000003 [ 467.199810][T13297] RBP: 00007f21f20d4090 R08: 0000000000000000 R09: 0000000000000000 [ 467.207803][T13297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 467.215830][T13297] R13: 00007f21f1416038 R14: 00007f21f1415fa0 R15: 00007ffdd3c73988 [ 467.223862][T13297] [ 469.518753][T13301] netlink: 'syz.2.2634': attribute type 39 has an invalid length. [ 469.559849][T13308] netlink: 'syz.3.2636': attribute type 10 has an invalid length. [ 469.572536][T13308] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2636'. [ 469.584162][T13308] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 469.602440][T13311] netlink: 'syz.1.2637': attribute type 10 has an invalid length. [ 469.631526][T13311] batman_adv: batadv0: Adding interface: team0 [ 469.657078][T13311] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 469.683794][T13311] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 469.802939][T13317] FAULT_INJECTION: forcing a failure. [ 469.802939][T13317] name failslab, interval 1, probability 0, space 0, times 0 [ 469.816004][T13317] CPU: 0 PID: 13317 Comm: syz.3.2639 Not tainted syzkaller #0 [ 469.823510][T13317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 469.833608][T13317] Call Trace: [ 469.836948][T13317] [ 469.839923][T13317] dump_stack_lvl+0x18c/0x250 [ 469.844652][T13317] ? verify_lock_unused+0x140/0x140 [ 469.849894][T13317] ? show_regs_print_info+0x20/0x20 [ 469.855144][T13317] ? load_image+0x400/0x400 [ 469.859693][T13317] should_fail_ex+0x39d/0x4d0 [ 469.864411][T13317] should_failslab+0x9/0x20 [ 469.868960][T13317] slab_pre_alloc_hook+0x59/0x310 [ 469.874150][T13317] kmem_cache_alloc+0x5a/0x2d0 [ 469.878973][T13317] ? inet_frag_find+0x8f8/0x1ec0 [ 469.883962][T13317] inet_frag_find+0x8f8/0x1ec0 [ 469.888770][T13317] ? ip4_obj_hashfn+0x1e0/0x1e0 [ 469.893679][T13317] ? inet_frag_find+0x138/0x1ec0 [ 469.898677][T13317] ? inet_frag_destroy_rcu+0xc0/0xc0 [ 469.904015][T13317] ? arch_stack_walk+0x160/0x190 [ 469.908992][T13317] ? verify_lock_unused+0x140/0x140 [ 469.914247][T13317] ip_defrag+0x33b/0x1fa0 [ 469.918611][T13317] ? stack_trace_save+0xaa/0x100 [ 469.923585][T13317] ? __stack_depot_save+0x1f/0x630 [ 469.928735][T13317] ? __stack_depot_save+0x1f/0x630 [ 469.933880][T13317] ? __in_dev_get_rcu+0xc0/0xc0 [ 469.938762][T13317] ? bpf_clone_redirect+0x270/0x3d0 [ 469.943999][T13317] ? bpf_prog_208b094576c80b22+0x5e/0x63 [ 469.949690][T13317] ? __x64_sys_bpf+0x7c/0x90 [ 469.954309][T13317] ? do_syscall_64+0x55/0xa0 [ 469.958929][T13317] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 469.965033][T13317] ? ipv4_conntrack_defrag+0x3c5/0x5a0 [ 469.970548][T13317] ipv4_conntrack_defrag+0x3df/0x5a0 [ 469.975894][T13317] ? defrag4_net_exit+0xb0/0xb0 [ 469.980788][T13317] nf_hook_slow+0xbd/0x200 [ 469.985247][T13317] ? nf_hook+0x390/0x390 [ 469.989525][T13317] nf_hook+0x228/0x390 [ 469.993632][T13317] ? nf_hook+0xa2/0x390 [ 469.997822][T13317] ? __ip_local_out+0x5f0/0x5f0 [ 470.002732][T13317] ? nf_hook+0x390/0x390 [ 470.007058][T13317] ? lockdep_hardirqs_on+0x98/0x150 [ 470.012337][T13317] ? ip_fast_csum+0x1ee/0x2b0 [ 470.017064][T13317] __ip_local_out+0x4db/0x5f0 [ 470.021802][T13317] ? nf_hook+0x390/0x390 [ 470.026086][T13317] ip_local_out+0x2a/0x130 [ 470.030535][T13317] iptunnel_xmit+0x4f0/0x920 [ 470.035254][T13317] ip_tunnel_xmit+0x1cbc/0x2410 [ 470.040244][T13317] ? ip4_dst_hoplimit+0x2d0/0x2d0 [ 470.045305][T13317] ? validate_xmit_xfrm+0xbc/0x12c0 [ 470.050542][T13317] ? gre_build_header+0x25b/0x990 [ 470.055620][T13317] ipgre_xmit+0x7a6/0xb20 [ 470.060003][T13317] dev_hard_start_xmit+0x246/0x740 [ 470.065176][T13317] __dev_queue_xmit+0x1ac2/0x36b0 [ 470.070393][T13317] ? __dev_queue_xmit+0x26b/0x36b0 [ 470.075596][T13317] ? __kmem_cache_alloc_node+0x13a/0x250 [ 470.081287][T13317] ? netdev_core_pick_tx+0x340/0x340 [ 470.086636][T13317] ? skb_release_data+0x1cf/0x800 [ 470.091705][T13317] ? pskb_expand_head+0xbfe/0x1230 [ 470.096858][T13317] ? __bpf_redirect+0x534/0xe60 [ 470.101758][T13317] __bpf_tx_skb+0x189/0x250 [ 470.106302][T13317] bpf_clone_redirect+0x270/0x3d0 [ 470.111375][T13317] ? bpf_test_run+0x174/0x870 [ 470.116091][T13317] bpf_prog_208b094576c80b22+0x5e/0x63 [ 470.121585][T13317] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 470.127600][T13317] ? lock_chain_count+0x20/0x20 [ 470.132483][T13317] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 470.138523][T13317] ? lockdep_softirqs_on+0x580/0x580 [ 470.143874][T13317] ? lock_chain_count+0x20/0x20 [ 470.148749][T13317] ? seqcount_lockdep_reader_access+0x191/0x1d0 [ 470.155023][T13317] ? __local_bh_disable_ip+0x108/0x1a0 [ 470.160508][T13317] ? __cant_sleep+0x220/0x220 [ 470.165216][T13317] ? __local_bh_enable_ip+0x13a/0x1c0 [ 470.170611][T13317] ? _local_bh_enable+0xa0/0xa0 [ 470.175497][T13317] ? bpf_test_run+0x174/0x870 [ 470.180228][T13317] ? kvm_sched_clock_read+0x11/0x20 [ 470.185461][T13317] bpf_test_run+0x4fa/0x870 [ 470.190013][T13317] ? bpf_test_run+0x174/0x870 [ 470.194732][T13317] ? convert___skb_to_skb+0x590/0x590 [ 470.200152][T13317] ? eth_get_headlen+0x210/0x210 [ 470.205147][T13317] ? slab_build_skb+0x25f/0x3f0 [ 470.210043][T13317] ? convert___skb_to_skb+0x3d/0x590 [ 470.215381][T13317] bpf_prog_test_run_skb+0xad2/0x12b0 [ 470.220801][T13317] ? cpu_online+0x60/0x60 [ 470.225168][T13317] bpf_prog_test_run+0x321/0x390 [ 470.230149][T13317] __sys_bpf+0x49d/0x890 [ 470.234440][T13317] ? bpf_link_show_fdinfo+0x390/0x390 [ 470.239860][T13317] ? lock_chain_count+0x20/0x20 [ 470.244755][T13317] __x64_sys_bpf+0x7c/0x90 [ 470.249201][T13317] do_syscall_64+0x55/0xa0 [ 470.253650][T13317] ? clear_bhb_loop+0x40/0x90 [ 470.258372][T13317] ? clear_bhb_loop+0x40/0x90 [ 470.263101][T13317] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 470.269022][T13317] RIP: 0033:0x7fa56f39acb9 [ 470.273465][T13317] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 470.293150][T13317] RSP: 002b:00007fa5702f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 470.301607][T13317] RAX: ffffffffffffffda RBX: 00007fa56f615fa0 RCX: 00007fa56f39acb9 [ 470.309613][T13317] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 000000000000000a [ 470.317622][T13317] RBP: 00007fa5702f6090 R08: 0000000000000000 R09: 0000000000000000 [ 470.325625][T13317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 470.333638][T13317] R13: 00007fa56f616038 R14: 00007fa56f615fa0 R15: 00007ffe99621238 [ 470.341651][T13317] [ 470.620563][T13314] syzkaller0: entered promiscuous mode [ 470.626631][T13314] syzkaller0: entered allmulticast mode [ 470.639573][T13322] hsr0: entered promiscuous mode [ 470.659934][T13322] hsr0: entered allmulticast mode [ 470.670048][T13322] hsr_slave_0: entered allmulticast mode [ 470.683354][T13322] hsr_slave_1: entered allmulticast mode [ 470.774910][T13331] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2642'. [ 473.349247][T13351] netlink: 'syz.2.2648': attribute type 10 has an invalid length. [ 473.357323][T13351] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2648'. [ 473.370234][T13351] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 473.384467][T13351] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 473.395758][T13351] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 473.816649][T13372] netlink: 'syz.0.2659': attribute type 49 has an invalid length. [ 474.235822][T13389] netlink: 'syz.3.2664': attribute type 10 has an invalid length. [ 474.243749][T13389] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2664'. [ 474.267561][T13389] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 474.298201][T13391] FAULT_INJECTION: forcing a failure. [ 474.298201][T13391] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 474.317616][T13391] CPU: 1 PID: 13391 Comm: syz.1.2666 Not tainted syzkaller #0 [ 474.325144][T13391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 474.335237][T13391] Call Trace: [ 474.338629][T13391] [ 474.341607][T13391] dump_stack_lvl+0x18c/0x250 [ 474.346335][T13391] ? show_regs_print_info+0x20/0x20 [ 474.351582][T13391] ? load_image+0x400/0x400 [ 474.356138][T13391] ? __might_fault+0xaa/0x120 [ 474.360870][T13391] ? __lock_acquire+0x7d40/0x7d40 [ 474.365964][T13391] should_fail_ex+0x39d/0x4d0 [ 474.370699][T13391] _copy_to_user+0x2f/0xa0 [ 474.375157][T13391] bpf_prog_test_run_raw_tp+0x4ca/0x660 [ 474.380812][T13391] ? trace_bpf_test_finish+0x1a0/0x1a0 [ 474.386342][T13391] ? trace_bpf_test_finish+0x1a0/0x1a0 [ 474.391861][T13391] bpf_prog_test_run+0x321/0x390 [ 474.396925][T13391] __sys_bpf+0x49d/0x890 [ 474.401212][T13391] ? bpf_link_show_fdinfo+0x390/0x390 [ 474.406649][T13391] ? lock_chain_count+0x20/0x20 [ 474.411562][T13391] __x64_sys_bpf+0x7c/0x90 [ 474.416029][T13391] do_syscall_64+0x55/0xa0 [ 474.420504][T13391] ? clear_bhb_loop+0x40/0x90 [ 474.425228][T13391] ? clear_bhb_loop+0x40/0x90 [ 474.430026][T13391] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 474.435966][T13391] RIP: 0033:0x7fd9c1b9acb9 [ 474.440424][T13391] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 474.460079][T13391] RSP: 002b:00007fd9c2aa8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 474.468555][T13391] RAX: ffffffffffffffda RBX: 00007fd9c1e15fa0 RCX: 00007fd9c1b9acb9 [ 474.476571][T13391] RDX: 000000000000000c RSI: 00002000000004c0 RDI: 000000000000000a [ 474.484643][T13391] RBP: 00007fd9c2aa8090 R08: 0000000000000000 R09: 0000000000000000 [ 474.492655][T13391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 474.500667][T13391] R13: 00007fd9c1e16038 R14: 00007fd9c1e15fa0 R15: 00007ffd09992f08 [ 474.508699][T13391] [ 474.707103][T13393] netlink: 'syz.1.2667': attribute type 17 has an invalid length. [ 474.726856][T13393] netlink: 'syz.1.2667': attribute type 16 has an invalid length. [ 474.740337][T13393] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2667'. [ 474.838215][T13397] netlink: 'syz.0.2668': attribute type 10 has an invalid length. [ 474.986350][T13397] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 476.232427][ T5776] Bluetooth: hci0: unexpected subevent 0x0a length: 150 > 30 [ 476.280043][T13430] netlink: 'syz.3.2680': attribute type 10 has an invalid length. [ 476.775987][T13430] team0: Port device veth1_macvtap added [ 476.832871][T13427] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2678'. [ 476.909127][T13430] syz.3.2680 (13430) used greatest stack depth: 17704 bytes left [ 477.224163][T13441] netlink: 'syz.1.2682': attribute type 10 has an invalid length. [ 477.309965][T13440] delete_channel: no stack [ 477.356734][T13447] FAULT_INJECTION: forcing a failure. [ 477.356734][T13447] name failslab, interval 1, probability 0, space 0, times 0 [ 477.378600][T13445] netlink: 'syz.0.2684': attribute type 10 has an invalid length. [ 477.395332][T13447] CPU: 1 PID: 13447 Comm: syz.3.2685 Not tainted syzkaller #0 [ 477.402917][T13447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 477.413063][T13447] Call Trace: [ 477.416428][T13447] [ 477.419448][T13447] dump_stack_lvl+0x18c/0x250 [ 477.424232][T13447] ? show_regs_print_info+0x20/0x20 [ 477.429576][T13447] ? load_image+0x400/0x400 [ 477.434194][T13447] ? __local_bh_enable_ip+0x13a/0x1c0 [ 477.439675][T13447] ? lockdep_hardirqs_on+0x98/0x150 [ 477.445066][T13447] ? __local_bh_enable_ip+0x13a/0x1c0 [ 477.450548][T13447] should_fail_ex+0x39d/0x4d0 [ 477.455437][T13447] should_failslab+0x9/0x20 [ 477.460042][T13447] slab_pre_alloc_hook+0x59/0x310 [ 477.465152][T13447] ? sctp_get_port_local+0xe65/0x1620 [ 477.470612][T13447] ? sctp_add_bind_addr+0x8c/0x360 [ 477.475828][T13447] __kmem_cache_alloc_node+0x53/0x250 [ 477.481321][T13447] ? sctp_add_bind_addr+0x8c/0x360 [ 477.486535][T13447] kmalloc_trace+0x2a/0xe0 [ 477.491079][T13447] sctp_add_bind_addr+0x8c/0x360 [ 477.496105][T13447] ? sctp_auto_asconf_init+0x15c/0x1e0 [ 477.501674][T13447] sctp_do_bind+0x616/0x990 [ 477.506399][T13447] sctp_connect_new_asoc+0x26a/0x6a0 [ 477.511799][T13447] ? __sctp_connect+0xd80/0xd80 [ 477.516732][T13447] ? __local_bh_enable_ip+0x13a/0x1c0 [ 477.522230][T13447] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 477.527867][T13447] ? security_sctp_bind_connect+0x89/0xb0 [ 477.533700][T13447] sctp_sendmsg+0x1575/0x28c0 [ 477.538604][T13447] ? sctp_getsockopt+0xb60/0xb60 [ 477.543632][T13447] ? aa_sk_perm+0x83c/0x970 [ 477.548259][T13447] ? aa_af_perm+0x330/0x330 [ 477.552845][T13447] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 477.560223][T13447] ? sock_rps_record_flow+0x19/0x3f0 [ 477.565614][T13447] ? inet_sendmsg+0xe9/0x2f0 [ 477.570300][T13447] ? inet_send_prepare+0x260/0x260 [ 477.575708][T13447] ____sys_sendmsg+0x5ba/0x960 [ 477.580668][T13447] ? __lock_acquire+0x7d40/0x7d40 [ 477.585806][T13447] ? __asan_memset+0x22/0x40 [ 477.590544][T13447] ? __sys_sendmsg_sock+0x30/0x30 [ 477.595718][T13447] ? __import_iovec+0x5f2/0x850 [ 477.600866][T13447] ? import_iovec+0x73/0xa0 [ 477.605501][T13447] ___sys_sendmsg+0x2a6/0x360 [ 477.610313][T13447] ? __sys_sendmsg+0x2a0/0x2a0 [ 477.615259][T13447] ? __lock_acquire+0x7d40/0x7d40 [ 477.620540][T13447] __se_sys_sendmsg+0x1c2/0x2b0 [ 477.625511][T13447] ? __x64_sys_sendmsg+0x80/0x80 [ 477.630663][T13447] ? lockdep_hardirqs_on+0x98/0x150 [ 477.635978][T13447] do_syscall_64+0x55/0xa0 [ 477.640503][T13447] ? clear_bhb_loop+0x40/0x90 [ 477.645317][T13447] ? clear_bhb_loop+0x40/0x90 [ 477.650190][T13447] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 477.656192][T13447] RIP: 0033:0x7fa56f39acb9 [ 477.660792][T13447] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 477.680665][T13447] RSP: 002b:00007fa5702f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 477.689184][T13447] RAX: ffffffffffffffda RBX: 00007fa56f615fa0 RCX: 00007fa56f39acb9 [ 477.697233][T13447] RDX: 0000000000000010 RSI: 0000200000000ac0 RDI: 0000000000000003 [ 477.705290][T13447] RBP: 00007fa5702f6090 R08: 0000000000000000 R09: 0000000000000000 [ 477.713428][T13447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 477.721490][T13447] R13: 00007fa56f616038 R14: 00007fa56f615fa0 R15: 00007ffe99621238 [ 477.729634][T13447] [ 477.894312][T13445] veth1_macvtap: left promiscuous mode [ 478.160251][T13459] netlink: 'syz.3.2688': attribute type 3 has an invalid length. [ 478.175813][T13459] netlink: 13435 bytes leftover after parsing attributes in process `syz.3.2688'. [ 478.630723][T13476] netlink: 'syz.1.2694': attribute type 10 has an invalid length. [ 478.651109][T13476] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2694'. [ 478.728997][T13476] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 478.875764][T13482] FAULT_INJECTION: forcing a failure. [ 478.875764][T13482] name failslab, interval 1, probability 0, space 0, times 0 [ 478.896076][T13482] CPU: 1 PID: 13482 Comm: syz.0.2695 Not tainted syzkaller #0 [ 478.903642][T13482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 478.913830][T13482] Call Trace: [ 478.917153][T13482] [ 478.920132][T13482] dump_stack_lvl+0x18c/0x250 [ 478.924860][T13482] ? show_regs_print_info+0x20/0x20 [ 478.930096][T13482] ? load_image+0x400/0x400 [ 478.934664][T13482] should_fail_ex+0x39d/0x4d0 [ 478.939439][T13482] should_failslab+0x9/0x20 [ 478.944004][T13482] slab_pre_alloc_hook+0x59/0x310 [ 478.949187][T13482] kmem_cache_alloc+0x5a/0x2d0 [ 478.954063][T13482] ? dst_alloc+0x105/0x170 [ 478.958564][T13482] dst_alloc+0x105/0x170 [ 478.962895][T13482] ip_route_output_key_hash_rcu+0x14f0/0x2360 [ 478.969064][T13482] ? ip_route_output_key_hash+0x13d/0x330 [ 478.974872][T13482] ip_route_output_key_hash+0x1f3/0x330 [ 478.980505][T13482] ? ip_route_input_rcu+0x30e0/0x30e0 [ 478.985974][T13482] ? __lock_acquire+0x7d40/0x7d40 [ 478.991061][T13482] ip_route_output_flow+0x2a/0x150 [ 478.996239][T13482] ? security_sk_classify_flow+0x7b/0x90 [ 479.001941][T13482] raw_sendmsg+0x129a/0x1c00 [ 479.006718][T13482] ? compat_raw_ioctl+0x70/0x70 [ 479.011698][T13482] ? tomoyo_socket_sendmsg_permission+0x216/0x2f0 [ 479.018182][T13482] ? sock_rps_record_flow+0x19/0x3f0 [ 479.023542][T13482] ? inet_sendmsg+0x7c/0x2f0 [ 479.028206][T13482] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 479.033540][T13482] ? security_socket_sendmsg+0x80/0xa0 [ 479.039051][T13482] ? inet_send_prepare+0x260/0x260 [ 479.044230][T13482] ____sys_sendmsg+0x5ba/0x960 [ 479.049049][T13482] ? __lock_acquire+0x7d40/0x7d40 [ 479.054132][T13482] ? __sys_sendmsg_sock+0x30/0x30 [ 479.059211][T13482] ? __import_iovec+0x3fa/0x850 [ 479.064165][T13482] ? import_iovec+0x73/0xa0 [ 479.068732][T13482] ___sys_sendmsg+0x2a6/0x360 [ 479.073462][T13482] ? __sys_sendmsg+0x2a0/0x2a0 [ 479.078323][T13482] ? __lock_acquire+0x7d40/0x7d40 [ 479.083432][T13482] __se_sys_sendmsg+0x1c2/0x2b0 [ 479.088333][T13482] ? __x64_sys_sendmsg+0x80/0x80 [ 479.093376][T13482] ? lockdep_hardirqs_on+0x98/0x150 [ 479.098633][T13482] do_syscall_64+0x55/0xa0 [ 479.103089][T13482] ? clear_bhb_loop+0x40/0x90 [ 479.107830][T13482] ? clear_bhb_loop+0x40/0x90 [ 479.112579][T13482] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 479.118530][T13482] RIP: 0033:0x7f238a59acb9 [ 479.122995][T13482] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 479.142781][T13482] RSP: 002b:00007f238b538028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 479.151261][T13482] RAX: ffffffffffffffda RBX: 00007f238a815fa0 RCX: 00007f238a59acb9 [ 479.159298][T13482] RDX: 00000000200040c4 RSI: 0000200000001640 RDI: 0000000000000004 [ 479.167336][T13482] RBP: 00007f238b538090 R08: 0000000000000000 R09: 0000000000000000 [ 479.175354][T13482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 479.183365][T13482] R13: 00007f238a816038 R14: 00007f238a815fa0 R15: 00007ffd7e9fa238 [ 479.191416][T13482] [ 479.368906][T13486] netlink: 'syz.1.2696': attribute type 10 has an invalid length. [ 479.388554][T13486] batman_adv: batadv0: Adding interface: wlan0 [ 479.394820][T13486] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 479.486924][T13486] batman_adv: batadv0: Interface activated: wlan0 [ 479.587822][T13491] netlink: 'syz.2.2698': attribute type 153 has an invalid length. [ 479.601232][T13491] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.2698'. [ 479.815838][T13500] sctp: [Deprecated]: syz.2.2698 (pid 13500) Use of struct sctp_assoc_value in delayed_ack socket option. [ 479.815838][T13500] Use struct sctp_sack_info instead [ 479.923397][T13495] validate_nla: 1 callbacks suppressed [ 479.923419][T13495] netlink: 'syz.1.2700': attribute type 10 has an invalid length. [ 480.162131][T13495] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 480.927897][T13511] netlink: 'syz.3.2705': attribute type 10 has an invalid length. [ 480.946440][T13511] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2705'. [ 480.976023][T13511] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 481.110706][T13521] FAULT_INJECTION: forcing a failure. [ 481.110706][T13521] name failslab, interval 1, probability 0, space 0, times 0 [ 481.125204][T13521] CPU: 1 PID: 13521 Comm: syz.0.2710 Not tainted syzkaller #0 [ 481.132764][T13521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 481.142897][T13521] Call Trace: [ 481.146258][T13521] [ 481.149258][T13521] dump_stack_lvl+0x18c/0x250 [ 481.154042][T13521] ? show_regs_print_info+0x20/0x20 [ 481.159323][T13521] ? load_image+0x400/0x400 [ 481.163937][T13521] ? skb_network_protocol+0x529/0x780 [ 481.169468][T13521] should_fail_ex+0x39d/0x4d0 [ 481.174268][T13521] should_failslab+0x9/0x20 [ 481.178942][T13521] slab_pre_alloc_hook+0x59/0x310 [ 481.184106][T13521] kmem_cache_alloc+0x5a/0x2d0 [ 481.188936][T13521] ? skb_clone+0x1eb/0x370 [ 481.193423][T13521] skb_clone+0x1eb/0x370 [ 481.197716][T13521] ? dev_queue_xmit_nit+0x212/0xbb0 [ 481.202979][T13521] dev_queue_xmit_nit+0x24d/0xbb0 [ 481.208063][T13521] ? dev_queue_xmit_nit+0x2d/0xbb0 [ 481.213337][T13521] ? validate_xmit_skb+0x949/0xf60 [ 481.218517][T13521] dev_hard_start_xmit+0x148/0x740 [ 481.223727][T13521] __dev_queue_xmit+0x1ac2/0x36b0 [ 481.228816][T13521] ? __dev_queue_xmit+0x26b/0x36b0 [ 481.234041][T13521] ? netdev_core_pick_tx+0x340/0x340 [ 481.239385][T13521] ? __copy_skb_header+0xa3/0x4a0 [ 481.244467][T13521] ? __asan_memcpy+0x40/0x70 [ 481.249104][T13521] ? __skb_clone+0x63/0x790 [ 481.253671][T13521] ? __skb_clone+0x480/0x790 [ 481.258338][T13521] ? skb_clone+0x21f/0x370 [ 481.262811][T13521] __netlink_deliver_tap+0x5ab/0x830 [ 481.268174][T13521] ? netlink_deliver_tap+0x2e/0x1b0 [ 481.273426][T13521] netlink_deliver_tap+0x19c/0x1b0 [ 481.278611][T13521] netlink_unicast+0x72c/0x8d0 [ 481.283489][T13521] netlink_sendmsg+0x8d0/0xbf0 [ 481.288322][T13521] ? perf_trace_lock+0x304/0x3b0 [ 481.293355][T13521] ? netlink_getsockopt+0x590/0x590 [ 481.298620][T13521] ? aa_sock_msg_perm+0x94/0x150 [ 481.303628][T13521] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 481.309061][T13521] ? security_socket_sendmsg+0x80/0xa0 [ 481.314620][T13521] ? netlink_getsockopt+0x590/0x590 [ 481.319893][T13521] ____sys_sendmsg+0x5ba/0x960 [ 481.324739][T13521] ? __asan_memset+0x22/0x40 [ 481.329387][T13521] ? __sys_sendmsg_sock+0x30/0x30 [ 481.334458][T13521] ? __import_iovec+0x5f2/0x850 [ 481.339395][T13521] ? import_iovec+0x73/0xa0 [ 481.343999][T13521] ___sys_sendmsg+0x2a6/0x360 [ 481.348746][T13521] ? __sys_sendmsg+0x2a0/0x2a0 [ 481.353652][T13521] ? __lock_acquire+0x7d40/0x7d40 [ 481.358859][T13521] __se_sys_sendmsg+0x1c2/0x2b0 [ 481.363772][T13521] ? __x64_sys_sendmsg+0x80/0x80 [ 481.368822][T13521] ? lockdep_hardirqs_on+0x98/0x150 [ 481.374094][T13521] do_syscall_64+0x55/0xa0 [ 481.378572][T13521] ? clear_bhb_loop+0x40/0x90 [ 481.383315][T13521] ? clear_bhb_loop+0x40/0x90 [ 481.388056][T13521] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 481.393997][T13521] RIP: 0033:0x7f238a59acb9 [ 481.398483][T13521] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 481.418137][T13521] RSP: 002b:00007f238b538028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 481.426604][T13521] RAX: ffffffffffffffda RBX: 00007f238a815fa0 RCX: 00007f238a59acb9 [ 481.434624][T13521] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 481.442639][T13521] RBP: 00007f238b538090 R08: 0000000000000000 R09: 0000000000000000 [ 481.450650][T13521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 481.458674][T13521] R13: 00007f238a816038 R14: 00007f238a815fa0 R15: 00007ffd7e9fa238 [ 481.466747][T13521] [ 481.954733][T13531] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2712'. [ 482.015944][T13531] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2712'. [ 482.027162][T13531] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2712'. [ 482.347121][T13535] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2715'. [ 482.694047][T13535] bridge_slave_0 (unregistering): left allmulticast mode [ 482.725817][T13535] bridge_slave_0 (unregistering): left promiscuous mode [ 482.756135][T13535] bridge0: port 1(bridge_slave_0) entered disabled state [ 483.585575][T13545] delete_channel: no stack [ 483.778044][T13562] Dead loop on virtual device ip6_vti0, fix it urgently! [ 483.940630][T13568] netlink: 'syz.0.2726': attribute type 10 has an invalid length. [ 483.955072][T13568] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2726'. [ 483.987716][T13568] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 484.288067][T13573] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2728'. [ 484.340284][T13573] netlink: 62779 bytes leftover after parsing attributes in process `syz.1.2728'. [ 484.696491][T13588] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.2733'. [ 484.851492][ T1097] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 485.037074][T13588] netlink: 'syz.3.2733': attribute type 4 has an invalid length. [ 485.085623][T13588] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2733'. [ 485.218596][T13588] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 485.319701][T13587] bridge0: port 1(bridge_slave_0) entered disabled state [ 485.582743][T13587] bridge_slave_0 (unregistering): left allmulticast mode [ 485.601365][T13587] bridge_slave_0 (unregistering): left promiscuous mode [ 485.628033][T13587] bridge0: port 1(bridge_slave_0) entered disabled state [ 486.068465][T13605] netlink: 'syz.3.2738': attribute type 10 has an invalid length. [ 486.095973][T13605] __nla_validate_parse: 2 callbacks suppressed [ 486.114934][T13605] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2738'. [ 486.136364][T13605] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 486.185263][T13604] netlink: 'syz.0.2739': attribute type 1 has an invalid length. [ 486.272724][T13610] FAULT_INJECTION: forcing a failure. [ 486.272724][T13610] name failslab, interval 1, probability 0, space 0, times 0 [ 486.315251][T13610] CPU: 1 PID: 13610 Comm: syz.2.2741 Not tainted syzkaller #0 [ 486.322819][T13610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 486.332934][T13610] Call Trace: [ 486.336265][T13610] [ 486.339240][T13610] dump_stack_lvl+0x18c/0x250 [ 486.343979][T13610] ? show_regs_print_info+0x20/0x20 [ 486.349323][T13610] ? load_image+0x400/0x400 [ 486.353894][T13610] ? __might_sleep+0xe0/0xe0 [ 486.358543][T13610] ? __lock_acquire+0x7d40/0x7d40 [ 486.363634][T13610] should_fail_ex+0x39d/0x4d0 [ 486.368465][T13610] should_failslab+0x9/0x20 [ 486.373201][T13610] slab_pre_alloc_hook+0x59/0x310 [ 486.378291][T13610] ? call_usermodehelper_setup+0x8e/0x260 [ 486.384086][T13610] __kmem_cache_alloc_node+0x53/0x250 [ 486.389798][T13610] ? call_usermodehelper_setup+0x8e/0x260 [ 486.395689][T13610] kmalloc_trace+0x2a/0xe0 [ 486.400182][T13610] call_usermodehelper_setup+0x8e/0x260 [ 486.405970][T13610] ? __request_module+0x600/0x600 [ 486.411065][T13610] __request_module+0x3bb/0x600 [ 486.415994][T13610] ? module_enforce_rwx_sections+0x150/0x150 [ 486.422119][T13610] ? dev_load+0x21/0x1f0 [ 486.426820][T13610] ? bpf_lsm_capable+0x9/0x10 [ 486.431568][T13610] ? dev_load+0x21/0x1f0 [ 486.435886][T13610] dev_load+0x18b/0x1f0 [ 486.440104][T13610] dev_ioctl+0x79f/0x1140 [ 486.444500][T13610] sock_do_ioctl+0x239/0x310 [ 486.449171][T13610] ? sock_show_fdinfo+0xb0/0xb0 [ 486.454109][T13610] sock_ioctl+0x5ba/0x7e0 [ 486.458517][T13610] ? sock_poll+0x3e0/0x3e0 [ 486.463014][T13610] ? bpf_lsm_file_ioctl+0x9/0x10 [ 486.468007][T13610] ? security_file_ioctl+0x80/0xa0 [ 486.473191][T13610] ? sock_poll+0x3e0/0x3e0 [ 486.477671][T13610] __se_sys_ioctl+0xfd/0x170 [ 486.482333][T13610] do_syscall_64+0x55/0xa0 [ 486.486810][T13610] ? clear_bhb_loop+0x40/0x90 [ 486.491824][T13610] ? clear_bhb_loop+0x40/0x90 [ 486.496667][T13610] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 486.502619][T13610] RIP: 0033:0x7f21f119acb9 [ 486.507178][T13610] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 486.527105][T13610] RSP: 002b:00007f21f20d4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 486.535635][T13610] RAX: ffffffffffffffda RBX: 00007f21f1415fa0 RCX: 00007f21f119acb9 [ 486.543665][T13610] RDX: 0000200000002280 RSI: 0000000000008943 RDI: 0000000000000003 [ 486.551783][T13610] RBP: 00007f21f20d4090 R08: 0000000000000000 R09: 0000000000000000 [ 486.559855][T13610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 486.567893][T13610] R13: 00007f21f1416038 R14: 00007f21f1415fa0 R15: 00007ffdd3c73988 [ 486.575974][T13610] [ 487.525736][T13643] netlink: 'syz.2.2751': attribute type 10 has an invalid length. [ 487.533926][T13643] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2751'. [ 487.586288][T13643] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 487.922921][T13645] bond0: entered promiscuous mode [ 487.929489][T13645] bond_slave_0: entered promiscuous mode [ 487.939012][T13645] bond_slave_1: entered promiscuous mode [ 488.170948][T13650] pim6reg1: entered promiscuous mode [ 488.185513][T13650] pim6reg1: entered allmulticast mode [ 488.886370][T13657] netlink: 'syz.3.2757': attribute type 10 has an invalid length. [ 490.791821][T13678] netlink: 'syz.2.2764': attribute type 3 has an invalid length. [ 490.799974][T13678] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.2764'. [ 491.111787][T13689] netlink: 'syz.0.2768': attribute type 10 has an invalid length. [ 491.133165][T13689] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2768'. [ 491.168060][T13689] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 491.392792][T13693] netlink: 'syz.2.2769': attribute type 10 has an invalid length. [ 491.614093][T13693] team0: Port device veth1_macvtap added [ 491.799215][T10465] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 492.246632][T13713] netlink: 15999 bytes leftover after parsing attributes in process `syz.2.2776'. Connection to 10.128.1.92 closed by remote host. [ 496.075472][T10465] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.606517][T10465] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.789821][T10465] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.882867][T10465] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.931478][T10465] hsr_slave_0: left promiscuous mode [ 497.938117][T10465] hsr_slave_1: left promiscuous mode [ 497.945003][T10465] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 497.952977][T10465] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 497.962670][T10465] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 497.971337][T10465] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 497.979764][T10465] bridge_slave_1: left allmulticast mode [ 497.985499][T10465] bridge_slave_1: left promiscuous mode [ 497.991291][T10465] bridge0: port 2(bridge_slave_1) entered disabled state [ 498.002392][T10465] bridge_slave_0: left allmulticast mode [ 498.010431][T10465] bridge_slave_0: left promiscuous mode [ 498.016319][T10465] bridge0: port 1(bridge_slave_0) entered disabled state [ 498.041987][T10465] veth0_macvtap: left promiscuous mode [ 498.049171][T10465] veth1_vlan: left promiscuous mode [ 498.054522][T10465] veth0_vlan: left promiscuous mode [ 498.289571][T10465] team0 (unregistering): Port device veth1_macvtap removed [ 498.693950][T10465] team0 (unregistering): Port device team_slave_1 removed [ 498.742075][T10465] team0 (unregistering): Port device team_slave_0 removed [ 498.792477][T10465] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 498.837454][T10465] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 499.202263][T10465] bond0 (unregistering): Released all slaves [ 499.666473][T10465] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.753738][T10465] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.843008][T10465] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.912880][T10465] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.054998][T10465] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.133402][T10465] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.188864][T10465] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.274026][T10465] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.425032][T10465] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.513952][T10465] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.609661][T10465] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.694158][T10465] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.302176][T10465] batman_adv: batadv0: Interface deactivated: wlan0 [ 502.323475][T10465] batman_adv: batadv0: Removing interface: wlan0 [ 502.393569][T10465] hsr_slave_0: left promiscuous mode [ 502.400245][T10465] hsr_slave_1: left promiscuous mode [ 502.408687][T10465] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 502.416194][T10465] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 502.423985][T10465] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 502.432276][T10465] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 502.440261][T10465] bridge_slave_1: left allmulticast mode [ 502.445989][T10465] bridge_slave_1: left promiscuous mode [ 502.451874][T10465] bridge0: port 2(bridge_slave_1) entered disabled state [ 502.464620][T10465] hsr_slave_0: left promiscuous mode [ 502.470635][T10465] hsr_slave_1: left promiscuous mode [ 502.477075][T10465] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 502.484521][T10465] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 502.492738][T10465] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 502.501686][T10465] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 502.509704][T10465] bridge_slave_1: left allmulticast mode [ 502.515631][T10465] bridge_slave_1: left promiscuous mode [ 502.521484][T10465] bridge0: port 2(bridge_slave_1) entered disabled state [ 502.536480][T10465] hsr_slave_0: left promiscuous mode [ 502.544639][T10465] hsr_slave_1: left promiscuous mode [ 502.550818][T10465] batman_adv: batadv0: Removing interface: team0 [ 502.557952][T10465] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 502.567984][T10465] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 502.576159][T10465] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 502.583576][T10465] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 502.591414][T10465] dummy0: left allmulticast mode [ 502.596819][T10465] bridge0: port 3(dummy0) entered disabled state [ 502.604830][T10465] bridge_slave_1: left allmulticast mode [ 502.610618][T10465] bridge_slave_1: left promiscuous mode [ 502.616433][T10465] bridge0: port 2(bridge_slave_1) entered disabled state [ 502.624948][T10465] bridge_slave_0: left allmulticast mode [ 502.630715][T10465] bridge_slave_0: left promiscuous mode [ 502.636562][T10465] bridge0: port 1(bridge_slave_0) entered disabled state [ 502.683004][T10465] veth0_macvtap: left promiscuous mode [ 502.688709][T10465] veth1_vlan: left promiscuous mode [ 502.693999][T10465] veth0_vlan: left promiscuous mode [ 502.701516][T10465] veth0_macvtap: left promiscuous mode [ 502.707283][T10465] veth1_vlan: left promiscuous mode [ 502.712716][T10465] veth0_vlan: left promiscuous mode [ 502.723778][T10465] veth0_macvtap: left promiscuous mode [ 502.729742][T10465] veth1_vlan: left promiscuous mode [ 502.735138][T10465] veth0_vlan: left promiscuous mode [ 503.143388][T10465] team0 (unregistering): Port device veth1_macvtap removed [ 503.524218][T10465] team0 (unregistering): Port device team_slave_1 removed [ 503.575043][T10465] team0 (unregistering): Port device team_slave_0 removed [ 503.619840][T10465] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 503.978307][T10465] bond0 (unregistering): Released all slaves [ 504.572949][T10465] team0 (unregistering): Port device team_slave_1 removed [ 504.622780][T10465] team0 (unregistering): Port device team_slave_0 removed [